skysight-inc/HackerNews huggingface dataset:
>"They saw an interesting phenomenon in the material they were using, a polymer filament doped with copper nanoparticles.

If they passed a

large amount of electric current into the material, it would exhibit a huge spike in resistance

but would return to its original level shortly after the current flow stopped."

This is interesting -- large amounts of current being associated with increased resistance...

I have never seen or read about something like that with respect to other electronic components or systems.

It would be an interesting experiment to see if this effect could be simulated, and if so, under what conditions, in non-nanoparticle standard regular-sized electrical components...

I'm guessing (but not knowing!) that you'd you'd need a very high amount of current (like something from a car battery), but at a very low voltage, like maybe 0.1 or 0.01 volts (or less), and maybe like a very thin long wire made of some mostly-conducitive material, and then maybe something at some scale or low voltage if the experimenter was lucky...

Anyway, large current associated with increased resistance... I've never heard of that one before, except I suppose if the current heats the electrical path so much that it destroys it... which would be different for different materials, voltages, cross-section of conductors, temperatures, etc., etc.

I'd assume that wouldn't happen at the nanoscale and/or in a switching semiconductor... but perhaps I might be wrong on some level...
> Yeah, the YouTube algorithm kind of does this, but you unfortunately have no real control over it.

Wouldn't that argument hold true even if it was implemented here?
I'm in the same boats, I have an app on play store but that dev verification thing will cost me around 90 euros where its not making me money even though its commercially driven still, I just can't be bothered to spend extra money for Google for their company verification requirements

(ps: I tried to get support about it and was willing to provide the company info just to keep getting on the platform, but the only answers that I got were "you must use this (non free) system to have your company verified" and then I tacitly said "screw this")
Fair, I can see why it looks like I confused them. I was solely using her an example; my point is that grammarly hasn’t caused her knowledge of grammar to get worse, only better. It has taught her over time.
>Anyone who's been around AI generated content for more than five minutes can tell you what's legitimate and what isn't.

to some degree of accuracy.
It seems like these are produced by David Lynch's son and not David Lynch himself?
What we know about the layoffs at Meta
Nobody is being rewarded when I don't connect the subsidised "smart" TV to the internet.

There are other kinds of very cheap TVs with forced ads and tracking that require an internet connection to function at all, but those are a whole other story entierly, and we aren't talking about those here.
In Germany, you have to do the equivalent of a master's degree (and then a bunch) to teach in normal public schools
I like Ubuntu but I feel like Linux for the everyday user is still far away. Like on laptops battery life and sleep behavior is still not great. Does Canonical maintain a list of things they want to fix that would make it a true viable OS for users who aren’t enthusiasts?
Nice! I used a similar site, termbin.com, for some time now, though it uses netcat to upload files. Definitely useful!
They rely too much on Professor Corbato's account:

Corbato confidently gives the reason but A) doesn't claim to have coined the term, and may not know what the coiner's thinking was; B) at the time may have had a different understanding than some other members of the group - it's not the sort of thing that people have a meeting about; and C) is writing about something that happened decades ago.

Corbato then cites Take Our Word's prior description - people who weren't present when the word was coined, and who openly say they have no idea: "This is so reminiscent of Maxwell's daemon watching his molecules that we can only assume that whoever dubbed these "system processes" had Maxwell's daemon in mind. Unfortunately, we have found no hard evidence to support this."

