skysight-inc/HackerNews huggingface dataset:
That sounds like a really good idea, one problem though: this doesn't benefit the lawmaking and law-exploiting classes, so why would it happen?

It's pretty clear that the legal system mostly exists to preserve big financial interests. I spent much of my adult life watching SCO play the system...
I love this, I'm a big fan of this approach to technology. The weakness in this approach, for me, is that these examples seem to be mediated through AR glasses, which kind of undoes the analog-ness of the whole thing a bit.

For an (old!) example that doesn't use glasses, I'm reminded of https://www.topobox.co/
I've exclusively used Kensington trackballs at home and work (along with trackpads on laptops I guess) since I was around seven years old, Dvorak since I was around fourteen.

I really don't use other people's computers that often, but mice aren't that hard to use (just uncomfortable) and I can still type in QWERTY at about 25WPM but I'd have to look at the keyboard a bit.

Trackballs and Dvorak are both more comfortable than their alternatives, but the real benefit is the reactions I get when other people try to use MY devices when they're not prepared lol
Sorry if I missed this, but is there an example instance we can play with?
I went in thinking... haha it's a whistle, how bad can it be.

But jesus fuck that's actually a super terrifying sound!
>The actual firmware is indeed flashable, but the part is not a generic part and there are mechanisms in place to verify the image being flashed.

That might make it harder to develop a hack, but one would hope that if the hardware team tied the LED to a hardware signal, it would not matter if the firmware were reflashed.
Can't uninstall the browser, and occasionally it's needed for legit reasons. I quite literally can't resist drifting towards mindless scrolling apps, though I know that's hard to fathom for some people.
Using glass containers would get us 100% there regardless.
What makes you think the browser as OS is silly?
The "5,000 year" claim is based purely on mythology. The archeological evidence makes 3500 - 4000 years more likely. In other words: the mythical events that happened 5000 years ago were likely oral history retellings of events that actually happened 3500 - 4000 years ago. Chinese history history certainly isn't much older than about ~2000 BCE, and that was prehistory as Chinese writing didn't develop until around 700 years later. There are older archeological sites for sure, but these likely don't correspond to the specific "5000 years" mythological figures and events, and AFAIK these earlier cultures don't demonstrate monumental architecture, the hallmark of the technical definition of "civilization." Though to be fair, China is unique in having developed writing prior to monumental architecture.

While writing was developing in China, the Great Pyramids were already 1,000 years old, and the great city walls of Uruk were 1500 years old. Cuneiform writing is older still. Göbekli Tepe had already had its golden era and had bee abandoned for 6500 years by the time the first writing started to develop in China.

China is not the oldest civilization. It is barely even in the running, and only if you take the mythological 5000 years at face value. Comparing archeological evidence, ancient china isn't actually that ancient, compared to the Middle East.

I know it's widely believed there that China is the oldest civilization. But it's a laughable claim.
Agreed, I wouldn't mind banning paywall crap while we're at it.
Unkillable UEFI bootkit for Linux in the wild
actually, it’s 100 workflows, 20 providers and 10 users. important to note that it’s per deduplicated alert and not every event ingested by keep. what got you surprised about this pricing model?
Yes, https://bjesus.github.io/teatime/
Over half of long posts on LinkedIn are likely AI-generated
How about both? You are welcome to critique my opinion.

As for assumption 3, there's SpaceX. They don't open their design of their rockets to the public where their competitors, such as the Chinese can copy them. Neither the US government nor SpaceX wants that. So there's a large amount of innovations, probably countless designs that went into these rockets. Maybe in a better geopolitical situation, patents would be respected, but why would SpaceX gives everyone the blueprint to catch up? Patents make more sense if designs are easily reverse engineered and you still want a monopoly to make back your investment. That is clearly false as people have made innovation in 3D printing where new designs are standardized for the benefit of the whole market.

Assumption 4 is the defacto state of things even if it were not the intention. People who invent useful things for the sake of useful things are clearly at a disadvantage against corporations or entities who have more money to hire lawyers.

There's already at least one case of a trivial patent for 3D printing stronger layers that expired being repatented again by another company, increasing legal uncertainty from implementing the technique in slicers and other software. Most slicer these days are open source, generally don't make money for its developers(at least not directly), but they do grow the 3D printing market through its active development. The slicers also happen to share code, unsurprising given that they are forks of one another. Clearly, this model is incompatible with the patent system as it stands.
You can get biodegradable straws that don't suck.
The web platform can help mitigate this risk - while native emulators might be malicious or attacked by malicious roms, emulators written to run on the web platform are practically safe.

Plus you get the bonus ability to run on iOS :)
Nope, you are not alone. Without uBlock Origin I wouldn't go much anywhere these days.
Does it make sense to put HBM memory on mobile computing like laptops and smartphones?
> For compiled languages it should be fine, as you're only going to compile the permuted source code, not execute it.

