skysight-inc/HackerNews huggingface dataset:
> The security concerns apply regardless of Recall existing.

Not quite. Because there is a world of difference between an attacker being able to grab information that is being entered or temporarily present, or permanently present and encrypted, and an attacker being able to, within seconds, grab everything the user ever did, watched, saw, entered, etc. on his machine in one fell swoop:

https://doublepulsar.com/recall-stealing-everything-youve-ev...

Quote from the Q&A Section of the post:

"Q. But if a hacker gains access to run code on your PC, it’s already game over!

A. If you run something like an info stealer, at present they will automatically scrape things like credential stores. At scale, hackers scrape rather than touch every victim (because there are so many) and resell them in online marketplaces.

Recall enables threat actors to automate scraping everything you’ve ever looked at within seconds.

During testing this with an off the shelf infostealer, I used Microsoft Defender for Endpoint — which detected the off the shelve infostealer — but by the time the automated remediation kicked in (which took over ten minutes) my Recall data was already long gone."

End Quote.

And this is THE core problem with such a system, that just hoovers up everything, everywhere, all at once: It creates a single point of failure so critical, it will instantly become the prime target of every attack, because no other target is needed any more.
Is there a good resource I can read about the last point in the article?

> We don't know where the camera will be. For example, we ask players to use the cameras of their mobile devices to explore the size and proportions of a room — to work with the augmented reality helmet. We don't know anything about the rooms, and we can't ask users to use a pattern.

Are there automatic techniques to tackle this problem?
I've seen banks or insurers use DNI as user login.
Threads was a bolt on feature on top of Instagram. It may eventually have the umbilical cut, but I think the only reason it has any traction is because Musk is insane. Had Musk not lit 44 Billion dollars on fire, Threads wouldn't be a thing. So yeah, a black swan in play.
I like this business model, you have to invest a lot of your own money to make a credible report like that, preferably multiple to establish reputation and keep doing that. If the SEC or equivalents don't do that, might as well let private capital hunt down fraud.
Imagine that you killed the engine of a full load cargo train at full speed, is the train going to stop immediately?
> What if I don't have no more free DIMM slots but I already have 1 TiB NVMe and I am fine with my workload being finished slightly (or even noticeably) slower as opposed to not being able to do at all?

Then you obviously have a workload where having swap make sense (and you could even add swap on the fly in such a case). But that is not typical at all.
Open-source vector similarity search for Postgres
Location: Paris, France

Remote: Possible

Willing to relocate: Unlikely

Technologies: PyTorch, SLURM, HuggingFace, Python, C#, SQL, Git, Linux, Vim, solid CS foundations (networking, infra, devops, etc)

Résumé/CV: https://arthurdevnl.github.io/

Email: see website

I'm a final year PhD student that is practically finished but will still need 1 day per week to write/finish my thesis. I'm looking for opportunities as a research/ML engineer. I did 3 years of data science before my PhD + app development before that during my studies so I have a good amount of production/professional experience as well. Thesis is focused on document processing so if you need that I'm definitely your guy!
You don't need Docker, when you have Nix [video]
The reports of the death of google are greatly exaggerated.
Firefox (and I guess Chrome as well) throws aways memory of unused tabs.
Why not tell us about the product in the process.

Lots of the advice here is very general, but it's important to know what your product is before being able to supply advice.

Are there natural networks that would spread your product better than others? Tough to know without knowing what the product is.

As far as blogs, etc. That only works if your customers are reading blogs. Need to know what the product is.

Just because it's a "web product" doesn't make it b2b, so we need more info.

But I think the biggest thing I'm seeing from that you didn't write about what you've built is, to always be telling people about your product, always be learning.

I know it can come of as being a shill sometimes, and I've been accused of that, but if you have a mission of the way you want the world to work, so what if some people don't like that you told them about what you do.

Of course, the best way to do that is to make them curious, not just dump on them every chance you get.

You'll see a very common (though also somewhat annoying) process many people here on HN use, which I'm assuming is recommended to YC companies, it's very formulaic.

"Hey HN, I'm X and I have Y credentials. I had this problem, someone I know had this problem, have you ever had this, my co-founder Z , met when we were doing K (maybe not the drug), and we'd love to ..."

you get the point.
Indeed, maybe musl will finally be the long-term compatible Linux native binary format to one day replace win64+wine.

glibc compatibility breakage is the bane of my existence.

The situation is made worse by GitHub pushing people to build against the default extremely recent glibc in "ubuntu-latest" for binary artifact builds rather than what should be done: building against the oldest glibc possible (you can still do that within a "ubuntu-latest" container).

glibc breaks "version compatibility" at times for the most IMO ridiculous reasons but also has support for running binaries linked against older glibc versions on newer glibc that just gets completely ignored.
Show HN: One-click to find a YouTube video while you eat
I've been there...

trying to find something to watch before your food gets cold,

right when I'm about to devour a delicious, hot meal, I didn't want my food to get stale and soggy while searching for a perfect video to watch...

and then I end up sinking deep into the recommended spiral lost in it's depths,

either the video is too short or longer than an entire movie!

