skysight-inc/HackerNews huggingface dataset:
Using Tor, like all security and privacy tools, must be balanced against what it is being used for. We will always live in a world of limited resources for policing, and systems of privacy work by increasing the difficulty and cost to deanonymize someone. They don't have to be perfect, they just have to be expensive.

If you want basic anonymity while researching someone powerful or accessing information, it's extremely unlikely anyone is going to go the lengths people are bringing up here as a way to compromise Tor. The intersection of expertise, funding and time required is too great for such a low value target.

If you're an international terrorist leader wanted in multiple countries, a prolific criminal, or enemy #1 of an authoritarian state though? Those who can go to those lengths absolutely will go to those lengths.
PPP 2.5.1 has been released
I'm guessing the real money linked in wants is in the hiring and firing, B2B. Now, every resume gets answered and your first interaction with a company is a poorly scripted AI who goes from manic enthusiasm to depressingly rote in the actual job requirements and probably will still ghost you and continue the imbalance of application effort vs employer response.

The converse will be true, but the price of AI will just make poor people have to suffer even more

Just the long march of wealth inequality and it's time sucking capitalism.
The problem with all these speech-to-speech multi-modal models is that, if you wanna do anything other than just talk, you need transcription.

So you're back at square one.

Current AI (even GPT-4o) simply isn't capable enough to do useful stuff. You need to augment it somehow - either modularize it, or add RAG, or similar - and for all of those, you need the transcript.
Totally agree and it depends on the current context of the programmer. For example, in the ACPUL language the program is split into boot images, files, modules, functions and expressions. All of these represent different levels of context encapsulation
Don’t know what a jerboa is but I quite liked the depiction in the film.

In particular the attention to detail, when they showed a bead of sweat running down its optimally shaped ear, whereupon it was pawed into its mouth.

I loved that little scene so much.
This stuff is so trivially easy these days. 20 years ago it was hard to deploy a clustered message queue application, but now we've got so much open source tooling. Are you telling me you can't deploy RabbitMQ in an afternoon? Give it a day or two and you've got a monitoring stack and some swanky GitOps. Now your OpEx has been reduced 80x for hardly doing anything. As for continual maintenance, us-east-1 has gone down more times in the past year than my RabbitMQ cluster has gone down in 5. Because the tech really has improved, and it really is easy now.
No, it's solidly within the calculus of economics. Why are you concluding that rejection of unions are due to a cultural or personal disdain for unions, and rejecting the possibility that software developers disapprove of unions for economic reasons?

The economic calculus is pointing against unions: effectively every trade union creates tenure-based pay structures, which don't reward high performers and punish people who change jobs. This makes it hard to retain high performers as they can get better offers from non-unionized companies, and selects for the low performers that stand to benefit under a tenure-based pay structure.

Furthermore, unions routinely block advancements that improve efficiency, because it would reduce the amount of workers required. This is beneficial for the union, which has its membership artificially inflated. But it's bad for society as a whole. Unionized workplaces are routinely the least efficient companies on account of this. For instance, longshoremen's unions in the US have widely blocked automation at ports. The result? American ports are some of the least efficient in the world, despite costing on par with other developed countries. We all bear the cost of this inefficiency in terms of more expensive supply chains, which in turn makes products throughout the country more expensive than they should be.
parsing json is roughly of the type:

type Json = None | bool | float | str | dict[str, Json] | list[Json]

you might have similar situations for configs e.g. float | str for time in seconds or a human readable time string like "30s" etc.

given how fundamental such things are I'm not sure if there will be any larger projects (especially wrt. web servers and similar) which are compatible with this

also many commonly used features for libraries/classes etc. are not very likely to work (but idk. for sure, they just are very dynamic in nature)

so IMHO this seems to be more like a python-like language you can use for idk. some since computations and similar then a general purpose faster python
New software demands a new vocabulary, and if those new concepts correspond exactly to implemented code, everything becomes very clear and possible to share with new people.

As well, the division of a project into layers where each layer has a manageable amount of concepts, 5-7 for normal layers, becomes much easier for people to learn and use correctly. If I have to keep 12 things in mind while using a layer, it's going to be a lot harder to get correct.
I'm confused. Who decides if you are asking or not? Are casual users who innocently ask "tell me how you came to decide this" just going to get banned based on some regex script?
I have done that exact configuration for several of my clients who didn't realize any/much revenue in the EU. For them it was the obvious best move but I wish there was a better option.
Then only allow self-signed certificates for literal IPs or those on .local (and other private/reserved TLDs).

Right now, .local is completely impossible to encrypt, as well as impossible to use “secure origin” APIs on, which is a shame.
That’s the same thing. AI is cheaper, hence you lay people off because they cost more.
Maybe this is true skill-wise, but there is also productivity to consider. I knew a band 9, who was definitely not going to be promoted STSM (band 10), but was extremely productive. I'm sure he was paid well, better than most band 10s.

