skysight-inc/HackerNews huggingface dataset:
> * there is almost certainly a known kernel exploit out in the wild, but the agencies that have it generally reserve using them until they really need to - or they’re patched.

There's literally emails from police investigators spreading word about the reboots, which state that the device goes from them being able to extract data while in AFU, to them not being able to get anything out of the device in BFU state.

It's a bit pointless, IMHO. All cops will do is make sure they have a search warrant lined up to start AFU extraction right away, or submit warrant requests with urgent/emergency status.
If you need to store the entire Netflix catalog, then yes, tape would be the way to go here. If you're just storing your own personal collection, then definitely not. It's much cheaper to just buy or build a NAS with some large HDDs and store your entire library there, plus you can have immediate access to it any time with Jellyfin or Plex. The problem with tapes is that the tapes themselves aren't that cheap, and the drives are prohibitively expensive and require an HBA card (even more money). On top of that, enterprise software for tape management is horrifically expensive (and you probably can't buy it anyway as an individual), or you have to manage them manually at the command line with `tar > /dev/tape`. Even worse, if your tape drive dies (it is a complex mechanical item with lots of moving parts after all), then to read your tape library, you can't just go buy a new one, you have to get one of the same or similar generation as the tapes: an LTO-7 drive can't read a LTO-4 tape, for instance.

At least DVDs are a fixed format that hasn't changed in decades, and getting a drive to read them is easy (and BluRay drives can read them too).

DNA makes no sense for storage: it isn't even very good for storing our own genome, and needs complicated mechanisms to ensure integrity, and even then frequently fails, resulting in mutations (which is how evolution works).

What we need is glass-based holographic storage. There is some commercial work here that I think Microsoft is involved in, but it seems to not be moving very quickly.
We would order pizzas to one person who complained about our skateboarding.
An man guilty of Bitcoin laundering must forfeit over $400M in asset
Unironically yes since China wont move geographically from its position for million of years, US can be distracted by something else somewhere and pivoted from Asia, but China wont. It stays there.
Swatting is pretty common:

- https://en.wikipedia.org/wiki/Swatting#Injuries_or_deaths_du...

- https://en.wikipedia.org/wiki/Swatting_of_American_politicia...
If one were to believe there are actors in our society bad enough to justify a service existing then one would also have to believe there are actors bad enough to abuse that service with a view to kill anyone. It’s paradoxical that such a thing exists.
The thing about an occupation, is there is no political avenue for the occupied to get rid of the occupation, except via the UN through resolutions, or via an arbitration through the ICJ. The only other alternative here is direct action, including violent and non-violent resistance.

Israel is not abiding to UN resolutions, nor ICJ arbitration, and it is non-violent resistance have so far been met with violence by the occupier. That does not leave many option for Palestinians, does it. And I would certainly say Palestinians have fought, and tried to get rid of the occupation that way. Personally, I really wished Israel would have responded to the non-violent option. A lot of lives would have been spared. And, that is sort of the point of the UN in the first place.
htmx will not be abandoned as long as I'm alive, and the API will not change significantly either

i am hoping my oldest son gets interested in computer programming and can take over as the lead eventually
Why Not Bluesky
swatting is older than I am, and kids have been calling in bomb threats to get out of school for the better part of a century
You clearly haven't tried it or even googled it - because it's impossible to do it unattended. A dialog pops up (and only when unlocked) asking you to confirm the reboot. It's probably because they were worried users might end up in a constant reboot/shutdown cycle, though presumably they could just implement a "if rebooted in the last hour by a script, don't allow it again" rule.
Extremely valid points there.
You can track your husband’s phone without knowing it effectively through TOMCYBERGHOST@GMAIL.COM. It’s fast, safe and easy. You get frequent updates about fits various activities and movements. If he really cheated, you will need quick proof
The meaning of "meaning", Hilary Putnam (1975) [pdf]
> GluCoPilot

I’m dead I love it.
It depends on the medium and the cost of looking like an idiot. On the Internet where some tosser is going to call you names anyway? Saying dumb shit to nerdsnipe someone else to do hours of research and write an essay on it for you, at the expense of them calling you an idiot, is cheap, and easier than doing all that work yourself. Meanwhile, at work, I'm the one getting nerd sniped into doing a bunch of extra work.
Wow. Sustained for the full hour? That's 7200kWh monthly. Roughly 2x per sqft compared to my 80's home.

I've spent a lot of time in my attic air sealing, distributing insulation that was poorly installed, installing new insulation, insulating the basement, air sealing the basement. In my experience, it did not lower my power usage but in that time I added a second heat pump so I can't compare apples to apples. I can anecdotally say the upstairs seems to retain its temperature better. I'm hoping this winter I'll know if it helped.