And that's precisely why I've made EatAndBinge — An app aimed at eliminating the hassle of finding the perfect video before your meal turns cold and soggy.

Hope you guys like it and I'm looking forward to your feedback!
efin corporations - It's sad when you see so many cheat regulations and then ask for forgiveness. There should be a concrete impact when similar manipulations are found. From batteries to car's performance...
Seems like an extremely rare circumstance that a person would get a 3rd party repair and then a Google repair on the same phone.
I was thinking of the iPhone where it is shown between camera and depth sensor. Where is it on the iPad?
I would never trust ai to translate things for me.
They're well positioned if that global pivot to EV flops and populist politicians undo all the "EVs mandatory by 20XX" laws. This seems to be what they're betting on.
I don't really understand how executives get away with big compensation. Shareholders/Owners should be getting the returns.

I understand you need smart people with vision, but I imagine you could go to the executive board of any nearly company and get someone for 500k/yr and they will have similar odds of success.
Ha! There you go - a concrete impact. But what about employees that supported this situation?
Seems reasonable. FAA is like: Do no damage to people or property. Don't deviate from the specified corridors and times. Don't have anomalies/fts before you get to that nominal (slightly-sub)orbital insertion. Tell us beforehand if you're going for controlled or uncontrolled reentry. GLHF with the rest.
Wait till you find out the kind of intrusive spyware that got CISO at Meta, Guy Rosen, his job.
293 vs 163.
Microsoft was founded in 1975, Google in 1998.
Extreme greed over Principles.
Also this: https://openrss.org/blog/how-google-helped-destroy-adoption-...
Show HN: I gamified learnpython.org and made a version for kids
I pay for Google One and the VPN was a bad joke from day one even on Android. It was absolutely unreliable, the connection was unavailable or cut randomly. The DNS used were random choice between those of Google and the ISP. This service was unusable even on the wifi in my flat.

It was a disaster when travelling, it was very hard to get it to work with hotel wifi or if there was a captive portal. There are different country lists for "You have access to the VPN service" and "You have access to the VPN service when travelling".

The service does not work in China. The service simply does not work in the majority of cases where it might be needed.

Google has made no effort to improve this service in several years, for their paying customers, on their mobile OS.
ÖVP wants to make Europe world market leader for the internal combustion engine
Ask HN: Why even use any Google services at this point?
Thanks to OpenAI, Google are playing catch up with Gemini and now their priorities have shifted to AI.

I am wondering what is next for Google to shut down after they announced the shutdown of Google One VPN. Google is the most frequent provider that shuts down services than any other service.

Services I can think of that Google might shut down are YouTube, Firebase, Fuschia, Chromebooks, Google Cloud, Google Classroom, Waze, Google News, Google Flights, Google Fonts, Google Groups, etc.

So why even use Google services at this point like Stadia and others if they are just more likely to shut down?

Is it even safe to say that Google itself might shut down?
>The knobs to control how /tmp is mounted, and the handling of temporary files, are part of systemd.

Huh? Someone explain this to me, wasn't fstab the mechanism to define things like this? Why does my init/service manager need to mess with it???
Like air travel and hotel rooms. Even market based approaches like eBay have different prices for the same things. I'm not for dynamic pricing but it's pretty common.
I had a similar experience, for the 2nd time now.

I started solving my own problem, and that got me talking to people about the problem, and then I realized their problem was much bigger and more important than mine.

The first time, I didn't love the problem, we did ok with it, but we didn't pay enough attention to the user, as we wanted to find a better use case in the same space. The company was acquired, so not a loss, but not a big success.

This time, we love the problem (sleep),love the customer (the sleep deprived), and this continues to lead into more and more opportunities.
Assuming that this is a real issue that should be fixed in the standards (which I don't agree, btw), I think the month should use a separate set of symbols to be distinct, which sadly implies some kind of additional knowledge besides from Hindu-Arabic numerals (but not necessarily English). A compromise can be also made if we all accept that month numbers can be arbitrary, e.g. 33--36, 43--46, 53--56 for 12 months. Prefixes or suffixes wouldn't work well because people would then confuse which one is month and which one is day of the month; by using an entirely different set of month symbols, a fresh connection can be made instead.
This one's got an overview of what EUV is starting on page 32. Interesting reading even if you aren't interested in the market play.
The 'end of the world' scenario isn't perhaps something that we expect. We always think the end of the world will be disease or natural cataclysm. Also, humanities curiosity can't help itself.