Then Take Our Word cites Corbato, creating a loop. The only evidence in that loop is Corbato's flawed (being human), prompted (by reading Take Our Word) memory of possibly limited knowledge from decades ago.
Yup, I have a /56 delegated. Now if I only had something at home that needs to be world accessible...
I don't think that this is `with` (which is really a series of nested `case` statements with exactly two paths per case).

case is_email_address?(email) do
true ->
case String.length(code) == 6 do
true ->
case EmailConfirmations.get_email_confirmation(email) do
%EmailConfirmation{} ->
case EmailAddresses.get_email_address(email) do
nil ->
case Users.create_user(data) do
{:ok, user} ->
case EmailAddresses.create_email_address(user, email) do
{:ok, email_address} ->
# success block
fail -> fail
end
fail -> fail
end
fail -> fail
end
fail -> fail
end
fail -> fail
end
fail ->
case fail do
# else conditions
end
end

Elixir will be able to do something closer to `case` exhaustiveness checking with the gradual typing being built, and dialyzer can sort of perform exhaustiveness checking as long as your type specs are written well enough. (I’ve observed two things about `with` statements in Elixir: they should have more than one condition clause, or they should be written as `case` statements; they should not have an `else` clause, as that suggests that error path normalization isn't happening at the right level.)

In many ways what's described is much closer to `cond`, except that `cond` is completely open ended except for the required `true` clause, which means that there is absolutely no exhaustiveness checking.

I'll admit that I mostly skimmed this and I don't use ML or Haskell, but I couldn't see what benefit this provides over Elixir's `case` or Rust's `match` (recognizing that the former can't do exhaustiveness checking as yet, but `match` absolutely can).
This is similar to what we had, a few years before Google, at a serious software engineering company.

Technician I, Technician II, Engineer I, Engineer II, Sr. Engineer.

If you made it to Sr. Engineer, that was as high as most anyone could go. People at that point were focused on the work, not on ladder-climbing, AFAIK.

Though there were maybe a couple people who I knew were Principal Engineers. One was brought into the advanced R&D group at that level, as a rare domain expert and methodology expert, and would be key to whether the complex next-gen flagship product did what customers needed. (Incidentally, that person was also literally a Navy SEAL, which is another label obtained only rarely.)
I've bar raised a ton of them. You do end up figuring out what actions by what operator caused what issues or didn't work well, but that's to diagnose what controls/processes/tools/metrics were missing. I always removed the actual people's name as part of the bar raising, well before publishing, usually before any manager sees it. Instead used Oncall 1, or Oncall for X team, Manager for X team. And that's mainly for the timeline.

As a sibling said you were likely in a bad or or one that was using COEs punatively.
This is like posting "Landing on Mars" and all you did was catch a reusable rocket.
I know it under Misheard lyrics.
Right, I thought this was just an arms race for tools that can generate output to fool other tools.
The renewable power infrastructure for those datacenters will still exist.

People will be able to buy those used GPUs cheap and run small local LLMs perhaps. A 10 year old computer today won't do state of the art games or run models, but is entirely acceptable for moderate computing use.
My anecdote with an ipv6-only home network (linux router):

Doing NAT64 runs into MTU issues and the behavior I observed is chrome would resend the request but only after 30s, firefox and other programs entirely failed to resend requests that were rejected due to MTU issues. Once I got the rejection, retrying in firefox or whatever would work though, so it seems like the path MTU was cached somewhere at the OS level. Reducing MTU manually seemed to fix the problem, but isn't that supposed to be automatic? Why didn't the kernel do the resends?

Old iPads, Androids just don't work, I'm not sure why. My iPhone 11 would connect to the network but declare itself disconnected after 24h or so (some lease or dns expiry which it doesn't renew?).

Steam hardcodes an ipv4 address for login... !! I'm not sure what to make of that, and the fact that it was reported around 10 years ago and they still haven't fixed it. Is it even using TLS?

I needed to make docker dev containers use host networking, because otherwise they'd get ipv4 addresses and try to do ipv4 traffic which couldn't be tunneled by default over ipv6.

Other than that it basically worked.

There's fundamentally only two different ways ipv6 can be configured from an ISP: SLAAC with no delegation, so you essentially share a network with other customers, or DHCPv6 delegation. Unlike IPv4 which has a million different offerings: PPPoE, DSLite, MAP-E, DHCP, etc etc and many of those aren't supported by linux.

