skysight-inc/HackerNews huggingface dataset:
This shows that anyone with the slightest motivation to do harm would have zero difficulty replaying 911.

The reason there aren't more terrorist attacks isn't because various security agencies around the world protect us from them. It's because there are extremely few terrorists.
> Now for a followup question: How does any website surface any content when they're liable for the content?

Chronological order, location based, posts-by-followed-accounts, etc. "Most liked", etc.

Essentially by only using 'simple' algorithms.
> The TennCare Connect system—built by Deloitte and other contractors for more than $400 million—is supposed to analyze income and health information to automatically determine eligibility for benefits program applicants. But in practice, the system often doesn’t load the appropriate data, assigns beneficiaries to the wrong households, and makes incorrect eligibility determinations, according to the decision from Middle District of Tennessee Judge Waverly Crenshaw Jr.

Not at all surprised to see the name of a big consulting firm like Deloitte in something like this. How much money and productivity is lost to these leeches across our entire economy?

Leaving aside this particular case: how can potential recipients of benefits even know how or why they were denied to bring such lawsuits in the first place? Especially if they are forced into arbitration? For example I feel like private health insurance companies, particularly Aetna, deny many claims falsely as a typical approach to avoid having to pay out as much. And patients are then subjected to a long drawn out process with hours of wait times, hours of calls, and constant vigilance. This method of avoiding payouts by creating expenses for patients should be illegal. But how can anyone see what’s happening and be in a position to challenge it without even a basic level of transparency?
... and that was the last time Ian was allowed to fly without a printed boarding pass with SSSS on it.
Interesting project! I could definitely see that being a fun thing at corporate parties (if those ever come back!) Btw, The url on your instagram is misspelled, should be .com
At some point, the glass, frame and wiring will dominate the cost of solar panels, and when we hit that point, the price will likely stop falling. I don't know if we'll ever get as low as $4 with our current approach.
Or refining aluminum, which uses something like 1.5% of all US electricity generation.
Ah okay, maybe it looked at the time like my comment was part of the other Tantacrul thread. I never mentioned Tantacrul and you replied to me, but I think the comments were next to each other at first. I’ve done that before. No worries.
> The TennCare Connect system—built by Deloitte and other contractors for more than $400 million

There you have the reason. The government software should be open source because

- People need to be able to make public officers accountable (Article XV – The society has the right of requesting an account from any public agent of its administration. https://en.m.wikipedia.org/wiki/Declaration_of_the_Rights_of...)

- You should be able to fire incompetent contractors, and replace them with someone else, for which open source code base makes it much more practical and the contractor cannot use any trade secrets clauses to make this impossible

> Deloitte was a major beneficiary of the nationwide modernization effort, winning contracts to build automated eligibility systems in more than 20 states, including Tennessee and Texas.

So much tax payers money wasted.
It's no different from any other interpretation.
It should be possible to generate an initial image from Gaussian noise, including the latent information on player position
The link to the actual decision:
https://cases.justia.com/federal/appellate-courts/ca3/22-306...
I read the decision. -> https://cases.justia.com/federal/appellate-courts/ca3/22-306...

Judge Matey's basic point of contention is that Section 230 does not provide immunity for any of TikTok's actions except "hosting" the blackout challenge video on its server.

Defining it in this way may lead to a tricky technical problem for the courts to solve... While working in web, I understand "hosting" to mean the act of storing files on a computer somewhere. That's it. Is that how the courts will understand it? Or does their definition of hosting include acts that I would call serving, caching, indexing, linking, formatting, and rendering? If publishers are liable for even some of those acts, then this takes us to a very different place from where we were in 1995. Interesting times ahead for the industry.
give every country bordering a landeempire 3 nukes.
Going by the video, I see the diagrams have lines, but unfortunately no labels. Do lines always mean "dependency"? E.g. file dependency, dependency on a database or service, etc.
I loved Zellij, it was the first time a terminal multiplexer felt like it added significant value without significant work from me.

The only problem is that projects dealing with network stuff require aging just the way wines do. Networks are unreliable and can get into a thousand different states that are a combination of local connection issues, remote issues, input problems, etc etc. I found (when I tried it a year or two ago) that Zellij could handle a decent amount of such weird states, but not all of them. There was noticeably more "stuck" states it could get into.

It was a pleasure to use in every other way, and maybe this has become much less of a problem in the intervening time. I'm pretty sure that Zellij is going to be my one true term mux for the future, just not sure that future has started yet.
The FSF accepts a lot more licenses than just the GPL family of licenses as free software. As for the OSI, I don't think they have ever hidden who they are, how the organization is ran, etc. https://opensource.org/about

I just noticed they are currently discussing what "Open Source AI" should mean. You can join in and add your thoughts tot he discussion.
In VS Code when the linter finds something it underlines it, much like Word. Clicking the line brings up the issue and has a Quick Fix option, which then goes to Copilot. In practice, I never use the Quick Fix option.
It may be "useful" for me to inspect your private bank accounts (maybe you are a good investor and I can learn something!) but it's no justification for me to violate your privacy. It may be very "useful" for me to know the business plans of my competitor, but gaining access to them is usually qualified as criminal. "Useful" is not something that authomatically gives access to private information just because somebody wants to.