Only if you'te going for compiler bug. If you're working on minimal reproducible example. You need to make sure your code isn't reduced to:

int main() {
return 0;
}

in that case.
An indicator light hardwired is nice but I apparently can't trust hardware manufacturers to design it properly. My work laptop (HP Dragonfly) has a physical blocker that closes over the camera when I haven't explicitly pressed the button that enables the camera. The blocker is black and white stripes so it's very obvious when it's covering the sensor. This should absolutely be the security standard we all strive for with camera privacy.
It's far from an ideal solution but I've started to just have JS disabled by default in uBlock Origin and then enabling it manually on a per-site basis. Bit of a hassle but many sites, including this one, render just fine witbout JS and are arguably better without it.
providers are usually driven by the community! happy to collaborate on that provider if you’d like.
But ur comment was rude. I have relatives who died fighting Nazis on the Western front. If not for the Russians doing the fighting and dying in the East many more relatives would have died on the Western Front.
I am dying for a compromising photo/video leak - I’ll finally be able to convince my wife to start OF channel :)
The Beginning of the End of Big Tech
>> this happened to me

> no it didn't

If this is how you think the conversation went, I suggest you reread both your own initial comment as well as my reply.
JIRA is "enterprise grade", I wouldn't place too much faith into that term.
I don't know whether 2024 models has the LED or not, but there's an unmaskable/global overlay warning for Webcam / Microphone / Location services, and I think they are controlled at Kernel level. You can't bypass these indicators when any software accesses these devices.

These warnings have hysteresis and logging. They don't disappear the moment you close the device, and you can see which app is using which device.

...and no, ambient light sensor handles the true tone and brightness. It's not the camera.
I wouldn't call Nix 'blazing fast'; I wish Nix evaluation were 10x as fast as it is. But for many things it's much faster than Homebrew and has a lot of nice properties besides.

Pkgsrc is more conventional, and its package set is smaller. But the binary distribution of it from Joyent is is consistently quite fast, and the package quality in Pkgsrc is high. It's a fast, well-behaved package manager, and probably the closest thing to what you're looking for unless your main concern is macOS GUI applications.
> At work all our products do not eat children by default and it would require legal review to add any such feature.

I bet the people at Peloton thought that too until they made that treadmill[1]. I know you meant your critique to be absurd, but it turns out creating a child eating machine by accident is entirely possible. I also bet Peloton product development now includes a process to review child-eatingness despite that not being their primary market, just the usual twice burnt reflex.

Accidentally logging the PII can easily happen for a single engineer. I managed to do it on an product that was privacy-focused & the error slipped through review. The odds of such inadvertent errors rise linearly with the number of products and engineers, and the fines are probably superlinear with the size of an offending organization. If your 3-person consultancy chomps on a GDPR baby or 2, no one will ever know about it, but if Google does it, it's going to be news headlines an millions in fines.

1. https://www.bbc.com/news/business-56993894
On a ThinkPad X1 Carbon Gen 8, it's easily possible record video with the webcam LED off. I did not verify newer generations of the X1 Carbon.

Lenovo put a little physical switch—they call it "ThinkShutter"—that serves to physically obstruct the webcam lens to prevent recording. It's supposed to have only two positions: lens obstructed or not. But if the user accidentally slides it halfway, you can still record video with the lens unobstructed but somehow the webcam LED turns off. It's because the ThinkShutter actually moves 2 pieces of plastic: 1 to cover the lens, 1 to cover the LED. But the piece covering the LED blocks it first, before the other piece of plastic blocks the lens. I discovered this accidentally yesterday while toying with a X1 Carbon... I am reporting it to Lenovo.
Recommend Buster Keaton's "The General"! https://en.wikipedia.org/wiki/The_General_(1926_film)
I'm not an EE by trade, but I personally wouldn't want to put a CCD in series with an LED with god-knows-what Vf tolerances. Then again, I'd bet that nearly all laptop webcams come as off-the-shelf modules with their own internal regulators for the CCD anyway. So maybe it wouldn't matter.

I'll bet it went something like this: As originally specified, the user need was "LED privacy indicator for the webcam." Product management turns that into two requirements:

1) LED next to webcam.

2) LED turns on and off when webcam turns on and off.

Requirement 1 gets handed to the EEs, and requirement 2 gets handed to the firmware engineers. By the time a firmware engineer gets assigned the job of making the LED turn on and off, the hardware designers are already 1 or 2 board spins in. If the firmware engineer suggested that we revise the board to better fit the intention of the user needs, one of two things will happen:

1) They'll get laughed out of the room for suggesting the EEs and manufacturing teams go through another cycle to change something so trivial.

2) They'll get berated by management because it's "not the engineers' place to make decisions about product requirements."

