skysight-inc/HackerNews huggingface dataset:
They are definitely making some money off of their licensing to AWS as part of the bedrock offering. Facebook’s licensing is such that they aren’t going to let happen to them what happened to ElasticSearch, Redis, etc.

I’m okay with that.
> And yet until you can convince Debian to include a copy of Adobe Photoshop in their repository you will cut off a significant amount of desktop users.

Shouldn't you try to convice Adobe instead? AFAIK, they're already using their bespoke UI and if Sublime can do it, Adobe can sure deploy Photoshop on Linux even if they only want to bless Ubuntu.
OT but I convinced several of my clients to use Excel and SharePoint they already had in their bundle over writing a full blown app multiple times, added some automation and it was both cheaper and made them happier.
In 1997, a man publicly insulted Steve Jobs at the WDC in front of thousands
https://threadreaderapp.com/thread/1873824110742299030.html
Both the words "Battleship" and "War ship" are used by DRH to describe USS Oscar Austin, so I used the same.

I did not know about distinction, so TIL!
No, thats not it as explained in my reply to that TerrifiedMouse comment in 2023 :)

On x86 Integer instructions _never_ waited for floating point opcode to retire. You can check it yourself by reading FPU status register busy flag - if FPU was blocking you could never catch it in BUSY state and FWAIT would be useless :-)

Abrash exploited the fact Pentium was the first time x87 FPU instructions could run pipelined overlapping one another. All other x86 vendors FPUs waited for previous FPU instruction to retire.

https://www.agner.org/optimize/microarchitecture.pdf page 47

While floating point instructions in general cannot be paired, many can be pipelined, i.e. one
instruction can begin before the previous instruction has finished. Example:
fadd st1,st0 ; Clock cycle 1-3
fadd st2,st0 ; Clock cycle 2-4
fadd st3,st0 ; Clock cycle 3-5
fadd st4,st0 ; Clock cycle 4-6
Obviously, two instructions cannot overlap if the second instruction needs the result of the
first one. Since almost all floating point instructions involve the top of stack register, ST0,
there are seemingly not very many possibilities for making an instruction independent of the
result of previous instructions. The solution to this problem is register renaming. The FXCH
instruction does not in reality swap the contents of two registers; it only swaps their names.

Paradoxically often mentioned Texture Divide every 16 pixels overlaps just fine on all CPUs and doesnt explain performance discrepancies. Intel FDIV latency is 19 cycles compared to Cyrix 24, mere 20% yet you need almost double the MHz on Cyrix to match FPS numbers. Answer lies in rest of Quake heavily pipelined FPU code.
Honestly, not much.

I found it nice how it's possible to emulate switches in Lua with so little code, without the result looking too ugly. You may find this pattern useful. That's it.

The catch is that, unlike with normal switches or with a series of "if"s, there's a whole bunch of indirection added via functions, so it's not very efficient.

Perhaps LuaJIT can inline these functions, but I haven't tested it.
DNA Break Repair [video]
The issue is in Europe, not US. What China did was to copy what US does, except: Chinese private capital is not as strong as US, that's where the state capital comes into play. Tesla is an US company.

Europe is a very different story, the private capital is very conservative. They are not willing to gamble as US counterparts, and the states are not moving fast enough.
That sentence builds up on the previously mentioned sentence about types.

> It is “weakly typed”. SQLite calls it “type affinity”. Meaning you can insert whatever in a column even though you have defined a type. Strong typed columns are opt-in

and then I call it

> I hate that it doesn’t have types. It’s totally YOLO
Well, China is a country of socialism with Chinese characteristics.
US Treasury says it was hacked by China in 'major incident'
Did you know straight men have been doing drag for centuries? It’s called theatre.
Dupe (61 points, 10 hours ago, 19 comments) https://news.ycombinator.com/item?id=42553154
You didn't use Firefox in the last three years, and you claim that Chrome/Brave (still) blows it away.

Interesting.
> required to use Windows

There’s an alternative flasher for Samsung’s bootloader that works on Linux/macOS: https://github.com/Benjamin-Dobell/Heimdall

It might not work with this particular tablet, though.
> What would you like to replace in Windows that's not "replaceable"?

