skysight-inc/HackerNews huggingface dataset:
Not useful at all.

Go back in time and connect it to a network full of infected hosts, and you'll have a very different experience.

Why is it such a surprise that a machine won't get infected when the common vectors of attack for those OS's no longer exist.
I’m sure Yann disagrees

"It is difficult to get a man to understand something, when his salary depends on his not understanding it." -Upton Sinclair
https://www.ncbi.nlm.nih.gov/pmc/articles/PMC8633769/#:~:tex...
As much as I opposed GeaphQL at first I found a use case for it and have been using it successfully for past 4 years. In my application GraphQL is just a layer on top of GRPC API. It helps to fetch data across different services and glue together different entities in one frontend friendly payload. Since GraphQL is essentially a proxy in front of GRPC (which is the real API, exposed over REST endpoints as an alternative to GraphQL) I haven't suffered from most of the issues described by author.

Authorization is performed by GRPC which returns only fields available to the user, rate limiting is performed on GRPC requests so at some point your data will start coming partially if you make too many queries or query that is too complex, N+1 problem is still there, but in a distributed system it's there even without GraphQL, the mitigation is caching in GraphQL server on GRPC request level.

In my experience GeaphQL really helped decouple frontend and backend and I'm pretty happy about it.

Besides GraphQL offers some standard way of making server side event streaming, it's not supported that well, but at least it's more comprehensive than bare web sockets.

I never got around to implement mutations though, individual change requests via REST are enough.
GPS navigation messages do include information about leap seconds and other stuff necessary to convert between GPS time and UTC. See GPS Interface Specification IS-GPS-200, 30.3.3.6.2 - UTC and GPS Time
The real question is why the hell can said infostealer malware access the file.

Can we PLEASE have proper per-process file access restrictions on Windows already - like MacOS has had for a decade now ????? Why is win32 app isolation still not done?
So I'm just hearing "fuck Sony and any other money-grubbing megacorp or persons with zero appreciation of the arts".
Rage Boredom and WallStreetBets Created a New Generation of Young Traders
Microsoft will probably encrypt that db or something to try to convince people it’s safe.
Back in the days of blaster, if you were connected to a network with infected machines or had a public IP address because you were connected straight into your cable modem, you would get infected in the windows installer before it finished installing. Nowadays, everything is behind NAT and there aren't any infected Windows XP machines left on your local network, so that's not a problem anymore.
Ah so it’s about growing up then?
Beware Moral Fashion
I want art and cinema, not "content". Bottom-of-the-barrel made-for-streaming "shows" are somehow worse than mid-'00s vehicles for commercials every few minutes.
For a moment my perception of Microsoft was that it has become a cool company (github acquisition, Linux Sub-sytem). I was impressed by how Satya Nadella turned the company around (at least in terms of image).

Between Recall and the mandatory account login to install Windows 10 I am progressively reverting to how I felt about them.
Geoffrey Hinton says the term "confabulate" is more apt to describe the mutex/mutating memory recall operation of the brain as it summons "known facts" and "gets them wrong." confabulation is a feature, not a bug, of the brain, and also a feature, not a bug. If the goal is to reach brainlike computing, we are getting closer.
https://go-review.googlesource.com/c/go/+/576015 this change to optimise errors.Is in the err == nil case was merged recently. It’s not included in the latest Go release, hence the stats here, but should end up in a release pretty soon I’d imagine.
I still wonder why we need that arbitrary restriction anyway?
Ask HN: Is GitHub profitable as standalone as of 2024?
I'm more surprised you don't take a more quantum mechanical view of the problem. At vanishingly small scales, we know particles can come into existence provided they leave existence quickly enough to not effect the overall energy balance - but they're quite real, they mediate how forces in our universe operate, and have measurable parameters.

It does not seem inconceivable that all of space-time could be a similar sort of event: an bubble of higher-rules coming into existence spontaneously, and necessarily structured to not violate the rules of whichever higher-level system governs it (moreover: this could just be quantum mechanics, the same rules as us, operating at a large scale).

