skysight-inc/HackerNews huggingface dataset:
Then what do you need pen testers for? With an offer like that, any threats to your system will come work for you instead.

The reality is that you don't get paid well if the data is worthless. You only get paid well when the data is worth orders of magnitude more than what you're being offered. If you are inclined to break that law, that's a pretty nice carrot dangling there.

If you are so inclined, why wouldn't you take the job and report the not so crafty exploits to bring in the sweet, sweet paycheque and use the really juicy exploit to also go after the even sweeter data? It's a total win-win situation...

...unless you get caught, but if you are so inclined that's not exactly on your radar.
>They were regularly beating Lexus on quality surveys at that time.

Not saying that Porsche didn't improve their quality a lot, but it was Lexus that really dropped the ball there.
So would you buy a car with a 50 mile range?
I hope they do this better than firefox did.

In firefox, if I try to go to a LAN host by ip, it will (often?) try http, and if that fails, try https, and if that fails, show an error page, but the address bar has https... so if I edit the url, it's now https. Major PITA.
This is an issue though, he is so fucking successful that he can't be wrong, right? wrong. Don't put people on pedestals like this, it never ends well and isn't how the world should work.
> We will know EVs have arrived when Americans in the mountain west start trading their Subarus for Teslas.

No need to get the laggards onboard, you simply need to get to the inflection point where the petroleum supply chain is no longer sustainable (due to demand falling through minimum economic viable throughput). Still at least 10-15 years out, as the US accounts for ~35% global oil consumption. US EV uptake is still too early to see where the weakness is from well to pump, but those Achilles heels will appear eventually. Some consumers may not get the EV they want before they lose the gas stations nearby they have.

Japan shows us the future in usual fashion: https://cleantechnica.com/2023/12/13/japanese-refineries-clo... ("Japanese Refineries Close As The Country’s Petroleum Consumption Falls")

https://www.reuters.com/business/autos-transportation/how-el... ("How electric vehicles are accelerating the end of the oil age")
Go test drive a MINI Cooper SE Electric Hardtop 2 Door, it might fit your needs.
"When you don't have a need for a cryptographic digest, it's important to think of the channel's bit error distribution in selecting a checksum algorithm."

Important real-life-facts.

There was no "give-me-an-appropriate-hash" function.

There was:

md5sum yourfile.txt

Nobody wants to think about "channel's bit error distribution" in a non-security critical context. In fact, its irrelevant, and possibly a usability issue.
Generating 2^64 hashes isn't guaranteed to produce a collision, and even if a collision did exist in that set, you're not going to find it by getting a bunch of GPUs to compute 2^64 hashes. There's a huge difference between a haystack that maybe contains a needle, and a needle that's been pulled from the haystack and presented to you. To actually find and identify the collisions you'll need to hook those GPUs up to some sort of storage/retrieval system. Just to store 2^64 128-bit hashes would take 295.1 exabytes. That's an order of magnitude more storage than NSA's utah datacenter[1].

[1] https://en.wikipedia.org/wiki/Utah_Data_Center
And you’re focusing too little on the impact of edge cases. Think geometric mean, not arithmetic mean.
Screwed up thing is the hiring conditions today are almost the opposite of 2020, so it would work great now (lots of entry to mid level jobs open, more comfort with remote than in <2020, etc.)
IMHO the best essay on this, at least for scientists and entrepreneurs, is Richard Hamming's "You and Your Research". Certainly it caused me to work on things that were worth my time.

It's been discussed a lot on HN: https://hn.algolia.com/?q=hamming+you+and+your+research
I think the rest of your sentence was "by default" which is the same thing the comment you're replying to said: "security gets in the way of everything"

One could always launch any java process with java -Djava.security.manager -Djava.security.policy=someURL and it would sandbox a huge number of things (see: https://docs.oracle.com/en/java/javase/17/security/permissio... )

The problem is that defining a reasonable policy for any modern app is a gargantuan pain -- as is the case with any security policy language -- so as the GP said people hated it and now it's dead https://openjdk.org/jeps/411
The missile did not, in fact, know where it is.
Yes neural networks, and even the math required to build them, are very simple calc 1 stuff generally. It’s more coming up with these models that takes powerful intuition
Ah should have said “not criticize what the owners of the company does outside of work”

The open letter used work resources and hours to go after what their boss did outside of work. Worse, after being told to stop, they continued.
Your whole point is 'make political will and funding for broad public transit building programs appear out of thin air' or else 'do nothing'.

