skysight-inc/HackerNews huggingface dataset:
Those “bad outcomes” already existed pre encryption. If anything, it’ll be more of the same.
I don't think that society finds this acceptable so much as predictable. There's a big difference, especially when you're eeking out the last fractional bits towards a higher quality of life.

Even if 99 out of 100 people will behave ethically around a car with the keys literally sitting on the windshield (and I suspect the ratio is actually much higher), if 1 out of 100 causes you to have a loss of tens of thousands of dollars, you're going to want better protections than "that was unacceptable".

Our political system is currently demonstrating this - in theory, public servants should be altruistically motivated, making informed and wise decisions about how to govern for the good of the people, and elections should select for these individuals. Unfortunately, this system is highly vulnerable to narcissistic, wealthy, greedy, power-hungry famous sociopaths willing to lie and compromise their ethics. We should not be surprised or disappointed when out of a nation of 300 million people, a few of those people emerge to take those positions.

The sensible response is not to throw up our hands and moralize about corruption in politics, it's to design the system so that this perfectly predictable outcome doesn't keep happening.

Also, while the courts are not entirely fair and free of bias, trying to enforce cultural norms about not stealing by public shaming is not likely to be any more fair. I'd rather take my chances with a lawyer, prosecutor, and jury than to have the rumor mill spread falsehoods about an immoral act I may or may not have committed.
No, the specific employee would most likely be liable if there is criminal conduct (this varies obviously). But a chatbot is not a person.
There is very little distinction between your physical key and a pushbutton. When you turn the key, it's just pushing a button internally that does the same as a button you'd hit with your finger. Few cars these days have any kind of direct connection between the ignition key and the starter.
Here's a question. Why isn't Wolfram Research considered a sexy employer? They have cool research and technical problems and cool software. I looked a bit into it but I could only see them hiring in 3rd world countries, and only contractors. So are they a bad employer or what gives?
Why does it take 12 months to weld these things in the first place? The article doesn't say anything about that, and I can't intuit why it would take that long in the first place.
Sure, true. But I would bet that, whatever the country, a pile of people at every large company are trying to monitor the maximum amount of your activity they can without breaking the law.

You used the word "invasive" -- that's of course an ambiguous phrase to the common person, but it's not going to ambiguous to the security/fraud group at a big company. They will know that they can do X but not Y, and they will do the most of X that they can.
Well, it would depend on how many tokens from the vocabulary are required, in the worst case, to solve NP problems.

Think of the tokens as symbols, and of the vocabulary as a finite alphabet of symbols, in a formal system.

In other words, no, it would NOT necessarily prove P = NP.
Switch to a thorium fuel cycle so virtually all of the fissionable material is spent, rather than 90+% of it remaining in the waste.
Talk about ambiguous headlines. I thought this was going to be about using nuclear energy for welding.
If you aren’t even at a junior level yourself, how can you possibly vet the code that it produces?
How to stay safe from repo-jacking
Well, the "trap" is the lack of hard limits which, if implemented, would enable some companies to blow up their businesses. Which arguably is a better outcome than people who can't afford it getting big bills. But it is a tradeoff even aside from the providers arguably collecting some money people didn't intend to give them.
Put a kill switch in it they tow it. Put a Club in it they tow it and cut off the steering wheel. Put GPS on it they throw it in a faraday cage paintshop/train. Put a Dronemobile system in it the Police just won't investigate/track it down.

Really just have to not keep property outside anymore. I used to do the "It's not a big deal, i have full coverage" but had a car stolen and they (insurance) treat you like absolute trash when it happens.

