skysight-inc/HackerNews huggingface dataset:
What will happen is that all will go to China and maaaybe some third world country, or run your own models from shady sources.

So you will use a Chinese AI that spies on you, or you will use some shady service from a shady country (that will play cat and mouse like torrent sites).. or most likely you will run your own model when you are computer literate and no model if you are not.

Actually most models are so lobotomized allready that probably better to run your own, as long as you have a good enough computer.
I was on the cheapest plan Heroku offers when my startup hit #1. Things got sluggish so I had to spin up another dyno, but it was fine after that. Of course things depend heavily on time of day and day of week. Since it's currently the holidays in much of the world, things could be slower than normal.
What if you had to send a second version on a given day? Let’s say 90% of your content didn’t populate. You might want to send a 12/28/2023b version - would you want to capture both?

Feels like there are better options for this use case, with little effort.

I guess, is there a reason not use an auto-incrementing int? Serious question, maybe there’s some reason that’s a bad practice that I’m not aware of.
Because they settled, that usually means you dont have to admit any wrongdoing.
I wonder if it might be practical to bootstrap such a thing off of Wikifunctions, with a process to vouch for a function as "important enough to merit inclusion" and tooling to ensure that the Wikifunctions implementations actually agree, plus something to synthesize/translate a first-pass implementation in the desired language?
Thanks for pointing out conceptnet. On GraphWords, "synonym" only returns "equivalent word", conceptnet adds "antonym" (as entire category!) as I'd been looking for...
I used a 3 pixel wide font extensively back on the '80s to write debug messages to Mac screens from code that could not make use of the normal Mac ROM and OS display functions.

At first this was when writing SCSI disk drivers for a third party Mac disk maker. Later it was when writing network drivers for a company making a SCSI ethernet interface. Then it was when working on firmware for some NuBUS cards for Mac II.

I didn't want to write a full BITBLT, but I didn't want to make width + spacing be 8 pixels because even though that would be very easy it would also mean I could only have 64 characters to a line on the Mac or Mac Plus (512 x 342 display).

With characters 3 pixels wide and 1 space between them you just need a simple BITBLT that only has to handle two cases.

My font was 3x5. Unlike the other 3x5 fonts people have mentioned I didn't try to include lower case. Here's a sample, scaled up by factor of 4:

https://imgur.com/a/I97Zi6l

The reason that there is a prominent visible symbol for newline is because when the debug print got to the bottom of the screen it would wrap back to the top. The prominent newline let you tell which characters on the line came from the latest print on that line.
> There is a vulnerability in the SoCs that I discovered and reported where cache snooping bypasses CTRR at the AMCC level. You can "write" to read only memory ranges and, as long as those writes remain in snoopable cache, they are effective even though AMCC will block them and panic when they are written back. I didn't get any money for that one because the way I exploited it didn't apply to normal macOS (I used it to patch DCP code from m1n1), but now a nation state figured out how to use it for a real exploit chain. "Whoops".

Oooff
Lucky him.

The rest of us get a 13 year old that sounds like TikTok and a 6 year old that sounds like Fortnite.
Google keeps adding the irrigation access road next to me to maps. This is both dangerous as its totally unprotected and a car could easily drive into the canal, and its private, only the property owners and irrigation district are allowed to use it. I have reported it something like 10 times already and every tie it will be removed for a day or two and then instantly pop back into the map. I don't get how Google even thinks this is a road, or what data it is using to discover it. Its nowhere on any map that I know of!
For walking direction Google Maps is a disaster (More than road directions). 90% of footpaths simply don't exist on there and the ones listed on Google Maps are often completely wrong.
Relavent 37c3 talk:

YOU’VE JUST BEEN FUCKED BY PSYOPS
https://media.ccc.de/v/f7375255-379f-4423-a47f-2920246a0916

