skysight-inc/HackerNews huggingface dataset:
From the article...

15/09/24 - Report sent to vendor
...
29/01/25 - Vendor requests extension for disclosure to 12/02/2025
09/02/25 - Confirm to vendor that both parts of the exploit have been fixed (T+147 days since disclosure)
12/02/25 - Report disclosed

So that is 136 days not fixed(?) and Google asks for extension.
Then 147 days to fix and 150 days to public disclosure.

Compare this to Google Project Zero which gives other companies the following time to fix before disclosure...

>"This bug is subject to a 90 day disclosure deadline. If a fix for this issue is made available to users before the end of the 90-day deadline, this bug report will become public 30 days after the fix was made available. Otherwise, this bug report will become public at the deadline."

>If the patch is expected to arrive within 14 days of the deadline expiring, then Project Zero may offer an extension...Note however, that the 14-day grace period overlaps with the 30-day patch uptake window, such that any vulnerability fixed within the grace period will still be publicly disclosed on day 120 at the latest (30 days after the original 90-day deadline).

>If we don't think a fix will be ready within 14 days, then we will use the original 90-day deadline as the time of disclosure. That means we grant a 14-day grace extension only when there's a commitment by the developer to ship a fix within the 14-day grace period.

https://googleprojectzero.blogspot.com/p/vulnerability-discl...
To be honest people that do handy work regularly and value the time savings have two, three and even four drills.

I've got a rural, agricultural, mining and aviation background and since the 1970s we've worked singlely or in pairs with multiple drills, one to drill holes, another to drive screws.

If there's a big cupboard or similar on the bench it's not unknown to have seperate drills for

* thin pilot hole,

* main larger diameter hole,

* larger again counter sink hole for top of shaft to hide screw head,

* driver to put screws in.
How Health Insurers Racked Up Billions in Extra Payments from Medicare Advantage
> is design[ing] better killing tools necessarily evil?

Who could possibly have predicted that the autonomous, invincible doomsday weapon we created for the good of humanity might one day be used against us?
A directory of NASA Armstrong image galleries
Also related: https://www.dfrc.nasa.gov/gallery/index.html (this is the predecessor of the Armstrong image galleries, the NASA Dryden Research Aircraft Photo Collection and it has some other media that I'm not sure was included)
> weaponized dumber smoke and mirrors AI, that could be used as surveillance, a scarecrow (think AI law enforcement, AI run jails) and could be used as a kind of scapegoat when the controlling class temporarily weakens their grip on power.

This dystopia is already here for the most part and any bit that is not yet complete is well past the planning stage.
Oh wow, a coffee-maker/fax-machine. I’ve used, collected, lost, sharpened, broken more drill bits and drivers than I can count. I’ve never wished for a worse drill bit attached to a worse screw driver.

I bet they’ll sell a lot of these to homeowners with deck projects, or small softwood projects, and I bet they’ll work just fine for that.

The use case limits how hard they can make these. Absolutely the philips head will get munged being used as a drill bit, and then it’ll cam out of screws at the wrong time. If your driver bit is much harder than your screws then the screws will get stripped. A stripped screw in something important is worse than a broken driver.
Turn your computer into a heater (Maxes CPU on load ♨)
Cool attack chain.

Regarding the payout-- I'm curious if targeting (in the disclosure video) a CEO/C-Suite exec @ Google would have encouraged a higher amount from the panel.
Let's see the Robertson version.
I’m OOTL with all the Phillips hate in this thread. Is there a good reason to prefer other patterns or is it simply bandwagoning?
If kindness were what people want in their products or a company that builds products then it would be competitive. It's not, which is why it had to be imposed.

In truth though, that was not kindness, it's a set of policies that those who support them call kindness (either as marketing or belief). Most people don't agree, which is why things are changing. Actual kindness still exists and is widespread, and people want more of it.
> I'm told similar economics are why you can't buy laptops with cellular modems in them

I don't know what you mean. My current laptop (Lenovo L13) has a cellular modem that I don't need. And I am certainly a cost conscious buyer. It's also not the first time that this happened as well.
The current state if affairs is that the left want equality without competence.

