skysight-inc/HackerNews huggingface dataset:
Intel has focused on manufacturing efficiency for years now. Their innovation abilities have been lacking. A combination of Qualcomm and Intel will be a powerhouse. Intel as an entity will disappear but Qualcomm will be the stronger for it. I doubt Intel will go for it but I hope it happens.
This is really cool! I would use this daily if it were an app
Maybe if you hand-roll the struct layout, but if you use something like flatbuffers I doubt you would see many more bugs - and flatbuffers will take care of endian swaps as necessary without you needing to think about it.
Same way Europe exercises outsized antitrust influence in the US: threatening to fine US entities, and if necessary deny them access to the European market.

It would be tricky, though, because my sense is that China still needs Intel/Qualcomm more than they need China. At the same time, it would be pretty deadly to be denied access to that market and your products subject to excess tariffs if imported by others.
https://archive.is/20240920154450/https://www.washingtonpost...
True. PS has platform-specific API hooks that are orthogonal to the capabilities of other shells, and more-less replaces JScript, VBScript, and .bat files.

Putting that stuff aside, it is/was one of the first command shells/REPLs outside of SQL DBMS ones in a long time to support manipulation of structured information. For a smoother transition, shells like nu that can straddle structured and file-/line-/word-oriented will be more successful than leaping to too radical of upheaval.
Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability
BWI is not DC, I don't fly Tues-Tues, and 20 years ago I was paying as low as $150. Flights now are cheaper than for most of that time, but after you adjust for inflation and paying for bags, they were definitely cheaper in the mid-late 00s.
Flatpak and its ilk are a scourge that should be avoided. I don’t want to have to install another package management system when apt is right there. Moreover, I like apt precisely because it has in-depth knowledge about everything in the system. If I install something from source, it’s a careful decision, and I know the tradeoffs. With things like Flatpak, that line is blurred.
And they could also be react apps. What's your point? For a lot of people, a suitable react app is easier to make than the equivalent static HTML page with vanilla JS. The "it should be static HTML with a sprinkle of JS so the filesize is extra small!" guy is the one overengineering, here. The SPA's 20 customers are all using modern web browsers on modern first-world internet connections and don't care or notice that the page is not Stallman-approved.
Heroku WebSockets Now in Public Beta
Discussion: https://news.ycombinator.com/item?id=41381827
How the development wall between Android and iOS may soon come down
The blog has random dots as a background. Now I see them on every screen.
There was a 286 Xenix, and Minix (which inspired Linux) ran on an 8088.
"I don't know the answer, but I have strong opinions about the question."
Well, 40 Marine Corps battalions could probably blaze a few trails...
Like how UK blocked Microsoft's purchase of Blizzard.
[dupe] https://news.ycombinator.com/item?id=41601728
Have you considered porting to the vacuum tube 1 bit / 1 Hz MC14500 clone?

https://hackaday.com/2021/12/27/single-bit-computer-from-vac...
> $2,000 is a tiny fraction of what this bug is worth

The Browser Company raises $50mm at a $550mm post-money valuation in March [1]. They’ve raised $125mm altogether.

Unless they’re absolute asshats, they’ll increase the bug payout. But people act truly when they don’t think they’re being watched—a vulnerability of this magnitude was worth $2k to this company. That’s…eyebrow raising.

[1] https://techcrunch.com/2024/03/21/the-browser-company-raises...
> Browsers are complicated. It doesn't inspire confidence that the folks in charge of that complexity can't get their heads around a business model.

Unfortunately you are also describing Mozilla here.
[dupe]

Some more discussion: https://news.ycombinator.com/item?id=41604817
Major markets like EU and China often do have a major influence on mergers even though the companies merging could be based in the US and most shareholding could be US.

I think it goes like this: The major market regulator could say directly/indirectly: Hey you can merge in the US ... but good luck operating in our geography in a frictionless manner if we are against your merger. As a regulator we can make life hell for you if you don't obey our anticompetitive laws. Since you derive a high percentage of your revenue/profits you must listen to us !

It all depends on the percentage of sales in the foreign geography. With EU/China it can be quite high -- especially for tech companies.