Of course this is all spitballing. I've definitely never been given a requirement that obviously should have been a hardware requirement. I've definitely never brought up concerns about the need to implement certain privacy and security-critical features in hardware, then been criticized for that suggestion. And I've definitely never, ever written code that existed for the sole purpose of papering over bad product-level decision making.

Nope, never. Couldn't be me.
My guess is that he will soon depart academia and announce his new workplace surveillance startup.
The reality is that, even in a rural shithole like I went to, if you WANTED to learn, their was near infinite opportunity, especially in the 2000s as the internet grew. I didn't have much in terms of AP classes, but we had a vocational wing and that was essential to ensuring everyone could find a passion to really pursue. So many kids that would be seen as slackers or dumb found something they were passionate about in the vocational wing that set them up for a future and gave them a real opportunity.

But if you or your friends decide that learning or striving for education isn't a good thing, you're fucked. You only get one chance to live through public school and so many kids waste it.

All we gotta do is build a society where education for it's own sake is seen as a desirable thing to have. 99% of education is motivation. You cannot learn if you don't want to.

99% of the people I see saying "Why didn't school teach me <X>" were busy sniffing glue in the back of class and not paying attention to the school system explicitly teaching them <X>. We had one kid in honors chemistry who literally snorted garlic powder one day and was not considered smart but his desire to learn meant he was willing to try the harder class, and he did well.

So many kids are raised by parents who fill them with anti-intellectualism and hostility to learning. "When am I ever going to use this" say kids who can't even compare the unit price of competing brands because they didn't want to pay attention in math class. "Why don't the democrats stop <Bad Thing>" they say despite reading aloud in 6th grade how you need enough votes in the senate to do anything at all. "Nobody needs math" they say when they agree to a predatory 72 month loan on a shitty car.
100 years in a 100% controlled environment is easy.

Meaning: you are missing a lot of variables in your game that will mess with your plans.

So spend some times and do requirements engineering on an abstract level. Then select the techniques to solve them.
The WLAN password at ICANN meetings is oneworldoneinternet. Keeping the net together needs continuous peacekeeping effort.

ICANN could delist in theory, that peacekeeping makes it impractical.
I'll wait until they discover an entelodontidae mummy and clone it. Seems the Pleistocene was Nature's war animals period.

https://en.wikipedia.org/wiki/Entelodontidae
New hijacking scam targets Elsevier, Springer Nature, and other major publishers
Show HN: New Spreadsheet, combine database and excel
I come up with idea - a tool for non-developers and small businesses to manage data easily. Current tools like Airtable or Google Spreadsheet are great but struggle with scalability and handling larger datasets. The idea: Combine the simplicity of spreadsheets with the power of modern databases, capable of managing millions of records. It’s targeted at users with limited resources who need a scalable, easy-to-use solution.
Would love your feedback.
The Electronic Frontier Foundation sells a set of stickers exactly for this purpose [0]. I have a set and it works reasonably well. And it supports a good cause.

[0] https://shop.eff.org/products/laptop-camera-cover-set-ii
> It's useful with children. A concrete representation of value is tangible compared to an abstract number in a bank account.

I hear this often, but I'm not at all convinced it's true.

And even if it were: Children will eventually grow up and have to manage their non-cash finances at some point. Why not teach them early?

I've had a checking account and debit card since I was 10 years old, and subjectively this has only contributed to being able to treat "abstract" and physical money as exactly the same from a budgeting point of view.

> It's great for gifts

For in-person gifts. Sending it in the mail is usually a bad idea, as I've personally experienced too often in my life.

Also, at least in the US, there seems to be some weird stigma against cash gifts that's created a huge industry of Visa/Mastercard gift cards with horrendous fees and a high chance of falling victim to some kind of scam.
Sure, you can solve this one particular thing with fixed hardware [0]. The problem is that just slightly more complex, any designer isn't going to opt for hardcoded logic but rather going to go "we have a microcontroller sitting right here, of course we're going to use it". This path ends with firmware "security" that prevents straightforwardly reading/writing these devices, which is exactly what my comment is about.

> you're trying to derail conversation and argue in favor of weakening device security

No, I'm arguing in favor of analyzing security in terms of device owners rather than manufacturers. "Security" isn't simply some singular property, but is rather in the context of a specific party [1]. It's certainly possible to build hardware that verifies running software and also doesn't privilege the manufacturer with an all-access pass. Just no manufacturers have done it, because centralizing control in their favor is easier.

[0] even this case is borderline. Your series LED suggestion isn't likely to be work because it will drop at least 1.6v, and constrain the current draw of the camera. Also if the firmware can be reprogrammed such that it can take pictures using very low average current draw, you haven't actually solved the problem. Alternatively, an LED in parallel with the power supply will require at least an additional resistor (if not a diode and a capacitor), which costs real money in the eyes of a design engineer working at consumer volumes.

