skysight-inc/HackerNews huggingface dataset:
The problem is not capitalism, it’s corporatism.

Or more precisely, it is that we allow a group of people, under the control of a single person or very small number of people, amass incredible power, and do so in an amoral framework in blind service to a goal of stock price growth.

The problem is a scale problem in my mind. If you limit the scale then all the other problems become manageable.

We wouldn’t need antitrust laws anymore if our tax laws made it unprofitable to own shares in a company with, for example, 50% of search market share or online retailing share.
> But only in processing power

Only in processing power?

So you mean JavaScript is less efficient than WebAssembly, which means every time a piece of JavaScript runs on the billions of systems running its suboptimal runtime there is higher power usage, which means there is a greater demand on energy supply, which means there are greater carbon emissions, which means more global warming, which means we're closer to a climate change catastrophe than ever before.

So not only is JavaScript slow it's also an ecological disaster.

You've convinced me. Brendan Eich has a lot to answer for.
When this first showed up I took 3 backups: two on networked drives and one on an external drive which was then disconnected from the system.

The second time I just went “meh” and let it run.
That doesn't really do it right? The state would have to have its own training cluster.
It's not "old fashioned", I think you are being fed propaganda by these NGOs.

Sadly, same goes for a huge part of the mainstream media that becomes an echo chamber for them (Guardian, NYT for example that used to be reference of truth but lost that status).

Don't take my word for it, please take the time to read opposite views and try to honestly make your own opinion.
Would other SoC suppliers ( Qualcomm, Broadcom) embrace it?
I'm the author. I've been meaning to write something about this, but for context, I was a very strong psychology student, completed my degree, learned most of my early computer science/statistics from a clinical neuropsychologist, and can get a clinical license in about two years if I want to do that. I'm like, still deeply into psychology in many ways.

But the epistemology of the median practitioner and academic is ridiculously low. I'm now convinced that they're not actually that worse than other fields though, it's just that clinicians lead a feedback mechanism as obvious as an exception being raised so they never improve to some baseline floor.

Paul Meehl's influenced me deeply on this topic, as did Gregory Francis' critique of Paul Piff's (great name) terribly conducted yet ultra successful work.
Are you suggesting Dean take a different approach in his response? Are you saying it was already too late given the environment? (I’m also not sure I know what you mean by environment here.)
People waste so many hours watching these types of video where the presenter talks a lot around the problem (has lots of fluff, comedy skit and ads). I think the presenter should have used this opportunity to introduce random variables, independence, Tschebyscheff inequality and explained the "bizzare" puzzle.

Or if you are going to do this with simulation, then a introduction to Monte Carlo methods, and why such simulations work and provide correct results would have been a better us of viewer's time.

But videos like this just state a fact and then handwave around the fact without hitting the core idea. The viewer leaves with a false sense of understanding, and keep wondering about the "bizzare" fact, when it is nothing but good ol' introductory probability. YouTube math needs reform.
> If you’re arguing that OpenAI should be compelled to make all their technology and models free

no i'm not - i'm arguing that it's weights are not copyrightable. It doesn't have to be free or not - that is a separate (and uninteresting) argument.
> "they couldn't replicate it because they're idiots, therefore it's replicable"

Where does it say that? Dean outlines explicit steps that the authors missed in the tweet.
Back when I switched, I was looking for a good drag and drop library as well as a node based diagramming library. React Flow for the latter is best in class, and it's simply unavailable for other frameworks.
Exactly! I was also :)
In my experience, building user facing products requires understanding of user interaction and general human affinities. In the indie developer context, the knowledge of making the app “relatable” is often more important than underlying engineering fits. I have shared some ideas in the discussion at the top of this page (the Time Nomad discussion)…
Interesting point, I give u this
"Tlön, Uqbar, Orbis Tertius" as I understand it is more ambiguous about exactly why Tlön is becoming real in the narrator's world. Although there is a description in the afterword of such a guild having fabricated Tlön and some artifacts from there, the story up to that point seemed to take Tlön's metaphysics (in which the idea of a reality outside of our perceptions is considered absurd and impossible) pretty seriously, and the end of the story presents the situation as though the narrator's world is actually starting to work according to these principles. That could conceivably be for merely social-perception reasons, although according to Tlön's philosophy there couldn't be any such thing as "merely social-perception reasons" because social perception obviously wholly creates the real and only reality.

