skysight-inc/HackerNews huggingface dataset:
SAS is always active and can't be blocked by normal applications. Normally (ie. you're not in a UAC prompt) if you try to use the SAS, it brings up the windows security screen[1]. The UAC prompt is part of the operating system, and therefore it can block the SAS. Thus, if you see a password prompt, you do the SAS and the prompt is still there, then you can be sure the prompt is from the operating system. In fact there's a group policy[2] to force users to do this exact sequence to confirm whether they're entering passwords into a genuine OS dialog. Whether the policy actually works is questionable, because users are lazy/forgetful and an attacker can simply show a prompt that doesn't require the user to press the SAS, and the user would likely happily enter their password regardless.

[1] https://en.wikipedia.org/wiki/File:Windows_Security_screen_i...

[2] https://learn.microsoft.com/en-us/previous-versions/windows/...
Ask HN: How grammerly plagiarism-checker works
I am very curious on how these plagiarism checkers and AI content detector works. Does anyone working on these tools here can share some insights?
Uh, I never even mentioned apt. Docker and nix are, likewise, very different. In not super familiar with either but I do know docker isn’t reproducible by design whereas nix is. I’m not sure nix is always deterministic, though i know docker (and apt) certainly aren’t, nor are they reproducible by design.
> There are heavy-lift helicopters that can go 170 mph and carry 40 tons

Looking at the list below they mention that the helicopters can accomodate the weight in total but not externally.

So could be that the lifting mechanism is the limiting factor.

https://www.fairlifts.com/helicopters/the-top-10-heavy-lift-...
Not quite - stalemate is no legal move whatsoever for any of your pieces, and checkmate is king is in check and no legal move stops check.
OSB is much more nuanced than particle board, often in a bad way. Many manufactures orient the chips along a single axis, meaning it shares the anisotropic properties of solid wood where the X axis has a different strength and expansion rate than the Y axis. And looking at the 3rd dimension, the Z axis is actually quite weak. If you glue something to the face of an OSB board, you can break the joint fairly easily because the individual chips pull out.
Shu, I thank you for communicating your personal ambitions for Skyvern, and the touching personal anecdote. Making computers easier to use for my aging parents is also one of my goals.

I will be reaching out to the project with an analysis of its security model against prompt injection attacks.

I'll also be taking on a project for a KeepassXC plug-in that automates the process of rotating password in online services, integrating Skyvern as the underlying system. At that time I'll need support and understanding Skyvern's gaps against the projects requirements, and I'll ask for mentorship on helping fill those gaps.

This use case I believe has potential to help both individual and corporate users achieve best practice and policy driven password management - currently a very difficult thing because of the propensity of users do not reset their passwords on time, which is ultimately caused by the difficulty and variety in password resetting mechanisms. Our plug-in will aim to solve that problem for KeepassXC users.

I believe this work could result in a valuable contribution to Skyvern's security model, since an llm driven password reset workflow is uniquely vulnerable to attack or to attacker controlled texts. This provides a great benchmark for Skyvern's overall security model, and a great point to explore both classical and llm-based mitigation techniques.

How can best reach you and the team when the initial letter is ready? Once that's ready, I would like to have a video chat and plan a collaboration. I expect something to hatch in the next 2 weeks. I think you will enjoy our approach to the problem!
> I mean... most European countries (modulo some exceptions like Germany) existed (non-continuously) for at least a thousand years.

This is interesting to me. What does it mean for a country to exist non-continuously? I can understand making the case under some sort of continuity despite dramatic changes in e.g. control of land or type of government. Sort of like a nation-state Ship of Theseus.

But I don't understand how this works under the non-continuous case. If the temporal connection is broken how is it the same entity?
The National Geographic link was interesting, I hadn't thought of that.

I'm not so sure I'd call Wikipedia 'progressive'.
The latest wind turbines at sea don’t require subsidies anymore.
If you're using Nix, that is what you are ultimately producing, it's buried under significant amounts of boilerplate and sensible defaults. Ultimately the output of Nix (called a derivation) reads a lot like a pile of references, build instructions, and checksums.
How far do you think nearly-horizontal wind is going to carry a huge piece of metal?

