skysight-inc/HackerNews huggingface dataset:
In the conclusion Google writes:

> It took less than 3 months of research to discover 6 separate bugs in the adsprpc driver, two of which (CVE-2024-49848 and CVE-2024-21455) were not fixed by Qualcomm under the industry standard 90-day deadline. Furthermore, at the time of writing, CVE-2024-49848 remains unfixed 145 days after it was reported. Past research has shown that chipset drivers for Android are a promising target for attackers, and this ITW exploit represents a meaningful real-world example of the negative ramifications that the current third-party vendor driver security posture poses to end-users. A system’s cybersecurity is only as strong as its weakest link, and chipset/GPU drivers represent one of the weakest links for privilege separation on Android in 2024. Improving both the consistency and quality of code and the efficiency of the third-party vendor driver patch dissemination process are crucial next steps in order to increase the difficulty of privilege escalation on Android devices.

Does this mean the vast majority of Android users (who are on Qualcomm chipsets) are vulnerable to these zero day attacks?
Figuring out patterns and behaviors, developing a strategy that works on them.

My competitive FPS experience is from Quake/Quake 2/Early CS era, but from what little gameplay I've seen the modern ones don't seem that different.
I don't understand why would they not ack or fix this, such as shame that google has to do all the hard work to keep all their ecosystems shit together
Long ago I wanted to re-implement at least part of kubectl in Python. After all, Kubernetes has documented API... what I quickly discovered was that kubectl commands don't map to Kubernetes API. Almost at all. A lot of these commands will require multiple queries going back and forth to accomplish what the command does. I quickly abandoned the project... so, maybe I've overlooked something, but, again, my impression was that instead of having generic API with queries that can be executed server-side to retrieve necessary information, Kubernetes API server offers very specialized disjoint set of commands that can only retrieve one small piece of interesting info at a time.

This, obviously, isn't a scalable approach, but there's no "wrapper" you could write in order to mitigate the problem. The API itself is the problem.
I taught a college class this year and asked students to recall their first memory of using a computer. With very few exceptions, their first experience was gaming. It was eye opening for me to see how important gaming is to get people introduced to technology. And in my opinion, more effort should be made to gamify the learning math, reading comprehension, critical thinking, etc.
Name one single other country that we trade with that has an official policy that it owns another country we trade with, and insists that if we say out loud the other country is a country it means immediate war?
In this particular case, we care about one bad person being freed because of a large number of people unjustly suffering under the US penal system.
Dang it! :)
Good project. I've added links from my MHRV pages which have quite good traction on search.

Small note: the older single-room unit we have with the fan on the outside can ice up and make horrible noises then stall at a few degrees below zero (here in London UK)... B^>

Also: as the creator of a project called OpenTRV, I cannot but help admire your taste in naming! B^> B^>
Is this paper wrong? - https://arxiv.org/abs/2311.09807
> All real world skills that games do not simulate.

Learning to protect and not lose a wallet, or to count change… seems like exactly the kind of thing that no longer matters, as we move to more digital money everywhere. What change, what wallet?

Outside those points: multiplayer games with currencies in them simulate all of the rest, and even single player games simulate some of those things.
> IBM did insist that the new version run all of the 1.x 16 bit stuff, but like DOS and Win 3.x mode this was done through some virtualization if memory serves.

Kind of, but IIRC it was a fundamentally different and more low-level kind of "virtualization": The 80386 processor's virtual[1] 8086 processor mode. Not much for them to do in the OS code itself, compared to writing a whole VM to run DOS apps on (he confidently says, never having written anything of the kind himself).

[1]: Probably not exactly the right word, but I can't recall the correct term right now.
> For example, you'd assume that games that let children socialize would help them develop social skills, games that let them be creative would foster creativity, games that force them to think might benefit their reasoning skills, etc. (Of course these could all also be correlations rather than causative.)

Then you have to consider, does the game benefit more than the IRL activities it replaces and are there better replacements? For instance, I'm highly skeptical that any game that "let[s] children socialize" would be superior at "develop[ing] social skills" than IRL socialization. Also, I could totally beleive video games boosts IQ more than passive TV watching, but less than IRL physical play, socialization, and reading.
You need to keep it connected to the charger when tethering.
You're competing against other agents, with some combination of planning, coordination, and motor skills. That drives learning.

The video game modality is incidental to the learning process.
> It’s almost always the case that infringement happens negligently (that is, because of the vagaries of the internet, the infringer doesn’t always realize they’re infringing someone else’s work).

