skysight-inc/HackerNews huggingface dataset:
> the latter constantly pauses functionality when I'm driving for "safety pauses". So I literally can't change the song on.

If you're constantly hitting those "safety pauses" you're spending far too much time paying attention to your stereo than the road.
It depends, I think, on the complexity of the VPN.

SSH allows to do so many things, has so many config options. To the opposite, Wireguard is very simple, allows basically one thing (authenticate by a key, then pass packets), and is much harder to misconfigure.

(OpenVPN, on the other hand, does not have this advantage.)
considering how thin the often made of paper walls are in japan you really have to give props to their diet that nobody smells anything sooner.
Security should be free (or rather, things should not be released if they aren’t reasonably secure) for a couple reasons.

We’re all on the same internet, people getting taken over and used as ddos nodes, leveraged for further attacks, or leaking PII is a pain for everybody.

Skimping on security is always easier, and security is hard to detect for the end user. We shouldn’t have a race to the bottom on this stuff.

For volunteer projects, like a lot of open source, we can’t really make demands. But I think it is still unethical to release an open source project that invites itself to used in an insecure manner. It is like an “attractive nuisance” (typical example: In some jurisdictions, you might be responsible for an un-fenced pool on your property if a kid falls in it, even if getting to it required trespassing, because we don’t want a society where uninformed people die avoidably). Without a customer service relationship, open source developers don’t have an obligation to make something useful, but nobody should put harmful things out into the world.
The article gives the example of Deepak Chopra, then gives advice, to tell science from pseudoscience, which requires having an actual conversation with the person. For someone like Deepak Chopra, this isn’t actionable, as the information is being pushed out one way, it’s not a dialog (typically).

In person, this can be useful, but I’ve found it’s often met with anger when people are asked clarifying questions they don’t have the answers for. Anger is a common tool employed to hide ignorance.

The concept doesn’t seem too dissimilar from the Socratic method.
Related: I also went deep diving into witness encryption only to find some glaring issues with the most cited paper. You wouldn't notice it at first glance, as it appears sound. It isn't until you actually get into implementation that you find that it doesn't actually do anything at all.

Other papers on this topic also, apparently, haven't actually implemented it either. The actual real implementations barely resemble the papers.
Unifying dependency versions across NPM workspaces
There are plenty of WW2/Cold-war era laws on the book regarding cryptography in a lot of countries though.

Even the US.

https://en.m.wikipedia.org/wiki/Export_of_cryptography_from_...
Does the functional equality being impossible to determine thing work for math problems? I know it works for computable functions, but math functions are pure and total so it seems easier.
Bravo, thanks! Since I'll be targeting modern HLSL, your backend is the one I'll be using to begin with. Hopefully DXC produces decent SPIR-V at the end.
That gives you more rights than it gives me. I was always free to release my patch under the AGPL, why would I need you to do it? (well, if you do it I wouldn't have to maintain a fork, which is something I will admit).

It would allow you to maintain a proprietary product with proprietary features that you don't release under the AGPL and use my code within that product.

I like reciprical licenses, if I get code from you under the MIT license, I will give you code back under the MIT license (which you can use however you want to, under that license, just like I can.) On the other hand if you give me your code under the AGPLv3, I give you back code under the AGPLv3 (and you can take it or leave it, so long as if you take it, it is under the terms of the AGPLv3 license).

At least, that is my idealist stance. But in reality, practicality sometimes takes precedence, so I might make a minor bugfix or something. But then I have all the trouble of reading the CLA, making sure I understand it, and agreeing to it, so practicality may just as likely lead me to just file an issue instead and patch my own copy.
Recently tried OpenSearch, it has good momentum but tbf the tooling / documentation and support are not that great.

