skysight-inc/HackerNews huggingface dataset:
Related to this is Promise Theory - https://en.wikipedia.org/wiki/Promise_theory

Promise Theory goes well beyond trust, by first understanding that promises are not obligations (promises in Promise Theory are intentions made known to an audience, and carries no implied notions of compliance), and that it is easier to reason systems of autonomous agents that can determine their own trust locally, with the limited information that they have. Promise theory applies to any set of autonomous agents, both machines and humans.

Back when this was formulated, we didn't have machines capable of being fully autonomous. In promise theory, "autonomous agent" had a specific definition, that is, something that is capable of making its own promises as well as determine for itself, the trustworthyness of promises from other agents. How such an agent goes about this is private, and not known to any other agent. Machines were actually proxies for human agents, with the engineers, designers, and owners making the promises to other humans.

AI that is fully capable of being autonomous agents under the definition of promise theory would be making its own intention known, and not necessarily as a proxy for humans. Yet, because we live in a world of obligations, promises, and we haven't wrapped our heads around the idea of fully autonomous AIs, we will still try to understand issues of trust and safety in terms of the promises humans make to each other. Sometimes that means not being clear in that something is meant as a proxy.

For example, in Schneier's essay: "... we need trustworthy AI. AI whose behavior, limitations, and training are understood. AI whose biases are understood, and corrected for. AI whose goals are understood. That won’t secretly betray your trust to someone else."

Analyzing that with Promise Theory reveals some insights. He is suggesting AIs are created in a way that should be understood, but that would mean they are proxies for human agents, not as an autonomous agents capable of making promises in its own right.
These media reports are REALLY misleading, and I would be fuming if I worked at Booking.com at how much damage these media reports have done to the brand.

> The company, which is one of the biggest hotel and holiday websites in the world, has not itself been hacked.

>

> Instead, criminals have tricked their way into the administration portals of individual hotels that use the service.

>

> This enables them to send messages and fool customers into paying them instead of the hotel.

Previous headlines from the BBC have been even worse:

- Booking.com users angry at firm's response to hacks

- Booking.com hackers increase attacks on customers

How is this not libel?

Genuinely: What do people here think that are Booking.com supposed to be doing about this? Any sophisticated phishing group aren't going to be making rookie errors like hotlinking images when they set-up a phishing siter impersonating Booking.com. They're already doing DKIM signing, DMARC and SPF.

It's unclear to me if the phishing groups are sending emails out directly using the stolen personal details, or using some sort of in-app messaging functionality. If it's the latter I don't think booking.com even supports linking URLs in messages sent out via this mechanism.
And django-timezone-field and others are not currently compatible, blocking upgrades.
I realize the GP was being provocative, but please omit swipes (like "Relax") from your comments as well.

https://news.ycombinator.com/newsguidelines.html
amen. the worst thing about STEM, IMO, is STEM people.

yeah I mean you
To make a story that covers whole libraries, logistics, supply chains and war industry, really short:

Government, during war time, sets the priorities and policies, industry put those policies in place. This results in output, guns, uniforms, tanks, horses, ammunition, boots, food, planes, ships...

How said output is used on the battlefields, and more importantly how it gets to said battlefields, is the Generals thing (including theirs staff, the general staff, high command...).

Also, the civil war was one of the first semi-indistrial wars. And those cannot be won without a proper industrial base, which the South never had. And no single person can change that.
the world these days is becoming more and more medieval: many different actors, all competing with one another, at different levels of power.

Imo, it's a good thing: regular ppl will be more suspicious about power overall and not make as many bad safety/convenience trades.
> pushing back on someone's opinion is acceptable,

They didn't push back on the _opinion_, they pushed back on _expressing an opinion_:

¨Respectfully, "I firmly believe" followed by an assertion from a non expert passing as "facts" is a pox on our modern society.¨

Nothing in there is "challenging" the opinion or "pushing back" on the opinion -- it's criticizing _expressing an opinion_.
I used Soundshift. You can pay ~$7 to have unlimited exporting or do playlists 200 at a time for free.
Opposition of Russian Society to the War [pdf]
I’ve been using a password manager for all my passwords for years. Moving from “store a password” to “store a passkey” isn’t that big of a difference. The main thing for me seems to be that you can scan a qr code to authenticate another device, a workflow that I will probably end up using. It’s certainly easier and more secure than manually typing a 20+ character password into an untrusted device.