So yes, foreign powers can and often do block companies from merging.
How do you know there's something you want to see?

(I run a relatively small Discord community so I'm sincerely curious how people engage with servers and discover new stuff in it)
From some perspective, governments of the big markets are like gangsters…
Fair dichotomy when modern computers have very hit-and-miss Linux compatibility. Who cares if the bootloader's unlocked when sleep doesn't work?
يمكن لـ ChatGPT أيضًا الترجمة من العربية إلى الإنجليزية، ولكن سيكون من المزعج استخدامه للمحادثة في هذا السياق
> one of the Linux developers reverse engineered the protocol, breaking the licensing terms

Tridge never accepted the license terms of BitKeeper and re-implemented client libraries only by observing black box behaviour of the server, so at no point did he break the terms of the license. He also told Linus what he was doing and asked, "how do you think [Larry McVoy] will react?". Linus said he thought it would be okay.

https://lwn.net/Articles/969221/
> This kind of bug could be sold for 100-200k easily

Maybe not. If the browser is that buggy, there may be plenty of these lying around. The company itself is pricing the vulnerability at $2k. That should speak volumes to their internal view of their product.
No one died at Fukushima... They did have to evacuate over 150,000 people though. I'm not sure we should be normalizing that.
What makes this more useful than the existing model of scanning a barcode or using a meal tracker or just reading the nutrition facts as you're preparing a meal?
Apple is not responsible for ensuring your malware (yes, that’s what I personally consider this software) or even your software runs on Mac.

The betas are there for you to test your code against future Mac releases. Apple can and probably will take away APIs that your business is built around. Especially when those APIs are actually decreasing security.
a thought!
Please don't do this. It's not substantive or helpful.

https://news.ycombinator.com/newsguidelines.html
FWIW, third-party clients and client modifications are technically against Discord's TOS
The article makes an argument that the hand-rolled solution is less buggy, if you approach it the right way.

For complicated data structures, it's probably best to use a library that serializes to a common standard. (For example, protocol buffers or JSON.)

But I think the article assumes you don't get to choose the protocol, so it probably has to be hand-written by someone.
Fascinating vulnerability, and a fascinating way to catch it. Kudos.

BTW, on Arc's website on "Security" there still is no mention of this vulnerability (as of 20th Sep 2024, 2:32 pm PT)

Check it out - https://arc.net/security

Apparently the company had contracted with one Latacora for "regular outside security reviews and trainings across a wide range of different systems".

Elsewhere on the page, it says "Arc uses GCP Firebase for user authentication, storage for Notes & Easels, and Cloud Functions for certain application features like referral code generation. All data stored in Firebase is encrypted-at-rest by default."
Surprise surprise, turns out it takes a looong time for every software startup to finally strip out all the hacky stuff from their MVP days. Apparently nobody on this startup community forum has ever built a startup before.

Pro tip: if stuff like this violently upsets you, never be an early adopter of anything. Wait 5-10 years and then make your move.

Personally, I expect stuff like this from challenger alternatives, this is the way it should be. There is no such thing as a new, bug-free software product. Software gets good by gaining adoption and going through battle testing, it’s never the other way around like some big company worker would imagine.
That was a much smaller deal though. A Chinese regulatory block for a $5B acquisition might rise to "not worth it" to Intel. Saying "No more x86 laptops or qualcomm radios in China" is more of a "Trade War!" kind of thing.

That's not saying the China would love it, or that they wouldn't have leverage. But regulatory power has its limits and it's not like every nation gets a veto on every merger.
Dropbox keeps threatening to delete my files
We also only have probability distributions, and with all probability distributions, the existence of very bad luck hangs out in the tails.
and iTerm, Zoom, WebEx, Teams, talosctl... All kinds of prompts like that only to find everything enabled.
Running SPEC CPU2017 at Chips and Cheese?
All good points, agreed. Except #4, would be cute if there's some animal that moves along instead of the house.

And perhaps playing with some kind of isometric perspective could help visualize wind directions?
While I am mildly disappointed that redumper[1] doesn't support low-level reading of DVDs, I have to say I'm super impressed that the README is very clear about what it does, and does not, do.