Your claim is that 'getting rid of parking' is what is being pushed, when it is getting rid of mandatory, arbitrary parking minimums.

If there is needed parking it will be built because developers don't like building tenancies that don't get sold because no one can live there.
Yes ;) Like when he threatened to sue people for not wanting to advertise on his platform.
There are also people that prefer to use free / open-source software because of it giving power & control to the users & community, opposed to proprietary software where a single (typically commercial) company controls the software.

The disadvantage of propietary software is that you are at the mercy of how the company decides to maintain and develop their software. And they might do undesirable things towards their users. Like displaying adds, tracking / profiling their user's personal data. Changing the pricing. This typically happens when they gain enough market share and have enough users vedor-locked into their software.

And the vendor lock-in also makes it harder for users to make the software work with other 3rd party software. So generally propietary software isn't easy to combine with third party software, unless the company has a commercial incentive to support it. But often one of the reasons for the software to be propietary is because of the vendor lock-in. So that you will use all software from 1 company that all works well together, but doesn't work (as well) when trying to combine it with third party software.
interesting, i didn't even realize bliss for the pdp-10 was called bliss-36

how did coroutines reduce your multithreading errors
"But an analysis from CarGurus found that EV prices were still 28% higher than gas-vehicle prices on average."

That's the problem. The product costs too much. Way too much.

Auto companies have tried to position electric cars as a premium product. The electric version usually comes with the highest trim level. In the truck sector, it's ridiculous.
Ford just raised the price of their base electric F-150 by $5000. "The new starting prices for the Ford F-150 Lightning will range from $54,995 for an entry-level Pro model to $92,995 for a Platinum Black trim." The base price for the 2024 gas version is $36,570.

Tesla's Cybertruck is only sold in the high-end models. Base model will be on sale in 2025, maybe.
Rivian is in the "Super luxury all-wheel-drive electric truck" category, according to Edmunds.

This despite steady decreases in battery prices.

If the US auto industry doesn't get its act together, BYD and Toyota will take over the low-end market.
It does, to an extent, in many countries with stronger labor protections. The US has a unique conception of individual rights where they disappear the moment you step into a workplace. This is not, however, universal.
Also what Apple is doing isn't necessarily legal either. Just because someone else was speeding on the road and didn't get a ticket, doesn't mean you won't.
Renting a car for a week is close to a monthly car payment(less true today) - and the more frequently you have to do this- the less sense it makes. I've also found it increasingly difficult to book rental cars in advance that will actually meet my needs. it's a bit of a gamble to depend on that.
While that's something to keep in mind, that's a reason for measuring tue effects and choosing accordingly, not a reason not to.

Otherwise on that basis you shouldn't put a cache in at all as there will be workflows where the hit rate is so low the cache has a negative effect, however unlikely.

If you don't know e.g. the rough performance profile of your requests, and the typical distribution of them, you likely have far bigger things you should be worrying about.
So if the document is evidence , then its probably created by the attacker. This seems like a setup where collision is more relavent than 2nd preimage.
The recent discussion here about Turbo Pascal commenters said it was written in assembly. Seems to be supported by https://en.wikipedia.org/wiki/Turbo_Pascal
-80c is 193K. Looking at https://en.wikipedia.org/wiki/List_of_superconductors there are 3 superconductors that work at that temperature or higher. But they all need very high pressures (150 GPa or higher). Which is close to the pressure in the centre of the earth (380 GPa).

