skysight-inc/HackerNews huggingface dataset:
The acceptance of search engines set a lot of precedence that make any blanket reasoning harder to justify - the underlying technologies and use cases are often similar or even the same. Google has been using both extractive and generative summaries in their results for a long time, and even had 'cached' mode.
TL;DR: It's definitely interesting, but this is about attacking vaults with biometric unlock enabled (and are thus stored on disk) on Windows, and requires workstation access and a Bitwarden design flaw that was fixed in April.

> the attack already assumes access to the workstation of the victim and the Windows domain

> The underlying issue has been corrected in Bitwarden v2023.4.0 in April 2023

> As it turns out, we were not the first to discover this in March 2023, it had already been reported to Bitwarden through HackerOne.[1]

I could have sworn [1] had a dedicated post here on HN but couldn't find it, it's worth a read too.

[1]: https://hackerone.com/reports/1874155
Because there is much more to the linux kernel than maintenance.

Look at things like ebpf and uring for examples of meeting real needs with new development in the kernel.

I doubt that a LLM will be able to come up with the ideas, and implement these things without substantial prompting.

For the every day stuff. Yeah, sure. Though you'd be amazed how many strange corner conditions POSIX and Linux have even around "simple" things like pipes.

... Understanding the whole context may be beyond where we are today based on what I have seen from LLMs, there may day where they can come closer. But as the Klingons say: "Not today."
You? ChatGPT? Could be. It certainly comes across as if you could be.

e.g. " Then the "problem" to be solved is with the people making those ever changing requirements, good or bad reasons "

Good or bad reasons? Reasons for that? What does it have to do with changing requirements?

We can't get in your head. You're going to have to speak in ways that presume the receive has *no idea* what you're talking about. Instead, there seems to be some leave of assumption, and that leave a gap.
There are benefits to a compilation (transpilation?) step that are worthwhile. Most notably, types/typescript.

Everyone's bar for what is bloat is a bit different. Everyone's definition of simple and clean is different. Typescript, even with a compilation step, is simple and clean to me. Javascript without types is the opposite of simple. Javascript without types is the opposite of clean.
The design of the experiment is clear, it's the value that's circumspect. I suspect neither you nor the researchers have a firm grasp of survey methodology or statistics.

All this experiment measures is the impact of a priming effect.
I realise for casual users Windows is always going to be the OS of choice if for no other reason than it comes pre-installed and most people don't know how to reinstall an operating system.

However, Windows may be in trouble with more tech-literate people who do know how to change it. I can only speak for myself, but I've been a Windows user since 95. All but one of my programming jobs over the last 20 years have also been working on Windows. But I really dislike the direction Microsoft are taking and I find Windows to be terribly slow these days, with each version seemingly worse than the previous one. So I decided to look elsewhere.

A couple of months ago I bought a new laptop with the express intention of running Linux on it and giving it a good college try (I didn't want to mess around with dual-booting and I still need Windows on my main PC for work... for now). I know very little about Linux, but I've decided I'm not going to use Windows past 10 so it's time to find something else.

I went with Debian running dwm (Debian because I value stability over everything else, and dwm because I like the suckless philosophy) and it's honestly surprised me how good it's been. It's SO snappy. Everything is instant. It's really been a breath of fresh air.

I was especially dreading programming since I've solely used Visual Studio since Visual C++ 4.0 and don't really know anything else. Anyway, I went all-in and started learning Vim, GDB, and Make, and boy do I feel like I've been missing out. I'm really enjoying programming again, which for me has just become a job over the years.

Anyway, my point is, if tech-literate people are willing to give Linux a try, I wonder how many of them would be as surprised as I was and may make the switch permanently. With Windows getting worse, and Linux getting better, maybe more than ever.
I don’t think people are nit picking. The issue of container vs VM security is unrelated to memory safety. So bringing them into the discussion here, even if just in a hypothetical, is odd. You could say the language might be misleading but Occam’s Razor would suggest they’re just conflating the two topics.