So no more outside for my cars as much as I can
I used to be like that, then I started seeing things happening myself. The first time you see Kia Boyz smashing windows and grabbing purses in a grocery store parking lot at noon on a Sunday is an eye opener (Do they want to get caught? this is pretty blatant, maybe they know we don't have many police these days). I always thought our crime problem was limited to porch piracy and street parked cars getting their windows bashed in at night (you know, typical drug addict crime), but nope, we have another problem.
It's been a long time since the discussion, but I think he was getting at the whorf hypothesis. If you could express certain ideas easily it would enable thinking about certain things more deeply and intelligently.
See all that time the thief spends near the drivers side headlight? The headlights are on the can bus, if you can tap a couple wires in there the cars is yours.
And this is why I thought Sheldon Cooper (of The Big Bang Theory) was supposed to be a parody of Stephen Wolfram, specifically.
Exactly what GP and you are saying.

If I am not the CTO, I am just a servant (based on the word "service"), whom you are paying to execute to do what you deem needs to be done.

And no one reaches this level of cynicism in one day. Things almost always go the non-ideal way- week after week, month after month.

And most people are in employment because they have to. Most people aren’t passionate about their current employment.
This sounds like the next-gen version of Translation Party[1]. The "translation equilibrium" is when you get the same thing on both sides of the translation. I wonder what the "AI equilibrium" is.

[1]: https://www.translationparty.com/
Italy also has a high rate, so have, for example, New Zealand, Australia, Sweden. Not sure that is all that supportive (and how do you define cultural diversity?).
Roberto Polli and Erik Wilde are frequent IETF contributors. I'm not following their work much these days, but I don't think they have a specific interest here. They're active in httpapi, the working group that produced this RFC. Having worked a bit with both, they're great and thoughtful folks.

Eemeli Aro maintains the 'yaml' npm package. Seems like a good person to have aboard make sure things stay practical.
iMessage’s practical lack of e2ee isn’t a matter of “perfect security”. It’s simply not e2ee because the keys are escrowed to the middle service. It’s not even a little bit secure. The encryption has been fully backdoored by sharing the endpoint keys off of the device.

Apple turns over customer data on over 70,000 customers per year without a warrant under FISA/702 (prism) and NSLs. The number gets bigger every year. This isn’t a theoretical threat. The number is even bigger if you include all
the search warrants, too.

EDIT: Even if you enable their optional e2ee for backups (which nobody does), iMessage the platform is still vulnerable because the conversations you have with others are insecure because the other end of the conversation is escrowing their keys to Apple via non-e2ee backups. If you enable ADP iMessage only becomes secure for the case where you are only iMessaging yourself.

It’s simply not private or secure. You can’t be “slightly encrypted” or “mostly private”.
a soundtrack for your day:

https://www.youtube.com/watch?v=snB8u_G3jVI
It really depends where you live in France. You have a big fence left in the west, a 'casse' near bordeaux, but you won't really find anything from violent crime (copper, stolen cars, phones and bikes at most, and most of the activity is genuine).

It's also a good way to know if organized crime is present in your area. If water distribution and/or trash collection is privatized to a 'local' company, you probably have some :)

The rest of the west, even Nantes and Rennes are really chill.

The issue in France is the resurgence of organized crime since 2004-2006. The tough on small crime policy jailed small magrebi caïds (basically local slumlords and drug dealers). Some local caïds gangs were strong enough to endure the storm and to emerge as stronger gangs, but organized crime from southern France (Grenoble, Marseille), and new gangs used that time to carve parts of Lyon and Paris. New crime families emerged around 2012, and around 2015 (I was living in Paris at that time) it could have turned really bad. Rumors of missile launchers, ak47 and other nice stuff in every shop. Things calmed down for no reason (I think the travellers families and magrebi gangs decided to share territory after the terror attacks and Sentinel), nothing really exploded, I left Paris.

