skysight-inc/HackerNews huggingface dataset:
Long is gone the time where unlocking bootloaders and installing custom ROMs was the best path to follow.
Even if you are able to unlock it (with difficulties such as this one, or others that involve opening the device and soldering a shortcut), you will have a device where apps check for unlocked bootloaders and rooted OS, and forbid you from use the application.
Alright, you don't understand air gapping so hard it's actually dangerous (to other readers, not you; I don't care if your ignorance burns you), so let's go over why the hell this lack of understanding is horrifying.

1. If you need an air gapped computer, your threat model includes literally any electrical wire connecting to the outside world.

2. If you need an air gapped computer, your threat model includes literally any radio signal.

With this in mind, there is no way in fucking hell that a virtual machine can satisfy your requirements. That virtual machine literally resides on the same fucking wires as the host computer, this is even worse than a wire connecting two computers.

The Guardian is a media outlet, their job description is receiving information from sources securely. Some of that information will be extremely high value, like "the wrong people seeing this will lead to murders" extremely high value. Handling that kind of sensitive information absolutely requires air gapping to minimize your attack surface as much as humanly possible. Note humanly possible, not reasonably possible; reasonable isn't enough.

A properly air gapped computer is going to use as few physical connections to the outside world as possible. It will also be shielded from all radio signals. The only way to access it is a physical human moving from the outside world to secured space in which the air gapped computer resides.

If your threat model can be satisfactorily defended using virtual machines, you never needed air gapping in the first place.
HN 3-days ago | 246 comments

https://news.ycombinator.com/item?id=39916102
it's like.. the hacker wouldn't state their ulterior motive so plainly, but they did and Nicholas still fell for it.
The best option is to use GPL.
Universal shades-of-capitalism and institutions built around "efficiency" and opaque labor/outsourcing practices are revealing themselves to be as much a weapon of human self-destruction as carbon-emitting energy generation and, uhh, nukes.

Yes that sounds hyperbolic to me as well, but maybe it's true anyway?
I would be far more sympathetic to these sspl corporations if they subjected themselves to those same license terms. But instead they play this some animals are more equal than others game.
I don't wonder. It would be more widely considered, at the very least, judging by interactions I've had with a few people.
Asus allowed bootloader unlock up until a few months ago, which is why I bought the device, i.e even if the company abandons it I can just unlock the bootloader and slap on LineageOS on it. Seems like a mistake now.

> Why not go for something that has 5-7 years of SW updates like a Pixel or a S-series? The Zenfone wasn't any cheaper than those either(at least in EU) so you were also getting a poor value for money.

SW updates aren't the only criteria when choosing a device, if you're looking for a small phone with a headphone jack and a non-glass/metal back, the number of options are very limited (iirc, Zenfone 9 is literally the only phone which satisfies the constraints).
> No more null pointer errors at runtime

This is the most glaring thing IMO. Go repeating the billion dollar null pointer mistake is inexcusable IMO. There’s zero reasons for a language designed in the last 20 years to have this problem. This alone is enough for me to want to stay away from Go.
Is it possible to add the number of results next to the result links?

Where I live, most of the search results are empty :/
Thank you for your comment. Would you mind trying it out and providing us with some feedback?
Very cool! I’ve toyed with an idea like this for a while. The scraping is a cool extra feature, but tbh just breaking down text into verifiable claims and setting up the logic tokens is way cooler.

I imagine somebody feeding a live presidential debate into this. Could be a great tool for fact checking
I hate having to rename my files on an arbitrary pattern to have items show up in the media browser.

This is why I went back to iTunes. Full, robust metadata support and organization.

It's 2024. Why are people still cramming metadata into file names like it's 1983?
Ask HN: Where do you manage Google Domains DNS records from?
EDIT 2: Figured out the domain is not managed through Google Domains, but there's only Google Workspace referring to the same domain name so that confused me into believing that the domain is managed by Google Domains.

