skysight-inc/HackerNews huggingface dataset:
Yeah, this is my likely approach - it’s not impossible he’s got some BBC stuff that’s otherwise lost, as he pretty much ran two VCRs continuously for a quarter of a century, from the early 80’s to early 10’s - but it’s mostly just hoarding.

If and when it’s a relevant problem for me I’ll go through his catalogue, digitise anything worthwhile, and then dispose of the lot, be it through sale as recordable media (they should all be in great shape, as he stores them well) or otherwise.
It’s probably generally irrelevant what they can do today, or what you’ve seen so far.

This is conceptually essentially Moore’s law, but about every 5.5 months. That’s the only thing that matters at this stage.

I watched everyone make the same arguments about the general Internet, and then the Web, then mobile, then Bitcoin. It’s just a toy. It’s not that useful. Is this supposed to be the revolution? It uses too much power. It won’t scale. The technology is a dead end.

The general pattern of improvement to technology has been radically to the upside at an increasing pace parabolically for decades and there’s nothing indicating that this is a break in the pattern. In fact it’s setting up to be an order of magnitude greater impact than the Internet was. At a minimum, I don’t expect it to be smaller.

Looking at early telegraphs doesn’t predict the iPhone, etc.

Optimism is warranted here until it isn’t.
Flying-Vs and longer wings: familiar shape of passenger planes is to change
Playing the Wild Cards: A Structured Method to Exploit Possible Surprises [pdf]
Metaverse isn't VR. Meta in particular just happens to be integrating them since they make both.
That "fitness test" would be measuring a person's maturity, or better said "lack of immaturity". How to measure maturity might just be the most important measure ever devised by the human race, because it would enable US, the humans being led by our democracies, to finally demote the power hungry smooth talking immature, short sighted leaders.
I think it’s actually much easier to make such mistakes at large companies with sprawling codebases and potential for settings that inadvertently end up logging sensitive data. Especially for nobody to notice either.
The demo looks unrealistic. The waves never break. Increasinlgy steeper slops with pointy peaks travel from left to right until they just sink down towards the left.
> we've known for a long time that taking notes increases recall to a degree that likely dwarfs this screen vs paper thing

Bit of anecdata that agrees with you here - a few years back I bought a decent colour e-ink android tablet (Onyx Boox). My intent was that I was going to totally use it for reading through journal papers without needing to print them out, regular ebook reading, etc etc.

The VAST MAJORITY of what I have used it for, to date, is the note taking app. Like, not notes scribbled over whatever I'm reading.. just notes.

The act of doodling notes in meetings and training and classes and when problem-solving definitely aids my [lack of] working memory and I definitely see how making notes improves comprehension.

I bought a book replacement and it became a notepad replacement :)

I too have found myself preferring a good solid actual book when it comes to reading, too. Ebooks just miss something tactile. I suppose that highlights when reading becomes an activity with intent, as opposed to something you feel you have to do.
The concept looks pretty identical to Nodal, as if they used the same specification.
I have seen some stuff about that, however that is to be expected.

Many of these kind of changes take time, and require multiple interactions.

See Go or .NET tooling bootstraping, all the years that took MaximeVM to evolve into GraalVM, Swift evolution versus Objective-C, Java/Kotlin AOT evolution story on Android, and so on.

If only people that really deeply care get to compile from source to try out the JIT and give feedback, it will have even less people trying it out than those that bother with PyPy.
In short: wordpress.org is just a personal homepage of Matt Mullenweg, not legally or financially related to neither Foundation nor Automattic? There could be technical relations but who has not "forgotten" your personal homepage to your employee's machine, just a honest mistake.
I spent years living on the beach. When you live on the beach, you watch the ocean for hours at a time because it’s mesmerizing and feels sensational. I wouldn’t guess for a second this was a render.
I gotta level with you, not everyone knows you shouldn't do that.

There's a number of devs that don't think twice about storing sensitive keys in a git repo.

I could 100% see how someone would do this, see log messages with passwords in plain text, and then faff off being the last person to actually look at those logs. "K, this case is done, what's next"
Ah, that makes sense! I thought that Yjs must be doing something differently than described, because it seems to work well in practice, but I couldn't see how Yata would. Anyway, I learnt a lot by thinking through that paper :-)

Fuzz testing and proof are complementary, I think, both catch things the other one might not have caught. The advantage of Fuzz testing is that it tests the real thing, not a mathematical replica of it.
A view from 1985: https://pages.cs.wisc.edu/~remzi/Naur.pdf

[pedantically: the theory generated by a program and the theory generated by the axiomatisation in the heads of its programmers should be equivalent, but if you only have one it'll be easier to derive the former given the latter than the other way around]
Then what do you mean when you say "make a difference"?
This is the weirdest argument. Psychopaths aren’t exactly know for caring about the lives of others or embracing being manipulated.