Edit: also HN discussion for said talk https://news.ycombinator.com/item?id=38791575
You mean VNC?
I totally missed how you simply meant "guesses" and turned that into something it wasn't by meaning the number of digits to type. I honestly have no idea how I did that. Kind of like when someone is talking to you, but you're actually paying attention to something else so you reply with something that has no bearing whatsoever to what was actually asked. Yeah, that's what I'm going with
Google lets you edit (or more accurately, suggest edit) maps. It just appears to get overwritten by some process after a few days. I have fixed so many things only to have them snap back to what they were before. Its annoying and leads to situations where door dashers end up coming down an irrigation road, nearly crashing into the canal because its "faster" than using the road that goes around the field. I am shocked Google doesn't have MORE lawsuits on its hands.
The authors' Chaos Communications Congress conference talk about these exploits is up now, it was a great watch:

- https://www.youtube.com/watch?v=7VWNUUldBEE

Also previous discussion:

- https://news.ycombinator.com/item?id=38783112
My Intellivision is a gaming device and has no 3D support. There's tons of games that don't require recent hardware. :-D

Not to mention the M1 Air is the or near weakest A.S. Mac you can buy.
Fantastically fun view. I'm a tea drinker but loved the dive into this, little subtle differences. A sealing system with built-in inefficiencies and patents to confound competition. A distributer layer copycatting what bigger espresso systems do but for no clear reason patented afresh to confound competition. Nespresso really are some typical game playing shit heeled fucks, using market largess to push around the market without innovating.

Hoffman's treatment here is so delicate & informative. Discussion on finer grind size revealed some real advantage. But overall this is such a revelatory deep dive into how pernicious & terrible capitalism is, how it captures & steals what already is & makes it worse, to drive itself in exclusion to general benefit. Way to go Nespresso, you vicious evil son of a shit villains, you have successfully thieved good from the world.
Thanks. I can think about some of these topics but I can’t use hyprland because there is no color management in Wayland :\
What about 204? https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/204
Building their own, LOL.

TikTok just got caught stealing ChatGPT.
Water heaters are a prime example of generally durable design, replaced today with cheap crap metal that lasts half as long and is virtually only replaceable, not fixable.
Ok I accept that - I guess you could F12, drop into the console and then fetch. Which is broadly similar to using curl.

I also don't like the idea of making queries and commands use POST. It kind of sucks (unless you are doing it for a website that is trying to avoid using JS for some reason).
You can also play multiplayer in the browser at webliero.com

There is an active community, simple to pick up and play, no login. Although most of the active servers use some more fast paced mods with different weapons, but you can start your own server in the browser with the classic mod.
ELI5/OOL: impact?
xmake: Fast and lightweight build tools with dependency package integration
> We sold a highly radioactive substance to Jim, and endanger more than Jim.

Gasoline + air is a high explosive. Most fluids at a hardware store are poisonous and some of them taste sweet. The MSDS for the things under your sink will tell you all the ways they can destroy you.

You can have hydrofluoric acid send to your front door. It can kill someone if you spill it on them, but it also has legitimate uses and is such a simple compound that there is no point in prohibiting it because anyone can make it themselves.

Dangerous things are widely available and everywhere and it's rarely a problem.

> Oops, Karen from HR brought in deadly nightshade muffins to share ("small amounts are said to be good for the liver, I heard it on my favorite podcast!").

https://www.amazon.com/Belladonna-Seeds-Atropa-belladonna-Fl...

> There's a middle ground here, where if it's dangerous enough, we don't allow it to be sold.

Many of the things all around us are even more dangerous than the things that have been banned.

If you ask someone to choose a central example of things they think should be banned, they'll often start with military explosives like C-4. Military explosives are designed to be stable. You have to use a blasting cap to set them off because the last thing you want is unintentional detonation.

If you fill your house with propane or natural gas, the slightest spark from anything will vaporize the entire building and everyone inside. Natural gas is dramatically more dangerous than C-4.

But C-4 is scarier because Hollywood shows it being used in a different context, and that's how politics decides what's banned.

And once you get into the banning things business (because you have to ban C-4, don't you?), people relentlessly want to add more things to the list. Which doesn't happen in any more principled a way.
If I'm being honest, this seems like yet another case of reading too much into AI-generated outputs.
I agree with the rant, but not the examples.

