skysight-inc/HackerNews huggingface dataset:
To be clear, the "noble savage" trope I'm referring to is the idea that pre-agricultural societies were substantially less violent than agricultural and industrial societies. This does indeed seem to be the claims you're making.

Your thesis focuses almost entirely on resource scarcity, not the prevalence of violence.

> However it is my claim that pervasive violence was caused by QME via the creation of domination based systems. You can read my thesis here:

And your claim has a massive hole in its logic: Proportionally (that is, how many people out of 1000 died violently) violence decreased with the advent of agriculture, not increased. The violence that did exist was larger in scale but so were populations. Violence became less pervasive with the advent of agriculture, not more. Your claims are based on the false premise that agricultural societies were more violent than hunter-gatherer societies.

The idea that violence was less pervasive in pre-agricultural societies was the popular view (the Rousseauan view, if you've read the literature) for a while up until the 1970s. But it is pretty firmly contradicted by the available evidence we have today. Both archaeological and case studies of existing hunter gatherer populations show rates of violence substantially larger than both agricultural societies, and industrial societies - on the order of 5-10x more violent than the 20th century despite two world wars. You can still find academics that insist on the Rousseauan views on hunter-gatherers, because they've used that assumption as the foundation for a large body of their work. But that doesn't make it true.
It's very much only approximately phonetic. This is painfully obvious when you compare with a language like Spanish that has very few exceptions to the 1-1 letter-sound mapping (and even those are fairly consistent). And yes, I did learn to read with phonics.

But for the real difficulty learning English, consider all the forms of "be" and the weird rules for which one to use. (Spanish is only dubiously better in this respect; there are still a lot of verb forms you just have to memorize, but at least you can follow actual rules on which form to use.)
> edited to tone down a bit

How generous. The comment reminds me of this passage in C. Northcote Parkinson's famous 1957 book:

"The man who is denied the opportunity of taking decisions of importance begins to regard as important the decisions he is allowed to take. He becomes fussy about filing, keen on seeing that pencils are sharpened, eager to ensure that the windows are open (or shut), and apt to use two or three different-colored inks."

How can it be that in HN a comment like this, which is all about trivialities and the personal sensitivities of the commentator, and which contributes nothing relevant to the matter at hand, receives the most upvotes? Is this comment somehow pinned to the top instead?

Many here seem just disparaging about Reddit, but if you want to see an actually useful and intelligent comment from someone who actually knows something about the subject, take a look here: https://old.reddit.com/r/C_Programming/comments/18fzr1a/a_pu....
I'd expect at least that level from comments on HN.
Green Halo from Oxygen in Sprite Tops
How to symbolicate Apple's private frameworks
Agora also doesn't return red shoes for the search query "red shoes". Seems like you haven't fully solved the problem yet :)

From a technical perspective, crawling 25M products is impressive but the search itself doesn't provide much value to me. I already use large e-commerce sites (amazon, wallmart, ...) and targeted ones (Nordstrom, SSENSE, ...). Sure I may not be searching through all the shopify, wix stores but I need to know why that's valuable to me to begin with. Perhaps understanding the value prop of SMBs and educating me about it would be a better positioning for Agora than simply being a search engine.
True. The app’s sort of like an insurance. Gives you peace of mind if that makes sense? Last year I launched a version that only rang an alarm in case of theft. Users suggested that it would help if it notified them on their phone so I set up a calling mechanism instead. Lemme know if you have any feedback in case you end up trying it :)
I interviewed at Infarm a while back. The process was pretty great, and I got an offer.

One of the founders took me on a tour of their Berlin factory, and it was super impressive - they had adapted these gigantic 3 storey automatic German tool storage cupboards for growing.

I thinking I would accept, when on the last day I was walking back from a function with one of the team members. I mentioned that I was leaving because I didn’t like the amount of politics at my current place, and he stopped in his tracks for a moment, then said “yeah…”.
As part of the industry, I can tell you I've personally found dozens (hundreds?) of vulnerabilities per year for the more than decade running of my career. The same is true of my collegues.

