skysight-inc/HackerNews huggingface dataset:
Counter argument against QubesOS more secure by being a type 1 hypervisor
Read this first to understand what I'm counter arguing against:
http://qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/faq/#how-does-qubes-os-compare-to-running-vms-in-a-conventional-os

QubesOS devs make a great point about how difficult it is to trust operating systems and because of that qubesos is great because it's easier to trust the xen hypervisor.

But all the Qubes still use a "conventional" OS, by default it's either Fedora or Debian. That means if Fedora or Debian OS is compromised then all Qubes will be compromised if all Qubes are using either of those OS. And most likely a user won't mix between both Fedora and Debian, more likely they will use just one of these OS for all or most of the Qubes.

How would the OS be compromised? Probably a 0 day in one of the official packages which come by default with a fresh installation of the OS. Or maybe one of the developers have been compromised such as the one who builds the .iso for installing the OS from.

So qubesos is more secure but just from this FAQ I've linked to, I think it doesn't seem like such a huge difference. I could even argue that qubesos is less secure because like I have explained, if the OS used in all or most Qubes is compromised then all or most of your Qubes are compromised so it's almost same problem as if you used that OS to host VMs on. But when you use QubesOS you also have the additional attack surface that comes from the hypervisor.

I'm still learning about QubesOS because I'm not sure if I will use QubesOS or a linux distro to host VMs on. I think if you use a similar approach as QubesOS does by using VMs for compartmentalization of different identities and trust levels alongside strict SELinux/AppArmor/Firejail/Bubblewrap and firewall configurations you can achieve close to same level security as QubesOS.

QubesOS also does some things I need to do more research on, such as making the GPU nearly useless in App Qubes. But if you use a linux distro to host a VM then you won't have problems passing through the GPU if your hardware supports IOMMU. But there is probably a good reason for QubesOS doing that and that's a reason to use QubesOS because QubesOS does a lot of things most people don't understand or know about but it increases security.

Another thing I like about QubesOS is I've read that anyone can build the OS from source code and that way there is no trust involved when installing QubesOS. And you can also do updates for QubesOS and the Qubes from source code as well. I haven't looked into how all that is done yet but if it's not too difficult or too much work for every update then that is a huge huge reason to use QubesOS because with most other OS you have to trust the .iso because you're not installing from the open source code because the dev who build the .iso could secretely add malicious modules.
Intel shutting down startup accelerator Ignite amid cuts
Software is a big part of the NVIDIA story. That is, the drivers have a compiler that converts CUDA code to whatever instructions the silicon takes. Other tools like PyTorch are built on top of CUDA so I have a "just works" experience running most AI code on NVIDIA. I think AMD could handle these workloads at the silicon level but I'd have a lot of difficult software development in front of me to make it happen.

My understanding is that it is a similar story with games. The "game ready" drivers are insanely large because they contain all sorts of patches to improve performance and reliability for AAA games.
A human or animal corpse that was accidentally mummified is still called a mummy. It's a technical term. A lot of mummies are just people who died in a peat bog, desert or ice cave.

Many mummies were also made cruelly rather than respectfully. The Maori mummified the fallen as trophies of war. The Inca would leave sacrifices to be mummified by the mountain ice.

So yes, somebody who dies in a derelict building and dries out is a mummy.
This is just for the cap. You would also need 2x of the $350 pi eeg hats and of course the pi itself.
Oh My G*od.... a list of rabbit holes to explore

Thank you, thank you, thank you

It's the perfect gift for someone like me with too much free time, and not quite coherent enough thoughts to try to code today.
> I can't stand watching videos on something I need information for <right now>. Maybe I'm just terrible at video scrubbing

Do not worry: in a very short while we'll all have AI tools, running locally, that can summarize videos in textual forms in a split second.

Prompt: "Summarize this vid in five paragraphs. List specs."

It already exists. In a short while we'll all have this at home.

