skysight-inc/HackerNews huggingface dataset:
the cellular version of the watch has its own dedicated cell service independent of the phone.

The other option is where the watch is paired with the phone which can send call data wirelessly over to the watch via bluetooth or wifi or something peer to peer like.
> The computationally expensive parts of “Python” are done in libraries like numpy, tensorflow, etc. Python makes it really handy to play with low level abstractions in a higher level language.

> So yeah I’ve never stressed much about the GIL as a long time pythons dev

You almost always have to use python objects at some point or another, even with very high perf libraries. Unless you are using python as nothing else than glue code, and loading and preprocessing the data entirely outside of your python code. At some point (and I'm not talking about extreme scales here, just feeding a single datqaloader can be enough) you hit a very hard performance bottleneck. Sure you can just use more external code at that point but I think the intention is to make python at least more suitable for the non compute intensive stuff.

Like, it is already suitable right now but it's not getting better, while everything around it is (I'm not talking about other languages, what I mean is that the tools and libraries are getting better so without improvement to the language the bottleneck will just get worse)
Wouldn't be surprised if this happened in Russia; but not in Europe. Also, Let's Encrypt security is a joke - they issued fake certificate without serious checking. Using unencrypted HTTP for confirmation is a vulnerability - doesn't this mean that large national ISPs can easily issue ceritificates for any site hosted within a country?
Again you mean people may not agree with an agency they were forced to join to get work? Shocking!
There are two very interesting questions here.

The first is asking if a giant eel is possible based on known data about eels,

> Indeed, the probability of finding a 6-meter eel in Loch Ness is essentially zero—too low for the software used to provide a reliable estimate. Thus, while large eels may account for some eyewitness sightings of large animate objects rising to the loch surface, they are unlikely to account for “sightings” of extraordinarily large animals, which may instead be accounted for by wave phenomena, the occasional stray mammal, or other reasons.

The second is asking if the data used to arrive at this conclusion is well supported or not,

> This analysis is limited by several factors. First, the Loch Ness eel sample used was relatively small at 129. Larger samples across longer time periods may provide more accurate estimates. Second, the assumption of a skew normal distribution would not hold if, for example, a larger sample revealed a bimodal distribution of eel lengths with a small peak at higher lengths. Third, this analysis is based on purely statistical considerations; the biological mechanism behind the physiological possibility of much larger eels is beyond the scope of this study. Some authors have suggested one such mechanism as neoteny [6] (ie, uncontrolled growth of the leptocephalus larva in A. anguilla preceding subsequent stages of development [36]). Fourth, environmental conditions such as temperature and available biomass impact eel growth and length; therefore, comparisons to other environments such as Zeeschelde may not be appropriate (ie, some of the data cited may not be relevant to the relatively cold waters of Loch Ness).

In this scenario, the size distribution the team arrived at was based on 129 eels captured in the 1970s by the "Loch Ness Investigation Bureau." I haven't found the book online, and the article does not claim how, where, and at what depth these eels were captured. I think that is a mistake, as we can't say with any certainty if we've managed to achieve an accurate census of the loch's eel population or not.

As the paper itself mentions, there is a remote but slightly plausible possibility that within the 22 sq.mi. and 750' deep lake; there exists a small population of eels (at most 5 to 10 individual animals) that may be larger than a meter. But that's a fairly remote possibility.

I think it would be fruitful to constantly monitor the lake with drones and to map out all of the species within it. A lot of good science might come out of it. Because while Nessie may not be real, a sub-species of eel that has come to live within this loch might be. A bit like the Devils Hole pupfish, but Scottish.

We find new kinds of life everywhere all the time. The Earth is a magical place, filled to the brim with life, and we've barely scratched the surface.
> It doesn't matter to me who hit the hospital because I don't believe it was intentional.