Yeah im sure people will use googles passkey storage, or apples passkey storage, but that was already happening with passwords too. Passkeys isn’t going to change that. Third party password managers are already adding support for passkeys. And OS support for third party passkeys is already there on mobile.

Personally I’m looking forward to passkeys. Just going to make my life a little bit easier. I’m going to continue using a self hosted vaultwarden instance. It already supports passkeys on desktop, and I’m eagerly awaiting mobile support for autofilling them. Hopefully that comes soon.
I assume that Critque is Grerrit with a bunch of Google-specific changes.

Not even close. I have another comment where I get into some details, but, no, three's no overlap beyond the fact that Gerrit pulled some UI and workflow things from Critique (and Mondrian before that, the tool that predated Critique)
That's not the same argument. Even if we're being generous, you're making the inverse argument. Except not, because "it's only a podcast if you use an iPod to listen to it" is not my argument. My argument is it's only a podcast if you can listen to it on an iPod—i.e. something you'd do because that's how you like to listen to things. A piece of audio that you can only listen to if someone installs a proprietary app on a limited set of devices and taps the play button is definitely not a podcast. A podcast that only has a single episode that was distributed as a FLAC copied to CD-R and never uploaded to the Web or anywhere else on the Internet and that only one person has ever listened to and when they did listen to it, it was using Amarok on a 2004 desktop from Gateway can absolutely call itself a podcast.
I imagine everyone is finger-pointing.

Booking.com says the hotel is at fault for having their credentials leaked; the hotel says booking.com failed to protect their account, the bank says the user was phished so it’s not their fault.

IMO if booking.com offers a messaging service which lends far more authority than “just a random person SMSing you” then they’re on the hook for this.
HexRays online? Is that allowed?
Ask HN: Why number of upvotes is much higher these days?
Has anyone else noticed relatively much higher number of votes on popular posts for past 2-3 weeks. Many posts on front page easily get ~100+ votes or 200-300. Has something changed?
Oh, I meant I was surprised Gitlab is a good CI vendor. Lol.
I also have some 2 decades of experience in the industry, so please, share me your reasoning, how did you arrive at these numbers? Just a ballpark, no appeal to authority as I believe we are both similarly seasoned...
As someone who is not at all excited about passkeys, I think they are just moving the average user into an existing enterprise. The enterprise being whatever Big Tech Company you trust the most. Then you gotta pass through one of the "trustworthy" tech companies to access anything, which is simultaneously great and also a huge ask as most of them are data vacuums.
apple has the best marketing bots in the world.
The Case of the Missing Vega AVUM Propellant Tanks
8-bit CPUs have 8 data pins (D0-D7) and anything going in or out of the CPU is doing so 8 bits at a time. This includes all external accesses such as RAM, ROM, and I/O.

But 8-bit CPUs have more than 8 address lines, because 256 bytes total for combined RAM, ROM and I/O space is not useful. That number I think is typically 16 although Signetics 2650 had only 12 (with the instruction set only supporting 12-bit addresses), and the Atari 6507 (6502 derivative) had 13 (instruction set still supporting 16-bit addresses but the upper 3 bits of addresses were basically ignored).

> Is it just a matter of replacing all instructions/chips/buses to be 32 bit/lane?

Depends on the 8-bit CPU really.

- The Z80 lets you combine specific register pairs to work with 16 bits and address memory through them.

- The 6502 does not, but has the whole "zero page" thing where the first 256 bytes of RAM can contain 16-bit data and pointers.

