skysight-inc/HackerNews huggingface dataset:
which is especially problematic I guess when random American companies are MITM the traffic and examining the unencrypted passwords?
Any $30 Android shitbox with a nieuwpipe apk has been able to do this for ~ 10 years.
"People with blue and yellow patches are the enemy. I won't be able to communicate with you after you leave the forward base, but you need to navigate about 1 mile southwest then kill the people you find with a blue and yellow patch for as long as you can."

Then the quadcopter/Atlas/Spot/a Terminator/a tank driven by AI starts rolling across the landscape, while humans flagged as suspicious by Google because we lack sufficient tracking data in our browsers fill out reCaptcha images that say "Select all images that contain [soldiers] in this set."

Nearby, a scared local child distracts themselves from the distant horrors by drawing a picture of the sun in the sky with their crayons.

Some time later, the robot is able to transmit back a few bytes of telemetry to base, which publishes a press release that describes the number of enemies slain.
> where time is spent thanking a sponsor and pitching their product

I’ve been unsubscribing from folks who do that a lot. Instant unsubscribe if the product is questionable.

I’m not going to judge their business decision, but it tea sets an odd tone when I’m watching something informative and they bust out into a “someone paid me to say this”.
Easier: Make some trivial amendment to it (does not need to be ratified), and then just start calling it something else.

"It was a disaster, but We Fixed It because I'm your favorite."
Using a semantic layer is the cleanest way to have a human in the loop. A human can validate and create all important metrics (e.g. what does "monthly active users" really mean) then an LLM can use that metric definition whenever asked for MAU.

With a semantic layer, you get the added benefit of writing queries in JSON instead of raw SQL. LLM's are much more consistent at writing a small JSON vs. hundreds of lines of SQL.

We[0] use cube[1] for this. It's the best open source semantic layer, but there's a couple closed source options too.

0 - https://www.definite.app/

1 - https://cube.dev/
I mean, if you want to compete with commercial products then the least you can do is listen to your audience.
Cloud flare is an ooc spof, this will need addressing sooner or later
My general method for things like this is to:

1. Get a .dot file of the database. Many tools will export this.
2. Open the .dot in a tool I built for the purpose.
3. Select the tables I'm interested in, and export a subset of the .dot file representing just those tables and relationships.
4. Hand that subset .dot file to the LLM and say, "given this schema, write a query -- here's what I want: <rest of the request here>"

That gets the job done 60% of the time. Sometimes when there's an incorrect shortcut relationship resulting in the wrong join I'll have to redirect with something like, "You need to go through <table list> to relate <table X> to <table Y>" That gets my success rate up above 95%. I'm not doing ridiculous queries, but I am doing recursive aggregations successfully.
The quibble was that

> Every demographic commits petty crimes and code violations at about the same rate

.. is not actually true, so better not to claim it as part of a strong argument.
Typing a youtube/netflix search box with a remote seems harder to me than doing it comfortably on a decent keyboard.
Smoothly handling missing or unexpected fields is half the value proposition of protobuf. May as well switch a a much simpler versioned binary protocol instead of all this schema and field tagging complexity if you want to reject every message that doesn't match the client's schema.

But rejecting unknown messages would likely degrade the user experience. Just because Google releases a new version doesn't mean everyone instantly has that new version installed everywhere.

Certificate pinning would be a solution, but the world seems to have decided that that's very difficult to get right. Probably easier to get right in an app than in a website, but I understand not using it.

They could manually sign the protobuf messages to ensure integrity. Duplicating some of the work TLS would already do, but doing it decoupled from TLS infrastructure may be easier.

But unless something like OP's hack becomes mainstream, Google's current approach could be the right one. Sure, it leaves them open to message manipulation, but the potential lost ad revenue from even a tiny failure rate around update time from the other approaches could easily outweigh what they lose from a handful of people running middleware boxes to block ads.
Discovered them recently. Price looks absolutely fair for what you get. It offers up to ten external addresses for sending and has a web interface so it looks like a solid Gmail alternative.
The first line of text after the title:

> multinyms are examples of triple/quadruple/quintuple/sextuple homonyms.

> According to some definitions, a homonym is a word with the same pronunciation as, but different meaning than, another word. Thus, homonyms come in pairs (at least). However, some remarkable homonyms come in triples, as you may here behold.
Gift article (via bluesky): https://www.nytimes.com/2025/03/17/us/politics/elon-musk-sta...
> an agent has to perform the targeted tasks internally: they "dynamically direct their own processes and tool usage, maintaining control over how they accomplish tasks".

