skysight-inc/HackerNews huggingface dataset:
See the Sky: Thoru Yamamoto's Christmas Story, for Playdate
US officials say Russian targeting JetBrains servers
Can you ELI5 the difference? Especially any sharp edges + pros/cons. I suspect I'm not alone coming from managed postgres (e.g. heroku or similar) and am open minded to unmanaged but don't want to unknowingly make a poor infra decision.
Along these lines, for a hardware description language inspired by older languages like Pascal/Modula/Oberon, see https://people.inf.ethz.ch/wirth/Lola/index.html
In my experience the major time sinks happen when multiple McFlurrys were ordered. Mixing one takes about 15-30 seconds, and if too many are ordered at once the ice cream would start to come out slower.

When you’re backlogged with multiple people in line, multiple orders, and you’re a 1-3 person crew in the front, every second counts. Ice cream was the easiest thing to cut because of the stereotype that it was always broken so people didn’t question that it was “down”, and those precious seconds made my 17 year old life much easier.
It sounds like you're being subsidized by Element which may not last forever either. We're not entitled to free centralized push notifications.
Does not count if you don’t have load testing
Don't focus on the specific exploit, it's a general issue:

In order to be useful, your wasm application will likely have to be able to make systems calls, or whatever its equivalent might be on your particular host environment. If you can corrupt internal state, you can control the arguments to these calls. The severity of the issue will depend on what your application is allowed to do: If all it has access to is a some virtual file system, the host will still be safe. But if that virtual file system contains sensitive data, results may nevertheless be catastrophic if, say, it can also request resources over http.
Asus and ASRock Leak Details on AMD Ryzen 8000G APUs
For me on mobile it is now entirely down. For awhile it was just a few of my discords.
thundering herd really only happens at 'web scale', whatever that means. There was an article on HN recently showing how even a distributed/replicated system can fall to the thundering herd.
Can't tell if you're kidding or not
If that risk begins to materialize, there is more than sufficient strength among the allied western nations to ensure that the situation proceeds to the “find out” phase.
Thanks for sharing that. What a valuable perspective; most people on HN are talking with no experience.

How old were you?

(The last line usually wouldn't be ok on HN, but I can imagine your anger.)
Queer People with Scales and Tails :D
Tokens, N-Grams, and Bag-of-Words Models
Same in a number of Australian states. You can face up to 10yrs jail time if you don't give it up iirc
Leave everything and let LLMs curate it on demand. "Show me pictures of my grandpa during the 2020 pandemic." "Show me pictures of my grandma's hobbies." "Find the most interesting pictures in this folder, not interesting historically but interesting action or visuals." "Make a montage of my cousins growing up." "Change my wallpaper every day to the most interesting family photo from that day of the year."
It’s not a nothing story. ByteDance/TikTok is a big deal - the most downloaded app of 2023 I believe. Potentially a very bad thing for Oracle stock too.

There can be more significant/material consequences for them (such as getting sued).
They're related but distinct problem spaces. Craig Kerstiens is somewhere else on this thread talking about the work that went into Heroku's Postgres. Paul Copplestone can give you an earful about how hard Supabase was to build. We can talk your ears off about orchestration and Anycast networking. These are all big problems; they're not just features.

I vividly remember hanging out on my back porch with Kurt as we were plotting out attached storage (we didn't even start out with storage!) and him telling me how hard it would be to replicate the kind of work Craig and Paul had done --- he'd know, after doing Compose.io! We had no illusions that we were going to provide that.

Instead, we charted out a halfway point: "automated" but not "managed" Postgres, which is almost (not quite) just an application you deploy on top of Fly.io. You can see from my sibling comment how well that went. A managed database practice monitors and intervenes with database clusters in ways a fire-and-forget automated system doesn't. If you don't do all that work --- a whole (huge) company's worth of work --- you break peoples expectations, and they question your pedigree on message boards. :)
OpenAI added logprobs to the chat API
I like and use MobX. I "come from" Vue, and I like mutability (though I concede its dangers). For my needs, the limitation was reactions. In mobx, reactions shouldn't update other observables. In Octopus, chaining is the whole point. Nodes can be stacked to n depth. There is no distinction between state and computed. Computed just generates more observable state.

