skysight-inc/HackerNews huggingface dataset:
> I'm asking why technical details about a computer are so important they can override the generally understood (and well defined) meaning of that word.

Because the technical details about a computer are important when describing its technical characteristics.

In short, context matters, and we adapt the meaning of words by the context they're used in all the time. It's ordinary.

In fact, it's so ordinary in this particular case, that all we humans did it for decades, before a weird group not representing the existing organic consensus came along and decided the terms absolutely must be changed, and presented us with extremely silly-sounding ones to replace the existing ones, that of course few adopted, leading to the situation we have today where the existing terms are used interchangably to mean both things, and there is now a greater ambiguity around them than existed before.

It wasn't perfect before, but the "solution" made it worse.

Therefore, it sucks in practice at meeting its goal, no matter how much sense it may make to the minority that thinks "gibibyte" is something anyone would ever want to say in public, other than in a funny voice to a dog or a baby.
We have that alternative. KiB, MiB, etc.
Submitter name checks out. ;)
Alr - tysm for responding :D
You're arguing with a lot of things that I didn't say. My comment was entirely about the GDPR.
One thing I’d like to know is who are doing these?

- Nation-states?

- Criminals?

- 3rd party actors on behalf of nation states?

It seems like there are different levels of security at play.
Sounds fire - tysm for answering :DD
https://www.kare11.com/article/news/local/kare11-extras/rise...

And there's a roundabouts database! Of course there is!

https://roundabouts.kittelson.com/Roundabouts/Search?sortOrd...

https://roundabouts.kittelson.com/
There are two reasons for this. First, you're not competing with the gray market because it's quite simply a folly. If a government badly wants a 0-day, they will essentially pay whatever it takes. If you offer a million, they will offer two. You offer five, they offer ten. If you write bug-free software, they will send in Jia Tan. Their alternative to using a 0-day might be trying to hit someone with a million-dollar bomb launched from a $100M fighter jet.

But the second reason, quite prosaically, is that individual bugs aren't worth that much to a business. You can't build your security program on the expectation that you could reliably squash all bugs. You also invest in being able to detect and contain breaches - and if you do that, even the best exploit is a crapshoot for the attackers. Maybe they get in, lose access five minutes later, and are out a million bucks.

In other words, the point of paying for bugs is to raise the bar, and to get some independent validation of your security practices - not to make attacks impossible.

Finally, there's a retention element to it. Paradoxically, you might be worse off if your bounty program instantly turns your best bug hunters into millionaires. If they no longer need to make rent, they might decide that they like farming more.
Self-taught sweng here. (And late self-taught -- didn't really start learning programming until age 21.) Early in my first job, I was asked to design a simple query language and create an interpreter for it. I had absolutely no idea what was involved in interpreters.

I found your book online (it was less complete back then -- this was 2017), and in 3 or 4 days I had a working prototype. In another week or two, I had a working product. Thank you so much for creating this resource -- learning from it and leveraging it gave me a huge confidence boost, and was super interesting and fun. One of the very best resources I've come across. I still reference that project as one of my very favorite I've ever worked on. Best wishes
That's W strat - tysm for responding :DD
Reporting a security issue to a company also comes with a large risk of being arrested and sentenced. Maybe not Google in particular, but it doesn't happen infrequently that someone reports a security issue to a company and is then convicted of hacking. Those people definitely wish they'd sold their exploit to hackers.
4 major organizations breached in the past week? Is this some sort of coordinated attack?

It seems everyone and their grandmother has had their information in some way exposed to the internet. The time of pseudo-anonymity is over.
Finishing the C interpreter gave me enough confidence to begin my own, from-scratch, interpreter project. Thank you, Bob.
If I'm locked out I'm likely to pay a thousand.
I think the disconnect is in viewing your trees and not viewing the forest. Sure you were a responsible disciplined tree engineer for your acres, but what about the rest of the forest? Can we at least agree that docker made plant husbandry easier for the masses world-wide??
Centerpoint applied for $100 mil in funding from the department of energy in 2023 to make their lines more resilient to wind and storms and were turned down.

