skysight-inc/HackerNews huggingface dataset:
My guess is that the receiver clock glitches in some way when the MSI auto calibration runs, but it never showed up on the transmitter (and the device on the other side of the connection has never had a reception issue).

I ended up disabling the auto cal feature during a UART reception and then turning it back on when the reception is done.

SPI is definitely better as far as clocking, but MCU support as a SPI receiver is sometimes a lot less convenient to deal with.

A lot of UARTs have a synchronous mode which adds a dedicated clock signal - I've used that before out to a couple MHz.

In this application though, I'm only running 1 MHz so I really didn't think I should need a separate clock (and, it turns out, still don't).
Port-knocking is way simpler and relies on extremely basic network primitives. As such the attack surface is considerably smaller than OpenSSH or OpenVPN and their authentication mechanisms.
TLDR: this vulnerability does appear to allow an attacker to potentially gain remote root access on vulnerable Linux systems running OpenSSH, with some important caveats:

1. It affects OpenSSH versions 8.5p1 to 9.7p1 on glibc-based Linux systems.

2. The exploit is not 100% reliable - it requires winning a race condition.

3. On a modern system (Debian 12.5.0 from 2024), the researchers estimate it takes:
- ~3-4 hours on average to win the race condition
- ~6-8 hours on average to obtain a remote root shell (due to ASLR)

4. It requires certain conditions:
- The system must be using glibc (not other libc implementations)
- 100 simultaneous SSH connections must be allowed (MaxStartups setting)
- LoginGraceTime must be set to a non-zero value (default is 120 seconds)

5. The researchers demonstrated working exploits on i386 systems. They believe it's likely exploitable on amd64 systems as well, but hadn't completed that work yet.

6. It's been patched in OpenSSH 9.8p1 released in June 2024.
Interesting, I would expect the opposite. The man is almost universally hated nowadays, and his antics are annoying. He should be tanking the stock price, not the opposite.

But you know what they say - the market can remain irrational longer than you can remain solvent.
Why Alaska Rivers Are Turning an Eerie Orange
Although I don't fully disagree (I have my problems with the current direction of mainstream leftism), there is one undeniable fact that is missing from your perspective: in many, many cases, political movements have to ask for 1000 to get 100.

This has been the case effectively since modern politics was invented in the XVIII century. The US had to break away from its original government just to get a degree of control on its own destiny. France had to burn its system to the ground, killing thousands from its elite classes, just to entrench a right for the people to be consulted on general policies. It similarly took a bloody revolution in Russia for European industrialists to actually accept some curbing of their considerate powers, recognising a few worker rights (and as soon as that scare disappeared, they started walking them all back...). Hippies pushed completely new ways of life just so that someone could create a few national parks. So many political parties start by spouting fire and brimstone, move the bar a few inches further on this or that subject once in power, and then basically sit down, with the promised apocalypse never really materializing.

So yeah, progressives often push stuff that looks extreme, simply so that they can actually move the Overton window and obtain very small improvements. It would be nice if reasonableness resulted in progress, but in reality it largely results in being ignored.
I have an analog bed. No root access necessary for sleeping.
So far I have gotten by avoiding apps for travel, the one I was forced to use was Ticketmaster to get into an MLS game. I was traveling with a tablet, not a phone, and had no trouble connecting to the WiFi although the staff didn't really want to let me in with a tablet instead of a phone. (Overall the game was a great experience, if you're not a believer in US soccer this can change your mind.)

I also wound up using LuggageHero's web site on my tablet to drop off my bag at a Bodega near

https://intrepidmuseum.org/

I was able to get the process started using the WiFi at the Starbucks 2 blocks down the street and managed to get my bag back even though the app wasn't working when I got back to the shop.
There's a leaky reasoning about the abstraction hierarchy I think. Beyond, or until a certain layer - I know that I can trust the process. I'm fine baking, I trust the physical process.
By users I assume you mean other developers who use the API (including you next week). It would be better to use a different term as often user means "end user" or "customer" and not internal users.
Strong disagree on the second point. I don't want the choice of whether I switch tools to be based on an arbitrary factor such as when a website suddenly doesn't exist anymore. I might be very heavily invested into that tool in terms of project files, learning curves, workflow integration etc. I also might be in the middle of something very important with a deadline at the moment that I'm unable to access the site.

