skysight-inc/HackerNews huggingface dataset:
> The lack of hibernation with an encrypted system is an annoying problem, though.

I don't understand. Hibernation to an encrypted swap partition (and even to a swap file on an encrypted rootfs) works normally.

> Not buying hardware from certain vendors (Nvidia) helps improve your chances.

nVidia just works if you accept the proprietary driver. On the other hand, with AMD, you get fun like this: https://www.wezm.net/v2/posts/2020/linux-amdgpu-pixel-format.... Of course, if you don't need high GPU power, use Intel integrated GPU, which works the best.
But also environmentalists aren't the ones pushing for paper straws, it's mostly greenwashing by large corps and governments. Though from a conservation perspective, less plastic waste is probably a good thing for waterways and the life that depends on them (including us).
A US mining firm sued Mexico – for billions for trying to protect its seabed
Same for me when I moved to Arizona. California doesn’t let insurers use credit rates to price insurance, but Arizona does.
demand for bitcoin will keep climbing.
Some of your "analysts" seem like they can be net loss. I'm thinking someone who only ever buys the groceries that are at least 50% off, having no particular recipe in mind so no need to combine with regular-price items. Grabs them by the truckload when the sale comes, then lives off their freezer for months.

I don't know if it's common to do it so perfectly though.
It definitely matters who it is charged to. In almost all cases, it's just rolled into the overall price of the item, which means you pay it whether you use cash or not. It would be very interesting to see if prices for card were 3% higher across the board, if people would still use them as much. I honestly have no idea.
It gives me joy to try things, so don't see why not.
We could probably create a java applet or flash application that runs in the browser safely too!

That was more snark than HN likes, but it feels like forgetting promises of the past in a dangerous way.
ONE actual standard that everyone uses would be fine. For non-tree (nested) configurations, an ini file would do. It's a standard that worked well in 1990, and still does today.

For nested data, it doesn't matter to me if it's JSON, YAML, TOML or whatever. Just agree on ONE format.

TOML also is a good example of "creating problems instead of solutions": They deliberately (!) broke compatibility to the INI format due to "I can't stand unquoted strings". Yeah, emotional feelings about CONFIG FILE FORMATS.

And again: If your config files are so complex, how about just creating a TUI/GUI so the user can configure your program in an accessible fashion?

Anyway, yes, there is something that can be improved: Create a standard instead of adding another layer of complexity for something that should be very simple in the first place.

Yes, binary size may feel arbitrary, but it often gives a hint about the hammer's size.
In fact, earth actively loses material to space because is has a magnetosphere, polar outflow of oxygen for example.
What language am I looking for?
Playing with the Tiniest Camera
Apple Vision Pro Durability Test Worth $3500? [video]
Oh, interesting! We already use bazel at work but it was all set up before anybody on the current team got here and the only process we have is "fight it until it works", which fortunately doesn't come up too often. Or maybe _unfortunately_, as then there's not enough incentive to figure it out. Now you gave me inspiration to dig in and understand how it should really be used.
One of my favorite comics about cryptography.
https://xkcd.com/538/

Government routinely posits a desperate need for backdoors in crypto and crypto secured products, but almost universally they get the data they want without needing a manufacturer provided backdoor. So why they insist on continuing to do that is beyond me. It's almost security theater.

If they really want your protected information they will be able to get it. Either through a wrench or a legal wrench. In lieu of that they can use practically unlimited resources at their disposal from who they employ (or contract out to) to the long axis to which most secured devices succumb from, time.

My personal threat model isn't to defeat the government. They will get the data eventually. My personal threat model is corporations that want to know literally everything about me and bad faith private actors (scammers, cybercrime and thieves) that do too.

Ultimately it will take strict legislation and compliance measurement along with penalties to protect the government from overstepping the bounds they promise not to step over already, let alone new ones. It will take even stricter legislation to stop corporations from doing it. There are significant financial and political incentives for our ruling bodies to not do that, unfortunately.

