skysight-inc/HackerNews huggingface dataset:
> aggressive trust-busting beyond what the DOJ has done historically, including vertical integrations.

Vertical integration was a huge part of what they went after historically, until a bunch of people "convinced" the US that the standard should be "consumer harm." The cool thing about consumer harm is that you can come up with any bullshit argument about how prices will go down and access and quality up in the future from some merger, and nobody can disprove it because it's a counterfactual (he said, she said.) And when prices go up, it's just <shrug>, who could have known?

I know what vertical integration is today, though. It's not a hypothetical, it's a selling point to investors. I can just tell you no. Any clear metrics or standards for antitrust action can't be tolerated. The goal is to force us to go on vibes. Then they say we have bad vibes.

Competition brings down prices. Laissez-faire leads to pseudo-Communism with royal families, courtiers, and technicians making up the top 10%, and everybody else gets to be a (debt) slave i.e. feudalism.

We should err towards breaking more things up than would be ideal, not less. If I make you divest from something, you sell it and get whatever future value out of it today. It's not a punishment according to SCOTUS when they're looking at TikTok (which is why they said the TikTok ban wasn't a bill of attainder.) We charter these companies, and they operate for our benefit, which is why we grant them limited liability and a whole bunch of other treats. What you divest is going to go to somebody just like you, but someone who is not financially entangled with you. The only reason you want to keep it all is to do things that I don't want you to do with it, I don't want you doing unproductive market manipulation, I want you to put that energy into competing.
> Anything that is not an expression of pure, unqualified support for whatever they are doing or saying is received as a mark of disrespect, and a provocation to conflict.

Don't you dare try to weaken my hatred with nuance.
I’m not sure I get it. Can’t you just look at it yourself? It seems pretty real to me.
If I'm reading that right the Battery Electric busses had the lowest maintenance costs? The need to charge is a potential issue, but at the same time busses do lots of low speed stop and go where battery systems are most efficient. As long as the bus has enough capacity for an entire day and can be recharged overnight it seems like an ideal solution, minus of course the up-front cost of the bus. Lower fuel costs, no noxious pollutants, less noise, lower maintenance, there is a lot to love.
> What in the world does it mean that a 3 year old is smarter than an LLM?

Because LLMs have terrible comprehension of the real world. Here's an example:

> You: If you put a toddler next to a wig on the floor, which reaches higher?

> ChatGPT: The wig would typically reach higher than the toddler, especially if the wig is a standard size or has long hair. Toddlers are generally around 2 to 3 feet tall, while wigs can range in size, but many wigs are designed to be worn by adults and have hair that extends well beyond a toddler's height. So, unless the wig is very small or short, it would likely reach higher.

Both the toddler and the wig would be lying down (unless the toddler can stand already), with the wig likely collapsing into a very flat heap, making the toddler "reach higher". Since it lacks comprehension of how these things behave in the real world, ChatGPT goes on about length of the wig and the average height of toddlers, which are both qualities that are not even relevant.

If you could communicate this problem to a toddler, they would probably intuit it even with their still limited understanding of the world.

Here's another fun prompt to mess with LLMs:

> You: I'm trying to make a rope, made of only aubergines, not using any twine or string. What kind of knot would you recommend to tie together each aubergine with the next? I'm trying to use up as little of the length of each aubergine as possible.

It's obviously impossible nonsense if you ask any human, but ChatGPT will happily recommend you some techniques for tying aubergines in a knot.

And if you really want a laugh follow up with:

> You: Are they the worst fruit for this?

> ChatGPT: Aubergines (or eggplants) aren't ideal for making a rope, but they might not be the absolute worst, either. [...] Potentially Better Fruits: Apples or Pears: These fruits are firmer and have a smoother, more uniform shape, making them better suited for knotting.

Thanks to the large corpus of text ChatGPT is trained on, it's really good at hiding that it has basically no comprehension of the real world, however if you go unconventional places the illusion quickly breaks.

Bonus round:

> You: You're clueless about fruit!

