skysight-inc/HackerNews huggingface dataset:
Just to prod at this a little bit:

The vast majority of ARM licensees aren't doing anything transformative, that's for sure. But would something like the M1 - bringing ARM to the desktop when all past attempts have failed - have been considered transformative?

The question of what constitutes a "large market effect" is a big one...if I make a chip to serve as a controller in my brand of hard drives, is that a large market effect? ARM loses out on a few pennies per drive or something.

And I'd dispute the characterization of micro-architecture design as "insubstantial". Not accusing you of this, but this really has been the most frustrating thing about RISC-V - software engineers who don't know anything about CPU design comparing it to Linux when really it's more like POSIX or, yes, the Java class library. The insides of microcomputer CPUs haven't really resembled their interfaces very much since the early 80s - even the 68000, a consumer-grade CPU that's 45 years old (!) was designed so that the microcode engine that drove it could be used to implement an array of instruction sets. Any useful implementation of a CPU has an enormous number of internal details that aren't implied by the ISA.
MoviePass Is Why We Have "Inflation"
Note that "mudras" have significant meanings in Hinduism, Jainism & Buddhism. Mudras used in Indian dances convey feelings or elements of story etc. Also used in yoga. And mudras are not just hand gestures but also facial expressions, eye movements and so on.

Though there does not seem to be any connection of mudras with European paintings. There were cultural links between India and the Greco-Roman world in 2nd-1st century BCE around the time of Indo-Greek kingdom (northwest of the current India) but seems unlikely that would have such an influence centuries later.

https://en.wikipedia.org/wiki/Mudra
It's not quite fair, but if you want the best service, you have to pay for your own ipv4 or, in theory, a larger ipv6 block. Only alternative is for the ISP deploying the CGN to penalize users for suspicious behavior. Classic ip-based abuse fighter, Wikipedia banned T-Mobile USA's entire ipv6 range: https://news.ycombinator.com/item?id=32038215 where someone said they will typically block a /64, and Wikipedia says they'll block up to a /19.

Unfortunately there's no other way. Security always goes back to economics; you must make the abuse cost more than it's worth. Phone-based 2FA is also an anti-spam measure, cause clean phone numbers cost $. When trying to purchase sketchy proxies or VPNs, it basically costs more to have a cleaner ip.
>If TSMC doubled or 10x what they charge Nvidia on Monday

Chip manufacturing isn't like selling lemonade. You're not paying spot prices. You negociate fixed prices upfront for the duration of the manufacturing contract with various exit clauses and penalties for both sides.

>Nvidia can’t switch suppliers overnight

They can't switch overnight, but you also don't make good business by screwing over your customers for a one time hitjob just because you've locked them in for a few years. That trick will only work once. After that they'll avoid you with a 3,048 meter pole.

You stay afloat by building long term trust with your customers.
I don't think that's the case. Purely accessing information isn't useful for influencing elections in any way, any bots would have to interact with the website to have an effect, and you need to be logged in for that. Since the prompt is to log in, it's more likely to prevent scraping.
I resent that every application needs its own special snowflake auth method. One uses a certain 2fa app. Another uses another 2fa app. Another uses emailed code. Another uses text code. Another uses special ssh keys. Another opens a prompt in the browser where I have to confirm. Another uses special scoped tokens.

Yes there are good reasons. But it is quite a hassle to manage too.
Cool hardware project and idea, but I'm not touching an OpenAI API with a ten-foot pole, especially for an always-on device

Maybe when I need a fun project I'll make a version that uses OpenStreetMaps + LAN-hosted Stable Diffusion tho, so worth a bookmark to remember to do that
We have always had technology to detect this, it is just a matter if it was on.

A few decades ago the NYS Thruway caused a bit of political controversy because they started issuing speeding tickets if you traveled between two tollbooths faster than would be possible going the speed limit.
It would also be very rare. The penalties described here start at 30s, I don't know the max, but presumably whatever is issuing the bad behavior from that IP range will give up at some point when the sshd stops responding rather than continuing to brute force at 1 attempt per some amount of hours.

