skysight-inc/HackerNews huggingface dataset:
Having written an SSH server that is used in a few larger places, I find the perspective of enabling these features on a per-address basis by default in the future troubling. First, with IPv4 this will have the potential to increasingly penalize innocent bystanders as CGNs are deployed. Worst case, this will give bad actors the option to lock the original owner out of their own server if they have a botnet host in the same network. With IPv6 on the other hand, it is trivially easy to get a new IP, so the protection method described here will be completely ineffective.

From my experiments with several honeypots over a longer period of time, most of these attacks are dumb dictionary attacks. Unless you are using default everything (user, port, password), these attacks don't represent a significant threat and more targeted attacks won't be caught by this. (Please use SSH keys.)

I have seen experienced sysadmins create the test user with the password of "test" on a live server on port 22 because they were having an "autopilot moment". It got hacked within 20 minutes of going online and these mechanisms wouldn't have saved it, the attacker got in on the second or third try.

If you want to have a read about unsolved problems around SSH that should be addressed, Tatu Ylonen (the inventor of SSH) has written a paper about it in 2019: https://helda.helsinki.fi/server/api/core/bitstreams/471f0ff...
I hope it can be uninstalled altogether. Actually I wish it was a Microsoft Store app. I mean, I don't want that codepath dormant in my OS for malware to enable via a Windows Registry value or whatever. No, not a screenlogger please.
These idea kill two birds with one stone: they stop global warming, and solve the threat to fossil fuel companies from cheap solar energy.
some people perceive beauty as alien and if burdened with competitive mindset, they seek to destroy it
This isn't new technology. Apple has had "Rewind" for some time, which is basically the same thing, and it's widely used.

The major difference is that it's a 3rd party software, not bundled with the OS, and you would have to intentionally go out and buy it and install it.

Microsoft has just taken it for granted that everyone would want this and then forced it on everyone.
Just go to Windows Central, and you will get a couple of editors shouting exactly that.
Security nightmare aside, it seems like it would be handy all the time. Surely everyone has had trouble finding a website or document or email again, days or weeks later?
Depends on the compliance. If this monitoring sucks up any personal data (I don't mean employees' data here—personal data owned by anyone) there are erasure and data subject access requirements, for instance.
None of those arguments have held up over the last 10 years. RISC-V has all of the things they say you need.
In this context, "luxury" is being used in it's main definition:

> "the quality possessed by something that is excessively expensive"
“Define election?! Are you trying to start a civil war?”

That people think this is safe AI is hilarious:)
The Earth radiates an enormous amount of heat away into space(in fact the same amount that it receives from the sun), so all we really have to figure out (for a quick fix) is how to tip the balance negative enough to offset the additional warming from greenhouse gases.

Long term we need to stop the greenhouse effect, but things are getting dire way faster than even the most delusional optimist could forecast reversing emissions.
You may save money by purchasing the nothing that we have to offer!
I've been using the "developer" Gemini at https://aistudio.google.com/ instead of the "consumer" Gemini at gemini.google.com. It's much better since it runs with fewer guardrails and you can tune the safety settings up or down. Even on max safety settings, the dev Gemini returns the correct answer even while the public Gemini fails.

If you're using Gemini for anything serious, I would recommend the dev model. In my case, I was researching ancient Greek myths using original Greek & Latin texts and the dev Gemini was able to provide useful translations and alternative interpretations of ancient R-rated Greek myths.
Sumo is awesome. I personally have been using to create full concept albums song by song.

Combine this with distrokid and anybody can really be a rockstar.
Nobody should be eating them on the regular, but damn those McGriddles (with the syrup baked in) are tasty. Often 2-for-1 or heavily discounted via the app.
The difference to RNNs is that the state in SSMs is a linear combination of previous inputs, which makes it possible to parallelise training in various ways.

Gates and non-linearities in RNNs allow the state to be "any" function of previous inputs.
Company-wide internal push to shoehorn AI into every product and service. All recognition and rewards are given to the sychophants, no matter how ludicrous their proposals.
Even Principal and Senior developers are dragged into meetings with senior leadership to provide suggestions on how AI can be used in their microcosm. Whether it should be used is completely out of the question.

It’s a complete circus right now. Plenty of us just ignoring it and opting-out but it might reflect on our bonuses.
Show HN: Rofi-desktop, a desktop environment built with rofi menus
"It says we can do these things you're concerned about, but we promise we don't yet. Also, it said we could do them before, too. So what's the problem?"
Or get a family password....
It could be handy if the data was stored locally and was managed by the users.
I had to cheat and look at the examples page -- it's part of the Dr. Pepper logo.
>>you're flipping properties, it was your winter vacation house, or you're actually spending your life in the Bahamas

So, you are saying that people who do any of those things should be subject to arbitrary confiscation of their property or rights to it?

