skysight-inc/HackerNews huggingface dataset:
"diplomatic solution" at the point the US was involved likely would have meant seceding land to Russia. The US doesn't really have leverage to negotiate with Russia any better than they can barter with China over Taiwan.

Not to mention; I don't think anyone wanted to deploy Patriots in Ukraine for the same reason Russia didn't want to put the S-400 on their front-lines. Deploying a state-of-the-art weapon allows your opponent to study it and potentially find out if it's flawed or truly fearsome. If it weren't for Germany and Romania I don't think Ukraine would have American air defense at all.
Seems like an overlook, although the Express is a bit of an odd duck. Relatedly, TFL's pedantry about Underground vs other rail is driving me batty. No one cares about rail gauge when they travel. Calling the Elizabeth "Elizabeth line" is ugly, and signs in Heathrow pointing to the Underground when the Elizabeth is in another direction entirely are downright insane in a place full of tourists. It confuses me, a Londoner, those poor sods carrying heavy luggage through doomed corridors stand no chance.
So what's a good alternative for Android and Windows/Linux usage? I've tried Opera, Vivaldi and Firefox and disliked them for one reason or another.
Show HN: I Made a "Reverse Turing Test" Game
If you are willing to use netlify and are willing to use PHP, what is the inhibition to use a static site generator like Hugo? It is supported by netlify and others. I believe GitHub pages also supports a bunch of static site generators.
The web page is able to slow down my Android phone to the point that it stops responding to power button click. If you told me this page exploits a 0-day vulnerability in Android I would have believed it. Impressive.

(Android 14, Android WebView/Chrome 127)
Slightly similar bug in DuckDuckGo on Android, unmuting causes the video to buffer again but it then pauses itself and there's no way to unpause it.
Similar with Japanese Knotweed. And termites. And quite a few other things.
Do they have purpose to us / our technology?
This is BIG news for RISC-V.

Still we need more micro-ATX / mini-ITX products.
Travel speed matters too. At non-peak times, when queues are short, going 100 kph will give much shorter commute times than moving sidewalks (5 kph) or club cars (25 kph).
As I understand it, the only reason pqc is of "practical" concern is the issue of "store now, decrypt later".

Is it possible to defend against this attack in a classical way? Some sort of time limit on decryption? Or an argument that it's impossible?
while I agree, I think being able to do this by themselves is already way way ahead of German administration capabilities. So you need to see this from a positive angle. I for one am jealous.
I’m not impressed.

There is no mention on how much that cost and how much traffic the system handles. What about recurring costs?

Moreover, on mobile, the persistent bottom left link to the popover (i think cookie consent banner) does not behave correctly when you have already scrolled down and leaves a border when activated.
It's pico-oral mnemonic's that go hand in hand with stories passed down according to the people that had generational custodianship, these, and numerous other rock art sites throughout the Pilbarra and Kimberley (eg: Bradshaw's et al https://en.wikipedia.org/wiki/Gwion_Gwion_rock_paintings )
You fool a valid sender into thinking you're the recipient, he passes you his one and done key, which you use to login and takeover.
It used to run GOV.UK PaaS which was decommissioned last year, all government services had to find new homes - mostly in Azure or AWS.

https://gds.blog.gov.uk/2022/07/12/why-weve-decided-to-decom...
Deadline looms for California airports to stop using PFAS firefighting foams
The Great Wealth Wave
Carrier-Grade Nat
Hands down, the language made the projects easier to maintain. I have also rewritten from php to python, python to python, and perl to perl, many greenfield projects in each, etc.

Why did the language matter? Largely, static typing, concurrency ergonomics, fast compilation, and easy to ship/run single binaries. The fact it also saved 10-20x in server costs was a great bonus.

Better design can absolutely improve a project and make it easier to maintain and more performant. And bad code can be written in any language. I am more and more convinced that dynamically typed code doesn't have a place in medium to large organizations where a codebase no longer fits in one person's head.
Why? They literally throw away machines that dig tunnels because they are built just for one tunnel. There's decades in between tunnels being dug for most big cities operating underground railways. A company that would be tunneling non stop could make a lot of improvements probably and get really good at it.