- Both the Z80 and 6502 have a stack pointer register (the 6502's being 8-bit and fixed to point to RAM locations 512-767). But the 2650 had an internal 8-byte stack and stack pointer.

- The 8051 (and the 8048 I think) has lots of instructions for manipulating individual bits in registers and RAM, and also has a division between the memory that opcodes are fetched from versus data. None of the above work like that (the F8 might).
Move the upvotes (1033 points in 2 hours).
I have no doubt costs are high (after all, it’s a government project and it has the word “nuclear” in the name).

That said, the article reads like anti-nuclear fear mongering: “SEE! This is why we have to ban nuclear power because nuclear waste cannot be stored safely!”

I am strongly pro-nuclear as part of a green energy strategy; it’s very clean and runs when the sun isn’t shining and when the wind isn’t blowing. I think it is more expensive than it needs to be due to over-regulation and NIMBY lawsuits.

I think in the US at least we had a very sound solution (Yucca Mountain) for storing nuclear waste, again killed by NIMBY.
There is no such implementation in India. The major censorship in internet here is SNI based HTTPS filtering.
Right but it doesn’t lessen it being true about this space.

Bureaucracies anywhere they exist tend to lean this way, in their own special way. Whether it’s enterprise, healthcare, government, education..
There is also a podcast for Fall of Civilizations if audio works better for you
Declaration to Triple Nuclear Energy [pdf]
Which FAB are they using?
Not gobs of comments but discussed at the time:

Gobs of data - https://news.ycombinator.com/item?id=2365430 - March 2011 (2 comments)
The essential thing is that Gerrit is a swiss army knife review tool for git, whereas Critique is able to be consistent and fluid because it only has to worry about working with the standard workflow in Piper/CitC (and now fig I guess)

I agree Critique is much nicer, but mostly because it's more consistent and doesn't have to deal with all the oddities of git.
> people aren't going to reallocate development resources to give a dying protocol new features.

Which is actually fine by me. I don't need it to have new features.

My point isn't that X is better or worse than Wayland -- clearly the answer to that question is "it depends". I was just expressing the concern that Wayland may eventually become mandatory.
Perhaps don't focus on cholesterol as the only indicator.

Because you have high cholesterol but have not yet died, does not mean it is safe.

There are countless studies that show meat based diets impact cardo health. That doesn't mean sugar doesn't also. Or if meat good, then carbs bad, or carbs good, meat bad.

It isn't all binary. Generally if you are throwing back a rack of ribs everyday to be 'low carb', then things aren't going to end well for you.
+1 to that. Maybe SQLAlchemy is a better product, but being a bolted on solution makes everything about the ORM experience feel worse than using Django. If nothing else, it is not just using Flask+SQLAlchemy, now it is Flask+SQLAlchemy+Alembic. Or maybe, you want the niceties, so it is Flask+SQLAlchemy+Alembic+FlaskMigrate.
For playlists you can choose “view as songs” in one of the menus and then enable the column browser. I have a smart playlist for the classical genres that I do this for.

The groupings is a tag that’s free-form text: one nice thing about Apple Music is you can edit the tags, even if you don’t buy the music. I typically split “Classical” into “Baroque”/“Classical”/“Romantic” and then rewrite “composer” to be “last name, first name (years of life)”
How am I “locked in” when I can use a different passkey manager whenever I want, just like I can use a different password manager whenever I want?

How does a passkey differ from a password from an attestation POV?
Most of the investment houses in my area are used as vacation rentals for half the year, so they're only for rent at market price to tenants about six months out of the year.
https://sr.ht/~rne/dram was my first software in D, I don't remember having any issues with the language itself. Documentation (language and stdlib) was mostly ok, same with compiler diagnostics (watch out for long method call chains involving lambdas).
I agree with the diagnosis elsewhere in the thread: D is where it is today (IOW, isn't where it could be) because of the Tango/Phobos schism and closed-source license issues from almost twenty years ago.
No, the word is called "alignment"

>an arrangement of groups or forces in relation to one another

If you're being harassed in PRs the peer review system has failed. It's a place to make sure everyone is on the same page, not judge someone for how they code.
Yes, please! I was part of an org that ran thousands of online experiments over the course of several years. Having some sort of error bars when comparing the benefit of a new treatment gave a much better understanding.

