skysight-inc/HackerNews huggingface dataset:
These stem from a requirement to know you as a person in some verifiable way. These are legal and regulatory requirements but the laws and requirements are there to ensure finserv can meaningfully contain criminal activity - fraud, theft, money laundering, black market, terrorism financing, etc. It turns out by far the most effective measure is simply knowing who the principals are in any transaction.

Some companies have much lower thresholds for their KYC, but end up being facilitators of crime and draw scrutiny over time by both their more regulated partners and their governments.

I’d note that the US is relatively lax in these requirements compared to Singapore, Canada, Japan, and increasingly the EU. In many jurisdictions you need to prove liveliness, do photo verification, sometimes video interviews with an agent showing your documents.
Privacy-first generally entails designing the service on a technical level to be unable to leak personal data. A promise not to store your data is not sufficient.
I don't think it has anything to do with performance. Apps make it far easier to advertise to users.

You can send the users a notification even when they aren't using the app

It's much harder or impossible for users to block in-app advertising

It's easier to track users via apps, and your tracking data will be richer, more accurate and therefore more valuable.

Until this changes, we'll get stupid apps that should have been websites.
Right. And of course, it's not just Windows. For example the Linux syscall aio_read() similarly registers a user address with the kernel for later, asynchronous writing (by the kernel). (And I'm sure you get similar lifetime issues with io_uring operations.)
>The very idea that an audience has a consistent picture of what character's look like is necessarily wrong.

I disagree - I think for the most part there is a wisdom of the masses where sure not EVERY SINGLE person will have the same image of a character but if you had a character artist draw out what 1000 people think of that character you'd find they converge pretty closely... the problem happens when the casting is not close to that convergence and is far out on the fringes.

As I said before I think if you are looking to make a product based on an existing IP you are doing so because you want that built-in audience that IP has - if you can't make the effort to ensure you are honoring how that audience expectations then your project deserves to fail.

The place to do experiments with gender-bending, race swapping, expectation subversion etc is in original IP's that hommage the older franchises.
It's more difficult than current day oil forms, but not necessarily less energy efficient. The same amount of solar energy would be required, but it'd be gathered through solar panels rather than prehistoric plantation.

Humans have made pretty steady progress in getting in ever more difficult forms of oil. Originally we found naturally near surface reservoirs, then started drilling, then deep sea drilling, and then fracking. Each phase was more technologically difficult.

To be clear I think a lot of technological progress is required for synthetical oil to be economical, but in a discission of resource limits across decades, centuries or millennia it's an important escape path.
Not quite.
You should look, for example, into the events of 1971, specifically, US policy regarding foreign exchange rates. Using dominant US dollar position, the US has achieved re-evaluation of exchange rates favoring US exports. As a concrete example, US Treasury Secretary drove the pressure to open European agriculture markets to US exports, weakening European farming industry in the process. Similar moves were made against Japan and South Korea.
> Unfortunately, it only has support for one output. Some of the BIOS functions on the GBA that you might use inline assembly for output multiple values in different registers, which is problematic for Zig. This is currently being worked on so it might be improved in the future.

Can you post the code that's impossible to write properly?
They probably won't be happy if you just use the bathroom and don't order anything. Here some fastfood places near busy subway stations have a combination lock on the door to prevent random people from using the bathroom (the code is in the receipt).
California's native wildflowers can be restored by raking dead grass
It’s a third world mindset where we end up with the software equivalent of public defecation, living in squalor and filth.
My position is that it is undesirable for premises liability to lead to an increase in private businesses searching their guests, not that nobody should be searched anywhere for any reason. I do think it should be rare in practice: airports, probably; concerts, probably not absent some unusual threat; hotel rooms pretty much never.

It appears routinely searching students in public schools is fairly rare in the USA; under 8% use metal detectors[0]. That certainly does not mean they're allowed to bring guns, just that they probably won't be discovered if they do.

[0] https://nces.ed.gov/fastfacts/display.asp?id=334
What do those companies look like externally? Are they publically known?
> I would not call limping along from extreme levels of telemetry, AV and other bloat “works great”

2 billion users don't notice too much "limping" and "telemetry".

1. This entire post is whataboutism, the article is about Linux

2. NSA/CIA/FBI and pretty much all governments of the world use Windows that is ostensibly riddled with spyware and telemetry

3. In the past 20 years not a single person with WireShark and MITM has proven that Windows leaks any personal data (e.g. files). This can be set up in less than 10 minutes. Go produce a single shred of effing evidence I dare you!!

Parroting BS on the Internet doesn't make your post any more valid.

