skysight-inc/HackerNews huggingface dataset:
Animal domestication is really wild.
So we first select for neoteny (playfulness, dependency on caregiver, physical features people like) basically prolonging the juvenile state. Then we put them in controlled environments of abundance, were all their needs are met. Which further diminishes need to reach adult state (with traits like aggressiveness to compete for resources). This abundance causes them to mature/breed earlier and reproduce more than in the wild. Basically a population of children that can produce children. Then we want this population of children to live longer.
> with the birthday paradox formula.

At what probability? Can that probability be configured as a global Git option?
well the article is well reasoned enough. what I gave up on was finding actual pricing information for this engine. all it say is free if you earn less than 80k... so what's the price please?
I was being a bit sarcastic when I asked "which winlator?" because there are sooo many variations of it. At this point none is more official than the other. Maybe people picked up on that and didn't value the url as much.
Impressive to think about how DeepSeek achieved: ~ Parity with o1 and Claude with > 10x less resources.
Better algorithms and approaches are what's needed for the next step of ML.
> Or did they learn how to make them themselves?

I love the low-key racism on these comments. "How would those stupid peoples learn to make nice things?"

It's not much of a surprise. China could offer cheap unskilled labor initially, basic factories are set up there. They could use this to grow their skilled, educated workforce, and gradually increase the complexity and capabilities of their industries.

I know that people like you would love if poor countries were kept as just manual labor resource extraction, but turns out economies don't really work like that. There are incentives and competition all aroud, among companies, among countries, etc and so forth.

Manufacturing, especially for complex products, can be a supply chain nightmare. Any edge your competitors have against you may spell your doom. You cut costs where you can. You get suppliers where they are cheaper, you move factories to where they are cheaper, all this while trying to satisfy your customers.

I find it particularly funny nowadays that a lot of people from the US have a hard on for tariffs, as if this is going to save them from anything. Tariffs are interesting that they are typically reciprocal. You apply tarrifs on some of my important industries, I do the same against you, and then I go do business with your competitors.
What biological changes have happened has made it so a human can jump 7.5 meters forward (or 2 meters upwards) decked out in full plate mail?
A passkey is a resident webauthn credential.
>Unit tests tend to have a lot of boilerplate sometimes, often not copy-pastable

When people use LLMs to write code and they find if helpful, invariably it is because they are spewing boilerplate.

If you dont systematically eliminate boilerplate the codebase eventually turns into an unmaintainable mess.

>Sometimes you do actually want to add a ton of unit tests even if they’re a little too implementation-focused.

Really? Id consider this an antipattern.

>I find it better to treat writing tests with LLMs tactically

I find the prospect of using them to write production code / tests pretty depressing.

The best thing that can be said is that they will create lots of jobs with the mess they make.
'Crypto Miner-Hunting' Siberian Power Provider Finds Illegal 'Farm'
I think the petrodollar has been given more weight than it deserves. The dollar's utility enabling international trade has more to do with the stability, freedom and general availability, than with the US enforcing it in any way.
Somewhat. Lots of sites log you in via a different domain.
I know. I don’t understand why the Linux Kernel uses a hard-coded abbreviation instead of just letting Git figure out how long it should be (edited my comment now).
> upgrading Python from build-in ancient version ... usually 3.8

Now you're making me feel old.
Show HN: Decentralized Email and Storage
Arca is a tool for sending encrypted emails and storing files securely using decentralized architecture.

It’s simple to use, free to get started, and keeps your data private.

