skysight-inc/HackerNews huggingface dataset:
World population will be 8.09B on New Year's Day after a 71M increase in 2024
> I have to assume the traffic over the SPI bus is encrypted so the key can't just be dumped like that

It's not. For some reason, Microsoft don't use TPM parameter encryption, even though every year or two some security researcher or another comes up with another stunt TPM-sniffing device to parade around.

> With LUKS it at least has a password prompt to unlock the drive.

Configuration dependent. You can set up Linux to do the same thing as Windows here (I have my home video-security server set up this way, as it needs to reboot silently - I know that I'm vulnerable to warm/coldboot attack and software attack surface, but at least if someone yoinks the drive I'm safe), and Windows can also be configured to prompt for a password or use PIN-authenticated TPM sealed keys.

> Fundamentally I don't understand BitLocker's security model.

Minus the parameter encryption / bus-sniffing issue, it moves the boundary from "anyone can read your drive" to "someone needs to either perform a platform-level attack to access the contents of memory, or hack whatever services are running at the login screen to read your drive." It's a decent security improvement, actually, because it protects very well against stuff like "someone stole our financial data off of a random recycled hard drive."
> So if someone steals you machine with an encrypted hard drive they need to...just turn it on? That can't be right, but at the same time I have no idea how this particular attack is defeated.

Yes, but the idea is that from the login screen (winlogon) you really can't do much unless you actually have account credentials on the computer - or are bio-metrically enrolled into the computer* - and if you attempt to reboot to safe mode, or reboot to a different OS (or firmware update utility, etc) you do need to enter the Bitlocker recovery key.

* I'm not sure how it works in terms of "hacking" fingerprint sensors or face recognition webcams.
I would argue that ability to alter nature is implicit in property rights. I just don't think it is without limitations.
Again, what is that all based on? It disagrees with most of what I read from researchers and people on the ground, especially that quitting is the first step before housing.

I've seen where many people with those problems live, and the places aren't horrid, just lacking in money and social services.

It just seems like demonization of yet another group - this time, people who have drug addictions. Why is it important to demonize them?

> This is based on the fact that we have finite resources. Any resources that go to housing drug addicts could have been used for something else. There is a real opportunity cost there.

And anything spent on other things could have been spent helping people addicted to drugs. Why is one more important or deserving than the other, other than the demonization?
Why do you say you have to pay a monthly fee for iCloud?

None of the technology you’re discussing here requires a paid account.

You may, separately, decide to sync more than the meager free quota of data on iCloud, but that’s an unrelated issue. You’re welcome to use iCloud just for keychain sync.
Block the whole ASN in that case.
We are saying the same thing. I'm not saying polluters have a countervailing right to utilize all public resources! That would be a crazy thing to say; obviously, we have laws against various forms of pollution.
Are you sure this doesn't violate Reddit's ToS?
> clearly, obviously, utterly indefensible.

If the past decade taught me anything is that people who don’t feel shame can’t be shamed into doing something obviously right. Or prevent them from doing something obviously wrong.

You need laws on all levels for the obvious things as well.
That seems to defeat the narrative of "the consumers are struggling due to high interest rates". If they have the cash in their accounts, they shouldn't be the ones largely defaulting.
I've always wondered if they'll do something for a true monster Mac Pro.. 128 cores, gobs of memory, etc.
If you look closely the content of a capsule is lots of tiny pills...
Okay, and if a meteor filled with radioactive substances crashes into your land, where pollution is forbidden?
I have never received anything.
The TPM tracks the state of the secure boot and the bios, that log is stored in the TPM itself the next time you’ll try to boot into windows it will see that something happened and bitlocker will lock itself out.

Do this experiment.

Boot into any Linux live CD on a machine with bitlocker enabled.

Reboot and see what happens.
Credit cards are probably an earlier indicator than mortgages.
> a legal requirement to scan photos

There is absolutely no such legal requirement. If there were one it would constitute an unlawful search.

