skysight-inc/HackerNews huggingface dataset:
If a young person says they want to make a living as a influencer/youtuber/writer/streamer/musician I would tell them to strongly reconsider unless they have a reason of substance besides pure ego to think they can beat the odds. When someone has the foundations to be one of those things it’s usually obvious. There have been people I’ve met in life who I thought “I’m not sure how but this person will be famous”. There many people who just don’t know how to judge their own skills and usually they just need to be pointed to the right place for information.

Tragically, many of the jobs that people dream of and grind for have secret underbellies that young dreamers don’t understand. For example, Hollywood is a vipers nest where films get made. The music industry had its own Weinstein/Epstein combo recently with Diddy. Politics is the same. The most direct path to success in these fields is being willing to sell your soul and body to powerful evil people. So to be successful in those fields with your dignity intact requires a very rare constitution.
Right, I understand all that. I just don't understand how to interpret the resulting map (or how to formulate a search) to provide useful information, specifically "who knows what".
I don't think people necessarily need it to taste identical. It just needs to not taste like ass.
> Just because it's large doesn't mean it's relevant: using radare2, IDA Pro, or some other tool doesn't mean you're going to be able to do anything besides look at a binary.

Looking at a binary is like 99% of the work, though. Or at least looking at some secondary form of it (e.g. assembly, decompilation, etc). Tools are absolutely critical to the work.

> people in the wild are absolutely modifying binaries, injecting, stubbing .dlls and redirecting calls, or creating proxy servers that alter payloads, for sure

I would call modifying a binary "cracking" it but it's been a few decades since I was involved in that scene. I also think that the topic is large enough to warrant multiple focuses—to me, at least, writing a MITM server is much more trivial than extracting a private key from a binary (or a running process) that makes that MITM server functionally useful.

> Learning how to compile a program isn't exactly reverse engineering worthy content to write about.

That's a disingenuous characterization of most of the content here. Coding at the instruction level requires a different way of reading and writing code than you're otherwise exposed to. Most programmers aren't used to handling bits directly, and certainly not to the extent that it rewards you at the instruction level for learning and knowing. With the tools here you can, in fact, sit down and inspect the license verification function of a piece of software (although I'm not sure how much that's true or beneficial these days with code-signing etc).

EDIT: Or you could do what I did and work with as, `otool`, and a hex editor, and learn extremely slowly & painfully why custom-built reverse engineering tools are so valuable to learn.

There's always more to learn, of course, but that's no reason to belittle what you've already learned and other people still have yet to learn.
I’m not an expert in Israeli law, but I’m sure quite a few laws in Israel meat the definition of ethno-state, which is practices and policies that favors shifting the demography in favor of a particular ethnic group. Wikipedia actually has a few examples of laws which meet the criteria[1], including the nation state law.

If we look at the practices it becomes very clear that Israel meats the criteria of being an ethnostate. The immigration policy prohibits a single ethnic group (Palestinian Arabs) from immigrating, while creating the conditions for that same ethnic group (as well as others, such as Bedouin) to emigrate. The conditions for emigration includes confiscating land, limiting mobility, etc. In the occupied territories these practices become abundantly clear, and we even have an ICJ case backing this narrative[2].

Ethno-states are actually quite rare in history, you need a pretty strong military or police to enforce demographic policies, and before industrialization most states didn’t have that. Ironically one can argue that Roman Judea would meat that critearia when they expelled all the Jews. Notably they didn’t have the same ethno-demographic policies in neighboring Galilee, hinting that this was an expensive policy which the Roman state deemed not worth the costs. After industrialization ethno-states become a much more viable option, but we still mostly see them as a single ethnic regions of empires, most commonly via settler colonialism, where the settler are the ethnic rulers. And even then the policies were usually short lived as local population pushed back.

Syria does not have practices and policies to shift the demography in favor of one ethnic group at the cost of another, and neither does Egypt. One can argue that Turkey does (against the Kurdish people) but this does not come anywhere close to the ethnic policies enacted by Israel today.

1: https://en.wikipedia.org/wiki/Ethnocracy#Israel

2: https://www.icj-cij.org/case/186
Yep. CAP comes into play when all the mitigations fail. However clever, diligent, and well-executed a network setup, there's some scenario where 2 nodes can't communicate. It's perfectly fine to say we've made it so vastly unlikely that we accept the risk to just take the whole thing offline when that happens. The problem cannot be made to go away. It's not possible.
> (by any metric you care to track) healthcare systems of any industrialized nation

That's certainly not true. Of course compared to pretty much every highly developed country if we factor in relative spending per capita you'd be right.

But yeah, purely market/profit driven systems (with extremely poor and inefficient regulation) certainly don't work in certain sectors like healthcare.

