skysight-inc/HackerNews huggingface dataset:
And yet, do you know when the hottest month on record was? It's easy to answer: last month.

It's been "last month" for the last 12 months at least. Basically, we've hit the J curve.

The "extraordinarily significant events" you cite amount to little more than a guy who jumped off a bridge thinking: "you know, I think I've changed my mind".

(And yet, we just bought $700 of seedlings and I spent my birthday, and many other days planting them. It's not a pointless exercise, it will improve things in my little corner, but it won't materially affect anything either).
That's why there's a sharpie in the first aid kit. If you're out of stuff to write on you can just write on the patient.

More seriously, we need better purpose build medical computing equipment, that runs on it's own OS, and only has outbound network connectivity for updating other systems.

I also think of things like the old school "check list boards" that used to be literally built into the yolk of the airplane they were made for.
The prayers from the Quran are always so pretty sounding.

If you haven't seen Bab Aziz, do so. Some of the prayers at the holy gathering are absolutely beautiful to listen to.

Literally no idea what they're saying. But pretty though.
I expect the same. The phone prices are astronomical due to political corruption, in part, and right wing judges usually side with the corrupt in cases like this.
We also could largely solve this problem with technological enforcement but people really hate that. If we made both the financial penalties for speeding and the probability of being caught sufficiently high, we could practically eliminate it overnight.
Which are then promptly destroyed because the tribes don’t understand what a computer is
> Instead of a rover NASA will send ballast to the moon.

This is borderline criminal.
Is this a phone which I see before me,

The yellow stem toward my hand?

Come, let me clutch thee:

I have signal not, and yet I taste thee still.
> For the most part, you bought software, installed it, and used it. That was it. It never changed, unless you bought it again in a newer version

And it was much better than the current situation, if you ask me.
Is it not possible to class-action the whole prison population at that location? For large prisons, is that still not enough people?

Or does class-action not apply to this kind of violation at all?
Is it hugged to death? All I see is a background image on FF and Vivaldi?
aka acceptance testing

aka The Correct Answer™

For the products I managed in the 90s, I put QA/Test in charge of releases. Very unusual. The results were awesome.
The physical security of computers in , say a hospital, is poor. You can't rely on random people not getting access to a logged in computer.
Traffic deaths are quite literally one of the two leading causes of death of children in the United States, so in this case, yeah, actually thinking of the children makes some sense.
Yes. Because it can be semi-insulating (straw bales) or it can be externally insulated. Mass isn't just mass ... it needs controls and energy input. A hole in the ground is attached to the ground and that's the end of the story. No control. No thermal inputs.
Love this. Appreciate the simplicity and intuitive keyboard shortcuts.
> We were trialing CrowdStrike and about to purchase next week. If their rep doesn't offer us at least half off, we are going with Sentinel One which was half the price of CS already.

You’re still considering them after all this?
Cofounder of DronaHQ here. A retool alternative.

Some other alternatives:

- open source - tooljet/appsmith

1) Platforms compete on degree of complexity of apps you can build on them - you would be able to sfdc level crm/ service cloud/ marketing cloud on Dronahq

2) key point to evaluate would be use cases you can build faster on one vs another ( for instance you would be able to make dashboards way faster on DronaHQ)

One way or the other- you would be able to most of your use cases on either platform but you must watch for scaling on pricing/licensing / performance/ etc at scale.

Hope this helps
The nation's 911 system is on the brink of its own emergency
Even for companies, attestation isn't necessary. If your employer wants to make sure that your VPN passkey is really on a YubiKey, then they should generate it on it for you before they give it to you.
SSA Already announced the switch to login.gov, it looks like it will have broad support if they are starting the migration there.
That was wrenching to read, but it tracks with what I inferred from the books themselves. I am so sorry that Hitchhikers became such a thorn in his side. It was so brilliant and he just didn't want to do any more, and nothing else really worked.

