skysight-inc/HackerNews huggingface dataset:
It's not about displaying the names next to the reviews on GLassdoor.

It's about building an internal database of user profiles with their names. And they are apparently pretty aggressive, getting the names from support cases and third parties:

https://www.glassdoor.co.uk/about/terms/
> "We may update your Profile with information we obtain from third parties. We may also use personal data you provide to us via your resume(s) or our other services."

https://arstechnica.com/tech-policy/2024/03/glassdoor-adding...

The worry is that when they get hacked, it will be possible to map real humans to reviews. Which is potentially going to be catastrophic for anyone who posted negative reviews. Not a good move from a website which is some sort
Paper:

> We present Owl, an augmented password-authenticated key exchange (PAKE) protocol that is both efficient and supported by security proofs. Owl is motivated by recognized limitations in SRP-6a and OPAQUE. SRP-6a is the only augmented PAKE that has enjoyed wide use in practice to date, but it lacks the support of formal security proofs, and does not support elliptic curve settings. OPAQUE was proposed in 2018 as a provably secure and efficient alternative to SRP-6a, and was chosen by the IETF in 2020 for standardization, but open issues leave it unclear whether OPAQUE will replace SRP-6a in practice. Owl is obtained by efficiently adapting J-PAKE to an asymmetric setting, providing additional security against server compromise yet with lower computation than J-PAKE. Owl is provably secure, efficient and agile in supporting implementations in diverse multiplicative groups and elliptic curve settings. To the best of our knowledge, Owl is the first augmented PAKE solution that provides systematic advantages over SRP-6a in terms of security, computation, message sizes, and agility.

* https://eprint.iacr.org/2023/768

Slides from Financial Cryptography and Data Security 2024 conference:

* https://docs.google.com/presentation/d/1CWwMzutshb_oX0qUhPR-...
Many switch elements are styled in a way where the state is ambiguous. With checkboxes it is visually clear when something is enabled. Use an appropriately styled switch element if you need this feature for your dark pattern UX.
It would take microseconds after a complete program was written by a human?

It no longer requires an expert human
>But in the end, shot by water cannon is only possible if there is violance going of the demonstrators. If there's a possible solution for a change in project, then often the change is done. As I said. Demonstration is a human right and is also being written under the basic rights :)

Are you saying that demonstrations should always be allowed as long as there's no "violence", even if it's interfering with other people's activities (eg. in the middle of a construction site)?. I'm pretty sure that's not how it works anywhere, because that basically allows anyone to veto any sort of activity by "protesting". That said I'm not an expert on American or German law so feel free to prove me wrong. :)

>If you think, just because something got approved and because of this there shouldn't be any demonstrations or blocking anymore - I'll wait for the day a highway is built behind your house and then I remind you of your comment :)

If you think, just because people have the right to protest and because of this you can't do anything about "protesters" - I'll wait for the day protesters decide to "protest" inside your house and then I remind you of your comment :)
My Blog Has Regenerated
Well, as a blind user, I'd like to point at the OpenAI Vision integration of BeMyEyes! Being able to get fully detailed scene descriptions including OCR and translation all in one package was pretty much a game changer for me.

Not so much kick-ass, but still works nicely: https://github.com/mlang/tracktales -- My MPD track announcer with support for describing album art...
At which point will it be less work to just switch to a sane operating system and maybe use windows in a VM if you need some specific application?
I was taking the train south to north through Switzerland about 20 years ago (back when they still had smoking cars) and the kids in the Abteil in front of me were smoking some kind of funny smelling cigarettes that didn't stay lit.