There is no basis whatsoever that learning effects don't apply to the business of tunneling.
It was ”content first web franework” earlier
This is a notification service. They sent 2.6M emails, 2.8M text messages, and 60K letters yesterday [0]. That’s about 30 emails per second, 32 SMS per second, and less than one letter per second. That’s not nothing, but it doesn’t need crazy processing efficiency either. Most of the work will be I/O bound, just messages sitting in a queue waiting for the receiving service to be able to accept them. Python is fine for this. You don’t need email to be sent ASAP; in fact a lot of work goes into making sure you don’t send high volume too quickly in case you look like spam.

[0] https://www.notifications.service.gov.uk/features/performanc...
Good idea. I know that problem myself, too, though unfortunately this solution only works with a set of vehicle keys, doesn't it?

So unfortunately not much use if you're commuting on public transport…
No, I'm suggesting it because I don't want to pay for Bob to smash several cars a year. I'm saying it because there's lots of people who have no business being out on the road. Having Bob drive when he's a bad driver makes everyone around less safe.

But I guess you'd have society pay for all the cars Bob ends up destroying. We'll subsidize him crashing cars over and over and hurting Alice but we just can't seem to find the money to add another bus line!
Why do you think it’s great?

And how do you know its high-throughput?
It's disingenuous to read my comment as saying no theory existed, ever.

It should be obvious that when you talk about theory covering a product, there either is a theoretical framework, or there isn't.

In the case of suspension bridges there wasn't. There was no mathematical theory to explain how the bridge stayed aloft, or how much it could carry.

What bridge builders of high quality did, was make mock (small) models. And test how much rocks they could put on them.

I think you will concede that that isn't a theoretical model. It's a practical one.

And this happens very often. People experiment and build useful things, but no one understands why they work. Until later people come along and explain the phenomenon.
I disagree. ChatGPT is like pair programming with someone who is on drugs and tends to lie a lot. Co-Pilot is even worse as it constantly bombards you with poor suggestions and interrupts your flow when you should be left alone to think about the problem you are solving.

What separates a senior developer from a junior is that the language is no longer a barrier so your spend most of your time thinking about the problem you are solving and how you balance requirements, take into account human elements, and try to think ahead without prematurely spending time on things you aren't going to need.

Being shown a bunch of possible solutions to choose from doesn't help you develop the ability to think about problems and come up with better solutions.

Yes, ChatGPT can occasionally help you when you need a nudge to pick a direction or you come across something you don't know anything about. But it is not a substitute for knowing stuff and it can't actually teach you how to think.
Or that artists aren’t very compliant with direction.
How much would a proper control room cost? A hundred thousand? Couple hundred thousand? Considering you want maybe at least 2 people monitoring system 24/7. So 3 shifts? That is what 300k minimum a year, if not few times more...
No, you get an ISO you can install on a hypervisor.
The right answer is not always about straight-out security: 2048-bit RSA is not broken and won't be broken for the foreseeable future, but we know that it is much less efficient and more error-prone than e.g. ECDH. So why suggest the former when the latter is a better alternative?

You should consider these "right answers" as if the question were, "I want to develop a new product today. What cryptographic primitive should I use?"
The throughput is described as "thousands of requests per minute" – with modern hardware that's likely not something you'd even have to think twice about. It would probably run happily on a laptop!
What monitoring tools are you using? I know a ton that can do 30 seconds or less at scale. I'm fact, I'm pretty sure all the big players can do that.
Readability isn't the problem, but people could get confused.

Especially because some keywords are usual words like in or with.