Other points that weren't raised - I want to be free to work in situations where I have poor or no internet e.g. when traveling.

Tying tools down to whether or not a website is available and you have reliable internet access is a huge step backwards in my opinion.
If looking at some weird US foreign policy, it's probably wise to ask who are all the players and what are their motivations. There's usually some deals going on somewhere.

So why is the US supporting this regime?
Password Resets in an Age of MFA
https://www.youtube.com/watch?v=3mnG_Gbxf_w
I have been reading about Google's monorepo setup and source control system, and my answer to the question in the title is simple: they had money and people. It is hard to think any other company that is not of Google's scale would be able to create their in-house source control system and complete a migration. This especially feels true after my company failed migrate from Perforce to git. You don't just build your source control, you build an entire ecosystem around it. And you need (very well-paid, smart) people to do that.
Out of curiosity, does Windows have anything as disruptive as signals? I assume it is also not vulnerable, because SSH server there do not use glibc.
> the air that moves faster across the top of a wing.

Except absolutely flat wings also work where the air is traveling the same distance. They aren’t nearly as efficient, but still produce lift.

Wings shape relates to skin effects, vortexes, turbulence, and drag. There’s a lot of complex interactions involved which don’t simplify to faster moving air creates lift.
Pwr – Paced Web Reader
Check out the Scrollbars series from Raymond Chen:

https://devblogs.microsoft.com/oldnewthing/20030731-00/?p=43...

https://github.com/mity/old-new-win32api?tab=readme-ov-file#...
> Theranos

In fairness to institutional investors, they weren't a _huge_ factor in Theranos's backing, were they? AIUI it was mostly, essentially, individual investment by specific individual rich people, and some VCs.
"$2¢4,000,000" should be "$204,000,000" rather than ChatGPT's "$24,000,000".
Love it! Voice interaction is a great modality for UI. A lot of people have a bad taste left over from early attempts but I expect to see a lot of progress made now that STT and natural language understanding is so much better.

The biggest reason we should be adding conversational UI to everything is the harm done by RSI and sedentary keyboard and mouse interfaces. We're crippling entire generations of people by sticking to outdated hardware. The good news is we can break free of this now that we have huge improvements in LLMs and AR hardware. We'll be back to healthy levels of activity in 5 to 10 years. Sorry Keeb builders, it's time to join the stamp collectors and typewriter enthusiasts. We'll be working in the park today.
That is pretty cool. It's unfortunate his nas case can't do 8 3.5" drives
It is just the cost of good quality. This is like suggesting you shouldn't write error handling code, because the code might change and have different errors that need to be handled.

Also if the interface doesn't change but your unit tests fail on a data structure change then perhaps your tests are too coupled.
Actually, the technical advisory is even more pertinent to the HN crowd: https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion....

And there is apparently already a discussion thread for it: https://news.ycombinator.com/item?id=40843778
"Live view" means a log of the past, not potential futures.
I have multiple medical issues that all have the effect of "you will go downhill fast in your 60s". I'm actually optimizing my health choices for QoL now over long term survival. Lots of more intense medications have side effects that get felt at point (high dosage Prednisone makes you go blind early, my most likely flavor of chemo makes you go deaf similarly)

Decide now on what QoL isn't acceptable to you and plan accordingly. The idea you have to wait around forever to die is a strong cultural belief, but you get to pick how you live your life. That includes how and when it ends.
Most of the time I already know what I'm going to write. Thus most of the time I can start with a simple test and it isn't too early. It is rare to be presenting with a problem in code that you don't know if it is solvable or how to solve it and jump right into code (as opposed to research, or white board discussions), which then gets enough in place that it isn't too early.
Pure love, thanks for sharing !
Sociology: Activist Discipline or Science?
> The cost estimator on IBM's Power Virtual Server site suggests that their cheapest VM capable of running any version of IBM i they support (0.25 CPU cores, 2 GB RAM, 35 GB storage) costs around $400/month.