Whatever is powering the start menu ads.
Shattered didn't produce a collision for an arbitrary hash, it produced two documents with the same hash (which is a slightly easier problem, about 100,000x faster).

SHA1 is certainly insecure at this point, but not even close to trivially so.
I do wonder if Apple could have saved itself a lot of aggravation by allowing side loading from the start.
> it understands the exact problem domain, it understands exactly what's being asked, correctly models the solution

It does not "understand" or "model" shit. Good grief you AI shills need to take a breath.
Hardy's "A course of Pure Mathematics" has been highly regarded since it was first published in 1908 because it was an innovative text: rigorous, modern, well-written. Its intended readership was always first year "honours" mathematics students. This book inspired innovation in subsequent generations of textbook writers.

However, in the 21st century, this book really can no longer be recommended for its original teaching purpose. As a textbook it is outdated (a term I hate, but it is true). It is now an historical curiosity - although one which I am pleased to own, and the exercises in the book are still worth a look.

Calculus teaching has progressed considerably since 1908. The construction of the real number system in Hardy's book, using the Dedekind Cut method is overly complicated - the use of the of Least Upper Bound is much simpler and clearer. Hardy defines the concept of integral solely as the anti-derivative; there is no discussion of Riemann sums, or Darboux sums, etc. I am sure I would not want to take Hardy's approach today.

I think we are better off recommending books are more modern.

I will start by recommending "Calculus" by Michael Spivak.
> XDP receives packets before the network stack does, but not before the kernel; in almost all cases, it's just a hook to process packets off the DMA buffer.

If the kernel really processes and parses the data packet _before_ eBPF and XDP can then you could exploit the kernel via single data packets. That's the context of the discussion, still. Meaning that in the hypothetical scenario that you found a programming error in the kernel code regarding the parsing of network packets.

Note: Parsing is not the same as copying, and I used the word parsing specifically on purpose here.

If the kernel does not process or parse the network packet other than sending the pointer to the previously copied buffer to an eBPF program - then that means a malicious packet can be blocked before anything else in the network stack is affected, right?

So, what do you think happens when I decide to write an eBPF/XDP program that blocks e.g. all TCP packets?

A) The network stack receives the packet

B) The network stack does not receive the packet

If your answer is A, we have a different definition of what you describe as the term "network stack".

To me, the network stack is everything that comes _after_ XDP passthrough. And that's outside the influence of my userspace/kernelspace program that tries to protect the system.

Also XDP is the earliest position in the kernel architecture to detect/validate/block malicious network packets. Because let's be real: I am never gonna be able to get anything merged in the kernel driver code of my network cards.
Fair point, but I think we can measure the success of them in their respective device markets by their market shares. And while ChromeOS was a great attempt, it didn't really disrupt much beyond the US education market.

> That means Android will be powering laptops. Does that make it a Desktop OS? If so, that does the we can count Android's 45% market share of all personal computing devices towards a Desktop OS?

OS market share for a particular device type is typically measured as the respective portion of the OSes that run on that hardware. If you are looking at desktop/laptop market share, you'd only count that :)
David Hilbert and Stefan Cohn-Vossen.
Yeah, I can't imagine what lunatic thought it would be a good idea to have this stupid orb floating inside the page. Heck, it would be fine if you at least had an option to move it into the toolbar where it belongs...
Fair. Fool me once, shame on you. Fool me 12 times or so shame on me. /s, kinda.

The OP claimed it got better in 2017, and it didn't meet my standards. But I'm honest that I haven't tried it in 2 years.

If some news or person came out to suggest something big changed and I should try it again, I will. Otherwise I'm just wasting time for no reason.
Effort maybe but not likelihood of discovery
It is on F-Droid IIRC.

Edit: just checked, it’s in the IzzyOnDroid repo: https://apt.izzysoft.de/fdroid/index/apk/app.lawnchair
Show HN: 6,606 Free PNG Brand logos
Energy costs are generally lower in the US and it almost entirely balances out.
Let us know how that goes
AI Chat vs Human Writers
During COVID, I built a quick no-code solution to help ‘all-inclusive resorts’ in Cancun and Punta Cana. It started with guests scanning a QR code, filling out a short form, and scheduling their Antigen/PCR tests. Over time, it evolved to help nurses manage operations, streamline test results, and send certificates via email.

