skysight-inc/HackerNews huggingface dataset:
> how much money/seriousness a company willingly puts into infosec? Why would a company invest $22M into security if they can just pay criminals when they get owned?

Because it's not a one-time cost. If attackers know you have weak security and deep pockets they will persist.
fwiw they have a pretty good reputation to release data after payment, not much the companies can do ex-post if they don't have a backup to their valued data.
If you are going to simulate blacking out email addresses maybe don't preserve spacing.
as the press release says PAM3 sends 3 bits in 2 bit times whereas NRZ would require 3 bit times to send 3 bits. that, coupled with the increased WCK for shorter bit times, suggests latency shouldn't necessarily increase.

I assume by "the ridiculously complicated PAM3 encoding/decoding" you are referring to section 2.9.3,

"The total burst transfer payload per channel is encoded using 23 x 11b7S and 1 x 3b2S for the data, 6 x 3b2S for the CRC and 1 x 2b1S for the SEV/PSN, it adds up to the 176 PAM3 symbols that can be allocated for a 16 burst over 11 data lines."

that does seem complicated using 3 (11b7s, 3b2s, 2b1s) different modulation schemes in 1 burst.
The TextEdit app consists almost entirely of a single TextView

I believe WordPad is the Windows equivalent, based on the RichEdit control.

Another fun fact is that RTF is basically the serialized form of NSAttributedString.

The same is true of Windows' RichEdit control. In fact, it looks like Windows' implementation came first: https://en.wikipedia.org/wiki/Rich_Text_Format
Its crazy that Ramp doesn’t offer or require escrow

it is very easy to do this with crypto and much cheaper than payment processor or attorney solutions

and you can do it with any money source lol
Exactly. I’m not sure what to call the new feature, “array spillage”? I didn’t know the original was called “array formulas”. Anyway, the change to make the output go into cells automatically is indeed what I meant.
While is may be true from a user perspective, this "kinetic scrolling simulation" was removed, because it could lead to unexpected behaviour.

Example: If you where scrolling in a window, the driver kept sending scroll events for a short time to simulate kinetic scrolling. Now, if you moved the cursor to another window, the other window started scrolling, because of the simulated events.

This is not the case on macOS. Changing window focus doesn't change the scrolling. So, while working from a user perspective (in my opionion this would have been better, than NO kinetic scrolling at all), technically, it is a bug / unsolvable behaviour :-), because this problem cannot be solved on the driver level - there is no reference to the current focussed "window" / active element.

That's probably the reason why they thought: This must be solved at App level, which was the worst decision they could make. Putting the effort on the shoulders of App developers instead of solving it at one place leads to so much wasted developer time, that could have been put into new features or solved issues. I was shocked about how nobody seemed to notice that.

However, they are not "hobby" at all. Peter Hutterer is awesome and he understands the problem very well - but as a single developer it's hard to convince a whole community, that partly does not even (want to) understand the problem. And he's responsible for libinput, not for the compositors - so it's clearly not his fault.

I think the problem lies in separated responsibilities. They are trying to keep the projects (driver, compositor, window manager) separated / independent, but in this case, the problem is spanning the whole stack.
I hear people complain about the 'Open' a lot recently, but I'm not sure I understand this type of concern. Publications, for companies, are always PR and recruitment efforts (independent of profit or nonprofit status). I recall that OpenAI were very clear about their long term intentions and plans for how to proceed since at least February of 2019 when they announced GPT2 and withheld the code and weights for about 9 months because of concerns with making the technology immediately available to all. In my own mind, they've been consistent in their behavior for the last 5 years, probably longer though I didn't care much about their early RL-related recruitment efforts.
My read on some of the redaction is they appear to be someone on Elon's side of things who's not currently suing OpenAI. It can be hard to guess what redactions are though. They're redacted.
You're not entirely wrong, but the DMA isn't a response to the existence of music streaming apps. It's a direct and targeted remediation to Apple's uniquely oppressive behavior, and would apply to Spotify too should they do the same thing. It doesn't protect Spotify from future litigation in any way, and in many ways limits their business prospects.

We might see legislation against Spotify someday, but it would have to be drastically different to account for Spotify's own unique damages. Plus, compared to Apple's impact on the market at-large, they're literal magnitudes smaller.
Yes, they're commonly used as "starter" credit cards, to increase credit score. I presume they also come with the other benefits of a credit card, such as the amount of security deposit required when renting a car, as well as fraud and chargeback liabilities and timelines.
Google Play Games[0] is also an Android environment for Windows. Many mobile games look and play better on a big screen.

To deploy this way, developers create a packaged version of their Android app for GPG.

[0] https://play.google.com/googleplaygames
Then what's stopping the criminals from going back to good ol' wire fraud like in the 90s and 2000s?

