skysight-inc/HackerNews huggingface dataset:
The recent BadRAM attack against AMD's Secure Encrypted Virtualisation works by changing something in the memory DIMM's SPD (Serial Presence Detect) EEPROM firmware causing out to report twice as much RAM as the DIMM really has. Chaining this up with a bunch of other neat tricks they gain access to protected memory that the CPU is _supposed_ to prevent.

I don't think there's a public working exploits (yet?), but it can "likely" in some cases (depending on the DIMMS you have installed) be done without hardware access, purely through software:

"In some cases, with certain DIMM models that don't adequately lock down the chip, the modification can likely be done through software."

https://arstechnica.com/information-technology/2024/12/new-b...

So yeah, it's possible for a hacker to flash malware onto your DIMMs...

(Whether that's a thing you need to care about is a good question. This isn't something a driveway script kiddie is gonna do after he p0wns your WordPress site with vulnerable plugins. But if you're running a dark web drug market on commercially hosted cloud servers and a powerful enough Three Letter Agency becomes intersted in you...)
not all 17 year olds are equally intelligent you know? And if even one kid is convinced to murder his parents by an AI then that’s one too many.
They fall below. Thank you for asking.
Here's a technical podcast interview with someone who is doing this: https://www.latent.space/p/nsfw-chatbots

It starts feeling pretty weird when he starts talking about conversations where someone spends $1000.
Getting the device speed right seems way more difficult without a Global Positioning System.

Hopefully it will eventually be deployed [0]

[0] https://techport.nasa.gov/projects/146938
Large records made a comeback, but I think that's because they are more easily produced via hobbyists. I don't see DVDs or BluRays doing the same thing, because the media companies wants to ultimately charge you per viewing.
The future of the instant runoff election reform
> I only ever create a “core” app and put everything in there. Avoids any potential headache.

I agree with this, but the Django tutorial would lead someone to believe that you need a bunch of apps. So I've seen newbies create way too many apps without understanding why they've done it.
AMD have just had a big FAIL there:

https://news.ycombinator.com/item?id=42395618

https://arstechnica.com/information-technology/2024/12/new-b...
Does this mean you can run cuda applications inside a qemu VM? The equivalent to --gpu=all for docker but now in an isolated VM? Is this permitting sharing of the GPU inside a VM?
> At the least good genAI will see the rise of male OF creators.

i can imagine the backlash, as if it were already happening. a decent amount of the OF "creators" are making 7 figures a year off this, and lots are making median yearly pay in a month. Having to share that with men who are technically adept and good at marketing is gunna chafe.

> There is already more content out there than a human can reasonably watch.
I submit there's more "9/10 or better" content than anyone can reasonably watch or experience, even if you set some arbitrary cutoff date like, oh, february 22nd, 1988 and before is all you're allowed to consider.

Law and Order (one of my favorite background noises) has something like >650 hours of content, and i've watched it all. Multiple times. that's nearly 1/3rd of a work-year!
Experimental website to browse and search vintage computer archive.org files
Analog-vs-digital is entirely orthogonal to wires-vs-air. You can send either signal over either medium.

Broadcast TV still goes over the air, though it's digital now.
Don't misunderstand me, I think it's fine he gets the treatment he needs to resolve his pain.

It should have happened without death, is all.
I find it scary how many people I see online or even in real life that actually call girls on there their girlfriend and say things like 'sure it costs money, but so does yours when you buy dinner etc'. And no amount of; these girls are doing their job; you are a client, they forget about you the second you switch off, if their weren't bots on the first place seems to help.
Missing Crypto Influencer, Under Investigation, Found Dead in Montreal
Werner's Nomenclature of Colours
Is there a list? I'd like to know if my SIP provider is on it, ideally before it gets shut down.