What began as a DIY project during lockdown scaled quickly to Mexico City, the Dominican Republic, and Barcelona, processing over 30,000 tests the day after New Year’s Eve. Using Airtable, an Airtable extension called miniextensions.com, and tools like Docusign, Make, Sendgrid, and Twilio, the solution ended up supporting over 1 million tests. I handled all technical aspects, support, and training myself.

Since the solution was meant to be temporary, I prioritized speed and reliability. Airtable’s relational database capabilities were crucial, especially compared to spreadsheets, for managing multiple linked tables and automations. Airtable also offers a REST API and a pretty amazing self- actualizing database schema that can be copied into tools like GPT or Claude for added context. You can build powerful tools with its scripts, interfaces, and automations.

That said, Airtable is best for use cases with fewer than 250,000 records per month. Above 100,000 records, the web platform’s performance can suffer, though there are workarounds. It’s perfect for small to medium-sized businesses needing custom API integrations for CRMs or internal tools.

If you’re interested, I wrote a brief case study about the project here: https://rashidazarang.com/covid-testing.

On a related note, today I built a cool Airtable automation using ChatGPT and custom scripts. By filling out a corporate email in a form, the system scrapes the web for details like company name, address, phone, fax, and more, which then populates the CRM automatically. I’m still experimenting and plan to make a YouTube video about it soon. Here’s the loom video I sent to a friend about it: https://www.loom.com/share/b9ddbefbdce5434da378667fc2079d00?...
I am saying that describing a code base as "open source" was intuitive and generically understood to mean "source available" prior to 1998, which is when the OSI co-opted the term and conflated it with a much more specific definition involving license restrictions.

As for the pre-1998 meaning not being "clear", that's a matter of opinion. I would counter that OSI choosing to redefine an already existing term, and then falsely claim they invented that term, makes things far less clear.

Please read the link I included above. That post author's findings completely align with my own recollection from discussions on BBS's and newsgroups in the 90s.
Isn’t that significantly on the Linux kernel not having stable driver ABIs?
Your reply comes off as arrogant and hijacking someone's announcement like this is tacky. "Were you aware I had already done this better. Why would you do something I already did? Did I mention I already did this?"
For any exploit which relies on reading a dump of the target machine's memory, if you have physical access to said machine: How feasible is an "interposer" device that copies off or modifies data as it goes in and out of RAM?

I'm thinking of something like the old "Action Replay" devices for Gameboys, which modified memory from the game cartridge as it went into the system to be loaded (or executed in the case of code) in order to cheat in games. You slotted the cartridge into the Action Replay, then slotted the Action Replay into the Gameboy.

Could you do something similar between the RAM and the motherboard? Slot your ram into the device, slot the device into the motherboard, and capture the state of memory at any moment by simply watching how memory is read/written? That way, you'd save yourself the hassle of manually powering off the machine and hoping the data you need is available?

I'm not an electrical engineer so maybe what I am proposing is completely infeasible - physical space and bandwidth limitations certainly seem likely. But is it possible?
Rewriting what history, exactly?

Don’t forget, but this is all made up. None of this is real, buddy.
Love this.

In my own projects most of my Ruby classes are data objects that I freeze (along with their instance variables) immediately after creation. Methods can query the state of these objects but anything that involves changing state requires returning new objects (possibly of different classes).

Not mutating anything has prevented so many bugs. And as an added bonus most of my code has been able to be parallelized pretty trivially.

