skysight-inc/HackerNews huggingface dataset:
Mumbai

Pros: Its home , Safest city in India , A true metropolitan city in India with a very liberal crowd , Great and affordable public transport

Cons: Not a tech city. All the tech jobs have gone to other cities in India and I will need to move if I want a higher paying job.

Overcrowded - Whole of India feels overcrowded but Mumbai is on a whole other level you can never be truly alone in this city and the public transport while being one of the cheapest in the world means to go to your office you need to hang by the doors of trains just because there is no place else to stand.

Weather- Not much to say other than its crap its very hot most of the year. Rains bring floods every year and train closures which stop this city.

Mumbai currently is ongoing an astonishing amount of infrastructure upgrades from upgrading its public transport to building roads to solve traffic bottlenecks but the new age jobs are fast leaving the city and the city is no longer the city of dreams it once was
Good piece, thank you.
What do you think of the quality of support provided by someone who spends 5 hours a week answering questions vs the primary developer? This isn't as straightforward as you think. If he can free up 5 hours a week for $500 and loses 10 customers because they didn't like the support from someone who spends 5 hours a week on this product they've never used, do you think he wins or loses?
In the Swedish business context, refraining from a collective agreement when you are the scale of Tesla is in no way a neutral choice: it is in fact an open attack on one of the central bargains of Swedish commercial society. Of course defending that bargain is unavoidably a strategic, if self evident, choice.
I have seen fiction outright stating, "This is a true story" - i.e. Fargo, or the rather-less-good "The Sleep Experiment". The former at least has great production values and is actually taking inspiration from real events. The latter is 110% made up.
Beeper Mini – get blue bubbles on Android
Bidirectional Language Note
It seems like some mix of vandalism and fraud too.
> Chinese access to AI technology will pose a security risk to the US

There’s no security risk I can see except the fact products like ChatGPT increase productivity of a lot of people in a nation so much. Economic.
Behind the Scenes of Rust String Formatting: Format_args ()
Nobody was blaming Linux developers. This doesn't change the fact that Linux doesn't support vast swathes of hardware.
Censorship policies are dependent on the specific instance where you signed up and they are almost always very clearly spelled out. The main instance for example clearly spells out five rules including four forbidden categories here: https://mastodon.social/auth/sign_up Contravening these rules can absolutely get you deplatformed.

I've also seen the signup page of other instances having dozens of categories of prohibited posts.
Firefox is fast though.
What's "only" about it? Smartphones gave everybody convenient internet access and thus increased the customer/user base enormously for everybody who publishes online. It's perfectly natural that the frontrunner in smartphones will have a huge chunk of the browser market.
Please have a look at the "recommendations" of your national security agency (except NIST).

It is all outdated, written by people who thought they understood security in the 90's.

The French ANSSI recommendations are ridiculous. The German as well. Having an incompetent gov org forcing you to apply their "best practices" is terrible.

We have already for banks and look at what they have done: all possible "don't do it!" implementations neatly on one page (source: Boursobank, Fortuneo and other French banks who replay that the security is "reviewed by experts")
Short answer: not where it counts.

My work focuses on recognizing known functions in obfuscated binaries, but there are some papers you might want to check out related to deobfuscation, if not necessarily using ML for deobfuscation or decompilation.

My take is that ML can soundly defeat the "easy" and more static obfuscation types (encodings, control flow flattening, splitting functions). It's low hanging fruit, and it's what I worked on most, but adoption is slow. On the other hand, "hard" obfuscations like virtualized functions or programs which embed JIT compilers to obfuscate at runtime... as far as I know, those are still unsolved problems.

This is a good overview of the subject, but pretty old and doesn't cover "hard" obfuscations: https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=1566145.

https://www.jinyier.me/papers/DATE19_Obf.pdf uses deobfuscation for RTL logic (FGPA/ASIC domain) with SAT solvers. Might be useful for a point of view from a fairly different domain.

https://advising.cs.arizona.edu/~debray/Publications/generic... uses "semantics-preserving transformations" to shed obfuscation. I think this approach is the way to go, especially when combined with dynamic/symbolic analysis to mitigate virt/jit types of transformations.