But still great idea nevertheless.
Because they're not a magic box that spits intelligence, they're a reflection of their training data which will not contain these signals.
If I’m sailing the high seas and my ISP gets irritated, that’s a problem. If my VPN provider does, next.
Sneakernet or OTP
Clay.

https://en.wikipedia.org/wiki/Clay_tablet
It would cut some space for sure but you still need space in between no matter what. You also need to factor in space because these cars have to stop, people have to move in and out of them and that takes time.
Thanks for the extra info. And I agree those numbers are nothing to get excited about.
Many compiler related books take inspiration from the "Dragon book" (Compilers: Principles, Techniques and Tools). So with likely lots of books with similar looking covers.
I'm fully aware Bob is the victim. That's why I'm saying the solution is to make it so Bob didn't get in a car. He is a victim of car dependency. Subsidizing insurance to make sure Bob could always afford it isn't solving that. Ensuring he can always afford insurance just furthers his victimhood.
I think their point was ‘and then use a proper chain lube on the chain or you’ll regret it very quickly’.
https://www.notifications.service.gov.uk/features/who-can-us...

* central government departments

* local authorities

* the armed forces

* the NHS

* the emergency services

* GP surgeries

* state-funded schools

looks quite critical to me
If I was a company I'd be registering the domain 10 years in advance.
It's pretty normal for ordinary government workloads in the UK, or at least it was at GDS. Using niche suppliers who cater to government paranoia is expensive, and they're usually much less mature than hyperscaler platforms. It's also open for debate whether those niche, inflexible suppliers result in a genuinely more hardened target or not.
This is awesome!

Is there somewhere that contests like these are tracked?

Would be awesome to browse.
the only places where MKBHD is a "Top tech reviewer" is yt subscriber ranking and corporate payrolls
Kim Dotcom is being Megauploaded to the US for trial
I they try they get sacked by lobbyists.
Everyone is offering their suggestions, but no one has posted about marshmallow which handles everything out of the box including serialization and de-serialization. It's the perfect balance of dataclasses, (de)serialization, and lack of useless features and umpteen hacks that libraries like Pydantic and FastAPI have.
When I was in the Boy Scouts, a local judge came to speak with us about the legal system. I asked a similar question and he admonished me that innocent people never wind up in court. He explained that every person who is in a trial (criminal or civil) is guilty of something. A judge's job was merely to determine if the prosecution or plantiff was correct about what the defendant was guilty of. He was very annoyed that ignorant people, who had never been to law school, kept spreading this nonsense that some defendants were innocent.
If you look at old papers by James Arvo, he has done analytic illumination from linearly varying lights, maybe this is helpful. Here for example his thesis: https://www.cs.cornell.edu/courses/cs667/2005sp/readings/Arv...

There's also this work on analytic antialiasing by Michael Mccool: https://www.researchgate.net/publication/2524514_Analytic_An...
IANAP (I'm not a physicist)...

Can a neutrino detector estimate the direction from which a neutrino arrived?

I'm wondering if that could help discriminate signal vs. jamming.
Really awesome work, @california-og!

I would love to see separate fonts for HTML, CSS, and JS only, as I would want to use it for lightweight HTML highlighting in textareas in a CMS.
I'm not sure you're grokking what I'm saying. The answer to your question is "yes, of course". The class attribute has _nothing_ to do with CSS (or JS).

The CSS people didn't give us the class attribute (and the HTML people didn't put it in so that we could use CSS better). HTML had class attributes before CSS or JS ever existed.
Oak was also the original name of the language that became Java.
Periodically I read articles or listen to podcasts where people assert that Product Market Fit isn't real, or is wrong, or is somehow broken.

I wonder why? Maybe its part of establishing your own cleverness, "debunking" some popular concept.

For my money, PMF is alive and well. Marc Andreessen is often quoted as saying that product-market fit is when "the market pulls the product out of your hands." and that make sense to me and I don't see its wrong or out of date. It's just very very hard to attain.
Nice to see Anthropic providing this while Claude is my go to model.

I prefer DeepSeek's new context caching implemention being completely automatic and code free.
https://platform.deepseek.com/api-docs/news/news0802/
And without a 25% premium
Totally agree. You don’t even need two years. A few weeks is enough. I remember the Biden situation as him holding on for as long as he could and then basically being pushed out. But when you read a lot of NYT commenters you start to believe that he sacrificed himself out of patriotism and planned his exit with exquisite timing.

