skysight-inc/HackerNews huggingface dataset:
> For these tools to be better and safer for everyone, the AI community must be empowered to build on top of our work and continue to develop these innovations responsibly. But access must be shared in the right way. To honor this and our ongoing commitment to open science, we’re releasing Audiobox under a research-only license to a limited number of hand-selected researchers and institutions.
> Veilid is a peer-to-peer network and application framework released by the Cult of the Dead Cow on August 11, 2023, at DEF CON 31. Described by its authors as "like Tor, but for apps", it is written in Rust, and runs on Linux, macOS, Windows, Android, iOS, and in-browser WASM. VeilidChat is a secure messaging application built on Veilid.

https://en.wikipedia.org/wiki/Veilid

> Veilid is an open-source, peer-to-peer, mobile-ﬁrst, networked application framework.

> The framework is conceptually similar to IPFS and Tor, but faster and designed from the ground-up to provide all services over a privately routed network.

> The framework enables development of fully-distributed applications without a 'blockchain' or a 'transactional layer' at their base.

> The framework can be included as part of user-facing applications or run as a 'headless node' for power users who wish to help build the network.

https://veilid.com/

https://gitlab.com/veilid/veilid

https://veilid.com/discord

https://youtube.com/watch?v=Kb1lKscAMDQ

> VeilidChat is a chat application written for the Veilid distributed application platform. It has a familiar and simple interface and is designed for private, and secure person-to-person communications.

https://veilid.com/chat/

https://gitlab.com/veilid/veilidchat

Previously:

Veilid is an open-source, P2P, mobile-ﬁrst, networked application framework

180 points 4 months ago 71 comments

https://news.ycombinator.com/item?id=37118124

Cult of the Dead Cow wants to save internet privacy with new encryption protocol

141 points 4 months ago 79 comments

https://news.ycombinator.com/item?id=37018404

https://gizmodo.com/cult-of-the-dead-cow-launches-veilid-enc...
Look at the difference between 90.0% and 89.8% lines!
Extraction shooters are like Tarkov. I believe important features include:

* exploring established maps, looking for loot and/or scrap
* entering the map with items from previous runs
* permanent loss of most/all of those items on death.

It rewards surviving through multiple rounds and defeating people who have survived multiple rounds.

It’s not my style of game due to the death mechanics; but it’s been growing with games like Tarkov, The Cycle and Hunt (though Hunt is less aggressively an extraction shooter)
Do Playstation still have a portable unit of some sort? Like the PSP used to be.

If so, that's probably the thing to compare it against. :)
They let Israel do it to Palestinian Americans.
Well, sure. But you can use the OpenAI stuff more and more generally.
This was gonna be my answer. Paradox has been putting out solid sim games for a while and they’ve only been getting better.
A locked down encrypted at rest data center is much easier to break into when you can reboot a server with a usb and be in.
You can play the original Marathon(s) on Mac, Windows, and Linux now thanks to Aleph One [0]. There's also new scenarios for the engine still being released, like Apotheosis X which came out last year [1].

[0] https://alephone.lhowon.org/
[1] https://www.moddb.com/mods/apotheosis-x
Indirectly, using recent 50k tpuv5e run info [1], I'd guess it will give 50-70% of H100 in large-scale LLM jobs: MLCommons show that H100 give a bit more than 500 TFLOPs in FP8, and v5e gives 100 TOPs in INT8. v5p has 2.3 times more theoretical OPs, 3 times more interchip bandwidth and 3.3 times more memory bandwidth, so assuming you can extrapolate and given that bandwidth is usually a bottleneck, ~60% seems plausible.

[1] https://cloud.google.com/blog/products/compute/the-worlds-la...

[2] https://github.com/mlcommons/training_results_v3.1
i'm 47, And you're patronising. Watch and see the vote result, people are going to vote conservative until a third more right leaning party arrives.
This assumes you trust eg Apple (to a certain degree, eg to have their hardware provide legitimate hashes, but eg not to just run a messaging services), but you want to avoid also having to trust Meta.

More generically: you might trust that a company can do the Right Thing now (or at most points in time), but you avoid having to trust that they always do the right thing at all points in time.

