skysight-inc/HackerNews huggingface dataset:
> If LG sold a fridge that would die after five years because of compressor fatigue and then silently updated their fridges to not operate colder than 45 degrees F to extend the life of the compressor, I woul

Apple sycophants are willing to put up with any bullshit from Apple. It is very tiresome to argue against blind faith.

Any other company would face incredible scrutiny if that happened. Imagine if MS did that to their surface devices. And this level of scrutiny from consumers is healthy.
Solution: don't run software that runs in kernel mode. It's wildly unpopular in Linux, rampant on Android, fairly standard in Windows, and impossible on Mac. We've made this too normalized. Such software is inherently risky, and the fact it's a blackbox blob makes it unauditable. Even nvidia is moving away from kernel blobs.
This is good news. Here's hoping for a federal law that makes age verification for pornographic content a requirement across all states.

There's no reason why these sites shouldn't shoulder their share of the responsibility to prevent children from accessing this content.

It's really quite telling that Pornhub is removing itself from all markets where it's mandated to do this. Like all dealers of addictive and abusive substances, they want to hook their users in while young and impressionable.
The only reason wallhacking is possible in the first place is a server sending a client information on a competitor that the client should not know about.

IE the server sends locations and details about all players to your client, even if you are in the spawn room and can't see anyone else and your client has to hide those details from you. It is then trivial to just pull those details out of memory.

The solution forever has been to just not send clients information they shouldn't have. My copy of CS:GO should not know about a terrorist on the other side of the map. The code to evaluate that literally already exists, since the client will answer that question when it goes to render visuals and sound. They just choose to not do that testing server side.

Aimbotting however is probably impossible to stop. Your client has to know where the model for an enemy is to render it, so you know where the hitbox roughly should be, and most games send your client the hitbox info directly so it can do predict whether you hit them. I don't think you can do it behaviorally either.
The Nakba was (and still is) a Nakba because ...

The colonizers sought to impose an objectively unfair partition plan (granting them far more valuable territory and resources in proportion to their population at the time), with the muscular support of their European friends.

The Palestinians rejected this "proposal" outright of course, exactly as any self-respecting people would. Exactly as the Algerians rejected France's proposed "partition" of their historic homeland, and the Vietnamese (by and large) rejected America's proposed carve-out of theirs, etc (just to pick a few notable exactly from approximately the same time frame).

And yes, they made some poor choices of friends (as they readily acknowledge), and woefully miscalculated their own strengths and capabilities and so on. And then there are other factors you're carefully not mentioning, such as the expulsions and massacres already underway in Jaffa, Deir-Yassin and elsewhere before this supposedly entirely unprovoked and one-sided "attack".

But there's no reason to keep punishing the current population for these decisions, and exploiting this history (and the continuing indifference of both their so-called friends in the Arab world and the international community at large) for the sake of current and future land gains. Which is basically what the continuing (having of course never really ended) Nakba (that certain very notable public figures are proudly and openly hoping to officially upgrade to Nakba 2.0, in their own words -- do we need to name any names here?) is really about.

And whatever is happening in the ground today (and however much blame can justly attributed to both sides) -- there's nothing to be gained from nullifying history, or reducing it to such trite oversimplifications as in the parent comment.
Here's what I'm doing with Prolog:

https://github.com/stassa/louise

Louise is a Meta-Interpretive Learning (MIL) system. MIL is like a second-order Prolog where first-order programs are learned from higher-order programs by Resolution. There's a long thread of literature on MIL going back to 2014 but it now seems we're starting to move towards applications, e.g. I'm doing a post-doc where I use MIL to learn autonomous behaviours for an agent that must guide a mobile robot in survey missions. Other colleagues are working on applications in biology. We're going slowly because there's very few of us but MIL is a powerful technique that extends the soundness and completeness of SLD-Resolution to induction, so I'm hopeful that good things will happen with a bit of elbow grease and a bit of patience.
It appears insecure because it is under constant attack because it is so prevalent. Let’s not pretend the *nix world is any better.

I’m no fan of Windows or Microsoft but the commitment to backwards compatibility should not be underestimated.
You just described basically the entire trading strategy of most high frequency traders.
Sorry to get a bit nerdy here, but in JS, neither pass by value nor pass by reference make sense as it’s not defined by the spec and much less followed by the implementations. Strings can be pointers to buffers or ropes, numbers can be values (NaN-boxed or otherwise) or pointers depending on a number of conditions, it all depends. However, from what’s observable in the language, all variables are pass by value. There’s no way to pass anything at all by reference, primitive or not, i.e. you can modify a field of an object you were passed but you can’t change the object.
No, lots of VMs don't have any JIT and just interpret bytecode with a loop around a big switch statement (e.g. Python before 3.13).
Just hope the state never decides to mistakenly press charges against you.
You need to justify how it will improve your life after it's done. This could be by skill improvements, income, community growth, job opportunities, etc. If it isn't going to help you then it's hard to justify doing it.
Would you really have been permanently damaged if it were a porn site? :)

I think it's very funny by the way :) Love the idea
It's probably more about relevance

My general advice is to have a longer CV/Resume that you trim down & edit per job application.
>I suppose we wouldn't know whether an audience for those ideas exists today because they would be blacklisted, deplatformed, or deamplified by consolidated authorities.

