skysight-inc/HackerNews huggingface dataset:
No, only some of the side channel magic doesn't matter if you live in a different virtual memory space. Other past attacks didn't use virtual memory pointers and used physical memory pointers or didn't use any pointers at all - one could read data from another process, the kernel, another VM, the SGX enclaves or even proprietary CPU manufacturer code that runs on the CPU, like the CPU signing keys used for remote attestation.
> noting that pack leadership was usually based upon familial group dynamics, instead of the cliche biggest and strongest that beat down opponents

So, sounds like if the author read the study more closely and continued with his idea of basing human society around dog society we should structure society as a hereditary monarchy rather than rule by warrior kings.
This, 100%. From the SLAP paper linked in the OP https://predictors.fail/files/SLAP.pdf :

> Considerations for Safari. We emphasize the importance of site isolation [55], a mechanism preventing webpages of different domains from sharing rendering processes. Site isolation is already present in Chrome and Firefox [42, 55], preventing sensitive information from other webpages from being allocated in the attacker’s address space. While its implementation is an ongoing effort by Apple [3, 4], site isolation is not currently on production releases of Safari. On the contrary, we also reflect on [Webkit's memory allocator] libpas’s heap layout from Section 6.3, allowing sites to not only share processes, but also heaps. Partitioning JavaScript heaps by at least several memory pages per-webpage would prevent JavaScript strings from the target webpage from being allocated within the 255-byte reach of the LAP.
How do you make this profitable?
The Onion CEO regrets using an AI-generated image as basis for art
Imagine an s-curve relating capital expenditure on compute and "performance" as the y-axis. It's possible that this does not change the upper bound of the s-curve but just shifts the performance gains way to the left. Such a scenario would wipe out a huge amount of the value of Nvidia.
Watched the livestream. Haven’t gotten that excited over a performance test since the early days of SpaceX, before the dark times.

Wishing them all the best! Beautiful aircraft, beautiful demonstration, and hopefully more beautiful datasets that exceed their expectations.

Just don’t Milkshake Duck this.
A Trader Joe's moves in
Thanks for your insights,
they are both penetrating
and diffuse.
No. I’m not affiliated. Maybe you’re on a node that doesn’t have whatever change they might have made.
It's debatable.

The IEA have an estimate of €190 per tonne. Which is €400 per passenger on a return transatlantic flight (assuming no mark-up). But there are already some taxes and surcharges on flights, and some of that is carbon-related, so a "full cost" price wouldn't be €400 more than today's. AIUI they use a "harm" model to try and land on that number, i.e. X gigatons of carbon => Y amount of climate change => Z economic damage.

Another way to look at it is "if each tonne of carbon can be burned only once, and in a scenario where future carbon is committed towards manufacture renewables (or nuclear capacity), how many kWh of renewable/nuclear electricity can be bought with 1t of carbon". That yields a much larger number.

Or you can look at it through a carbon capture and storage lens. Industrial CCS yields a much lower number, but it's talking about capturing from factory boiler exhaust streams, where you can have the plant capture the CO2 at source. Not an option on a jet airliner. Direct air capture (ground-based stations mopping up aircraft exhaust) is an order of magnitude more expensive, currently in the $1000/tonne range, you're trying to vacuum gas out of the air that's at a 400ppm concentration by mass.
aannnd it's gone
Social networks and emotions: fear and anger towards Pedro Sánchez 2019–2021
https://archive.today/3WuLG
How fast could a ship get going with a RTG powered ion engine like AEPS? Rough back of the envelope figures come out to 100 years to cover 1 light year, or a few thousand to reach 20 ly out, which is... nothing like science fiction books but not impossible either.
This thread is a hiring manager's dream; imagine identifying a candidate's emotional intelligence through their HN comments. Woof, indeed.
Yeah, not having the radius/diameter of the planet mentioned really hurts understanding the effect of that mass. However, I doubt it is like Saturn where it could float in water.
Boom also requires afterburners, at least for now.