NO, that is absurd and obscene. Everyone who has a second property is not wealthy to the point where it doesn't matter. I know many people who have remote properties that they visit intermittently or seasonally, who struggled to earn and invest enough to make it possible and have spent decades working on and improving the property. In some cases, the value has increased greatly, and in others, it's still just a remote camp on a remote wild spot.

Under what ethical reasoning should they be deprived of their property? Particularly, that they should be deprived of it randomly and at the whim of squatters? (e.g., if society decides that no one should be allowed to own a second property, then we should pass laws to outlaw and/or tax them out of existence in an organized way; there's no justification for arbitrary taking)

EDIT, add:
>>You're arguing for having professional home renovators,

No, this does not necessarily mean professionals, it means anyone doing it repeatedly or at scale, including a lot of semi-pros. Professionals and trades are often involved. And once you do it a few times (I know people who have done some), you do get economies, efficiencies, and knowledge that makes things both more economical and have better outcomes than the average homeowner/first-timer can do. I still don't see the argument against flipping a house (except for bad jobs, which homeowners can also do), and certainly none that says anyone should be subject to arbitrary confiscation by squatters
<< I really don't understand this line of thinking. What was cracked? That the database is readable, unencrypted? How could it be encrypted and usable at the same time?

I am admittedly mildly confused by this response. Do online portals typically use unencrypted passwords? Do they let data flow unecrypted? Are those portals somehow unusable?

Could you elaborate a little bit? It is possible I am misunderstanding your point.
But what are they actually used for? The only things i heard about freemasonry were from conspiracy theorists. But i never really found out, what they actually do. And the secret handshakes are performed with strangers to tell each other secretly they're unknown brothers?
COVID also gave us clear knowledge that it is easy to define socially necessary labor. Most jobs out here in the USA are downright bullshit jobs, and our 'labor' only contributes further to the current ecocide.
I guess you could, but what would you gain? You can't dissipate the heat until it reaches the heatsink anyway. And for bursty workloads you might not even know whether or not you're going to need it. The point of the thermal solution is just to keep the chip from throttling or destroying itself, and direct measurement is plenty quick enough to accomplish that.
Right, much easier than a password! And so easy to backup!

I'm not arguing it isn't more secure. The point of this subthread is that SSH keys are not as easy to do ad-hoc as passwords, especially when moving workstations.
It’s very broad. Baha’i.org is a good start
It would actually be a fantastic name if this were a real concern. Imagine, a well-known feature to mask any searches of a product recall. The only problem with this theory is that computer QA is so incredibly shit that the concept of a recall more or less doesn’t exist in the first place.
And moving cryogenic fuel around is a frequent source of problems. You can't scrub re-entry because a valve is stuck like you can a launch.
fwiw Element and Element X support UnifiedPush & ntfy on Android these days, so you can avoid routing everything via FCM/GCM/C2DM or whatever Google's push system is called these days. There isn't an equivalent on iOS yet though, so if you want to use your own push server, you have to build your own IPA.
Yes, reading it made me realize that it was far worse than what I thought too.
Yes, it's a really tough thing to manage this whole Recall thing philosophically and it makes me concerned about this OS. Even if MS is backtracking somewhat, they have shown their cards now and how they prioritize positioning themselves as an AI company above even rudimentary privacy. It's hard to just regain trust as if nothing happened.

I'm considering Linux with a Windows VM for Visual Studio. I've had my Linux detours in the past and it honestly works pretty well for me. I personally enjoy Fedora with Gnome which I think strikes a good balance between stability, security, and freshness. But if being stable and worryfree is of top importance (like where you are "unpaid tech support", haha), why not just go Debian. :)
So we should bring back CFCs and destroy the ozone layer?
In a typical bigcorp environment, laptops are loaded with silently installed spyware. Certainly equivalent to taking a screenshot every second or an always-on keylogger.

The horse is out of the barn for many people during work hours. But in the OS and on by default is a different story!
But.. the link to the other thread was already here when you made your post.

I don't see any way to downvote a submission.
> In all the MS Recall drama, I've yet to hear or read one single person utter something to the effect of "Wow - great!!! - I've been waiting for something like this for years! This will solve at least one of the major issues I face regularly!".

There were definitely some comments in a previous HN post about it that attempted defend it and to paint everyone else as overreacting. Several of them even said that they thought it would be useful for something they might hypothetically like to remember or search for... I don't really remember, because the whole thing is crazy to me and I think it's crazy for any tech-savvy person to be running Windows in 2024.

> Why is MS pushing something so hard when nobody asked for it?