I mean honestly, when you have this kind of ability at your disposal...

https://www.npr.org/2021/06/08/1004332551/drug-rings-platfor...
Platform.io makes things very approachable.
Just chill ask about their hobbies etc.
YouTube does very well ? .
Judging by later videos his tunnel collapsed (no casualties) and he moved to some other outdoor location and activities.

I can’t imagine this being safe at all in a city, with the amount of underground infrastructure and weight of buildings, houses, sidewalks and pavement all around you. Seems irresponsible.
Most new Microsoft apps are actual web apps that run a browser and then on the desktop they're just the same app in an Edge-Electron-like container.
To be fair, it can have a gigantic culture, have been super influential historically, scientifically, and culturally speaking with smart, educated people... and still be completely in ruins and have 0 ways to actually enforce any rule of law. Syria for example, is exactly like that.
> the resulting solutions need an order of magnitude more resources to accomplish the same tasks

Okay, and? It's 2024, even a $2.50 toy devboard had multi-megabit flash & ram. I really don't care if my code takes up 10k or 100k. If Python makes it easier to develop and eliminates entire categories of vulnerabilities in the process, it doesn't make any sense to use bare C instead. I paid for the entire chip, why shouldn't I use the entire chip?

C is fine if you have to do high-speed bitbanging or have to squeeze every last byte out of a chip, but for most applications that's simply not the case anymore. A decent fraction of embedded systems is absolutely trivial on today's hardware. It's time we start treating them like the mini-computers they are, because remaining in a 2000s mindset is going to result in a lot of compromised network-connected devices due to some developer fat-fingering a buffer size.
marcan of the Asahi Linux project got into a discussion on reddit about this, and says that when it comes to hardware, you just can’t know.

> I can't prove the absence of a silicon backdoor on any machine, but I can say that given everything we know about AS systems (and we know quite a bit), there is no known place a significant backdoor could hide that could completely compromise my system. And there are several such places on pretty much every x86 system

(Long) thread starts here, show hidden comments for the full discussion https://old.reddit.com/r/AsahiLinux/comments/13voeey/what_is...

I highly recommend reading this if you’re interested https://github.com/AsahiLinux/docs/wiki/Introduction-to-Appl...
BRICS could have been something. But Xi wants a posse, so they’re over expanding it to (a) counterbalance India and (b) give Xi photo shoots with a bunch of world leaders. That at the expense of a narrow group of heavyweights who can move mountains.

China traded a G-7 competitor for a discount League of Nations.
Even if you're in the middle of nowhere, people expect to be rescued if something goes wrong... sort of like that Titan submersible. In the abstract it's fine to take huge risks, but it sucks when people implicitly turn those costs over when something goes wrong.
for some reason i got a lot of pushback when i tried to implement this terminology at a previous job
I kind of feel that if your base is kubernetes (and especially helm) YAML soup, basically everything looks like a good alternative.
https://www.researchgate.net/publication/317433640_Using_UNI...

> This paper demonstrates the use of Unlicensed National Information Infrastructure (UNII-3), 5.725-5.825GHz, Wi-Fi frequencies, in the IEEE802.11a/n standard ... A link distance of 24.3 kilometers, the longest so far, has been achieved. An average peak throughput of 98.4Mbps has been observed ... using a TDMA based Wi-Fi radio overcomes the fundamental challenges associated with the use of the off-the-shelf Wi-Fi radio whose Media access layer is based on CDMA/CA MAC protocol.

2021, "Open-source private LTE and 5G networks", 600+ comments, https://news.ycombinator.com/item?id=27946947
Can't Apple just push an software update with some:

if (user_id == "adrian_b")
pwn ();

?
I'm starting to believe in meta-conspiracy where there is conspiracy to propagate conspiracy theories to discredit institutions and trust.
Looks more like an underground bunker.
Creating complex layers upon layers just to "solve" a very simple problem is not innovation. It's shittification.
"T" and "impl Future<Output = T>" are very different types so unless you're doing very silly things I don't think you can be "surprised" in Rust. The fact that await points are explicitly marked and visible in the code is a feature, not a bug. It's similar to the case for "?" vs. hidden exceptions.
Sounds like you want to be respected more than you want to help them.
If memory serves the early wrt54g replacement firmwares could go to around 2x the legal broadcast limit. I assume they still can.

