skysight-inc/HackerNews huggingface dataset:
> how much and what type of punishment and penalty should be levied if laws are broken?

Depends on the impact of the crime the person was convicted of and how likely they are to do it again.

> how far should punishment and penalty go?

For companies who knowingly solicit or publish fake/compensated reviews: disgorgement of profits and refunds without conditions to everyone who asks. Repeated violations come with escalating fines that are a percentage of revenue (not profits) plus bans on company officers holding the position of officer of a publicly traded company for a number of years.
a superset of a superset of a wrapper... interesting
wonder if it's just better to not deal with name constraints and self signed certs. lets encrypt issues certs for domains with dns validation.

so why wouldn't something like this work:

- designate sub domain for private network usage (ie, *.internal.example.dev)

- issue certificates using ACME compatible script/program (ie, lego) for devices (ie, dev1.internal.example.dev, dev2.internal.example.dev)

don't have to deal with adding self signed certs to trust stores on devices. don't have to deal with messiness of name constraints compatibilities across apps. just plain ole TLS
Passkeys were designed with cross-platform and enterprise applications as an afterthought. Professional B2B products aren't integrating it because they have OAuth, regular users aren't using it because they're familiar with passwords and/or already use a password manager, and developers are mostly cautious about the whole thing.

People that want secure and battle-tested cryptography use PGP. Passkeys is kinda like a Google/Apple Trojan Horse of lock-in potential and people are rightfully skeptical of the whole thing.
Would really love your feedback and you can contribute as well
Because not all of it is turned off.
sure. just make sure to pay them what their land is worth... with the lithium below.
Back in the days there was an explosion of MMO web games on Facebook and Google Plus. There was a sci-fi themed game that I played with several colleagues now and then. You would build bases, buy upgrades, weapons, join teams and then do PvP against other players.

One day a colleague of mine found he could use Cheat Engine to scan the memory of the Flash application and change some values in order to get an upper hand and win PvP matches. Turns out the devs neither did nor verified the PvP battles server-side. It was all done client-side and after the battle the client was sending the server info about who won. A fix would require a complete rewrite of the game logic.

We had several weeks of "fun" beating the shit of everyone in our game world. The devs attempted to make some fixes - make it harder to load the flash file, obfuscated (Base64-encoded) the JSON data sent to the client - this was a funny one, since it was irrelevant. In the end, as the author here says, it was no longer fun, so eventually we stopped playing.
having the lynchpin of so much security an easily broken device like a phone is a real problem for me. Phones are ephemeral. They break. One of the top search results I saw when researching Google Password Manager is not being able to get back into the account if their phone is broken or stolen.

That is the same reason I don't like physical passkeys. They can be lost or damaged.

Some passkey managers may have taken this into account but that involves research and the major players want to insert themselves into every conversation about it so it takes extra research to find the provider for you. That may be too difficult for someone with only middling tech skills.
I wonder why they didn't choose a "point update" scheme, like bumping it up to v3.6, for example. I agree, the naming is super confusing.
Please re-read. The FTC defining it as fake means nothing if the FTC does not, in practice, crack down on it regularly.

The FTC can say it's illegal to do X, and all companies can do X with impunity if the FTC, in practice, does not do anything about it when companies do X.
What’s the relevance of this comment? Why does it matter if it’s ai or not? Plenty of people only read titles
The hard part is my kids' online piano lesson embeds youtube videos for the lesson. they have enough other content that I paid for an account for my kids, but the videos direct to youtube not someplace they host which means I can't block any of youtube. This is a common way to do things - my kid's school often sends them to some youtube video for some lesson.

Of course once you finish one youtube video it switches to a "you might want to watch next" which is not the educational content I want them on.
See e.g. https://www.lkhrs.com/blog/2022/07/terminal-latency/

On a slower machine, 100ms latency is achievable, which becomes perceptible (not yet annoying). Output speed can be visibility sluggish if you add too much highlighting and stuff.

