skysight-inc/HackerNews huggingface dataset:
So for mobile phones.

1. Bypassing OS to be able to track sound without microphone icon shown. All companies who do that must have some sort of backdoor through Android/iOS permission system.

2. Not draining battery massively.

3. Being able to do all of that without anyone reverse engineering the apps, or catching odd network traffic.

4. Doing that intra company so that no one will whistle blow on that.

5. Risking the whole company with this implementation, since it would be extremely illegal.

I just don't see it happening. It would seem very obvious to reverse engineer, it requires having so many different parties hiding it, etc.

Edit:

Also listened to podcast now. Podcast authors don't seem to consider that this 3 man operation would be much more likely to scam their customer businesses. You can't upload a CSV of specific user ids to facebook. You can probably do segments that makes sense which othet marketing agencies do as well, but they could easily be just taking input from their customer and then generating segments, putting it into CSV, but claiming they have some sort of magical edge because of voice data. If they were willing yo be highly illegal with voice data, surely they would be willing to bs their customers which is much more feasible than backdooring android/ios, setting up this complicated infra.

And the CSV could also be good ROI if they share good segment data depending on their customer input. It is just that add bs unique selling points to get those customers in the first place and no one is wiser. They also probably scam their podcast customers. That is typical of this bro hustle business guru advice.

It is commmon from any sort of gurus to mix magical content with common sense, expert content. They probably learn their subject matter well, but then use charisma and magical made up things to build a following as otherwise they couldn't do any better than usual sepcialists.

E.g. they will be perfectly scientific and reasonable about most advice to win the trust, but then will have this one piece of magical supplement that is better than anything else out there that they are selling.
[disclaimer: I'm one of the authors of the paper] I 100% agree, containers are an amazing dev env/reprodicble env tool! In fact, we think they're the perfect marriage to the unikernels (specialized VMs) we used in the paper; on kraft.cloud , a cloud platform we built, we use Dockerfiles to specify apps/filesystems, and transparently convert them to unikernels for deployment. The end result is the convenience of containers with the power of unikernels (eg, millisecond cold starts, scale to zero and autoscale, reduced TCB, etc).
OK that makes sense. That extra weight does matter for my shoulders.
Not a great look when many responses are "if the provider won't protect people, then the researcher should contemplate hurting people".
Sounds convincing, lets have some more Fukushimas then. But to mix it up a bit we should have some Chernobly from time to time.
> Have you tried browsing the web recently on a vintage computer running a 90’s browser? It works on only a minority of sites.

Compared to gopher which works on even fewer?
Correct -- and you can run multiple kernels on the machine with virtualization extensions. Even Docker Desktop does this. You'd do this for _real_ isolation purposes.
> Running a container runtime on top just makes it worse when you're looking for "isolation".

The point of the poster was pretty clear:

“The main benefit is not isolation and security”
VMs in general use more CPU power as you have two OSes each doing things like updating their real time clock... There are VM aware OSes that will not do this, but it needs special code and CPU support which means you are often lagging behind the latest (to be fair this is rarely important) A container will normally be slightly faster than a VM never slower (assuming a reasonable OS - I can write an exception if I was malicious) and so there is a lot of interest if they are good enough.
On the surface, this seems like a pretty nice way to build a cheap DIY NAS.

Pi5 (4GB RAM).-.$60.00

M.2 HAT+ - $12.00

Power Supply - $13.60

Total $85.60

Even after purchasing a case (if you want one) and the NVMe drive of your choice, that doesn't seem too bad. I do wish there were 2 M.2 slots so that there could be redundancy. Is there anything else I'm missing here?
> build a extremely minimal kernel (i.e. ditch Linux entirely) and link your application against necessary bits of code

It would be nice, but this is really hard to do when modern software has so many layers of crud. Good luck getting say, a PyTorch app, to work doing this without some serious time investment.
We ended up doing this over at https://unikraft.io :-)
We can't control the physics that controls oceans. But we can control regulations and laws in which corporations operate in. That's why IMO the metaphor is deeply flawed.