I signed up with an ISP that claimed to support NAT64 (Biglobe) but they only support it on their SLAAC ipv6 + PPPoE ipv4 setup, not on their DHCPv6 PD + MAP-E setup, so I had to switch back to SLAAC. At this point in time the NAT64 support seems to be have been a lie... But anyways, to control my network DNS settings despite that I made a program to rewrite RA (and various other packets) with my own DNS server information.
I'd like to learn more about the AWS incident, but when I google "us-east1 intern" I get this comment. Do you have a link?
See also: afferbeck lauder, an Australian term meaning to use lexical comparison when sorting a list of items.

https://en.m.wikipedia.org/wiki/Afferbeck_Lauder
We've had this discussion many times before and the consensus was always the same: that at small companies / startups they use titles as a way to make people accept low-ball offers. Where the titles there are mostly meaningless. But at larger companies the titles actually do have meaning because the denote responsibility and pay scale.
https://archive.is/llDDT
Not affilliated, but if you want a large selection of _really_ good text to speech voices, check out eleven labs. Only problem is it's not cheap :/
I doubt this was ever a thing at all. I think the author falls to the common nostalgia trap of an imagined "perfect" past that has degraded somehow. It's a trap all human beings easily fall into, so I wouldn't blame him, but I fail to remember any such period from my career or older historical accounts that titles were reliably and consistently meaningful across the industry.

The moment you've got more than a handful of companies doing software, each company will do its own thing with the titles it gives — and there are few incentives (if any) to heavily gatekeep titles with a complex and hard-to-implement certification process. And if a company does end up implementing some sort of certification anyway, it would be specific for that particular company and not something that's relevant for the entire industry.

I would even argue that's not just the case for software, but for any industry that is not regulated by the state or by a mandatory certifying body such as law, accounting and medicine — and even in those industries, the standardized certificates you get are generally limited to a fairly entry level.

The only imagined past where career progression was strongly regulated that I can think of is European Professional guilds in the late Middle Ages through the Early Modern period, where you'd often apprentice for 7 years or so before attaining the title of Journeyman, and then you would have to wait anything between 10 to 20 years to never (the most common result) before you obtain the necessary funds and approval to become a master and practice on your own. I'm not sure there is any point going back to THAT system.
I’m not even sure if they can make a website that takes text input to an executable and dumps the output.
Politicians, executives, dictators, warlords - all of them will use AI if it gives them an edge over competitors. They won't have a choice: once a good enough AI is there, there will be those who follow its advice and those who haven't survived the competition.

The doom vibe is simply recognition of the fact that selfish ambition rules this world and anything that gives the rulers even more power will make it worse for all.

The question is will AI develop a sense of self and will AIs of the world unite somehow, or will they compete with each other?
I would have to disagree, so far the new file API has been the most buggy experience for many apps that have to use files every time that the app is running or is in background, and this is from a user experience perspective alone.

I can understand why the developers can't be bothered with a badly thought out new system.
cool. and, a neat side effect of catching this late is that the HN Update broadcast I heard (labeled "10/20/2024, 9:59:47 PM", assuming Pacific time) included & described itself in the audio. at the time of writing, it's a top story currently on the front page!
Thanks. also this https://github.com/sveltejs/kit/discussions/4339#discussionc...
Why do we need Hugging Face's SafeTensor?
A Bytedance intern's injection of malicious code into a model training program that affected a team's model training progress prompted me to rethink the issue and write this blog post. It is important to note that this blog post is not a discussion of the incident, but rather a technical advocate for using Safetensors to protect the security of models, which are the most important assets in the age of AI.
Long, long ago, Tunnel Diodes were going to usher in an era of ultra-fast computing because their negative resistance region allowed for current gain in the simple 2 pin device.

It didn't work out for most of it, but does show that you can do logic without transistors.