PS. All of the smart ransomware groups are not demanding payments with Bitcoin anymore, they are using another cryptocurrency called Monero. It turns out that Bitcoin is actually traceable by governments via its public ledger, but Monero is a private currency that can't be traced, hence why the IRS posted bounties some time back to encourage people to break Monero's obfuscation.

The only gangs that are still demanding Bitcoin are the less-educated and savvy ones.
The missing bit though is that those 401ks are taxed later than now. A politician who wants to pay for their policy (good) but doesn't want to raise taxes (bad) can just move the timings of that tax bill to juice the books. Its been proposed in the past, along with the implications of changing the RMDs to boost government income.
Because human-being heavily compress picture, sounds, but much less with tabular data.
Show HN: Cartoonize an Image of You with AI
But if they are, it may make sense to pay. For the company. Not from a more macro view.
I heard an interesting rumor recently that the person responsible for CUDA at NVIDIA spent YEARS fighting for resources and trying to convince the company to take the project seriously.

Without CUDA, there's absolutely no way NVIDA would be a nearly trillion dollar company today.
Check out Jellyfin (open-source project) + it's associated clients. Pretty simple to spin up in a docker container, and if your machine is fast enough; it can auto-transcode for device and bandwidth limitations.

For example, your iPhone probably won't be able to stream an uncompressed blu-ray over 4G, Jellyfin can transcode the original file at a lower bitrate before sending to your device.
The mission of OpenAI is to ensure AGI benefits all of h̶u̶m̶a̶n̶i̶t̶y̶ shareholders.
Historically its been a reliably good idea to pay ransomware groups

This is the worst case scenario and its ridiculous

I hope it prompts reforms in that industry such as using smart contracts as escrow to handle payment to affiliates

a direct payment to an EOA is just sad

affiliates, moderators, and the ransomed should demand a model smart contract behind every address presented for payment, cybersecurity industry (and even the feds) could help craft this and give more confidence to the outcome
Are there no legal consequences for knowingly paying money to a known criminal group based in Russia? What about the existing OFAC sanctions?
Not if their near-term funding rounds go through. So much for "compute overhang".
> 1. Businesses trying to violate your privacy

This is false. The GDPR does not mandate privacy - the GDPR mandates the protection of certain kinds of personal data, much of which (e.g. IP addresses) has legitimate reasons for being collected (e.g. abuse protection). Claiming that every business that shows a cookie warning is trying to violate your privacy is not only objectively false, but extremely intellectually dishonest - although that's about par for the course for GDPR enthusiast zealots.
Individuals? No. Teams? Yes. The latter is pretty well documented these days. DORA, SPACE, etc.

Creating software is a team effort.
I wouldn't mind that much, but my petite wife sure wishes that she could swap her MBP for an MBA! She takes her laptop in purses and other bags, so it's both about size and weight.
Btw, solving practical instance of NP problems is often not all that bad in practice. Even solving them to optimality.

But you need to move away from writing your own solvers. Instead you use a library that lets you describe your problem, and then throws off-the-shelf solvers at them. See eg https://developers.google.com/optimization

That's a good approach even for problems that are in P, because minor changes in the business logic requirements often only translate into minor changes in the programmatic problem description, but would translate to major changes in the a bespoke, custom algorithm to solve them, even if everything stays in P.

It also separates the description of the problem from the solution. In the real world, the business logic requirements are seldom written down explicitly somewhere, and are only available implicitly as described by the code. So without this separation, it can be hard to disentangle what's a real requirement, and what's just something your custom heuristic algorithm happens to spit out.
Everytime they say LLMs are the path to AGI, I cringe a little.
Based on credit card balances being at all time highs and more people being behind again, will this make a real difference or just delay the inevitable?

Ref: https://wjla.com/news/local/loans-credit-debit-card-bank-acc...
I like it just because I'm fascinated to see how much evidence it takes for some people to see who Elon is
“have no intention of making the technology (or its rewards) widely available to all”

Has any organization done more to make AI widely available to all? I can’t think of one. True, they’re not making the source code available. True, they’re making tons of money off it. But their most powerful AI is accessible to anyone with a credit card.
> I'm pretty sure it's less "dark patterns" and more "remembering your preference isn't 'necessary'".

> Which, technically, it isn't.

That's still a dark pattern, because by definition, dark patterns aren't illegal - just barely legal, and detrimental to the consumer.
x64 Linux supports x86 and PE binaries so it sort of does.
It seems more plausible that America is neglecting to regulate their duopoly because it benefits them. Europe has multiple examples of Apple ignoring municipal orders and is justified in targeting Apple with legislation. If you want to accuse protectionism, the United States has the most to lose if domestically-bugged hardware falls out of market favor.
I have been using Kagi for quite a while. When I’m looking for code stuff at work, I will get results from Reddit that come to the top or close to the top. It doesn’t throw all of Reddit away, even when I’m not specially looking for Reddit.