> knowing who owns a company and its financial state can be good signals

That makes no sense. Public companies are owned by hundreds of individuals and entities, and the company has zero control over it, making any conclusions based on that is nonsense. Moreover, even private company can't really block an investor from selling their share to another investor, why would anyone take it as a "signal" to anything, except the signal that the buying investor considers it to be a good deal? This looks very much like an instance of motivated reasoning.
It's amazing what stupid behavior you can get people to act out by putting some cutesy stickers and background wallpaper on things.
But perhaps that's the interesting point — 1/x is *cannot be* an exact bijection for floating point numbers, because there's not a one-to-one mapping between the two sets.
Thank you. I had no idea what TFA was trying to get across
IMHO, the state should be the one to approve/deny claims (except if they're duplicate claims within a time-period specific to the code). Leaving it to the insurance company to process the claim is akin to letting robbers play cops.
The question though is how do you do a useful search without having some kind of algorithmic answer to what you think the user will like. Explicit user or exact match strings are simple but if I search "cats" looking for cat videos how does that list get presented without being a curated list made by the company?
I use back-tick `. For nested, it becomes `` or ````. For twice nested and I'm writing a shell script with ` instead of $( .. ) It's ```````` (I'm an emacs user, I need all the control characters :)
I dunno... I had a microwave that came on when you opened the door... turns out it would boil water with the door closed without entering time too... Thanks GM, love the "safe" microwave that nobody can service. Replaced with the dumbest microwave option I could find.
Aurora on AWS definitely has extreme RAM

It's not cheap at roughly $200/hr but already if you have this type of traffic then you are generating revenues (hopefully) at much greater amounts.
Teaching LLMs to understand sarcasm by "Reading with Intent"
PS. I'll take the negvotes as confirmation I guess ...
Controlling and investing are completely different things. Control is exercised by the board and the management, and these are pretty much universally public for a large company. However, investment does not have to come with a seat on the board - a large one can, and then, again, it would be public, but it doesn't have to. You seem to confuse entirely different things.
Things always seem more compressed in time looking back. At the time it felt quite slow. I can tell you that around 1990 when I was programming my Atari ST the summers lasted forever! I used that machine for about 5 years. Then there was Windows 95, another 5 years, etc.
That article makes an unrealted point.

> They provide information on that site about when the Sun rises and sets and so on... but they also provide it under a disclaimer saying that this information is not suitable for use in court. If you need to know when the Sun rose or set for use in a court case, then you need an expert witness - because you don't actually just need the bits that say when the Sun rose. You need those bits to be Coloured with the Colour that allows them to be admissible in court, and the USNO doesn't provide that....It's a question of where the numbers came from.

That's just saying that your bits have to be authenticated/verified to be accepted as accurate.

Which makes sense and is entirely different than "your bits are illegal and your other identical bits are legal."
Most don't consider making an analogy "bad faith".

https://en.wikipedia.org/wiki/Analogy

Even ChatGPT understands that money changes hands in both cases after training/learning:

https://chatgpt.com/share/525aabbb-1fcc-4b1d-a88e-34206c8f5c...
The cartoon dogs give me a clear signal I am not going to bother reading this page.
In cases where the consequences for misunderstanding, and one's reactions are much less extreme, but people still let themselves be led into a problem by misunderstanding, i'd partly blame the technology because it should accommodate the possibility of people paying attention poorly in situations with minor consequences.

In this case however, where they decided on murder and the worst kinds of interpretation because of what they'd read, the people are to blame far more than any text problem. They're murderous idiots who couldn't pause to think that maybe trying to kill an ostensible family member shouldn't be done before very, very carefully reading what they had said and later first hearing them out if they want to say something more in person.

For that kind of violent stupidity, the stupid itself would have to be fixed if at all possible. No reasonable amount of tech optimization will help because They'll always find something to snag them into deep trouble.
> When an enrollee is entitled to state-administered Medicaid, it should not require luck, perseverance, and zealous lawyering for him or her to receive that healthcare coverage

That's such a powerful statement. If they are entitled, they are entitled. Simple as that. And anything that systematically prevents that is absolutely wrong.

What's more important is the approval process. Deloitte might have build this, but the State approved it's use. People signed off on this.

Further, this isn't an easy fix. Loosing coverage like this is not something you can just fix. This has affected people's entire life going forward, and not in a good way.