Confounding factor: Hamas puts military bases in civilian areas so they can claim things like this even if the target was military.
I would like to see more rigorous studies done of refresh rates, especially w/ and w/o (free|g)-sync. 120 was definitely huge for me, but I'm skeptical that 240 vs 120 would make a material difference, especially w/ gsync, which I believe is much more impactful in real terms.
Car and home insurance both have a socialized component. Check your policy for an “uninsured driver charge”. Similar concepts exist for home insurance. And we all pay for flood insurance as it’s heavily subsidized by tax dollars.
Yes, c82.net is great. I visit the Werner's Nomenclature of Colors page relatively frequently.
That would be great, I don't care for reddit results in my web searches to begin with. Lots of answers can be found in reddit, there is no denying that, but it's also likely one of the most manipulated sources of information on the web this side of Google itself.
400 EUR would cover dinner and two nice bottles of wine for 6 at the fanciest restaurant I’ve been to in Nürnberg.

What the heck kind of restaurant costs 400 EUR for a single dinner?!
Yes, definitely use mutation observers. Far faster to react and doesn't require polling, they're better in essentially every way when things aren't changing many times per second.
>The main difference between a law by most national parliaments and EU legislation is that the EU legislation is usually wildly more complex, oftentimes to the extent that nobody anywhere really can understand it. E.g. take a look at the GDPR or the EU electricity regulation. You will be getting wildly different answers to many questions, depending on who you ask. And the reason is clear: The regulation is unreadable and inconsistent.

Isn't this true of any complex law anywhere? The interpretation varies and is eventually decided upon by the courts and following that sometimes additional rectifying legislation.

>On top of that, one would be thinking that EU should be painting legislation with broad clear strokes, for the national parliaments to implement the specifics. But they don't, often the EU commission goes down to a level of detail that you'd never even see in specific national legislation.

I'm curious about what you mean here, do you have any specific examples?

I'm from a country that would benefit immensely from EU laws in pretty much every area, but I also recognize the hazards of pushing legislative decisions too far away.

But for all the criticism the EU gets on that point, it is actually much easier for individual countries to disagree and do their own thing in the EU than it is for states in the United States, it seems to me. It's not like there are "federal" EU agents running around and arresting people.
There was a strip poker for Commodore 64 before the Commodore Amiga. I just searched and found a thread about this [1].

[1] https://www.lemon64.com/forum/viewtopic.php?t=74668
You can't browse, play interesting games, you can't doomscroll, you literally can't do any of the addictive or distracting things that phones are notorious for.
Good example. Remember Rommel’s invasion of France bogged down by overrunning its supply chain. The war began for the US in ‘41 yet the major invasion didn’t happen for three and a half years.
> No, they're crazy. I already have a window manager I like; I don't need my
> terminal to implement their own half-assed one,

Basically agree, though note that ssh and dtach and similar tools need to create pty's on the server and client ends because they implement essentially an adapter between a tty and a byte stream.
Did they? I thought it was 3 suns and a planet and the planet had a negligible impact on the suns orbit.
> whatever firmware happens to be installed on your random hard drive? Not a chance.

Well, there's certainly a chance. Firmware is reverse-engineered all the time.
Brazil police search&seizure targeting intelligence agency use of spy software
I don't know a lot about this, but have recently being using PGP in an application. I asked GPT4 to compare

> Raw Public Keys, as specified in RFC 7250, allow for the exchange of public keys directly within the Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) protocols, bypassing the need for certificates 1 . In contrast, in a PGP (Pretty Good Privacy) architecture, public keys are often hosted on key servers or distributed through other means. The hosting of public keys facilitates their discovery and distribution to other users, which is essential for the operation of the PGP system. This hosted approach in PGP contrasts with the direct exchange of raw public keys in TLS/DTLS as outlined in RFC 7250.

