skysight-inc/HackerNews huggingface dataset:
Interesting, thanks for sharing

> We disclosed our findings to the Threema development team on the 3rd of October 2022, including possible mitigations for the attacks. Soon after, we met with Threema representatives to discuss our work and its public disclosure. On that occasion, we agreed on an initial batch of mitigations to be released in Q4 of 2022, followed by the public disclosure and final mitigations to be released in Q1 of 2023. In December 2022, we agreed on the 9th of January 2023 as the date of public disclosure.

> On the 29th of November 2022, Threema released a new protocol, Ibex, in order to further mitigate our attacks. The Ibex protocol aims to provide forward security for the E2E layer in Threema. We have not audited this new protocol.

I wonder if the new protocol would survive an audit
Apparently, there have been 4 bit microprocessors made!

https://en.wikipedia.org/wiki/4-bit_computing
What does this actually do? I am a senior analytics manager but can't really understand what bitdrift does... the page copy is very down in the weeds.

Is it roughly analogous to feature gating telemetry, ie centrally turning on and off specific bits of telemetry on a per-user basis without needing to wait for a new app build to go through review and publication process?
This one: "Sounds more plausible than pure ego"? We seem to believe ego well enough (we certainly succumb to it), so if that's what you refer to, I do take your point.
I'm reminded of Walter Lewin's analogous point about measurements from his 8.01 lectures:

any measurement that you make without any knowledge
of the uncertainty is meaningless

https://youtu.be/6htJHmPq0Os

You could say that forecasts are measurements you make about the future.
> the system will be relatively open to third party developers, including open source solutions.

Yes, it will be. Right up until it isn't. See e.g. RedHat, HashiCorp Terraform
You did it right. Kudos for making the smart decision -- you can't buy home.
On the other side of this, that ephemerality is sometimes worth being preserved.

Since the 1970s, Boston DJ Oedipus has put on a Christmas Eve show from 6pm to midnight, with Christmas music from around the world, and even just from the local music scene. It started on WBCN, then moved to WFNX, and most recently landed on WGBH.

Oedipus doesn't maintain a set list - it's just whatever he's feeling like playing as he's doing it. His immense talent aside, it means that it's hard to learn about those songs, or even those bands. For the last few years, I've been recording it and trying to build the set list myself, from either what he says (he doesn't always!), or from Google searches.

Does it take the magic away? Maybe, but I feel that it's what little I can do for preserving something that's been actively disappearing.
The motion of an object isn’t the same as the frame rate though. You can have a 60fps scene where an object is moving fast on one side of the screen and slow on the other. It only means that for a given object travelling from A to B - it will have more fine detail in its movement for a given distance.
the "ASCII ribbon" referred to a ribbon drawn as ASCII art, not an insistence that people use exclusively ASCII characters. Unicode is still plain text and supports any language you can think of, and also most languages you can't think of.
Agreed - if you want true "thing you have", it needs to be a standalone hardware token, and it needs to be fundamentally impossible to extract the key from it. Otherwise, its key just becomes another "thing you know".
Hang on a sec.

> Users don't have the same life experience as security people and sometimes a user simply do not know how to verify a link on e.g. his iPhone.

Later...

> My password is mine. I control my password. I own my password. I am not dependent upon some third party closed proprietary operating system or device to handle my security. I would rather have a piece of paper with all my passwords written down, stored in a drawer at home

So the general public apparently lacks the ability to verify the url in an email, but _do not_ lack the ability to safely control their password? You completely ignore the ability of the site administrator to safely control your password by the way.

Altruistic as it may be to be anti-Big Tech, they are pushing the needle forward on cybersecurity. Looking at Apple, they invested millions into a special biometric device that ensures the fingerprint cannot be retrieved by *anyone*.

Also, I missed the part of this article where a quote was identified that hardware keys are for the entire population of the world? We do not roll keys out to every single employee - you're right about that. It's an interoperability nightmare. We do roll keys out to critical staff though. CEOs, COOs, high profile figures, critical service admins, etc. These folks are already trained and understand exactly why this initiative is so important; usually because they themselves have been targeted already.

Hardware keys are a great thing. I'm frankly getting really exhausted reading about how every new solution must be engineered to fit every single human of planet earth's needs. Its simply not designed with them in mind because they're simply not ready yet. It is what it is.

Nuclear power plants don't air gap controls because they hope the same system is used by Walmart down the street. They do it because their risk is... well... nuclear. Hardware keys in tech are no different.
The moment OpenAI can find a way to get superior results without training on copyrighted materials, you will probably see them being more vocal about the issue as it will give them a moat. This is one of the ways you know they are training on copyrighted materials.
A major issue with motion interpolation is that it can’t be perfect, and is often far from it. The implementation on many TVs is jarring, you’ll see super-smooth motion while an object is moving a slow or medium speed, but as soon as the patch of pixels that it’s tracking goes really fast, it assumes the patches are distinct, and the motion will be juddery. Individual objects switching from high-framerate to low in the span of a half-second is quite noticeable to my eyes, but I admit that most people around me don’t seem to care.

