skysight-inc/HackerNews huggingface dataset:
I was the poster of the thread from a few months ago.

I am wondering how HN allowed a repost just a few months after that. Typically you have to wait a year or more before being able to post the same link again.
interesting, have not kept up, this concern existed for many years but kept struggling to stick.

it gets difficult to call bullshit on something that approximates well but not necessarily for the “right” reasons. it produces value. for some, that is the main, if not only, point, and to consider the how is to lose the why. for others? the how is inseparable from the why.
The leader who took Russia from being a grand-principality centred on Moscow to a continent spanning empire was Ivan the Terrible.

You don’t get an epithet like that by being a nice fella.
it is so funny, and the poem is great. it is short, and easy to read. have at it!
Recently read “Pale Fire” for the first time. It’s insanely good. Another review I read made the comment “Nabokov spoils you for other books.” It’s funny, with beautiful sentences, engaging, and the overall format is a welcome break from the normal narrative form.
Discussion [0] (128 points, 12 hours ago, 116 comments)

[0]: https://news.ycombinator.com/item?id=40570356
Tokyo dating app to promote marriage, keep out phonies
In that case, the interview question is working as intended. For most of our roles, we want several years of Rails experience, and we are clear about that fact in the job listing. If someone applies without Rails experience, they either didn't read the job listing, or are desperate to find any job. While I empathize with folks in the latter situation, our positions really do require the experience, and the job market isn't so bad right now that a smart candidate should be going a long time without finding something.

If you happen to have Rails experience but it was several jobs ago, the task we give you is basic enough that you should be able to Google what you need during the task to refresh your memory fairly quickly. In fact, I did this when I applied, having not worked with Rails in a number of years.

Edit: My main point is, even if you technically do have to "study" (really, just Google a few basic Rails concepts) if you're rusty, everything you do is preparing you for the actual job. Studying how to implement a hashmap, or computing the longest palindrome from a string of characters, or whatever other harebrained problem FAANG etc want to ask, is 99% of the time not really helping you prepare for those jobs.
For what it's worth, I don't have evidence that you are conscious (and I never can; your qualia of the concept of the color red and your other internal world-state representations are solely yours, assuming you are not a P-zombie). For the record, I also do not make magic claims of free will nor assume there are laws outside known physics. If you wish to call in dark matter as a potential agent of causal change, then you can propose your theories backed by evidence and we'll continue as the evidence leads. But as far as my own existence, well, cogito ergo sum and all
Kind of, I thought the reason was because productivity dropped after longer hours.

But mostly, the idea it gives you 8h work, 8h sleep, 8h for self seems like rationalizing and not even entirely true if you commute, unless you take half your commute out of work time...
I think giving any more details than his three short posts would delve too far into the specific arguments of the paper to be valuable for a wide enough audience, subtracting those that are going to be looking at the pre-print anyhow.
Building a Software Company and Saying 'No' to Millions [video]
This is not the same because Tesla is a public company. It is more like saying a chocolatier owns the main shop with someone else, and then diverts the chocolate to a second shop that only they own.

You are actively hurting your partner by doing this. Elon has a duty as an officer of Tesla to help it perform well. Diverting or delaying company resources for the benefit of his own, private company is not good.
Open Source AI Is 'Dangerous:': Euro Cybersec Chief Warns
Thanks for putting in the effort and time into this cool project. My question is: How does your manufacturing process look like if someone decides to click the "buy" button and do you have any open orders currently?

Also do you actively use it currently on your bike or do you know some use cases of someone that bought/has it?
I have discovered a truly marvelous demonstration of this proposition that .... will not fit in 280 characters.

-- Fermat
If this is true, it's almost certain to lead to a shareholder lawsuit.
The Ops comment was well versed, educated and contributed to the problem.

What do you want to tell us with category theory and how does your comment fit into the discussed problem?
How does that support a janitor? or a school teacher? or a policeman? or a retail clerk... I can go on and on... there are too many jobs where there is no possibility for "remote work" yet may not pay well enough for you to live close to the office/place of employment
I can't say this will work for everyone given the scarcity of jobs. I can afford to miss out on certain opportunities and I'm perfectly happy to invest longer stretches of time in networking and doing whatever homeworks if the assignment makes sense and it's something I am interested in. Let me put it this way: I'd very much rather change professions than go through another Leetcode-style interview again. So far it hasn't come to that, thankfully. There are enough opportunities out there once you spend some time building a portfolio and people in the open source space get to know you.

