skysight-inc/HackerNews huggingface dataset:
I'm building MemFree, https://www.memfree.me/

The open source project: https://github.com/memfreeme/memfree

An Open Source Hybrid AI Search Engine: Instantly get accurate answers from the internet, bookmarks, notes, and documents. Obtain the most precise answers in the shortest time. With one click, AI indexes your personal knowledge base, eliminating the need to remember or manage it.
My primary focus is my PhD research.

I'm developing a tool using GPT-4o to help draft outlines for small-business and institutional grant applications.

I'm also working on a solution to fix prior authorizations in the insurance industry, fix scheduling surgeries due to insurance network database inconsistencies.
The particular changes and log message are actually by The de Raadt, the guy that started OpenBSD after being one of the founders of NetBSD.

If it weren't for such an incredible specific example of how it wasn't so you would feel extremely justified in your initial position though. That's the danger with these types of thoughts, they are often easy to come up with, easy to feel confident about, and hard for anyone else to disprove.
> I do something similar with my investments. I borrow money and buy investments with the borrowed money.

Yes, minimizing uninvested capital --- or the extreme case of it, turning that negative through leverage --- is great, until it isn't.
Not a database expert but CUE can be used for generic schema design and validation, maybe it can also be used for deterministic database schema extraction and migration [1].

Unlike AI's non-deterministic techniques for example LLM approaches to NLP, CUE utilizes a well established alternative NLP deterministic approach namely Feature Structure [2], [3].

[1] Cue – A language for defining, generating, and validating data:

https://news.ycombinator.com/item?id=20847943

[2] Feature structure:

https://en.m.wikipedia.org/wiki/Feature_structure

[3] The Logic of CUE:

https://cuelang.org/docs/concept/the-logic-of-cue/
And at least one of them was intentionally whistleblown to create an OpenBSD witchhunt wasting both OpenBSD developers time and distraction all the other *BSD and Linux security/devs, while the _real_ target slid under the radar...
Find a different bank.
Free speech is not something they value. Individual rights aren’t valued.

Nonsense. Of course Europeans value those things, but they're also mindful of the fact that such freedoms can be abused, sometimes with catastrophic consequences.
Corporate rot of engineering-first culture.
I think a lot of people actually believe that kind of thing.

I was rather impressed with the nurse practitioner at a CVS Instant Clinic a couple of months back. I could have tried to get an appointment with my primary care when I got home. But when I actually saw her a few weeks later for a scheduled appointment, she basically shrugged and said she'd have done exactly the same thing the nurse practitioner did. (Keep taking Tussin and there's a prescription for an inhaler at the pharmacy counter.)

Pre-COVID (and the test I took was negative for what little that was worth), it would have been eh you have a virus. Which ended up basically the diagnosis.
The reason is clear. He wasn't sharing any personal and message data from its users with intelligence agencies and law enforcement.

Even ProtonMail which wrongly claims to be a privacy safe heaven does so!
Windows Subsystem for Android might work better than an emulator.
Transferring energy from nitrogen to argon enables 2-way cascaded lasing in air
I couldn't disagree more. Defenders and attackers are alike in many ways. I disagree with the post as well.

Mature security teams for example use Bloodhound which uses neo4j to visualize attack paths in AD. Defenders (good ones) don't think in lists.

> "The defender’s job isn’t defense."

Yes, it is. Obviously!

> "It’s a side show, and a distraction from the main business of whatever else the defenders are trying to do"

I'm sorry, but what else are defenders trying to do that isn't defense? are all defenders completely incompetent then?

> "By contrast, an attacker’s entire job is to attack the system."

Yes, and there are people in mature security teams whose entire job is to search for and stop (not just react to alerts) attackers.