One could imagine that the guild called up something it then couldn't put down, but necessarily because people will or prefer it so, but somehow because the world, at least in the story, fundamentally could work this way.

The Wikipedia article discusses how confusing it is to understand the exact position of the story with respect to narrative truth, when the entire story is playing with the idea of what is real and what makes it real, as well as explicitly talking about the idea of fiction coming to life:

https://en.wikipedia.org/wiki/Tl%C3%B6n,_Uqbar,_Orbis_Tertiu...
I Built a Productivity Platform for the Cybersecurity Community
I kept running into the same problem: finding curated lists of open-source security projects, compliance, regulations, standards, best practices, etc., but nothing that brought it all together in one place.

To address this, I attempted to create a platform to benefit the cybersecurity community.

The main use case is providing quick access to cybersecurity bookmarks — a resource that red teams, blue teams, GRC consultants, CISOs, and others can use.

I hope this helps the community and would love your feedback and input on how to improve the platform to better support everyone in the field!
Okay, but none of that is relevant to the article. This article is about a genetic condition called FNSS which results in you getting a full night's sleep in less time. It specifically addresses the concern that there might be unobserved negative effects and that so far, we haven't found any. If you have FNSS there is no reason to try and force yourself to sleep for 8 hours a night and it is not something being sold on YouTube.
Through the blog I get to meet a lot of people from all walks of life, and this has broadly been the consensus, with some exceptions. "Never try" is maybe unique to I.T, "remain fundamentally incompetent or try incorrectly" is very common.

I was horrified to hear surgeons say that they view their field this way. Lawyers seem to be a bit more optimistic on average, but I still hear horror stories now and then. But yes, the floor varies field-by-field, though the broad point I want to make is that I.T is not uniquely bad.

See: HR, recruiters, real estate agents, etc. I had a friend's birthday party where he and all his guests worked in hospitality, and the stories I heard did not at all indicate that the industry is run sensibly.

EDIT: Oh, and of course, I talk to journalists now and they say the exact same thing once the microphone is off.
There are benchmarks in this space. You can also bring your chip designs into the open and show what happens with different tools. You can run the algorithm on the placed designs that you sponsor for open source VLSI to show how much better they are.

None of this has been done. This is table stakes if you want to talk about your EDA algorithm advancement. If this weren't coming out of Google, everybody would laugh it out of the room (see what happened to a similar publication with similar claims from a Chinese source--everybody dismissed it out of hand--rightfully so even though that paper was MUCH better than anything Google has promulgated).

Extraordinary claims require extraordinary evidence. Nothing about AlphaChip even reaches ordinary evidence.

If they hadn't gotten a publication in Nature for effectively a failure, this would be way less contentious.
> making it the state’s fourth-largest cultivar after Red Delicious, Gala, and Fuji.

Red Delicious has to be the nastiest apple cultivar in existence. Why in the world are they growing that many? Replace them with something decent like Pink Lady.
(Sorry, somewhat copying this, since I responded to a similar point elsewhere.)

This is not practical advice for the vast majority of software engineering teams.

Most teams do not have the privilege of being able to do research and prototypes across multiple options, at least in a way representative of what their final product will look like. Most teams - at least those in small to mid-size startups - will start out building A, route through A' and A'' and end up building B once they land on PMF. If you were to run 5 different prototypes on A, you're going to be a bit upset when you end up at A' and you're likely to run horribly technically aground when you truly find the right thing to build.

