skysight-inc/HackerNews huggingface dataset:
Totally off topic, but what is happening with YouTube ads? I'm getting 30 to 90 second unskippable videos before every video. This time it gave me two in a row. If I go to another tab it starts over, often with a longer ad.
I agree 100%. And when people inevitably claim that the reason for eliminating the headphone jack is so you could have a phone that could withstand being dropped in water, I think back to the Samsung Galaxy S5 that I bought 10 years ago. It has a headphone jack, a microSD slot, and a user-removable battery, plus an IP67 rating.
>They do make a version of CS for Linux but nobody runs it unless they’re forced to by overzealous compliance drones.

I wish people would stop making blanket statement as if they know how every company in the world runs. Plenty of Linux machines are running CS, and it's not only because they are forced to for compliance. NG AV has been picking up speed as a "just in case" thing for Linux and Mac for years now. Your anecdote does not apply to everyone.
Given that this is from the Royal Astronomical Society, I think they're literally talking about galaxies. They're then using these same scoring functions to characterize the reflections on the subjects' eyes, and comparing the result for the two eyes -- real photos should have similar values, generated images have more variation between the two eyes.
So, Tesla is hiring back some of the Supercharger team that they fired. How convenient after Elon Musk's payout. Make bold moves and then oops, claw some of them back.
Depends on what I'm actively learning at any given time. Right now it's 4, sometimes it could be closer to 20.
idk, a lot of system are never meant to be rebooted outside of the update schedule, so they wouldn't have been off in the first place. And if those systems control others, then there is a domino effect.

I can see very well how one computer could have screwed all others. It's really not hard to imagine.
Crowdstrike also has an Ubuntu Linux version. We're required to install it at work.
You can use HTML with plain text fallback. That's still the vast majority of marketing/form emails.

HTML works fine, and adds important features like formatting text and links. HTML without images is ideal, as images are often blocked (as you mention).

I prefer plaintext too, but for a marketing email (ie, "confirm your account") consumers will think it feels "off" or unpolished given what they are used to. It will likely lead to churn. Clients can opt to view plaintext if they prefer.

Edit: also it's a bit funny the page you link, useplaintext.email, uses lots of HTML formatting.
This is the real answer why manufacturers don't serve this part of the market
Hardly any prisoners are sentenced to rehabilitation, and most justice systems have few means of doing so, so it appears hardly any justice system is based on the notion of locking people up until they are rehabilitated.

(there are some rare exceptions - in Norway the maximum sentence is 21 years except in some particularly serious cases you can be convicted to incarceration for the purpose of protecting society - this punishment is in theory shorter in that you can get out after 10 years, I think, but you won't get out until a parole committee deems that you are no longer a risk).

Furthermore, if justice systems were based on reoffending risks, then sentencing would look very different. Most murderers who commit murders that aren't gang-related, for example, are very low-risk prisoners. Yet no justice system I am aware of takes that into account.
Yeah but how does Google/Apple make money off of cloud storage when you don't need it?

In some ways it's better to just get a usb-c fob for this functionality...have a problem with your headphone jack or microSD slot? Throw it out and replace it.

I'd rather see TB+ storage on my phone.
Lots and lots of heavy machinery uses Windows computers even for local control panels.
I dunno, but they'd know about it hours earlier in time to switch to paper, or pull out older computers, or something - in that scenario it wouldn't have happened "as we were treating a heart attack" and they would have had time to prepare.
None whatsoever, I don’t have any affiliation. But this is usually how it happens, knowing what I’ve seen first-hand in my day-to-day and just keeping up on the insanity of the industry.
Yes, like the court system … specifically class actions in the United States have been established for this exact purpose.
Do most people consider click-bait headlines to be a negative interaction? Arguably they should, but I don't think it's the case.
So it's no longer H2O but just H2?
Sadly most so-called security experts are not hands-on professionals but hands-off "cybersecurity persons". They do not do any real work themselves, they only generate useless busywork for others.

There are people in that category who are not hands-on themselves but still have sufficiently deep understanding of technical details. But as one might guess, they are about as common as four-leaf clovers.
If you can't be bothered to read properly, don't reply.
Would you like to try new Teams?

It’s the same, but you get to start with a nag about it every time you open it.
SD cards are storage, not memory.
Here is the official Windows security certification page [1]. They certify against this standard [2]. The maximum security they certify is provided is:

Page 53: “The evaluator will conduct penetration testing, based on the identified potential vulnerabilities, to determine that the OS is resistant to attacks performed by an attacker possessing Basic attack potential.”

That is the lowest level of security certification outlined in the standard. The elementary school diploma of security.

To see what that means, here is a sample of the certification report [3].

Page 14: “The evaluator has performed a search of public sources to discover known vulnerabilities of the TOE.