Please, if you can, review and tell us what we can do to improve; it would be really helpful.
FYI limited to to US only - they refer you to their sister project: https://darwinsark.org/ if you'd still like to contribute in a similar fashion but reside outside of USA.
Additional comments here,

https://news.ycombinator.com/item?id=42251799 ("Hacker in Snowflake extortions may be a U.S. soldier (krebsonsecurity.com)"; 34 days ago, 195 comments)
Theamk, besides what you mentioned there others points:
1) You keep the target process with the same name. Execve change the process name, but this one do not so help you being stealth.
2) You can load the next stage in a noexec (RW-only) partition and use this to load in memory.
3) Since a lot embedded devices contains selinux this is also good to bypass the execmem verification.

bediger4000, I believe they are similar techniques. The difference is the ways to achieve
Such a weird domain name, why not orbit.mozilla.com? This looks like a phishing attempt
BitLocker may also be configured for a password. This attack is very narrow.
Even then you are depending on the integrity of your development environment (see: Ken Thompson's compiler hack).
Telegram users spinning up their own honeypots and blindly trusting a client/server message encryption system is never not a great idea for new grass root criminal enterprises.
You can't change something on an encrypted volume without knowing the encryption key
Mobox is actually probably still more performant than winlator but it's a pain to set it up. Winlator did make a huge jump in performance lately as well. Maybe the difference is not that much anymore.

https://github.com/olegos2/mobox
Yep, and also with much more data for example "toilets:wheelchair=yes/no/limited":

https://wiki.openstreetmap.org/wiki/Tag:amenity=toilets
> This already happens even with regulations.

Agreed, that was sadly part of my point. They never end but not having them also doesn’t solve the problem for everyone. Some folks will want more, some won’t, at any balancing point.
It is not about tooling, but distribution.
> for building a proof of concept, nothing beats Google Sheets

Supabase is free and checks all the boxes in addition to having auth, vector search, logs, security, and not being ... Google
Why is the website so difficult to scroll through on Firefox on Android?
The glue makes the device stiffer. If you want drop resistance you need rigidity or softness. A phone with glass won't be soft, so it has to be stiff.

There are ways to make a phone stiff, such as a rigid metal shell around the battery. Or glue.
So when i join the project, my dog becomes a guinea pig for testing Rapamycin?
You are missing the point entirely,
Gwendoline Christie almost certainly can't bench that person (i'll humour the absurd "who can bench more" frat bro thing for the discussion). If Gwendoline Christie was male, she would be 3 standard deviations larger than the average. Her testosterone levels are "nerfed" due to being female.

Gina, and any female bodybuilder for that matter, are of course stronger than your average man, but they are again, "nerfed" by biology, if they had the testosterone production of a man due to being male, they would be considerably stronger, maintain better muscle mass relative to the hours they have put in bodybuilding.

In the in game implementation, a high strength female charcter would be an impressive rarity, demonstrating great strength, despite biological hinderances. This correctly acknowledges their uniqueness, and brings their other traits to the table (considerably higher in int or "smarter" than other strong characters)
Numerous polls indicate younger generations strongly favor the Palestinian side of the conflict in direct opposition to older generations. That being said I would say PR is not working out for Israel.

I suspect that is because older generations remember the PLO as a major terrorist organization supported by numerous other terrorist organizations. Although most of the world still sees Hamas as a terrorist organization younger generations haven’t witnessed any notable Palestinian sponsored terrorist act until the Oct 7 attack. Even then as horrible as that attack was Israel still found a way to completely over shadow it with something much worse.

At the same time the world is also watching wholesale increases of violence against Palestinians in the West Bank will reading about illegal settlements.

That is astoundingly bad PR. It’s so bad now that any action Israel takes against Iran is seen as unilateral, excessively aggressive, and unprovoked which was absolutely not the case just 20 years ago.

Then to somehow still make that much worse the typical response to disagreements from political hardliners is to call people antisemetic. Older generations used to cautiously appreciate the sensitivity of such and tread carefully. Younger generations seem tired of hearing it from Israeli politicians.
While the GBA does have decompression routines in its BIOS, APLIB does a far better job with compression. I made a fast APLIB depacker for GBA.
Mulberry: Empowering MLLM with o1-like Reasoning
New AMD/Intel CPUs support transparent full memory encryption, your interposer will just see encrypted RAM data.
While impressive, the deepseek models aren't really "on par" with either oAI or Anthropic offerings, right now. The models seem to be a bit overfitted in the post-training step. They are very "stubborn" models, and usually handle tasks well if they can handle them, but steering them is quite difficult. As a result, they score very well on various benchmarks, but often times perform slightly worse in real-life scenarios.
I find these projects so strange always. Who is the target? Professionals, making a living of this somehow? They won't touch this thing without a license with a ten feet pole. Companies ditto.