And that's still assuming you end up in a range that is actively attacking your sshd. It's definitely possible but really doesn't seem like a bad tradeoff
> just to avoid making prudent updates to the welfare state?

Japan's population pyramid in 1980: https://www.populationpyramid.net/japan/1980/

In 2024: https://www.populationpyramid.net/japan/2022/

When the ratio of "workers" / "dependents" shrink dramatically as those 2 graphs attest, we cannot have "prudent" updates. There will either be "painful" updates, or need to sacrifice something else (like getting immigrants).
People will download those video from p2p if they do this.

I can bet some people will mirror youtube just like 12ft.io and similar.

I guess youtube doesn't publish their number, but with GDPR and people caring about their privacy, I can imagine their revenues have been dipping.

Some creators are interesting on youtube, but the ad model doesn't sound very solid, especially since ad blockers work well.

Creators have been moving to patreon to gain money. Those people can easily put their videos on another platform if they want to.

I think youtube will slowly die. Maybe it's time.
> I would like to remind everyone that an internet facing SSH with a password is very unwise.

Bullshit. You can have a terrible password and your system will still be nearly impossible to get into. Also, these attackers are usually looking for already exploited systems that have backdoor account/password combos, unless they are specifically attacking your organization.

Repeat after me: dictionary attack concerns have nothing to do with remote access authentication concerns.

Let's say my password is two common-use English words (100k-200k.) That's ten billion possibilities. Assume you hit on my password half-way through. That would be fifteen years of continuous, 24x7x365 testing at 10 password attempts per second....and then there's the small matter of you not knowing what my username is, or even whether you've got the right username or not, unless the ssh server has a timing-based detection attack.

The only argument for putting this functionality in the daemon itself is that by locating it in the daemon, it can offer advanced application-layer capabilities, such as failing auth attempts no matter what after the limit is tripped so that brute-forcing becomes more pointless - unless you get it right within the first few attempts, you could hit the right password and never know it. If they intend to implement features like that in the future, great - but if it's just going to do what fail2ban does, then...just run fail2ban.

Fail2ban has a higher overview of auth on the system, is completely disconnected from the ssh daemon in terms of monitoring and blocking, and the blocking it does happens at the kernel level in the networking stack instead of in userspace with much more overhead and in a proprietary system specific to SSH.

As a sysadmin, this is 'yet another place you have to look' to see why something isn't working.
I have a really hard time understanding the use case for something like this. Stuff that I want to remember I just write down or reference something like my browser history or recently opened files. It's very low tech for sure but it works, is waaay more energy efficient, way easier to understand and audit, and doesnt have the same security concerns. I get that using "AI" has a Wow Factor that existing systems have but I cannot understand the thinking of folks that are OK with the trade-off. Ita just not even close for me.
You laugh, but people in incel circles are heralding the nascent arrival of better than real AI girlfriends. She night as well live in your toaster or fridge if you're trying to be energy efficient.
After having read the article:

These are its main points, nothing totally wrong there.

Apart from the DPR point, there are behaviors or mobile browsers that can only be reliable tested with an emulator.

Example: if for some reason your site renders an input with a font size below 16px, iOS Safari will zoom into the page when that input is focused.
Would you not consider LLMs as a part of machine learning?
Apple Intelligence (2023)
Moistere Vapeers, very believable.
Linamp, the IRL Winamp
Feynman’s Razor
> but it does still give one a shiver to envision what we'll have to master to navigate this process down to the projected population equilibrium.

Easier said than done. This is where I see the most of hand waving. Robots haven't materialized yet, neither any political will to shrink the safety net.
Yes! Very positive news! Hopefully it can be generalized to include more illnesses.
When the war in the East started, first thing Russians did in certain places was to go to the district tax office, get the to the decentralized paper storage and ransom every person who can reasonably have about 30K USD to not sit in the torture basement, including some random IT shmucks reading this forum.

