skysight-inc/HackerNews huggingface dataset:
It's much more than just performance they've thought about. Here are some of the secure programming practices that have been implemented:

/* All the functions in this file are considered "secure", specifically:
- Constant time in the input, i.e. the input can be a secret[2]
- Small and auditable code base, incl. simple types
- Either, no local variables = no need to clear them before exit (most functions)
- Or, only static allocation + clear local variable before exit (fd_ed25519_scalar_mul_base_const_time)
- Clear registers via FD_FN_SENSITIVE[3]
- C safety
*/

libsodium[4] implements similar mechanisms, and Linux kernel encryption code does too (example: use of kfree_sensitive)[5]. However, firedancer appears to better avoid moving secrets outside of CPU registers, and [3] explains that libraries such as libsodium have inadequate zeroisation, something which firedancer claims to improve upon.

[1] https://github.com/firedancer-io/firedancer/blob/main/src/ba...

[2] https://en.wikipedia.org/wiki/Elliptic_curve_point_multiplic...

[3] https://eprint.iacr.org/2023/1713

[4] https://libsodium.gitbook.io/doc/internals#security-first

[5] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
Outer Wilds is top three all-time for me. And hands-down, the most underrated game and at least one generation.

it’s a good point that the publisher does have an eye for talent.
It sure feels like, barring some major regulatory setback/surprise, that within 5 years it will be funny to remember getting into an uber or cab driven by a real person when in any major city.

The biggest challenge overall is going to be overcoming the issues with autonomous driving in inclement weather. But I’m sure it’s doable eventually.
I didn't read the OP as saying, "Private sector good; public sector bad." I read him as saying, "Unregulated monopoly bad."

I think a more charitable read of the OP is that the FAA hasn't done a good job regulating Boeing because the FAA is in Boeing's pockets. Boeing is so critical to national defense that the regulators don't want to rock the boat and risk getting fired. Both Boeing and the FAA need to be cleaned up.
> The fact that older technology is simpler

hahahahahahahahahaha. Yes, back in the days when all you could do on a website is read the text.

Old technology was 1000% not simpler. What an insane & absolute statement to make in an enormous field just because you can't make a solid argument.
Do pre-paid plans not exist in the US?
Vox is not “left leaning”. It’s funded by right wing businesses like comcast[0] and constantly puts out right wing concern trolling like this piece and the other examples cited here.[1]

0: https://fair.org/home/comcast-owned-vox-explains-the-great-d...

1: https://www.google.com/search?q=citations+needed+vox+site%3A...
When you think about it, so many problems could have been prevented and so many business rules could have been easier to express if there was some standard way to track the origins and veracity of data.

Maybe also some way to track if the data is meant to be transient or meant to be written back.

The more such constraints which could be described up front, the better.
Corporate liability insurance in the US, which is also a very common thing to get, often does not cover your defense against "intentional torts" such as defamation or fraud. It usually covers things like slips and falls, product-related liability, etc. I would be surprised if your German version covers defamation.
The big source for confusion IMO is that there is no single universally-understood definition of "creator". The site was founded and is controlled by ~6 people who create content for YouTube and other platforms. So does that make Nebula "creator-owned" by default? Or does every content creator on the platform have to have some form of ownership? And then does that ownership have to be equitable? Or will one token share with no voting or profit share still qualify?
Which is to say, not disgusting at all.
This is super neat - SBCL is an awesome language implementation, and I've always wanted to do CL development for a "real" game console.

I'm also surprised (in a good way) that Shinmera is working on this - I've seen him a few times before on #lispgames and in the Lisp Discord, and I didn't know that he was into this kind of low-level development. I've looked at the guts of SBCL briefly and was frightened away, so kudos to him.

I wonder if SBCL (+ threading/SDL2) works on the Raspberry Pi now...
They have nothing Tolouse right now.
Law firm investigation: Venezuelan gang demanded 50% of rent at Aurora complex
> New Bloomberg Terminal for 2 EUR / month

no it isn't, good content, bad title
> he feels they amplify things he doesn't want to hear.

I mean that's kind of the whole point of having them adjusted with an audiologist. They're tuned to your specific needs.

It's too bad so many people think they're just mics and amplifiers. Modern hearing aids do a lot of signal processing.
What precisely is wrong with consensually selling sex?
i wonder if the community can figure a bolt on double boiler solution for this easily?
o1 is an application of the Bitter Less. To quote Sutton: "The two methods that seem to scale arbitrarily in this way are search and learning." (emphasis mine -- in the original Sutton also emphasized learning).

OpenAI and others have previously pushed the learning side, while neglecting search. Now that gains from adding compute at training time have started to level off, they're adding compute at inference time.
You need to do more than update the firmware. You need to upload your personal audiogram into the device.
> Although I can't get copy/paste to work in a remote text putty window. Sigh.

