skysight-inc/HackerNews huggingface dataset:
I could be wrong, but the Palo Alto scanner says it's using global ipv4 space, so not using DNS at all. So actually the subdomain has not been discovered at all.
If a HTTPS service should be hard to discover, an easy way is to hide it behind a subdirectory. Something like https://subdomain.domain.example/hard_to_find_secret_string.

Another option are wildcard certificates.

This obviously can't be the only protection. But if an attacker doesn't know about a service, or misses it during discovery, they can't attack it.
Thanks for the recommendations,

Pągowski, 220 posters: https://polishposter.com/search?controller=search&s=P%C4%85g...

Wałkuski, 176 posters: https://polishposter.com/search?controller=search&s=Wa%C5%82...
possibly doing both & diffing the output to spot contested bits?
I know the r-word is coming back in vogue, but it was still unpleasant to see it in the middle of an otherwise technical blog post. Ah well.

Diffusion LMs are interesting and I'm looking forward to seeing how they develop, but from playing around with that model, it's GPT-2 level. I suspect it will need to be significantly scaled up before we can meaningfully compare it to the autoregressive paradigm.
Brunton is one of the greatest unsung YouTube stars for sure.
How deep in the domain hierarchy you are doesn't matter from a network layer: a bare tld (yes this exists), a normal domain, a subdomain, a sub-subdomain, etc can all be assigned different IPs and go different places. You can issue a GET against / for any IP you want (like we see in the logs OP posted). The only time this would actually matter is if a host at an address is serving content for multiple hostnames and depends on the Host header to figure out which one to serve -- but even those will almost always have a default.
I like to run my code in containers (also during development), although your approach ain’t broken.
I uploaded a picture of my Chinese mouthwash [0] and it made a ton of mistakes and hallucinated a lot. Very disappointing. For example it says the usage instructions is to use 80 ml each time, even though the actual usage instruction on the bottle says use 5-20 mL each time, three times a day, and gargle for 1 minute.

[0] https://i.imgur.com/JiX9joY.jpeg

[1] https://chat.mistral.ai/chat/8df2c9b9-ee72-414b-81c3-843ce74...
Which portion of the text gave you that impression?
Yeah I don't know what Atlassian's strategy was - presumably they were chasing growth and new customers, but I've never worked at a company that has paid for anything more than Jira and Confluence. I'm sure they have a whole list of other services but I've never personally known anyone to use them.

Actually one company I was at did use Stride and it was truly awful - I don't know how its product manager thought it could compete without such basic features as... the ability to edit and delete a message. But some fool at the company I was at chose it because it was cheaper than Slack.
Starship development has been funded mostly by SpaceX, not by the US government. SpaceX did win a contract for the Human Landing System, but the payouts are contingent on certain milestones, such as demonstrating in-orbit refueling. Also much of that funding goes towards developing the lunar lander version of Starship, not the Starlink version that SpaceX has been testing with. If they meet all the milestones, SpaceX could be awarded $4.4 billion for the Starship HLS program, most of which would be for crew-rated lunar landers.[1] SpaceX has already spent over $5 billion of their own money on Starship, so even the largest payout wouldn't cause the majority of the funding to be from the government.

For comparison, NASA's SLS has cost $32 billion in 2024 dollars and has an annual cost of $2.6 billion. They launched one unmanned mission in 2022, and plan to launch again no earlier than 2026.

1. https://www.usaspending.gov/award/CONT_AWD_80MSFC20C0034_800...
Ariane 6 performs first commercial flight with launch of CSO-3 satellite
ORM is probably the most regrettable. It's as close as you can get in allegory before you're literally hammering a round peg through a square hole. Flattening out the relational model into a single projection is quite disruptive to downstream consumers once you get beyond the trivial CRUD use cases.
I mean you could argue that this is more of a multi-factor authentication lesson.

Just knowing 1 "secret"— a subdomain in this case —shouldn't get you somewhere you shouldn't.

In general you should always assume that any password has been (or could be) compromised. So in this case, more factors should be involved such as IP restricting for access, an additional login page, certificate validation, something...
This really depends on the setup. Most web servers host multiple virtual hosts. IP addresses are expensive.