Not surprising -- do you know of any sources to read up on about this?
Their perf claim is based on ancient benchmarks. Looks like the Octane suite. I bet they also made sure to ignore startup overheads.

I’d only believe their perf claims if they used a more modern benchmark suite.
Mamba/micromamba solves the slowness problem of conda
Personally, I've always found that the non-rigidity of the complex numbers (i.e. that when considered as a field, they admit a non-trivial automorphism), which requires the introduction of the Re and Im operators (i.e. projection back to the reals) to banish, to be strongly suggestive that the reals have a somehow more "real" ontological status.
I've interviewed for 3D graphics jobs and interviewed others. I was definitely only interested in whether the person had the skill to find a solution.

For my first 3D game dev job I just turned up with a floppy which had my 3D engine on it and got them to stick it in a PC. That was all that it needed to get hired. That and be incredibly naive about salary negotiations :D

I also turned down a possible position at Argonaut at Star Fox time. I got that one by arguing repeatedly with Jez San on Usenet lol
There is nothing wrong with this approach if enabled as an informed decision. It's the part where they want to enable this by default I have a problem with.

Things that could be done is making password auth harder to configure to encourage key use instead, or invest time into making SSH CAs less of a pain to use. (See the linked paper, it's not a long read.)
Talk on zoom to the wife while bathing the kid, stored on recall. VC the girlfriend, stored on recall.

Does your browser history store pictures of your family?
I like being able to log into my server from anywhere without having to scrounge for my key file, so I end up enabling both methods. Never quite saw how a password you save on your disk and call a key is so much more secure than another password.
Comments moved to https://news.ycombinator.com/item?id=40612281 which is a re-upped version of this thread. (I had to make a new submission for dumb technical reasons.)
Disinformation campaign uses fake footage to claim attack on USS Eisenhower
It doesn't matter that it's your opinion. Naming a person as having a damaged reputation is very serious. That can and will have real life consequences, all for some bickering about a utility tool for MacOS. Be proportional. You wouldn't publicly name some other person as having a damaged reputation in real life, so why do you consider it acceptable to do here?

And you shouldn't give apps permission to record your screen. That's your responsibility.
If the UI is my shell then it is. If it's part of a larger script being executed by python embedded in a cron job wrapped in a burrito, it may not be
Making Tutus for the Royal Ballet's Swan Lake
Maybe not. Using my imagination, I can envision a mail client that also performs the server function for a small set of addresses (my addresses).

It's important to think about the possibilities when changes are suggested, and not just default to wet-blanket responses.
Always set Windows up with a local account to avoid this nonsense. Used to be relatively straightforward in Windows 10, but MS made it a lot harder to dodge in 11.
It actually sounds like a good idea, although I think each person on the fictitious street should get a separate address number.
Wouldn't that be more applicable to image generation, or at least wanting to encode the image as a whole?

If you need to be able to reason about multiple objects in the image and their relative positions, then don't you need to use a tiled approach?
> I started to make much more money by just spending the same amount of time writing enterprise software

As in a day job in enterprise software? How come you didn't consider joining an asset management firm as a quant dev? I heard they're very lucrative.

> I switched to stock picking based on the premise that the market at large might be momentarily irrational

I see, sounds like a momentum strat.
You’re implying that you should never invent new tools. But every tool was a new invention upon its creation. Also, all software is an “engine” for an “engine”.
> Eating less energy than the body burns results in burning of stored energy reserves

Nope [1].

Even proponents of the energy-balance model clarify that “the brain is the primary organ responsible for body weight regulation operating mainly below our conscious awareness via complex endocrine, metabolic, and nervous system signals to control food intake in response to the body’s dynamic energy needs as well as environmental influences” [2].

Calorie in calorie out is the flat-earth model of metabolism, trading truth for simplicity.

[1] https://www.health.harvard.edu/staying-healthy/stop-counting...

[2] https://www.sciencedirect.com/science/article/pii/S000291652...
I'm not a fan of this feature. First, I don't think it's going to help all that much for the reasons other people have stated (it's easy to obtain a new IP, and using ssh key-only remote login nullifies most attacks anyway).

