skysight-inc/HackerNews huggingface dataset:
I'm at the point where I see the whole security industry as parasitic. It's an industry that only exists to keep itself and the people active in it employed to the detriment of the rest of society. You want to research security stuff? Cool: keep it to yourself, don't release it. Because if you do release it then the only people that will really benefit from it are the bad guys and no amount of handwaving about how blessed we all are that you're releasing these exploits into the wild (and they are exploits, even if 'deep fakes' look superficially like they are not) for free and bragging rights is beneficial to society. It isn't. Having these skills should come with enough of a sense of responsibility to know how to use them without causing a lot of damage.

All we're doing is enabling a whole new class of criminal that is extra-judicial and able to extort and rob remotely whilst sitting safely on the other side of a legally impenetrable border. As long as that problem isn't solved there is a substantial price tag affixed to giving them further arms for their arsenal. The bulk of them are no better than glorified script kiddies who couldn't create even a percent of the tools that the security researchers give them to go play with.

There are strong parallels between arms manufacturing and the creation of these tools and the release of these tools into the wild. Without that step there would be far less funding for the security industry as a whole and I don't think that's an accident: by enabling the criminal side the so-called 'white' side increases its own market value, they need the blackhats because otherwise they too would be out of a job. Meanwhile the rest of the world is collateral damage, either they see their money stolen (check TFA), they pay through the nose to the 'white hats' to keep their stuff secure (hopefully) or they pay through the nose the black hats due to extortion and theft.

I wished both parties would just fuck off, but only one of these is hopefully amendable to reason.
LSP just does local syntax. Not cross-module checks, including the borrow checker. The Rust compiler catches local syntax errors very quickly, so that's not a big issue.
In an earlier HN discussion someone asked for specific Tindallgrams of interest. I wrote up a summary on the greatest one I've found: https://two-wrongs.com/tindall-on-software-delays.html
Help me—I struggle to see the humour in it.

Bourdain (unintentionally or not) painted the dietary choices and the culture of some 700+ million people (about a tenth of the human population then) as 'as enemies of everything that’s good and decent'. It was a rubbish and narrow-minded comment then, it still is one now.

I'm willing to bet that for all his pomp and puffery, Bourdain never actually ate Indian food until he went there, did so, and changed his mind. Credit where it is due, but then again, Indian food generally changes everyone's minds about vegetarianism, so not so much.

You wouldn't say that about left-handed people, would you?
What's up with the excessive reliance on nested bullet points? It certainly doesn't look like a good blog post.
Emophilia
> The real reason is most likely the large variability of sales tax within most states.

There is a much simpler explanation: It would make the prices look higher, which would reduce sales, which isn't to the advantage of the business or the tax collector.

Notice that they also do the equivalent for income tax from the other end -- the advertised salary for the job is the pre-tax number.
> Higher interest rates are here to stay.

Sweet summer child, I wished you were right but what I see on CNBC every time tune in tells me the financiers are going to have their ways and rates will head to back to close to zero much sooner than you can say uncle. Soon the cost interest expense will be larger than defense in the US. This will call into question the sustainability of US fiscal policies and no politician would tolerate such inconvenience. If you’re explaining, you’re losing.
I think you agree with me?

You overwhelmingly see 1280x720, 1920x1080, and 3840x2160, sometimes with a truncated height because of aspect ratio but usually advertised with the full height for consistency reasons.

There's barely any 2560x1440. Anyone going above 1080p goes directly to 4k.

Youtube is pretty much the only place I've ever seen 1440p encodes, and that's because they're super version-happy and make 20 different variants of a video.
This is why I asked the question.

So if the case is simply that music downloads and streaming were earlier then there is hope for video downloads and streaming to eventually catch up?

It feels like right now though that video access is becoming more fragmented still, rather than more consolidated.
1. That IF is untested, it's hypothetical corporate propaganda.

2. That's a problem for them to solve, it's not a problem for me to solve by going like "alright Sony, I'll do you this solid and pay and inconvenience myself instead of pirating just because I like you and I know you're struggling" wink wink
Phylopic Free silhouette images of life forms under CC licenses
I'm also pirating everything for my wife because of the subtitles. She's not a native French speaker and the French subtitles MUST align with the voice to help her which is never the case with Netflix.
I'm just using common crawl for now
"Follow the money."
There's plenty of doubledeck blackjack with good penetration in Vegas, especially in high limits rooms. The problem nowadays is that the casinos are also counting, and the patterns are simple and easy to track with the tech we all have. Changing your bet even a couple times based on the count can have the pit boss getting a call to remove you.
There's no way these rules are gonna fly. Zuckerberg knows. His company, too, tried rules-lawyering EU regulations. Got a record fine for it.
> I'd expect security (including digital security) to be literally top notch

I know why you'd expect that, regardless, you'd be very wrong
Of course you can tame your snake with a container.
Adding a few more thoughts to this, because I didn’t want to imply that kitchen workers are all criminals with short attention spans:

I myself think I prefer the working style of fast loop jobs to that of typical office intellectual work. There is something much more real and rewarding about making a thing, from start to finish, in fifteen minutes or an hour. Unfortunately the modern white collar economy is not organized this way.
From what I can find, the used OS of software developers is 61% windows, 46% Mac so this argument has no weight on the considerations the team should make Å— it’s essentially a toss up.