The conductor came stamping down the aisle, with a grim look upon his face, and started to chew the kids out. They apologised, and he left, whereupon they continued to kiff but promptly put newspapers down on the seats across, protecting them from their shoes while they had their feet up...
Nah I always pay them fair market rate for their experience level. It's a job after all. The idea that they'd work for free is toxic.
You are correct and Apple is offering very similar back room deals in the App Store. It was revealed as such in their last suit.
But one naturally acquires experience and wisdom working in the industry. Very few people would trade their wisdom for a faster brain. Usually, the daydream goes "if only I could go back in time with the wisdom I have now", not the other way.
We'll see. I'm hopefully optimistic that will show that cannabis is far less dangerous than alcohol.
Cool project. Where is the data and how was it acquired / what's the provenance? I found this:

> Data: We have a bunch of catalog data and fulltext acquired from various sources, either sitting in the Archive or to be uploaded to there. I think the acquisition processes (including web crawling scripts for some of the data) is outside the scope of an Open Library software install. There are a bunch of additional scripts to make the stuff usable in openlibrary and these need to be documented. These include TDB Conversion Scripts written by dbg, and (for OCA fulltext) Archive Spidering and Solr Importing scripts written by phr.

edit: I should add the question: does openlibrary support fulltext search of actual books or fulltext search of the metadata?
AI is a lot older than blockchain. There were full-fledged neural networks in the 40s and the perceptron was implemented in hardware in the 50s.
I haven’t used a printer in ages but I just got a Brother laser printer last month. I plugged it in and pressed the wifi button on the printer, then I pressed the WPS button on the router and it connected. The printer then instantly showed up in the printer list on my MacBook.

I don’t know how it works and I didn’t need to. It just worked. Optionally I could have also plugged the printer in with a usb cable which I assume also just works.
Here is another interesting technique for generating algorithmic art, from Renato Budinich: https://renatobudinich.com/create-random-images-with-randima....

It is a beautiful algorithm using a simple two-step procedure. The first step involves taking a random gray-valued mask image and applying the path-finding procedure of the Easy Path Wavelet Transform (EPWT) to it. This path-finding technique is greedy and aims to obtain a succession of vectorized pixel values with minimal variation. It does this by always picking the next point (among the available neighbors) that yields the minimum absolute value difference in pixel values. This approach helps it select regions with similar pixel values before making a jump to pixels with significantly lighter or darker regions.

Once a random path of say length N is obtained, a random color map (think of one from matplotlib or seaborn) is applied, with each point k in the path mapped to the k/N point in the color map. Et voilà! A gorgeous image appears.

I've been using this as cover art for my personalized radio station software (https://github.com/pncnmnp/phoenix10.1).
Why a small China-made EV has global auto execs and politicians on edge
> Meanwhile the lack of collective leverage poses a real problem for my individual compensation

Aren't Silicon Valley programmers in the top 1% for total household income?

People on HN give me the impression that graduates with no experience get paid six figures and it's considered poverty level.
We had those feelings when DOS came along to replace Unix. Then we had that feeling when we had to choose Windows over OS/2. Then we had the same feeling when the Internet came along - it was going to DOOM programming everywhere. Then we had that feeling when AOL dumped its users on the Internet. Then we had that feeling when Google rose, and all the Web 2.0 came along to make everyones' dreams of a free and open Internet dystopian and decrepit.

You can't use AI if you can't talk to AI, and you can't talk to AI if you don't understand things the way that AI does. AI is us. Just like the Internet was/is/will always be.

In 10 years time when nobody programs any more, what will train the AI? The dog that was put there to stop us touching the computer? ;)
Can you not call iPhones with an android? You can receive text messages too?
There are many countries not run by an oligarchy.

Sure every nation has an elite, but it’s a stretch to say that Germany, Sweden, Denmark, USA, and many other countries have an oligarchic system similar to how it is in Russia, Uzbekistan, and Kazakhstan.
Windows 11 Notepad to add spellcheck and autocorrect
I know you're exaggerating because car prices in Singapore are very high (with good reason and kudos to the Singapore government for handling this well), but it's not true:

There are a bunch of second hand cars below 6000 Singapore Dollars on this website[1], which is the price of the 64GB/1TB Mac Studio[2].

