skysight-inc/HackerNews huggingface dataset:
Poor opsec there to be honest; I think they handed over the recovery email address he provided when he registered which was some gmail or something address which easily gave away his identity.

As far as I know they were not able to access any of the mail in his account.
How many people need a G-Wagon, or W113, or Porsche 914, or even old Toyota truck? Luxury and bad cheap commuter cars are a quickly depreciating asset, smart money would lease those.
In a normal world with enough biodiversity, it's balanced, some species can die, newer comes. In a human society whole ranges of species are killed because human have such an impact, insect mass is 10x less than 30 years ago, the problems is certainly not too much insects, it's the opposite, their lack of habitat too because we put concrete, roads everywhere, so instead of trying to fight directly and incorrectly these diseases, it's much better to fight the source issue, reducing car traffic, reducing/stopping air traffic, maritim traffic, etc..
It's more about Apple's rotten philosophy and hubris. Like how they pit teens against each other by artificially restricting their proprietary messaging system.
Product Hunt Launch Checklist
A Jigsaw puzzle?
Microsoft calls for Windows changes and resilience after CrowdStrike outage
Amazon's New CPU Fights Cybersecurity Threats
Fine here, UK
What you found is what he's talking about. I find it annoying to watch IMHO due to the e-ink flicker.
Ask HN: Was There a Widespread Outage?
Tumblr, Facebook, and discord all seem down
Google and Hacker News seem to work

Update: everything seems to be back up
It must be that "kernel of truth" so-called-scientific process challenges.

Like the one about humans only using an insignificant fractional capacity of their brain at any given moment. How can science deny this? Examine a mind that races to burnout to pull off a grand agenda, compared to the casual pedestrian voyer.

Neuromyths give something for our scientific ambitions to challenge. The modern word is not quite yet satisfying.
Makes sense but are there actually limits that prevent the scaling? IE instead of a single laser broom I build 50 near a solar/nuclear plant and use the surplus energy. Usually they all deorbit different objects but I could choose to aim them all at the same object.

I don't see much of a limit to scale. Satellites can only dissipate so much heat so you don't even have to deorbit it to be successful, you just need impart enough energy to overheat the satellite or disable key parts.
The US lost an atom bomb in the swamps of North Carolina and never recovered it.
Yes. This problem is why I cringe a bit any time I see someone claiming that people should feel safer because their data is being "anonymized".

It is possible to do data collection in a relatively anonymous way (it's never possible to do it in an entirely anonymous way), but there's no way for a person outside the company to know if it's actually being done that way, and there still has to be an entity somewhere that processes the non-anonymous form of the data.
It was easy to install with apt. And I use it once every three months for windows. Why change?
Don't be absurd. If the poor person somehow could find no jobs closer than a 2 hour commute away, they should buy a second home closer to the job. This isn't rocket science.
Yes, it's called dry ice because if you look at a phase diagram, a liquid can't exist at atmospheric pressure, so carbon dioxide ice transitions directly from solid to gas (called sublimating rather than evaporating/melting). One of those neat chemistry things.
They have servers in the US though which I assume means they operate some kind of business identity over there.
That reasoning has never worked in the history of the world. Might makes right, whether it be denominated in currency or violence.
AI Team Is Slowing Down Your Company
There is also a modern implementation of BLISS: https://gitlab.com/JonathanBelanger/bliss
Yeah I'm on btrfs raid 1 currently, with 1x1TB + 2x3TB + 2x4TB drives. Gotta love btrfs's flexibility regarding drive size :D

I'll have a look, thanks! I guess failing this will make me test by backup strategy that I have never tested in the past.
> They may have bought commercial MBSs, but if they did I don't remember reading about it.

Readily accessible, public data that the Fed updates weekly[1] clearly shows $9.943 billion at peak and currently sitting on $8.142 billion.