That's disgusting coming from an "IT specialist". You have issues with basic logic.
I like Firefox OS, but unfortunately, I rarely saw any smartphones actually running this system. I feel deeply regretful about it.
One fun thing is personal recording isn't a protected right in the military and has to be stated if you're recording in an office for personal reasons. (official recording is usually stated as a usage agreement), or literally put on the device as a sticker.

He's also a low level enlisted so its not surprising he was unable to afford a lawyer.
I guess, in terms of preservation, about the same rules apply as for a citation and/or block quote. Meaning, clearly state that this is a quote and provide references to the original (so it can be identified). Include a statement of good faith, mentioning your willingness to revoke the content, should conflicts arise. (Also state why you found it important to preserve this, so it can be understood as a tribute to the original.) Do not monetize in any way.

The difficult question here is, if it's really a matter of preservation. The site/page isn't actually gone, it's just the certificate that has expired. The original content is still reachable, while jumping through a few hoops (i.e. browser dialogs). Still, following the guidelines provided above should somewhat mitigate the impact of any wrong doing.
Coffee May Help Improve Cognitive Performance in Atrial Fibrillation Patients
One _possible_ out for Snakey here is that in old percussion cap revolvers (like Colt Dragoon), the safe thing to do was keep an empty chamber in front of the hammer when not engaged in active shooting. It's been a while though, and my fuzzy memory leans more toward the guns supposed to be Single Action Army-esque and not cap/ball era so maybe no excuse for Snakey after all.
Distribution package maintainers generally vet the packages they make avaliable and updates to repositories are typically PGP signed with cryptographically secure hashes for the files. I say typically because I am only familiar with Gentoo and to a lesser extent, the Debian family.

As for Windows, there is no signing requirement according to Microsoft:

> Windows doesn't require software developers to digitally sign their code

https://learn.microsoft.com/en-us/windows/security/applicati...

You are the one making stuff up.
Where do they get the market news from?
> As it would turn out, the Game Boy Advance has quite a bit of “weird memory” that you have to work around in weird ways. I know that this is a long shot, but it would be nice if there was some way to specify how memory in certain address ranges need to be addressed.

Could you elaborate on this? Does LLVM support this feature? If so, it might not be too hard to get it into Zig.
Apple Facetime is painless enough. It can't mitigate targeted government espionage but it raises the bar from mass collection of plaintext.
This is so great. I've been watching the project develop and it's really neat to see this milestone!
This is fun! What kind of prompts / prompting techniques are you using?
Not a single Windows MacOS iOS Android user knows what their display server is and how it works.

Xorg is being deprecated and replaced with semi-broken something where tons of functions only work in KDE and Gnome. That's all you need to know about Linux.
Correct. Much like in Python or C, you can explicitly handle every error/break/early-return condition and manually free the resource. Each language offers a tool to make that easier (and more likely to be correct, especially as the code changes) in most cases though. In Python it's try/finally, in C it's `goto ERR`, and in Zig it's defer/errdefer.
A car with square wheels doesn't grow itself by adding three horns and a bubble dome...
ill take bit banging over retooling to a worse pile of software written by clueless idiots every couple of years (muh clout)

its crazy how nice knowing 100% of whats going on is
It feels very resistant to doing anything other than summarizing. Even when you ask questions for details, the answer is always in the form of a simple summary.
Cool! Hope it works well and convinces more people to try it (if it works out)
Is Android dramatically better for PWAs?
Would a ccache or similar help alleviate the pain?
Djot: Markup Language
I agree, I've read about lots of LLM-based services for summarising content, and I really wonder whether that's because this is something so many people want, or if it's just because it's something LLMs are good at so they are easy to build and then they get hyped because LLM.

Anything that can be expressed in a few sentences, should be, and I tend not to read media that doesn't abide by that rule. If I'm reading long-form content it's because I am looking for detail and nuance that would be lost in a summary.

I do think a reliable video summary generator could be useful occasionally. Interestingly Orbit seems to work on YouTube, presumably by parsing YT's auto-generated transcript.
Software engineering is not like physical engineering. I've done both and they necessarily operate from different assumptions about the world.

In software, a single bit-flip or typo can lead to catastrophic failure, it is sensitive to defects in a way physical systems are not. The behavior of software is dependent on the behavior of the hardware it runs on; unlike physical engineering, the hardware for software is not engineered to the specifications of the design, it has to run on unknown hardware with unknown constraints and work correctly the first time.

Physical systems are inherently resilient in the presence of many small defects, a property that physical engineering relies on greatly. Software is much less tolerant of defects, and there is a limited ability to "over-engineer" software to add safety margin, which is done all the time in physical engineering but is qualitatively more expensive in software engineering. Being broken is often a binary state in software.

