skysight-inc/HackerNews huggingface dataset:
I received this email from Comcast/Xfinity today. Am I reading this right that the patch was released on 10 October 2023, and Comcast did not act until 23 October?

============

Xfinity Data Security Incident

Notice of Data Security Incident

We are notifying you of a recent data security incident involving your personal information. This notice explains the incident, steps Xfinity has taken to address it, and guidance on what you can do to protect your personal information.

What Happened? On October 10, 2023, one of Xfinity’s software providers, Citrix, announced a vulnerability in one of its products used by Xfinity and thousands of other companies worldwide. At the time Citrix made this announcement, it released a patch to fix the vulnerability. Citrix issued additional mitigation guidance on October 23, 2023. We promptly patched and mitigated our systems.

However, we subsequently discovered that prior to mitigation, between October 16 and October 19, 2023, there was unauthorized access to some of our internal systems that we concluded was a result of this vulnerability. We notified federal law enforcement and conducted an investigation into the nature and scope of the incident. On November 16, 2023, it was determined that information was likely acquired.

What Information Was Involved? On December 6, 2023, we concluded that the information included usernames and hashed passwords; for some customers, other information was also included, such as names, contact information, last four digits of social security numbers, dates of birth and/or secret questions and answers. However, our data analysis is continuing, and we will provide additional notices as appropriate.

What We Are Doing. To protect your account, we have proactively asked you to reset your password. The next time you login to your Xfinity account, you will be prompted to change your password, if you haven’t been asked to do so already.

What You Can Do. We strongly encourage you to enroll in two-factor or multi-factor authentication. While we advise customers not to re-use passwords across multiple accounts, if you do use the same information elsewhere, we recommend that you change the information on those other accounts, as well. You can review the “Additional Information” section below for information on how you can further protect your personal information.

More Information. If you have additional questions, please contact IDX, Xfinity’s incident response provider managing customer notifications and call center support, at 888-799-2560 toll-free, 24 hours a day, 7 days a week. More information is available on the Xfinity website at www.xfinity.com/dataincident.

We know that you trust Xfinity to protect your information, and we can’t emphasize enough how seriously we are taking this matter. We remain committed to continue investing in technology, protocols and experts dedicated to helping to protect your data and keeping you, our customer, safe.

Sincerely,

Xfinity
People have been trying to get non-autoregressive generation working for years. There are some methods which work okay but they're always behind AR generation. And yeah they do look very diffusion-esque.

One of the issues is that you'd need to be really sold in this being a better paradigm before spending the money to pretrain a huge non-AR model.
Maybe a typo?
If you're referring to sales cap for the $7,500 US tax credit, that cap was removed this year: https://afdc.energy.gov/laws/electric-vehicles-for-tax-credi...
Haskell Compiler Written in Rust
I think the quote seems to describe the project well. It sounds generic because it does a generic thing.
Something with Dayquil - it has other medicines that do work for pain and cough suppression. Depending on your symptoms, those two can work and make you feel better even though you're not getting any real decongestion benefits. That makes it harder to detect that the decongestion part isn't working. That is, of course, until you're introduced to the stuff that really does work and then wonder how you went so long without it.
Granting pardon for the offense of simple possession of or use of marijuana
To be clear, I misspoke, I should have put effectively GET requests really can't have body data. Headers have the same problem. You can't possibly encode it without encoding it in the URL anyway
There are trucks full of food, on the Egyptian side, but Israel won’t let the trucks into Gaza. Either by bombing the route or by plainly not letting them in. Google and you’ll find plenty evidence.

Israel is outright starving the population of Gaza, as a means of war tactics, which is illegal according to Geneva Conventions. That’s what the defence minister Gallant said after his speech in October: „these are human animals. We will cut water, food, electricity, fuel“.
#1 is Lord of the Rings, right?

Plenty of books on that list give you fair warning before embarking, but LotR lures you in with "You liked The Hobbit, right? Fancy some more of that?"
It's illegal in the US too, but by giving it a special name and playing on peoples' guilt it slipped under the radar for decades. It's a bit of a relief to finally see so many people saying what I've seen for most of my life.
Creating Christmas Beats with Source Code
As frustrating as it is to black-box certain domains of knowledge, it’s an incredibly useful mental shortcut when used judiciously.
Man, people hating hard on here. Google’s just out there trying their best.

We should encourage any and all endeavors to build new useful tools. I agree that Google hasn’t been on par with other big players out there, but at least they’re trying. It’s so “trendy” to hate on Google, meanwhile everyone’s using at least one of their products every single day
Definition of "modern art": "Modern art includes artistic work produced during the period extending roughly from the 1860s to the 1970s".

via https://en.wikipedia.org/wiki/Modern_art

"Modern" can refer to a previous era, and in fact it does!
We use QOwnNotes as the desktop complement of Markor.