Contrary to what other people are saying in this thread, I would not say it has better branding than ElasticSearch and that ES has lost its battle. Outside AWS OpenSearch is still not a big contender
Kiiinda. Two-element swaps are a stretch already for merge sort, especially the O(log N)-space linked list version, let alone search trees and so on. At some point you also need to make sure you can’t sneak arbitrary computation into the (necessarily unlimited-magnitude) array index.
I just remember being in a meeting about colo and on prom where people argued about why the colo was better... I provisioned a working instance of our web site (a big job board) with load balancer and fresh databases via the API... and the arguments stopped when I showed the team. "While you were arguing, I deployed our entire infrastructure into AWS. Try it out at http://somewierdawsurl.something"
This was inevitable.
Dutch Foundation Requests Human Rights Evaluation of AMLD5
This seems to be the same article, but not paywalled:

https://www.msn.com/en-us/health/other/the-far-reaching-ripp...
Just censored? Nice free speech.
Thanks to an in-depth Anandtech review way back in 2011, I purchased a super cheap Dell Vostro laptop with a staggering 8 hours of battery life, pretty much unheard of for Windows laptops at the time. Plenty of OEMs would straight up lie, but AT's battery tests provided the proof consumers needed.

It's sad to see the state of 'tech journalism' in the Youtube age when it comes to hardware products. I feel like I'm watching a 20-minute lifestyle commercial rather than an actual nuts-and-bolts review. I guess that's what gets views and affiliate link revenue now.
> Yeah, that's not a good way to do it.

Works for me.

I've been working this way for a lloooonnnnggg time.

Of course, it requires strict Discipline, and does add complexity. If you stray outside the lines, you can make a fearful mess.

I don't stray outside the lines, and it works great.
The author states they took great pains to adhere to it (i.e. alarms, timing his meals, etc.).
Yea and that 0.3c/kWh land cost is in the UK which is a terrible fit for nuclear.
Listening to a whisper in the grand canyon is possible with modern ML ;)
In the US they're called private criminal complaints. For more serious crimes, they usually require the prosecutor's office to approve then handle them. They almost always decline though.
Anti Money Laundering laws are an infringement on almost every human and fundamental right.

> "The right to privacy, the right to a fair trial, the innocence presumption, the right to property, the right to not be discriminated/profiled and the right to access to health care, universal services (via a the right to a bank account) are violated due to the excessive regulations and policy initiatives initiated and driven by the European Commission".
Is that why they call it a nuclear family? :)
I should've clarified that I'm interested in those, as well. What ones do you subscribe to?
In that case it isn’t really security at all, right? Integrating with some SSO system is fine to charge a premium for, as long as the default form of authentication is reasonably secure.
Divorce laws indeed had some good outcomes like you wrote, but it also allowed people to make carefree choices when choosing a mate - something that should be a well thought out, very long-term deal - and as we all know, we're now in the realm of perverse incentives on the subject.

And don't get me started on the vicious interactions between the "soft deprecation" of fault divorce, the abolition of adultery laws and economic aids for single parents. Clearly not the best mixture of choices.
It was probably also crazy to call the search product “elasticsearch” 4 years after Amazon had started using “elastic X” branding for their already-popular cloud services.
Florida defines child porn as anyone under the age of 18 so all they need to do is say the AI image depicts a 17 year old. Vaguely written laws are very expensive to fight
Wait what is happening?

I'd like to bring AnandTech content to the public domain. Put it on the world wide scroll.

Let me know if I can help breck7@gmail.com
Suddenly Runway deleted all content on HuggingFace and GitHub
Good observation! This person is obviously meeting a need, and probably doing pretty well for themselves, SQL injection and all.

> The most common thing I hear people say with respect to their jobs is: “I’m just one person, I can’t actually do anything to make things better/worse…”

Yup. This is something on the order of a large-scale blackpill meme lately. Comment sections are usually rife with low-agency thinking. Which is quite something in tech, given that devs are the means of production for tech. True, tech as of late seems to be veering into more capital-heavy ventures (AI), probably to head off existential risk from the fact that a few skilled individuals can still really make a dent.