PS: What this approach gives me is piece of mind since I know I won't get a surprise-Leetcode if I go through an interview. It has happened to me in the past, where the recruiter wasn't really aware what the process is and I haven't told them up front what I'm not OK with. Once I'm there in front of people, it's very awkward and frustrating for me to have to get up and walk out and I'd very much rather avoid that situation. Also, it's a waste of my time.
Musk's conflict of interest has always been there. He's sent Tesla engineers to help out in Twitter, he directed Tesla to buy out the struggling Solar City, a company he owned ... I think he just doesn't care about the public status of Tesla and considers it his property.
Can't you use pirated ones via an HDMI cable from your computer to the TV?
Fortunately, Cox isn't one of these. Any sufficiently modern DOCSIS modem, appropriate to the speed of service you subscribe to, is accepted.

Unfortunately, my praise of Cox ends there. I've been having intermittent packet loss issues for 2 years, and there doesn't appear to be a support escalation path available to me, so I can't reach anyone that will understand the data I've captured indicating certain nodes are (probably) oversubscribed.
He sees the $45B slipping away, and he will take out his frustrations on Tesla. "Let that sink in." In a way, this makes life easier for his successor who might otherwise be blamed for the stock returning to a normal valuation for a competent EV maker.
For me "available at" prices of Raspberry are unachievable. Either you can buy RPi for twice the price in my country, or you cannot buy at all. Depends on time of year or whatever
If you look at Tim Berners-Lee's original NeXT Cube that he developed WorldWideWeb on, you can see that it has a US keyboard layout. https://artsandculture.google.com/asset/original-next-comput...

There's obviously a caveat there that the keyboard could have been replaced - but based on the colour of the plastics it would certainly be a similar age.

The keyboard has AlphaLock rather than Caps Lock. I can't find a manual saying exactly what it did! You're right that the Caps Lock key on PC and Mac keyboards only capitalises the alphabetic keys without affecting the symbolic or numeric characters. Some international layouts may still offer a Shift Lock?
I see Made in Germany quite often around here actually.
How is cluster formed?
>now we have fair trials at the state level.

Another framing is that we now have a larger and more formalized structure for trials that we perceive as more fair because it is more structured.
>Why multiply by 35? Is that the lifetime of the trains?

I found another article in which Siemens provides 35 years of full service maintenance for its brand new electric locomotives (sold to a different customer.) So short answer: yes. https://press.siemens.com/global/en/pressrelease/siemens-mob...
> he expects investors to vote to grant him the biggest bonus ever, and for what?

For him to buy some other unprofitable social media company and sink it even further, of course.
the difference is that you could move... I don't blame you for staying put- I would do the same in your situation!

I use this phrase a lot of times: "money buys options" (not the securities kind)
You said you have a couple paying customers- invest in turning them into raving fans. Step 1 for generating word of mouth demand.
Show HN: I've updated the site that color-codes the world by language
I tried but the thing is, at that point everything is so laggy it's not even worth it
Not my king!!

He's French.

I didnt choose him, he invaded my country.

Just like our current royal cock-ups

Now we have the Germans:

We must seriously always ask why the Royal cock-ups change their name from Saxe-Coburg-Gotha to Windsor 1917.

oh! it was because we were at war with Germany and the German name "Saxe-Coburg-Gotha" would be so shameful for the British people and a constant reminder that they were always German.

The poor people of old Airstrip One never get told the truth
I worked at a company that had a Form 3 (I think) 5 years ago, and granted time has passed but consumer printers are light years ahead of that thing now.

I have a Anycubic mono x from 2020 and it is far more reliable, faster and cheaper. You can buy 5 of them for the price of the Form 3.

The software and firmware is pretty bad from Anycubic but you can figure that out a lot faster than you can fix problems with the Form 2.
I'm objecting to the implication that if we start referring to it as curve fitting rather than AI, then thinking about it becomes easier and it becomes less likely that we will make a huge collective mistake in thinking about it.

I'm not saying there aren't a few possible mistakes that do become less likely if we switch to "curve fitting, but I suspect that it does not matter much either way on the most serious mistakes.
I'm more bummed about .zip becoming a TLD. I've already been bitten by it a couple times.
That’s true and should have been phrased differently. But names and addresses within a public LAN rarely have meaning to the customers, I guess. Btw, can an adversary on such a lan typically spoof source IPs and eavesdrop on packets between other nodes? I realize I know very little about WiFi.
However, a reason to leave the rules unclarified is that parties who want to look the other way are able to. I don't think it'll make much of a difference in this case, though.
An F150 is more than an little similar to a Cybertruck.
I don't disagree on a conceptual level, but on a regular basis I deal with companies completely lacking any real access model, users without MFA, blanket admin level access, etc... getting sold on this particular product and something spending 7 figures to adopt it.
Pale Fire is, without a doubt, my favorite thing Nabakov ever wrote. I've been through it at least 5 times but I don't feel as if I've ever fully read it cover-to-cover like other novels. It's just a rough draft of an epic poem (of specious quality) and a bunch of publisher's notes, but it's always intriguing and surprisingly funny.
SEEKING WORK | Remote | San Diego, CA (PST/PDT)

Independent software developer and system administrator available for flat-rate projects, and as a fractional embedded team member. I've been building and maintaining websites and full-stack software solutions for nearly eight years. My work emphasizes simplicity, security, accessibility, and reliability.