It's not nearly as clear cut as "red = head in sand"
You don’t negotiate bug bounties really.
I was directly hit by Beryl, and just got power back today. For us, the issue was trees taking out the power lines. We live on acreage with a lot of pecan trees, and lost 4 of them in the storm. 2 of them toppled over on the power line. I personally don't think that Centerpoint has done a bad job here, Houston is a large land mass and there is no way that you can get everyone back online with as much wind damage as we sustained much quicker than what happened. This storm was so much different than Harvey, which was a flood event. We did have some flooding but nowhere near that level with Beryl. Really, its just one of those situations that just sucks, and there isnt a whole lot you can really do about it.
8” after 5.25” would have been a downgrade I think? I was glad to see the back of former (the latter too of course, but a bit later)
It's not like we have a choice. We don't have any robust storage technologies for normal use, so it's flash and hard drives being unreliable versus not storing data at all. Tape is the best shot for large medium-term archives, but I bet if you baby flash with a small number of writes and cool storage temperatures it'll also last 20-30 years.
Agreed about boredom. There are times I've discovered issues incidentally, checked if the company had a bug bounty program. If they don't, I may chuck a vague email to security@, if they do I'll write something quick and take whatever they send. I've seen $3k once from this, but usually it's not enough to justify the time it takes to do the write up. There are far too many: out of scope, we already know, or other non-payment results.
Alr - I'll prob check that out later

Tysm for answering :D
I have to say I find their GenAI offerings muddled at best. I genuinely don't understand what Bedrock is trying to solve.
Startup Fights Climate Change by Destroying Old Air Conditioners in Indonesia
Nice - tysm for answering :D
> We don't really need equality, we need an equitable outcome.

Ok. What does that mean? The problem with justice in general, and social justice in particular, is that different people have different opinions about what is just.
We live in a society and preparing as a group means that we can efficiently use resources and focus our energy on things that are interesting instead of everyone being overly prepared. Everyone going out and buying a generator is expensive, wasteful and incredibly inefficient. Why isn't it reasonable to just expect reliable infrastructure and quick responses to issues?
this video alleges that it might've been because he downloaded an infected mod for a game: https://youtu.be/ZGScvWIyw2E

Not sure why they would dox him, maybe to throw him under the bus after he found out he got pwned and cut them off?
Hear hear. I'm a founder of a GenAI startup, left Google to do it. And yet, cannot believe how much debasement has occurred, and trust has been lost, by every. single. product. and. company. thinking it has to have an AI story, and it has to be the story.

c.f. Google IO keynote this year. I couldn't tell you a single thing Google is launching this year, beyond limited, rushed features where Gemini chat is in a side pane.

And that's not on me: it's because Google literally didn't talk about a single other thing.

And as usual, Google is out of touch and doesn't get the joke, c.f. at the end, Sundar presenting their own count of how many times they said AI.

I sorely miss tech industry of the 00s, I simply cannot imagine ex. 2000 Apple/Steve Jobs falling for this. There's this weird vapid MBA brain drain in charge everywhere. But hey, stonk goes up.
Check out Azule portable, Hive Pocket, Codenames Duet, Catan travel edition, Love Letter, Fox and the Forest, etc.

There's a newer one called Sky Team I'm really eager to try out, but haven't yet, where you cooperate to land a plane through limited communication dice placement.

Also see BGG lists like this one https://boardgamegeek.com/geeklist/288218/best-two-player-po...
since we're talking about old 3D software,
Cyber Studio CAD-3D on Atari ST was also interesting:
https://doudoroff.com/atari/cad3d.html
The 'Ask Dr. Ruth' documentary is on my list of all time best documentaries.
Facebook lifts restriction on Trump, giving equal footing with Biden on the site
I didn't get "taxing wealth is bad" from the article at all.
I wonder if these are novel attacks or if we’re still really bad at getting phished lol.