If you're deploying a service behind a reverse proxy, it either must be only accessible from the reverse proxy via an internal network, or check the IP address of the reverse proxy. It absolutely must not trust X-Forwarded-For: headers from random IPs.
Even the Sep 2025 mission around the Moon seems unrealistic TBH
It depends on your use-case. For mine, I'm mining millions of scanned PDF pages to get approximate short summaries of long documents. The occasional hallucination won't damage the project. I realize I'm an outlier, and I would obviously prefer a solution that was as accurate as possible.
I don't know what to say; I think that's the first time I've heard that concern on HN. Thanks!
Advanced chip fabs, and battery manufacturers are the first counterexamples that come to mind. The government doesn't need to invest, they just need to watch the free market realign their manufacturing to maintain access to the US economy. Tariffs have been around since Trumps first term, and were retained by Biden, and they're already doing what they intended.
You don’t need any of that. Define a data source to query the instances and then a for_each DNS resource using the data source instances.
How do succinct data structures do with vector operations on cpu?

Not sure if they are succinct, but the Apache arrow format encodes data in several ways that is compact in memory but also allows operations on these structures.
These are topics that we at Cenote also mull over. Right now how we see things are:

1. If we perform worse, we won't deliver any value to the owner and we'll soon be out of a business

2. It's our bet that AI agents can actually perform these monotonous, detailed tasks very well and that this will free up humans to take on higher value work.

3. That higher value work being: calling patients, educating them, helping facilitate patient care. This is ultimately the work the owners we talk to are excited for their teams to take on!
Income over $176k is definitely taxed, at progressively higher marginal rates. If you won the lottery you'd lose half of the jackpot to taxes. Only one specific type of tax has a cap, not that the buckets really mean anything. Courts have found that Social Security is not an entitlement, it is a welfare program. You can collect more than you ever paid in, and be denied benefits for arbitrary reasons. However, practically speaking, they treat it like an entitlement in that paying in more money generally increases the amount of your benefits, up to a limit. If people were to be denied benefits on a large scale, then people paying into it might vote to eliminate it.
Not sure how this is setting Canada back.

It's actually pushing us to improve our economic policies that we've been debating about for years because the country is mostly united.

Getting rid of interprovincial trade barriers is a net good for Canada as is increasing trade diversification.

The US definitely seems like the one set back so far...
7B is the sweet spot
Japan bullet train cars decouple, 2nd time in less than 6 months
Well, it was. Intel MacBooks had really crappy thermals, getting awfully hot and throttling at any hint of system load.
Composing Contracts: An Adventure in Financial Engineering [pdf]
I found that Caddy will take you a very long way if you just want virtual hosting and reverse proxying. YMMV
Thanks, we appreciate the support :)
> Most things in the world require physical processes.

No one ever disputed that. The principle still holds if we apply this logic to physical processes; by automating or reducing the labor necessary to conduct a physical process, I can enjoy the benefits of the process without having to engage in the labor of the process.

> How would you go about automating sewing a shirt?

https://www.youtube.com/watch?v=oeSu9Vcu0DU

> How about picking strawberries?

https://www.youtube.com/watch?v=H2gL6KC_W44

https://www.youtube.com/watch?v=M3SGScaShhw

https://www.youtube.com/watch?v=OyA9XnW6BV4

To respond to the edit you made to your comment:

> Anything that could be automated but isn’t automated is because it isn’t cost effective to do so or there is insufficient capital to invest. These are resource allocation issues. You can’t just wave that away.

This is true in the long run and I suppose the argument you are making is that any attempt to interfere with the present system of resource allocation will constitute a centralization that would be less effective than free market capitalism, so the notion that we could redistribute the surpluses generated by labor saving devices to the average person is inherently a call to economic centralization. This might be true, but I would propose an alternative reading:

The surplus of labor-saving devices has primarily accrued to the owners of these devices. You might then claim that these owners are owners because they have found a means of servicing a market demand. Each dollar they possess is a vote from the market that these guys really know what they are doing, and that the world wants more of it. If we were talking about spherical billionaires in a vacuum, I'd agree with you - but this issue is complicated by the compounding impacts of inheritance and its correlation with access to credit, as well as with the existence of competitive moats (e.g. network effects, intellectual property, sunk costs, natural monopolies, etc).