[1] https://fred.stlouisfed.org/graph/?g=1qE9d
I suppose the EU would like to have a word about being forgotten?
> I argued that it wasn't just good for containers, but could be used to improve VM management as well (i.e. a single VM per running image

Believe Google embarked on this path with Crostini for ChromiumOS [0], but now it seems like they're going to scale down their ambitions in favour of Android [1]. Crostini may not but looks like the underlying VMM (crosvm) might live on [2].

> I'd argue that FreeBSD Jails / Solaris Zones (Solaris Zone/ZFS inspired my original work) really aren't any more secure than containers on linux, as they all suffer from the same fundamental problem of the entire kernel being part of one's "tcb", so any security advantage they have is simply due lack of bugs, not simply a better design.

Jails (or an equivalent concept/implementation) come in handy where the Kernel/OS may want to sandbox higher privilege services (like with minijail in ChromiumOS [3]).

[0] https://www.youtube.com/watch?v=WwrXqDERFm8&t=300 / summary: https://g.co/gemini/share/41a794b8e6ae (mirror: https://archive.is/5njY1)

[1] https://news.ycombinator.com/item?id=40661703

[2] https://source.android.com/docs/core/virtualization/virtuali...

[3] https://www.chromium.org/chromium-os/developer-library/guide...
That's a dirty trick, I'm not sure how to feel about this. I don't like being hoodwinked.
Drivers at Uber, Lyft, and others are not employees, California's top court
Project Mockingbird
Not really. There are a huge number of invasive species that are perfectly happy taking over even without climate change. There is nothing magic about the temperature change from the bacterial perspective
Access any inference model for free with up to 200 API calls per minute at https://app.hyperbolic.xyz/.

Ready to build using Hyperbolic’s API? Use Python, TypeScript, and cURL easily.

--

Meet Hyperbolic – The Open Access AI Cloud

At Hyperbolic, we’re building the leading open-access AI cloud. Access inference and compute at a fraction of the cost, and build AI applications without relying on centralized infrastructures. We invite builders, compute providers, researchers, and individuals to join us on this journey.
Consideration is free. Public Infra is not. Amazing how cheap not being a shitty human is
Had to do a double-take on the UI of this blog. It looks identical to my notetaking app, Trilium.
Tasmanian Development
Just because an individual has the right, doesn't mean the other entities have the means or desire.
> One exercise that remains is: with nested CV, which model do you pick as your "production" model?

Why even pick one, just make an ensemble out of all of them. Unless you need your model to remain blind to one test or validation set for some reason, but then you should probably choose at random anyways to avoid bias.

Of course this being HN somebody is going to mention some case where they only have the CPU or memory budget for one model. But in general making ensembles of multiple XGBoost models is a great way to get better model performance.
Grandparent is a Hypercritical hippocratical hipocrit going for critical damage on a hippo
Are the bicyclists and pedestrians paying the full cost of the streets and sidewalks that they are using?
As someone who hasn't used VMs (on my machine) in a very long time, but went through the conversion of VB to Virt-Manager, the UX of VB was a lot better. It was easier to understand. I powered through and got used to it after a lot of issues.
Because they don't have enough predators, because of humans presence (birds, and more medium size insect eating animals are depleted, because humans prefer dogs, cats, cars, plastic wrapping, and laziness
>> We were all using XP but it was all customized up the wazoo.

Agreed.

I worked at a huge corporation for one of my first developer gigs. All the devs were super into desktop mods and customizing everything to the hilt. It was crazy to think we all had these third party apps running on our corporate laptops. I know I had my laptop completely crash twice and needed it replaced because one of the apps I loved, I installed an extension for it and turned out it was malware. Other devs had similar things happen too.

As a developer it was like the Wild West back then, you had complete and utter freedom to do what you wanted with your hardware. The funny thing was the hardware support people didn't even blink at all the stuff you had installed either, they just shrugged and downloaded your ROM to a new laptop and sent you on your way.
The Brazilian ethanol from sugarcane program is better both economically and ecologically than US ethanol from corn. The program has not been replicated elsewhere in the global south.