> "Attackers win for the same reason that Microsoft is better at publishing operating systems than Cisco, because ciscos operating systems are a means to an end. Microsoft’s are the end"

I think you have an incorrect perception of what security teams do. It is both a matter of strategy and resources. There are security teams whose budget is in the 100's of millions of dollars and who employ some of the brightest cybersecurity strategists and professionals. You rarely (if ever) hear their names in relation to a breach or compromise. There are also much less capable security teams who do well against most attackers, but will inevitably get pwned by an APT, except the good defenders catch the apt's before they cause significant damage.

At well protected organizations, attackers lose 99.9% of the time (probably higher, I'm guessing here). Attackers simply need to win once to succeed, while defenders need to succeed 100% of the time.
If that happened in North America, you could just use TextNow to create a SMS-capable phone number and use it out of your browser.

I think there is no such thing in Japan: a website where anyone an create a throwaway account and get a phone number in any area code. Telephony is tightly run there. There are some commercial services like that that will give you a phone number, but you have to submit paperwork proving that you're a resident of Japan.
While I love the esp32, it feels underutilized. I wonder if instead of the hardcoded "randomness" it could traverse a 1-D perlin noise field with a large scale but maybe varying sharpness. That way you can get long stretches of nothing, maybe a slow move, maybe a fast move.
What are the fundamentals one should learn in kindergarten, elementary school, etc?
>It can't be just the mismanagement or the greed of the leadership, righ

....no, that does in fact explain everything that led to the decline of American manufacturing and engineering.
I've done both. I've been an incident responder and have experience with penetration testing and red teaming. I think that, while reductive, this is somewhat true, but not necessarily as negative as the the article reads. Defense is made up of many things. For instance, developing effective controls to reduce the risk and impact of a security event, identifying attacks and compromise, and responding to the events. Lists of standards and responses work well. Defense also includes architectural decisions which require thinking about the graph of the network to develop these controls. There are lots of disciplines in defense too: architecture/engineering, risk management, incident response, application security, education, threat intelligence, and so on.

Also interesting that the author implies the problem is about thinking of defense in lists then provides a list of items to consider to improve defense.
Is China's Demand for Oil Nearing Its Peak?
>parents who drilled into me that "effort matters, you might not be the best, but with effort you can be better than who you were yesterday and that is a worthy endeavor"

This is also taught heavily in middle/high school sports; it's a great life lesson.
A formal way to frame this insight is how a formal methods security researcher might: graph-based program verification.

A lot of core confidentiality and integrity security problems come down to 'safety property' verification (a notion from model checking), which in turn comes down to reachability on a program flow graph (a notion from program analysis). This is also true of access control verification, but that's a topic for another day.

Imagine a dataflow or points-to analysis on a program, and extend it all the way to include the code in your OS and the cloud and the database. These analyses create a graph, and the question is can an attacker get from an entrypoint and precondition of some node A (a line of code) and traverse to the assets on point B (another line of code.)

Interestingly, the security field is increasingly getting there, with ideas like CNAPP, IAM/Cedar, AD/bloodhound, where we are getting these basic access graphs modulated by estate, identity, access policy, etc. Often we don't even really need the programs, because it's more about a distributed system where we can focus just on identities and policies across trust zones. (Eg, If a box gets hacked, that exposes other credentials on the same box.)

At the same time, anyone working in these things also knows graph reachability is simplistic 80's & 90's stuff: there can be complex logical policies at each node, So we're seeing things like modeling those harder points, not just as pure reachability, But also things we can actually peek into and more richly verify, such as by modeling fancy ABAC policies using smt solvers.

I don't think that's really where the author is coming from, but it's a reason the article resonated with me for so many years from a principled perspective, and I think it's incredibly practical and important today.

(Disclaimer: we do crazy GPU graph AI power tools for folks in the space at Graphistry / Louie.AI, in my first verification papers here were almost 20 years ago, so I've been thinking about this a lot.)
This is an indictment of Airbnb, and this situation was totally foreseeable when the company was founded. YC is of course complicit in these regulation-evading shenanigans.
Dang, I'd like a copy of that script. Eml parsing, even with powershell and Exchange modules, is painful.
Absolutely, thanks for pointing that out. I really hope it didn't come across as condescending, as I didn't intend it to be - because I have the same habit. Do something until it's not exciting anymore and move on. Though unlike myself more often, he tends to actually finish what he's working on initially.