I haven't touched iTerm for several years; maybe the modern versions are intrinsically faster, and modern hardware is definitely much.faster, so this could have become imperceptible.
> OpenSSL and its derivatives, widely used across the Internet, have a long history of memory safety vulnerabilities with more being found this year. It's time for the Internet to move away from C-based TLS.

Seems like a cheap shot, considering Rustls's default cryptography is implemented using a fork of OpenSSL's libcrypto.

Of course, there's nothing wrong with writing memory-safe TLS atop C and assembly primitives. But to say that OpenSSL causes memory safety vulnerabilities without being clear that aws-lc-rs uses FFI to call down into AWS-LC, which is based on libcrypto from OpenSSL and BoringSSL seems disingenuous.
Music may speed up recovery from surgery
While I agree with the spirit of this post, it seems a bit misguided on several points.

1) I do not believe AI will ever replace programming as a practice, because people will still need to read/review the code (and no, I don't personally believe LLM's are going to be able to do that themselves in the vast majority of cases)

2) while the "script kiddie" characterization is a bit of an unfair generalization, there is some truth to this. I disagree that using AI to generate code puts you in that realm automatically, but I have seen quite a few cases of this actually happening to give this point some merit.

3) Using AI generated code atrophies your skills no less than using someone's imported library/module/whatever. Yes, I probably couldn't write a really good merge sort in C off the top of my head anymore without thinking through it, but I don't really have to, because a bazillion people before me have solved that problem and created abstractions over it that I can use. It is not inherently bad to use other people's code, the entire software world is built on that principle. In fact, it's an extremely junior mindset (in my view) that all code you use must be written by your own hand.

4) "code being respected" is not really a metric I'd ever go for, and I'm not sure in my career so far I've ever seen someone push a big pull request and not have a bazillion nitpicky comments about it. Respecting other people's code doesn't seem to be very common in the industry. I struggle to think why I personally would even want that. Does it work? Is it readable/maintainable by someone other than me? Is it resilient to edge cases? If all yes, good, that is all I really care about.

5) > If you're someone who has no actual interest in learning to code, and instead see AI as more of a freelancer—telling it stuff like "make a kart racer game," and "that sucks, make it better"—then none of this really applies to you.

I mean, sure. I have very little interest or joy in "coding." I like building, and coding is a means to that end. Again, seems like a very junior mindset. I know people do find an enormous amount of joy in it for the sake of it, I am not one of those people, and that's fine. Usually it drives me to create better abstractions and automation so I don't have to write more code than I want to.
If they're accessible to screen readers they have one. Accessibility is API for apps in disguise.

In this case I doubt they're networked apps so they probably don't have a server API.
Do most residential land parcels include mining rights?
I think you are on to something, people frequently don’t want to grapple with and understand what has been done before, they prefer to just wing it and move forward on their own.
With CBTC, the localization is not done using Wi-Fi; balises and odometry tell the train exactly where it is, and it tells the system that via Wi-Fi or whatever other radio link it has.
I highly recommend this site for that. https://kanji.koohii.com/ which goes along with the book "Remembering the Kanji" by James Heisig (strictly speaking, you don't need the book, but I think it will help understand the idea behind the process). But the stories (mnemonics) on the website are better than the ones in the book, but also let you put in your own stories. You can also vote and choose existing stories, so there are crowd sourced mnemonics that other people have said work for them. One interesting side effect of that is a lot of people decided to use Spider Man whenever there is a "thread" radical, for more memorable stories. I did it around 15 years ago and learned how to write all the 2000+ commonly used kanji in a few months (9 months for me; 2-3 months for a more diligent person). It uses a spaced repetition system (Lietner box method).
I'm not a father at this point in my life but one of my small fears is that the sound of a baby crying would cause me a headache very quickly (based on my experience on airplanes) and that I would struggle to be a more present father because of it.

