skysight-inc/HackerNews huggingface dataset:
> Got a gnome terminal root shell open? That's a privilege escalation method for any other client running on the desktop under Xorg. This itself, isn't really a problem, but chained with other attacks could be (e.g. browser escape).

Unless you're sandboxed up the ass, Wayland won't save you when that browser escape happens. Something I did 20 years ago to a friend as a prank that still works today on a typical Linux desktop with Wayland; wrap sudo to log the users password the next time they use it. I didn't use a browser exploit for that, but it can easily be done if you have write access to the user's environment however that happened. Wayland won't protect you from that sort of thing unless you're willing to commit to extensive sandboxing.
I think I've this a screenshot of this on Tumblr! I was impressed it was real as well.

I love that this silly app had a "Plant Wizard" with 10 steps and a progress bar with icons. That's really good UI design.
> Why does every website developer have to work around this while the browsers get a free pass?

Because browser makers are merrily taking that free pass, whether we like it or not, and people who need accessibility allowances need them now, or better still quite some years ago, rather than at some future time after we've nagged the browsers into taking useful action.

It isn't entirely the browser people's fault, there are significant issues in the spec, as already discussed in these comments by people who know more about it than I, and that is part of why they feel justified in taking the free ride, but as some of them were involved in the original specs and they are in a position to propose alternatives & deliver PoC implementations, it is more their responsibility than they think. After all, Google in particular are more than willing & able to invent new specs¹ and throw implementations into production, when there might be marketshare, stalk^H^H^H^H^Hadvertising income, or protection money² on the line.

----

[1] and Apple deliberately break them, old or new, in a fit of pique!

[2] Nice app/extension you have there, it would be a shame if it started failing store inclusion reviews, or if APIs had breaking changes for our benefit underneath you.
> The Apple Studio Display looks great, but I'm a Windows user and I'm guessing a lot of the nice features of that display are Mac-only

I can possibly be of some help here. I have a Studio Display, however my work-provided machine is a Dell laptop and so that is what is connected to it most of the time.

Providing your machine can output video via Thunderbolt or USB-C, it will work. That is fairly common these days, though Windows machines capable of driving a 5120x2880 signal can be harder to come across, particularly in the corporate laptop world, though I don't know how much of a concern that is to you.

My last work machine maxed out at 4K which the Studio Display would happily scale up to full screen. I would describe it as substantially sharper than e.g. a 2560x1440 display of equivalent size, but still noticeably less sharp than the full native 5K (obviously). My current machine can do the full 5K, but the performance leaves a lot to be desired (however the thing is a turd anyway, too much corporate security crap bogging it down).

Speakers, camera, and microphone built into the display all work totally fine from Windows. What may be a total non-starter is that you need a Mac or iPad to change the brightness, because there's no physical controls on the display itself and Windows doesn't expose a way to control it. I am lucky/unlucky in that my home office does not get a huge amount of natural light, meaning I've been able to set it to a comfortable brightness from my Mac and then just leave it.

Overall it's a very nice monitor if you can work around the brightness thing. A possibly better contender though is the recent-ish 5K variant of the Asus ProArt[0]. I was using the 1440p version of the same monitor before I got the Studio Display, and I was very happy with it. Good colour reproduction, USB-C Power Delivery for one-cable laptop docking, and a far more adjustable stand than the SD. Worth a look.

[0] https://www.asus.com/displays-desktops/monitors/proart/proar...
Ok, we've taken the accident out of the title above.
> You'll be able to sell your M4 mac mini in 5 years for $150 for an instant-cash offer from backmarket or any other reseller

If you want to put in a bit of elbow grease, you can get a much better deal. M1 Mac Minis in my area are regularly selling for $350+ on FB Marketplace right now.
The body parts are going home.

In some contexts, this is forbidden, unorthodox, or expected.
That’s beside the point.