The EU is even more nuts with their plans that all big companies in the EU should have 50/50 men-women representation in the board of directors.

Believe what you want, but America did not reject Hillary or Kamala because they were women, they rejected them because of their incompetence. And speaking of this, after seeing Kamala talk, it is beyond me how she got to be VP - not one coherent sentence comes out of her mouth.
Which country was that?

ID is not security.
Sid Meier's Alpha Centauri Quotes
New hack uses prompt injection to corrupt Gemini's long-term memory
https://archive.is/qsUrz
Sorry for butting in, but is there a way to flag comments? I'm being called a name in https://news.ycombinator.com/item?id=43029816
Don't control panels and surfaces send MIDI messages that could be processed in a somehow standard way? Or do they (predominantly) run proprietary protocols over raw USB data pipes?
I love it, I got Claude to add a pin to provide very basic encryption

https://claude.site/artifacts/5bfdf131-d847-4735-9242-998f23...
> Yet you keep bringing everything back to you. "It's okay for me because I manage to get a decent salary". Sure, what about those who don't?

You seem to be operating under the assumption I came to these views from an ivory tower.

I have been open sourcing all of the work I legally can since I was living in my car working on library computers. Yes. I stand by this for everyone.

I had no degree, no credentials, and the only reason I was able to make a career for myself as an uneducated vagrant is -because- my work was public and free, people often used it, and demonstrated my capabilities better than any degree could.

Plenty of peers have made careers for themselves the same way.

> Laws are here because reputation is not enough anymore in our world. Those who think that laws are unnecessary generally don't directly need them. Can you show some empathy and accept that some people need to be protected by more than reputation?

This -is- coming from a pace of empathy.

My meals as a kid sometimes came from food stamps and food pantries. Most of my early internet access came from abusing 30 day AOL trial dialup cds, and I had to wait in line 3 days for a $200 black friday sale laptop I could afford. I had to break a LOT of copyright laws to get unlimited access to information my local library did not have.

Laws work in a subset of countries, and a lot of countries straight up ignore them. That gives them a major advantage over us. They can pirate freely and openly to level up their skills and capabilities with no risk of legal consequences... and we cannot? Why should the poor in America not have the same free access to any digital goods the poor in other countries do?

> You mentioned Doctorow as an example, right? Do you even know what he thinks of BigTech abusing their power? He's totally for more regulations for those, not fewer.

My read of Cory Doctorow on these topics is that the copyright wars were a failed experiment. Copyright laws are almost mostly weaponized by big corporations to hurt individuals. We should regulate the shit out of corporations to protect the freedom and privacy of users and prevent monopolies. It is perfectly compatible to both anti-big-tech and also against the current IP law system.

https://gizmodo.com/cory-doctorow-copyright-laws-tech-antitr...
For ~$600, the Remarkable Paper Pro has a color, 12" diagonal display. https://remarkable.com/store/remarkable-paper/pro/details/fe...

I don't have one, but it's closer to what you mention.
I wonder if the sites will do something internally to see that the provided DOB for the account is now > 100 years old, and just start silently deactivating those accounts. Then again, why would they care? If deceased person's account becomes hacked and then taken use by some identity theft type situation, why would that platform care? It's just a user to them and continues to be potential revenue generating.
> I do absolutely hate however when someone works for 3 months on a mega PR and drops a +8000 -5000 on my head.

Trunk based workflow doesn't prevent that.

Moreover, heavy refactoring of code often ends up doing the same thing but much quicker.
Maybe not the specific example the parent was thinking of but there is this from MIT: https://www.technologyreview.com/2024/05/10/1092293/ai-syste...
I use it to assist me in doing such tasks.
Can you please elaborate on this because I'm struggling to follow your suggestion. Shelling out to psql every time I want to run an SQL query is going to be prohibitively slow. It seems to me you'd need bindings in almost the exact same cases you'd use a shared library if you were writing in C and that's really all bindings are anyway -- a bridge between the VM and a native library.
It's worth noting, just as a curiosity, that screen readers can detect these variation selectors when I navigate by character. For example, if I arrow over the example he provided (I can't paste it here lol), I here: "Smiling face with smiling eyes", "Symbol e zero one five five", "Symbol e zero one five c", "Symbol e zero one five c", "Symbol e zero one five f". This is unfortunately dependent on the speech synthesizer used, and I wouldn't know if the characters were there if I was just reading a document, so this isn't much of an advantage all things considered.
> The technical competence in building gasoline cars was definitely there

I'm not sure about your statement here after the wet timing belt inside engine debacle for many European cars engines including Renault that's still existed until today. It's a total disregards of the laws on material physics and chemistry [1], [2].

