skysight-inc/HackerNews huggingface dataset:
I'm a bit late, but it's because I wanted my exploit to be universal. When patching kernel .text I'd need know:
- know the offset to the patched instructions (memory scanning will not work)
- know the architecture-compatible instructions to replace it with
You can't access personally identify information out of curiosity. That's a fireable offense in nearly any company that cares about privacy.
One thing I notice about state-level espionage and backdoors. The USA seems to have an affinity for hardware interdiction as opposed to software backdoors. Hardware backdoors make sense since much of it passes through the USA.

Other countries such as Israel are playing the long-con with very well engineered, multi-year software backdoors. A much harder game to play.
I don't remember the details, and cannot find my notes on vercel/pkg. But looking at https://github.com/vercel/pkg right now I see the project has been deprecated in favour of single-executable-applications
The other aspect that I find disturbing is that in all cases where a Tesla fails, Tesla stans will blame the driver/owner. It's a toxic community where Musk does no wrong and nothing is his or Tesla's fault.

I am also still wondering why they can continue to sell FSD and not be charged with fraud.
GitHub/Microsoft likely has a backup. I’d be getting those out about now.
Chaos helps no one. It’s why even the democratic world has martial law.

We may be wrong together but at least we are together. Having people running in three directions at once will get everyone killed in wartime or disaster. Once the avalanche starts it is too late for the pebbles to vote.
The Math Behind the Eddington Expedition
If panpsychism is right, consciousness is part of the fabric of the cosmos, you just can't separate consciousness from it. Does that mean that the cosmos is conscious itself, and what does that mean? I'm not sure, but it's pretty fascinating to think about
The author should brush up on his history. This is panpsychism and it is a very old idea, going back to Spinoza. Einstein was a adherent of that idea as well, in his own way.

As to it's truth of it, that's somewhat above my pay-grade.
The universe may
be as great as they say.
But it wouldn't be missed
if it didn't exist.

— Piet Hein
This certainly could be done by only allowing outgoing traffic to addresses that have been in the results of a recent DNS lookup (so your DNS server tells your firewall about client lookups). I don't know whether any off-the-shelf solution can do that though.

You could also require all traffic to go through a MITM proxy so you can inspect it, though that wouldn't work so well for guests.
> When loading liblzma, it patches the ELF GOT (global offset table) with the address of the malicious code.

How was this part obfuscated/undetected?
Before we can start to really answer those questions, we first have to nail down what being conscious means. If we had a good understanding of what being conscious means, it might become relatively easy to look at something and assess if it meets the criteria or not.
This is actually a common misconception, but you don't have to sign into an Apple ID to setup any device (except maybe the watch? But definitely not phones or tablets.) You have the option to skip the step.

I think people just assume it's required because when Microsoft implemented their shittier version of it they made it required.
This is great. It's so simple it hurts.
It's is a change in mail service behavior, and arguably either a broken policy or broken spec (not sure and don't really care since the effect is the same).

"In April 2024, Google will start rejecting a percentage of non-compliant email traffic and gradually increase the rejection rate. For example, if 75% of a sender’s traffic meets our requirements, Google will start rejecting a percentage of the remaining 25% of traffic that isn’t compliant."

https://dmarcian.com/yahoo-and-google-dmarc-required/
The headline here is generic, but the real TLDR of this article is that a security researcher was able to inject code into thousands of compilation environments by creating a real library that matches the name of a library that is commonly hallucinated in AI-generated code. Apparently many references to the nonexistent library weren't cleaned up by any human in the loop.

This is another interesting supply-chain attack risk that seems fairly novel.

I wonder if we could change the headline to a better summary, like "Malicious code injection when AI hallucinations reference a nonexistent library"? (I tried to submit under that title but got redirected to this existing thread).
> [JO:I agree that they are all goals. My assumption though is that just reaching those goals is not sufficient for success.]