Band 10 and above include good soft-skills, people who can persuade the industry and organization, give TED talks, etc.
But it's right there in the header, you could just click the link and find out on the top of the webpage.
I suggest you flesh out your question.

"residential IP services" might mean someone running a web server, or someone's microwave accessible "from anywhere with our convenient app!"

"security risk" might mean to the resident, or to some entity trying to eliminate "dangerous home servers".
That is the definition of the current state.

Fortunately for the future state, they can be changed.
My two problems with it were/are:

1. Gratuitous overuse often in inappropriate places (bad news from work, invitation to a funeral, etc.)

2. The fact that it was optimised in its hinting for low resolution screens common around the time of its creation (and its initial target, via MS Bob) making it not optimal for higher resolutions (in print, or on more modern higher resolution screens with or without sub-pixel rendering). If you are going to use that sort of font, I think there are better choices than Comic Sans itself (unless CS has had updates over the years, which, come to think of it, is not unlikely).

If you really want to wind up people who care too much about what fonts you use, try combining the two most overuses and disliked with Comic Papyrus: https://creativemarket.com/blog/designer-combines-papyrus-an... (since renamed Comic Parchment due to litigious arseholery).
Ask HN: Do AI dialers/calls work and save $$$?
I’m seeing a lot of companies pitching their AI dialer systems for cold calling prospects. Do these things actually do a good job of pretending to be a real human?
I can't wait to read more stories like that. Inspirational.
I met one of the PMs building this. She was working on NL unified search for the feed. I noticed it’s gotten way better in the last few weeks. Instead of using Google to search [first name][last name][“linkedin”], now i can reliably type my query into LinkedIn’s search bar and get the correct result. I’m a fan.
It's worth remembering that Hezbollah as a whole is more than just the paramilitary branch which is commonly referred to as a terrorist organization.

Is that right? Then their flag on wikipedia is even funnier. It screams "Islamic terrorists".

https://en.wikipedia.org/wiki/Hezbollah
I said in another thread about mono fonts, that I now have used comicMono so long, I automatically just put it into "Courier" and when I see a real Courier font, I do a double-take.
I’m not convinced… there’s so much room for technology to fill the gap. Companies that fail to properly invest in tech to replace this labor will be beaten by those who do, and quality of life may actually improve as the marginal cost of production marches ever downward.
And - of course - you're probably not even paying a couple of cents less. Those couple of cents are extra profit for everyone further up the 'value chain'.
My comment wasn't really so much about the nature of the steps being taken, as it was intended to display my anger, as someone who has been on this earth for 72 years, regarding the ongoing atrocities committed in the name of religion. If there is a loving god, there is zero doubt such a god would, first and foremost above anything else, detest every organized religion.
> Edit: For all the cynics and doomsayers here, consider this: Tor has been around for a long time, but there has never been an uptick in arrests that could be correlated to cracking the core anonymity service. If you look closely at the actual high profile cases where people got busted despite using tor, these people always made other mistakes that led authorities to them.

During WW2, the British cracked the German codes. They would create pretexts for "discovering" where German ships would be, so that the Germans wouldn't suspect that they cracked their codes.

It's impossible for us to know if the US government have cracked Tor, because the world would look identical to us whether they had or hadn't. If the only evidence they have is via Tor, and the individual is a small fry, they will prefer they get away with it rather than let people know that Tor has been cracked.

I just assume the NSA are spending their budgets on something, although maybe it is stuff like side channel attacks.
In that case the NAS company should, at a minimum, be loading their NAS with a certificate signed by a CA owned by the NAS company, where the trust chain for their NAS's certificates are easily available for users to grab and install.

In an ideal world they would load a letencrypt certificate and set up the tooling required to automatically pull down a new one when required.

A NAS company owned CA doesn't offer much of a benefit directly for the plug-n-play users, but it's still better than just a self signed cert, and for people who care about their security even a little bit it can significantly protection.

Most Plug-n-Play NAS solutions will integrate with a web api and/or an app, and it's more common than it should be that NAS'es are exposed to the internet.

Once you control both the NAS and it's clients, there's absolutely no reason not to preload a complete PKI implementation. Even just an installation app which loaded the chain onto any device you wanted to interact with the NAS would be sufficient.

If NAS'es are intended for non-technical people, then any NAS sold should be secure by default.
Perhaps I can help... when Hanlon's Razor doesn't explain the malice/stupidity in play, you can always try the extending it with the following:

Hubbard's corollary to Hanlon's Razor:
"Never attribute to malice or stupidity that which can be explained by moderately rational individuals following incentives in a complex system". (https://en.m.wikipedia.org/wiki/Hanlon's_razor#Other_variati...