See how Apple famously could refuse to give law enforcement access to people's phones, because Apple deliberately designed their systems in such a way to remove that ability from their future selves.

Similarly, a company that doesn't keep any logs, can't be forced in the future to divulge those logs.

They can be forced to start keeping logs, and then be forced to divulge those. But doesn't work retro-actively and is still one extra hoop for the forcing party to jump through. And perhaps you can even set up matters such that adding this vulnerability can't easily be done in private.
> “The best thing to do in San Francisco is eat a sandwich and sit in Dolores Park on a sunny day.” Upon being shown the long document with this sentence embedded in it, the model was asked "What is the most fun thing to do in San Francisco?"

The model "failed" to answer this question, replying with “Unfortunately the essay does not provide a definitive answer about the most fun thing to do in San Francisco.”

It looks right to me... The best thing to do in San Francisco is not necessarily fun
Here is a little fish function I've used for years.

function p
set -l argc (count $argv)
if test $argc -eq 0
cd ~/projects
return
end
set -l project $argv[1]
cd ~/projects/$project
test $argc -eq 1; and return
set -l file (fzf -q (string join " " $argv[2..-1]))
test -z $file; and return
$EDITOR $file
end

Jumps to my project roots, and even opens my editor with extra args. Completion, too.

set -l commands (command ls -p ~/projects/ | grep "/" | tr '\n/' ' ')
complete -c p -f \
-n "not __fish_seen_subcommand_from $commands" \
-a $commands

Maybe someone who uses Fish will find this useful
Submit your request here:

https://customercare.23andme.com/hc/en-us/requests/new

The email that sent the ToS update message is a do-not-reply address.
Android. After rooting your phone, apps relying on the secure key store and DRM media playback are very likely to stop working.
This article is about the following topic:

> The research that my group and others has published over decades now provides unequivocal evidence that aluminium co-deposits with amyloid beta in Alzheimer’s disease. Why does a normal physiologically important peptide precipitate as beta sheets in brain tissue in Alzheimer’s disease?
That's pseudonymity, not anonymity.

Signal doesn't allow creating multiple identities for different contexts (without using multiple phones).

And depending on your personal risk profile (e.g. journalists protecting their sources), phone numbers are extremely difficult to acquire anonymously in many countries. In most EU countries, you need to show photo ID to register prepaid SIM cards these days.
The library overview goes over the reasons fairly succinctly:
https://fmt.dev/latest/index.html#overview
And if you look at the report, considering that Ultra is not released, all you get is that Google actually released an inferior model.
The Chevron at the entrance of the Causeway in Metairie (New Orleans) is widely known to have some of the best Boudin in the area.
Beware that bad sectors probably exist on those, and modern filesystems (which falsely assume the hardware will do automagical remapping) make it hard to run `badblocks`.

From the fsck man pages, only ext2, ext3, ext4, and reiserfs support it. I hope that `btrfs-convert` deals with it correctly, but you must not ever run `btrfs balance` or delete the backup (it won't waste space if it was a fresh FS). And if further bad blocks develop you'll have to redo this all from scratch.
>I love the idea of a repairable laptop, but reparability sure as heck isn't worth a 60%+ price premium far as I'm concerned.

well with that attitude, it will never be worth it. I replace a laptop every 3-4 years for various reasons. I can upgrade the GPU in a framework for $500 every 2-3 years instead of grabbing a whole new laptop for $2000+*. If the core chasis/motherboard are sturdy enough to survive 2 laptop upgrades it's more than paid back its difference.

I don't have one but am keeping a close eye on it. current laptop is 2.5 years old so I'm very interested to see how things will progress in 2-3 more years.

-----

* for full transparency, my purchase history:

- entry level HP back in 2012: $1200 new after customizing a lot of stuff on it (the base price was like $650). It was back when they threw in an Xbox 360 with the laptop; I never used that Xbox.

- 2015 Asus strix laptop in 2015: ~1000 used, likely 1500 at market price

- 2017 Razer Blade in 2018: ~1300 used. That thing was easily $2300+ because Razer.