I guess I was trying to paint a short historical picture and why I'm pretty excited about it as a Solus user - its package manager is a bit long in the tooth. I think could be a really great relationship having one team/person prototype and another adopt into something more stable.
Techniques for safe garbage collection in C++: unique_ptr and right curly brace }. Linear types with delayed gratification.
Interesting fact from piece:

> Then, of course, there is the electric vehicle story. China set out to become a leader in electric vehicles, and it did. The country is currently the biggest EV market in the world. And it is a market that continues to grow, unlike the EV market in Europe, for instance, where EVs are still struggling to compete with internal combustion engine cars.

> This is not the case in China, where sales of plug-in hybrids and battery electric cars represented over 50% of all car sales, at a total of 853,000, per figures from market research company Rho Motion as cited by Reuters earlier this month. It was this trend in EV sales growth that prompted Sinopec, the state oil major, to predict that oil demand in China would peak before 2027.

https://www.reuters.com/business/autos-transportation/global... | https://archive.today/CXiln
The issue is there to verify a program you need to have a spec. To generate a spec you need to solve the general problem.

This is what gets swept under the rug whenever formal methods are brought up.
This is completely nuts. Well done.
I also recommend Mentour's excellent series of videos [1] on this subject too if you want more detail from an aviation perspective.

[1] https://www.youtube.com/watch?v=nCbHpJShoXk
Very attractive！
I'm a materials science/engineering critter. I'm working on a new method of making single-crystal diamond slabs up to 300mm diameter.
Awesome idea. Like a stackshare combined with a job board?

There was a girl in the valley who make a recruiting service based on preferences like environmental/social factors. blanking on the name.
Less guilty than you might about the means by which materials are sourced to make your electronics.
> If the verification systems for LLMs are not built out of LLMs and they're somehow more robust than LLMs at human-language problem solving and analysis, then you should be using the technology the verification system uses instead of LLMs in the first place!

The issue is not in the verification system, but in putting quantifiable bounds on your answer set. If I ask an LLM to multiply large numbers together I can also very easily verify the generated answer by topping it with a deterministic function.

I.e. rather than hoping that an LLM can accurately multiply two 10 digit numbers, I have a much easier (and verified) solution by instead asking it to perform this calculation using python and reading me the output
There's "gifted" and there's gifted. The truly gifted often think they _have_ learned how to work hard because their classmates in the "gifted" classes got praised for their hard work. There's a top echelon of kid who is both common enough that every school district has 1–10 in each cohort but notably more advanced than what district standard gifted education is designed to handle.
Defenders also think in graphs. Matter of fact, good defenders think like attackers.

Case in point, to contradict the author of this post directly:

https://github.com/BloodHoundAD/BloodHound

BloodHound is primarily a defender tool, that uses graph theory to help defenders find attack paths. But attackers also use it to help them find the shortest path to owning an AD domain. BloodHound is used in by a lot of threat actors as part of those news stories where the entire company is ransomwared. But what you don't see is, in a lot of companies that don't get totally ransomwared, there is a chance defenders are also using BloodHound to find and fix attack paths.
Yes? There's ridiculous amounts of telemetry in these things.
The more I observe about people and how they learn and do things, the more I suspect that motivation plays a much bigger role than we think in intelligence.
No. Not really. Is Make a shell? It isn't. Neither is CMake. Python can be used as one but it really lacks niceties that an actual shell would provide. A cross platform shell with limited capabilities would do the job for me but it is overkill.