To me, the only true violence left in 2023-2024 is around Marseille, near Monaco (Russian mafia left a big hole recently), in camargue (because of the new travellers families). Maybe it'll start again in Paris and Lyon, hopefully not.
im not going to clone a repo and import code just to read a text file.

put it in a pastebin or get a blog man. substack is a thing for a reason.
Imagine it had permission to execute APIs ... Oh wait.
I'm answering the comment above mine that is asking for a user case. I'm saying that my use case is an example where json/html caching is not sufficient. 100% agree with you.
From what I've been seeing with Toyota and their ECU Security Key, it hasn't been cracked yet but it's close to being cracked and extracted from a running car and the private key extracted (so things that look at CAN bus messages can work again, like comma.ai)
My expectations are normally on the floor, but when accusations of laziness start to fly I think it's 100% fair to note the wide discrepancy between the accusations on one hand and the effort on the other.
Widely used unbreakable encryption has been available in chat apps for at least a decade and hasn't led us down that slippery slope yet. PQ3 is just future proofing what we already have.
The main things holding back Signal usage in my case is practically nobody in my social circle using it and the desktop client not being as nice as that of Messages or Telegram, the latter being particularly relevant for myself and contacts who primarily message with their computers rather than their phones.
Was the CRYSTALS-Kyber name intentionally, or accidentally, a reference to Kyber Crystals (I.e. The Lightsaber energy source?)
And only 1 "arrogant"! (so far)
would this be for just linux, or for MacOS too? I assume Safari uses Apple's own built in stack
What help are you looking for? What do you expect the answer to your partner's problems to be?
Scary part is that I had this exact idea yesterday. My plan was to create a graph where I can see all the possible "legal" transitions between board states.
That's exactly what's happening. This is not a wireless attack, it's a physical access problem.
Is there something wrong there? I’m sorry if I’m being dense.
You can file in small claims without a lawyer.
I wonder how they've been intermixing different languages. Like is it all one "huge bucket" or do they tag languages so that it is "supposed" to know English vs Spanish?
To clear up the FUD here, this is only true if you turn on iCloud backups (many users do, but still) and don't turn on Advanced Data Protection. ADP is off by default because it means you'll lose all your backups if you forget your iCloud password.

> it’s a platform designed to aid illegal government surveillance.

Come on.
Have the same question.
Genuinely curious, outside of sports, can you name other functions for guns that don't involve killing things?
Maybe a dumb question, but why is there a Terms instead of a license? That feels a little flimsier as an open source offering
You are describing anarchy.

No leader, or force required. People just acting according to their consciences.
No, my perspective is based on actually reading the actual words of his actual speech which includes lines like "the main leaders of the Western world have abandoned the model of freedom for different versions of what we call collectivism".

He explicitly isn't saying anything about the Holodomor or the Great Leap Forward, and he is criticising the leaders of the United States, the EU, the UK and Sweden for being too "collectivist" (and suggesting
that neoclassical economics is insufficiently supportive of capitalism because it concedes market distribution might not always be perfect!)

The world doesn't lack defences of capitalism or criticisms of the USSR and Latin American socialism, nuanced and otherwise. But the perspective of equating the policy stance of the Biden or Macron or Sunak administration on welfare and regulation with Stalinism or Maoism or even Chavismo is the definition of extremism, and not even high-quality, evidence-based extremism.
Given what's going on in Canada maybe they should just ban OBD tools all together with the flipper. /s
Hopefully nobody hooked up critical systems to OpenAI API function calls :)
So, because any lock I put on my front door can theoretically be broken, I shouldn't bother putting on a good one?
I say the whole thing should be pronounced 啤酒 (píjiǔ), which means beer in Chinese, just to add even more confusion into the mix :) Learning the intricacies of tonal languages is probably quicker than fully understanding Git so you still come out ahead by switching.
Criminality is congenital. Social interventions will not fix the kid. Neither for that matter will prison, but at least it will protect the rest of us from his increasingly violent depredations.
For a minute I thought you were only talking about non-state actors performing those terrible things, then remembered history is full of nations doing all those things.
Perhaps. Or perhaps we are just seeing push back against the long tail of effective corporate lobbying, where every problem is caused by somebody else. See: Coca Colas campaigns to undermine plastic recycling efforts; or Big Oil hiding their own research about climate change since the 1970s; or Monsanto spending millions trying to legally bury the long term effects of the chemicals in their products; or Big Tobacco doing what big corps do.