P.S: prompt: "Remove every single ad and submarine content too".
The impression I've got from said people here on HN is that search engines are disgusting ad powered horrors and therefore they're not needed either.

How anyone finds anything I don't know but I guess we'll find out!
For now they havent had anyone build a successful livestreaming site but they have had some punters try so theyre happy to take the money.
Arbitrary server-chosen microtransactions make things worse in many ways even if the payment process is simple, fast, and free.
You don't get past the ads, but over-the-air TV still exists and is technologically impossible to track you individually.

Also, if you're connecting your TV to the internet, that's a "you" problem.
Looks like a copy of Gnome Connections with a worse name.
Oh, definitely. That's why its a convenient thing to use surplus-at-the-moment cops for.
It's very sad but not unexpected. Hard to live off advertising when your demographics are prime adblock users. I did disable adblock on AnandTech when I remembered to, and gritted my teeth at how awful it was to have ads covering every square millimeter of free space.
Great Idea, I am sure that will make it much easier to Bing it when Issues arise. Right? Right?
That's fair. Video games are another thing which lend themselves pretty well to video content.
That’s an interesting idea, because it matches the physics of the situation pretty well; on-demand capacity costs the grid something just to have it (batteries, or whatever), so it would be good to make that price visible to users and let them decide if they need it.

It might also push people more toward smart-grid tech, which is a desirable outcome. You might pick a dishwasher that can actually help shave the peak, if it saves you money.
https://news.ycombinator.com/item?id=41401102
Uber drives deeper into South Korea to take on Kakao
There was time I read Tom's Hardware and thought that was the top of tech journalism and reviews,until the (i don't remember when) a revamp to the site that focused more on news. Then I found anandtech, reading all in depth article from the marketing material down to architecture level. It was very eye opening, the quality and depth is even on higher level.
I was sad when Ian left, but now it's the ultimate sadness.
So based I think I’m going to hurl.
Even though I'm well aware of HN's guideline against shallow dismissals, I still can't help but say it: Worst. Naming choice. Ever. Searching for documentation or assistance relating to "Windows App" will be effectively impossible.
Attosecond Electron Microscopy and Diffraction
> You can now break even on electricity costs for a residential pitched-roof installation in under 5 years. This is without any subsidies, without selling anything back to the grid.

This is arguably a false economy.

~75% of costs for the power grid are not in volume electricity generation, but in maintenance. They haven't priced it that way in most places to encourage power-saving and reduce the need for new infrastructure construction, but they'll be forced to if every roof sprouts solar cells.

If volume electricity generation is the concern, doing it in a field is dramatically cheaper than doing it on a roof.
I tend to regard that kind of technology in something I buy as dead weight. My TV has an internet connection but I don't connect it. I plug my phone into my car. The more things are separate the easier it is to adapt.
> Regarding analytics, I believe browsers should take user's side and do not cooperate with marketing companies; even better, they should implement measures to make user tracking and fingerprinting more difficult.

Kinda hard to enact when the leading browser is developed by an ad company. Worse, the same company is contributing to the firefox foundation and drives web "standards." Its all collusion and the simple fact that browsers are more complex than the OS they run on is deliberate in ensuring no scrappy team can disrupt them.

My curmudgeonly solution is to avoid as much of the web as possible and focus on human scale computing.
> partly due to inability for the U.K. to run large projects

And what do you have to say about the Elizabeth Line? At one point, it was Europe's largest infrastructure project. I would say it has been a huge success.
I don't know, Jay Leno's Doble looks pretty clean to me: https://youtu.be/rUg_ukBwsyo
In one of the Chinese-language posts, the author says the police found calcium in the water at 9x the max drinking water concentrations (960 mg/l), and posts water test results and receipts for calcium. According to the author, they were drinking 6 l of water per day to try to fix their hypercalcemia, so they were consuming 5760 mg of calcium per day. The recommended dose of calcium is 1000 to 1200 mg per day and the tolerable upper intake is 2500 mg per day, so the author was consuming more than double the maximum tolerable upper intake. When calcium is taken in excess it causes hypercalcimia.