He seemed very unhappy. I'm weirdly glad that the end wasn't a death of despair, just a weird stupid awful freak accident. So I'll choose to believe what the article says.
Yes, the description of the linked video mentions the tribe is being encroached upon by logging interests, so this entire conversation is moot. Capitalism will kill them soon enough, either through assimilation or extermination.
Fun fact: The romans had abacuses (abaci?), which represent a positional number system--including a representation for zero. A Roman abacus would have beads arranged for both decimal (base 10) and dozenal (base 12) calculations--because some of their measures, e.g. 12 ounces to a point, were in base 12 much like the metric system is base 10-centric today. (the wiki article "Roman Abacus" has some nice pictures.)

So yah, Hero of Alexandria would not have had to even make any conceptual leaps like inventing positional number systems. The abacus he already had in his pocket would have been all he would have needed to get him started in the right direction.
Not sure why this would be disturbing.
It is Microsoft's fault that computers running Windows caused 911 systems to fail, surgeries to be postponed, flights to be canceled and so on. Yes, a third party was involved, but why didn't Microsoft have a system for vetting third parties before giving them kernel access?

Apple won't let you add an app to their app store without a vetting process. Microsoft lets you alter the kernel without a vetting process? How many people died today because they didn't get surgeries and because of failed 911 calls?
ok, i love this. I also wanted to experiment creating a wow server using Elixir. Glad to see others exploring the idea
"Will Microsoft and Crowdtsrike be forced to pay for this financially?"

What is "this"?

It is possible to effectively disclaim liability for purely economic loss. For over three decades, we have all read the disclaimers, usually in capitalised text, in source code and "EULAs".

But, generally, it has never been possible to disclaim tort liability for personal injury or damage to "other property". (For the UCC Article 2 scholars, let's assume that the software is service-oriented, not a sale of goods.)

In theory, this exception could include tort liability for injuries caused by software. That is, software developers cannot disclaim liability for personal injuries or damage to other property. (Not to imply anyone could successfully plead such a case.)

For example, the top ranking comments in the another thread on the outage, which is approaching 3500 comments, are about the effects of the outage on people in hospital. Is this physical harm to persons as a result of "security updates".

The blog post mentions the idea of a "standard of care" for software developers. That is an invitation to discuss tort liability for software.

Theories are just that: theories. Tort liabiilty for software is all but nonexistant.
The URL has an extra l at the end.
A large hospital takes in power from multiple feeds in case any one provider fails. It's amazing that we're even thinking in terms of "a security company" rather than "multiple security layers."

The fact that ransomware is still a concern is an indication that we've failed to update our IT management and design appropriately to account for them. We took the cheap way out and hoped a single vendor could just paper over the issue. Never in history has this ever worked.

Also speaking of generators a large enough hospital should be running power failure test events periodically. Why isn't a "massive IT failure test event" ever part of the schedule? Probably because they know they have no reasonable options and any scale of catastrophe would be too disastrous to even think about testing.

It's a lesson on the failures of monoculture. We've taken the 1970s design as far as it can ago. We need a more organically inspired and rigorous approach to systems building now.
"Vast majority of the animals"

You know that the extinction rate of species (which includes animals) is running at approximately 200 per day.

Unless you mean the vast majority of animals in the sense of numbers of individual animals, instead of diversity of species, then maybe you're right: the vast majority will be fine as the biomass of domestic animals now outweight the biomass of every other species.
Respect has to be earned.
> My experience shows that oftentimes these new and supposedly backwards compatible features still break old functionality.

Well that's the first issue: downright malpractice. Developers should learn how to know (and test) whether it is a major change or not.