All notes are shared in a directory structure with mark down files - including recipes. Files are synced between devices using SyncThing. In Android devices, these are accessed using Markor, and in desktops, using QOwnNotes. I get to use Emacs Markdown mode too, as I please.

QOwnNotes creates a notes.sqlite file in the uppermost directory, which can be added to .stignore.
> In response to the breach, Xfinity is urging customers who have used the same password for other websites or apps to change all their passwords immediately.

If the passwords were hashed and salted, why is this recommended? Is this due to brute-force risk?
does anyone know how much of a dent this actually makes? would also think that gambling would just be state regulated at some point, seems silly to keep just a prominent thing illegal
In terms of media I think a good approach to this is, ironically, to skew consumption towards the old. Something that’s been held as valuable for generations, or even centuries, is probably worth your time.

Today you don’t have to seek out the new, it’ll find you. It makes sense then to default to the things proven to be good, at least when you find yourself actively looking for something to read, watch, or listen to.
Instead of the "deep path properties" syntax, you might want to take the opportunity to learn about functional lenses with monocle-ts

https://gcanti.github.io/monocle-ts/
schildt's are widely recognised as being some of the very worst. perhaps if you had chosen better (anyone could have informed you at the time) you might have made a better start.
Thank you for this comment. I very much appreciate your and flatline’s take on parenting
Timer interrupt
There's a Jeep color named "Impact Orange", now here's notoriously flammable type of car named "Blazer". I'd have thought that they would avoid names that evoke things that can go horribly wrong with their product, but I guess the need for edginess in getting attention outweighs that.
But I think that we know. I think, that if you asked the people world wide in a poll, the majority would reject AI and LLMs.
I wouldn't miss it.
GM has lost the plot. $60k for a small SUV, nobody is going to purchase that. Can we please let the auto companies go out of business this time?
How many places get enough packages to need a box? Is it dropped on the street? Who is going to bring it inside? Who is going to take the packages from the boxto the locker that tenants use? Or if they use the box, how going to keep them from swiping packages?

If you are going to do smaller containers, what makes sense is one that fits a standard pallet. Then it can used for deliveries between businesses. Probably don't need a box but smart dolly. Then can use existing trucks and vans.

Finally, why automate it? The delivery services could send a van with a large box containing packages. Most packages are small so a tote would work. I'm sort of surprised they don't do this already,
Is anyone happy of newpipe on android tv ?

On my freebox mini 4k (french ISP box) experience does not improve over time, but I'll give a try on latest.
The process depends on the package. If there is an active upstream project, a github pull request or similar would often do. It might be a good idea to coordinate with the distributions involved. For gentoo, a tracking bug seems to be here:

https://bugs.gentoo.org/show_bug.cgi?id=gcc-14
I don’t understand why you explain this to me. I just answered empty vs emotion. I am not discussing anything.
So I don't want to dig up the posts but acoup.blog has long sections about medieval warfare. Basically the change can be explained by this. The primary reason a cavalry charge is so effective is not because of the force itself (despite what Total War makes it appear) but the psychological impact of a much larger beast charging into you at full speed, at a very deep instinctive level your instincts will scream at you to run from this to turn out of it's path. So when you have hundreds of the beasts bearing down on you heavily armored and men screaming at them it is almost impossible to not turn or flinch or flee.

In antiquity especially in the Roman era this advantage was negated to an extent by professional armies, you could drill and train the soldiers over and over again to not break and not flee, thus muting the impact of the cavalry charge. However as society fragmented and the power of the state waned the infantry was more likely to be composed of conscripts and levies that were not professional soldiers and wouldn't be able to be psychologically withstand the impact of a cavalry charge.

This in large part explains the "However, there is no historical consensus on when the stirrup became important in Europe. I’ve seen serious claims ranging from the late 300s to the late 700s." because it was a social rather than physical change that precipitated the rise of the heavy cavalry shock attacks.

The proof of this is that as we see the rise of nation states and a resumption of the power of centralized administration we see cavalry again wane from an important shock force to a flanking and harrying force during the Renaissance. As evidence we see that even in to WW1 many of the generals in the early part of the war were hoping for a breakthrough in the line by the infantry which the cavalry could then exploit by turning on the enemies rear.

Addenda: I just finished reading the article and the author is basically saying the same thing as I am now. Strong central state -> Professional military -> Cavalry charges less effective. Weak central state -> Warrior nobility class and conscript infantry -> Cavalry charges powerfully effective. I'm keeping my comment though because of the sunk cost fallacy.
> whose countries we broke

What? America hasn't broken any countries. I dont like this negative take on America. America isn't perfect but any countries that it's interfered with were already extremely broken. America isn't going into perfectly functional countries and just destroying them.
Hahaha, had this same idea a little while back, really cool stuff: https://lol-dusky.vercel.app/
looks like you replied to the wrong comment
A very nice recap on recent posts that I had missed. I saw the Jepsen one, but not the others.