One style nit though;

version_int = RUBY_VERSION[0..2].sub('.', '').to_i
filepath = lambda do
File.expand_path(File.join(File.expand_path(__FILE__), "../../module_names/#{version_int}.txt"))
end
if version_int >= 18
# :nocov:
version_int -= 1 until File.file?(filepath.call)
# :nocov:
end

Why not the simpler

version = RUBY_VERSION[0..2].sub('.', '').to_i

path = version.downto(18)
.map { |v| "#{__FILE__}/../../module_names/#{v}.txt" }
.map { |p| File.expand_path(p) }
.detect { |p| File.file?(p) }

Also this logic will definitely misbehave if there's ever a Ruby 3.xx.
The final report from Congress suggests it was a lab leak. Now "consipiracy theorists" are vindicated again.

https://oversight.house.gov/release/final-report-covid-selec...
Strong "reviewer #2" vibes in this comment...
Sounds like pre-bailout GM
That seems pretty unlikely to be the original point of https://news.ycombinator.com/item?id=42549415, which mentions none of that, and doesn't even have directionally the same concerns.

But also, what you wrote is basically nonsense. Clients don't need "an approved cert authority". Nor are there any "approved gatekeepers", all major browsers are equally happy connecting to your Raspberry Pi as they are connecting to Cloudflare.
> The state of education is not great I agree, but imo somehow we have created generations of students who don't care or are less able to do critical thinking, and certainly that impedes and/or unravels the progress any educator could hope to do.

Thanks for posting this. I agree with everything you said.

Real problems are never about a single magical variable that fixes everything. They always consist of sometimes complex graphs of parameters (issues, control points, rules, laws, politics) that need to be address to a sufficient breath and depth to make things change.

I am intrigued about ideas such as eliminating the Department of Education. I haven't really given it any thought, so I can't speak about this to any depth, for or against it. I do, however, reject big government (that does not mean "no government") and tend to believe that the more you rip out of government claws the better off you might be.

When I get vocal about the state of US education it is easy for many to only think about my criticism only applying to top tier schools. That's not the case at all. The problem is systemic, and it starts with the sad state of the K-12 education.
Corporations are "people".

Corporations "eat" money.

Entities that can feed a corporation, are treated as peers, i.e. "people".

Thus, on shitter, if you can pay, you are a person (and get a blue checkmark).
It's called dumping EVs with state subsidies to hollow out automobile industries in the west and Japan. No thanks.
I have 16GB of RAM on a 2019 Dell I bought for $140 on ebay and I rarely get past 6GB (mostly browsing and reading pdfs, and the rare WhatsApp tabs). It came with Windows 11 and it was a toaster for the one hour I bear with it. I'm not really keen on privacy, but I draw the line on waste and exploitation.

My MBA is much more ergonomic and user friendly, but it's like being with an annoying roommate that insists on sleeping on the same bed and taking shower with you instead of having an appartment all by yourself
Honestly, love to hear this :)
> China has several hundred billionaires

China allows these billionaires to exist as long as they play ball and toe the party line, because China still owns a controlling share in every Chinese company that exists.

> Ma is an icon in China’s tech industry, one of its most successful and recognizable figures at home and abroad. He was speaking weeks before Alibaba subsidiary Ant Group, owner of the world’s largest digital payments platform, Alipay, was due to go public in Shanghai and Hong Kong. It would have been the biggest initial public offering anywhere in the world. On November 2, 2020, a week after his speech, Ma was summoned for questioning by the same regulators he’d challenged from the stage. Days later, Ant Group’s $34 billion stock market listing was suspended. For nearly three months, Ma disappeared from public view.

https://www.wired.com/story/jack-ma-isnt-back/
But it isn't a browser, because it only interfaces to one single LLM. You need to have multiple models there (like visiting websites).
China to tighten export curbs on critical metals
It's a key component of communism when that one party is a communist party. It is definitely not "name only" (the claim to which I was replying).

I would agree that Vietnam is probably less communist than China. That doesn't really impact my point.
It's part of their plan to shift fossil-fuel economy stack to electric stack, just so China can own a piece of the supply chain in as many industries as possible
Practical QC is like nuclear fusion. People have been saying we're only a couple decades away for decades. And yes, we have made a lot of progress, but no one really knows for sure how far off we are. There might be a huge breakthrough within a couple years, or progress might stall for decades.