Frankly, their comments since (especially those around namespacing) doesn’t do much to convince me that understand the distinction either. So it’s not just the opening post.

The best think they could do in this situation is to ask detailed questions from those that reply, as to why people disagree. Rather than stating they do understand and everyone else misunderstands them, while continuing to post the same misconceptions but phrase differently. At least if they asked questions, there’s a chance they might learn something.
I think that hypothesis is correct, and has spread to tech startups in general (primarily web-based tech startups). I have never lived in California but have many other places around the country, and with many different companies, and that is definitely in-line with what I've seen as well.

The other factor (related somewhat but not completely) I think is that Apple has become a status symbol. People who chose Windows were rare, and got lots of shit for picking Windows. The peer pressure made the majority of people either stick with macOS even if they didn't like it, or switch at the refresh cycle (and make sure to announce that was their intention anytime they got shit for having a windows laptop). Usually I was the only one on Linux, and there'd be one other person on Windows who didn't care about the pressue, but 99% of everybody would go with the flow.
I am curious as to when people consider the golden age of truth ?
At 19 she says she is "an expert programmer", but in the words of pitcher Dizzy Dean, "It Ain't Braggin' If You Can Back It Up". Her github looks like she's backing it up.

All you startups hanging out on here, shouldn't you be hiring her?
The point is someone decided to write it and here it is.
Caching is bounded, GC is potentially boundless. Caching is all about deciding what to evict.
would a firearm have helped this man?
I remember wasteland 2 (from steam/wine) crashing on Linux when you finally entered the rangers headquarters. Luckily a linux kernel developer played the game and figured out what was going on. He told everyone how to fix the game with some arcane commands, increasing max counts, etc. Was pretty wild.
Hydrogen is even better for longer-term storage (e.g. seasonal). Produce hydrogen via electrolysis from solar in the summer, then power things when it's cloudy + low sun angle in the winter. There are quite a few major hydrogen storage projects in progress that do exactly that, FWIW. E.g. https://www.energy.gov/lpo/advanced-clean-energy-storage (Disclaimer: My wife works on that project)

Batteries don't compete for long term storage. Losses are too high. Hydrogen is an excellent solution for longer term (weeks to months to years) storage.
To a non chemist it may look like it’s going in circles. When you’re not solving a bug and writing debug statements and throwing paint at the wall it looks like you’re going in circles. Everything is going in circles until it isn’t. Be optimistic!
Aircraft are very expensive to operate, so it's unlikely that aircraft are being flown without good reason. It also depends on what the definition of "empty", as an aircraft is never empty, as it always have a crew. There are many small aircraft at Farnborough.

What about cargo planes, as they no not have passengers!?
Fantastic words of encouragement! It's always better to do nothing and criticize from the sidelines, right?

My first thought when I looked at this project was the words of one Linus Torvalds more than 30 years ago (and yes, I remember that time) — "I'm doing a (free) operating system (just a hobby, won't be big and professional like gnu)".

I am so happy to see people take on things like that!
95% will be good enough if it offers extra features that people want.

Linux did not have full compatibility before it took off. And I don't think the bar is THAT much higher today for a new competitor, where I can swap the kernel in.

If anything it may encourage us to use a few less Linuxisms in our code.
> Because the answer to that is simply “it looks like flovers in a vase”. There is no question about human’s ability to tell what the image is.

Thank you. Because that right there means that any bias being measured is one that's introduced by the researchers. Ergo the study is useless.
If you look at the map, it won't be fought over as much as Ukraine will dominate agriculture. What the Netherlands did for pig farming in the 90s Ukraine will do for the entire industry. China buys pork from the Netherlands it's so cheap.

