skysight-inc/HackerNews huggingface dataset:
Locking down a system is also the way to prevent people from installing rootkits, fraudulent banking apps, bypassing the CSAM filter or defeating DRM.
I think it's delusional to expect governments to blanket ban locking down computers. Most governments would likely try to gain that kind of power themselves.
TIL in 2022, Linutronix became an "independent subsidiary" of Intel, indeed:

https://www.linutronix.de/company/history.php
You (plural) seem to know a great deal about build systems, so I figured I would ask - what’s your opinion about Mill? It’s a not so well known build tool written in scala, but I find its underlying primitives are absolutely on point.

For those who don’t know, its build descriptors are just Scala classes with functions. A function calling another function denotes a dependency, and that’s pretty much it. The build tool will automatically take care of parallelizing build steps and caching them.

How do you think it relates to Nix and alia on a technical level?
what word would you fit to what a nix derivation is?
Beyond Procedure Calls as Component Glue: Connectors Deserve Metaclass Status
Thanks for the observation!
Am I too optimistic? I feel like most regular people I know wouldn’t sell this off. Most people are not antisocial criminals by nature, and also wouldn’t know how to contact a “state actor” even if they wanted to.
Do you think that this could be linked to a decentralized system for paying people to do this ? Similar to bitcoin, when a node goes down technicians arrive and are payed after the node has been fixed. (I see a lot of potential problems of "measuring" how much the node is repaired, who pays for it etc though)
New article - with little juice though -, from TheRegister: https://go.theregister.com/feed/www.theregister.com/2024/09/...
I recall when the book originally came out a lot of people said the scenario was implausible, so I have questions:

* If you’ve only simulated 1000 pieces, what is the likelihood they just don’t hit each other? (Space is pretty big.)

* How big does a chunk have to be to not burn up on hitting the atmosphere? (This energy would obviously go somewhere, just not necessarily into impact.)

* How and when does the moon reform?
The key to open source is the ability to modify it effectively.

To use GPLv3 definitions <https://www.gnu.org/licenses/gpl-3.0.en.html#section1>:

> The “source code” for a work means the preferred form of the work for making modifications to it. “Object code” means any non-source form of a work.

For icons like this, it’s just that there is no object code, the source code is the only form there is.

But supposing you had your SVG document with high precision, meaningful object IDs, Inkscape PowerStroke data (variable stroke thickness, which gets materialised in SVG as a path that gets fill), editor metadata and the likes, and then fed it through svgo and stripped all that stuff out, leaving just the bare bones, the original would be the source code, and the svg output object code.

To put it in the frame of another format where the difference is more stark, if you design something in Photoshop and you export it as PNG but don’t distribute the PSD, that ain’t Open Source. You can modify it, but not properly.

Or another: C, and a compiled binary. You can patch the binary, but that doesn’t make everything open source.
I'm no cryptographer, but I would say that it is indeed the case that you can assume that two parties can derive a shared key over an untrusted channel. The post Cryptography Right Answers PQ [1], linked in another comment, addresses this in the section "Key Exchange". Rather than thinking about Diffie-Hellman directly, you would turn to a Key Exchange Mechanism (KEM).

Before post-quantum cryptography concerns, KEM were indeed mostly built on top of Diffie-Hellman key agreement, but you could also build one on top of RSA, or on top of some lattice constructs. But you wouldn't build one yourself, there are good constructions to choose from! The OP actually has a 3-part series on KEMs, although I don't think it addresses post-quantum issues [2].

[1]: https://www.latacora.com/blog/2024/07/29/crypto-right-answer...
[2]: https://neilmadden.blog/2021/01/22/hybrid-encryption-and-the...
What if you instruct the AI that the person is 18 but looks like a child? Is it a child then or is it 18? And who is to judge?