It all comes down to belief and will.
When things go well nobody notices. I’ve certainly headed off and found/fixed a lot of bad decisions in my career, some of my own included. There was a lot of impact there, and it’s good when it’s invisible!
It exists, but IMO it's not a good choice.

First of all, it doesn't support RenderGeometry or RenderGeometryRaw, which are necessary for high-performance 2D rendering (absent the new GPU API). I doubt it will support any of the GPU API at this rate, as the geometry rendering is a much simpler API. Maybe both will land all at once, though. To wit, the relevant issue hasn't seen much activity: https://github.com/Rust-SDL2/rust-sdl2/issues/1180

Secondly, the abstractions chosen by rust-sdl2 are quite different from those of SDL2 itself. There seems to have been an aggressive attempt by the Rust library authors to make something more Rust-friendly, which maybe has made it more approachable for people who don't know SDL2 already, but it has IMO made it less approachable for people who do know SDL2. The crate gets plenty of downloads, so maybe it's just me.
Florida law defines anything under the age of 18 as "child porn" - so if your catgirl doesn't look at least 30 you are probably heading to prison or an expensive court battle or both
Yes, and that is presumably a crime in itself, even though it isn't the 'big' crime of poisoning somebody.

My guess is that the wife poisoned him with vitamin D and then started dosing with KCl for some reason, then the KCl dosing was discovered, and we still can't be sure she did the vitamin D dosing. Of course, she probably did. It's very plausible, since the behaviour is so similar to the poisoning behaviour, but we don't have actual evidence of her poisoning him with vitamin D. We have evidence of some lesser, similar crime.
tio – a serial device I/O tool
This is increasingly looking like a play to prevent competition.

Tesla offered a bunch of companies the ability to use their charging network which is arguably their crown jewel, especially as they struggle to put out new models of actually usable cars, which killed momentum for an alternative and open network of superchargers, and now that the alternative has basically been killed, they slow walk the actual availability of the network.
That's useful information, huge thank you!
I'd be much more inclined to buy an electric vehicle if it was running open software. That way you could host your own servers if the company goes bankrupt. The same is true for tractors, etc...
> economies can’t pivot fast enough to handling such a high death rate per active worker

Why? People have died at relatively faster rates in populations throughout history.
That wish didn't involve a world where search engines were intentionally tweaking their algos to serve up low-effort blogspam with zero individuality, burying actual hobbyist websites.
I was looking for a concrete example and not a reiteration of what was originally said.
Are you actually saying: "it is more dangerous out there than it used to be, which makes people stay inside, which makes crime rates lower than they used to be"? If that's true, how would the world look different if we were all mostly safer but there was just a general strain of fear and paranoia running through society (ie the scenario that the article argues for).
Beware of black and white thinking here. There's no "winning," just small wins building momentum towards whatever change you want to effect. Luck is always a factor (and don't believe anyone who says otherwise), but don't discount your ability to work smarter and harder.
> we've passed the low point of ad-fuelled, sensational, information-light, polarised, vacuous content

I'm a bit more pessimistic I guess. Netflix at one point felt like the end of piracy, because it was becoming the portal to all great video content. Then everyone wanted a slice of the pie and started their own platform. Now, Netflix is starting to fill up with 'sensational, information-light, polarised, vacuous content' and they really seem to want to become ad-fuelled.

I also dislike that I have to choose between giving up all my privacy to a ton of ad providers or needing 100 different subscriptions to get some good content.

I kinda hope that Mozilla (or someone else) finds a way to become the Spotify/Netflix of the web. A place where I can pay a single fee that then gets distributed between the platforms and sites I visit. But I kinda know that that will never happen, since it gives too much power to that one platform.

For a while I thought that blockchain/crypto might be a good way to fix this. But nobody seems to be building blockchain stuff to do the right thing, they only do it to rip people off.
> I estimate that I can read an article about 10x faster than an equivalent video

Especially due to all the filler b/s that every YT video has these days, be it over sharing their back story, Like and Subscribe! (And ding that bell!), sponsored ad reads, here’s my ten other videos you need to watch, etc etc.
No More secret leaks with this tool
More than functionality within a one tool,

that compete with the existing softwares.

it provide a lot of feature within a one product that needs at least two or more than one product to have it
I made a political video content creator for CapCut
This GPT helps you make political video content using CapCut's teleprompter feature.