The current situation is that developers mostly go "YOLO" with semantic versioning and then complain that it doesn't work. Of course it doesn't work if we do it wrong.
I was taught in high school that using "In conclusion" to open your conclusion was cliche and really almost like an unnecessary slap in the face to the reader. Your composition should end with a conclusion, yes. There was a standard formula for that, yes. But it's not necessary to literally label it as such.
It's cartoonishly evil what we do to the mind-broken people we label as criminals, in the name of justice and what's Fair & Right!™
There is going to be a point in the climate change phenomenon where we have to start taking aggressive measures and actually go after the biggest polluters no matter what nation they hide behind. Especially considering there will probably be forces working to undermine all of these climate goals. Maybe the US could throw some of that military budget around and use Seal team sappers to disable these polluting industrial plants? Now before people get guarded at that idea, just consider the US already does the same to kill actual people with such operations. Merely disabling infrastructure not only has some precedent, but also seems far more benign to me.
There's an edition every three years, so in the next six months we'll get a nice Rust 2024 fad :)
> I built a solar powered pond fountsin a month ago

Interesting! What kind of aeration/water exchange/GPM are you finding effective for a half acre pond?

I would love to click your links. :)
But sometimes the goat escapes and then breaks everything. Then somebody's got your goat.
There's also Microsoft's Fluid Framework and Azure Fluid Relay which is powering their O365/SharePoint product.
People on HN have a very, very strange idea of what a "CTO" does. Kurtz was the CEO of Foundstone when MCAF bought him. Foundstone was not small. The most important skill most CTOs have is identifying themselves as "the CTO" on calls with customer prospects.
It's amazing how powerful hardware is in the past decade, and how masterly crafted and efficient some software is (linux, nginx, etc) ... while other software is so profoundly inefficient, that we forget.
Maybe YOU think corn is harmless, but most of the country doesn’t. It’s not funny/ a joking matter!
Staged rollout in the traditional sense wouldn't have helped here because the skanky kernel driver worked under all test conditions. It just didn't work when ot got fed bad data. This could have been mitigated by staging the data propagation, or by fully testing the driver with bad data (unlikely to ever have been done by any commercial organization). Perhaps some static analysis tool could have found the potential to crash (or the isomorphic "safe language" that doesn't yet exist for NT kernel drivers).
1. System high/network isolation is a disaster in practice and is the root of MSFT and AD/ADFS architecture

2. The problem is the ubiquity of windows so it’s embedded in the infrastructure

We’ve put too many computers in charge of too much stuff for the level of combined capabilities of the computer and the human operator interface
No, that is about a court re-trying someone, which they cannot do. The evidence itself may well prove their guilt.

The point being that a lack of evidence of guilt is not evidence of a lack of guilt. But we require evidence of guilt for convictions, not a lack of evidence of innocence (in criminal cases, and if it's not an affirmative defense).
> ~joking but not really~

For some languages and applications it can be trivial to backport the changes then trying to keep up with the new features. If it's tested and stable it will likely be more stable than a new version, I do this for some smaller programs and I'm not even a real programmer but more of a hobbyist
They likely say that more people use fast roads, so it's expected to have more accidents. The safest road is one never used.
The grokking papers show that after sufficient training models can transition into a regime where both training and test error gets arbitrarily small.

Yes, this is out of reach of how we train most models today. But it demonstrates how even current models are capable of building circuits that perfectly predict (meaning understand the actual dynamics) of data given sufficient exposure.
You write as if economic exploitation was somehow off the table. But economic exploitation isn't restricted to outright slavery, not at all.

Trade is disastrous when suddenly all local production has to compete with hyper efficient imports, but there's no export to really pay for imports. The damage to local production happens despite the imbalance. Repeatedly give a man a fish and sooner or later he will forget everything he ever knew about fishing.
Spellbound is an instruct model to NovelAI's completion model: you enter commands which in turn dictate what happens to your character, then the AI models how others would react to you
Ah I see, most frontend frameworks have libraries that work with firebase auth. If you use an MVC like rails or .NET core MVC etc, you can use Firebase auth from a CDN and put it in script tags along with JS to work with the library.
It's hard to be compassionate and cynical at the same time. Your heart tells you that you want things to work out for the best so badly. You feel a little of all the suffering in the world around you. But you also know the Sirius Cybernetics Corporation is going to make record profits this year.
Prefering the old ways is real.