As a private person, for my own hobby projects I admit I will just take the picture I need from wherever I find it, without looking at the license. But again, these are not even uploaded anywhere.

"Free for commercial and personal use." - That's a big (unsupported) statement, especially when it comes to a collection of only copyrighted/trademarked images. This is usually decided by the owner of the logo, how it can be used. IANAL, but imagine what would Chupa Chups say if I would use their logo for my own product, because this website "allowed" me.
It's hard to say as it depends a lot on the particular attack, who discovers it, who it is used against etc.

A broad attack on EC DLOG or on the secpk curve would hopefully be preceded by academic community incrementally making it weaker with easier attacks which would give time to fork to something with better margin of safety in advance.

If it was truly a full on zero day and someone disclosed it to core devs or miners it would probably be bumpy getting the network aligned to fork but people would do it. But idk the details of how bitcoin developers and miners coordinate.

In more likely event nation state is the zero day holder I have little idea how they'd use it. Network could always be forked after enough people believed an attack was going on but it would be a confidence shaking disaster. Forking back in time before most people believe the attack started is always possible but has its own serious downsides.
That's pretty cool, but balancers are cope for anything other than loading trains from ore patches.
I feel the GPU restrictions created an environment for Chinese Devs to be more innovative and do more with less.

Kudos to the deepseek team!
I once wrote an open source factory design optimizer with Timefold (previously OptaPlanner).
It figured out the best layout to produce a particular item, for example green vials.

We ended up removing it from the default quickstarts [1], but maybe we should reinstate it in timefold-sandbox?

[1] https://github.com/TimefoldAI/timefold-quickstarts/commit/d9...
Few know this, but Intel/AMD CPUs released in the last few years support transparent full memory encryption, where the RAM content is encrypted with a random key kept in the CPU memory controller and generated at reset.

It's typically disabled in BIOS, since it has a small memory performance penalty (0.1%->1%)

But it would completely prevent this attack.
Yup. Though also, the time of maximum leverage probably?
> neoteny

What domesticated animals were bread for "cuteness"? Cats are mice hunters. Most popular dog breeds were selected for killing and dog fight! That "big smile" is not for laughter, but to crush bones!

And many domesticated animals can not even reproduce without human assistance. How they would survive in wild?
From the article: "[…] web apps have caught up. They’re faster […]"
Especially how can this be true?

Maybe this doesn't matter because it's already fast enough but the difference in look and feel will be noticeable.
Tariffs are a 2-way street. It is very naive to presume the countries you raise tarrifs against will not enact similar tarriffs against you. And then they will do business with your competitors.

Except now you are limited to your local market, while the much larger and more dynamic global market will grow and evolve without you.
The article establishing his identity was only published a month ago[1] and the security expert seems to be impressed with how fast it took to bring him in.

”Between when we, and an anonymous colleague, found his opsec mistake on November 10th to his last Telegram activity on December 6, law enforcement set the speed record for the fastest turnaround time for an American federal cyber case that I have witnessed in my career,” she said.

[1] https://krebsonsecurity.com/2024/11/hacker-in-snowflake-exto...
Autossh: Run, monitor and restart SSH connections
You're assuming there is a single HN hivemind. In reality different companies cater to different audiences with different values, and you'll hear from a different subset of HN users on each topic.

Mozilla users care more about privacy than e.g. Microsoft or Google users do, so when Mozilla adds tracking to one of their products, they get more criticism from their users than their competitors would. This isn't unexpected or hypocritical of those users.
I'm really just advocating for a drop in replacement. You wouldn't redeploy the addressing architecture you have, instead disrupt the surface the salt gets into. If you did a drop in why not go the whole hog and make it a 6 fabric?
I think requiring human assistance and inability to survive in the wild are an effect of neoteny.
Indeed. We can't even do this for md5, let alone sha1.

