skysight-inc/HackerNews huggingface dataset:
> before we had technology

There wasn't a time "before we had technology". Best to avoid that
line of thinking if you want to escape the determinist (Veblem) trap
and end up like Kaczynski.

Postman is an author we enjoy but seldom acknowledge the wider genre
into which he fits. It's called "tech critique".

You can study it through the ages, comparing the outlooks and
influences of Einstein, Ellul, Freud, Fromm, Heidegger, Illich,
Kaczynski, Marcuse, Mumford, Nietzsche, and Postman, as well as sci-fi
writers like Wells, Forster, Clarke, Gibson, Le Guin, Dick...It makes
a very good companion to a study of the philosophy of science.

Some takeaways (at least ones that stick in my mind):

Technology is inseparable from the human condition, There are no
primitivist escapes, noble savages or gardens of Walden.

By the same token there is not and won't ever be any golden age of
Utopian technology.

Technology most closely resembles a "drug" in all its manifest
functions.

Technology comes with an accumulative maintenance cost.

It is monotonic/directional. There's no easy way back and we can't
uninvent stuff.

Minimising the _harms_ of technology while maximising the benefits and
maintaining human dignity amidst it is the best we can do.

Even if initially excited by new developments all people are
ultimately ambivalent about technology. They fear it, use it
begrudgingly and resent their dependency on it. Iron bridges and steam
locomotives raised the same questions as GPS and iPhones do today.

Many people romanticise and worship technology. It is a secular God.

If we "love" it, it's the sick love of an addict or the sadomasochistic
power glee (tech "dealers" like Ellison, Zuck, and Musk)

A tiny few (that's us) enjoy a curious fascination that makes tech an
"end in itself". Those people get used to create a supply for the
dealers and addicts.

Anyway you gotta love Postman, if only for exquisite use of
"centrifugal bumblepuppy". What he describes in this passage is really
the soporific control/domination effects of technology in the hands of
tyrants/dealers who delight in the subjugation of attention - which I
think is made best by Alexis de Tocqueville in Democracy in America.
Given that the vast majority of people go to work to earn money for businesses that exist either to exploit natural resources or appreciate in value in the eyes of an economic system that prioritizes increasing capital valuations above all else, including human dignity, long-term survival and the life of other species, I would say we're already there.

Talking about a dystopian future is a convenient way to assuade our sense of dissonance that the present is most certainly not that.

Case in point, nobody wants to rid the Earth of insects, fill the oceans with plastic or plough microplastics into every orifice, but we are all complicit and can't seem to gather ourselves to fix it.
Just a guess but I think Apple was just scrambling to have a foot in the door and is likely working on gradually integrating their own Apple Intelligence services as replacements.
With abundance comes diminishing relative value in the product. In the end that skill and product would be seen as worth less by the market. The value of doing those ideas would drop long term to the point where it still isn't worth doing most of them, at least not for profit.
As far as I know any WP instance is able to upload plugins/themes.
As someone who struggles with ADHD, this app seems like a lifesaver. I can't wait to give it a try—thank you for creating something so thoughtful!
Now, can someone help explain to me how I can ask LibGen (or Google, or my ISP) to refund me the thousands of dollars I’ve lost in royalties on the 7 books of mine they have up there?

https://libgen.is/search.php?req=Rex+van+der+spuy&lg_topic=l...

Google gave me link, searching my name turned them up.
> a senior employee told Krebs on Security back then that the incident involved up to 600 million passwords. Some of the passwords had been stored in easily readable format in the company's servers since 2012. They were also reportedly searchable by over 20,000 Facebook employees

I thought this was gonna be some limited faux pas... but no. That's terrible.
Context: This is for a 2019 data breach on a system that was created in 2012. The GDPR was instated in 2018 (has it really been that long? Wow feels like yesterday) and Meta failed to disclose the 2019 data breach properly under GDPR, hence the fine.
Storm-0501: Ransomware attacks expanding to hybrid cloud environments
They seem very similar to me except that

1) I can see the Rust has error handling and I can't tell whether the C++ just doesn't bother or whether there is hidden control flow, since both these very different outcomes are usual in C++. My impression of simdjson is that it just doesn't care - handling errors wouldn't be "ridiculously fast".