1: https://github.com/superg/redumper (linked from TFA).
>Arc brought order to the chaos that was my online life. There’s no going back.

Bringing the chaos back like it's 1999.
https://docs.docker.com/reference/dockerfile/#run---mount
OpenAI Strawberry Team [video]
web3forms is great! My pain point with it was incomplete docs, and lack of plugins.
Also related
https://news.ycombinator.com/item?id=41604390
The security page explicitly claims that Arc doesn't log what you're doing, giving URLs as an example, but this vulnerability claims every URL is being sent up to Firebase.
Like everything in tech, it's all about tradeoffs and understanding how you want to scale your business. Of the three startups I've been at, 2 of them adopted k8s early on and 1 of which didn't. Of the two that adopted k8s, one I would say k8s was our key differentiator in terms of our GTM motion and how our platform powered the business. $MM customer needs a setup running as close to their current infra's region for just about any reason, yeah sure we can spin that up in a week. This was often the key bit that allowed us to take customers from our key competitors before the competitor even knew we were in play. The 2nd one..... giant waste of money that gave me a decent pay check.

The third startup that opted _not_ to adopt k8s is stuck at $100M in revenue and can't land customers fast enough to offset churn. This is entirely because the COO has held the mentality "k8s bad, amirite?" and stuck with a patchwork of ansible scripts to manage configuring VM farms that ran our stack. Years of tech debt piled up and every new $MM customer coming in that needs to run in a specific region for $reasons, takes 6 months to setup and cost so much that we'd lose money on the deal. I genuinely believe this startup would be closer to $500M in revenue in the years since I've left had they invested in migrating from containers running in VM's to k8s. But instead they had to lay off 30% of their staff and get another round of funding, and are stagnating.
Our flagship product team is hiring a Sr. Full-Stack.

Details:

https://www.radai.com/careers?ashby_jid=f8d6c3f6-d704-44d1-8...

#Typescript #React #Python #FastAPI #PostgreSQL #FHIR #HL7
I think everyone knew the Mark I boiling water reactors designed in the 1960s was not a “safe by default” design. Open to receipts if folks with some understanding of nuclear designs were on record before that touting its safety.
"Most of the difference in GDP was because Dollar was a lot cheaper compared to Euro pre Recession."

Yes, but why? There was a theory that massive stimulus spending would weaken the dollar because of the additional debt, but instead, the opposite happened. The USA did more stimulus spending and the dollar became stronger. Many people were surprised by this. Those people need to revisit their initial assumptions.
Gitlab Critical Patch Release
Is Ubuntu 24.04 supported? (Docker Desktop doesn't support 24.04 currently)
Its really sad to see the best project management tool ever created fade away. Its not just the best and most intuitive way to do delivery predictions and team capacity planning but also somehow managed to reach peak interface. As development slowed down it felt more like a japanese tea cup that just reached perfection. (except for github integration)

would love to make a clone.
? Apt doesn’t require you to install from source? It’s not even its default behavior?

Flatpak provides basic level of sandboxing that ensures non-malicious stupid stuff like how steam had a bug to delete the entire user directory doesn’t actually impact you.

Beyond that, discord probably won’t solve issues with the N package managers if something happens. They’re a lot more likely to solve a Flatpak problem though.
Still there’s supply chain attacks. How could you verify every dependency in a particular project perhaps?
If we're talking about a single int, the way you do it doesn't matter, just wrap it up in a readInt function.

But if we're talking about a struct or an array, if you're byte-order aware you can do things like memcpy the whole thing around that you couldn't do by assembling it out of individual readInt calls.
Happens to me when my phone connects to a cell tower in Mexico. I get a Mexican IP address, and Google tries to accommodate.
Ukraine bans official use of Telegram app over fears of Russian spying
I do find it sad that native apps were quick and snappy back in the day, but now everything is effectively a browser, and has a DOM that needs to be parsed and dealt with, thus negating the hardware Moore's Law improvements that have happened since.