Preimage attacks are very different from collision attacks.
Something you can do for free is block all outbound traffic and configure Firefox to use an outbound HTTPS proxy where you can dynamically enforce a blocklist or default deny and an allowlist.

Isolate Firefox traffic and observe it some time.
Never call a PWA an app, people will get confused.
Why does China government prop housing bubble instead of letting it deflate?
This sounds like something you think should be true because it’s “just so”, but I don’t see any evidence that it actually is. NCAP seems quite strict, perhaps more than NHTSA
> On the other hand it can be more fun to be the Half-Ork Wizard with 7 INT trying to role play a big dumb guy who's only love is setting things on fire with his mind and getting paid for it.

At 7 int are you smart enough to even have learnt to cast cantrips?

I do think that there is a difference between playing a suboptimal combination and dumping your classes primary stats such that you're largely incapable of doing things...

There's a line between suboptimal and non-viable.

For example, a fighter which maxed charisma with appropriate feats for being admired/respected etc. Just a super stand up lovely guy. Super personable, gorgeous smile, good form, rarely seen him fight I admit - but he looks the part! But I do put some points in Str (Dex if finesse) and Con. Otherwise you probably can't actually be a fighter, you won't match the class descriptor (imo)
Does that guy seriously maintain bugzilla for the Linux kernel and yet cannot decide whether Linux is an operating system or not:

> Linux is not an operating system

> While Linux is unrivaled on servers and has been the world's most popular operating system for over two decades, the situation on the desktop is quite bleak.

It either is or is not. It is illogical to claim both true and false to be true at the same time, yet that is what he did.
Smart to have two sets to avoid complete lock in.
Would this work well? I mean there are many implications in devaluing USD. Would this potentially lower USD demand as a reserve currency in other countries?
Ah yeah that's true, the difficulty curve is not very linear.
> with the S and Q in Portuguese

Guilty as charged. Pronouncing letters and numbers in English requires an active mental effort for me, so that happens if I'm not paying attention. I guess it's because they don't really register as another language, even with context. My inner monologue also does letters and numbers in Portuguese, which doesn't help either.
> specific mitigations or policies

- How much impact will moving sharedlibs (mediaserver, for example) / runtime / libcore to Rust will bring? And if all libs will need to be moved? Or, are the likes of memory tagging, sanitizers, hardened allocators (Scudo in bionic / Arena/dl/Ros in ART) enough of a defense?

- Now that Android devices have as much compute/RAM as servers do (and fast battery charging is almost ubiquitous), do you see VM sandboxing apps (like in ChromeOS does with crostini) become a thing?

- Believe the drivers (Binder at one stage, GPUs, of late) remain a source of exploits; do you see a microkernel like Zircon being folded into the Android Kernel? Longer-term, will moving away from Linux (but maintaining compat via emulation, say) become a necessity to combat CSVs?

- I see a bunch of eBPF use since Android 12+. Do you foresee Google providing more APIs to aid forensics / monitoring (like Knox/EMM) without needing root (or abusing Accessibility/VPN/DeviceAdmin/ADB Shell/etc).

Thanks.
My solution was to use OsmAnd with a custom list of POIs that includes toilets.

This way I got a map that shows at a glance where the closest toilets are, as well as playgrounds, picnic tables, castles, ruins, water mills and lavoir/wash-houses (these are the areas that I've found to always be nice places when you have to stop on the way to rest and eat).
I have a law background, put am in the startup scene since 7 years as a founder.

Yes it is unnecessarily complex, but as I said: there is so much BS floating around. In reality if you have goodwill and yes invest a little time it is not that hard to be compliant and in praxis if you are not: usually there is the concept of warning before fining, so you do get a second chance.
> If you have to put a password in before boot that needs to be combined with the TPM key to unlock the drive, it would help in scenarios where a TPM key can be found later.