Be realistic, none his ideas would be blacklisted. They sound good on paper, but the instant it's time for everyone to return to mudhuts and farming, 99% of people will return to Playstations and ACs.

He wasn't "silenced" because the government was out to get him, no one talks about his ideas because they are just bad. Most people will give up on ecofascism once you tell them that you won't be able to eat strawberries out of season.
I don't know if this is the oldest recording of a FAMOUS person, but here's Brahms in 1889:

https://www.youtube.com/watch?v=H31q7Qrjjo0
No, but the scrapers cannot tell it apart from LLM output.
But every serious chess game is a matter of time allocation. The best players in the world are unable to calculate as much as they want in every position: Ultimately there is bluffing and risk taking. See the last game of the last candidates, where both Fabi and Ian have to win to get into a playoff, and they get themselves into extremely complicated positions, where accurate play just takes too long for a human. At an 8 hour time limit, the game is very different than at the time the players actually had, as ultimately Fabi just couldn't calculate to the end on every position he knew was key.

It wasn't the most accurate game of the tournament, but the most instructive as far as the psychology of chess goes
Agreed, the video goes into depth in those tradeoffs.
Mac does it, although that most definitely does not fill the same enterprise role as Windows.

It's possible to make userspace interfaces and permissions for this sort of thing.
Europa is orbiting Jupiter.

Jupiter puts out a lot of radiation: https://news.ycombinator.com/item?id=40978670

For sure, Venus needs exploration. I'd like to see an orbiting station with a 10 year mission to explore the Venusian atmosphere via drones or other methods.
Loving the choice of words.
The vast majority of Jews made significant geographic moves in the 20th century, either from Europe/Russia or the arab world. Most of them went to North America or Israel.
> Those who like him, love him. Those who don’t despise him. I doubt dosage matters.

This is interesting I have not found this at all. For all the polarization we talk about it seems there’s lots of disagreement in the parties, look at the war for power in the house that deposed two speakers. I think there’s people who love him, people who hate him, and lots of people holding their nose.
> A "workaround" isn't an adequate substitute for actual the understanding and fixing of the root cause of a bug.

Right, hence why we recognize that a 10x developer is a weaker developer. Was there something that implied that a weak developer is a substitute for a talented developer for you to say this, or are you just pulling words out of thin air?
The biggest difference is when you feed a sequence into a decoder only model, it will only attend to previous tokens when computing hidden states for the current token. So the hidden states for the nth token is only based on tokens <n. This is where you hear the talk about "causal masking", as the attention matrix is masked to achieve this restriction. Encoder architectures on the other hand allow for each position in the sequence to attend to every other position in the sequence.

Encoder architectures have been used for semantic analysis, and feature extraction of sequences, and encoder only for generation (i.e. next token prediction).
It seems unlikely that a file entirely full of null characters was the output of any automated build pipeline. So I’d wager something got built, passed the CI tests, then the system broke at some point after that when the file was copied ready for deployment.

But at this stage, all we are doing is speculating.
De nada. Punno intendedo. ;)
Sort of related: I was at a restaurant last night where a sports channel was playing a poker tournament. Paint drying would have been more interesting; it was hard to tell if one of the players was even alive.
Yes, corruption does appear to be correlated with power cycles.
Where would the AI get the data necessary to generate correct answers for novel problems or current events? It's largely predictive based on what's in the training set.
I appreciate the response, but that's not what I was asking. I'll rephrase as a workflow question: After I make a design in your editor, I'll want to reuse that for future emails. Is there a way to load a saved design back in (that I previously made in your editor) so I don't have to redesign every email from scratch?
So it will now be cost-effective to connect the exhaust of ChatGPT to its inlet and watch as the quality of output deteriorates over time while making money off ads. Whatever rocks your boat, I guess. How long before the answer to every prompt is "baaa baaa baaa"?
fool me once...
I don't have any affected systems to test with, but I'd be pretty surprised if that were an effective mechanism for un-breaking the crowdstruck machines. Registry and driver configuration is a rather small part of the picture.