Yes, if at the point when you discover B you have the latitude to rewrite your entire codebase to fit your new criteria, then by all means, go ahead. That will definitely outperform React. I think the teams with that kind of latitude is an exceptionally small fraction of all teams, and the number of teams with the technical chops to do it correctly will be an even smaller fraction of that. The rest of us will use React, which is roughly 80% as good as the optimal solution.
I think the current "meta" is CAA records? https://blog.cloudflare.com/why-certificate-pinning-is-outda...
I... don't think this \9 is intentional! If I remember correctly, any attribute value would mess up IE < 9.

At this time, I was favoring using conditional comments to deliver tweaked simplified CSSs for the IEs. They were not only buggy, they were slow, so for a while it made some sense.
As does the focus on her wedding. Yeah she defrauded investors for millions and spent the money. She isn't going to jail over the specifics of her spending, but the first part.
We meet again! And yes, I try to keep the reading to 9-5, at least on technical topics. My team is free to read as much as they want when they're benched, and we tend to read in pairs so that we have discussion partners.

Although since we don't know if the businesses is successful yet, we'll see if that's economically rational!
The hub keeps a video until it is received by the app. The hub has a component called the delivery monitor, which processes acks from the app and keeps track of the delivery status of each video. It resends the videos when needed to ensure delivery. Once the app acks receipt of a video, the hub deletes it. The app then keeps all the videos until the user explicitly deletes them. (I've been thinking of a feature that automatically deletes all videos in the app that are older than a threshold, but haven't implemented it yet.)

The server is untrusted and does not have access to the plaintext of videos. It only receives the ciphertext (encrypted video) and notifies the app to download them. When the app fetches a video, the server deletes the ciphertext (in order to be memory efficient).

Yes, the hub is part of the Trusted Computing Base (TCB). That means that we trust it. If the attacker compromises it and takes full control of the hub, then the attacker has unfettered access to the IP camera.

That being said, if the attacker only manages to take a snapshot of the keys used by the hub for encryption (and nothing more), then the forward secrecy and post-compromise security aspects of MLS comes to our rescue. They ensure that the attacker can only decrypt some of the messages (at most a full video depending on what keys are compromised), but nothing before and after that.
I would expect a vigorous effort to reverse engineer Solark's firmware to spin up, assuming it hasn't already.
not neccesarily? It depends on what the claims are. If prior art says 'this is impossible' then a study with one result that is hard to replicate is an interesting insight about the margins. If it is commonly accepted wisdom, we may need to address what that is. If it is your experiment, it doesn't mean your result is wrong but it means it should be significantly questioned. If I say its more that is on me...if I say it is what it is then the results are the results.

I think it is a growing, and problematic, misconception that science is about just reporting facts. It is about adding knowledge...soemtimes that is new facts, but more often it is theories, observations, and questions increasingly at the margins of randomness and probability as our species grows and learns.
Do you have any credible sources?

"Do your own research" is a pretty thin rebuttal to "here's a source by a well regarded NGO".

And if you are saying Amnesty International is feeding propaganda through the mainstream media, that's also going to need some credible sources. They are generally considered a fairly highly factual organization.
To be clear (to respond to a few people panning the legitimacy of applerankings.com), I didn’t actually take the site super seriously, it just made me take more notice of the Honeycrisp and try it out.

That’s when I realized that they were very rarely mealy, something I’d been in search of for years.

But agree that the site is mostly intended to be a more humorous take on apples. (And, to be fair, it is quite funny.)
According to the former CTO of GitHub, the need for an org to use monorepo vs microservices is dependent on the scaling size: https://news.ycombinator.com/item?id=33601658

According to him, startups work better in monorepos. Microservices work better for medium to large size organizations. Monorepos again for Google size mega orgs.