Aha, the list was linked from the original URL, but dang unfortunately changed it to the plain text news release https://docs.fcc.gov/public/attachments/DOC-408083A1.txt which doesn't link to the list. The original URL was https://www.fcc.gov/document/fcc-could-block-over-2400-provi..., which links to https://docs.fcc.gov/public/attachments/DA-24-1235A1.pdf, which lists the providers that will be shut down. And I'm happy to see that my SIP provider isn't on it.
there are people who are better than other people at blending in their accents, even in more difficult languages than English (for accent coding), perhaps they are just very good at that.
A class action lawsuit alleges OnlyFans has deceived subscribers who, unbeknownst to them, communicate with paid chatters, and not actual creators themselves.
If you tune up your detector that high it’s very likely you’ll get false positives. I’ve met Americans with fairly strong “accents” that aren’t necessarily a dialect either, just a different way of speaking. It could also be a mix with parents who are non-native. American English is vast, and very heterogeneous.

If we’re talking about specific parts like a regional dialect then I would agree, those are tricky to acquire later, at least to those undetectable levels. They can be extremely specific.
IG has this feature as well - or at least was trialing it. I got an AI-generated response to a comment on a post -- I was not amused (or impressed), but at least it was clearly labelled as such. Still warranted an immediate unfollow. It's hard for me to see why anyone would want to receive AI-generated replies, like what's the point?
Don't think there's anything particularly secure about it.
Thank you so much OP for writing this, and I hope it resonates not just with maintainers (or potential maintainers) but to users of FOSS too. You needed to write this - specifically, the "Baseline" section, which I agree with vigorously - because too many users of FOSS consider themselves entitled to continued maintenance, support, feature development, community fostering, etc. etc.

We (maintainers) owe you NONE OF THAT. We gave you our code. That. Is. Enough.
Obligatory mention of grayjay:
https://grayjay.app/
It's really Alex Jones was alleged to pay people to harass Sandy Hook families at all hours of the day. He then proceeded to lie in court and after it become known refused to continue to participate and had a default judgement entered against him.

If I were to follow you around 24/7 for weeks shouting into a microphone is that not illegal?
I wonder how many of the detractors in this thread actually use cold email successfully and would have it in their best interests to badmouth it to reduce competition and hence effectiveness of the channel.
This may be true, but the minimum unsafe code still seems not that small. Maybe I just had bad luck, but one of the first things I looked at more closely was an implementation of a matrix transpose in Rust (as an example of something relevant to my problem domain) and that directly used unsafe Rust to be reasonably fast and then already had a CVE. This was a revealing experience because was just the same type of bug you might have had in similar C code, but in a language where countless people insist that this "can not happen".
Intel used to have GVT-g hardware virtualization on their integrated GPUs from Broadwell up. I haven't tried it myself but know people who used and liked it then. All good things come to an end though, and Intel scrapped it for Rocket Lake.

I would've gone and bought Intel ARC dGPUs for my Proxmox cluster if they supported hardware virtualization on their consumer line.

https://wiki.archlinux.org/title/Intel_GVT-g
Supervising screen time is not the same as supervising content
native audio and image generation won't be in general availability till early next year
The Pentagon - credible!? Ha.
whenever i release stuff on github it's kinda in this sort of state, "it works on my setup." i'm not a software developer or publisher and TBQH i'd be shocked if anyone ran my code other than me.
Wouldn't a novice likely die synthesizing the amount of sarin needed to kill a large group of people? Then attaching a disbursement mechanism to the drone to make it into a gaseous form, etc. Seems like a lot of high risk effort to maybe have it work.

As for IEDs, the drones used in the Ukraine war use what look to be very effective munitions, and they seem to be only effective against a single target really.

Is that really of concern?