I have met "cybersecurity teams" who are "tool monkeys" in the way you suggest. Usually these individuals are part of an extended compliance team. They are trying to check compliance boxes by having some level of automated scanning, because their parent organization/team can't/won't staff professionals capable of this or capable of scaling it or focusing attention on where it matters.

I don't want to oust you for where you work or your role within those companies - but really surprised to hear that there's no inhouse pentesting and no in house red teaming. I haven't worked at a company yet (on my fourth) that matches the experience you described.
From what I remember life in communist Poland was better than life in Soviet Union.
My article was ultimately arguing that we could just continue using the current OpenPGP standardized OCFB-MDC mode indefinitely without undue risk. So it would probable be more valid (and probably easier) to argue against that directly. I don't see the point of arguing about what GnuPG is doing.

Is the current RFC-4880 approved by NIST?

>...the same session key can/could be used with different AEAD modes, ...

How would this be possible in practice?

>...a downgrade attack is possible.

For the medium in question, where a message/file is encrypted and then flung off into the either, how would any sort of downgrade attack be possible.

> ...à la [1]...

That reference is about an entirely different sort of medium, specifically what part of the paper is relevant here?
Things aren't actually that simple. In terms of preventing fraud by the merchant, it's similar to credit cards in that the merchant needs to have a relationship with a bank in order to process ACH payments. That bank does underwriting on the risk of the merchant and has fraud prevention mechanisms in place.

For someone other than a merchant to transfer money out of your account with just your bank details, they would have to either try to pass a fake check or set up your bank account as an external account that they can transfer money out of to one of their own financial accounts. But external accounts are typically verified with test deposits before they can be transferred to/from.
ESA has decided to end E3
Oh, man! Now that you say this I realize that I knew that you could write checks to ‘cash’, but it’s been _so long_ since I’ve even thought about this I forgot!
Saturday I had done a rare deep clean of my desk — including my keyboard.

I gave it a light tap, the key popped back up to its normal position, and hk -w started working as expected.

Whenever I clean a keyboard, it is customary for me to open a test app afterwards and press all the keys to make sure they work. That said, whenever I'm cleaning a keyboard it usually entails a full keycaps-off disassembly, but nonetheless I think it's always a good idea to go through a full function test afterwards.
I should have made the scope of my comment more clear: the Google-bashing was internal.

I honestly could not care less what the marketing spin was; internally, we were being told things that we knew to be false.

I'm speaking specifically about the "absolute technical impossibility of providing certain information residing in the iDevice to anyone, even when the request was accompanied by a search warrant", which was the mantra circa 2014. The market differentiator was "we care about user privacy, in stark contrast with Google, who monetizes all data on their devices".

That was horseshit, as a specific security team regularly handled exactly those requests ... and heaven help you if you pointed that out in any discussion with management.

Things look a lot different from the inside.

(edit: s/piracy/privacy/)
https://www.videogist.co/videos/a-change-in-the-weather-1811
the actual reason for mandating companies to spend on cyber is because they are cutting costs on SRE/Ops by outsourcing all KTLO work to India and other offshore countries. If you ever looked at average S&P500 company IT Budget, there will be nontrivial amount dedicated to WITCH (Wipro Infosys Tata Cognizant HCL and friends) for outsourced KTLO work.

This makes it impossible to do anything meaningful de-novo on a high level, like create a good security architecture as a platform for all dev teams, or adopt a new security platform.

Outsourced companies do only a piece work on a ticket by ticket basis and require very specific instructions upfront.

Mandating companies to keep inhouse cyber staff makes it possible to grow talent inhouse and do high level designs of platforms to keep stuff secure
I am of course aware of that. We're talking about the semantics of the word recall however.
I noped out of Dropbox when they started requiring the installation of a kext for the macOS client to function - it signaled a lack of respect for the boundary between my system/data and theirs. This news has me feeling vindicated in that decision.
Basically it’s Amazon
Author here. Yes, this filter only produces point estimates; it does not also output a confidence interval. I suspect our construction could be modified to output a covariance/confidence interval.
Saved the real answer for the last sentence...

