skysight-inc/HackerNews huggingface dataset:
> If you use full disk encryption secure boot is pretty essential, otherwise an attacker can modify the code that asks for your credentials to also log them somewhere easily accessible.

In what threat model? If the attacker has access to your PC they can just as well install a physical keylogger intercepting the signals from the keyboard.

The main use case for disk encryption is preventing data loss when the device is stolen. That's a realistic threat that people face, not boogeyment coming into your house and replacing your bootloader with a malicious one.
But I want a GPT-4 level LLM using that data.
Is there a plan to make it self-hostable?
Air conditioning is just heat displacement. It doesn't get rid of the heat, and if it gets hot enough it becomes physically impossible to remove enough heat to cool a building down, no matter how many air conditioners are installed.
Any negative aspect of media from the past can, and often will, be transformed into a positive trait in future media.

People embrace vinyl records in an age of digital music. They take photos with analog cameras even though everyone has a phone in their pocket. Musicians use the harsh artifacts of MP3 compression as creative effects in their music. The examples are countless, and they all emerge precisely when the media that once produced these unwanted artifacts becomes obsolete.

If you haven't noticed this shift, I suggest you learn to recognize it quickly. Otherwise, you might miss out on great content because it doesn't make it past your mental spam filter.

And if you don't want to adapt, that's fine too—just don't tell others how to manage their websites.
It's funny that you mention hubris and yet you fall victim to it by dismissing the measurement problem and Bell's theorem. It's true that our theories are not a perfect description of "true reality", but they do tell you something about what "true reality" must be.

> That Bell’s theorem “proves” something is language applicable to a mathematical structure, not to the physical world itself.

This is simply wrong, Bell's theorem definitely applies to the "physical world". A world that does not violate Bell's inequality would look vastly different to ours.
While I think this change is great, I am not directly convinced Safari should be included in the list by their own rules, considering the app has not been explicitly downloaded by at least 5,000 users in the prior calendar year.
Dutch post codes actually do specify the street.

It's four digits and two letters. The digits cover an area (can be a city, town, neighborhood) and the letters cover the specific street or part of the street. Technically, they cover a range of house numbers, which in 99.9% of the cases is (part of) a street.

So just like in the UK a postcode is enough to get you pretty close. A postcode and house number will get you to the front door.

To get back to the article. I always feel like the UK manages to take privatization of public services to a next ridiculous level. This being a good example.

Another one is the rail network where the company that owns all the infrastructure and is responsible for maintenance (Railtrack) was fully privatized and even stock listed. This of course did not go very well in as far as actually properly maintaining the network. Resulting in it being nationalized again where now Network Rail is responsible.

In the Netherlands the company that owns all rail infrastructure and is responsible for it (ProRail) is a private company but with just the government as a shareholder. Meaning it is still effectively a public company, so things did result in such dire conditions as the UK.
I don't think it's fair to say that Katsu is particularly a British fad. When I lived in London, we'd go to the Japan Centre, or a local Japanese takeaway that had much better sauce but less generous meat portions. But these were pretty much the only 2 options within about 10 minutes walk from Piccadilly.

Last time I was in Hong Kong, I stayed in a hotel near Yau Ma Tei station. There were probably 5 or 6 Japanese fast-food restaurants mostly focussed on Katsu curry dishes within a few blocks walk down Nathan Road towards Mong Kok. Despite loving Chinese food, I actually had Katsu curry 3 nights in a row, it was so good there!
This was in the context of needing to give a location for an ambulance, not for addressing things.

It's an ephemeral location for an ephemeral need.
There are all sorts of easter eggs and jokes in Python, for example a joke about blind people that GvR prevented from being reverted:

https://marc.info/?l=python-dev&m=130991276326041&w=2

In 2024 suddenly everyone is grown up and corporate and has never done anything wrong.
Maybe dodo[1] is something for you. It is basically a graphical email client but with lots of vim-bindings.