Even if it weren’t a toss up and significantly more devs used windows, deciding to target windows based solely on OS market share is one of the worst things a small dev team with finite resources could do. It’s just not a compelling argument at all.
> Sweet summer child

This is the kind of posturing people use to make it seem as though they are the ones with wisdom compared to the person that they are talking to. If your argument has merit it doesn't need such an intro so you're devaluing your contribution by prefixing it like that.
Top workers more likely to want to quit when companies have strict RTO mandates
Nationalization is too extreme. What you want is compulsory licensing where the government sets some price by which any streaming service can pay to license the content. How that price gets selected is... complicated and easy to fuck up[0], but I can imagine some metrics that could be used to target prices. e.g. the compulsory license cost must not exceed some multiple of the average negotiated rate.

[0] Notably, radio has a compulsory licensing scheme, but the government turned up the license cost on Internet radio so high that nobody can make a profit unless they sell their soul to the RIAA ala Spotify.
Has anyone figured out to how to “cross-compile” Python?

By this I mean creating an app bundle that contains the dependencies but for another platform than the one we are bundling on.
As does the PEX(python executable) project.
Psychology takes place in a physical organ or network of physical organs
They probably make quite a lot off people who think they understand statistics as well.
Yup, this is one of the top things I pay attention to when making arcade games. The game over screen should put you back in the game immediately after a key press.
I find working with abstraction boring generally. I want to program a machine to do things, not feel like I'm working in some kind of abstract virtual space. Further, I could maybe tolerate that if it were a nice abstraction, perhaps like smalltalk or something, but the web is a terrible abstraction, being made to do nothing like it was designed to do. It's extremely unpleasant.
I'll see your baseball and raise you test cricket. It is international level cricket; the visiting side coming to the host country for several months and playing a series of matches at different locations. There are normally up to 5 matches in a test series, and each match takes place over 5 days.

Quite fascinating to watch, and ranges from very mellow to nail-biting tension.
> you're depriving a rights holder of revenue that they would otherwise gained.

There's never been a single proof of a loss of revenue during research.

So no, while it's usually a talking point on the anti-piracy ads, it's an urban legend.
Absolutely this. I pirate Apple TV+ stuff right now. I subscribe to like three services. This is my maximum.

I could maybe stretch to four but then the market needs to meet me there and do two things: 1. Make an effort in consolidating media rights and services to these four and 2. Work to lower the price to roughly $10 per service for at least high quality 1080p with no ads in high quality apps across the board. Bonus: Also work to standardize a media protocol so that you can see what you have access to in a common media library regardless what you use, or even in third party apps, as well as stream with whatever as long as you're a subscriber to the respective services.

Do all these things and I actually think they have a good chance against piracy. It's all about what they're willing to do. They can absolutely make some good money on movies and TV shows in a piracy world. I'm convinced of this. Piracy is not the problem; piracy is just the other weight of the scale showing just how anti-consumerist they can become.
> The core OS appears to be from GENIVI/COVESA (GitHub: GENIVI/COVESA). I'm not familiar with these systems at all. They have a fair bit of open-source stuff that will probably explore in the future.

In a prior role I got to engage on a number of GENIVI projects. GENIVI was/is a consortium of Auto makers and 1st-tier companies that determine standards for automotive IVI (In-Vehicle Infotainment). I got to work on some demonstration projects that were proof-of-concept for the standards. IIRC, we were implementing them on the Automotive-Grade Linux distribution. It was a really exciting time. I legitimately thought that there might be a future for a standard (or at least a couple of standard) infotainment systems.

Fun stuff. FWIW, I sort of thought of GENIVI as the European standards group, whereas AGL seemed largely funded and driven by the Asian Automakers. But that's my narrow viewpoint.
>you think there are excuses for any of this, consider this: IPv6 has been a standard for two decades and Windows has supported IPv6 since 2000.

That's like complaining that Linux came out in the 1990s yet Photoshop doesn't support Linux. Like how it doesn't make economic sense for Adobe to support Linux, it doesn't make sense for a lot of organizations to additionally support ipv6 when they can just support ipv4.
The average cost ist always higher than the marginal cost for digital products, for obvious reasons. So you are literally saying free markets don't work for digital products.
You know that AAA game developers live and breath C++, and many outright love it, right?