There are a few breakthroughs that the industry wants:

(1) biodiesel production products large amounts of glycerine since the biodiesel process basically breaks off the three hydrocarbon chains attached to a triglyceride. If people figure out how to make some valuable from glycerine the industry could grow to a larger scale. (e.g. a big picture book about Brazil's agriculture industry boasts that thanks to biodiesel everybody can afford high-quality soap)

(2) Ethanol from cellulosic biomass is second only to the fast breeder reactor (and maybe pyrolysis) as an energy El Dorado. You can break down cellulose into sugar with enzymes or harsh chemicals. Trouble is the enzymes cost more than the fuel is worth and it's been that way for 100 years
The memory of digging post holes in red clay still haunts me.
The key is in the part of the URL after the #, which currently is never sent to servers in any browser, but I suppose that could change.

The more secure method IMO to using the web client (which could have malicious JS pushed to it at any time), would be to use a standalone mega client that you control the source to and can verify yourself.
DOE Sued Following Markup Investigation into Fafsa Data Shared with Facebook
Not super hot on replacing food crops for what's a raw material for frying oil, cattle feed and maybe protein bars, to be frank. It was kind of a bad thing in sci fi media when working class people were living off that kind of stuff rather than proper meals.
Any action has consequences. Both positive and negative, desirable and undesirable.

It's about the balance between those things.

It's totally possible that this action could result in someone uncovering a serial killer or organized crime ring.

This could save lives.

Why are you opposed to an action that could save lives and bring about desperately needed changes in privacy laws?
Yeah, BTRFS is really not good for any sort of redundancy, not even very good for multi-disk in general.

1. The scheduler doesn't really exist. IIRC it is PID % num disks.

2. The default balancing policy is super basic. (IIRC always write to the disk with the most free space).

3. Erasure coding is still experimental.

4. Replication can only be configured at the FS level. bcachefs can configure this per-file or per-directory.

bcachefs is still early but it shows that it is serious about multi-disk. You can lump any collection of disks together and it mostly does the right thing. It tracks performance of different drives to make requests optimally and balances write to gradually even out the drives (not lasering a newly added disk).

IMHO there is really no comparison. If it wasn't for the fact that bcachefs ate my data I would be using it.
See https://www.intechopen.com/chapters/84069
I've had my own bad experiences with Btrfs (it doesn't behave well when close to full), and my intuition is that Facebook's use of it is in a limited operational domain. It works well for their use case (uploaded media I think?), combined with the way they manage and provision clusters. Letting random users loose on it uncovers a variety of failure modes and fixes are slow to come.

On the other hand, while I haven't used it for /, dipping my toes in bcachefs with recoverable data has been a pleasant experience. Compression, encryption, checksumming, deduplication, easy filesystem resizing, SSD acceleration, ease of adding devices… it's good to have it all in one place.
It’s more like 2NM where M is loading the data from disk/memory. One pass is 2N+M.

Why go to the store and back twice to buy two things instead of buying two things in one trip? ;p
But whenever they reboot a us vpn server somehow that password is making it into the LUKS system (can we assume some kind of agent that runs during boot?) which likely has some credentials also baked in?

Unless we believe a human being is manually entering these in their hundreds of us vpn servers every time they restart?
Maybe Kaleidoscope? There was also the built in Appearance Manager, but it wasn't supported after Jobs returned around 8.5 and wanted a more consistent interface.
> Using the same logic the author used and applying it to the USDA report, do you then believe climate change has lead to an increase in production in China

That may or may not be the case. Climate change is not homogeneous, and affects different regions differently. Even if it were homogeneous, there are plenty of places on earth that would benefit, agriculturally, from a warmer climate. I dont know whether or not portions of China fall in that category.

That being said, I think the longer summers are exacerbating the problem with the disease that is the core driver of collapse of citrus in Florida, but climate change itself is probably not a direct contributor.
Their shift workers exist, as well as people with varying schedules like doctors/nurses. 24/7 is nessesary.