So yes, don’t always believe history. Events that happened hundreds of years ago have gone through many spin cycles.
I don't care about the paint but the keys are different, on US keyboards the enter his horizontal while on others it's vertial.

https://www.sbsupply.eu/blog/what-is-the-difference-between-...
>early-stage detection, without needing to pay for, or wait for, training a custom ML model

This doesn't make much sense though, if you're in a hurry to get something working and don't have the data for training a custom model, you'd use the knowledge you have of the system to setup a typical statistical anomaly detector. That way you'd have the insight into the system behavior that you'd want early on, would be able to enforce all sorts of guarantees and would not have the weight and complexity of an LLM on the system's resources, rather than worrying about this LLM that has nowhere near the same info on the system.

Using an LLM for this would be like hiring a random person off the street to keep your network infrastructure working because you're in such a rush that you don't even want to document how your infra is setup, let alone wait to find someone who would know how to decipher it.
WHO declares mpox outbreak a global health emergency
Yup constantly amazed by this. And how even more faster properly made and supported native GNU/Linux games are, like Paradoxes grand strategy games for example. Gaming would be so much better if we could only get rid of Windows.
> Am I getting crypto advice that will keep my data safe for 30+ years, if the advice changes every 3 years?

If you drill into the details a lot of things haven't changed. Eg, the key size and HMAC recommendations go back to the original version (among others).
We only know about oral story/stories that survived, no idea how many got lost forever since last knowing person died very long time ago. With writing/stone tablets, there is still some hope for the future to find more.

Also, all history since evolution of man before stone tablets and similar was oral, and we have very very little that persisted till now with 0 chance of new discoveries. Much more persisted in written form, and its coming from much shorter timespan. Also, massive room for accidental or intentional distortion and even eventual complete loss of original content in oral history.

I'd say most modern religions fall into this, they literally copy&pasted each other with rather small changes (which were then thrown out of proportions by fanatical followers), typical most famous one is zoroastroanism -> judaism -> christianity -> islam -> bahai and of course each node has tons of sects which mix with the others also on other levels in various ways. And each claims they are the only valid eternal truth and word of God... with at best mild tolerance towards every other offshoot.

Its funny in worst way possible to meet religious fanatics from any of those, rational debate is simply impossible and they only look for quick mental exits from any sort of critical thinking and introspection. I am firmly convinced that reading properly original stuff that that ended up as the book we call Bible would make quite a few people these days leave the religion.

For me its not even comparable.
Excellent prose and and compact. Wish I'd had this cheat-sheet when
doing research methods. Interesting (comforting accordance) to read
data scientist talk about things that come straight from signal
processing.
The field is too young that we can be absolutely sure. That's why most suggest to use hybrid cryptography for now.
Thanks but UK keyboards have a vertical enter key, so no.
Research AI model unexpectedly modified its own code to extend runtime
> The FSF requires copyright assignment for many (possibly no longer all?) of their own projects

The FSF requires nothing of the projects; the FSF leaves the choice of copyright assignment up to the project and its maintainers. Which is what I wrote. The fact that many projects do choose to require copyright assignment does not make you be less wrong when you said that the FSF requires it.

> They cannot change the GPL.

Technically true. But the FSF can publish a new version of the GPL, which all GPL-licensed software using the “or any later version” language, which is most GPL software, will then use. Linux is an oddity here.
Judging by some of the CPU issues coming out of Intel these days, the fiery crashes are not far off.

I remember learning about CPU design and manufacure as a kid and was absolutely astounded that any of this shit could be made to work in a practical way. In my eyes Intel was immaculate perfection.
My (non-bank) employer still has lots of COBOL in production, and its constantly extended. Before working here I expected all COBOL to be running on some large IBM mainframe, but no. It's x86-64 Windows -- COBOL compiled to native Windows binaries.