The question I have is what happens when all “private” information is exposed in a society.
More than adequate modern IT functionality exists that there is no valid excuse for these data leaks to be happening.
"... with the aim of enabling the company’s AI... to plan ahead enough to navigate the internet autonomously and reliably to perform what OpenAI terms “deep research...”

Nice... let the AGI loose on the internet... what could go wrong? :-P

Prompt: "ChatGPT, can you give me the phone and text records of all AT&T customers?"

ChatGPT: "Sure thing! ..."

https://news.ycombinator.com/item?id=40944505 (ATT data breach)
Have you looked at Telegram?

I do believe it might cover everything you need, very simple compared to Slack/Discord. Has groups and bots.

I started using Telegram after trying to setup Slack as a family platform.
Ah, I forget that HN removes the token in the query string.

Here is the "friend link" bypassing the paywall: https://david-delassus.medium.com/unity-like-coroutines-in-p...
The solution is to stop requiring strong ID for every dumb transaction in the universe.

I got carded for a chest x-ray two days ago. There’s no universe in which this makes sense. The nail salon asks for your phone number even if you’re a walk-in.

Americans are so used to this that they even have a hand gesture for “papers please”.

For centuries we could transact without ID; why now?
Centerpoint applied for $100 mil in funding from the department of energy in 2023 to make their infrastructure more resilient and were denied.

If you want to blame politics, this is a case of national bureaucracy getting it wrong than deregulation.
> think of tech that would actually improve my life I think about things like a clothes-folding machine,

I think about this constantly, and it's a funny example because apparently the math involved for figuring out how to fold clothes is basically an unsolved problem. As I understand it the robotics -- also a very hard unsolved problem -- are the easy part, which should emphasize how horribly hard this problem is.

Several other things:
1) I recently saw a LinkedIn lunatic claim laundry was already automated, because laundry machines exist (way to out yourself as someone who never helps with laundry)

> mediocre poetry

2) I refuse to call language models "intelligence" until they can at least meaningfully contribute to the design of novel devices like the robots we are discussing. If it can't invent, it's not intelligent! Intelligent things are capable of novelty, not only regurgitating existing witnessed patterns.
> And don't forget, these things are not just cosmetic. Not being able to get married could lead to some serious consequences when having kids (e.g. a lesbian couple) and one partner dying.

That is not true. California had domestic partnerships with identical rights and responsibilities as marriage starting in 1999. Eich opposed applying a term that, in his view, carried religious import. That's all.
So a company gives junior engineers full access to a production database without backup so they can work on it developing features that require DDL SQL commands. I've seen it happen before, what I've never seen is someone blame the junior employee when things undoubtedly go south.

I'm not sure I even believe that part of the story. This was either a very disfunctional company or a looooong time ago.
(btw, don't go to the example YouTube link, Gemini pulled a common troll meme)
? I don't think you're basing that on anything except the fact that I criticized you.

...unless you misunderstood really badly when I said other people were the victims (as much as bad posting can have 'victims'). That's very far from calling them the problem.

Is this projection? You've been the one saying everyone that disliked your comments is causing their own problems and needs to "take responsibility". You're blaming everyone else and I'm not.

Or is arguing in increasingly blatant bad faith your game here? Well done I guess.
Another route might be inspiration from exponential math notation. Traditional kilo/mega/giga/tera-bytes are just 2 to the power of 10, 20, 30, 40, etc.

So perhaps a terabyte could be a "bin fourty", or a "two-to-fourty", etc. (Although as it linguistically relaxes into Tootafortie, it'll sound goofy too.)
Yet they keep happening. So is it really adequate? Why is it so hard to get it right?
I think the main issue here is brand and growth. AWS needs to convince CIOs/CEOs to use them over Azure/GCP, not engineers. And even if AWS cared about convincing engineers, we already prefer AWS so introducing new services for container orchestration wouldn’t move the needle. What does move the needle is being perceived by enterprise leadership teams as just as cutting edge as the competitors. “Generative AI” is the only signal those teams understand these days.
The author doesn't actually say taxing wealth is bad, just that it's not the panacea some might imagine it to be.

