skysight-inc/HackerNews huggingface dataset:
Anything critical of Israel is usually flagged by users and removed from the front page.
Eartho: Open-Source, Privacy-Focused Alternative to Google Sign-In
Nice! Much more sophisticated than my Raspi Zero version from 7 years ago [1].

[1] https://github.com/Scarysize/transit-pi
What’s not optional about being able to disable it entirely?
I don't think this is right. The process will crash, and the Supervision strategy you are using will determine what happens from there. This is what the BEAM is all about. The thing with NIFs is that they can crash the entire VM if they error.
"Show HN: RISC-V assembly tabletop board game (hack your opponent)" (2023) https://news.ycombinator.com/item?id=37704760
Oh yeah if you like the 3A+ you might even be able to get away with the Zero 2W, it has the same chip. And it's even cheaper.
Yeah this is the next big challenge. There's some ideas what to do, but one step at a time!
They do get software updates. Watch "Stig Aviation" "Stig Shift" series on youtube. He's shown how to do updates in a few of his videos.
Musk financing the purchase of Twitter using Russian oligarchs is an even bigger proof.
I think it is good this post was written, I learned a lot, but it makes me sad that it was prompted by such an obvious trolling attempt.
Two things:

1. Blood brain barrier and CSF should be separate for all but tiny molecules. It's why CT angiograms are able to visualize distinct vessels. So it is pretty hard to directly interact with this sort of thing in vivo

2. A good chunk of the neuro community have been operating under the assumption that some of those mouse model findings are mechanisms in humans too. Since we couldn't easily prove it, people used a bunch of next best tools with fancy imaging that demonstrated it was very likely. On top of furter proof, this sort of study allows us to begin pinpointing exactly how close our next best tools are at estimating in vivo processes without opening up the head.
So you're dismissing Ukrainian soldiers, who have no choice but to defend themselves, their country, and their families from genocide?
I've been using KeePass (mostly through third-party clients) for years and never saw a reason to switch to anything else.

It doesn't sync between devices by default, but I see that as an advantage, you can use a cloud provider like Dropbox, your own server, FTP, Syncthing, whatever you're comfortable with.
> Uh, what? Convention in Go and Rust sees errors be returned

Yes, but that's irrelevant. "Regular" return values don't have this coloring effect, but input have. It's a covariant / contravariant kind of thing. You should really re-read my previous comment if it went over your head.

> Perhaps like you need to propagate email addresses

No, again you get this backwards, you don't need to propagate the email address, errors suppose a specific kind of control flow that is different than non-error values. Again the correct analogy is the input type, not the return type. Understanding this is a prerequisite of understanding the whole concept so you should really take some time thinking about it.

> Oh, I wasn't surprised. It was clear from your first comment that your emotions aren't letting you think straight.

You're projecting your own mindset on me, I've been neither emotional nor aggressive in this entire thread, despite repeated attempt on your side to heat things up.
What about holding down the shift arrow, pressing the down arrow five times, then ctrl-r? In most IDEs replace with an active selection will default to replacing only in the selection.
I exaggerated a lot when saying that it has no predictive power, you're right.

However, it is very much true that different galaxies have different amounts and distributions of dark matter. There are many broad categories, and certain models about galaxy formation try to predict these, but not all galaxies fit these models. This has two effects: for one, for any galaxy with unexpected dynamics, you can fit a dark matter distribution to explain the dynamics (but! This is not unbounded, it still has to match certain other observations). The other effect is actually in favor of a dark matter approach: it means modifying parameters of our theories in a general way has little chance to reproduce the same properties, as each different galaxy is different.
The problem is euro-racism and not much integration of workers and businesses in EU.

A successful french startup means a loss of jobs and wealth to other countries. DACH customers will prefer working with DACH companies, French customers will prefer working with French startups.

If you dont work in english speaking environment (IT) moving countries within EU is practically impossible for people working normal jobs.
Hi Mike! Long time no see.