There must be a better way.
Qualcomm consists of at least 4 lawyers for every engineer. If this happens expect a lot more lawsuits making anything involving hardware much more expensive for everybody.
They want an easy path to onboard you into paying for stuff.
There is this Linus rant about "C++, in my the kernel?".

In the end, if enough contributers are willing to contribute in Rust, there will be Rust in the kernel I believe. Beggars can't be pickers.

Apart from C++ I don't think there has been any contender. But I am not following the mailing list really.

10 years is still yesturday. We will see.
Clean out your desk
This is really cool, it looks like it's pretty easy to get started with Shadertoy and your guidance.

One nitpick: in section 2.1.1 on implementing the reactions, you refer to "simulating the reaction A + 2B -> C"; should this have "4C"?
As AI, facial recognition, cameras, etc. become more widespread, we'll need to rethink privacy laws.

Imagine a company in the near future called MyPI that uses a ubiquitous camera network and facial recognition to track someone you have an interest in. You could surveil dozens or hundreds of individuals this way, all for a low cost. What time they leave the house, start work, where they go after work, etc. All legal because, hey, they're in public.
Is there anything you can actually _do_ with the Apple GPUs outside of macOS? I know the Asahi Linux person was working on a driver for it, but is it in a useful state?
I recently reentered the US after a short vacation (the first time I'd been out of the country for a couple of years) and the CBP now have cameras/face scanners. The agent said hello using my name before I'd even handed over my passport -- in fact I don't think he even looked at it.

I assume they must be face-matching on the passport photo database.
Why did he get an ig nobel prize for catching fraud..
Ah ok, gotcha. Yeah I'm the same that when my nginx config is done, I rarely touch it again. Also I have been playing with Caddy just to avoid the hassle of the cert management...to see if it can handle traffic like nginx can. So far my tests are showing Caddy as a pretty good replacement. (I should note that my scaling needs are quite low since, you know, I'm not a startup nor am I a massively large web service :-) )
or possibly FortuneSheet which is an actively maintained fork of the original LuckySheet

https://github.com/ruilisi/fortune-sheet
Answered this in depth here: https://news.ycombinator.com/item?id=41605220

The TL;DR is both us and Temporal help with durable execution. We layer on events and a differing DX to make things easier, faster, and to also work on serverless if people need.

I can't speak to Trigger, as they've changed a lot since I last looked. It doesn't look like they do durable execution, workflows, steps, or events — it looks like they're an alternative to Lambda + SQS for TS only, so very different — more for your simple "run one thing in the background", from what I can gather. Take this with a grain of salt, though!
I think both SMB and 9p (Plan 9 resource sharing/file system protocol) are little endian.

So it's not even all networking... and "network byte order" will mess you up.
It seems like an impasse caused by the first amendment, which does not distinguish between "personal" and "commercial" activities. I suppose there could be another amendment to add in these categories, but the freedom of the (commercial) press seems to fall under your "commercial activity" category? I suppose the government could license the commercial press, but that seems problematic, as it's what many totalitarian regimes do to suppress speech, and is exactly what the first amendment was meant to forestall.

On a slightly different note, why is the impasse "pathological"? Are you just throwing in a pejorative term?
LVN GO is really great. My mac is on lifesupport until the M4 launches soon. Cant handle anything more than a couple of browser tabs so even trying to open Xcode is suicide.
I don't see how you can differentiate between humans and corporations. They are both fundamentally the same. They are born... and oh wait, yeah. But still under the 14th ammendment's equal protection clause the Supreme court determined they were in 1886 (some argue 1819).

Maybe we shouldn't treat corporate speech the same as human speech under the 1st amendment, but that would allow regulation of corporations giving money to political organizations? Ok, well that's beyond the pale. That's obviously originally the founders intent in writing the bill of rights. I'm sure it's in the Federalist Papers somewhere.
Ask HN: B2B sell is super hard. What shall I do?
We are building a B2B product. We are currently using LinkedIn, but responses are slow and our conversion rate is around 3% to 4%. The product we are building can be considered a tool and there are many alternatives in the market. All alternatives except a couple are focused on B2C market.