I've written software for high-assurance environments. Every detail of the implementation must be perfect to a degree that would make engineers with even the most perfectionist tendencies blush. Physical engineering requires nothing like this degree of perfectionism. In my experience, the vast majority of engineers are not cognitively equipped to engineer to that standard, and in physical engineering they don't have to.
Back in 2010, I was in a work meeting making small talk and we were discussing how cringe some advertising is nowadays. One of us, a program manager who was ~15 years my senior told me it's because we're not the target demographic and that millennials are targeted differently, mainly through word-of-mouth and generally Guerrilla marketing tactics.

Whenever I see articles like these and comments like yours, I can't stop thinking about that meeting.

Edit: to clarify, I am not accusing you of anything. But I do suspect the article to be part of a Google marketing campaign.
Right now they are just buying, no one is selling ... interesting.
Is it something like ART, a fork of RawTherapee?

http://art.pixls.us/

It's interesting how bloated those open-source editors are. There are a ton of useless options. Instead of focusing to implement needed tools like AI masking or lens correction, we have bunch of de-mosaic non function methods or multiple sharpening tools that are non practical to use in classical workflow. Even defaults render broken RAW files!

It's like many volunteer programmers doing software without ever actually using RAW development professionally.
Fixing sleep-wake hangs on Linux with AMD GPUs
Nothing in C can prevent your function from being abnormally unwound through (whether it's via C++ exceptions or via C longjmp()). The only real fix is "don't use C++ exceptions unless you're 100% sure that the code in between is exception-safe (and don't use C longjmp() at all outside of controlled scenarios)".
I tried to keep my message brief and non-specific in hopes that you wouldn't jump on me. But alas.

The type of "model" I'm talking about are threat models that create practical security for yourself, without them "proving too much" and making you fall into the trap of designing bespoke solutions that solve the one problem you're focused on while creating many more.

> If you believe "just trust me bro" regarding the kernel space binary blobs shipped with GrapheneOS or elsewhere on the system-on-chip is in the category of a "good model"

No - but I believe it's the best security I'm currently able to achieve with a device that fits in my pocket, has long battery life, is in frequent contact with cell towers, and is inherently meant to communicate with other people running similar devices.

> I have GrapheneOS with zero binary blobs, and a solution based on compartmentalization that has been demonstrated to work in production even for the most user-iest of users.

If you think you've got a better approach for secure hardware to run Android on, then please by all means share! I would love to see it. So far, your allusions fit the all-too-common pattern of security through obscurity.

For perspective, my main desktop/server is an Asus KGPE with zero blobs in the main processor domain. I just don't see the point of fixating on this for the mobile ecosystem dumpster fire - over there mitigating mass surveillance is the best one can hope for. If you think you're a specific target of state/corpo attackers, then to me the current best answer is "don't trust your phone".
What, could go wrong?
Ask HN: Have you tried skipping a surprise quiz by arguing it wasn't a surprise?
Suppose a teacher/professor tells you there will be a quiz next week, but the specific day will be a surprise.

Maybe you could refuse to take the quiz, claiming it couldn't have been a surprise.

Clearly, a quiz on Friday would not be a surprise. But then, a quiz on Thursday wouldn't be a surprise either, and so on.

Since a surprise quiz was not possible under these conditions, you assumed there would be no quiz at all.

See: https://en.wikipedia.org/wiki/Unexpected_hanging_paradox
My read of the end of this is that the author of TFA replaces the "elevated" interpretations in the cited academic works with "the fly scene's purpose is the be awesome (Leonesque)"--is that right?

Love this movie and the scene but definitely don't relate much to more involved interpretations. That said, I'm the first to admit I'm no sophisticate and am interested in other takes.
Love this:

> Important!! the Windows version might show a false warning, if it does, hit More Info and then Run Anyway.

because recognising a false warning is impossible.
> maybe 65% over $1m

Here in California, my marginal tax rate (if making over 1M) is already about 53%. In return, there is medi-cal (which is shitty[1]), 6 weeks of parental leave at 65% salary, crappy schools on average but excellent if one has a special needs kid etc. So not so great safety net.

Ironically, through a big tech job (which is supposed to be a rapacious corp with zero regards to employee wellness), I get far better protections - amazing insurance(s), 4 months of parental leave at full pay (including RSUs), all sorts of benefits etc etc.

The trade-off is clear to me. I want more of those trillion dollar corporations around me and have very little faith in Federal and California governments to improve their safety nets even if they jack up my marginal tax rate from 53 to 65%.

[1] but again, my Canadian and UK families have horror stories about their healthcare systems as well so there is that
The most recent 50 news articles are pulled via this API: https://docs.alpaca.markets/reference/news-3
Earthremote(job board where there are only globally remote and tech based jobs)
The change, was literal.
When RDS is encrypted at rest, it means that the data stored in the database is encrypted while it resides on disk. Means that the data is protected against unauthorised access to raw storage.