I agree with this (and the clarification in the paragraph just after this), but to my mind, those are different goals.

The goal of an MVP is quite different to the goal of refinement - in one you are determining if there is a market, in the other you are determining PMF via successive refinements.

Those would be different headlines, but headlines nonetheless. I see it as H1: "You can now rent VMs through an API" H2: "Rentable VMs available across our entire offering (not just the x2.small)" H3: "Cost-calculator available on our RVMs" H4: "RVM snapshot facility, first of its kind, now available" H5: "RVMs are transferrable between regions with no loss of data"

What you clarify was not something I considered - that each new headline one is working towards is, in fact, a new product. I only considered headline-oriented work in the context of a single product.

I think working towards a headline is a bad idea if the headline is a greenfield development, but a good idea when ensuring that the product is evolving to ideally fit the demands of the market.

[JO: Yeah, that makes sense. I can see that in the context of a single product. The examples the OP provided made me think of the headlines as being more mercurial and greenfield in scope, but that was an assumption.]

> [JO: I disagree. Not all existing systems have so high switching costs that customers will tolerate the system losing data.]

What systems are you thinking off? I've seen ancient tiny MSDOS-based software used well into the late 2000s in spite of poor reliability of the underlying system. I've seen long-lived ERP systems have their bugs worked around by users over a decade.

[JO: That specific example that came to mind was a GRC system which I worked on years ago. The system was full of bugs, and a large insurance carrier wanted an enhancement. I forget just now what the specific enhancement request was. I do remember though that when I said "no", they said "Ok, then we are not renewing our subscription." I remember it vividly because I was surprised, that was the first time it had happened to me.]

I mean, right now I consulted on a small company extremely unhappy with their accounting software (quickbooks force-moving everyone to their cloud)) dismiss any notion of using anything else because "The users already know how to use this!"

[JO: Yeah, that can be a problem sometimes.]

[EDIT: I only somewhat agree with your points, but I upvoted your comment anyway because the ones I agree with, I feel are good points].

[JO: Thanks!]
Not if you set it up such that each knocking sequence can only be used once. Port knocking is a flexible concept.
Show HN: Exponentile – A match 3 game mixed with 2048
Hi HN,

I made this small game in my spare time. It's quite addictive, I spent a lot of hours playing instead of polishing it.
My own highscore is 96,792.
Source code is at https://github.com/MikeBellika/tile-game. It's made with react, tailwind, and framer motion.

Hope you enjoy!
Vector Search Queries with Time Filters in Pgvector
Linux Xz Backdoor Damage Could Be Greater Than Feared
Manual auditing ;-) I have specified it in https://pwning.tech/nftables#31-finding-the-bug
Great Job !
In my experience smart people are pretty dumb. In seriousness, though, its hard for me to believe that there would be a lot of variation in this among neuroscientists, who I would expect to answer yes only to humans and animals.

Like consciousness isn't exactly as big of a mystery as its made out to be. To begin with its a genuine observable phenomenon in an informal way: we identify people as conscious more or less unambiguously, at the very least. Consequently, it can be studied at least at that level of specificity. From that point of view we have very strong evidence that consciousness is very tightly correlated with ongoing neural activity in certain architectures. From there I think we can begin to reasonably put pretty solid answers to the above list, particularly if you allow levels of consciousness to come into it.

My major point is that people love to cavalierly assert "we know nothing about consciousness whatsoever, anything goes, frankly" but I think that pretty radically oversimplifies and undersells what we do understand.
> I disagree. The spacing of the stylized TeX/LaTeX logo is very sensitive to the font used (especially the LA pair); most LaTeX users already don't adjust it when they use a font other than Computer Modern. Even when they can see the A halfway on top of the L, they don't change the spacing.

I'm not sure with which part you disagree. If the sentence:

> And, if you're going to refer to the typographic capabilities of TeX (or to LaTeX), it's a shame not to try to reproduce the distinctive styling of the word that Knuth says proudly in the TeXbook shows off precisely those typographic capabilities.