Unless you think it's not going to sink pretty quickly after it lands?
Qanon is too hairbrained to have been conceived by such people.
No :'(
I think people take offence to the suggestion that there might be more autism.
> (...) there would be no effort to switch away from pcase, however, as it is "to be considered a matter of stylistic preference".

I'm sometimes glad that the CL standard is frozen.

Sarcasm aside, this is literally https://xkcd.com/927/.

Sarcasm aside for real this time, getting this sort of binding mechanism in a COND-like form is unusual. This effectively means that a programmer needs to inspect all previous COND* forms, instead of relying on lexical scope AND indentation as they normally would, to see where new bindings are made. This is like Common Lisp's LOOP, but even there bindings are only allowed at the beginning of the loop, before any iteration clauses.
The 13 month per calendar year (Mayan calendar) just makes so much sense as a web developer but somehow as a human it also seems hella mundane to have the same 28 day cycle repeated. Maybe that last day of the year party would make up for it though.
All due respect, Ted Lasso is the antithesis of Dad TV. It’s a “sports” show about interpersonal relationships, growth, positive masculinity, and learning to love yourself and others.

I kind of agree about foundation though, but only because it’s been kind of underwhelming and macho/action genre.
> 3 years? 68 lines of code. Is it not safer at this point to vendor that code?

Why, though? There is no bitrot or build flakiness with unnecessary changes if no changes happen, so what's the actual argument for this? Why is it missing from the article?
refreshingly descriptive, instead of being in the "self improvement" genre
Tesla has a PE ratio of 37.52. Microsoft has a PE of 37.6.

Tesla isnt "performing" bad, and its price has roughly nil to do with how the company is doing. It's share price got insanely overvalued, and it corrected.

Tesla is up 767% in the last 5 years, almost 10x the SP500.
The USA will stop teaching Roman numerals when we stop celebrating the yearly Super Bowl. No time soon.
That's true to an extent, but some families (agaricaceae and boletaceae come to mind) are found pretty much everywhere, and their edible members are easy to identify. Do you have a source for that? I would be surprised if the majority of poisonings (in the USAS, say) are travelers.
> Sometimes I think about how much money people would pay to make their computer run 20x faster.

Bottlenecks that can make a computer 20x faster are very rare. First, pay $1m for a specialist to find the bottlenecks. However, it is even rarer that it is a bottleneck of the entire service. Rather, it is more likely to be an accidental drop in performance. Thus, basically performance monitoring is the best use of money.

> Its weird to me that we'll pay thousands of dollars for faster CPUs then write new software in python, electron or a docker container running in a VM.

There are more labor costs and lost commercial opportunities due to delays in development.
VR needs performance..Android just cannot and will never deliver it.
nope, its postgresql because it is opensource. so, a different sibling :)
Most CPUs have about 20 lanes (plus a link to the chipset).

On the one hand, they will be gen 4 or 5, so they're the equivalent of 40-80 gen 3 lanes.

On the other hand, you can only split them up if you have a motherboard that supports bifurcation. If you buy the wrong model, you're stuck dedicating the equivalent of 64 gen 3 lanes to a single card.

Edit: Actually, looking into it further, current Intel desktop processors will only run their lanes as 16(+4) or 8+8(+4). You can kind of make 4 cards work by using chipset-fed slots, but that sucks. You could also get a PCIe switch but those are very expensive. AMD will do 4+4+4+4(+4) on the right boards.
Photographs aren't really the person, either.

But, you know, I treasure the photographs of my late wife and wouldn't part with them for the world.
> most mushroom guides contain info on hydrazine contents

So we should be growing morels on Mars?
Ollama does a nice job of looking at how much VRAM the card has and tuning the number of gpu layers offloaded. Before that, I mainly just had to guess. It's still a heuristic, but I thought that was neat.

