skysight-inc/HackerNews huggingface dataset:
> The issue is that software running in the kernel can unintentionally enable vulnerabilities

You're not wrong, but there is some strong irony there regarding Vanguard. When it first launched its driver would block certain other drivers from loading, because those other drivers had known vulnerabilities that cheats (or anything else) could use to escalate from usermode to kernelmode without touching any of the standard entrypoints that are monitored by anticheats.

Would you be surprised to learn that the main response was for gamers to get angry at Vanguard for breaking their RGB keyboard driver, rather than get angry at the manufacturer of their RGB keyboard for shipping a buggy driver with critical security vulnerabilities? And Microsoft ended up adding a very similar driver blacklist to Windows itself later, because it's a good idea.
HN has a lot of very clever people. Solving online game cheating is a billion dollar business.
I'm generalizing, obviously, but I think most engineers would rather not build horribly tech-debt-y things all else equal. Yes, there are some business-minded engineers, but just looking at my own data set of job seekers, people seeking code quality far outnumber people seeking rapid product iteration.
Only one country can print the world's reserve currency from thin air and it's not China nor the CCP. Why doesn't the US counter-dump then? Spoil the rest of us with affordable EVs and hasten humanity's transition away from ICE vehicles.
User space is not the same as kernel space.

User space applications can't access hardware or physical memory. They can't bypass permissions enforced by the OS. None of that applies to hardware or kernel drivers.
There are plenty of people alive today with negative birth timestamps, with many services wanting to calculate the proper local day and time each year to send them annoying pseudo-personalized birthday messages.

Or, for something a bit more agreeable: genealogy (esp. the bioinformatics queries in genetic genealogy) needs a good, high-resolution timeline to normalize events onto. Actually, the non-genetic kind of geneaology, solves a lot of vagueries in lineage as constraint-based puzzles over (local!) dates, with razor-thin margins that would be messed up without correct timezone-based calendar conversion — constraints like "two people couldn't have been related as mother and child, if the mother died at least two days before the child was born."
It might be possible to detect gravitons after all
Rivian software head says physical controls in vehicles are an anomaly
The wronger you are, the more critical it is to double down.

Courageous knob denounces courage knobs.
Are these anti-cheats kernel modules? Asking because I only play two games on Linux and they do not use rootkits. If so one could at least prevent the installation using a couple sysctl variables [1]. I do not recommend putting this in /etc/sysctl.conf or in the .d directory as it can break OS updates among other things... I would instead put it in a startup script so that it can easily be disabled and the node rebooted. This would be in the cases the game installer wants elevated privileges and silently tries to install the modules. Obviously it will break the game but maybe that will happen soon enough so that one can request a refund for the games that did not disclose the rootkit. Once these are set to 1 on a running system the only way to set back to 0 is to disable that startup script and reboot as it becomes immutable on a running system. Your OS update tools should also be wrapped to check if this is enabled, warn you and politely abort until it is unset. The failure conditions are not strictly binary and may work, or appear to work until the machine is bricked.

Related to this it may be worth installing something that does checksum snapshots of the filesystems to see if a game has tampered with system files. OSSEC, chkrootkit or even a cron job that just does this manually and runs diffs. While some package managers have this functionality they will usually ignore files outside of the package manifest that may get picked up by the system. Immutable off-system backups are of course good too.

# do not put in /etc/sysctl.conf, instead use a startup script or a script that is run prior to starting Steam.
sysctl -w "kernel.modules_disabled=1"
sysctl -w "kernel.kexec_load_disabled=1"

[1] - https://linux-audit.com/increase-kernel-integrity-with-disab...
Oregon is the most pro drug state in the country. Of course that’s the case here.

We see folks trying to take away the progress we made here. My county is trying to ban shroom companies. Very sad.
It's clearly you who's confusing "standard library" with "UI toolkit". Some standard libraries come with a toolkit, like Java, but that's an exception rather than rule.