As for advice, honestly, we all know it already. Voting, getting into unions, fighting for legislation, organizing your community/peers and even simpler acts like spreading knowledge that the status quot is not actually immutable.

IMO anything other than accepting it without a fight is already a better option.
Kushanel Donerson says her 14-year-old has played Call of Duty, NBA 2K, Grand Theft Auto V and Roblox games so much over the past nine years that it led to brain damage, a stroke and seizures.

... crazy
well, they should. It would show a perfect precedent and they could actually take on YT.

how on earth are you supposed to sort it out on your own? you have zero freedom of movement on the platform.
tech companies still invest in R&D, but that's mostly adtech these days
Because you'll buy one regardless.
Ask HN: What's with Google Consent Mode?
Hello, I'm working for a client and I observed a drop of traffic since google consent mode has been activated. Is this an implementation problem or do guys see the same thing without using the behavioral model by Google ?
No, I'm not sure.

But if I weren't using TLS I would be sure that they definitely could!

This is exactly the type of argument the post you replied to was talking about.

If one option might be vulnerable, and the other is definitely vulnerable, then obviously pick the one that isn't definitely vulnerable.
That's why I plan on migrating all my shell scripts to Golang programs f.ex. using https://github.com/bitfield/script -- it already has a number of simulations of shell commands and I'd contribute others if I had the time.

sh / bash / zsh scripts are just fragile and that's the inconvenient truth. People who devised the shell interpreters had good intentions but ultimately their creations grew to a scope 1000x bigger than they intended, hence all the "do X but if Y flag is set then do Z... unless flag A is also set in which case do Y and part of Z".

It's horrendous and I seriously don't get what's so difficult in just coding these scripts in a programming language that provides single statically linked binaries (like Golang) and just distribute it with your images -- or run them in CI/CD and have init containers and never include them in the images in the first place.

Inertia, of course. But I'll be actively working against it until I retire.
Sony results show 12M copies of Helldivers 2 sold and 20.8M PS 5 units in FY23
Curious to know how to compares with https://cranelift.dev/
We live in a capitalist society that the companies at the very top absolutely love to exploit. They also love to exploit "but think of the <patients>,<the people>,<the children>" and so on.

Fuck you, pay me applies.
Hi, thanks for sharing this. I'm actively trying to understand the roadblocks to onboarding new users to Haskell, and trying to fix them.

If you'd like to share any more about your experience I would really value hearing about it. Perhaps you could link to forum discussions you've been involved in, documentation you found confusing, or programs you've written that you got stuck on.

You're also welcome to contact me privately if you like. My contact details are in my profile.
Show HN is for things you've made other people can try - that excludes reading material like tutorials, blog posts, etc - take a look at https://news.ycombinator.com/showhn.html
Ask HN: Who Uses Raspberry Pi Desktop for PC and Mac?
I'm genuinely curious about who uses the Raspberry Pi distro on a x86 computer.

Does it exist only related to the development of the Raspberry Pi OS for aarch64 and armhf or there are people out there that choose Raspberry Pi Desktop as their main distro for their PC/Mac?
At the time of publication of the article the tool used to create the minimalistic VM Tinyx was not released and as far as I can see was never released.
Check out kraft.cloud and the accompanying LF OSS project www.unikraft.org :) (disclaimer: I'm one of the authors of the paper and one of the people behind that cloud offering). On KraftCloud we use Dockerfiles so users can conveniently specify the app/filesystem, and then at deploy time transparently convert that to a unikernel (specialized VMs). With this in place, NGINX cold starts in 20 millis, and even heavier apps/frameworks like Spring Boot in < 300 millis (and we have a number of tech to bring these numbers even further down).
If you actually look at the vpnlab example, you'll find that the government got access to all their data, not just for specific cases. So you can assume that all remaining providers have yielded the same level of access.
high level, a vm is an entire virtual machine with its own kernel/operating system/filesystem/etc. a container is a process (and associated files/archived filesystem) with a (more or less) isolated view of the world (network/filesystem/etc.) running on top of the same kernel/os as other processes on the same machine.

