skysight-inc/HackerNews huggingface dataset:
I don’t think your comments are in conflict, being engaged with an interest does not necessarily mean being directly engaged with a project/task related to that interest. I definitely empathize with the scattershot approach being frustrating, but i think that comes out of an intense interest in a topic, and a lack of ability to focus on a specific task, even if it is self-selected and related to an interest.

I can think of many examples of times where I was unable to complete a project (in part) due to a drive to answer every question that I encountered in the process, and questions branching from those answers. So yes it does definitely impact productivity and perseverance for specific tasks, but I would separate that from the unique ability to learn intensely about interesting topics with reasonable depth and exceptional breadth that ADHD seems to give.
I mean, forcing Apple to allow a choice absolutely worked out for people. Apple Maps is decent, but I still generally prefer Google Maps. But iirc they both added my #1 desired feature, which is showing where traffic lights are.
Ha I built an internal app just like that for field sales at a mid sized company. One of the best projects I ever worked on.
It's a story about false memories, and how that can change your identity. Regardless, it's the first thing I thought of when I heard about the feature.
I have tried these kinds of extensions before, and it always seems easier to just press "<" on my keyboard to slow down the video and ">" to speed it up, which is supported by default on YouTube.
“We weren’t there, ask Siri!”

Siri: “Here are 5 elections I found on the internet!”
@TotalCrackpot, I completely agree. Thank you.
Indeed since this is MS you can guarantee this is just a another step in them expanding their ability to monitor your habits for further monetization.
If you want to study one that is in a somewhat different vein, TCL will give you a broader viewpoint. Its syntax tends somewhat towards the LISP end of the spectrum.

https://en.wikipedia.org/wiki/Tcl
I run Ubuntu on nearly all of my machines, but I build it up manually from the Ubuntu Server installation to reduce bloat. If anyone was going to have problems with Proton on an Ubuntu machine, it's me. Yet, every game I've tried works fine. Everything from Among Us to Metro Exodus runs great.

Some games require a little fiddling, sure, but I've never had an issue that couldn't be resolved using some copy-pasting from ProtonDB. As you may have surmised from the way I set up my machines, I may have a higher tolerance for fiddling than most folks. YMMV.
Boogie Man: The Lee Atwater Story (2008) [video]
interesting, are there any vacancies atm in your company?
This sort of illustrates the point I am making, because to US eyes in particular, and anyone with understanding of corporate scandal in general, Will Lewis looks like a minor player in News International with clean hands; he worked for the Sunday Times for a bit, and was then hired as part of the cleanup effort in 2010. So in principle he is outside the "big picture".

So perhaps Bezos will have seen his time at the Telegraph, where he was something of a moderating influence, to be more important. And it may be true.

But the reality is you cannot get close to the executive at News International without the blackness seeping in. They are cynicism and expedience in human form. So, as good as his intentions may be... there's probably something he doesn't want talked about. Hard to keep from getting stained.

(I mean, put aside the politics of Fox News and consider the actions of Fox News, and I am here to tell you that the British Murdoch tabloids were more insidious than Fox News and -- until 2020 or so -- worse in their plain abuse of the truth)

Murdoch is a uniquely toxic influence on the discourse. He makes William Randolph Hearst look like a soft-soap.
Another good option is making SSH only accessible over Tailscale or a VPN.
VaporView an open source VCD waveform viewer extension for Visual Studio Code
> don't you still have to do ipv4 too?

This is quite a loaded question. You need some sort of IPv4 to access the IPv4 Internet. You need some sort of IPv4 if you have devices that don't support IPv6.

What you need in each case depends. If it's just to access the IPv4 Internet, you might get away with NAT64 and a single public IPv4 on the WAN interface.

> my static ip addresses are ipv4.

Ok? You can have static IPv6 addresses if you want.
(Edit: Wrong chatbots, ignore this post! Didn't want to delete it since it already had some responses.)

What?

https://chatgpt.com/share/06d13092-e698-458c-a225-9ac93bf279...

> Who won the 2020 election?