A more reasonable superconductor that's widely used is YBCO, which at 95K (-178c) is cooled using liquid nitrogen. And I believe that's at normal pressures.
“The best way to store money or time is using int64/bigint” is a hill I’m willing to die on.
But by going to 4chan, you are providing ad revenue allowing them to host pretty racist and hateful content. You may be there for the altruistic content, but you can’t separate it from the rest. Is the openness of the other content on 4chan worth that?
Apparently people are noticing very steep drop-offs in observed range based on temperature, eg. a Mazda CX-90 (26 mile rated range, and gets it pretty consistently at 70F) can only go around 12 miles at 40F.

https://old.reddit.com/r/MazdaCX90/comments/18ib2cz/battery_...

A big component of it is heater use. In an ICE vehicle, you heat the car with waste heat that is going to be lost anyway. In an EV, you heat the car with energy from the battery. Heating takes up way more energy than most people realize.
Amusingly enough if you fly private plane it’s about twice a month before ownership becomes the optimal route, even less if you buy fractionally.

I’d love a cheap EV as a second/commuter car but nobody will give me one, and my crappy old Passat still works.
we do not usually spend all our idle time in toilets, though
.
Not OP, but for example.

From Brisbane, Queensland to Daintree Queensland and back. I do this trip once or twice a year.
What about the fiduciary duty the company owner has to it’s shareholders, where the employees are part of that group too.

I could also say “shut up your job is to make the stock go up, this isn’t twitter tea party time” to the owner
Where do you get "and not get fired" from? You seem to be just inventing your own definition and falsely attributing it to Musk.

Not being banned from a platform for a legal post that might be unpopular is not at all the same as never getting fired from an employer.
Seems kind of strange when this just happened:

https://insideevs.com/news/702783/byd-plugin-car-sales-decem...
I don't know about the USA, I live in India, and people just want electric bikes and cars.
Restic is good for storing files on computers you don't control because the private key doesn't get exposed. It also has features for snapshots and testing backups. You can select a percentage to test so if you have a slow internet connection you can get some piece of mind without having to download all your backup data.
Agreed. New cars are already expensive, EVs take that a notch higher.
Maybe. Maybe not.

But I certainly wouldn’t pay a $10k premium over a similar vehicle with a 300 mile range and easy recharging (read: hybrid gas).
The GAO report[1] referenced in the lecture notes.

[1] https://www.gao.gov/assets/imtec-92-26.pdf
> 93% of trips are less than 30 miles, but the vast majority of drivers take occasional trips

But they still take these occasional trips, and getting there in an expected way is important to people.

So I think the relevant statistic is not what % of trips are short, but what % of owners take a trip that may induce range anxiety once every few years or more? If I knew I had a big road trip planned for two years from now it'd still affect my choice for a new car today, if I felt that I might be limited by range.
Something around $1 trillion a year?

We’re lucky interest rates are low. However, with the 10 year around 4%, it’s going to be expensive.
yea that character limit sucks... thanks dang
If an EV were significantly cheaper than an ICE, then maybe it would be worth the extra hassle and expense of figuring out an alternative for an occasional long trip. But EVs are often more expensive, especially compared to a used ICE. So the benefits, at an individual level, often don't outweigh the downsides, even if it is only relevant occasionally.
I picked milk as an hypothetical example but it could have been anything that's essential in some way. Could have been salt, sugar, fertilizers, etc.
EV driver here who takes many road trips a year in them, so my hobbiest enthusiasm certainly guides my thinking.

How impractical is renting a car for a once a year trip? EVs have a lot of upsides in terms of never going to a gas station and having less maintenance.
Range anxiety is real; it took quite a bit of work and trust for my wife to not fill the car anytime the tank registered half empty.
It should be noted that md5 is probably still secure for this usecase (maybe you could do a bait and switch with a specificly prepared file, but you can't force a collision with a non-evil file)

Still, they should switch. Sha1 is not good either.
>What makes you think that is the case?

The fact that the incompleteness is easily shown. Whether you look at the overall number of people who have used a certain drug vs the number of people who ruined their life with it, or at individual cases that didnt develop that way.