Has anybody tried a slight volume reduction adjustment with AirPods, or maybe one of those special earplugs that just make things quieter and noticed any difference in their parenting?
Is there case law on how deep land goes? I could imagine that there will be in the near future.
Probably the software which lets you stay in contact with your mom or girlfriend/boyfriend, friends etc. And for many people on Earth that's WhatsApp or whatever else messenger service you use. (yes, I ignore all the layers below that)
IBM's new SWE agents for developers
I was agreeing with you about these points, sorry if that didn't come across, I was rather tired while writing that.

I was also saying that even though the lens of culture, the generally mandatory Shakespeare is overrated.
I power mine off whenever I get a weird, unexpected text. As a security precaution, I also disable text previews on the lock screen. Not sure it does any good, but it can't hurt.
Human height (by gender) very nearly follows a gaussian distribution- because height is determined (hand-wave away complexity) by a sum of many independent random variables. In reality it's not truly gaussian for a number of reasons.
So what? Are Israelis the only ones allowed to store money now?
Hah! No I did my turn behind the wheel from 10-1 so nobody died on my watch. I was in the back.
How the United States Can Win the Battery Race
https://www.youtube.com/watch?v=2z8KdmMlqEY
I live in the Pacific Northwest, it’s always going to rain, but it won’t be much. So I don’t care if my sweatshirt gets a little moist. If it’s raining when I walk out the door, I’ll grab a jacket. Otherwise, meh, I won’t melt if I get caught in 30 minutes of drizzle.

And you live in the desert? I wouldn’t check the forecast, either. If I get wet, I’ll dry within five minutes of the sun coming out.

I’m not claiming anyone is dainty for packing a rain jacket, as I understand work clothes and the like, and I don’t like getting wet, either. But understand that some folks just don’t care all that much if they get caught out.
Hathitrust
> Where is the bunker located? Directly under Al-Sahel Hospital in the heart of Beirut.

Nice pull quote, I can already hear it being used to justify civilian casualties in the future.

I understand that part of the IDF's "job" is to promote their own platform, but blatant propeganda like this makes me so embarrassed to be American. Congratulations on the victory, I'm sure aid workers everywhere feel safer knowing that all of their infrastructure in Gaza is considered a potential target.
Please don't feel obligated to answer if you can't, but why can't you use FOSS libraries like Laravel? Are you not even allowed to use MIT licensed stuff? What industry do you work in?
State of the climate Perilous times on planet Earth
> We are on the brink of an irreversible climate disaster. This is a global emergency beyond any doubt. Much of the very fabric of life on Earth is imperiled. We are stepping into a critical and unpredictable new phase of the climate crisis.
Landlords are just like almost all the programmers reading this page, they want more money. The downstream consequences are secondary concerns at best,especially if it doesn't personally affect them.
Energy Storage is a solved problem
Ctrl-W is fixed in fullscreen, and WebRTC DataChannel provides UDP (both client-server and peer-to-peer). Check my port of Quake III: https://github.com/jdarpinian/ioq3, you can test UDP multiplayer and Ctrl-W live in your browser here: https://thelongestyard.link/
When we wrote simple mathematics on the Pioneer and Voyager probes I think it was under the assumption that anyone or anything else finding them would have co-discovered enough mathematics to recognize it on the plaques. That's the sense in which I use the word "discovered" for much of mathematics. Our definitions will differ from aliens but the foundations will be translatable.
My assessment is more that the average consumer won't have any idea that the FTC is doing this, so I am not real worried about the downsides.
Perhaps, though imo standardized testing is the lesser of two evils.

There's major inequity with the lack of standardized testing.
I have to agree, I really miss the 90's when websites had more of a fun artistic creative and personality feel than templated. I see the use for both, but I miss it :)
Are there not standardized exams in Ontario high school? When I grew up in Alberta standardized exams took up half your grade and those could not be fudged by your teacher.