I assume this is a rhetorical question, but just in case it isn't: this is not a feature/product for Windows USERS. This is a feature to help train/test MS's AI stuff- YOU are the product, not the customer.
Is GraalVM actually competitive with V8?
> I've used fail2ban in production for many years but eventually removed it due to causing very large iptables leading high memory use and ultimately a source of instability for other services (i.e it turns into a DDoS vulnerability for the whole server). I know the usual advice then is to reduce ban time and just not have permabanning, but that seems to kind of defeat the purpose.

Didn't the advice switch to using ipset a while back, precisely in the name of efficiency?
It also allows the government to "encourage entrepreneurialism" or "stimulate the economy" by subsidizing private research (which, if successful, we would then turn around and sell to the globe—as if this would somehow be more attractive than ignoring the west and building another coal plant at lowest cost possible)

I've said this again and again—the only rational step is to directly subsidize poorer countries to not build coal plants and, in fact, replace them with more expensive but less destructive generation (inlcluding, say, battery farms, nuclear power, hydro, etc, that can properly address off-hour usage).
I personally like the quotes on love, what love is, and what it claims about the time-space fabric that is this reality
Human brain can hold 10 times more information than previously thought
Nvidia is now worth $102M per employee
Also, of course, the Old City of Jerusalem, which I couldn't get out of without asking someone.

(Although I'm sure an HNer will tell me now that it's actually easy, if you just do x, y, and z. Of course, you can also ask someone, which is easier.)
In college I barely had time to eat, but I always cooked my own meals. I prepped and made large batches of delicious things that I could eat over the week. Humanity was able to do this before fast food existed. We should be able to do it now.
An expensive thing that someone likes is definitionally a luxury. It's an implicitly subjective term. An expensive pair of shoes that are nearly all markup are still a luxury even though they're cheap to produce.
This is a pretty clear fact. No conspiracy that we've been working on space missile defense systems since Star Wars
> Or Microsoft just decides they need to really market the hell out of AI and it gets turned on my default anyways.

This is what will happen. And when you turn it off again, it'll be turned back on by the next update. Enjoy.
Scientists map one of Earth's top hazards in the Pacific Northwest
I almost want to start using Windows as a daily driver just so I can leave again.
If your clients are storing sensitive PII on their desktop or my documents folders, they're already likely way the fuck out of compliance. Nice FUD though.
There's a small chain called Dick's in Seattle that still makes their burgers in an assembly line ahead of time. There's no customizing the order but the most expensive burger is 4.85 (2nd most is 2.95) and it's really fast. They're super popular so there's not much waste.
Security compliance generally does not require a third-party company, unaffiliated with the corporation, to be sent a copy of everything shown on a user's screen.
Between this and the iPad used as a display for a headless MacBook it’s an ongoing tragedy that the best use case for such world-class computing hardware is as a screen for another device (which is itself running the same OS, on comparable or weaker hardware!)
> The housing market, however, should be big enough and robust enough to allow for some of that occurring.

All of these are just wishful thinking based on non-scientific economic hullabaloo that was developed in the past 200 years. They never worked anywhere. They never will.

In the end, it comes down to the concept "Housing should be for living in, not for profit". Its a fundamental necessity/infrastructure. And privatizing it makes as much sense as privatizing the military or the police. The moment you allow it, those with bigger pockets will f*ck everything up.
https://github.com/zigcc/zig-cookbook/blob/main/src/05-01.zi...
Exa's top hit for this article:

https://openai.com/index/language-models-can-explain-neurons...
Well - what is a mind exactly? We don't really have a good definition for a human mind. Not sure we should be claiming domain over the term. It's not a terrible shorthand for discussing something that reads and responds as if it had some kind of mind - whether technically true or not (which we honestly don't know).
> Everyone knows they're being tracked everywhere they go physically and on the web

That sounds good to some people. But if I mentioned it to most people in my family they would probably be rather weirded out by it. They probably also would have no idea of the scope of the size of it and how it is being used against them.
So you’re just looking to isolate consumers so you can make a point. Linux users aren’t insignificant regardless how you roll the dice and want them to be. We push more technology forward than non-Linux users. The insignificance is just something Macos and Windows users tell themselves to feel good about their desire to dislike Linux as they spin up LXC containers.
Documents and emails are probably easier to find via old-school text searching, though.
This is not 100% correct. Baha’is have many groups that hate them and write dismissive articles such as these. Take a look at what Baha’is have done in countries fighting for human rights — and that is every right
> "Kill all cows and have a giant BBQ and then no more methane producing livestock are allowed, permanently"

A dangerous idea, there are fewer cattle than humans on Earth, even if we add sheep, goats and pigs, there are still more humans.

https://ourworldindata.org/grapher/livestock-counts
Its crazy how people downvote uncomfortable info and statistics as if it makes them go away...
It's almost like there was some sort of consensus on this before the Wokes started fighting. Either that or the U.S. government shock troops are forcing all the American AI labs to do what the CCP and their AI labs can't. I'm looking forward to the resolution, either way, it'll be interesting.
I have a head sci-fi story of us creating a super powerful AI that solves almost all of humanity's and the Earths problems by curating a selection of 250,000 ideal humans, and then killing everyone else. A quarter million good people living in a near perfect world propped up by AI robots with essentially infinite resources.

