skysight-inc/HackerNews huggingface dataset:
Satellite Reign [1] did a pretty solid take on Syndicate. For some context on that game, they released in a somewhat absurdly unoptimized fashion (CPU bottle necked), and never really optimized it. It should run fine now though on any modernish CPU, a decade after its launch. There are also some collision issues in the game. They're relatively rare, but common enough to show up on a large scale and drive lots of angry reviews.

Outside of that the atmosphere/aesthetic is well done and the gameplay is great. The story is about as good as in Syndicate... In any case, definitely worth a playthrough or two. But it stings to think about how much better that game could have been with just 6 months more work. Of course that's what they were probably thinking 6 months before they finally decided to launch!

[1] - https://store.steampowered.com/app/268870/Satellite_Reign/
I think you make some decent points, but at the same time I really don’t understand this part:

> For non-expert team members, modern C# is turning out to be way more intuitive than SQL the moment you encounter a 3+ table join scenario.

Partly because this is so inefficient that it’s never going to work at scale, but also because of how you’re moving the complexity into the realm of “magic”.

I know it’s very easy and intuitive to use one of C#s ORMs, but with that comes an reliance on things like linq and a model builder, both of which may not work the way you think they do. If your developers think about it at all, and having seen so many C# developers use IEnumerable where they really should have been using IQuerable… well if your developers can’t do relatively basic SQL then I’m not sure I’d trust them with the abstraction either.

I don’t think you’re really, wrong, either, but I think it’s much more a question of building developer tools to help your developers handle good data access than it is about picking a particular tech on the consuming side.

As far as data storage goes, however, I think we’re just beginning to see the move away from the classics because the classics just weren’t build to support how we use data in 2023.

I can’t begin to tell you the nightmare it is to update old school SQL “data wells” to be capable of temporality, good BI access as well as being compliant with the various EU legislative rules, and almost none of that can be done above the database. Well I guess you could, but you’d probably go insane. And that’s just path of it, the other part is just how much data we transact now. It used to be that banks were basically the only organisations to move massive amounts of tiny bits of data, and now we all do it. Like, a single solar plant moves a gazillion points of data into your various systems a minute, where 30 years ago the entire data for that place might’ve been a couple of kb a year, it’s now mbs a day.
Pretty much all security is trust based. Any product you pick you trust the vendor not to fuck up or be corrupted.

You can argue then lets just use open source. Ok but is it that much of a security guarantee? Open source products are of limited functionality. It is great for web servers and frameworks, stuff developers care about. When it comes to feature rich client applications the track record is not nearly as good. Also who is going to pay the server costs?
C. Have you tried OpenHermes 2.5? It's a Mistral chat finetune, but a very good one at that.
To make you feel better, it doesn't have to be your mother to identify you. If a cousin were to have done it, you would still be easily identifiable. Basically anyone in your blood line using any of the services would make you easily identifiable.
What was the point of moving away from the base model? I can't stop asking this question. Conversational formatting is achievable with careful prompting and a bit of good old-fashioned heuristic post-processing, and it was easier to achieve consistent results before RLHF took off. Now we still have to do a bunch of prompt hacking to get the results we want[1], but it's more complicated and the performance of the model has degraded significantly[2]. All the cargo culting toward agentic chatbots and away from language prediction engines might please the marketing and investor relations departments, but it's only setting us back in the long run.

[1] https://arxiv.org/pdf/2310.06452.pdf

[2] https://arxiv.org/pdf/2305.14975.pdf
Nothing you said is a counter-argument to the part you quoted. It may still be usable compared to the other ones while being clumsy in general.
> I simply decline to load and view the ads.

That's fine, but then they can also choose to retaliate how they want. It's really weird that everything you're saying seems to boil down to "I don't need to play by their rules, but they need to play by mine."

I'm of the opinion that if you want to bypass their ads that's fine, but you can't get angry when they take action to prevent that.