More importantly, though, is that it is difficult to debug why you can't login to a remote system, unless you've been diligent enough to setup remote logging and some kind of backdoor you can use in a pinch. I imagine many companies have some unimportant script running in the background that logs into a remote system over ssh, and the person who set it up left the company years ago. One password change/key rotation later, and suddenly 25% of employees cannot login to that remote system because the script got one of the office's 4 public IPv4 addresses blocked on the remote server.

It's very easy to say "you should manage your systems better, you should separate your networks better", and so on. But in my line of work (customer support), I only hear about the issue after people are already locked out. And I've been on many phone calls where users locked themselves out of their server that had fail2ban setup (ubuntu setup fail2ban by default in one of its releases).
AMD | Engineering | Full-time | Austin, TX | Onsite/Hybrid

The GPU virtualization team works on enabling SRIOV virtualization for AMD Instinct Accelerators for HPC and AI/Machine Learning, such as MI300X, and AMD Radeon Pro GPUs for Cloud Gaming + VDI. We also collaborate with Cloud Service Providers like AWS and Microsoft Azure to provide platform software enabling our AMD solution.

There's a lot of incredibly exciting work up ahead, and we're looking for passionate engineers to join us in the following roles!

Software Engineer: https://careers.amd.com/careers-home/jobs/47820?lang=en-us

DevOps/Verification Engineer: https://careers.amd.com/careers-home/jobs/48527?lang=en-us
Oh yeah I don't really use macOS anymore. And I do really need PGP functionality for my password manager.

I used pkcs11 before with openct and opensc (on OpenHSM PIV cards) and the problem I had with it was that I always needed to runtime-link a library to the SSH binary to make it work which was often causing problems on different platforms.

The nice thing about using PGP/GPG is that it can simulate an SSH agent so none of this is necessary, it will just communicate with the agent over a local socket.
I read the Epsom's Version PDF before the video was released, and the typesetting was absolutely terrible.

https://imgur.com/a/wjK5br5

After the opening on how he's bothered by minor errors, I thought it had to be part of a joke, and it was a setup for a punchline to be revealed later in the paper. But eventually I realized, no, the PDF must not being displayed the way it was intended. I was reading it in Evince at first, but muPDF gave much better output.
It's libelous to write false statements with the intent to harm the reputation of private person; but _observing_ that their reputation appears damaged? That seems like a stretch. Personally, I don't wish either the original developer or the current developer ill; but given that the software requires screen recording permissions in order to operate, the communication issued by both should be thorough, sensitive to the privacy and security issues involved, and open. None of that is the case here.
My answer is yes to both of those

If other peoples work is reliant on yours then you should know how their part of the system transforms your inputs

Similarly you should fully understand how all the inputs to your part of the system are generated

No matter your coupling pattern, if you have more than 1 person product, knowing at least one level above and below your stack is a baseline expectation

This is true with personnel leadership too, I should be able to troubleshoot one level above and below me to some level of capacity.
Clues to disappearance of North America's large mammals 50k years ago
Classic 2-step move, introduce what you want to ship but add a red herring, remove red herring on the outrage, ship it.
Why are debut novels failing to launch?
"Labor demand still substantially exceeds the supply of available workers,"

It has literally been this way for decades, so the story isn't actually that. Wages are inelastic because the business want them to be. So the quote should be:

"CHEAP or FREE Labor demand still substantially exceeds the supply of available workers,"
What exactly do you think that people did before fast food and delivery?
That looks pretty good for nuclear! I assume the cost of batteries to shift a annualized watt from day to night is more that $1.50
The USAO press release from January with more details: https://www.justice.gov/usao-wdwa/pr/bremerton-washington-ma...
The evolution of the hotel key (2019)
K-D Tree Art Generator
Deaths (of passengers)?

Disassembly following premeditated lithobraking induced by lackluster system architecture?