You can watch them kick in on the telemetry (which goes from "100%" to "A/B" for all three engines) at the bottom of the video around the 58:35 mark. https://www.youtube.com/live/-qisIViAHwI?feature=shared&t=35...
Previous thread in sequence:

Boom Supersonic to break sound barrier during historic test flight today - https://news.ycombinator.com/item?id=42852077 - Jan 2025 (99 comments)
Privacy and DeepSeek Alternatives
I own both the original Insticnt and the Instinct 2. OP is not talking about the Instinct.

The Instinct does not have touchscreen, instead it has a monocolor LCD that's always on. It also has an intuitive UI with just 5 buttons on the side.
That cant be right

Julia Stiles "Nicky Parsons" in the Bourne trilogy removes her battery when being chased by an assassin from the coffee shop, Jason finds it smashed on the pathway and you would think that in a spy film the bad guys would still be able track her.
It doesn't matter how you want to describe it, keeping recovery keys available is an ongoing maintenance burden that most people aren't going to do perfectly. It's not appropriate to blame users for reasonably foreseeable problems with a fragile system and lock them out of their bank passwords.
Next thread in sequence:

Boom XB-1 First Supersonic Flight [video] - https://news.ycombinator.com/item?id=42853633 - Jan 2025 (79 comments)
This is great and despite what the article says, an actually useful technique. The reason this performs well is the .NET runtime does monomorphization when the generic type parameters are value types (primitive types like int or user-defined structs). In modern .NET you would use static abstract methods interface methods to implement this feature. But if you have to run on the old Windows-only .NET Framework, you need to use the approach used in BrainFlood. See this article [1] for more details. An example of an official .NET library that uses this technique on .NET Framework is TensorPrimitives. See this file [2], the structs are defined at the bottom.

[1]: https://blog.stephencleary.com/2022/10/modern-csharp-techniq...

[2]: https://github.com/dotnet/runtime/blob/main/src/libraries/Sy...
> wonder how Wall Street feel about this

Wall Street refers to securities. Investment banks. Robinhood, crypto, et cetera have been pots of profits for Wall Street. X, so far, a bit of a stain, but if it increases demand for crypto and day trading, that’s pure profit for the banks.
There is a way to appeal, but bad actors also try to use it.
I can't understand how you reach your conclusion.

At present, if you have financial capital and need intellectual capital you need to find people willing to work for you and pay them a lot of money. With enough progress in AI you can get the intellectual capital from machines instead, for a lot less. What loses value is human intellectual capital. Financial capital just gained a lot of power, it can now substitute for intellectual capital.

Sure, you could pretend this means you'll be able to launch a startup without any employees, and so will everyone. But why wouldn't Sam Altman or whomever just start AI Ycombinator with hundreds of thousands of AI "founders"? Do you really think it would be more "democratic"?
It's not remote code execution, it's the same flavor of "out of bounds read through speculation" as previous vulnerabilities. It's terrifying because they have a working proof of concept from untrusted JS in Safari, but there have been speculative execution in browser JS engines before now also.
They've also consistently put out some of the best fuzzing research
>IT was not "built by the government" either. [...]both private companies. It was funded by government.

Eh? Apollo was built by private companies too. So were the B-52 or F-35 or SR-71. Using private companies to build and do engineering on government projects that are envisioned/funded/directed by government is the rule not the exception. Most people wouldn't describe the F-35 as a private company project though.
What is different about Deepseek's use of MoE vs all the other MoE models that makes training more efficient?

FP8 training and GRPO make sense to me, but that only gets you a 4x improvement total, right?
Now that's a trick I should remember!

I recently switched over my python aliases to `uv run python` and it's been really quite pleasant, without needing to manage `.venv`s and the rest. No fuss about system installs for python or anything else either, which resolves the old global/user install problem (and is a boon on Debian). Also means you can invoke the REPL within a project/environment without any `activate`, which saves needing to think about it.