Also, calcium has a metallic taste, which is what the author was complaining of. So it all checks out, if one assumes the wife lied about the potassium and it was actually calcium.

(Also, the video allows us to pretty much rule out that the author is poisoning themself.)
Ah. I should have guessed the “homeless people categorically cannot do the things I can do and never will” axiom was at the root of this argument. I chose not to be so defeatist nor elitist.
Usually it is already very obscure, being presented with a video link in an debate at all. No thank you very much.

Where I like a video, is for example of a teardown of a device. HowTo videos of practical skills. Watching a professional use his tools.

But even then, I often prefer text with good pictures.
> It's right on the train line

If memory serves, this, and the proximity to London, Oxford and Cambridge, are why it was chosen as the site for the code breaking programme.
The Tyranny of Middle Management
Realistically speaking, nobody cares about mobile security.

For IoT, well, who cares?

And it's been well-known that GSM/GPRS encryption has been useless for decades.

People just want a cheap pipe. If they care about security they can do it at the application level by, say, encrypting their stream.
Yeah dude, take my money. I can't believe what I'm seeing. You've actually given me a reason to use a second monitor again.
This restore my faith in positive human creativity. It makes me wonder what I can do to encourage the constructive collaboration among the younger generation. I agree that todays doom scrolling has destroyed so much of todays potential.
> Your link specifically says Amazon didn’t steal the code, some German company did.

Yeah it's not that Amazon stole the code, it's that they were distributing stolen code. It's not as bad but it's still problematic unless Amazon immediately pulled said code when they were notified.

> My peeve is with the companies like elastic that claim they are for open source but they try to prevent the open source from being used as such. It’s a scam to attract developers who care about open source.

I think this was less about preventing open source from being used and more about picking the wrong license for their project. The way I see it they took the long way around because they were afraid of the AGPL.

They dual licensed under the SSPL (which is the AGPL with one change that makes it problematic) and the Elastic License (which they originally also provided code under a previous version of).

Then they are now finally getting around to moving from the SSPL to the AGPL (while technically still offering the SSPL).

Had they gone straight to the AGPL none of this would have been even worth discussing but a lot of people are afraid of that license in the same way people used to be scared of the GPL.

> If I made code I wanted to be open source, I’d understand that means everyone can use it, like a public road or a public park. That includes big corps.

Sure however if you chose an open source license, you probably don't want companies selling access to your software with a few extra closed source bits bolted on without contributing anything back. It's not legally wrong but it's a dick move and against the spirit of FOSS. So even then Amazon hadn't broke any laws but it'd make sense for a FOSS oriented company to pivot to a license they think would force upstream contribution. Elastic just fucked up and chose a bad license (SSPL) because they feared the AGPL. This is just them getting over that fear and picking the license they should have picked from day 1.

> At least Amazon actually supports the Apache licensed OpenSearch product!

They do now. When Elastic was Apache licensed they did not. That was the problem. It was only when they re-licensed Elastic that Amazon open sourced their fork. Had they not, OpenSearch would still be the closed source AWS ElasticSearch.
Yup, and there we can see the password is just splatted in with no salt. 99%+ the password is an injection attack too, but one only needs one set of the keys to the kingdom to make the point, so the article never discusses getting in via password instead and the author may well never have checked, because it couldn't make things any worse.
I know how blockchain works. For the purposes of this discussion it's an append-only distributed log.

However, blockchain proponents en masse have no idea how blockchain works or how real world works. That's why they always assign these magical properties to it: that all information added to blockchain is true and correct. That it's trivially easy for anyone to "replay" any number of any complex events containing any arbitrarily complex data to do something or reach some conclusion.

When challenged on this assumptions the answer is, inevitably, "you don't know how blockchains work" (everyone does) and "solutions to these challenges exist" (they don't).