> Raw Public Keys, trust is often established through out-of-band mechanisms or prior arrangements, since there's no certificate to provide a chain of trust. In PGP, trust is commonly established through a "Web of Trust" where users validate each other's keys based on personal trust relationships, or through certificate authorities in a more centralized trust model. Both systems require a way to ensure the authenticity and integrity of the public keys to prevent man-in-the-middle attacks or other forms of security compromises.
Yes, you're correct. All these years and multiprocessing is still abysmal. I think people are too quick to defend Python. Its important to look at this objectively without bias.
> Because the LLMs cannot function without the expressive information extracted from the Infringed Works and are retained inside the Books3 database and the LLMs, these datasets and models are themselves infringing derivative works, made without Plaintiffs’ permission and in violation of their exclusive rights under the Copyright Act.

The implications of this are staggering if they win. It means no one will ever be allowed to release any training data, ever. Not in the way that OpenAI, Midjourney, or any of the other big players have been training their models. Takeaway: it will become impossible to make open source LLMs, because all training data is by definition copyright infringement and not fair use.

> Plaintiffs and the members of the Class have been injured by Defendants’ acts of direct copyright infringement. Plaintiffs and the Class are entitled to statutory damages, actual damages, restitution of profits, and other remedies provided by law.

They keep asserting they’ve been damaged. I’d love to see them sit down and calculate how much damage has been done to any individual author. I sure hope everyone arguing for copyright enforcement is happy being protected from “damages” that can likely be measured in cents.
Beyond Memorization: Violating Privacy via Inference with Large Language Models
Any related ansi NP = P escape clause proofs?
Don't use DISTINCT as a "join-fixer"
Was the session still valid?
extremely difficult to get physical access in a datacenter
Exactly this. If your threat profile includes the possibility of special governmental attention, then you're playing a much more serious game and need to be off the grid entirely.
So they don’t get in that’s fine too.
There are provisions in place to make sure employers are paying their workers the prevailing wage and not replacing American workers. However, a giant loophole makes companies paying $60,000 and above per employee – or hiring employees with master's degrees – exempt from this rule. An author of the 1990 Act that created the H-1B program, Bruce Morrison, told The Atlantic it was "a dastardly deed," and he blamed lobbyists for the caveat. The caveat is greatly relevant since more than half the approved petitions in 2014 had master's degrees or higher making it perfectly legal for them to be paid less than an American worker they were replacing.

https://www.investopedia.com/news/h1b-visa-issue-explained-m...
That's a very bold claim.

What if you didn't find any evidence of something that indeed happen? What category does it fall into? Even courts will sometimes forgo the need to present evidence if they can establish means, motive and opportunity.

Also, of course parent didn't mean it literally. They were referring to a different aspect of how such evidence may be discovered... well, now I feel like I'm explaining a joke.
By that logic, are pagers the happy medium?
I think this is why I'm a huge advocate of the Actor Model.
false⇒false is also truthy! The answer to "If (bullshit) could it be (whatever)?" is "yes" according to propositional calculus.
For it to be worse, we'd have to see a stark decrease in GDP, whereas it's been relatively stable so far
The summary of the attack from https://notes.valdikss.org.ru/jabber.ru-mitm/ is very interesting:

* The attacker managed to issue multiple SSL/TLS certificates via Let’s Encrypt for jabber.ru and xmpp.ru domains since 18 Apr 2023

* The Man-in-the-Middle attack for jabber.ru/xmpp.ru client XMPP traffic decryption confirmed to be in place since at least 21 July 2023 for up to 19 Oct 2023, possibly (not confirmed) since 18 Apr 2023, affected 100% of the connections to XMPP STARTTLS port 5222 (not 5223)

* The attacker failed to reissue TLS certificate and MiTM proxy started to serve expired certificate on port 5222 for jabber.ru domain (Hetzner)

* The MiTM attack stopped shortly after we begun our investigation and network tests on 18 Oct 2023, along with tickets to Hetzner and Linode support team, however passive wiretapping (additional routing hop) is still in place at least on a single Linode server