Also it depends on what do you mean by 'socialized medicine', if you're specifically talking about single payer, your point is only valid if you ignore all other countries which don't have single payer besides the US. The Swiss and (as far as I can tell) to a lesser Dutch healthcare systems are 'privatized' to a much higher degree than the one in US i.e. effectively fully, there are no Medicare/Medicaid equivalents there. Instead they are very strictly and relatively efficiently regulated. They pretty much have Obama/Romneycare++.

If you mean something else than single-payer then the US system is arguably heavily 'socialized', both through insurance polling (just like in the countries I mentioned) and because the US government itself spends more on healthcare than most industrialized countries even relative to GDP. e.g. if we exclude all private spending (both individual and insurance) government health spending per capita in the US is significantly higher than in Britain and more than 2x higher than in Spain (and still significantly higher if adjusted by PPP GDP per capita)

https://data.worldbank.org/indicator/SH.XPD.GHED.PP.CD?locat...
I disagree. It should not default to "https://" (I think defaulting to local files would be better).

Furthermore, I think that it should be made so that the "hashed:" scheme that I had invented (in the Scorpion protocol/file-format specification document, although this scheme can be used independently of that) can also be usable.

And, popular hosts with well-known URL structures automatically templating also I would disagree, although it might do to allow any expressions in place of the string literals and then add functions for abbreviations of some of those URLs, if that would help (although I still think it is unnecessary).
Suppose we all live under socialism and capitalist rules no longer apply. Only physics.

You run a vacation home exchange/booking site, which you run in 3 instances in America, Europe and Asia because base you found that people are happier when the site is snappy without those pesky 50ms delays.

Now suppose it's the middle of the night in one of those 3 regions, so no big deal, but the rollout of new version brings down the database that's holding the bookings for two hours before it's fixed. Yeah, it was just the simplest solution to have just a one database with the bookings, because you wouldn't have to worry about all that pesky CAP stuff.

But people then start to ask if it would be possible to book from regions that are not experiencing the outage while double-bookings would still not happen. So you give it a consideration and then you figure out a brilliant, easy solution. You just
https://hn2.wilsonl.in/user/simonw includes "Risk of COVID from pianos" down at the bottom of the map. I'd love to know where that came from!
I think they're moving that way with charging for Amazon music. They could just bundle Amazon music and smarthome features into a little package and probably get some sales
Here's a simple one I've used before. It's a variation on FAME (Fast Algorithm for Median Estimation) [1].

You keep an estimate for the current quantile value, and then for each element in your stream, you either increment (if the element is greater than your estimate) or decrement (if the element is less than your estimate) by fixed "up -step" and "down-step" amounts. If your increment and decrement steps are equal, you should converge to the median. If you shift the ratio of increment and decrement steps you can estimate any quantile.

For example, say that your increment step is 0.05 and your decrement step is 0.95. When your estimate converges to a steady state, then you must be hitting greater values 95% of the time and lesser values 5% of the time, hence you've estimated the 95th percentile.

The tricky bit is choosing the overall scale of your steps. If your steps are very small relative to the scale of your values, it will converge very slowly and not track changes in the stream. You don't want your steps to be too large because they determine the precision. The FAME algorithm has a step where you shrink your step size when your data value is near your estimate (causing the step size to auto-scale down).

[1]: http://www.eng.tau.ac.il/~shavitt/courses/LargeG/streaming-m...

[2]: https://stats.stackexchange.com/a/445714
Their current browser experience doesn't include transit or cycling, which makes it not terribly useful for NYC.
Way way back, I had a coworker who aspired to be a hacker get really mad at me because he was just sure that spinning rust was “digital” while I was asserting to him that there’s a DAC in there and that’s how data recovery services work. They crack open the drive and read the magnetic domains to determine not just what the current bytes are but potentially what the previous ones were too.

They’re digital! It’s ones and zeroes! Dude, it’s a fucking magnet. A bunch of them in fact.
Caffè Sospeso or Suspended Coffee Tradition Lives on (Despite COVID) (2020)
The decaf process matters, a lot.
Here is the actual executive order: https://www.gov.ca.gov/wp-content/uploads/2024/07/2024-Encam...
You didn't need a banana. That response was painfully obvious anyways
Wait, no. Two different things here.

One, this is not a "human wave", are we agreed on this at least? Human wave describes something else. Zhukov describes attacking through minefields as if they weren't there, not running recklessly and getting mowed down in waves. They actually took cover, advanced tactically, etc; they just ignored minefields.

Two, their higher losses were mostly due to tactical incompetence in relation to the Germans, plus a much more desperate situation (not comparable with anything the Western Allies faced).

