skysight-inc/HackerNews huggingface dataset:
Airtable itself lets you expose simple forms to the public internet.

Then there are dedicated form tools like Fillout that let you build more complex forms that integrate with Airtable.
I'll save you the time. It's a video of his defense attorneys saying they are unconvinced by the small but nonzero (in their opinion) evidence.

I don't know the facts of the case, but even I can hear them deliberately leaving out facts and legal process not in their favor.

Even the sycophantic interviewer at one point calls bullshit on them.
Depends on your threat model & consequences. Avoiding doxxing means you need more bulletproofing.

For OP, Twitter might have been the holy grail and they’re now cool, but maybe not if there’s $x others that have already rolled over.
Anyone have the tail number for the airplane involved? Is it CC-BGG? Wondering if there's any way to tell if this is one of the 787s built in South Carolina or in Washington state.
Doing this on behalf of the client would be the absolute wrong thing to do. Any lawyer that would do that should be disbarred.

Even if the client asks for that?
After using the modern C++ more than 10 years, I don't believe the "safe subset" is sufficient to solve the security problems in C/C++. It does help, but not enough to keep the pace of modern software complexity. Some of localized anti-patterns could be prevented, but any non-trivial memory bugs across team boundary won't be.
It's an 'anti-woke' wedge issue, and it's an election year.
I agree that it’s unlikely but going after their subpoena ability seems like the kind of thing which would be taken personally.
If you received an illegal subpoena from the government you wouldn’t have any costs associated with it at all? Just throw it in the trash, move on with your day, and surely you will never have to think about it again?
Don't think I like the news article structure where the reporter spends half the article listing everything bad that happened recently, that isn't actually a cause of the event, but is just there to make you feel bad about who they've decided to make the article about.
What would that reason be?
I don't think it's fully impossible, but rather just very difficult, especially if operating in the software space. I'd call framework laptops an example of the exception to the rule. But yes, they're very rare.
You're really getting scammed if someone convinced you there's a market for cricket wool.
Having the OS, the hardware, and the app store, along with a lot of the (almost mandatory) cloud services AND the most popular apps, all made by the same company.
So what's the added value over Turso + Drizzle?
> That was a cop collecting evidence on fellow cops.

Why is that relevant? Are you implying that this somehow justifies the gang behavior?
Brain stimulation tech wins €5M to fight depression at home
What's an "AI model execution"? When I ask something to ChatGPT and it answers to me, does that count as 1 "AI model execution" for OpenAI?
I think the intent is clear. If apple is allowed to charge, they could charge 1000 USD per install and the whole law would be moot.
Running a railway is not a crime even if a criminal may take a train.
That kind of restriction is now gone https://www.xda-developers.com/android-14-new-apis-app-store...
>Teaching isn't some complex topic, you just transfer information from one individual to the other.

[Citation needed]

Teaching is sometimes very easy. Sometimes very difficult. Depends what you're trying to teach.
This is so, so cool. Basically the holy grail as a distributed systems engineer. Like the author, I've also avidly consumed every Jepsen report but the effort of actually implementing Jepsen tests for my systems always seemed too high.

Very excited to see this technology democratized and made available to to more companies!
Totally comparable to the amounts paid out by $3 trillion companies:

Apple: https://security.apple.com/blog/apple-security-bounty-upgrad... ($20M in 2.5 years)

Microsoft: https://msrc.microsoft.com/blog/2023/08/microsoft-bug-bounty... ($14M in a year)
Amsterdam testing system that can remotely slow e-bikes down
Biggest loss for me was reading about Nikola’s “HTML SUPERCOMPUTER” driving their trucks. The easiest short I ever could’ve taken part in. So obvious. So painful. I discovered it as the story broke, but MAN, if I’d read that just a few weeks earlier…
Does it? I couldn't seem to find anything about that. The closest I could find was https://www.kernel.org/doc/html/latest/process/1.Intro.html#... which says

> Copyright assignments are not required (or requested) for code contributed to the kernel. All code merged into the mainline kernel retains its original ownership; as a result, the kernel now has thousands of owners.

