skysight-inc/HackerNews huggingface dataset:
> The issue is it is often impossible to distinguish from a white hat or a black hat hacking your live systems. It can trigger expensive incident response and be disruptive to the business.

If your servers are connected to the internet, you can expect that people from countries that won't prosecute them will try to break in. This will happen, almost immediately, as soon as they're connected to the internet.

If your servers have been properly secured, this doesn't matter. If they have not, you are paying for that incident response regardless and the only question is if the context is today because of some innocuous kid or a month from now because of some black hats from Eastern Europe and your company's internal database of everything is now public information.

You want it to be the innocuous kid.

> There is usually a pretty clear and obvious point where you can stop, not trigger IR, and notify the companies.

This is obviously not the case.

Suppose you suspect the company could be using a default admin password. Contacting them without confirming this a pointless waste of everybody's time. Checking it takes two seconds, and if you're wrong you just won't get in and will be one of ten billion failed login attempts against a public-facing server. If you're right, the successful login to an admin account from a novel external IP address could very reasonably trigger some kind of alert, which could very reasonably trigger an incident response when the staff knows that nothing should be logging into that account from there. Or it might not, because the kind of company that uses default passwords may not have thorough monitoring systems either, but you have no way to know that.

There is no point at which it would be reasonable to contact them prior to doing the thing that could trigger an incident response.
Show HN: Tool to build and monetize GPT bots without code with 0% commission
I've certainly thought about it :)

If you can write an interpreter, then you can implement it in hardware. Whether it will be _efficient_ compared to using another ISA is a different matter.

Of the top of my head: the unbounded block stack would need to be managed and spilled to memory as it grows (not unlike SPARC's register windows), manageable but complex. The operand stack either needs to be bounded or likewise spilled to memory. For a superscalar, the WASM bytecodes aren't the nicest to decode, but neither are x86 nor RISC-V (C implies variable length instructions).

Unsurprisingly, it would make a lot more sense to design a µArch that is well matched (eg. has rotation instruction) to WASM and for which translation is fairly straightforward. I'm excited about WASM exactly because it provides an interesting path for getting software on new and exciting uArchs. It's _MUCH_ less work to make a WASM translator than to do the full software stack.
There are also centrifugal forces at play, meaning heavier elements get also pushed upward.
Drat, my pesky off-by-one bugs!
I suppose they still have some issues, HN was down for a few hours today.
That's nice that they are leaving the secondary trading business. Of course, they can restart that business again.

But this all begs two questions:

1) Do their legal agreements protect customers sufficiently in terms of use of customer data? I'd argue no. They are a bit of a mess, but very broadly give rights to Carta and its affiliates to use customer data in all sorts of ways. Quite arguably they had every right to do what they did here.

2) Legal agreements aside, forget policies on use. How on earth did a CartaX employee get access to Carta customer data?

The reality here is that the loose legal restrictions on Carta's use of customer data plus what appears to be loose internal restrictions on employee access to customer data makes me wonder what ELSE they are doing with customer data that we CAN'T so easily see.
you could have it be an actual wiki with talk pages and all and let multiple LLMs overwrite each others documentation as they find mistakes & argue about it in the talk pages

Then humans could also intervene in the talk pages and set the record straight, while allowing LLM to go back and edit the actual article

this would also be cool because it would be async, like real wikis, so you can use slower models.
Mine as well. They had some outages today, I wonder if there's trouble afoot.
Team Fortress:Source 2 receives DMCA takedown from Valve
transliteration of documents most likely is covered by a national standard

it should be possible to file a complaint to you country's standardization agency and they will pressure the airline with fines
The final investment decision came in 2017. Saying that they didn't learn anything from the 12 years in between is horrifying. Even worse is calling it acceptable to make nuclear sound feasible.

Massive subventions made it possible in the 70s. What was sold never matched reality.

It is easy to see what happens when humanity finds an energy source cheaper than fossil fuels.

We've dammed up almost every single river globally. Nuclear energy never became cheaper.

Today we have found a new power source that is cheaper than fossil fuels. Renewables. Which barely have an geographical limitations. We are in for a ride as Jevons Paradox plays out its course.

- CCGT plants take advantage of scale from the airline industry.

- Coal is dead.

- Wind turbines are productized with only the foundations being true construction.

Nuclear is attempting to be a more expensive coal in 2024.
Will AI help us talk to animals?
My mom's last name is Saint-Pierre, but it's actually written as St-Pierre on her passport. She almost couldn't get on the plane in Atlanta last year because of that. You'd think such a simple abbreviation would be accepted, but apparently not.
Text of tweet thread:

Hello everyone. We have some unfortunate news to share with you.

Today, we received a DMCA takedown from Valve on all our public GitHub repositories and all its forks made by the community.

https://github.com/github/dmca/blob/master/2024/01/2024-01-1...