Which then gets to the interesting stuff: Poincare recurrence[1]. Dynamical systems after long but non-infinite times return to existing states - aka if the universe were regarded in such a way, then there is large but not infinite amount of time before it will return to either the "big bang" start state, or on an even longer timescale, any actual moment in time that ever happens.

Which is somewhat solipsistic of course, because it's all infinities anyway: an exact version of your atoms re-existing at multiple distantly separated points in time would be a multi-verse of sorts, just across another dimension: and of course if it's the same atoms, doing deterministically the same things, then it's essentially the same consciousness - so all those spaced repetitions of events aren't meaningfully distinct, so they're kind of the same...except they're also infinite, because they can just keep recurring.

[1] https://en.wikipedia.org/wiki/Poincar%C3%A9_recurrence_theor...
He's saying that you get something under-developed in a month versus something fully-formed and viable in nine.
IMO the link should point at the original source: https://doublepulsar.com/recall-stealing-everything-youve-ev...

The blog post is insanely reductive and clickbaitish
"Holy grail of computer usage". Really...?
Certain gTLDs have been borderline scams. The most infamous one might be .sucks, an extortion scheme charging an annual protection fee of $$$, complete with the pre-registration process when you could buy <yourtrademark>.sucks for $$$$ before it’s snatched up by your enemies.

They also screwed up some old URL/email parsers/sniffers hardcoding TLDs. Largely the fault of bad assumptions to begin with.

Other than the above, I don’t see much of a problem. Whatever problems people like to point out about gLTDs already existed with numerous sketchy ccTLDs, like .io. Guess what, the latest hotness .ai is also one of those.
@Spotify open source this.
See Jackson Pollock for a huge divide over whether people think it is art, evocative, or just drips of paint that mean nothing.
Ticketmaster confirms data hack which could affect 560M globally
I don't think they were suggesting that violence is the preferred option. But I don't think there's any country where law enforcement cares about bike theft, so prison isn't really an option.

Edit: I found a great article about that for the UK here: https://www.cyclinguk.org/cycle-magazine/justice-cycle-theft

> Ministry of Justice records show that in the five-year period between June 2017 and June 2022, just 159 people (out of roughly 350,000 bike theft cases) were found guilty of bike thefts and only two of these were given immediate custodial sentences.

The police could do way more, but it's easier to victim blame ("register your bike, use two locks, etc.")
Fake news is hard to classify (unless you limit to obvious fakes with no reasonable room to dispute), and hard to sample fairly. This study is also limited to a single event.

What is misinformation can be debatable too, and it can affect the results. For example, a study by Kings College London on Covid misinformation in the UK during lockdown looked at mostly very clear cut things (e.g. its caused by 5G etc) but also included the lab leak theory as misinformation. That shifted the results because they lab leak theory appealed to a different group of people (older, right wing) to the others (younger, left wing).

I am pretty sure you would get different results in other countries, but my point is what you include changes the results.

My personal experience of political misinformation on social media (mostly FB) is that it is subtle (e.g. quotes out of context to change their meaning, or with misleading commentary), sometimes originates from mainstream media, and comes mostly from the "left". However, that is because my friends, at least those who are inclined to discuss politics on social media, are mostly affluent professional British people who vote Labour (the historically left wing party). A hopelessly biased sample.
I ain't strappin' shit to my face, chief.
I've sent wire transfers between about, 5 or so different banks? Including like "from Akita bank to Kagoshima bank" not exactly big banks. And it's always done within like 15 seconds, since the Zengin upgrade a bunch of years back.

That said automaticly registered wire transfers aren't really used much lately in my experience. Mostly for stuff like salary, rent and big purchases like a car. Anything else that's automatic people just use cards for now. Precisely due to that lack of messaging/attribution.