Only downside for calling a .py directly with uv is the cwd relative pathing to project/environment files, rather than relative to the .py file itself. There is an explicit switch for it, `--project`, which at least is not much of an ask (`uv run --project <path> <path>/script.py`), though a target relative project switch would be appreciated, to at least avoid the repetition.
Multiplayer Filesystem in Durable Objects
Look up "informative vs uninformative prior".
I hated it so much I migrated to ProtonPass, deleted my data, and set my account to expire.

Then Proton CEO made some statements I found offensive, so I re-activated my Bitwarden account, migrated back, and am now learning to love the changes.

The best I've got for tips are:

1. Settings > Appearance > Quick Copy

2. Settings > Appearance > Compact Mode

3. Settings > Appearance > Extension Width > Wide

I still don't love it, but it remains the best of the bunch.
No you are right, that is pretty much the basis of his platform.
Safe in-process sandboxing is obviously possible and even trivial. It does get harder if you care about performance, though.
This is generally how I use LLMs anyway, as brainstorming tools, rather than writing code.
> Would you have predicted in 2020 that photorealistic text to image generation was within the scope of current theory?

Yes, and I've been working in this area with excitement since about that time.

The physics of optics are well understood. We've been writing ray tracers for forever and coming up with clever hacks like Blinn–Phong, PBR, etc. for ages. SIGGRAPH has always felt like tangible magic. We have had the map in our hands and now we're coming up with new ways to traverse a familiar landscape.

Reasoning is an undiscovered country. There are lots of exciting claims being made, but nothing concrete.

I expect lots of advancements in signal processing, spatial computing, and beyond because those things are obvious and intuitive.
> There will still be a need for skilled software engineers to understand domains, limitations of AI, and how to harness and curate AI to develop custom apps.

But will there be a need for fewer engineers, though? That's the question. And the competition for those who remain employed would be fierce, way worse than today.

Or so I fear. I hope I'm wrong.
The probability in GP's comment assumes that everyone has an equal chance of attaining billionaire status, and that the percentage of billionaires in the world remains constant. Given heritability of wealth and access to better education and healthcare, wealthy children have much lower barriers to success. The second assumption may not hold either, as the current overall economic trends seem to favor increasing concentration of wealth.

It'd be interesting to see just how steeply those advantages decrease the odds for the rest of us. I'd be willing to bet that—even in a comparatively wealthy developed country—the true chances for an average person achieving >$1B are orders of magnitude lower than the figure quoted.
Should I opt-out if my Forester has been bought used and I've never activated Starlink with my own credentials?
Ggml: X2 speed for WASM by optimizing SIMD
It's could be unfixable without a significant performance penalty, but at minimum they could make safari do proper process isolation like every other browser does.
Because the fix will most likely kill performance, like Spectre/Meltdown did, and then their pretty graphs wont look so impressive any more.
It’s back?
I sort-of feel like maybe Pebble isn't for you, it had always been the smartwatch in a world of fitness trackers.

I'm almost the opposite for your, Notifications, then watch functionality, and card payments are primary for me. For me, fitness, and health tracking are barely secondary.

Which, IMO, is what I've always loved about Pebble, it was a smartwatch first.
US Government is holding billions of dollars in seized cryptocurrency assets
You're not getting a boost, you're avoiding a penalty. In some (but not all) cases you can avoid the penalty and the exploits by disabling SMT. Remember, SMT isn't twice as many cores, just twice as many half-cores. You'll be fine.
Alternate reading:
being a billionaire is less impressive than it's hyped to be,
if it's a pure numbers game.
I would love to help with making the robots to test this stuff. I often joke that one would think that testing buttons would be a solved problem by now, but then we keep inventing new buttons. I'm looking forward to seeing all the new buttons the Pebble team are working on!
Jevon's paradox really does work for everything, not just in the current way people have used it this last week in terms of GPU demand. People always demand more, and thus, there is an endless amount of work to be done.
It's such a pity that a really exciting step for this company is bring ruined by such a bad report of it.

Not surprisingly the focus of most of the comments are on the absurd statements of "first civil supersonic flight " or the Concorde was "built by governments".