I'm almost positive I wouldn't make the cut, the top .003% has gotta be a higher bar than me to clear, hah. But still fun to think about.
Search for the Baha’i Lotus Temple of India. It’s also beautiful
> But I don't see people learning how to cook either.

The pandemic lockdowns forced a lot of people to learn how to cook, lots more people who learned to bake bread, etc. This trend might be an extension of that development.
Have you heard of 'food deserts': places where grocery stores are far away but fast food joints are plentiful?
No, please don't. Some CTO at some company I work at is going to think they are Uber scale, deploy this and I'll be stuck supporting it.
Do you listen to music only with earbuds? Do you cover your face when going outside? Do you transform your voice for each person you’re talking to? Are you buying only with cash that you handled with gloves?

Privacy is not a binary concept. There are actions and information that some people are ok being public, and there are some they prefer to remain private.

What is not OK is spying and exploitation. I should know what data you’re collecting and preferably specify which I’m ok with. I also should know what is intended for and preferably for most of it to be anonymized.

Most people expect reasonable privacy policies from companies and they believe that there’s some regulation in place.
YouTube is A/B testing limiting logged out access to videos
Biden Administration Tightens Mileage Standards to Buoy EVs
Are there any gas / hybrid vehicles on the market which achieve 65 mpg? Even the 2024 Prius seems to only achieve 57 mpg.
Tesla says lawyers who sued over Musk pay package deserve $13.6M not $5.2B
Would love to know if any product research was done on this at all, or if it was a mandate from someone high up in Microsoft. I cannot imagine they'd go very long talking to potential users without hearing the exact same fears they seem to be surprised about today.
Conformal Sets and Setting Recall
I think they actually did consider that - that's why they emphasized it was all on device. They thought about it, they just didn't think about how little we would trust that promise.
People need to use tamper monkey. Not that you can just find tons of scripts that just do the trick, sometimes it's rather easy to get things done:

Just create a new script on Youtube and add:

document.getElementsByTagName('video')[0].playbackRate=1.5

Set the start to "document-end" et voila.
Deleting accounts doesn't seem to work. Pressing the delete account button does nothing.

Quite frustrating to go through the whole signup process and then being asked to pay before seeing anything to justify the purchase. I would have though you'd be able to at least generate some plans or plans that are limited in some way, to evaluate whether it's any better than what i already use.
Actually that's a picture of Joe Rogan and for that reason I'm out.
Interesting thanks, I hadn't heard of that option.
I would assume that performance wasn't the prime concern, but rather the accuracy/appearance of the generated image. Most people aren't putting this in their shell startup, just as most people aren't putting an ffmpeg encode command in their shell startup.

And I would assume neofetch is relatively slow because getting some of the system information is relatively slow. e.g. to get the GPU name it does "lspci -mm":

% time lspci -mm >/dev/null
lspci -mm > /dev/null 0.03s user 0.03s system 2% cpu 2.993 total
% time lspci -mm >/dev/null
lspci -mm > /dev/null 0.03s user 0.01s system 76% cpu 0.053 total

Guess it's faster that second time due to kernel cache or whatnot, but 50ms is still fairly slow. And that's only the GPU.
This gives me vibes of:

https://github.com/jesseduffield/lazygit

and

https://github.com/jesseduffield/lazydocker

nice!
Can you expand on this a bit? My recent experiences with MLX have been really positive, so I'm curious what footguns you're alluding to here.

(I don't do most of my work locally, but for smaller models its pretty convenient to work on my mbp).
And even with IPv4, botnets are a common attack source, so hitting from many endpoints isn't that hard.

I'd say "well, it might catch the lowest effort attacks", but when SSH keys exist and solve many more problems in a much better way, it really does feel pointless.

Maybe in an era where USB keys weren't so trivial, I'd buy the argument of "what if I need to access from another machine", but if you really worry about that, put your (password protected) keys on a USB stick and shove it in your wallet or on your keyring or whatever. (Are there security concerns there? Of course, but no more than typing your password in on some random machine.)
> I have seen experienced sysadmins create the test user with the password of "test" on a live server on port 22 because they were having an "autopilot moment".

pam_pwnd[1], testing passwords against the Pwned Passwords database, is a(n unfortunately abandoned but credibly feature complete) thing. (It uses the HTTP service, though, not a local dump.)

[1] https://github.com/skx/pam_pwnd
Cookies are of relatively low value compared to a database of everything the user has typed and seen.
Every employee at NVDA is basically worth more to the financial markets than any Series A startup lol