Basically the best of both worlds, terminal and graphical. Like the qutebrowser[2] for emails.

However I think its kinda in a unmaintained state and only supports notmuch backend.

1: https://github.com/akissinger/dodo
2: https://qutebrowser.org/
The point of the DMA, for better or worse, is that it is no longer allowed to outsource this decision to your OS vendor.

Perhaps if you think this is anti-user, then it may be logically congruent to conclude that the DMA is mildly anti-user. I would agree, generally speaking.

That said, what is most convenient and easy for most users is ultimately bad for society and markets. The lack of sideloading specifically on iOS is a big danger, but day to day protects many users from malware.
I only mention this because the effect of those things could be more effectively curtailed... if the users weren't encouraged to hide the shortcomings from the application.

Sweeping things under the rug, you know?

A browser should have history, data, and extensions. Getting rid of those things doesn't qualify as a fix. It's a diagnostic step!
Better title: HTTP header checklist
Both your premises are wrong

https://www.theguardian.com/world/2011/may/03/osama-bin-lade...

You know that lies spread online easier than facts. Why make the problem worse?
I've given up with that, I have 3 or more computers at any time, I don't have a NAS. My MP3 collection is now 10 years old, I have MP3s I've bought littered all over different computers and online services and hard drives. Streaming is just easy when it works. I can do it in my car, at a friends house, on top of a mountain. Remastered albums can be annoying, because of the extra tracks which you don't really care about or a different sound spoiling the experience. Often there are multiple versions available on Spotify/Apple so you can find what you want if you take the time.
You might not make such a transfer - but the CEO can choose which of your colleagues he approaches.

So he doesn't go to the conscientious, rule-following guy with a stick up his ass. He goes to someone so junior they don't know better. Or someone who's flattered to get the CEO's direct attention and to be trusted and included on a secret project. Or someone trusting that the CEO gets on well with. Or someone who thinks producing results and cutting through red tape will show the CEO their potential as an executive.

And if the first person he approaches says there are forms to fill in he takes the forms, thanks them, and asks someone else the next day.
I've had nitrogen narcosis while scuba diving. It manifested itself as underwater kleptomania, with me trying to take various worthless tat off the sunken trawler we were diving on. I remember unscrewing light bulbs and trying to remove some manky old curtains, to take as 'prizes'. It seemed quite logical at the time. Rather concerning for my dive buddy though!
I have found this logic fallacy many times. "There is not need to fight for privacy, because that ship has already sailed", "There is no need to fight against recall because big tech already harvest data about you."

Does that mean we should not care about our data, and expose every bit and piece to the system? Should we max out data exposure, or still fight against it?
> Where Townland is optional.

Not really optional in most cases if you're not actually in the "large town somewhat nearby". I would say the large town part is more optional.

You're not going to get post delivered to "Lakeview, Cavan, Co Cavan", but you should be ok with "Lakeview, Killeshandra, Co Cavan".
Show HN: Drama Engine: A Framework for Narrative Agents
I've built a framework for orchestrating a group of agents that you can talk to that runs directly in the browser.

The Drama Engine is a framework for agentic interaction with language models. It is written in TypeScript to execute in any browser, enabling front-end developers to create a party of virtual companions that chats, works, and potentially slays dragons with you.
They only give themselves 85/100.

https://inspect.new/inspect.new
>“It is just as well Malevich is dead. He would be skinned alive for his Black Square.”

Well yes, given that Suprematism was more or less openly Trotskyist. I'm kind of surprised the article doesn't mention that at all (i.e as the thing that "killed" Russian avant garde of the time).
I view it more as an online attack than an offline attack (so LUKS arguably wouldn't come into play here).

ex: they exploit the browser to get to your userspace, which while they can access / modify your files, they can't elevate it to root to make the exploit more persistent. Therefore, they just vacuum up what they can at that moment (not even analyzing it, that's for later, this is just the collection phase) and move onto someone else.