> Your mentality seems to be that a restaurant can offer free meals to anyone who walks in and sits down, then after they're already eating, demand they watch an annoying ad on a screen built into the table, and somehow the diners are morally obligated to watch it instead of just covering it up with their menu. That's BS.

Yes, that's my attitude. I don't know why it wouldn't be. If a restaurant wanted to make me watch an ad before every single bite, then that's their prerogative. I wouldn't eat there, but if that's what they want to do, then that's their choice.

If YouTube wants to make you watch 10 ads before a 30 second video then more power to them. If they want to take action against people trying to bypass that then good for them. Similar to the example above, I'm not going to use them, but I don't get to dictate how they run their business. If you don't like their actions, then take your business elsewhere. They don't own you anything and vice versa. It's really as simple as that.
Progress that is highly welcome, to be sure. But what about Trust?

In a world of continuous data breaches, exfiltrations, malicious Three-Letter Agencies, incompetent and decades-behind-the-curve legislators, trust is a paramount factor. Trust that a given communication system's first allegiance is to the interlocutors(A), trust that my data won't be subjected to surveillance capitalism, trust that it won't be stripped mined for reflecting advertising right back at me for useless shit I don't want, trust that I can speak my mind without needing to continuously look over my shoulder with one eye pealed for powercenter goons sicked on me by partisan logic.

If you want me to trust your system, show me the complete source code, show me the disinterested third-party security reviews, show me what can happen at the ends, show me that it's not compromised by secrecy laws, along the full chain of custody.

A problem for our age, one step at a time ..

A) See? Even this assumption is a cardinal mistake!

Edit: Trust, but verify. Trust needs to be earned.
> It's available in 174 countries.

Basically the entire world, except countries that specifically targeted American Big Tech companies for increased regulation.

> Europe has gone to great lengths to make itself an incredibly hostile environment for online businesses to operate in.

This is such an understated point. I wonder if EU citizens feel well-served by e.g. the pop-up banners that afflict the global web as a result of their regulations[1]. Do they feel like the benefits they get are worth it? What would it take for that calculus to change?

1 - Yes, some say that technically these are not required. But even official organs of the EU such as https://europa.eu continue to use such banners.
Gemini Pro Overcomes Limitations When Challenged with GPT-4 Capabilities
Daily active users are going to grow on both platforms.

Let's consider you have Instagram users on one-side, and Facebook users on one-side.

As long as you have at least one contact using only Facebook (like your parents), then you have to be active on both platforms in order to talk to your contacts.

If the two platforms would be unified, then you would be active only on Instagram for example.
I don't think this is actually true. As far as I understand it, Apple is generating an asymmetric key on client and not sending the private key in an unencrypted form at all. I am a bit fuzzy on the specific details for iCloud but IIRC they basically have your devices verify each-other and then the key exchange process happens between them. Authentication uses SRP challenges instead of traditional password authentication, which means the password itself can be used with a KDF for keychain recovery, since Apple never sees it (not in hashed for, not over TLS, not during signup, etc.)

Even with that, there are still two concerns:

- Compromised clients: either malicious updates or buggy code.

- Security design issues: for example, if iCloud can just surreptitiously add keys to your account, it can trivially make the security moot. (I am aware this is currently an issue, though apparently it is finally going to be resolved somehow.) At least this one is tamper-evident though.

I hope I'm not misrepresenting reality here. Either way, software with reasonably strong E2EE guarantees that still has decent user experience is more possible than it ever has been. The last remaining problem is account recovery, and Apple has a bit of a leg up on this one since a lot of Apple users will have multiple devices that they can use as a backup, even if they lose a device and forget their password simultaneously.
Same, i literally have an alias that is 'w', which takes me to my primary working dir. It's great.
It’s true. “Making the worlds knowledge accessible” is in tension with driving traffic to ads.

It would be astonishing if a company can succeed at scale with charging subscriptions for search and AI services, instead of ads. Google would be truly doomed.
This is very hard to get right.

