skysight-inc/HackerNews huggingface dataset:
This is the criticism I will accept, and want to see and hear. I want Netanyahu in jail, Smotrich and Ben-Gvir in jail, I want the settlers who destroy the lives of West Bank farmers to be in the same jail where hamas fighters are.

I want the world to demand the rules of war to be kept, I want the world to ask Israel to provide evidence, I want the army to do better on preventing civilian deaths, but to say that Israel’s "end game is to kill palestinians" is not an acceptable form of discussion.
It’s a pretty obscure API, and Apple has a strong interest in at least being perceived as pro user privacy.

And assuming for a second this is indeed an intentional backdoor in plain sight of the world: What’s in it for Apple?

Hanlon’s razor still cuts in 2023, at least for me.
I'd really like to hear more about the type of exploits here. Like, what level- Are we saying this kid is so brilliant he is writing zero-days for getting into corporate networks or if this a case of a guy in a good script-kiddie type group running phishing deals where they fire off 100000 emails a day and wait for someone to give up their logic credentials.

Because if it is the former it's really hard for me to understand how that is still even possible in this day and age. Autism, brilliance, or whatever... a 17 year old breaking into systems like they are as exploitable as early 90's systems sounds just insane to me.
You can enable text message forwarding on your ipad/mac.

On your iphone, in settings go to messages > text message forwarding and select the devices you want to allow.
The performance gain by dropping foreign keys doesn’t hold water. You still have to do the referential checks in application or in the ORM code. Unless you meant dropping referential checks.
If a company has no directory of their employees, associated company email addresses, and employment status, they likely have much worse problems.
That would be interested, but is impossible as long as they refuse to avoid crime and state that they plan to commit more at the first opportunity
believe it or not they did predict it 10 years out, NVIDIA bet the farm on AI/ML after seeing AlexNet. This has been covered in other articles too.

And sure, AlexNet was good but remember this is the maxwell days, tensor cores aren't even a thing yet, it was at minimum a very bold bet on the basis of "some image classifier model thing". Nobody else saw it as more than an academic toy (obviously, or they'd have jumped in too).

https://www.newyorker.com/magazine/2023/12/04/how-jensen-hua...

> Within a couple of years, every entrant in the ImageNet competition was using a neural network. By the mid-twenty-tens, neural networks trained on G.P.U.s were identifying images with ninety-six-per-cent accuracy, surpassing humans. Huang’s ten-year crusade to democratize supercomputing had succeeded. “The fact that they can solve computer vision, which is completely unstructured, leads to the question ‘What else can you teach it?’ ” Huang said to me.

> The answer seemed to be: everything. Huang concluded that neural networks would revolutionize society, and that he could use CUDA to corner the market on the necessary hardware. He announced that he was once again betting the company. “He sent out an e-mail on Friday evening saying everything is going to deep learning, and that we were no longer a graphics company,” Greg Estes, a vice-president at Nvidia, told me. “By Monday morning, we were an A.I. company. Literally, it was that fast.”
P.S. *Roald
My assumption (with modern applications!) is that nothing but the role directly owning the data will access the data. The development and DBA teams will likely have a role they can assume after performing a carefully-audited breakglass procedure to use in an emergency (rare) or to fulfill audit tasks. At least in my org this is a well-known problem with legacy applications sharing databases. Limit access to the database to a single role, used by a single application, and you absolve so many issues.
There is already a standard for car to car communication. The brake lights and blinkers. Their signals move from one car to the next at light speed. It just takes humans a really long time to interpret the signals.

