skysight-inc/HackerNews huggingface dataset:
A lot of these social media promotions work by having people with high follower counts blast you out and try to get their followers to follow you.

The problem is that it is not an audience that would normally be interested in or engage in your content naturally. There are often artificial incentives to follow or engage in someone's content. Often there is some kind of prize giveaway from a "celebrity", that you have to follow everyone on a list to qualify. That celebrity then gets paid to blast out the promotion.

Then after the promotion all of a sudden your massive number of new followers aren't engaging with your content anymore. What are the algorithms going to assume now? Naturally that your content is no longer any good.

It's common for influencers to share screenshots of their analytics or publish them on their websites for people looking for influencers. While the numbers might look impressive, unfortunately, due to how the algorithms work -- mainly things like vector embeddings and placing influencers in a some high dimensional space, the algorithms no longer target and recommend your content to an audience that would be interested.

It used to be that brands would look at your follower count and see how many likes / comments you were getting, but even this is faked now. As your engagement (likes / comments as a percentage of your followers) goes down, they are sometimes artificially propped up by purchasing likes and comments. This worsens your engagement and leads to an endless downward cycle.

While someone might survive for a short while as an influencer using these black hat strategies, brands will be unlikely to use you again if they have not seen tangible results.

Also, if you intend to sell a product or have a certain ideal customer avatar you are trying to market to, it makes sense to do as much as you can to get engagement from that (and only that) demographic.

Follower counts might look impressive on the surface but what ultimately matters is whether you see conversions for your business / brand.
Observations can be made without research.
What doesn't alter brain chemistry? Spooky title, but no, really, the thing we've spent millions of dollars on making addictive is addictive?

Internet addiction is a dirty word for "user retention."
Not to mention that they're using MD5, people have been recommending against for over a decade.

For the Bcrypt results waswas "99 years" even for an 8 character password (and with a work factor of 5, compared to the default of 10 in most libraries) - but that doesn't make for a a very good clickbaity headline, so they don't really talk about it.
Another reason to not use ISP provided hardware. I have never had issues using my own OpenBSD box as a router.
Main takeaway: That extra CO2 acted like a buffer keeping the particles closer to a neutral pH, where respiratory viruses are quite content.
Agreed, which is why the next part of my sentence went on to say "nobody even noticed because that now seems like such a low bar for where we'll be in a few years"
I think it would alter the entire safety discussion that was started.

Let's say a company creates an automated system based on a curve fitting algorithm. Then things go wrong. Now it is quite easy to say the company is responsible for any damage and must pay for the rectification.

When we say an AI is deployed and things go wrong, we have a sci-fi movie and responsibility is somehow magically moved away from the company that deployed the algorithm.

To me it feels that "AI" as a term is a clever marketing term that companies will use to deflect responsibility. And I think it is one of the reasons why Open AI, Musk and others pushed this AI safety non-sense.

The aim of calling it "curve fitting" or something similar would be to take the magic out of it so the broader public doesn't get confused. I think that's worthwhile.
If you're standing outside holding a phone up to your face, you have 2 things close (hand/phone) and everything else (trees, buildings, cars, furniture, animals, etc) around you is not close.
I didn't understand the Renard Numbers tangent until realizing it's the same principle of exploiting "usage tolerance": He replaced the 400 different cable lengths with 17 "standard" cables that can be stretched to any of the desired actual lengths.
The choice of numbers ensures that the "stretch", i.e. error never exceeds a certain factor.
Show HN: Weekend project solving 333B emails issues
More than 333 billion emails are sent and received daily.

Your current inbox

45.6% are spam, with a carbon footprint of 0.03g of CO2e per spam email. Marketing emails constitute 36% of spam, adult content emails make up 31.7%, financial emails account for 26.5%, and scams represent 2.5%.

Alternative inbox with hi.new

hi.new takes that 45.6% spam away one at a time, starting with marketing emails that make up 36%. You choose who you want to contact you, which emails you want to get in your inbox, and what to reply to.