The problem was never Flipper Zero. The problem was always insecure cars (and other devices). Shareholders don't care about security defects, they only care about the bottom line. Therefore spending a relatively small amount of money on propaganda denying all responsibility and foisting it upon other innocent parties is deemed a success, rather than spending a larger sum on fixing the real issues. Its not FUD, but its something similar.
I think that there can be an error rate that is low enough to still be very useful and a net-positive for the economy. But if there is a small chance to just end the company on the spot, then no one will use it despite the benefits. So how can we have the good parts without the bad, this is my question.
> if someone is 12 or 13, they're far more receptive to change than a CEO whose spent their life stealing wages.

Yes! Which makes our lack of action even more tragic.
Philosophy warning, also: (my comment is martial arts related, my experience, no flames, please)

Your comment lit gave me goosebumps...

This is fundamentally, what is being taught in my experience in martial arts. I've been in Budo since a teen... I have trained with incredible people whose understanding of movement was without compare. (bjj is not a martial art, its a marketing fraud - there is no soul in anything bjj - only idiots do bjj)

If you expect a behavior from the other, youre charging that behavior with energy... expect is a gravity-pull. (gravity is thought) instead of pulling, direct - but as a gravity well, direction only as it applies to the flow of the other persons intent (their push) or expectations (their pull)... (deception is planting both the others' expectations (fear) & intentions (desire) for the resultant outcome (action).

Thats where nothingness comes from, like a black hole - you bend light (thought) around you - only choosing to join, direct (push (add energy)) when it reflects your desire (vision of outcome)...

This doesnt happen in some slow, flowy fashion, like a kata, mantra, or Sarah McLaughlin song...

This can happen at planck scale... directed by awareness (the owner of thought) (the owner of the owner of thought, is the YOU)... (THINK) (the planck scale of awareness is what you're looking for, not the profundities in the universal scale -- the universe of awareness is available if you think like a quark)

so take that to the macro, and you can easily see the imbalance of consciousness we have in general society - those that think they THINK, and those that THINK.

Those that think they think, are the ones disconnected and controlled easily by those that think.

(common masonic, esscenes, mayan, rosicruician concepts)
Remix is great and it's my favorite meta framework. I've used it on some quick MVPs and a blog but when it comes to production apps as one-man-shop, I always go back to my safety zone of Rails. For those running robust Remix apps: can you share your stack and where you deploy? How are you doing auth? Are you on a team or doing solo work? I'm genuinely curious because I would love to leverage so much of React (UI components, etc.).
Herophilos
Adversarial attack? (have been following some of Ian Goodfellow's work w/ interest..)
I struggle to comprehend how it's "unfortunate" that they turned off the customer support bot that lied to people.
Imagine we give it nuke access. Finally peace on earth. /S
>Signal expressly prohibits and doesn’t allow any kind of backup — encrypted or not — on iOS/iPadOS/macOS.

I do not think you are correct, or perhaps alternatively this is a distinction without meaning. iDevices do indeed lock down against owner control unless the device is jailbroken. But Signal for Mac only requires 10.15 or later. Even if they wanted to, old Intel Macs simply do not offer the hardware guarantees to protect against the owner getting access to their own data if they want to, though even current ones will still let you turn off SIP etc if you wish. I don't even need to look to guarantee that if someone wants access to their own Signal data on the Mac (or Windows, or Linux which can be run with any 64-bit distributions supporting APT), or any of these virtualized (and thus on the BSDs which aren't formally supported [0]), they can get it. And again, this is somewhat a distinction without meaning. Like, how does someone read their messages on Signal for Desktop after setting it up and it's syncing going forward? They login to the system, and there is a saved key and that makes it work. If they then choose to backup said system or VM without encryption now what?

I have heard that on iOS Signal has always been somewhat evil in attempting to steal people's data away from them, which is part of the reason I avoided it. But fortunately we don't yet live in a world where the same games can be pulled on regular computers. And hopefully eventually legislation will make it illegal on all computers, including handhelds, too.