But yes, I agree with you, if one's more concerned about the possibility of offline attacks, there are other ways to mitigate it / you have bigger problems if those mitigations fail.
Having seen this up close & personal at a Fortune 500

The “fake postings” were real requests from hiring managers, but by preserving an incompetent recruiting process leadership could say “help is coming” even though no one was responding to applicants.

Got so bad entire teams were actually just one hiring manager trying to do it all.
I have read many tweets since yesterday saying they think sonnet 3.5 have been nerfed.
You're replying to someone who said "cheap" and changed it to "worthless".

That seems kind of derailing to any good faith argument.

For Example: Computing power will get cheaper. Yeah, who's going to build these worthless computers?
Looks nice. I like that it defaults to vertical tabs, but I don't like the inability to give them any sort of hierarchy, be it a full-blown tree like Tree Style Tabs or with tab groups like Edge.

Since it's just a Firefox reskin, I was able to login with my Mozilla account and sync my extensions, Tree Style Tabs included. Enabling Zen's "compact mode" turns it into a pretty ideal setup for TST, since the default tab list disappears entirely. Still would be nice to not need TST in the first place.

Workspaces seem like a nice idea in theory, though currently underbaked in practice. Deleting a workspace appears to be bugged at the moment; attempting to do so just switches to the workspace instead of deleting it. It'd be great if they could integrate with Containers; I'd love to be able to e.g. set a default container for a given workspace (and then all tabs in that workspace would default to that particular container).

The Zen Sidebar is pretty cool; I can see myself using the premade Wikipedia and Google Translate panels quite a bit, in addition to setting up some of my own. Resizing the Sidebar is pretty finicky, unfortunately; dragging the edge will often fail and cause the Sidebar's size to snap to a tiny width.

Zen seems to have a built-in profile switcher, which is interesting, but seems redundant with Containers and way more limited. I also don't know why it defaulted to creating both "Default (alpha)" and "Default Profile" profiles, nor do I know why it set "Default (alpha)" as the default. I assume because this is an alpha release?

I don't know if Zen changes enough for me to prefer using it over normal Firefox (especially with Firefox's own vertical tab and sidebar improvements on the horizon), but I appreciate that this exists and look forward to seeing where it goes.
IIRC he got pneumonia due to difficulties removing the fluid from his lungs afterwards.

That first bit, where you breathe in the fluid, must be horrendous. No thanks!
Broken with JavaScript enabled too
>vulnerable people don't need to use such a feature

Vulnerable people often do not have a choice in the matter. Pre-installed, widely-advertised features are significantly more dangerous because somebody who is controlling isn't necessarily thinking of new ways to monitor, but they'll sure take advantage of any they know about.

It's the same problem as Apple's AirTags: GPS trackers existed long before them (and are harder to detect), but you can get a 4-pack of AirTags at the store and they're super easy to use.
Doesn't get much better, you saved some time. It was pretty unoriginal in my trial.
How is the DMA mildly anti-user?
Where did I say that?

1) I said that users care about the benfits provided to them more than the security/privacy they give up and can see that from practical history.

2) I questioned the value of recall and asked is what one gives up worth that value

3) I compared to browser history and even provided a mechanism to get some of the value without giving up privacy.
Thanks for your comment!

Using ports (as inbox) users can segregate the messages as per the context, this should simplify the information management, because users can search for information in the relevant port.

Users can compose new threads for different topics of discussion, hence these threads will only be relevant with respect to their topics.

As and when the new messages keep coming, there will be some threads where the discussion is no longer active, and users don't need to keep track of such thread discussions. This should solve the problem of overflowing inboxes.

Do you have any suggestions on how this can be further improved? I'd be happy to discuss.
How does OpenStreetMap solve it? OSM, more specifically OSM Nominatim, shows postcodes. Example: https://www.openstreetmap.org/search?lat=53.151778&lon=-1.16...
The miner gets paid every week. The company that owns the mine owns the diamond.
TheRaven – Software Development Company
TheRaven is a software development company based in Vinnytsia, Ukraine.
With a team of 50 skilled professionals, we offer comprehensive services, including server/client development, DevOps, and UI/UX services.
At TheRaven, we deliver innovative and reliable software solutions tailored to our clients' needs.
Counter: when this says 'no', it really means, 'modulate'.