Not that it makes a huge difference in the discussion, but if you want to be smug about it then at least make sure you're right first.
Not sure why downvotes - very valid point for China.
How’s the performance? I have 2013 MBP with 16GB RAM, and am curious if the newer OS are more RAM hungry.
Ask HN: Is there a good hackable smart watch?
I've owned a variety of smart watches. From Android via Google and Samsung to Huawei purchased in Japan.

I would like to find a hackable smart watch that allows:

- gps
- cellular connection. But maybe just a data connection if I can write my own apps. I really want to record audio of my thoughts while I'm running.
- programmable? Android apps are great, but I'm open to other things.
- decent battery life, hopefully 2 days or more

I have been waiting for the right pine64 but it isn't coming. I love my banglejs but it doesn't have cellular.

Are there any interesting things from Shenzhen? Or on Alibaba? I don't need an app store.

I'm really interested in something that can capture audio and submit it, perhaps receiving audio or text back without an elaborate screen interface. If I have that, maybe my kids can use it without getting sucked into the platform of apps and games and all the other awful stuff.
Definitely true. What Voyager is doing right now is mind blowing.

Its a shame Carl Sagan is with us to cheer.
Not the OP, but most web-based multiplayer games use a server backend to communicate between the multiple players.

> connecting to a rust web server for the game logic? And you want to embed that server by compiling to wasm?

I would assume so, and it being in WASM means they can use the exact same binary code on the server and in the webbrowser.

You could of course do the same thing by writing in Javascript (running in Node on the server or in the browser) but then you are in JS instead of Rust.
One of my concerns is that AI may actually slow innovation in software development (tooling, languages, protocols, frameworks and libraries), because the opportunity cost of adopting them will increase, if AI remains unable to be taught new knowledge quickly.
Checkout kotaemon https://github.com/Cinnamon/kotaemon
Sure, but r24 ignores road restrictions and outputs spreadsheets (lol) instead of proper GPX.
I feel too that we're already past the point where they could fix things. They must be aware of issues and do the exact opposite of fixing them. It's a question how fast we can convince general public to move away, rather than when Google will improve.
>nor kernel level anti-cheats to catch cheaters.

Do you have some examples of good anti-cheats that are not kernel-level? Do you have any that are as good as Riot's Vanguard? I'd prefer examples of FPS games since these are the most mechanically skill based compared to other genres that have more strategy, but would like to hear any examples you are thinking of. Lastly, if you say server-side, that may work, but many companies don't seem interested in it due to the cost, at least IIUC.
He also said that he was using the situation to downsize his business. “we can serve our customers better, just more efficiently… I can see a point where Automattic reaches $1bn of revenue with fewer people than we have today.”
My first thought there would be to just build up randomness entropy on game launch, and when mouse movements/keyboard events break that, detected. I assume I’m missing something.
One issue is that the promoters and artists are getting a cut of the resale.
Doing something to protect the integrity of the competitive game they have? Compared to others Riot is somewhat successful at least.

There are plenty of games that do not require anti cheat but they aren't going to be the type that uses skill based matchmaking.
2025 standard deduction is $30k for MFJ. Ain’t many people passing that mark these days in itemized deductions so the mortgage interest deduction is moot.
> . As a particular example, would you argue that game engines like AlphaZero aren't capable of reasoning about the next best move?

Yea, I probably wouldn’t classify that as “reasoning”. I’d probably be fine with saying these models are “thinking”, in a manner. That on its own is a pretty gigantic technology leap, but nothing I’ve seen suggests that these models are “reasoning”.

Also to be clear I don’t think most kids would end up doing any “reasoning” without training either, but they have the capability of doing so
Can you post a link to some like that?

Because when I search "jazz" on YT I'm just getting legit music videos and jazz playlists -- stuff like Norah Jones, top 100 jazz classics playlists, etc.

But I assume that search results are personalized.
Just because you buy something doesn’t mean you can afford it.

If you can’t retire or pay medical expenses or maintain your physical and emotional wellbeing because you spent money on a house then you couldn’t afford it. Owning a house doesn’t mean you can pay the property taxes or maintenance costs.