The exams were made by a small panel of teachers and nobody else knew the exam contents until the day of the exam. Everyone across the province takes the exam on the same day and time. Exams were proctored by people external to the school. Exams are again marked by a panel of teachers outside of your school.

Cheating is nearly impossible outside of someone leaking the exam early.
> Being in the SaaS space makes you believe that everyone ought to have client-server backend APIs etc.

FWIW, looking at it from end-user perspective, it ain't much different than the Windows apps. APIs are not interoperability - they tend to be tightly-controlled channels, access gated by the vendor and provided through contracts.

In a way, it's easier to make an API to a legacy native desktop app than it is to a typical SaaS[0] - the native app gets updated infrequently, and isn't running in an obstinate sandbox. The older the app, the better - it's more likely to rely on OS APIs and practices, designed with collaboration and accessibility in mind. E.g. in Windows land, in many cases you don't need OCR and mouse emulation - you just need to enumerate the window handles, walk the tree structure looking for text or IDs you care about, and send targeted messages to those components.

Unfortunately, desktop apps are headed the same direction web apps are (increasingly often, they are web apps in disguise), so I agree that AI-level RPA is a huge deal.

--

[0] - This is changing a bit in that frameworks seem to be getting complex enough that SaaS vendors often have no clue as to what kind of access they're leaving open to people who know how to press F12 in their browsers and how to call cURL. I'm not talking bespoke APIs backend team wrote, but standard ones built into middleware, that fell beyond dev team's "abstraction horizon". GraphQL is a notable example.
Seeing as how the internet, the world wide web, and the GNU software ecosystem had all existed prior to the development of the Linux kernel, I can easily imagine the internet existing without the Linux kernel.

As you point out, BSD had existed since 1978.

Even so, you can't get the Linux kernel without a C compiler - which gets my vote! :)
Since automated coding systems can revise code and show the results much quicker than most human engineers can, writing detailed specs could be less necessary.
StabilityAI releases Stable Diffusion 3.5
https://www.nolo.com/legal-encyclopedia/who-owns-the-mineral...

> Mineral rights are automatically included as a part of the land in a property conveyance, unless and until the ownership gets separated at some point by an owner/seller.

> Since sellers of land can convey only property that they own, each sale of the land after the minerals are separated automatically includes only the land. Deeds to the land made after the first separation of the minerals will not refer to the fact that the mineral rights are not included.

> in most cases, you cannot determine whether you own the rights to the minerals under your land just by looking at your deed. Owners are sometimes surprised to find out someone else owns the rights to the minerals under their land

> U.S. laws regulating mining and mineral rights typically prohibit mineral owners from damaging or interfering with the use of any homes or other improvements on the land when extracting minerals. As a result, mineral owners do not typically attempt mineral extraction in highly populated areas. This means that if you live in a city, or an area with many houses on small plots of land, you probably won't need to worry about whether or not you own any minerals that might be under you
Yes, mineral rights are well defined in US real property law.
Medium doesn't "hurt your credibility" nearly as much as revealing that one's arsenal of litmus tests is suffering from such a paucity of real knowledge that one bases it on the web design, but Medium has a lot of annoying popups. A lot of people like Substack better and they have a paid subscriber thing that works well.

(realistically speaking, experts tend to know less about the blog hosting ecosystem the more they know about their domain)
on my phone, I have play store firewalled and only allow it out when I want updates/install something.

if I could be bothered with the effort, this is the kind of petty I would engage in.
True as it may be, it's not the reason my machine is on the Internet.
There's an enormous difference between "sometimes a sentence is a little too general, or too specific" and making 12 serious factual errors in 86 words. My comment is 1944 words, at least according to Emacs; if it had the same error density, it would have not just several errors (though I note you were unable to find any!) but 271 serious ones.

You did make one error in your comment, though; when you said "Nitpicking a single sentence", you implied that my comment only dissected the errors in a single sentence, rather than an entire paragraph.