and then goes on to explain exactly how that prevents re-licensing. I suppose the possible nitpick is if CLA == copyright assignment; https://en.wikipedia.org/wiki/Contributor_License_Agreement seems to agree with my existing impression that there's little functional difference.
How many ads does Meta serve a day, and how many AI model executions are done for each one? Repeat the same for stories, post and comment recommendations on Facebook and Instagram, and you have very big numbers. To that, Add VR, internal modeling and other backoffice/ offline analyses over billions of users and you'll easily get into the trillions.
EU contributions to what, Apple?
I’m guessing there’s some obvious telltale that there’s a warrant (signed/stamped by judge, possibly on court letterhead instead of police letterhead).

Also possible to separate the streams of input. Maybe can’t force it, but having a “warrants” stream that gets priority triage and another for “other” that works a lot slower because it’s mostly garbage. Can create a shit list for those that abuse the “warrants” stream.
What complexity? Sending an email using git instead of having to create an account and open a merge request using a web app?
For text data, it would work fine, but you'd have to do some finagling with binary data; $1F is a perfectly valid byte to have in, say, a 4-byte integer.
Whats most annoying is that Apple pioneered the idea of PWAs going all the way back to Steve Jobs. I have said many times Tim Cook is a good COO but Apple needs a visionary who wants to innovate. It feels like Apples innovations are not where they could be. They are making some amazing things here and there, but I can only imagine they would be far more innovative with a different CEO.
I'm a bit worried about exposing our codebase.

I wish this ran locally or was self-hosted.
The indictment claims that Bitcoin Fog engaged in money laundering because they knowingly processed transactions that:

"knowingly conduct ... financial transactions ... involving property represented to be the proceeds of specified unlawful activity, ..., knowing and intending the the transaction was disguised in whole and in part to conceal and disguise the nature, location, source, ownership, and control of property believed to be the proceeds of specified unlawful activity, and intended to promote the carrying on of the specified unlawful activity."

> I don't see how you could argue the service itself was unless they somehow knew the purpose behind every transaction occurring on their platform.

The indictment states that the US government did an undercover operation in 2019 in which Bitcoin Fog was told that a transaction was from illegal activities and Bitcoin Fog accepted it anyways. If the person sending you Bitcoin says "I did a crime to get this", it is hard to claim you didn't know it was from criminal activity.
We’re still not quite there but you’re correct though.

This tech could free up software engineers to focus on more interesting things. But that’s also true every time there are layoffs. Those engineers they got rid of were free to focus on more interesting things, had the company wanted to utilize them that way. Instead, of course, they reduced headcount to reduce cost.

Same will happen with AI tools.
Bees passed on situational awareness skills to me as a child…
This is excellent. One of the things that many folks mentioned [1] as a challenge in self-hosting databases.

https://news.ycombinator.com/item?id=27671376
> On Windows, people literally just give everything they install complete root access to their entire system when installing applications, might as well bring that to iOS too, right?

UAC prompts get in the way, and if the user account isn't an admin the app can't do anything.
> CHERI claims that the amount of changes are exceedingly small.

Oh, man. Yes, they do. Many people have been claiming that for decades.

When can we expect one of them to claim it's done?

(To be fair, the amount of changes required has been diminishing through those decades.)
A formula for responsive font-size
I've posted thousands of comments about that over 10 years, starting on the day I took over Hacker News:

https://news.ycombinator.com/item?id=7494621 (March 2014)
> Why is that relevant? Are you implying that this somehow justifies the gang behavior?

Explaining, not justifying. Gang-like organisations react more forcefully to perceived betrayal (one up from competition) than bog-standard adversarialism.
Subtitled 'Here's what you'll never be able to do'.
The most interesting takeaway for me is:

> For studios or companies purchasing more than ten Unreal Subscription seats, Epic Direct Support will be available to purchase for an additional $1,500 per seat annually.

So ballpark that to a minimum yearly spend of about $18k in order to access the UDN (what is referred to there as Epic Direct Support)?