Then, in Octopus you also get reporting nodes and visualisation, which, once tasted, no return.
Mostly, war games are scripted. When your strategy fails this badly in a less scripted event, you still want to get the personnel in the fleet their training. Do you think they should have just let half the fleet sit doing nothing for two weeks? That’d be a bad idea.
Maybe Bin Laden said it because he knew lots of Americans (and others) would buy it, not because he thought it or cared about it.
Yeah, it’s just disappointingly common for services like this to fully fail out during events like this, maybe not even due to the servers being down but because the client doesn’t have failure resistance built in or something similar.
The key is this statement buried in the paper.

The process starts by illuminating a scene with a monochromatic light source—a
laser.

What that means is that this only works with monochromatic light. The focal distance would be different for each wavelength. That's why it's useful for laser range finding. You would need to illuminate with several different lasers to get a "full color" image, and likely have multiple lenses... although some are tunable.

So it's not gonna work for standard glasses, current VR or anything else like that.
See the blog post linked upthread.
Photon-Counting CT
People tend to come here to check status, it is easier
Poll: Can you visualize details with your eyes closed?
There is a condition called "Aphantasia" [0]. People with this condition don't have a "mind's eye". This condition appears to have some correlation with folks with "nerdy" aptitudes, math, CS, etc.

When I first heard of this condition, I thought, "Wait, what? Are you telling me that when people say they see something in their 'mind's eye' they mean they really see it? I thought that was just a figure of speech for thinking about the thing."

I'm curious what people on HN experience when thinking about a real-world object.

Specifically, if I ask you to close your eyes and think of an elephant's head, do you:

[0] https://en.wikipedia.org/wiki/Aphantasia
See an elephant's head, in lush cinematic glory, with accurate shape, texture, and coloring
See a cartoon or outline of an elephant's head, with some detail lacking but something you are confident represents the proportions of a real elephant you've seen before
See something, but it's not particularly true-to-life, or true to the last picture of an elephant you saw
See nothing but the back of your eyelids, try as hard as you can
That is totally wild to me. Of course we are entitled to free notifications if we run the infrastructure. Who is subsidizing my XMPP client notifications? Why has this never been a problem for any other chat client until Zulip? If literally every other chat client to a FOSS chat server can make it work without crumpling under costs, Zulip is in the wrong and should not do this.
It's been pushed yesterday. Works just fine.
> One of the targeted user-groups is clearly people who travel a lot and are on various untrusted networks often (airports, coffee shops, hotels, etc).

Maybe that's clear to you.

> With that said - immutable is clearly the future for all operating systems, not just Linux Distros.

Kind of a side issue. However...

> Ever updated your windows machine and got a BSOD? We all have... immutable means that is very unlikely to happen (because everyone uses the same base OS image), and if it did, rolling back is as easy as rebooting the system.

... until you actually want to use it, at which point you're installing software in some kind of user account or application area, and you get to reexperience all the same problems and reinvent the solutions. Except with an extra layer of complexity to separate the "base image" from whatever you're actually trying to use the computer for.

> This is why complete "base image" testing is impossible with traditional OS'... everyone's is different.

Everyone's actual applications and needs are different.
Aphantasic, so nada.
Because a significant portion of the time the service has some developers or senior staff who are HN members and they show up here while triage is happening to provide real time insight.
eeek still down
Nope you are making up stories.
Location history data in Google Maps will soon be stored on user devices
If status codes bleed into 6xx we'll know HE COMES.

I am starting an early warning system, a daemon process, polling random web sites for status lines like this. Do I need to handle Unicode?
Ask HN: Is HN banning Twitter links?
I posted something newsworthy from OpenAI but noticed the post doesn't have the "discuss" button. This typically happens when a website is banned on HN (like dev.to and many others).