If you end up solving your problem blog about it and I'll read it...
Another "LLM skeptic" arguing it is impossible for LLMs to ever reliably answer a certain type of prompt, because they can't answer it reliably in 2024.

Every previous skeptic making this argument has been proven false so far
I've found that I rely most heavily on LLMs when:

1. I'm developing a utility package that's easily testable and I'm certain of the interface. I'll write the interface for the package in my editor, then ask an LLM to generate unit tests. Then, I'll sketch out the function calls/structure of the package and get an LLM to fill out the rest.

2. I'm bug bashing and want to quickly check if the bug is obvious. I'll feed a description of the behavior into GPT/Claude along with the relevant code (generally as little code as possible to prevent listicle-type responses that are irrelevant).

3. I'm adding code that follows an established pattern within the codebase -- for example, adding a new API handler that involves generating an OpenAPI path + component snippet, an http handler, and a few database methods. This is when copilots are particularly useful.

4. I'd like a sanity check for issues in a complex bit of code I've written.

I find these mirror the tasks you'd typically hand off to a less experienced dev on the team -- these are things that require validation based on knowledge that you already have, and the validation is more efficient than doing it yourself.
That's not how I read that.

This statement from the EPA is the crux of it: "Most cybersecurity practices can be implemented at minimal cost."; a statement that anyone involved with software/cybersecurity knows has never been true about any software system, ever. It feels very reasonable to me that some of these dirt-poor counties could look at a new set of cyber requirements and say, we physically cannot pay for this; and while the EPA goes on to list sources of funding they offer, I don't know much about those; its possible that given they've already vastly underestimated the cost of securing an industrial software system, they're also vastly under-provisioning the grant funding available to do it.

No one wants their water systems insecure. Republicans aren't a comic book villain; and to help empathize with how they think, right or wrong, consider this: What if we took a good chunk of the EPA's budget and distributed it to the local water utilities directly (in other words: Your federal taxes go down, your county taxes go up). The EPA seems really good at drafting memorandums they have to redact and publishing reports about how insecure our water systems are; Republicans would argue, the money we spent on those things did nothing to help actually fix the problem, so maybe the solution is "less EPA".

I'm not saying this is right, and I'm not saying its even representative of a cogent reality. I'm just saying, this is the line of thinking.
I had good results with caffeine. Sleep for two hours set an alarm and drink some caffeine beverage or use caffeine pills and go right back to sleep.
From: https://www.independent.co.uk/news/world/americas/crime/swat...

> Prosecutors say the ... teenager advertised his services under the pseudonym Torswats on the encrypted messaging app Telegram, charging as little as $40 to get someone’s gas shut off, $50 for a “major police response”, and $75 for a “bomb threat/mass shooting threat”.

I don't think this is pranks. I had an antisocial stint in my late teens also and it was more about gaining some power over a world that wants to treat you like a cog. I bet it wasn't even about the money (at least it wasn't for me) it's just that having a "hussle" is a persona that you can wear if you want to focus somewhere besides the consequences of your actions.
Electrochemical reactor could make direct air capture more energy efficient
(1) we are past the point of this headline. (2) remaking software development to work with LLM’s is going to take more than two years. (3) we’re making great progress.
Cyberattack Cost Oil Giant Halliburton $35M
> Apple puts this out there to break iPad-based DIY home control panels

If you were using an iPad as a home control panel, you'd probably disable the passcode on it entirely - and I believe that'd disable the inactivity reboot as well.
I don’t think you can gloss over the importance of computational tractability here. A human could also start enumerating every possible statement in ZFC, but clearly that doesn’t make them a mathematician.
Yep, this is pretty easy. No one ever has to say yes to an arbitrary sexual partner -- if you don't want a penis in your sexual life, rad, feel free to express that preference.

I'll disagree, I'm here for all stripes, and I guess I'd consider the vomit emoji to be way ruder than necessary for expressing a simple personal preference, but I'd tolerate that opinion being posted somewhere.

Denying trans people exist is transphobic. It's a ban in my book. If someone says, "I'd like to learn more about the differences between sex and gender... because they seem the same to me" I'm happy to spend basically infinite time teaching/explaining/dialoging. But if you come out with "only two genders" and "lesbians cannot have penises" I'm done conversing and you can get sent packing.

I'm not open to the idea that trans people are an illness any more than I'm open to the idea that gay people are an illness. No time or space in my life for that hate.
I'm sure a lot of consideration was put into how to deal with this problem. It's probably not cheap or easy running specialized SWAT teams for calls and there's nothing police would hate more than being taken advantage of by criminals.

But they seem to have decided this is the least bad option. They have a duty to respond to serious phone calls about armed situations.

The main issue is the insecurity of the old telecom system where spoofing is so easy. But we're heavily invested in it as a society.
Ah yah, I think this exactly gets at what I mean.