Depends on stuff like what terminal Putty emulates and so on, of course, but... Eh, have you tried using the old "MS/IBM CUA standard shortcut keys, [Ctrl]-[Ins] and [Shift]-[Ins]? (And, for completeness' sake, [Shift]-[Del] for Cut.)

AIUI, those are Putty's standard keys for that. I've always assumed that's because, you know, a 'Nix command line would interpret [Ctrl]-[C] rather differently.
I think it's extremely unlikely Boeing would be allowed to replace the union with scabs. The NLRB is not current business-friendly, I'm 99% sure they would find a way to forbid it.
I've followed similar approach for building a REST API fuzzer for the past 3 years: https://github.com/Endava/cats. Fuzz testing is still not widely adopted considering the obvious benefits and usually minimum setup time. Even if it's java, getting it to native code was a must, so I had to rewrite it from spring to quarkus to get native image compilation out of the box. And focus on the performance bit to be able to run large number of mutation even for large json payloads. Quite a journey.
Y Combinator to Double Number of Cohorts per Year
When your enterprise product is a superset of your open source product, you need a trigger that leads to buying. If that trigger is a feature, then it is only effective as a trigger if it is broadly useful to the product. In which case, you either withhold it from open source or cripple (or rate limit it) in open source. Your sales team - told to meet quarterly revenue targets and held accountable to that - will lobby for strict limits on these features.

My first hand experience is that there are two likely outcomes: (1) You limit the utility of the open version to create a buying trigger and your open source users dwindle away as the open product doesn't meet their needs. Or, (2) your community has sufficient momentum to build the feature itself and your sales team starts losing deals to your open source offering.

This model also creates harmful intra-organization conflict between those who argue for short-term revenue (probably their continued employment depends on that) vs. those who argue for the largest open source user base. It also creates conflict with your users as you intentionally offer a worse product to your largest user group (open source users).
Using Android Without a Google Account
In the US, you can ask for fee-shifting if you have been sued frivolously or there has otherwise been some wrongdoing on the part of the other side. These guys may be able to motion for fee-shifting given that the case was dismissed at this early stage.

State defamation cases usually apply anti-SLAPP laws that automatically create fee-shifting in this exact circumstance, but this seems to be a federal case.
Well, the same "political poison" argument that the article advances against "degrowth" can also be applied to your proposal (or any other proposal that benefits the environment): if they are followed, plastic gets more expensive, and all opposition parties will blame you for making people poorer because they now have to pay more for every single product packaged in plastic (conveniently ignoring of course that there are other ways to package products). The sad truth is that the environment doesn't vote in elections, people do, and people are generally selfish...
Matrix multiplication is very commonly used in science and engineering, not just machine learning.

The neural engine is optimized for machine learning use cases.

This standardized successor to AMX is more general purpose than the neural engine and has much improved matrix multiplication performance vs NEON.

As a bonus, since this is no longer just an experimental implementation of a matrix unit, you get documented access to the new ARM standardized low level instruction set.
It depends on the country, though. I love Japan, where I lived for eight months and where I frequently travel to, but dealing with government services there can be stressful. Granted, the clerks are professional and cordial, but be prepared to deal with long waits and perplexing bureaucracy. The United States is not unique when it comes to the stereotypical “DMV experience.”
The new hearing aid features are gatekept behind an iOS app. You can't tweak the hearing aid settings without an Apple device.
Such statements are made by management folks who dont code, and somehow think coding can be hand-waved away.

Sure, this tool will improve the productivity of sw engineers, but so did the compiler which came 50 years back.
Mega El NiñOS may have played a part in the Permian mass extinction
The US did not lose the war against Saddam. The war was started under false pretenses and they made a mess of the reconstruction after, but that's different from a military defeat. If one side of a war manages to destroy the other's military, execute its leader, and set up shop in his palaces; that's a win on the military front.
It is a better-than-1200E machine at the end of the day when you look at the components and overall build.

It has PID temperature control (typical) but _also_ pressure control. You could build a Gaggiuino for less money and the same effort, but you'd be left with a far lower quality piece of hardware as the Gaggia hardware has a shitty boiler, plumbing, group, and casing.

I'm not a huge fan of vibropumps either, but they're common for pressure profiling machines (up to $3-4K) because they're easier to control and compact. Moving to a rotary pump would cost ~$300 more at the component level, so while I'd a reasonable upgrade it would hurt the overall economics of the product to make that standard.

I still think it's expensive -- I personally would try to hit the market with a $999 kit cost if at all possible. The market for big spender espresso geeks without a machine is indeed small.
Cloud atlas of Mars reveals an atmosphere unlike our own
True. I think the practicalities of it are hard to predict but the spirit of the idea seems reasonable; it’s not that degrowth would have us sitting in squalid huts eating grass. Such an idea doesn’t seem to have much evidence.