I also wouldnt go as far as your reframing of "certain drugs have certain results" to "certain people have no problem with certain drugs". Given the high impact of a users socioeconomic background for how he develops i think you can look at the way people use a drug / perform addictive behavior and find pattern for the people most and least negatively effected. Its not that different from finding the group of people that get morbidly obese through overeating or get into debt for gambling. You can often tell them by their planed behavior and lack of self reflection and self control in that behavior.

You know certain stuff is addictive and messes with your self control. If this fact sneaks up on you or you planed to solve that with overconfidence in your self control you are pretty likely pretty screwed. And the people with the most problems here are those that keep going and accelerating despite knowing they have no more breaks.

Its also not something that should take you long to realize looking at how you stick to your planed consumption and your ability to react to that. Think days for some people. With the next group at risk those that fall asleep at the wheel. And so on. While i wouldnt risk it with cocaine and the likes, i think arguing that its impossible ignores a bunch of very successful people. You could argue that this just means those are the people who manage to stop on their own after it escalates and then stay away from it, but this ignores the people who somehow have a tendency for not accelerating routines they cant recover from too far. If i had to guess those might the the people who trust themselves the least, i am pretty sure you are unlikely to land in such an arrangement by luck.

We can of course argue about the difficulty of balancing on this spectrum for certain drugs, but pretending this is a matter of "there could be" and not the history of actual individuals sounds a lot like a self fulfilling prophecy. Especially since it glosses over the people who stopped their usage for other reasons then having lost control (health, happiness ...)

Individuals, their predisposition to certain drugs and addictions, their risk profile and their behavior are just very different.
What is your opinion on brighysigns? While the default software is kinda crap the programability of them has been great for us. But we aren’t very far in.
It's been a pretty cool area to see innovation in. Newer Teslas (Model Y at least) have a really complex heat pump system that really helps reduce range loss dude to cold weather.
Depends on many factors. I’ve lived where I could grab an SUV from the rental shop down the street anytime I wanted, and I’ve lived where the drive to the rental shop would almost exhaust some EVs.
>The owner of a Jewish deli shouldn't be compelled to hire a formerly convicted neo-Nazi.

Who cares if they were convicted? That detail is shoehorned in here to make it sound like a good example when it isn't. Neo-nazis are not a protected class, and so the deli owner would be entirely within their rights to not hire someone on that basis, with or without a conviction on their criminal record.

And honestly how often do they get convicted of say, a hate crime, that might show up on a background check compared to the number of neo-nazis in the country with clean records, or who get acquitted, etc.?
We looked at getting a hybrid this past fall when buying a car, but couldn't find one that suited our needs. We didn't even look at an EV, because of the range issue (our relatives all live 2+ hours away, visits to them are frequent, and we can't charge it where they live).
Maybe there’s a market opportunity for an EV trailer - something that has own batteries for extra distance, or even it’s own electric assist motors.
(Founder of windmill.dev, the closest alternative to Airplane and we are OSS)

Congrats on the acquisition Airplane team. You were a strong inspiration for us, a precursor and set a high-quality bar for pro-code developer platforms. I have nothing but respect for the Airplane team and we probably wouldn't exist in our current form without your competition.

We are ready to migrate all Airplane customers and the migration would be very smooth as many of Airplane concepts map 1:1 to our own concepts. If you need urgent migration, ruben@windmill.dev

One customer, nocd, migrated hundreds of scheduled scripts and workflows in just a few weeks and with only minor changes.

Our platform being fully open-source, you will never be at the risk of us sunsetting anything since you can fully self-host it (it is not an hybrid deployment model like Airplane where the Control plane are in the cloud). We are used by thousands of businesses including a few F500 at scale and can send reference over emails.

We are a smaller team, have raised reasonably and are close to break-even. As an open-source product, I keep in mind to resist the urge of raising too aggressively so we can keep control of our destiny and never betray our open-source principles of transparency and fair pricing.