Google Domains has been purchased by Squarespace. That was all fine and we got an email saying that our domains are moving to Squarespace. Today I logged in into my Google account and can't find a single place to manage my domain's DNS records. This is a live site and I don't have to emphasize how critical it is to have access to managing your own domain's DNS records.

https://account.squarespace.com/domains - domain is not present here

https://domains.google.com/registrar/?internal_linking=true - domain is present here and has a link "Manage with Google Workspace". When I click that, I still cannot find a place within the Workspace UI where I can manage DNS records:
https://domains.google.com/registrar/?internal_linking=true

Any clues?

EDIT: This seems to only be an issue with Google Workspaces. I can manage my private/personal account Google Domains.
Hello everyone! This is my post! I'm flattered and honored that it resonated with many of you. Since I wrote that post, I followed my curiosity to become a software engineer myself. After doing that work for a few years, I've found myself missing working in a more writing-heavy role. If you're looking for an excellent technical writer, developer advocate, or another role that blends communication expertise and technical skills, let me know! You can contact me through the form on my website (https://evaparish.com/contact) or via LinkedIn.
You are theoretically correct (the best kind of correct).

However: Is this difference of a magnitude exceeding everyday nonrelativistic clock drift?
Well, a copy editor maybe? https://en.wikipedia.org/wiki/Copy_editing

I've never used one, but I assume there are professionals for hire to do this.

In fact I've read one of the advantage of going with a publisher (as opposed to self-publishing) is they give you an editor. But again, I'd expect a freelance market to exist.
5% (plus Stripe feeds) for the platform means it will only work for really small projects. Arguably, the majority.
If that were the case, then you wouldn't get the transfer learning from models being trained on programming languages, to reasoning applied in a non-programming context, which has been universally observed for all these models. They are learning abstract "thought patterns", not just interpolation.

Learning a programming language (or any complex skill) just by reading a book and looking at examples, without actually practicing it yourself, is basically impossible, even for ourselves, let alone an LLM. It is amazing how well the LLMs can do at programming in cases where they were trained on masses of well-commented examples, but without also being able to learn "on the job" themselves, you need to tamper expectations.
Personal anecdata with a decently large sample size of my friend circle: I can introduce you to low double-digit number of promising and passionate scientists who didn't make it 5 years past their phd for the exact reasons that Dr. Hossenfelder points out. And they can all say the same thing about their friend-circles.

They're not the HN crowd...
Hashes and cryptographic signatures are not the same thing.
Soy is a complete protein. IF you need all the essential amino acids, you eat a variety of sources.
https://www.chhs.colostate.edu/krnc/monthly-blog/plant-based...
I think the eventual plan might be this? https://textual.textualize.io/blog/2023/09/06/what-is-textua...
one way I’ve been able to have productive conversations around partisans for longer is to say

“everyone can see how the sides are different, its valid to be more bothered by the ways they are the same”
JavaProHire
I'm not getting any output.

If I run !retry, I only get this response (twice):
An error occurred while generating the message: Error: 401 API key credit limit reached

The POST request fired when I run an LLM-command returns HTTP 405.
Why was exiting the DRAM business such an obvious positive?

Intel is basically at its root PC hardware. Yes, it doesn't dominate the entire industry, but memory is pretty key to a PC and the OS that runs on it.

In fundamentally it's another fab product. Like chipsets.
I think people will engage wit this device, will more liker to focus on the stuffs. Because people are really not free from there own stuffs aligning again with the sale repetetive thoughts.
If I remember correctly, Ike said that tasks can be important or urgent, but never both.

So it makes me laugh that the 2x2 matrix lives on. It has always seemed to me that Ike was getting at a 1x2 matrix (or perhaps a 1x3: important or urgent or neither) and that the real question to ask is whether the task under consideration is important or not.

Then, of course, we need to discipline ourselves to perform important tasks that have no clear deadlines.
Interesting post. I have to say I agree with the main thrusts of the article, although there are some differences in my opinions I won't go into.