Using the obtained results, the evaluator has performed a sampling approach to verify if exists applicable public exploits for any of the identified public vulnerabilities and verify whether the security updates published by the vendor are effective. The evaluator has ensured that for all the public vulnerabilities identified in vulnerability assessment report belonging to the period from June 8, 2021 to July 12, 2022, the vendor has published the corresponding update fixing the vulnerabilities.“

The "hardcore" certification process they subject themselves to is effectively doing a Google search for: “Windows vulnerabilities” and checking all the public ones have fixes. That is all the security they promise you in their headline, mandatory security certification that is the only general security certification listed and advertised on their official security page.

When a company puts their elementary school diploma on their resume for “highest education received”, you should listen.

That is not to say any of the names in general purpose operating systems such as MacOS, Linux, Android, etc. are meaningfully better. They are all inadequate for the task of protecting against moderately skilled commercially minded attackers. None of them have been able to achieve levels of certification that provide confidence against such attackers.

This is actually a good sign, because those systems are objectively and experimentally incapable of reaching that standard of security. That they have been unable to force a false-positive certification that incorrectly states they have reached that standard demonstrates the certification at least has a low false-positive rate.

All of the standard stuff is inadequate in much the same way that all known materials are inadequate for making a space elevator. None of it works, so if you do want to use it, you must assume they are deficient and work around it. That or you could use the actual high quality stuff.

[1] https://learn.microsoft.com/en-us/windows/security/security-...

[2] https://www.commoncriteriaportal.org/files/ppfiles/PP_OS_V4....

[3] https://download.microsoft.com/download/6/9/1/69101f35-1373-...
> Better training, larger models, and larger datasets, will lead to models that

Hypothetically, with enough information, one could predict the future (barring truly random events like radioactive decay). Generative AI is also constrained by economic forces - how much are GenAI companies willing to invest to get eyeball reflections right? Would they earn adequate revenue to cover the increase in costs to justify that feature? There are plenty of things that humanity can technically achieve, that don't get done because the incentives are not aligned- for instance, there is enough food grown to feed every human on earth and the technology to transport it, and yet we have hunger, malnutrition and famines.
Also FM radio
Next you are telling me you want to go back to the time when mobiles needed a whole week to go through a charge. How outdated!
Reverse Proxy, HTTP Server and Hanging Requests
No, not "tech", just Microsoft Windows. Those of us serving Linux based endpoints (that yes, do also run Windows apps with our endpoint-local VDI stack) have happy customers.
Yes that was a typo. I meant 185.

Regardless, all of this is just intellectual play considering the Reddit poster has no desire to exercise their options.
The memory used by the Windows kernel is either Paged or Non-Paged. Non-Paged means pinning the memory in physical RAM. Paged means it might be swapped out to disk and paged back in when needed. OP was working on BitLocker a file system driver, which handles disk IO. It must be pinned in physical RAM to be available all the times; otherwise, if it's paged out, an IO request coming would find the driver code missing in memory and try to page in the driver code, which triggers another IO request, creating an infinite loop. The Windows kernel usually would crash at that point to prevent a runway system and stops at the point of failure to let you fix the problem.
Sure, let's talk about free will again
Where to move from Samsung A52?

There is no alternative below 1000 EUR.
I'm going to side with Apple on this one. Transistors are basically free and ports are expensive and unreliable. I'm happy they've been moving to eSIMs. I'd be fine if my next iPhone only supported wireless charging.

No ports is better.
I also blame the customers here to be completely honest.

The fact the software does not allow for progressive rollout of a version in your own fleet should be an instantaneous "pass". It's unacceptable for a vendor to decide when updates are applied to my systems.
I firmly believe that most routine security issues are really just operations issues and vulns are just bugs and security largely doesnt need to be its own category at all.

I know everybody hates the C-word but if I look at 27001 requirements or the CIS benchmarks, there is nothing in there that I do not want for myself. If you can keep a list of the products and services you are running, have actually put the time into implementing it correctly, and have an ongoing maintenance plan then you are probably in the top 1% of networks.
For my part, I consider inflicting suffering to be fundamentally immoral, because the "moral" justification for retribution relies on the notion of free will, and there is no rational case for free will.
hah that tweet was one heck of an apology. "we deployed a fix to the issue, speak with your customer rep"
Yeah, definitely a common phrase in the UK, basically the sense is that if you put a (firework) rocket up someone's behind and light it, they're going to move pretty damn fast to rectify the situation before the fuse runs out.
Not sure what I'm doing wrong, but I tried installing it on a GrapheneOS device with Play Services installed and nothing happened. When I pushed the mic button, it changed to look pressed for a second, and went back to normal. Nothing happened when I spoke. Tried holding it down while speaking. Still nothing.