Edit: Plus it could probably be justified by the reduction in drunk driving alone.
A Lyme vaccine is in late-stage trials. Could an anti-tick vaccine be next?
There's a subreddit dedicated to stats like this where Messi is so far and away from the competition that he's in the top right of the plot - https://www.reddit.com/r/TopRightMessi/
Jesus freaking Christ, read the German plans for Slavs - it's all public information. They were going to starve and work them all until they are dead, and then populate the lands with Germans. Poles are Slavs. To draw moral equivalence between Soviets and Hitler is idiotic. If it wasn't for the Soviets, you'd be writing this in German, or (depending on your ethnicity) you wouldn't exist at all.
for all good things ESA does, NASA was the first on the Moon and that's pretty much anyone needs to know...
Yeah, in contexts which are sufficiently US-linked those protections may apply - I’ve edited my comment. Mostly not though.

Anyway, even in the US, providing a decryption key would only be protection by the fifth amendment if testimony by a human is involved - not simply, for example, turning over a USB key or even a piece of paper on which the key is printed So this question is mostly moot for the scenario we are discussing, except if information in a human mind is needed to access the key.
Anyone know if gasoline demand in the US is still rising?
I made an app to easily find books using AI
You can do this with ZFS, you just have to do it manually, ie by partitioning up the disks in say 100GB or 1TB partitions, then construct vdevs using these partitions.

You can then extend the pool by adding more such partition-based vdevs as you replace disks, just add the new partitions and add new vdevs.

So if you have a 1TB disk, a 2TB disk and a 4 TB disk, you could have mirrors (d1p1,d3p1), (d2p1,d3p2), (d2p2,d3p3) with a total of 3TB mirrored, and 1 TB available. If you swap the 1TB for a 2TB disk, partition it, replacing the old d1p1 partition with the new and resilver, and once that's done you can add the mirror (d1p2,d3p4) and get the full 4TB redundant storage.

Not a great solution though, as it requires a lot of manual work, and especially write performance will suffer because ZFS will treat the vdevs as being separate and issue IOs in parallel to them, overloading the underlying devices.
This is all a really lovely list. Thank you for your answer.

I love Street Fighting Mathematics too, but it's tough even for me. Meaning, it makes sense as I see the explanation, but these techniques of estimation have to be practiced over and over again to feel natural.

As for the gravity example, a small game using Scratch was enough to get them to appreciate acceleration, by associating velocity with audio. You intuitively know what a vehicle sounds like when it is maintaining constant speed, vs when it is accelerating or decelerating (negative acceleration)

From there it was a small delta to showing horizontal launch velocity but no acceleration, and how you can deal with the x and y components independently, and how a ball automatically traces a quadratic curve.
Some of the third party EDRs do things than even the top tier Microsoft Defender
XDR with Vulnerability Management can't do yet, and there is no "built-in" EDR for Linux.

Third party security tools have always been monkey patches for gaps in the OS. Eventually the OS gets the features that the third parties have, but then new threats create new requirements.

Whether you need it or not is a question for your threat model, but for me personally it's been years since I felt it was worth it on Windows. I still use a commercial EDR system on Linux due to the OSS solutions being quite lacking.
This pretty much mirrors my experience: I live in Washington, and when I drive down the freeway, I see nothing but trees and mountains. When I go back to Minnesota to visit family, I'm bombarded with billboards -- often political or religious content. I don't miss that at all.
Also "keys off site" is nowhere near as safe as keys don't exist. (can't exist, it's not a matter of a key when ram loses power)

Also "we don't log" is quite far from "it doesn't matter even if we accidentally logged, because the ram has gone poof".

The ProtonVPN setup is probably quite good and more than good enough, but it is disingenuous to claim that it is actually equivalent.

Encryption and policy are not the same or just as good as does-not-exist.

What could possibly be true, and so what they could possibly say honestly is that it's close, and the operational gain is worth the security loss.