Edited to specify not a bank.
Brain interface converts thoughts to words with 97% accuracy
Iranian backed group steps up phishing campaigns against Israel, U.S.
Previous investigations on APT42 from Mandiant:

May 2024: https://cloud.google.com/blog/topics/threat-intelligence/unt...

September 2022: https://cloud.google.com/blog/topics/threat-intelligence/apt...
It's not that easy as the keys on the keyboards are entirely different. The enter key is vertical and when you hit \ you execute a command instead.
If only HAL had been advanced enough to do this...
Is your thesis that writing was invented much earlier than presently believed but also it was only used to make marks that were easily destroyed and never incrementally improved so it would seem like they had no prior experience ?
I do wonder why they decided to tie themselves heavily to AWS tech over using cloud-agnostic alternatives. You'd think for a government the latter has higher value than for private business, and even there it's a consideration.
Or from some months ago: Llama.ttf: A font which is also an LLM

https://news.ycombinator.com/item?id=40766791
Yes, personally I don't think it's a good idea to host these things with the US companies. As a citizen I prefer it's in my own country, unless it's really not critical or interesting information / services.

The UK made a different choice.
Hello. I worked on that app. You are wrong.

Firstly, "Track and Trace" is what the Post Office do. Perhaps you're thinking of "Test and Trace"?

Secondly, the UK Government hasn't had app development skills in-house for a long time - see https://gds.blog.gov.uk/2013/03/12/were-not-appy-not-appy-at... - so there was little choice but to use an external provider.

Thirdly, the initial version of the app was built by an external team who were already engaged with DHSC. They had won a competitive tender (which was published) but, as I'm sure you can understand, there wasn't time to run a new one for the Contact Tracing app.

Fourthly, if you have evidence that the development of the app - which was done quickly, with all source code and design documents published as open source, and which saved lives (https://www.ox.ac.uk/news/2023-02-22-nhs-covid-19-app-saved-...) - was somehow corrupt, I'm sure we'd all like to see it.

Fifthly, if you're about to say "£37bn" - have a read of this https://fullfact.org/health/NHS-test-and-trace-app-37-billio...
So is Firefox.
> the FSF can create GPLv5 and add whatever clause they like in it.

They cannot add anything to it; the new license has to, IIRC, be substantially similar in spirit.
Making improvements != economy of scale. Digging 10 tunnels in parallel using 10 machines and 10x the people I bet won't save you much in the grand scheme of things.

And the reason why they "throw away machines" is because most of the time those are custom built based on the project and the wear and tear is substantial.
> What's the alternative?

Let them go out of business and everyone learns a valuable lesson: "too big to fail" is a myth.
Can someone ELI5 this vs all of the other options? Say I have a $300k in RSUs and a handful of stocks and a 401k w/ fidelity. What does this do? Also is this similar to the etrade portfolio things?
Thanks, that looks really neat I will look into it for sure
Then what is xAI doing? Any published papers or anything?
Are you going to keep updating the content so it's current and has rewatchability? I would really like to keep using this.
The selection isn't the best but at least they have the option to filter! Thanks
Looks amazing, and timely as my next task is to select a React data grid and add it to a project.

Two concerns:

(1) the docs talk about Pro versions but don't give any information on pricing.

(2) the docs talk about "remove attribution" but none of the demos show what the attribution looks like or how to remove the attribution.
It adds context which people who manipulate the overtone window for political games and name calling like to exclude.

The person was a immigrants child. Considering there obvious (violent) refusal to integrate they are too an immigrant.
Notice that each major cloud vendor has dedicated gov regions...

So I guess the tie is larger than it seems at first sight.
It's covered a bit at the bottom of the article.

Where do you find these exceedingly winnable contests?

Sorry, that’s a trade secret — but it’s not any of the standard various contest aggregators out there.
How would you rebuild a secure national "cloud" service if given
the mandate and the money? (come and talk to us on cybershow if you'd
like!)
I get the physical edition and it's nothing like that. They're giving the internet what it wants. Physical paper has Opinion section at the back where I don't often read it. Online, Opinion pieces are right on top.