I'll mention this one as a cautionary tale: https://dl.acm.org/doi/pdf/10.1145/2886012 has some good general info but glosses over the machine learning approach. It considers Hex-rays' FLIRT to be "machine learning", but FLIRT just hashes signatures, can be spoofed (i.e. https://siliconpr0n.org/uv/issues_with_flirt_aware_malware.p...), and is useless against obfuscation.

Eventually I think SBOM tools like Black Duck[1] and SLSA[2] will incorporate ML to improve the accuracy of even figuring out what dependencies a piece of software actually has.

[1]: https://www.synopsys.com/software-integrity/software-composi...

[2]: https://slsa.dev/
This was submitted twice with different URLs. Here's the other thread: https://news.ycombinator.com/item?id=38530880
I've left acerbic comments in replies to editors before, but only when they were being rude, obstructive, dismissive or sarcastic themselves. I do hope it changed their behavior, like the article suggests.

Some of these people get so full of themselves and treat the pages they are interested in like their own little fiefdoms that no-one else is allowed to touch.
If you host your own instance, you have full control. If you don't host your own instance, then whoever hosts it for you has control (as they are the admin for your instance).

This means you tradeoff someone administrating the server and moderating content (shared instances often have a TOS) for full freedom. i.e. If you self host you have full, manual control for better or worse.
He wrote the game himself at home.
I think there's a few layers to what makes said comments be seen as "toxic." There's definitely some very standoffish individuals in Wikipedia's inner-circle of editors. The decisions of editors also often seems very arbitrary. I've seen many cases where an editor doesn't allow a fact or citation because it's "original research" whilst on other pages the opposite is complained of, which is a big problem when articles are allowed for subjects that are not necessarily going to be written about on CNN/MSNBC/NYT.

And then there are the many talk sections I've seen where a petty editor plays the nuh-uh/yeah-huh game.

I'd contribute to Wikipedia, but I have no energy to bicker with people who are going to play with definitions or semantics just to make articles reflect their world view.
I have no actual experience with them but have you looked at the Epson printers that you refill with bottles of ink?
AI reduces the labor involved, reducing barriers to invest time or money.

Spying isn't just for troublemakers either. It's probably worth the trouble to the vindictive ex-husband willing to install a hidden microphone in his ex-wife's house and in order to have access to a written summary of any conversations related to him.
> Saying "[this is yet] another area where Linux Distros are at least 10 years behind Windows" has a certain unpleasant tone that reeks of blame.

How do you figure? This just strikes me as insecurity. Regardless of the fact that your quote represents a nonsensical claim, Linux's lack of hardware support isn't something worth dancing around, it's just reality.
Looks cool but I have a question, I was checking the QnA example. Why do I need openAI? Can't I directly chat my data using superduper db?
The TV show "Person of Interest" portrayed this beautifully and it came out 12 years ago.

Strange and scary how fast the world develops new technology.
It is becoming far easier than you are aware then. Sam Harris and Rob Reid discussed in length a few years ago.

https://www.samharris.org/podcasts/making-sense-episodes/spe...
How Beeper Mini Works
I wrote an easy apply bot that speeds up my applications ten fold by removing a bunch of the tedium.

I applied to like 500 jobs yesterday.

Haven't heard back from a single one but I'm going to spend the next 20 days and apply for 10,000 jobs to give the job market a fair shake before trying something else.

Feel free to use/submit P.R.s/help out.

https://github.com/0foo/easy_apply_bot
Cotter – GPT powered stock fundamentals ratings
Yes, easy to use is valid, but Debian, openSUSE, or Manjaro are not difficult to use. They also have the additional benefit of trying to be actually useful operating systems.

As you said, the issue with Mint is that they go out of their way to hide the way things work, and this means that getting an intuition for the system is slower. Much slower than just investing a little time in learning to use the command line interface to the package manager of your chosen flavor of Linux.