If you mean natural resources it's still water for trade. Russia has little outward rivers, Crimea and Ukraine would help their trade a lot. The Suez canal and the area around is is incredibly wealthy.
One place to get started might be the Alliance of Independent Authors: https://www.allianceindependentauthors.org/

They are author as opposed to translator-focused, but maybe reaching out to them can be a first step in getting the lay of the land? They might have some information about how their authors tend to use translation services. Although I'm sure there must be some translator communities out there that could provide even more focused info.
The famous mathematician Vladimir Arnold said (approximately) “the best way to learn a topic is to write a book on it.” He did that a few times in his career — most notably his excellent book on classical mechanics.
The "JS problem" is two sided: (1) we need JS (well, not anymore, there's WASM now too), and (2) many devs do not like the DX of JS (me included).

This project, if anything, follows a JS-on-backend-and-frontend and thus is more of a promotion of JS-everywhere than a way to "get rid of it".
Well, I have learnt alot from some books.

The entertainment value is also value.
I think peaceful protests are great, and from time to time civil disobedience is needed to get the point across. But while blocking main highways with your protests might get attention to your cause, I think it will backfire with the common people just trying to get to work associating your cause with being the reason you got fired from your job for being late.
It's very short-sighted and self destructive to any progress.
Thank you. I was never able to find this again. Really enjoyed it!
This is not a bad reasoning problem. I say 'reasoning' because, IMHO, the most valuable takeaway in a job interview would be to assess how the candidate approaches the problem and whether they can reason to find an algorithm to solve it. Actual code seems quite secondary after that.
Are there no valid moral panics? Are you a moral anti-realist?
> i do miss the Affinity products tho, they keep making them more Windows/MacOS-only, now relying on the windows store/msix installer, basically guaranteeing they'll never work with Wine/Proton :(

I saw this yesterday, it may be helpful, but there may also be dragons:

https://old.reddit.com/r/Affinity/comments/18vzjhz/affinity_...
Yes, everywhere I possible can. Particularly for targeting CLI programs and Linux daemons.
Which modern features do you mean? Java and C# code looks similar to me.
Yeah, I wish not only self-publishing one’s own work, it also creating a small journal for publishing other writers was the first instinct of young writers, especially young writers of fiction, rather than seeking publication through more traditional outlets. I think small collectives of dedicated writer and self-publishers and self-producers is literature’s best hope for a new epoch of great writing.
We talked at length about Max Ernst's statement "Technology is a way
of not having to experience the world" on a Cybershow
episode. Specifically about a group of people standing around an
injured person or a fight, all filming it as a way to "be there and be
involved, without being there or being involved".Indeed, the perfect
shield.
MS doesn't think their software is tools for their users to use; they think their users are tools for their software to use.
>the attack already assumes access to the workstation of the victim

I seldom can take "vulnerabilities" that require physical access seriously, because if a hostile is physically next to my computer I have more pressing concerns than some passwords.
> Compare this to Linux with the extensive use of containerization and things like eBPF for dynamic security measures

I think it's an interesting comparison study and I'm not convinced either way of The Right Approach. OpenBSD takes the approach "keep the attack surface as small as possible" while Linux takes the approach "let's bolt a bunch of layers together... good luck making your way through all of it"
The title is very misleading.

Most of the research given is about exercise, and including some level of strength training, being an overall health benefit. The research does not necessarily support higher body mass (eg big muscles) being beneficial or even necessary. Higher muscle mass can actually be a detriment to things like joint, heart, and kidney health.

What matters is exercise that includes some strength training. Training for healthy strength (includes stamina, complex movement, etc and not just max weight) should be the focus over building mass. There are even studies showing that measures like grip strength matter most in relation to body mass - meaning strength to mass ratio matters.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6778477/
OpenBSD Home Router (2020)
We all should know machine learning algos? They're cool and I've learned a bunch in school, but this is the crux of programming now?
As someone who has a full time job and has self-published a novel I wrote in my spare time, I do not think that supply of books is the issue. In fact, as I went through the process of learning how to self publish, I met many people who write in their free time, including people I know and friends of friends I don’t know. I was actually surprised by how many people there are who have either already self published or who have an unpublished book they work on in their spare time.