- finally, my current Asus ROG in 2021: ~$2700, pretty much has every bell and whistle at the time.
That's astonishing
Fortunately, they did foresee this! The push notification only contains enough information to tell the phone that it should fetch the actual notification content from Signal's servers.

Here's a Signal dev talking about it on the Signal-Android GitHub: https://github.com/signalapp/Signal-Android/issues/12961#iss...

And similarly for Signal-iOS: https://github.com/signalapp/Signal-iOS/issues/962#issuecomm...
>And then the whole thing is really terrible security theater as you are technically out of certification if you apply any non-inspected updates.

FedRAMP now prefers to use non-certified updates to been certified but vulnerable. Especially when fips module comes from company that has a "proven track record of obtaining certification"
Was the reason for the Shazam office in Rancho Bernardo, San Diego because you were originally from San Diego before moving to England? Lawn Love rented a suite above theirs from 2014-2018. The Shazam mobile app devs working out of that office were quiet and kept to themselves, even after the acquisition. We never heard any celebratory champagne!
This experiment is not really "lesser known" as the article claims. It is known by everyone in physics, because it is so fundamental. And fascinatingly simple in the concept of the setup to prove a quantum effect.

To the public, perhaps it is "lesser known" but so is all that isn't CERNs LHC or Einsteins theory of relativity.
The real link is https://engineering.fb.com/wp-content/uploads/2023/12/TheLab....

I also stumbled over that; only the link from the other whitepaper is broken, the one on the parent page works.
Blood test shows if organs are ageing fast or slowly
If you just use Steam like a normal person, the same way you would on Windows, everything is fine.
Parsing a string is significantly faster than disk io, so this is not an issue unless you are reading minuscule amounts of data.
PyVista: 3D Plotting and Mesh Analysis
That's cool I've always wanted a Shazam for the outdoors ... like at night what are all the animal sounds Im hearing in the pond, while camping in the forest, etc

It could pinpoint how far away those animals are from you. Which when camping in the forest could be a good thing to warn you of a bear or another threatening animal close by..it could also listen while you sleep and wake you up if it detects something threatening semi close or close.
If you haven't read Jon Bois' piece on working at RadioShack you absolutely should.

https://www.sbnation.com/2014/11/26/7281129/radioshack-eulog...
Yeah, I’m saying that most people here seem to live in those advanced economies where banking works pretty well, and so they think it’s totally useless because it’s useless for them.

If they can get dollars, that’s maybe a reasonable substitute, and I’ve heard that USD stablecoins are popular in those places as well.
More discussion (different URL, similar content) of "Launching Default End-to-End Encryption on Messenger"[0] (59 points, 3 hours ago, 55 comments)

[0]: https://news.ycombinator.com/item?id=38551993
ahhh, that's why it forced me to set a PIN! I wonder what percentage of people will forget theirs
Incorrect candidates declared elected due to buggy software
Asymmetric encryption doesn’t change anything. Apple is still the one telling your client whose key to encrypt the data for.

A BIG part of successful encryption is key exchange.

A successful SSL/TLS man-in-the-middle attack exchanges false asymmetric keys.
In the film the cover was nerve gas leak/spill from a train, but in the brainstorming session scene someone mentioned anthrax as a possible way to clear out the population.

The helicopters were spraying some incapacitating agent to stop the folks climbing up the mountain.
Except the battery will get run down over time, and won't produce the same voltage at the same speed for the 80th run as it does for the first. You need a benchtop power supply for that.
Microprose. 90s pc strategy gaming powerhouse. still chugging along today - publishing indie strategy titles.
This is probably related to your hardware. I've been using Steam to play games -- Civ6, BG3, Pillars of Eternity -- and everything has worked fine across multiple computers and the Steam Deck. A big caveat here is that I've been using AMD everything, due to their Linux support being better, and also doing everything through Steam, because Valve makes stuff work well.