But self driving cars can interpret them at the speed of light.
If my house was the size of twelve Tesla Gigafactorys stacked on top of each other, every other door was locked, I could track your movements throughout the house, you had your own private door and couch to sleep on, and I was worth 3 trillion dollars, sure.
This project is really exciting. It's founded by 2 ex Qt guys and I think they made the right decision of focusing on the UI aspect only, instead of aiming to be a full on framework like Qt.
It'd make for a useful additional option, as long as the app doesn't know it's happening. There are already ways to spoof GPS location, as many pokemon go players know.

iOS already has an option to give a very loose fix to an app.
That's a cool idea! Arxiv is a member of our Fast Forward program at Fastly, which helps a lot of open source/open web projects, and we've enabled other projects to share that kind of data in the past, so maybe we can figure out how to help them do that too. (One example is Kubernetes; you can see their live request data on our developer site. https://developer.fastly.com/ )
The yearly odds of a "Bond villian" becoming U.S. president seem a lot higher than the risk of a catastrophic asteroid to me.
https://archive.is/5wi2z
I've been on both sides of this fence.

I work on a legacy MySQL database that has 100+ moderatedly-related tables with zero foreign key constraints.

Someone wanted to change the name of a particular object, so I did a little investigation and found that approximately two dozen tables were storing this name-as-key, with at least half a dozen different column names. So essentially we have to scan every row in the entire database to robustly maintain referential integrity, and I vetoed the largely cosmetic change. Granted, this isn't 100% a FK constraint issue, but I imagine if the original DBA knew what FKs were, I wouldn't be in this mess.

On the other hand, I have implemented prototypes that clearly had way too many FK constraints, which leads to a bloated schema of unnecessary tables with 1-2 columns each, and makes object lifecycles a spaghetti nightmare.
If every big app had to interrupt users to ask for simple things like performing http calls, usability would take a little hit, the nice "UX flow" of apple is a major selling point, so a very small percentage would buy Android phones.
B2C or B2B?
The Rockstar breach was just one instance of criminal behavior. This individual is clearly dangerous and should not be allowed back into society. There is a pattern of blatant disregard of the law, it's not like he's a grey-hat or even black-hat security researcher.
I think I'm missing some context: ex. there's O(many) apps that offer hotspot connections in the US as well. And my understanding is there's a privacy concern, which I think would be exacerbated by a super-app like WeChat adding this.

What's the great certain things of all that?
It generally doesn't cost e.g. the printer manufacturer anything when you use a 3rd party cartidge. This is separate from the value/loss described above. I still think once you reach a certain size there need to be some interop requirements though but I can also see why many would say these points are unrelated to iMessage.
Cool, they must be done ruining HBO Max, so it's time to start ruining Paramount.
More lines does not equal more features! I just ripped out a bunch of unnecessary debug logging, the computation for that, unnecessary data copies, and then a 200 line method turned into 3 lines. What's more, the debug code had bugs I in it and would crash if it actually caught an exception.

To my knowledge researchers have not found a single metric that correlates with bug count other than total lines of code. Unit testing, developer experience, none of it is predictive of bug count, only size of code base has a correlation.
> unit test their own little service and call it a day without verifying the end to end functionality -- the "works in my microservice" effect.

You really shouldn't have to do more if the contracts are strong-enough.

If you really are that fragile you have a micro-monolith not micro-services.

If you have to run everything, what is micro? The individual deployable binaries (but their sum is now even bigger...)?!!
"Contact Apple support with your purchase details and ask them to fix the enrollment of the serial number on the affected Mac. It sounds like there was a clerical mixup on the record keeping as part of automated device enrollment."

Funny how these "mixups" always seem to benefit the company trying to control the user.
Yeah, creating a postgres admin panel would probably fine.

Creating an admin panel for a blogging platform that gives the admin a WYSIWYG-like experience that leverages tailwind ui is probably too close to competition
Apple's latest AI research could transform your iPhone
See Hainbach playing the room: https://m.youtube.com/watch?v=xm83hg7JXJ8
It's not just unlikely. It's unexpected.

To me, that presents an issue with the system, not its participants.
The only time I could see it really impacting performance is during bulk operations. But that's where making FK constraints deferred and wrapping the bulk actions in a transaction makes more sense.
MyISAM I think was the table type that did NOT support FK constraints and was blazing fast. InnoDB had FK constraints.

You would fully normalize, use proper joins etc. But without FK constraints you could end up with orphan data... Not the worst thing in the world, depending on how the joins in your system were structured.

