skysight-inc/HackerNews huggingface dataset:
Yet it doesn't seem to really answer the question.

I get that what we're looking at a browser extension that relies on a bunch of webshit, some of which was malware.

As somebody not versed in "web3" specific webshits, I thought the point of a hardware token is that there was some kind of verification on the device itself. So this doesn't seem sufficient to "drain" a wallet - right?

My assumption would be that the computer running the malware never gets the key material directly, rather it submits some request to the hardware token, which prompts the user with the details on some external physical display. The user reviews the details, then does something in meatspace that causes the hardware token to sign the something in question and pass it back to the software on the PC.

So isn't it the case that the user would have to approve the malware drain transaction themselves? And if not... what's the point of these devices, anyway?
Yep, in ML, the head of the lab is always last author.... even if it was equal contribution work with their own PhD student.

The PhD student needs the street cred a lot more than a tenured PI.
Always thought QMail was the best option back when Postfix came out, but it certainly has won the top spot over time.
How’s SYCL proprietary exactly?
Don't call the go() function in setTimeout(), just pass go as reference.

Because otherwise you'll bomb the recursion stack.
nice. big diff seems to be cost. Could be useful for analytics workloads, i.e. read replicas.

https://www.ubicloud.com/docs/managed-postgresql/price-perfo...

Would be nice to see copy-and-paste instructions for setting up read replicas from RDS etc.
https://news.ycombinator.com/item?id=38120388

https://news.ycombinator.com/item?id=35614313

I thought there were a few large threads but could only find these :/
Ex-undergrad-assistant in a organic synthesis lab, here. I am extremely familiar with glass cleaning procedures, having done it nearly daily for one long semester.

Base bath is how you clean glassware.

The base bath was a _saturated_ solution of KOH (potassium hydroxide) in a 10-gallon PTFE (molded "teflon"). You knew it was saturated by the KOH precipitate at the bottom.

You take your "dirties", making absolutely sure they had no residual acid on them, and ever so slowly, ease them into the bath. 24 or 36 hours later, remove them and repeat with the next batch.

After a few dozen cycles, you have to change out the base for fresh stuff. For that, you needed a face shield, shoulder gloves, and extremely steady hands.

Tedious, dangerous work.
This comment thread will effectively be a modern two minutes of hate.
>Apple on Wednesday appeared to have blocked what Beeper described as "~5% of Beeper Mini users" from accessing iMessages

>Apple previously issued a (somewhat uncommon) statement about Beeper's iMessage access, stating that it "took steps to protect our users by blocking techniques that exploit fake credentials in order to gain access to iMessage." Citing privacy, security, and spam concerns, Apple stated it would "continue to make updates in the future" to protect users. Migicovsky previously denied to Ars that Beeper used "fake credentials" or in any way made iMessages less secure.

Not commenting about the ethics of all this, just wondering why technically Apple can only block ~5% of Beeper Mini users instead of all of them? Could this potentially be tied to the use of an email id as the iMessage handle?
It's a slightly different use case, but https://neon.tech may interest you and is actually Open Source (Apache 2) https://github.com/neondatabase/neon/blob/main/LICENSE
On the other hand, if I were laid off, I'd pretty quickly clean up my open source profile and get to creating some cool open source packages to showcase my work.

Though my intuition tells me that the net effect of layoffs is still negative.
General Motors, a company that advertised how safe their vehicles were, knowing about faulty ignition switches in their products but only deciding to perform a recall 10 years after they became aware of them.

https://en.m.wikipedia.org/wiki/General_Motors_ignition_swit...

Almost every manufacturer's claims about EV production, range, etc.

Almost every manufacturer's claims about how hard and expensive it would be to add different safety features and/or fuel efficiency improvements.
CPU-only?
I left the board in 2021 (link to that announcement is in the post).
> Those customers are not able to use iMessage to securely communicate with Android users.

Well, they can't now as a result of blocking Beeper. But they could — using Beeper.