We built https://hi.new as a weekend project, but it has become so useful for spam protection. Would love your feedback
If you're templatizing manifests, kubespray does this pretty well I think. At least for the basics, it's pretty helpful so far. But indeed, I'm looking into deploying more things with Helm if possible.

Most services I've been using so far offer official Helm charts. But I get your point, it can be cumbersome and if there isn't an official one, then they can be pretty undocumented / hard to work around.

I haven't used CDK, but the concept is definitely similar. I think Pulumi most likely has wider support, since it's based on Terraform and even if you don't have a provider available on Pulumi you can "port it" (although never tried it, not sure if it works well). I like how it stores the state for you and secrets as well, saves quite a bit of trouble.
How Britain Built Its Top Secret MI6 HQ [video]
You can only extract profit from the margin of efficiency your capital adds. If people can artisanally make ice cream for $1/cone, and a million-dollar factory can make it for 10¢/cone, you can extract some portion of that 90¢. If the efficiency gains aren't large enough or you don't pass enough of your gains on to the consumers, you'll just out-competed by the artisans. So it's unfortunately the biggest innovations that hurt workers and benefit consumers the most.
The BBC quote says "a would-be hacker". I interpreted that as a general claim about windows security, not saying that this particular feature is invisible to malware. They have to break the security of your particular device, the data is nowhere else.
This article has some more context in regard to the AI-enabled PCs.

https://www.cnbc.com/2024/05/20/microsoft-qualcomm-ai-pcs-sn...

> The company on Monday announced a Surface Laptop and a Surface Pro tablet with a Qualcomm chip that can run some AI tasks without an internet connection. Other computer makers like Lenovo, Dell, HP, Asus, Acer and Samsung are also launching AI-ready PCs powered by Qualcomm’s Snapdragon X Elite and X Plus processors, which promise longer battery life and will run Microsoft’s Copilot AI chatbot.

> Device makers will release PCs with AMD and Intel chips that will adhere to the Copilot+ standard at a later time, Microsoft said during a press keynote address on its campus in Redmond, Washington. The PCs will be able to translate audio, recommend responses to incoming messages and suggest changes in the Settings app, and even talk with people about what’s on screen.
It does lag, but it still seems way faster than any other steering system turn lock-to-lock.
AFAIK, it used to be that parts binning was used to sort parts by tolerance. So the 5% bin wouldn't include <1% parts because those were already selected into the 1% bin in the factory and so on. Is it still like this?
Yes, I would consider that indication that a human looked at it. Unfortunately, for many bugs (not kernel related) I have never seen such an indication.
and tech companies avoid paying tax in many countries through dirty accounting tricks, such as redirecting their profits to tax havens like Ireland.
Very click baity and not good journalism imho. Starting with a "A GeForce RTX 4090 could be cracking your password at this moment." tag line only to later note:

> With bcrypt, the hashing times soared. While the GeForce RTX 4090 only took 59 minutes to crack an MD5 hash, the same graphics card would need 99 years.

It's 2024 and if your password is still being hashed with md5, the news are: Your password could have been cracked 10 or more years ago already. Nobody sane uses that anymore and bcrypt still stands the test.
i'm also curious but my understanding was MNIST pixels are not binary due to some postprocessing artifacts
That's like saying chemistry has nothing to understand because we know Schrodinger's wave equation. Or that we understand biology and psychology just for for the same reason.
The label password is terrible. It implies that a single word is sufficient.

Something like secret or key would probably have been more appropriate in hindsight.
> When do you have a password in plain sight?

When I generate a new password.
> Compared with previous-gen ARM Cortex-X4 CPU cores, the new ARM Cortex-X925 CPU core brings up to a 36% boost in single-threaded performance boost, as measured in Geekbench, up to 50% more TOPS for AI performance, and 41% faster time-to-first-token when running the tiny-Lllama (Q4) AI model, compared with

> ARM says these new CPU cores are based on ARM v9.2 architecture and ready for manufacturing on a 3nm process node, and support single-core CPU speeds up to 3.8 GHz.