1 - https://www.sgcarmart.com/used_cars/listing.php?MOD=&PRC=18&...

2 - https://www.apple.com/sg/shop/buy-mac/mac-studio
Maybe, but it certainly hasn’t been the arc of the past few years. I don’t know how anyone could look at this and assume that it’s likely to slow down.
What a black and white viewpoint to have, I feel bad for you. Should we also execute (on the spot, no less) jaywalkers, children with unlicensed lemonade stands, and people who ask for water cups but then get a fountain drink? Consider a little empathy once in a while. Do you think you might be willing to break a law of you were in fear for your life? Illegal immigration, like many "large-scale" issues in society, is a multifaceted social phenomenon that there is no silver bullet for, pun intended.
A thriving tech scene overnight is going to gentrify it to the point of only tech folks wanting to live there.
Yeah, you gotta determine what is more likely

1) the landlord didn't change the locks between tenants AND there's a great "key copying conspiracy."

Or

2) There's an emergency requiring your landlord/maintenance to enter the premise when you aren't home.

I know which one I find more likely, but you do you.

OTOH Probably most landlords won't mind you changing the locks as long as you give them a copy of the key.
I use Melodyne to help me deconstruct music I like. Most recently in conjunction with various stem separation services.

Works well for me, but I have to say that I have a taste for minimalism, so the my starting point is already quite basic.
Yes, but it can be countered by pinning "random-script-from-the-internet.sh" to the untrusted environment. The fork/exec inside bash (or whatever bash is using now) should take care or that, or the kernel itself which is probably a better option. bash + ls -> trusted because ls is in some way marked as trusted, bash + random-script -> untrusted, possibly by default.
Is the untrusted code observer able to see cache timing implications of fetches to addresses that the MMU considers off limits for the process? This is what keeps surprising more, it does not align well with what I think I know about processors (not much)
Websites will never be fast, will they? Even with 1000x more compute than now they will just perform everything in LLM calls and stuff are just as slow as now.
Self-promo/shilling of my site: https://freemusicdemixer.com/

Free website for AI stem separation that runs client-side with WebAssembly
>The weird problem is with LLM hallucinations is that it usually will acknowledge its mistake and correct itself if you call it out.

From what I've tested, all of the current models will see a prompt like "are you sure that's correct" and respond "no, I was incorrect [here's some other answer]", irrespective of the accuracy of the original statement.
sorry but you seem to have absolutely no idea what you are speaking about

NFC has not been a "shaky" standard long long long before Apple adopted it

and most other phone vendors had at least some models which support it

even before that there where extension systems to try out and test it before phones did support it

so it was pretty much Apple holding the industry in that specific area back

and like I said it wasn't anti-competive, it was there right to do so

but it shows how apple often doesn't care too much about what would be good for the user if it isn't good for them, I mean they are in the end a stock traded company it would be strange if they didn't

and if one vendor has a huge usage base to a point it has monopoly like powers (even if the usage base is only around ~50% that still is monopoly like power in the phone marked due to the marked/usage dynamic of phones) then you can't rely on a technology 50%+(1) of your customers can't use because the vendor they use doesn't support it or artificially locks it down especially if it's something like a phone where the network effects makes it basically impossible to expect people to switch it (1: 50%+ as while the marked share wasn't 50%+ the marked share in the audience such a system would reach was.)

EDIT: And yes I'm fully aware of the while NFC<->SIM secure module<->carrier power being annoying thing. But that thing had been solved a long time ago outside of the US (and later in the US by virtual secure modules) and while the initial solutions to that problem (e.g. in the EU) where still annoying non of it was a major road block and would have been resolved if there would have been insensitive to do so. But if your product doesn't work with iPhone users and you potential customers are mainly people which high end phones it just never mattered because the marked was dead anyway.
OI's 01 Lite – Open-Source Personal AI agent device [video]
The Ars article is arguably more useful than the vuln website, with more added context; it's not just blogspam.
More democracy in the leadership of the union.
Uncertainty of Thoughts: Uncertainty-Aware Planning Enhances Information Seeking
Crypto energy requirements go up as the currency gets more traction.