Yes, mistakes happen, but this isn't a simple one-of mistake. This is something rotten, and while Deloitte wrote it, they wrote it for a client who asked for it and put it out there. And that's who is ultimately responsible.
Good catch. Of course, different people wear different shades of hat, and I guess the author might have good rationale for going quite as far as they did, I don't know.

Kudos to the author for alerting DHS. Methodology questions aside, it sounds like the author did a service, by alerting of a technical vulnerability that would be plausible for a bad actor to seek out and successfully discover.

But regardless, I hope any new/aspiring security researchers don't read this writeup, and assume that they could do something analogous in an investigation, without possibly getting into trouble they'd sorely regret. Some of the lines are fuzzy and complicated.

BTW, if it turns out that the author made a legality/responsibility mistake in any of the details of how they investigated, then maybe the best outcome would be to coordinate publishing a genuine mea culpa and post mortem on that. It could explain what the mistake was, why it was a mistake, and what in hindsight they would've done differently. Help others know where the righteous path is, amidst all the fuzziness, and don't make contacting the proper authorities look like a mistake.
Video of the extended Steve Jobs quote here:

https://www.youtube.com/watch?v=P4VBqTViEx4

Very insightful.
Latency kills...and Ethernet uses exponential backoff.
I agree that having multiple versions of the same crate being compiled in is bad, but if he thinks the third-party dependency system being extensive is “the issue”, then he’s going to be very upset at the Go ecosystem.

Which is actually the gold standard (imho) for making web backends. (low latency, low throughput ones tbf)
Adding product location would be great! As a resident of the European Union I'm unlikely to order one of these mini PCs from the USA due to import taxes and additional shipping costs.
I also remember around 1975 getting all excited about solar and getting told that costs were dropping so fast that in five years solar would be cheaper than power produced from coal or natural gas.

There was a brief period in the US from the late 1960s through the early 1970s where it looked like new nuclear power plants were going to supply electricity cheaper than coal. A few commercial reactors had just been finished on a reasonable schedule and budget. Government cost projections showed that just-completed reactors were competitive with coal and that by the mid 1980s, with rising coal production costs, nuclear would have a clear edge.

Most people who care about the history of nuclear power know about the ballooning costs and schedule overruns for nuclear reactors after Three Mile Island, so that explains part of why this projection didn't pan out.

The other part is that real coal prices fell in the 1980s instead of rising. Increased surface mining of coal reversed the upward price trend for coal as a fuel. At the same time, the thermal efficiency of coal fired power plants kept improving beyond what was considered practical circa 1968. So new coal fired power plants were spending less per gigajoule of fuel and turning more of the fuel into electricity. New coal plants in America became so cost-effective in the 1980s that nuclear would have been hard pressed to compete even without the actual delays and cost overruns that nuclear foundered on. France dodged this environmentally dreadful rise of coal because they didn't have abundant domestic coal like the US, so they were committed to developing non-fossil electricity regardless of improvements in coal technology.

I wonder if those over-optimistic solar cost predictions you saw in 1975 also assumed ever-rising fuel costs. If solar companies expected coal power to keep getting more expensive, that would indirectly accelerate the adoption of solar power (lowering its costs) as well as directly easing the cost benchmark that solar power needed to meet.

Or maybe, like in many other cases, the people working on solar back then were just over-optimistic about improvements and had blind spots about the obstacles ahead.
Sad to hear that this is broken in blot.im
I am puzzled why there are no arrests in this sort of case. Surely, convincing kids to kill themselves is a form of homicide?
NOSEY GIT sounds very British :) I had to look it up -- Core Design. I knew some of the guys there at the time, but none of those in credits for ThunderStrike. Does the original game have the same XOR string?

I remember spending more time on Ecco the Dolphin cracking the password system than playing the game because it was so damned hard. I bought the game on day of release using every penny I had saved, then ruined it by cracking the code on the 2nd day and teleporting straight to the end.
The uniqueness of human vulnerability to brain aging in great ape evolution
Apart from some ridiculous backgrounds featured here, the web used to be very readable.
Thanks, I think! :)

I am a glass half full kind of guy so perhaps the text is a little more positive than neutral.
I think it is broader than that. It’s government control over the Internet. Sure we’re talking about forced moderation (that is, censorship) and liability issues right now. But it ultimately normalizes a type of intervention and method of control that can extend much further. Just like we’ve seen the Patriot Act normalize many violations of civil liberties, this will go much further. I hope not, but I can’t help but be cynical when I see the degree to which censorship by tech oligarchs has been accepted by society over the last 8 years.
not sure what you are building but i hope that was for a real time multiplayer game otherwise doesn't make sense to have bi-directional communication when you only need reads

making read replicas function also as writes is needed for such cases but already when you have more than one place to write you run into edge cases and complexities in debugging
As my good fortune would have it, I'm called to jury duty two weeks from now. I doubt I'll be sat though. Should I be, I'll keep the above in mind.
Actually, banning reduces traffic less than you might think. These days most of the attackers assume they are going to be banned. You get a lot of singleton requests from IP addresses that don't show up again, or not any time soon. And if your banning system generates logs of its own, it just increases the log noise.