The optimistic read of the technology sector in the 2010s was that businesses would compete with one another to provide services that would ultimately improve people's lives. Instead, we got Windows 11. That wasn't a consequence of users voting with their dollars, it was a consequence of Microsoft entrenching itself into workflows that cannot be economically altered in the immediate future. There are lots of examples of the market not being particularly effective at economic allocation if we step outside of the logic that any purchase is a revealed preference which indicates approval of the good or service being purchased. Apply this logic to the purchases of gamblers, alcoholics, drug addicts, or murder-for-hire plots and the limitations of the logic become obvious.
So you think that one general model can outperform thousands of specific ones in their specific areas?
I just don't see how any of this matters. OP's server is reachable via ipv4 and someone sent an http request to it. Their post even says that this is the case.
Regarding faulty intermediate versions, I think that’s the point. The diffusion process can correct wrong tokens with the global state implies it.
I didn’t downvote anyone, in fact I upvoted your comment. Why do you ask? I am getting downvoted here, but I don’t know why. Yes I have read D&K’s paper and studied the plots and methodology multiple times. I thought I was mostly agreeing with you here. What part of their plots or paper are you thinking of? In my opinion, the paper dramatically overstates the claims of what it actually demonstrates experimentally. The title alone primes the reader to jump to a conclusion that isn’t supporter by their data; they did not show people who are unskilled or “incompetent” on an absolute scale, they did not test all skills in general (they only tested 4 relatively easy “skills” and one of those was subjective), they did not test the general population. Looking at the plots again won’t address the confounding issues I mentioned, even if I don’t dispute their data at all.

Every time I read the DK paper, even now, I’m struck by how wild it is that so many people refer to this as a human-wide cognitive bias, when there was so little evidence to begin with, the study was so small and biased, so many people have called out problematic issues with their data and experiment design. If randomly generated data shows the same effect, then what, exactly, did D&K demonstrate?? https://digitalcommons.usf.edu/numeracy/vol9/iss1/art4/
Even if you do recognize it, this isn’t Reddit.
It's interesting to have this view into the kinds of discussions happening 20 years ago, but I don't get the impression that this makes a particularly strong argument, nor is it replying to one. I don't know that Pythonistas in 2005 were proposing "pure Python" (meaning what, exactly? Having the user write a .py file for configuration?) as an alternative to XML. Nor do I think that distaste for XML in 2005 was particularly a Python-linked phenomenon.
Personally, I've always just felt that XML tends to get used for things where JSON (or a related format) would make more sense.

It is true, though, that Pythonistas of that age were quite fond of comparing and contrasting Python with Java, and "enterprise" Java systems of the time certainly used quite a bit of XML (I wouldn't be surprised if they still do). The impression I got was that this was largely intended to solve problems that Python simply doesn't have. (e.g. "dependency injection" that's more dynamic - as a long-time Python user, I tend to think of "dependency injection" as pretty much a fancy term for "passing an argument to a function".)
I thought that Citizens United was about who counts as a film maker and who doesn't. Quoting the background of the Wikipedia page for Citizens United.

"Citizens United had previously used the 2002 Bipartisan Campaign Reform Act, commonly known as the McCain–Feingold Act or BCRA, which prohibited "electioneering communications" by incorporated entities.[7] During the 2004 presidential campaign, the organization filed a complaint with the Federal Election Commission (FEC) charging that advertisements for Michael Moore's film Fahrenheit 9/11, a docudrama critical of the Bush administration's response to the terrorist attacks on September 11, 2001, constituted political advertising and thus could not be aired within the 30 days before a primary election or 60 days before a general election. The FEC dismissed the complaint after finding no evidence that advertisements featuring a candidate within the proscribed time limits had actually been made.[8] In response, Citizens United produced the documentary Celsius 41.11, which is highly critical of both Fahrenheit 9/11 and 2004 Democratic presidential nominee John Kerry. The FEC, however, held that showing Celsius 41.11 and advertisements for it would violate the Federal Election Campaign Act, because Citizens United was not a bona fide commercial film maker."
It's a ruling that is against gate keeping. Like letting people who aren't with CNN or Fox News but who have massive online audiences into the white house briefing room.
> Americans will do anything but remove the cap on taxing income over $176k.