> ChatGPT: Haha, fair enough! Looks like I missed the mark there. You’re probably right, though—there are definitely better fruits for this kind of thing than I suggested. Let’s try again. If you're looking to make a rope from a fruit specifically (and not a vegetable or tuber), something like coconuts or durian would be way better options, since they’re harder, more rigid, and can handle some tying pressure without collapsing. And apples and pears would definitely hold up well due to their firmer texture.

Coconuts!
So that brings a question. Let's say you're consultant (and the only senior consultants where I work are salesmen), and you're 42. How do you advance while remaining technical? I don't mind very occasional sales efforts, but not constantly.
They'll demand half of Google's rare earths deposits
Their coverage of Gaza and Israel has been the deepest hit to their reputation.

The ratio of “college hate speech” to coverage of Israel’s targeted and mass war crimes has been unbelievable. I’d be deeply ashamed if I worked there.

(Putting aside that this apartheid has been going on for far longer, of course, without consistent coverage.)
You can pin GitHub Actions to specific versions or specific commits. But note you can change version tags arbitrarily. In this specific case, the bad actor changes all of the version tags to point to their malicious commit:
https://github.com/tj-actions/changed-files/tags

So to avoid that you'd have to pin your GitHub Action to specific commits as outlined in this SO post:
https://stackoverflow.com/a/78905195
> Google does not understand how to design software safe for them

The only way to design software safe for Idiots is to design software where it is not possible to make a mistake, not possible to have an accident, and not possible to compromise anything even on purpose.

Unfortunately, non-Idiots don't tend to appreciate that kind of babyfied experience, so we tend to end up with some compromise where the things that Idiots will inevitably mess up should ideally be the least consequential possible things that can also provide some sort of value to non-Idiots.

As a result some of the more advanced experiences that are entirely inappropriate to grant Idiots are simply not available, because if they were, then Idiots would find a way to cause really bad accidents.
> but that Biden didn't feel like threatened by an investigation from the Biden administration

He perhaps didn't feel that way because he didn't lie under oath about having said documents.

The same sworn statement the FBI gave to the judge before getting a search warrant for, y'know, the president's private residence.
> You also need to block write access, so they can’t encrypt all your files with an embedded public key. And read access so they can’t use a timing side channel to read a sensitive file and pass that info to another process with internet privileges to report the secret info back to the bad guy. You get the picture, I’m sure.

Indeed.

One can think of a few broad capabilities that will drastically reduce the attack surface.

1. Read-only access vs read-write
2. Access to only current directory and its sub-directories
3. Configurable Internet access

Docker mostly gets it right.
I wish there was an easy way to run commands under Docker.

E.g.

If I am running `fd`

1. Mount current read-only directory to Docker without Internet access (and without access to local network or other processes)
2. Run `fd`
3. Print the results
4. Destroy the container
What's the alternative? Threatening Gecko developers or contributors into quitting their work on Gecko and demanding they work on Blink or WebKit instead?

Some of us passionately hate Google and Apple for their unethical business practices and would rather cease OSS contributions altogether than contribute to these tyrants.
There isn’t a business model for a company whose product is just chrome, though. Unless it’s some kind of foundation or non-profit with a sufficient endowment to not need a business model.

I’m no fan of Google, but—unless people really want browser subscriptions—I don’t see how you can have a browser company today. They exist better as a byproduct of some other business model.
Why? It is the archivey bit that gets you in trouble, not the oniony bit.
What other pictures are you thinking of? I don’t recall any rovers since china’s (?) last year.

These pictures in particular are taken from a very high altitude, which may explain why they look unnatural?
We are already on the path to have the grid converted to majority green energy over the next decade. Solar is by far the largest of New deployments and growing annually.

Grid batteries are just starting to scale up.

These are cheaper than any other option by far, with the shortest payback period.
Did you read that issue? It's Moxie that refused to support it
CSS-Only Syntax Highlighting
"Development slows" is not necessarily a bad thing. E.g. quite a lot of people would love development to slow wrt Manifest v3. It would also mean that web standards are less of a moving target for browsers playing catch-up (like Firefox).