Is twitter added to that list?
I always wonder what happens if you unlock with a code that switched profiles and encrypted the other profile.
If you feed a bunch of a target's personal info into an LLM, would it guess their password more quickly than a human? What about an LLM trained specifically for the task?

It could be the end of non-random passwords.
Isn't that pull notification instead of push?
Perhaps we are. But the bumbled rollout is the thing being reversed.
Yes, but that is a court order issued by the court not the police.

An order to unlock something coming from the cops is entirely different, even if they have a warrant. Warrants would allow them to seize a phone, but you don’t have to provide the password.
Managed database offerings give you a Postgres URL and you just go to town. They take care of scaling and monitoring. Fly Postgres is automated, but not managed: our tooling will boot up a Postgres cluster for you, at a specified size, but it's not going to do so much database-level monitoring that you can forget about the database and just assume it's always healthy regardless of your usage.

If your expectations are set from Heroku's Postgres, you want a managed database. You're going to notice that Fly.io people aren't going to push you to Fly Postgres. You want to be reasonably comfortable with clustered Postgres to choose our unmanaged Postgres over Supabase's --- maybe not so comfortable that you'd set it up yourself (it's automated, after all, and does a bunch of cluster orchestration for you) --- but enough to do your own monitoring, sizing, and provisioning.

Lots and lots and lots of people rely on Fly Postgres, and it's a reasonable option. If I was doing a low-level project, like an individual service in a larger ensemble, or an expiriment or side project or a spike, I'd probably use Fly Postgres. But if I was launching a whole product on top of Fly.io, and a Postgres database was my system of record, I'd want Supabase.
imo, the problem isn't that WebP is bad for photos.

The problem is that Google's Pagespeed Insights and consequently a lot of resources push WebP to you as a solution for your JPG problems.

A lot of people have been duped into reencoding their JPEGs into WebPs for no reason.

Also just my personal feelings, but I feel like Google doesn't care about people downloading images or using the internet as a permanent gallery for posterity. They don't care about making each individual image look as good as it can be, so someone can in 10 years visit an almost-defunct website or an abandoned account of some user and just view a photograph as a standalone work. It feels like the use-case they're concerned with are the huge 1200px wide, utterly useless and generally irrelevant stock images they forced everyone to put on their articles when they said AMP articles require an image that big. And of course, with the thumbnails automatically generated from such images. That is, WebP's concern seems to be just about the load on the web server, and it's not thinking about the image as a file (the sort you save on your computer). Then again, this is just my strongly opinionated guess based on nothing but the fact JPG was made before the web became what it is today, and WebP was released after mobile internet access surpassed desktop.
I still use for ed non-interactively moving and deleting lines in large text files, e.g., lists, and have not come across anything that I think is better.

I use sed for non-interactve editing as well. Below is a favourite of script of mine ("ins") that I use frequently for non-interactively inserting text at the top or at any line in text files.

#!/bin/sh
case $# in :)
;;0) exec echo usage: ${0##*/} target \[line-no\]
;;[12]) sed -i -e ${2-1}r/dev/stdin -e1N $1
esac

Stupid examples:

echo 93.184.216.34 example.com|ins /etc/hosts

cat 84*.c|ins 084.l 151 # insert some .c files at line 151
I would think no, you don’t have to explain it because it’s testimonial. Of course your associate could still reveal it.

But it’s quite complex, see https://scholarship.law.edu/cgi/viewcontent.cgi?referer=&htt...
First of all, the Phillips curve, really? That's a flawed boomer way to correlate inflation and employment percentage. Tell me you are like 3000 years old and out of touch with economy and the world as a whole without telling me. It's not related at all to my argument.

My point is the megacorps (especially in the energy sector) are one of the major causes of the current surge of inflation, regardless of borrowing, (un)employment or other macroeconomic factors. Below is some reading for you in an accessible format for your level of comprehension.

https://www.cnbc.com/2023/12/08/excess-profits-of-big-firms-...

https://www.theguardian.com/business/2023/jun/27/corporate-p...

https://www.theguardian.com/business/2022/apr/27/inflation-c...

https://www.epi.org/blog/corporate-profits-have-contributed-...