> simply asserts that a particular key was generated inside a CPU ... There's currently no good way to prove this step

Yes, but there are better and worse ways to do it. Here's how I think about it. I know you know some of this but I'll write it out for other HN readers as well.

Let's start with the supply chain for an SoC's master key. A master key that only uses entropy from an on-die PUF is vulnerable to mistakes and attacks on the chip design as well as the process technology. A master key memory on-die which is provisioned by the fab, or during packaging, or by the eventual buyer of the SoC, is vulnerable to mistakes and attack during that provisioning step.

I think state-of-the-art would be something like:

- an on-die key memory, where the storage is in the vias, using antifuse technology that prevents readout of the bits using x-ray,

- provisioned using multiple entropy source controlled by different supply chains such as (1) an on-die PUF, (2) an on-die TRNG, (3) an off-die TRNG controlled by the eventual buyer,

- provisioned by the eventual buyer and not earlier

As for the cryptographic remote attestation claim itself, such as a TPM Quote, that doesn't have to be only one signature.

As for detectability, discoverability and deterrence, transparency logs makes targeted attacks discoverable. By tlogging all relevant cryptographic claims, including claims related to inventory and provisioning of master keys, an attacker would have to circumvent quite a lot of safeguards to remain undetected.

Finally, if we assume that the attacker is actually at Apple - management, a team, a disgruntled employee, saboteurs employed by competitors - what this type of architecture does is it forces the attacker to make explicit claims that are more easily falsifiable than without such an architecture. And multiple people need to conspire in order for an attack to succeed.
In today's world information overload is a bigger problem than lack of information. It follows that unactionable information is useless.

What is actionable about knowing about the assassination attempt 1-2 hours before others? Did you act differently based on this information? Did you benefit from this sufficiently to weigh up for the time spent on Twitter 20 times a day at the off-chance of catching a breaking newsstory before MSM would?
> that is a nightmare I had totally suppressed until it was just mentioned up above

Sorry! Perhaps I can defuse the situation a little bit by mentioning the hard brown tiles (of shortbread?) with the pink 'custard'. These weren't nauseating, just merely inedible.
> First is the odds of a populist getting elected goes up as GDP growth drops. (Oddly, there is he doesn't graph GDP per capita.)

Over a short timeframe, GDP doesn't generally diverge very much from GDP per capita, and raw GDP numbers are somewhat easier to source, I suppose?
But why is vpn a honeypot? Because they essentially have the ability to track all traffic and you basically have to trust them that they don’t?
> "The most common debate was whether RAG or fine-tuning was a better approach, and long-context worked its way into the conversation when models like Gemini were released. That whole conversation has more or less evaporated in the last year, and we think that’s a good thing. (Interestingly, long context windows specifically have almost completely disappeared from the conversation though we’re not completely sure why.)"

I'm a bit confused by their thinking it's a good thing while being confused about why the subject has "disappeared from the conversation".

Could anyone here shed some light / share an opinion on it/why "long context windows" aren't discussed any more? Did everyone decide they're not useful? Or they're so obviously useful that nobody wastes time discussing them? Or...
The assumption here seems to be that the compiler/analyzer is only able to look at one function at a time. This makes no sense. Safety is a whole-program concern and you should analyze the whole program to check it.

If anything as simple as the following needs lifetime annotations then your proposed solution will not be used by anyone:

const int& f4(std::map<int, int>& map, const int& key) {
return map[key];
}
Its very much experimental so we don't know if there are people for whom this has no impact, all the people in the studies respond so the question is whether your cerebral spinal fluid is being pumped around and flushing your brain and you don't feel an impact or whether you get no cerebral spine fluid movement at all. Someone would need to recreate this experiment with you in the MRI to find out which it is.
> Code forge

I didn't imply it was a weird phrase, it's rather lovely actually. I've just never heard of before so I wanted to ensure that I hadn't misunderstood you.