Which is a pity because the achievement is a milestone on the road to future supersonic commercial flight. How much better would the article be if it focused on the genuine step made rather than polluting it with easily dismissable nonsense.
> On the other hand, although Chrome is equipped with Site Isolation, we demonstrate that it is not a perfect mitigation. We show the real-world existence of corner cases, where two subdomains of the same site can be merged into one process, again leading to LAP- and LVP-based attacks.

Did anyone spot where this is mentioned?

Edit: it doesn’t seem like they have a general attack. Rather, it’s that some sites are not in the public suffix list.

Edit 2: It’s also interesting that they found that iPhone 13 and iPhone 13 mini (which have the same processor and came out at the same time) differ in LAP in that they observed only the latter as having it. Very curious…
> in enough numbers that there isn't a functioning government if he fires them all.

Sounds like it would be small enough to drown in the bathtub at that point. Mission accomplished.

> Congress could impeach for ignoring the court ruling.

Only if Democrats have a 60 vote majority in the Senate. Not happening. In the last impeachment, Trump argued he was allowed to extort a bribe from a foreign ally by holding up congressionally appropriated funds to benefit his reelection campaign, and as long as he did so with the benefit of the USA in mind, it cannot be grounds for removal via impeachment. The Senate agreed with him and acquitted him of all charges. Why in the world do you think that would go any differently a second time? And who is going to bring those articles? Republicans?

> The people could decide that, if he is going to ignore the constitution, then they're going to ignore him (and the whole federal government), since it's only the constitution that says that they need to listen to the president. If the president tries to enforce it by force, then it becomes a civil war

And herein lies the problem. This appears to be the only path forward if Trump keeps going in this direction and Republicans don't relent. Note he has already argued he has the right to use the military against US citizens.
Thanks, does that mean early FreeRTOS is a good beginner project for OS study?
I pity the fool trying to escape from a burning Tesla without a nickel!
>They care about having the right dependencies available to the script.

Right; my point is that I'd expect one-off scripts like this to keep relying on the same few standard dependencies which would already have been set up in an environment somewhere.

>You have a class path and that is about it.

A Python venv pretty much is just a layer on top of the existing "class path" mechanism (sys.path) to point it at the right place automatically (reproducing the basic folder layout relative to a symlinked executable, so that sys.path ends up with the right paths and so that there's a dedicated folder for installing the dependencies). While it's ugly and not recommended, you can work with the PYTHONPATH environment variable, or even modify sys.path at runtime.
I don't know what model you have, but this isn't my experience at all.

I own both the Instinct and Instinct 2, which have no touchscreen but an always-on monocolor LCD. I also have absolutely none of your GPS issues.

My dad was so impressed with my Instinct he bought a second-hand Fenix which also has none of your issues.

And all the Garmins I know have a charging port which is flush with the back of the watch.
He walks through a crime scene and exultantly visualizes the events that were happening in that exact spot during the crime. Its a memorable sequence.
What is your definition of a “good job”? Every single non solicited outreach I’ve gotten from the top paying companies in the industry came from LinkedIn.
https://archive.ph/pKovf
Apple released minor-version updates to both macOS and iOS the past few days, both containing several security fixes. Has anyone been able to confirm if they address these exploits?
Would depend what else you did, I presume? I also just meant this as an "in addition" to the idea that it isn't aiming for fool proof protection.
From τὰ φυσικά (ta physika) to physics – XXXVII: Galileo
no interest whatsoever...their shit worried about his policies
> How do you make this profitable?

Selling it for more than it costs to build.

Computer-based modelling, advances in our understanding of supersonic flight and sonic booms and a mature civil (and private) aviation industry make the profit case much more compelling than it was for the Concorde. (The real test will be in their engine.)
A new "AI challenge" -- can an AI make a hit movie (even if just for Netflix) in each of Documentary, Action, Thriller, Comedy, and Drama genres. This isn't art like the "Mona Lisa", but more like the ability to make "art" that has appeal to some level of the public. I think if an AI can do that, I'll be pretty impressed.