examples:
a) vm - an entire windows install running in a window on my linux workstation so i can use tax software once a year. two kernels running at the same time. (N+1 for N VMs)
b) container - a small python service, its dependencies, and various filesystem bits from alpine-minimal packaged into a file that docker/containerd/whatever can turn into the service running in a little isolated portion of my machine. no matter how many i run, one kernel. the various processes just don't see the host or other procs' files/memory/etc. via namespace trickery (unless there's a security problem, lol)
What does "supernatural" mean to you, I wonder?

It sounds like you are using it to mean "a supernatural phenomena is one which cannot be explained by the current scientific models". In this case, by definition the scientific method cannot support supernatural explanations.

Some people might take "supernatural" to mean "beyond any possible scientific law of nature, full stop". But even here we have that by definition the scientific method cannot support supernatural explanations.

I would argue that the vast majority of working scientists are naturalists - they accept something as being scientific only if it can be observed, measured, tested etc... .
While reproducible build envs are a nice feature of using containers, they aren't the primary benefit.

The primary benefit is resource usage and orchestration.

Rather than duplicating entire aspects of an OS stack (which might ne considered wasteful) they allow for workloads to share aspects of the system they run on while maintaining a kind of logical isolation.

This allows for more densely packed workloads and more effective use of resources. This is a reason why the tech was developed and pushed by google and adopted by hyperscalers.
Would be nice to have, but I don't even use this functionality on my MacBook or iMac(s) at home. For me computers (and iPads) have always just been "personal" for as long as I've used them.
How sliding tandems work on semi trucks [video]
BMW refuses to delete my (or anyone’s) information and the DPO address doesn’t get a response.
There are two types of useful documentation: Documentation that builds a mental model for a user, and documentation that answers questions that cannot be answered from the mental model. The first is done through tutorials and quickstarts, and the second through API references.

There's a third type of documentation: Documentation that describes behavior that is contrary to the mental model. This documentation is useless to a user, as there is no reason to seek it out. The benefit to a developer is that they can document bugs instead of fixing them, and blame the users for it.
While I agree with the sentiment in your first paragraph, I think the idea of the second sounds like either working sub-optimally (fixing bugs that don’t need fixing) or else too much management ineptitude to overcome by fixing critical bugs for a couple hours per day that management just wants to ignore.
I'm sorry but you don't know what you're talking about and I'm done here. Clearly you've never worked with or tried to train STT or TTS models in any real capacity so inventing dramatic capabilities, disregarding latency and data requirements must come easily for you.

Open AI have explicitly made this clear. You are wrong. There's nothing else left to say here.
We still pay for the connection itself, which seems more on par with the historical examples. The internet has just removed needing to pay to connect to a particularly endpoint, you connect to it and then you've already paid your fee to communicate with anyone else on it. Maybe that's why all these internet services are free, they don't offer enough value proposition that another middleman can replace. It's a race to the bottom and the bottom is where we are now.
I like the solution with the beatin' up more.
On kraft.cloud we have unikernels (specialized VMs) with Prometheus exporters that can be scraped, and other monitoring facilities.
Most of that effort should be sharable. if you know you will only have one python process you can get rid of a lot of cruft. If you know you will be running in a VM then you only need the driver for the network interface the VM provides not every network interface every designed (often including ones that your hardware doesn't even physically support). So while there is serious time investment it isn't nearly as much as it would be to write a competitor to linux.
> These did not provide useful life-lessons for me.

Shakespeare is packed with insight.
Thanks for sharing, such an interesting approach! At my startup we're currently discussing licenses, this is very inspiring. I have a follow-up question!