I recall when I was first getting into linux some 12 years ago. I also got the advice to use Mint, and I did. I was completely useless on Mint.

I had no shortage of trouble getting device drivers to work --- and this was still true at least three years ago when a colleague tried Mint.
It took me forever to get the operating system to do what I wanted it to do, and the visual package manager was confusing.

Contrast to when I tried arch next, I used one week to properly understand the system using the extensive documentation at archwiki, and I used that laptop install until the laptop died (two years ago). I was immediately a lot more productive than I had been on Mint.

I've since also helped acquaintances by installing Linux on their computers, but have had much more issues with distros designed to be "easy to use", like Mint or ElementaryOS, than I have had with the baseline distros that everyone uses. There are mature sleek desktop environments that are easy to use for beginners: KDE, Gnome, Awesome; and they can be installed on any distro. The only thing you really need as a beginner is an installation wizard that takes care of the nitty gritty when setting up the system, the rest you can learn while doing, and the excellent quality of the archwiki is what IMO sets that distro apart from the rest.
The truth is almost stranger than fiction. They are members of a group called Dragon Sector and were brought in by the train operator after 6 of their 12 largest trains became unresponsive after having inspections done at a rail yard owned by not-the-manufacturer of the trains. The manufacturer said the trains became unresponsive because of malpractice at the train repair shop and mentioned some condition that didn't appear to be in the maintenance manual. The train operator made contact with Dragon Sector and asked for their help.

It's a wild read: https://zaufanatrzeciastrona.pl/post/o-trzech-takich-co-zhak...

It appears to be malicious code included by the manufacturer to prevent third party repair that at one point included geolocation for triggering. Given that the train operator had to reduce train schedules for this which impacted service and income, it might end up as evidence in a lawsuit against the manufacturer at some point.
So all Google has to do is spam US government websites with scrapers reporting Chrome UA and Firefox is done for?
You wouldn’t download a train, would you?
Time Lapse: Assembly of Wendelstein 7-X
> You can easily see this because it can be flipped around easily - you made a claim that they are being changed, even every few weeks! Should it really be on me to show that your very specific claim is false?

Wait a minute? The author of such a paper makes a claim about some observation that's based on the assumption that the studied model is defined in a way. I am disputing that claim since no evidence has been shown that it is defined because no definition has been given.

If your twist on this issue would be true, then I would, by definition, have to accept everything that they claim as true without any evidence. That's not called science. That's called authority.
> Mastodon is free of censorship

It's like email. If you have a server and I have a server we can talk. If one of us uses someone else's server then that server can censor us.
A friend of mine was recently a witness for the FBI. He was working in a small office in the middle of nowhere and happened to have a very loud argument with the suspect. A few minutes later he left the building and when he was about to start his car, he got a call from an agent asking him if he wanted to be a witness in the case they were working on.
Arxiv is like the MENSA of the tech world

The similarity being that it’s ego masquerading as academic.

Most things shared from there should have just been a blog post.

The last year has showed that AI/ML research and use did not need academic gatekeeping by PhDs and yet many in that scene keep trying self infatuating things with the lowest utility.
That better be a Bowie reference and not an Oasis reference.
I might be wrong, but based on my understanding is that PISA also covers private schools, although that may only apply outside the US perhaps? I say this because many studies that compare US public vs private education student populations will sometimes cite differences in PISA scores.

Students who are home schooled are excluded, but that population (even in the US) is far too small to move the average (It peaked at 5.22% during the pandemic I believe)
That’s like saying a biologist studying an endangered species isn’t doing science because the animal could disappear tomorrow. The permanence of a subject has no bearing on whether it is science or not.

The idea that science has to happen in a lab is of course absurd as well.
Looks like it uses pylance for vector database.
Maximising your productivity through focused work is conventional wisdom that I no longer believe applies to me.
It's hard to estimate the impact of an idea in the same way that you can estimate the impact of an investment (stock is a number that goes up or down). You're right that the current incentive system might be to blame, but a simplistic metric will be gamed just as easily - what would you propose?
Duplicate of https://news.ycombinator.com/item?id=38524550
iirc, eqemu reverse engineered the server based on the traffic. I remember being impressed.
Lol must be my local syndicate then ... and I replied to someone who brought up race.
I'm one of those who rarely uses Firefox. I have it installed, but Google is just to integrated in my life. Gmail, Drive, YouTube, Android, etc.