* Imagine AI giving a terrorist network a recipe for the most toxic nerve gas ever discovered. (This has already happened to AI researches)

* Imagine AI being used for deepfake propaganda inciting a war between superpowers. (This is arguably already in progress)

* or it could be the usual sci-fi classic of an AI intelligence becomes superior to humans and just takes over (using the above methods and more).

AI has the ability to be completely undetectable and incredibly insidious. We could be destroyed by a force we don't even notice.
2000-2020: "How could an AI escape from its server, just say no."

2023: "Why isn't this AI research company that says the models are potentially dangerous in the wrong hands, not letting me download the models?"

OpenAI can switch it off… in theory. In theory, the Soviet Union could have "just switched off" Chrenobyl. In practice, the emergency off button made it explode, and other reactors on the same site had incidents both 5 years before and 5 years after the famous one.

None of the downloadable models can be "switched off" remotely, any more than we can force people to stop using buggy software.

And you would need to have that capability — was it called EvilGPT or ChaosGPT, the one explicitly tasked with trying to destroy the world? Because people absolutely will keep pushing that particular button until it actually works: some because, like you, they don't believe it ever will and wish to mock the idea; others because they are actively misanthropic.
> Using a programming language that you enjoy or you feel strong about is a much better choice

I enjoyed every single programming language I encountered and decided, or was compelled, to learn. Starting with BASIC, then Pascal, Assembler, C, VB, C#, F#, Java, Javascript, that followed by the plethora of "script" langs — Coffeescript, Typescript, Livescript, IcedCoffeescript, GorillaScript, etc. After that came Python and Haskell. Almost every book promised unbelievable riches and magic with this new (to me, at the time) language. Sooner or later, though, the long honeymoon would come to an end. At some point, while dealing with yet another clusterfuck of a project, I began to feel that I was simply not a good programmer and that I would never become one. Then I discovered Lisp. Somehow, inexplicably, things started making sense. Shit that confused me about Haskell and Prolog, I for whatever reason have started to grok, or at least I felt like it. For the things I build today, I use Clojure(script), Fennel, Elisp and CL. Even when I'm required to produce code in a different language, I still first prototype it in a Clojure. Not because I'm obsessed or blindly in love with one specific programming language, but because for the applications I'm building today, it makes sense — for me. I wouldn't argue that it would make sense for everyone, no. But for me, it does make sense. Today. Tomorrow that may change. Any given programming language is very unlikely to make you ten times more productive or accurate, yet it may provide you with even greater satisfaction. How? By allowing you to build something you love with it. Build something. Anything. And keep building more. And if you don't love it, rebuild it in a different language until you do.
There are still no better alternatives, but the market is very ripe for some kind of new search paradigm. When it comes Google will lose it's share overnight.
Similar to a situation I lived in the past where a security engineer implemented weaknesses while reviewing environments for companies...
Introducing OpenAI (2015)
but its rarely gb at the same time. Thats the point. Its a dumping ground for stuff thats not used very often. meaning that you can have a bigger VFS cache, which reduces latency
Hey, people make mistakes. The correct solution would be to never use wechat in the first place.
It lists Internet Explorer right there?
How many years from now will Gmail be on that chopping block?

“We’re shutting down Gmail, here’s an export of your inbox. We promise to forward your email for 5 years.”
> Is it even feasible to provide gnu binaries?

It depends on one's definition of "feasible", I guess.

Building against the "most recent glibc pushed by GitHub" doesn't make it feasible but building against an older glibc (which you can still do on a container which is otherwise using a recent glibc) is at least somewhat feasible.

The primary benefit from building against musl is that it "coincidentally" means that even the people who don't care at all about supporting older systems end up doing so "accidentally" due to their desire to use musl (for, presumably, some other reason).
I don't understand.

Can I get my data back? Can I retroactively avoid surveillance by US intelligence services? Has the data transfer stopped?

If the answer is "no" eact time, then please explain how the court ruling impacts me.
The random punctuation sort-of defeats the point, doesn't it?

Otherwise, I agree.
I wanted to do 3 year puts on Tesla, every 6 months.

I would have done fantastic, but I didn't have the 30k/buy it took to pull off the deal. For the same reason, 100 shares were needed.
Yes.

Please realise that things that can be evicted from RAM include the code and static data for the programs you are running. If you switch off swap, then you are disqualifying stuff like data pages that a program will set up on process start and then never touch again, which is sometimes a distressingly large amount. That then uses up RAM that could be used to provide a more responsive system.

The ideal contents of swap are those data pages that are never going to be touched again. On a normally running system that doesn't have massive memory pressure, that is basically all that will make it into swap, and that's fine because those genuinely are pages that you won't need, and they aren't causing the problems with alt-tab.