I am not really looking for features you find in shells like REPL, job control or very complex structure support. Having targets and being able to execute commands to build them independent from any OS shell is enough.
Well, as the aphorism goes, the best defense is a good offense. Of course Microsoft and Google have security projects which aim to disrupt organized hacking groups, but maybe they need to go further? Like using honey pots to back-feed zero-day exploits (maybe even ones that have been engineered into Google/Microsoft/et al.'s products) to attacker's machines? Go full black-hat (with some sort of plausible deniability) and ransomware the ransomwarers.

As I type this, I realize it sounds a bit like some of the evil all-powerful corporations in sci-fi, although they usually also go to the lengths of assassinating their enemies.
Ghost In The Shell (1998)
Ghost In The Shell 2: Innocence (2004)
Ghost In The Shell: Stand Alone Complex - Solid State Society (2006)
District 9 (2008)
Inception (2010)
Rouge One (2016)
Why would you ever use a non-deterministic model for a deterministic function?
That's true but it also speaks to the fact that Space X is incredible. Not nearly as bureaucratic and innovating like crazy. The new Raptor engine alone is mind boggling in it's simplicity.
I'm working on something similar but instead of basing my efforts on the generator agents paper I'm basing it on a technique I call narrative generation. It requires far less context and fewer prompts, and focuses on generating narrative aspects and letting the traditional game engine things simulate the remainder of the world.

As an example, with the system I am building you only need to input what action the player has taken, and all the NPC's actions and dialogues will be generated.
Work in regulated manufacturing industry, deploying off-the-shelf operational technology systems (think Siemens, Emerson, Rockwell, Honeywell, Aveva, etc.).
Been building a software stack to automate building the custom documentation / validation the businesses who buy and deploy that software. Excited about its potential to cut down and the least favorite part of the job that engineers and those businesses have, when trying to improve things by deploying software or making changes
The non-standard scripting language is really easy to pick up and kind of fun.
A duckdb clone implemented in julia
I am working on turning my theory into a code. I have a theory on how the brain works. Do not criticize me, even i know how it sounds.
Someone with $15bn is certainly going to take risks to get more, but running a pedo web ring does not offer that scale of money.
This game was one of my favorites! I recently moved to a Debian / GeForce / Intel setup and could not be happier with how Steam proton has been working out of the box. I’ve been able to run the windows version of Caesar III with proton enabled flawlessly. The distributed version has some really awful default graphics, so I ran the c3respatcher [1] in wine which also worked flawlessly. Linux gaming has come a long way.

[1] https://gitlab.com/Afdch/c3respatcher
<https://news.ycombinator.com/item?id=23486170>

Email concerns to mods at hn@ycombinator.com

Though yes, this thread is overall quite low quality. Sigh.
Chips or Not, Chinese AI Pushes Ahead
Rad!!!
I've become a really big fan of this model of window management after using Karousel on KDE for the last 3 months. This is especially useful if you're using a widescreen monitor.

I never understood the appeal of tiling as 99% of the time I am focused on a single window at a time and I want it to take the full height of my display, so scrolling with the focused window centered is my ideal workflow.

I only wish I had the ability to quickly toggle the side-by-side mode that is default with these for the occasional time I need to have a code editor next to my browser.

If anyone knows if any of these supports that toggle, while also supporting the other key features I use in karousel (being able to shrink/expand the focused window with a hotkey), then I'd be willing to leave KDE to get that perfect workflow.
Hey now, if those paper clips were actually a short circuit then they wouldn't get hot.

Stupid was the kid who thought he'd try to catch the water balloon in a bucket, missed, and it hit him square in the crotch and bounced off unbroken. Ahh, FIRST hijinks.
I know, it's just wishful thinking on my part :) It won't happen but that doesn't mean I can't wish for it.
This true. A good responder understands the attack and methods used to perform the attack. The best can visualize the event through the eyes of the attacker and use this insight to contain the event quickly.
It's a lot more than that but, as you get away from at least medium-sized cities, things get scantier especially if you need specialized care.
blockchain street racing sim game - https://enzo.gg/
feels foreshadowing
- Koe no Katachi (A Silent Voice)
Helped during some of the hardest times in my life, it taught me self-forgiveness and empathy.
> If you jump at a large project but lack the fundamentals you are going to wasting energy on stuff you shouldn't be.