I work with a couple source available pieces of software that have their dependencies all packaged in the repo and it's a joy to work with compared to trying to compile a typical open source package.
Why must everything make money?
Indeed, today if you want a phone that isn't gigantic the options are really limited. Zenfone also had benefit of being quite sturdy since the back wasn't made from glass/metal, so you can go without a protective case. I have dropped mine a couple of times, but it hasn't suffered any damage until now.
I think you're correct; as far as I know ripping 4K/UHD with no modification to the drive and/or drive firmware is not possible without other workarounds, which apparently are possible, as I elaborate on below.

Apparently as of recently at [CCC 37C3: Unlocked] (December 2023) Adam Batori demonstrated a side channel attack against Intel SGX and AACSv2 in his talk called "Full AACSess: Exposing and exploiting AACSv2 UHD DRM for your viewing pleasure" although that has nothing to do with the specific drive used to my knowledge, though the specific Intel CPU used may have quirks which may make their particular implementation CPU and/or CPU microcode and/or motherboard dependent.

Previously on HN:

Full AACSess: Exposing and exploiting AACSv2 UHD DRM for your viewing pleasure [video]
6 points by hcadam | 2023-12-29 | 1 comment

https://news.ycombinator.com/item?id=38810011

https://media.ccc.de/v/37c3-12296-full_aacsess_exposing_and_...

Video of the live demo above. Additionally, I have included a version of video on from the official media.ccc.de YouTube channel:

https://www.youtube.com/watch?v=SEBuiecLZGg

Referenced by the above talk is prior work on defeating/bypassing AACS[v1] by Peter Eckersley in his talk titled "A Spotter's Guide to AACS Keys" at [CCC 24C3: Volldampf voraus!] in December 2007, which I also link below:

https://media.ccc.de/v/24c3-2331-en-spotter_guide_to_aacs_ke...

Also of interest from [CCC 36C3: Resource Exhaustion] is a talk by oct0xor titled "Hacking Sony PlayStation Blu-ray Drives" in December 2019:

https://media.ccc.de/v/36c3-10567-hacking_sony_playstation_b...

https://www.youtube.com/watch?v=WW39dsbffMw

Apologies for lateness of my reply! I hope that helps.
The work place has gradually become a scene where many discussions are happening, and it much ain't about work... as some have said in the comments, it's very hard to address this changing the hiring process - but it can definitely help support a healthy team dynamic.
I'm not a developer for Windows apps but had to use WiX to generate an installer for a Python open source project I am collaborating with. Installing one binary in a specific location? Easy. Couple hundred files distributed among multiple nested directories? That was a miserable experience and but I could manage to pull it off. I didn't use heat. The XML was hand-coded and the file listing was generated with a Python script that walked the directory tree and generated the Directory, Component and ComponentGroup entries.

Apparently with Wix4, heat is deprecated, unneeded in Wix5. I couldn't even get it to install and have the executable. So confusing!
I'm betting my money on causality. These kinds of articles ignore how the EPR experiment may demonstrate nonlocality, but does not allow information exchange faster than the speed of light. I don't think we'll ever break that barrier.
> While I would loved to have bought an AMD GPU, the power suck on those high end cards is an order of magnitude more than the Nvidia

Any source for this? I highly doubt a high end AMD GPU will draw 2-3kW of power.
It’s a bit misleading to call it open source tool when it relies on proprietary LLMs for everything.
United States law has made anonymous prepaid cards illegal.

https://www.consumerfinance.gov/ask-cfpb/why-am-i-being-aske...
HN hug of death. Which makes me sad. I was really enjoying my current narrative.
I’m more interested in measuring insulin than glucose.
Show HN: A tool to fix broken JSON Objects
Usually people don't have enough savings to dedicate themselves full time to a non money making project.
If I received an email from a legitimate representative of the Tim Ferris show I'd be more likely to suspect a scam than if I received a typical phishing email.
Ask HN: How do I find a job, in this market with ADHD
Hello HN, A little background about me.
I am a software developer, based in US, currently.
Due to a lot of personal issues in my life, and upon reflecting about myself about things I faced since my childhood. I visited a psychiatrist recently and was diagnosed with ADHD.