It's one thing to argue that you won't open the platform because it's additional work to support that. But that argument degrades when they're willing to do the work to shut out unexpected uses of the platform.

If they want to ensure safety, they should do the extra work of making it possible to interoperate with iMessage safely. But safety isn't the priority and everyone knows it.
text message means SMS in my dialect, sorry
I imagine that's an automated thing that flags new accounts with games that suddenly are very popular (maybe with lots of referrals from discord?).
This seems to be Beeper's insincere attempt at dressing up their grievances to appear as if they were in advantage of the [Apple's] customer.

Apple has made it clear that they won't bring iMessage to Android. People who choose to invest in Android phones know they won't get access to iMessage.

It seems a bit entitled behaviour for someone to feel like Apple should be forced to bring iMessage to Android for any reason besides Apple's own choice, and that they know better than Apple on how to run Apple's business.
They seem to do PITR [1], not sure about other features. The docs and particularly the Postgres section of it seem very thin.

1: https://www.ubicloud.com/docs/managed-postgresql/backup-and-...
What would you say are the long-term negative effects of the biggest
nuclear diasters that we have had so far?
and what could be done better?
What would make you oppose building new reactors?

I dont buy the 100% pro nuclear speaking points.
Nor do I buy the 100% against nuclear speaking points

I do have a family who have suffered from the debris from Chernobyl.
as did their communities.
It depends. If the game state changes, say like a change in one player’s life total, then the loop won’t usually end in a draw. In the example above the opponent will eventually die.

In paper once a player has demonstrated a loop they must choose a number of times to repeat the loop and then the game is fast forwarded to the chosen end state. For example, a player might execute a loop that could gain them infinite life, but really they must choose a point to stop. Usually that player will choose 1,000,000,000,000 or another “essentially infinite” value and the game moves on.

There are infinite loops that can draw the game, but in a tournament game if one player can take an action that would end the loop, say by destroying one of the loop pieces, that player must take that action. Only if no player can end the loop does the game end in draw.
The 2017 law changed the way software development expenses are counted for tax purposes. 2023 taxes are the first taxes this rule affects.

Details:

https://www.onlycfo.io/p/new-tax-rule-is-terrible-for-softwa...
>finds a CEO who is as technical and strategic, as opposed to the bean-counters

Did you just call Gelsinger a "non-technical"? wow, how out of touch with reality

>Gelsinger first joined Intel at 18 years old in 1979 just after earning an associate degree from Lincoln Tech.[9] He spent much of his career with the company in Oregon,[12] where he maintains a home.[13] In 1987, he co-authored his first book about programming the 80386 microprocessor.[14][1] Gelsinger was the lead architect of the 4th generation 80486 processor[1] introduced in 1989.[9] At age 32, he was named the youngest vice president in Intel's history.[7] Mentored by Intel CEO Andrew Grove, Gelsinger became the company's CTO in 2001, leading key technology developments, including Wi-Fi, USB, Intel Core and Intel Xeon processors, and 14 chip projects.[2][15] He launched the Intel Developer Forum conference as a counterpart to Microsoft's WinHEC.
It was only a matter of time before a certain class of people figured out how to use the internet and subsequently ruin it. I'm more surprised it lasted this long.
See this related project: https://github.com/rvdveen/epaper-slow-generative-art
> Michigan Capitol Confidential is the news source produced by the Mackinac Center for Public Policy. Michigan Capitol Confidential reports with a free-market news perspective.

It's weird to me, even as a relatively free-market guy, that a paper dedicated to small government would be so firmly opposed to tax cuts. I wonder if the distinction between "corporate welfare" and "tax cut" is solely down to the administration responsible.
Would you be willing to add email-based sign-up? Some users, especially in Europe, may prefer it to using Google or GitHub accounts to log in.
I'm looking at older pics of Cassiopeia A from the Hubble telescope, and it looks substantially different. How much time needs to pass before a supernova is visibly different? My instinct was that something like this would change over thousands of millions of years, but I'm guessing that's wrong
last time I've seen sendmail in production was at a job back in 2014
I am sure virtually everyone understands "code signing" to mean what it has meant historically. The author of code signs git commits, or a tarball, or signing a package as in the debian, arch, guix sense. All of which typically share cryptography standards like PGP rather than rolling their own solutions.