I'm mainly just using llama.cpp as a native library now, mainly for the direct access to more of llama's data structures, and because I have a sort of unique sampler setup.
Love that show, love the creators. But it’s definitely not for everyone. Its pseudo premise about being a Silicon Valley style satire but for gaming is an obvious (and clever) ploy to write meta plots about what is like to be in charge of creative a TV show, not a game. Anyone showing up for the minds behind Sunny will be happy (like me). Anyone showing up for a new Silicon Valley or deep cut references to the gaming industry will be only mildly entertained.
It would be interesting to see the performance of protobuf vs Parquet in this case...not sure if DuckDB supports that...
I am thinking more about pipelines that run daily. Also, this ‘docker cache’ effectively means not running the step. So you might miss important security updates. Via Nix you can ensure that your dependencies are updated. And no updates means same hash.

When said caching, I meant on the nodes that run the containers. With Nix you can also update only one layer, while keeping the other layers the same.
It does, thanks.

I’m curious though how do you have an account and make a comment without ever actually visiting the site?
An interesting aside - last year researchers discovered that indocyanide green (a medical dye) can be used as an antidote for alpha-amanitin poisoning! This is the bad stuff in death caps (amanita phalloides), funeral bells (galerina marginata) and a host of other deadly mushrooms. Potentially a game changer for future mushroom poisoning victims.

Source: https://www.nature.com/articles/s41467-023-37714-3
I think you're romanticizing a past era and idea of science.

Approaches aren't old fashioned for arbitrary reasons! They're old fashioned because they don't work. Science is pretty cutthroat. No one wants to leave anything on the table. If those methods worked to discover big ideas people would be pushing them.

There are plenty of people out there who are what I'd call crash and burn scientists. The kinds of people who bet their entire careers on doing one big splashy thing. If it works out, great! If it doesn't, they're out of a job. If the old timey methods worked for finding such ideas people would be pumping them hard. But don't.

And there's a reason why we hardly made any progress until about 100 years ago when we stopped doing science this way.

Splitting subgroups isn't inherently bad! Heck, something like stratifying autism is one of those big problems people burn their entire careers on. But after trying to do this based on case studies for decades, we've learned it basically doesn't work as a method. Splits come out from mechanistic hypotheses and/or in the data at scale when you have controls.

I do agree that the old-timey way of doing this is much more pleasant. But it's just not effective or what we would call science today.

Even if you look at the case of Omegaven. It was the animal studies that saved them. Boring science with controls, etc. The main problem they had is that funding agencies are too conservative. Which is true! The vast majority of scientists would agree with that statement. We need to take more risks and funding agencies need to be ok with more failures. Sadly, funding agencies don't agree.

I'm not writing this to be mean! I'm writing it because I see the impulse to follow this approach to science all the time in new grad students.

I think you could be far more effective if you took a different much more scientific approach. Citizen science has a real chance of completely revolutionizing nutritional science because our studies are so incredibly bad. But the solution isn't to throw the science part out, it's to fix the part that we know is bad: small studies with bad controls and really poor reporting. We're a good app + a large community that's willing to play ball away from changing the world.

Happy to chat more :)
You can absolutely build a reproducible image in Dockerfile if you have discipline and follow specific patterns of doing.

But you can achieve the same result if you use similar techniques with a bash script.
I'd argue that those distractions and pharmaceuticals are specifically designed to keep/make us happy for that exact reason.

However, I agree with you: I don't think people engaging in Consumerism in this way are _actually_ happy. (I.e. I don't consider the happiness Consumerism provides on the time scale you mentioned to be happiness in the sense we're talking about).

I just think that Consumerism is the cause and not the symptom. I believe - and admittedly this is a leap - that people who "follow Consumerism" do consider it happiness. The promise of happiness after consuming (what sellers and advertisers exploit) does come true for that short time after consumption. When that time runs out, people consume again, and the cycle continues.