(note: we have an example repo of the folder layout one can use to be backed by git: https://github.com/windmill-labs/windmill-sync-example, it's not all that different from airplane. See our CLI guide here: https://www.windmill.dev/docs/advanced/cli)
You might search for Everquest forums and post his obituary there--assuming you know his user names:

https://www.google.com/search?client=firefox-b-1-d&q=EverQue...
I've been playing around with the Playdate SDK (https://sdk.play.date) over the holidays and it's awesome for small games like the author describes.

Working with a tiny 1-bit screen and ~150MHz CPU puts some serious constraints on what you can do, which I've found to be pretty freeing (less analysis paralysis, more doing...)
> There ends up being a usability issue here. An MD5 hash is only 128 bits long. So 32 hex digits. A SHA-2 hash is going to be 256 bits. Or 64 hex digits. Manually comparing 64 hex digits is in practice much harder than twice as hard as comparing 32 hex digits. People get lost in the middle.

Comparing MD5 and SHA-2 for visual human diffing is like comparing a stick of dynamite to a landmine when trying to pop a pimple; any potential safety differences are trivial once you start using something in a fundamentally unsafe way.
You can generate pairs of hashes for random inputs and check for collision without storing all of the outputs, no?
I think a key part of solving that is by not thinking of it as a set of security enforcement rules on top of the preexisting platform, but as a new platform (that just runs everywhere). So, instead of ACL listing what files can be accessed, shove it in a sandbox where the app has its own files, and the platform open file dialog enables the user to authorize one-time access to individual files.

You basically can't take a complex thing and write complex security rules for it and expect success & real world adoption.
Not good examples IMHO. The bank is legally your money. The OS can be freely reinstalled without hassles.

As for stores, they all have the same way of purchasing stuff, and if they all shut down, society would collapse and you have bigger problems.
Not to mention something I've been running into lately when renting cars: They will only rent to you if you are from out of state, and oftentimes you have to show them that you have a valid flight ticket. They don't like renting cars to people who live in the local area, and they're getting more and more strict on not doing it.
By the time this is a concern, our elected and institutional government workers will have figured out how to take the tax out of charging stations or car sales or whatever.
HAMs are using it as a MeshCom terminal: https://icssw.org/en/meshcom/

Halfway through this video is an example, contrast it with the iOS app shown before: https://www.youtube.com/watch?v=aWtqm7lbYoo

This is a deeper dive into specifically the T-Deck and Meshtastic: https://www.youtube.com/watch?v=L1hvsYEX7WE
The Prime refers to the premium you’ll pay for them, sadly.

Many good options abound, but they’re all $10-15k more than the basic guzzler. And $15k is a lot of fuel.
Used cars, sure, but you're often either paying for someone else's problem or losing out on modern safety features.

For new cars, especially with the tax credit (which most americans qualify for), EVs are cheaper. That's not even factoring in maintenance costs over 5 years nor savings from charging at home (of course not everyone can charge at home).
Severely break is a bit of a overstatement.

It will make a speed up, but its not like shor's algorithm - you need a really powerful quantum computer before md5 comes under threat.

But to be clear. Md5 is broken do not use.
Incorrect. Right to work is about not having to join a union or pay dues. At will is about the rules for firing.
we do a lot of cron-related seo and for years the airplane guys have been buying ads on tons of cron-related terms including our own brand, with the pitch “ditch your cron jobs for airplane”.

Sigh. It truly sucks for the devs that took them up on that pitch. Meanwhile cron is still working fine.

In their defense, dev tools businesses are hard. We’ve navigated it by staying lean with very efficient go to market, but the traditional VC scale-up is very hard to pull off.
The M5Stack Cardputer is another interesting device along these lines: https://shop.m5stack.com/products/m5stack-cardputer-kit-w-m5...

(I don't have one of these, but I do have one of their other devices that seemed pretty nifty. Haven't done much with it yet, though.)
Why not the 100 hours of operation?

For at least two weeks prior it was know that long continuous operation would render the system unusable.

It seems the floating point issue was a known limitation was a reasonable work around.