Some Bitcoin SPV clients have tried solving an almost equivalent problem, but the obvious approach does not work for various subtle reasons: https://eprint.iacr.org/2014/763.pdf
How are the two not equivalent? If anything, for anyone living in the west it's probably less of an issue to have China spy on them than a western government. Sure, at a state security level it's not but for regular individuals I sure would rather have China spy on me since they can't do anything to me directly.
Parent is saying that the UI is pretty lacking and nothing special.
If it's a 6-digits PIN, computers are going to find it easy to break.
Flash Eurobarometer 528: Citizenship and Democracy
Two things stand out: widespread concern over disinformation and election interference, and widespread unawareness of what to do in case rights are are not respected. Though, they didn't ask opinions about violation of rights under awareness of rights, which is a much more fundamental question.
Blocked in my area!?
How We Power the Largest AI Deployments on the Planet - CoreWeave at KubeCon
My sense is that, for example, the reception of EU4 expansions has generally ranged from lukewarm to absolutely terrible over the past few years, so I'm not sure "they've only been getting better."
Ah, yes, I was mixing up iMessage and Messenger here (too much messaging encryption news these days!) – for the case of trusting your OS and hardware vendor, but not a third-party messenger's vendor, reproducible builds would indeed be advantageous.

It's a real shame the app store does not allow for reproducible builds.
Oh for sure, it was an atom corps show piece to flex their muscles, and probably also to entice ports to allow nuclear powered ships since many did not before it existed.
It was founded as a subsidiary, and every game released has been under T2 ownership.
> When people criticize small arms in terms of resisting government, its usually because the government has better toys

But that is not the point I'm making. Like sure, I agree that a militia wielding small arms can resist an invading army, say in the case that the US military was defeated or didn't respond to an area because it wasn't considered strategic enough.

The point I am making is that it's fallacious to think that weapons can do anything to push back against homegrown democratically approved bureaucratic tyranny. As I said in another comment - how can a gun, explosives, or even a tank alleviate the problems you will face from not getting a building permit?
I was really hoping for a video with sound. I’d love to hear a cacophony of floppy drives saving that .mp3 !
It should be stated. Not everyone shares in the same values as everyone else. There are also those who are unable to understand the social norms of others.

Plus unwritten rules can be subverted and misused at least as much as written ones.

Humans are always gonna do human things.
Targeting costly meds, Biden admin asserts authority to seize some drug patents
> duplicating legally owned copyrighted works for personal use (not distribution) were rights that were well established, but sprinkle in the right technology and suddenly it gets a pass

True in more than one way; owning copyright to your works and being able to refuse/get paid for commercial distribution was a right well established, but a sprinkle of right technology and suddenly they can charge people to copy your work on demand with minor modifications for your own commercial use (while you get nothing).
The same thing struck me as well. This is one of the best optimization professionals on the planet, showing up with a huge improvement, and receiving some misplaced arrogance.

The lesson here is to always, always watch your own review tone, and not make this mistake.

The other lesson is that when a PR shows up with this kind of technical information attached to it, spend the 60 seconds it takes to Google for "lemire".
If you aren’t currently, sounds like you are ready to use an ERP to track such things and link your BOMs to suppliers and purchasing.

You could probably get a BOM into something like Odoo over a weekend to test it out.
Have you used azure functions in an enterprise setting? Because it’s a terrible experience.

I think our “best” issue is how sometimes our functions won’t be capable of connecting to their container registry. For no apparent reason. We have an Entra ID group that has Arc Pull access and we add new function slot identities to it automatically, and for the most part it works fine, but then suddenly it won’t.

We currently has a pipeline slot, that is completely the same as the four other slots, which will only deploy a new function version if you deploy it twice through the Azure pipeline. We’ve had Microsoft look at it and their suggestion was to delete the pipeline and create it again.

And that’s just part of it. Then comes the VNETs, the subnets the private endpoints and how both subscriptions and resource groups make everything a tiny battle.