It will research the most recent news on any subject, craft a video script, suggest compelling video titles, write an Instagram caption and an X post, and recommend relevant hashtags for sharing the video.

It will also provide a unique posting strategy and suggest when and how to share the video.
> Firewall ... And then, they think : hey, we are doing L3/L4, this is the issue ! We fail because we are not L7.

Outside of corporate firewalls, these fractals reappear at the scale of nation-state firewalls.

What do you think of "zero-trust" and "software-defined perimeter" approaches where every network connection is linked to identity and risk assessment?
A very sad, but not unexpected, end to another important source of quality journalism. Outcompeted, no doubt, by the noise & churn of the attention economy.

I hope they open source their benchmarking procedures. It’s valuable to see the results of comparable testing across multiple generations of hardware.
> communist

You keep repeating that word. I don't think it means what you think it means.
Coffee Shop Doesn't Use Two-Phase Commit [pdf]
I am not super familiar with AnandTech, but I question the idea that "tech journalism" is dead or dying. Marques Brownlee has almost 20 million subscribers on YouTube. Consumer Reports has 6 million members. Etc.

The difference, I think, is that media is shifting to video as the default, for better or worse. Looking at their YouTube channel, AnandTech only has about 20,000 subscribers, which looks like they never quite figured out how to transfer their content into video format.
SpO2 monitoring is actually quite reliable.
This is made to sound much more malicious than it is. Sometimes this techniques are used just because you don't want your product to have opened ports which could be potential entry points for uninvited guests. As far as the client knows about the connection and what it entails, it should be okay.

The product of my employer is remote monitoring and management so the nature of the product is to allow cloud visibility to a network and the reverse connection is actually improving security.
> Although via videos rather than articles, sadly.

I recall them talking about how they prefer writing articles, especially given how info-dumpy their content tends to be, but videos are what actually pays the bills.
>What people say they like and what they respond to in ways that marketers want are not always the same thing. Also, people almost invariably underestimate the impact that marketing has on them. They think they can’t be swayed by it, but they can (why else would GEICO spend $2b a year on it?). More broadly, there has been a major shift towards using B2C-style, informal marketing for B2B campaigns. Even in long, complex B2B sales cycles, attention spans are shorter and audiences are engaging with more consumer-style content like short explainer videos, and not just the traditional 5,000 word whitepapers and such.

Agree, but would argue this is not marketing to engineers, this is marketing to the business which is interested in things like size and certifications.
Once back in the day, when I used to admin a vBulletin forum, we installed an arcade system. It was a fun way to play games, and earn pointless currency ("XMB Bucks") to lord over each other like it mattered.

But a few months after that, I realized that the arcade had a hidden sub-forum feature, that was being very actively used by a bunch of people. They managed to bypass the registration screen on vBulletin, and somehow register directly for this hidden arcade feature. They'd been chattin' it up, like a colony of rats living under our floorboards.
interesting. I've heard of ElasticSearch a gazillion times and this is the first time I've heard of "OpenSearch", and I've also been using AWS since it came out basically.
Yes, the wife could be trying to set herself up to claim that she was mislead/mistaken about the substance she was "supplementing" her husband's diet with.

Creepy story no matter how you read it, though.
How old are you? Do you have a life beyond software (wife, kids, mortgage, etc.)?

Few things can actually scare a recruiter more than a middle age software engineer with a life.
I’ll take it. There are far worse ways to end up than Japan.
This made me laugh! I'd say it's a good indication to steer clear :)
Daily Golang #10
What makes these so expensive in general? Even $390 seems insanely expensive for what (to this layperson) seems like a bunch of wires on a skullcap.
I think that were I to implement anything like this I would document the capability explicitly.