2) "Filenames are text" nonsense in the C++. In a sense this is related to error handling, but it's not an error on the popular systems for your files to have names which aren't text, the OS is too lazy to require that.

Mainly, when I look at the C++ I see bug opportunities, some of which existed in the Python and some did not, and I imagine the expenditure of time to hunt down those bugs and fix them (or work around them) compared to the tiny saving of using this code.
A similar approach (effectively node based, generative music)

https://nodalmusic.com/

I used to play with an earlier version of Nodal, great for someone that has an ear for music but no formal training. Also, Brian Eno.
This is a very imaginative use of the word “breach”, according to the details reported in the article at least. Internal staff (inadvertently) had access to users plaintext passwords. The article doesn’t mention any use of these credentials in a breach though, and doesn’t make any refutation of Meta’s claim that this never occurred. Internal staff having access to my data is what I would normally expect from a service like the ones Meta operates. It’s a bad mistake to make, but contriving these circumstances into being a “breach” is a bit more mask-off than I’m used to the Data Protection agencies being. Hope Ireland makes good use of its $102M.
They are extremely repairable due to low level of integration and commodity components. And many ICs (outside DRAM or PROM) can potentially last for centuries.
The fundy basin reveals many interesting hyrological phenominon,large standing waves(the dorey rippes),tidal bores(wall of water rushing inland up bays and rivers,which ((not kidding))
black ducks surf to get to the high tide and then
forage all the way back out on the outgoing tide)
also whirl pools form,each tide at the tip of cape split
its a monsterous amount of water/mass
not sure of the exact numbers,but the earths crust
must flex a bit with the fundy tide
then there is the permanent circum polar wave that circles antartica,100 meters plus
More incentive to watch the 20min episode if you ever get the opportunity haha
> Do you have any references for this?

Oh yea. https://ntrs.nasa.gov/citations/20090001334

> And the parallels are quite obvious when you look at it.

The insane level of detail and strategy when writing the shuttle software is something to behold. The testing laboratory SAIL was a full scale orbiter that actually flew test missions. "Day of use I-Loads" are one of my favorite things. They couldn't change the software load, but they could move some constants around before launch, really useful for feeding wind data into the shuttle before it launched.
You might enjoy this piece by Charles Simic, which is a touchstone of mine:

"I’m having trouble deciding whether I understand the world better now that I’m in my seventies than I did when I was younger, or whether I’m becoming more and more clueless every day. The truth is somewhere in between, I suspect, but that doesn’t make me rest any easier at night. Like others growing old, I had expected that after everything I had lived through and learned in my life, I would attain a state of Olympian calm and would regard the news of the day with amusement, like a clip from a bad old movie I had seen far too many times. It hasn’t happened to me yet. My late father, in the final year of his life, claimed that he finally found that long-sought serenity by no longer reading the papers and watching television. Even then, and I was thirty years younger than he, I knew what he meant. What devotees of sadomasochism do to their bodies is nothing compared to the torments that those addicted to the news and political commentary inflict on their minds almost every hour of the day."

https://archive.is/0GZmW

(I haven't managed to stop reading the news unfortunately...)
Thanks for sharing this @westurner
This seems to be a field perfect for theorem proving, I think I've seen some work by Kleppmann using Isabelle.

I once tried to understand the Yjs paper, but I came to the conclusion that their proof is just wrong! They do some impressively looking logical reasoning in the paper, but they define some order in terms of itself, so they don't really show anything, if I remember correctly. If you tried that in Isabelle, it would stop you already at the very start of all that nonsense.
Yep, my mistake. However, I disagree that HN is the libertarian site.
So Nvidia and Microsoft are not big tech companies?