The reasons for OSS you list include "Bus-Factor", "Longevity", and "Continuity". I'd summarize all of those as "even if they can't do business with [company] anymore, users can continue on" - our customers also say that's very important to them.

... But what if "can continue on" means "need some of those proprietary features"? And you're not there to sell to them anymore? Or you've been acquired by private equity, started charging 10^6x, and users want out? Users aren't allowed to clone the repo, remove your proprietary code, and reimplement it with their own solution, because:

> you may not remove or obscure any functionality in the software that is protected by the license key.

Is this a thing your customers are concerned about? What do you expect them to do in such a scenario?
For a NAS use case, I'd be more inclined to use one of the PCIe to 4 SATA adapters and use SATA drives (whether spinning or solid-state). Each drive has lower performance than NVMe, but you get redundancy and still a reasonable speed connection.
I’m frankly kind of bummed that this isn’t fully static chess. As in every possible move is a pre-rendered html file on a server somewhere.

This is more akin to how Yahoo Games and other chess sites worked in the early aughts.
Not a take, just a question for the folx to think about.
Furthermore, if the only counter argument that can be made is an appeal to authority and prevailing views, or require an ad-hominem attack, then which one is the room temperature take, eh?
What it means to own movies and TV in the age of streaming services
Or have them set up in a way that makes them hard to run full-system benchmarks on. I can think of a couple of financial firms that have clusters that would rate on the Top 10, but a) as you suspected, they’re too busy running the money printers to take them down for a few days to run benchmarks, and b) they’re split up into more manageable little clusters, so the high speed fabrics don’t connect and allow every node to talk to every other node, which you need for an HPL run.
I tried looking for these phones on eBay - it’s a bit challenging to find unlocked refurbished phone that would work in my region from a trusted seller. Sometimes you have to take the leap of faith with a purchase and hope it works. It’s a bit of a headache…
Containers have their place, if you’re racking and running your own gear life gets a lot better than screwing around with IPMI.

But reproducible infrastructure as code is just orthogonal to that: everything from Salt to Nix is credible in that role.

Containerizing on top of a Xen hypervisor never made sense to me.
Fascinating article. This has inspired me to make a sundial that works inside my NYC apartment. Ideally, there's some reflective device pointed outside and some warping that happens to allow the sundial to work inside.
GameStop shares surge as 'Roaring Kitty' returns
https://archive.ph/PqoY9
Apple denies it, but the look is in fact that they would rather iOS running on the Mac.

I'm not sure where this aesthetic comes from — that somehow traditional desktop/laptops are an outmoded way of computing and that touchy, file-manager-less, terminal-less, tool-less computer use is the way we all ought to be doing things.
I'm almost halfway through the series.
Did you even watch the video ?
It's just baffling how I have to spell this out.

Skip to 11:50 or watch the very first demo with the breathing. None of that is possible with TTS and STT. You can't ask old voice mode to slow down or modulate tone or anything like that because it's just working with text.
I can confirm this approach works. We've been a satisfied paying keygen customer for 6-7 years, long before keygen was open sourced, and the fact that it is now doesn't change our decision to continue to pay for its use. If you have something that works well and fills a certain need, customers are happy to pay for it so they don't have to give any thought to it and can focus on their own core competency.
But this causes other problems such as the emergence of insular cultural or social cliques imposing implicit preconditions for participation.

Isn't it rather brilliant that you can just ask questions of competent people in some subreddit without first becoming part of that particular social circle?

It could also reintroduce geographical exclusion based on the rather arbitrary birth lottery.
I found this url in Google when I searched for appspot "gweb" - I used the gweb keyword because I noticed some google sites use that keyword. Generally I was searching for exposed source maps in Google owned websites.
MDMA Therapy May Be Legal Soon. Some Advocates Are Sounding the Alarm
And these overheads are even smaller if you use unikernels as per the paper. Eg, cold starts of a few milliseconds depending on the app/size of the image.
Why would the chances be equal? If we ban campaigning, should we also make it illegal to be gregarious and likeable?