“Hi, mr psychopath CEO, sir. A bunch of other people and I were discussing openly on a forum that we should manipulate you into doing the right thing by stroking your ego. What do you think? Surely as a psychopath you care about the opinions of others.“
I'm willing to lay 2-1 that it wasn't a mistake.
Upgrading from PostgreSQL 16 to 17 on Mac
Why the obsession of this particular metric? And how can one claim something is unbalanced while focusing on one metric?
If you’re trying to create a repeatable source of randomness for unit testing for example, you would create a new PRNG for each run, not try to recycle an existing instance. You’re making assumptions about state that aren’t supportable.
Superb Hero FTW
True but they're also better resourced in terms of humans (and their experience) and tooling that should prevent or at least catch any blunders quickly.
Ask HN: What's the story behind removing paging for long threads?
I recently noticed that Hacker News no longer uses paging for long threads. In the past, when a discussion grew large, we had to click "More" to load the next page of comments, and dang would occasionally post helpful tips to remind us about this feature [0].

Was there an announcement regarding this change? Has anyone else still seen paging recently? I'd love to know more details—especially the technical aspects or considerations that went into the decision.

Thanks!

[0] https://news.ycombinator.com/item?id=41013984 like this
Decentralized Reputation in OpenBazaar (2015)
I agree, but also I know of devs that don't understand the basic security implications of passwords being in logs. I could easily see how someone, maybe even a couple of people, could see these logs and think nothing of them.
I think there was a quote by a Nordic writer (possibly Hans Christian Andersen) in which he talked about how circuses and amusement parks keep people distracted and busy so we don't focus on important policy issues.

https://www.bbc.com/culture/article/20220818-the-surprisingl...

https://en.wikipedia.org/wiki/Bread_and_circuses
Yeah, and then you do something fun to distract you from said current events.
Almost certainly because of the sheer popularity of the ChatGPT brand and majority of user/mind share.
What does this even mean, really?
It may be that people successfully learn something entirely new to them from studying core principles not thanks to such an approach, but despite it. Some would say the approach unnecessarily limits the amount of people who would otherwise easily grasp the topic.

Math is usually introduced by way of examples (counting apples and such), and it could be that using those more would make more complicated topics more accessible.

https://worrydream.com/refs/Lockhart_2002_-_A_Mathematician'...
Friedrich Nietzsche's Übermensch is from 1883.
The https://developers.cloudflare.com/calls/turn/overview/ link in that article 404s. Looks like it should be https://developers.cloudflare.com/calls/turn/?
And it turns out that plane crashes are much more serious failures than logging sensitive data internally. Not to say what Facebook has done isn't an embarrasing failure that really shouldn't happen, but they're clearly not the same thing.
That's why the fine is only $102M
Discrete GPUs are a dead end street. They are fine for gaming, but for GPGPU tasks unified memory is a game changer.
And they're not fined for storing in plaintext, nor for storing in plaintext by mistake, they're fined because the law give a time limit for you to notify the regulator after you notice it and they waited too long.

And in this specific case just to be clear it's not about taking too long to notify the public / customer, but about taking too long to notify regulator (the delay is much shorter). And they're not supposed to have perfect facts when they notify it, there is no sanction for notifying and saying "but we're not sure yet" if you're being honest, or coming back later with correction, there is a sanction for not telling them in time.

We often see "companies should be responsible / should have to inform me" and that's part of that regulation, and it only works if there are clear defined delay and sanction when they're not respected.
A pseudonymous trust system for a decentralized anonymous marketplace (2014)
Bad dental health kills, cancer, heart disease etc. everyone knows this.

Not much more to say other than look after you teeth.

> but not to establish a direct cause-and-effect link

This is quite important, certain bacteria can cause more severe tooth decay and there will be ways to manage these (Electric toothbrush with a app to teach you how to brush).

It seems highly likely to me it'll be as expected the damage to teeth causes the HNSCC.

Either way it's good research as long as they don't mislead without proper evidence.
Part 2: https://medium.com/@therealopenbazaar/decentralized-reputati...
Even if people wake up and "do something", govts will just tire us out. Similar to how online protests against reddit, (or on ground protests like occupy [X], and so on) and others failed. We have no option but to accept what is handed out to us.
They haven't marketed it as "metaverse" to try to please investors, it's something they've been working on for years and have now got a working initial version they've released.
No one cares until someone cares. If trademark is not used in any actions to supress others, no one really tracks them. So there is no impetus to clean it up.

And I don't think government has resources to iterate over trademark and invalidate generic ones automatically.
> It should raise eyebrows when the security practices of SWEs at a billion dollar company are outperformed by any newbie developer working a toy project.

Facebook isn’t “a billion dollar” company it’s “a 1,435 billion dollar” company.