* Neither servers appear to be hacked

* Both Hetzner and Linode network appear to be reconfigured specifically for this kind of attack for the XMPP service IP addresses

---

Neither that page, nor the page linked from here, mention certificate pinning, maybe because XMPP doesn't support it (I don't know), but if it did, wouldn't that have prevented this kind of attack?
I had a tangible feel for this "addiction" one time when I let my phone run out of battery and I had it next to my laptop. Whenever there was a lull at work or something got hard and I needed a mental break I'd reach for my phone only to pick it up and find an unresponsive black screen. I must have picked it up some six times before it finally hit me how frequently I go to pick up that thing. Somehow the shock of rediscovering the off-state repeatedly and forgetting it really sunk the frequency of the formed habit into my mind. The habit was tangible in that moment.
True, but worrying that your hard disk encryption is vulnerable to the NSA is something that only makes sense if you're dealing with case 2, not case 1.
I think your critics have a point. I looked at the text of the links, then at the number of comments, and skipped all of them, because I'm mainly here for a c82 page, but I am a sucker for HN discussions. It was misleading, unless meant as a presage to the eventual discussions your linking will generate?
They have the best integrations.

This is not an endorsement of the decision to use Okta, but I understand why.
Huge fan of gnucash, just wish it was more polished so I could recommend it to more people
This article is about always being on the hook with notifications and phone calls, doesn't this problem still exist?
The person I was responding to said these providers “should never get hacked”. Given that the default assumption is that systems are easily hacked, then logically such a requirement demands proof (in the sense of robust evidence) before acceptance that it is met. There is no sense in waiting for it to happen first when that is the default assumption.

To go a step further, you can apply this to any acceptance criteria. What evidence is there that any of these systems meet any meaningful acceptance criteria. What evidence is there that Okta has systems that can protect billions of dollars worth of assets from the teams of professional and state attackers that currently target their systems?

To then get to your direct question, if you really need “should never get hacked”, you could provide machine checked mathematical proofs of correctness, robust and exhaustive validations, and NSA penetration test reports showing zero identified vulnerabilities like what was done for the F-35. I mean, I guess that is only like 1000x better than prevailing commercial IT systems and not completely foolproof, but it is certainly a good starting point. You can probably think of some ways to evaluate even more robust security if you need more assurance than the US air force.
Do you compete in that just by running a certain distance whereever you want?
We were always "dependant" on everything a phone does. We've always needed directions. We've always needed to communicate with friends and family. We've always needed to manage our finances, buy tickets, listen to music, take photographs, read and watch media, keep up with the news, look at porn and use a fucking calculator.

I don't think it's the phones at all, I think it's the companies that are abusing our phones as they vy for our attention and data and money. But a smartphone as a baseline concept is the single most useful tool anyone has ever owned.
Sounds familiar to me. I imagine the issue was resolved by simply by the increase in healthcare cost and spending.
Next.Nav: VSCode Extension for Next.js App Router Views
240Hz makes sense but I have to image the difference between 300 and 540Hz is placebo
Figure 3 is the one showing the cognitive results.
I was more getting at that above a certain size you'll have someone remote every day.

But like also a person is allowed to not like in person meetings. Feels weird to force it. Honestly the live captions, running transcript, side chat, multi-screen share, and hand raise feature alone make remote meetings better than in-person for actual work.
Corporate Open Source Anti-Patterns: A Decade Later
Toy Commander was incredible
Customer is either worried your company is too young/unstable or it's the standard procedure. If your company goes bankrupt then it's indeed unclear to me who owns the source code, the escrow contract might cover that.

Increase the price, double it, that's a very custom request for you.