This is going to get interesting in future for sure.
"is the case of invasive tracking (basically enterprise spyware)"

... and what do you suggest schools (for example) use instead? Bear in mind that "invasive tracking" is also used for protection of the vulnerable.
Which metadata exactly? Is the actual concern that someone unaware might accidentally stumble on the unprocessed image?
consistent as in reliably bounded that is.
Ask HN: Digital License (Apple, Google) Privacy Issue?
I recently setup my digital drivers license in my Apple Wallet as Apple just added that feature. Only to realize, this seems like a privacy nightmare?

If I understand correctly, the person who wants to know if I'm who I say I am and if I'm a certain age, has me touch my phone to their device. They then, at a minimum, record my name and age (and more?) Where as if I use my card license, unless it's for a doctors office or something, usually nothing is recorded.

In other words, if I use the digital license, every bar I go to and get IDed, every time I buy alcohol at a liquor store and get IDed, will call get recorded. Sure, I get recorded at the airport because I'm already recorded by the flight ticket but this new digital license just adds a order of magnitude or more ways to have my activity recorded.

Am I wrong?
That's no moon, that's a space station!
How does this compare to Sideberry extension(which is only for Firefox, it is free and open source)? Being cross browser, might not matter in 90% of cases, because from what I've noticed, people usually use one browser.

https://github.com/mbnuqw/sidebery
Well, it's two Neal Stevenson books wedged together. You might prefer on half over the other.
> Also, imagine all the dollars wasted. Dollars wasted on generating the stuff, dollars wasted to accommodate the traffic, there has got to be some incentive to stop the slop.

This is what I'm curious about. Someone, a rather large amount of "someones", must be making bank from the AI generated content that is flooding the platforms. Some metric somewhere must be misinterpreted in some way that someone willingly pays for the AI content that no one(?) consumes. The question is where the money ends up and who is paying it.
In my experience, how you like reading a book is hugely influenced by your state of mind and situation when you read it. You might love a book this month but have found it boring six months ago. It's just something you need to bear in mind (I loved Seveneves).
If you let me ssh on that server and I am allowed to ssh from there elsewhere that is not bypassing anything. You allowed me to do that unless it says somewhere that tunnels are not allowed. The question is mainly for which purposes you allowed me to use these things and whether I comply with that. E.g. if I was given a ssh route to reach the some internal LDAP system for software development reasons and I abuse it to stream cat videos on youtube that is on me. But if I use it to reach another internal server that I use for software development, then it is on them.

The alternative would be asking a babysitter for each connection you are making. Sounds like a good way to never get work done.

Also: A good sysadmin will have lines in their /etc/ssh/sshd_config that prevent me from tunneling if they don't want me to do it.
The actual study:
Reeck, C., & LaBar, K. S. (2024). Reining in regret: emotion regulation modulates regret in decision making. Cognition and Emotion, 1–8. https://doi.org/10.1080/02699931.2024.2357847

https://www.tandfonline.com/doi/full/10.1080/02699931.2024.2...
Let me add one: What is the current international agreements or regulations (if any) on airspace (space space?) above a country's sea and land footprint? Anybody can fly over without clearance? As airspace is regulated, what's the boundary of these regulations? Thx!
If you find a GitHub repository with code inside it and no LICENSE file (or any other license specifier), it is not open source.
Exact Instructions Challenge – Making a Peanut Butter and Jelly Sandwich [video]
Fun thing, I finished something quite similar in a week: https://git.sr.ht/~q3cpma/make-website ; down to the page language using the macro DSL of https://github.com/ruricolist/spinneret via runtime compilation of the (compile nil (lambda () ...)) kind. It's just HTML, other than that.

Obviously very tailor-made for my website (https://world-playground-deceit.net/) but I plan on improving that part once I'm fully satisfied with it.
I didn't say don't read or follow recipes like some kind of culinary monk. Using recipes is as important to a cook as reading programs is to a programmer. But the focus, if you want to learn to cook, should be on ingredients, tools and techniques. For a start, you will not enjoy making any recipe without a good knife. What's more, your execution will be terrible if you don't know what "finely diced onion" is supposed to be or how to make it, or how much "salt to taste" is. You won't enjoy it and will forever think restaurant/takeaway food is better than your own creations.