As for the Allies, did they not consider this tradeoff? Maybe they did, maybe they didn't, but the tradeoff was different to them. A delay in a Western Allied operation was concerning but had different outcomes for them -- what was at stake was different. A delay in a Soviet operation had vastly more disastrous and costlier consequences (in lives).

So what is the alternative? Take a very careful and time-wasting approach to minefields, such as wasting lots of time to disable them while avoiding hostile artillery and MG fire, or avoiding that avenue of approach entirely? Acceptable to the Allies, but disastrous on the Eastern Front.

What do you mean, "trolling"? For decades the accepted thinking on the Eastern Front was what the Germans told the Allies. I call that the ultimate trolling... history as told by the losers!

I recommend some reading of Glantz and House, both renowned military historians, both retired American vets, both expert on the Eastern Front.
Anyone in charge of hiring should be fired if they go more than X days/weeks without actually hiring someone. I've seen people complain that their biggest impediment to growth is getting hires through their own HR departments.
Really fun visualizations. Well done!

I am a broken record on posts that mention sudoku in bringing in Knuth's treatment of it. He has a ton of really fun exercises on the game in the latest volume. Perhaps the most fun are the puzzles that have a single solution, but do not have enough information to place a single piece without ambiguity.
> Newsom clearly has national political ambitions as the next step in his career and much of what he does lately is in service of optics in that direction

Homelessness has been polling as urgent in California for over a year, particularly among Democrats [1]. It's why Prop 1 narrowly passed despite being a bond measure [2].

[1] https://poll.qu.edu/poll-release?releaseid=3868

[2] https://calmatters.org/politics/elections/2024/03/election-r...
Given how absurd Instagram/social media already is (entire cottage industries of "private jet" stages in warehouses, etc) it will arguably be a benefit for society when it completely jumps the shark and anyone can generate over the top ridiculousness in seconds.
We're not talking about mathematical optimality here, both from the solution found and for the time taken. The point is whether this finds results more cheaply than a human can and right now it's better on some problems while others it's worse. Clearly if a human can do it, there is a way to solve it in a cheaper amount of time and it would be flawed reasoning to think that improving the amount of time would be asymptotically optimal already.

While I agree that not all problems show this kind of acceleration in performance, that's typically only true if you've already spent so much time trying to solve it that you've asymptoted to the optimal solution. Right now we're nowhere near the asymptote for AI improvements. Additionally, there's so many research dollars flowing into AI precisely because the potential upside here is nowhere near realized and there's lots of research lines still left to be explored. George Hinton ended the AI winter.
A Brief Note on the CrowdStrike Outage and "Tech Influencer" YouTube
Just curious what the mechanism is for adding a bio to individual users. Your sample -- robg -- has the same bio on your stuff as on HN but others have stuff on HN and "No bio provided" on your thing.
I've seen people drop off stained mattresses at Costco for return.
Well, glad they solved that problem. Once and for all.
The article you linked doesn't say anything to backup your claim. United was employee owned for a total of only 6 years. Employee ownership was institued over some employee objections and wasn't fully supported by management. The labor relation issues that caused the pilot strike and slowdown duering that period predated the employee ownership initiative.

Nobody is saying that employee ownership is a magic bullet that fixes organization disfunction but data from that first year does show that it can have a positive impact of performance and customer satisfaction.
Apple maps requires js to work. Google maps and Mapquest don't require js.

While most people use js by default, this requirement indicates that Apple requires a greater footprint to run maps than Google or Mapquest.
Just as a FYI, you replied to an AI-generated comment. Check out the user's other posts.
"Solving IMO problems at Silver-Medal level" is pretty much equivalent to solving something like 4/6 problems. It is only a disingenious comparison if you want to read it as a comparison. I mean yea, many people will, but I don't care anout them. People who are technically interested in this know that the point is not to have a competition of AI with humans.
Microsoft Defender isn't the most sophisticated EDR out there, but you can manage its updates with WSUS. It's been a long time since I've been subject to a corporate imposed EDR or similar, but I seem to recall them pulling updates from a company owned server for bandwidth savings, if nothing else. You can trickle update those with network controls even if the vendor doesn't provide proper tools.

If corporate can't figure out how to manage software updates on their managed systems, the EDR software is the command and control malware the EDR software is supposed to prevent.
Also, the homelessness problem in California is actively hurting their tourism revenue and reputation.

Most European countries have worse homelessness rates than California but you would never believe it because they heavily police camping in major cities. In comparison, San Francisco used to be an international gem but its reputation is too well known.
Exactly. The point is what can we eventually get AI to solve problems which we as humans can’t. Not if we can win the IMO with a computer.
it's not hidden that globalization and all that it entails squelches out common local culture facets.

there is a long list of long-dead languages that attests to this. coca-cola is the number one drink globally because of these kind of implications.

>Do you think traveling to Japan would slow its globalization?