My point is more that you are bemoaning your lack of influence and power, not pointing out some glaring unfairness in the system
What exactly does Chrome OS offer that Android already doesn't? (Not a rhetorical question)

Especially when Chrome OS even runs Android apps, and under the hood - they're the same Linux Kernel. Are there any use cases where Chrome OS shines on a Laptop form factor where Android x86/Dex/related projects fall short of?
Small reactors are already used in environments where the unit is self contained with no environmental impact during operation (passive cooling). The discussion of environmental impact of those units are generally about decommissions once they are removed from the environment where they have been operating.

Large generators are not self contained and usually need a lot of water for cooling, and they have waste heat. They are also very large concrete buildings, so environmental considerations are needed there.
I haven't heard of Fair Source before -- is it gaining traction? Did you use the "legacy license" (that is linked to on the website)?
I would if they can have their own release cycles.
Reminds me of the MKV-L ballistic missile interceptor tests: simple physics, with impressive engineering implementation [0].

0 - https://www.youtube.com/watch?v=KBMU6l6GsdM (the rapid fire rockets are a little loud)
Understood, sorry about that.

But that's how it feels to me.

It's mostly because my mental image of multistage builds is different, I see them as a way to make the final image smaller by throwing away everything from the previous image.

So it does make sense to me that ARG values are thrown away after a new FROM instruction and if you need them, you need to declare them again.

These two guides have led me to this view, I blame the author! ;) They're excellent BTW, I've revisited them a lot.

https://vsupalov.com/docker-arg-env-variable-guide/#arg-and-...

https://vsupalov.com/build-docker-image-clone-private-repo-s...
Basically, iPad needs macos.
There is no such thing as a reproducible build environment anymore. You can get a temporary reproducible build environment, but any sane security policy will have certificates that expire and that in turn means that in a couple years your build environment won't be reproducible anymore.
That's bad. where do you live? Did you contact the authorities related to your country?
> But, sadly, it doesn’t sound like this is something Google intends to launch anytime soon.

Sadly indeed. Samsung's DEX was nice too...

(but honestly, I loved the most _the option_ to do it like that; In reality used DEX for at most two weeks once on a vacation...)
That’s a good idea! How well do they perform as a NAS?

My use case would be Time Machine backups over my home WiFi network. Everything I’ve seen is either expensive or has mixed reviews for this use case.
For freedom, what else? The communist revolutions were also fought for freedom.

> Extremist violent rhetoric encompasses communists and fascists and anyone else willing to kill people to tear the system down.

It seems that at the end of the day you are not against anyone willing to kill people to tear the system down.
To answer you. The ideal situation would be a borderless friendliness between Israel and the Palestinian states of Gaza and the West Bank. No attacks. I know that Israel would be delighted to have peaceful, prosperous neighbors. I know that having political control of Israel through a majority rule is important to Jews, so I don't see a "right of return" for Muslims not already citizens of Israel, but in the ideal scenario, Palestinians with actual, legitimate claims in Israeli territory will have been financially compensated for, and made peace with, their loss. Gaza will have been rebuilt and be a tourist destination for those who like beaches and Mediterranean sun.

But, no, while I think my ideal future for the region is a pipe dream that will never come about, I don't think the answer is actual genocide like population transfer.

Earlier you made assertions that Zionism is a settler-colonialist project and at least strongly implied that it was the cause of the conflict today. In light of the fact that continuous Arab attacks against Jews of the region began decades before Zionism, has it changed your mind at all about the cause of the conflict? Changed your calculation at least to a degree regarding Arab culpability?
That would probably work. Not sure if one actually exists though.
> the Dutch and their deep-rooted racism

ouch
All failsafes are a result of redundancy.

Profit motives are incompatible with redundancy.

If left to private companies, the design of the reactor will not save you, because the design will be altered to extract the maximum profit.