Literally nothing in blockchain can prevent entry of bad/incorrect/falsified data. Literally nothing in blockchains makes it easy to navigate complex medical decisions without the help of experts (and in the US, lawyers) to untangle and understand the data and decisions.
Coating clothes with this simple material could cool your body up to 8 degrees
The average user likely does not know, that even the option exists.
It's not even that realistic, there's no way they'd be able to fit the cameras in that thin space.
At any given efficiency, more energy means more productivity (in the same way: at any given amount of energy production, more efficiency means more productivity). Yes, we should be increasing efficiency where reasonable, but we should also be increasing energy production.

There is a reason that the Kardashev scale is about energy utilization.
I’ve lived alone, and I’ve lived with the right people, and I’ve lived with the wrong people. Living with the right people was good. Living alone was perfectly fine. Living with the wrong people was hellish.
Sounds like a straightforward 1st Amendment case.

Might there be any lawyers with opinions (& disclaimers, obviously) in the house?
That sounds like what prison life must be like. Get a job cooking for the staff and live the high life in club fed!
Remediating untracked security vulnerabilities in nixpkgs [video]
What languages? English, Spanish, Mandarin, and Cantonese?
From the same branding team that brought you Xbox One and ASP.NET, it's Windows App!
A good number of the roofs already are. While more expensive than working in a field, it's way cheaper/safer than working on a tiny residential roof.

Parking lots are tougher, but I saw the first one this year.
No, I always indicate. I am saying Tesla’s various safety systems frequently have false positives. Ask people who tried to get into the FSD beta program how reliable these systems are.
If it wasn’t for the secretive water tampering on video then I’d agree
Personally I think it would be useful to have "as well as" Youtube and Twitch streams

Use the bigger established sites to find an audience, direct them to your personal stream if they want to support you without Twitch or YouTube taking a cut
> the numbers unequivocally show that people are totally full of shit

What numbers?

Where can I pay to replace ads with something that isn't orders of magnitude more expensive? Basically any single-site subscription I've seen fails that test. If you're citing that kind of subscription, then that evidence doesn't work here.
That is a sweet concept. For the first time ever I would probably buy a new iPhone if that was real.
This is like a person who took a few python courses pretending to be a software engineer with a full time job, the lie becomes very clear after a few sentences.
The picture of the guy holding a “smog free locomotion” sign and a cigarette is priceless.
Real Shame. Does make me think what kind of business model is needed for this type of publication to survive and thrive? There must be a way ... I would really hope. Would be very curious at to the conversations that happened at Future PLC prior to shutting this asset down. Couldn't find much on companies fillings.
Probably a typo. Seems like a cool tool especially with all the secret leaks happening i think.
My use case was a program involving many calls to an external program that generated an XYZ file format to read in (computational chemistry). It's likely I was doing something wrong or inefficient, but I remember the whole process was rate-limited by this step in a way that Python wasn't.
Is there a particular reason why Microsoft is so terrible at naming things? What’s wrong with “Remote Desktop”?
That's justice served. Big algorithm deserves Medicaid benefits too
When predicting changes in attitudes, it's always safer to assume changes will happen to behaviors that started recently than behaviors that started long ago. In the case of mourning, we've done it since before we could write, and many animals do it too, so it is unlikely we'd stop.
Does anyone know the model of internal communications which allows such "interesting" decisions to arise in large corporations over time?
Land yachts and nuclear trains are cleaner and more powerful, respectively, than cars.
I don’t need this energy
This information is outdated (2020), untrue, and confusing.

Both class-based and functional methods achieve the same ends, as they must because all programs must have state and side effects. This article starts out saying that we can "simulate" state and side effects with hooks in React, then ends up saying that functional React doesn't have hooks or state! We can't have it both ways.

It is true that functional-style React is "more functional style" than class-based React, but that doesn't alleviate the responsibility of managing class and state. It only puts them in more places and makes us, the programmers, keep track of it across all those places, rather than encapsulating them inside a class.