I disagree with this. Everyone knows they didn't make it - they know it belongs to someone. They just don't want to give anyone else anything for using it, so they hope either it happens to have been released to public use or the creator can't be bothered to chase it up.
We're still using parquet. So we use the native duckdb format for intermediate processing (during pipeline execution) but the end results are saved out as parquet. This is partly because customers often read the data from other tools (e.g. AWS athena)

I'd be interested in hearing about experiences of using duckdb files though, i can see instances where it could be useful to us
Because they’re… completely and utterly different in every way except for both involving photons?
Is this using Whisper or something else? It looks like the site performs multiple steps on the audio and did a decent job of guessing who was speaking.
Totally unrelated. But first Discworld, now this?

I need your book recommendations, or reading list :)
Show HN: Buildpad – Build products that people actually want
Hello people of Hacker News,

I’m Felix and I’ve spent the last few months building Buildpad together with my brother David.

About two and a half months ago we launched Buildpad on Product Hunt and got a very positive response. Since then we’ve been constantly improving the product and grown to over 2,400 founders using the platform and 70 active paying customers.

- If you’re a founder who’s wasted time building products no one wants, then Buildpad might be for you.

Buildpad is an AI-guided product building platform that helps founders build products people actually want. Buildpad guides you step-by-step through phases, taking you from idea to launching your product and getting your first customers. Along your journey, you'll also get access to special tools such as problem brainstorming, Reddit validation, user persona creation, and more.

Some features include:
A proven 10-phase framework: organize the building of your product by using multiple chats, from ideation to building your MVP and getting your first customers, with different goals in each one.

Memory: our AI learns about your project as you build, keeps the context between chats, and provides advice based on it.

Problem brainstorm: if you don’t have a product idea yet you can use our brainstorming AI to help you explore different problems to solve in industries you’re interested in.

Reddit validation: search through millions of Reddit discussions to determine if there's demand for your business idea. AI will help you analyze all the data gathered and give you the conclusions from it.

User persona: Get to know exactly who your users are and where you can find them by generating a user persona. Marketing is easier when you have a clear picture of who you’re targeting.

- We want you to experience how much easier everything becomes—from marketing to gathering feedback and getting your first customers—when you’re building a product that people actually want.

Why don’t I just use ChatGPT?

ChatGPT responds to what you ask, but it doesn't guide you through the crucial phases of building a business. It's reactive, not proactive. So unless you always know what to do next, making progress with ChatGPT is tough.

We hope Buildpad can help some of you on your journey to building successful products!

Leave a comment if you have any questions and I’ll be happy to answer them.
All that would do is drive off the "blue checkmark" class of uploaders, good riddance. That's not what people are on TikTok to view. Note that the TikTok influencers have never made it as big as the Youtube era of influencers, and that's a good thing for society.
Which doesn't mean we should overstate those weak correlations as casual.

Parents do read things like this and it creates an enormous amount of stress to see the "science" pull in so many different directions. The only real ways out are to just follow the research that backs your own preconceptions or give up on following the science at all and just reason from first principles and adapt dynamically to your child. The former is where most people end up—cherry picking the studies that "prove" they're already right—and the stronger we state the results the worse that effect becomes.
There's one particular variable in all of these examples and videos that is conveniently elided by the authors, which is that most of these seem like inner-city schools. Children born into poverty with lackluster parenting are more likely to act out, the presence of social media notwithstanding.
> It really changes my view of him.

his ruthlessness and misanthropy are pretty well known. he wasn't a nice or good guy, just effective at marrying design to marketing, and pushing a product.
It's a counterweight to the US glow agencies putting their thumbs on the scale for domestic propaganda platforms.
In Democracies, there are laws in place to protect voters.

Here's very simple example to help you understand this: if you have someone on a foreign state payroll, they have to disclose they're being paid for by a foreign state, and people have the right to know that.[0]

You have the example of Tenet Media being paid by Russia Today to hire American right-wing influencers to promote Russian talking points, covertly - that's illegal.[0]

It just looks like people have a fundamental misunderstanding of a very basic concept about what Free Speech is.

Free Speech isn't the freedom to dupe voters, because voters may have the capacity to discern misinformation from information. Even if you go by your caustic remark, yes, a lot of voters can't discern misinformation. That's why there are laws in place.

[0]https://www.aljazeera.com/news/2024/9/12/guerrilla-projects-...
That's a straw man argument and kind of a different thing entirely (moral / ethics / human rights vs corporations / entertainment) though.

Anyway while I do agree with your statement about censorship vs openness, I do think in the broader sense things need to be done about social media - that is, Tiktok is specifically singled out for being Chinese, but its target audience, addictiveness, usefulness as a propaganda tool, is very much not unique on the market. It was only after Zuckerberg and presumably the SV tech lobbyists raised the issue of Tiktok with Trump and the government that they pulled on the brakes.