> "It looks to me like the cells that normally would have formed the equivalent of our index and middle fingers died off in a strange event when the flipper was forming while the calf was still in the womb," Cooper told the outlet.

Gonna give this article a clickbait rating
https://www.videogist.co/videos/porting-cp-m-to-a-brother-su...
You might be referring to Marina del Rey which has had much development in the past decade.
I'm a full time red team. Depends on your org, but you're not ready for a red team until you get the basics of blue straight.

Most of our blue is threat and anomaly detection. They spend a lot of time in tools, sure but its usually a SIEM like Splunk or similar tools for event correlation and behavior detection like Crowdstrike. Qualys isn't going to find custom written malware using common utility as a C2 channel.
Your local public library is a great source for these--they even have Blu-Rays! I used to take out disks all the time, until my kids came along
I think there is one other unaccounted aspect that the article doesn't acknowledge.

I've never seen a SRE lead go to prison for an outage, but as of late a few CISOs have been charged, convicted, and sentenced to prison for failings on their watch.

Cybersecurity may not be special but the results of a failing there are unique compared to SRE work.
I think the camera analogy is much more apt than the engine analogy, so this article was intriguing, but unfortunately the author falls into the rhetoric they decry when they complain about equating black holes with God, which is to just pull out a flourish like "monkeys at typewriters all the way down" to casually step over the difference between intelligence and mere computation, or to equivocate what is observed in neural networks with "intelligence" at all, and then by way of disclaimer to then dismiss intelligence completely. It would be much more interesting to discuss how machine learning gives us a lens into latent structures in data, and where that could be applied in the future, or even what that learning says about what we don't know about intelligence. And I was hoping that's where this would go, but the article seems to be attempting some grand theory of everything that's unlikely to have a practical application, which makes it difficult to discuss without first blocking out the millenarian aspects.
Oh nice, you deserve great things in life for this comment!
> what should Israel do? Pack up their bags and leave?
> That is exactly what they should do: End the occupation.

If you'll ask Palestinians ending occupation means exactly that, Jews leaving, thus the famous slogan, Hamas charter, etc.

I think you are being deliberately obtuse at this point, so this conversation is over on my part.
Super cool product! I'm currently using a list of Shopify stores, so it's still limited (i.e. wanted to start with a relatively small list to focus on the search experience). I'll submit your URL to the crawler now. If you want to reach out to support @ searchagora.com , I'd love to get your feedback as a Shopify store owner.
Not yet, as far as I'm aware. The current flow involves a DSLR for capture, COLMAP for camera parameter estimation, one codebase for training a teacher model, our codebase for training SMERF, and our web viewer for rendering models.

Sounds like an opportunity!
Andrew "The Annihilator" Ngai Three-Peats World Excel Championship
How did you detect that it was a Shopify store?
Yeah, and my team and larger cyber org was under risk management, until some new exec decided to shift us under the technology org (a decision I do not agree with due to conflict of interest).
The "AI" Drake/The Weeknd song was not created by AI -- it used AI voice synthesis to recreate Drake/The Weeknd's vocals on top of a human-created song. If you're considering that to be AI-generated, I would point you to the many songs using vocals by Hatsune Miku which have been made for the past 15+ years to say that this is nothing new.

The rest of the stuff you've created is meme content, which while funny, is not a serious threat to Hollywood.
Term Rewriting
All these details and more in our technical paper! In short: SMERF training takes much longer, SMERF rendering is nearly as fast as 3DGS when a CUDA GPU is available, and quality is visibly higher than 3DGS on large scenes and slightly higher on smaller scenes.

https://arxiv.org/abs/2312.07541
Elon Musk's X ad revenue reportedly fell $1.5B this year amid boycotts
They did have a feature similar to this, user-submitted subtitles, but the feature was shuttered.
Nice discovery :). Check the developer console: it'll tell you.
Can't even see the website, just a big "YEWS IS DESIGNED FOR MOBILE"
a lot of your suggested vulnerabilities could be prevented from appearing if company just hired a person who can configure SAST and WAF and etc solutions (solving a class of security problems from showing up on a platform level, not on per each vulnerability instance level).