I think that it is absolutely worth researching post quantum cryptography, and if you are a high value target, maybe even using it. But it probably isn't necessary to use it everywhere yet.
Reminds me the cold boot attack....
Really curious what aspect of the treasury they were hacking as it’s such a broad department that includes the IRS, etc.
Chlamydia could make koalas extinct. Can a vaccine save them in time?
I’m sure Openai likes this use case, a neat way to access data where they are otherwise blocked.

Personally I’d worry about using this accidentally and with some sensitive data (eg logins).

I do like the idea though, I’d use this with a local model.
Currently I manage my startup’s accounting in Google sheet, and your comment gave me an idea to enhance it with Google Forms!
Daily reminder, ChromeOS is a Gentoo fork.
As a person who never used Chrome in a capacity to replace Firefox (I just refused to give up), I'll just share this [0].

As I understand, no amount of words can convince you because I neither know what your standards are, nor I have the right words to convince you to try Firefox again. So, you have to give it a try and see it for yourself.

As a matter of principle, I'd never use a browser which is funded by an advertisement company which lives off my data to show me ads and rob me of my privacy and cognitive capacity.

In my book, Brave is even worse on that matter.

Edit: To clarify: I still have Chrome installed for the odd, unmaintained site which happens to require something Chrome specific, but I just don't open it, since Firefox works for everything and works very well.

[0]: https://arewefastyet.com/win11/benchmarks/overview?numDays=6...
Direct cash injection is frequently the worst way to do this, so I don't think that failure is particularly indicative of a complete inability to achieve onshoring of manufacturing.

Tariffs certainly seem superior to me, especially if paired with tax cuts in other areas.
Why Use a Monorepo Build Tool?
Could you clarify further? "Sane" is very subjectively defined.
Most people only have a few "essentials" applications they want to use (the browser in most cases) and don't care about the OS. Whatever can run these applications reliably will get a free pass. And for a lot of these use cases, if they have someone that can get Linux working well on their hardware, they only notice the speed and the lack of ads.
2024's Biggest Breakthroughs in Math [video]
Detecting spoofed email = "See email from protonmail.com domain."

Does that count as spoofing? It wasn't spoofing the domain, it was just outright fraud.
To add to that, privacy features that can be offered for free, like tracking protection in Firefox, often are, and thus are available to everyone. Services like Relay, VPN and Monitor Plus, which require upkeep of infrastructure, are paid or have paid tiers.

(Disclosure: I worked on both Relay and Monitor, but this is my own interpretation; I don't set pricing strategy.)
American cars can literally write "this is a trick" or "avoid this" on the front and people will still buy it anyway:

https://www.merriam-webster.com/thesaurus/dodge
app-based delivery services like DoorDash and Uber Eats were not the best way to support local businesses

Unfortunately I got pissed off badly because I found out that ordering directly I was treated like a second class customer - where I expected the opposite.

If I order directly they know I will not leave negative reviews.

I really wanted to pay directly for the same service. I wasn’t expecting to get better service and definitely I wasn’t expecting being treated like dirt.

So sorry but I will keep using app ordering services because I simply get better quality of food and better delivery times.
I used google sheets but wouldn’t go past big query or firebase these days. You can have connected sheets that read straight from big query and probably firebase too, and they’re so much better and faster and have fewer quirks than sheets
Hey, if you're interested, happy to introduce you to my accountant. He handles our books that includes multiple currencies including GBP on wise.com.
They also expected him to do that in 2016. Didn’t happen then and won’t happen now.
We could use a bit more thoughtfullness in software dev.
I feel pretty comfortable with how XDP works, since I built a CDN forwarding path on it, on multiple different drivers, which was its own special fun. No, I don't think you're right that XDP gives you a fighting chance against CPL0 implants.
Do you have a source that this is the law?
I'm reading a lot of criticism here, some I understand, but honestly, this sounds pretty good for a free LLM service: "Orbit doesn't require account creation or save your session data."

Maybe we shouldn't be too critical of Mozilla for providing a privacy-first LLM service - for free. The other big privacy-first LLM provider is Apple, which requires users to have their devices/subscriptions to use, and definitely uses advanced telemetry by default.

Not to speak of all the other providers who are either paid or free-but-mine-your-data.
Performance (On an HP48GX Graphing Calculator)