skysight-inc/HackerNews huggingface dataset:
Awesome!
From what I see, the clock synchronization can be implemented with our SDKs (mainly pub-sub).

I think the size estimation could also be implemented within the provided abstractions (mainly request-response) but might require you to keep track of neighbors. I think you could implement both algorithms by using our SDKs (none for Go yet).

If you need more control or performance, beyond what we expose through our SDKs, you might need to write a custom libp2p behavior and add it to our daemon. The libp2p part is fairly involved, but I would love to help you with that.
Either way I would love to help you out :)

I'm so disappointed that I've never seen your blog before. The stuff you write about is so interesting and actually addresses some issues we are facing. I just sent you an email :)
The exploit would be more effective if it obfuscated the UI on the authorization (victim) page. Right now, even if you double click a convincing button, it’s extremely obvious that you just got duped (no pun intended).

Sure, maybe the attacker can abuse the access privileges before you have a chance to revoke them. But it’s not exactly a smooth clickjacking.

I’d start by changing the dimensions of the parent window (prior to redirecting to victim) to the size of the button on the target page - no need to show everything around it (assuming you can make it scroll to the right place). And if the OAuth redirects to the attacker page, it can restore the size to the original.

Back in the day, this trick was used for clickjacking Digg upvotes.
As someone from the UK, which is where this article is on about, it is not illegal in this country for minors to see pornography in and of itself.

Selling it to, etc. obviously are.
A History of Nvidia Stream Multiprocessor (2020)
Consumers always have the choice to buy a different phone. And in the case of buying an iPhone, they have the choice to buy a much cheaper phone. That so many of us continue to buy iPhones is proof that Apple is doing something very right. And that shows, and this is my main point, that they have impressively avoided being bogged down by megacorp bureaucracy.
Not to wave anybody off an interesting rabbit hole, but is that the germane difference here? My understanding: common law features a relatively smaller "source of truth" of written law, and relatively more expansive and variably-binding jurisprudence, where judge decisions set precedent and shape the law. Civil law writes almost everything down ahead of time.

I guess civil law gives you less room to explore ideas like "living" statutes and laws that gain and change meaning over time; if there was such a change, you'd write it down?

Regardless: whether you're a textualist or realist, in the US you're still operating in a common law system.
Given the Cambridge Analytica scandal, why wouldn't it be achievable at Facebook, let alone TikTok.

The CCP could mandate that the TikTok algorithm display certain types of political content, then further mandate that any criticism of the CCP be limited, especially discussion of the said censorship. Most users wouldn't know about it and leakers at ByteDance wouldn't be able to change that. It's not the US - they are punished in China in a way that doesn't happen in the US.
"If you want to try it, be aware that it requires Intel Pentium 166MHz or above."

Made me laugh. Fun article, also really love the genre of "bored smart person goes too deep on something that the end result is obvious by common sense but proving it requires surprising amount of ingenuity and scrappiness"
This is essentially how DOM manipulation works, which is JS' main use case.
For me, this would finally be a good use case for bitcoin or similar digital transactions. Let the client provide either proof-of-work or proof-of-payment. If we can make the proof of work match the browsing speed of an average human, anything accessing more pages than that will need to provide payment instead.
Google is allowing advertisers to fingerprint you
The problem with slippery slope fallacies is, well, they are a fallacy.

I also see you coupled it with the strawman fallacy, since I didn't claim anything as wide ranging as "people should aim lower."

Pretty impressive to pack so much poor reasoning into one sentence.

Spending within what one can afford is a long running method of resource allocation which has served mankind for millennia, and mankind is now living at a higher standard of living than any point in history.
> go directly to mmap system call

TFA said that, too... IIRC (and based on a quick googling), mmap is for memory-mapping files into the virtual address space. I thought sbrk() was used for low-level adjustment of available memory and malloc was responsible for managing an allocation handed to it by the sbrk() call. Or has that fallen out of fashion since I last did low-level C programming?
Will banks give out loans for houses without insurance?
Everything is insurable - for the right price. But if you aren't allowed to pay that price then I guess that's a problem.
The only reason anyone uses mermaid is because it's low friction and most editors support it out of the box or through plugins.

But its layouting engine sucks and everything requires hacks and workarounds and configuration tweaks to display properly. Only the most trivial graphs render nicely on the first try.