Excuses start to run thin.
Thanks, that helps clear things up.
That's true. The impact on design is reverse of the post I replied to though. Since we got more density, we had more compute available to automate more, which made it economically viable. Every generation had enough compute to design the next generation. Now the device scaling is stagnated, we have more (financially viable) compute available to us than before (compared to design complexity). This is why this AI generated floorplans become viable I think. I'm not sure if it would have been the same should the device scaling would be continuing at its peak.

I want to emphasize the biggest barrier for IC design to the outsiders: prohibitively expensive software licenses. IC design software costs are the much higher than conpute and the production costs, and often similar order of magnitude but definitely higher than engineer salaries. This is because of the monopoly of the 3 big companies (Synopsys, Cadence and Mentor Graphics). What wxcites me the most about stuff like OP isn't AI, everyone is doing that. It's the premise of more competition and even open source tool options. In the good old days companies used to have their im-house tools. They are all sacrificed (and pretty much none made open source) because investors thought it's not a core business, so it's inefficient. Now even Nvidia or Apple have no alternative.
What did the Ceefax backend look like? Were there cached proxies at the antenna site, or was it muxed live across the country?
The point is that it's both distraction. Social media has told us that enragement sucks up even more attention than amusement. Mission accomplished.
Passwords are just data. If said data is not tagged in a way that makes it clear it is a password, finding an algorithm that will successfully blot out passwords in the general case is intractable without being far too aggressive to be useful.

All such tools rely on assumptions about what will be logged following certain rules that the logging can check against - it's not hard to accidentally convert data to a format that when logged happens to fail these kinds of tests.

They should have caught it. But it's not surprising that it occasionally happens.
Presumably, "we're been storing 600 Million passwords in plaintext" is understandable to their PMs given its understandable to complete laymen. Aren't FAANG companies supposed to employ the very brightest minds.

Hard to imagine this wasn't done on purpose.
When I did application security I had to argue with developers about PCI and PII data in logs all the time. They would insist that there was "no other way" and that it was secure inside our system. I'd refuse to change the status of the vuln to anything other than critical. I found many similar vulns in our database that had been marked as false positives or non-critical by other infosec people in the company. The common thread was none of them had a background in software development so they just trusted what the developer told them. This seems to happen frequently in places where there's a culture of compliance being more important than actual security.
That looks wet. And honestly it is the best compliment I can give.
This is explicitly a simulation of ocean waves, and ocean waves do not break.
> “I’m quite sure that me + FSD is safer than just me driving”

A drunk driver is quite sure that alcohol is not impairing their driving too. NASA has shown that it literally is not possible for a human mind to monitor a system for a prolonged period of time, ready to intervene at any moment; after a while you tune out. That’s specifically why Waymo never pursued level 2.
The last time I was there this surprised me, until I realized you really don't want your bins hanging out in that heat for more than a day. Sometimes it gets pretty bad even during the same day.
Money has made it far easier to barter work into what people need to survive, obtain stability & enjoy life, than its absence.

It’s easy to be jaded by those that obviously value it more than others’ well being.

But the mismatch of priorities is what is wrong, that doesn’t negate money’s positive practical value & impact.

Most people have a more multifaceted relationship with money than as a dehumanizing god or drug.
I worked somewhere not long ago where the "solution" was to run code to scrub repos before building release packages because these packages were in some cases installed in customer networks that drastically increased the chance they might leak. At no point did it seem developers or the devops team realised that the fact they saw the need to do this meant that maybe they should apply the same checks used to scrub in a hook to root them on commit in the first place.
I Love Calculator
Vast quantities of logs are never reviewed by anyone....
>Where else can you be entertained for a couple bucks an hour or less?

Some examples include:

*Mountain hiking

*Swimming in a lake

*Reading a book

*Arguing on HackerNews
HN does it, if I post my password it will automatically change it to stars, see: *************
Not that hard [1]:

Rails.application.config.filter_parameters += [
:passw, :email, :secret, :token, :_key, :crypt, :salt, :certificate, :otp,
:ssn, :cvv, :cvc
]

[1] https://github.com/rails/rails/blob/8a2e28d7451d5ae4cb194fcc...
Perhaps a thick shell of water suffices. In the order of meters, perhaps one to four meters. Perhaps combine it with lead, in the order of centimeters, perhaps ten centimeters, then one meter of water would suffice.
It means that the return of investment for fancy email autocomplete is not that big
I feel like you are doing your students a disservice. (multi-)Paxos, while complex to wrap your head around, enables far more modes of consensus. The possibilities and papers out there are amazing.

Raft essentially only allows a single mode. Moreover, you are starting to see people putting things on top of Raft instead of something like Paxos, in the enterprise, because they don't know any better nor have the foundation to understand what they are doing is "wrong."