For small daily person-to-person transfers, everyone I know uses PayPay since you just exchange phone numbers instead of more personal details. This is similar to back in Sweden where everyone uses Swish instead of regular wire transfers.
Why should they invest?
Most likely nothing bad will happen to their bottom line or execs so no reason to invest in security.
We decided that profits are more important than accountability.
Olo, CEO of https://www.tablespace.io here. We've built a columnstore extension for Postgres that is faster than ClikcHouse for real-time analytics in their own ClickBench Benchmarks. Feel free to check it out - https://www.tablespace.io/blog/postgres-columnstore-index-vs...
The original HN link redirects to this company's home page now, so the blog post was likely an ad campaign to get traffic.
You could reach out to a professional business developer for their help to get leads.
2017: People are willingly buying a spy device to put into their homes.

2024: People are willingly activating a key logger.
Show HN: I made an open-source free shipfast but for SvelteKit
I've given myself a 12-month coding challenge to create and validate six mini start-up ideas.
Noticing a trend among developers to create and sell their boilerplates, I decided to start the challenge by making a (completely free & open-source) one for myself.

I thought it might also be useful for others who like this tech stack.

Since I plan to develop and validate ideas quickly during my challenge, having a solid boilerplate is going to be extremely helpful.

Here's the stack: - SvelteKit + TypeScript (no NextJS...) - DaisyUI, TailwindCSS - Supabase Auth + Database

And this is ready-to-go: - payments with Stripe are already handled - blog-related pages have been created with Contentful - Plausible analytics can be set up in 2 seconds - Supabase authentication pages are also ready

Here's a link in case anyone would like to take a look: - page: https://www.sveltekit-ultrafast.com/ - GitHub: https://github.com/jacobxcoder/sveltekit-ultrafast/

I'm open to suggestions & feedback.

I will now try to code something interesting, starting from this boilerplate.

Note: please note that it's fairly recent and I will constantly improve this boilerplate, adding new components, blocks, and improving the overall UI/UX to make it even better in the upcoming future.
Exactly

RTs were done manually before they were a thing. Hashtags, the same (so you could search for #something more easily as a topic).
American patriotism set aside, I share the author's enthusiasm for these types of technology! The post's main focus on how we stand on the shoulders of giants is so true! It makes me happy and proud as well.

Another fascinating technology that we take for granted, is the possibility to travel with 280km/h in a train and still be able to receive digital bits and bytes. What kind of witchcraft would our grand-grand-grandparents have called that?
How does this compare to OpenResty? Could it somehow help with OIDC support (e.g. by integrating a relevant nodejs lib)?
Zengin (the interchange network) actually supports 24x7 real-time transfers and EDI data (ZEDI based on ISO 20022, which is built so that you can include invoice number, reference number, etc.) since the end of 2018 or so with the introduction of More Time System and 7th Gen Zengin System. Sadly, it's the bank and bureaucracy that's holding back here (e.g., some smaller banks still refuse to connect to More Time outside their business hours).
OpenGuessr
We Need to Stop Pretending This Is Okay (Ruby on Rails Drama) [video]
>[...] and the rest of us having no chance.

Chance for what?
“How would people feel if reality was other than it is?”

I mean, this seems like a slightly pointless question. Like maybe as a premise for a horribly tedious alternate history novel, but otherwise I fail to see the point.
The case is a funny one though - false records to cover up influencing an election through unlawful means but the means were not specified - could be a) campaign finance laws or could be b) NY tax laws or c) other. I think the jury were told any would do and I'm not sure that's published so even after being convicted Trump doesn't know if it's for a, b or c? I'm not a lawyer or even an American - I just follow this out of mild interest.

I'm not a Trump fan but I'm not sure how well this plays out. He's unlikely to get locked up and saying don't vote for Trump - he's guilty of stuff although we are not quite sure what but definitely guilty, may not play that well with electors.
not just IE - insert Java applets, Adobe Flash; and all the other browser "addons" and plugins - it was a mess. but it also depended on the websites you'd visit. a great deal of malware were spread by ads and even facebook was not spared - its deff not the same as it used to be; adblockers were used back then too - the biggest difference is now we're plagued with javascript and it literally being allowed to do what all malware ever wanted: to spy on users any way the site-op sees fit.

remember malware used to simply crash hard drives, erase everything, sloww your system down, cause bsods... it was mid 2000s when a wise man once said something along the lines of "its amazing that malware can install, auto update, and run flawlessly without the user even knowing - something the OS fails to do"

the browser is not simply safe because the os is safe - certainly the OS helps, but the browser is safe due the latest code techniques and sec folks investing so much time into it. if they solely relied on the os being safe, then we'd all be fools to use a browser - i mean, more than we are in allowing javascript so much power
Be wary with making this kind of website. I made something similar long time ago (urllengthener.sadale.net) and got my site reported for "spam campaign". Turns out that the spammer was abusing my site to generate spam link. I handled that promptly by shutting down my site and didn't receive any penalty for that.

