skysight-inc/HackerNews huggingface dataset:
My home IP doesn’t change much so I just open ssh port only to my own IP. If I travel I’ll add another IP if I need to ssh in. I don’t get locked out because I use VPS or cloud provider firewall that can be changed through console after auth/MFA. This way SSH is never exposed to the wider internet.
Why is it “self-hosted” and not “library + desktop/cli app”? “Self-hosted” implies it need a full web stack and rdbms backend?
I seriously don’t understand AMDs move here, does anyone have any insight?
There's extra complexity with ssh, it has its own file of revoked keys in RevokedKeys and you'll have to update that everywhere.

see https://man.openbsd.org/ssh-keygen.1#KEY_REVOCATION_LISTS for more info

And unlike some other sshd directives that have a 'Command' alternative to specify a command to run instead of reading a file, this one doesn't, so you can't just DIY distribution by having it curl a shared revocation list.
How do you protect the access to the VPN/Tailscale? I suppose you are not using a password?
The things we're doing to the ocean won't be fixed with desalination.
The idea that you think only autistic people have deep experiences is kind of hilarious. Also I don't think you understand small talk, which I guess is not surprising... But people don't talk about the weather because they are super interested in the weather.
Edo-period teens tackling math's toughest problems
It's a bit of both, though the former to a larger extent. Pretty logical and inevitable that if people don't have enough time or are too tired (physically or mentally) to make babies, then they won't be made. Women choosing career over housemaking only exacerbates the issue, but also this choice is forced by still-immature social expectations combined with a brutal economic model. End of the day, Capitalism drives extinction.
The aging U.S. power grid is about to get a jolt
Oh my! This hits home. We have some test scripts written in python. Every time I try to run them after a few months I spend a day fixing the environment, package dependencies and other random stuff. Python is pretty nice once it works, but managing the environment can be a pain.
It's a turn of phrase; it doesn't mean literally no though at all!

On a more relevant note, how can it know when a private browser window is open in anything other than Edge? Same question with the password manager - is there going to be some new API that apps have to "opt in" to to enable Windows to recognise them?
Yes, the Murdoch media is vile, but this goes for all of the British papers. The Daily Mail is a wretched place to work but is also the most well respected in the UK in terms of the training they give. That should tell you everything.
Roman Women and the Oppian Law
A lot of the time, I really am turned off by these articles in short story form but this one flows well. Good job author!
GPWS warnings should be the gold standard for any sort of urgent audio alarm.

Examples: https://www.youtube.com/watch?v=W5Z-d1Zx02o
VQVAE is trained to reconstruct the image, so in theory it should contain all the information (both content and location) inside its embeddings.
See this thread, also on this page:

https://news.ycombinator.com/item?id=40609689
https://archive.ph/sXWU3
I’ve seen lots of passwords accidentally typed into an IRC window. Never seen that happen with an SSH key.
What about the browser cache? And isn't there some capability in many browsers to store form field contents when navigating back/forward too?
What's not clear from this webpage is whether these are actually used anywhere. Are they? I couldn't tell.
China is not the biggest issue, though they may be today—most of the coal plants coming online are in South Asia and Southeast Asia. Whereas China has a pretty healthy "green industry" sector domestically and similar incentives to the west to decarbonize, most countries currently building do not. Furthermore the coal provider in the region, Australia, makes a lot of money with this export. It's not going to be easy to control all these variables while also forcing countries to not develop a strong energy base (which correlates with, roughly, the size of your economy) and also not providing any subsidies. Meaning, it won't work, though you will certainly piss people off if you try.
They have just changed the angle of attack by baning effective ad-blockers from chrome

https://arstechnica.com/gadgets/2024/05/google-starts-deprec...
Hm, yeah, you're right, that makes the most sense.
I meant for straight opting out of even having it.
In the early 20th century, arguments against eugenics included pointing out that natural selection works through environmental pressures. Selecting for traits we value currently may well paint us in a corner should the environmental pressures change in some way.