(I'm coincidentally reading Brave New World at the moment so I'm a little down the rabbit hole here. And I think I'm mostly arguing semantics on a point we agree on.)
Co-founder here. Thanks for the questions! A couple advantages DBOS has:

1. It's a serverless platform. It manages application deployments, providing a simpler experience than trying to bolt a durable execution framework onto an app deployed on Kubernetes.

2. Transactional guarantees. DBOS does durable execution in the same transactions as your business logic, so it guarantees exactly-once execution for most operations while other workflow solutions are at-least-once. More details here: https://docs.dbos.dev/explanations/how-workflows-work

3. Database time travel, which greatly enhances observability/debugging/recovery. More details here: https://docs.dbos.dev/cloud-tutorials/timetravel-debugging
Thanks for the info, I will look into these links and see if I can push an update to Erlang and Elixir in the coming days. :)
[in reply to the dog food comment below - somehow replying directly is disabled] Thanks for the feedback. Lead Generation is live on agentx.so Comments are welcome
The half-life of DNA is about 500 years; the odds of finding any preserved sequences of dinosaur DNA longer than a few base pairs is pretty much nil. Even with very large samples, it simply would not be possible to recover any information from such fragments any more than you could reconstruct a book from a list of the syllables contained in a few million shredded copies.

You'd have an easier time modifying the genomes of modern-day birds and reptiles to produce something that looked like dinosaurs, but even this is far beyond the reach of current technology.
That's interesting. We have some applications, that produce PDFs, which use fonts, which usually requires a non-headless (headfull?) jdk. At AWS i wonder, what the default alpine jdk contains. And how much space could be saved, if people were more aware, that they can use a headless one.
to appreciate the scale of this new plane, the current (recently destroyed) record holder for the largest cargo plane was An 225 that could hold 70m objects lengthwise. It seems that the newly proposed plane can hold > 100m objects, so that is approximately 50% increase in cargo length. The additional ability to land on packed dirt strips is also a huge plus.

I suspect that the final business model, as hinted by the last sentence in the article, may include significant revenue contribution from transporting other machineries. The recently lost An 225 had a long running operation transporting these, including another jumbo jet. Now that the An 225 is gone, there could be more market for this interesting beast of a plane.
The Nix idea is to start building with a known state of the system and list every dependency explicitly (nothing is implicit, or downloaded over net during build).

This is achieved by building inside of a chroot, with blocked network access etc. Only the dependencies that are explicitly listed in the derivation are available.
I'm completely out of the loop here.

What do you use 8gb of ram for on your phone? Just browsing the web?
On the flipside, it gives the other person hours instead of minutes to look at it before you get online the next morning, so they have time to actually think about it instead of just skim it and go "yeah, that's probably fine".
> But in a world where you can recruit from anywhere, I'm not sure that's true, or that it will be true on a medium to long timeline, as people disperse to decentralized, remote jobs.

Enough employers paying by location indicates that they have not bought into your assumptions here. What data do you have to convince them?
That would make sense because it didn't detect Mullvad's openvpn for me.
I’ll drive to my garden shed if I want to!
Non attendance should imply you don't count in the decision. You should have a deadline of 1 or 2 days for the vote, if someone doesn't vote they don't matter in the decision.
[dupe] because of Cory's weird permalink scheme

Here's the discussion: https://news.ycombinator.com/item?id=39722283
And for controlling smart home devices Google is wildly inconsistent, and near constantly glitching.
When the family educates all of its children but only the eldest inherits, then you might end up in such a situation.
I've been trying to talk with desktop people, browser people and videoplayer people trying to convince then that volume normalization is a good thing,(people are sleeping in the next room)

But all i got was deaf ears.
See "Speculative Lock Elision" from MICRO34 (in 2001!):

https://pages.cs.wisc.edu/~rajwar/papers/micro01.pdf
Also, there is the ambiguity of exactly what "multi-node" entices. Kubernetes is basically orchestration on top of a high-level segmentation of a node's resources. This is basically as vague as people want.
I've tried again and again to like Nix, but at this point I have to throw in the towel.