My point is that people are making financially unsound home buying purchases.

Another way to say this is that Bugatti doesn’t sell Veyrons to people with $1,000,000.00. Bugatti sells Veyrons to people with an extra $1,000,000.00.
Yep, even up to hundreds of dollars a month.
> designing for the deployment of 198,000 sensors per square kilometre

I wonder if they can sense my unease at that level of surveillance
This sounds about right from my experience getting nerdsniped by new samplers along with trying to reproduce the API middleware for the whole reflection thing, and using 4400 questions for a new benchmark is not bad given that even the well-regarded gpqa benchmark is only 3000-something questions.

What's ... mildly infuriating here is the lack of any kind of data, code, 0 mention of github in the paper, and nothing for anyone to reproduce or find any reason in my opinion to even recommend anyone to read this thing at all. If you think that whatever you're doing in the field of LLMs won't be obsolete in 6 months you're being delusional.

Anyway, back to the paper, it says all questions culminated to a yes or no answer... meaning theres a 50/50 chance of getting right, so does that mean the 8% drop in performance you got from testing llama 3 8b this way is more like 4% which would make it statistically insignificant? And given that the only other scientifically usueful & reproducible (non-api walled models which no one knows on how many actual llms and retrieval systems are composing that solution you're testing)models were less than that leads me to the opinion that this whole thing was just useless slop.

So please, if you're writing a paper in LLMs, and want to seem credible, either have some type of demo thing or show the actual god damn trash code and top secret garbage data you wrote for it so people can make some kind of use of it before it goes obsolete otherwise you're just wasting everyones time.

TL:DR. It's trash.
It's especially impressive when you consider that evolution hasn't had very long to produce these results.

Humans as an intelligent-ish species have been around for about 10 million years depending on where you define the cutoff. At 10 years per generation, that's 1 million generations for our brain to evolve.

1 million generations isn't much by machine learning standards.
I wrote this, gosh, nine years ago: https://weiyen.net/articles/set-up-ubuntu-server

Haven't really looked at it much to be honest. Serverless tech has spoilt me.
In Apple's case, the lost relevance of one platform lead to the increase in relevance of another one - that they controlled. Microsoft has no such "luck".

Also, it does matter, because there's over a billion Windows PCs in active use. It's still relevant, but it's getting eroded. That's a huge issue.
From what I'm hearing/see, it's worse than 2002 by a long shot. :\ 2001-2004 was pretty bad (from what I recall Cisco laid off about 20% of it's engineering team), but it was clear by 2003/4 that the growth of dial up subscribers was going to continue, so people were able to find jobs again although senior devs moved to much lower paid jobs.
Do you have a full dataset on this? All I could find is https://fred.stlouisfed.org/series/RHORUSQ156N which only goes back to 1965.
Now you too can enjoy the most disappointing RPG released in the last decade, and join the ranks of players that funded a project that never lived up to it's own marketing or design docs. Roleplay as one of two future-greaser stereotypes and play through a gripping and nonlinear narrative with all of the reflective intrigue and glamorous action of a mid-90s rock band documentary. Listen and watch as Keanu Reeves delivers the worst lines of his life to a mocapped body double, and consider the myriad of different anti-establishment endings you could pick to express your discontentment with the corporate structure of the largest businesses in the world.

Apple, do more No Mans Sky-type ports and less courting of failed/failing game studios that are desperate for parasitic marketing deals. I know - you have a lot of capital right now and there's a lot of attractive and vulnerable studios out there. We have to let them learn their lesson the hard way, not bail them out with reciprocal desperation funding.
That seems flawed as you would punish people who are playing well. Statistics are great, but you'd inevitably match legitimate players with misfits, ruining their experience.
Was this comment cleared by comms
I think you merely lack imagination and are simply not the one to ask to work on the problem. I don't speak from ignorance.
all it really does in practice is produce a market for paid cheats.

if it's a pain in the ass to stay ahead of the anti-cheats, then people with the skills to do so will expect (and receive) payment from those wishing to cheat.
You generally don’t write those by hand though.