All I really want to do is define how to actually lay out the blocks using a DSL so that they don't look like absolute shit. I hate drag and drop UIs and I hate mermaid. There's no decent code-first diagram building tool out there, let alone one that I can embed into my notes as easily as mermaid.
Does Tom Cotton know that if we treated our own citizens better, they might be quite resistant to "communist propaganda"?
It's not liquid at the point of ignition, that's the thing: if you mixed liquid oxygen and fuel nothing would happen expect the fuel would freeze. For a fire to take place the temperature must reach the fire point temperature, and if you manage to get your fire below this temperature then the fire stops. I don't know how low this temperature can be when the oxidizer is pure oxygen and maybe it's so low water wouldn't be enough, but then you can imagine using other fluids. The problem being the mass burden it adds to a spacecraft, I'm not it'd make any sense given that such q leak should happen in the first place.
It doesn’t need to be a literal double click. It could be something like a CAPTCHA “confirm you’re human,” where you click once, it appears to load, and then you click a confirm button. Do it fast enough and it might appear like a double click.

Not sure this would work with the exploit though.
While we're on the subject of ancient bread, ACOUP had a nice and extensive series of posts detailing how it was made and distributed, with a lot of info on Romans specifically:

https://acoup.blog/2020/07/24/collections-bread-how-did-they...
This is a really good writeup. Thanks for posting it.
It proves it might be possible to backdoor it. Maybe.

I don't know of any modern systems that will execute anything on a newly inserted drive, nor boot from an external drive in the default configuration.

So we are missing a couple of things. First, a vulnerability in the OS/system. Second, an implementation of that vulnerability in a device like this.

Should this design be phased out? Perhaps. There is relatively little difference between not populating the flash memory part of the board and a proper network-only implementation.
Had the same question, lmk if you find the magical "off" switch

edit: apparently it's turning into a bit of a disaster for Google, cos everyone wants it off:

https://bsky.app/profile/litbowl.bsky.social/post/3lfvlw656x...
Show HN: Find your "holy grail piece", as a service
I am a collector by nature, and hunting down obscure items is a slow process that is only sometimes rewarding. I've often checked eBay at the end of a day to find exactly what I was looking for, long sold. Even the best sites tend to only offer once-a-day "new listing" summaries with noisy results.

So as a programmer at heart, I created a solution I would have liked: Antiquebot. Antiquebot is a service focused on connecting you with your "holy grail piece".

Antiquebot offers the ability to constantly and repeatedly search a number of auction sites. Custom filters can be used to create a funnel that turns lots of new, generic results into to a handful of specific results without relying on questionable per-site boolean search support. New results end up right in your inbox as fast and often as you like.

Antiquebot's goal is to automate as much of the search process as possible, so you can set it and forget it until one morning, fingers crossed, you succeed in your hunt.

- No need to be constantly checking several sites

- Get results as frequently as you like

- Custom filters to fine-tune your results across all sites at once

- Deduplicated results to avoid noise

- Results arrive in your inbox, or using the search result page on the site

A demo account is available using the email address "demo@antiquebot.net" and password "helloworld". A free plan is also available, and you can delete your account with a few clicks if you don't find a use.

This is my first "soft-launch" of the site to get feedback and refine the idea. Your thoughts and experience are appreciated!

The backend is Go services using Asynq[0] for task queueing among the worker nodes. oapi-codegen[1] + an OpenAPI schema manages the HTTP API implementation, interfacing with via a Vue3 frontend using the (venerable) Bootstrap framework.

[0] https://github.com/hibiken/asynq
[1] https://github.com/oapi-codegen/oapi-codegen
'Peace was born': How the 2004 tsunami changed Indonesia's Aceh
That's doesn't make sense either - not an android iser or dev but shouldn't there be a system level backup interface. Even if its storing the app-local storage as an opaque blob with a label?
I don't blame anyone, I'm Italian and I'm fluent in French, English and Polish besides Italian.

I'm just saying that in the French part of Switzerland English wasn't a given among any generation and it neither was common in the German/Italian parts too if you exclude the expats.

And yes, francophone tend to be very elitist about consuming exclusively french content, regardless of them being from France, Switzerland or Belgium.
They were right to be alarmed, weren't they? (As an analytical statement, not a prescriptive one.)
How I Unfucked My Brainrot: 5 Lessons That Work (Books Included)
There are such products. Outside of America whatsapp is a dominant social app but its use internally is almost mute despite being an american social app.

Tiktok america is over 50% of tiktok revenue I think that more than anything else would choke out growth world wide.
You'd think the library would first check for macOS/iOS which already has far superior smooth scrolling.
Yes as zerg the lost supply is counted, so you can either go 12 hatch 11 pool 10 gas or 12-12-12 if you want to be a little bit more economically greedy at the expense of making it much harder to hold 8rax in ZvT as an example.

As you get later into the game people who play more seriously also use the in-game clock, or timing a building placement relative to how complete a different building is to determine building timing. This helps with subtleties like whether you lost your scouting worker or not (-1 supply), if the early game got really weird because you had to build more units to hold some aggression, etc.
I feel like they were really headed the product promo / integrated shopping route.
So, I am probably the sort of person the author is talking about when they talk about "the AI dunker". I mean, I worked on neural networks in the mid-90's, and looked in on them every 2-3 years since then, and the current wave of hype looks very similar to the hype cycle I went through in my own mind in the late 90's. I think neural networks, including LLM's, are useful algorithms for certain specific tasks, but I think that's a lot less common than AI enthusiasts imagine.