> What most agent startups are currently building is not agents, it's workflows, that is "systems where LLMs and tools are orchestrated through predefined code paths." Workflows may still bring some value

While this viewpoint will likely prove correct in the long run, we are pretty far away from that. Most value in an Enterprise context over the next 3-5 years will come from embedding AI into existing workflows using orchestration techniques, not from fully autonomous agents doing everything end to end "internally".
Google to buy Wiz for $32B
There’s film of the whale being blown up. The best part is the sound of whale meat falling from the sky.
> But instead of being physically placed at the White House, the Starlink system is now said to be routed through a White House data center, with existing fiber cables, miles from the complex.

This screams to me that it was only done, so the Kremlin has direct connection to the White House.

> White House officials said the installation was an effort to increase internet availability at the complex. They said that some areas of the property could not get cell service and that the existing Wi-Fi infrastructure was overtaxed.

I don't buy it.
It's at an unfortunate saddle-point of off-the-beaten-path and undiscoverable.

Contrast Blender, which does its own thing too but has an infobar at the bottom continuously trying to give context-appropriate hints for the current keybindings.

Meanwhile, there's a keyboard shortcut for "anchor floating layer." Where will you find it? Not by hovering the button that anchors floating layers, that's for sure.
I have one day of college under my belt and use Racket for all my personal projects, as well as in a few areas related to ERP systems professionally. I have found no compelling reason to use Typed Racket so far.

[edit to clarify: I am not in college. I’m in my forties and have 25 years experience as an IT/programming/accounting generalist.]
I didn’t mention IP at all in my post. You can globally rate limit anonymous requests for everything (except maybe your login endpoint), if that’s the thing that makes sense for you.

The nice thing about the proof-of-work approach is that it can be backgrounded for users with normal browsers, just like link prefetching.
I was on a patio halfway up a tall building in the City in London, when a guy came out of the office I’d been consulting in and asked me if I wouldn’t mind moving a metre to the left as I was blocking the laser. Turned out that the cheapest and fastest way they’d found to set up a secure network with their sister office in another building a couple of hundred metres away was to set up a laser network. It just happened that line-of-sight was unfortunately obstructable by a six-foot-plus man eating a sandwich. This would have been 2012 / 2013?
>Seems to be the most likely procedure with the current administration.

For example?

Also please show that the major current on-going efforts, like ongoing negotiations, measures in the border etc, were worked upon as intensive as it is now, in the previous administration.
No because there's nothing "untrusted" about my browser. Just because I'm not a slave of big tech?
We actually set up a dedicated UX repo for people to present design issues and discuss. The goal is to develop good designs that can then be implemented by programmers. If you're interested in contributing to the discussion, the repo is here: https://gitlab.gnome.org/Teams/GIMP/Design/gimp-ux/-/issues
> the bytes object returned by mitmproxy's API (`body: bytearray = bytearray(flow.response.get_content(strict=False) or b"")`) is immutable

Byte objects are immutable, but bytearray objects are not.
This sounds weirdly unnecessary, unless someone wanted to monitor / hide their communication from any kind of investigation …
This is why you fundamentally cannot rely on private companies to build the "town square". This will _always_ happen because every company has a profit motive (even if its a loooong tail via SV-style funding). The problem behind the problem is people want great communities and tools, but don't way to provide any effort to build them.
It has a lot of libraries. Can you give some examples of the gaps you are talking about?
* bold, bolled, bowled

I definitely pronounce "bold" and "bowled" differently, the former is one vowel and in the latter I'd say it's two vowels, gliding to a more closed and pursed mouth before the "ld" cluster.

I've never heard of "bolled" before, but just from looking at it, I'd imagine I'd pronounce it with a longer "l" alveolar compared before gliding to the "d". I think I have an old fashioned way of saying "polled" compared to how I hear others saying it.

I might be strange in my pronunciation though, I'd also distinguish between "call" and "caul" in the same way as "bald" and "bowled".
Usually (always?) regular working hours are compensated as usual. Then there’s rate for standby periods and another rate for each (half) hour when you get pinged and start doing actual work.
You are both wrong, it's the other way around - the free market economics are outside the EU. Here is the EUSSR. Just try producing something in "green" Europe, have a look at the amount of carbon tax you have to pay, then you will see.
You are a pathetic figment of the potential that is your humanity. Brain, body, intellect.

(Someone has to say it.)
Liberapay
I've started reading a great deal more. I'm tired of wrangling with my entertainment.
Interesting tool! Generating synthetic encrypted data is a smart approach to avoid exposing real data during security testing. For me, the biggest challenge with bypassing detection systems is making the fake data both realistic enough to evade detection while still being entirely synthetic. Ensuring that the data behaves like real-world data (in terms of structure and randomness) without being too predictable is key. How does Veilgen manage the balance between randomness and structure to avoid triggering detection systems? Also, curious if you've considered integrating machine learning models to make the generated data evolve based on specific detection mechanisms over time?
Much of the money has already been spent, the new fabs are already operational slash well into construction, so repealing it now shouldn't do that much damage. But it'll still do some damage, and it's still a stupid move, but hey, them's the times we live in.
It won't matter if they do. You'll be able to use open source models and host them yourself or use the hoster who realizes there's money to be made there.