I’m pretty sure around 50% of the code I write is already auto-complete, without any AI.
If you're joining a company of 15 people? Probably. If you're joining a company of 50,000? Absolutely not, because they're not going to vastly increase the complexity of their HR or payroll just to close a single hire.

Money and equity are easy to negotiate because there's no management overhead. But if you want your 401k to be at a different brokerage, or have other "process" request like that? Probably not gonna happen - not for a line employee.
I havent seen anybody use them and be more productive.

With c++ my experience is that the results are completely worthless. It saves you from writing a few keywords but nothing that really helps in a big way.

Yes Copilot CAN work, for example writing some JS or filter functions, but in my job these trivial snippets are rather uncommon.

I‘d genuinely love to see some resources that show its usefulness that arent just PR bs.
College helmet communications on unencrypted frequencies
Can we also see the stats for how much code used to come from StackOverflow? Probably 25%
This is the main issue I have with these. Microsoft should be providing this at the platform level, give developers "Xbox Anti-Cheat" and ship it with Windows.
Why not both? Why can’t we have a good usability experience AND control? In fact, we used to have that via the Mac hardware and software of the 1990s and 2000s, as well as NeXT’s software and hardware.

There was a time when Apple’s hardware was user-serviceable; I fondly remember my 2006 MacBook, with easily-upgradable RAM and storage. I also remember a time when Mac OS X didn’t have notarization and when the App Store didn’t exist. I would gladly use a patched version of Snow Leopard or even Tiger running on my Framework 13 if this were an option and if a modern web browser were available.
Because those were community servers often built around community. There weren't a lot of them either.

If admins allow cheating - people that want to play would leave the server

If live in a non-metro area, you probably have a handful of server your latency allows you to play on - getting banned would be a big suck

Now you just click "play game" and you get match with some strangers you might never play ever again with. Financially, those privately hosted servers no longer make economical sense for game publishers.
First one is irrelevant: McCartney refused to deny he was fund-raising for a terrorist organisation that was literally bombing the UK at the time. That, and the fact the majority of people living in Ulster wanted to remain part of the UK (and still do, but demographic changes mean that might not be the case in a generation), meant it was a slam dunk that the BBC would ban it to prevent offence that could lead to an incitement of violence at a delicate time. Also note that wasn't a regulator taking action, it was not the government, it was a broadcaster coming up to a charter renewal conversation. Complain about Auntie BBC if you must, but not a fault of regulators.

The second one is irrelevant in the modern context: the IBA hasn't been a regulator for over 30 years, and had a different set of guidelines and authority to Ofcom. It is unlikely that a fair and balanced account where a reasonable right to reply was offered to all parties would be banned from broadcast today.

The third one is a ban under OSA, and has nothing to do with media regulators, its about the scope of acts like the OSA, and its appropriate use.
Riches in the niches. Analyse some niches, then niche even more down. TAM between $5-50 billion in the US is a good indicator that there is no real competition (market is too small for the big guys).

After 7 years as the market leader you can expect

- $50 billion TAM => $100 million ARR

- $10 billion TAM => $20 million ARR

Usually you start with a small TAM so you can enter the market with some B2B sales. B2B sales are easier because you have a verify specific ideal customer profile (ICP). Later you can decide to expand your TAM so you can become interesting for VC funding. This is ideal for verticals like salons, restaurants, etc. and actually where the growth is at the moment.

Another approach is to just do something everyone needs but is annoying to handle yourself like AWS SES wrapper (Loops, Resend, ...) or Auth+Organizations (Clerk, Stack-Auth, ...). This is ideal if you target tech startups.

Another approach is to to combine two or more products into one. Requires a lot of code. This is super risky, but can be a gold mine if you target sales, marketing, HR, etc.

The last "approach" is special software for enterprise, but you need to work there to know what is needed. It is very hard to come up with an idea for special software. I know one startup who did this and the founder was writing his doctorate about a very niche enterprise topic.