But this is where the reciprocity argument comes in; US based services in China are under strict regulations and requirements, to the point where at best they can have a subsidiary in China under Chinese management. But while it's not trivial as a foreign entity to have a presence in the US either (e.g. you need to have or be a US company to be able to sell your software there), it seems more accessible and less restrictive than operating in China; in a sense this move levels the playing field.
Apparently, the official CPC is pro-stablishment, unsurprisingly, while the common CCP is anti-stablisment

https://chinamediaproject.org/2023/03/30/ccp-or-cpc-a-china-...
Right on the money:

Prototyping and pathfinding are totally fine and mostly necessary.

*But*, Software Engineering without design docs or any kind of specification (even if succinct) is just tree-house building, *not* Engineering.

And the bigger the size and importance of the project, the sooner the problems and technical debt will start to show.
Does Probability Exist?
> "Thanks mostly to the phones age, interfacing with the UI board will be rather trivial"

I guess part 2 was left as an exercise for the reader.
Still not bricking if you can get it running again :-)

A bricking event is when the computer is more useful as a doorstop than a work tool.
Social media does not cause harm in of itself. People can use social media in a way that can be harmful, but you can say that about absolutely anything. Plenty of people that are not tech people manage to use social media to promote themselves, their business etc. People use it as a place of business. It is a mixed bag, like most things are.
You are (like the government) pre-supposing that is the case and basing your whole argument upon that.

As for Offense speech/Free speech. What constitutes what is and isn't offensive is subjective. That is why people argue for a free speech standard. Pretending that it is right to restrict unpopular speech (this is what is really meant by offensive) because the majority agree is completely asinine, as things that were offensive in the past may not be offensive in the future and vice versa.

The reason we don't have a decent tech industry in the UK (the tech industry here sucks) is because we don't have things like a Section 230 protections. Imposing legal responsibility will make it more difficult for anyone to make anything interesting in the UK.

> I don't recall the Online Safety Act regulating the financial industry - could you point out which parts of the legislation relate to that? I do, however, agree that we do have excessive restrictions on access to certain financial services.

You completely misunderstood the point. The point is that we can predict from similar laws in another industry (somewhat related industry) what the effect maybe.
> All the required info is in the question.

I mean it's not though. The question is about "is soft" not "seems soft".

These slight of hands are pretty crucial to actually reading in the real world (or conversely, deceiving people).

It's like if you read a press release about how X is 120% better than Y. Judging from the press release, X is clearly better than Y but then if you actually do your own research you find for your workload X is actually 10% worse than Y.
TikTok should be banned even if it wasn't Chinese. At least for minors. It's an extremely addictive drug.
There are certain properties of video games that have been shown to have interesting cognitive effects, that tend to be more or less represented across the mobile/console divide, for example, 3D platformers [1].

[1] https://journals.plos.org/plosone/article?id=10.1371/journal...
UFODrive | Fullstack Engineer | Dublin, Ireland | Hybrid (2–3 days onsite) | Full-Time

UFODrive is expanding its world’s first end-to-end eMobility platform - UFOFleet. We combine cutting-edge technology with a user-first mindset to create tools that empower businesses to streamline operations and scale smarter.

We’re looking for a Fullstack Engineer to join our team and help build the next generation of our solutions.

What you'll do:

- Own the entire development lifecycle of scalable, high-performance apps.

- Work with Node.js, React, PostgreSQL, and GraphQL, with opportunities to dive into React Native for mobile.

- (If you have exp) Work with DevOps tools and cloud deployment (AWS).

What we’re looking for:

- Engineers who thrive in small teams, write clean, maintainable code and love tackling real-world challenges.

- We value autonomy, creativity and curiosity.

- Somewhat seasoned (5+ years work exp)

Unfortunately, we cannot supply visas at the moment.

No need for a cover letter! Send your concise CV (and your favourite EV) to hiring@ufodrive.com
> bunch of networks recently switched off 3G and a lot of 4G services in favour of LTE only

You mean 2G and 3G in favor of 3.95G LTE, AKA 4G.
As someone who's a completely layman: I wonder if the results of model collapse are no worse than, say, sufficiently complex symbolic AI (modulo consistency and fidelity?)
Some might say that PHP is dead (and I’d be one of them too), but there is a PHP kingdom on the map! :) I think we might have all been mistaken.
Leading AI Companies Get Lousy Grades on Safety
Does your task need great code?

Not a rhetorical question. Often the goal is the functional minimum. If that's your gig, it's hard to appreciate code quality maximization, and vice versa.

If you do maximize quality, I'll one-up the suggestion in the article. Treat your first write as throwaway code. And your second. Up until the point where the rewrite would be roughly identical.

It's basically early refactoring, but with the code at its freshest in your mind. Coding it the first couple times implicitly maps out the problem domain.

You also leave no internal technical debt on the table. A surprising amount reveals itself right after you wrote it in. It gnaws at your ability to proceed. Subconsciously, it splits your attention in two: how the code is and how it should be. With each "fail" your attention spreads out and thins out.