I'm very interested in using this, but I can't even find a way to try to troubleshoot it. I'm not finding usage instructions, never mind any kind of error messages. It just doesn't do anything.

This is especially interesting to me because the screenshot on the repo is from Vanadium, which strongly suggests to me that it's from a GrapheneOS device itself.
Search for the video in DuckDuckGo, flip to video, and watch it in there. No commercials.
>> Why, whY, WHY...are these things connected to the internet?!

Because SCADA systems. It's worthwhile to have an overview of an entire plant up in the main office. You can easily see what's running, what's not and what's got problems that need fixed.

Now for a small shop running jobs individually, they should definitely NOT be connected to the internet or even the LAN. But hey, some people think a thermostat needs to be on the network so there's that...
The booming business of shaming young men
I'm sure you can find a lawyer who'll take the case for a percentage of the compensation.
Did you have CrowdStrike installed on your personal machine, or did they detect it over the network somehow?
SD cards are flash memory.
We chart all codes on paper first and then transfer to computer when it's done. There's a nurse whose entire job is to stay in one place and document times while the rest of us work. You don't make the documenter do anything else because it's a lot of work.

And that's in the OR, where vitals are automatically captured. There just aren't enough computers to do real-time electronic documentation, and even if there were there wouldn't be enough space.
> We'll never figure out how to do it until we actually start trying to rehabilitate people.

We'll never figure out how to do it because it's unethical to experiment on humans. But even more damning than that, we don't have a good theory of mind that explains criminality. It's all half-assed woowoo nonsense meant to bolster this or that political ideology.
> the police would need probable cause, and therefore a warrant, to look at you while walking down the street.

I cannot even begin to fathom this logic
for me it was the unique combination of interesting topics and instructors. Malcolm Gladwell teaches writing, Bill Clinton talks about leadership, Neil deGrasse Tyson teaches scientific communications, among many others ..
I should have specified that I was talking about microLED microdisplays, as shown in the article. Sounds redundant but there are also large format microLED displays which are manufactured by individually cutting LEDs from a chip and placing them on a different substrate with bigger spacing. This process allows replacing the ones with poor brightness during assembly. For microdisplays, on the other hand, the LEDs are fabricated in place and the not individually moved after. The chip is the display.
Everyone Should Learn Prompt Engineering, Even Software Engineers
It depends on what you mean by “like this.”

The usefulness of a theoretical app that might be able to stop high-power exploits isn’t being debated. The claim I’m objecting to is that everybody should be running (available) antivirus software on their phone.

But if you mean that these highly targeted people would have been helped by running “AVG Mobile Security” or one of the other available so-called “antivirus” apps, then I’ve got an enterprise security contract to sell you. :)
"It blows my mind that a kernel driver with the level of proliferation in industry could make it out the door apparently without even the most basic level of qualification."

It was my understanding that MS now sign 3rd party kernel mode code, with quality requirements. In which case why did they fail to prevent this?
Full disclosure: after a week of various things happening to me, the CrowdStrike thing was not a thing that affected me.

I don't feel better, worse, or, basically anything because of that fact.

And no, none of the options switch to Linux, evict all security vendors and/or go and live on an island (tempting though the latter is) would have made anything any better, thank you for (not) asking...
I had started to think YT ads were getting worse recently but had convinced myself it was a frequency illusion. Interesting that others seem to be thinking that same thing though...
I can understand the upgrade required for extra storage and AI subscriptions, but what revenue is earned from the elimination of the headphone jack? I can only see the marginal costs of adding one in, but for consumers who want it, it'd be a sales tactic.
Headphone jack I’ve not really needed.

But I want a smartphone with a removable battery. Same with laptops.

Let me kill the power. Let me replace the batteries easily.

Give me thicker devices!
Or maybe you get someone with PSTD and suicidal tendencies. You never know how someone will process something like this.
But they can test obvious failure modes like this one. You need both.
Are solar panels a good investment? New Berkeley study offers an answer
In my experience using LLMs like CoPilot:

Web server work in Go, Python, and front end work in JavaScript - it's pretty good. Only when I try to do something truly application specific that it starts to get tripped up.

Multi threading python work - not bad, but occasionally makes some mistakes in understanding scope or appropriate safe memory access, which can be show stopping.

Deep learning, computer vision work - it gets some common pytorch patterns down pat, and basic computer vision work that you'd typically find tutorials for but struggles on any unique task.

Reinforcement learning for simulated robotics environments - it really struggles to keep up.

ROS2 - fantastic for most of the framework code for robotics projects, really great and recommended for someone getting used to ROS.