I don't think there's anything wrong with programmers using AI to help code, but I think that it's not usually going to help with the actual rate-limiting step to creating good software. Getting the syntax right, or getting the general shape of a method right, is not what's usually the rate-limiting step, just like a programmer's typing speed is not usually the rate-limiting step.

Figuring out what actually needs doing is the rate-limiting step.

Now, occasionally typing faster or using some other speed-up-the-coding tool can help with that, because it allows you to get through a bunch of wrong approaches faster, so you can get to the right one. But, typically not. In fact, more and more tools to help you quickly Do The Wrong Thing, is most often going to make it take longer to realize what actually needs to be done. To make a contrived example, if you have made a field a string, and then you are able to quickly generate code to make sure it converts smoothly to a numeric value, and then also to generate code to make sure that the number it converts to is within a certain minimum and maximum value, and also that it is either a whole number or a whole number plus one half, this is actually just distracting you from realizing that the field should be an int, where the int is the number of half-values (i.e. 5 -> 2.5).

Now this may seem too stupid for a human to actually miss, and perhaps it is, but only slightly more complicated problems of this type happen all the time. The more tools you have to help you quickly and efficiently generate masses of code, the more of an obstacle you have in the way of writing code which is easy to read (and thus debug or otherwise modify later). That usually requires that you figure out the thing you really need to be coding for, which is not exactly the same thing as you were set to do, and AI is not going to help you with that, and that is the rate-limiting step.

Now none of this is necessarily a reason to never use AI tools, but it is reason to be skeptical that it will actually improve the velocity of your software development, if you measure that in working systems rather than lines of code.

I mean, Microsoft has had early and extensive access to ChatGPT-related tools more than any other software company. Do they seem, to you, to be producing higher quality software lately?
How did climate change cause vast neighborhoods of single-family wooden mcmansions to be constructed with ~3 meters of separation?
Didi/Uber was more complicated than just data stuff.

At a high level, chinese tech culture is an insane no holds barred cage match with very little legal structure to protect IP or employees or anything and most companies who enter fail at participating in this.

Didi did a lot of corporate espionage and sabotage at uber china. They'd have "double agents" working for uber they'd pay to f stuff up. This type of thing is not practices in america because it is extremely illegal, but it was fine in China at not something that uber could do "back" to didi. There were people on the uber china fraud team paid by didi to tip off fraud networks on how to fraud. In the last year in china, they moved a ton of important work back to US offices because the china office was "compromised".
"The goal of encryption is to ensure that only two parties, the receiver and sender, are aware of the contents of your data.

Thus, AI training on your data breaks this, because it's another party.

You now don't have encryption."

Thanks for coming to my blah blah blah
TIL. After maybe 25 years of using this connector, I've never heard it called 8P8C. I knew Ethernet has used other physical layers including coax, which I used to run between Amigas way back in the day. But, today I finally learned about 8P8C.
Dimensional lumber is often called sticks, in the building industry, probably because it's quicker. For example, if a roof is built from individual pieces of dimensional lumber, instead of pre-built trusses, the building method isn't called dimensional-lumber-built but stick-built.
> false. Hannibal directive has nothing to do with hostages

Weird, The IDF says it's indeed about kidnapped hostages: [1]

> the General Staff Directive for Contending with Kidnapping Attempts (also known as the "Hannibal" Directive) was initiated, meaning a number of actions necessary to locate and rescue kidnapped soldiers were put into effect.

Why would you even try to lie about its purpose when it's well known and documented?

[1] https://www.idf.il/en/mini-sites/military-advocate-general-s...

[2] Origin of Hannibal directive by Haaretz: http://archive.today/romMZ
Impressive project, and I always love reading about the communities that form around competitive games.

It feels kind of sad to admit as a chess player, but "Najdork variation" is one of the funniest typos I've seen.
Ok, thanks for the clarification.

Seems the implicit assumption then is that M(q) -> v 'looks like' or 'is smooth like' the dot product, otherwise 'train on keys, inference on queries' wouldn't work ? (safe assumption imo with that l2 norm & in general; unsafe if q and k are from different distributions).

Correct me if I'm wrong, but typically k and v are generated via affine projections K, V of the tokens; if M is matrix-valued and there are no forget and remember gates (to somehow approx the softmax?), then M = V K^-1
we saw 20-30% drops in page views and conversions

Why do you attribute this to only the "brief interception"? Shouldn't the logical conclusion be that Cloudflare may block 20-30% of regular traffic?
This is completely incorrect. Divestment in this context means the selling of an asset by an organization. You cannot "divest" in this sense from a government. That's nonsensical.