I don’t really mind that much, we’re abandoning it in favour of Azure Container Apps and a fully run Bicep + Dapr pipeline and we’re never looking back.

Though, to be fair to Microsoft, the way they designed Azure Functions makes the migration away from them really, really, easy. Which is frankly a brilliant design for the more managed side of “serverless” in my opinions. It’s just a shame that the managed part just doesn’t work very well. The functions themselves work fine, well maybe not if you don’t use .net in isolation, but I can’t speak about that as we weren’t going to trust Microsoft to update our dependencies (even if they are Microsoft SDKs).
Ah, the preferred company structure of all economic juggernauts, such as Venezuela.
Show HN: A GPT for answering questions about Gemini
This can somewhat plausibly done in a relatively secure way using HSMs: https://engineering.fb.com/2021/09/10/security/whatsapp-e2ee...

That approach puts a lot of trust in the HSM vendor, though.
As with most zombie theories, it exists because there is a vacuum of evidence to the contrary, not because it’s true.
Ask HN: Advice for data engineer moving to ML Ops
I am making a transition from data engineering to MLOps starting next year.
- Any advice from seasoned ML ops engineers? What are some of the most important skill you think will make an MLops engineer successful
- I heard the role of an MLops engineer varies widely across companies. What do you do at your company as an MLops engineer?
- What resources/courses do you suggest to get started
Am I the only one a bit worried about them using a fixed string as a salt? A salt is intended to make it hard to create a rainbow table. I don't know how much entropy is in their 'folderID' variable, but given that it's a 'short string', it seems low-entropy and not random. If so, the current implementation makes it trivial to make a rainbow table. That means that if you can get the passwordtoken and know a folderID, you can create a rainbow table that maps all possible passwordtokens to valid passwords.

BTW: 'worried' as in 'code smell', not 'worried' as in 'the encryption can be easily broken'.
Well, if you are asking for exactly one, I can tell: It starts with an "N" and has been around since the 1800s.
But besides that, I can not think of any...

I think it is very hard to consistently make good games and also earn money. A few months ago a smaller German gaming company closed (Mimimi). All their games were well received. But even so it was too difficult to continue with just making "good" games: https://www.rockpapershotgun.com/shadow-gambit-studio-mimimi...
there's also Goldberg Steam emulator that's effectively a 1 line config for many Steam games, but if the exe uses DRM you still have to unwrap it or crack it:

https://mr_goldberg.gitlab.io/goldberg_emulator/
> You don't describe the problems with anywhere near enough detail to guess at what the underlying issue might be.

That's because this is the HN comment section, not the f.d.o bug tracker.

Since you seem to care, what I'm seeing is likely #2220, though the real problem for me is that dmesg output is not particularly helpful on its own and it's the entire desktop that crashes (as opposed to a single application that you could set Mesa/amdgpu debug flags on.) The fact that it "only" crashes about once per week complicates things further; aimlessly enabling debug options would probably result in getting buried in logs.

[drm:amdgpu_job_timedout [amdgpu]] *ERROR* ring sdma0 timeout, signaled seq=24191109, emitted seq=24191111
[drm:amdgpu_job_timedout [amdgpu]] *ERROR* Process information: process pid 0 thread pid 0

This is really kind of a debugging worst case. There's pretty much no useful information here.
They could have say it in more neutral way:

> A solution designed by a small group of people is likely to produce a system that replicates trends specific to this group and are not universal enough for our need.
If purchasing is not ownership, then pirating is not theft.

I think more technically-gifted people need to look into these “subscription” systems, in order to find workarounds. Because if it comes with my car, _it’s mine to do whatever the f**k I want with it._
Another option could be to have a tmux session open for each of your projects, although of course this wouldn’t survive reboots.
You don’t need to acquire a phone number from the country you’re in. Any phone number works on Signal. There’s no long distance.

In EU countries you can easily and anonymously get a US number via the internet that works fine on Signal. There is no requirement that the SIM card in your phone be the number you use to register on Signal, or that the number even be a GSM number.