TFA shows that groq is many times faster than GPT-4.
Up to 18x groq claims. Faster means less energy.
So I think it's just a matter of time until these things become ridiculously power efficient (eg run on phones in sub second times)
Topics where Go has failed:

- No tail call optimization
- No meta-programming

Both do exist in Scheme since 1975.
Yes I agree there's a lot of interesting problems to solve and things to learn when it comes to modeling intelligence. Vernor Vinge was smart in choosing the wording that we'd have the means to create superhuman intelligence by now, since no one's ever going to agree if we've actually achieved it.
Legal? Or simply decriminalized?

I ask because here in the USA most people say leglized when it's simply decriminalized in some states. Weed is still illegal at the federal level and because of that there are numerous behind the scenes issue. For example, banks won't accept deposits from weed businesses.
Most juniors where I work spend their days delivering nothing and telling me how shit everything is and how they already know everything and if they could just use some other language or framework they’d be productive.After all that, go generate a bunch of crap with copilot that never comes close to landing in production and most other mid and senior engineers just quietly do their work for them.

Some of these people are in their 40s and are new to the industry. Not just picking in "younger" people here. Just a different attitude. I think the barrier of entry is just getting higher as we have to know a lot more these days.
Constant bad news doing your head in? Read about the fish doorbell instead
The volunteers who trained their subtitles generating mod without the knowledge that this was the ultimate goal know this.
You're welcome! Please feel free to join the community channels I linked above. There are blobtalk meetings on Discord every 2 weeks where we can discuss ideas in detail and, otherwise, we're always active in the chat.
Year ago I cancelled my policy with Churchill; I found the entire process pretty painless = called the phoneline, was greeted by the robot, I said "I want to cancel my policy", from the phone number I was calling it has gotten who I was; I confirmed my identity, it outlined when my policy will be cancelled and confirmed with me that I want to proceed. The entire experience was a self-serve that I'd like to see everywhere.

Comparing this to yesterdays adventure with other service (my package got lost) where the bot couldn't decipher what a WRITTEN "my package got lost" or "where is my delivery" means.
It's always a little sad when you can tell the things the author finds the most interesting about their fiction aren't the same things you find the most interesting. I wanted a lot more of the blight and the powers and the zones and a lot less dogs talking to children.
Python generators are functions that enable the lazy generation of values, allowing for efficient memory usage and the ability to iterate over potentially infinite sequences. They are defined using the yield keyword, which allows functions to produce a series of values dynamically, one at a time, without needing to store them all in memory simultaneously. Generators are particularly useful when dealing with large datasets or when there's a need to generate values on-the-fly.
The mechanism is described in the FAQ here: https://gofetch.fail

> The GoFetch attack is based on a CPU feature called data memory-dependent prefetcher (DMP), which is present in the latest Apple processors. We reverse-engineered DMPs on Apple m-series CPUs and found that the DMP activates (and attempts to dereference) data loaded from memory that "looks like" a pointer. This explicitly violates a requirement of the constant-time programming paradigm, which forbids mixing data and memory access patterns.

> To exploit the DMP, we craft chosen inputs to cryptographic operations, in a way where pointer-like values only appear if we have correctly guessed some bits of the secret key. We verify these guesses by monitoring whether the DMP performs a dereference through cache-timing analysis. Once we make a correct guess, we proceed to guess the next batch of key bits. Using this approach, we show end-to-end key extraction attacks on popular constant-time implementations of classical (OpenSSL Diffie-Hellman Key Exchange, Go RSA decryption) and post-quantum cryptography (CRYSTALS-Kyber and CRYSTALS-Dilithium).