Me teaching my brain someone’s way of syntactically expressing procedures is analogous to AI developers teaching their model that same mode of expression.
This is incredibly sad; botsin.space has been a steady stream of joy for me over the years. Here's hoping a bunch of alternatives pop up.
Google should reply with "We'll give you Tree Fiddy!"
Amazon is famous for hiring to fire.

I wonder when the business schools will teach that stack ranking was a failed experiment?
millions of 12 year old boys already see Andrew Tate as their god.

Anyone who will give them easy and free access to sex.
Thank you, this was the advice I was looking for!
Thank you, great resource
>Probably not better than the best stuff the military has...

Military tech is always a decade ahead of civilian, that's why the US has easily won every armed conflict they've entered into in the past 50 years
> Private investigator Joseph Schillaci says while this situation needs to be addressed, he doesn’t see this situation being a common theme in police departments. Schillaci says public safety isn’t a concern.

Hand-waved away. I wonder if Schillaci is an ex-cop. Also weird in this article is multiple quotes from people who are unrelated to the case and openly just guessing at the details:

> "I don’t know how they’re charging with stalking," said O’Hara. "I don’t know the specifics of any of this we are just kind of guessing..."

But this has always been a problem. My father worked in Australia for what would be something similar to the Marshals Service, and even 25 years ago this was an issue - one of his coworkers was reprimanded after a completely unrelated incident discovered that he'd routinely look people up via license plate information, including a young woman who'd just won a car in a lottery (and was pictured with said car with an uncensored plate).
First of all congratulations with your succes, and not take away from that. But IF nor fasting is a silver bullet.

Reducing food intake, and insuline while keeping hunger down is.

Important aspect is keeping hunger down. And if your fasting/excersicsing you can experience the same.

The discussion on weight unfortunately almost always focused on total weight.

But we would like to retain our muscles, and reduce adipose tissue(fat).

With gpl1 people are able to fast, stop snacking and reduce food intake because hunger signals are blocked.

But a fasting lifestyle, which goes further then just IF. And a focus on nutrition(vitamins, minerals, quality sources) could the same.

Furthermore the effects of lowering inflammation of gpl1 is only logical reduction in food intake/fasting will lead to autophagy.

IF/Fasting and other new nutritional paradigms are still new and uncharted. It's not clear yet what the full effects are, and how to implement them correctly.
Magnetrons are about 80% efficient, so not really that huge.

It also looks like they have a conventional ISS-style "suitcase" warmer, and a hot and cold water dispenser similar to the ISS. I expect the microwave is used sparingly.
There is no reward for getting the best time. Also, the people that you beat are extremely motivated to investigate and flag your activity; it will look pretty obvious that it was ridden on an e-bike due to incorrect / missing data like heart rate and wattage.

I have the record on a short inconsequential running course near me. I occasionally get a notification that someone beat my record and I am forced to look at it; it is always someone on a bike or car, and I flag it and it eventually goes away. Also, my own record activity has been flagged multiple times despite it only being slightly faster than the second place finisher - I no longer bother trying to contest it. The joke is on the flagger since I have run the exact same record time, several times, so I still have the course record.
> This is why I only use Strava to share with my followers.

You travel with one of the most powerful people in the world?
Does speed matter when it's not getting better and learning from corrections? I think I'd rather give someone a problem and have them come back with something that works in a couple days (answering a question here or there), rather than spend my time doing it myself because I'm getting fast, but wrong, results that aren't improving from the AI.

> though I sometimes wonder where we’ll find mid-level and senior developers tomorrow if we stop hiring juniors today.

This is also a key point. While there is a lot of short term thinking these days, since people don't stick with companies like they used to. As a person who has been with my company for close to 20 years, making sure things can still run once you leave is important from a business perspective.

Training isn't about today, it's about tomorrow. I've trained a lot of people, and doing it myself would always be faster in the moment. But it's about making the team better and making sure more people have more skill, to reduce single points of failure and ensure business continuity over the long-term. Not all of it pays off, but when it does, it pays off big.
If by "is fairly recent" you mean "has been around for over six years", yes.
My initial reaction to this was, only in approximation. But the cross would also only approximately be a right angle. So good point.
The Dell Ultrasharp 43 4K monitor [1] has a mode where it pretends to be four monitors, one in each quadrant.