When text is carefully drafted by competent people, it is impossible to "nitpick" it to the degree I just did. It is very rare to find something either as error-filled or as badly written as this paragraph. The fact that the document is hundreds of pages long makes the situation far worse, not better; all of those hundreds of pages seem to be of the same appalling quality.
To your first point; is progressive taxation fair or equal? Aren’t the high income earners being treated unfairly without getting anything in return for it?

To your second point; lifetime seems fair to me. Should college kids’ votes count as much as someone’s with more life experience? It doesn’t seem intuitive to me.

I get the plain “all humans are created equal” argument from an ethical perspective, but I don’t think this goes quite that deep. I would see this more as a tuning parameter for the efficiency of this system in the same way that criminal sentencing or any concensus based model we have where certain people have more “say” in it.

In a Christian sense, which you might find jarring, I’d regard the “all humans are equal” part a rule made by God, and “some humans should be given more decision power” a rule made by us that in no way contradicts God’s ultimate will.
Basically promising you’re not cheating and your answers are your own.
> it can be hard to discuss education in our societies

I found it quite ironical how the whole topic has been hijacked into this side discussion. For the record, Ramanujan is NOT a product of the Indian education system. In fact, that system was quite cruel & off-putting to him. He was a self-taught math prodigy. Apart from the well known 2 big biopics, there are numerous TV soaps telecasted in India in various languages that regularly emphasize this point. He taught himself mostly using Inequalities by GH Hardy, & several other books, all of which are freely available right now at the click of a button. Nobody is stopping anybody from studying math, and education or the lack of it has nothing to do with any of this.
Things in geo orbit aren't perfectly stable, since the Earth's gravitational field is not perfectly uniform. Without active station keeping things tend to gather at two particular longitudes over the equator. So eventually that debris will probably end up at those points.
Or the universe is so massive that a human mind cannot ever comprehend the magnitude of it all, so in order to cope, a human mind must use a definition it feels comfortable with.
I'm not saying that 37 out of 50 is good. I'm saying that 47 out of 50 is bad. Your data source doesn't refute the OPs argument that Arkansas is not a great place to live -- it actually supports the OP.
Are we getting to the critical point where we declassify a bunch of stuff as AI? Used to be expert systems were considered AI. Now anything-not-an-LLM is going to stop being AI?
There much have been some misunderstanding, maybe I didn't word what I said very well; I agree with you! I don't really think anyone should be disenfranchised. That's what I meant by "Who am I to say that they shouldn’t have a say in how things are run?"

Were you responding to the parent comment?
> Dan Clancy, the Google engineering lead on the project who helped design the settlement, thinks that it was a particular brand of objector—not Google’s competitors but “sympathetic entities” you’d think would be in favor of it, like library enthusiasts, academic authors, and so on—that ultimately flipped the DOJ.

I was at Google in 2009 on a team adjacent to Dan Clancy when he was most excited about the Authors’ Guild negotiations to publish orphan works and create a portal to pay copyright holders who signed up, and I recall that one opponent that he was frustrated at was Brewster Kahle of the Internet Archive, who filed a jealous amicus brief (https://docs.justia.com/cases/federal/district-courts/new-yo...) complaining that the Authors’ Guild settlement would not grant him access to publishing orphan works too. In my opinion Kahle was wrong; the existence of one orphan works clearinghouse would have encouraged Congress to grant more libraries access instead of doing nothing which is what actually happened in the 15 year since then. Instead of one company selling out-of-print but in-copyright books, or multiple organizations, no one is allowed to sell them today.

Since then, of course, Brewster Kahle launched an e-library of copyrighted books without legal authorization anyway which will probably be the death of the current organization that runs the Internet Archive. Tragic all around.
Immigration and abortion are favored as political wedge issues because the targets of the policy don't get a say in elections, and unlike veterans, can't speak out against the politicians who use them as political props.
Show HN: All AI video generation models at one place