… then, you're right, I overstated it by saying that you should try to reproduce the logo when just referring to the typographic capabilities of TeX. But I still think that, if you wish to write a post about how to make web pages look more like compiled (La)TeX documents, then it is a shame not even to try to reproduce the distinctive typographic marker in the name of the language itself. Of course there's space for disagreement even with that more mild claim—but can we at least agree that the solution implemented, that visually sets off the word "LaTeX" but in no way that resembles how it ideally should be styled, is worse than just leaving the word alone?
You make it sound like it's all-or-nothing. IMO electronic literacy is also valuable. I don't want my 6yo spending all day on minecraft and youtube, but I also don't want him spending all day playing with legos. I want him to get outside some too. And do his homework. And help in the kitchen. And... the list is long.

My kid has a tablet, but we limit the amount of time he spends on it. Seems healthy to me.
Show me the data.

If you define surrounding hives as those within 30 feet or so, yes due to drift they will see a spike. More distant hives should not.

Actively managed and treatment-free are not antonyms. If someone thinks they are, that's a problem.
I like the "unsafe function" idea. More generally, it would be great if you could somehow show an "unsafe chance" metric, which would show lines that can cause multithreading issues. That is, rather than relying on the unsafe{} blocks, you would use some sort of Valgrind or similar output to generate a heuristic that measures the chances of shared data collisions or the like.
This is so cool. I love the combination of bringing retro OSs into the present day and mixing them with modern technologies like hosting on AWS, etc. I never got the chance to experience writing code for DOS, but would love to try making a simple networked app in Borland or similar one day as a hobby project.
My 36 Inch King Dick Wrecks Locks [video]
Sorry, no, it wasn't effective at anything except making me miserable. I didn't become a good manager because of that experience. I became despite it. I have had great mentors along the way and I've learned the right way to treat people even when they aren't at their best. I've never reflected on that experience in any kind of positive light. I appreciate what you're trying to say, but you are wrong.
Thank you for pointing out the mistake, I have fixed it now :) !
"Whether you hate me, like me or are indifferent, do you want the best car, or do you not want the best car?"

Good point. That's why my heart is still set on a Prius.
Don’t blame you!
The analogy to a car is a poor one.

Your phone has all your personal information and has the ability to record conversations or take video. All of which is secured on the assumption that you can’t just replace a component with a compromised one. And we do know that sophisticated state actors do exist and are willing to go after journalists, dissidents even protestors.

We need a way for these devices to be repaired or supported longer but allowing any random component is not the answer.
> Aegis

What is this?
That seems like a lot of carbs. Would this diet really induce ketogenesis?
We don't need to really nail it down. See my above comment. We have a good working understanding of what consciousness is in terms of practical behavior and in terms of the associated neural activity. That is definitely a reasonable basis for further study.
The graph he shows assumes a strict exponential growth. It's rather hilarious to see a projection that assumes a phenomenon will be at its fastest rate of change when it hits the strict limit (100% of the population). If he would project with a sigmoid growth curve he would get a different answer (much more plausible), but it would be less fun (definitely later than 2531).
The Pi4 1GB is $35. The Pi4 4GB is $55, and Pi5 4GB is $60 It is only the Pi5 8GB that is $80. The Pi Zero is even cheaper, $15 for Pi Zero W.

The advantage of the Raspberry Pi is the software. Raspbian just works and will continue to work. Other SBC might not work with their software and who knows if it will ever be updated. My understanding is that there are stable OSes for other boards, but then have to find boards that work.

I recently got Pi5 to use as computer, and microPC is probably better for that. But the Pi can be repurposed for other uses. I'm pretty sure I can pull the microSD card from Pi4 and put in Pi5 and it will just work. The Pi4, which is an awful computer, will do some thing that microPC can't possibly do.
I had a lovely accidental talk with Felice Jacka who I later figured out was one of the top guys out there in the field of nutritional psychology. I might not be the right guy to summarize what she said, but iirc it boiled down to eating minimally processed foods with a high content of dietary fibre.