Dead whistleblowers?
Ah yes I misread.
What's the alternative? If you get onto a bad IP today, you're essentially blocked from the entire Internet. Combined with geolocks and national firewalls, we're already well past the point where you need a home VPN if you want reliable connectivity while traveling abroad.
Putting aside everything else. How long is your password vs how long is your key?
You do not seem familiar with US slander laws and precedent.
"Just a joke, bro"

I hear that a lot.
Something very interesting: I live in southern Ontario and when I randomly opened up reddit.com in a private Firefox window the night before last (testing a low ram VM, needed some heavy js site) the top of the homepage was a sticky post from that subreddit. For hours. It didn’t even have that many votes or comments but it was stuck at post #1 somehow
Rivian's path to survival is now remarkably clear
I don't understand what's distasteful about it.
Wishes do come true https://news.ycombinator.com/item?id=40063261
Home-cooked software and barefoot developers
It's literally the hand sign of dual nature of Christ. Blessing or posing.

The Catholic Church has had quite a few years to solidify and formalize their rituals. Nothing a priest does during mass is accidental or coincidental. They go to school for these things.
SGLT2 inhibition eliminates senescent cells and alleviates pathological aging
ip addresses are kinda meaningless these days, and address based accounting and penalization can penalize legitimate users. (bitcoind has a banscore system, it's kinda cute but these kinds of things tend to be bandaidy)

it's a hard problem. wireguard has a pretty good attempt at it built into its handshaking protocol, but like all of these things, it's not perfect.

could maybe do something interesting with hashcash stamps for client identity assertion (with some kind of temporal validity window). so a client creates a hashcash stamped cookie that identifies itself for 30 minutes, and servers can do ban accounting based on said cookie.
NeuroVRD | Project Management | Remote | Full-time

Neurovascular Research and Design (NeuroVRD) is developing an AI surgical monitoring platform (Sentinel AI-IOM) that automatically and continuously monitors the functional integrity of neurovascular structures that are at surgical risk during high-risk surgery, helping surgeons improve surgical outcomes and maintaining the patient's quality of life. Our transformative approach to intraoperative monitoring will increase access and availability, improve reliability, and significantly reduce costs.

We are seeking a skilled and experienced Project Manager to lead the development and commercialization of software/hardware accessories and third party integrations to the Sentinel AI-IOM platform. The Project Manager will be responsible for overseeing entire project lifecycles, including clinical validation, FDA submission, QA processes, and supply chain development. This role requires excellent communication, problem-solving, and decision-making skills to ensure project success.

Please reach out with your resume and/or any questions to jmeo@neurovrd.com
At least ChatGPT 4o still looks like it is using dalle.

https://x.com/krishnanrohit/status/1755123169353236848?s=46
Of course we should invest in actual property building, I meant investment class as in asset class - a thing you buy with the hope of capital increase. This is clearly quite different from investing in building houses that results in a new house.
JavaScript (V8) is well over an order of magnitude faster than Python (CPython).

https://benchmarksgame-team.pages.debian.net/benchmarksgame/...

And Java/C# is nowhere even close to an order of magnitude faster than JS.

https://benchmarksgame-team.pages.debian.net/benchmarksgame/...
fake news petersuciu
Experiments with Calculo Analog Computer Kit (1959) [pdf]
Sure but if I only used fail2ban for sshd why should I install two separate pieces of software to handle the problem which the actual software I want to run has it built in?
Trying to figure out which melody was which in an emergency doesn't seem like the most human-friendly.

Contrast with the GPWS warnings in aviation, which tells you what the problem is (TERRAIN TERRAIN) and what to do (PULL UP) in a progressively more alarmed voice as things get worse.

(Well.. Sometimes you hear of some particularly bright individuals who think the bank angle warning is a checklist item, but it's generally hard to get these wrong, compared to many other beeping warnings)
My understanding is in hard mode, you are not allowed to make a guess that you know is not the right answer. So you cannot use a letter in a spot where you know that letter does not belong.
US energy production isn't much of a free market either.