> four unique FHD partitions via Internal Multi-Stream Transport (iMST) when connected to a single PC

That's nice for people to organize their windows without needing to figure out a tiling window manager. If only it was 8K instead of 4K...

[1] https://www.dell.com/en-us/shop/dell-ultrasharp-43-4k-usb-c-...
I've taught undergrad and grad math. I think in principle you can, but only if your audience will either not need it in the future, or only need it superficially. If a student continues their path and become a practitioner they will need to know how the lower level stuff works, in order to be effective at their art. Just like a regular hacker, a "math hacker" won't be able to do magic without an intimate knowledge of the inner workings of their tools.
"while adding AMD (AMD.O), opens new tab chips alongside Nvidia (NVDA.O), opens new tab chips to meet its surging infrastructure demands"

Jensen has been saying that demand is "insane" and we're hearing rumors of low yields. This equates to supply issues in the coming months/years. No fortune 500 puts all their eggs into one basket. Diversifying away from a single source for all of AI hardware and software, is a smart thing to do.
One, going off GLP-1 for all I know doesn't have bad side effects, other than going back to your bad diet.

If we are back at the point of supply chain issues that interrupt GLP-1 for any significant amount of time you're starting to look at issues like we had during covid that are going to have all kinds of other effects.

From my understanding getting the pre-compounded components isn't that difficult, and that India and China are making versions of it now.
Yeah, but at the end of the day, it either works, or it doesn't. You can say "you're holding it wrong" all you want, but if it's easy to hold the thing wrong, it's the thing's fault.

GLP-1s work for many more people than any other diet advice we've ever had.
I guess you just lose the ability to distinguish between areas past some density, right? What would be a good way to improve it… maybe apply some filter, Lanzcos or whatever?
It would be interesting if this also hooked into an AST to capture different syntaxes and structures used to express procedures and entities in code.
Could Steampunk Save Us?
I think the fact that Steve Ballmer could be considered a good CEO by anyone today is just another reminder of the fact that our society has lost all understanding of what a sustainable business model is and our modern conception of capitalism is really just feudalism, i.e. private owners with significant political influence eliminating all competition with the help of the state and wielding monopolistic control over essential resources and earning their profits by charging rent rather than actually producing anything of real value.

We've been locked in this cycle for centuries now - technological progress opens up some new uncharted territory that is up for grabs and there is the brief period of booming growth and diverse competition in this new thriving industry, then the boom is over and the system no longer encourages competition or innovation or intelligent decisionmaking, instead it encourages overreach and incompetence and cancerous uninhibited growth and parasitic behavior - stealing ideas and flooding the market with cheap inferior imitations, aggressive anti-competitive practices, increased lobbying and increased dependence on state funding. The industry becomes dominated by these bloated behemoths that add nothing of value to the world and are an enormous burden on society and eventually they become so unsustainably huge that even the combined wealth of every sovereign nation cannot keep them afloat and then they collapse.

I mean, seriously, everyone knows Windows has always been shit and people have never had anything but negative things to say about it, everyone knows that every product Microsoft has ever produced has been absolute trash and that they have never had any interest in doing anything innovative or original or contributing anything useful to the world. Microsoft isn't a company and people like Steve Ballmer are not CEOs or businessmen of any kind, they're just landlords.
https://archive.ph/xcdTd
While I’d agree that accurate weather forecasts provide tremendous value, it’s not “free value”, as tax dollars are paying for it. That money could go to any number of ‘under-funded’ other causes, or be returned to the tax-payers.
Depending on ones metabolism, IF with no caloric deficit doesn't guarantee weight loss.
That's my exact experience with GitHub Copilot. Even boilerplate stuff it sucks at as well. I have no idea why its autocomplete is so bad when it has access to my code, the function signatures, types, etc. It gets stuff wrong all the time. For example, it will just flat out suggest functions that don't exist, neither in the Python core libraries or in my own modules. It doesn't make sense.