Humpty is broken just like when Napster happened and there's no putting him back together.
Canada joins Horizon Europe programme
>Wouldn’t the market find a balance then, where the marginal utility of additional computation is aligned with customer value? That fix point could potentially be much higher than where are now in terms of compute.

I think the author's point here is that the costs are going to continue to fall for inference at an astonishing rate. We're in a situation where the large frontier companies were all consolidated around "inference is computationally expensive", and then DeepSeek - the talented R&D arm of a hedge fund - was able to cut orders of magnitude out of that cost. To me, that hints that nobody was focusing on inference efficiency. It's unlikely that DeepSeek found 100% of the efficiency gains available, so we can expect the cost of inference to continue to be volatile for some time to come.

It's difficult for any market to find equilibrium when price points move around that much.
Yes but that's only one tiny aspect of GDPR. Unfortunately this is an aspect where they caved in to corporate lobbying, they should have just mandated the obedience of the "do not track" flag (or a similar thing). That browsers set it by default is not a problem because the whole idea of GDPR is that tracking should be opt-in, not opt-out. But really this is a tiny part of GDPR. It is not just about the web even. And as annoying as the cookiewalls are, they also make the user more aware (I mean, why do you want permission to share my data with 572 "trusted partners"??). It also enforced some concepts that should already have been standard, like the purpose principle, explicit permission ("opt-in") etc.

It has really made companies much more aware of data handling. At work we have data protection officers now, privacy advocates, every app we onboard now has to be reviewed in terms of what the data is used for, where it ends up, if we have agreements with them in terms of what it's used for etc. This is really great because before we had pretty much nothing like that. It was just move fast and break things, including customers' privacy that would get broken. And our company is one that doesn't make any money from tracking our customers, so it wasn't really targeted as us, but it still drove so much improvement.

I think it will become much better now that we are disconnecting europe from US services. The main reason that tracking-informed ads are so much more valuable than context-informed ads, is that Google and Meta etc are promoting them. They control the auctions, and tracking is their moat. Nobody has such pervasive tracking networks as them.

The disconnection from these services could really be the trigger for an EU-based context-informed advertising service.
Peru being ranked higher than Colombia is laughable if you had lived in both countries
Learning s expressions and the evaluation rule takes about 13 seconds. It’s one of the very first things in SICP. Learning how to use the loop macro, well, I’m still working on that.
Win for Internet freedom: Google must sell its Chrome browser
Afaik Youtube cannot legally display ads to some countries' residents, it could explain this behavior.
Growing up in a country where every single adult I saw was essentially part of a corrupt regime with no change, it made sense to reform science right from the get go. Even if I did it somewhat stupidly. Had to recalibrate after coming to west where things are somewhat better.
PNAS still mentions the recommender.
Reminds me of when one exploded on a busy street in Taiwan, scattering blood and guts everywhere and leaving a horrendous odor for days/weeks: https://www.nbcnews.com/id/wbna4096586

> The 56-foot-long whale had been on a truck headed for a necropsy by researchers, when gases from internal decay caused its entrails to explode in the southern city of Tainan.

> Residents and shop owners wore masks while trying to clean up the spilt blood and entrails.

> "What a stinking mess. This blood and other stuff that blew out on the road is disgusting, and the smell is really awful," a BBC News report quoted one Tainan resident as saying.
I'd posit this is more knowing your user. Lots of photo editors/multimedia types use Macs, so it would only help GIMP if they offered Mac keybinds out of the box, or even mimicked the keybinds Adobe Photoshop has.
A small C++/Go/... proxy can do the same thing with much, much less overhead. Been there, done that - for something well-defined like this, it is more stable and less work than fighting mitmproxy.

Routing everything through the proxy will degrade performance even with SNI interception.

Same with pfSense - a plain Linux server and a simple iptables rules set would do the job without having to fight against all the pfSense abstraction layers.

Write a .proto file with just enough of the reverse-engineered proto fields to auto-generate code and flip the flag. Cheaper than the Python implementation and easier to update when the proto changes.

Ignoring unknown field tags is an important Protobuf feature - it allows for compatible schema changes without breaking existing deployments.
Very cool, but I wonder how far you get with something like this:

https://nl.aliexpress.com/item/1005004262524839.html
The problem is, that there is no alternative yet for that.

Movies are not an issue, there's piracy, music is not an issue, there's piracy, books are not an issue, there are libraries... and piracy, but youtube is still limited, and the only way to avoid the ads is to buy another device (computer), thus turning pretty much any smarttv (with features you paid for) into a dumb display (that you mostly cannot even buy anymore).
Just the other day I was discussing similar approach to remove political content from Reddit app.