I consider myself a good coder, I'm very creative with my approach to the problems. I pick new things very easily and my skillset is also very diverse. My employers in past have always been happy to have me on team. And always consider me an asset.
But one thing I really suck at is interviews.
My mouth just can't keep up with my mind and I end up blurting nonsense.
I mess up the easiest questions. My skillset doesn't translate to the interview format at all. I fiddle, I get lost.
Worst part is, I started my career as a freelancer, then I got an offer from a start-up after being impressed with my work.
Then another startup hired me, looking at my work in the previous start-up. And I've never had a real interview after college.

I'm not tensed during the interview, but I just can't bring myself to focus during the duration of interview.
I recently completed my masters, and I'm on an F1 status in US. And job market has not been so good unless I get enrolled in shady consultancies, which I don't want to.
Anyone who can offer me an advice, I would genuinely appreciate it. Especially if you have been through something similar I would like to learn from you.
For fun, let's assume you are a supplier, whatever that means. Let's say you are Autodesk, and you've been told you need to create a SBOM for AutoCAD in CycloneDX. You have to complete "manufacturer", "supplier", "publisher" and "author" fields, which the standard makes no attempt to disambiguate for you. Which corporate entities do you list against each field? ADSK IRELAND LIMITED (IE), ADSK NORWAY AS (NO), ADSK NORWAY HOLDINGS AS (NO), AUTODESK AB (NO), AUTODESK AMERICAS LLC (US), AUTODESK ASIA PTE LTD (SG), AUTODESK ASIA PTE LTD (MY), etc (there are pages of options) Do you need to list the specialty consulting firm that was engaged by a small subsidiary office in whatever country for 20 weeks to implement a file import function for a third party file format? If yes, which part of their Double Irish with a Dutch Sandwich corporate structure do you list?

Also for fun, let's assume you're an American company that buys copyright ownership and complete rights of proprietary software originally developed by an Irish company. You immediately re-release the software with a new loading screen logo, "About" dialog, etc changed to your brand name, and a new SBOM is released. Which part of your Double Irish with a Dutch Sandwich corporate structure do you list as "manufacturer", "supplier", "publisher" and "author" fields? Which part of the Irish company (or whatever complex corporate structure may exist) do you list in any of these fields, if any get listed at all? If you did list the Irish company, after 5 years when most code has been rewritten but only a few small bits and pieces remain, does this change whether you mention the Irish company that worked on the software 5 years ago?
Did The Onion ever mark the number in their 2004 article title to market?

"U.S. To Give Every Iraqi $3,544.91, Let Free-Market Capitalism Do The Rest"
https://www.theonion.com/u-s-to-give-every-iraqi-3-544-91-le...
But you are not forced to upgrade. You can just keep using the foss version indefinitely exactly the same way as before. That's the great benefit of foss, upstream changes can never force downstreams to do anything.
Because people have to eat.
100% and I would also add many other topics I profoundly don't understand why they're being addressed at work... I can count on one hand the numbers of emails I have about work work compared to many other subjects lol
Falling out of windows seems a popular way of death for critics of Putin in modern Russia. https://en.wikipedia.org/wiki/Suspicious_deaths_of_Russian_b...

Also a friend of a friend was apparently killed that way by Pete Doherty's drug dealers.
the entire job market for tech is in a large bust cycle and the internview process is a complete shit show. until these two processes improve I don't know. I'm 49 with 25+ years of experience and haven't worked since august.
I see. It was the first sentence that came to mind. The point I'm trying to make is, in my experience, "just" is often abused, as it conveniently relieves one from providing a sound argument.
Lightmatter Passage: Revolutionizing AI Computing with Photon Processors
It's what Jesus would have wanted.
I did hear of a poster, supposedly up in a hallway at JPL, that said something like "7/24/69 was 25 years ago ... What were your dreams, then, of today?"
It's amazing that much of this has to be said, but here's a related piece of advice: don't use the same term for different things, especially if they're related.

I got a document the other day that described a category which consisted of 3 subcategories, one of which had the exact same name as the category it belonged to.

I felt like I had slipped into another dimension.
That's a good example where power dynamics can infuse expectations.

