skysight-inc/HackerNews huggingface dataset:
I have firewalls but don't trust them to have safe defaults. Or more like, I don't trust every random router, including ones that each member of my extended family will inevitably call me about, to have safe firewall defaults until I test it myself.

I reasonably trust, not 100% but pretty well, that my boss's or grandma's PC with ip 192.168.1.3 on NAT (not even routable from the WAN) will not receive inbound TCP/UDP. That would take effort.
Call them daily and you would not have to "walk them through using Zoom". Better still use something like Telegram where calling is as easy as sending an SMS and they'll call you instead. I use a combination of Nextcloud Talk, Telegram, Jitsi Talk running on my own server and Conversations (Android XMPP app) connecting to my own XMPP server to keep in contact with my mother (85) who lives in the Netherlands while I live in Sweden. We call every day, sometimes more often. She has no problems figuring out how to use the tech since she's been doing it every day for years.

I'm not going to introduce VR either but not because she would not understand the technology. It just does not add anything real over what video calling already offers. Maybe AR if and when retinal projection ever gets to be a thing, when the headset is no heavier than a normal pair of glasses, when it is not encumbered by an overly bossy company like Apple, maybe then. Not as long as you need to don a $4K pair of ski goggles which lock you out of the real world to suck you into some corporate mimicry.
Skia is also used by Android, Flutter and Xamarin, among others.
> However, Richard Dawkins has become a very detestable person, cringeworthy culture warrior, rage beneficiary.

Yeah.. My personal introduction to Dawkins was actually some TV documentary he made that covered about the same topics as the God Delusion, then I read the book itself. Only after that I read the Selfish Gene, which IMHO philosophically was a much more interesting book.

I did sort-of follow the "new atheism" movement for a time, the "four horsemen" and all that [1]. But it seemed to pretty quickly spiral into the cringy culture war thing you mention, so I stopped.

[1] I don't agree with many of the things Christopher Hitchens said, but damn he was a good orator and public debater.
> If you can fix a problem by changing your diet, is it really a medical problem?

Yes, without doubt.

Scurvy is a medical problem (very often) fixed by changing your diet to include vitamin C.

Beriberi is a medical problem (very often) fixed by changing your diet to include more thiamine.

Quite a few people have allergic reactions to the content of their food, like celiac disease due to an allergic reaction to gluten, which is resolved by switching to a diet without that component.

Some young children got lead poisoning because they would eat paint chips which tasted sweet due to the lead content. Their medical problem is helped by switching to a non-lead paint diet, often by removing the old paint from where they live and repainting, or by moving somewhere without lead paint.

> I know people who have made this diet change and it has changed their lives. They don't snore anymore. They don't need cpap.

Snoring does not mean someone needs a CPAP machine. How were they diagnosed? How severe was it?

Was the food actually low in histamines? How low was it? Did it affect histamine levels in the blood? As I pointed out elsewhere here, the histamine variability in foods is quite high, and hard even for nutrition professionals to get right.

Is there a response curve between the amount of histamine and the amount of obstructive sleep apnea?

How do you know the cause was due to low histamine vs some other dietary change? For example, it seems excluding citrus fruits is part of a low histamine diet even though they do not contain histamine because they are thought to "trigger the release of endogenous histamine" (quoting that paper). But perhaps there is something else in the citrus - the acid content, for example - which causes the problem.

How does an low histamine diet compare to taking anti-histamines? Why should we expect the former to work if the latter does not? What is the proposed method of action?

We have only to look at the history of scurvy and vitamin C treatment to learn how important it is to understand the details of why a treatment works!

How long does it take for the change in diet to affect people? 1 day? 1 month? 1 year?

Does it work for everyone with obstructive sleep apena or only a sub-population?

> If you're curious, look into it. If you're not, you're not.

I was curious. I looked into it. There appears to be no substance behind the idea.
From a games-theory standpoint:
- Top performers need less management.
- Top-performers may be competing for your management job.
- Top performers are more likely to annoy colleagues and/or make them feel threatened.
Sorry if my questions are maybe not well informed (maybe I should delve more into Poetry, I don't really know it), but I don't really understand those points, but I would like to understand them.