On Reddit, all the subreddits are constantly bombarded with Trump/Elon/Political content and there is currently no way to mute that content on mobile.

It would be cool if someone can come up with a raspberry pi based system to do this for reddit.
As a (former) reviewer at 5 journals, I disagree first and foremost with the notion that

> We need some process to gate-keep.

Journals, when print was the medium through which academic research was disseminated, had to gatekeep because there were practical considerations regarding how many articles they could put in each issue. With online repositories like arxiv, this is hardly a concern anymore.

Someone putting a crap article on arxiv does not hurt anyone else, and I'm saying this as a person who recommended tons of articles to be rejected because they had atrocious grammar/spelling issues. Worst case, it gets 0 attention and is ignored by the research community.

Something not being published in a journal/conference proceedings clearly does not prevent it from drawing tons of research attention, as we saw in numerous cases like the Adam optimizer [1].

Which brings us to the second point: what even is the purpose of a journal now? The answer is that the sole function of a journal now is gatekeeping, with the presupposition that, as you observed

> The venue of publication is a good signal, whether the time to read a paper is well-spent

Except, well, top journals have tons of articles that get 0 citations too. Clearly the filter fails at this purpose as well. So, why gatekeep at all then? Because if we did not have some exclusive prestigious journal, the plebs would not be separated from the esteemed titans of academia with the biggest grants, most prestigious scholarships and diplomas from the most famous universities.

The only reason we need to gatekeep today is to feed the academic prestige and politics machine. If you care about the science, upload the goddamn PDF to arxiv , tell your colleagues about your research at a conference and let the scientific community decide on whether your idea is interesting.

[1] https://arxiv.org/abs/1412.6980
"farrow"/"pharaoh" is more than easily distnguishable - to me, the first vowel in these are nowhere even close to the same - I use "a" from "apple" for "farrow" and "ai" from "air" for pharoah, along with a contrast in vowel lengths, again like "apple" and "air".

EDIT: interesting grammar note - as a native speaker, I can't even decide if that should be "first vowel in these is" or "first vowels in these are" or what I actually wrote above which is what seems more natural to me, although immediately stood out to me as grammatically inconsistent when I re-read it after posting...
Unfortunately we don't have as many macOS testers so we tend to get less feedback. However, it looks like it's an issue in one of the dependency libraries - there's discussion at https://gitlab.gnome.org/GNOME/gimp/-/issues/12736#note_2372...
It's not really "big tech slavery", cmon. A large majority of bots on the internet try to fake their User Agent to pretend to be someone else. Unfortunately, your browser does the same. When they compare your browsers signature with the expected user agent and real user agent, they find discrepancy and flag your browser as suspicious.

The real solution is to only modify your user agent for the MS apps you have trouble with, and all your captchas will disappear.
You are not disadvantaged because you are not buying 5mm shares. I like to think of it closer to volume pricing rather secret pricing. You could definitely do retail level volume on a pool but you will be paying for it and that cost will generally be higher than any "savings" you may get in price.

Its similar to complaining that someone is buying eggs at wholesales prices while you are paying retail.
Crash: Germanwings A320 near Barcelonnette on Mar 24th 2015 (2025)
After 20 years of Ruby I didn't know (or didn't remember) that next can have an argument. I looked it up. Thanks.

BTW, I never liked the _N arguments. Too cryptic. They make me stop and think on details instead of just read the code and concentrate on the important stuff.

x.map {¦n¦ n + 3}.sum

is immediately clear but I guess that it's very subjective.
Any particular reason you can't handle incidents while out and about?

I know it varies by situation. When I've been on call I've been able to mostly go about my life. I just had to keep my laptop close, stay in cell signal, and accept I would sometimes have interruptions (typically brief). We fought to keep them infrequent enough that they didn't ruin our lives.
Also see https://european-alternatives.eu/alternatives-to
How do you solve the following problems?
1. Whenever you run a natural language question the result will be the same for the same question?
2. How do you teach an agent/LLM for the datamodel of the application that stores the data in the databases?
If it helps, I have a friend who still doesn't have a mobile phone.
Build, Scale and Succeed in a Day
This is one area where I'll actively discourage fragmentation of the existing ecosystem. Currently in the U.S. it's:

1) PawBoost
2) Facebook Groups (which PawBoost usually posts to as well)
3) NextDoor

Past that, the animal needs to be captured and checked for a chip. Having 10+ different apps to report lost animals essentially means there's zero point to posting to one in the first place, unless there is some distributed system they all would agree to operate on top of (maybe ATProto? idk).
You could have said the same about Ukraine. Assuming rational (even if transactional) moves from dictators seems naïve.
I realize it’s anathema to a lot of people, but you could just... pay for stuff. YouTube has an ad-free premium option.