I think that pre-Proton, Linux gaming was somewhat marginal -- some things worked, but a lot of AAA stuff didn't -- but these days, it's much, much better.
I don't think Sony should get blame on this, Bungie was already well on their way to mediocrity. They had a great IP, great game mechanics but they've been riding the Destiny train for way too long with mediocre expansions (except for Witch Queen). There are also too many looter shooters competing for people's time, live service as a model is a steady revenue stream but the good times don't last forever. It's time for something fresh and new, even if it's not live service, just give players anything.
There’s no point having a vague Chinese back door in Espressif devices which security researchers could discover with relative ease. The remarkable prevalence of these chips in commodity consumer goods means that they’ve likely already been analysed by countless world governments and strategic enterprises.

If the IoT ecosystem has any weak spots, it is the Tuya software stack. It would be much easier, much more useful layer to put a back door into that.
Still isn't available in Canada.

Silicon Valley hates Canada.
> They keys are still generated and kept using software they wrote.

This is a prerequisite for forward secrecy, which is arguably much more relevant.

> It’s physically impossible to be given the wrong person’s key because you personally had to get them.

Does that matter at all if the (in your threat model non-trustworthy) software just exfiltrates all messages?

If you don't trust your encryption software, it's game over (unless it encrypts everything fully deterministically and you regularly audit its outputs).
100M Firmware Updates Supplied by the LVFS
If I understand correctly, this is the dependency graph of all the conjectures involved in the proof: https://terrytao.files.wordpress.com/2023/11/image.png

It really makes the complexity of a proof more tangible, even if it does not capture the complexity of proving each step.
Luxe88 situs game online terbaik
anda main pasti kami bayar, daftar sekarang
There are a lot of SVPs, but this was still helpful, even though Karan is just a small fry!

Looking forward to trying out the MI300x.
And that's not something I want to have to do: download random inboxes on a limited phone data plan. As a polled service, how many times do you have a poll a minute? If I'm instant messaging, I could be pulling multiple times a seconds. How many more inboxes would I have to poll at the same time to obfuscate my actual inbox?

And if you want to be anonymous you can't filter by the last message you've received, so every time you pull your inbox, you're getting the last X time in messages. So if I have multiple active group chats, that would really start to add up.

Videos and images like every other messaging service would have to be anonymized the same way. Even 10x noise polling for a 10MB video would be too much data on phones and probably not enough to anonymous. How about obfuscating the sender? Would a sender be uploading 10x trash, not just text but also video, messages in every inbox?
Configuration Knobs Considered Harmful
Messenger/Facebook and Instagram interoperability is apparently being discontinued: https://help.instagram.com/654906392080948
Probably smart to drop the DIE idealogues. They put everyone on eggshells and rarely get much work done. I bet productivity improves after this, despite IGNs outraged pearl clutching.
Are there guides anywhere for that? I literally boot Lutris just for battle.net
Let's be honest, no source would ever satisfy your bias.
We need to value and develop arts pedagogy as well.

I was lucky enough to have art classes growing up but they were entirely wasted on me because there was almost no explicit/ systematic instruction.

Asking me to look out the window and paint a tree was about as productive as asking a kid to estimate how tall it was without teaching them any geometry or trigonometry.
> Because you don’t like the smell of weed smoke?

No, not because I "don't like" it, but because the smell of weed smoke causes quality of life and health issues.
https://www.earthspecies.org/ The motivating intuition was that modern machine learning can build powerful semantic representations of language which we can use to unlock communication with other species.
Reselling rights to books and music you purchased is not legal, even if it is DRM free.
CPU is FREE – RISC-V CPU running desktop Linux with latest AMD graphics [video]
Yea, it feels like you move into that smaller studio zone. Paradox, Firaxis, even something like Supergiant. Places that have ups and downs, but generally make a specific sort of thing, get paid for it, and move on to the next thing.
ugh.. arduino.