It pisses me off when programmers add "features" which forces users to deal with them.

For example, pipenv always prints a message when you activate an environment (I don't know if it's still the case because I don't use it anymore). I had to migrate a cronjob which ran a Python script and sent an error email if anything got printed to stderr.

This is a pretty standard Unix thing to do, but pipenv decided to always print to stderr that the environment got activated, even though it's not an error. And there is of course no way to get it to shut up. I had to use some Bash hackery to filter that out.

Ryan Dahl's 2011 rant on this is quite relevant:

> Those of you who still find it enjoyable to learn the details of, say, a programming language - being able to happily recite off if NaN equals or does not equal null - you just don’t yet understand how utterly fucked the whole thing is. If you think it would be cute to align all of the equals signs in your code, if you spend time configuring your window manager or editor, if put unicode check marks in your test runner, if you add unnecessary hierarchies in your code directories, if you are doing anything beyond just solving the problem - you don’t understand how fucked the whole thing is. No one gives a fuck about the glib object model.
this particular stack - bchs - sounds great in a world where the following never happened:

1) transistor density and memory cost never advanced past what they were in 2000

2) no one ever took the Linux kernel project seriously

Your second to last sentence validates this: Cycles are computing power, and power is cheap. It gets cheaper every day. The person who can write flawless C code, including the boilerplate, is expensive.
Yep, the waste would make me feel terrible.
>how utterly broken Wayland design is if it has to be defended by a core KDE developer.

Huh? That makes no sense. If the dev had not defended Wayland, would you have taken that lack of defense as evidence that wayland is good? If not, then it is irrational to take the existence of this defense as evidence that wayland is bad:

https://www.lesswrong.com/posts/jiBFC7DcCrZjGmZnJ/conservati...
So it probably also affects Android phones and SBC like RaspberryPi's?
For example: If I leave my TV set to the input that my PS5 is on, turning the TV on will turn on the PS5. Because the PS5 takes a few seconds to turn on, if I try to switch to another app or input, the PS5 will switch the input back when it finishes waking up. Ideally, I’d allow CEC for all functions except turning the PS5 on. If I want it on, I’ll use the controller or media remote.
Cute, this is rolling a bit down the uncanny valley though.
> $150k bounty

That’s one heck of a way to fund Asahi
Sometimes people do things to be funny.
This might be my ideal NYE party.
No it doesn't. The larger vehicle in a collision is safer, but the smaller vehicle is less safe. If you buy an Expedition, you're more likely to kill a pedestrian, plus you're more likely to kill the occupants of any other vehicles you collide with. You're more likely to die in a rollover, and dont significantly affect your odds when colliding with a fixed object.

Your personal risk goes down because as you say vehicle to vehicle is the most common and you win that zero sum game, but overall the score is very negative.
Yes because for the same "quality" today you're likely to have to pay double the historic equivalent due to corporate profiteering. It's a rigged game and people just lap it up and simp for brands like they aren't parasites. It's pretty disgusting.
I typically use tramp for:

- docker containers
- accessing boxes on same network

Sometimes its fine, but then perhaps because of regressions, I get buffers that never seem to recover and have to be cleaned up.
I guess this would be the expected, though boring, answer -- "incorrect" benching (i.e. clear the cache first).
Matlab still doesn't handle f(10)(2)... (The _(_) syntax is both function calls and indexing there.)
> I'd love to be able to separate myself and my team from others by an agreed-upon interface.

Don't doubt it, but that is what the grandparent was going to - you don't want to be held accountable for the success of the overall product, you want a defined contract that you maintain and the value-add of that is someone else's problem.