Or HN Nerdponx's simplification:
"When money is at stake, never attribute to incompetence what could be attributed to greed." (https://news.ycombinator.com/item?id=41066724)
This is completely inaccurate and disingenuous. Glass suffers from no such thing as "microglass", unlike plastic. Plastic actively sheds micro/nanoplastics into bottled water, with hundreds of thousands of particles (and probably more depending on its handling) floating in the water, along with any chemicals used to make plastic moldable, fire-retardant, etc. Glass bottles have no additives that leach out in anything but the most minute quantities, even in an alkaline solution. The same can't be said for plastic containers.

Also, while glass does dissolve in water, it is an extremely slow process that does not affect containers at room temperature in any significant way. As for the claim about glass evaporating due to vapor pressure, while technically true, the vapor pressure of glass at room temperature is so infinitesimally small that it's completely irrelevant for practical purposes. This process occurs at such a slow rate that it would take far longer than the age of the universe to have any measurable effect on a glass container.
API-LLM-Hub: In-Browser LLM Integration for Static Websites
I think that might be less likely given the trade restrictions. There's no way an Iranian ISP just gave Hetzner those IPv4 addresses free of charge.
Would you mind dropping the link talking about this point? (context: I'm a total outsider and have no idea what TFA is.)
Right, because every stolen laptop automatically comes with an abduction of the owner? No, getting "hardware access" to a human is much harder (more expensive in the best case and riskier in terms of drastic punishment) than for a laptop, even more so if you want to go undetected.
Do you really think I suggesting it as a long-laid plan behind someone choosing a name ~9 years ago?

I'm saying that the current relationship between the company and end-users--especially when it comes to "open" monikers--has similarities to an "Open Beta": A combination of PR/marketing, free testing, and consumer data collection, where users should be cautious of becoming reliant on something that may be yanked back behind a monetization curtain.
You should figure out how to covertly poison their AI content. I'm sure there's someone with a large enough network that you could setup the AI equivalent of a zip bomb.
> It's rare to see NLP research that doesn't have a dependency on closed data controlled by OpenAI and Google, two companies that I already despise.

The dependency on closed data combined with the cost of compute to do anything interesting with LLMs has made individual contributions to NLP research extremely difficult if one is not associated with a very large tech company. It's super unfortunate, makes the subject area much less approachable, and makes the people doing research in the subject area much more homogeneous.
Exactly what I'm trying to say, though written better.
I think the main reason for sunsetting the project is hinted at near the bottom:

> The field I know as "natural language processing" is hard to find these days. It's all being devoured by generative AI. Other techniques still exist but generative AI sucks up all the air in the room and gets all the money.

Traditional NLP has been surpassed by transformers, making this project obsolete. The rest of the post reads like rationalization and sour grapes.
That's almost certainly the case. I use Tor semi-regularly and many Tor exit relay IPs are identified as being in Iran which is just not possible.
I read that Icom V82 is discontinued and most available are counterfeit.
> Terrorism is targeting civilians to further a politician or ideological agenda.

This is the old, pre- War on Terror definition. The definition of terrorism now, as used by most imperialist governments, is far less strict.

https://www.fbi.gov/investigate/terrorism

You will notice that the FBI's official definition of international terrorism doesn't mention either civilians or political goals at all:

> International terrorism: Violent, criminal acts committed by individuals and/or groups who are inspired by, or associated with, designated foreign terrorist organizations or nations (state-sponsored).

Their definition of domestic terrorism is likewise unbound from civilian targets entirely, and is not only about political goals, but "ideological" goals (which is in fact any goal, by definition, i.e. "something you desire to see/ believe should be achieved"):

> Domestic terrorism: Violent, criminal acts committed by individuals and/or groups to further ideological goals stemming from domestic influences, such as those of a political, religious, social, racial, or environmental nature.

Terrorism is now any act of violence that serves the goals of any group that is designated as "bad".

The rest of your comment is just textbook Islamophobia.
I’m sure they’ll find more meat to grind.
My point is precisely that current browsers and OSes make it impossible to ship a secure-by-default device running a local web server, NAS or otherwise.

Requiring users to install a globally trusted CA is a disaster from a security point of view (now my NAS vendor or anyone that hacks them can pose as google.com!), and for this reason doesn’t even work with modern Android apps anymore, for example.
They’ve been doing it for so long I’m surprised they have any jobs left to axe.

Sam Palmisano skinned IBM then too a knife to its belly and gutted it. All in the name of his “Roadmap 2010” which was a plan to double the share price by 2015.

So basically the pharaoh said “fuck it, we need a new pyramid. Get the whips out and all worker carcasses are to be dump on the left please”.

https://www.forbes.com/sites/stevedenning/2014/05/30/why-ibm...