I know how my mom can fail to see the absolutly binary 180 degree night and day difference between something that is difficult and something that is impossible, and see them both as being close to each other way to one side of a slider, but I don't know how anyone who programs or administers a computer fails to see those as actually being at opposite ends of a slider with only 2 settings, possible and not-possible.
This looks super useful, but I was wondering if I'm the only one bothered by this recent trend of overloading completely unrelated operators (here the `/` operator) in the name of legibility.
A megacorporation is worth a million individuals.
Its primary vector is the asian citrus psyllid. But you're right, once the bacteria is present in the plant tissue it can be transmitted to other healty plants via diseased grafts.
That's true of all of these services. You can't rely on any site to stay up forever, you just have to keep up with what works currently and use that.
For anyone wondering how it’s done…

https://www.blitzortung.org/en/whats_new.php
Why did that particular instance happen?
According to this article from 2020 https://m.thepaper.cn/newsDetail_forward_10041777 citrus greening caused direct economic damage upwards of 10 billion RMB per year (more than US$ 1 billion).

Professor He Yujian, profiled in the article, recently published about his approach to combating the disease https://link.springer.com/article/10.1007/s10658-024-02835-y which seems to be producing good results.
DCS sues Small YouTuber for accurate product review [video]
I think it’s pretty much infeasible. Some professor did it in a lab once but I can’t see that level of sophistication being used against a public vpn server, whatever the circumstances.

SGX encrypted memory would work as a solution for this, probably.
One rather charming attempt is:

https://github.com/VBAndCs/sVB-Small-Visual-Basic
And hopefully the regulators will understand the need for this kind of a move.

An interesting outcome from this might be the effect it has on various live service games and Denuvo. Denuvo is an 'anti tamper' mechanism that many games use, and it runs in the kernel. It is not well liked as it's often reported to be the cause of stutters and poor performance in some games. If there are sufficient kernel restrictions in place, then the mechanisms to tamper with the game are reduced, and thereby the need for Denuvo and its ilk.
“A current trend in cookie theft malware distribution is packaging malicious software in an encrypted archive—a .zip, .7z, or .rar file, protected by a password—which hides file contents from Safe Browsing and other antivirus detection scans. […]

Attackers often make the passwords to encrypted archives available in places like the page from which the file was downloaded, or in the download file name. For Enhanced Protection users, downloads of suspicious encrypted archives will now prompt the user to enter the file's password and send it along with the file to Safe Browsing so that the file can be opened and a deep scan may be performed”

So, what group of users will actually do that? They’d have to a) know they got a suspicious file, b) know how to find its password, and then c) upload it to Google.

I think b) definitely is too hard for most users. Chances are quite a few will send their own password instead.

Also, if Chrome can prompt the user for the password, and it is “available in places like the page from which the file was downloaded, or in the download file name”, why can’t Chrome look there for that password? I bet Google’s engineers can write something that’s better at that than the average user.

Edit: There’s a slight security risk there, but Chrome could also decrypt the file locally and keep the password on the local system, couldn’t it?
If it's not 1905, you put up a website and let people search for your product. Modern marketing doesn't seek to inform, after all. It doesn't work to make a product discoverable. Does Ford Motor Company really need to spend that $400 million annually? Would anyone soon forget the existence of the F150?
Accelerated Hydrogen Generation from Seawater
But you can.

We see this all the time when someoe hurts another person to stop them from hurting another person. It's codified in the law.

Whether or not you're doing a bad thing isn't determined just by the nature of your action but also by your intention.
Pithy!

But I guess I'm still confused. If a vendor provides software that doesn't honor the right, how many times can they do that before they get in trouble?

In HN case, I'm sure an email would sort it out, however.
The idea that was abandoned in 30s, was of the world revolution happening so soon that it should be prioritized over trade, and diplomacy with capitalist countries. It was replaced with flexible strategy of long-term struggle for world domination which USSR faithfully followed until its demise
Unless a digital purchase consists of a file or set of files that can be opened on any machine, without phoning home to check your subscription status, you're paying for thin air.

It's ironic because Redbox used to rent out DVDs that could be ripped to a file for a permanent, DRM-free copy.