Unlikely to be caught doing it, unless you live in the urban core. And for an apartment, a directional antenna likely would have sufficed for many uses, prior to MiMo ubiquity.
Well, I have a vast collection of retro machines. In many aspects things were definitely better.

First of all, everything was orders of magnitude simpler.
Mine is just literal cash I can apply to the balance on my card. Obviously the fact that cash back exists means that the card companies are making even more money on the fees. However, since most stores charge an identical amount whether you use CC or cash, everyone is collectively paying it and you might as well get the cash/miles/rewards back.

The FCBA coverage, on the other hand, has some real value. That said, even though I have used it a few times, I doubt it has saved me as much as I've spent in CC fees.
Some window managers, such as Fluxbox, support "tabbed windows". You can group windows into one "superwindow" and then switch these in a titlebar. Maybe this is what the GP meant?

Screenshot: https://www.reddit.com/r/UsabilityPorn/comments/bqg9tw/fluxb...
To get that game for $500 I think the owners would need to be at a point where they're sick of it and just want it gone.

A couple of thoughts:

1. Games on location are often not owned by the location, but instead owned by a third-party operator that is responsible for maintenance and splits coin drop with the location.
2. Since the game is on location it was probably playable at some point recently. It may be off because of something simple like a rubber ring breaking and the ball keeps getting stuck or an important switch not registering, but the operator hasn't had a chance to fix it. If it was recently and only needs minor work, its value is more likely to be $5,000 than $500.
3. Even if it has been broken and not working for years, its value would heavily depend on the cosmetic condition. A non-working machine with a great cabinet (artwork without fade, no dings) and no wear or damage to the playfield would still probably be worth closer to $2-3,000.

It never hurts to ask, though!
With all its quirks, flutter is still miles ahead of MAUI (just look at actual usage of maui, it's close to 0). And imo they both take a pretty different approach anyways.
How do you program your atmega? with a laptop. Also you won't go anywhere with few resistors and capacitors, you also need transistors, diodes, maybe LED, maybe some soldering, wires, breadboard, some sensors to have fun with, some ICs such as 555 timer and other op-amp. Eventually some voltage converters, a multimeter and logic gates.

The list can be long and at the end, for software you need a laptop, for electronic you need a laptop + many things. And those things can cost (the shipping cost more, actually).
wait until you find out what happened when the temple of damanhur was discovered
Yup! Well worth the 20 bucks a month!
It sounds like you want Rust for Rustaceans: https://nostarch.com/rust-rustaceans
Intel ME allows intentional remote access through the ME in some enterprise scenarios (vPro). The driver support matrix is quite small and this is a massively overblown concern IMO, but it’s the root of a lot of the hand wringing.

However, onboard firmware based attacks are absolutely accessible remotely and after boot in many scenarios. It’s certainly plausible in theory that an exploit in ME firmware could, for example, allow an attacker to escape a VM or bypass various types of memory protection. Unfortunately the actual role of the ME is rather opaque (it’s known, for example, to manage peripherals in s0ix sleep).

Ditto for any other blob. Maybe a specially crafted packet can exploit a WiFi firmware. Maybe a video frame can compromise the GPU.

These are also good persistence vectors - gain access remotely to the NOR flash containing EFI, and you have a huge attack surface area to install an early boot implant. (or if secure boot isn’t enabled, it’s just game over anyway). On Linux, it’s often just hanging out in /dev as a block device; otherwise, once an attacker has access to the full address space, it’s not too hard to bitbang.

These are all fairly esoteric attacks compared to the more likely ways to get owned (supply chain, browser bugs, misconfiguration), but they’re definitely real things.

The closed-sourceness is only a tiny part of the problem, too - a lot of the worst attacks so far are actually in open source based EFI firmware, which is riddled with bugs.