I stumbled on an interview with her about a year after I met her.

https://youtu.be/FleMtTEEYlc?feature=shared
From the dictionary: "food that has not had any of its natural features taken away or any artificial substances added".

That would mean unprocessed food: fresh fruits and vegetables, whole grains (such as oats, brown rice and barley), nuts, beans, fish, shellfish and eggs.
> Side note, is this story old?

FTA:

> At the time, I was still a college student — this was over 10 years ago.
Another article mentions: "The project is a part of a campaign, designed to coincide with April Fools’ Day, to raise awareness of the implications of not amending the law requiring married couples to share the same surname."

https://japantimes.co.jp/news/2024/04/01/japan/society/sato-...
There's a big difference cost-wise: anybody can deploy an Ethereum fork, mine the resultant shitcoin very cheaply and start a Discord for marketing purposes. That's the whole product right there.

The same is not true of AI projects which require a lot more upfront investment.
The referenced patch series had not made it into the kernel yet.
If you know the details, care to share them? Like Gleason score? Does he have yearly biopsies or MRIs?
Hyperphantasia is not schizophrenia. There is only a single point of similarity between them.

I am not schizophrenic, but if I meditate and hover on the edge of sleep, I can visualize scenery so real that my brain reacts as though I am actually seeing it with my physical eyes.

My favorites are a flame floating the the dark, a beautiful red apple rotating in space, and an endless green field of tall grass to run through.

I can also intentionally hallucinate audible sounds, but that is less fun and more creepy because every time I do it I immediately follow up with, "My God, I am hearing sounds that don't exist. Am I going crazy?"

Either way, both of these things freaked me out, because I went from being in the headspace of wondering if I could do it to actually doing in within minutes.

There's a certain sensation that comes along with it for me, very hard to describe, but it's almost like my head is buzzing or my ears pop, and a small wave of euphoria hits as well.

After looking into it, apparently, the right kinds of meditation and thoughtful practice can induce realistic hallucinations and simultaneously release DMT, a powerful psychoactive agent that your brain can produce on its own, but is also a substance found in ritual hallucinogens like ayahuasca, and I am already very visually/spatially facile and have excellent sonic memory, so much so that I have figured out the words in a song by replaying it in my mind.

Thinking back on it, this is ironic because I had an audio processing disorder as a kid, I could never tell most of the words singers were saying and had difficulty with the letter R. I specifically remember not being able to spell "iron" from being told the word because it is pronounced "i earn" instead of "i ron", and according to my evil grandmother I pronounced "car" in a funny way, but I don't remember this and she was unable to explain to me exactly how I used to mispronounce it or why she thought it was funny.
Defense MicroElectronics Activity (DMEA) | RF, Hardware Design, Software, Embedded Software Engineers Wanted | Full-time | Sacramento, CA | HYBRID | $114 - $148k (GS-13)

Who: A Department of Defense (DoD) field activity that has been operating since 1997. Small and engineer-centric. ~90% are engineer/scientist.

What: Provide solutions to other US Government agencies and allies. Some tasks are engineering brand-new products and some tasks are re-engineering devices to keep legacy systems running. We do not compete with private industry but regularly work side-by-side with industry to get stuff done. We also have the only semiconductor foundry still operational within the federal government.

Why: US Government agencies sometimes want products built that are so technologically risky or low-volume that private industry does not want to do them. We fill the gap.

Where: Sacramento, CA -- California's fourth largest metro area. Home to two major state universities (CSU-Sacramento and UC-Davis). The farm-to-fork, and regular, capital of California.