What probably is causing the problems with alt-tab are one of two possibilities. Either the system is over-burdened and it is having to swap out large amounts of working set (to which the solution is to install more RAM or reduce the load, not switch off swap), or you have been transferring large amounts of data through RAM, causing the disc cache system to evict parts of a program you haven't used for a long time in favour of these files that another program keeps loading in (and switching off swap won't help much with that either, because the system is being quite happy to evict parts of that program that aren't anonymous pages - a solution is to get the program that is handling lots of data to ask the OS kindly not to cache certain things, if it for instance knows that it will only load them once).

I do think that Linux's behaviour has improved massively over the last 10 years or so. A lot of these myths about swap were created before the improvements, and we should stop believing them.
> it has a bunch of limitation and hard to handle cases

So does any layout-based remapping, and I've mentioned some of the limitations. But also your link says it's a universal layout (e.g., Mac) limitation, not ukulele's, think Ukelele "just" produces mac-compliant plist files, which can be edited by hand

> remapping a layout for win11

Have the dlls from the ancient microsoft keyboard layout editor stopped working in Win11? But also there is this more powerful (but paid) app kbdedit

> I don't want delays,

I got it, you use delays to differentiate, but then what mechanism does a simpler keymapping approach use to differentiate?

> I'm just remapping a key to have a specific action when pressed alone, and other actions when pressed in a combo.

I had those in Karabiner and with Karabiner elements (also with Cmd, and precisely due to the fact I can use delays that aren't available to the the keymap files I can have quick tap Cmd act differently vs a long tap/hold), so still not clear what specific functionality has disappeared and how this is connected to the level, KE installs its own keyboard driver, so is in full control for recognized keys and can do more than a layout due to the fact that it has more info to work with
How many eyes can understand an inscrutable pile of matrix weights? We're not even all on the same page about the capabilities and usefulness of these models, or even which tests usefully measure those things.
For the same reason Apple operates Private Relay. Google also cares a tonne about state censorship blocking access to its web services.

A refresher: Google runs world's largest public DNS resolver, builds a browser used by 3b+, and an OS by 2b+. If they need to harvest data, they most certainly don't need a VPN (and may be that's why they killed it).
- HSTS forced by default by Chrome, sorry if you wanted to use http://yourdomain.dev, HSTS forces HTTPS.

- If you have a self signed cert (like Traefik or Caddy for local HTTPS dev), you will get the "not valid cert" browser warning, that one that in any other TLD you know more than your browser and click the "ignore warning and let me use the website", with .dev that button does not exist.
Warren Buffett Controls 3% of the Treasury Bill Market
Google shuts down services that lose money or that aren't big enough.

Google Cloud is a huge business, as are YouTube, and Chromebooks. Firebase is big enough and is a feeder into Google Cloud.

Many of these other adjacent businesses help Google to know more about you to make more money from you.

Google is a LONG way from shutting down. They are still printing money. It's like asking if Microsoft would shut-down when linux was gaining traction in the server space.

Though search is their bread and butter, they haven't ignored AI, they know what's at risk. In fact, they bought DeepMind before OpenAI existed. Are they on the back foot, a little bit, but you're calling this at Mile 1 of a 100 miler.
I'd imagine latency matters more than throughout. Complicated disk operations over my 10Gb fiber network still sucks like it did over 10baseT 30 years ago. Maybe there's smarter ways to set things up but NFS/sshfs is still bogged down for me. 1/5th - ~1/100th depending on the application.

Also I don't have fancy money. I was imagining the $20 gear on Amazon/eBay. Maybe that's my problem...
There are many, many ways to construct the trade to limit the downside risk.
> At this point, you realize you can now introduce a synthetic key and you're fine.

Except for having to update all foreign references. Some of those may be external further complicating issues.

Emails are often among the worst keys because they are not terribly stable and they are reusable often enough to burn you.
Capitalism is not the issue here, but what happens when any large entity gains enough power.
Early stage communism would not be what I would consider a bastion of privacy, either.
Can you fault them when that's what NordVPN and others claim in their YouTube ads?

Tom Scott said it better than I could: https://www.youtube.com/watch?v=WVDQEoe6ZWY
My experience is opposite.

Linux (long ago) always became unresponsive when running out of memory with swap. Removing the swap solved this problem and it remained perfectly responsive when running out of memory.

I have no longer used swap for many years, so I do not know the current behavior with swap, but I have seen out of memory cases on modern systems without swap and I have never seen again a case when the computer becomes unresponsive.
It doesn't work that way - and if it did - it's absolutely acceptable in most, if not all systems. A year to "break something" is absolutely considered secure in risk management of larger systems.
> First-class functions especially are is the killer feature you can't live without anymore once you tasted it.

Wouldn't it depend on application domain what's a killer feature & what's not?

"Include if lightweight & very useful" seems appropiate. But what's considered "lightweight" varies depending on who you're asking / where you're looking, doesn't it?