Point taken, but just to be clear to folks who aren’t familiar with American taxes, this cap is only for “social security tax” and does not apply to federal income taxes.
> To answer this, we'll start by attacking Conway's Game of Life - perhaps the most iconic cellular automata, having captivated researchers for decades

> At the heart of this project lies...
> his powerful paradigm, pioneered by Mordvintsev et al., represents a fundamental shift in...

(Not only is this clearly LLM-style, I doubt someone working in a group w/ Mordvintsev would write this)

> Traditional cellular automata have long captivated...

> In the first stage, each cell perceives its environment. Think of it as a cell sensing the world around it.

> To do this, it uses Sobel filters, mathematical tools designed to numerically approximate spatial gradients

Mathematical tools??? This is a deep learning paper my guy.

> Next, the neural network steps in.

...

And it just keeps going. If you ask ChatGPT or Claude to write an essay for you, this is the style you get. I suffered through it b/c again, I really like Mordvintsev's work and have been following this line of research for a while, but it feels pretty rude to make people read this.
I have an M3 Air which I occasionally use for AI (image gen & LLMs), gaming, and light dev work, and it never heated up enough to become uncomfortable, exactly as described in reviews. In fact, this was the main reason why I got Air over Pro - the latter apparently can get uncomfortably hot in some cases (although still far less often than your typical Intel laptop), and I wanted something that would truly be a laptop.
Thank you! Feel free to share your thoughts.
I was trying to get at that with "getting audiences to move en masse is also hard", but thanks for making it explicit.
Security by obscurity can be a great additional measure for an already secure system. It can reduce attack surface, make it less likely to get attacked in the first place. In some cases (like this one) it can also be much easier to break than expected.
From Wikipedia:

"The eighth flight test of Starship was to follow a trajectory similar to the previous mission, with a planned splashdown in the Indian Ocean. During the Ship's initial burn, its engines experienced premature shutdowns, and the vehicle was lost. The booster returned to the launch site despite losing two engines during its boost back burn.[49]"
https://en.wikipedia.org/wiki/List_of_Starship_launches

Interesting that the booster survived but the starship / payload failed.
M3 Air is fanless, so no wonder that you never hear it spin up on that one. ~
Those tools were all, comparatively, trash. Literally ALL of the gamer groups I was familiar with switched en masse. You can’t compare Mumble and Discord IMO. There was so much setup friction that anything was better than what we had at the time.
Trump signs executive order establishing U.S. strategic Bitcoin reserve
Do you have a graphics of what you want?
> "what would you say if I asked you whether [this door] leads to the castle?".

Very clever. If the goblin is lying, the double negation cancels out. If the goblin is telling the truth, the truth remains unchanged.

Personally, I didn't find the article very clarifying. Instead, I like to think of the goblins A and B as functions that take in the truth value of a statement and output an answer.

One goblin's function yields the boolean not of the result, and the other passes it through unchanged. You don't know which goblin has which functions, so the two ways to get a reliable answer out are:

A(A(question))

A(B(question))

The former is your answer here, which does the double negation. The latter is the answer in the movie where you pass it through both goblins which means the answer will reliably have its truth value flipped exactly once.

The nice thing about the latter solution is that it scales up to more goblins and an arbitrary ratio of liars. Let's say there are four goblins, Ann, Ben, Cat, and Dan. Two always lie and two always tell the truth. You can ask "Would Ann say that Ben would say that Cat would say that Dan would say that door 1 leads to the castle?" In other words:

A(B(C(D(question))))

In this case, the answer tells you if door 1 is correct because there are an even number of liars so the negations cancel out. If the number of liars is odd, you flip the result.
All it ever does is hallucinate
Not suggesting any conspiracy theory or anything, maybe its just a quirk of the moderation system, but how is it that none of the Flight 8 posts have escaped out of the 'new' bin?