Bitlocker already does this if you use a PIN/password.
To be fair this is nothing new, look at the Chicken Tax for instance
You're right that it's technically orthogonal to what's in the paper. I was trying to model the "reasoning process", which has general applicability depending on how/where it's implemented.
“Protected America from Chinese EVs” - aka, ensuring the long term irrelevance and stagnation of American car manufacturers. They will keep their sales temporarily while the rest of the world leaves them behind
> A well implemented (native) app is always better than a well implemented web site.

Dunno, native app doesn't have URLs nor deep links. I can't link you to a page in my native app that you can click on.

In my iOS HN app I'd have to click "Copy website link" to share a submission. If there were no website, I couldn't share it at all. Same with Reddit.

For most apps, that's a lot to give up when you app is basically just a website without a url bar.
By grass root you mean not state sponsored? Agreed it’s not a good idea using Telegram as a server, people forget bots have chat history you can replay too
> I'm a tad more humble. Mentioned more than a dozen times in the kernel git log.

Exceptionally humble, indeed.

> You've never said how much time you've wasted fixing Linux or making software work.

This comes up often and I'm always fascinated by the implied assumption that time isn't wasted fixing Windows or MacOS computers and making software work on those systems. The age-old "No, I will not fix your computer!" is not a Linux meme - in 99% of cases it refers to a Windows machine.

We can trade anecdata until the heat death of the universe, and in fact you've nicely listed many of the pro/con points in your articles. However having read both versions (current/technical and final), I must agree with parent. This is just a rant from someone who likes Windows more.

I also want to call out your "solving linux" section (in the technical article). You've listed basically the entire Ubuntu playbook (which is, btw, a UK company, not an African company). Mark "poached" debian developers (DDs), poured millions of his own money into it, spearheaded many of the desktop-specific innovations (now supplanted by other software, but Ubuntu provided the initial push), created an app store, did an enormous amount of work popularizing Linux specifically for the desktop, was the first to start "officially checked and approved" hardware list, etc.

And the results show even if we don't attribute them to Ubuntu today, and even if we're using alternatives: Linux desktop today is a much smoother experience than 20 years ago.

So, while I can sympathize with many of the points in your technical article (https://itvision.altervista.org/why.linux.is.not.ready.for.t...) even if I do not agree with them, the linked one really seems like distillation to a "I like Windows more" rant.
Well, you triggered my memory. I have in fact seen a huge amount of "read the manual". But that said, the manual is really, really good :)
You mean the early systems like the IRIS 2000?

It arguably fits, because it pairs a 68010 with hardware accelerated 3d graphics. As far as I can tell, it's not quite modern 3d graphics. If you paid for the geometry engine, you did get hardware accelerated transform and clipping. And the framebuffer supported hardware acceleration of 2d polygon. But if you wanted texture mapping, that was all done on the CPU.

I don't think we can consider SGI as having "modern" 3d accelerated graphics until they implemented support for hardware accelerated texturing with the Reality Engine in 1992, long after they switched to MIPS.
Apple is a great name though....
It should be the opposite, I am a bit confused about LineageOS' statement here. The Quarterly releases represent solid milestones towards the final Android number milestone.

GrapheneOS claims that this made their rebasing much more efficient: instead of receiving a massive dump of all Android 15 at the end, developers receive incremental changes (the QPRs) to help them anticipate major changes in the code.
I’m currently reading through Martin to teach myself Calculus - can really recommend it!
> Platforms like Poki and CrazyGames, with a combined 95 million players a month, are leading the charge in, what I like to call, the Browser Games Renaissance.

I'm probably not the target market, but my first impression of Poki is that it's absolute trash; it looks like a shopfront for the lowest quality mobile games I can imagine. The first thing I tried was a block-puzzler that involved drag-and-drop to move pieces, but the drag didn't track the mouse cursor properly.

If someone asked me "which site is leading the charge in the Browser Games Renaissance?", I would say itch.io, hands down.