I have all but given up on using Copilot for code development. I still do use it for autocomplete and boilerplate stuff, but I still have to review that. So there's still quite a bit of overhead, as it introduces subtle errors, especially in languages like Python. Beyond that, it's failure rate at producing running, correct code is basically 100%.
for a $500 plane ticket and a 4 hour drive, seems like someone has surely gone there by now, just to ground-truth this. Otherwise, seems like a fun (with plenty of risks, obvs) way of being "the first" to lay eyes on this.
Would you like a criminal union to keep police at bay?
More than a quarter of new code at Google is generated by AI
It's way higher. I experimented with targeted search ads to try and sell some copies of Conveyor (a developer tool for desktop app devs, see bio). It was a waste of time. Google took a pile of cash and delivered zero conversions. It turns out that the conventional wisdom is now that search ads are too expensive for small companies. It's also extremely complicated. Even with a lot of work on targeting, the traffic you get is junk and it's hard to track conversions. I suspect most devs just block ads and never saw the ads at all, even if I was charged for them.

If Meta can use AI to make niche B2B advertising work better then there's still a lot of room for growth. Like, if there was a way to get AI to advertise my product to people asking frustrated questions about how to deploy their desktop apps, I'd be very interested in an offer like that.
Because Full-Time/Part-Time/Other is too imprecise for government. What if you consider full time is 25 hours because you were going to school? Well, you worked less on something but claim to have same experience at someone who worked 40.

Government has to comply with all these standards and by asking for hours, they can make sure themselves that someone meets them.
This reads solely as a sales pitch, which quickly cuts to the "we're selling this product so you don't have to think about it."

...when you actually do want to think about it (in 2024).

Right now, we're collectively still figuring out:

1. Best chunking strategies for documents
2. Best ways to add context around chunks of documents
3. How to mix and match similarity search with hybrid search
4. Best way to version and update your embeddings
I usually use a pair of Sennheiser HD280s that I've had for over a decade. I've used some fancier headphones costing more than an order of magnitude more, from brands such as ZMF. After experiencing the high-end advantage, I'm still perfectly happy with the 280s. There are a few things I care about in a monitor, and DPI is nowhere on the list. Every monitor commercially available has more resolution than I care about. My number one concern is consistency across a wide viewing angle. Low latency, retina DPI, gamut accuracy, HDR, curved surface? I don't care about any of them. I have tried all of them.
But only .com actually matters.
Maybe not full-blown technology, but a lot of New World philosophy, art, and mathematics, and history were destroyed by the Europeans or otherwise lost to time. Maybe even medicines that we don’t know about. They didn’t have electric computers though.
For reference seven trillion dollars is 25% of US GDP.

Yeah, that's um, wild.
For now, I mostly use AI as a "faster typist".

If it wants to complete what I wanted to type anyway, or something extremely similar, I just press tab, otherwise I type my own code.

I'd say about 70% of individual lines are obvious enough if you have the surrounding context that this works pretty well in practice. This number is somewhat lower in normal code and higher in unit tests.

Another use case is writing one-off scripts that aren't connected to any codebase in particular. If you're doing a lot of work with data, this comes in very handy.

Something like "here's the header of a CSV file", pass each row through model x, only pass these three fields, the model will give you annotations, put these back in the csv and save, show progress, save every n rows in case of crashes, when the output file exists, skip already processed rows."

I'm not (yet) convinced by AI writing entire features, I tried that a few times and it was very inconsistent with the surrounding codebase. Managing which parts of the codebase to put in its context is definitely an art though.

It's worth keeping in mind that this is the worst AI we'll ever have, so this will probably get better soon.
It’s just 1/5th of the current USA national debt of $35T, bro. Just have fed run those money printers 365/24/7.
Some people actually don't care. I'm one of them. I express my self-respect in ways other than my screen's resolution.
The simplest solution to this is bureaucratic. Establish an app approval cybersecurity office within some agency and have the office make two lists: apps that have specific security configurations that need to be enabled and apps that are outright banned.