The reason the provider scanning is lawful at all is because the provider has inspected material voluntarily handed over to them, and through their own lawful access to the customer material has independently and without the direction of the government discovered what they believe to be unlawful material.

The cryptographic functionality in Apple's system was not there to protect the user's prviacy, the cryptographic function instead protected apple and their datasources from accountability by concealing the fingerprints that would cause user's private data to be exposed.
Depends on the circumstances. And, maybe you're right more generally. Maybe the balance of equities will be such that materially compromising the viability of any waterway is proscribed. But a political process works that out, not a natural right.
They had cash when they signed up, they don't anymore
Database mocks are not worth it
Purportedly Windows makes use of this, FWIW: https://learn.microsoft.com/en-us/windows/security/operating...

"BitLocker uses the TCG Reset Attack Mitigation, also known as MOR bit (Memory Overwrite Request), before extracting keys into memory."

I would extremely not trust most platform implementation of TCG Reset Attack Mitigation, though. I've never seen a UEFI platform that is even close to correctly implemented in any form. It would be interesting to know which platform this researcher was working with, and whether it purports to support the MOR bit or not.
> still working Nitter instance

This is the issue with Nitter instances; they seem too ephemeral for reliable use.
> &raw (*struct_pointer).field

This is not correct -- dereferencing a raw pointer does not implicitly create a reference. That code snippet is perfectly valid as long as the underlying pointer arithmetic is valid.

See the Rust reference on "Behaviors considered undefined": [0]

> Accessing (loading from or storing to) a place that is dangling or based on a misaligned pointer.

No problem here, dereferencing a raw pointer creates a place expression but we do not load or store from it.

> Performing a place projection that violates the requirements of in-bounds pointer arithmetic [1]. A place projection is a field expression, a tuple index expression, or an array/slice index expression.

Alright, so we're doing place projection. Let's check the link to see the requirements for in-bounds pointer arithmetic:

> The offset in bytes, computed on mathematical integers (without “wrapping around”), must fit in an isize.

> If the computed offset is non-zero, then [the base pointer] must be derived from a pointer to some allocated object, and the entire memory range between [the base pointer] and the result must be in bounds of that allocated object. In particular, this range must not “wrap around” the edge of the address space.

Okay, so your "obvious" snippet is sound as long as struct_pointer points to valid memory that's at least big enough to contain the field offset you're accessing. There's no rules about aliasing, or even alignment.

These semantics are more or less the same as the equivalent C code. They might even be slightly more relaxed, since I don't recall if C has requirements on alignment or strict aliasing when doing pointer projections. I have no idea what Zig's requirements are -- I spent about a half hour searching and couldn't find any documentation or discussion on whether and when pointer projection, or even just pointer arithmetic, can lead to undefined behavior in Zig. I'd be pretty uncomfortable writing pointer heavy code in Zig when I can't find documentation or even a GitHub issue on whether basic pointer operations can trigger UB or not.

[0]: https://doc.rust-lang.org/reference/behavior-considered-unde...

[1]: https://doc.rust-lang.org/std/primitive.pointer.html#method....
And in the datacenter space, AMD has taken things even further with the MI300A:

> Twenty-four x86-architecture ‘Zen 4’ cores in three chiplets

> Six accelerated compute dies (XCDs) with 38 compute units (CUs),
each with 32 KB of L1 cache, 4 MB L2 cache shared across CUs, and
256 MB AMD Infinity Cache™ shared between XCDs and CPUs

> 128 GB of HBM3 memory shared coherently between CPUs and GPUs
with 5.3 TB/s on-package peak throughput
Ok, but this doesn't matter to my argument, does it?
There's a retort called "Models of doom" that I haven't read but can vaguely guess what it'll say. When was the world supposed to have ended by now?
A bit, yeah :)
> For instance if the UK had remained and the EU had then announced all the opt-outs were voided, that would have been a major change but well within the remit of what was possible in a Remain scenario (without the threat of leaving what stops the EU doing whatever it wants to a member state?).