Recipes are always written at a particular level of abstraction. Most won't tell you how to dice an onion, but many will tell you explicitly how to make a roux, without saying the word roux. Learning the basics means you can skim and assimilate recipes at a much higher level. Plenty of people can follow recipes but few can learn a recipe from first principles as there are far too many details. To learn a recipe you need to first learn the basics, then you find a recipe is rather easy to learn. Then once you can do that you have the power to tweak them or substitute ingredients etc. as necessary and/or desired.
Unless Leon seats down to pull an all-nighter infused by Red Bull and gift the universe an overnight patch that will address this.

/s in case is necessary.
Apple, or at least their teams responsible for answering feedback, rarely ever give substantial responses nowadays, regardless of how well documented the submission was. So it compounds the frustration.

And this isn’t even the most egregious case, sometimes the bugs are so obvious that they generate multiple hard faults, per hour, logged in Console, on a fresh installation with only the default apps running.
Nothing kills the reading mood faster than popups and a struggling laptop fan
this made me laugh. 10/10
Good pun :)

HN tends to be a little hard on brief comments. My current understanding is that comments with little substance are totally acceptable provided they're good natured.

For example this comment by dang "There's nothing wrong with submitting a comment saying just "Thanks."" https://news.ycombinator.com/item?id=37251836.

Also from the guidelines "Comments should get more thoughtful and substantive, not less, as a topic gets more divisive": this post's topic doesn't likely qualify as divisive.
And that's exactly why I play mostly indie games. There are so many masterpieces
Beeper manufacturer.
The technique I find most useful is to implement a “linked list” strategy where a chunk has multiple pointers to the entry it is referenced by. This task is done manually, but the diversity of the ways you can reference a particular node go up dramatically.

Another way to look at it, comments. Imagine every comment under this post is a pointer back to the original post. Some will be close in distance, and others will be farther, due to the perception of the authors of the comments themselves. But if you assign each comment a “parent_id”, your access to the post multiplies.

You can see an example of this technique here [1]. I don’t attempt to mind read what the end user will query for, I simply let them tell me, and then index that as a pointer. There are only a finite number of options to represent a given object. But some representations are very, very, very far from the semantic meaning of the core object.

[1] - https://x.com/yourcommonbase/status/1833262865194557505
It can't be that good
What do you mean by “schools” and “protection of vulnerable”?
According to this article, Arc requires an account and sends Google's Firebase the hostname of every page you visit along with your user ID. Does this make Arc the least private web browser currently being used?
For context: what is this 'arc' that the blog post mentions? I presumes it's not Paul Graham's Lisp dialect in this context?

EDIT: seems to be a browser or so?
Some people in industry wearing a "data scientist" hat may be working with R. I worked with a few people in a for-profit megacorp who had developed a particular forecasting model in R -- that model ended up getting rewritten in Python to "productionise" it, but a few of the folks who developed the original R stuff came along for the journey.

Maybe another approach to searching could be to try popular R libraries with unusual/rare names as search keywords. searching for quoted things like "Python or R" might also find you a few candidate jobs.
Graph RAG is very cool and outstanding at filling some niches. IIRC, Perplexity's actual search is just BM25 (based a lex fridman interview of the founder).
> captcha asks you to types command in shell. I have no comment on how naive one must be to do this.

someone who knows computers (like a programmer) might not fall for it, but people who do not know computers, but is dabbling could easily fall for it.

The copied command specifically puts in a "user friendly captcha message" into the end, to overflow the run dialog textbox, so that a user who obeyed the instructions will see something vaguely resembling valid captcha verification:

# " ''I am not a robot - reCAPTCHA Verification ID: 93752"

Phishing and scams are not about catching out pros, but catching out "normies".