PS: If you need a SaaS boilerplate, grab mine https://achromatic.dev (Next.js) to skip the first 2-3 months of your journey.
So all products must be available from one specific, primarily US focused, retailer of consumer-grade PC parts? I'm not sure I understand what your criticism is here.
While a slightly different use case, I suspect you’d like zbackup if you don’t know about it.
Sometimes I wonder why we would want LLMs spit out human readable code. Wouldn’t be a better future where LLMs generate highly efficient machine code and eventually we read the “source map” for debugging? Wasn’t source code just for humans?
Years ago just before covid (~2019-2020), I had spent a couple years driving a motorbike all over Vietnam from the south to the north. Nomad life, just living hotel to hotel. It was an awesome experience and a big part of that is that there is livestock (chickens, cows, goats, pigs) literally hanging out all over the place.

One interesting thing I came across was that the further north I went, the fewer random pigs I saw on the streets. Eventually it got to the point where there wasn't any. It was noticeable.

Things eventually turned into checkpoints where a local military would stop you, make you get off your motorbike and spray down the wheels and under carriage with some liquid (probably bleach). Asking about this, it was all about trying to limit the spread of some virus infecting all the pigs. Most likely given the regional spread, it came down from China.

Googling it now, it was called ASF and killed 86,000 pigs (probably more)...

https://pmc.ncbi.nlm.nih.gov/articles/PMC10310380/

https://apps.fas.usda.gov/newgainapi/api/Report/DownloadRepo...

https://wwwnc.cdc.gov/eid/article/30/5/23-1775_article

If the USDA is talking about this... it could very well be a huge deal.
Just ordered one the UM690S after this comment - I had been looking for another machine like it and saw the sale. Thanks for sharing!

I just deployed another System76 machine that I’m using for the same purpose — using both for redundant containerized web servers I’m self hosting. I got it with 64GB RAM.

Has the machine been a solid performer?
It looks like they’re playing more with indirection features now (created for vdev removal) for other features. One of the recent summit hackathons sketched out using indirect vdevs to perform rebalancing.

Once you get a lot of snapshots, though, the indirection costs start to rise.
Watching American (and EU) industry leaders panic whenever China shows up never gets old: Western automakers had the chance to dominate international markets, but they stayed back at home, making overpriced cars for their captive audience of local buyers.

Whenever competitors showed up, they laughed at them, before panicking when those upstarts starting challenging their market dominance. It happened with Japan, Korea, and now China. And in other industries, e.g., solar, nuclear power, etc.

So, if you feel China competes unfairly, close off your markets. Countries without a local auto industry (large swathes of Asia, Latin America, the admittedly tiny African market) will accept Chinese EVs readily and it will give them time and experience to perfect their designs and business model. BYD & co. will then snatch American & EU automakers' foreign markets before they come home to swallow you alive by building factories in low-cost gateway countries like Bulgaria, Hungary, Romania, Mexico, & Brazil.

Basically, the Toyota cycle will repeat itself because Western (esp. American) automakers spent hundreds of billions on share buybacks instead of R&D.

PS: Wrote this as a reply to another comment, but I feel it needs to stand alone.
I get the argument, but if that is more than a strawman argument to you, I am bewildered. Making a network connection is infinitely less problematic than having root level access to a kernel (translate to windows language for NT)
Case-Shiller seems to disagree that home prices are still below 2022 levels: https://fred.stlouisfed.org/series/CSUSHPINSA
I use it all the time for work. Not much for actual code that goes into production, but a lot for "tell me what this does" or "given x, how do I do y". It speeds me up a ton. I'll also have it do code review when I'm uncertain about something, asking if there's any bugs or inefficiencies in a given chunk of code. I've actually found it to be more reliable about code than more general topics. Though I'm using it in a fairly specific way with code, versus asking for deep information about history for example, where is frequently gets facts very wrong.
It is if the hardware is proprietary and drivers nonexistent.
Good lord willing and the creeks don’t rise.