Some thought it clouded the issue. For example, when a new treatment caused a 1% "improvement", but the confidence interval extended from -10% to 10%, it was clear that the experiment didn't tell us how that metric was affected. This makes the decision feel more arbitrary. But that is exactly the point - the decision is arbitrary in that case, and the confidence interval tells us that, allowing us to focus on other trade-offs involved. If the confidence interval is 0.9% to 1.1%, we know that we can be much more confident in the effect.

A big problem with this is that meaningful error bars can be extremely difficult to come by in some cases. For example, imagine having something like that for every prediction made by an ML model. I would love to have that, but I'm not aware of any reasonable way to achieve it for most types of models. The same goes for online experiments where a complicated experiment design is required because there isn't a way to do random allocation that results in sufficiently independent cohorts.

On a similar note, regularly look at histograms (i.e., statistical distributions) for all important metrics. In one case, we were having speed issues in calls to a large web service. Many calls were completing in < 50 ms, but too many were tripping our 500 ms timeout. At the same time, we had noticed the emergence of two clear peaks in the speed histogram (i.e., it was a multimodal distribution). That caused us to dig a bit deeper and see that the two peaks represented logged-out and logged-in users. That knowledge allowed us to ignore wide swaths of code and spot the speed issues in some recently pushed personalization code that we might not have suspected otherwise.
Seems like a good topic to ask about this:

As you may remember, around 2009 or so, the US mandated that all TV signals had to be sent digital. And of course if you set up an antenna, you can receive crystal-clear HD broadcasts of local TV stations over the air.

However, I used to live near a lot of towers and I was actually able to pick up a stray ANALOG station. It was a Spanish-language station but it came through. I didn't even know my HDTV was capable of picking up an old analog station but there it was.

Am I confused about the law about digital transmission or was maybe this just some old station that they never bothered to update to digital?
This reminded me of this YouTube video I watched the other day “4.5 billion years in 1 hour” https://m.youtube.com/watch?v=S7TUe5w6RHo&pp=ygUgS3Vyemdlc2F...
I acknowledged that in my comment. My point is it takes a lot of work to undo the damage to people's perception and that time you lose from doing so gets your community that much further behind.
You should open the article. The very first content in the article is someone praising critique and also saying they wont use bazel.
If you're from an undersampled population (e.g. Africans), having more public data is useful for improving large scale genetic research. That's how we find things like ghost lineages. Most people's genetic data is significantly less valuable for research without other info (e.g. medical history) though, so I certainly wouldn't consider that universal advice considering the obvious privacy implications for you and your extended family.
I'm not sure what you're referring to with the Like/Love button. It seems to be the same as it ever was for me, except the UI is different based on whether you're in CarPlay, mobile app, or desktop app, so sometimes it's a heart and sometimes it's a plus sign.

One of my biggest complaints for Spotify is the removal of star ratings, but that's been probably a decade ago at this point. Apple Music has it for the desktop app, but it's missing from mobile.
> 6 years later, the Django side needed minimal changes and is up and running (I jumped all the way from 1.11 to 5.0 beta).

I've been using Django since before 1.0, and the upgrade story has been nothing short of fantastic for something that's been around this long. But still, YMMV!

Depending on how ancient a project you run into, it definitely can be a major pain, even with the original authors' best intentions. For example, Django didn't have its own DB migration system until 1.7 (relying on third party solutions); this means you also have to adjust the deployment procedure, which means recreating an ancient setup (ideally in an easily repeatable fashion, because you're going to be trying that migration at least a dozen times).