Are they available or not ? If not, how were those "benchmarks" run ?
It's maybe too snarky a sentiment for HN, but in all honesty I had the same reaction to the headline. The author of this article definitely could have chosen something a bit more compelling.
They do energy sector stuff as well. They've invested in several big hydropower projects over the years and a number of fossil fuel plants. I believe in the past year or two there's been an effort to refocus the projects towards clean energy as well, calling it the "Green Silk Road."

Of course, it appears somewhat controversial how successful these projects have been.
Recall is just a massive trove of data and there is no single way it can be abused. For example, key loggers are extremely noisy (bunch of keystrokes being dumped into a log) and an attacker could use the data to see when the last time the user logged into their password manager was to narrow down the search.
Well almost all my soda consumption nowadays is tapped from a keg that is stored in a kegerator, which has ended up making me kind of irrationally happier than it should.

I make my own a lot since that's considerably cheaper and generally pretty fun: https://news.ycombinator.com/item?id=40578693

If I'm not feeling as ambitious, I go back end forth between a caffeine free diet root beer (https://www.webstaurantstore.com/boylan-bottling-co-5-gallon...) and occasionally Diet Caffeine Free Coke (https://thetastetrade.com/products/caffeine-free-diet-coke-s...)

A 5 gallon box of soda syrup makes 30 gallons of soda, so the diet root beer ends up being about $3.30/gallon, with the Diet Caffeine Free being almost exactly double that price. I've been looking to find suppliers to find cheaper rates but both Coke and Pepsi get bizarrely indignant if you're a non-business consumer asking to purchase a box of soda syrup.
Lol, yeah sure. I also hear Tesla is a lock to have actual full self driving by 2016 at the latest. I'm holding my breath!
Indeed, early observations and unproven hypotheses are part of how we decide whether something is worth researching in the first place.
> "Troy, Assyria, Babylon, Macedonia, Carthage, and Mesopotamia would like to have a word with you on that point. Or they would, if they hadn't been completely wiped out."

Rasczak, that you?
They think she’s a drunk, she says she isn’t, the easiest way to find out is ensure she can’t have alcohol. Not that hard to do at a hospital! Seems like a simple idea to me.

Remember, it took several visits to figure this out, and no one even tried this simple thing to suss out if she was truly an alcoholic.
I live in an apartment and around many others, all of which have chargers. YMMV.

Also, the number of level 2 chargers is massive. Download PlugShare and look around. And Superchargers and Electrify America chargers are common. It's really not hard any more.
Seems like there would be applications in sports.
AND that site has to be using unsalted MD5 password hashes, in which case you were already doomed
Great writeup. There's just one thing I don't get: the auth part. It seems the author managed to access protected endpoints without any auth, by just repeating the same request over and over until the endpoint randomly accepted it. The part that confuses me is, how could that possibly happen? What possible architecture could this system have to enable this specific failure mode?

I struggle to think of anything, short of auth handling being a separate service injected between a load balancer and the API servers, and someone somehow forgot to include that in autoscaling config; but surely this is not how you do things, is it?
that's what I was thinking... stress alters brain chemistry, falling in love, eating sugar, meditation, sports, and basically anything you do
unmaintainable is a weird word used far too much. There are genuine ways it can become unmaintainable of course but the main use I have seen people use it for is "I don't want to understand it and would rather rewrite it"
Your argument is resorting now to a very crude defense of white lies and Pascal Wagers.

Not only this is borderline unethical to be used as support for any serious, national-level health policy, it is also bound to backfire and create even more suspicion from those who are not ideologically aligned with the Government du jour.

In other words, if your health messaging is hiding crucial details because more information "is less effective" (at what? Informing or getting people to comply to a certain pre-defined plan?), then don't complain later when people share videos online about "what they don't want you to know".
Hey Ehm short questions: didn’t .new have a requirement for the usage of the TLD?

e.g. example.new should forward to a website that allowed to create examples?
Brazil jumps two places, becomes ninth largest economy (2023)
They all have collectively determined that the best course of action for humanity is for AI not to exist.