Working remotely gives us the ability to have infinite water-coolers any hour of the day. Great power, great responsibility.

People take this personally completely forgetting there is a much larger world than theirs.
At some point one of their criminal schemes will actually send them to prison right? Right? ...
google.com scores 50/100. This is one of those scanners crappy pentesters use for multi page reports of false positives?
I made something similar a long time ago, it's mostly aimed at people that use CMSs like Wordpress or Joomla. The database was created using the most common attack endpoints bots have tried on my own sites.

https://prober.dev

if anyone wants to try it out
> After he asked for a $12 million loan from a neighbor, Brian Mitchell, his neighbor detected the scam and refused to lend the money.

Who asks their neighbors for $12 million? The dude was out of his mind. 24 years seems long but at the same time somewhat deserved given his role and the amount of damage his sheer stupidity inflicted.
nuclear safety has changed a lot. even though "walkaway-safe passively cooled" is not a technical term, but that's the design goal nowadays.

the real problem with nuclear is that the market is small, fragmented, US regulations are bad (as I elaborated upthread), so there's no real volume, no economies of scale, no healthy competition and there's basically no innovation even around the safety critical core...
Permanently, as in they're blowing efuses? Or just until some memory is cleared? Do you have more details on this?
Fairly certain the other user is misinformed and the general media reporting on this entire affair has continued to be so awful as to blow up the fact that the two capsules use incompatible IVA plug-ins.

If they choose to return on Crew-9, the associated IVA suits do exist and would be sent up. They already have both astronauts' measurements and have either made/adjusted a set for them, or have found ones that would be a good enough fit.

https://arstechnica.com/space/2024/08/yes-nasa-really-could-...

Eric Berger and Arstechnica in general has a fairly reliable track record on space related reporting. So I would trust them more than all the "big" outlets which can't seem to live in their own reality.
> Thank you for your interest in AnswerGrid. Our app is best experienced on larger screens. Please access AnswerGrid from a desktop or tablet device.

Oh how much I hate this. Just let me browse at my own risk, ffs.
Lat/long coordinates and metres are actually linked quite closely: the metre was originally defined as "the arc from equator to North pole is defined as 10,000 km". That is, 90 degrees is 10,000 km.
Go it's ideal to replace old C/C++ based utilitarian software such as mail clients, music players and so on.
For gaming and high performance needing tools such as the ffmpeg codecs and qemu, C/C++ have more sense there.
That Ava voice is amazing!
> But short of that, are there not only two root causes left?

No.

Let me paraphrase the conversation I had with the head of obestity at one of Europe's leading research hospitals (top 5 in EU):

Once you get a certain amount of overweight, regardless of the cause, there are so many regulation systems in your body (at least 20 that we know of) which kick in to keep you overweight that it is not possible to diet and exercise your way back to a healthy weight without picking up a new disease (eating disorder, exercise additiction, etc.). The people who manage it spend the rest of their lives obsessively weighing everything they eat, exercizing every day, and even then if they slip up or lose mobility or something, inevitably they will become overweight again.

The only known medical treatment is operating on the stomach. This changes enough of the regulation systems (including the hormonal ones) that it has a reasonable chance of sticking. GLP-1 seems to offer a second option.

It continues to astonish me that eating disorders which result in weight loss are (correctly) accepted by society as diseases with complex causes which can include lifestyle and self-control but also mental health and innumerable other things, but if you're overweight clearly you are a sad sack of shit that just can't open their mouth without shoving food in it.
> Can I or LEOs read your Hacker News posts and comments, and easily determine exactly who you are and that your previously open tabs where porn and anarchy related websites?