The builtin admin system is also a pretty decent CMS on its own, but falls short as you run into slightly more complex use cases (such as basically anything that requires even a single line of JS). The docs will encourage you to copy and override the builtin templates; this often becomes a pain point during upgrades. It's wise to get off the builtin admin system as your project grows.
As others have said, requiring two-factor authentication would go a long way to stopping this.

Nothing in the report or what you have quoted is misleading.
OpenAI COO Brad Lightcap Talks ChatGPT Launch, Dev Day and How Sam Altman Thinks
Yes, it's short and insightful for all kinds of writers--technical and otherwise. The editions subsequent to the first have decreased emphasis on economics and instead geared it toward academic-style writing.
MIT Revolutionizes Cellular Imaging: New Way to See Activity Inside Living Cell
Spotify has ~30% of the market, Apple Music, Tencent, and Amazon have each ~13%, YouTube Music another ~9%.

That's far from a monopoly...
>The findings suggest that institutional investors made it harder for people to purchase homes, but easier for renters to access neighborhoods that previously had few rentals.

"You'll own nothing and you'll be happy"

This is indeed the intended outcome.
I don't live in Boston. I put my house up for sale a week ago, the first offer is from an investor.
So is it really science? These are concepts from stats 101. And the reasons and need, and the risks of not having them are very clear. But you have millions being put into models without these pre-requisites, and being sold to people as solutions, and waved away as "if people buy is it's bc it has value". People also pay fraudsters.
I am not so sure of that anymore.

There is some real case for institutionalization and being out of touch with the real world.

Add to that where those who can’t do but talk instead moving up in management to stand over the academics who are capable and immensely talented.
The news story is bogus. Internet service providers can't see what webpage their clients are seeing because everything is HTTPS and there is no MITM from government here as one suggested in the comments. The only technical censorship in India is SNI based HTTPS website blocking and the HTTPS website blocks.
You can always spend more money, especially at an academic institution, where the money spent is not directly tied to a concrete, specific product. The staff can always go to one more conference a year, or take one more sabbatical, or buy newer computers more frequently, hire more people (whether they are needed or not; takes some weight off seniors’ backs), organize more events, spend more with communication, outreach, build something, or improve existing buildings, create a new research group, raise some salaries, etc.
Hacks or not, Booking site answer to your issues is "whatever". I got an apartment once turning out to be infested with roaches, and when I complained to the owner they kicked me out and marked me "no show" in Booking. Thus I was unable to ask for refunds, or even to leave a review. Booking answered my calls quickly but did absolutely nothing about them, positive or negative, the different operators just listened and oohed and "we will come back to you". My bank was understanding enough to refund my payment (all discussions and apartment pictures were documented) but honestly I have no idea whether they just swallowed the CC risk or blocked the payment.
Amazing stuff! It's out-of-the-box Hive creation and management instrument. Love this!!!
The “No Wobble” article is interesting regarding creativity under repression. The associated site is here:

https://www.nowobble.net/
The only reason pass keys are being pushed so heavily is because they are another step in the direction of the customer/user having absolutely zero control over the hardware they own, and the software they use. If you doubt this, ask yourself why there's no way to look at your passkey in android? I haven't checked ios but I'll be surprised if it let's you just look at your own passkey.
> Grad students that teach are practically free.

UCLA recently got hammered on this, after people shared a bunch of job posting for teaching posts for grad students with the disclaimer: "Note: this is an uncompensated position".
I treat the configuration settings from www.rtings.com as the Lord’s word.
I think they do not value fuel economy nearly as much as they should because they do not bare most of the costs of externalities from carbon emissions.
Systems for the many, vs the few can be quite different.

It can be different than systems designed for the few instead of the many
Interesting, why do you think that? My assumption is that it would basically be the same as always.
> there are absolutely kickbacks for people in control of those endowments choosing specific investment options with their many billions of dollars

This is a form of corruption that is present whenever anyone manages an investment fund, and not only specific to school endowments. This is why investment managers are licensed, and taking this kind of bribe could result in criminal penalties.