> since it seems you’ve conservatively only tried one one platform

I've used GitHub, BitBucket, Gitlab, and definitely one or two others at some point. However, it's been predominantly GitHub because that's where all the open source projects I work with are hosted. Except occasionally for when I'm doing work on a private (closed source) repo, in which case I've found most people use BitBucket.
You weren't fooled into believing that Rust = computer security, were you?
That's because it's easily calculable and also somewhat impossible to say in any meaningful sense.

Most weights are released as fp16/bf16 so 2 bytes per weight. So just double the number of parameters = the number of gigabytes of VRAM. Llama 3.1 8B ~= 16GB weights in fp16. At 4bit quantization, it would be half the number of parameters so Llama 3.1 8B ~= 4GB weights.

But this is just weights. The real issue is context and output length: how much data are you feeding in? This is where VRAM can explode, and it's entirely use-case dependent. So for a 128k context model, the range of VRAM usage is huge.

The reality is, if you're not able to quickly estimate the above, you're probably not running local models anyway.
Show HN: Weekly mood checks sucked at current company so I created this
Hey HN !

I am a frontend dev working in a big corp.

Each week we have to fill a "mood check".

Rating my mental health in an awful Excel sheet sucked and nobody wanted to do it.

So I created this project to avoid the meaningless 1-5 rating and instead share emojis, gifs or text.

No more boring ratings.

I hope this will make your weekly (or daily) mood check more exciting.

Max
Apple and Goldman Sachs Fined by the CFPB
I recently bought an Atari Portfolio that was in working order. But it stopped working pretty quickly and now only shows random characters on the screen. Too bad, because I was really looking forward to that easy money.
Replying to myself:

Interesting to see so many comments talking about extensions, and how you don't need to install any.

In vscode I only have the remote development extensions installed, and I think those come "built in" anyway. I just use a vanilla clean vscode install and its an absolute pleasure to use.

If extensions (or lack of) are the main reason given for not using vscode, then for me at least as someone who does not use extensions in vscode and just use it "as is", there seems to be no benefit.

I guess this lack of any actual incremental value to the average typical end user of vscode (i.e. someone who can just use vscode as-is without needing to install loads of plugins and customizations...) is why they are now giving rider away for free.
Populist economics are more about marketing than anything else. Like, see Brexit. The formula is to say "we will do this thing which all economists say will be a disaster, and then everything will be wonderful - anyone who says otherwise is Project Fear". It's, well, kind of amazing that people fall for this sort of thing, but they very much do; it works.
I wondered how accurate is the blood sugar measurement, has someone tested it?
to be fair, a major cause of the pain of looking at the std is because of the naming and being semi-required to use reserved names for implementation details (either double underscore or starting underscore uppercase) and also for keeping backwards compat for older standard versions.
These articles are fantastic for people like me who want a quick, hands-on taste of TLA/TLA+ (or similar languages/technologies) and then move on—while letting the neurons hold onto the lesson to revisit later, even as it continues to sink in slowly.
Not wanting to support the Russian MIC that will be used against your home and family the next time Russia invades is not demonizing people.
Yes, this is entirely true as well. Though US companies face this effect as well. But as a result EU companies get practically no competitive advantage compared to an American company when they want to operate in other EU countries, and if the EU wants to exist this imbalance of power need to be addressed or it will keep snowballing.
One Hundred Annoying Assholes
Yeah it is obviously informed by our local environment, the very definition of parsec is tied to the structure of our solar system.
Wrong link sorry, my clipboard is unpredictable.
The EU regulatory burden is the real culprit, it stifles international reach and makes it much more expensive for small companies.

Not saying all regulations are bad, I like a lot of them, but if you have a company in the EU, especially one in the manufacturing industry then you know.
yes and it's perfect. firefox (with ublock) are really the best experience on android.
Peak population may be coming sooner than we think
> with tolerably close accuracy.