Thanks, this is why I come to HN! (And a nice break from LLM posts :))
Yes I think you're right. This one seems to be special though and might not require user interaction.
every single thing he says rests on the assumption that auto regressive models cannot be AGI because they lack 'world models' (as do most human beings). once AGI can see and test its models in the real world .. Hinton will be proven right
That must be an average including lots of old, expensive installations.

Even five years ago, PG&E estimated for new solar was less than $0.06/kWh, and they tend to overestimate these things, and underestimate the rate of cost decreases with solar.

In evaluating the difference between maintaining an existing nuclear site, or building new solar, the new cost is the more accurate estimate.

If you look at new solar deployments in California, nearly all include storage, because it increases profitability to be able to deliver during the evening. Storage is profitable today, meaning that it necessarily costs less than market rates.
DNS Records and How to Use Them
Teen Hacked GTA VI Company from Hotel TV
And join a bot net that attacks you and me.
It's not like appserver1234.internal is significantly less opaque and meaningless. Either way you probably want a control panel somewhere that can give you extra information about a node.
There is an emulator on steam called CRUMB.

Rather than being schematic, it is almost too real.

The 3D lab is equipped with a breadboard, power supplies, signal generators, various passive and active components, and chips such as the timer 555.

I attempted to use it to complete a lab from my university, where I had to construct a trigger from a chip with 3 NAND gates.

But at this point getting membership at nearest hackerspace may be a decent option.

> But there's some kind of compilation of the circuit
Realistic enough.
Back then you could compile your PCB project in altium designer, but now this button would be called validate.

Sorry, if I wrote too much in this discussion thread.
I don't think either of those examples is the same.

The problem isn't merely gaining or losing features or syntax, it's changing the meaing and behavior of an existing thing.

Code is the definitive source of truth for the thing someone devised.

It's not just a thing, it's the reference for how to implement the thing.

If you have a recipe from 100 years ago that refers to ingredients and tools that are no longer available, or are now called something else, or need to be translated into current equivalents, those are all no problem.

But if the old recipe uses a term that we do still have, but means something different now than it did when written, that's a problem. Now you're breaking the very concept of writing and communicating and documenting. That's not a sane thing to do intentionally. Think scientific and industrial processes not just cakes.

In this particular case, since the feature happens to be presumed to be rarely used, it might be fairly easily addressed by just having the compiler issue a full stopping error for any use of auto by default, including the reason why so that the user doesn't just blindly add the flag to allow it.

In the future, when someone tries to build some code, it will fail to build, and that is 1000% prefferable to successfully building the wrong output.
Anton, Fabian's cofounder here.

Happy to help answer any questions!
>> ISPs charge for public IP addresses

> Because NAT allows them to.

NAT increases the available supply of IPv4 addresses, it makes them cheaper.

>> Do you want to be charged for a large enough block of public IP addresses to cover every networked device in your house?

> Yes.

You can actually just go out and buy a block of IPv4.
https://auctions.ipv4.global/
Wonderful! Yeah, admittedly, I haven't sat out and drawn it out (my process for learning algorithms is often just do it by hand until it intuitively makes sense), but it did strike me as pretty straightforward on first glance. Thanks!
Pretty much the same. I know in these circles we hate the fact that supermajority of people do their daily stuff on their phones, but it is what it is.
For anyone else who wishes to do so, Fireship has a low-barrier video[1] on training the uncensored model in the sibling comment (dolphin mistral) for local use.

[1] https://www.youtube.com/watch?v=GyllRd2E6fg
And when I found this out, I lost a lot of respect for him. All his talk of sustainability is junk when you see words like this.
Thanks for writing this. The second part makes me feel a bit better about my own life - my experiences are the same as yours. Having children exposes flaws in your life skills, mental health, and relationships that were previously invisible. It can be quite distressing, or at least it was for me.
Am I the only one who likes removal of Apple Carplay and Android Auto? I hate cars that decide to spam me (or the driver if I'm a passenger) if I dare to connect my phone to one of its USB ports to charge it.

All I want to do is charge my god damn phone, I ain't got time flinging away spamnotifs on both phone and car.