Care and diligence were the order of the day. You had to know your schema and make sure you were doing the RIGHT thing at all points in the stack.
What has also dramatically increased in the past 50 years is our productivity.

Strangely, there has been a negative correlation between increased worker productivity and the amount of work required to support a family.

I wonder where did all that surplus value go? Is it a coincidence that inequality has raised in the last decades?

> what you're referencing in the US was the middle class, not those living in poverty

There is no middle class, only proletariat and bourgeoisie. Either you own means of production or you don't.

The proletariat could afford a decent lifestyle without living paycheck to paycheck until a few years ago, but not anymore.
Ask HN: Have you written a 2023 year in review?
I always loved reading patio11's and others' year in review posts, but I don't see as many these days. If you've written about your year, I'd love to read it!
Sounded like sarcasm to me.
Ideally an organisation that isn't as morally bankrupt as these ones, perhaps something in the private sector.
Interesting, I recently got a MPB for a new job that was supposed to have some enrollment pre-configured, but didn't.

Weeks into my new job, the IT folks contacted me and asked "Uh, did you ever get your laptop?"
Why do these Garmins outlast Apple Watches by 5-10x? Is it because they're bigger? Or does the Apple Watch do more things?
It's a clipboard reader that watches the system clipboard for crypto payments. It inserts its own address into the clipboard. Does have some other capabilities like running shell commands.

An aside, doesn't seem like it being written in "Go" is relevant.
My favourite thing about llamafile is that it means we can now download a single 4GB file and get both a language model and the software needed to execute against that model in a single unit, which we can use on multiple different platforms.

Me, a few weeks ago: "Stick that file on a USB stick and stash it in a drawer as insurance against a future apocalypse. You’ll never be without a language model ever again."

There are llamafiles for Mixtral-8x7B-Instruct now too, which is currently the most capable openly licensed model: https://huggingface.co/jartine/Mixtral-8x7B-v0.1.llamafile/t... - those ones are 32GB.

I wrote some more notes on llamafile here: https://simonwillison.net/2023/Nov/29/llamafile/

To save us some time...

1. A llamafile is just a zip, so you don't have to download the GGUF of a model separately if you already have the llamafile, just unzip it

2. You can use llamafile against other models without having to bundle them together - the llamafile binary without a bundled model is about 5MB. Notes on that here: https://simonwillison.net/2023/Nov/29/llamafile/#llamafile-t...

3. If you already have a preferred way of running models on your own computer that isn't llamafile, great! This software isn't for you.
Feel free to read “mostly” for “only” in my response, then. My point is still that even outside of Brightline (East — there’s also Brightline West, LA to Vegas) and the NEC, there are actually a lot of city clusters and corridors in America that would be an appropriate distance and population for reasonably high-ridership train travel. There are clusters of cities in Texas, the Southeast, the Midwest / Rust Belt, Colorado, Northern and Southern California, and the PNW that have all been identified as good candidates for new or substantially improved service. I disagree that this constitutes just “a few places,” as you originally said.
Comments moved to https://news.ycombinator.com/item?id=38696612.
The unauthorized access is the problem, not the amount of resources used. If you hack into a system and use it "just a little" you've still committed a crime.
But it has nothing to do with AI, it was an investment in optimized hard for floating point calculations for completely unrelated applications to AI. Not that they don't deserve it. It's great hardware. But it would be a shame for them to tie their business to AI and then there is a huge bust from creditors who realize that LLMs don't really do anything.
DLSS doesn't mandate frame generation (added in DLSS 3) it can still be used to upscale without frame generation, and indeed this is how DLSS 2 works as it had no frame generation.

Even in games supporting DLSS 3, there is to best of my knowledge and experience almost always a separate configuration option to turn frame generation on or off, allowing you to use DLSS solely to render non-"placebo" frames and upscale the output.