No, speculative decoding has exactly the same accuracy as the target model. It is mathematically identical to greedy decoding.
Yes, It's a joke. Sorry
I love 2048 but the page linked in OP is a disgrace: it filled with ad trackers, and the game itself doesn't even work if they're blocked.
Safari WANT
Ask HN: Solo content creators, how do you motivate yourself?
What are some techniques and pieces of advice you can give to a new content creator to get sh#t done?

Since there is nobody to hold me accountable, it's very easy to fall into procrastination. Sometimes it's disguised as content research, Sometimes I just can't deal with environmental distractions like sound and just say f#ck it
Maybe.

Worth considering that in terms of relative size, Israel has a population of 10 million, Jews in the world number ~14 million.

Whereas the Arab world, which tends to be relatively anti-Israel, numbers ~220 million. And Muslims, which tend to be anti-Israel as well, number 1.2 billion.

So just in terms of number of voices, the natural pro-Israel voices [1] are vastly outnumbered by the natural anti-Israel voices.

Think about how this impacts what you hear, how this impacts the votes in the UN (which is not democratic but votes are by country), how this impacts economic reactions (number of consumers), etc.

[1] This is a sweeping generalization, but it is statistically true that Jews are usually pro-Israel and Arabs and Muslims are usually anti-Israel. With other religions/ethnicities it's more complicated.
> I think you could have toned down the rhetoric a bit, but I do agree that the comments you mentioned aren't great, and did add context to the comment you replied to.

I understand your point but personally I simply cannot accept such xenophobic stupidity, if someone spouts that in public they need to be publicly shamed for it. Unfortunately there are many safe places for this kind of abhorrent behaviour on the internet, I believe this forum shouldn't be one of them.
This didn't work with early LCDs; areas near cursor literally stayed blank for couple fractions of seconds. Wiggling would only make it worse, and negative space created could not be spotted either because UI was mostly blank in the first place(dark or light).
Cassettes are more expensive and worse quality, but significantly more robust in typical use until you put it in a bad device (or hands) that gets the tape out.

I've given cassettes to a 3 year old, and they all still play fine except for that one where the tape got out (cheap player). I don't think CDRs (or commercial CDs for that matter) would sound as nice after the rough treatment they got.
Everything runs great in a war economy till it doesn't.
Clearing the waste sounds like a good thing, I guess. Haven't got time to read the study, but can this have beneficial effects to do while awake?

It certainly feels quite strange after watching the prototype for 8 cycles.
Feel the same as GP here.

How expensive is the COLMAP step to run? I was also really impressed with the speed in the demo (but thinking that the shown training was the only step)

Could you ELI5 what the training is versus what the COLMAP part is?
Making programmers manually annoate every single function is infinitely more costly.
Not at all, not even close. They took the Twitter model and reinvented and reimagined it from 140 character posts to a timeline and brought us the 300 character posts to a timeline.
I will second this. I've been using multiple libraries in our production Elixir app that haven't been updated in the last five years. Elixir itself was declared as "stable" feature-wise years ago. It may be argued that the type system being introduced is not in-keeping with that, but not sure. Jose is a very cautious and diligent "benevolent dictator" and you get a lot of backward compatibility guarantees. Erlang is the same. Compared to what some people might be used to with churn in Node/React etc it is apples and oranges.
It depends on what you want to do. If all you're trying to do is produce an Ed25519 signature you could use something like the Tillitis TKey. It's a product developed by one of my companies. As I've mentioned elsewhere in this thread it is open source hardware in the sense that the schematic, PCB design _and_ hardware design (FPGA configuration) are all open source. Not only that, the FPGA only has about 5000 logic cells. This makes it feasible for an individual to audit the software and the hardware it is running on to a much greater extent than any other system available for purchase. At least I'm not aware of a more open and auditable system than ours.
I'd additionally suggest joining the SWI Prolog board. They are a kind and generous community. Jan Wielemaker -- the principal contributor -- often answers questions directly.