[1] Wet Belt in Oil Engines: Who Approved This and Why Is It Still Being Made [video]:

https://www.youtube.com/watch?v=0SASSFjIt5I

[2] Why So Many People Hate Wet Timing Belts:

https://www.theautopian.com/why-so-many-people-hate-wet-timi...
I was about to write something similar. I am surprised by how many are taking this idea seriously, here on HN and I guess Good Design Australia.
This is good. I really didn't think of that aspect.
> The SEC found that he had over $140M in undisclosed compensation, much of it hidden from Nissan’s management: https://www.sec.gov/files/litigation/complaints/2019/comp246...

That looks to be one side's claims, and even this one-sided telling acknowledges that he never received any of that money, and that the CFO and finance department signed off on what happened.

> It didn't come out in the court case because he fled the country before he was tried!

He fled the country after being detained and isolated (especially from his wife) for literally years without actually being charged or getting to trial. They were blatantly trying to break him without having to go to the trouble of actually proving a case. And the trial I'm talking about, that convicted him on exactly one count, was held in his absence after he escaped and had no reason to not throw everything at him.

If and when he's convicted in a fair trial under international norms where he gets a fair chance to defend himself, I'll condemn him for that. But until then I'm not going to take the allegations of the people who wanted him gone at face value.
“After that, a VALIDATE CONSTRAINT command can be issued to verify that existing rows satisfy the constraint. The validation step does not need to lock out concurrent updates, since it knows that other transactions will be enforcing the constraint for rows that they insert or update; only pre-existing rows need to be checked. Hence, validation acquires only a SHARE UPDATE EXCLUSIVE lock on the table being altered. (If the constraint is a foreign key then a ROW SHARE lock is also required on the table referenced by the constraint.) ”

--https://www.postgresql.org/docs/current/sql-altertable.html
The sleight of hand here is implying that there are any forces smaller than nation states that can credibly reign in problematic technology. Relying on good intentions to win out against market forces isn't even naive, it's just stupid.
> Consider a very brief history of airspeed in commercial air travel. Passenger aircraft today fly at around 900 kilometers per hour—and have continued to traverse the skies at the same airspeed range for the past five decades

This is a terrible example.

If supersonic mass travel could be provided safely and cheaply, demand would be bonkers.

If I could get to Tokyo in an hour for $50, I would visit every weekend.

Overall, the article is sound.

But what a terrible example of demand not filling supply.

If I had a terabit per second, indeed I probably wouldn't use it.

But you can not make travel fast enough.
The title should include 'from tech conferences'. Otherwise no Karpathy here is surprising!
> Like, just give a file browser so I can load a directory, for god's sake! It's much, much less effort than implementing a media library!

I see you don't know the challenges of disk access on Android for developers.
I can see it came from your source but why is the neutrino mass specified in kg instead of g? why not 1.25e-34g?
I love these kind of think pieces, and I agree with most of the points - it’d be nice to have engineers that are engaged and knowledgeable about their customers… but I’ve never seen this in practice, except for like… emergencies or super urgent things (and it’s always the best, haha). But I wonder about how to tee this up to management or examples of teams doing this in real life.
I hope you’re all very rich (you’ll benefit from proposed tax cuts) and don’t have anyone you love dependent on Medicaid …

https://www.aha.org/news/headline/2025-02-12-house-and-senat...
So you asked a yes or no question, expected the answer must be yes, and wanted people to offering you examples?