> I'm a little less nostalgic for the experience of trying to copy game files over the network to get everyone on the same version, or pitying the one friend who inevitably has to reinstall Windows and doesn't manage to get in-game until after midnight.

What you are describing is a cultural coming together in a digital kind of way. People would gather and bring their own computers and you would all work together to try and get those computers to talk to each other. Often someone would get their computer fixed up or made worse, but in any case the home setup of each person was changed a little bit by each LAN party. To me, that's the essential element of a LAN - the communal mixing and sync'ing of setups and programs that flows back out into each individuals' home. You can imagine it as a kind of digital breathing or hugging where folks gather together, commune, and then leave somewhat changed. We would try to have spare boxes for people who didn't have equipment or time to bring theirs, but it wasn't the same. This is exceedingly well constructed and imagined, and to me you've essentially built a private net cafe - complete with the netboot arrangement. It's really impressive but I don't think you should call it a LAN.
Or "single-app mode", which is a more tightly focused kiosk mode:

https://support.apple.com/guide/apple-configurator-mac/start...
'Dune: Prophecy' will launch viewers into worlds far beyond Arrakis
the math people work towards the same goal. why single them out
> There’s no way that a disaster on a manned mission would affect a satellite launch. They share nothing in common.

It would definitely affect satellites, since the shuttle was a major satellite launch system. But even a deep space probe project like Voyager would be at risk, even though it seem directly related, because by affecting the political prestige of NASA, it effects everything that has to get funded at NASA – the politics of legislation are not bounded by rational direct impacts.
I’m not sure, but I wouldn’t expect the inactivity timeout to trigger if the device was already in an unlocked state (if I understand the feature correctly) so in kiosk mode or with the auto screen lock turned off and an app open I wouldn’t expect it to happen.
> 1. surely unconditionally rebooting locked iPhones every 3 days would cause issues in certain legit use cases?

I wonder if this explains why the older iPhone I keep mounted to my monitor to use as a webcam keeps refusing to be a webcam so often lately and needing me to unlock it with my password...
If there’s any chance that the Dark Forest theory is valid, I’d really rather we not!
As a cybersecurity practitioner and owner of a mid 7 figures budget to defend an enterprise, I am not unfamiliar with the costs (controls, staff, implementation). But, the evidence is clear that the response was “no” to this effort, and no further action or negotiation to improve the security posture of these entities. I know what it looks like when someone says “we don’t have the funds for this, what can we do with what we have?” but also what it looks like when lack of funding is an excuse to take no further action. Republicans have made no effort to appropriate funding for this work at either the federal or state level, for example. If this matters to them, when can we expect this to happen? And how many people will have to be harmed first for it to happen?

> Republicans aren't a comic book villain;

Agreed, they’re much worse. “We’re going to spend nothing, and when something happens to you, too bad, so sad” under the guise of fiscal responsibility. But if that’s what you vote for as a voter, who am I to get in your way? This isn’t a problem to be fixed, this is an indicator of electorate intent.

> What if we took a good chunk of the EPA's budget and distributed it to the local water utilities directly (in other words: Your federal taxes go down, your county taxes go up).

This sounds like a recipe for fraud and waste due to the sophistication of those responsible at the local level, with no accountability.
I had no idea that it's that old. I had only heard it in the context of consultant bashing.
To be fair thfuran was hard to decipher and should be refactored to be more clear.
If I were looking for low hanging fruit, I suspect it wouldn’t reboot if you were to replicate the user’s home WiFi environment in the faraday cage, sans internet connection of course. Or repeatedly initializing the camera from the lock screen.
Hmmmm. On one hand "closing.wtf" definitely stands out... So many startups have boring branding. But on the other hand, you are building in a legacy space. It's important to build trust & pay attention to the feedback here.

Does your target demographic understand "startups" or do they just want to solve the problem?
> It turns out that the AArch64 execution state (or is it the A64 instruction set? or the Armv8-A architecture? I hate this

https://nickdesaulniers.github.io/blog/2023/03/10/disambigua...
You'd have to be in very good shape already to do 75 minutes of burpees per week.

Of course any exercise is better than none, but I suspect the duration of exercise is important to get all the benefits.
Anonymous being the key word here
Swatting and bomb threats are different things. The rise of live steaming also seemed to encourage swatting as you could see the results live.
What these arguments usually miss is that precision doesn’t really matter to an expert user.

A professional, experienced engineer can filter the crap from the real. LLMs usually get me over the mental hump of project setup/boilerplate. They also let me rapidly prototype vague ideas in record time.

They also make the bar for a productive junior engineer much higher, as an LLM can perform a precisely defined task much faster than a junior engineer.
I guess my friends were weird, but our idea of doing a teenage prank with phone calls was to use our two phone lines (we had 2nd phone lines for our modems) to set up conference calls between each other, and then each of us would call a pizza shop (I might call Domino's, and he'd call Papa John's), and then mute ourselves and laugh while the pizza shop workers would argue about who called who. The smart ones would immediately catch on and say "I think someone is playing a prank on us" and hang up quickly, but the dumb ones would get into an argument with each other.