I just tried your search, without even adding “Reddit” on the end. At the very top was a “Discussions” section, which had a tile for Reddit. The first result was also Reddit, with a few discussions nested under it. The the gearspace forum, followed by YouTube, then it bunches up a bunch of those 10 ten lists that pollute Google all into a section that is easy to use or skip, then sweetwater music, and then funny enough, your comment here on HN. It keeps going, but yeah… Reddit isn’t deranked to the point of not being used, Kagi sees the value in discussion forums when looking for the “best” something.
Since the user's eyeballs don't have builtin decryption there is a window of opportunity to steal information after encrypted at rest and encrypted transport. Hopefully vendors will be able to fix this defect by using Neuralink.
This comes from a place of love and empathy -- I've been here, am here, and will be here again -- but this realization reads like the first step in the long, long road from prototype to product.
> The Open in openAI means that everyone should benefit from the fruits of AI after its built, but it's totally OK to not share the science...

Based on this line of reasoning, ANY company that builds any given technology and intends to share (sell) it to the world, but not divulge how it was done, can call itself OpenWhatever.

They are clearly saying that the word “Open” in their name means nothing.
Well, the original article actually describes that relations are great way to model graphs, and suggests that your language (or its standard library) should ship with a good datastructure for relations.

You would get most of a what you need for a simple relation database this way.
No, not only in the US. But granted, not everywhere.
> You can't really do that with a graph.

Why not? Relations model graphs really well, and you could have a relation datastructure in your language (or its standard library).
That I can agree with. If the company has already screwed up so badly they're stuck paying the price and hoping for the best.
ah yes, he should be shamed for being a major force behind accelerating adoption of eletric cars by a few years minimum.
While it doesn’t refute the “missing data type” article that hit the front page yesterday I think it is a very interesting part of the discussion.

But mostly I’m impressed someone read an article, thought “not quite true” and created a well written piece like this, in what? A day and a half?
I'd much rather have a properly-enforced GDPR (see the modified version of the US's CAN-SPAM act, and in particular the near-universal presence of one-click and two-click "unsubscribe" links on commercial email) that actually gives me a one-click opt-out.
Accenture also performs weird menial tasks under guise of efficiency for large corps apparently unable to do it themselves. I would venture they will also roll out platform to enable corps to run their banal trainings on it (compliance etc)
It’s a monthly subscription that apparently a lot of people are willing to pay for, feels like an honest business which is shocking in tech.
Isn't there a fundamental difference between buying a copy of a newspaper/magazine vs buying a subscription? I would love to be able to pay a few bucks once and be able to read a number of articles for that. But that's not how it works.
> Technically I think news sites would stand to benefit from making micro-transactions much easier, so that I can just shoot them 50 cents with a single click but that's about the only issue with it.

That's the issue I mean. I won't take out a monthly subscription to a newspaper to read one article.
> I want to read a newspaper, I buy a copy. That's literally how it has worked hundreds of years

Ehh, no, not really. Based on your username, I’m your age, so in your lifetime newspapers and magazines used to be something that was commonly found in every cafe and waiting room. As a voracious reader growing up I remember this pretty vividly. Waiting rooms meant I got to read different magazines or read the Wall Street Journal! You could have a single newspaper subscription for a whole multi-generation household. You could also pretty easily find discarded or thrown out newspapers if you went to public places or even ask a stranger for a section they weren’t interested in. I got tons of back dated magazines as gifts, and loved reading them. There were options.

> Money is a good and transparent indicator of what's worth your time.

This is a very privileged thing to say.
Well yes, but it becomes easier and easier over time. And taming over generations can gradually trend towards domestication. For instance Russian experiments in domestication took something like 40 generations to create sustainably domesticated foxes, and that was starting with the cream of the crop in terms of sentiment - they were selectively pulling them from fox fur farms. For another example the horses we know of today are certainly very different creatures than the animals from which they were initially selectively bred.

So I think we're now getting back to the point. The idea that this all had a meaningful, let alone critical, impact on the overall evolution and competence of civilizations just seems quite irrational without some sort of major missing link that nobody seems to be able to provide.
You can use a pointer when building a graph data structure. You can also use numeric indices into arrays. Or you can store your graph in an entirely different way.

You are right that the data representation itself is only one small part of a data structure, the operations on that representation are also really important.
> Let's be real, the GDPR banners are far less annoying than the ads that HNers love to defend.

"Please don't sneer, including at the rest of the community."

https://news.ycombinator.com/newsguidelines.html
> Do I need to refer you to many other examples where there was unauthorized entry into federal and state buildings that disrupted official proceedings

Yes, please, give some examples, that could be good for the perspective.
Google is hard to beat on that matter, but I volunteer some of my time to keep my area well-mapped in OpenStreetMap, including business hours, etc.