Maybe one day the real-time implementation will be good enough, but I find that it’s shockingly bad most of the time.
On Pivoting: Why We Ditched AI Observability
Harvard's actions are also consistent with her not doing good research. Note that she was not snapped up by another institution to be faculty, just a "tenure track position". One red flag is that the reporter cites all the times she talked to media and congress. A good indicator that it was superficial and headline driven work.

I'm sure she was a valuable source for reporters needing dramatic quotes on a slow news day, but really there should be more heft than that.
It may not be a good tool for communicating between services implemented in different languages. But i’d happily use it to save stuff to disk where database is overkill.
The Prisoner of Benda
Then no more tourists. No-one wants that.
Not that Wikipedia is an authoritative source, but it does say this:

* A podcast is a program made available in digital format for download over the Internet.

* Podcasting is the preparation and distribution of audio files using RSS feeds to the devices of subscribed users.

* the content can be accessed using any computer or similar device that can play media files.

If we consider this to be the commonly accepted definition of a podcast, then how does the JRE fare?

1. JRE and other Spotify shows can only be streamed, not downloaded.

2. Spotify doesn't use RSS feeds to deliver audio files, rather a private API that powers their apps.

3. Spotify shows can not be accessed using any computer or similar device that can play media files, only those capable of running Spotify's own app.

So the JRE is 0/3 for meeting what I think it's fair to say is the general definition of a "podcast" as understood today.
I've been doing something similar recently, though it doesn't directly convert a tar to an ext4 FS. But maybe this can help you get to where you want to be.

On Alpine Linux:

```

apk add --no-cache coreutils e2fsprogs

```

```

#!/bin/sh

# Untar the tar file

mkdir -p /tmp/my_untarred_files_dir

tar -xvf my_tar_file.tar -C /tmp/my_untarred_files_dir

# Make an empty image file.

dd if=/dev/zero of="fs.raw" bs=1M count=1024

# Format the file as ext4 (with journaling) and copy untarred files into it

mke2fs -t ext4 -j -d "/tmp/my_untarred_files_dir" "fs.raw"

```

If you want to make a qcow2 image, you can then do this:

```

apk add --no-cache qemu-img

qemu-img convert -O qcow2 "fs.raw" "fs.qcow2"

```
Now that’s a pretty cool origin story for a name. What a compliment!
I think that beyond some relatively small number, engineering headcount functions as a demonstration of wealth - it doesn't actually make the product better, it doesn't make you ship faster (Brooks's law). but it makes you look big and important and justifies your market cap
Had a quick look and Donovan is a board member of Check My Ads [1], "an organization that pushes advertisers to ditch right-leaning media" and they've wrote articles in favour of social media bans [2]. They're probably referring to that.

1. https://checkmyads.org/about/

2. https://www.wired.com/story/you-purged-racists-from-your-web...
24/30fps looks dreadfully unnatural and distracting to many people though. It’s almost painful to watch on larger screen sizes.
The "river to the sea" slogan is deeply poisoned and has been used by every conceivable bad actor, from west bank settlers and supporters of a "Greater Israel" to Hezbollah, and all points between. It is reasonable for people hearing that slogan to assume the worst.

That doesn't mean people who use it are per se antisemitic (or per se Kahanist). But it does obligate its users to explain themselves, and when you're explaining you're losing. Everybody would be better off abandoning those words.
>People deserve to be paid for their work.

All fun and games until we're long past the point of AI having to learn from people. Then what do you plan on doing?

Tax corporations, provide UBI. Thinking that we'll need vast workforces in the future is folly.
This problem has a deep connection to formal methods: one of the first formal models of concurrent computing was Petri nets, which are equivalent to VASes. Petri nets are very limited in what they can model, and so finding reachability even those tiny, limited programs is HACK-complete!

What I love so much about this is that it's really hard to find intuitive examples of TOWER-complete or even 2-EXPTIME-complete programs, but this one is so much harder than all of them but can easily be explained to a fifth-grader.

Next goal is to find an intuitive HYPERACK problem...
Vendor lock-in is a good thing? HP's CFO thinks so
One thing the Hollywood people have in common with each other, but not with us, is that they move from one employer to the next frequently as a matter of course. Those employers explicitly do NOT want to carry them on their books when they don't have specific jobs for them to perform.

Unionization makes a lot more sense in those cases. If I need a ship unloaded, I call up some dockworkers. If I need some heavy boxes moved, I call up some Teamsters. If I need someone to look good on a screen, I call up Tom Cruise or Jennifer Lawrence. If I need someone to feed the actors, I call the craft union. Etc. Like the old joke about hookers, I don't pay these people to come to work, I pay them to go away.