Why rely on an in-house redteamer who may find one or two vulns per year, or may not.
Is not an LSTM basically a kalman filter? Are the attention and transformer mechanisms necessary?
This is a great series of "s,ny" analysis :
https://youtube.com/playlist?list=PLs13oSKi_qiuwDIYaQROhJr1F...
Think about what you're asking for.

Until GenAI is good enough, there will be zero examples.

But the moment it becomes good enough, it's game over for everyone in that field of work — at current gpt-4-1106-preview prices, it's cheaper to generate a complete new novel from scratch than to buy a single copy of a paperback in a closing-down sale.

There's no intermediate state where the AI and the humans are both competitive on the marketplace, just an adjustment period where businesses and employees don't yet realise they're redundant. And an endless tide of mediocrity overwhelming the publishers until then because the cost of creation is so low.

And that transition… is kinda already happening with image generation, where the AI temporarily wins awards until the awarding body decides AI aren't allowed to.

The impression I have is that artists who like their role turning into "editor" seem to be fine with this, the ones who actually enjoyed coming up with novel art from scratch seem to resent it.

(It's entirely possible it will take ages to get good enough in other domains, but the evidence you're asking for will only come when it's too late to matter).
In some orgs, that is the case. In other orgs, risk management might be a functionally absent, with legal teams being reviewers of contracts and abdicating that role to outside counsel.
Cool project but Shopify already has this. https://shop.app

https://shop.app/search/results?query=red%20shoes
> It really doesn’t make sense for cybersecurity to have its own special snowflake process for things. It does not make sense operationally, philosophically, or socially. It does not make sense to sustain systems resilience. And it even does not make sense for software security.

Sorry, but it actually does make sense in multiple ways.

Firstly, the core purpose of cybersecurity in the C-suite is to ensure the bottom line. System resilience is not the priority, the priority is the stock price. That means that it's way more important to triage an issue, collect evidence, determine impact, and see how many ways you can legally hide evidence or manipulate the situation to deny you ever even had a security incident. The quieter it stays, the smaller the impact to the bottom line. Keeping compromises to a minimum, improving UX, meeting modern best practices, etc are like the farthest things from their minds. And the people who run the company dictate what these teams prioritize. So to "the company", there's a good reason why they focus on their own thing.

Secondly, security is really frickin' hard. Humans are not great at being masters of many things. You need a specialist who understands security well, and has the tools, and training, to do security-specific things. Why do you think "platform teams" (aka the new-new-sysadmins) exist and we don't just have developers build their own platform? Because there's ops crap in there that devs will never know, and shouldn't need to. Humans work more efficiently when they can focus on specific things, keep context switching to a minimum, and maximize their specific knowledge to a small domain. That includes security tools, practices, policies, etc.

Thirdly, because of the competing priorities of security, and the specialization needed to truly do it well, you have to have a "security process" that people who aren't security experts can follow. You also want a "security process" because processes in general are useful tools to keep things working correctly. Even "security people" should be following a "security process". And there needs to be "security people" to come up with the process (ideally in collaboration with the other teams).

What you don't want is bad process, or bad teams, or bad special snowflake solutions, etc. You want it to be supportive of other parts of the business, rather than a hindrance. That's what DevOps is all about - getting people to collaborate together, enabling self-service, increasing efficiency, improving quality, reducing waste, etc, etc, etc. You can do that with security too, and it doesn't mean you have to get rid of your security teams/solutions.
so. how is yews pronounced
this whole blog post suffers from the point of view that security is a state.

its not. its a process.