RZKH (who run Pub400), the cheapest they charge is 245 EUR/month, which at current exchange rates is about US$263/month. That's 0.05 CPU cores, 2 GB RAM, 100 GB storage), without development tools. Development tools license is additional EUR 79/month (about US$85/month) per concurrent user. Plus they want a minimum 4 month commitment, so it is over US$1000 anyway. At which point, yes your eBay option looks better, unless you really need the latest OS
The risk is at the point of entry of your money, not the point of exit.

Find me an employer who will happily pay you cash directly in 2024. Find me a way to get your finances in order without a bank that then has to respect laws surrounding transactions.

The fact we can't obfuscate cash purchases does not reduce the ability of your government to deny you access to your money in a bank.
Even the article itself is tinged with the religiosity that has somehow invaded left-leaning politics. If you commit the sin of having a single opinion that doesn't line up with theirs, you're suddenly "far-right" and become the enemy.
Harris was also good in The Terror, which was a messy show but made me a big fan of the actor (Cirian Hinds was also good).
How much of "normal" stocks are owned by institutional investors?

I own plenty of Tesla through institutional investors, even though I don't want to, because my entire net worth is my house, emergency fund, and funds that hold concepts like "the entire market" or "all large cap companies"
Well, right, but where is the fall guy at Boeing? Someone put their signature on everything, why are they still practicing?
Forgot to share this link as well, not sure if you're aware of it but it's a great write up on fine tuning small local models on specific APIs and seems like it would be a perfect fit for your project. https://bair.berkeley.edu/blog/2024/05/29/tiny-agent/
As the other person pointed out, anything that happens before main is strictly not covered by the C standard.

Even things like “printf” can’t be implemented purely in standard C. Even making a syscall is outside of the scope of the C standard.
In the pseudocode snippet that introduces a WAL, the semaphores are signaled before the fsync occurs. This seems like a mistake but maybe there’s a good reason to do this that I am missing?

Edit: it looks like this is the case in the first batched fsync example, as well.
I think he was saying that he just replaces his whole phone rather than pay Apple to replace the battery (including the effort of getting the phone to them and waiting while they do it). (It took me a while to interpret that.)

I suppose that there will be some number of phone replacements delayed if battery replacement were cheaper and easier. But I'd bet it's a relatively narrow range between "willing to let a pro do it" and "might as well upgrade the features anyway".
> The US already has a huge list of government regulations and people paid to do nothing but regulate industry. Those industries currently poisonthe air we breathe, the water we drink, and the food we eat. Are we to assume that regulation would work if we only have more than today, or that regulation didn't work despite how much we've thrown into it already?

The argument is that those regulations result in those conditions being currently better than they would be without, and we can look at history to see that this is in fact the case.

Would you expect effective government regulation to be perfectly successful, otherwise it’s deemed useless and might as well be gotten rid of? Do we hold any other pursuit by humans to the same standard?
> An intelligent entity will want to survive

I don't see how that follows at all. You could have an intelligent entity, in the sense that you can ask it any question and it'll give a highly competent response, that is nevertheless completely indifferent about survival. Biological organisms have been formed by selection for survival and reproduction, so they have they operate accordingly, but I don't see the justification for generalising this to intelligences that have been formed by a different process. You would need some further assumptions on top of their intelligence - e.g. that their own actions are the dominant factor in whether they survive and replicate, rather than human interests.
I’m would assume the same. Hence my question.
Please let me know if you have any feedback or suggestions for the player.