In the end, its a dumb debate. Because it’s a tooling problem, not a code organization problem. It doesn’t matter which you pick, your success or failure in the organization pattern is entirely dependent on how much you invest in tooling and whether that is microservices tooling or monorepo tooling matters not. Anytime you see someone complaining about one or the other and you ask them why, the answer always can be resolved with better tooling.
I didn't say it was old fashioned, I said I was old fashioned because I can't cheer for the government effectively 'disappearing' large numbers of people. In the US we've enthusiastically taken up arms against governments which did this type of thing. We have parades to honor people who died fighting against it.

Amnesty International isn't editorializing and this isn't a remotely controversial claim: the roundups happened via emergency powers which, by design, denied due process. It's not a secret, El Salvador wasn't trying to hide this.
Exactly!

There is a whole taxonomy of hacks. Syntax hacks (star hack), CSS hacks (clearfix), quirks mode doctypes.

A few years before that, we had single pixel GIF transparent spacers to manage table cells in layout, and more atrocious hacks.

This was a dark age.
I'm not too concerned with that. As far as I know, almost all Android apps that need to send notifications to the device use FCM. If Google pulls the plug on it, many apps will stop working as intended.
Very cool, but wish it was at least 2x2.5GbE.
Seems kinda weird, why one GigE and one 2.5GbE? Maybe they will make a one plus with double the ram and 2x2.5Gbe?
That is how I always did Google searches, even from 20 years ago, and I still get garbage results.
What would be Amnesty’s agenda in feeding us propaganda about El Salvador?
If so, does this qualify as “snake oil”? What do you mean? Snake oil requires exaggeration and deception. Fair?

If a paper / experiment is done with intellectual honesty, great! If it doesn’t make a big splash, fine.
Not just that, the tradeoffs in developing countries are different on the ground. They have to do practical decision making based on limited resources and issues. The alternative is simply criminals taking over.
It looks really cool! It does still seem to need a signalling server though, so it doesn't seem like it could replace Jami unless they finally add some true LAN P2P features to the web.
Seems almost ideal if you don’t use it as an ethernet switch. A third radio for wireless mesh trunking is the only thing I see missing from my OpenWRT setup.
Just my opinion but don't you want to patch that hole with a better switch? Or put it downstream of a switch that does enforce vlans? Most likely your iot devices don't really need anything more than 10-100 megabit connections anyway?
Just because it's a pet issue of mine: the FBI specifically warns against making a table like this one because crime stats from different agencies simply cannot be compared like that. It also tends to distort reality when a city with a relatively small Census resident population has a much larger daytime population due to commute patterns.

https://ucr.fbi.gov/ucr-statistics-their-proper-use
So they can mitm their own employees without annoying TLS warnings.
This represents less than 10% of annual government spending or revenue and less than 2% of their outstanding debt. It's cool, but not a huge deal at this point. If Bitcoin went up another 10x it would be significant.
I have published an addendum to an article I wrote about AlphaChip (https://vighneshiyer.com/misc/ml-for-placement/) at the very bottom that addresses this rebuttal from Google and the AlphaChip algorithm in general.

In short, I think the Nature authors have made some reasonable criticisms regarding the training methodology employed by the ISPD authors, but the extreme compute cost and runtime of AlphaChip still makes it non-competitive with commercial autofloorplanners and AutoDMP. Regardless, I think the ISPD authors owe the Nature authors an even more rigorous study that addresses all their criticisms. Even if they just try to evaluate the pre-trained checkpoint that Google published, that would be a useful piece of data to add to the debate.
In my travels I have found React to be, generally, a poor choice for most applications - particularly in projects that have contributions from many developers with varying levels of experience.

While it _can_ be super fast, in practice, it requires quite advanced knowledge of React-isms to get it there. Those React-isms require more code with increasing complexity, combine that with contributions from developers that have varying levels of experience and you end up with spaghetti code.

Consequently, I have yet to walk into a new role where the React code isn't a dumpster fire.