What does it mean, build isolation? And how does PyTorch violate that? Or why can't we install PyTorch with build isolation?

What is the issue with lockfiles?

I can understand there might be issues if you need to install a custom accelerator-specific version of PyTorch (although also I don't fully understand what the issues are about this). However, what's with just the standard version, which is suitable for most people, as it comes with CUDA support?

What do you mean by non-interactively? pip install is non-interactively, or not?

What issues are there with the dependencies for PyTorch? Why are they not compatible with the dependencies expressed elsewhere?

How are dependencies defined by requirements.txt different than dependencies defined by pyproject.toml or by setup.py?

If your answer is RTFM, maybe you can point me to some resources. I read a bit through Poetry documentation, but I still don't really understand those issues.
I really appreciate that the author took the time to put a summary near the end:

> I used a Raspberry Pi in USB gadget mode to simulate an Android device connected to the head unit. The head unit thinks it's accepting a navigation maps update from the "phone", but because the update protocol allows for arbitrary file changes, I can issue commands to modify a specific file and inject a call to a bash script that gets run as root.
on that subject, compare https://news.ycombinator.com/item?id=38268138
Dumbphones have cameras, so if you can't or don't want to remember a map, you can take its photo. My short term memory if good enough for that. Random installable apps are really the only edge smartphones have.
Do you also have a full printed out copy of Harry Potter and the Methods of Rationality on that bookshelf? I'm not sure you understood your parent comment's point.
Not just statistic. There are plenty of smart defcon people who understand statistics but don't understand that if you start winning they'll just kick you out.
that's amazing. Thanks
I've seriously considered replacing the cable on a pair of headphones[1] with a flush 3.5 mm TRS plug so I can directly attach a shuffle gen 4 — no clip required! — then putting a TRS plug on the original cable so I can still use the headphones with other devices.

[1] https://www.sony.jp/headphone/products/MDR-CD900ST/
which corporate newspeak did y'all hear lately in justification of RTO ? I really do find them amusing
I'm curious as to whether you believe that's a positive or a negative.
Are there any pure - no OS or screen - mp3 players around that accept bluetooth?

I'm running my little sony walkman mp3 usb stick into the ground, but it only accepts wired in ear phones, and they tend to break a lot (and are now starting to confuse young salesman in electronics shops).
1440p isn't really available on official streaming platforms, so it is indeed a lot more rare.

It's pretty much only available on original encodes, i.e. BluRay rips, this makes it a format that very rarely seen on currently airing shows, which are mostly webrips from official streaming platforms.

You'll often see it alongside the usual resolutions for movies that have since been released on disk.
The topic that interests me more is the effect on the general population of addictive apps so if you're going to one-track this onto your pet peeve I'm gonna peace out; it's pretty obvious that using the phone while driving is a bad idea, there's just not a lot left to say on the topic, it's all been said... more interested in discussing a new and vibrant topic than something that's been literally done to death, I mean, people were probably ranting about cellphone drivers on usenet in 1995...
Due to .NET or the abilities of its developers?
Important to know, authorities usually do not go after downloaders/consumers of piracy. But those who distribute it - but if you participate in bittorrent - you are distributing.

And it is really easy to track the IPs, as it is fundamentally part of how bittorrent works that everyone in the network has the IPs of the other participants. So a VPN is advisable.
That settles it, DEF CON in Dubai, London or Amsterdam. I vote for Amsterdam.

Frankfurt also has the most international destinations (just not volume).

(Probably not Dubai, considering a few speakers would be thrown out at the border - or worse if they get though. It's also artificially inflated because it's almost all transit traffic).

https://en.wikipedia.org/wiki/List_of_busiest_airports_by_in...
Yeah, also pirated content has:

- 4K HDR video, not whatever the heck the buggy client delivers.