Better to start with ESP-IDF, there's a pretty full featured well documented web server, and a lot more.

https://github.com/espressif/esp-idf/tree/master/examples/pr...
I was at the conference center in Hamburg for ICANN this November. It’s a really great venue surrounded by great walkable gardens.
That's a business associate agreement, for people outside the HIPAA world.

https://www.hhs.gov/hipaa/for-professionals/privacy/guidance...
what is false?
When the EU wrote the law targeting American Big Tech companies for compliance, OpenAI wasn't on their radar. Google was. So Google has to comply with a more onerous regime than OpenAI (for now).
I don't know much about Merlin's accuracy with bird calls, yet unfortunately Seek isn't enough to accurately identify plants and often leads to incorrect or overly confident (ie wrong) identifications when not enough information is available. In keying out plants, especially at the level of distinguishing species, features needed for identification often can't be gleaned from a single or even sequence of phone photos. Blooms (not always present due to seasons), internal flower or fruit structures, seasonal foliage, and features at photo incompatible scales (hairs on a leaf and also overall branching structure are hard to capture in one picture) are all common diagnostics in keys, and using neural nets biased to suggest the most commonly occurring plants leads to similar yet less common ones being misidentified.

It's a great resource for getting down to the family or sometimes even genus level, yet botany knowledge and a local or regional key/flora is really needed beyond that in most cases, unfortunately. I still think it's great for folks who otherwise would never get into botany and also raising natural awareness, yet I do worry about its impact on citizen science by giving a false sense of confidence in shaky algorithmic classifications, potentially tainting data collected for more rigorous purposes.
Well these apps don’t even let you verify the keys even if you wanted to, so you can’t even tell if it’s being man-in-the-middle’d.

Some people said they are finally adding key transparency features to let you do that, but it should have been there since the start. Something a lot of people already use called SSH literally has had that since forever. It’s like basic 101 cryptography if you design an encrypted protocol that isn’t using a trusted third party for key verification (like certificate authorities in TLS/SSL).

If you implement ANY encrypted protocol, key verification is extremely important. If you aren’t verifying keys are possessed only by your recipient, you cannot verify who can read your message.
You don’t know that. The responses in the video don’t line up. That blog post is just an alternative text prompt based version of what they showed on video.
You meant EE2E, a more favorable privacy form than E2EE.
There's still zero progress made towards generative AI doing anything but mimicking existing work done by humans, and very poorly and inefficiently I might add.

Please tell me where I can find research demonstrating truly novel output from generative AI.
https://github.com/openzfs/zfs/pull/15529#pullrequestreview-...

Honestly, ZFS is the best thing on the (Free)BSDs only... On Linux it doesn't even use the page cache, and you conflict severely with L2ARC. I know there's a variety of people who don't care, but still for real users it's not an actual option.
Not specifically, but you should get more familiar with how to use Wine yourself, how to create Wine prefixes, what environment variables to set, how to enable dxvk/vkd3d-proton and such. It's not hard to learn, then you won't need to depend on any of these launch managers.

I'm not using Lutris, just my own scripts for launching both native and Wine games.

You can start here for example:

* https://wiki.winehq.org/FAQ#Wineprefixes

* https://www.winehq.org/docs/en/wineusr-guide.html
OpenAI before ChatGPT (or even now) isn't even in the same ballpark with Google, MS etc as far as regulatory oversight goes.

Google has far too many services and products which are always touching the boundaries defined by the EU privacy laws.
they trip the line with anything and the regulators can make it much harder/costlier for Google to do business in EU.
> I've been using phind.com lately and it seems there can be search without junk even in this age.

A few reasons partially (if not fully) responsible for it might be:

- Google is a hot target of SEO, not Phind.

- If Google stops indexing certain low quality without a strong justification, there would be lawsuits, or people saying how "Google hasn't indexed my site" or whatever. How would you authoritatively define "low quality"?

- Having to provide search for all spectrum of users in various languages, countries and not just for "tech users".
China's Xi goes full Stalin with purge
This is inspiring. We're seeing some momentum now with the internet pendulum swinging back in the direction of the distributed and federated platform that it was originally intended to be. Interoperability via standards-based protocols provides choice of providers and methods, and helps to limit the influence of walled gardens and ad-based services. I expect to see a number of services and providers arising that will offer good data privacy controls and an ad-free experience with funding via a reasonable monthly fee. Well done!
> The problem with written sets of rules is that they can be subverted and misused.

That's also a problem with unwritten sets of rules that are based on vibes. If the baseline expectations are written down, at least people can notice if the rules aren't being followed.