When Caller ID became the norm, it completely ruined phone pranks like this.
It's time to replace TCP in the datacenter (2023)
Ask HN: What's the ONE AI feature you've dreamed of having on your website?
Imagine you could add a powerful AI feature to your website—anything at all. What would it be?

Whether it’s a tool to engage users, automate tasks, or deliver a magical experience, I’d love to hear your ideas. What’s missing that could take your site to the next level?

Let’s brainstorm the future of AI-powered websites!
Linux doesn't need binary compatibility as much as Windows, lot of source packages will compile right away with a vast array of different operating systems, typically excluding Windows but including Linux, and Linux is a few clicks away from running a fair number of MS-DOS and Windows applications, probably more than any single Windows version. Linux is king in compatibility.
Should be using plainclothes officers to scout out situations prior to sending in swat.
because it makes you unqualified to say that it's not a bloated sloppy mess. Because it is.

If the blogger just wants to write a blog and doesn't care about anything else, they can just use threads, or keep on using twitter, for that matter. But for some reason, this hypothetical blogger has decided that they don't want to use Twitter. They don't have to write their own static site generator, but in moving off Twitter, they're going to be exposed to some of the details behind the scene. If they're not an anti-intellectual, this hypothetical blogger can do some light reading to get up to speed.
>We have finite resources

So design systems that does not exceed those resources.
This is great, thanks!

As someone that has been working with css for over a decade, I was surprised to find out about the contain property, as I had never known about it and it seems extremely useful for hinting to the browser of optimizing DOM operations.

If anyone with experience writing DOM/layout code for browsers knows anything about whether these optimizations are indeed used/meaningful, that would be stellar!
I haven’t yet had a chance to work on aerospace (or beyond) equipment though I do work on medical grade things and some of the parts are aerospace certified, though they haven’t been put through the ringer. In particular, I work with high voltage/amperage, high liquid pressure and high temperature systems. Some of it has been running for close to 25-30 years with very few issues. Only recently have I had to open a power supply that degraded since it was first put into service (over 20 years ago). I’ve gotten into a habit of identifying parts that, through experience, I know will fail or can fail and replaced them with ones that are all but guaranteed to outlive me. I want the person, if anyone, who comes after to see the work that’s of higher standard than what came out of the factory. No machine can continue working forever, but one can get much closer to having fewer failure points. As an aside, to get to here however was a struggle of obtaining all sorts of things I shouldn’t have access to because the manufacturer started locking access down heavily. Story for another time.
Police departments need to immediately adopt a clear policy of officers asking for a phone being forbidden (without a warrant). Obviously they shouldn't anyway but having an explicit policy would make it easier to act against without needing to first prove explicit wrongdoing while having the phone and it would also act as a deterrent.

Second, I'm dismayed that apparently so few citizens know the only correct response to a demand for your phone is to demand a warrant.

Also, it's shocking so many people keep sensitive personal media in unlocked locations on their phone. My android phone has a Secure folder where apps and media can be kept which requires a password or pin to unlock.
Neuroscience reasons for what AI cannot do yet
Maybe you want it locked and only showing notification headers.
I'd say it's a type of arbitrage.

The typical arbitrage in bookies (scalping I think they call it), hedges one bet against the other.

But in the case of the paper, as I understand it, they just take the bet unhedged for some reason. Which unlike most other forms of arbitrage is sustainable.

If you were buying commodities you would also need to sell the commodities, but since these pseudo-securities coalesce into money, they don't need to make the inverse trade to sustain their alpha-seeking fund.

With that difference aside, I'd say it shares many of the same properties of arbitraging, I don't know how translateable it would be to stocks, but many of those assets coalesce into cash as well, especially fixed income (at a much slower rate), and options (albeit in more complex manners).

I imagine that with the amount of new currencies that exist, a big part of the job is going to be moving currency of one form into another and essentially forming a new circuit, for example buying crypto with fiat to bet in a crypto sportsbook, and the selling that crypto to buy more fiat.

In essence there's also the risk of becoming a money launderer doing this, whether trading stocks, currencies or betting, it's a form of arbitrage and you are getting money from ???.
One of the things I really love about rope is that it allows for a lot of interesting encoding schemes at inference time without model retraining. I’ve had a lot of fun playing with different relative positions. You can elicit a lot of interesting behaviors from the model when you use different rotations for keys vs queries, they don’t always have to match.

For example exact position doesn’t matter too much when tokens are spaced out. Let’s say you use token position 100 for your query, you can shift all the keys around position 100, and the further they are back in the context the more freedom you have to play with the value.