None of that is comparable to what I do, or (probably) to what you do. Your employer can only become less competitive if you join a separate outside organization that acts as a middleman for your labor. That's not the case in other industries.
> What is Radio being used for that’s so critical these days anyways beyond emergency spectrum stuff

Everything?

The only reason we're able to have nice things like GPS and Bluetooth connectivity to our cars and WiFi for our laptops is that we regulate radio frequency emissions.

You may imagine non-compliance as a punk rock pirate radio station broadcasting music you like on unoccupied spectrum, but that's an edge case of an edge case.

> and its ability to disseminate unapproved information to an entire city on receiving devices that can’t be tracked is critical and NOT reliably possible using the Internet especially during crisis periods when the big dogs get involved.

How do we jump from pirate radio station broadcasting some music to a dystopian fantasy about people getting unauthorized information in a way that can't be tracked in a theoretical future authoritarian scenario?

If you really want to communicate via radio, please look into modern amateur radio and get your FCC license. It's relatively affordable to get gear these days and as you study for the licensing test you'll start to understand why it's important that we don't just have a free-for-all on the radio spectrum.
Are the thermal expansion characteristics the same as for regular steel rebar?
The Slide
Yes, actually, widespread top-down deployment of nuclear power would have been a safe and economical way to transition gracefully off of fossil fuel power starting in the 1970s.
It's blurry and smeary in the movie theater. You just can't capture fast motion at 24 fps. Once you train yourself to look for it you will never be able to stop seeing it.
“Bandmates” is bad, and dishonest. It’s like Pfizer calling every employee “doctors.” Stolen valor.
OpenAI COO thinks AI for business is overhyped
I'm reasonably nearby the major city that has my cell phone's area code but I'm in a different area code and most people who are in the city who could even potentially call me are in my contact list. (For a long time I used to regularly get calls from areacode-exchange-random 4 digits which I knew to safely ignore/block.)
What Is Holding Back Neuromorphic Computing?
> Giving $14 billion in small discounts to people with good existing services should not be happening while so many people have no service at all.

I don't think the answer to "some people don't have access to broadband internet", should be "more people won't have access to broadband internet".
That's an apples-and-oranges comparisons, 100M is just the size of the frontend/middleware code (Hack), while 2B includes everything, including configuration and generated code.
AIUI the concern is that you will only be able to use Passkeys that are held on devices that have been blessed. You will never get your custom solution blessed, so your access to your bank and government services will become dependent on being in good standing with Google. If your Google account gets deleted or your phone gets remotely deprovisioned, you will be unable to authenticate, and any attempt to create a "backup" against this situation that is fully under your control will be blocked by the attestation requirements.
Where on earth would that have been?
what's the learning curve of a GenZer? When boomer says don't look this up on the internet, it's not because they want the information for themselves. It's because they already have something burned into the memories, and are hoping to save you from the same.
Yes that is exactly right. We will try to figure out how to make this more clear!
> There's no such thing as a "well functioning free market". It's an utopia.

It's relative. You seem to be confusing "well" with "perfect". Depending on your point of view, no economic system is well functioning, because there will always be ebbs and flows where people clash with the system and it works better or worse at time. I'm not sure if our version of a free market in the U.S. is closer to well functioning or not, but I don't see a problem with pointing out how it can be better, and I'm not sure why you would respond with something I interpret as "don't bother, it can't be perfect", especially when you haven't presented a better alternative.

> What we have today is how a free market works. The invisible hand always tipping the scales. They would simply find a better way to get the outcome they want, avoiding the issue altogether (something at the federal level, make an example out of a researcher or institution, etc).

The counter to the invisible hand working against society instead of in tandem or for it is freely available information. In a free market economy, the answer is almost always more information because it allows individuals to act correctly, either through individual actions, or as a group through pressure on the government to regulate.

So yes, what we have today is how a free market operates (although I would argue not very efficiently, due to lots of blocks on information that exist), and this information we're discussing in this post coming out and people being able to respond to it is the first step in being able to act on it to curtail it in the future.

> The word utopia is used a lot when anything other than capitalism is being talked about, but the free market, which is an integral part of it, definitely takes the win. We have so many "free economies" around demonstrating how much of an utopia this concept is.