Don't mistake Apple's actions as some industry sentiment. They've always done things different. Time will tell who was right.
It's my opinion that "thinking locally and acting locally" is a strategy better reserved for old age.
Consuming an insane amount of energy if the specs are correct.
It’s worth mentioning that there is a bit more overhead in using multiple processes as opposed to multiple threads, in addition to it being more difficult to share data.

There’s probably a whole generation of programmers (if not two) who don’t know the feeling of shooting yourself in the foot with multithreading. You spend a month on a prototype, then some more to hack it all together for semi-real world situations, polish the edges, etc. And then it falls flat day 1 due to unexpected races. Not a bad thing on itself, transferrable experience is always valuable. And don’t worry, this one is. Enough ecos where it’s not “difficult to share data”.
Okay, I think we’re almost on the same page here. Tl;dr: I agree that giving access to files one by one is not a right scope for iA, but I think giving access to all files is much much worse. It shouldn’t be all or nothing.

> Imagine if VS Code could only edit projects in a folder it created to manage files?

This would indeed be untenable! And of course granting access to individual files doesn’t work for VS Code too. If you grant access to a whole folder at a time though, it’s much more reasonable: it will be able to access the project I’m working on, but not my /etc/passwd (unless I explicitly open it of course). This is how it works on desktop Linux with Flatpak for example, as another poster mentioned around here. I have no idea if Google Drive can do that, but it should.

> If I download a new editor, I expect it to be able to edit any and all of the files without fuss, whether they're on my local disk, on S3, or on Google Drive.

I would expect that as well, but I also would like to choose what it should have access to.

It’s reasonable to expect VS Code to be able to move files around in your project, for which it needs full access to the project folder. It’s also reasonable to be able to jump to a definition somewhere in /usr/include. But it shouldn’t be able to arbitrarily access all your stuff unless you let it.

Same thing with iA Writer. If I’m working on a book and have one chapter per file, it should have access to the whole folder to be able to show the list of chapters, create new ones etc. It shouldn’t have access to my family photos archive or the tax return I’m preparing or something.

Based on what I gather from iA’s website, giving access on a folder basis should be the perfect solution for them. I have no idea if Google supports this, and if it doesn’t then I agree they should drop the support altogether: giving access file by file doesn’t work, and having one big “iA Writings” folder is just janky.

> does little to actually improve the security of the app

Technically, maybe. It does help a lot in case the app actually gets hacked though, or if the developers go rough and decide to mine your data or something.
Given the layoffs and the trajectory spiral I wouldn't be holding my breath for this.
Why do you hate lua and openresty so much? Do you have bad experiences with them?
End the line: The last Sun Sparc Workstation [video]
GDPR fine is 4% of global turnover from previous fiscal year. 102m seems low to me.
Sounds like some LLM hallucination to me.

EDIT: Right after that I found another HN comment [0] by the same user (through a google search!)!

[-1] Interesting IEEE rfc email thread on related to preamble puncturing

misc (I have not yet read these through beyond the abstracts):
A preprint in ArXiV related to the proposed spec [1]
A paper in IEEE Xplore on 802.11bf [2]
NIST publication on 802.11bf [3] (basically [2] but on NIST)

[-1] https://www.ieee802.org/11/email/stds-802-11-tgbe/msg00711.h...
[0] https://news.ycombinator.com/item?id=38811036
[1] https://arxiv.org/pdf/2207.04859
[2] https://ieeexplore.ieee.org/document/10467185
[3] https://www.nist.gov/publications/ieee-80211bf-enabling-wide...
> S3-like object storage

They are not web programmers maybe not even in devops. So It is easier to just buy basic shared hosting wit button 'install wordpress' in hosting-admin.

Statically generated site would be better (especially for readers of the site) but they still need some CMS.
Yup!
I'm blogging on https://dawidmakowski.com/
It's linked to my personal consulting website (https://a2zweb.co) where I provide CTO-as-a-Service. I help build startups and audit tech teams usually.
I am able to get some good leads from time to time as long as I have customer testimonials updated.
> Apple reportedly believes that the exposure the iOS 18 integration is giving OpenAI is “of equal or greater value” than cash.