Each maintainer has a signing key to identify themselves to the public without need for any central infra, and signs the packages they publish. Someone that accesses some centralized server or account will not be able to impersonate the key held by that developer or the signatures they issue.

This new provenance system and the fulcio system which it is based on, is a centralized setup where you use traditional, usually phishable, authentication with a SaaS, and then the SaaS takes your submission and signs it for you with a centrally managed keychain. Having done security auditing for many fintech signing systems, I can tell you I have almost never once seen anyone get this right, particularly when there is no accountability.

Is this done in a secure enclave with a public remote attestation of the software image running on it that I can locally compile and verify the matching hash of? Does that code enforce the participation of multiple distributed people to make updates, key exports, or key imports using shamirs secret sharing or similar?

Or maybe it is just sitting on an amazon box somewhere a few people ssh to from their daily driver macbooks ?

I don't -hate- centralized signing existing as an -option- if it is done very well and highly accountable (which fulcio is not, imo).
That said, -mandating- centralized signing on behalf of developers as the only path is really insulting, as though people who write software can't type a couple commands to provision a PGP key on a smartcard and publish their key to keyoxide which is strictly better in every way from a threat modeling perspective.

Speaking of Fuclio, this was meant to "invent" a solution for container signing, even though PGP multisig has existed from the start. No one used it because none of the major players in container software documented it other than the podman team.

https://github.com/containers/image/blob/main/docs/container...
https://docs.podman.io/en/latest/markdown/podman-image-trust...

Back to NodeJS, Debian and Arch already sign npm packages with PGP keys. It works fine. We need to let people actually do that with NPM. Tell me how many supply chain attacks have happened in Debian or Arch recently compared to NPM?

PGP may be a small barrier to entry, but it is a standard with solid smartcard support and works in practice. It should be the default recommendation to all developers, and end users should be able to set policies to only install packages signed by a trusted set of maintainer or reviewer keys.
> Apple has customers who want to use iMessage. Those customers are not able to use iMessage to securely communicate with Android users.

I as a Signal user want to communicate securely with Facebook Messenger users. Therefore Facebook must allow me to reverse engineer their services and make unauthorized systems to allow me to create a service to send messages to Messenger users from Signal.
Better yet, how about some dumb cars where you can't be killed by software code... there's no need for all these computers in cars these days. Keep it simple stupid. I think they just want to inflate the prices so much with all these extra useless features to force unequal access to personal transport.
If slavery was legal and about to be made illegal, would you argue the same point?
a 2024 base model civic in the burbs 2 hours out of NYC goes for $23,950, and will almost certainly have better QA than the tesla.

the media salary in the US is like 55k is a lot, esp. given the prices of everything going up, and given the alternatives.
https://www.mtggoldfish.com/deck/3933484#paper

This deck has gotten cheaper in the last couple years, looks like it's currently $2400 to build.
I always find it ironic when reporters talk about surveillance when they have about 100 ad trackers, shoveling keywords of the articles to advertisers so they can track and show specific ads to you.
>Apple Music blitzkrieging Spotify is bullshit.

What is this referencing?

>The lock on subscription payments is bullshit.

I pay for app subscriptions outside of the App store, since it is usually cheaper.
The quantum considerations have more to do with the molecular level. There are definitely quantum effects and considerations for what's happening at the level of enzymes and chemical reactions and they might matter with neurotransmitters at the synapse, and if they matter those effects could be amplified to neuron scale electrical impulses. There could be quantum effects that play a key role in sensory perception (we're talking the level of photons and molecules here too). You have to remember that biology is incredibly ordered and very physically small things matter so all these effects are on the table. Do they actually matter? Unknown it's complicated (outside of a few enzymes and systems where basic things like tunneling are clearly happening)
I have recently published an AI-related open-source project entirely based on compute shaders https://github.com/Const-me/Cgml and I’m super happy with the workflow. Possible to implement very complicated things without compiling a single line of C++, the software is mostly in C#.