From my experience, the issue in the US is on the demand side. People here hardly read, and when they do read, it’s usually a super popular book all their friends have read or that Tim Ferris talked about. When I published my book, I was surprised by how many close friends and family bought the book to support me, but have never opened it. And it wasn’t until after I published my book and became more aware of the reading habits of those around me that I realized how little most people read these days. There are a handful of people who read 30-50 books, but if you were to take the median so those people don’t skew the average, I’d estimate that it’d come in around 1-2 books. Probably half of the people in my life don’t read a single book in an average year.

While I never wanted to make a living off my book, I’ll admit it was discouraging to see how few people read it cover to cover. I took Mark Dawson’s course and got all of the social ads, lead magnet, etc. setup. The ads did work, but I quickly found out that of the subset of people who do read a lot in the US, most are 60+ and want self-published books to be either $0.99 or free. I had multiple angry old ladies reach out to me through my Facebook ad complaining that they weren’t going to pay $2.99 for a self-published book and that it was upsetting I’d even try.

It wasn’t all bad and I did find readers who genuinely enjoyed my book and supporting self-published authors, but these type of people are a very small percent of the population. If the average person read 15 books per year and was ok paying $10 per book to support authors, I think you’d see a lot more self-published books. From my anecdotal experience, there are plenty of people who aspire to write, but we lack a supportive reading culture to fully cultivate authors (even part-time authors).

EDIT: I’ll also add that among the people in the median reading 1-2 books per year, most are listening to those books as audiobooks. I’m not one of those people who say listening to books isn’t reading, but for the average full length novel it costs about $10k to get an audiobook made, which is way outside the budget for anyone trying to publish books as a hobby. I paid for an audiobook to be made because I have the income and thought it’d be a fun experience (which it was!), but I will never make enough from the book to cover that expense
I'm not sure what your activities are, but in the modern age only having a desktop is highly restrictive. I do have a desktop and I don't really have a personal laptop, and sometimes it is annoying to not have a computer on the go, and mobile devices don't cut it.

Yours is kind of an extreme use case post 2010 or so, I'm glad that it's working out for you.
...and without any resistance! (sorry, could not stop myself)
So, here's where it gets wild: a couple years ago I stumbled across a study with two treatment groups. The first group was just given graded readers targeting certain vocabulary, and was asked to read them as much as they like. The second was given the same graded readers, but also asked to use flashcards to review the target vocabulary.

So, the flashcard group was just using flashcards as a supplement to extensive reading.

Well, at the end of the treatment period, both groups had the same vocabulary retention. But a couple months later they tested again, and the "no flashcards" group had better retention of the target vocabulary. And not by a small amount, either.
Maybe keep the distro wars out of a thread where people are barely able to accept that daily driving Linux is an option.
U.S. cities opt to ditch their off-street parking minimums
Off-topic but I'm curious: Where do you find .NET jobs? I don't see many on linkedin...
There are generally 4 major cyber powers that I consider when hearing about new advanced techniques / applications / threats: USA, Russia, Israel, China (in roughly that order). Israel is obviously complicated because historically a lot of their work has been in partnership with the USA, but that seems to be mildly less the case these days.
Steam Hardware and Software Survey: December 2023
I know it looks silly but what was wrong with being optimistic about what would be the biggest physical discovery since the transistor? Acting like an expert when you’re not is something that I’d say happens on HN just as often as on Twitter. Learn to let it go
Your both right. The answer for how you're both right is Proton. Many more game makers started testing their games on Linux in Proton/Wine/Steam to make sure they run on Steam Deck (and other Linux), but they (mostly) aren't native builds.
It also seems like the UK has a more serious NIMBY problem than most countries -- presumably because most of the country is already someone's backyard.