The dysfunction of a business is made up of individuals doing what makes the most sense for them locally. It isn't unreasonable to want microservices, it just happens that the incentives that make developers like microservices also tend towards systems that lack accountability for achieving system-level outcomes.
Thanks! Macroexpanded:

4-year campaign backdoored iPhones using advanced exploit - https://news.ycombinator.com/item?id=38784073 - Dec 2023 (7 comments)

Operation Triangulation: What you get when attack iPhones of researchers - https://news.ycombinator.com/item?id=38783112 - Dec 2023 (371 comments)

How to catch a wild triangle - https://news.ycombinator.com/item?id=38034269 - Oct 2023 (43 comments)

Scan iPhone backups for traces of compromise by “Operation Triangulation” - https://news.ycombinator.com/item?id=36164340 - June 2023 (153 comments)

Targeted attack on our management with the Triangulation Trojan - https://news.ycombinator.com/item?id=36161392 - June 2023 (126 comments)

“Clickless” iOS exploits infect Kaspersky iPhones with never-before-seen malware - https://news.ycombinator.com/item?id=36154455 - June 2023 (41 comments)

Operation Triangulation: iOS devices targeted with previously unknown malware - https://news.ycombinator.com/item?id=36151220 - June 2023 (31 comments)

Others?
Zero-click RCE
I’ve been soul searching for a new editor for about 2 years now. This checks the box for being native, modal/vim. So I’d probably adopt this like I did with alacrity when I dumped iterm.
Micromanipulator
What does it mean when the compiler says it can't convert something to itself?
Brazil too. Used to play this with family and friends, especially one of my cousins. Also played it quite a few times with friends in computer classes. Everyone could play using the same keyboard at the same time, it was crazy.
This seems a bit disingenuous. Lawyers DISAGREE on this stuff (as we will see in this case) and a court will decide the reality by fiat.
Remember when we were told that insurance companies would go bankrupt without the individual mandate and then it was ruled unconstitutional and not implemented after the first few years and insurance companies made more money than ever?

The insurance industry could've tolerated quite a bit of disruption. The ACA was successful in ensuring the donor class got to keep the profit levels they are accustomed to, the only thing it was ever designed to do.
ELI5 por favor, is this a class of exploits that is a function of Apple's architecture, kind of like how specter was for the whole branch prediction thing IIRC? Or is this something that can be fixed with a software update and no performance impact.
I think the current behavior is worse simply exiting. The only concern with exiting when the user types "exit" is that perhaps the user actually wanted to see the value of the `exit` function. But the current behavior doesn't show the value of the `exit` function either, so it's useless for that use case.
Good. They are designed to prevent injuries to first responders (which are nearly always exposed to some hazard when responding to a vehicle accident.)

I did a search and could find no reports of injury to first responders.
I used a font similar to this one when watching log files on an xterm back in the '90s and screen space was valuable. Its not "I want to read the lines as they go past" but rather "I want to get a feel for the rate of the lines as they go past and see the 'shape' of the lines". For an access log, regular use looks very different than someone trying to probe the site and that can be determined by the shape of the line - not the text itself.

For that, if you wanted to see what was going on, a quick copy and paste of the text into a regular editor will show you the characters at a reasonable size.
Vue 3.4
> Watching the battles over tokio getting into candi would be fun.

What would be the argument for this? It's my understanding that the lack of a default runtime is considered a strength
Depending on what exactly it is that you're storing or processing, neither does data.

Think sensor data and the sensor is a vital signs monitor in a hospital. The service that reads its output and stores it glitches out due to some sort of misclick by a user. It distorts the fact that the patient has an arrhythmia. Or a service that reads off the medication dosages for a patient for a pharmacist is stuck on a single message.
so neovim is the sota of vim now?
> do you really feel that google is the place to go to find things these days?

Uhh yeah? Search isn't a trivial thing to implement and they still have the best product

Maybe the results are less relevant now because of AI spam, but they'll figure this out eventually. I'd say a good compromise is just using ublock origin to filter AI spam sites out of results
For New England people, there's the MIT Swapfest.

https://w1mx.mit.edu/flea-at-mit/

https://phys.org/news/2016-09-mit-flea-specializes-rare-obsc...

https://www.youtube.com/watch?v=8thW6anxdTQ&t=1m
Designed badly, in this case.