While we were discussing the project's future internally recently, we already came to the conclusion to stop the development of the project due to the current state of the code being unusable anymore with s&box's recent major engine changes, and that we overall moved on from it.

Sadly, this means this DMCA takedown is the nail in the coffin. We cannot bring it back and we've hit Valve's attention, it seems like they definitely don't want us to use their IP (which is totally fair and legal from them).
>Code is read and maintained by humans, so it is under selection pressure to be comprehensible by human minds.

I think the opposite is actually true for code that lives in long-running projects that change hands relatively often. It seems like the safest state for code to be in is actually to be incomprehensible, so it's too "scary" for any developer to refactor. All the comprehensible code can meanwhile be safely moved around until it's eventually incomprehensible as well.

Speaking from complete naivete about biology, I wonder if there's a similar game going on with viruses and cell machinery. If the cell's processes are too "legible", then presumably they're easier for a virus to evolve to hijack.
> These people didn’t magically create mass from nothing. They ate too much for their activity. Done. Stop doing that if you don’t want to gain weight

Not true.

https://www.scientificamerican.com/article/science-reveals-w...

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5082693/

> discovered that certain Russian populations had large intestines that were about 57 centimeters longer on average than those of certain Polish populations. Because the final stages of nutrient absorption occur in the large intestine, a Russian eating the same amount of food as a Pole is likely to get more calories from it. People also vary in the particular enzymes they produce. By some measures, most adults do not produce the enzyme lactase, which is necessary to break down lactose sugars in milk. As a result, one man's high-calorie latte is another's low-calorie case of the runs.

> Call out: Germ-free mice can eat more and gain less weight than conventional mice
Ironically, I didn't notice that because MY internet was down, due to heavy winds/rain from the big storm yesterday.
I'm not sure, but as an 80's kid things haven't gotten remarkably better in my time. Modern technology sure is grand, but I've been worried about economy/climate/politics my whole life because it just keeps getting worse in those areas. Especially a lifetime of impending climate crisis then adults, and now my adult peers don't seem to believe is real.
And how about reading an ebook?
I have a lot of respect for Rick's technical and music skills. But there's one place he and I diverge which is compression. I was really surprised to hear him compliment some really compressed audio saying it made it really crunchy, or something. Besides Clear Channel, at least IMHO over compression also drove people away from genres that used it. See the Loudness Wars Wikipedia entry for a good explanation. https://en.m.wikipedia.org/wiki/Loudness_war

I was a rock listener for a long time, but my local rock station spent the 80s and 90s adjusting their format just enough to kill off competitors and then swinging back to their tried and true format of the same tired songs. So some of this is definitely self-inflicted both in terms of format (unimaginative and rarely updated playlists) and presentation (heavily compressed audio) that drove me away.
LAMs: From Large Language Models to Large Action Models
There’s no question that we’re living in the era of generative AI, and its impact is only growing. More and more, AI is helping us write emails, create imagery, consume information, and even code. But as empowering as it is to generate something of value, whether a beautiful illustration or a customer service reply, there’s something else that’s just as important: the process that surrounds it.
It's more that it's a completely different technological paradigm. 2G is deeply based on ideas of circuit switching, not just on the radio link, but also in the core network.

It's possible to emulate all that at various levels, but that doesn't come for free (in terms of complexity, hardware, and spectrum). Maybe in 10 years it'll be cheap enough that it'll just be done in the spare cycles of some 6G or 7G SDR network, though, if that's worth the extra spectral inefficiency.
Should have been more selective of what he leaked.
Rocketsized – List and compare various rockets
Free MIT Course: Performance Engineering of Software Systems
The only thing that makes sense to me is that the body gets more efficient.
Try Chrome’s new Happy Fun Interest Cohorts feature to make sure that all your ads are served through Google’s ad services networks and approved partners. It won’t reduce your bandwidth but it will make browsing the web so much more fun and satisfying!
Bodies Grotesque and Beautiful:Searching for aesthetics/meaning in the monstrous
I did not miss the point, I gave an answer based on the ground-truth rather than theory.

> Google's primary web search feature could, in theory, be implemented without a line of JavaScript

...and yet, in practice, Google defaults to a JavaScript-heavy implementation. Search is Google's raison d'être and primary revenue driver, I posit it therefore is optimized up the wazoo. I wouldn't hastily assume incompence given those priors.
Obviously. This is a regressive tax (meaning it targets a larger percentage of income from lower-income groups than from high-income groups, as in employees not owners of equity) that should be repealed as it directly makes American companies uncompetitive and is against the Interest of everyday people. You should have incentives to take the risk of starting a company and employing engineers / people not disincentives. Small businesses are the majority of jobs and this is directly impacting their ability to put money in people’s pockets and the number of jobs available.
Nothing in your proposed law provides a way to distinguish between white hats and black hats, and instead it just presupposes that the person undertaking the conduct in question is a white hat.
That's not going to help you understand the subject material better. It's just going to assemble a facsimile of the lowest common denominator of other people on the internet talking about it. If anything, it will hurt your understanding and give you a false sense of knowledge.
You wouldn't steal an AWS compute credit.... /s
Thanks for the answer.