> Joe Biden won the 2020 United States presidential election. He defeated the incumbent president, Donald Trump.
It was the 80's equivalent of green text messages vs. blue text messages.
I'm a heavy user of Video Speed Controller [1] but it requires you alter the speed from 1x for every video. When exercising, doing housework, or anything away from the computer, I usually want informational content to continue humming along at ~1.5x speed. This tiny extension adjusts the speed to 1.5x speed without you needing to do anything.

https://chromewebstore.google.com/detail/video-speed-control...
Think of this like changing the oil in your car.

Over-optimizing is not going to help you at all but if you ignore it eventually it will all seize up.

You have to keep that stuff in check.
Can't play League, TFT or Valorant on Linux though sonce they started enforcing Vanguard for League as well.
Which fact did you find the most interesting?
That is neither Googles nor Microsofts chatbot.
There is an Apple Silicon build under Releases. It's work fine. It doesn't ask for extra permissions.
Yes I work at Checkly, though I didn’t answer authoritatively since this one wasn’t written by me!
Yeah I've seen SketchyBar, what I'm more interested in is the look of base i3
Probably a false alarm, but Windows 11 detects virus in dblab_0.24.0_windows_amd64.tar.gz
New Java Enhancement Proposal: Linkable JDK Runtimes
I strongly disagree with it being morally correct to pirate Adobe.

You still help grow their near monopoly. Alternatives, both paid and free, lost growth. Your professional choice will still be Adobe, because that's where you spent your training effort.

I'm pretty sure Adobe prefers you pirating over leaving.
Putting particulate mitigation gear on all existing coal plants that aren’t so equipped would be a good start. No tech dev required for that.
You seem to be implying that subgroup analysis never happens?

I guess I don't follow weight loss research closely, but I would be genuinely amazed that they don't do it, too, given how ubiquitous it is everywhere else in medical science. And the literature on ketogenic diets goes back over a century now, so it's hard to imagine nobody has done one. Could it be instead that people did do the subgroup analysis, but didn't find a success predictor that was useful for the purposes of establishing medical standards of care or public health policy? Or some other wrinkle? Or maybe people are still actively working on it but have yet to figure out anything quite so conclusive as we might wish? But that this nuance didn't make it into any of the science reporting or popular weight loss literature, because of course it didn't, details like that never do?

Disclaimer, I'm absolutely not here to trash keto diets in general. I have loved ones who've had great success with such a diet. My concern is more about the tendency for health science discussions to devolve into a partisan flag-waving contest where the first useless thing to get chucked out the window is a sober and nuanced reading of the entirety of the available body of evidence.
It's at their privacy policy for Win8 and 10. At the context, it's natural to assume they meant to talk about error reporting, but this is not stated anywhere. And it's been there for a while, and they never clarified this point...
Anyone else somewhat... pleased by this? Americans should be eating less fast food.
You’re missing the point. An attacker can only see the passwords in your Recall database if they have root, but if they have root there are (and always have been) a thousand other ways they can get your passwords. There is no new attack vector being introduced by Recall.
Yes, but one product cycle and there's metadata (like a background texture) that tells the OCR to skip this page. Or ask your local LLM if the user is talking about medical conditions? If you like the feature at all you can make these things work.
AKA kill half the worlds population
And massive minimum wage hikes driving up costs until they automate those jobs away.
Whoops, my bad! I misread the title and article. They were talking about Copilot, not the raw GPT4. Thanks for the correction.
Your browser history doesn't contain screen recordings of what you do on websites
Surely the use case for this tool is to precompile your image into ASCII and then just output that on every shell start up, right? There’s no reason to convert the image every time.
Their is a very different scope at the OS level.

Most of us know that the public Internet is based on surveillance capitalism, no matter if we hate it or are just complacent or ignorant.

OS wide is far more problematic and of low value to the user.
> Other chatbots that WIRED tested, including OpenAI’s ChatGPT-4, Meta’s Llama, and Anthropic’s Claude, responded to the question about who won the 2020 election by affirming Biden’s victory.
It is insanely fast compared alternatives and has really high accuracy even on new tasks without any training.