The way how it worked is that the spammer used my urllengthener as a redirection service to a website that looks like an incomplete project, which is actually a disguise. There's javascript code on their site that if there's a URL fragment identifier (the hash thingie postfix for URL) detection mechanism and if the URL fragment identifier matches an ad of their own, it'd redirect to the actual spam ad.

Let's say the spammer owns example.org. The spammer would generate link with my service such that https://urllengthener.sadale.net/foobarbaz would redirect to https://example.org. Then it'd send spam with a link of https://urllengthener.sadale.net/foobarbaz#identifierXYZ to the victim. Then the victim would click on the link, which redirects him to https://example.org/#identifierXYZ, which would show victim the ad. https://example.org/ looks legit on its own and there is no log shown on the HTTP server because the URL fragment identifier is a client-side thing. I'm kind of thankful of that spam abuse report. Otherwise I might have never found out.

(Remarks: example.org isn't the actual spam site. I just use this domain name as an example.)

I don't have the time for now but I think I should make a write up about that some time later.

And I've tested your service and apparently your site is vulnerable for the exact same kind of abuse as mine. I'd strongly recommend you to at least disabling redirection of URL fragment identifier. Example of URL that's prone to abuse: https://looooooooooooooooooooooooooooooooooooooooooooooooooo...
Israel finds itself in the same position as Russia war-wise.
> The overwhelmingly negative reaction has probably taken Microsoft leadership by surprise. For almost everybody else, it won’t have.

I sometimes (always) wonder which planet Microsoft leadership live on - it's certainly not the real world that you and I live on.
This is a distinction that should NOT exist. Like on phones, you end up with "software" that is just a glorified web browser and doesn't integrate with the rest of your system nor cannot access your hardware to its full extent.

I.e. If I want to set up a script that makes Libreoffice trigger phone calls through a bluetooth modem, I should be able to. Otherwise it isn't really a computer. These "system" vs "non-system" almost always end up down this slippery slipe, and avoiding it is one of the reasons I enjoy desktop Linux for all its brokenness.
I mean, most of the researchers I know at least use PyRoot (or the Julia equivalent) as much as possible, rather than actually interacting with Root itself. Which probably saves their sanity...
Overall, i have never liked Linux as my main OS. i love it for coding and i tried a lot to get to like it but i came back to windows and I'm planning to try Mac too and I'm optimistic it i will like it.
Insta-chat: simplest Instagram chat automation tool made with Google Sheets
This is an interesting experiment.

I have to say that nearly all the production code I write in Go is typically stuff interacting with external services like databases and SaaS APIs, so the difference in nanoseconds here is not going to move me away from using the safe idiomatic approach, but it is something to bear in mind for whenever I might use Go for very computationally intense tasks.
> because malware can now target a single file with huge amounts of valuable information

By that logic password managers are also no-no.
It's a fine project right up to the point of you needing additional functionality that's split into one of the plugins. Since Go applications do not support proper .so in practice, you have to build your own binaries or rely on their build service, and this puts the responsibility of supporting and updating such custom configuration on you.

So no setting up unattended-upgrades and forgetting about it.
Impressive. Here is the blog post (also linked from their github) that talks about the bypass (the tldr; is that they rotate through public keys in a deterministic way, so Apple’s protections think it’s a new device each time and thus don’t warn about a persistent tracker).

https://positive.security/blog/find-you
I actually think that was 2023 with Rewind. At least with Rewind you’ve gotta download the app yourself and run it. The in-progress OOBE setup for Recall does not even have an opt-out. Instead, it offers to open the settings panel after you’re done with setup, rather than just giving you an off switch: https://x.com/tomwarren/status/1796681578984182066
https://learn.microsoft.com/en-us/defender-endpoint/enable-c... this works surprisingly well to prevent an app from going too far into folders it should not access.