Like its not even that these Flight 8 stories didn't make the front page, they just aren't visible at all dozens of pages in on the non-new view despite having more visible 'points' than a lot of posts that are visible out there.
Memory bandwidth for M series goes up to 800 Gb/s for Ultra (in e.g. Mac Studio). That, combined with the ability to get it loaded with a lot of RAM, is what makes it so desirable for LLMs.
I watched them...

So amazed how aligned we are.
I wonder what Stephen Wolfram has to say about this.
I'm guessing they meant it discovered a virtual host behind a subdomain.
This should work in ComfyUI, stable-diffusion-webui, etc. You can run it locally if you have a decent GPU or an M* macbook.
Blackbody radiation (which even neutron stars will approximate) trends towards a pastel blue as temperature approaches infinity, actually. There is always a slope in the spectrum in the visible range as the peak is always to the UV/Xray side for very hot objects. "White" light requires that the spectrum be flat in visible wavelengths, which basically requires that the peak be in the visible, which is true for objects at about 6000K.

As it happens, the sun is such an object. And it more or less makes sense that we have eyes tuned to pick up the dominant wavelength arriving from our local light source.

Edit: the wikipedia page has a great animated chart of this effect, showing what the visible-only spectrum looks like as temperature changes: https://en.wikipedia.org/wiki/Color_temperature
Can you clarify what you mean by "correct scaling"?
More broadly, because longstanding universal adoption of CT makes it possible for root programs to grandfather in older certificates, so that they can axe a CA without generating SSL errors for all that CA's existing certificates, which is something they couldn't do before.
Who Is the Doge and X Technician Branden Spikes?
This looks impressive but I’m concerned, is it fair to “teach to the test” by fine tuning the Qwen model with RL on the test task, while the other models in the comparison are not fine tuned on the test task?
Thanks. I'd wanted to search for this, but forgot who'd written it...
Thanks :) Let me know if you use it and get into any trouble
We could have had 3 Apollo’s but got one f35 instead. :/
The critical computer systems still relying on decades-old code
Why Should Intelligence Be Related to Neuron Count?
Presumably the input isn't a jpeg but something uncompressed. Or a jpeg that you want to compress more? Idk, there's no readme.
Countries shouldn’t gamble with taxpayer dollars.

Return it to taxpayers or invest in the country and so on.
Can We Please Get EV Motors Out of the Actual Car?
Why Coconut Oil Isn't Fit for Pigs – Physical Culture Study
There are myriad specific hammers and each is designed for specialized use: https://www.theengineerspost.com/types-of-hammers/
Thank you! :)))
I haven't benchmarked, so these opinions might be worthless, but here's how they're laid out internally.

* nalgebra uses fixed-size arrays (so a Vec4 is like [[f32; 4]; 1])

* this library seems to use fields (so a Vec4 is a struct with x,y,z,w fields)

* glam uses SIMD types for some types (so a Vec4 is a __m128)

I think maybe glam might win for some operations, but if you want performance, people usually SIMD in the other direction when possible, like:

struct Vec4 { x: __m128, y: __m128, z: __m128, w: __m128 }

According to mathbench-rs[0] (which I looked at after typing this comment...) it looks like nalgebra and ultraviolet have such types. The benchmarks have "N/A" for many of the "wide" nalgebra entries though, which might indicate that nalgebra hasn't implemented many of those functions for "wide" types.

[0]: https://github.com/bitshifter/mathbench-rs
Expanding seaweed farms pose a risk to vital marine life
It's really not a bull case for crypto that the strategic reserve is just a holder of confiscated illegal coins. Ie it's not a big push to pump the price and demand that many was hoping for. Bitcoin is still flat on the news ..
How does this interact with Structured Procrastination? Im a huge fan and avid strut-castinator. This is an entirely different approach to accomplishing goals though, as I'm frugal and hate to waste money. https://www.structuredprocrastination.com/