My Signal number is a Google Voice number, for example. Anyone with access to a US GSM number can create these; many are for sale for anonymous payment methods.

It’s easy to use Signal anonymously in any country that has mostly uncensored internet.
I like cheese goldfish crackers, and don't really care for speculative fiction,

We worry about Elon of late, and really hope he doesn't end up going full Howard Hughes.

Have a great day =)
I am not at all surprised. Kids these days have no idea what CPUs can do. ;)

I periodically have interview candidates work through problems involving binary search, then switch to bounded and ask them how to make it go faster over N elements, where N is < 1e3. The answer is "just linear search, because CPUs really like to do that".
Meta gets a lot of flak for privacy, but at the same time, they end to end encrypt the majority of communication happening globally (Whatsapp+Messenger), at cost to the company, with no obligation to do so.
It's not whatboutism when there's literally no proof that they are doing mass dragnet spying on western residents. And when we do have tons of proof of western governments doing exactly just that

Again, it's a trendy buzzword to use but it literally isn't a catch all shield to argue that it's fine when we do it. When there's no proof of something happening, maybe we should focus on the thing that we know is happening instead of chasing literal ghosts
Mr Meeseeks with extra steps.
That's assuming he sold it as it vested. If he held it today, it's near the same price as it was in 2019
This looks like a list of countries that:

- have digital partnerships with the EU where the DMA or very similar regulation is/may be in effect or soon to take effect (e.g. Canada, Switzerland).

- countries where US companies are limited in providing advanced AI tech (China)

- countries where US companies are barred from trading, or where trade is extremely limited (Russia). Also note the absence of Iran, Afghanistan, Syria, North Korea, etc.
Despite being less wealthy and diverse in both language and culture, China and India produce more tech unicorns than the EU. Several smaller countries, like Singapore and Israel also do far better than the EU on a per-capita basis.

I'd attribute most of the gap to regulatory and cultural difference.
> If you want me to trust your system, show me the complete source code

I think this is a bit extreme and not really plausible for something like messenger at its scale.
Tesla Whistleblower – 'Autopilot' System Not Safe Enough for Public Roads
WhatsApp has always allowed key verification (at least since they've supported encryption), as far as I remember.

> It’s like basic 101 cryptography if you design an encrypted protocol that isn’t using a trusted third party for key verification (like certificate authorities in TLS/SSL).

SSH/TOFU is one model, PKI is another. Both have their respective merits, especially when combining PKI with certificate transparency.
ActionRetro has you covered:

https://www.youtube.com/watch?v=1hc52_PWeU8

https://www.youtube.com/watch?v=PGWpGMrroi8
Well, lets get an LLM to translate one of the not understood human languages first.

Could we build a chat GPT for whales to use, with this approach, sure. Does that get us any closer to translating it. NO, because without shared context to start building connections and relationships its highly unlikely that were going to find commonality.
> 8. On linux, do a `sudo modinfo zfs | grep version` to see the version number

Even easier than that, type "zfs version"; it will report both the loaded kernel module and the userland version.
Cabinets of curiosities laid the foundation for modern museums
I vaguely remember reading about a research effort into this earlier this year, and I'm positive it wasn't what sp332 linked to. Would be glad if I can find the link.
I have a feeling they will fight this with all the lawyers and lobbyists and it will not come to pass.
"... the owner of the social network cannot resell data to a third party)."

Not sure I understand. Social media operators do not sell data. They provide access to computer users, acting like a Trojan Horse. ("Our app is installed on millions of phones. Millions people use some individual's website to communicate with each other." Zuckerberg, Musk, etc.)

Perhaps "resell" refers to when social media companies buy data. What prohibits them from (re)selling it. Maybe the seller's terms would prohibit transfer to any third party.
Larian Studios? Been making games since 1996, and while all aren't the massive succcess that DOS2 / BG3 are, they've always been there just pumping out products.
LibrePGP