Those opt ours were enshrined in the treaties. There was no way to rescind them without the consent of the UK. You’re constructing a straw man.
The third option is that it's so you don't end up with a patchwork of different laws/rights/restrictions and potential conflict between local and state laws. That's supposed to be the intent with most preemptive laws. In theory, there's supposed to be a balance between the use of natural resources and their protection.
Do you have qmk on the moonlander?
I live in an area with massive homeless populations and in an area where the average price of rent has raised nearly 50% in the period since COVID-19. I've seen a startling amount of what I can only describe as "new" homeless in this same period, and a growing cruelty in the way my city and surrounding cities have decided to deal with the problem. I think systemically, the cruelty might be a little bit of the point - fear of homelessness has way too many times in my life gotten my ass out of bed in the morning for a soul-crushing minimum wage gig. Being poor or sick or mentally ill should not be criminalized, unfortunately, that ship has long sailed.
> looking at it holistically.

Looking at it holistically is precisely what makes it good for humans.

Most activities that change the land from its original state are not done for the long term good of humanity, but for short term profit, which is what finances the activity.
Because there are multiple protocols you could be using to talk to the socket other than HTTP. In order to use HTTP, you also need to specify the path and maybe other elements. What you may want is something like:

http://<unix:///tmp/my.sock>/foo/bar.html?good=yes

To avoid the nesting of protocols, I think it is cleaner to give it a name and define the socket path elsewhere.
The analogy is similar to swiping your credit card versus using Apple Pay. With “login using Google/Apple”, you are submitting the username and password which could potentially be harvested by malware or a key logger. With passkey/Apple Pay, you are submitting a one time token that has no value in the Dark Web.
Too bad the author did not provide hardware specs. Such attack is even harder on DDR4 and DDR5 memory and most publications refer to legacy ram such as DDR3

> In my experience I have had the most success restarting the system while Windows is loading but before the login screen has appeared, at least in the case of finding FVEK keys.

So what is this? It was supposed to be memory attack and he's dumping the keys after someone unlocked it and it's booting?

So this is just another theoretical attack where perfect conditions must be met.
Sorry for your loss. Like so many others here, I was a heavy QModem user. My memory is for crap, but I think without it (and Ymodem-G and Zmodem protocols) BBS/warez life would have been unbearable.
If, on the other hand, it were a long, drawn-out animation of moving the mouse pointer to the button, hovering for a few seconds, and then slowing clicking while dragging the mouse away so that the button didn't select and they had to repeat the task again-- that would be art.
> using a model that is 340 MB

"The model is quantized to 8 bits per parameter and evaluated using BF16 floating point numbers" means the model is stored as 1 byte per parameter even though it's using a 2 byte type during compute. This is backed up by checking the size of from the download which comes out as 171,363,973 bytes for the model file.

> and was probably trained on the test data

This is likely a safe assumption (enwik8 is the default training set for RWKV and no mention of using other data was given) however:

> No one would be impressed with saving 78 MB on compression using a 340 MB dictionary so I am not sure why this is good?

The Ts_zip+enwik9 size comes out to less than the 197,368,568 for xz+enwik9 listed in the Large Text Compression Benchmark
despite the large model file. Getting 20,929,618 total bytes smaller while keeping a good runtime speed is not bad and puts it decently high in the list (even when sorted by total size) despite the difference in approach. Keep in mind the top entry at 107,261,318 total bytes in the table is nncp by the same author (neural net but not LLM based) so it makes sense to keep an open mind as to why they thought this would be worth publishing.
Of course. How else would one match the jeans?
It doesn't matter if you change the settings back. I don't know how it works, but something non-user configurable is changed that prompts Windows to require a reset of the TPM keys.
> ts_zip