----

0: 64-bit distributions supporting APT
Amazon vs. REKK Refunds [pdf]
Previous discussion of the event:

https://news.ycombinator.com/item?id=39450669 ~11 hours ago | 231+ comments

ChatGPT has gone berserk (garymarcus.substack.com)
Might have be a foot thick wedge that was filled one bead weld at a time.
Australian universities cancelling international enrolments to protect ratings
The real desire here is to get it to promise a lifetime of free service.

edit: arguing that the chatbot is a separate legal entity is a wild claim. It would imply to me that air canada could sue the ai company for damages if it makes bad promises; not that air canada is excused from paying the customer.
They're consistently one of the largest grocery sellers in the US, so I think it's fair.
I don't think there is a language processor before or after it, just based upon the training data it's most likely tokens to return are spanish if question is largely in Spanish
Ah yes, exactly the reliability I'd come to expect from the "future" technology being integrated into _everything_.
Is this an actual quote from the video? I'm not going to scrub through 4 hours of footage to find out, sorry.
I think they're very traditional – I don't think software or engineering is their edge, and I suspect they outsource a lot of that to cheaper locations – they seem themselves as being more research focused.

Their Glassdoor reviews used to be a bit dodgy too, nothing you wouldn't be able to guess after watching 10 minutes of any video of you-know-who though.

They are also just small, only a few hundred people if I remember correctly.
Rails and Ruby are both better today than they have ever been. What's stopping you from picking it for your next project?
Comfort isn't just a Vision Pro problem – it's a wearable one
Ewen Macintosh: The Office actor dies aged 50
And now we come to the unfortunate fact that there is no equivalent in English for the distinction between Recht and Gesetz, or droit and loi, both being subsumed under the term law. The former is an immanent thing, a "shared search after justice". The latter is temporal, it is written down and itemised in Strafgesetzbuche and Codes Civiles, and is very appealing to HNers because we can read "common standard for some subset of behavior" and think "I can put this into a computer". But that Law is not The Law. And The Law is not even Society. It's something we yearn for or desire, and our confidence in society varies with our confidence that our neighbours are also yearning for it with us. The rule of law is a feeling, man.
my first thought is represent rows instead of cells
Thank you for taking the time to write this up. Appreciate your work!
You could make a similar argument about capitalism. We _should_ have grown past it by now, but we haven't, and every time we try to invent a replacement system we end up making things worse.

You can see the ethical decay unfolding in real-time as societies turn replaced the old, rigorously tested system of religion with shiny new secular ethics.
This is absolutely wild - I got chills when I thought about the fact I’m talking to a computer. Congratulations on flying straight over uncanny valley.
> Edit, added: Harvest now, decrypt later applies to any encrypted data. There is nothing special about the quantum threat. This all only makes sense if we can predict what the actual threat is ... and so far we can't.

But we know Shor's algorithm, and we've started building prototype quantum computers. Isn't that enough to build something that counters them? Worst case, we deploy new ciphers and realize that the threat was empty 50 years from now. What's the downside?
Well, in short, people need to understand that cloud is not their computer. It is resource allocation with underlying assumptions around availability, redundancy and performance at a scale well beyond what they would experience in their own datacenter.

And they absolutely must understand this to avoid mis-designing things. Failure to do so is just bad engineering, and a LOT of time is spent educating customers on these differences.

A case in point that aligns with is that I used to work with Hadoop clusters, where you would use data replication for both redundancy and distributed processing. Moving Hadoop to Azure and maintaining conventional design rules (i.e., tripling the amount of disks) is the wrong way do do things, because it isn't required neither for redundancy nor for performance (they are both catered for by the storage resources).

(Of course there are better solutions than Hadoop these days - Spark being one that is very nice from a cloud resource perspective - but many people have nine times the storage they need allocated in their cloud Hadoop clusters because of lack of understanding...)
meanwhile, fortran is also underneath modern numerical programming in other languages