We don't have blog and haven't invested in SEO but as far as I understand both of these are long games that is not going to pay next month.

I need results now to survive.

How do I get people to respond to me? Either Yes or No is fine but silence is the killer.

Everyone complains about email spam, LinkedIn spam etc. How are other B2B companies are selling? Are you all using email, LinkedIn or something else?

What is that something else that makes people respond to you?
I'm about to start a project where I thought Nix might be useful. What do I need to watch out for? Where is it going to piss me off and send me back to Docker?
[dupe] https://news.ycombinator.com/item?id=41603702
This would not be good for either party.
And Qualcomm would only do this to kill x86 prematurely which I'm sure AMD will pick up on.
Ah, yeah, I guess that probably is true of transformers in practice. I was thinking about something which strictly takes in a sequence of tokens and outputs a (possibly 1-hot) probability distribution over all possible next tokens. Such a thing running autoregressively would have to recompute y each time. But, if intermediate computations are cached, as with transformers in practice, then this isn’t necessary.
Does it support samba systems?
How do archivists package things? The battle of the boxes
People these days are absolutely mad. They’ll splash cash on anything without a second thought. They genuinely believe owning a house is an “investment” while they’re leasing a BMW or Audi just to drive to their nail appointments. These are the so-called “urban achievers.” But let’s not kid ourselves—the same hands getting those manicures will be the ones desperately clawing their way out of the financial mess they've created, like a scene out of Silence of the Lambs, begging mum for help with a student loan or parking fine, while the Deliveroo and Uber bills keep piling up.

People are utterly reckless and clueless when it comes to money—they haven’t a clue about the value of a pound, and frankly, they couldn’t care less. But they really should. Look at the ones with money to burn—spending on new hair, fresh nails, and a new dress for every wedding, while their partners splash out on another weekend getaway. It’s all a lifestyle choice, no different from the one the Bank of England seems to be celebrating. Same vibe, same level of obliviousness.
Show HN: AI Chat to help understand the effects of anxiety
I created Anxiety Simulator to others understand how to better navigate conversations with an anxious friend, coworker, or loved one.

I hope it helps just a few of you out there.
>but it's more like malicious compliance not in the spirit of FLOSS.

Isn't the spirit of FLOSS mostly based around the idea of malicious compliance?
To the poster, Europe does not exercise outsized antitrust influence in the US. Many of these companies have their tax residency in the EU. There is no need to "deny" anything. If the company gets fined and it refuses to pay the fine, EU seizes the money in one of many bank accounts in Europe.
I got my start in the military in anti-terrorism and I find your comment foolishly naive, provacative, and short-sighted beyond measure.
If you are using C/C++ for any new app, there is a possibility you are writing code that has a performance requirement.

- mmap/io_uring/drivers and additional "zero-copy" code implementations require consideration about byte order.

- filesystems, databases, network applications can be high throughput and will certainly benefit from being zero-copy (with benefits anywhere from +1% to +2000% in performance.)

This is absolutely not "premature optimization." If you're a C/C++ engineer, you should know off the top of your head how many cycles syscalls & memcpys cost. (Spoiler: They're slow.) You should evaluate your performance requirements and decide if you need to eliminate that overhead. For certain applications, if you do not meet the performance requirements, you cannot ship.
When this platform was heralded as the “AI” desktop, I pre-ordered both the dev kit and a laptop. Like many of you, I’ve experienced a months-long delay in the delivery of the dev kits. Although I STILL don't have my devkit, I received my laptop pretty much on time. -- and I quickly discovered that despite Windows on ARM (WOA) being over a decade old, the support for open-source tooling is as complete as Swiss cheese. Key Python modules are missing, and even the Git command-line (git bash) client isn’t functional yet!

I mean, forget about basic open-source development, let alone performing AI inference work on your new Snapdragon laptop.

After some digging, I’ve learned that just four overworked developers in Prague make up the core team unclogging this tooling dependency log-jam. Gah!

For what it’s worth, WSL2 (Linux on Windows) actually runs quite impressively on the Snapdragon X.
Yes, passport photos have been used for facial recognition for a long time now.