This absolutely allows you to run at a lower internal resolution, get higher "real" FPS and enjoy a reasonable upscaled output image. Sure it won't be as dramatic a difference as with frame generation, but it doesn't have the drawbacks of non-gamestate frames either. I've found DLSS for upscaling (without frame gen) fantastic frankly for getting older Nvidia parts to run new games for budget conscious gamers who don't have hundreds or thousands of dollars to drop on a new 30xx/40xx part.
Both Canada and the USA have freedom of movement without a residency system. It doesn’t matter what social services the city provides, the cities can’t discriminate who they provide services to based on residency.

None of this is new. The trope of a hobo jumping a train to San Francisco is as old as movies are. Seattle has always been a destination for those without means looking to survive. The original skid row was in Vancouver, Seattle, Portland, or Spokane depending on who you ask, and that goes back to the late 19th century.

Seattle does not want to be a homeless magnet, but it always has been, and the city is too progressive to cut off its generous social services, and can’t discriminate with them, and they can’t do anything about the weather anyways, so what the heck else can they do?

It has a lot to do with economic conditions: a well funded city (comparatively), plenty of things to steal, and a reluctant acceptance of property crime are all important in making freattle a destination, the same with the other west coast American and Canadian cities.
I don't think that's engineer so much as lazy bureaucrat in power. It's the mentality Douglas Adams made fun of with the "Your planet is being destroyed, you had plenty of time to read the posted notice".
The Brain-Implant Company Going for Neuralink's Jugular
Capital One offers a product Eno for virtual cards. Or you could try prepaid gift cards to cap total value.
>Thus actual solve time and absolute difficulty are almost orthogonal.

No it just means luck is another factor. You have luck, intelligence and length of time. Time is correlated with possibility right? You can get lucky and guess the probability on the get go.

Either way you introduced a third possibility here which goes further to illustrate that this quotation is inaccurate and not intelligent.

>Again no, it was saying one limitation becomes significant in a specific situation. Often these bugs may not actually take long to fix, but you’ll suffer when dealing with them. Even strait forward off by one errors can be annoying when you have to reason about really tricky bits of code.

False. You are absolutely wrong. The statement was made without qualification to a specific situation. Therefore it is made in the context of the universal situation meaning absolutist. Sinking with the ship again.

>That feeling where you spend an hour staring at an IDE with absolutely no clue what’s going on sucks even if it doesn’t take that long to actually fix the issue.

So? This doesn't have anything to do with the topic at hand. The topic at hand is the quotation is wrong. How you feel during debugging is off topic.
https://reportfraud.ftc.gov/

https://www.ftc.gov/news-events/news/press-releases/2023/03/...

https://www.ftc.gov/system/files/ftc_gov/pdf/p064202_negativ...

https://consumer.ftc.gov/consumer-alerts/2023/03/pros-and-co...

https://www.youtube.com/watch?v=9CWbc6pekd8&t=1310s ("We have a complaint database, we collect information, and are always eager for information" -- FTC Chair Lina Khan at Y Combinator)
That’s not how email works. Your email provider maintains servers to send and receive messages on your behalf, and your email client checks in with your provider for messages. iMessage not like email.
(This was originally posted to https://news.ycombinator.com/item?id=38719349 so "article" means https://www.theregister.com/2023/12/21/fed39_asahi_remix/ - we've since merged the threads.)
Tomb of Tutankhamun
We want the damn things to pass by. If we try to capture them we have to maneuver their trajectory very very close! I have no idea of astrophysics but due to their high speed the distance where they'd be in orbit would likely be below the surface of the earth! The orbital speed at the earth's surface is only 7.9 km/s[1] which is rather slow for an asteroid this close to the sun.

Even if we found a favorable candidate it'd still be the difference between shooting at a mortar shell to change the direction away from you to avoid the shell hitting you, and shooting at the shell to get the shell to pass close to you. The later action has a much worse risk profile.

[1] https://en.wikipedia.org/wiki/Orbital_speed
I wrote about my second year working on my side project, Teaminal, which is a collaboration tool for distributed teams: https://www.teaminal.com/blog/2023-year-in-review/
If someone openly and repeatedly said they plan to kill more as soon as they are released, they would be in a similar situation.