This is interesting since normally the terms for what it would cost to get UDN access are not public and instead requires you to reach out to Epic first.
Get rid of the UN and the statement would likely still be true.

Their budget is roughly equivalent to 2020 Ukraine's.
Let me clarify what I'm getting at:

These streaming sites are laden with ads, and some even have offer subscriptions, so there's a profit motivation for the people that run them.

I'm not talking about the people who upload torrents (there's not much in a profit motive there, since that stuff is hard to monetize), or people who crack software. That sort of stuff. Interviews digging into their motivations have been going around for a long time now.

If you're hacking on running a pirate streaming site to make money off it, if you have skills enough to stay ahead of the people constantly trying to take your content down, at some point you're going to realize you can make a lot more money using those skills working for a legit company.

My take on the profit motive for malware authors is not the same; a malware dev can make a lot of money if the group manages to hit the right victims. The ones who are state sponsored probably make decent money too.
I wonder how well that's going to work out. The software industry isn't exactly noted for taking technical advice from the White House...
I don't know how you would easily book them if you're not in the system, but what you're describing is a timeshare rental - suite rooms in resort-like environments.
Yesterday: "How Raw Milk Went from a Whole Foods Staple to a Conservative Signal" https://www.politico.com/news/magazine/2024/03/10/the-alt-ri...

Is this a mater of labels? Surely the Government shouldn't forbid the sale of foodstuffs without some dire and easily provable public threat from them.
Apple, Google, and... ?

If you include Steam, we need to include XBox, Nintendo, and Playstation too; I would expect they're not too different in size.

But yes, the status quo needs shaking up unless we really want to live in digital neofeudalism.
Living in Florida I've driven down the road and had it be raining on one side of the road and not raining on the other while the sun is shining.
Reddit – Account Age Recovery?
I know this isn't Reddit :-) But since it's impossible to talk with an actual Mod at Reddit these days, I thought I'd try here on HN.

I had a Reddit account that I used for 17 years(!). Unfortunately, I gave it a bad name (again, 17 years ago). I was constantly being accused of being a Satanist. Finally, on my 17th cake day (literally) about a month ago, I got fed up and deleted my account and started over. I lost my account age and my ability to post or comment in most (all?) subreddits (for at least two months). Worse, I probably lost my ability to buy into the upcoming Reddit IPO on their Direct Share Program.

I know it's a long shot, but does anyone know of someone I can appeal to in order to recover my account age and cake day? If not, I can at least say that I asked :-)
Cloud Security Lab a Week (S.L.A.W)
Nothing like using Linux pipes and TCP to clone a rooted device for low level data recovery…
;)
Synfig Studio: Cross-platform and open source vector animation software
And 10 years later I just don't see the level of amateur uptake that flash had.

For 10 years flash minted thousands of young animators and content creators. Since flashes death there are far fewer upstarts and communities despite Internet adoption being magnitudes higher
Maybe what most people are truly concerned is the Boeing Narrative?

Increasingly more than just a narrative
Could you link a few with injuries anywhere near this size? I feel like that’d be national news, so it’s surprising to hear it’s happening often.
this of course conflats two entirely different things.

1) technology development has tended to hugely improve society-wide productivity and be a general (though not unmitigated) good.

2) technology development has been absolutely shit for many individuals as their careers disappear.

people should be way more worried about good national governance and safety nets to deal with the terrible consequences of 2 while we reap the benefits of 1.

> Instead, workers tend to have higher productivity, which drives higher wages.

workers are capturing less and less of that, especially over the last twenty years.
Primary discussion happening here: https://news.ycombinator.com/item?id=39673589
>GPT can't perform to the level of a middle market copywriter or content marketer. I am convinced that people who think LLMs can write have simply not understood what professional writers do.

GPT's rigid "robot butler" style is not "just how LLMs write". OpenAI deliberately tuned it to sound that way. Even much weaker models that aren't tuned to write in a particular way can easily pass for human writing.
Regarding the follow-up...