It's quite scary that the scammers have put thought and effort into the method of infiltration, because this is "novel" as far as i have heard.
I had an interesting conversation this week with the folks behind https://biofactoid.org, a service to allow researchers to openly make available the semantics behind pathways they study in their paper. Their service is working quite well at the moment because they hide all of the complexity from researchers. They told me that even using terminology like "database" or "identifier" reduces the likelihood of researchers completing the task. I say this because I think the idea that researchers will use a self generate public key won't work at the the scale of our scholarly ecosystem (roughly 5M papers peer reviewed papers published annually).
...and 5000 years!
That's 2.5 Jesus's of time and distance.
Show HN: Compare iPhone costs around the world in your currency
No 19edo? I think with 24edo it's the only scheme that could outplay 12.
This is broadband 10-88 MHz. The Starlink bands are somewhere between 10–86 GHz. They are jamming almost an order of magnitude of scientifically highly valuable spectrum for no reason at all. It is outsourcing EMI testing of their satellites to LOFAR at this point.
Generally I'm a huge Stephenson fan (I own all of his major works in first editions), but I hated Seveneves. The third part is the only bit I can claim to have really enjoyed.

That said, I loved Anathem, so perhaps something of your theory tracks :)
Apple usually nails user-friendly experiences. Maybe it's a matter of time, and we all will eventually get used to it
> I don't think that going into implementation details is what I would expect from an interface specification.

I guess that's why Microsoft calls it an "engineering spec", but I prefer that sort specification over the Vulkan or GL spec TBH.

> The interface exists precisely to isolate the API consumer from the implementation details.

In theory that's a good thing, but at least the GL spec was quite useless because concrete drivers still interpreted the specification differently - or were just plain buggy.

Writing GL code precisely against the spec didn't help with making that GL code run on specific drivers at all, and Khronos only worried about their spec, not about the quality of vendor drivers (while some GPU vendors didn't worry much about the quality of their GL drivers either).

The D3D engineering specs seem to be grounded much more in the real world, and the additional information that goes beyond the interface description is extremely helpful (source access would be better of course).
Yes like the case around a laptop, or the body/fuselage and wings of a drone, saves weight. They showed it on the news recently.

"Structural batteries are materials that not only store energy, but can also carry loads. In this way, the battery material can become part of the actual construction material of a product, which means that a much lower weight can be achieved in electric cars, drones, hand tools, laptops and mobile phones, for example."

They claim to increase the range of an electric car up to 70%

More recent article: https://www.electrive.com/2024/09/12/swedish-researchers-rep...
Unfortunately the political plot is “Hillary Clinton fails to engage with reality and it falls to genius billionaire Elon Musk and a self-insert modelled on Neil deGrasse Tyson and a self-insert to save the day.” which has, and I think this is an understatement, aged extremely badly.
> Why did the moon explode without warning? Why?

If you take it as given that the moon is going to explode, it's guaranteed to happen without warning, for the simple reason that we do not know of anything that might cause that to happen, so even if warning signs were present, we wouldn't understand them.
Starlink is just the first company doing it this way. Many will follow. Regulation is required. At some point the starlinks will fall to earth and the new ones replacing them will need to be regulated.
Welllllllll.
Yeah I get that. And I also understand that, given their predicament, the characters in the story have little time or opportunity to consider the matter for us.

What annoyed me was that the "premise" is (a) extraordinarily unlikely and (b) its causation doesn't form any part of the plot. Building a hard SF work on such a foundation is a big ask of the reader - although I'm sure it was entertaining for the writer. Thats my problem with the book.
Yes. We need orbit space tax which profits are used to resolve issues caused.
It's not like it's money from thin air, the legitimate users pay the company, and the company is being "scammed" (or whatever it is - Scam 2.0?) by these "Angels". But obviously the company realizes the whole scheme is still cheaper than employing actual bike movers.

Maybe they can change the algorithm, if an "Angel" moves a bike from a full station to an empty one, they only get rewarded if a "legitimate" user then uses their bike. Not if it's their own ass who's going to ride it back to the origin station in 15 minutes' time. But then the algo needs to ensure that the next user isn't just the Assangel's friend.
> Why can any scammed just create a website without any traceability?

because jurisdictional challenges.