Meanwhile, SWI Prolog is a mature and commercially used open-source Prolog distribution. It has a huge number of libraries which will come in useful for real world applications.
What about a 'dirty' coin or dice, where the dirt falls off during the run?
> Honestly, you can't blame the IDE for you not spending time working out how to do the basic stuff.

Wasn’t the whole premise of JetBrains making different IDEs for different stacks that you don’t need to learn how to do the basic stuff and can transfer your knowledge from <insert dominant IDE for said stack at the moment>?
Is it? I thought you were being serious
Show HN: Generate Mitre ATT&CK from a List of CVE
CVE2CAPEC is a free tool to generate a MITRE ATT&CK Navigator from a list of CVE.

MITRE ATT&CK is a framework that you can use to see the links between multiple security findings (here vulnerabilities from the CVE database). MITRE ATT&CK represents the path an attacker could use on your information system, aka "KillChain".

CVE2CAPEC is built on an open source repo https://github.com/Galeax/CVE2CAPEC/ with JSON data about CVE, CWE, CAPEC, and MITRE ATTACK Techniques, that you can use for your own projects as well.

Feel free to play with it and to open any issue if your need other features!
Notes on the new Claude analysis JavaScript code execution tool
"Room temperature chirality switching and detection in a helimagnetic MnAu2 thin film" (2024) https://www.nature.com/articles/s41467-024-46326-4 :

> Helimagnetic structures, in which the magnetic moments are spirally ordered, host an internal degree of freedom called chirality corresponding to the handedness of the helix. The chirality seems quite robust against disturbances and is therefore promising for next-generation magnetic memory. While the chirality control was recently achieved by the magnetic field sweep with the application of an electric current at low temperature in a conducting helimagnet, problems such as low working temperature and cumbersome control and detection methods have to be solved in practical applications. Here we show chirality switching by electric current pulses at room temperature in a thin-film MnAu2 helimagnetic conductor. Moreover, we have succeeded in detecting the chirality at zero magnetic fields by means of simple transverse resistance measurement utilizing the spin Berry phase in a bilayer device composed of MnAu2 and a spin Hall material Pt. These results may pave the way to helimagnet-based spintronics.
One approach would be a chip design where a remote attestation request issues a hardware interrupt, and then the hardware hashes the contents of memory, more specifically the memory containing the code.
Vietnam and Iraq are two nation states and had populations between 25-30m at the time US waged war in those countries. Gaza is a narrow strip of 139 square miles of land with 2mn people packed together like sardines, who have no sovereignty, have been under an economic blockade since 2007, and whose rulers Hamas have no conventional military to speak of. These two are not comparable, I don't know why people keep pointing to the destruction of Nazi Germany and Japan as the benchmark of whats acceptable in Gaza, its quite insane tbh.
> Take a step back and observe you've erected a mental block for yourself. We've got a false dichotomy here - either we shoot through human shields or we do nothing.

No, you're the one making imaginary false dichotomies. See your last paragraph:

> Do not accept that these people cannot solve these problems without bulldozing through human shields. Do not accept the notion that a powerful military and intelligence apparatus is helpless. They could prosecute this war differently. They have made a choice not to.

You're now making a false dichotomy - Israel can choose to prosecute the war differently, but it doesn't, implying that they are choosing to kill human shields on purpose.

The reality is that you're coming up on the spot with a dozen ways to defeat an insurgency, without taking into account that they are just as smart and just as motivated as you, and planned for years to make them impossible to hit without significant civilian casualties. This is incredibly well documented.

Sure, you can pretend there is always a secret third option - and there sometimes is. And there sometimes isn't. And the more you let militants using civilians as human shields deter you, the more the militants are incentivized to use human shields, so even in a best case scenario, you're kicking the can down the road.

None of this is to say that Israel's actions are perfect or even good - that's a separate argument. But imagining that Israel has a magic way to do what it wants to do and eliminate Hamas - which many people support it doing and agree it has a right to do - imagining there is some magic way this could get done without hurting civilians is, frankly, incorrect.