It's okay, you don't have to be well informed yourself if there are well informed people like me who can compile you some material to read in language understandable to you.
> "Ensuring the safety of our employees is of the utmost importance and our number one priority ..."

What is Maersk's reputation for crew safety in other situations, such as regular operations?
Thanks, I wasn't familiar with Socket and I misread one of your tweets about scanning source code.
SQL Injection in 3CX CRM Integration
What’s your bank? I’d like an account there. Every one I’ve checked so far freezes accounts and has a painful process for international wire transfers.
It would totally make sense for Zulip to have a UnifiedPush integration.
Carrier strike group has to be careful not to repeat what happened to Moskva. Red Sea is small and it’s questionable if AA systems are up to the task with modern saturation threats from air, sea and sub water drones.

Era of impunity for US is frankly over and in addition I am not sure what carrier strike group can do that Saudi Arabia could not do during their unsuccessful war with Yemen.
> The reason seems to have been the use of machine translation from languages like Chinese

No, it's more deliberate than that. Per the original paper [1], the tortured phrases observed in these papers can be reproduced by running text through an online tool called "Spinbot" which processes English text by replacing words with (frequently incorrect) synonyms. Many of the replacements made are difficult to explain any other way -- replacing "ant" with "underground creepy crawly" is clearly not the work of a translator, for instance.

[1]: https://arxiv.org/pdf/2107.06751.pdf
These terms sound like they were mistranslated from another language
They are betting that US is not going to interfere, at least not too much.
The problem is what you mean by "see". It's not using your vision so there's no "overlay" as I'm assuming people expect. Unless someone has been diagnosed with an MRI, I'm not buying it.

Edit: I didn't make my point clear. I think that people who claim to have aphantasia expect to see a hallucinated overlay over their vision, which is obviously not what someone means when they say "imagine what an apple looks like".
Nice! The same pieces are also used in some deep sea pirate diver sets.
Overshoot and Collapse
isn't that how translation works in tranformers? encoder produces embedding then decoder generates the sentence. do it again with reverse translation and you get your text back in original language. combining two sentences can be done by using model for summary. making a cross-breed of two sentences is a different problem.
Trading off possible kernel bugs against letting a whole LOT of userspace software run with real root privilege

Only bubblewrap would run as root, but yes this is a fair critique as this is an opinionated tradeoff. I'm considering adding a set of userns variants to give users the choice between the two.

the packages have a bad security reputation

By default we only enable the flathub-verified remote for this reason.

Just more attack surface if you didn't remove Firefox.

We're removing firefox.

... and pushing everybody into a less tested code path. Again, what is this trying to solve?

Around half of V8 vulnerabilities are enabled by JIT: https://microsoftedge.github.io/edgevr/posts/Super-Duper-Sec...
I still think their interface is kinda ass (I hate buttons that only appear on mouse over), and I still run into bugs from time to time.

Still, considering their only initial draw was insane ease of sign-up, they’ve really catapulted the program into something genuinely decent. It’s definitely the best “””free software””” improvements I’ve seen.
Thank you for your words.

I come from a culture where integrity and values play a role and where you talk things out and don't have to hide your views behind diplomatic formulas or pseudonyms. I also find it interesting how you assessed my vote. English is not my first language. I have tried to make my point clear in every respect to avoid the expectations going in a wrong direction due to misunderstandings. I kept my tone decent and did not personally attack or insult anyone.

But the reactions of my interlocutor made me realize that my efforts were likely in vain. In this respect, I agree with you that in some cases it is best not to respond. But this is HN and here is actually a good culture of discussion, supported by decent moderation, where arguments should not simply be ignored up front.