Which takes me back to my original response to “isn’t everyone backdoored by ME” - sure, maybe, but if you’re looking for practical holes and back doors, ME is hardly your largest problem.
I somehow understand why builsing infite space under your house is weirdly calming.
Not immediate, no.

But magnetic fields don't usually just switch off. If the planet didn't have one to begin with, then it probably doesn't have much of an atmosphere for long enough for advanced life.
https://www.scientificamerican.com/article/humans-contribute...:

“Humans are responsible for some of the wobble in Earth's spin.

Since 1899, the Earth's axis of spin has shifted about 34 feet (10.5 meters). Now, research quantifies the reasons why and finds that a third is due to melting ice and rising sea levels, particularly in Greenland—placing the blame on the doorstep of anthropogenic climate change.”
it's for a good reason; many people who tunnel don't know how to make tunnels safe, and there's lots of collateral damage when they fail.
> The "AI" service consumes real resources

My disk space is a real resource as well
Isn’t this an extension of what occurred everywhere in tech, programming becoming bloated/inefficient as a trade off for developer UX via frameworks/abstractions/higher level programming languages. It’s all driven by the low cost of hardware performance.

I’m coming at it from opposite direction. I’ve been learning C to program ESP32 devices and it’s such a frustrating experience how much that language is lacking or has to be DIYed. I could easily use python and move 10x faster, but I’m trying to force myself to learn C in the process, otherwise I have no idea what the benefit would be.
Another problem with these incentives to attract new users is how do you think existing users feel when they see discounts offered to new users? Their loyalty is rewarded by paying full price.

I may be the outlier but I have almost no interest in new user incentives. I know the discount will only last a short while before I am paying full price so I never factor the discount into the total cost of using the service.

Even free trials don't interest me as there is still the hassle of signing up and remembering to cancel before the trial ends. Why bother signing up for something that I intend to cancel a month later? If I intend to keep using the service then as I said above, the discount is meaningless in the long term.
You need a lot of details in place for a library like this to be useful. I think the most reliable way to get them is to be using the library for real work. Sadly this looks like a hobby project to me - I would love to be corrected if wrong.

I don't mean to belittle this project. It's substantial, and there's some cool stuff in there! But automatic differentiation and a Monte Carlo solver, but no spline curve or swaps? What can you actually do with this?
> DMVs stopped checking for them at inspections

The vast majority of states don't even have safety inspections, and some have recently discontinued them.
I took some of the Wharton first year MBA classes for free on Coursera. Left me incredulous that people take out huge loans for that stuff. It's Wharton, though, so the signaling alone may be worth the price.
Some fluff isn’t common knowledge.

MBA programs are also often predicated on predicting the next y years based on the past x years.

This is increasingly hard for mbas to do or stay ahead of because how things are done in business isn’t the same, and changing faster than mbas are updated and taught.

Like anything it not what your education makes of you, it’s what you make of your education.
Don't Lose the Vision Pro, You Can't Track Its Location
That’s great. You haven’t addressed my point: who do you think is asking questions about their homework? A community needs a steady influx of new users to remain vital. You’re not going to get that with _often incorrect_ references to duplicates.

Fact is, nobody wants to go to Stack overflow anymore for answers because the experience sucks. And they don’t mind using ChatGPT. Thanks for all the training data, Stack!
25 years ago admin would be responsible for one server, that they would setup and then never touch until (and sometimes after) someone hacked it.

Now people are responsible for thousands of containers, and GUI simply does not scale. And the configuration of those containers is domain-specific and/or varies enough so that you cannot write a single config file and copy it over. This is why configuration management systems first came with template engines and now require a separate tool to render the configuration.

Nobody would develop anything like that if it was not needed.
That scenario doesn't happen; you can't get money from someone who has no money.