Solutions - Custom software development, content management systems

Services - Software development, Cloud sysadmin + DevOps, Software consulting, Tech leadership

Skills and experience - Read about my past freelance projects here: <https://www.matthewcardarelli.com/blog/client-stories.html>

- Web UI: HTML/CSS/JS (React, NextJS, Typescript, and more)

- Testing: Cypress, Jest

- Web server: Python (FastAPI), NodeJS (Express), GraphQL, Nginx

- Database: SQL RDBMS (PostgreSQL, MariaDB, SQLite)

- Cloud sysadmin: AWS (RDS, S3, VPC, and more), GCP (Tasks, Cloud Functions, Firestore), Akamai/Linode

- DevOps: CircleCI, Terraform, Ansible, Docker/Podman

- Content mgmt: Wordpress

- Auth: OAuth 2.0 + OpenID Connect (Auth0)

- Always ready to learn new technologies.

Pricing -
Available on a fractional or flat-rate project basis: <https://www.matthewcardarelli.com/pricing.html>

More information available at: <https://www.matthewcardarelli.com/>
To believe that the Shire was in fact a society built on economic exploitation, and that Tolkien meticulously figured all this out (but failed to mention it), undermines the morality of the tale. And the fact is, nothing truly like the Shire ever existed, so attempting to contrive a real-world explanation for its qualities is impossible.

The English countryside of old is exactly the model for the Shire. Its idyllic, comfortable lifestyle contrasted with the dirty, busy, industry of London and the disgusting, disease-ridden horror of the trenches in WW1 (in which Tolkien personally fought).

The mythology of LoTR Tolkien drew from his knowledge as a scholar but the setting was deeply rooted in personal experience. There are plenty of people living today who enjoy an idyllic, rural lifestyle in full ignorance of the industry, politics, and wars of the wider world.
I work for the company (Oxford Instruments Andor) that produces the cameras for this telescope: https://sites.google.com/inaf.it/shark-vis/instrument/detect...
A great achievement!

It's very exciting to be a (small) part of this, happy to answer any camera software questions (can't speak for the observatory's software though as I haven't seen it)
in your hmac example you have a separate key to manage, whereas in my example, it's implied it's sha256 or a variant that provides a layer of obfuscation in the lookup, and may even implement a "standard" to fool regulators. most regulations and standards say what tools to use (key bits, algos, etc) , and not that the implementations need to be approved by a professional.

my example is that the scheme uses tools in a way that is meaningless because I can just take a phone book, hash the names, and check to see if they are in the cancer database as though it were an cleartext database. to say the data subject's data is private in this case because it is hashed (or often, inaccurately, "encrypted") is to mislead people who make decisions about it. I'm saying the designers of such systems represent themselves as cryptography and security experts who build weakened systems like this to mislead regulators on behalf of their bosses and users who just want the cleartext data.

most protocols are a shell game where if you don't know where the root of trust secret is managed you're the sucker at the table. my experience has been that working cryptographers (protocol designers) in government, health, and financial institutions in general are a very refined class of bullshitters who pound the table whenever you ask them about details, and that one should not be intimidated by their theatrics. Hence in PHI management, dishonest cryptographers working on behalf of anti-privacy interests are the main threat.
how long is a piece of string
It's not the definition of extortion. If I walk past a business and notice the locks on their windows are rusted and I happen to be a lock guy and say hey, I noticed your locks are fucked, I'd be happy to consult for you and show you how and why they are broken, that's just doing business. Extortion is telling them, hey, your locks are fucked and I'm telling everyone unless you pay me. It requires a threat.
> Sure but contracts which are take-it-or-leave-it and aren't negotiations with concessions on both sides can't really be said to be willing parties.
From my experience you will have these problems with Form Labs printers. Especially as a novice in resin printing.
That seems pretty much it.
I can't see the website right now, but can you explain a way this could help others in the world?
Ask HN: How to answer if somebody asks how easy it is to replicate my startup?
I'm building startup and I already have some traction and it really helps and solves users problems. It is not that difficult to build type of startup that I built. Sometimes people ask how easy it is to replicate my idea, what if somebody build exactly same product and offer for lower price, what is stopping others to build the same product you built. Honestly, for me it is difficult to answer this questions, because I know how easy it is to build. How would you answer to this type of question assuming you have a startup/product?
> Microsoft’s target market was the country’s drug-trafficking and murder-for-hire gangs, but winning them over would be a challenge.

I love that they use his nom de guerre for the whole article, creating many choice quotes about Microsoft's criminality.