It sounds like the OpenSSL code is still constant time (it doesn't expect pointers in the intermediate values, to OpenSSL it is just data, not something it will ever dereference) but the attacker-controlled "monitoring" code's runtime changes based on whether the DMP ran or not.

If that's right, then the attacker still needs to run their monitoring code on the target, it isn't sufficient to just run OpenSSL etc itself.

Edit: it is more explicit in the paper, they assume that OpenSSL (the victim) is still constant time:

> In this paper we assume a typical microarchitectural attack scenario, where the victim and attacker have two different processes co-located on the same machine.

> For our cryptographic attacks, we assume the attacker runs unprivileged code and is able to interact with the victim via nominal software interfaces, triggering it to perform private key operations. Next, we assume that the victim is constant-time software that does not exhibit any (known) microarchitectural side-channel leakage. Finally, we assume that the attacker and the victim do not share memory, but that the attacker can monitor any microarchitectural side channels available to it, e.g., cache latency.
The miracle of mDNS and how it pissed off a bunch of Active Directory admins.
Considering that Germany is losing business left and right, companies moving to other countries, rates of reemigration falling down, I’d say there’s not much positive development in Germany right now. Totally unappealing to start a new business and the bureaucracy is crazy.
What an awful and counterproductive experience.

If you require someone to enter their credit card number every time they make a purchase they end up doing dumb, insecure things like storing it as a text file on their desktop.

And having external hardware just means more cables, batteries, updates to keep it secure etc.

Initiatives like PassKey, ApplePay, TouchID etc. have been a huge win for security and privacy.
The entire point of this chip is to keep secrets hidden from local processes.
I've served dynamic content directly as PDF with https://xmlgraphics.apache.org/fop/
That thread was amazing to follow. I got a chuckle at the end. These engineers are responsible for the fates of a lot of people outside of Google as well because of how many companies have adopted their tooling (like my company). They should be challenged to defend their views in the real world. If they are good ideas then it shouldn't be a problem.
Do you think if any Apple product isn't "winning", suddenly their competition stifling rules and backroom deals don't exist anymore?
Ask HN: Has anyone else's Google Developer account been deactivated?
So, Google sent me some emails about my developer account not being active. I (among other things) make a tool that can make games for Android and also help other developers in their release process and complying with the Google Policies.

Yes I don't necessarily release things on my own since recently, but I am active as I make this tool and constantly upload thing in the Developer Console to check I not mistakingly not complying with something in my tools.

Anyway Google emailed that I had to login to verify my email or otherwise it would deactivate my account for inactivity, which was written as publishing apps. I logged and verified my email. It also mentioned that if I wanted I could postpone the recheck for deactivation and suggested me November. I clicked accept and went on with my day.

I logged in yesterday to update one of my apps now that I was testing a new version of my tool and my account was deactivated. Upon emailing support about reactivation they say that they have no process to reactivate an account and the only way is to create a new email account on Gmail - which doesn't make any sense for me.

Has this happened to anyone? Is there some easy way? Not sure what to do...

In the meantime this is the first time this has happened to me and I have dev account on Apple, Microsoft Store and Nintendo. :/
Interesting those PDF files (links in the bottom).
Why Is TSMC Doing Better in Japan? [video]
That‘s exactly it. It‘s ok for LLMs to not know everything, because they _should_ have a means to look up information. What are some projects where this obvious approach is implemented/tried?
Roads are immensely useful for military logistics. But you have to be a very thoroughly militarized society to benefit from and appreciate that effect, given the immense effort that goes into building them. Romans were exactly such a society - they mobilized an unusually large proportion of their population for pretty much non-stop warfare.
it's an interesting dystopia where humans have no purpose

Unfortunately every single one of his books has this problem. It's like all of his novels are written from the perspective of the protagonist's housecat.
Code scanning autofix, powered by GitHub Copilot and CodeQL
Or security vs. usefulness.
The best I could find is the (video, japanese) documentary here:
https://jpn-psa.jp/video/