Growing up (1960s) I was exposed to Western Desert language groups, in the mid 80's I spoke to the Pintupi Nine.

https://www.bbc.com/news/magazine-30500591

One brother turned back soon after, the others declined in health thanks to modern life and sugar.

It's interesting to contrast first hand experience with lifetime hunter gatherers with techbro manifests about how living with technology is so much better.

Given a real choice not everyone is convinced.
What's the non-savior third option, medium intervention? Ask what they want?
> LLMs are discriminating actual truth

No. They are functions of their training data. There is absolutely no part of a LLM that functions as a truth oracle.

If training data contains multiple conflicting perspectives on a topic, the LLM has a limited ability to recognize that a disagreement is present and what types of entities are more likely to adopt which side. That is what those studies are reflecting.

That is, emphatically, a very differing thing than "truth."
Similar vibe: Finding out how little time astronauts actually got to spend in space.
Is this really open-source? The main sauce in this seems to be the text extractor "Unstract LLMWhisperer" that gets very expensive very fast if you're using it a lot.
Writing from the SRE side of the discipline, it's commonly a configuration change (or a "flag flip") that ultimately winds up causing an outage. All too seldom are configuration data considered part of the same deployable surface area (and, as a corollary, part of the same blast radius) as program text.

I've mostly resigned myself today to deploying the configuration change and watching for anomalies in my monitoring for a number of hours or days afterward, but I acknowledge that I also have both a process supervisor that will happily let me crash loop my programs and deployment infrastructure that will nonetheless allow me to roll things back. Without either of those, I'm honestly at a loss as to how I'd safely operate this product.
> only 3.6%
> GIL is then a pretty overblown problem, as this is not very significant

How do you conclude this? 3.6% of the time spent being locked seems pretty significant. As another user notes, this is 3-4 fewer machines you need to pay for out of every 100 you currently use.

But the problem is worse than that. That's 3.6% of the time you're locked, not 3.6% of the time your program takes vs the time it would take without GIL. During that same time other processes could be run. I've seen plenty of mundane and ordinary tasks be 10x to 1000x faster when comparing serial to even unoptimized parallel. I'd be really careful to take this conclusion unless you actually have experience in writing parallel and/or optimized code.
Why package by feature first and then by layer?
In a recent (abandoned) project, I used Reflect: https://reflect.net/

It was by far the most developer-friendly experience I've had trying to implement collaborative editing. The one thing it didn't have that YJS did was built-in undo/redo.
The last Australian deep desert tribe to discover that their continent had been colonized by white people was in 1984. When they realized that extended family members from other groups had been living with running water (and sugar!) for years while they were out in the desert, they were pissed. Only one member of the group chose not to join modern society.

https://en.wikipedia.org/wiki/Pintupi_Nine

https://www.bbc.com/news/magazine-30500591
Mostly under the (non-)guidance of one Earl Mountbatten of Burma, the one described as "every inch the King".

https://read.dukeupress.edu/cssaame/article/25/1/89/151/Gene...
> We also could largely solve this problem with technological enforcement but people really hate that.

The challenge in giving powerful entities direct control over our actions is they:

directly control our actions,

ceaselessly seek to control other actions,

will be as unaccountable as they can be,

will not ever allow control to flow in the other direction.
Your comment assumes that these tribes are not aware of us, I think that they have the exclusive right to choose when/if to reach out to the “civilized world”, we don’t have to make that choice for them.