On the other hand, for many people (like me!) it can be hard to feel motivated to learn a new programming language/framework/etc just for the sake of it (especially when you've got plenty of stuff going on already). (Note that I use "motivation" here in the immediate, executive function sense, not in the broader desire to do a thing sense.)

In such cases, I have found that the best way to learn how to do what a large project requires is to first define the project that you want to accomplish that uses them, and then break that down into all the parts you need to learn to make it happen.

The outcome is still "mastering the basics" before you actually take on the large project as a whole, but it can still look very much like trying to tackle the large project from some angles.
Scott is debunking ideas to dump deltaV before hitting the atmosphere, to avoid having to go through the rigors of reentry. This isn’t relevant to the discussion; he’s not disproving the possibility of landing from orbit in a glider.

The existence proof here is the shuttle, which did indeed manage to glide from orbit.

The challenge is that you need some strategy to dissipate the kinetic energy on reentry. The approach that both the shuttle and these hypothetical gliders use is ablative heat shielding.

A glider manufactured in space and autonomously piloted would have a lot more design space to explore, since you don’t have the constraint that it has to be launchable on a rocket, and you can potentially spend years on successive aerobrake approaches if that is optimal.
Stenography/text expansion app that emulates a Bluetooth keyboard. Combines regular character entry, stenography, and fast autocomplete using an N-gram language model (lower latency than an LLM, more transparent/debuggable, no need to cap vocabulary size for embedding).
changes in the page table block the whole process, doesn't matter what combination of concurrency models you're using. we could do with a sub-process mapping API from the OS, but it's not something any major OS offers today, and requires designing for at a very fundamental level due to interaction with the hardware, and associated hardware constraints.
Or spaceX is the only firm that inspires engineers to work hard, and take (calculated) risk. To move quick.

A lot of defense and aerospace is not used to the Silicon Valley mindset. Gotta give Elon credit in achieving what he did with spacex
I’m constructing my house alongside a small crew, who are guiding me through the process of welding, erecting brick walls, and laying porcelain tiles. While I’m definitely slowing them down, it’s been an incredibly rewarding experience.
> When an LLM generates code, you don’t want it to generate author names!

Who exactly is the "you" in that claim?

Justine clearly does want their author name (accurately) included.

I'd argue that anyone who's used a license with attribution requirements has explicitly stated they want that.

OpenAI et al. don't want that, for at least two reasons I can think of, 1) because their "artificial intelligence" isn't capable of doing it accurately or without "hallucinating" incorrect authorship attributions, and 2) because of the tsunami of copyright lawsuits that would immediately drown them.
This works surprisingly well. Just shared it with my sci fi group.

Idea: make an email opt-in and then new releases based on old preferences. My use case is always to go to DVDs/netflix releases, filter for sci fi and then high IMDB.
It was the default method of contacting the dealers on Russian darknet when everything was a just a message board (hell, it was available without TOR) and not a proper marketplace
Steam recently made some changes that are pushing game studios away from prologues. Instead, demos can have their own steam pages. Plus all hyperlinks will soon be banned.

I also noticed your game has been up on Steam since January 2022 and by the looks of it, you've done about zero marketing (steamdb.info). Hope that's on the horizon, it's a pretty darn important part of game development now!

Love the concept of your game. Reminds me of my favorite roman emperor: https://en.wikipedia.org/wiki/Aurelian

- Fellow game developer
Your say that believing the downfall of Boeing is reflective of the downfall of all of society is "melodramatic", and then spend the rest of your post explaining how Boeing's failures are exasperated by failures in government and other organizations. You defeat your own argument.
Economists like competition but not when it comes to their own field of research