In a way, React feels very much like writing raw C - it has a lot of power to be fast but most developers aren't as smart as you (joking, sarcasm) so unless you're the only contributor; you're better off using a higher level language with fewer footguns.

Modern Angular, for instance, is amazingly ergonomic and the opinionated approach makes it difficult to drag the project too far down the unmaintainable rabbit hole. The compiler handles optimizations for you so you don't need to worry about render cycles or how a functional component loops around - making it friendly (in theory) to developers with varying levels of experience.

These ergonomics fall apart when developers try to make Angular projects "React-y" with tools like ngrx but for me; the biggest downside is that you have no control over the tooling (test runner, TypeScript version, bundler, etc). That is the only reason I avoid it in personal projects.

Svelte and Vue on the other hand suffer from similar problems in that they are fantastically ergonomic, but use custom file formats with bespoke compilers that are difficult to integrate with other established tools (TypeScript, linting, formatting, testing).

One thing that saddens me is that toolmakers (specifically TypeScript) sleep on opportunities to have much better front end frameworks because they don't provide the capability to extend the LSP and transpiler.

For instance the inclusion of Rust-like compiler macros in TypeScript could enable projects like Vue, Svelte and Angular to integrate directly into the language without the need for bespoke compilers and adapters to connect to tooling.

That way, much like how TypeScript has a built in compiler for JSX, Vue could integrate their template compiler within TypeScript rather than using external tooling that targets .vue files - example:

export const HelloComponent = {
tag: 'app-hello',
template: vue!(<div>Hello {{name}})</div>),
data: () => ({
name: "World"
})
}

And Angular

class AppComponent {
static tag = 'app-component'
static template = angular!(<div>Hello {{ name }}</div>)

#[model]
name = 'world'
}

Alternatively, the completion of wasm would enable the use of languages with the appropriate feature-set required to build maintainable, multi-threaded & performant web applications - but at this point that seems like a distant pipe dream.

So ultimately, while React isn't really a great choice for web applications, it's attained a jquery-like status where it's not really good but the alternatives are worse so you kinda have to use it.
So when they issue their certificates, you don't get that huge red banner? I belong to a small developing country and even with its tech illiteracy it has a CA. Now, of course, because that CA is not trusted by anyone, all government websites are red.
I think this is really helpful and I am just very grateful that it's not a straight up money grab like so many others in cyber are prone to do.

Would you consider doing a "year in summary" type report? Or how about adding "cyber threat intelligence" as a category? I appreciate the service is free as it is now, but the "intelligence" part is both valuable and requires work. Could be something to consider if you want to sustain this with funding.

Also, as with many "cyber" sites, is there a dark mode?
Craig Federighi on some podcast once said they conducted dry-runs of the process in previous iOS updates (presumably building the new APFS filesystem metadata in a file without promoting it to the superblock) and checking its integrity and submitting telemetry data to ensure success.
Renewables did compensate nuclear's underproduction: without them France would have burnt more fossil fuels.

Moreover ~60% of France's final energy is obtained by burning fossil fuels => France must electrify (replace fossil fuel by electricity) => produce more gridpower => deploy new gridpower-producing equipment and such heavy industry thingies cannot be built overnight.

Upon an economic viewpoint electrifying is facilitated by the sheer availability of low-priced electricity.
Windows CA program is governed by requirements like any other CA. Microsoft has ways to provision machines with enterprise CA roots so there is no advantage, and highly visible disadvantage, to adding a noncompliant CA to your trust store. I think that the theory that Microsoft will included it to sweeten a sale has no merit, unless you have evidence.

Most certificate trust stores have some certs in them that are sketchy, eg a bunch of university certs from all over Europe. These are slowly dropping off, presumably because it costs quite a bit to operate a CA in a compliant fashion and get it professionally audited.

Issuing a fake cert is grounds for removal from every certificate trust program I’m aware of, if it can’t be demonstrated that they found what went wrong and have fixed it so it can never happen again.