"A strange game. The only winning move is not to play. How about a nice game of chess?"
CSGO hysteria and forgotten TF2 design
family.cards | Senior Android Engineer | Berlin, Germany | hybrid (50% per month) | full-time | https://family.cards | 60k-85k + ESOP

We're a startup building a device which gives seniors access to the digital world, with a card-based interface. We're looking for help with our main product, which is based on Android. Everything's built on Kotlin, rabbitmq & multiplatform compose for the companion app. Bonus points for experience with: BLE, IR, HDMI CEC, NFC, Swift (for the companion app), ansible, German.

If you're interested, send me an email at simon@family.cards
> I interpreted that as a general claim about windows security

Sure, because you understand that the other interpretation is nonsensical. All the publications that are popping up showing that the Recall DB is locally accessible are aimed at all the other Windows users.

Now, I would fully agree if you question what's the benefit of posting this on GH and not on FB, for example, and what's in there to surprise the HN crowd.
Generally speaking you can divide attacks like these into two types, online and offline.

In an offline attack, the attacker has somehow gained access to some encrypted and/or hashed secrets, and they're trying to break the encryption or reverse the hash. There's nothing getting in their way except for time and compute power.

In an online attack, there is some system in between the attacker and the target, like an authentication server, that can implement stuff like fail2ban, captchas, rate limiting, etc.
/var/tmp, IMO, shouldn't exist--the idea of temporary files that should persist beyond a reboot is tech debt, those files should exist under a proper /var/{cache,lib} directory. Podman uses this directory and it drives me nuts.

The XDG base directory spec (https://specifications.freedesktop.org/basedir-spec/basedir-...) was supposed to solve all of this...
Just a *.ourpubliclabdomain.com cert. I'll look into ACME DNS + the Caddy plugin. Thanks!
The replies already posted are quite good. Let me explain it a different way:

When light passes through the atmosphere, it undergoes a convolution known as a point spread function (think of it as convolving the signal with a 2D gaussian that spreads the intensity out to neighboring pixels). If we know that PSF specific details, we can deconvolve the image, either computationally, or by modifying the mirror in real time.

From my understanding, you can project a laser into the atmosphere, where it gets affected by the PSF. When you look at that laser projection, you can find the PSF (because you know the input shape of the laser, and what it looks like after being affected by the PSF), and therefore use that in real time to deconvolve the astronomic images you are collecting.

This process can be done so quickly it can adapt to immediate changes in the atmosphere (turbulence). "Enhance" is definitely a thing- it's widely used in both telescopes and microscopes (and if you had the right priors for a blurry photo, you could do it there too).

I think this is a relatively simple read:
https://en.wikipedia.org/wiki/Laser_guide_star
along with https://www.llnl.gov/article/44936/guide-star-leads-sharper-...
They said it "should" go down, but that another comment saying the worst case is the same is "also correct".

I do not see any "complete nonsense" here. I suppose they should have used a different word from "tolerance" for the expected value, but that's pretty nitpicky!
blog post:
https://www.teamfortress.com/post.php?id=4410
While I generally appreciate Debian's careful approach (it is my go-to distro if I want things to be predictable with minimal upgrade frequency), it always blows my mind to watch open-source communities bury topics like this in committee for twelve years while commercial OS's just tend to go "It's better for the end user. Here's some money. Make it work. If it breaks some key software, make it work."
As in: not that google decides to remove the domain, because you did not follow the requirements thing and only as “wasn’t there something” from my side.
"Your privacy is very important for us" when they were pushing me to accept the cookies on the Edge home screen.
I've grown to really prefer the taste of the diet versions of soda, but I will agree that Diet Coke is an entirely different thing than Coca-Cola.