I think the implication is that one should experience it now before it inevitably changes to be more homogeneous with the rest of the world.
Sad. I can't think of anything more anti-diversity than this "diversify all the things" fad! Soon you will go to Asia or South America, only to find little america...
> If the partition extended to the whole big internet that clients are on, this wouldn’t work. But they typically don’t.

This is the key, that network partitions either keep some clients from accessing any servers, or they keep some servers from talking to each other. The former case is uninteresting because nothing can be done server-side about it. The latter is interesting and we can fix it with load balancers.

This conflicts with the picture painted earlier in TFA where the unhappy client is somehow stuck with the unhappy server, but let's consider that just didactic.

We can also not use load balancers but have the clients talk to all the servers they can reach, when we trust the clients to behave correctly. Some architectures do this, like Lustre, which is why I mention it.

I see several comments here that seem to take TFA as saying that distributed consensus algorithms/protocols are not needed, but TFA does not say that. TFA says you can have consistency, availability, and partition tolerance because network partitions between servers typically don't extend to clients, and you can have enough servers to maintain quorum for all clients (if a quorum is not available it's as if the whole cloud is down, then it's not available to any clients). That is a very reasonable assertion, IMO.
Twice-Yearly Lenacapavir or Daily F/TAF for HIV Prevention in Cisgender Women
That's what options are for. But I find it more cost effective to just diversify my investments.
Yet I see it constantly. That pattern of `for foo in whatever: for bar in foo` is everywhere. People don't even think about it... They just write the looping part then start thinking about the logic below. It's such a common thing I'm surprised compilers and interpreters don't just optimize it away :shrug:
yes it is very impressive, especially autoformalization of problems written in natural language and also proof search of theorems
I haven't officially been a resident but have spent a ton of time in almost all areas of Japan. It's extremely location dependent but in my experiences in rural Japan as a gaijin there can be some initial coldness in interactions but if you show even the least amount of effort to speak the language and respect the culture that coldness evaporates.
Probably the later. OpenAI has a ton of revenue and I’m guessing their massive amount of spending is for developing cutting edge LLMs. If there’s a danger of running out of money, they could always cut back on spending. Or they could raise more which is probably pretty feasible goven that they’re OpenAI
I disagree, learning how to compile a program is a prime example of something you'd want in a book about reverse engineering "for everyone". A book which focuses only on specific methods of changing software behavior would be useful only to those who know how to understand said software. In fact the term "reverse engineering" itself does not imply modification at all.
Predatory journals: no definition, no defence
Yeah, my wife and I always check out the local costco when visiting a city. I can't remember which one it was but I distinctly remember being surprised at all the asian-type foods at one. They had squid chips, sushi, boba, and all kinds of strange things. I want to say it was Oregon or Seattle but it's been a while
The overview sounds like it was written by AI.

"revolutionizing"? Really?

"disruptive technologies"?

You are literally using AI to "spend less time on repetitive manual" tasks.

And the prompt is: "why you'd love to work at Intrinsic." That's insightful. Two word: "Get Paid" Anything else is a lie. No one applying is looking for a higher purpose, and if you believe that, you are follling yourself with that application process.

Also, you do a bad job at blacking out the persons name. Michelle who? Two letter last name? Something u?

Maybe you should worry about exposing private information like that? You knew you shouldn't have shared that, but now Michelle ?u from San Jose needs to worry.
There is actually a huge savings to have fewer colors because it reduces the complexity of skus and the horror of color matching defects.
Applied reverse-engineering is all about bending the rules of engineering. Because of this, I think it can be learned through experience, but I doubt it can be taught through theory (or at least not in an effective manner). At its core, it's about spotting metapatterns to gain an understanding of a program and applying leverage to affect it. That's more art than science, no matter how much tooling you throw at it.

Honestly, I think the most effective way to learn about how to reverse-engineer something is to learn engineering at the same layer first and then start tinkering. If you want to binary patch a program, learn assembly. If you want to inject a .dll, learn how to write and use dynamic libraries. If you want to MITM a REST API, learn how to call a REST API. Because once you know the rules well, you can start breaking them and see exactly how much you can get away with.

I wrote a series of articles on reverse-engineering on my blog, about studying and modifying a program that outputs an ASCII table, mostly because I needed a way to introduce delinking as a technique. I would not say it's good, but it starts with how to build the case study and then it handholds the reader through the meat and potatoes.
There is also one more level of horror people often forget. Sometimes the history unwinds itself. Some outages will require restoration from a backup and some amount of transactions may be lost. It does not happen often, but it may happen. Such situations may lead to e.g. sequentially allocated IDs being reused or originally valid pointers to records now point nowhere and so on.
Well what else could it be? After all ai is just polynomial approximation in essence.