KISS is a virtue.
try /r/homelab
I‘m quite unsure…so I’m asking the community here. Is this a good newpipe distribution for iOS:
https://apps.apple.com/de/app/newpipe-music-videos/id6450053...
Criticise away, when we arent actively occupying multiple countries and funding terrorist groups. I agree with you, western culture is better, but you arent putting it on good display when we invade countries to control their oil.
Do you really think so? I mean, that's a small success, but everywhere I hang out or whatever I happen to come across has a very left-wing tinge.
Game dev options are huge these days, but Java isn't a bad choice: mature platform, good VM, cross-platform. I would guess javascript is further behind in performance, but with Electron/Cordova, it's a valid cross-platform choice as well. Or one could explore lesser known tools like Haxe. And then there are monolith dev kits like Godot. Heck, even Lua is still around thanks to Roblox. There's so many options!
In case the author is here: In the first code block we have `<KeyInsight ... />`, should it be `<Improvements ... />`?
It wasn’t as hard back then to sift the chaff from the grain. You were either a computer nerd or you were part of the unwashed masses.

If you showed any interest in computing, other geeks would take you with open arms (mostly) versus now where everyone and their dog wants in on the ground floor.
Maybe they should dollarize too /s
Stating that I'm "confidently wrong" is rank nonsense, when predicated on an appeal to authority of government-funded low level employees.

"Clearly" their "bother" to develop simulations and conclusions is 100% downstream from government funding to make interesting noise. That doesn't mean that they are wrong. What it does mean is that its nonsense to couch a counter-argument to criticsim in an appeal to authority.
Yea, how exactly is things like TLS supposed to work without using DNS!
Oppppssss...

https://gmauthority.com/blog/2023/12/gm-issues-stop-delivery...

>On December 1st, 2023, The General issued a stop delivery to its dealerships ordering them to halt deliveries of certain 2024 Chevy Equinox, 2024 Chevy Blazer, 2024 Chevy Blazer EV and 2024 GMC Terrain vehicles, and await further notice.
In addition to Rufus, Ventoy (an awesome multiboot USB tool) also supports bypassing the hardware checks and the online account requirement
It's not like most people are programming or writing Word docs on their phones. The most important thing they're doing is some form of banking. The rest of the time, it's just checking if things exist and sending messages to people. You don't need a laptop to do those things, though I personally prefer having the power of my Macbook.
That's a problem with those notifications, not CarPlay. When I connect my phone it just shows a CarPlay icon in the cars app switcher and auto-opens CarPlay if the setting is enabled.

No notifications and no hassle.
Oh, it wasn't intended as an insult to you, I was just wryly amused when I saw your name and that comment :)
Historical Trails
Apple and open source are odd bedfellows
I almost used the example of Stuttgart 21 project which is way over budget (9 billion) and over time (6 year delay). It is bigger scope, with whole new main station and lots of track.
What are your latency and bandwidth requirements? How big are the files? If you are already looking past obvious TCP-based choices like HTTP and FTP, you might be interested in FASP/Aspera https://en.m.wikipedia.org/wiki/Fast_and_Secure_Protocol

Edit: I’ll leave it here just in case it is useful for others but it may or may not be embeddable into your app, especially on the phone.
Wayland Proxy Load Balancer
Here is some more info about the project:

https://twitter.com/antonosika/status/1737113683392942237
So Erdogan finally admitted his economic theories of keeping interest rates low are complete garbage. One would think that after years of causing massive damages to the Turkish economy a president should resign, being proven wrong time and time again.
Unless they become bankrupt and no new modules will be released. It's hard to place faith in the future of a company like that, especially when I need a powerful CPU right now.
I am not entirely sure. Not about the ai images but the away the piece was sensationalized. If you read the article it painted a picture that is all the startup did. Going to the website I could not even find the models, I am sure they existed though.

Like I said before. I am not defending the morality but the way in which 404 writes article. It’s like reading a buzzfeed/celebrity outrage piece.

Edit: I think it’s because after reading the original article I mentioned, I have a bias on how 404 writes pieces. That original article made me scared to even click the link to the company. I read a TechCrunch piece on the company and it painted a much better picture of the company and the challenges with being a marketplace/source for image models.
Seems to me that CE covers sections 1, 2, 3, 7, and a bit of 5, and CS covers 4, 5, and 6. A traditional CS education should teach 3, even though doing 3 is absolutely not the job of CS grads.
If I wanted to know what the community thought of a particular paper, is there a place where I can find a discussion of it? I thought maybe researchgate was the place, but I usually don't see discussion on the paper submission there. I know sometimes you can find the peer reviewer comments before the paper got published, but what I mean is comments from other scientists.
I spent my early developer life using Perl. Which had perldoc pages that were mirrored to man pages.

The few times I ventured into info pages, I found the information scattered and hard to skim because it was divided up inconveniently.

While it is true that I must have learned the keybindings for man at one point, they are the same as the keybindings for vi and less. Both of which I frequently used for unrelated purposes, and so were firmly in my muscle memory.
> but note that median household income after tax is about double (590k nok)

I think most people understand that if you add two people's median income, you'll end up with approx. the double. :)
db-server-4x-16g.cluster1.fqdn

contains a lot of information outside of an external lookup.
How can you guarantee that it's always within N kilobytes, when N depends on the number of files in the zip?