And its not like drones that can carry things are cheap, nor is the way you are hypothesizing about them being used.
It doesn't play any kind of greeter. Seems to be an online database of spam numbers, I receive calls marked as Spam with a big red exclamation mark. it's not as simple as blocking any calls that aren't already contacts. I could never use that professionally.
> That includes HN

I think when people say “algorithmic sorting” they usually mean an algorithm which generates different, “personalized” sort order for different users.
we should go on HN to discuss how we did on the accent determination to help it with the working out who we are part!
Also FYI for anyone else, I can't actually see the gemini-2.0-flash-exp list in the model directory for Vertex AI in GCP Console, but passing in google/gemini-2.0-flash-exp to the vertexai Python SDK does actually work.

(you'll probably also need to increase your quotas right away, the default is only 10 requests per minute).
.. but unless an AI, it can never be trained to stop when the user (reader) maxes out the threshold.

[just food for thought, definitely not my opinion that books should be replaced by conversational AI generating stories appropriate for the user. God bless the 1st amendment.]
I think this would depend on Virtio-GPU Native Context which, if I recall correctly from the qemu-devel mailing list, is the next natural progression from Virtio-GPU Vulkan

Edit: Can't substantiate further, but this is what Huang Rui, the prior steward of the Venus patchset, said: https://lore.kernel.org/all/20240411102002.240536-1-dmitry.o...

Edit 2: For further clarity, Virtio-GPU Native Context would permit running the native GPU drivers (with some modifications, minimal is what I remember being claimed) inside a VM
>He conceived the idea of “copy and paste” at Xerox

TECO written by a student 1962-64 had copy and paste
Which wasn't the statements made by employees of Fox News. Perhaps if they had made such a statement they wouldn't have paid out several tons of money.
> While it is technically possible for that to happen, the probability of the intricacies that make up the iphone's circuits and screen, the chemicals that make up the battery, etc, assembling themselves into a complete and working phone, even on an infinite timeline, is not that high.

"Infinity" is not the same thing as a "really long time". You can't use ordinary conceptions of probabilities on infinite time scales. If you wait a Graham's number of years, you still haven't even started a small fraction on the way to infinity.
> The best BLAS implementations are all closed source sadly.

NVidia open-sourced CUTLASS [0] some years ago and it achieves pretty competitive performance compared to e.g. the closed-source cuBLAS.

Keen observers will notice that Strassen is not used in CUTLASS.

[0] https://github.com/NVIDIA/cutlass
VPN users are either super nerds or Joe Average mandated by company policy.
That's going to be naturally periodic as medicare enrollment happens in the late Fall (typically Novemberish).
It’s because you also wrote “easily be sustained if one is so inclined” which comes across as judging others for not just doing this one “easy”(for you) thing. If that’s not the spirit behind that comment then I apologize for my reaction.

Also it’s just a fact that you can’t eat the vast majority of foods and food experiences. But you’re right , I’m generalizing that food is a joy for most people.
I use Zink for some games that rely on OpenGL since it works better with Mangohud as a Vulkan layer. For example all games that need scummvm or dosbox.
Century-Scale Storage
"He made it up" certainly seems more likely than Iran, what, retrofitting one of their old Kilo class D/E subs to be a drone mothership that's just lurking off the coast?
Many people no longer pirate because of how inconvenient and risky it is. It's not so simple to find a private tracker invite that you trust, use a VPN, find the quality you want, etc. One email from your ISP threatening to cancel your service is enough to scare people off. I think you greatly underestimate how much effort has gone into to anti-piracy, and how well it has worked.
> Every sentence in this reply is a strawman.

Zero evidence or explanation provided, meaning that it's far more likely that GP is making good points that you cannot respond to.

> here's an FAQ [1] that can help clarify what terms like capitalism, communism, feudalism, profit, etc. actually mean

This is a lie. Marxists intentionally repurpose and distort language, especially language around markets and governance structures, to deceive others into falling for their murderous and completely infeasible ideology. These are not what those terms "actually mean" - those are how Marxists use those terms. Claiming that those are what those terms "actually mean" or that that's how other people use them is false and deceptive.
> IQ is as far as I can tell quite well accepted as a diagnostic tool.

not at a scientific level, no
Last August I bought 6 small work platforms/mast lifts at an equipment auction and sold them in FB Marketplace for an extra $1000 each after expenses. Cleaned them up a bit, but that was it! I’m bidding on 5 more this week, should be an easy $5k arbitrage.
That's A580. Correct link https://www.intel.com/content/www/us/en/products/sku/241598/...