[1] eg how the TSA that drones on about "security", while they're actually making individual travelers less secure from having to unpack and splay their belongings out, making them easy targets for immediate or later theft. They're not talking about your security, they're talking about their operation's security.
While I've used c-reduce before, I've never done it in a way where it could be destructive. However speculating based on what I do know. I think the 2 things I would do would be in the interesting-ness test, grep for already known harmful instructions and force them to be uninteresting (returning 1). And then if I was still unsure of the potential harm of the program and I had to run it to determine if it's interesting or not (segfault or something similar). I think I would hoist the binary/script into a docker container and run it there. That way the log and result can still be checked, but it's access to actual file system is minimized as much as possible.

TLDR; C-Reduce just gives you text to run/compile, if you're worried about things like that sandbox as much as possible.
It's strange to me that the Venona Project, run by the NSA from the middle of WW2 until 1980 and not declassified until 1995, is not mentioned at all in the article. It would seem reasonable that AGLOSO and whatever the NSA discovered would have some relation.
Trust me, I was using it semi-sarcastically too. This thing is slower than my old Pentium 4 would be, yet has a fast enough 30% to 3% battery discharge rate that it would make the speed of light itself blush.
I just noticed on Reddit that someone posted my package here. I see there are several comments already. I'll try to answer a few as I have time.
Malaria carrying mosquitoes already deliver a malaria vaccine. It's just that that vaccine has a terrible side effect: malaria.
AWS will also forgive mistakes or negligence based bills, in my case 3 times.
I believe that it’s not literally hardwired in the sense that powering up the camera also powers up the camera LED, and instead this relies on logic in the hopefully un-flashable camera+LED firmware. Someone correct me if I’m wrong.

You need some logic to enforce things like a minimum LED duration that keeps the LED on for a couple seconds even if the camera is only used to capture one brief frame.

I have a script that takes periodic screenshots of my face for fun and I can confirm the LED stays on even if the camera only captures one quick frame.
Thanks, I haven't heard of it before. I wonder if it's possible to use OrbitDB to download a file from IPFS though? Based on it's CID, I mean, because that was my intention with Helia. I thought that one of the nice thing about reading books is that it takes time, and if users could be seeding their files from IndexedDB to the network, they could automatically and effortlessly become "contributing citizens".

Another interesting use case would be to see if this can replace (or be an addition to) SQLite as the database in which the queries are ran.
MacOS has lots of "capabilities" stuff now. It's constantly giving me anonymous prompts asking for some such privilege or not, without any explanation as to why it's necessary, what will or will not happen if I do/don't do it.

I just had the joy of kicking off a large crawl across my file system(s), expecting it to take some time, so I kicked it off just before I went to bed. This morning I arrived to a dialog "Terminal would like to access...", which naturally stalled my 3 command pipeline in its tracks, thus eliminating the primary benefit of doing the job overnight in the first place.

The other day, I guess I installed Discord, or updated it, or something. Anyway, Discord was asking for keystrokes from other apps. "Why!?"

Why does my IDE need root access to install?

What happens if I don't let random program crawl my network?

As a carbon based user, "capabilities" are a pain in the neck.

Windows lost this battle decades ago, when every. single. new program required "admin" privs to be installed. Every single one. Heck, I bet Calculator asked for it. To wit we numb users, wanting to just "use the software" said, "yes. Yes. YES! PLEASE MAKE IT STOP!" to the point where you just gave it no second glance at all.

Capabilities look great on paper. They're fine for things like systemd and daemons and "stuff administrator folks" install.

For human beings, not so much.
I have heard it said that a problem with GPG is that it does encryption AND signing when you'd ideally have separate tools for those tasks, like, for example, age for encryption.
That entire site is 100% ai generated click farming. The fact that the top comments here not even talking about the content of the article but instead more general ‘hbm is great’ worries me.

For anyone that read the article which product has hbm attached? The cpu or gpu? What is the name of this product?

There’s literally nothing specific in here and the article is rambling ai nonsense. The whole site is a machine gun of such articles.
I don't feel like that rule works here? If you cut out part of the second sentence to get "Find something interesting to respond to", that's a good point, but the full context is "instead [of the most provocative thing in the article]" and that doesn't fit a complaint about acronyms.
He’s mean.
I was going to say that it's odd, then, that reddit doesn't serve all the posts' json via a free account at cloudflare and save a ton of money, but maybe actually it's just peanuts on the total costs? So cloudflare is basically only happy to host the peanuts for you to get you on their platform, but once you want to serve things where CDNs (and especially "free" bandwidth) really help, it stops being allowed?
You could wire it up either way. In general the LED is extremely likely to outlive the rest of the laptop, though.