Discussed (once more) in a neighbor thread: https://news.ycombinator.com/item?id=42549083
I don't want to take away from the importance of clean beaches and water, but there are many good answers to your question, at least as St. Pete goes:

* Live music

* Great food

* Bike and pedestrian friendliness

* Wildlife

* Sports and outdoor activities in winter

* Traditional outdoor craft and fruit markets

* Exposure to greater racial, ethnic, and lingual diversity than is present in most of the USA
It was an economic boom based on debt. The US faired much better than europe but most likely due to the massive debt we used and then gave to our citizens (and businesses).
Psychology / Therapy: A horrible model that doesn't work properly. Limited to seeing patients once a month when they need it to be once a week, and constant fighting with the system by clinicians and patients. Overloaded schedules are ultimately unethical.

Doctors: It's like working for any other hospital; it's not bad.
+1 for "dumb bubble of poo"
The link through to the other article with specific examples is illuminating. It's a lot of medication and paperwork, and little relics of a more normal life before. Photos of loved ones, ashes of a dead spouse. Nasty work to post this comment here.
Frequentism prevents Bayesian conditioning on the fact that it is the same airline, same model aircraft, etc.
> Yeah right but that's life.

Oh, most definitely. So you gotta do what you gotta do.

> Your argument is basically "someone could stop willing to do business with me so they should give me the means to be independent of them". That's not a valid reason, that's being unreasonable.

On the contrary, we use that general principle every day when making decisions. For example, these aspects could be even more starkly highlighted when you make decisions as a business owner -- because the buck stops with you, and many other people might be depending on you. So you really don't want to back yourself into a corner.

We focus first on the biggest risks, and then move down the list. And the specific probabilities and costs we assign to each dependence might be different based on our cultural background and life experience. YMMV.
The tyrants following their own policies might be more effective and compassionate. At least that's a suggestion implicated in the article.
For me, some of the best books I read this year, are:

- Ishmael by Daniel Quinn, I have seen many narratives on the fault at the core of current values and goals of human civilization, but never saw a laid out alternative. Whatever it might be, I like the book for attempting at presenting one.

- Solaris by Stanislaw Lem, I like this book for extremely original thoughts. This books was so thin (~200 pages), yet it was grand. I also wrote a review [0].

- The Happiness Trap by Russ Hariss, was very helpful to me in sorting through some things. Very practical book.

- Anathem by Neal Stephenson, one of the most original book, and probably the best one by Stephenson. Very original ideas, mind expanding.

- Permutation City by Greg Egan, this book raised the standard for possibly all SciFi book that I will read in the future. Extremely original and grand ideas.

- The Happiness Hypothesis by Jonathan Haidt, another book that lays out alternatives to what is now considered mainstream.

- Sotyi Rupkatha by Parimal Bhattacharya (Bengali), a book without any ideological or emotional baggage explaining the plight and pain of a tribal community for Aluminium mining. The way colonialism lives in mining was eye-opening. Aluminium mining, separating, etc. are done in lesser fortunate countries where huge amounts of water is wasted and the environment polluted. The West still imports that refined raw material in cheap and produces final products with lesser environmental impact and peofits by selling the finished products to the same countries in large profits. It was refreshing to see that this book did not have a Communist undertone.

- Krishna Basudev by Bani Basu (Bengali), life of God Krishna in form of a novel in crisp prose, written maintaining authenticity of core books like Bhagavat Purana and Harivansha.

[0]: https://ritogh.substack.com/p/not-merely-a-story-of-a-man-fa...
> The problem with that is that they're also a problem when they're on the streets, sometimes even more of a problem. Someone who's not a problem and generally minding their own business is less of an threat than someone who's drug addiction is driving them to commit violence.

That applies to every criminal act, so why are we signaling out people addicted to drugs? Plenty of people on Wall Street commit crimes daily, stealing money from innocent people - do we worry about how to preemptively stop them?