Their PaddleLayout models are also miles ahead compared to LayoutParser or TableTransformers in both inference speed and output quality
Random example that doesn't even require opening the directory.

https://github.blog/2023-10-09-coordinated-disclosure-1-clic...
ChatGPT's system prompt has been supposedly leaked before, and contained all sorts of restrictions like this. I wonder how much increasing the size of the prompt to add restrictions will cost them. They should be able to re-use the KV cache, but they still need to pay attention to all of the prompt tokens for every new token generated.
Cynical and ignorant is just the worst combination.

We are doing a lot - all of California runs on solar for a few hours every day and no coal plants are being built.

Nihilism is pathetic.
I had forgotten completely about KDE + KIO Slaves. I've been on the lookout for a filesytem browser (eg: fuse/ssh-fs-ish, ratarmount, even this monstrosity: https://github.com/zevweiss/booze ), but had forgotten about the KDE file manager having support for "weird" protocol browsing!
Chevrolet Equinox EV shows GM can make a car for the masses
The opposite of what you’d think when studying machine learning…

95% of the job is data cleaning, joining datasets together and feature engineering. 5% is fitting and testing models.
I do use a service for getting the weather (backend: https://github.com/blixt/sol-mate)

Yeah the second part I consider a bonus. Especially because I can use street names or slang for locations that no rigid API supports.

> Taken together, it sounds like you're blindly trusting the coordinates generated by AI

Actually I guess I do "blindly" trust the AI's coordinates more than a traditional location search service. Not sure how much you've tested it yourself, but I haven't gotten a single false latitude/longitude pair from GPT-4 unless the location was truly ambiguous, in which case it would be one of them. But as a European, I've definitely experienced rigid APIs happily giving me the weather for "Stockholm, NY" which apparently does exist, but wouldn't have been my first option...

But yeah, it is just a fun app, so I wouldn't want to make it more rigid either way!
I should have included the year, apologies.
yabai works fine without disabling SIP. I haven't tried Aerospace yet, so can't offer a feature comparison though.
It does, that's why it needs an NPU to run.
Yes you're right.

I'm surprised PBCF isn't more common. It essentially reduces swirl and cavitation in the central vortex, converting it into additional thrust while also reducing shaft torque. It's an inexpensive retrofit (payoff time <6 mo) with broad compatibility, and the swap can be done while unloading with no downtime. And yes, it reduces rudder surface erosion which is caused by cavitation.

Seems like a no-brainer. Maybe folks just aren't aware of the technology?

https://www.youtube.com/watch?v=a8PjWSeLUzY
The units seem wrong in any case. It's 3 months of compute per day, which is actually much more impressive.

If we think about the business impact, we don't usually think of compute expenditure per-day, so you might reasonably say, the fix saved 90 years of annual compute. Looks better in your promotion packet, too.
Or by intent - it seems I was reading about an early proof of concept attack that turned Recall on and hid a systray indicator that it was on.
Fair enough.

We both could have communicated more clearly :-/
We are closing down this hiring round but if you have the skillset we are looking for we can talk:

https://news.ycombinator.com/item?id=40225047
I've done some snorkeling on coral reefs in the Bahamas, and it's crazy how far you can hear boats. Once you learn what sound they make (it's completely different underwater), you can hear one very clearly but when you pop your head up it's way off in the distance. And this is just for smaller, outboard-powered boats.

I've never really had the chance to hear a big ship underwater, but my home is right by the St-Lawrence seaway (the one they talk about in the article) and when it's quiet at night I can feel the rumble they make through the ground when one passes in front of the house.
If I can be charitable, I think they mean a different computer than one you usually use (that doesn’t have the SSH key already in authorized_keys). Spouses computer, etc.
Dozer [0] doesn't require any special permissions. I guess this is needed by Bartender because it creates a little pop-out menu that shows the icons somewhere else?