Benefits: We are federal employees and receive federal benefits (google "opm benefits" for more info). Time off starts at 36 days/year (13 vacation + 13 sick + 10 federal holidays) and grows to 49 days/year over time (26 + 13 + 10). We have flexible schedules and most of us work a "9-to-5.” Hiring is for GS-13 engineers (google “gs pay scale 2024” and look at the Sacramento locality).

Tech Stack: Altium for Hardware design. Modern C/C++(C++17) for embedded. C#/.net for desktop application development and some server services. Python for scripting/automation. Gitlab for SCM/CI. We're using modern tools to solve modern problems.

Interview: Must be a US citizen. Must be able to achieve and maintain a security clearance. 2 x Phone call [1 hr] >> Onsite w/team [full day]

Apply: Send your resume to DMEA-hnjobs at groups.mail.mil (please DO NOT contact if you are a recruiter)
So what's the truth of the hardness/blackness grade? Did Conte invent it? Because Hardtmuth, one of the large pencil manufacturers, claims otherwise:

"According to the personal notes of Franz Hardtmuth, the marking of pencils using the letter H originates from the family surname Hardtmuth, B means Budweis, or Budějovice in Czech language, and F refers to his first name Franz."

https://www.blog.koh-i-noor.cz/post/the-story-of-iconic-koh-...

Sounds a bit apocryphal to me.
Nothing new. In 2022, I canceled a Model 3 order and went with a Kia EV6 instead.
Crosshair placement as in positioning your aim at head level when peeking corners or holding an angle.

I'm decent at it. Struggle more when there's verticality (im sure everybody does though.)

In Valorant, there's often objects to use as guides. But when there's not, I imagine someone with good visual memory could pull up the post-it note of their last fight and reposition off of it. Whereas I'd have to reason my way through it or use muscle memory through lots of practice.
It's what you'd call just "normal food" in the rest of the world.
This is great explaination for why commercial beekeepers should not be migrating hives - turning epidemics into pandemics.
No that patch series is from Lasse. He said himself that it's not urgent in any way and it won't be merged this merge window, but nobody (sane) is accusing Lasse of being the bad actor.
How is Anthropic moving so fast if it took them almost a year to produce a better model? And they have probably 1% of the market right now.
No becuause ChatGPT was trained on the whole internet using a new algorithm. You needed perfect tagged data for the old algorithm (page rank). LLMs are a fundamental leap forward
I guarantee you stock prices will go up in ten years when new CEOs dismantle all that redundancy in order to improve profit margins for two quarters.
I wonder if one could combine port knocking and TOTP in some way, so the sequence is determined by the TOTP?

(Security is not my thing; don't judge me!)
I'm wondering whether the simple fix would be: a) have NSA hack the controller for these things given it's commodity hardware, or just have Nvidia code in an "anti war" routine that shuts the thing down if it detects it being used in a war zone, vs b) classify it as a munition and have it fall under stricter export controls...

Or c) what crypto giveth, crypto taketh away - yea you can hide identities behind crypto, but given each transaction is essentially tracked on whatever blockchain, can you follow the intel through to its source and create a record of the middlemen involved?
I don't think the wiki page is accurate.

Canada will tax you on income earned outside of Canada if they consider you to be a resident of Canada: https://www.canada.ca/en/revenue-agency/services/tax/interna...

The most important thing to consider when determining your residency status in Canada for income tax purposes is whether or not you maintain or establish significant residential ties with Canada.

Significant residential ties to Canada include:

- a home in Canada

- a spouse or common-law partner in Canada

- dependants in Canada

Secondary residential ties that may be relevant include:
- personal property in Canada, such as a car or furniture

- social ties in Canada, such as memberships in Canadian recreational or religious organizations

- economic ties in Canada, such as Canadian bank accounts or credit cards

- a Canadian driver's licence

- a Canadian passport

- health insurance with a Canadian province or territory

So if you are a Canadian with a passport, working in Japan for over a year with car at your parents house in Canada. You could count as a Resident of Canada and have to file taxes.