I guess that might hint at a fly in the ointment to drive the plot...
So without the atomic bomb, the emperor and the peace faction did not have a way out and the fighting would have continued.
Yes, you can play Duck Hunt without a television (but I can't)
I'd say deep learning is a subset of machine learning, and LLMs are a subset of deep learning.
In more recent news, today Zig launched 0.13.0

https://news.ycombinator.com/item?id=40605828
That's really fun. I love it! One recommendation: it might be nice to add a mode where it doesn't wobble, but retains the cuteness that results from thickening and rounding corners.
> "This post is for paid subscribers"
It's this, plus the potential that you've reused your password, or that it's been keylogged.
> and also PyPy

this is a perpetually repeated misconception:

> Why did we Abandon Partial Evaluation?

https://www.pypy.org/posts/2018/09/the-first-15-years-of-pyp...

> others do

to my knowledge graal is the only production project using futamura projections (what you're talking about)
There are pictures where people walked out on snowpack and scooped out a handful of snow, then they come back months later and there's an ice stalactite as tall as a man left behind.
Hang around kids and even though they can be pretty good at using a computer, they have no clue how the thing actually works. They don't know what a file is anymore. Everything is a shiny little icon in a shiny little magic folder.

Not trying to make this sound like a value judgment, more an observation. But it makes you wonder, what do we lose by excessive abstraction.
The hard part is making sure every one of your servers got the CRL update. Since last I checked OpenSSH doesn't have a mechanism to remotely check CRLs (like OCSP), nor does SSH have anything akin to OCSP stapling, it's a little bit of a footgun waiting to happen.
The previous paragraph says:

> As of this writing, we could not find any existing tools to send a ZFS file system to S3 and download it from Cloud Storage, in real time. Most tools like z3 are used for backup purposes, but we needed to transfer filesystem chunks as quickly as possible.

So, they didn't rewrite anything.
Embedding with America's top hostage negotiator
> why books are so much effective

Because they’re consistent and they follow (the good ones) a clear path to learn what you want to learn. The explanations may not be obvious at first glance and that’s when you may need somone to present to you in another perspective (your teacher) or provide the required foundational knowledge that you may lack. You pair it with some practice or do cross-reference with other books and you can get very far. Also they’re can be pretty dense in terms of information.

> which books, or what YT channels were useful.

I mostly read manuals nowadays, instead of tutorials. But I remember starting with the “Site du Zero” books (a French platform) for C and Python. As tech is moving rapidly, for tutorial like books, it’s important to get the latest one and know which software versions it’s referring to.

Now I keep books like “Programming Clojure”, “The GO Programming Language”, “Write Great Code” series, “Mastering Emacs”, “The TCP/IP Guide”, “Absolute FreeBSD”, “Using SQlite”, etc. They’re mostly for references purposes and deep dive in one subject.

The videos I’m talking about were Courses from Coursera and MIT. Algorithms, Android Programming, Theory of Computation. There are great videos on Youtube, but they’re hidden under all the worthless one.
They just want live data on your activities and update without sync and stuff however expensive that is even for them, easier to be lazy too

Also every <35 years old person is a js/web dev, so that’s what they do on cloud
As far as metadata versus data, the URL of a static image automatically discloses the image itself. The only way to claim that the history doesn't actually contain the image is if you assume that the site has gone defunct.

Unless, of course, you're willing to argue that a porn image stored on the local hard drive isn't contained in any folders on the same PC that soft-link it. You might have an interesting time trying to justify why it is contained in folders that hard-link it.
Microsoft isn't filled with morons, and they knew this would be the reaction. They always planned this "retreat," and this retreat is actually an advance: if you completely missed the media tempest in a teapot, the story would be that Windows is going to embed AI into every copy that will be able to track everything that is done on the machine and make inferences from it.

Now, the story is: Microsoft has been forced to retreat, through public pressure, from tracking everything that its users do by default.