And that Unity is used for convenience, as opposed to performance or code quality, right?

And that Unity C# is (or at least was) quite looked down upon by AAA game devs, not to mention even by .NET standards it was tied to an older C# version for ages (I believe Mono was involved too)?
Largest EV range test: Tesla dethroned by automaker you may not know yet
Yeah did anyone make the switch to Raku??? I don't really understand it.
Black Hat is the largest North American venue for vulnerability research. It's one of the closest things in the industry to a serious, peer reviewed conference, at least at this scale. It's certainly not the social scene Defcon is (indeed, it replaces that social scene with an enterprise sales hookup scene), but it's definitely not a "totally boring business conference". Black Hat talks are generally much better than Defcon talks.
The post says they had to do significant work to secure another venue. While it's possible the author could be lying there is no evidence of this so we must, at this point, take them at their word.
Profit and loss can be accounting fiction when needed (eg Amazon), but I think Spotify has the cartel curse. No matter how much money they make, it’s too easy for the labels to see the public finances of Spotify and decide they want to raise the price of licensing. Furthermore, the more people use Spotify, the less profitable the subscription becomes.
Yes but I'm ashamed of it. It's too good.
I think TV and games are meaningfully different. Most people tend to watch way more number of shows in a year than buying/playing video games. Video games have more replayability, so it's something you need to "own" rather than stream. Therefore, subscriptions for games are not a big thing yet (I doubt it will ever be). As it stands now, if a game I want is not on Steam, that's OK, I can just install another game store. It's a bit inconvenient but not too bad. The problem with TV is cost. I'm OK switching between Netflix, Disney, HBO, Youtube, whatever, but I'm not OK with paying $70 a month,
Is there a path to declarative package manifests that reach Poetry’s platonic ideals?

Frankly setup.py is a big hack and we should strive to do better.
Music has compulsory licensing, and yet we have different radio stations, and multiple streaming services (only some of which is covered by compulsory licensing).

If compulsory licensing for tv and movies also implied the service was picking the episodes, you'd have potential for competition if service A just played all of the episodes in order and service B only played the good episodes. Etc.
As is most things in life, the balance is the hardest thing to achieve.

I’d think of giving up my smartphone, but that’d mean I’d not be able to use WhatsApp to communicate with family and friends that are on it. Heck the parents group at my kids school is on WhatsApp. I’m not going to make everyone switch to “this other special” app. I gotta be where others are in this context.

Another is Maps - it is modern convenience that is hard to live without. Not only do I get turn-by-turn navigation, but I can quickly check whether the shop I want to go to is open or not. No, a Garmin device on a car doesn’t really solve that elegantly.

Thirdly, majority of my actions are on a web browser and it often happens when I’m mobile. Sure, I could remember things and then find them when I’m at my desk - yeah, I’m not going to remember that..

Fourth - my phone is my camera. I have pictures of my family memories, daily utility stuff.. even quickly taking a picture of a design I see somewhere as inspiration to stash it in my Notes. I can’t imagine giving up that convenience.

I’m however conscious of the bad effects of having the social drug on my hands. I don’t have Facebook, Instagram, Reddit, Snapchat, TikTok, games or the like Apps on my phone. My battery usage report says 70% of the time was spent on web browser, and my mini iPhone lasts 1.5 days on a full charge.
But what about massaging the ego behind the message? If HN comments are about anything, they're mostly either a straight-forward addition or clarification, a "I-know-more-than-you" trumpet parp, or a combination of the two... that comment was one of the latter.
Pretty sure that was the entire point.
>TBH I'm most frustrated by a product I already paying a subscription to use having a "wink wink nudge nudge" plugin thrown in by default to lure me into a second subscription.

>I thought I paid for the IDE precisely to prevent such nickle and diming? If I wanted CI/CD or memory profilers or whatnot I'll find them myself, I don't need to have some menu context option that turns out to not actually be on my machine.

Relatable. However, there's also Qodana plugin in the default installation of PyCharm that nudges you, and people don't seem to complain much about that.
>But then again, so what; if it comes out in 2036 it comes out in 2036.

There's this whole 'passing of time', and "we'll all eventually die", thing though, right?

If it comes out in 2036, it's totally irrelevant for a working dev in 2024 to be concerned with it. So that he'll get to use it in a decade? At this point it's already a promise-ware, and it's like it has community adoption to be promising.
NAT is a nice feature for home and office. Safe default-deny behavior, clearly separated LAN. I'd even want it with ipv6.
IPv6 will never replace IPv4 for good. It is a non-solution that we will have to contend with along with IPv4 until something proper is worked out.
Not really. In those cultures, just like in armies everywhere, authority comes from the boss/commander and they can override their previous instructions at any point (and many do at some point).