Maybe you should have asked a different question.
Deck screws are pretty much all Torx these days. Phillips are still used, but mostly by people who don't know any better.
Many HNers have the same problem as Karl Marx and can't fathom most people are not high functioning high agency people working out their self actualisation through a job of their choosing.
Surely, the new MacBook Airs offer better performance than a 10 year old MacBook Pro. The M3 is very reasonable, 16GB/512GB for $1,100 or $1,300 for 15 inch I think. Could be going lower too with M4 MacBook Air purportedly releasing in Mar or Apr.
Why So Many People Hate Wet Timing Belts
5D chess with multiverse time travel
Ultimately Apple has hit the same dead end too. Their designs and TSMC's processes aren't putting Moore's law back on the map, you can see it in the year-over-year performance. If tariffs end up hitting any harder, Apple can't just go to TSMC's Arizona plant and get faster silicon than what Taiwan has today.

> they screwed up because they said Linux, which doesn’t exclude Apple Silicon

In the context of the second graph, that means Apple Silicon is also failing to push the envelope forwards.
Visualization seems to have stagnated in the AI craze era. Lots of androids touching holographic screens and what not, as metaphors for the almighty "AGI" coming any day now, but cant recall a major new development in the last five years?

One area that might be "pregnant" for some new approaches is the visualization of large datasets, eg large graphs. Extracting useful (and objective) information instead of ovewhelming with the sheer number of data points. That is indeed the art of visualisation.
Yeap. I roll my eyes at the people who want to static link everything and think they're somehow better or purer when they're just wasting RAM for nothing.
> Microsoft never said how it mitigated the Copilot vulnerability and didn't answer questions asking for these details. While the specific attack Rehberger devised no longer worked, indirect prompt injection still did.

...

> Another measure chatbot developers employ is a limitation on broad types of instructions that can be invoked by untrusted data. In Google’s case, this measure seems to include the invocation of apps or data available through its Workspace collaboration suite. (Google doesn’t document these restrictions anywhere, so researchers are left to infer them based on the behavior they observe.)

I understand the impetus to protect one's "special sauce" recipes in this nascent industry, but it sounds like it would be beneficial to everyone if they did more to document the protection mechanisms they are developing, and welcome outside review, if not contribution. I'm in no way an expert in AI or security, just picked up on a recurring theme, and wondered if anyone was working in this space, or knew of any specific efforts to establish some kind of standards of practice for AI security?
Yeah, I'd agree that most are synthesized. But I do frequently see headnotes that are verbatim or nearly verbatim slices from the text. Just grabbing a case at random: Kearney v. Salomon Smith Barney, Inc., 39 Cal.4th 95 (2006). The 4th headnote reads:

> The federal system contemplates that individual states may adopt distinct policies to protect their own residents and generally may apply those policies to businesses that choose to conduct business within that state.

And the opinion reads:

> [T]he federal system contemplates that individual states may adopt distinct policies to protect their own residents and generally may apply those policies to businesses that choose to conduct business within that state.
(2020) Page title: Armstrong Image Galleries A-Z
AI Companies Have a Rough Road Ahead
Popular in 2020 (107 points, 94 comments) https://news.ycombinator.com/item?id=24507905
It’s a microkernel OS, it’s going to be slower by its very nature. And on ARM it wastes memory due to its 16KiB pages.
> "we trained on copyrighted documents, and made a general purpose AI, and then people paid to use our AI to compete with the people who owned the documents"

This is a good distillation. A bit like "we trained our system on various works of art and music, and now it is being sold as a service that competes with the original artists and musicians."
I'm rather fond of QMMP, because being built with normal Qt5 and a very vanilla stock theme, it integrates nicely into my "You're going to look like Motif come hell or high water" desktop theming philosophy.

I also find that I never got into playlists, so something that can easily be coaxed to just swallow 100Gb of content and let me occasionally search for a specific track is my speed.
It's so interesting that much of this is playing out like that movie Creator where New Asia embraces AI and robotics and the western world doesn't.

Here we are, a couple of years later, truly musing about sectors of the world embracing AI and others not.