The Dr. Pepper Zero Sugar really does a pretty decent job approximating regular Dr. Pepper, though I can still taste the artificial sweetener in it. It doesn't bother me, I like the fake sugar, but I suspect that the taste might bother some people.
I agree completely. The AI rush feels exactly identical to the cryptocurrency rush where people saw a novel technology and started trying to find a problem to solve with it. It feels like it's going nowhere fast, at least to me. The overlap between tasks that are important, time-consuming, amenable to AI and also non-critical enough that I can tolerate serious errors in the output seems very small.
You interpreted a statement about saved screenshots in an article about Recall as a general claim about Windows security even the general public would know was false?
Reminds me of Rundeck and the time we were trying to build something similar. There are more modern take like fiberplane and moment.dev. Not sure about their adoption.

At one point, we were building something like this on top of kubernetes. I think tech is the easy part here. Getting people to leave their existing workflows and use your product is hard.

Secondly, difficult part of our journey was integrations. Until you have integrated all the tools an org uses, product is useless.

Thirdly, it is great that there are building blocks, but users understand use cases. So, expecting end users to build playbooks themselves is tricky. There has to be an intrinsic motivation within the platform.

Fourthly, it is super competitive space if you see it from an internal tool building perspective. There are lot of internal tool builders like appsmith, retool, tooljet, django admin you are competing with where you could run bash scripts, sql queries etc.

Best of luck, with you journey.
> I checked Find My and my phone was indeed in China. It looked like it was in an office building conveniently located around the corner from an Adidas store, about 8,000 miles from me.

You’d think for a police state, China would be just little bit better at cracking down on obvious crime that happens within their borders. But I guess not.
HT really only benefits you if you spend a lot of time waiting on IO. E.g. file serving where you're waiting on slow spinning disks.
If the app is opensource, Qt is 100% free under GPLv3.
I briefly flirted with a Japanese keyboard just to get the extra keys that they have (next to the space bar which is much smaller) I then remapped those keys to other more useful commands.

I then discovered VIA/QMK keyboards and now I have keycaps I can't even see on my vertically mounted split-key keyboard and more programmability than I know what to do with. But in 2012, a Japanese Keyboard was much cheaper than a Kinesis and to me the only option.
> All the publications that are popping up showing that the Recall DB is locally accessible are aimed at all the other Windows users.

See, that's the thing. Proving it's locally accessible...

Microsoft never even implied it wasn't locally accessible.
Being a mostly-digital electronics guy, I think 0.1, 1, 10, 100, 1k, 10k, 100k, 1M and 10M is a perfectly fine series for pretty much any usecase.

Sense resistor? 0.1 ohm.

Resistor for an LED: 100 ohm

Pull up resistor: 10k

Bias resistor for some mosfet gate: 10M

Voltage divider to measure the battery voltage with an ADC: two 100k resistors.

It's super rare I need anything else. I hate fiddling about with switching the reels on the pick'n'place anyway.
Going by the footer on the Polish version (To which I was instantly redirected), this is the same company operating multiple domains.
If anything, this approach shows how good a system passwords are. The downfall will be cheap quantum computers; it seems like we have some time until those are available.

An A100 is about $2/hr, so cracking even a "basic" password hashed with bcrypt is going to cost a cool $24M in GPU alone. Most people concerned about this kind of attack are using a whole lot more chars. Apps should not be using MD5, use pbkdf2 or bcrypt.
Brazil has recently surpassed Italy in terms of GDP
No, there are real people with real problems on there. I’ve met many and talked face to face. People are struggling. We’ve been building networks. Things are changing.
In addition to `/tmp`, you can put your `~/.cache` on `tmpfs`.

Laptops have ridiculously large amounts of RAM nowadays. My Linux laptop setup barely makes a dent in the RAM, even when running 3 different Web browsers and other gluttonous desktop programs. `tmpfs` is a great use for excess RAM, reducing wear on SSD. (I also disable swap.)

I've also done things like build an entire large ecosystem of packages in `tmpfs`, when the build server happened to have mirrored 10krpms drives, and I didn't want the tons of intermediate files to eventually be synced to disk. (Even though, with disk, they would also probably hang around in Linux filesystem buffers, not reads hitting disk each time.)
The Russian Momentum Is Back
Jamming: https://youtu.be/gk7D_TliAuE?t=473

Ohshit: https://youtu.be/gk7D_TliAuE?t=928