I agree that a dispute can deter potential collaborators; but on the other hand, if I just leave defamations about me or my work unanswered, this has the same negative effect. In the present case, I continued the argument to such an extent that my position was sufficiently elaborated and documented, and from then on I no longer responded to the further allegations.

Volunteering open source only works in a culture of mutual appreciation. It could be observed that in recent years appreciation has increasingly given way to an attitude of entitlement (which is a possible cause for nitpicking), especially among younger people. I think it is quite appropriate to make people aware of this fact and its consequences - and it may well take place at the top of an HN discussion.
For everyday usage, like surfing the internet, word processing, emails, gaming, etc - these are all non-issues.

Sandboxed app environments are easily accomplished today in various ways on Linux and other immutable OS (there's more than you think, including popular mobile operating systems).

The base image never needs to change for any application to be installed and used. Layering is not even a requirement for almost all software to work as expected on an immutable system.

Development is still weird on immutable OS's - since developers do weird things. Currently the solution is pet containers, which are more of a PITA than not, but it does work fine. With that said, modern development environments should not be sprawled all across your system anyway - that's bad for so many reasons.

Regardless, if you would prefer to layer on top of the base os, then you still get the overwhelming majority of immutable benefits.

Immutable is the future...
Heck, all of this can be done with the installer - Anaconda, with kickstart.

I don't understand these spins/release patterns

Most of these several gig ISOs amount to two dozen lines of scripting in the kickstarts
Gatekeeping != Rigor. Set the bar higher.
It’s important to note that it’s not just ‘on command’, it’s on issuing a Section 49 order under the RIP Act, which has conditions and doesn’t like automatically result in you being locked up if you refuse (the police have to apply to a court to enforce it, and you have a chance to defend yourself).

This law firm’s site has a good summary: https://www.reeds.co.uk/insight/section-49-ripa-2000-trendin...

The reason I say it’s important to note this is that the UK police absolutely will over represent these powers to bully you into voluntarily handing over unlock codes and passwords. Unless there’s a S49 notice, they’re just asking and you have every right to say ‘no thanks’, and even if they do issue one you can require your day in court to force the issue.
>Hardly. Self-inflicted injury leading to death is the #3 leading cause of death in the US. Mostly, that's ladders and falls that kill you. Suicides are more common than car accident fatalities. _YOU_ are the most dangerous thing you interact with on a daily basis.

Isn’t that saying that if you combine all other accidental injuries it edges out cars. So cars are almost as dangerous as all the other things put together? Why are cars broken out into their own category from all the other things? Is it because they are incredibly dangerous?

> The vehicle can never be made safe for these circumstances. The road and pedestrian walkways _can_ be, though.

Pedestrian crash safety standards exist, in Europe, for example. As a result, some European cars offer active pedestrian safety systems that are stripped from North American equivalents. Cars certainly can be designed for passive and active pedestrian safety, and they are notably safer in areas where this is a requirement.
Am I missing something or is the headline (and most of the HN commentary) missing the point of this ruling? The ruling is not about whether you have the right to refuse to give your passcode (of course you have that right). Rather the ruling is about whether your refusal to give your passcode can be used against you at trial as incriminating evidence (?!)

> A court of appeals reversed the conviction, agreeing "with Valdez that he had a right under the Fifth Amendment to the United States Constitution to refuse to provide his passcode, and that the State violated that right when it used his refusal against him at trial." The Utah Supreme Court affirmed the court of appeals ruling.

This seems like a much more subtle question.
Some people think that Brave is preferable to Chromium because they "degoogle" it.
(1) I already talk about plenty without getting targeted ads

(2) Android is open source and I'm familiar with the core codebase as part of my job

(3) Even if I get an ad after talking about a product, that isn't proof (hence my confirmation bias comment...)
I wonder if Oliver Heaviside's house still remains. He rewrote Maxwell's equations in the form we used today.
Follow it further for a valuable interview question. Identify those who go rogue after hours, and select against.
And the even shorter lived LEGO Octro brick was… you guessed it… 8 times larger than a regular LEGO brick.