- Atmos/TrueHD audio track that actually works, not whatever the broken app delivers (I'm looking at you Sky and rest of the ilk that still deliver HBO content with stereo).

- Subtitles for ALL the languages, not just one or two. And those languages don't disappear when I go on a vacation, leaving me stuck with german audio and french subtitles.

- Properly functioning offline playback for when I'm traveling, not randomly broken and disappearing offline mode (Netflix, Spotify and YouTube all blessed me with "all your downloaded content is gone" experience on long flights).

- Works on all my devices not a random subset independent on which way greedy execs tried to extract "ecosystem" money from my playback device manufacturer. Looking at you ATV+.

- Is actually available in my region and doesn't randomly disappear from my devices just because I decided to travel to visit my parents or have some time off.

- Doesn't randomly disappear after 6 months when I started watching the series because some license expired.

As you can see, I really tried to pay to get content from these people. And all I got was bunch of frustration. F'em, they brought this upon themselves for being user hostile arseholes. Again.
Please, for the sake of your own health, calm down.
There is something about Norwegian that makes it more easy to understand than any other Germanic language (besides English I guess, but that's just because we're broiled in it from early age). It somehow stayed more close to the shared Germanic than German itself?

Also: most Norwegians have very little accent when speaking English, unless they're in some kind of satiric Viking series.
We are no longer under zero interest rates and I need fuel for my Jet(s) and my Yacht(s).
Dart is only still around because of Flutter, at least C# has another uses with 25 years proven record.
It's so fun to see Stoll enthusiastically still participating in forums like this, commenting, adding anecdotes; just hanging out. A wonderful person and a true legend.
Which http are we talking about? HTTP3 that people wanted to use before the security portion of the spec. was even done? HTTP2 that had an entire section dedicated to possible exploits that where later found on major sites? Or HTTP 1 which enabled some of the exploits seen with 2 since implementations are neither consistent nor strict when parsing parameters?

Sometimes it feels as if the Internets security was supported by paper walls with a "please punch here to exploit" written all over the place.
See Fog of War, the Erroll Morris's interview with Robert McNamara, who was US Secretary of Defense during Vietnam and helped manage the bombing of Japan in WWII. McNamara says he and compatriots would have been convicted as war criminals if the US had lost, and IIRC says they were war criminals.
if we're going with hot takes, I've watched a lot of DefCon vids and many presenters come off as outlandish arrogant. not simply smug, more "I am levitating above the normies."
The biggest problem about Pythons dependency managment in 2024 is that it stil feels like an afterthought. It is just not straightforward and it is not pythonic. I would go as far as saying that dependency managment with Python is likely more complicated than anything you would normally encounter within the language.

As of 2024 poetry is the best solution we have, but even it can come to its limits at times. I work in a position where I develope with poetry and have to deploy without it (using venv), and I do not wish the journey of learning how to do that on anybody.
One of those things that I always thought was a great idea, and it's fantastic to see someone actually working on it. AST editing really is the next step for modal editors IMO.
Such sentiments are all very fine, but this is a book about classical music.
Literal translation:

“That must we systematically and with care do”.
Conspiracy theory but multiple streaming sites using the same language is an interesting set-up for future(or present) anti-piracy lobbying.

"In light of the compelling consumer proposition, piracy services are subject to rapid global growth
UUIDv1 is generally not recommended since it leaks MAC addresses
I think media like TV/Movies might be fundamentally different than games because of how easy it is to serve pirated content. With games there's a lot of friction with getting cracks working and risks with malware while with TV/Movies you just watch them in your browser. Recently my friends showed me a pirate site that I'm in awe hasn't been taken down. Don't think I can post a link here but it has all the things I'd expect from a paid streaming service (slick and fast ui, large catalog with good discovery options, high quality streams, no lag, random ui niceties like a dimmer switch, skip op/ed and multi language subs). Being honest as long as something like this is available I don't really see what a site like netflix could offer that would convince me to pay.