> The FBI was secretly managing the whole company, under the code name Operation Trojan Shield.

tldr The FBI used affiliate marketing to avoid claims of entrapment and embed itself in the European underworld after shutting down Phantom Secure. I actually have one of their Blackberries that I hope will be worth a lot of money one day
> I wonder if OP works in healthcare

No, I work in applied cryptography.

When I joined Amazon, the team I was hired on was called AWS Crypto Tools (which owned the AWS Encryption SDK, among other developer tools), while another team was called Transport Libraries (which owned S2N).

When I left in 2023, they started adopting more of the "Encryption At Rest" lingo for what was previously called Crypto Tools. I don't know if they landed on different verbage since then.

> after HIPAA passed encryption at rest was the buzz word of the decade as it was one of the primary requirement of HIPAA.

Interesting. Thanks for sharing.
Just find people who have never done any drugs, they will have no idea what to expect and the placebo effect will be strong enough. I ate a regular brownie once in college (my friend left it on my door knob as a nice surprise). I was freaking out for a bit, having no idea what a pot brownie was like. Sat down next to someone playing wow and asked them to tell me if I started acting oddly.
Even if you buy your own modem they can push firmware to it (and do). The config file your modem downloads includes a cert that allows the isp to do this. You can flash special firmware (used to be called force ware) to prohibit this.
> For me, doing the right thing is beyond all these things

That...is ethics, no?
1 basically contradicts the whole premise from 6 or so levels above that for majority this does not present any additional risks to their data, because they never delete it anyway.

2 addressed above

"ignoring" non-majirity addressed in Ctrl+C comment.
> But who is stealing data off of servers by taking the server?

Away from pure bare metal, in the presence of bugs in security separation someone could steal data simply by having a VM on the same server as yours. Encryption at-rest with each VM or service/account having their own keys removes the risk of data accidentally becoming visible in another environment that is sharing the hardware.

Though the chance of some useful data being revealed this way is pretty small on large scale cloud installations, and if you are using a cheap VPS host for sensitive data you might not be valuing your data enough.
This is the key paragraph: "The reason for this bunching up of values near 1.0 is down to the non linear perspective divide..."
I've never seen .email in the wild or on a LAN. If it was for servers, wouldn't email-server.local, .lan, .home, .corp, etc. make more sense? And using it as a part of an address like me@server.email seems redundant.
> Vendors who pay bounties often restrict public disclosure, and the professional value obtained from being able to talk about the research you do may be worth significantly more than the payout

Professional value that doesn't translate into money, do you mean? How do you categorise that?
It’s a reference to her proto-SF book The Blazing World.
I understand they can't keep these old devices forever, since they aren't powerful enough to deal with the new codecs (and the constant pings to ad servers). Buying any stuff that depends on a app brings new e-waste every other year.

I set my TV as a second monitor for my PC, with a bluetooth remote control to navigate Youtube and a few AutoHotkey scripts. It will never be obsolete, but it has a rather low WAF...
I think the author wrote it up factually. Readers can make their own inferences, but Cox did share with him that the service he exploited was only introduced in 2023. Which suggests the security team did do some investigating.

I'm sure* they don't keep raw request logs around for 3+ years. I know what next steps I'd recommend, but even if they undertook those, they're not sharing that in the ticket.

(just based on industry experience; no insider knowledge.)
GoogLeNet (Inception V1) – Explained with PyTorch
Westinghouse Atom Smasher
I think it would be interesting if there was a real "free speech" movement, but my observation is that "free speech" in your context just means speech that suits the claimant politically. That's why in an era of "free speech" we're seeing draconian social media and age verification laws in red states; cops being called out to shut down pro-Palestine protests; or a virtually endless list of hypocrisy from folks like Elon Musk (starting with tossing the ElonJet guy off the platform and moving on from there.)
Thank you so much for your kind words! I'm really glad you found Python Morsels useful.
It probably doesn't open up a path to a full proof, simply because Guth and Maynard are excellent mathematicians, and they wouldn't have given away their approach yet if they thought they could prove the full thing.

It's still important because there hasn't been much new evidence in years whether the conjecture is true or false. Now we have some new evidence that it's true.
> Cox seem to have acted like the very model of responsible security response in this kind of situation

It's hard to imagine, but I wish they would have taken advantage of him walking in with the compromised device in the first place.

I once stumbled upon a really bad vulnerability in a traditional telco provider, and the amount of work it took to get them to pay attention when only having the front door available was staggering. Took dedicated attempts over about a week to get in touch with the right people - their support org was completely ineffective at escalating the issue.

Cox's support organization was presented with a compromised device being handed to them by an infosec professional, and they couldn't handle it effectively at all.
Two different design philosophies: indirect (not all wheels rotating at a expected speed for current steering), or direct (wireless sensor in the tire).