As a result of this HN discussion, I disabled all SSH logging, and turned off the associated banning system. I disabled the use of PAM by sshd, and set its logging level to FATAL (because the ERROR level stupidly still logs when sshd is not able to find a shadow entry for a user ID).

I'm confident they are not getting in by guessing a password and no longer believe there is a net saving in resources by monitoring and banning.
I would go further and say that not only the software but also the execution of the software should also be open, akin on a non-financial blockchain database, with the rules, execution, and decision recorded permanently (under an anonymous ID, of course). Anyone should be able to easily replay the execution. This would allow for citizen monitoring of government actions. If not for this, at least a weekly export of all anonymized processed claims, plus the corresponding logic rules, should be made available on the web, similarly facilitating a local replay.

The problem with a scheduled export is that a corrupt state government will gladly change your records for you (in their favor) when you go to court. This is more difficult to do with a blockchain.
It remains baffling and sad that Google's first response to this was to murder their best social graph in cold blood. Between giving Reader the axe, and the real names fiasco on Google+, the company has destroyed the necessary trust to ever operate a social graph worth having.

Please don't tell me that YouTube is a social graph, by the way. Words should mean something. If YouTube were a social graph, I'd see videos from the accounts I follow.
This exists in some European countries, in Hungary for example you have an identity service (KAU) which authenticates you and operates as an SSO provider across a number of different government properties.
is there a docker image?
That's atrocious. I think a big part of it is the merging of websites (purely informational) and web applications (programs with IO). The lines have blurred over the years.
My perspective is not authoritarian, so no.

The judge doing this may be, or may not be, as authoritianism is neither necessary nor sufficient as a cause nor this result as a consequence.
Most rust nerds just like ADTs and don’t really want manual memory management.
OpenUSD: The Most Valuable File Format You've Never Heard of [video]
Resources:

Research paper: https://arxiv.org/abs/2408.11189

Blog explaining the paper: https://symbl.ai/developers/blog/reading-with-intent-equippi...

Dataset (Github): https://github.com/symblai/reading-with-intent

Dataset (Huggingface): https://huggingface.co/datasets/Symblai/reading-with-intent
Writing from Germany, we have non-penetrative fasteners for basically all roof types common here. Maybe talk to some solar experts in your area, they might have an off the shelf solution that won't void warranties.
I'll take that bet. How long of a time window? 1 year, 2 years?
For each variable:

1. It asks the LLM to write a description of what the variable does

2. It asks for a good variable name based on the description from 1.

3. It uses a custom Babel plugin to do a scope-aware rename

This way the LLM only decides the name, but the actual renaming is done with traditional and reliable tools.
Global warming...
> Apple has stated that Bing does not match Google’s search result quality, and they are unwilling to compromise on user experience by offering subpar results.

I wouldn't take this statement at face value. This is most likely a BS PR excuse for Apple to maintain their current deal with Google. I wouldn't expect anything less from any large corporation looking to protect $20 billion in annual revenue.
The oil indicator isn't a lamp, it's an old-fashioned oil can. Used for adding oil to the car without spilling it. E.g. this[1] sort of container.

[1] https://4.bp.blogspot.com/_AtRmPUXq3uY/TGIVAre5JrI/AAAAAAAAA...
I take it the argument is that the Rust standard library isn't "batteries included" enough causing dependency churn. Yes, it can be annoying but the alternative is baking something into the standard library that turns out to be poorly designed and then you still have to be "in the know" for which library to use to avoid that.

I think the idea of keeping the std library small is the best choice over the long run.
Is there any sort of assurance that this wouldn't turn into a prosecution, though? It's not obvious to me on that site. Perhaps the CISA doesn't want to deter researchers, but do they get to make the final call?

The DoJ announced in 2022 that they would not prosecute "good faith" security researchers, but it's not binding, just internal policy: https://www.scmagazine.com/analysis/doj-wont-prosecute-good-...

The policy (https://www.justice.gov/jm/jm-9-48000-computer-fraud) explicitly states at the end that it's for guidance only / does not establish rights, and it includes a provision for additional consultation on cases involving terrorism or national security–terms which have both been overloaded by the government to justify overreach in the past.

Personally, given the history of the CFAA, I wouldn't want to be in a position to test out this relaxed guidance on prosecuting good-faith researchers, but perhaps I'm unnecessarily averse to the idea of federal prison.
source and context? Would be interested to know more about this