It never ends, and you need to work at it constantly. or to put it in common terms :

Its about the journey not the destination.
Be careful with this one! Luma's offering requires that the camera follow the recorded video path. Our method lets the camera go wherever you desire!
This is amazing for finding cute collectibles from my favorite TV show that I would otherwise not noticed among random t-shirt and other "slap the picture and call it co-branded" products! I'm not super sure how long it is going to be around, but I think I'm gonna keep playing with it for a while.
Sigh. I don't have the docs in front of me, and even if I did, darned if I'm touching those diabolic tomes without a 10-foot pole and a paycheck. But they do say something along the lines that all change requests have to have some kind of a ticket. The good/bad part is that it doesn't specify exactly what that means. If you can find an enlightened auditor who accepts an explanation in the PR, awesome! There's no guarantee that the _next_ auditor will see it the same way. The whole audit process was a back-and-forth with explaining why we think our controls satisfy the request, and the end result was a clean report.

> it isn’t SOC2’s fault, it is the fault of auditors who are afraid to not just do what everyone else does.

There's some liability for them if they're too lax. Suppose a breach happens and a given control, as written in the spec, would have prevented it. It could come back on the auditor who signed off on a clever interpretation of that control.
In SD you can add words like twins, brothers, clones, repetition and copy to your negative prompt. It won't fix the problem, but it will help.

Would be a lot easier if AfterDetailer could handle dynamic prompts.
I chose Mithril with JSX for a real startup's main product. It felt like what I expected React to feel like, and it scaled with no issues. The only downside is that everyone on your team is anxious that they're missing out on marketable React experience.
> that wasn't really 100% cpu

Can you explain?
Collaboration is a thing at the Big G :)
There's a lot of water you're carrying there, Stan.
Not OP but:

"Has the site a /products.json file?" is a good first check :) And if it does, "Does that format match with the format a Shopify store?" is another good followup question.
I think it depends on who’s nearby.
YEWS IS DESIGNED FOR MOBILE
You know what app already does all of this and better? Facebook and people hate it.

Twitter is not going to do better everything app then Facebook.
own-horn tooting, but... don't:

https://grugbrain.dev
PPE is the last resort when other mitigation measures are inadequate, but positive-pressure respirators (either powered air-purifying or supplied-air) are really very comfortable. No face seal is required and you've got a constant flow of cool air. Spray painters, asbestos workers, media blasters and many welders will wear one for the majority of their working hours.

Engineered stone is undoubtedly more hazardous than natural stone, but (as the researchers quoted in this article suggest) there is no safe level of exposure to respirable crystalline silica. The problem of silicosis long pre-dates the advent of engineered stone and will remain even if the product is banned. If I were working with stone - engineered or natural - I'd want a respirator unless I was absolutely confident in the mitigation measures in place.
Wow! I thought I was familiar with the history of the web, but I didn’t realize there were pre-Mosaic browsers!

Just to confirm: you are referring to this link in your profile, correct?

https://github.com/gulkily/pollyanna

Edit: glad to see w3m in the supported browser list!
Self serving? The CEO of IBM is an Asian man. His discussion was with a white man.
Or be a rapist.
https://archive.ph/NW95o
Disclaimer: I hate when headlines use "amid". Too often it suggests cause and effect that isn't there. Even when it doesn't, it's flabby writing. https://www.theguardian.com/media/mind-your-language/2014/ja...
I hope to release code in the new year, but it'll take a while. The codebase is heavily wired into other not-yet-open-sourced libraries, and it'll take a while to disentangle them.
Oooh, thanks - will check it out! I got myself a 4090 earlier this year before the price hikes, so I'm hoping to add VR in 2024. Cheers.

EDIT: The FOV is pretty crap, but - if it's this light, headchecking would be far more natural. The fact that they'll sell prescription inserts makes it a native solution. (My previous Lenovo Explorer experience was with contact lenses, which I can't stand anymore!)