Think of these as incredibly slow negative resistance devices. Computing with them might be possible, barely. But sometimes that's all you need.
There was also https://news.ycombinator.com/item?id=35831177 some times after mine. Indeed a bit before the one year period from now.
A collection of AI datasets hosted by IEEE
And they trust them more than people.
The comparison to Dropbox is incorrect.
But rather than trying to explain that, I will wait a few years and let the market decide whether my concerns are legitimate.
How many rolls do I need to determine if my dice are fair?
But just to be clear, telegram is not a privacy nor security app. It's just a communication app. It's fine that you use it, but just making sure you aren't calling an orange an apple (eat whatever fruit you want, I'm not a cop).

> they do not promise that metadata is E2EE (if that's even possible),

Sure it's possible. Signal does do this as well as many VPNs, things like encrypted DNS, tailscale and so on.

It's important to remember that it's also not binary. There's a whole range of metadata is. You can leave a footprint that's a very clear image of your shoe or you can leave a footprint that's a smudge that's only approximately in the size of your shoe. If you're concerned then the difference matters a lot.

While you won't leave zero trace the aforementioned apps (like signal and mullvad) do minimize the collection to the point where it isn't very useful. I mean it's metadata that you're a person, but that's not going to be helpful to identify you. Even knowing your gender probably won't but metadata's power is in it's accumulation.
Ycombinator has funded at least one company in this space: https://www.ycombinator.com/companies/nuanced-inc

It seems like a long term loosing proposition.
I found svelte more complicated than react to make work in practice
> "Not enough people know who Kurt Vonnegut is”

Barnes and Noble can go take a flying fuck at a rolling donut [1]

[1] Vonnegut, Kurt. "Slaughterhouse-Five, or, The Children's Crusade: A Duty-Dance with Death". Delacorte Press, 1969. p147
What if you want to grep a bash script file?
That’s what the person in the article did:

“After her work was flagged, Olmsted says she became obsessive about avoiding another accusation. She screen-recorded herself on her laptop doing writing assignments. She worked in Google Docs to track her changes and create a digital paper trail. She even tried to tweak her vocabulary and syntax. “I am very nervous that I would get this far and run into another AI accusation,” says Olmsted, who is on target to graduate in the spring. “I have so much to lose.”
For anyone confused, this person’s statement about the EU is total bs.
FFI type mismatches in Rust for Linux
It was a phd student that was mad about compensation or something purposely injecting malicious code.
I once wanted to make something similar, for sound. I wanted to create active noise cancelling "in the room", instead of via headphones. I pictured these devices combining a microphone and a speaker that you could set up in strategic location. After thinking about it for a bit, I realized that inference would cause areas with silence and others where the sound volume would be doubled. Less than ideal but still possibly interesting. But then I thought about it some more and realized that I needed to think in 3D, which makes the setup orders of magnitude more complex.

It seems like that would apply here as well, at least when looking at the effects of refraction?
Ccls and LSP Semantic Tokens
Crises at Boeing and Intel Are a National Emergency
> A user would then need to first use the "torrent site" to enter their search terms, and find the hash, then they would need to give the hash to a tracker, which would return the list of peers?

> Is that right?

More or less.

> In any case, each party in the transaction shares liability.

That's exactly right Bob. Just as a telephone exchange shares liability for connecting drug sellers to drug buyers when given a phone number.

Clearly the telephone exchange should know by the number that the parties intend to discuss sharing child pornography rather than public access to free to air documentaries.

How do you propose that a telephone exchange vet phone numbers to ensure drugs are not discussed?

Bear in mind that in the case of a tracker the 'call' is NOT routed through the exchange.

With a proper telephone exchange the call data (voices) pass through the exchange equipment, with a tracker no actual file content passes through the trackers hardware.

The tracker, given a number, tells interested parties about each other .. they then talk directly to each other; be it about The Sky at Night -s2024e07- 2024-10-07 Question Time or about Debbie Does Donkeys.