Then you just make compliance with the lists necessary for certain security clearances.
To be clear, I didn't ask it to write something complex. The prompt was "how do I do X with library Y?", with a bit more detail. The library is fairly popular and in a mainstream language.

I had a suspicion that what I was trying to do was simply not possible with that library, but since LLMs are incapable of saying "that's not possible" or "I don't know", they will rephrase your prompt and hallucinate whatever might plausibly make sense. They have no way to gauge whether what they're outputting is actually correct.

So I can imagine that you sometimes might get something useful from this, but if you want a specific answer about something, you will always have to double-check their work. In the specific case of programming, this could be improved with a simple engineering task: integrate the output with a real programming environment, and evaluate the result of actually running the code. I think there are coding assistant services that do this already, but frankly, I was expecting more from simple chat services.
Does it support syntax highlighting for modern languages? What about having multiple languages in one file (.tsx or .heex, for example)?
> I think calling it intelligent is being extremely generous ... can't properly recognize that GitHub is capitalized.

Wouldn't this make chimpanzees and ravens and dolphins unintelligent too? You're asking it to do a task that's (mostly) easy for humans. It's not a human though. It's an alien intelligence which "thinks" in our language, but not in the same way we do.

If they could, specialized AI might think we're unintelligent based on how often we fail, even with advanced tools, pattern matching tasks that are trivial for them. Would you say they're right to feel that way?
Very much so. When I bought my "cheesegrater" Mac Pro, I wanted 8TB of SSD.

Except Apple wanted $3,000 for 7TB of SSD (considering the sticker price came with a baseline of 1TB).

I bought a 4xM.2 card and 4x2TB Samsung Pro SSDs, cost me $1,300, I got to keep the 1TB "system" SSD, and was faster, at 6.8GBps versus the system drive at 5.5.

Similar with memory. OWC literally sells the same memory as Apple (same manufacturer, same specifications. Apple also wanted $3,000 for 160GB of memory (going from 32 to 192). I paid $1,000.
People post "Something Written in Go" all the time and no-one complains about the title, every rust post that includes that gets complaints.
Not the person you were asking, but after years of using i3, AeroSpace is the only way I can use a Mac productively, and does indeed have the feature you're describing.
https://www.lemonde.fr/en/international/article/2024/10/29/p...
Show HN: Candy Train – Port of an oldschool Java applet
I wanted to learn SDL3 so I ported Candy Train to iOS and Android. As a bonus, I implemented a high score leaderboard, something that was lacking in the original version.

iOS
https://apps.apple.com/us/app/candy-train-classic/id65875597...

Android
https://play.google.com/store/apps/details?id=io.itch.ksylve...
Federal interests can easily tell the local prosecutor "hey, don't prosecute this, it risks setting bad precedent".
Pretty wild that the only reasonably sized 8k Monitor is going to be 8 years old next spring.
Nothing coming close was ever released after that.

The Dell UltraSharp UP3218K

That's XBox Scorpio old.

Just hoping for some 32 inch 8k OLEDs driveable @120hz before my eyesight detoriates.
In general I do not find AI a net positive. Other tools seem to do at least as well in general.

it can be used if you want the reliability of a random forum poster. which... sure. knock yourself out. sometimes there's gems in that dirt.

I'm getting _very_ bearish on using LLMs for things that aren't pattern recognition.
Additionally, having worked with some of their network devices at the driver level, they seem to be kludge piled on top of hack poured over a soup of workarounds for hardware bugs. Maybe they've gotten better recently, but just looking at their drivers, it didn't paint a great picture.
He mentions this adapter: https://www.amazon.fr/Club3D-CAC-1087-DisplayPort-4K120Hz-8K.... With DSC 1.2, you should get 8K at 60Hz.