I adore functional programming and have advocated[0] for it extensively. But I've also used Lit, a class-based reactive web component starter kit, and I must say that the class encapsulation and access to this in Lit makes those components easier to reason about, update, and extend[1].

React's "functional" version of sharing a complex object across components (context) requires an actual JSX wrapper to be written in angle brackets, so we are just delegating inheritance and wrapping to different syntax, not removing it.

Besides, class-based is deprecated in React these days.

[0] https://medium.com/gitconnected/functional-programming-in-ty...
[1] https://medium.com/gitconnected/getting-started-with-web-com...
The wires are pretty complicated - trying to pull out some very low signal voltages and high noise levels, reading through a high-impedance skin layer with exotic silver chloride electrodes. It's not like wiring a dishwasher.

Plus, there's a very big obstacle with the required low volume, high complexity assembly. This isn't a big enough market to be worth automating, it involves a seamstress and a technician with minutes of hands-on time assembling it.

I'm an industrial controls engineer, we just wrote a quote and did some concepting to build a piece of equipment that automates wiring harness construction for a major office furniture - think cubicle dividers with embedded lights and outlets. It involves multicolored single-stranded wiring harnesses pulled/pushed through flexible metal conduit, with wires picked up by a robot, stripped, terminated with a crimped-on insulated spade terminal, and tested. Project cost to lights-out build something that would take an electrician with hand tools 5 minutes to accomplish (and would require several electricians, working without fault, for 2 shifts a day, without quitting due to boredom and RSI) is on the order of $350k.

It is a bunch of wires on a skullcap, and that's what it costs to make it.

FWIW, the OpenBCI equivalent:

https://shop.openbci.com/products/openbci-eeg-electrocap

is $500.
oh, don't worry, there are tons of incentive structures like this already out there. It's sophisticated energy management, though, so it's only in the Commercial & Industrial world (for now)

In C&I land, you have things like demand charges (billing by your max kW, not just kWh), demand-eligibility tiers (your electric arc-furnace plant is going to have very different charges than your warehouse), and even fun things like many flavors of demand ratchets (you have a fixed charge based on your maximum kW in last 3, 6, 12 months, or your maximum kW during the most grid-strained periods last year, or a million other variations).

C&I billing gets very creative.

Some utilities are even today experimenting with demand charges in the Resi space (don't run your dryer while charging your EV!)
B3B
SEC goes after NFTs as securities, serves Wells Notice to OpenSea
OpenSea was a star YC-incubated company several years ago

I personally saw Fred Wilson of USV fuming in NYC btw when it came to pre-Genzler SEC going after Kik Messenger and others, that he invested in. It is what spooked BlockStack / CityCoins into being so decentralized they never took any action.

But NFTs have until now not been considered securities, since they supposedly are “finished works” and “dependent on efforts of others”.

The way the case law developed, in theory are there any limits to the SEC’s purview? It all reminds me a bit of this Bloomberg article: “everything everywhere is securities fraud”:

https://www.bloomberg.com/opinion/articles/2019-06-26/everyt...
Will HP still demand $4B from Mike Lynch's estate?
Videos can be great where it's the kind of topic where you'd watch the whole video.

Videos are terrible when you need a small amount of information that's embedded in a much longer video.

The second scenario is much more common for me than the first.
Yeah I was pretty enthusiastic about Julia for a year or two, even using it professionally. But honestly, JAX gives you (almost) everything Julia promises and its automatic differentiation is incredibly robust. As Python itself becomes a pretty reasonable language (the static typing improvements in 3.12, the promise of a JIT compiler) and JAX develops (it now has support for dynamic shape and AOT compilation) I can’t see why I’d ever go back.

The Julia repl is incredibly nice though, I do miss that.
This blogpost reminds me of the type of content that was more frequent on HN back years ago.