Now, I just launched Firefox (on Windows), and the fonts look absolutely atrocious compared to Chrome. What's up with that?

Edit:
"gfx.font_rendering.cleartype_params.enhanced_contrast 0" made it a lot better, but not quite as nice a Chrome. Still a whole lot better than the default setting.
I don't know if that's still true. I have no data, but just anecdotally, I'm pretty sure almost everyone knows what a web browser is and what an ad-blocker extension does nowadays.
OK so this just confirmed my hunch: the driver for this type of research is ideological. I'm not overly disgusted by it such as someone in the "anti-academia, pro-business" camp might be, I pick the chips on my shoulder with some care. But I much prefer research that is not ideologically biased - in any direction. The more extremist, the less I prefer it.

I'm familiar with the notion that "everything is politics" and the like, but it is a completely useless rule of thumb for everyone but undergraduate zealots and ideologues, who ultimately prefer to spend their energy defending their bias instead of looking at the data.
Clever use of opencv and image detection.
I get unsupported browser warnings on my country's government portal when I use Firefox.

I think it's been the case for a good 10 years.

It works fine, of course
Uhhhh, HTML?
Server-side tracking of user agent strings should still be possible.
This is something I’ve struggled to communicate internally.

The closest I came was a GitHub actions job that did preflight checks to make sure all the right dependencies and sdks were present before calling into the same build script we use locally.

Don’t care where or how you set up your build environment, if the pfc passes your build should too. We still have some holdouts that do environment setup with a make file :/
Will? It already has. China has had its surveillance for ages. And it's been spreading in other countries, too. Example: https://www.404media.co/fusus-ai-cameras-took-over-town-amer...
The Portuguese Wikipedia has been completely taken over by a toxic mega group that’s bent the rules to get what they want.

They constantly harass you, and they invent rules if needed to get articles down that they don’t like.
The War over Work from Home: The Data CEOs and Workers Need to Know
Oh boy, wait until you hear how your TV and monitor work!
Great Man Theory is about individual people[1] having a large impact on history. If Cæsar did all those things then he was a “great man” in that sense.

[1] Snickering side-note about male-supremacy v.s. “man” being gender-neutral.
So if I am understanding this correctly:

Quantum particles can effect change (curve) spacetime without direct quantum action if you sprinkle a bit of randomness into the (quantum acting on spacetime) effect?
Do people forget Mitchell Baker has been a Mozilla employee for decades?
Show HN: Beeper Mini – iMessage client for Android
Hi HN! I’m proud to share that we have built a real 3rd party iMessage client for Android. We did it by reverse engineering the iMessage protocol and encryption system. It's available to download today (no waitlist): https://play.google.com/store/apps/details?id=com.beeper.ima and there's a technical writeup here: https://blog.beeper.com/p/how-beeper-mini-works.

Unlike every other attempt to build an iMessage app for Android (including our first gen app), Beeper Mini does not use a Mac server relay in the cloud. The app connects directly to Apple servers to send and receive end-to-end encrypted messages. Encryption keys never leave your device. No Apple ID is required. Beeper does not have access to your Apple account.

With Beeper Mini, your Android phone number is registered on iMessage. You show up as a ‘blue bubble’ when iPhone friends text you, and can join real iMessage group chats. All chat features like typing status, read receipts, full resolution images/video, emoji reactions, voice notes, editing/unsending, stickers etc are supported.

This is all unprecedented, so I imagine you may have a lot of questions. We’ve written a detailed technical blog post about how Beeper Mini works: https://blog.beeper.com/p/how-beeper-mini-works. A team member has published an open source Python iMessage protocol PoC on Github: https://github.com/JJTech0130/pypush. You can try it yourself on any Mac/Windows/Linux computer and see how iMessage works. My cofounder and I are also here to answer questions in the comments.