And I don't think that's an accident either. Microsoft is not interested in providing end users with the kind of rollback functionality that you see in Linux (you can just pick which kernel to boot to) because you can get less money by empowering your users and more money by cooperating with people who want to spy on them.
"All your idea does is X" can be applied to anything and is likely based on nothing but your gut. This is not compelling reasoning.
It's not an application, it's effectively a driver. It runs in kernel space. So if it has a memory bug you can't recover, you just panic. Whoopsie!
Which is funny if you presume it is true that tabs precede standard notation (and therefore recording techniques).

Tabs make quite a bit of sense in a post recorded music culture. However, the information density you can get in standard sheet notation is far greater. There's tradeoffs.
It's stigmatized for good reason. The amount of abuse within the pornography industry is immense. Anyone with any decent of ethics would refrain from consuming this material.
Chord symbol, or chord shape? I'm guessing the latter, because that would tell you: put the left hand fingers in these places, and most of the rest of the tab for that measure would just be which of those notes you pick.
I don't understand...

1. How a few people translate to the entire SV... (well, I do because hyperbole is what media does now, they stopped being journalists)

2. What the GOP platform is for prices & inflation. Tax cuts, 10% tariffs, forcing interest rate cuts, and mass deportation would all seem to lead to more money in the economy or direct price increases
Those aren't embedded systems though, but mini PC computers. And embedded systems often run bare metal C code, not always Linux, especially for spindle/servo control where they get their commands from that PC.
They seem to have backed up a little bit lately with that BS but their price creeping up and the sound quality (or lack thereof) is pushing me closer to Apple music every day.
This is all based on the idea of the Trump they’ve made up for themselves in their mind, the less he’s actually reported in or vocal, the less there’s a chance for a schism especially among moderate voters voting party line.

I mean, very plainly, he lost the last election.
it’ll be utterly drowned out for the vast majority of users
Those signature files should have a checksum, or even a digital signature. I mean even if it doesn't crash the entire computer, a flipped bit in there could still turn the entire thing against a harmless component of the system and lead to the same result.
Many of us found themselves trying their luck in London. They don't seem to financially need it, looking at the expenses.
Generally speaking employees don't really per se use windows so much as click the browser icon and proceed to use employers web based tools.
Until deglobalization sufficiently spreads to the software ecosystem. I have just a few hours ago attended a lecture by a very high profile German cybersecurity researcher (though he keeps a low profile). The guy is a real greybeard, can fluently read any machine code, he was building and selling Commodore64 cards at 14yo. (I don't even know what that is.) He's hell bent on not letting in any US code nor a single US chip. Intel is building a 2nm fab in Magdeburg, Germany, the most advanced in the world when it will be completed. German companies are developing their own fabs not based on or purchased from ASML. German developing their own chip designs. A new German operating system in Berlin.

Huawei, after their CEO got imprisoned in Canada took Linux source code and rewrote it file by file in C++. Now they're using it in all their products, called HarmonyOS. The Chinese are recruiting ex-TSMC engineers in mainland China and giving them everything, free house, car, money, free pass between Taiwan and China just to build their own fab in a city I don't know how to spell the name.

I'm not German but I'll go to the hell with the move to deglobalize, or in other words, de-Americanize. This textarea cannot possibly express my anger and hatred against the past fifty years of the domination of Imperium Americana. Not a single moment they let us live without bloodshed and brutal oppression.
who ranks the content
I don't think you understand the scale of this problem. Computers were not up to print from. Our Epic cluster was down for placing and receiving orders. Our lab was down and unable to process bloodwork - should we bring out the mortar and pestle and start doing medicine the old fashioned way? Should we be charged with "criminal negligence" for not having a jar of leeches on hand for when all else fails?
Is there not responsibility at some level as well to Microsoft for having a kernel which even loaded this? Not just because of the apparent corruption, but also ... it was, I heard.. signed and given a bit of an MS blessing.

This crap shouldn't be run in kernel space. But putting that aside, we need kernels that will be resilient to and reject this stuff.
There are a million other ways to access it. I don't know how introducing privacy invading practices could end up as a net good.
I feel like this whole topic (having food on hand in case of a disaster) gets overcomplicated. By people who feel helplessly addicted to modern conveniences or something.

I mean I'm not a prepper. But hello, I cook. So at any given time I have several kilos of shelf stable dry goods like rice, beans, flour, pasta. Plus cooking oils and a bit of canned fish, vegetables etc. This stuff pretty much all lasts for years.

I'm sure I have at least two weeks of food on hand, the calories are easy to calculate. If I felt I needed more I would just be buying more of what I already have, except leaning more heavily into canned fruit/veg/meats.