"PCI Express 4.0 x8"
Almost the exact same sentiment as yours, but from an earlier conversation, and it really stuck with me.

“… one of the principle issues is that it's less a protocol and more a skeleton of a protocol.”

https://news.ycombinator.com/item?id=35720336
At least for programming, openrouter and switching between chatgpt and sonnet works well. Sonnet has quite a bit of overloading issues lately so we made our tools auto switch and sometimes (when detecting the issue) ask both at the same time.
(in Go)

It's a nice debugging story, actually number two in a series. I'm sure we can all relate to the sinking feeling of publishing a release only for the alerts to start going off
Congressional reps can be... credulous.

https://www.cbsnews.com/news/republican-congressman-falls-vi...
Exactly the same, down to the industry! My job was as a simple force multiplyer for account managers and sales folks, automating tasks to allow them to scale their projects and help more clients. It was all cool helping them get more ads out the door for Toyota and cool authors, weird when it started being for "One weird trick" ads, downright wtf when I started helping boost SERP pages and finally once we started promoting gambling apps I just couldn't take it anymore. It was great money. I miss that. And helping all these very kind, friendly people make numbers felt useful. But man, once I finally got un-distracted (after ten years?!) I had to get out of there.
Great site. Small feedback: There's a category 'Closure'-- I'm not sure if that's something I don't know about, but it definitely isn't for jobs using 'Clojure'.
Body of abducted cryptocurrency influencer Kevin Mirshahi found in Montreal park
It is completly unfounded. He was wrong and if he was still alive hed probably acknowledge that he was wrong. Russias invasion of Ukraine had nothing to do with NATO (besides the fact that if we had been wise and invited Ukraine into NATO this stupid war wouldn't have happened). It is an imperialistic war that seems to reconquer Ukraine and to be an empire again. Also Yelstin admitted in the 90s that Poland and other countries had the right to join NATO. Russia or at least Putin is saying that Ukraine has never existed and must be reconquered just like the old conquering czars did. The NATO bullshit excuse is the lowest level of propaganda and I'm sure even that are surprised how many people fall far it. NATO was not built to destroy Russia or the Soviet Union (which are separate things) and Ukraine was not seeking to join NATO in 2014 (and had no chance of joining NATO in 2014 and 2021 as everyone including Russia was well aware of).
> The idea that cryptocurrencies “need” government structures is a misunderstanding of their decentralized nature.

Cryptocurrency benefits from existing structures. Many of which are government supported. Taking without paying due is immoral.

> but part of the reason cryptocurrencies have gained traction is because they challenge

Yes, but they do not supercede existing systems and until they do, they are party to them.
not too shocking if you've read into this scene. even non-sexual parasocial interactions can have some scarily powerful effects. Add the idea that someone is forming a romantic connection and they will give you their entire paycheck.
Why not block the number?
I stopped getting junk calls about 3-6 months ago. Just election texts (Massachusetts) but no spam texts or calls.

AT&T and Verizon (dual sim)
That's like saying how are cigarette companies responsible for whether you choose to smoke?
>I guess you claim he's being lied to, or making it all up?