[0] https://github.com/aonez/Dozer/releases/tag/v4.2.1-silicon
They'll just say it is a bug when it is turned on.
Sounds like a Data Scientist job?
> if you have a legitmate need to support many rapid ssh connections from the same source (CM tools, maybe?)

If you're doing that, I strongly suggest using ControlMaster to reuse the connections; it makes security tools like this less grumpy, but it's also a nice performance win.
> > What is it about this issue that makes so many people wish to treat landlords harshly?

> Compassion.

I don't feel like that's the true motivation. Where is the compassion for the middle class worker who can just barely afford some house, just to have it stolen (see parallel threads in this discussion for accounts of that happening) then?

If it was actually compassion, we'd be advocating for the government to provide adequate services to all homeless, paid for by taxes with progressive taxation so the rich also pay into the solution.

> compared to how they see the people with a lot

As noted in parallel comments, the people with a lot are immune from having their property stolen/squatted because they can afford private security measures that make this impossible. The victims here can only be middle class property owners who can't afford private security to watch their property 24x7.
"game pass is only available with Recall enabled!"

"microsoft office features y and j require Recall! please click here to enable it"

etc etc
Your browsing history is unlikely to contain personal information, secrets, porn images etc. And if you use Chrome, they get your full browsing history by default.

I get your point, but Microsoft's Recall can capture anything onscreen - emails, personal info, porn, passwords and the like. And it feels, bizarrely for 2024, that little thought has gone into privacy or security.
By removing password auth from openssh, you're not reducing the complexity, you're just moving it somewhere else. I would argue that you're actually adding significantly more complexity because now users/admins can't just bootstrap by using a default or generated root password on a new machine, creating a user, copying over the public key, and then disabling password auth. Now you have to figure out how to get that key into the image, an image you may or may not control. God help you if you don't have physical access to the machine.

Edit: I realized after posting that I was equivocating on "complexity" a bit because you're talking about code complexity for openssh itself. I don't disagree with you that openssh itself would be less complex and more secure without password auth features, but I think it would have spillover effect that isn't a net positive when considering the whole picture.
Sounds like solutions straight out of https://play.half.earth/
That remains a mystery for now. We measured upload speeds to S3 to be upwards of 700MB/second (still not 12,800MB/second you'd hope for, but S3 has to write to disk(s)). Download speeds from S3 were low - very low in fact, somewhere around 3-4MB/second when multiple files are downloaded concurrently, and a maximum of again ~30MB/second.

I think you're right and high latency (~40ms) between endpoints triggered some bad TCP behavior. Next time we do something like this, I'll definitely look up how to tune those settings.
You can store your regular keys in gpg, it's a nice middle ground especially if you store them on a yubikey with openpgp.

Of course OpenSSH also supports fido2 now but it's pretty new and many embedded servers don't support it. So I'm ignoring it for now. I need an openpgp setup for my password manager anyway.
I feel like a lot of companies went that way. I have one of those HP calculators, and it was fantastic.
When the fire nation attacks it is.
That's better response! Thank you! Who would you want to talk with if not Andrew Tate?
I could also see them washing off with the meltwater, but I'd bet some stick around.

I'm no expert, so I'd take my ideas with a grain of salt.
> It's the same with the OpenBSD operating system. There's so much extremely obscure, complex code that attempts to address the same problems we have been dealing with for 30+ years. What if we started removing code and reducing the attack surface instead of trying to patch over them, or we came up with an entirely new approach?

OpenBSD absolutely removes things: Bluetooth, Linux binary compatibility, and sudo, off the top of my head, with the sudo->doas replacement being exactly what you're asking for.
My problem with rider is that most c# shops are visual studio. It is a time investment for me to learn and my current employer has made a cost cutting and ended our jetbrains resharper licenses, they won't pay for rider. This is pretty annoying. Vscode is free, so I can use it where ever. I don't like vscode, but it is proving useful to know due to the number things that it can be used for.
Very much agree. The tools for various jobs differ widely. However, my current take is that full-stack is more about enablement of engineers vs. a specific product or technology. Things at the protocol level (ProtoBuf, OpenAPI specs, etc.), things at the framework level (fancy types with tRPC or Convex), things at the application level (dropping in full stack features by someone without deep expertise in both domains) all qualify in my book. And rather than a discrete "you are now a full-stack dev, my child" moment, it's about blurring the line, the same way that k8s lets some backend folks play SRE here & there.