Not to mention that this very same traceability would be abused by some other authoritarian gov't to track down dissidents for example.

There's no real way to systematically have good security, if the human element is the weakest link tbh. Securing windows is not a technical problem, but a social and educational one.
It’s used for protection of the companies, so they can’t be held liable. Don’t kid yourself.
> Jamie Oliver started promoting first themselves and then others on Youtube

He had multiple TV cooking shows before Youtube even launched
It halved the price of high speed internet in rural locations in Europe.
Yeah, it’s where I stopped as well. Although honestly I should have stopped when it became clear the Baroque cycle was just going to be him talking about stuff he found interesting with no coherent narrative.
DNG spec added JPEG-XL as their modern codec. Both lossy and lossless modes are significantly better than the other 3 allowed codecs (JPEG, lossless JPEG, and zip.)
Too bad there isn't a tool to disable the person with the Flipper.
Some of L3's subsidiaries definitely recruit from HN
Personally, I don't understand the motivation and reasoning for investing/buying stock in Chinese companies right now.

It's like giving Xi and his government an interest free loan with hope as the only collateral. Any sort of objective underwriting or recovery is simply not possible.
> The clipboard strategy feels like it should be easy to block too

yea, the browser should actually have each site ask for permission to modify the clipboard imho.
Stop Designing Your Web Application for Millions of Users When You Dont Have 100
Apple’s profits might be up, but does the soul of their product design feel diluted?
> can probably be used to de-stealth US stealth aircraft

As the subtitle says, the fact that Beijing would disclose this almost guarantees it's false. De-cloaking U.S. stealth fighters would be a singular game changer in the battles for Taiwan.
For all we know, the solution to Fermi paradox are people who insist on tradition and not upsetting the status quo instead of taking advantage of the possibilities of truly global high speed internet coverage for low prices.

I agree this should be fixed if it's possible. But if it meant 2x the price of the subscription, I'm pretty fine with them keeping it as it is. Global internet is just way too good for humanity to not do it.
Around the world means a couple random countries in this case. Also it includes the sales tax seemingly everywhere, except the US.
I use uBlock Origin and Firefox (on Mac) and see the cat.
I suffered insomnia for many years when working days, it seems I'm just a night owl and I've learned that working the night shift works best for me, midnight - 8am local time seems to be the sweet spot for me, in bed before noon, up for a late dinner and a night with family before they're all off to sleep while I work the night away in peaceful quiet... and no more insomnia, with black-out curtains in the bedroom and a running fan I no longer have trouble sleeping...
> it was taken under a user with admin privileges and UAC disabled.

you will have to accept that users either ask this UAC to be turned off, or it gets turned off by the original installer of the windows for the user (presumably non-technical user).

It's like telling traffic accident sufferers that they should've put on a seatbelt. True, but pointless.
Who will get the tax money?
I think the problems started with Cryptonomicon. The book is great, but it’s very apparent the final act of the book is just missing. He clearly ran out of time and just slapped something together and it was hugely well received (and with good reason, there’s lots to like). But the success of a book that frankly got away from him made him near untouchable. So yeah, undisciplined is what happens next.
The bug you referenced was about single-sign-on.
Not sure how did you jump from there to spyware
Maintaining API Connectors
One trick they use is to book via a different country. Flight from A to B when booked on the main English website in dollars can be a higher price than the same leg being booked on the Russian website in rubles.

Two reasons for that, one can be because the airline is less known in that market and whats to price more aggressively, and the other is that the ticket conditions are slightly different. For example your right to get compensation in case of a delay (and how much) may be different between those tickets.
Legit looking because it was formatted by PayPal themselves, and also sent from PayPal.com.
Most iPhone users keep their phones less than three years: https://9to5mac.com/2023/05/10/how-long-people-keep-iphones/

I’m also buying used iPhones and keeping them longer than that but we’re outliers.
Doesn't seem to work on iOS 17.6.1 (can't hear anything when I press a key).
This looks awesome....
Yes it's a new browser who tries to change the UX from traditional browsers: https://arc.net/