C++ work - REALLY struggles with anything beyond basic stuff. I was working with threading the other day and turned it off as all of its suggestions would never compile let alone do anything sensible.
I think we all recognize that specialized models are the future. Great to see Vectara already on that path for RAG (enterprises)!
This is so true. I worked for a company that demanded NET90 payment terms from all vendors and frequently wouldn't even begin processing the invoice until 90 days, resulting in the contractor getting paid closer to 100-120 days. They'd also flat-out refuse to pay any sort of late fee or penalty.
I recently bought a NOS Samsung Note 10 Lite. A quarter the price of the S24, has the wonderful S-Pen and a headphone jack. And even though the battery is ostensibly not user replaceable, it is an easy job that can be done in five minutes without risking breaking anything else.
Crowdstruck
Literally every OS allows you to install 3rd party kernel modules or plugins. If Microsoft banned them, people would be up in arms about them being a controlling walled garden. There is no winning.
People say this like it lets Apple off the hook. Let me explain why it doesn't.

Apple had full control over the whole phone's software stack, in a very good way, meaning they built a good mobile OS that had good systems for power management and an app lifecycle that could actually kill apps at will to maintain efficiency, without disrupting the user.

With this, they decided to ship smaller batteries so they could make slimmer phones.

Except, they used garbage batteries. They were so small (1600mAh on the iPhone 6) that normal wear and tear of a few years degraded them to the point that the battery chemistry could not keep up with normal processor frequency and power ramping.

Apple started getting a lot of complaints because people were understandably upset that their 2-3 year old phone couldn't run for more than an hour off the charger. Apple didn't like increasing support load, even though they weren't covering anyone's battery replacement. Instead of putting out a press release that they had shipped sub-standard batteries in their phones, and offering free battery replacements with a new battery that wouldn't have the same problem in another 2-3 years, they included code in the new version of iOS to SIGNIFICANTLY slow down your 3 year old or less phone.

Apple made a product that deteriorated way too quickly, and then tried to hide it. That's batterygate. If LG sold a fridge that would die after five years because of compressor fatigue and then silently updated their fridges to not operate colder than 45 degrees F to extend the life of the compressor, I would hope you would be pissed at that, right?

A reminder that the iPhone 6 was also "Bendgate", which internal apple memos showed they knew was a serious problem before they sold it, and then claimed two years after release they only had 9 complaints of phone bending and that it wouldn't bend in normal use.
Ask HN: Can whitelisting executables replace anti-virus software?
Whitelisting, so basically maintaining a whitelist of allowed executables on a computer system and disallowing all other executables to execute - is this a viable way to replace bloated "antivirus" software that needs to run with root permissions and will kill your conpany with a bad update?

Are there any good reasons why whitelisting would not work / not be enough?

This is not trolling, I really would like to understand why that is not the default and instead we have "anti-virus" software everywhere.
These wikis are really interesting. I'm itching to try it on the common framework parts of our work monorepo.

[Update after looking at the Django wiki]

The wiki's structure appears to be very (entirely?) based on the directory structure. Is that right?

It would be interesting to give it the Django documentation in addition to the codebase, or possibly even just the heading structure of the documentation, and let it use that as a scaffold to generate the structure/organization of the wiki.

For a specific example, the Model is one of the most important concepts in Django, but in the auto-generated wiki, it shows up underneath databases.
I would look at one of the many other projects that have them in their readme and see how they do it, I think it's with a certain markdown syntax but I don't know it off the top of my head. Hope this helps.
While I will be the last person in line to defend Microsoft, I am not sure that disallowing 3P kernel mods is a workable solution. Crowdstrike and companies like it exist to fill a very real need within the windows ecosystem. I don’t foresee that suddenly going away now or Microsoft unilaterally forcing every company like crowdstrike out of business and taking over this role themselves
So if you went to prison for 7 years, and your conviction wasn’t overturned but you served your time, it’s somehow ok for the government to send you a bill for $50 * 365 * 7 = $127750? When convicted felons usually struggle to find better than minimum wage jobs due to their records? What a perversion of “justice”. And if you get out early for good behavior or due to prison overcrowding (again, your sentence was valid) you still get charged for the full 7 years? How is that morally reasonable?
Happy to know it works when needed!

But the implementation (when running on user PC:s) is still half-baked.

My experience is using PC with Crowdstrike for daily software development. In that setting it’s quite terrible.

The server setting sounds a much more reasonable use.
A side note: I am suspicious about the channel in the posted link. It seems to simply cut clips from the original video, without information and credit.

Anyway, here is the original source: https://youtu.be/cPvRIWXNgaM
Transhumanism and Its Silly Critics
So the manufacturer can sell you a "cloud connected service plan" where they change the font once every six months.
Making up your own hypothetical bad guy and then turning around and saying "people such as you describe" shouldn't get to vote has to be the most brazen act of strawmanning I've seen in recent memory. But you know, fuck everyone in prison just to stick it to this guy, right?