That sort of piecemeal adoption was predictable but not that we are here to have this debate this soon!
> Too many people (especially in tech) don't really care what happens to others as long as they get rich off

This is a problem especially everywhere.
Back in the day I wrote a significant part of the first version of PyCharm. A part of he job was also making the same language-supporting code available as a plugin, and virtual feature parity between PyCharm standalone and the Python plugin inside IDEA (the paid version) was a requirement.

Maybe things changed after the 15 years that have passed since, but I don't see why would they.
Prefer tee -a, not >>, in CI
I've been using Music Folder Player (https://play.google.com/store/apps/details?id=de.zorillasoft...) for over a decade for this very reason.

I think Android has now made this type of player almost obsolete. Every app has its own file sandbox and apps must go through an abstraction for media that works poorly.
Related Thomson Reuters wins first major AI copyright case in the US (377 points, 1 day ago, 165 comments) https://news.ycombinator.com/item?id=43018251
If the discrete logarithm problem is NP-hard, then I will eat my hat. The discrete logarithm problem can be solved by Shor's algorithm on a quantum computer, placing it in the complexity class BQP. Anyone who claims that BQP contains an NP-hard problem is selling something - I would bet at a trillion-to-one odds against such a claim (if there were any hope of definitively settling the problem).
NINE paragraphs and as many images down the page: The belts, despite being made of sturdier rubber and having protective coatings, are not withstanding the hot oil or contaminants as well as desired. They can start to break down and themselves contaminate the oil.
Average person.

https://uk.themedialeader.com/tv-viewing-time-in-europe-ahea...

https://www.finder.com/uk/stats-facts/tv-statistics

https://www.eupedia.com/forum/threads/daily-tv-watching-time...

"In a survey conducted in India in January 2022, respondents of age 56 years and above spent the most time watching television, at an average of over three hours per day."

https://www.medianews4u.com/young-india-spends-96-min-per-da...

For china I'm seeing a bit over two and a half hours of TV in 2009, and more recently a bit over one and a half hours TV plus a bit over half an hour of streaming.

Yes it includes ads, sports, and news.

Personally I don't watch a lot of actual TV but I have youtube or twitch on half the time.
An HN classic!

Conway's Game Of Life in APL (2009) [video] - https://news.ycombinator.com/item?id=22845249 - April 2020 (13 comments)

Conway's Game of Life in One Line of APL (2007) - https://news.ycombinator.com/item?id=10366441 - Oct 2015 (12 comments)

Conway's Game Of Life in APL - https://news.ycombinator.com/item?id=7492585 - March 2014 (2 comments)

Conway's Game Of Life written in one line of APL - https://news.ycombinator.com/item?id=4642628 - Oct 2012 (2 comments)

Conway's Game of Life in APL - https://news.ycombinator.com/item?id=4611015 - Oct 2012 (1 comment)

Conway's Game Of Life in one line of APL - https://news.ycombinator.com/item?id=3840273 - April 2012 (2 comments)

Conway's Game of Life in one line of APL - https://news.ycombinator.com/item?id=2547655 - May 2011 (22 comments)

Conway's Game of Life in one line of APL - https://news.ycombinator.com/item?id=1499630 - July 2010 (1 comment)

Conway's Game Of Life in one line of APL - https://news.ycombinator.com/item?id=1041500 - Jan 2010 (31 comments)

Game of Life implemented in 5 minutes using APL (amazing video) - https://news.ycombinator.com/item?id=451951 - Jan 2009 (1 comment)

Conway's Game of Life in one line of APL - https://news.ycombinator.com/item?id=451923 - Jan 2009 (1 comment)

Conway's Game of Life in one line of APL - https://news.ycombinator.com/item?id=204042 - May 2008 (4 comments)

---

Honorable mention:

Conway's Game of Life in APL in Forth - https://news.ycombinator.com/item?id=31537648 - May 2022 (25 comments)
'Augustus the Strong' by Tim Blanning Review
Farmers on the Subway. 6 AM, China [video]
Is this the same Mike Benz? https://www.nbcnews.com/tech/internet/michael-benz-rising-vo...

He seems to, um, have some opinions.
At least the evil villains are showing who they really are during this time of perceived power…