We did it 6 years ago with a big enterprise customer. The escrow company got read access to one git repository (custom development outside our usual offering). I think the other option was to send them a DVD with the code. Customer paid for the escrow. A year later they either forgot or cancelled, we never had to update our code. Monetary the customer contract value was worth the trouble. We never had another escrow request.
> Also, Let's Encrypt security is a joke - they issued fake certificate without serious checking. Using unencrypted HTTP for confirmation is a vulnerability

They can’t use HTTPS if you don’t have a certificate yet
well i must admit monitoring certificate issuance with LetsEncrypt is quite boring even if you HAVE alerts set up (I do)

so… not surprised. Still cool. What a time to be alive
Stocastic or non-stocastic presentation?

Use illusionist / marketing survey tricks other than that of the defense committe kind.

pre-seed audience with relevent topic area questions/titles before defense of the 'poor phd student' kind while

being mindful of thesis defense committe bounds.

Practice with audience outside field with people in field observing. If can make sense in reasonable amount of time for non-field audience AND person(s) within field -- good to go.

For taking the ego down a notch -- explain/give talk to middle schoolers/high schoolers. If they're hooked & makes sense to in-field observer, very good chance good to go.
Oh, I'm not averse to reflection in general! It can be very elegant and still easily understandable when well used, ideally at compile time. No, it's just that this particular example was once egregiously overused, with an excess of cleverness aforethought that made debugging anything far more difficult than it really had any need to be.

It's not even that I can't see how the Rails implementors got there; on the one hand it was very early in the development of the modern web concept and nobody really knew what worked and what didn't yet, and on the other, a more modern pattern would have probably been very slow anyway in those days. Still, the experience left a bad taste that I've found hard to shake.
This doesn't mean you should use unsecure methods instead and issue certificates to anyone capable to do MitM.
If you're a government you may just bully existing ones.
It's not very intuitive to imagine how the numbers change. It could be fun to learn though. One way to know if it's fun is to make a simple version and play around.
Born in the 80s and this is basically my experience too, although I guess I got my first mobile somewhere in highschool, but it was only a 5110 - relatively primitive. I do fondly remember having to memorise land line numbers, and potentially navigate parents of friends or romantic interests when the call got answered.
The facility in Lake City is the Lake City Army Ammunition Plant, owned by the US government but operated by Winchester Ammunition. It has always been a small arms production site, mainly producing 5.56mm, 7.62mm, and .50.

Under the terms of the management contract Winchester may sell the excess capability of the facility, outside what the military orders in any given year, on the civilian market. However the contract also states that military orders take priority and if there’s a big new order placed then those civilian sales contracts need to be paused or cancelled. This is done to preserve the large production lines outside of large US military orders.

So the article is still wrong to include it, because it’s confusing two very different things: There’s no shortage of small arms ammunition, and what’s happening at Lake City is the system working as intended. There are also many facilities that can produce those calibres. It's
easy.

The issue with production is with large ammunition, like 155mm artillery shells, anti-tank missiles, etc that's much more difficult to produce than small arms ammunition and for which it takes much longer to spin up more capacity. Lake City is irrelevant in that context.
Quitting in protest tells us that Apple's business ties to China are causing Apple to nix the reporting and analysis he wants to do, which would be critical of China in some way. Our experience with John Stewart is that it's likely fair and nuanced. But Apple is concerned about thin skins and rightly so.

I hope we can get the story. It won't go onto XTwitter, for the same China reasons. He'll have to use a national, not international, medium.
Sure but this is the German police and more generally nation states, not only they can, they don't even need to they just ask
I imagine that would hurt the situation not help it. The individual mandate was intended and served more healthy individuals into the insurance pool.
You put some effort into making that list, and if I were someone who felt inspired to post links about hummingbirds, this would be a helpful list indeed, saving me some time checking previous submissions.
You're technically correct that you've linked to discussions with 0 or more comments. I appreciate your contribution.
I think about this every time I use a computer. I think it's genuinely shameful how we waste most of the amazing computing power even the least expensive of modern machines have.
I would suggest that if you are the police, you can break into a datacenter with a flash of a badge. I can't imagine many would attempt to stop you.