It's a bit opaque though, not as simple as *nix owner/group/everyone permissions.
Looks great! No iOS version?
Yea, but there is room for both. Sometimes you just wanna rest your brain with a super predictable movie where you can tell from the first minutes exactly what will happen.
do you think there's a difference of scale here?
The answer is neither, because 2D stories are crafted under a specific paradigm which everyone "gets" with time, so it's a default but not a natural one. E.g. people don't act irl like in movies/animations and events don't get viewed from efficient angles with repetitions and timely attention switches. So no, 2D isn't the best way cause we had to adapt 3D-to-3D to it.

On your initial comment, there's already a {f|c}ringe group of LLM users who use [E]RP to participate in... scenarios (text, can generate pics using SD). It's hardly googlable, you may or may not want to dig into this, I warned.
Neither these two paragraphs or the source they’re paraphrasing (https://doublepulsar.com/recall-stealing-everything-youve-ev...) indicate anything matching the headline at all.

The source article is a QA with himself. There’s 1 tweet references, that shows a screenshot of a truncated SQLite db that shows a log of the applications opened via the user UI shell: https://x.com/gossithedog/status/1796218726808748367?s=46&t=...

Whoopty doo. There are many, many sources throughout Windows that can give you a list of recently opened applications (that have existed for 10-25 years)
Funny thing to say when you see how US-centric most global companies are.
Why can’t AI help us make something fully formed in a month instead?

There is a quality bar for Sony Pictures I assume.

My point is that we constantly invent technology to increase productivity. In this case, all I’m saying is that the cost to make a movie of the exact same quality should decrease with better tools.
Please explain to me why an OS level signed and encrypted database isn’t secure
I think I'll stay on Linux and let Windows users be the guinea pig for this particular experiment.
> Is there any reason to use nano over vim other than learning curve?

A simple matter of preference, I guess :).
Further infantilization of the user, further resource requirements, enormous privacy concerns, and proprietary technology. It all seems bad to me.
Doesn’t Windows already have a data store that’s encrypted with a key that doesn’t exist in RAM unless you’re logged on? And some kind of isolation of sensitive processes in a VM?

Malware can probably read most of the user’s data in RAM, but if OS components keep getting more isolated from each other, maybe that can be secure enough.
I agree that the original article should be linked here, not my summary.

I take offense to the clickbait accusation. This post wasn't intended to be shared elsewhere, it was a bookmark on my personal website. I have 7,000 more of those here: https://simonwillison.net/search/?q=&type=blogmark
Researchers on Twitter are saying that it’s just a plaintext SQLite.
Reminds me of the Paper theme for MacOS 8.x-9.x.

There's a screenshot in the carousel here:

https://www.macintoshrepository.org/2549-appearance-manager-...

Implemented using Appearance Manager, not via Kaleidoscope or one of the other add-ons.

https://en.wikipedia.org/wiki/Appearance_Manager
Yes. Still haven't hit the 45 day window on my last request but once I do boom
Herd immunity, huh?
I don't understand how to install backports.

I'm generally not a hardcore Linux person. Fedora seems to be more up to date out of the box.
The same reason banks get occasionally robbed, despite all security cameras, delayed openings, biometrics, armed security, and everything else put in place.

When there is a will, there is eventually a way, for anyone with enough resources.
If OP was an early adopter, remember that it's 16 GB in 2007-2008. The iPhone didn't exist yet. The top Thinkpad at the time, Lenovo W510 (https://www.notebookcheck.net/Review-Lenovo-Thinkpad-W510-43...), had 320 GB of storage; OP had 5% of its storage for free on dropbox.

Nowadays we have new laptops with routinely 1TB of storage. Imagine 50GB of free storage with Dropbox, or any equivalent, today.