Our long term vision is to build a universal chat app (https://blog.beeper.com/p/were-building-the-best-chat-app-on). Over the next few months, we will be adding support for SMS/RCS, WhatsApp, Signal and 12 other chat networks into Beeper Mini. At that point, we’ll drop the `Mini` postfix. We’re also rebuilding our Beeper Desktop and iOS apps to support our new ‘client-side bridge’ architecture that preserves full end-to-end encryption. We’re also renaming our first gen apps to ‘Beeper Cloud’ to more clearly differentiate them from Beeper Mini.

Side note: many people always ask ‘what do you think Apple is going to do about this?’ To be honest, I am shocked that everyone is so shocked by the sheer existence of a 3rd party iMessage client. The internet has always had 3rd party clients! It’s almost like people have forgotten that iChat (the app that iMessage grew out of) was itself a multi-protocol chat app! It supported AIM, Jabber and Google talk. Here’s a blast from the past: https://i.imgur.com/k6rmOgq.png.
It is still the least bad option.

There are two complaints I see in this thread: they are being distracted by social justice stuff, and they are overpaid and wasting money they desperately need for technical matters.

IMO the former is not really all that consequential to most people. If you are just a user, you don’t have to abide by any of their contributor guidelines.

The money thing seems troubling, though.

It would be preferable if the web wasn’t so over complicated that it required a multi-billion dollar company to make a browser.
Innovative wireless light switch could cut house wiring costs in half
Hailing Jeremy Howard and his team at Fast.ai to make it so!
Sure, but this is not the criteria for a company to be successful or not.
Why not? A paper is not necessarily scientific nor a breakthrough. In my view, a paper is written and documented communication that's usually approved by peers in the field. Also a blunt observation in nature can be noteworthy. However, we don't see such papers anymore as these fields have matured. Just go back in the history of your field and you will find trivial papers.
Do you want a big city? You mention Bangkok, Ho Chi Minh, Singapore.

But if you like Vietnam and can have a smaller city, and dislike motorcycles, try Hoi An. It is beautiful, far fewer motorbikes especially on the outskirts (you can cycle on a bike!), and close to Da Nang if you want a semi-large city (a million people.)
I beg to differ. The correct term is not “will” but “is”.
I'm curious: Why did the US improve with reading while the OECD dropped? And why did everyone's math score fall in 2022?
It depends on what you mean by "farmers." Even small individually- or family-owned farms are going to depend to a large extent on seasonal agricultural labor. It's worth being clear when you talk about this whether by "farmers" you mean those laborers, who are often poor, or the landowners, who usually aren't.
Yes, I certainly agree that validation research needs to be done, and done absolutely solidly before wholesale switching .

Yet in this case, the existing tech is known bad (although TBF, the how-bad is well-characterized), and the new technologies are already qualified to fix this bad tech, e.g., carbon-fiber re-wrap of disintegrating steel-rebar bridge columns [0,1,2].

Certainly seems that applications like road-bed construction that require rebar, where the worst-case is a part of the road gets potholes prematurely, vs abridge or building collapsing, should already be mandated to use composite rebar. That would significantly increase the data set that can be used for real-world aging studies, with minimal risk?

[0] https://www.hj3.com/blog/dot-bridge-column-repair

[1] https://www.advancedfrpsystems.com/how-to-repair-concrete-co...

[2] https://hydratechllc.com/resources/case-study-dot-bridge-con...
The board of any startupy tech company focused on "innovation and changing the world" seem to be carbon copies of the fictional boards on the Silicon Valley satire show.
"PLEASE DRINK VERIFICATION CAN" but even more dystopian
Is this a joke? It is pretty much exactly the old "please drink verification can" greentext / meme

I suppose life really does imitate art!
If pixelfed and mastodon are federated with each other, you should be able to view users and posts from both sites on either site - no need to sign up for both.
imagine what would happen if all the upper layers were removed and all them millions would fall into contributors :)