There’s often a distinction in armies between “illegal command” issued by a commander, which one has to obey (or risk disciplinary action) and “blatantly illegal command” which must be disobeyed. An example of the former would be “keep your post for 20 hours straight” (where regulations limit a shift to e.g. 12 hours). An example of the latter would be “cut the limbs off other members of your platoon”.

An army setting is a much better model of some cultures. They are not as bad, but if taken ad absurdum they would look like an army setting.
Is writing a div and classes really low level? Even if you think that, there are numerous full featured component libraries available for web, where you don't need to write a single div or a class.
Show HN: Ethereum ERC4337 Account Abstraction Demos and Walkthrough
Hey everyone, I just launched some demos for what's called ERC4337 account abstraction. If you've never heard of it, it's like a new way to make dealing with Ethereum and DApps much easier for regular folks while offering more secure features at the same time.

I used some cool tools you may know – like Solidity+Foundry for the smart contracts and Next.js/Rainbowkit/Wagmi/Viem for the web app part.

The demo revolves around this neat little chat app where you can send messages without worrying about all the complicated crypto stuff such as gas fees etc.

If you've had a hard time with how clunky crypto usually feels for regular people, or if you're into building cool apps, that might help.
For a moment I got it confused with ActiveX.

Would be crazy if that got picked up again
Remember to remove the TPMS sensors from your wheels. They broadcast unique identifiers wherever you drive.
I blame this on crappy drivers. A lot of modern Infotainment systems are running Linux of some variety, and the very easiest thing to do to get technology support is to grab the open source proof-of-concept Bluetooth driver, plug it in, and call it good.
You can also search system services / facilities:

guix system search ...
You don't understand casino accounting. Gaming WIN is revenue. If you put $100 in and get $75 out, that's $25 in marginal revenue with zero corresponding costs. The $100 is a statistic that the casino records, but it does not factor into profit calculations (total, or margin).

Gaming does have expenses -- labor (mostly dealers and slot attendants & mechanics), costs of purchasing and leasing the machines, and some other miscellaneous stuff... but profit margins on pure gaming are very high (and not limited in any way by the 25% maximum hold percentage that you reference)
Please go back to Reddit.

Apart from land, Inheritance and seizing power, individual and community wealth comes from what you create and invest in
All right, so just off the top of my head we have:

- Netflix

- Amazon Prime

- Disney+

- HBO+

- Hulu

- YouTube Premium

- Apple TV

- Whatever Sky's offering is called

- At least a couple of others that I've forgotten

- Plus some kid-specific services that aren't necessarily included in the base subscription (looking at you, Amazon)

- And then I haven't even got into music streaming services like Spotify, Amazon Music, Apple Music, etc.

You know, competition is a good thing, but overall I'm not that sympathetic.

It's just too damn hard, and unsustainably expensive, to be able to watch what I want to watch when I want to watch it.

Then there's content duplication, content exclusives, and on top of that just this endless churn of huge quantities of content being thrown out that, frankly, isn't necessarily that great and feels like kind of a waste of time to watch.

This isn't really working for me. Let me say it again, I want to watch what I want to watch when I want to watch it and with reasonable pricing. I'm happy to pay. I'm not happy to be bilked. And I'm not interested in the arguments about rights. I just want to watch what I want to watch when I want to watch it.
Some of those offers are insultingly low. $3000 to purchase the whole project? Really?
Look at it a different way. The casino never had that dollar, you inserted a quarter and they gave you light show that cost them a cent to put on. You enjoyed it so much, you did it four times.

Now the casino has your dollar and it's "costs" were four cents in electricity/maintenance. A much higher profit tham 25%.
Thanks for the thoughtful reply. I agree with a lot of how you analyze it.

I guess what feels odd is that while so much of the web is co-dependent on different products or services, that is still different from centralized vs. decentralized. So when a network is decentralized, yet the keys to it's main highway remains in the control of one person (or group) that runs a server and manages a domain, it feels a bit contradictory.
That sounds intuitive, but that's just not how revenue is defined for a business like a casino. The casino had $0.25 revenue, and its profit is whatever is left from the $0.25 after paying for heat, light, maintenance, cashiers, security, etc.

Other businesses are treated like this too. If you are a high frequency trading firm and you buy 1000 shares stock for $99.99 each and sell for $100, you didn't have $100k of revenue - you had $10, and your profit is what's left after paying for staff and computers.

Yes, if your business was a supermarket, it would indeed work the other way, and it's not obvious to the literal- minded where one treatment should stop and the other should start.
This. Also, no mention of other industries where American regulation has resulted in worse outcomes, higher prices and worse overall customer satisfaction. Banks. Healthcare. Real Estate. The list goes on.

This smells like Tech lobbying buying opinion pieces.