But the vast gulf of consumption between a typical upper class North American family outputs vastly more carbon than a typical family in Pakistan or Nairobi that there is probably a lot of wiggle room to plan a more even distribution of wealth. And such redistribution may not make the 0.01% much richer but doesn’t it seem possible that it could also have the effect of slowing down our carbon emissions as well as keeping up the positive trends of reducing global poverty?
> Boeing’s lead corporate criminal defense law firm is Kirkland & Ellis.
Cox, the lead prosecutor in the Boeing case, left the Justice Department earlier this year.
And last month she joined Kirkland & Ellis as a partner in its Dallas office.

It looks like the firm bought the prosecutor, resulting in a win for its client. How could this be prevented, though? Politicians can't be trusted with oversight like this--they would use it to punish prosecutors and would inevitably further politicize the Justice Dept.

https://www.corporatecrimereporter.com/news/200/lead-boeing-...
Existing hearing aid products are still available for purchase for those who want them. I don’t think AirPods are going to replace hearing aids. Hopefully they lower the barrier for entry and perhaps lower the price of existing products.
Main thought is just that there are tons of situations that involve more than 2 people being in a discussion. some the of links I mentioned in the post get into this with the "facilitator" model.

Moderation/mediation is probably the most obvious thing "usecase." I'm more interested in just pushing the limits of what the language models can do and see what kind of things they'll do.

There's a corner of the internet interested in these models as a form of "alien intelligence." Don't immediately know what the application would be, but the results are super interesting
What toll exactly do you expect people to have to pay? I've been naked on the internet for money. That content is still there. It has not impacted me adversely in any way, nor has it had a negative impact on the many women I know who have created adult content. If anything, for me it has been fun and liberating.

I think you're just projecting.
Show HN: Pyrtls, rustls-based modern TLS for Python
Aren't there vast tracts of quite pristine nature in large swaths of Siberia? It may see a trapper or two in the Winter but I think that qualifies as pristine.
Yeah... Doesn't seem fair to imply that it's a big secret if you don't ask.
> How is that an exemplar of profit making capitalism?

They still exist and are regularly pumping out millionaires from their executive suites.

It's helpful to think about corporate America as a gigantic factory, but instead of a factory that makes gadgets or appliances, it's a factory that makes millionaires. On one end of the factory, the raw materials come in: Able-bodied workers, money from customers, and capital from investors. On the other end of the factory, the finished product--millionaire executives--fly out on golden parachutes into retirement. In the back, the waste from the manufacturing process gets discarded: The broken lives and bodies of all the rank-and-file workers, and all the negative societal and environmental externalities that were also destroyed in the process.

Profit for shareholders and [temporary, conditional] employment for workers are mere side effects of the process, and they'd do away with the second one if they had the technology to.
Fair point.

The reason I don’t think only playing with the band counts is: in a hunter gather tribe 70,000 years ago, did everyone sing all of the songs all of the time? Or did some people just listen, at least some of the time?

Practically speaking I think it must have been the latter.

Of course there are lots of unnatural aspects in live music still, like too many people, too loud, etc. But recorded music is wholly unnatural, like pornography is.
that is merely your opinion, and it is not borne out in reality
At some point I will upgrade to a double boiler but I've been happy with an hx machine.
Or, they wanted to drop the emulation and tried to rewrite the FW to run natively on the microcontroller.
How to create systems for community support
I don't mind elaborating - the fact that people are asking me questions reminds me that I need to invest a bit more effort on some articles.

This case is actually pretty simple.

Puppet applies the configuration you declare impotently when you run the Puppet agent: whatever is not configured gets configured, whatever is already configured remains the same.

If there is an error the return code of the Puppet agent is different from that of the situations above.

Knowing this you can choose triggering the Puppet agent runs remotely from a monitoring system, (instead of periodical local runs), collecting the exit code and monitoring the status of that exit code inside the monitoring system.

Therefore, instead of having an agent that runs silently leaving you logs to parse, you have a green light / red light system in regards to the compliance of a machine with its manifesto. If somebody broke the machine leaving it in an unconfigurable state or if someone broke its manifesto during configuration maintenance you will soon get a red light and the corresponding notifications.

This is active configuration management rather than what people usually call provisioning.

Of course you need an SSH connection for this execution and with that you need hardened SSH config, whitelisting, dedicated unpriviledged user for monitoring, exceptional finegrained sudo cases, etc. Not rocket science.
Agree, at times it is so sloppy that it’s not clear what’s being written.
That's only young people.
Jiraiya!
I don’t know many (or any) sociology departments teaching CCRU related authors
Same here. The CTO was also engaging in resume-driven development. There is no rational discussion about what tech stack to use. Executives need to be able to point to a modern tech stack as a signal of their relevancy and competence. No one will be caught dead slinging bare metal and running on-prem databases right now. It's just the look.