The only person here who said that is you, so I'm not sure what you're on about. I certainly don't think it's some utopia, just a system built on emergent behavior that like any other, needs special bounds and constant attention to both keep it functioning as well as possible as well as keep it from going completely off the rails.
I don't think that there is some kind of conspiracy theory here, but there is no reason you'd need an invasion to stop the attack. Simply refraining from moving soldiers outside the Gaza border and into the West Bank would have been sufficient. It was 3000 thousand terrorists with light weapons, it wouldn't have been difficult to stop if Netanyahu hadn't sent so much of the IDF to terrorize civilians in the West Bank and steal their land.
A Windows Update bug is renaming everyone's printers to HP M101-M106
This is great, thank you for sharing! I wonder what the reverse would look like. More and more nowadays, I find myself first looking on YouTube for tutorials and walkthroughs, even if they wind up being more verbose than their written counterparts.
OMG I am so happy

Of note: HexRays is not only cleaner, but right now their queue is mostly empty while others are backed up.
Imho, both scenarios are frightening, but for very different reasons.
> A riskless investment in sp500

Just a nitpick, but this isn't the traditional definition of "riskless", which would be Treasuries. I believe the S&P 500 experiences an average drawdown of 14% in any given year, so it's hardly without risk.

You could more accurately say that SPOT has been underperforming "the market", "equities", or "beta".
Keeping heavy industry away from residential is probably a good thing. Keeping out multifamily and retail is the problem.
Denial that it ever happened vs denial that it was as bad as it was (ie that reported Covid deaths match reality) are two different things.

I know quite a few conservatives that think some combination of: it’s just a flu, not actually a problem, we’ve gotten Covid many times and we were fine, death numbers are all made up, doctors are getting paid to mark deaths as Covid caused, and many other hysterical conspiracy theory beliefs.

I think you’re not in the same circles of folks that believe this stuff.
We need you to capitalize that, Mr. Often Truncated.
If the goal was to disseminate information in the event of an authoritarian dystopian future, setting up a pirate radio station now and broadcasting music is a great way to ensure your plan fails completely when it's needed.

Pinpointing the source of these radio transmissions isn't hard with modern equipment. Amateurs do it all the time. It's trivial to map these things out in the era of accessible flying machines and cheap technology.
Your technical definition is losing popularity to the colloquial use of "podcast" which is a form of audio-first media.

Younger people already consume "podcasts" that come with optional video streams. H3 is a very popular one.
Wow, that is evil! I can see exactly the thought process behind this change as well...

People buying M-Disc's will not notice that they've been sold BluRay discs for decades when they start to decay some day. It's a malfeasance which will only be discovered in the distant future once the discs start decaying, and will be someone else's problem by then. Meanwhile whatever product manager will have made their promotions for cost cutting and increasing revenue.

tl;dr only buy the M-Disc's which are rated for 4x write speed.
Given that the major shareholders are the big music rights holders which is one of Spotifies major costs shareholder have done alright.
I went from being an adjunct instructor at a California community college to a software engineer. Now I earn more in a month than I used to make in a year. And the more prestigious a school, the worse the pay in a lot of cases. Like I made more at my CC than I would have made teaching at UC Berkeley, which is by some measures the #15 university in the US!
Silicon 100: Startups Worth Watching in 2023
Palestinian refugees have to stay refugees because they are stateless. Stateless refugees, unless they can find some other citizenship and therefore no longer are just Palestinian - and they often can't, must remain refugees for eternity. Since children normally inherit citizenship, that goes for their children too, until they are something other than Palestinian, nationality-wise.

And they didn't "leave". They were ethnically cleansed.
It takes way too long though - it's almost always quicker to just do it in cider/subl if there's more than 1 of them.
How exactly does this work? I have Bitwarden and Firefox on Linux. I have been unable to get Passkeys to work at all, using either Bitwarden or my YubiKey. Is Firefox just not supported?
Wow. Insult to injury. Pretty crappy for the next professor, too.
I know it rarely happens in practice, but I disagree than Kubernetes needs an LTS since the Kubernetes cluster itself should be a "cattle not a pet" and thus, you should "just" spin up a new cluster with the same version as your upgrade strategy.
Also, error bars qua statistics can indicate problems with the underlying data and model, eg. if they're unrealistically narrow, symmetric etc.
On the west coast of America, I would much rather be living in a wood frame house when an earthquake hits. Depending on construction, the house may not survive, but I probably will. Cement, stone, or brick all seem much riskier to me in an earthquake zone.
What do you mean by “tearing”? Like, VSync-off tearing or a different effect?
Diffusion of Innovations Theory: Change Agents and Opinion Leaders
Really? I think it should be quite important to call out bullshit for what it is. The way I see it, there's way too much of that floating around.

I see it not as "name-calling". But if this is against whatever the powers that be see as the "spirit of the site", I shall remain silent.

Back to lurking it is.
Oh sorry you mean it’s blurry and smeary at 24 fps in the cinema! Yes I agree. Sorry I thought you meant that higher frame rates looks blurry.
What? Just because passwords are flawed doesn't make passkeys the answer. The article does not say passwords are perfect. It says the current implementation of passkeys that has been created so far is worse.