We’ve seen what happens when we choose to meddle with these tribes when people tried to reach out to the Sentinel tribe. A missionary traveled to the island and tried to introduce them to Christianity (he was killed as a result), another group of people kidnapped six of the island’s inhabitants for the purpose of “studying” them. Eventually the situation got bad enough that the Indian government intervened and made it illegal to go the island by sea or air (they banned air travel because the sentinels would fire arrows at helicopters). We need to just leave these people alone and only observe from a great distance.
In my one trip to China so far, this is exactly what I observed!
This assumes the attacker has unrestricted access to memory. If a malicious actor has that level of access, you've already lost all security guarantees, regardless of the auth mechanism.

A more realistic scenario is where the user has installed a malicious extension that can exfiltrate the cookies. Requiring reauthentication makes an exfiltrated cookie less valuable. While the extra auth step can be annoying, it also provides an opportunity for additional safety checks (like validating that the IP of a request matches that of the recent auth).
Newborns inherit antibodies from their mothers iirc.

Besides how hard it is to get everyone on board with vaccines even when they have been raised in a culture that's seen wild success from them for generations
I mean if they're finding sources through the comment and then corroborating their stories via actual interviews, it's completely fine practice. As long as what's printed is corroborated and cross-referenced I don't see a problem.

If they go and publish "According to hackernews user davycro ..." _then_ there's a problem.
I just recently found out about automerge from this youtube channel. https://www.youtube.com/@localfirstfm

I love the idea of "local first software" https://www.inkandswitch.com/local-first/
Doom on Playdate
This assumes that "AI content" and "human content" are of equal value, which is still up for debate and I'd argue not true.

That means this will devalue AI content and ad impressions, but not necessarily human content, if people in fact value it.
Guess I misinterpreted your comment ¯\_(ツ)_/¯, relax.
Talking about why it is happening is helpful.

I’m just surprised nobody is talking about the reason the government claims it has limited access to information: preventing disinformation.

Not a single person here has commented about disinformation, but it is the single most applicable part of this article for Americans.

Preventing the spread of disinformation has been the supposed in the last decade reason for the largest censorship campaigns our nation has ever seen.
Why does the website have a scroll bar? My browser’s window already has one.
But neither “chink” nor “spick” is even remotely as offensive as the N word. The fact that I won’t even use the word but I will use the other 2 is proof. I don’t think you would use the word either. If we assume that we’re dealing with a word of that caliber for South Africans, it’s understandable why they want it changed.

We could have an argument about whether we should even have words that have this kind of “Voldemort” power in our vocabulary, but at present we ascribe a lot of power to these words.
our industry could use a risk assessment index scanner on updates, similar to "npm audit" , that measures the delta between versions and gives a risk indicator based on a number of parameters.

The issue with changelogs is that they are an honor system, and they don't objectively assess the risk of the update.

Comparing changes in the symbol table and binary size could give a reasonable red/yellow/green indicator of the risk of an update. Over time, you could train a classifier to give even more granularity and confidence.
> Active Directory for authentication.

In my experience that'd be 90% of the equipment.

"Oh! It has LDAP integration! We can 'Single Sign On'."
I would have said Quakers. Because of persecution after the English civil war (Quaker Act of 1662, mostly), they couldn't hold public office. So they went into commerce & industry.

"Charles II, 1662: An Act for preventing the Mischeifs and Dangers that may arise by certaine Persons called Quakers and others refusing to take lawfull Oaths."

https://www.british-history.ac.uk/statutes-realm/vol5/pp350-...
Found a new religion based on transpermia. Discovery of life on another planet would shake things up a little in the theology department.
data sources are notoriously bad everywhere human entry is the processs
He's saying that if a stretch of highway has traffic volume of 10 million trips taken on it in a year and an average of 2 deaths per year, that is still much safer than a neighborhood street which sees 10,000 trips per year and averages 1 death per year.

(numbers made up to emphasize a point, a neighborhood street with 1 death per year is pretty obviously unsafe)
I tried it on technical queries and it hallucinated like crazy. Probably ok for narrow tasks, but I wouldn’t expose it through the main UI like they did - people expect some degree of intelligence there.