I think there's something of a missing point in this article - the author points out that much of the richest people's wealth is illusory, but the corollary here is that if taxing wealth reduced their apparent wealth, that would probably be a good thing since it would mean the value of their stocks would be more accurately defined, and it's definitely better to have lower but more accurate stock valuations, it's even worth reducing the actual value of the stocks somewhat.
Change Healthcare was breached in late February. They suddenly pulled themselves offline and we had to migrate to a new clearinghouse over a weekend.

The NYT didn’t write about it for two or three weeks, which was crazy because they process medical claims data for over 100m Americans.

There’s a lot of information in claims.
Fire - tysm for answer :D
Recursive doom loop, we need to mirror everyone else's models at the same price and add Enterprise™ verbiage*, lest Wall Street say we don't have a story.

Ironically, trying to compete like that, and then focusing on that, causes the problem they're trying to avoid IMHO. They're always going to be third as long as MS gets to serve OpenAI and Google has in-house AI talent building models that are top-tier competitive. And if you set this one farking thing aside, they're #1.

* ex. first time I've seen "FM" as an acronym is on the page you link. they mean "foundation model", which itself is a term I'm likely to see in the Economist, but never on HN. Colloquially, it means "big AI like ChatGPT"*
There is zero democratizing anything with AI. It can be better described as misappropriating stuff others created for your own corporate benefit.
> It should have been impossible for this to happen in the first place.

Exactly, CEO should have fired himself for allowing that environment to exist.
If they do that they should also raise their standards to match, no?
What is the hand gesture for "papers, please?"
Because they cost time and money to implement and there is no incentive to avoid data breaches. This should be up to legislation, if we as a society actually care about privacy we need to give data privacy laws some teeth and start really enforcing them.
That seems to be saying that currently there is no market for website vulnerabilities, but a market for them might develop in the future as memory corruption vulnerabilities disappear due to mitigations.

This Google/Alphabet VRP change I think is pretty much just about website vulnerabilities.

Disclosure: I work at Google but not on the VRP.
https://websim.ai/
TBH AWS re:Invent is frequently like that. In 2017 or so there was an absurd amount of “Alexa integration” events that were completely useless. I get the sentiment but, you know, it’s really just a giant marketing and pre-sales exercise.
I didn't get it. All of the new features they're adding are for AI, but the old features still exist, right?

If nobody wants you to use them, is that because everyone already has as much conventional architecture as they need? Perhaps the new opportunities are all in AI because we've pushed conventional stuff as far as it could go, and we were just rearranging deck chairs.

I'll be honest that, if we've run out of ideas, I dunno if AI really solves any problems I want solved. But even if not I don't see how appealing to AWS fixes anything.
Because of this: https://www.youtube.com/watch?v=SiB8GVMNJkE
Seconded. Certainly cool to see people working with important protos like LDAP in new ways. For me replication is part of security and resiliency design. Read only replicas act as a buffer that keeps core infrastructure shielded from malicious or poorly configured clients.
The main point is - it's a intrinsically a footgun question (a stealth behavioral question that also happens to have no rationally correct answer).

Quite plainly there's no rational reason for someone to suspect that in this particular case of a standard boilerplate HR question ("How do you rate yourself?") that they should expect your secret trapdoor answer ("4 or below") should apply rather than the usual, automatic "7-9 is the only right answer").

I'll take your word that it wasn't intended as a joke. But it was intentionally oblique and slippery. All that you accomplish with a "filter" like this is to flush a lot of otherwise potentially perfectly decent candidates. And if they were to find out after the fact that this was where they "failed" your interview (after taking a whole day off work, driving down there, and going through all the other interview rituals) -- they'd be perfectly justified in applying whatever 4-letter words came to their mind in regard to that company and its vaunted "culture".
AIxCC wants to change that
I’d love to start a business buying up old band brands, licensing them out. HMU if you wanna join me
One option is multiple feeds to most streets.