Finally, this habit makes you more fluid in the language. Quality-maximized code takes longer, but your actual typing rate ends up being much faster.
Jolly Heretic et al say that reaction time is better measure of GI than any of those tedious tests.

You can feel the pain in Counter-Strike when some kid jumps behind a blind corner and always hits you right between the eyes.
Author conjured a primordial black hole by working on an Nokia and was never heard from again.
https://archive.ph/Pxwn4
The pattern that this relies on is called "pre-pooping" because of this blog post: https://cglab.ca/~abeinges/blah/everyone-poops/
Very interesting that HTMX (bigskysoftware/htmx), which is backend-agnostic, lives in Pythonia->Djangonia and not in e.g. Fronterra.

Does this mean that HTMX is mostly used by Django devs?
> Said in email, from one CEO to another, is this obviously intentional paper trail?

CYA is SOP, esp. at the C-level
I use whisper and pyannote (https://github.com/m-bain/whisperX), but it is a pain to run locally - I run it on a 4080. This seems to be actually trying to identify the speakers. Not sure what they are doing for that.
Yeah, there are some not-nobody bands that do actually talk to fans after shows - as in face to face without special appointment, just hanging around at the exit merch store.

I would rather have those "celebrities" that don't want to directly interact with plebs be honest about it. Nothing wrong with setting boundaries for your job, a lot wrong with deceiving people even if it might seem benign at first.
It is debatable whether higher-capacity interconnects within Sweden can solve this since Germany and neighbouring countries need so much power that any feasible interconnect will be maxed out. A better solution to the problem is to change the electricity regions so that the areas around international interconnects where demand outstrips the supply get their own zones. This way the price on 'the continent' can be decoupled more from the price within Sweden and the extreme price swings and price discrepancies between the north and the rest of the country will be dampened. Swedish customers living within the new regions can get government support to reduce the impact of export pricing without those supports being needed for the current large zones (III and IV being mostly affected).
What impresses me with Rust isn’t that it has highly efficient and idiomatically written standard library features. It’s that the footguns are consistently encapsulated.
Why are you changing the subject?
The meshes look great.

Can't wait for this team to start tackling texture coordinates and texture packing.
This seems really weak. Households in which kids play more video games than watch TV likely have significant other environmental effects that may swamp the effect of video games.

Imagine contrasting a house with the TV on all day vs one where kids have screen time with educational apps in the iPad.
The person you are replying to was discussing "exchanging heat across a continuous length along opposing flows", which is countercurrent exchange. Regenerative exchange is, at least to my understanding, more of a cyclical store and release process.
How ACH works: A developer perspective – Part 1 (2014)
Qualcomm being Qualcomm, again and again and again.
They absolutely were. It was the most hackable tablet for many years because of how cheaply HP dumped these devices on the market.
I can attest to letting my kid play Minecraft, install whatever mods he wants (at 6-7) and watch related tutorials has catapulted his English (not his native language) to insane levels. Playing with the Create Mod is basically just engineering. I do feel conflicted about how much screen time he gets but compared to how I spent my time as a kid, watching shitty soap operas on TV in the afternoons (because that's what was on), this is infinitely better. How can I be mad when he's throwing around words like "non-euclidean"? He's learning WAY more from Minecraft than school at this point. As a bonus, we're practically neighbors with Mojang, and visited them on a sick day once.
Dimension of Professional Growth: Understanding How Others See You
I’m using the phrase because it was used in the thread above.
Eric Lippert on Technical Blogging
Freedom of speech is not the same as freedom of access to information though (idk if that's in any laws). That said, the basis of freedom of speech and information is that you will not get in trouble for accessing tiktok and co; it does not mean the US government or whoever has to make it easy for you. "Not illegal" does not mean "accessible". For example, a court ruled that it's legal to sell and trade digital purchases like games on Steam, but that does not mean Steam has to make it possible to transfer games to other people.

Anyway, there's ways and means around getting tiktok from the app stores - especially thanks to efforts in European law that force both Apple and Android to open up their platforms so that consumers can do what they want with their devices.
Fighting Undead Documentation (2023)
Those comments are just sad.

"Why does the Wall Street Journal have articles about the city and not about the tiny suburb I live in? They have nothing to do with me! So elitist"

My favorite articles across the board have always been articles that have very little to do with me because learning about a different culture, way of life, completely different field, has always been the most interesting parts of reading.

I don't know if I'm over-reading things, but there generally appears to be a closing of the mind, and a sort of narcissism where everyone is all about themselves, and barely curious about anything outside their immediate surroundings. Alternatively, it could just be that the internet gives a voice to the least curious who would likely have had no avenues to let their opinions known (although I feel this wasn't the case in the pre social media, blog era at least).