The situation that seems useful to me is bypassing dysfunctional processes rather than circumventing inconvenient policies.

(and if the device in question can auto-apply updates so far as I can see being able to ssh into it rather than ship it an update that Does Something is more a question of how convenient it is to Do The Thing rather than adding any additional Things that it Can Do, though it's entirely possible I'm missing something important there)
For worse.

The main reason for tech journalism being more sustainable on YouTube is non-skippable ads and the recommendation algorithm.
When I think remote wooded area my mind goes to western NY around Allegheny. I know (and helped) someone who self-built a house in that area but am not sure about what approvals they needed/sought for it.
Delightful read, but the title should really be “Two Horses’ Asses Constrained the Space Shuttle’s SRBs”.

I admit it doesn’t exactly roll off the tongue.
> And investigated strange issues in results instead of drowning readers in data.

The basic problem of Phoronix is that it doesn't have the capacity nor competence to do this. Journalism is expensive and takes time, and Phoronix is a single person. If they were to actually go in and investigate every strange issue they had in their benchmarks (assuming they even notice them!), or add reasonable commentary beyond the seemingly autogenerated “in benchmark X, device Y seems go be ahead”, they would have to cut the number of articles and benchmarks drastically. Kind of like Anandtech, really; one of my main gripes with it is that there just wasn't _enough_ of it per unit of time.
In a hostile landscape it seems that the good ones shutdown, and the indifferent ones sell out.
I'm not sure what you mean by "security" in this context.

Identity management, role based access control, useful audit logs; all "enterprise" features, probably are very expensive to implement, and make for obvious "up-charge" product segmentation.

I suspect there's some combination of "the community doesn't add useful implementations of these features" and "we can't possibly risk our reputation based on some community contribution" and "we can use this to segment our product to sell to some and give it away to some."

This set of features seems to always get put in the "enterprise, only for licensed / supported customers" and it stinks.... I can understand why, though, and none of these are strictly speaking "security" as much as "compliance"
How to Optimize Your Career for Happiness
I mean they are containers. They used to be docker containers, and I believe you can still choose to have them be docker containers.
Experience the Apollo 11 Lunar Landing
The irony of serving a video, consumed by a robot, to serve a human text, rather than serving the text in the first place.
I'm more optimistic. Video may be clunky and largely difficult to search within now, but in the near future, with AI transcription and some kind of new UI, will become as easy to access as text is today.
don’t we all?
Reverse Engineering the AM335x Boot ROM
Ah, why didn't I think of this ?

https://forums.theregister.com/forum/all/2024/08/28/tiktok_b...

>> "...start nailing these fucking anti-social platforms to the wall...fined a tiny fraction of their income... but if this goes to a jury trial... the damages could result in hundreds of millions in compensation and punitive damages... then open the floodgates to more lawsuits."

> This is why they "settle out of court" with strongly bound NDAs. The aggrieved party gets "quick justice" and the accused gets to say "who, me?, not guilty, no fault" and the merry-go-round continues. None of the incumbents ever want to go to court over these sorts of cases. Same applies to Ts&Cs. No one wants' them tested in a court.

> They only ever seem to end up in court when Govt. wants a whipping boy or it's another $BigCorp with equally deep pockets and both see the advantage of "winning", or at least not losing.
Appreciate the POV, and agree that Coolify has a much better community around it! A lot we can learn from. Not sure we agree on the license front since we do allow commercial use.

Coolify and cnc are very different technical solutions. Coolify is a server you deploy to a VM that then can schedule workloads onto that VM, managing features like ingress and updates. cnc is a client-side CLI that schedules workloads into managed cloud services like lambda, cloud run, ECS, or Kubernetes. It orchestrates public cloud provided services instead of providing them itself (e.g. RDS vs. MySQL in a docker container on a VM). The trade-offs here are too big for a comment and both are a great fit for different use cases. We dive in a bit deeper with our POV here: https://www.withcoherence.com/post/the-2024-web-hosting-repo...