In a pinch a camping stove is all that's needed to make all this stuff edible.

Now water on the other hand, due to the storage space needed, that's a tougher issue.
Thanks a lot! I do cache the account if it was already analyzed. It will then show the data directly.

It does take a while since it's scraping in the background.
Be VERY careful using Kagi this way -- I ended up turning off Kagi's AI features after it gave me some comically false information based on it misunderstanding the search results it based its answer on. It was almost funny -- I looked at its citations, and the citations said the opposite of what Kagi said, when the citations were even at all relevant.

It's a very "not ready for primetime" feature
So what? Stupid shit gets posted as a "book" on Amazon all the time, with or without AI.

Doesn't mean anyone buys it.
> So the snapshot of the web as it was in 2023 will be the last time we had original content

That's a bit of fantasy given the amount of poorly written SEO junk that was churned out of content farms by humans typing words with a keyboard.

The internet is an SEO landfill (2019) https://news.ycombinator.com/item?id=20256764 ( 598 points by itom on June 23, 2019 | 426 comments )

The top comment is:

> Google any recipe, and there are at least 5 paragraphs (usually a lot more) of copy that no one will ever read, and isn't even meant for human consumption. Google "How to learn x", and you'll usually get copy written by people who know nothing about the subject, and maybe browsed Amazon for 30 minutes as research. Real, useful results that used to be the norm for Google are becoming more and more rare as time goes by.

> We're bombarding ourselves with walls of human-unreadable English that we're supposed to ignore. It's like something from a stupid old sci-fi story.
AV is still software, special kind of software but still software.

If you look at how "normal" software updates are handled around the world, you will see a recurring pattern:
- updates are first done in test envs and then in production.
- large production envs are updated in "waves".
- critical updates may go directly into production, but when it happens they need extra authorization and awareness

Please tell me why this pattern cannot be applied to AV updates?

> Now, as for virus protection: AFAIK nobody ever gated AV updates.

What happened today tell us that it is a bad practice, and btw I'm aware of some customer of mine that didn't incur any issue in production because they first updated the test env and spotted the problem.

> The Crowdstrike should be held accountable for this fiasco and not the individuals

We agree that crowdstrike should be held accountable, but they are not the only one.

What happened today tell us that there is a big hole to be plugged. And it can be fixed only but single companies. Crowdstrike, if survives, can improve it's QA process, but who will guarantee you that it won't happen again? What about other vendors? You should always assume that everything can fail and adopt processes that help prevent and mitigate these failures.

Again, think just for a minute, what would be the consequences of the today fiasco if instead of a bad file they would have push a cryptolocker or troian?
Solarwinds tells us that this is not a hypothetical scenario but a real risk.
Design and Control of a Bipedal Robotic Character [video]
Then you haven't met salespeople with high enough budget yet.
I read that title _very_ wrong as injecting ads directly into ChatGPT responses. How hilariously dystopian would that be?
Yeah this is exactly it, you might think you are close but you actually just started, and the actual work is still to come.

Whether you want to push through the initial honeymoon phase, where you are done with the fun part that you started the project for, and do all the rest around it that makes it an actual 'product', is up to you.
The problem ISN'T the null character though. The problem is that they tested the system, THEN changed stuff, then uploaded the changed stuff.

Their standard methodology was to deploy untested stuff.
Linux is a bit unusual in that kernel memory is generally physically mapped and unless you use vmalloc any memory you allocate has to correspond to pages backed by RAM. This also ties into how file IO happens, swapping, and how Linux approach to IO is actually closer to Multics and OS/400 than OG Unix.

Many other systems instead default to using full power of virtual memory including swapping kernel space to disk, with only things explicitly need to be kept in ram being allocated from "non-paged" or "wired" memory.

EDIT: fixed spelling thanks to writing on phone.
dhcpv6 poisoning is really easy to do with metasploit and creates a MITM scenario. It's also easy to fix (dhcpv6guard at the switch, a domain firewall rule, or a 'prefer ipv4' reg key).

unquoted paths are used to make persistence and are just an indicator of some other compromise. There are some very low impact scripts on github that can take care of it

Network segregation, the big thing I see in financial institutions is the cameras. Each one has its own shitty webserver, chances are the vendor is accessing the NVR with teamviewer and just leaving the computer logged in and unlocked, and none of the involved devices will see any kind of update unless they break. Although I've never had a pentester do anything with this I consider the segment to be haunted.
Unknown Driver Analysis
It's not ok for people playing those games. They'll quit playing that game and go to one with invasive client-side anti-cheat instead.

The incentives and priorities are very different for people who want to play fair games than they are for people who want to maximize their own freedom.