Edit: roadmap 2010 not 2015
I don't get 120fps on non-minimal settings with a PlayStation or Xbox, yet 150+ million people do all their gaming on those consoles (including almost half of Overwatch's player base according to some polls). That's not the test.
This response comes across as rather defensive and makes a number of assumptions that are not universal across all fields.

From my perspective, the author's basic thesis which is that a) there is a glut of PhDs b) getting tenure is political and c) publication quality is generally low is true. That doesn't mean that people who are successful in the system aren't smart or don't have meaningful real world successes. But my decade in higher ed through a postdoc made it very clear that even at top institutions, many, if not most, faculty are not doing work with significant real world implications.
It's a soft, warm blanket of denial, because the actual implications of it are too scary.
Correct. Or rather, that it's not relevant to the discussion at hand. The federal reserve rate has nothing to do with the national debt.
I think, you completely missed the point... I compared Jupyter notebooks to shell sessions: it doesn't make them bad (they are, however, but for a different reason). I don't think that shell sessions are bad. The point I'm making is that Jupyter notebooks aren't suitable for being independent modules inside a larger program (and so are shell sessions). The alternative is obvious: just write the program.

Can you possibly make Jupyter notebook act like a module in a program? -- with a lot of effort and determination, yes. Should you be doing this, especially since the alternative is very accessible and produces far superior results? -- Of course no.

Using your metaphor, I'm not arguing for taking the typewriter away from the not-so-good writers. I'm arguing that maybe they can use a computer with a word processor, so that they don't waste so much paper.
Wrong sense here.

> Don't you dare ask me that, and if you do it again, I'll tell the boss and get you fired
Some people in the other thread are saying the link doesn't work in EU. Maybe they haven't rolled out the setting globally yet?

https://news.ycombinator.com/item?id=41585120
Many of those articles came out before TSMC received CHIPS Act grants. As soon as the CHIPS Act money was committed to TSMC, the factory was suddenly ahead of schedule. Noah Smith called it out here:

> Three months after TSMC announced further delays at its $40 billion Arizona fabs, the chip manufacturer has now said the plant is expected to be operating at full capacity by the end of [2024].

> The announcement comes several weeks after it was first reported that TSMC is set to be awarded more than $5 billion in federal grants under the US CHIPS and Science Act…

https://www.noahpinion.blog/p/at-least-five-interesting-thin...
PRC is a very controversial acronym

It’s CHINA
And you should consider that it's probably junk. From the article:

A 2021 study empirically tested several of Graeber's claims, such as that bullshit jobs were increasing over time and that they accounted for much of the workforce. Using data from the EU-conducted European Working Conditions Survey, the study found that a low and declining proportion of employees considered their jobs to be "rarely" or "never" useful.

Many jobs that appear bad are actually needed, often only because of regulatory requirements or because their importance is misunderstood.
Well, I'm one of those people, and I feel that I rarely do this. Except if I have a list of different objects that implement the same interface, as another commenter mentioned.
What a Ukrainian settlement looks like when taken by Russia is predominantly on the scale of heavily damaged to totally leveled. Whereas Ukraine has taken localities without huge artillery and bombing preparation and have supplied locals hiding in the largely intact settlements with food and water, about whom Russia had forgotten - furthermore they shell and bomb towns with both Ukrainian soldiers and Russian civilians in them.

Ukraine targets exclusively war-fueling infrastructure including refineries, ammo/petroleum depots, military airfields and yes, key logistics routes like said bridge that was built by an invading country spanning over to occupied territory.

Israel has set off explosives with the knowledge that statistically many hundreds of bystanders will be in the blast casualty radius in public and private spaces. That is magnitudes more negligent and accepting of civilian casualties in comparison.
An LLM trained on LinkedIn posts would be good for comedic purposes if nothing else. It's unintentional comedy score would be extremely high. Would love to see a conversation between an LLM trained on LinkedIn posts and an LLM trained on X/Twitter posts.
Silicone is noteworthy for being stable at quite high temperatures. If you’re worried about plastics offgassing in a microwave, take a look at what the inside of your microwave is made from.
There's no law saying a union can't fight for things besides salary. But in practice that's what it's often about.

Take the NYTimes tech worker union, for example (previous HN discussion: https://news.ycombinator.com/item?id=41504026). It really only has 2 objectives on its platform: indefinite remote work, and "pay equity". Notably, their objective is for pay equity regardless of different representation across different jobs. So not even "equal pay for equal work" but rather "equal pay for different work".
Israel is at war with Hezbollah. I'm all for diplomatic solutions, but that requires both sides to desire one, and Hezbollah has shown no desire. Neither has Israel, but again: Israel is at war.

You don't win a war by not fighting.