Complete success on Microsoft's part. And the public that angrily reads headlines and angrily tweeted twice, vigourously pats themselves on the back for their "victory."
As much as I agree with you about how awful Murdoch is, he is not unique. I would not let Viscount Rothermere off the hook so easily.
I agree, I think the current state of the AI is absolutely incredible technology, but I just don't see a 'product' yet.

If chat and co-pilots are all we get out of this wave of investment, then I'm not sure if it's been worth it.
How they basically could not improve on tagged union enum types as you express them in C is to me one of the misses. Modeling data through effortless sum types is a requirement for me when picking up a modern language.
My lunches with the queen of cookbooks
As they say, any idiot can make a bridge stand, it takes an engineer to make a bridge barely stand.
Don’t they usually try at least to have a domain that sorta looks like the original? It’s not like they use phishing.bigbank.abc.xyz - the domain isn’t supposed to look suspicuous
The MLCEngine presents an approach to universal LLM deployment, glad to know it works for both local servers and cloud devices with competitive performance. Looking forward to exploring it further!
Relevancy
A good DS can double as an MLE.
Summa Technologiae, or why the trouble with science is religion (2014)
Wrappers are still responsible for proxying or handling errors and wrappers that fail to do so are wrapping poorly.
Las Vegas Spaceport: Will They Come?
Real title:

> Photos Purport To Show Damage To U.S. Aircraft Carrier After Houthi Missile Strike

And unsurprisingly, all are fake. Some are not even of American aircraft carriers.
The more complicated something is, the higher chance I screw it up.
It's because there's a huge cloud first push internally. Leadership is trying to find any way they can find to leverage Azure and recurring revenue.
This is interesting but something i feel like id disable on most of my ssh servers as they are only exposed through a shared jump host, and I don't want users that have too many keys in their agent to cause the jump host IP to be penalized.

On the jump host itself it makes sense though
Valibot v0.31.0 is available
> I don't understand how so many app writers have never gone for a run through a canyon or flown on an airplane.

In the UK, every time I got on a train, I'd experience that. And it was worse than not having internet; you had internet, but with extreme packet loss and instability, meaning that every app out there would simply stall, even if it already had the data to do whatever it is I wanted it to do, because it was waiting on some background request to complete. And because I had internet, the request didn't just fail, but it also wouldn't complete in any reasonable amount of time.

Very frustrating.
Ask HN: Machine Learning and Deep learning books to recommend?
Books/resources that you can recommend to go deeper into ML and DL - I'm going through deep learning book by Ian Goodfellow already btw.
The proper way of doing it is to use the API calls that have existed for decades to get the paths of well-known folders. It is because they are known to move and in fact having a roaming profile on a server location dates to the mid 90s with WinNT.

If you're hard coding paths you're doing it wrong.
Not just credentials - account balances, account numbers, etc. There's a big difference between your browser history recording that you opened your bank or healthcare provider's web site and Recall recording everything that appeared on the screen while you did.

People might use Incognito mode to browse porn, but I imagine it's a lot less common when looking at other sensitive sites.
That may be true mathematically, but there are no guarantees that a small provider won't end up having only a single /64, which would likely be the default unit of range-based blocking. Yes, it "shouldn't" happen.
A few more things:

An SSH key can be freely reused to log in to multiple SSH servers without compromise. Passwords should never be reused between multiple servers, because the other end could log it.

An SSH key can be stored in an agent, which provides some minor security benefits, and more importantly, adds a whole lot of convenience.

An SSH key can be tied to a Yubikey out of the box, providing strong 2FA.
OK this is uncanny, I independently made the exact same thing with the exact same display a week ago:

https://imgz.org/iBLADkCU.jpg

It's a frame that fetches the current weather and time at a location, has AI generate a photo with that location, and shows it.