The answer, IMHO, is that some have effectively demonized people with drug addictions and people who are unhoused, to legitimize hate and violence in our society (and to get rid of people they don't like). 'I hate/fear unhoused / mentally ill people, so it's ok to choke one to death or lock them away without trial.'

It's not only hurts and oppresses those individuals, but it lays the foundation for the next stages - progressive protestors, and soon mass detention of immigrants. It's either human rights for all or for none.
Is this Hacker News? This is way bigger than Meta. Should individuals have the freedom to access to their own phone data without needing to be a device manufacturer? Or should we depend on case by case approval of access that is outside of the users hands and something only big companies can do?

Framing it as being about `Apple vs Meta` is exactly the line of thinking that Apple wants, and it does a disservice to real Apple users, who have repeatedly been locked into a ecosystem where they have little control of their own data, where even sharing photos over Bluetooth isn't even an option! It's so locked in it's really unreasonable to frame this as being about Meta.
Of course users should be able to give none / empty / fake or even real data to Meta if they so choose.
But really this is about Apple, user rights, the EU, and a more fair playing field.
If you read the PDF Apple put out, they are not offering any kind of middle solution, they are just saying they will, as usual, review case by case device partnership opportunities as it pleases them.
This attack has nothing to do with the memory type; memory is never made cold or allowed to decay. The system is hot-restarted into UEFI. Ideally no memory refreshes are skipped.

I do wish they provided the hardware specs too, though, as this reflects an incorrect UEFI platform implementation of MOR.
Probably for Disney et al.
"His proposition was that if you have well defined property rights, the parties would transact and price out any negative externalities efficiently without government intervention"

Typical crock of shit thinking from economics. Assumes perfect future prediction combined with absolute awareness of all activity occurring at the molecular level, perfect attribution and ability to rewind time to determine causality/responsibility, that people are generally respectful of the law.

And above all, assumes that economics will price the value of human life (to say nothing of non-human life with emphasis on the word "nothing") as anything but "zero".

The obvious extension to this is that FLoridians have no right to a sustained future existence of humanity. All that remains is to determine how fast capitalism can consume humans and the environment into fictitious unicorn horn currency until nihilism triumphs and we pass into the void.

Like the tree falling in the forest, what is the monetary value of all human bank accounts when all humans that would observe the value of the bank account value are dead?
In almost every CBTC system trains communicate with a central zone controller and do not interact directly with each other.

Urbalis Fluence works as you describe, but that is a very new approach to CBTC and as far as I'm aware has only one installation.
You're also much, much more likely to get much, much more beaten and robbed and have your rental car stolen with everything in it, and have to deal with the corrupt cops as a foreigner in the Caribbean.
There's no economic boom, just a stock market boom. People are helped in proportion to the money they have in the market.
Yeah I feel the same. Going to adjust to a more conservative portfolio soon and try to minimize the damage to ye’old 401k
What is a wholistic value system independent of humans? I dont think humans are capable of representing one without injecting their own values.
All I want is a pie chart showing percent of calories from macros.

10% fat, 50% protein, 40% carbs.
Your mistake is thinking this is a mistake. For the proponents of the state-level law, this is an expected and desirable outcome.
have you found anyway to export this year's data? I've logged in but now I'm worried that somehow opts out of getting the export data
How a $12.98T-Shirt Is Made in America–At a Profit
Gift link: https://www.wsj.com/business/retail/america-made-shirts-amer...
Apple TV Plus is free to stream this weekend
You can release a binary as public domain.

Also, I believe that public domain as a concept does not exist in some countries. if i remember correctly the concern is that without a license the original author could change their mind and sue.

But any public domain software also matches the fsf and osi definition of free software and open source respectively. Atleast in jurisdictions where public domain exists.

You may be confusing things with copy-left, which is designed to protect users from developers. The gpl is a copy-left license.
Where else can you walk from Germany to Mexico?