So it's not just gig workers who get offered exposure to pay the bills.
It’s a lot worse than marketing BS. It’s deliberate misdirection. Essentially a con.
Bit of an aside, it was fun to notice the Australian references in the comic. Surprises me still to see something Australian on the "regular" internet.
Again, that it sounds ridiculous rooted in the conventional reality of today, doesn’t necessarily mean he’s wrong in his vision.

Again, the Russians laughed at Musk. The legacy space companies didn’t produce reusable boosters when they clearly could’ve, and people laughed at the idea until it was working. Etc.

(I’m not sure what relevance the NASA comment has; of course small underfunded startups need money to realise their goals? SpaceX needed NASA’s money to develop various projects faster, and NASA needed SpaceX to a) reduce launch costs and b) reduce their reliance on Russia for human launches.)
Back to my original point; slop makes the good stuff stand out
I really don't get how companies so large do stupid things like this.

Hashing and salting passwords isn't some newly introduced advanced rocket science, it's literally a 101-level "obvious" thing. How can a huge corporation like Meta/Facebook can do this is beyond my imagination.
Wow, you seem to be pretty invested in this topic. Care to clarify?
Thats the maximal fine I think, the judges can set the amount depending on the severity of the violation.
A model of a model of X is also a model of X. It absolutely is a very simple model of human walking. You’re just using „model“ in a very narrow sense that excludes many things that are commonly called models.
Honest question: How was it discovered?

Was it reported by a pentester? (ex-)employee? Facebook itself?
How do we know that it goes back to 2012?

I know in the public sector you have to disclose such things to ICO, but does that also apply to private companies? Who is going to hold them accountable?
In many senses, internal staff having access to plaintext passwords is a breach.
as all programming comes down to pointer twiddling, either under or over the hood, is any language turing complete?
Except nowadays vcpkg and conan exist, and I also don't have to wait for the world to be built for my tiny app, thanks to the ecosystem support for binary libraries.
Can't wait to give them access to everything I do on the daily by wearing their AR glasses.
What I don’t like about this argument is that this was originally pitched in the initial video as “All you have to do is release the server you already have, you don’t have to do any extra work”.

And I took that to mean that you just have to provide the server binaries and no support for them.

And fair enough, as a developer of a large online game myself, could get behind that.

But the moment this extends to needing to find solutions for people to be able to actually run it, I would withdraw my support.
While that may be a kind view, practically it is rarely a useful one. At least for the person holding it.

Especially when power, violence, money, or sex are involved.
Oh, I see. I completely understand no JS, I just want the freedom to use HTML & CSS to add some dimensionality (eg floats, sidebars) and images (eg captions) to plain text.
There is this assumption in these discussions that anything consuming significant CPU must necessarily have a simple interface that’s easy to reduce to a C-level ABI, like calling an ML library on an image, a numpy function on two big matrices or some encryption function. Therefore it is trivial to just move these to native code with an easy, narrow interface.

This assumption is incorrect. There are plenty of problems that consist entirely of business logic manipulating large and complex object graphs. “Just rewrite the hot function in rust, bro” and “just import multiprocessing, bro” are functionally identical to rewriting most of the application for these.

The performance work of the last few years, free threading and JIT are very valuable for these. All the rest is already written in C.
> are we allowed to read/write to external storage?

They did restrict the scope of their article to the standard only:

"This is an argument about the specification of C, not any particular implementation."

I don't think the spec has any representation of external storage in it.
Modern C++, alongside vcpkg and conan, make this relatively easy.

Also don't forget to enable hardened runtime flags, for having those bounds checks. Available in any sensible compiler.

As for raw C, if that is your jam, better use Go instead. Even the language creators moved on.
That would put a damper on things.

Though the pre-2018 situation was that personal (that is, not intermediated by a company) gambling was legal, which provided an out.

Again: I'm positing the argument, I'm not advocating for it. And it does appear to be counterfactual.
Apple is the most brand-aware IT company in the world. It is likely they simply recognized the synergy of partnering with the creators of “ChatGPT” that holds the mind space equivalently to “googling” but for AI among their customers.
Google is a major investor in Anthropic.