How did we both independently arrive at this? I guess it was the most obvious thing to do?
I thought the hottest place on the planet was the Lut Desert. https://whc.unesco.org/en/list/1505/
Specifically, this journal: https://mattioli1885journals.com/index.php/actabiomedica
In theory you're right, CPython is written in C and it could segfault or display undefined behavior. In practice, you're quite wrong.

It's not really much of a counterargument to say that Python is good enough that you don't have to care what's under the hood, except when it breaks because C sucks so badly.
Loose Ends (2018)
Please allow me to go political for a second: both US and EU have an insane amount of politicians who support backing down on green energy and going back to coal mining, oil drilling and the like. I hope that at least the people who are intelligent enough to see the progress of green energy won't support that through their votes. We can literally have "free" energy coming from this star around us but instead of using it we're coming up with excuses that keep us from progressing.

That's it </political>
Are there any obvious practical application of this algorithm for existing large (10B+) text / image models?

Does the rejection sampling lead to a statistically correct sample from the joint probability distribution or is that just a (possibly rough) approximation?
We consider repeatably providing good value to customers as some kind of weakness?
I'd disagree and say the ToS is written broadly enough that opening a file on your computer is covered.
> We moved workloads off of S3 to Cloudflare R2 because of this.

So you moved from a mature but expensive storage solution to a younger currently subsidized storage solution? What happens when R2 jacks up pricing?
> I do not accept your divine law drivel

But that's exactly my argument! Franklin's beliefs about "populism" are based on "divine law drivel"--God's law imposes limits on democratic law. If we reject that--which is exactly what I'm trying to do here--what basis do you have for saying that the people can't make whatever laws they want?

You're the one invoking supernatural concepts--this supernatural notion of "bodily autonomy"--not me.
Trumps market...
Lotta clickbait, too. They need it to keep earning, even if they don't like it.

I recall Tom Scott saying there was one video he basically couldn't make, because the climax was switching on a big light, which was actually silent, but it felt wrong unless he dubbed a sound over that and such dubbing was against his editorial standard.
Right. It's analogous to how blocking an ipv4 is unfair to smaller providers using cgnat. But if someone wants to connect to your server, you might want them to have skin in the game.
According to the commit message, the motivation is also to detect certain kinds of attacks against sshd itself, not just bruteforced login attempts.
I didn't make an argument. I was just pointing out even creating a thumbnail requires accessing your data.
Theres also smarttube for Nvidia Shield and Android tv.
D-Day, as told by paratroopers
> No one is really saying this feature has no value

Oh yeah?

> I have a really hard time understanding the use case for something like this. Stuff that I want to remember I just write down https://news.ycombinator.com/item?id=40612277

> the only people that really want this feature are the ones trying to push it down everyones collective throat. Why is MS pushing something so hard when nobody asked for it? https://news.ycombinator.com/item?id=40611263

> It really doesn't [sound like a cool feature]. Not a single person I've spoken to likes the idea of this, at all https://news.ycombinator.com/item?id=40445335

> i have never wanted to go back in history [...] what’s the use case https://news.ycombinator.com/item?id=40544521

etc.
Surveillance and Hadopi: EU Court Buries Online Anonymity a Little Further
I'm not sure what the value of a per-capita measure is, or why it's worth making a distinction at "utility" (I'm assuming this means consumer) level.

Wouldn't the most relevant measure, at least as far as emissions go, be the ratio of energy coming from renewables / solar vs. total energy consumption? Or something similar?

edit: spelling
> So instead of looking, like the author of these new options, for ways to make life for the bad guys harder we do nothing?

Random brute force attempts against SSH are already a 100% solved problem, so doing nothing beyond maintaining the status quo seems pretty reasonable IMO.

> I don't buy your argument nor all the variation on the same theme: "There's a minuscule risk of X, so we absolutely nothing but saying there's nothing to do and we let bad guys roam free!".

Setting this up by default (as is being proposed) would definitely break a lot of existing use cases. The only risk that is minuscule here is the risk from not making this change.