Don't forget rank stupidity as a strong possibility.
When I was in 9th-grade jhs, I performed a similar experiment in my science class. Nobody had a clue back then (1968) of what 'borax' was or where to get it. I substituted boraxo hand soap. For the experiment to work, it took a huge amount. I didn't use an oscilloscope back in that day. I remember rigging some kind of polarity detector using an incandescent lamp (probably a #222), and a couple of cheap silicon diodes from Radio Shack. For electrodes, which were inteneded as lead and aluminum, I used some sheet aluminum my dad kept around for some of his projects, and for the lead, I used a length of 50% lead 50% tin solid wire (no flux core) plumbing solder. I used a pint-sized mason jar, a mason ring, and cut a top for the jar from some thin cork I had. I may have used some cheap binding posts to suspenmd the electrodes from. I made the test right after lunch, say 1:00pm, and proved rectification with a 10-volt drop through the rectifier. After school, say 3:00 pm, the schools Science club, of which I was a memeber, convened in that room for a regular meeting. I attempted top repeat the experiment, and it failed: my rectifier wouldn't conduct anything in any direction. The Boraxo seemed to have 'gelled' in the jar and had turned pink. I ended up disposing of all the 'mess'. I never repeated the experiment.
I agree that the violence around bananas are part of what keeps it cheap, but probably the amount of time an unripe banana can be stored, the ease of packing, and the relatively low weight for something so easy to pack and ship contribute significantly too
Always read the receipt.

Your shopping cart receipt is almost wrong 100% of the time but no one checks or cares for a dollar or two. This is the same. See what they say back vs just a status code check. In spirit you are correct, however so SO SO many APIs return 200 when you have to check the return payload contents. - signed also frustrated API user
Have those stuck anywhere? I know it was trialed in a few places (Berkely for one) but I don't think it lasted.

Great idea though; just like taxing tobacco helped reduce smoking (among other things)
Jury Nullification!
> The current iteration of late-stage capitalism

Don't fall for the trap of accepting "late-stage capitalism" as a valid concept - it's a made-up term that has no concrete or meaningful definition and is used by Marxists to constantly move goalposts and impute bad things into our functional (if suboptimal) economic system.
We switch between claude and chatgpt auto (with a preference for claude when it's up), so we don't notice anything. Hopefully llama or so will be good enough some day, so we can just spin up a Vast machine when both are down or run off a local machine entirely.
There will be no lawsuit. This kind of work long predates OF. Premium sex chat SMS services were doing the same thing at least a decade before OF existed.
the USSR is not russia and they dont want to destroy russia. NATO not expanding teritory (it has none, its merely a defwnsive military alliance) like say russia is trying to do. Members choose to join NATO in large lart to protect themselves from russia.
And NATO didn't destroy the USSR the whole corrupt thing collapsed in of itself driven by bad economy and the forces of liberalism and nationalism.
Previous discussion (1493 points, 9 months ago, 169 comments) https://news.ycombinator.com/item?id=39700256
Can someone with Odin experience tell me about a new feature? I'm looking for a unique hook, like Zig did with comptime.
How much time did he get on fox news? How many new followers on social media?

This is the game they are playing. The attention game. Just like the kid who misbehaves so people pay attention to him. This is what social media has done to our society.
GP also provided this AP article as a source. This article quotes a coast guard official directly.

https://apnews.com/article/fbi-drones-new-jersey-a978470fa3b...
[dupe] https://news.ycombinator.com/item?id=42390768
Much like when a chatbot says, Real person here!
As someone who lives in New York near two very busy airports, I can assure you that after seeing dozens of planes fly over my house every hour, year after year, it isn't hard to figure out what isn't a plane.
> You're just communicating your offering directly to people that may be interested.

I have a brimming spam folder full of people who are “just communicating their offering directly to people who may be interested.”

Sometimes these people are apparently elderly or alzheimers sufferers who don't have the cognitive ability to distinguish spam from official sources, and are easily exploitable.

I imagine the worthless specimens sending these emails have intricately woven strands of faecal material in their cell nuclei instead of DNA.
How Long Will the Trump Crypto Boom Last?
I think it is necessary to say that if you want to make a meaningful critique since otherwise you can simply point out differences in any two articles and call that bias.
https://archive.ph/SdLNF