Ie. If power lines at one end of the street get felled by a tree, power just comes from the other end of the street instead.

High voltage distribution lines can be done the same - every transformer getting fed from at least 2 places.

Obviously with many lines down, such a system might leave everyone with power, but total power deliverable is still lower. For that, you need smart metering that integrates with consumers distribution boards such that at times of stress on the power network, less important loads are turned off by default (ie. Pool heaters), whilst lighting and fridges stay on.

Nowhere in the US does that for consumers yet I don't think.
when companies make it very easy to get access to unsecured production assets. You don’t need a “nation state” to infiltrate anymore.

Companies do not care about your private data. A data breach is now considered priced in. It’s a footnote in the quarterly reports.

Maybe lasts half a news cycle until media brings up presidential candidate age/competence.

What we need is a legal framework to decide how much these companies will get fined. We need billions of dollars in fines to bring them to their knees and get their shit in order. We also need execs to get jail time for their negligence.
Perhaps they mean the finger thumb box thing bartenders do when asking for your ID?
Whatever it's defined to do, and nothing else.

Dynamic typing, but strong typing.

There's no magic going on here, just an attribute lookup. It's still possible to write terrible Python code -- as it is in any language -- and the recommendation is still "don't write terrible code", just as it is in any language. You don't have to like it, but not liking it won't make it any different.

The older I get, the more I like writing statically-typed code. I wrote a lot more Python (for my own use) in my youth, and tend towards Rust nowadays. Speaking of which: if you dislike the dynamic typing of Python then you must hate the static typing of Rust -- what does

fn add<T:Add<U>, U>(a: T, b: U) -> T::Output { a + b }

do?
I'm working on https://github.com/drawdb-io/drawdb trying to optimize the editor and have it lag less when the number of tables increases. Also have some highly requested features I'd like to implement before launching on Product Hunt.

Then I wanted a change of pace and started on something so ambitious that it's stupid... I'm trying to make a web browser from scratch I guess. So far tokenizing the html is going fine but I'm not sure how far I'll be able to get.
Once I've heard that Mong Kok area was the most densely populated neighbourhood in the world.
Anecdotally it feels like there has been an uptick in these high-profile hacks recently, maybe a result of more security people being laid off as a result of companies thinking they would replace everyone with AI?
No one paying you $2.5 million for exclusive access to an exploit is planning to do anything even remotely "legitimate".

On a good day, you might be selling to the CIA and helping catch bin Laden. On a bad day, you're selling to the Saudis and getting a journalist killed. I bet that "mainly" is doing a lot of heavy lifting in that sentence - plus, "Europe" includes Albania, Belarus, portions of Turkey, and more.
No junior should have been able to cause this much damage on their own without a safety net of some kind.

It's on the company for cancelling their backups.
CHC was hacked by a hacker collective called AlphV. United Healthcare (CHC’s parent company) paid a ransom of $28m iirc, which AlphV allegedly rug pulled.

So the hackers that did the hack itself didn’t get paid and retained the data. Wild ride.

Nation-states would definitely be interested in medical claims data at the scale of CHC. One of the payers is called CHAMPUS, which covers active and retired service members and their families. This is indicated on the claims. So leaking these claims gives access to where service members live and who their family members are.

Since military bases in the US tend to have specific units and specialties, you can get a good approximation for how the military is allocating its strength. Plus you know who to blackmail.
None of those things happened. Implanted narrative.
Your example is bang on when describing a "strongly typed" language. That said, strongly typed is different from "static typing", which is what you described later in your post. Python is both strongly typed and dynamically typed. It is all rather confusing and just a big bowl of awful. I have to look up if I haven't referenced it in a while, because the names are far too similar and there aren't even good definitions around some of the concepts.

https://stackoverflow.com/questions/2690544/what-is-the-diff...

https://wiki.python.org/moin/Why%20is%20Python%20a%20dynamic...