E.g. some of Clarkson's Farm Season 2 is a bit ridiculous.

There needs to be a balance between economic development and preservation. Everyone can't live and work in a museum.
Svelte 5 is good, but runes need improvement
>the file is inconsequential. it could be any other universal abstraction

Bad abstractions are notoriously problematic, and no abstraction is fit for every purpose.
Only for short term storage. Hydrogen is meant for longer term storage where batteries have too high of a losses. E.g. winter vs summer.
I agree with you. It's a bit disingenuous to report the issue as pro or anti fair use when the real question is what constitutes a fair use?

Similarly, statements like: "they held with a ridiculously one-sided panel of folks from the creative industries, who more or less all agreed that everyone should be forced to give them money at every opportunity." just reflect Techdirt's own bias as to what they believe the outcome should be.

I also think that Tech Dirt's analysis of the FTC's position is conclusory regarding the downstream effects of increasing wealth concentration and reducing competition. It seems like Tech Dirt came to this in the absence of any thought as to what the implications would be for competition in a world where training data of copyrighted materials don't need to be licensed. I'm not so sure that such an outcome would improve competition in creative fields, and I'm not seeing anything from Tech Dirt explaining how they got there.
It's a little bit academic as most platforms (eg zoom) notify participants of in-band recording, and employee handbooks will often mention the possibility of recording and retention.
For the niche of realtime strategy games it's actually not too bad ;)
NYPD faces backlash as it prepares to encrypt radio communications
Ask HN: Resource to learn about CNC machines?
Where can I learn more about CNC machines, thier applications, different types and other granularity.
> I find that style of language off-putting and immature.

I normally do too but somehow it didn’t rub me the wrong way in this instance.

Perhaps the 1980s style day-glo star disarmed me? I didn’t really like that esthetic back when it was in fashion, but for some reason it was disarming here.

Perhaps it was the fact that the page was mainly a simple explanation with some clear drawings so a little stylistic exuberance didn’t overclutter things in my head.

All that been said, I’d normally be the same kind of curmudgeon as you.
I'm glad they made some improvements to security as a result of this finding. This "attack" is still very specialized though and requires local access which (as mentioned) could've exposed the user to keyloggers and other malware.
I spent 3 nights at Nintendo's original HQ
Interesting, I too heard of mouth pipetting via an antidote about a modern day bovine sperm collection facility.

I was surprised that anyone still did it given the availability of the micropipett.

Also, I wonder why the scientists of the past didn't obtain the liquid samples by simply sticking their thumb over one end of a straw dipped in the liquid.
Also curious to know if reading El País is sufficient to shield one from ‘misinformation’.
>"2. It ensures that every DNS request leaving my network is encrypted.

3. It caches DNS lookups for every device on my network, improving request speeds."

Some excellent ideas in this article!
It's not possible for me to say.

Clearly you can only do worse in Rust than you'd have with perfect C. But what's that?

The question is: what is the expected loss (time, bugs, exploits that lead to crashes or injury or death or financial catastrophe) with Rust vs other languages.

Unfortunately that's not the conversation we have. We instead have absolutism re managed memory, which does account for about half of known security flaws that have been discovered and patched. Removing half of bugs in one fell swoop sounds amazing.

It's not that we can't remove those bugs other ways. Maybe modern c++ can cut bugs in half at compile time too. But Rust seems nicer to play with and doesn't require much more than what it has out of the box. Also it's shiny and new.

Given that Rust is making its way into platforms that Cpp struggled into, it's potentially moot. I sincerely doubt Linux will accept Cpp, but we're on the cusp of Rust in Linux.
Reading the introduction in the post makes it pretty clear why it was created...

> I like to dig into complexity, and I like to learn by doing. On top of that, I spend a lot of time on the computer. Wouldn’t it be cool if I had a system that I would know from A to Z and that I could customise as much as I wanted to fit my expectations?