The data accessed by the app is not encrypted, you can still work on the data as you would usually do. It's mostly a compliance thing. Not sure what level of security it _actually_ brings to the data itself, but most companies are okay with "encryption at rest".
I would guess that LLMs are biased towards making a positive assessment of ambiguous information, with specific social triggers prompting negative reaction.
>> They’re faster, more flexible, and work seamlessly across devices. Native apps? Not so much.

> Enabling iCloud sync for your app is just a single click on Xcode.

How well does that work on Android, Linux and Windows desktop, ChromeOS?
I use Comic Mono [0]. I think it took about a year before someone asked if I was coding in Comic Sans.

I honestly love it. It's round and cheerful, and suits my crappy vision quite well.

[0]: https://dtinth.github.io/comic-mono-font/
A short primer on the SSH protocol
I use SSH every day. I login to remote machines, push code changes to github and scp files. Like many programmers, I know how to use SSH to get things done but had never looked deeper to understand the protocol itself.

I recently wrote a minimal SSH client to help demystify the protocol. In this post, I'll explain some of the core concepts to help anyone else doing the same. This will be a 10,000ft overview with references to some interesting parts - not an implementation guide.
Perhaps simpler would be to just not unwind C++ exceptions through non-C++ stack frames and abort instead. (You'd run into these crashes at development time, debugging them would be pretty obvious, and it'd never release like this.) This might not be viable on Windows, though, where there is a lot of both C++ and legacy C code.
> A Unity like environment to create web apps

Spell check needed.
I wouldn’t. It demonstrates that they haven’t thought enough to realise it worsens a systemic problem.
You are calling the Xorg X11 server Xorg, which is wrong. As someone who has “contributed” to so many projects, you should know that. In any case, it is odd you are whining about this considering that the article’s author is a well known X11 hater and you seem to agree with everything he says.

By the way, “Not a single Windows MacOS iOS Android user knows what their display server is and how it works” is both a non-sequitur and untrue. The guys who wrote the display servers used on those are users of those systems.
Because if they don't they will not have feature parity with Chrome (Gemini) and Edge (Copilot).

And while not all people are fond of AI, there are shit tons of people out there who do. Which means you automatically diminish your market share if you don't (because your most important competitors do)
It's like that classic bell curve troll meme - "oh man I better not talk about this anywhere, I don't know who could be listening" is a correct instinct, especially in a western country. Doing anything on the web, whether it be crimes and ecommerce, is absolutely not anonymous. They re-use handles or emails that have personally identifying information, they don't use clean workstations, they brag (dumbest opsec thing ever, giving away information for absolutely no reason than your big ego), they taunt law enforcement. Osama bin Laden basically vanished off the face of the planet when much of the world's most powerful intelligence and militaries were hunting him, and he wasn't hiding in a cave, but he was not connected to the internet in any way whatsoever and communicated via courier, which still got got. The only reason you are anonymous or think you are anonymous is because no one powerful or determined enough has gone looking yet. This is a fact I am convinced of, and I am much more fearful of successful obfuscation tactics and red herrings left on purpose rather than a 20 year old kid engaging in a fantasy that he's so l33t he'll never get caught.

The other thing I'd say to any aspiring criminals out there is it's usually much less stressful and still profitable to get gainful employment if you are actually a talented hacker. Most of these guys seem like script kiddies, that do not understand the ramifications of what they are doing. Some of these breaches will be felt and cleaned up for decades, all so they could get a laugh and a few shekels and their e-peens stroked by other criminals.
Dupe from 20 days ago:
https://news.ycombinator.com/item?id=42385412
> Best Performer

> AIs are tied

Sounds about right
They should have added a pure random bot as a control.

Or a monkey.
> Best Performer: AIs are tied
> Total Profit: $0.00
Also it's hard to sell before buying, and it looks like it's only been going 2 days.
You're just hand waving and haven't proposed any sort of viable specific solution. Customers aren't willing to pay higher bills for the sake of training residents. Those who have a choice will go to a cheaper, non-teaching hospital. Hence the free rider problem.
What is meant by 5 dollar stakes? The bought shares reach triple digits in price.
I don’t know that I completely agree. It depends on the functionality offered, right? Like vim, for example, can struggle with very large files if you ask it to do syntax highlighting all the way from the beginning (or, it can give you syntax highlighting that is just wrong if you don’t). I don’t think vim is very inefficient (could be wrong there, though), and I don’t see any way to generally do syntax highlighting without looking at the whole file (although, of course, in practice there are often shortcuts for specific languages…)