Not directly but in combination to other information it could.

The fact is, these kind of recording tools are not meant to publish your information to everyone.

> Don't act like it's saving the world,

I am not acting like that. I have no plan to use RECALL (I don't even use a single windows computer) nor any similar software.

However I find it funny that in any news about RECALL you see so many "privacy nightmare, will someone think of the children" comments while similar open source or proprietary projects for MacOs and Linux, or browser extensions predating RECALL were unanimously praised for their usefulness.

As any tool, you have to balance the risk of a leak in case your systems (or those that host your data) are compromised but it isn't in any way different than any other data you have online or locally on your computer.

You have as much if not much more to lose if your primary email account is compromised and you kept received email in the mailbox.
> Even building everything statically doesn't eliminate the need for the runtime linker, unless one hard-codes the exact address where a program can run. That runs counter to security measures like ASLR.

You could have the program be position independent (use only relative adressing) and do without a linker for that limited use case.
Wondering... why this happens only in Google (Alphabet)? Don't the employees have the duty to accept employment contracts? Why and how MS or Oracle or Amazon never have these problems?
(I was waiting for this comment :)
There's a setting to debug the starting time. It's interesting to find out the culprit (often a specific plugin)
Cool, need to try that!

Now I wonder if that is how these "magic cut" wasabi and ginger sachets work.
Encoding video on CPU is a no-go, AV1 is only supported on Alchemist IIRC. Certainly no hardware I possess has accelerated AV1 encode. I can do HEVC at 8x, SVT-AV1 manages 0.5x for the same file. There's just no comparison.
They aren't in alphabetical order. Simply looking at the list will confirm that.
"Recent tech trends have followed a pattern of being huge society-disrupting systems that people don't actually want."

"While planned obsolescence means this applies to consumer products in general, the recent major tech fad hypes - cryptocurrency, "the metaverse", artificial intelligence... - all seem to be comically expensive boondoggles that only really benefit the salesmen."

But acccording to sentence #1, some people do want these things, e.g., salespeople, investors, etc. But as sentence #2 implies, this is not a majority of people. Over the years, when people complain on HN about software and the web, other commenters, presumably software/web developers, respond that these complainers do not matter because they are only a minority: the majority of people do not complain. Failure to complain apparently means the silent majority "wants" what they get.

What rule can we derive from this developer "reasoning/argument". Sometimes it makes sense to cater to a minority, other times it doesn't?

"If you're not familiar, data centers are dedicated facilities for running servers. Data centers are "the cloud": instead of running your own servers, you can rent computer power from experts who are very good at keeping computers from turning off."

"The problem we immediately run into if we try to think about the proportional cost of AI is that there is no consensus on whether it's ultimately useful."

I think it is safe to say that only a minority of people are speculating that "AI" is useful. The majority are silent. Does that mean the majority want it.

We know what salespeople, investors and developers will say.

"As I mentioned earlier, the AI boom feels a lot like the blockchain cryptocurrency push of a few years ago. Like cryptocurrency, AI is a tech fad, it requires data centers, it consumes more energy than a webserver... the comparison is extremely natural."

If these things were truly useful, then it stands to reason the majority of people would be asking for them. Instead we see indifference. To developers, this indifference equates to "Yes, we want it".

A fundamental problem with paying atteniton to the speculation of developers and other pundits who advocate expensive, unnecessary uses of computers, e.g., "AI", besides the obvious conflict of interest, is that these folks do not have a good track record of being honest. To start MicroSoft in the 1970s Bill Gates had to lie that he had software that did not yet exist. This "vapourware" tactic might seem quaint but this culture of dishonesty now involves much higher stakes.

Developers are still faking demos. Putting Elizabeth Holmes in prison has not stopped the Silicon Valley culture of fraud.
This is from a movie right? I remember watching it but not the name.
This is exactly what we do at OneUptime.com. Show you AI generated possible Incident remediation based on your data + telemetry + code. All of this is 100% open-source.