I grew up speaking only Russian. I moved to the US when I was 15. I had 7 years of deliberate English practice prior to the move and became fluid in it within a year of moving.

That was about 30 years ago. Because I moved alone, and didn't seek out Russian speakers for this 30 year duration, I only occasionally spoke Russian. The result is that now my Russian feels like a second language. When speaking it, I constantly struggle to translate from English. It doesn't feel like my Russian comprehension diminished, but speaking it is a struggle.

The shift to English being the primary language happened in stages. The last noticeable change for me was when I would need to count something. For a decade, maybe longer, I would default to Russian in my head when counting. The change was gradual, but now it's English all the way.

Fun story... During the first year after the move, I remember being freaked out when I had my first dream where I spoke English.
"decelerationist" apparently.

> “Decel” is a derogatory slang word used by the e/acc community.

From https://www.noahpinion.blog/p/dont-be-a-decel
> Doing this on behalf of the client would be the absolute wrong thing to do. Any lawyer that would do that should be disbarred

This is a novel take. Were this me, I'd require my lawyer pursue the NYPD for the cost of the original legal fees. They would not refuse.
Right! So lets get after it

Start a local cooperative and build value from the bottom up
I don't get your pessimism, after we are replaced we can all work at the glue factory :)
I've always wanted to try Lineage, but I've never owned a device supported by it. I tend to use Samsung. And for some reason, it only supports devices on models/years I've skipped and then stopped at the 10 series. Guess it wasn't meant to be.
At this point the only entente that could make our devices more repairable is the EU. Easy Screen, Battery, and SSD replacements should be mandatory for every desktop computer, laptop, and phone
We'll adjust the wording until we have a faster renderer. Also, the playground might take a bit longer to render since there's a queue and it's been heavily used! We're on it, thanks!
Is there any evidence Bitcoin Fog was marketing their service specifically to criminals?

The affidavit[1] another user linked elsewhere in this thread says:

> BITCOIN FOG was publicly advertised on Internet forums and well-known web pages promoting darknet markets as a tool for anonymizing bitcoin transactions.

But it doesn't really go into detail. "well-known web pages promoting darknet markets" might just mean "Reddit".

And I think you might be underestimating the impact of word-of-mouth advertising. I don't recall Tor or Mullvad having to extensively advertise to criminals in order to get as popular as they are now.

[1]: https://storage.courtlistener.com/recap/gov.uscourts.dcd.230...
Adobe’s Flash editor got renamed to Adobe Animate. People mostly use it now to export video but there is more than one HTML 5 viewer it will export for, these support most of what Flash supported except for a few unusual geometric primitives.
The article does a bad job explaining why this subpoena is different from a regular subpoena. The "warrentless subpoena" bit is really misleading.

However it does look like this is different from the normal subpoena process. This doesn't seem to be part of discovery - there is no action. The referenced "Section 14-137 of the New York City Administrative Code" seems to basically grant the NYPD commissioner powers a judge usually has. So there is something to worry about.
Were they? Or did their children move to the city and learn different skills, while they bought machines to replace the lost labor? Was the tractor actually bad for the farmer?
As a user, I cannot recommend iPhone to my older relatives if there is a way to run arbitrary code beyond Safari’s JS sandbox. Simple as that.

It is a nuanced question with a computer[0], but for a phone (increasingly used for more important transactions and sensitive private data by people more naive when it comes to security) it is simply a no-brainer.

Unless cyber crime is prosecuted as robustly as robberies, I want this kind of jail to constrain the device. Believe it or not, it is a feature.

[0] I do run arbitrary code on my MBP, but then I am a dev who writes code. And, being that, I recently re-enabled the warning for running non-app-store apps on my Mac—I consider myself proficient enough, but perhaps that is exactly why I prefer having to go through an extra warning dialog if it helps reduce the attack surface.
Are you being purposely dense?