Actually the more I think about it the less I understand how it hasn't been taken down.
I'm waiting to read the inevitable review in which someone (and partner) use Apple Vision Pro it to enhance their sex life. I find it hard to believe that AVP would be an exception to a fundamental rule about the drivers of technological development.
Please like and subscribe for more content like this
Where are they from now? Not that it matters much.
> As I wrote, it does not work at all for concurrent access - I mentioned Google Docs & Co for this.

Indeed Google Docs is much better - we also used that - but it's still a WYSIWYG editor, which IMHO it translates to 'extremely hard to enforce style'.

> I never used Overleaf though (I guess that this is the product you refer to). I guess that having a concurrent system (such as etertab or something - or Overleaf if it supports truly concurrent editing) is the graal.

Yep, Overleaf was what we used. Its paid version was very much like Google Docs but on a plaintext editor wrt. to concurrent access. It could even do change tracking, comments, all the jazz, even Git synching (which we used for backups and CI)

> The drawback is that you need to know the language to cooperate. In a university setting this is not complicated, in a company - not so much.

I'm curious as to why. If the company is new and built on LaTeX from the very beginning why not? When I joined, I didn't know the language at all, but that wasn't a problem-one would learn on the job.
Huh? What are their other businesses then? Is this some weird accounting trick?
I wouldn't even be surprised if they end up with a product ban in the EU.
I think Danish and Dutch are much closer phonetically than Dutch is to any of the other two, so I'm not sure that overused meme applies in this case.
Porn is free. They are running the same services. They have proved global distribution is possible. Pretty much like Youtube and Tiktok.

Media and Entertainment sector has all kinds of bizarre economics cause it's used by the Telcos(check what AT&T and Comcast own in ME sector), the Tech firms (google/youtube, amazon, netflix, apple) to play empire defense and market capture games.

Demand is not decided by the consumer. Or marketing depts won't be getting the budgets they do for demand engineering from their tech and telco overloads. But all that free cash dries up or slows downs once the market capture phase is over which is what has happened with the end of the streaming wars. Disney, Viacom et al have realized they can't compete against tech platforms or telco subsidized shops on the distribution front.
I once encountered a psychopath like that, lol.
In germany, Rick and Morty on Netflix still only goes to Season 6. But Season 7 was out long ago ... (and it was worth pirating it).
> In chess, the two players only are touching the pieces for maybe 100 seconds a game that can go on for hours too.

> So what makes chess fun to watch?

Trick question? Chess isn't exactly a fun spectator sport (enjoy playing it though).
Do be clear, people have been pwn'd due to this. It's not a theoretical problem.
Very tangential, but wanted to share a small QoL trick that makes using poetry (and venv in general) much nicer...

Instead of having to type "poetry shell" to activate the virtualenv, I use a tool called direnv that automatically modifies envars when you enter a directory - undoing the changes when you leave.

In my direnv config (.envrc) for the directory I write:

PATH_add .venv/bin

To add all the virtualenv executables to PATH. Now I can just call "python/pip" directly and never have to worry if I'm inside my virtualenv or not.

N.B. for this you need to update poetry config to ensure virtualenvs are placed in the project directory vs. the default centralised location
No, he’s right. Sixteen singular addresses. And those a quite expensive for what they are.
Def Con has 30,000 attendees. And maybe 99% of them aren't assholes.

But in such a large group, there's always going to be some people who'll decide to muck around with their hotel room's locks or something like that.
Was gonna say, if this is about ipv4 vs ipv6, better also specify which version of HTTP we're talking about.
It looks like 1.5 years ago desktop Chrome got a new CDM designed to support L1 DRM on platforms (I'm not sure why Opera wouldn't have it though and a couple years ago chrome was 720p too). There doesn't seem to be much information about it, but it may not support general hardware on Linux yet. With all sorts of hardware and driver configurations it can be hard to support especially since the desktop Linux community hasn't invested too much into building protected content paths that could be easily used by a CDM.
Parmenides, unless you're really into classical semi-formalized logic and that comes easily as explanation..
What attack vector are you envisioning?
Gartner Identifies Top Trends Impacting Technology Providers in 2024
I don't think mandatory RTO is a good thing. I am talking mandatory RTO being enforced across multiple companies. It almost feels like a co-ordinated effort.
USB C les strong than a 3.5mm jack?
Archimedes would like a word with you.
Geoffrey Hinton – Will digital intelligence replace biological intelligence? [video]
Apple did not invented Objective-C. They took it over from NeXT. Which also didn't invent it.