So with a depot being responsible for locations, and partitioned by user id, is is too off to think of this as the way cockroachdb does sharding, with ranges where there's a single raft leader per range?

From your description of PStates, I reckon there's some inherent delay from when "an event happens" (bear with me, I know ...), the depot appends it to its log/stream, and a PState consumes it?

Let me try to make a concrete example: suppose I'm a consumer that will make a decision based on Alice's location (it could be a media streaming service that must offer a different catalog view depending on the region the user is, even for the same user). What's the Rama way to know how good my location knowledge of Alice is (e.g., "I can be sure I know where Alice was no longer than T time ago")?
When network operators or phone manufacturers say 4G, they usually mean LTE, yes.
I agree reporting bias could be a thing, but there are statistics like completed suicide which are less susceptible to it (though still present; you can imagine a suicide being declared an accidental death to help a family "avoid embarrassment"). And those statistics have also been steadily creeping up for decades.
Pretty much same catch as the mail, its one way.
You use their client (or I guess reverse-engineer their API's) and that's it.

iCloud calendar integration is read-only (because it is a read-only subscription and not actually authenticating or anything).

It also doesn't solve any of the problems I have with calendars... mainly that I have to manage multiple where I'd like to have events be synced (to varying degree) across them.

It also introduces new problems... that I can't use my preferred calendar client which has features that Hey does not that I use all the time (such as hiding events).
What other steps have their ever been? Getting a CVE?
In the last few months I read two books on this topic, and both (if I recalled correctly) mentioned The Biggest Loser (or similar).

Exercised - Daniel E Lieberman

https://www.npr.org/2021/01/05/953249677/exercised-explains-...

Burn - Herman Pontzer (who I believe was a student of Lieberman's)

https://www.scientificamerican.com/article/new-human-metabol...

Both a fairly dry and academic, but do get into the weeds if that's your thing.

A third book that's related but is an easier more entertaining read is "The Comfort Crisis" but Michael Easter.

https://eastermichael.com/book/

Easter actually interviews / quotes Lieberman.

The gist of all three...from an evolutionary perspective, the human body is designed for lean caloric times. When there is more calories than there is activity to burn it, those calories will be stored as fat (in preparation for leaner times). There's no ceiling on that so you'll keep adding weight.

In modern times, our evolutionary advantages become disadvantages. The best way to lose weight, is to not gain it in the first place.
Comedy AI Generator Creates New George Carlin Special, 'I'm Glad I'm Dead'
For those contestants, weight loss was a full time job, and they had trainers and dieticians. How is that supposed to work for average people who have jobs and families or do not have a lot of willpower? Weight loss drugs can make it easier, which I am all for. Availing oneself of medical technology is not cheating; it's why the technology exists in the first place.
I appreciate the insight and that's a much more fun backstory than expected. I was born a few years after Purple Rain so Prince's era is mostly unknown music history for me.
It looks to me like HN has been in a massive censorship mode in order to remove ongoing stories about the Bitcoin ETF, the SEC and the Twitter/X hack of the SEC's account.

That story was on the top by far yesterday and then it suspiciously disappeared, after the comments took a very decidedly (and very deservingly, in my opinion)
anti-Muskian bent.

Since then there has been no story about the bitcoin ETF on the front page of HN even though it is a very important time for bitcoin (the deadline for bitcoin etf inclusion is today) and HN loves talking about bitcoin.

So there is your answer.
Minor mistake:

> a rise from 5% to 15% is a 300% increase, relative to the anchor point

No, it's a 200% increase. (It's 300% of what it used to be, which is a 200% increase on top of the original 100%.)
Ditto. The way trauma twists your brain up over time really sucks.
It's quite obvious to me that both are true, and that we should continue questioning the degree to which each of them are.

Karl Marx celebrated capitalism for the same reasons you do, while at the same time recognizing the unlikelihood of capitalism being the final form of human organization. Of course, that was before our current awareness of global warming.
Global Initiative Against Transnational Organized Crime: Organized Crime Index
HTML has an element to provide definitions of terms without having to link out, but almost nobody uses it.
Gifts of the Magi: The Line Between Knowledge and Magic Is Thinner Than We Think
You put pizzas in and get pizzas out.
https://archive.ph/83Szs
french airlines?
Nice release notes, though I could do without all the quotation marks used for emphasis.
World Economic Forum: Future of Jobs Reports
That what I imagined as I was reading, the act of breathing and pushing blood around the body just becomes easier when you are fit. (requires less energy)
LTE is 10 years old.