> setting up the graphics pipe

I’ve picked D3D11, as opposed to D3D12 or Vulkan. The 11 is significantly higher level, and much easier to use.

> compiling, binding

The compiler is design-time, I ship them compiled, and integrated into the IDE. I solved the bindings with a simple code generation tool, which parses HLSL and generates C#.

> No proper debugging

I partially agree but still, we have renderdoc.
It's in fact the most credible journal (by acceptance rate)
That was years later, after more details of Russian interference had become public. The salient point is that Hillary conceded the election within hours after the polls closed — and Obama (the then-incumbent) didn't try to sabotage the Electoral College's vote to keep Trump from taking office.
Yeah. I’ve got all sorts of Apple stuff in the house. One apple ecosystem piece I adore is being able to copy paste between my Apple devices. I’d love it if that worked from my Linux workstation too. C’mon, Apple.
The article is not about ranking the languages per se, but about the drop in activity on stackoverflow likely due to chatGPT and a similar drop in PRs for github.
> This isn't an automobile where there are 50 alternative manufacturers

No, it’s exactly this. There are a ton of manufacturers all providing this product. It just so happens that Apple’s is one of the best, if not the best. And as has been mentioned, there are tons of secure messaging alternatives. It’s just that people prefer iMessage. This is not illegal or anticompetitive.

Imagine if someone claimed they should be let into an airport lounge of an airline they aren’t flying on, simply because their friends are there.
I disagree that the type of coding the LLM is doing here is "expert" level in any meaningful sense. Look for example at the code for the bin-packing heuristics:

https://github.com/google-deepmind/funsearch/blob/main/bin_p...

These aren't complex or insightful programs - they're pretty short simple functions, of the sort you typically get from program evolution. The LLM's role here is just proposing edits, not leveraging specialized knowledge or even really exercising the limits of existing LLMs' coding capabilities.
It's been said elsewhere here, but the ban isn't because of manufacturing. The stuff can and generally is handled very safely during manufacturing, and they appear confident they can sue / jail the odd cowboy shop that doesn't comply.

What they aren't confident is their ability to force the installers handle it safely. When it gets to the site there is often a corner to be shaved, or a unexpected hole needed. It only takes slightly more effort to use a wet saw, but to contractors time is money and it's their health they are putting as risk - so it's OK, right? The site is typically a new house or small business. Policing those sites effectively is prohibitively costly, suing for the consequences after they happen doesn't work because the disease takes years to manifest so they've killed a few people by the time it happens.

So in typical Australian fashion they've decided people making decisions in their 20's they maim or kill them in their 30's is not OK (that is what's happening), so they take what seems drastic action. It's entirely in keeping with the Australian way. We were the first insist on plain paper packaging for cigarettes for example, ditto on seat belts, we enforce total alcohol bans in towns where alcohol related violence is deemed too high (typically we see a 60% drop in alcohol related crime when that happens).
Agreed on there being access to other encrypted messaging apps. But that doesn't account for "app-fatigue" where people are fed up with getting yet another application (think Zoom, Meet, Slack, Signal, Discord, etc) and thus you have friction on getting people to use a new app.

For example: I've tried to get friends and family on Telegram and only succeeded in getting a fraction of them. I also feel that they're using it just to appease me and don't use it with others.

SMS/MMS/RCS/iMessage have default apps on phones and people tend to not seek replacement or simply can't (iMessage) This is what Beeper is trying to fix by introducing an app just for Android users to connect with iMessage users, thus challenging the Apple walled garden.