StreetComplete is a nice tool to accomplish this while I'm taking a walk.
I think I screwed up. It has been a while, but it looks like I misread Part II, Section B, Line 10 as $70 million, not $70,000. Let me check the previous years to see if I'm thinking of something else. Thanks for double-checking this.

I know they got $20 million from Open Philanthropy which qualifies as public support, so I am still wondering about the other $70 million, but it is not the smoking gun that I thought it was.

It has to be made up of donations from individuals under $2.6 million or from other public charities, but not private foundations.
> many people in the US live in places that aren't dense enough to make public transport viable

Well that's for damn sure. We (collectively) never should have allowed our society to bake in an assumption that everyone will have access to a personal vehicle.

A huge majority of the US is extremely difficult to live in unless you (a) own a reliable vehicle or (b) are okay with being largely self sufficient and living a hyper-local lifestyle.
The court of public opinion might be more important in some ways than any real court. People have already begun judging OpenAI based on the lawsuit.
Noticing a problem and having smooth / improved scrolling are two different things. I think you can only notice the difference if you've ever used a macOS device with a trackpad for more than 2 weeks and then switched back to either Windows or Linux. It's just feels HORRIBILE for some people (like me).

The interesting thing: Some Distributions have smooth scrolling (or interial scrolling / kinetic scrolling) by default (Fedora, Ubuntu) and some don't. Those who have enabled it, have no speed setting, so most of the time it's way to fast. I tinkered around a very long time with libinput-config to get it right and now it's acceptable. But it is still waaay better on macOS.

It is NOT a hardware issue though. I tried "hackintosh" on my T460s, and the touchpad experience is nearly as good as on a MacBook, so it is mostly software / OS.
He was right though, they did have a dramatic change in execution and resources the next couple of years when they prepared to sell out to Microsoft and that gave them a chance. Elon really gave them good advice there, even if it was snarky.
I wanted to use it for android app pen testing. I wasn't even able to install a rootable version of Android, so it was useless to me. Performance was also pretty terrible.

I'm not surprised they abandoned it.
Presumably they did not break into the data center and lift a bunch of hard drives. Instead they compromised a server which had credentials to read the data in a clear format.
Like most airing out of drama, this doesn't really materially change anything aside from making everyone involved look extremely bad

But also, all entities involved looked bad already to observers who weren't so deeply rooting for them already that nothing would change their minds, so this is basically tabloid fodder drama in terms of importance as far as I can tell
No. Random just means you can't predict what value will be chosen, but doesn't tell you how likely different values are.

If I roll a 12-sided die, that's random. If I roll two 6-sided dice and add the result, that's also random, but it has a different distribution of values.

The two dice verison, there's one way to get a result of 2, but _several_ ways to get 7. You'll get 7 way more often than you'll get 2.

The one-die version each outcome is equally likely. You're exactly as likely to get 2 as you are to get 7 or any other value in the range of possibilities.

The one-die version is a uniform distribution. The two-dice version is not uniform.
What is the actual justification for not discussing it openly? I know that is typical advice, but I am not sure it is correct advice for these types of situations anymore.
Maybe this will allow mouse to scroll like a trackpad? That would be nice.

Particularly spreadsheets with tall cells can be almost impossible to scroll with a mouse because mouse scrolling is on lines and you need half lines to comfortably view what’s at the bottom of a tall cell. But use the track pad and it’s fine.
eIDAS is also a bad thing for privacy in my opinion because it's going to make it much easier for websites you request identification online. I believe identification should remain a barrier, the same way you don't ID yourself at every physical store you enter. eIDAS doesn't mandate this but it does prepare the technological foundations to do that online.

And it doesn't have much to do with PKI breaking, though it's nice that tangential link was removed, it's indeed good that that attempt was called out.

Removing the most objectionable content doesn't make it a good thing though.

And again this is a big business lobby championed by Thierry Breton. This is not something the voters asked for, it's something the industry wants.
I've never used a secured credit card, and I'm with you that it seems ridiculous.

But I think a more honest question is: Why do people do this?

I'm willing to give folks the benefit of the doubt for being smart and rational. So genuine question we should be asking ourselves (or them): What is the appeal of a secured credit card? Is it really just about the credit score?
Two people can look at the same solution to the same problem, and interpret and analyse it differently.

Some of those interpretations can involve graphs, but that's not necessarily intrinsic to the problem nor solution.
KYC/AML is literally only law in the US and US licensed banking infrastructure. They are the US terms.

Other countries have their own terms for what they’re doing, and they aren’t the same terms.

The confusing part is that due to the US dollars reach, a LOT of foreign banks are US ‘licensed’ in order to interact with the US banking infrastructure, so there is some degree of it they need to apply in some cases. But it’s still US law only, and they don’t apply it in general.