The prompt:
"Create a feature length [Action/Comedy/etc...] film that can borrow elements from existing films, but would generally not be considered a copy of any given film."
It's the first supersonic plane from a YC startup or any startup for that matter. Also they are hoping to do profitable passenger travel which hasn't really been done - concorde had ups and downs but mostly lost money.
Your links are all from 2021. I remember there was a lot of criticism at the time and so they updated their bug bounty program which quite a number of changes:

https://security.apple.com/blog/apple-security-bounty-upgrad...

Would be interesting to see if it made a difference.
Related:

China claims major fusion advance and record after 17-minute Tokamak run

https://news.ycombinator.com/item?id=42793654
Discussed way back when (thank you!):

Epic Forum Thread on Concorde (2010) - https://news.ycombinator.com/item?id=8277343 - Sept 2014 (49 comments)

We should have another HN thead about this once the Boom boom settles down.
So they still aren't lamp geniuses that you can rub and ask for 3 wishes??
The engine in XB-1 test plane is not the same that’s going in the production plane.
If the costs are high enough you’re basically reimplementing multi-process isolation from first principles.
There has not been supersonic civil aviation but "supersonic" is not the interesting point here. "Supersonic" is easy and solved often in aviation. The question is what else can they do to make it work. And there is no aircraft yet, just a scale model. Progress sure but not because "supersonic". The new engine would be more interesting.

And how is this a civilian aircraft? It is a cool one-off single seater with three military engines (oops, civilian engines derived from military and used in business jets - still not cheap for a one-seater). Two-seater for some definition of "technically". But perhaps they can sell a few of these to private pilots and then it would be a supersonic civilian aircraft. One pilot and one passenger if we insist on making it a business jet.
My guess is that they used bluetooth beacons.

Google decided to get into the action themselves with Android 15, but that's just counting what's built into the OS, not the chipsets themselves.

https://techbriefly.com/2024/03/15/android-15-powered-off-fi...
The original comment was comparing this service to current first-class airline service.
In practice probably not, as long as general population keeps it enabled. I mean, looking at effort required, it's not worth spending time exploiting spectre these days, because virtually everyone is protected. If you're not likely to be directly targeted, "herd immunity" will work.
If I had to guess, it's both the title ggml : x2 speed for WASM by optimizing SIMD and the pr being written by ai
> The app has dark patterns like: you need to put a weight and height before you proceed with the setup, even though you can remove those later.

That's not a dark pattern. A fitness watch has to know your weight and height for basically all of its fitness related functions...
Show HN: I made a currency convertor I always wanted
I built this currency converter because most others make it cumbersome to switch currencies or only support one-to-one conversions. It’s built with Next.js, OriginUI, and TailwindCSS for a fast, minimalist experience. Any feedback on performance, design, or new features is welcome—thanks for checking it out!
He wouldn't be refusing to execute laws passed by Congress, he would argue he is exercising his own power that Congress is trying to restrict unconstitutionally. Incidentally he believes his own power is limitless, and it appears SCOTUS does as well.
We can jump into whatever equivalent of Zenos' paradox this is.

Not only has their house been burned to the ground, insurance has refused to cover the cost, and they have no idea where their pets are; but they're hungry because they haven't eaten in hours.

Do they care more about being displaced by the disaster or eating?

I think it can be said they care about both.

Research shows that 3.6 billion people live in areas threatened by climate disaster-induced change.

Just because some of them are hungry at any given moment doesn't remove the fact that they can also be concerned that the land where they grew up might be uninhabitable before they retire.
By understanding that it'll take over a decade, maybe multiple decades, to break even (because it's not a tech company) and planning accordingly.
Not really; it can just symlink the base executable and make a few folders and scripts.

$ python -m venv --without-pip test-venv && du -sh test-venv
56K test-venv
It is time to ban email
At the moment the space is moving so fast that anyone who tries to write a book will be outdated by the time it's published. The only option is to dive in yourself or give up and wait for things to settle down and plateau.
Computational Semantics Information (2003)