I haven't jumped on the Beeper wagon because I don't know the consequences of this tug-o-war. Would I lose secure messages if the iMessage rug gets pulled out while my number is registered? It seems I would unless I deregister my number. It just seems too volatile to me but I'm a fan of Pebble and wish the Beeper team+founders the best. I'll be keeping my eye on this.
Yes, every processor will have an AI core or two.
I've probably touched on this before, but back in the 1980s, absolutely none of the computer courses I took ever even so much as touched an IBM mainframe. I almost got the impression that there was an effort not to teach them.

On the other hand, you could expect to learn a new operating system every year. Oh, we don't use DEC gear at this school, check out our spiffy Prime running PRIMOS. Lather, rinse, repeat.
and ruining twitter by recreating voat aka parlor 2.0

and don't forget all of the anti-union causes he donates to
https://twitter.com/timsneath/status/1734108536987373910

TIOBE

> Does anyone honestly believe that TypeScript is half as popular as Prolog or D?
There’s never a time where players can’t interact - just passing priority or putting triggered abilities on the stack are actions. And each time this could happen the game checks state based actions to see if someone has won. That said, if both players have no options or just pass (which is more pronounced online) then you can end up in inescapable loops that cause draws. A classic example is this Luis Scott-Vargas game:

https://youtu.be/AGXG5rNe_tI?feature=shared
Well that's what happens when you don't ever update the app because you've decided that it's absolutely perfect.
Good old Neal Stephenson books, but I really like Cryptonomicon and Reamde. I read Cryptonomicon in one day it was that good, and years later read it again and got more from it. Neal is a great writer, and I love his "wordiness", how he dedicated pages to the experience of eating Cap'n Crunch cereal.
This paper gets cited in almost every Magic thread, of which there have been 2 recently that may interest this audience:

https://news.ycombinator.com/item?id=38525978 (I hacked Magic the Gathering: Arena for a 100% win rate)

https://news.ycombinator.com/item?id=38533105 (Fine-tuning Mistral 7B on Magic the Gathering Draft)
> It seems a bit entitled behaviour for someone to feel like Apple should be forced to bring iMessage to Android for any reason besides Apple's own choice, and that they know better than Apple on how to run Apple's business.

It is simultaneously possible for it to appear entitled, while also recognizing how extremely restrictive, anti consumer and anti competition Apple is. And in this fight of a trillion dollar company vs something a little bigger than a startup, it's fun to root for the small guys who are hitting back at that restrictedness, sometimes even successfully.
dont forget to incude that a lot of folks do not realize that iMessage uses a different protocal for texting than simply texting; folks dont really always know or care about the program, they associate "icon" or "new version of icon" as texting, and use it to simply "send a text message"; not everybody is able to comprehend the difference between a simple "text message" and "imessage" vs other apps, ect

the advertisers/carriers also dont use "send an imessage" - its simply "unlimited texting" that gets stuck in folks brains (albeit i have not watched tv ads in some time, maybe its been updated to exact app names lol)
I think OP's point was less that the tech didn't work (e.g. OpenGL was fantastically successful) and that it didn't produce a good outcome for the "loser" companies that supported it.
It's not entitled, it's pushing back against a gigantic company exploiting network effects to create user lock-in, because that's easier than competing on the merit of your products.
> Meanwhile we techies are lulling around like we didn’t deeply just experience the last 10 years and thinking it’ll be different this time because.. AI is rooted in academia? Flashy new companies? The safety rhetoric? Edgy Twitter takes from “down-to-earth” founders?

These companies have already stolen everyone's data and techies are bitching about IP law and saying they don't need to ask permission to use anything on the public internet. That might be the legal reality but you still look like tech douchebag for doing it.
>Now we hoist QA on the user.

This drives me crazy. It's a cheap way of saying we're ok shipping crap. In the past, I've been part of some QA audits where the developers claimed their customer support log sufficed as their test plan. This wasn't safety-critical software, but it did involve what I would consider medium risk (e.g., regulatory compliance). The fact that they openly admit they are okay shipping bad products in that environment just doesn't make sense to me.
Yeah, I wouldn't undergo chemo for something like eczema or a simple food intolerance, but if it were something like lupus or Guillain-Barré syndrome I would seriously consider it.