I have 2 systems running Nix, and I'm afraid to touch them. I've already broken both of them enough that I had to reinstall from scratch in the past (yes yes - it's supposed to be impossible I know), and now I've forgotten most of it. In theory, Nix is idempotent and deterministic, but the problem is "deterministic in what way?" Unless you intimately understand what every dependent part is doing, you're going to get strange results and absolutely bizarre and unhelpful errors (or far more likely: nothing at all, with no feedback). Nix feels more like alchemy than science. Like trying to get random Lisp packages to play nice together.

Documentation is just plain AWFUL (as in: complete and technically accurate, but maddeningly obtuse), and tutorials only get you part of the way. The moment you step off the 80% path, you're in for a world of hurt, because the underlying components are just not built to support anything else. Sure, you can always "build your own", but this requires years of experiential knowledge and layers upon layers of frustration that I just don't want to deal with anymore (which is also why I left Gentoo all those years ago). And woe unto you if you want to use a more modern version than the distribution supports!

The strength of Docker is the chaos itself. You can easily build pretty much anything, without needing much more than a cursory understanding of the shell and your distro's package manager. Or you can mix and match whatever the hell you want! When things break, it's MUCH easier to diagnose and fix the problems because all of the tooling has been around for decades, which makes it mature enough to handle edge cases (and breakage is almost ALWAYS about edge cases).

Nix is more like Emacs: It can do absolutely anything if you have the patience for it and the deep, arcane knowledge to keep it from exploding in a brilliant flash of octarine. You either go full-in and drink the kool aid, or you keep it at arm's length - smiling and nodding as you back slowly towards the door whenever an enthusiast speaks.
Why won't Meta do anything about the "I can't believe he's gone" scams?
Lately I've been seeing a bunch of posts from compromised accounts on Facebook composed of an inner and outer post, with the outer post stating something like "I can't believe he's gone <emoji><emoji>" and the inner post being a link to what is obviously a scam site with an image made to look like a YouTube screenshot for a local news report about a tragic vehicle accident.

This simple pattern alone should be simple enough for Facebook to shut down immediately, yet not only does it continue but every time I report it Facebook claims it does not violate their community standards (usually a week or two after the initial report). Until recently, where the posts are deleted before Facebook's slow process gets around to actually looking at it.

Because of Facebook's complete inaction in this case, I've mostly just resigned to commenting "DO NOT CLICK" on these posts. On one such occasion, I got a response from one of the account owner's friends that mentioned that it doesn't show up on their timeline. That didn't immediately register with me as being any more suspicious than the rest of the post, but eventually I realized that all these posts are marked as public. So I went to this person's public profile (of whom I am not a friend) and was not able to find this recent "public" post. Both the inner and outer posts are marked as worldly public, posted March 14, 2024, yet the most recent public post on their profile is from October 2017 (logged into my own account, in a private window I can't even view their account).

This is either a security flaw or exploit that is being used to attack Facebook users and needs to be addressed ASAP.
AFAIK Go’s spec allows relocating objects. The door towards a moving GC is kept open.
Brain waves appear to wash out waste during sleep in mice
But the Common Lisp dialect also "has evolved from the original Lisp and differs from the latter in several important ways, including static scoping for variable binding and permitting functions to yield functions as values".

:)
I hope you don't mind me pointing out the delicious irony of recommending an audiobook (requiring a mass communication network and electronic playback device) to sample a tome apparently on the subject of electricity invisibly killing birds and sickening people, when it is also available in dead-tree form.
Are we gonna ignore the fact that VR pornography exists?

Also I'm pretty sure those VR games that are ran on a computer connected to a headset could display on any headset, Apple or Oculus. Cursory search reveals people have already been getting SteamVR to work on the VisionPro.

Running stuff directly on the headsets is neat, but there's no headset on the market with enough power to match what you can have when plugging them into a computer.
> An incel? It's because of women

> Feminist? It's because of men

I find it funny that you indirectly equated feminists and incels