It is pretty rare that the convinced don't at least lie about intentions to commit more crime
Funnily enough, the author says that "all the people who do use Vim are completely insufferable" in the third paragraph. Maybe the author was trying to demonstrate that.
You're totally right, but the part that annoys me is that articles like this one (and this sounds overly hostile, I don't intend that, but I'm not sure how else to phrase it) kind of pollute the topic of container security. I described it above, but I have this huge pet peeve where I hear "containers are insecure and trivial to break out of" and then when I go to look up examples of container breakouts, all I find is stuff like this; how to break through a wall that had a gaping, intentional hole left in it.

It feels like "breaking out of vanilla containers" and "breaking out of misconfigured containers" are two different topics, two different threat models. And while the second absolutely matters in the real world, the really scary stuff is obviously the first (and usually involves 0-days, kernel exploits, etc?). But people seem to talk less about the first.
Super cool seeing cosmopolitan used in a relatively mainstream role like this:)

(And I guess the AI stuff is nice too;P)
what do you mean co-opting? Unless you're referring to beeper mini to beeper mini communications, sure, but the majority of the comms are going to Apple users.
> ...it's by far not the worst...

Quite true. But Amazon plays a very prominent part in the well-to-do lifestyles of people who have fast, strong "How horrible! I'll never buy..." reactions about poor treatment of workers in other industries.

(Yes, I've heard of hypocrisy.)
If you have a phone with an SSH client, and access to a server, for many that's equivalent to having a full functioning PC for hacking purposes?

If this is an Android phone with a rooted system (or even just a locked phone with Termux), you can even skip the SSH server.

Not saying this is unimpressive though.
I’m not claiming that at all in general, but I do believe it’s true when it comes to user-grantable permissions. Or do you have evidence to the contrary?
I developed the finger memory for vi when I first encountered it - in 1987! - on a Unix system on which there weren't any other fullscreen editors.

Like with the Perl programming language, I probably understand about 5% of the capabilities of a modern vi implementation. But those are hardcoded into muscle memory for the rest of my life. ddp to swap a couple of lines or :e! to undo your edits and reload is fast when you don't have to think about it, and ditto is moving around with just alphanumeric keys - not having to move the hands to a an arrow pad. Probably vi appeals less to non-touch-typists.

But am I insufferable about it? Nope. I just like it this way. Just fine to drop into an editor of choice if someone else needs to collaborate. And I'm aware that my younger, more mentally elastic colleagues have all developed wizardly knowledge of Visual Studio Code... hmmm, maybe it has vi bindings...
Apple ships iMessage in the default messaging app. A large portion users are probably unaware what "iMessage" even is, just that blue bubbles are "better."

Microsoft got dinged for shipping IE by default, and so should Apple. Maybe you can argue Apple's not big enough yet, but I reckon we just need to wait a few years (87% of US teens use iPhones [0]).

[0] https://www.axios.com/2021/10/14/teen-iphone-use-spending-ha...
I don’t think it’s unique to the US, but it’s unique to the US among wealthy well functioning democracies. Most of the other countries where police abuse is rampant are poorer deeply corrupt countries, India is a great example in fact.

India is at least a democracy, but it’s very much still developing and has corruption at nearly every level and facet of society, including police abuses. It’s nearly the opposite of well functioning.
Seem to me like the prosecution is irrationally scared of something they don't understand. When personal data is leaked, no one gives a shit. I got downvoted to smithereens for commenting on HN that I thought the post about Steve Wozniac being in the hospital was perverted. But if you leak something from a business, then life in prison?

People value their life at about $10m. There's a video I found interesting on a YT channel called practical engineering. https://www.youtube.com/watch?v=xQbaVdge7kU.
This post seems like long version of "Directive 595 Part 2" from https://thedailywtf.com/articles/directive-595

Anyone planning to test "YMMV", or full blown follow through, is advised to read that dailywtf.
Patience isn't just about time.

Sure they were willing to wait, but what were they waiting for? The result was pretty clear from the beginning.
Update! 2023 year in review post here: https://www.teaminal.com/blog/2023-year-in-review/