Musk is too much of a loose cannon for Apple so Grok is out.

Mistral is in the EU which doesn't have a stable regulatory regime.

Leaving OpenAI which at least has the full support of Microsoft i.e. it will always have access to the best compute resources and endless money.
The reason Israel attacks Hezbollah (not Lebanon, but Hezbollah), is that Hezbollah, unprovoked by Israel, started firing rockets on Israeli northern cities since October 8, 2023. They have been firing rockets ever since, almost on a daily manner, which caused tens of thousands of Israeli civilians to evacuate their homes. They live without home for almost a year now.

Also, Hezbollah has plans to invade Israel, just like Hamas did on October 7, 2023.

Israel's goals are to stop Hezbollah from firing rockets and push it north into Lebanon and away from its borders, so Hezbollah cannot operate on its goal to invade Israel.
That's the maximal fine (that was never used as far as I know, at least on a large company). In this case the fine is understandably much smaller, since the privacy incident is not critical, and Facebook reported the problem to the authorities on its own.
It's unbelievable how little most developers care about security.

At this point I've given up on educating them since it went nowhere, instead I'm locking down permissions to things like firewall and secret vault so random people don't fuck it up.
2 of the linked references have full implementations of very similar things, with some shared references.

Is there something here which godot is enabling which wasn't previously possible? It seems to be entirely GPU compute workload with particles which are available as part of all mature rendering engines
Posse: Reclaiming social media in a fragmented world
OpenAI's Orion (GPT 5/Next) is partially trained on synthetic data generated with a large version of o1. Which means if that works the data scarcity issue is more or less solved.
Do you evaluate JS using a web worker in the browser? https://github.com/quadratichq/quadratic/blob/qa/quadratic-c...

How effective is this as a sandbox, are there any know (security) tradeoffs? I was using QuickJS for my previous projects but I'm wondering if yours is a better solution (it's certainly more performant).
The usual way this happens is accidentally logging passwords. Or even other cases where passwords happen to be included in something else. It can happen more easily than you think.

Like for example, if you collect server side crash dumps, are you really taking care that there is no sensitive information sitting in the memory image stored in them?
Even many microcontrollers have multiple cores nowadays. It’s not the norm just yet, though.
I absolutely loathe those “frameworks“ with billion files in billion directories. If can't start with single file and build upon it - it is complete trash. Android projects with Gradle come to mind.
Particularly noteworthy for me (as someone doing Elixir & ML at the moment) is the 100k$ attributed to Elixir Nx:

> Building a cutting-edge distributed ML framework with Elixir from Nx – Creating a scalable, distributed machine learning framework that outperforms current solutions, the Nx project leverages Elixir’s unique strengths in multitasking and fault-tolerance. By automatically spreading tasks across multiple devices, Nx aims to deliver a more scalable and efficient solution.

And lots of other interesting projects, including https://github.com/enjalot/latent-scope, https://github.com/Intelligent-Instruments-Lab/tolvera, https://ente.io/, https://github.com/VikParuchuri/marker ...
Oo.. :( But AI is the reality now!!
Go Singleflight Melts in Your Code, Not in Your DB
IQ score rises (Flynn effect) are most likely spurious and do not reflect any increase in actual on-the-spot problem-solving ability.

IQ scores were never intended to be used to compare across cohorts. To do so is invalid.
Shadertoy also has nice ones https://www.shadertoy.com/view/Ms2SD1
Their managers don't incentivize them spending time on it, and their PM will fight security tickets they don't understand the need for. Most devs have little autonomy at orgs today and operate under a strict hierarchy of command at the ticket level.
Yeah and I think I believed in aspects of this line of logic when my state legalized sportsbooks. I believe in harm reduction in most regards. What happened though, in my opinion, is an increase in access wound up creating an increase in net harm. Just my assessment. Timing is worth noting, this was rolled out to users initially during quarantine times.