And yes I’d feel more confident in Flutter if Google was dogfooding it a lot more.
The mystery of consciousness is how first-person subjective experience emerges from what appears to be third-person objective facts.
Thank you for the link! And congratulations on obtaining your PhD

I have skimmed through it and it's truly amazing how good annotation of the dataset can lead to impressive results.

I apologise in advance if the question seems ignorant: The blog post talked about fine-tuning models online. Given that BERT models can run comfortably on even iPhone hardware, were you able to finetune your models locally or did you have to do it online too? If so, are there any products that you recommend?
Scratch does support user-created blocks.
While I am at it ... other things missing:- search, filter by location, if tech centric filter by tech.
as tptacek's link makes clear, "major questions" was a muddied and rarely-cited corner of the law in 2016. The "major questions doctrine" per se made its appearance in the 2022 decision and was in fact the main purpose of writing a decision banning a rule that had never taken effect and was now obsolete.

When Carr (echoing the conservative majority in Loper) claims that Chevron was all but dead already due to MQD, that certainly wasn't the case before 2022. So your pedantic correction is missing the point even if it were textually accurate.
the placebo effect is still an effect
This is why I'm not sure more languages don't instil the idea of "public" and "private" tests like Go does.

Your "public" tests should document the API for future programmers. This is the concrete contract that should never change, no matter what happens to the implementation. If these tests break, you've done something wrong.

Your "private" tests are experiments that future programmers know can be removed if they no longer fit the direction of the application.
An FM receiver is pretty basic, cheap, and easily understood/home-built technology. Does DAB+ require an encryption key, license, or otherwise limited-access component that would prevent people from rolling their own receiver?
This is a good resource, however, it didn't apply in my situation because it describes the manual calibration process, not the auto-cal (which the F0 probably doesn't even have).

I still haven't come across anything that explains in detail how the auto-cal works and precautions one needs to take when it is running. The reference manual section is something like one paragraph and can be summarized as:
"You can turn this on and it will calibrate your clock. You can also turn it off."

If I had to guess, it probably does something similar to the manual process, but just in the MCU logic. It's the lack of detail that got me: I basically ran out of things to try on the UART itself and started looking around at other parts of the chip to see what could at least be indirectly related.
Good catch! That was a think-o. I've swapped it around so that semaphores are signalled after the fsync.
Only if they still have a vision and see a future path. In this case, doesn't sound like it from OP's description.
Shipt’s algorithm squeezed gig workers, who fought back
What's the Deal with Nap Bars? Now you can pay to take a midday snooze
Serenity OS also makes use of pledge. The episode in which Andreas kicks it off was delightful to watch.
Infinite loops are not that harmful by themselves if they only spin the CPU. The scheduler can schedule other work on the core if the process' timeslice runs out, or it results in a frozen application if said infinite loop happens on an event loop thread.

Neither are pleasant, but they don't compromise system integrity and as such are not substantially different from other kinds of crash bugs.
I learned about the vulnerability by the FreeBSD advisory and searched for ssh on hacker news and didn't find the other post... just to find the other post on the front page... well.
The app is client-side Javascript, it's most definitely "running" on your machine.
One would think that after three decades of the windows metaphor and billions of man-hours writing such applications, writing GUI apps (for any platform) would be a much more pleasant experience?

One could imagine a framework that would absorb all this historical know-how and turn GUI app development into a zero marginal cost exercise (fast, functional, cheap and maybe even pleasant) but who would push for this and why?

Maybe its a case of somebody not learning a lesson when their economic interest depends on not learning it?The overview of existing frameworks (including browser/webview based) suggests there is a sort of stagnating stalemate that feels sub-par but probably works just fine for those who have any leverage over the status-quo.
Not a carbon tax as such, but the supreme court in the UK recently ruled in favour of an activist lead challenge to stop Surrey County Council from ignoring the environmental cost, when granting permission to dig four new oil wells, in what is seen as a landmark case.