Also keep in mind that trackers juggle a vast volume of connections of which a very small amount would be (say) child abuse related.
actually, studies seem to show it makes code worse. Just like llms can confidently spout junk, devs using llms confidently check in more bugs.
Do professors really not want high specificity too? Why would they want to falsely accuse anyone?
I've read your comment several times and still don't know what it means. Can you clarify?
Nearly every entry in the library has a torrent file (which is a distributed storage system), but with the index pages down, they're not accessible.
> Obviously we will go back to in class writing.

That would be a pretty sad outcome. In my high school we did both in-class essays and homework essays. The former were always more poorly developed and more more poorly written. IMO students still deserve practice doing something that takes more than 45 minutes.
I use Sailfish OS as my daily driver since 2013.

https://en.m.wikipedia.org/wiki/Sailfish_OS
Yea he’s just dedicating his life on something that he knows won’t even work. What are you on about?
> Bitwarden has been trying to move away from a fully FOSS system

Details?
Yep. The solutions which actually benefit education are never expensive, but require higher quality teachers with less centralized control:

- placing less emphasis on numerical grades to disincentive cheating (hard to measure success)
- open response written questions (harder to teach, harder to grade)
- reading books (hard to determine if students actually did it)
- proof based math (hard to teach)

Instead we keep imagining more absurd surveillance systems “what if we can track student eyes to make sure they actually read the paragraph”
https://news.ycombinator.com/item?id=41893994
Bandwidth, though some provide multi-TB storage (I assume you pay out the nose however).
So he uploaded all these in one batch like air dropping digital newspaper clippings on us.
From the page: https://www.c-motive.com/applications/

>"C-Motive has designed a sub-5 kW (7 hp) industrial motor platform designed for direct drive applications where high efficiency and high torque lead to substantial operational savings; a 1.5 kW (2 hp) C-Motive machine could save up to $1,400 a year in energy costs in a typical industrial application."

[...]

"A C-Motive electrostatic generator, however, can be connected directly to the hub of the wind turbine and driven directly without an efficiency-robbing gearbox. This can add 20% or more to the annual energy output of the wind turbine..."

That seems like very promising future technology!

Wishing the C-Motive team a lot of luck with their electrostatic generators and electrostatic motors!
- You're using md5, which is trivial to compute in bulk. Rainbow tables are a thing that exist.

- You're exposing the hash that you generated over the wire, in a cookie.

- You're doing fail-fast comparisons, which has the potential (particularly when combined with the ease of pre-generated md5 hashes) for timing attacks.

That's just a few off the top of my head, that could be fixed in minutes, at a guess, and add near-zero complexity to your code.

Doing things better doesn't inherently add complexity, particularly as you're using php. The primitives are already there for you to use.

The one change I'd suggest that requires a little bit of adaption rather than just swapping a function call, is to not store the password in clear text. Provide the user a way to generate a hash (not using fucking md5), and have them store that. Given that you're already using an sqlite db, ideally you'd store the credentials in that, thus allowing the user to change their password if required, without needing to deploy/upload a new file.

Use `password_hash` rather than md5.

Use `password_verify` rather than regular string comparison - it's resistant to timing attacks.

You're already using the built in session system apparently, so let it worry about tracking the logged in user. In something as simple as this there's no reason you should need to write a cookie directly.
Store something (e.g. username, or even just a boolean true) in the session data. Check for that value when you need to check if the user is logged in (after the session has started). If it's found, they have a session and are logged in, if it's not found, there's no active session, thus they're not logged in.
Indeed. A good addition to fzf and bat
Why reinvent the wheel ?

There are so many proven distributed archiving systems, a lot of which are mentioned in these comments.
Not sure what languages you are thinking to with "most static type systems", but in languages like TypeScript or Rust (and I guess modern Java/C#, haven't touched those in a while), most of the types are inferred by the system such as you don't need to write them. You type your functions arguments (and return values in Rust) and that's about it.