What I have found is that power dynamics also come from other dimensions that are not encoded in official company hierarchy but more about social hierarchy. They can also be implicit amongst peers, such as someone with more tenure than someone with less. Or personal traits such as being outgoing vs. more shy. I'm sure there are many that are informed through one's culture, background, etc.

If you have a geographically distributed company, then picking the "perfect time" can get very awkward.

Maybe the solution out of this is that they can collapse the set of guidelines into fewer principles that are centered around themes, such as: "audience", "clarity", "modes", etc. and focusing on desirable outcomes, rather than prescriptive implementation details.
Craig was a fixture in midwest US OSS groups and a long time organizer of the Michigan!/usr/group: https://www.mug.org/2024/04/sorry-to-report-the-passing-of-c...

Rest in peace friend. :(
TBH, hex and assembly sounds like a sufficiently specific domain that they may have written their own tools/plugins. Maybe even a custom pronunciation library for reading off the symbols. With something like feisal that could be pretty feasible.
So it seems the vector here was a URL that showed up in the address bar gave the attacker the ability to change the account password. Any theories on how that works?

A password reset URL would do this, but presumably the attacker wasn’t counting on the user forgetting their password (unless they had a way to force it?) And a usual “magic link” wouldn’t authorize the user to reset a password without confirmation to the original email, I would think?

I wonder if it was not a URL, but an OTP code that was visible on screen by showing up in a notification.
Journalist are ultimately extremely overrated in 2024.

I go out of my way to not consume news outside what happens to cross my way because of financial markets.

What exactly do you think I am missing that is so important? Journalist by large produce complete nonsense in 2024. Journalist in 2024 are a massive net negative and would be much better served doing something productive, like selling apples on the street.
OpenDAL – Unified and Improved SDK for S3 and More – Graduate from ASF Incubator
Maybe fear of death?

You get older, you get more tired(?), serene(?), you can see the progress towards death as a natural process in your own life.

Also you're around more death. I was with my mother when she died. I can't say it was a pleasant process, but it was very natural. She accepted hospice, and seemed to be at peace with death. The last few months with her a lot of positive memories were made that will stick with me.

I don't _want_ to die, but its clearly something I can feel will naturally come and should plan for.
These guys have no connection with the artists, the courts, or the AI companies but want yet another shitcoin to interpose itself between any solution, so they can make money.
Humor? In my Hacker News?
I'd be fine with it being part of Powertoys.
Out of failure comes success

Boeing is a good example of the opposite --- out of success comes failure --- when you allow greed to become the driving force.
So basically you doesn't have any non trivial example. What else but to be expected?
Vlog to Blog with Claude 3
Have you actually taken the time to understand the RSAL and SSPL?

> If you want to use a restrictive license, start your project with it, period

There is essentially only one restriction (the other is about formal notices) imposed by the RSAL, and it forbids to "Commercialize the software or provide it to others as a managed service".

> IMHO, small companies and developers ultimately lose here

This is an uninformed opinion. Nothing changes for small companies and developers. Actually, nothing changes even for larger companies, unless they are cloud providers.

Large companies can actually provide Redis as service for internal use ("as a service internally or to subsidiary companies"). Companies are even free to sell support for Redis.
Seems like that's the case.
I don't have any personal knowledge, but see e.g. https://www.tuhs.org/pipermail/tuhs/2019-September/018472.ht...
I would offer instead that it is just cheap pandering to the reader while excusing the authors lack of qualifications.
I think sites/pages like this hold an important role, presenting information to people who have trouble visualizing concepts or need visual aid to better assimilate information is important and sometimes, a simple 2D rendering or a dry graph just isn't enough.

And if you need a 3d graph, you're only a handful of lines away from smoothing out your presentation, so why not?

There's also the more subjective aspect, I think adding the effort to make something look nice and slick, animated well, could be both an interesting challenge and a relaxing pass-time. It's pleasing both to make and digest, in a way, it sits in an intersection of design, art and technique and as an added bonus, could help capture the attention of someone who struggles with short attention spans even better!
Muslims also don't murder adversaries' scientists.