(Theoretically, you might be able to get money back if it's a rich person who loves the thrill of driving without insurance or something. Theoretically, you could also find a winning lottery ticket on the sidewalk after the crash.)
These are symmetric keys - AES, not ECDSA. Much faster to test.
25 years ago, you didn't have thousands of websites and applications supporting billions of users and millions of TPS. In hindsight, the innovation around DevOps is nothing short of a marvel IMO. 87 MB in the context of a $100 16GB stick of RAM is basically cheap in relative terms.
There's already (at least) one in C++:

https://github.com/quantlib/QuantLib

The appeal of writing one in Rust is that you could use it ergonomically in Rust!
> It is likely that the backdoor consisted in some cache memory test registers used during production, but it is absolutely incomprehensible how it has been possible for many years that those test registers were not disabled at the end of the manufacturing process but they remained accessible for the attackers who knew Apple's secrets.

I think we are nearly certain that the bug is because of a MMIO accessible register that allows you to write into the CPU's cache (its nearly certain this is related to the GPU's coherent L2 cache).

But I don't think it's 'incomprehensible' that such a bug could exist unintentionally. Modern computers and even more so high end mobile devices are a huge basket of complexity that has so many interactions and coprocessors all over the place I think it's very likely that a similar bug exists undiscovered unmitigated.

> For instance any iPhone could be completely controlled remotely after sending to it an invisible iMessage message.

I don't think the iMessage was invisible I think it deleted itself once the exploit had run, its also worth noting just how complicated the attack chain was and that the attacker _needed_ a hardware bug just to patch the kernel whilst having kernel code execution.
1600kg is a very low cut-off for calling a car an SUV. A BMW 5 series or Audi A6 are both above that. And those aren't anything like an SUV.

Weight also goes up over the years due to increased crash test requirements. So this rule will catch more and more cars.
And the site is dying as a result. That fact alone makes your point moot.
I would argue that situation is usually more stable with less secrecy, so a lack of spy satellites would not be beneficial.

Absence of comm satellites would also help fragment the world and make the idea of a surprise attacks more enticing.
The general approach is to gradually expand the size of a block to cover more subnets if needed, e.g. three /64s banned from the same /60 -> ban the /60, and three /60s banned from a /56 -> ban the /56, or whatever thresholds work. You already need to do this in v4 to cover people with dynamic IPs anyway, so it's not a new concept.
My experience running websites tells me that ignoring people like you is actually mandatory because they'll take up all your time and have opposite tastes of contributing users.
I'm seeing electronics kits on amazon for $55... Yes, you need a laptop (or another atmega, or a rpi) to program your atmega. I'm saying it's not as capital restrictive as it seems. For <$500 USD you can be in for both the laptop and the necessary components, sensors, soldering iron, flux, resistors, caps, diodes, transistors, buttons, breadboard, brass wool, A book on electronics, and multimeter.

The list is long, but the prices aren't. All of this is less than an NVidia card.
Interestingly, I commuted into The Castro (once a week) and definitely let me own freak flag fly, proudly =D
I wonder how much Apple would charge to replace that glass cover. Since it's only glued around the edges and has no active components bonded to it (unlike most phone screens) it shouldn't be too difficult or expensive in the grand scheme of things, but who knows what the mark-up is like.
Part of the point of meditation in its early stages is training focus/concentration. If you feel bored that’s a good thing!

It means you’re giving your brain a good workout basically, and it’s improving.
Rust is very easy to learn. Just read what the compiler says. The compiler is there to help you, it has a holistic view of what's going on, and it knows what it needs for your code to be fixed.
Please let me know where your sink that drains directly into the sun is. It would prove rather handy for the large quantity of nuclear waste I need to dispose of.
Ask HN: What will it take to get a mobile browser that blocks distractions?
It seems like every website now has some kind of ads or popups asking me to subscribe accept a cookie policy or login or turn off my ad blocker or download their app. What will it take to actually make the mobile web usable again?

I use reader view on iPhone but half of the time it borks the page and I have to turn it off. A working solution might be similar but good enough that I can leave it on permanently, similar to Adblock on desktop.

Pihole or other Adblock only solutions only solve part of the problem because popups are back and worse than 2005 Internet Explorer.

I would welcome a solution that works well for the top N websites.