Arguments to authority aren't appealing. Arguments from logic are. The fact is that X and VSCode's remote protocols are designed very differently, and in high-latency and high-jitter connections (and many low-bandwidth ones), VSCode's protocol is simply better.
I hope they do, at least Sam should. You need to know how the models work to understand alot of the business. Why are we spending $x BN on these chips and not those chips. Why are we doing the architecture this way etc. They might not understand every single line of code, or function used, or advanced stuff that gets pulled from latest research. Because to do that he'd have to be a researcher. He needs that information distilled.
In other parts of Western Australia | Northern Territory..

If you find yourself unknowingly on the Gunbarrel Highway network surveyed out by Len Beadell [1] .. you're screwed.

Even if you plan on driving through them, it's an adventure:

https://www.youtube.com/watch?v=uL44EAyz8Qc

Midway thru @5:47 onwards "Let's take the David Carnegie Rd .."

[1] https://en.wikipedia.org/wiki/Len_Beadell

Beadell's sense of humour was well known, and he referred to many of his roads as "highways".

The description stuck, and maps show the subject roads as highways, despite the reality that they have degraded to single lane unsealed tracks through the remote arid areas of central Australia.
The single-most important lesson I've learned building products as a founding engineer in a successfully exited startup: weighing tradeoffs and deciding which software architecture to use is the wrong place to dedicate mental energy.

It's always the product. It comes first. Then the business. If you're lucky you may become a pawn in a larger battle among giants and you'll get acquired before you attempt to make any profit.

If you end up in a place where your chosen architecture is no longer capable of supporting your scale - that's a happy place that very few teams get to experience. It means you've survived.

Given that, whatever allows you to quickly get things in the hands of real customers (which depends quite heavily on what the actual product is) is the best architecture.

We've hired some experienced engineers from giga-corp FAANG etc into tiny startups. The transition is hard, because there the opposite is true. You have a business already, and you have a well-defined goal you need to achieve with multi-year roadmaps etc. There, yeah you should probably decide on architecture first.
I am expecting them to not exist next year or at all.
But don't you think there would be larger regulatory forces in play that would protect everyone from these types of issues? Xiaomi isn't just gonna refuse in a situation like this.
A weird CPIO discrepancy
> Because circuit / race / timed use is excluded

You‘re talking about Terroristenfahrten? During Terroristenfahrten, Nordschleife is a public one way, two lane highway (a toll road) and no time tracking is allowed.
A Year-End Letter from Let's Encrypt
Has anyone gone back and checked the past years predictions?
HN eats reddit links and the submitter didn't fix it.

They probably meant https://old.reddit.com/r/TeslaLounge/comments/18siznc/update...
Novel helmet liner made from carbon nanotubes
>this is actually 4×4 if you're counting pixels needed on the output device instead of rom space needed

What do you mean by this? Each character requires only a 3x3 grid of pixels to draw.
Hah, I had a similar experience crossing New Brunswick, my old Garmin GPS tried to send us through logging roads. Those roads shift like sand, of course, as the loggers' needs change. It was kind of a disaster in a minivan. Eventually we managed to extricate ourselves, but not before mortally wounding the van's suspension and seeing a really cool old covered bridge.
Require self-proclaimed economists to be rich and posters like these to be very disproportionately productive at something that is valued by at least one person that is not himself
This category of software was actually really useful when I wanted accountability during R&D tasks on engagements. I used Timing, and it would parse the active window titles and create a timeline. Then the creator wanted to charge $80/year and I ended up dropping it completely. I also kinda realized that this sort of software isn’t that different than a RAT and an attacker could target these sort of things. I also figured Apple would’ve opened up their screen time API by now and this class of software would become redundant
> When the punishment for the thing is effectively 0, you dont understand why people are more likely to do the thing?

You're making several bad assumptions that nullify whatever point you were trying to make: that the punishment is the only thing that controls how often someone violates the law (other factors include culture and internal morals); that the punishment is "effectively 0"; and that the converse of "much more likely" is not "no difference".
What is the motivation for gaming companies to use this “thin layer API” in their games? Do they get a cut of some funding pool, or just some good karma?