If the mean number of CVEs is low enough, some proportion of software has 0 exploitable flaws, and is invulnerable regardless of how much attackers spend.
It is an absolutely massive amount of work to turn something designed for your custom software stack and data centers (custom rack designs, water cooling, etc) into a COTS product that is plug-and-play; not just technically but also things like sales, support, etc. You are introducing a massive amount of new problems to solve and pay for. And the in-house designs like TPUs (or Meta's accelerators) are cost effective in part because they don't do that stuff at all. They would not be as cheap per unit of work if they had to also pay off all that other stuff. They also have had a very strong demand for TPUs internally which takes priority over GCP.
Makes sense, it will be intersting to see how the balance between control and autonomy will play out.

From Kapathy on Twitter:

> In my mind, automating software engineering will look similar to automating driving. E.g. in self-driving the progression of increasing autonomy and higher abstraction looks something like:

1. first the human performs all driving actions manually

2. then the AI helps keep the lane

3. then it slows for the car ahead

4. then it also does lane changes and takes forks

5. then it also stops at signs/lights and takes turns

6. eventually you take a feature complete solution and grind on the quality until you achieve full self-driving.

There is a progression of the AI doing more and the human doing less, but still providing oversight. In Software engineering, the progression is shaping up similar:

1. first the human writes the code manually

2. then GitHub Copilot autocompletes a few lines

3. then ChatGPT writes chunks of code

4. then you move to larger and larger code diffs (e.g. Cursor copilot++ style, nice demo here https://youtube.com/watch?v=Smklr44N8QU)

5....
Devin is an impressive demo of what perhaps follows next: coordinating a number of tools that a developer needs to string together to write code: a Terminal, a Browser, a Code editor, etc., and human oversight that moves to increasingly higher level of abstraction.
Rich Mogull writes:

I want to make cloud security knowledge accessible to anyone, with or without security or cloud experience, for free. Cloud Security Lab a Week delivers a 15-30 minute lab to your inbox, RSS feed, or YouTube. You don’t need to be a tech pro, but it helps to know the difference between an API and an IPA.

I’ve taught cloud security around the world for over a decade. CloudSLAW is how I can finally help anyone go from zero to hero.
Is that the one from the Silicon Valley episode with Burger King?
I build a pretty popular LLM tool. I think learning when/how to use them is as big a mental hurdle as it was learning to google well or whether something is googlable or not.

In the realm of coding here are a few things its really good at:

- Translating code, generating cross language clients. I'll feed it a golang single file API backend and tell it to generate the typescript client for that. You can add hints like e.g "use fetch", "allow each request method to have a header override", "keep it typesafe, use zod", etc

- Basic validation testing. It's pretty good at generating scaffold tests that do basic validation (Opus is good at writing trickier tests) as your building.

- Small module completion. I write an interface of a class/struct with it's methods and some comments and tell it to fill in. A recent one I did looked something like (abbreviated):

type CacheDir struct { dir string, maxObjectLifetime: Duration, fileLocks sync.Map }

type (cd *CacheDir) Get(...)

type (cd *CacheDir Set(...)

type (cd *CacheDir) startCleanLoop()

Opus does a really good job generating the code and basic validation tests for this.

One general tip: you have to be comfortable spending 5 minutes crafting a detailed query assuming the task takes longer than that. Which can be weird at first if you take yourself seriously as a human.

Note that I hadn't been able to do much of this with GPT-4 Turbo with with Claude Opus it really feels capable.
> Twitter might have been the holy grail and they’re now cool, but maybe not if there’s $x others that have already rolled over.

This is totally different from "it only works if all of the platforms you use do this." That's a collective action problem. One which does not present itself in this case, where marginal actions produce marginal benefits.

What you're now saying is the marginal actions (and thus benefits) may be bounded. Which, sure. But that also doesn't change if all the platforms "do this," but boundedly.
The fastest ocean liner to cross the Atlantic faces eviction from a pier
Although matching up nested pairs of brackets requires something at least as powerful as a pushdown automaton (CFG matcher), discriminating between an arbitrary number of escaped backslashes followed by an unescaped 't' versus an arbitrary number of escaped backslashes followed by the '\t' escape sequence doesn't require anything more powerful than a finite state machine.