Also, since Objective-C is basically just C, you could actually target their platform with plain C if you know what you're doing. Some of the underlying frameworks (e.g. Core Foundation) are actually C APIs.
The flak you are getting on this thread reminds me of Scott Pilgrim and the vegan police.

https://scottpilgrim.fandom.com/wiki/Vegan_Police
I'm surprised that the cost of development was only $800 million — the equivalent of $13.6 billion today. That's minuscule by the standards of congressional spending.

Compare it to another engineering project of national importance: the Apollo mission to land man on the moon. It cost $25.8 billion between 1960 and 1973, or $257 billion in 2020 dollars[1].

Both were massive and urgent projects, but the atomic bomb cost 5% of what Apollo cost. An unexpected bargain.

[1] https://www.planetary.org/space-policy/cost-of-apollo
It’s not exactly 10$ every time, it varies. But it’s a small amount.

If I have to buy larger amount of groceries, then I wait until daylight. No way I’m carrying more money when it’s dark outside.
Nobody reinvented the wheel. The old wheel didn't run interactively on the client. The React devs that came up with the term used to be PHP devs. Do you remember XHP?

SSR simply refers to the "render" method of the react-dom package being called on server. It's similar to, but distinct from template engine/MVC-style server side generated HTML.
> when you can just have one service for free

Most of the time piracy isn't even free. You got a server running for downloads which is an investment and uses power (24-7 sometimes), hard disks for storage aren't free. Indexers and newsgroups are paid (good ones at least). Comparing that to a monthly subscription of what used to be €10,- to Netflix and which had it all, makes it nonsense to pirate.
Truffle has no opinion on how you parse the sources. It cares about how you execute them from an intermediate Truffle guided representation produced by the parser.

In other words antlr and truffle are a great fit. We even use this pairing for our example language simplelanguage.

https://github.com/graalvm/simplelanguage
Hypothesis: The Universe Isn't Expanding
This is very different from my experience. Whenever someone I was in a conversation with brought up GEB, it was always a great pleasure of mine. I'd get the chance to discuss the main ideas of the book, and the way I assimilated them. I tend to not even engage in conversations with people who do it mostly to show off the extent of their knowledge. I believe this second point is the important one. GEB is completely orthogonal to the problem you describe.
I'd say this is more like pytorch is horribly packaged and a nightmare as an eng user to integrate into codebases. All of their assumptions are you use conda and are a datascientist one time doing something in an ipython notebook. Very little consideration is made to how you deploy at scale reliably. It's not really on poetry.
You say that...I fear that myself.
But it's like the prisoners dilemma I think...if that happens, then some places will indeed allow work from home and snatch those high-performers just off the market.
> Is being distracted by your thoughts so terrible[?]...

No, but it probably means you're forcing yourself to watch/like it.

I never suggested expunging the movie. Regardless, excessively long movies/books expunge themselves unless they're famous enough to namedrop.
Weird accounting tricks in Russia include "the new nobility" making you offers that you cannot refuse. This is a country in which the FSB (equivalent of the FBI) is running their own protection rackets, even on a small scale of a local shop. Property law works very differently over there, which is to say it doesn't quite exist.
Yeah, it's some complex deal, which is hard to make sense of. Here's a Bloomberg story:

>Yandex Parent Cuts Ties to Russia in $5.2 Billion Unit Sale

https://www.bloomberg.com/news/articles/2024-02-05/yandex-pa...

And here's FT:

>Search engine Yandex to sell Russian operations for $5bn

https://www.ft.com/content/1f965442-e3f9-46dc-ae4d-ef2e05740...