I don't see any particularly reason to applaud making software worse just because someone is "trying".
Could you clarify what parts of that article are incorrect?
Livestreaming the Brain
When I used to live in Chicago and bike race, this was one of the local sprint finish points on weekend group rides. A long flat road into a short climb and some of my favorite memories.

There's also a beautiful cobbled street on the other side of it.
Wow, that's awesome! Looks like a big win all-around. Save money, save fuel, save wear.
It is infuriating when I open the file explorer and it takes many seconds to populate the side bar. This wasn't the case wit windows 10. Everyting in one drive really makes things take a long time. OneDrive is great, but I want a OneDrive folder where things are sync'd, not transparently transforming the file system into OneDrive.
> What can we seriously do to protect our privacy these days

We can start by no longer trading privacy for convenience or discounts, and by no longer doing business with companies that do this sort of thing. In this case, by no longer buying anything from Walmart.

The only way we can get things back to a more sane place is a combination of legislation and customer rejection of these sorts of practices.

> do we even have privacy anymore?

We can (not 100%, but to a meaningful degree. 100% privacy has never been a thing), yes, by no longer voluntarily giving it up. But that also means giving up a lot of convenience (that also never existed until relatively recently). The choice is ours.
PyPy has experimented with multiple approaches here, yes, but as far as I know they did not abandon the overall approach of automatically converting an interpreter to an optimizing VM, which is what I mentioned. That's more general than partial evaluation (which is just one way to do such a conversion).
To add. Conda has parallelized downloads and is faster. Not as fast as mamba, but faster than previously. pr merged sep 2022 -> https://github.com/conda/conda/pull/11841
It's not public yet. The person I was collaborating with has had a rough year (including some medical stuff) and can't give me an ETA on when they'll finish their part.
But who cares about your principles? Why should your non-falsifiable, non-scientific, non-empirical assertions about the nature of reality matter more than those of the mob?

You're just articulating a quasi-religious belief, and appointing ourself as the clergy of this quasi-religion, without admitting that's what you're doing.
Why are we building this into SSH itself? Isn't this what things like fail2ban are for?
I saw a Postgres story like this one. Badly managed AWS org with way too wide permissions, a data scientist sort of person set it up and promptly reconfigured the security group to be open to the entire internet because they needed to access it from home. And this was a rather large IT company.
They also have their share of cavalry charges and buzzers. Plus the plane sometimes calls you a retard
False positives are definitely a problem. When you read industrial accident reports one extremely common theme is some sensor that was notifying the controller of the problem, but that sensor had a history of false positives so it was disregarded. Companies that don't take false positives seriously are inherently dangerous.
That's your opinion, but you can't deny there are a lot of people arguing that the concept essentially has no value. Even on this very page.

> I have a really hard time understanding the use case for something like this. Stuff that I want to remember I just write down https://news.ycombinator.com/item?id=40612277

> the only people that really want this feature are the ones trying to push it down everyones collective throat. Why is MS pushing something so hard when nobody asked for it? https://news.ycombinator.com/item?id=40611263

> It really doesn't [sound like a cool feature]. Not a single person I've spoken to likes the idea of this, at all https://news.ycombinator.com/item?id=40445335

> i have never wanted to go back in history [...] what’s the use case https://news.ycombinator.com/item?id=40544521

etc.
At :42 I think the buzzing sound is the "stick shaker" stall warning. It literally shakes the pilot's control yoke. So not only is it an alarm, it's also reminding the pilot of the correction needed: to push the control forward.
I recently tried to fully rid myself of OneDrive and it took me over 48 hours to accomplish. The only working method I found involved fully enabling OneDrive, signing in, and waiting for a full sync. Only then was I able to tell it to stop syncing and finally remap Documents, Downloads, Pictures, etc.

The fact that I needed to log in, wait 24 hours for my account to unlock due to inactivity (!!!), and enable sync in order to disable it was enough for me to finally decide that Windows 10 will be my last Microsoft product. It may be a small annoyance, but to me it was the straw that broke the camel's back.