The equivalent in Facebook (Meta) terms would be China requiring Facebook, if it wished to continue operations in China, to sell the Chinese Facebook product to a Chinese or other, as to be defined by China, non-American entity. In some sense this is already the case.
According to this Guardian article, the Apple AI also falsely claimed in two other summaries that Benjamin Netanyahu had been arrested and tennis player Rafael Nadal had come out as gay:

https://www.theguardian.com/technology/2025/jan/17/apple-sus...
Unless I'm misunderstanding you, it's not the same thing at all: in the case you're talking about you're shielding against nominal heat, which is not the same thing as contingency planning to extinguish a fire that shouldn't be there in the first place.
It is happening today. Chambers inside Egypt's great pyramid were detected in 2016 using muon imaging. It was a slow process but radically less damaging than the alternatives such as drilling test holes. More commonly, ground penetrating radar is regularly used to avoid digging test or exploratory trenches across sites. As resolution increases, fewer and fewer trenches need be dug. Scans are often used years prior to digging as a non-invasive way to confirm the existance of structures in aid of grant proposals. At some point, the scans will be the entire dig.
Zig is a joy to write; it feels like a much-improved C. Writing and cross-compiling a custom app for Windows was great. The only thing I'd mention is that there is a lot of outdated information on the net for it. Zig has evolved and changed quite a bit, leaving it quite difficult to search (or chatbot) for up-to-date information on its syntax and idioms. It can be frustrating to get so many incorrect answers.
This sounds somewhat backwards to me but maybe missing something... We got a bunch of Tuya devices and was barely aware they even have an app. They paired out of the box to a zigbee2mqtt gateway on the local airgapped network without fuss. No apps, online servers, api keys, vendor signature checks, or such shenanigans at all. I don't think the motion sensors we have from them have the capability to send dhcp over ip even if they wanted.

The Fingerbot also seems to operate over zigbee? Why would you need a developer account in the first place? And why would anyone but Tuya themselves want to hook into their cloud?
Could you elaborate on why the USB ones are worse?

Per Wikipedia, USB 3.0 (from 2008) can reach 5 Gbit/s, so (naively?) one would expect them to reach 2.5 GbE line rate easily, right?
So, only GM is banned.

Every other car maker can continue to sell collected surveillance data...
1. I have, through the course of my existence, been extremely hungry.

2. This has been true as long as I can remember, since a young child.

3. Ozempic/Wegovy did not help with this.

4. I do not have a thyroid disorder or any other easily detectable medical issue.

5. Phentermine helps, for 1-2 months. Zepbound helps, indefinitely, but it is rather expensive.

6. I do not have diabetes, which makes Mounjaro/Zepbound difficult to afford. My insurance does not cover it.

7. This is not "behavioral". I am actually hungry. It is not purely mental. On Phentermine (for the first two months) or Zepbound I can eat normal amounts and be satisfied.

8. I have no other chronic health issues.

9. I have tried many, many other "diets" and food plans.

10. I have been wrestling with my weight for years and years and you would not notice me as being especially obese but it is because I have made a concerted and deliberate (and difficult) effort.

Something is up. It shouldn't be like this. I'm not a glutton, I don't eat for the sake of eating or some sort of emotional distress. Something is wrong.
Taiwanese shows are better if you want to learn Chinese. They speak clearly and don’t speak fast like China shows.
IME the meritless people are trying very hard to take over society and bend it to their will and they seem to be succeeding.
> The complete lack of Chinese influence on global pop culture

The CCP has tried to get their culture out there, it just has not been successful at the visually obvious scale of Japan or Korea. But their culture is definitely getting out there, and I think we often don't spot the Chinese influence on something unless some journalist finds out and writes an article about it.

Some of their influence is leveraged in business deals, with several movies being altered by the demand of the CCP, and these changes persisting in worldwide releases, not just the Chinese-released version of the movies.

Some of their influence is leveraged in video games- Genshin Impact is a famously successful Chinese game. There are some competitive Chinese teams in various pockets of e-sports too. Tencent also owns several video game developers, and occasionally uses their influence to change parts of a game to please the CCP.

There is a Chinese animation industry (print and video), and occasionally they get a worldwide success. I remember being surprised when I found out that "The Daily Life of the Immortal King" was Chinese- you can tell it isn't Japanese but lots of people guess that it is Korean.
Something good to be maximized within the constraints of the systems they have to work within. But at some point with enough compromises it becomes maximizing the perception of privacy, not the reality. Promoting these academic techniques may just be perception management on the part of Apple, if the keys are not controlled solely by the user.
Media over QUIC and the Future of High-Quality, Low-Latency Streaming