I built out a POC and was running it on bare metal for serious workloads under my desk at GE (12-factor). Management practically scrambled to get me cloud access. My setup was ephemeral and could be easily reproduced anywhere. The software was easily deployed on, or integrated with, cloud services. I just shrugged.

I didn't care where my code ran, to them it was some epic priority to get it in the cloud and generate extra expenses.
At an Apple Store[1].

[1]: https://support.apple.com/en-gb/106340
PayPal, Tesla, SpaceX,… how many times does someone “win the lottery” before it’s not actually chance? Not saying anyone can repeat it, or a random IC could leave and succeed, but that space seems ripe for disruption. (Maybe not passenger planes, but cargo with less liability.)
Unveiling the math behind your calendar
The term is nebulous
Wait, really? You can use your health savings on a iPhone now?
There is evidence. Victims sympathize with captors. Saying there is no evidence (because no proper science) is dismissive, on its own. The world is a messy place, with imperfect people. This, alone, is reason to believe that people take irrational action. Most people take irrational actions, every day. Some more extreme than others, eg Pica.

Superior tactics employed by Abby Hernandez or similar behavior like Jaycee Dugard, can slide into a sort of misplaced bonding, like in the case of Mary McElroy. This can be due to contextual disposition, character, or situation.

Shared experiences are part of what makes bonds that reinforce good or ill intention. If Traumatic Bonding is reasonable, then Stockholm is reasonable, regardless of the origin of the theories.
I don't think many people are arguing against increased efficiency. They're arguing against growth-without-caveats-or-nuance as a goal. Which might seem like something one shouldn't have to argue against, but it has been a key part of the mainstream political ideology for the last few decades.
Dont you know by now

Speaking with AI maxis it’s easy:

The AI is always right

You are always wrong

If AI might enable something dangerous, it was already possible by hand, scale is irrelevant

But also AI enables many amazing things not previously possible, at scale

If you don’t get the answers you want, you’re prompting it wrong. You need to work harder to show how much better the AI is. But definitely, it cannot make things worse at scale in any way. And anyone who wants regulations to even require attribution and labeling, is a dangerous luddite depriving humanity of innovations.
Counterpoint - I got a £8 ($10?) chinese iron including bits and bobs and solder and it works fine. (similar to https://www.ebay.co.uk/itm/387009386986?_skw=soldering+iron&... )

I guess it depends how much you are going to use it.
How old are your kids? Stray is rated 12+ for violence.
Played through with my 7yo daughter. She loved the game, but would freak out when chased by the "rats". It was a good opportunity to show her how to try to keep playing when you're stressed! She found it exciting after a couple of goes. You didn't mention how old your daughter is, but that is surely the key factor.

I'm still hopeful for a "Stray 2" - or whatever they can do now the devs lost the IP. My daughter cried when at the game's ending (no spoiler)
These are table stakes for core cryptographic code, and SOT crypto code --- like the Amazon implementation this story is about --- tend at this point all to be derived from formal methods.
The test has many reasoning, code and instruction following questions which I expected o1 to be excelling at. I do not have an interpretation for such poor results on our test, was just sharing them as a data point for people to make their own mind. My best guess at this point is that o1 is optimized for a very specific and narrow use case, similar to what you suggest.
People used to say the same about getting divorced or getting a tattoo or having a child "out of wedlock" (even the terminology sound hopelessly outdated).

Maybe think about which side of history you prefer to be on.
There is an important difference between a kid spending money on a toy versus spending it on a person.
Curious what kind of things you had the model look for? Did they have any kind of goal or was it more a "vibe" thing.

Also would it only respond if a message was directed at it or could they proactively decide to join a conversation?
As far as "doesn't solve any of the problems, stops any of the solutions people are implanting right now from working, and makes sure nobody will try to solve the problem on the foreseeable future" qualifies as an "imperfect" solution.

But yeah, "this thing is wrong, so we must do that other wrong thing instead" is a great talking point.
Understanding the Raspberry Pi Pico's memory layout
Hyperscript Behaviors
Good point.

But LEDs would probably take too much battery power.

Not sure if the new color eInk would be useful.
Truth.

At the same time, phasing out and introducing crypto primitives takes 10 - 20 years across the industry due to inertia from unmaintained systems, legacy code, compatibility, fear and such. So the growing interest to move to quantum secure encryption is right, even if the first RSA breaking quantum computer goes live after I retire.
Why would anyone make it complex?
Working in tech for over 30 years. This is the first time when I don't see proposed technology as a valuable tool. Especially LLM's.
Vastly overhyped, driven by pure greed and speculative narratives, limited implementation and high energy cost.
Non-transparent. Errors marketed as a hallucination.