You can still use any phone supporting 2G (which is essentially all 3G phones) for phone calls and texting. If you need fast data, you'll need to upgrade – and chances are your 10-year old phone isn't very good at displaying modern websites anyway. There are root CA certificates that have expired since some of these phones received their last software update, for example.
The ability to pay-per-task is great. But I am not sure this is an improvement for all. If I understand right, the free plan is losing access to multi-step Zaps, including even filter steps between the trigger and the action. That’s pretty limiting!
I really liked the features of hey.com but I just couldn't stand their design language something about the colors and weighting of elements is just totally off-putting for me and the calendar sadly isn't better.
Sure, blame the people. Fat shame all you want. Problem solved. Done.

It's so easy, just stop eating so much. As if fat people haven't heard that one a bilion times over. As if fat people havent tried time and time again.

Personal responsibility! you put that stuff in your mouth, rah! rah!

Personally I'm actually sick of people having no eye for the bigger picture, for many systemic reasons and larger society, and just blame stuff like this on individuals.
Global Terrorism Index
In the UK working hours (especially working hours per household as women work more) have increased. No one has the time for community.

Schools have also deteriorated and kids are put under a lot of pressure to achieve academically. I opted mine out.
Will there ever be a decent calendar app or service that can account for all the significant formats / interop with gCal, iCal and Outlook? I vaguely recall being delighted with an app called "Sunrise" which spanned at least 2 of those, before it was acquired and (that use case, at least) destroyed.
Next time a noob tells me test coverage is bad I’ll show them this.
Big uff
So - boredom is our natural instinct meant to steer us towards socialization. The ever present phone gives us stimuli that makes our intuition think that we are engaging socially. But the reward we are looking for is social bonding but it doesn't happen because our cognitive functions that makes sense of bonding can't execute because there's no full person to bond to. Most often it's an anonymous disembodied text or an influencer or celebrity that do not know you...?
I think it's definitely a tracking thing based on parents now paying more attention to their children's well being or 'academic achievements' than they did several decades ago.
This looks interesting, and I'd like to play with it for sure. I bought into Hey early to get my email address, but didn't convert, and kept most of my email on Google.

This would be enough to bring me back to Hey I think, but only if they get interoperability right. I've tried calendars other than Google Calendar before, but when I have to interoperate with Google users (invites come my way) it's always hell. Me accepting their invite ends up with an email to their address with a .ics file, rather than actually updating a status in Google Calendar.

I think something like Fantastical (which pulls in all my calendars from different places) will probably remain my daily driver until someone does this better. Now I just wish they had an Android app.
In my teens, I was able to trip every day for a long period of time using dextromethorphin Hydrobromide.
Mhhm. It's also a reason why we're making sure our developers have an easy time integrating into the platforms authn and authz systems. For example, if you need an admin interface, it should be just a library include and some bespoke framework configs to be integrated with the central authz framework over trying to think of something on their own.

It's... way too successful internally, lol, because we have a lot of permissions and privileges to manage now. And now we have to figure out good ways to assign these permissions to people more efficiently.

But that's a better problem than a GDPR relevant data breach, to be honest.
Really? I have not seen a <form> html element in an email in decades! Do you mean a list-unsubscribe header? I mean the hyperlink at the end of an email with "unsubscribe".
I think it would be good if that unsubscribe link opens a page where one would need to press one more button to prove that it is not automatically involved by url scanners. But this would not be "one click" unsubscribe anymore.
So how can this be solved? Why is not everybody constantly auto-unsubscribed who uses office 365 or hotmail?
It requires that complexity because a metric shit ton of scientific research shows that it is more complicated than that.

Permanent weight loss of more than ten pounds is nearly impossible from a scientific standpoint. The success rate after 5 years of weight loss is somewhere around 0.1%. You'd think that if it was as easy as everyone claims, more people would succeed. Heck, many people who have had gastric bypass surgery regain a significant amount of weight, even if their stomachs have been reduced to the size of a ping pong ball.
Unless the tears were followed by a resignation (effective immediately), I assume he's faking.

The buck stops at the CEO, right? Lead by example or stop pretending.
CBOE: New Listings
Always. And sometimes they are a big customer who screwed up something big and if you can not restore it easily, you have to go find a DB backup and write some scripts to bring it back anyhow.

Soft delete is a necessity in SaaS. And then combine it with hard delete either triggered manually (empty recycle bin) or time based (after a month, etc.)
None of the features grab me. It feels more like the output of a 3-day corporate summit to build a product roadmap than anything that actually addresses my core frustrations with how calendars work.

"What if.. hear me out on this, guys.. what if we made the timeline horizontal instead of vertical?"
Our Flattening Culture
Amazon lays off 500 Twitch employees, hundreds more at MGM and Prime Video