> When I got students to implement MultiPaxos, I never could get sufficient confidence that it was done right

Testing this is fairly straightforward, they should be able to join an already existing cluster. If they got it wrong, it shouldn't take down the cluster, and they should be able to step through their own code. There aren't any timeouts, so they can take their time, going through each step of the process until a value is committed.

At that point, you simply explain each step as an individual algorithm, not the sum of its parts. You can even build each part individually because an existing cluster should recover from a misbehaving peer.

From there, it is a rather simple visualization process to see what is going on.

The hard part of paxos is building it from scratch.
This assumes people are stupid and have no intelligence of their own and needs to be told what they should be doing.
He didn't say that Spanner is only a recruitment tool but that the blog posts about Spanner (and other core technologies of Google) might be.
Most of them have signed an NDA promising not to do it. Is that not enough? /s
Wow I didn't know this is illegal.
0.1 % of current revenue fine.

If your company made a billion $ revenue per year, it'd have to pay $100k.

Doesn't feel like a great incentive to do it right.

If they improved debuggability by logging all requests to make the company more than 0.1 % efficient, it's a good deal for them.
Yes, kinda proving my point here since I didnt say you are brainwashed if you dont agree with me but if you dont understand what I'm saying. Whether you agree with my point of view or not is irrelevant to me. And to the Planet Earth for that matter. :)
I'd agree with you except that their product is insanely good compared to the rest of the world, and they're leading into a new space as well.

Sure the bubble will pop with the hundreds of nonsense startups going on at the moment, but OpenAI will be fine.
102M$ might sound like a large sum - but the math shows that a leaked clear text password here is just fined with less than one dollar…

(Yes I have read the fine is triggered by not informing the authorities in due time)

Interesting how the affected user is actually valuated…
Avoiding the bug in the first place is not the big issue, surely. An employee can leave a door open to a secure area, if you employ security people they should have worked to mitigate that, and to catch it if it did happen.

Well "we want to run an audit to find if any passwords are stored in plaintext in our file systems". Sounds like a problem any highschooler could answer?

The idea of an audit might need a person who has done a remedial level of security work.
AFAIK the paging was something that moderators cast by hand, when some intensive trafic is flooding.

I really really appreciate that somewhere on the Internets there is a page able to contain 1k+ comments. Of course it is possible because of super light webpages, because the server can do it anyway, but if the page with all JS animations or round corners becomes too heavy for client device the webmaster is going to hide most of the comments behing spoilers/pagination. It is way more handy to hide not interesting threads instead of constantly unhide hoping there is anything interesting.
In my opinion, Apple Vision Pro is a device that will eventually replace iPhone, iPad and Mac. See Meta’s Orion glasses. That’s the goal of the Vision Pro, not metaverse. It just needs some time, like 5-10 years.
> Lenin eventually took the same view - that chess was distracting him from a higher purpose

The world would have been a better place had he kept playing chess then.
You learn all of these lessons by practicing most other practices/crafts.
Can confirm, have broken GDPR before through logging customer (and customer's customer) PII. It lasted for about a month before we realised and I had to go through the logs 1 by 1 over 3 days to remove all the data.
The papers and talks[1] by Heidi Howard and Richard Mortier, in particular “Paxos vs Raft: Have we reached consensus on distributed consensus?”[2,3] and “Flexible Paxos”[4,5], are what finally made things click for me. A real implementation also needs other stuff[6], though, such as dynamic membership and state machine replication, which I still don’t know how to do.

[1] https://fpaxos.github.io/

[2] https://dl.acm.org/doi/abs/10.1145/3380787.3393681 or https://arxiv.org/abs/2004.05074

[3] https://www.youtube.com/watch?v=0K6kt39wyH0

[4] https://doi.org/10.4230/LIPIcs.OPODIS.2016.25 or https://arxiv.org/abs/1608.06696

[5] https://www.youtube.com/watch?v=r6NG_1HM0lA

[6] https://github.com/heidihoward/distributed-consensus-reading...
correct-horse-battery-staple

Hmm… Not sure if it worked?
Metaverse means the Ready Player One / Horizon Worlds social experience where everyone is an avatar in a shared virtual world all able to interact with each other.

Apple hasn't just not implemented this they've made it impossible for developers to as well. Because only Apple can access the sensors needed to create the 3D avatar and only Apple is allowed access to this avatar i.e. it is restricted to SharePlay with your friends.
The iberians probably have cheap enough labour that they needn't bother, but a high-capital low-labour sol'n is to store rubbish deep enough* that even summer daytime temperatures don't hit their surface peaks: eg https://www.molok.com/benefits-and-principles/

* Fourier apparently worked this problem in relation to wine storage; see also https://topex.ucsd.edu/geodynamics/HW3_2010_presentations/C_...