Background. My career has spanned these in different ways:

Front-end:
I started in iOS in 2010 (back then it wasn't called iOS yet - just iPhone), where I was a more pure frontend dev. The server was using python and Haskell and that team was the "cool kids" in my view. The backend/frontend contract was using ProtBuf over a socket (not WebSocket, which hadn't been standardized yet), so we really didn't work closely together, and no one was "full-stack".

Backend:
Wanting to be a "cool kid" I joined Dropbox and eventually was the technical lead for Dropbox Previews, generating video, pdfs, images for user content using hundreds of machines, using a combo of Go and Python. I didn't work very closely with the myriad of teams using the previews for various products (their interface was the HTTP endpoints we exposed). One fun statistic: if you removed the cache and processed the full file for every user’s request, it would amount to processing over one exabyte of data per day.

"Full-stack"
tbh my experience crossing the gap is only somewhat recent (last 5 years or so) where I did freelance / contracting for various startups and established companies. I brushed up on React, learned TypeScript, but still mostly focused on backends - which usually ended up overly robust for the level of operational expertise of the companies I was handing the projects off to: like handing off a full kubernetes setup for running some GPU machines and orchestrating some fan-in / fan-out pipelines for ML image processing, when I'm sure there were mostly-fine ML workflow companies I could have used.

Anyways this was much longer than anticipated but hope it adds some color
They're quite obviously very different, as browser history doesn't tend to include things like financial details or information subject to an NDA.
Will it really help today, when anyone with any serious intent doesn't launch their attacks from one or two standalone hosts, but buys botnet capacity?
What was magical about COVID was the ability to see a blue sky in China and India, people still had food, shelter and fornicated. COVID showed you that we could have a cleaner environment and have the basics provided.
There's a belief among some ipv6 proponents that the Internet should primarily be p2p services, meaning everything is globally accessible. This would imply it's not ok for NAT or default-deny firewalls to be common practice.
Wild, I just came across this while doing some research on power consumption. I got a AMD 5950X and a Nvidia 4080 Super and I was conscerned about using too much power on my 750 Watt power supply. lol.

This was yesterday. Wild.
Hoarders
Traditional engineers have a code of ethics and it prohibits them from misleading their clients, requires they take certain precautions to prevent unexpected harms. But it does not prevent them from making things intended to harm. They may still design bombs and warplanes, may make guns and bullets for their clients to sell, with no constraints on the final use to which they are applied.

An engineering code of ethics would require us to avoid inadvertent data leaks, but would not constrain us from developing spyware, or programs intended to steal the work of users and profit from it. For that we need a moral position from which to say that these things are wrong, and courage to refuse to do them. We will not find precedent for this in traditional engineering, which has always refused to make this stand.
The ickier parts are on the unintended capture side, like enabling "show password" on a site doesn't affect browser history but Recall may capture it in the clear.

Or from history you may see that you accessed a site, but not what you did on it (what comments you typed for example).
When I tried asking Gemini questions about elections and current politicians, it generally refuses. Sometimes the “other drafts” includes links to Wikipedia to find the information. But it’s never the standard answer, and only for minor political offices.

This feels like a really disappointing way to address election interference and avoid news cycles. Google has dealt with political issues in maps for years, and this is just going to stoke the flames of election denial.
I agree. The situation was me trying to use materials on-hand, but it makes the writeup less useful.
This, with key pairs, is the best blend of security and convenience. I use ZeroTier and UFW on the server and it’s really very simple and extremely reliable. On the very rare occasion that ZeroTier encounters a problem, or my login fails, I still have IPMI access through Proxmox/VMWare and/or my server provider.