Emissions from burning the fuel had been ignored but will now need to be taken into account.

https://www.theguardian.com/commentisfree/article/2024/jun/2...
> Because at the end, it's all just graphs with vertices and edges.

That's not the end. At the end there are just objects and morphisms between them. Graphs (with their edges and vertices) are just a special category of... Well, have a look at "Category Theory".
And you seriously think that allowing anyone to do unregulated construction, electrical or plumbing work is going to improve your life?

Even if we hyperfocus on the narrow self-interest of you being able to do your own work (which is questionable), you realize you go into other people's homes right? Your friends and family live in those homes? You go into those homes. Just how many houses burning down from shoddy electrical work is too an acceptable cost?

Just how much lead leeching into your water is an acceptable tradeoff? What about the power grid being down for days? Or unmaintained power lines starting wildfires? Or the car you drive being a death trap? Or pesticides in your food?
Thanks for the quick response, and for the nice write up. I thoroughly enjoy the python-like pseudocode, it was the main reason I was able to pick that out reasonably quickly!
Why (Neo)Vim is not for you
The pro and anti sides of generative text and generative art seem to be completely separate, so I don't think they can be mixed up like this. On the generative art side, I find the users to be well-versed while the artists who worry about it are currently deleting years of posted work to reupload with questionable anti-AI tools like Glaze long after that art has already been scraped and trained on.

FWIW I'm on the pro-artist side and anti-the current state of things, and wish we could start over with a collaboration between technologists and artists rather than each side having nothing but sneering contempt for the other.
Just got back from 12 days in Germany to follow Scotland in the UEFA Euros - team was a bitter disappointment, experience was once in a life time.

Having to use my phone for everything from buying/selling my match tickets on stubhub, match tickets on the UEFA app, Deutsche Bahn train ticket on an app, online QR code attraction entry ticket, audio walking tours, restaurant menus (much less of these thank god), and more, made me VERY anxious every day.

If my phone's battery died through the day (which it did FAR too often), or if i lost my phone, i was completely screwed and would not have access to my overpriced match tickets nor my much needed train ticket.

I felt like a luddite carrying a paper guidebook so I didn't have to really on my phone for maps and location/attraction details, but I don't know how else I would have managed.

Luckily my mobile plan allowed international data so I didn't have to roam.

Our reliance on our phones is frightening, and every company locking us into their apps for 'basic' information/tickets is bothersome. I get it from the business point of view (and the 'let's save the trees' perspective too), but from a traveler's point of view it is very cumbersome and overly complicated to have to not only juggle all the apps, but also focus on maintaining the battery and connectivity of your device so you don't lose access to must-have important documents.

I sorely miss the days BEFORE ubiquitous internet, connectivity, and mobile devices. Maybe I am a Luddite.
Show HN: I made an alternative to NaturalReader or Speechify
Hasen't this use case been replaced by QR code use a decade ago already?
When jumping from 7B parameters to 70B to 400B (or whatever GPT-4 uses) most of the additional neurons seem to go towards a better world model and better reasoning (or whatever you want to call the inference of new information from known information). There doesn't seem to be any major improvements in basic language skills past 7B, and even 1B and 3B models do pretty well on that front.

In that sense it's not that surprising that on a pure text extraction task with little "thinking" required a 7B model does well and outperforms other models after fine tuning. In the "noshotsfired" label GPT-4 is even accused of overthinking it.

It is interesting how finetuned mistral-7b and llama3-7b outperform finetuned gpt3.5-turbo. I would tend to attribute that to those models being newer and "more advanced" despite their low parameter count, but maybe that's interpreting too much into a small score difference.
What you are describing are essentially an extended version of various security http headers.

* first requirement can already be done using Content-Security-Policy header

* haven't found a suitable header for the second requirement

* third requirement can be done with Permissions-Policy header
Neat! Very intersting
The blood test for vitamin D my doctor showed me includes a safe range.