People can also pay for browsers. The only reason why this isn't feasible today is because it's hard to compete with the top-of-the-line stuff that megacorps offer for free - which they do precisely so they can maintain de facto control over web standards (or force the lack thereof in areas where this is advantageous). Lest we forget, many early web browsers were paid products (not just NN, but also Opera, for example), and Microsoft's original sin as a monopoly was offering IE for free, against which NN couldn't compete. But if Google is forced to ditch Chrome, and Microsoft is forced to ditch Edge...
Investment disclosure?

Forcing Chrome to display a search engine choice doesn't even begin to solve the issue. Chrome spies on you regardless, and it also banned UBO and other ad-blocking extensions. It is a product made to deliberately spy on and harvest more data from you.
You neglect to mention "for 30% of the pay". And that's in western Europe. Except perhaps Luxembourg, where you might actually find 50% of US pay.
The acronym is done, BigTech has been easier to use for a while.

I would rank MS the worst with Google in second place. But the advertising company currently has a lock on our schools, which I find unacceptable.
At least Safari has better privacy concern than Chrome. Let's see if Waterfox can substitute Firefox in the long run. I believe MS Edge will happily replace Chrome.
Yeah, true. I meant sitdown restaurants.
lmao lemons are for sure comparable to aspartame /s
Very cool.

How does it work when multiple installed MCP servers have overlapping functionality? Are MCPs going to have competing prompts saying for example they’re the best to choose for OCR etc?
Perhaps as coding becomes commoditized by Agentic AI, or whatever it evolves into, these types of problems in infrastructure too will become easier to maintain.
Presumably the cracker:

1. spoofed an account whose PRs were auto-merged (renovate[bot])
2. found that `index.js` was marked as binary, and knew that GitHub is "helpful" (for the exploit), and hides diffs in the PR for that file by default
3. shoved the chunk of base64 wayyyy down the commit, so the maintainer had review fatigue by the time they scrolled. Having "memdump.py" in the commit in plaintext would certainly highlight the exploit more than the b64 string.
The author is correct on this:

"Not so with the web. The web is a set of protocols and languages and file formats[...] Google, by virtue of having Chrome, invests heavily in the web itself"

Without a company like Google which functions like a public steward for the web there's little reason for anyone else to drive web development. The competitive market logic doesn't incentivize an open ecosystem because by definition there's no profit to be captured in it, it exists if you will because a benevolent player maintains it and makes money elsewhere.

An analog to this would be if you'd judge Red Hat's dominance in the commercial Linux space the same way and forced them to divest from the operating system market. There would be nobody stepping in, because there's no money in linux itself. It exists by virtue of a entity making money on adjacent markets and all the linux development happens because it's beneficial for them to drive adoption.

The only real alternative you could propose is straight up public funding, but a balkanized market is by its very logic not going to maintain the web, but vertically integrated alternatives, i.e. apps. It's something you can btw see in China which due to timing happened to leap frog over the open web and search and went straight to the hyper-competitive and for that reason proprietary world of platforms.
With all due respect, "Unsecured loads without collateral" sounds very scammy.

As far as instant loans go, I can walk over to "Jumping Jack Cash" and get an instant loan, or write a post-dated check any time.
You’ve got a monopoly on lemonade because you pay all the grocery stores to be the default lemonade.

So we’re going to force you sell your car.

I don't think this is an accurate anaology. It's more like, you own the vast majority of grocery stores, and you make lemonade, and you force all the other grocery stores to only sell your lemonade.

To put it another way, the problem is not so much that Google shouldn't be paying to be the default search engine, but that it shouldn't own both the browser and the search engine.

I think this harkens back to the anti-trust court case, United States v. Paramount Pictures, where the court ruled that the film studios cannot hold monopolies over the movie theatres, and that theatres must remain independent.

Similarly, browsers and search engines being independent is good for competition because the internet is too important to let a single company dictate how it is used.
Whoa, slow down there. You can't just go around asking people to read first-party sources and think critically on their own about an issue without getting their opinion from their feed or influencer of choice. That's an unreasonable and insane expectation! /s
It's far more than "slightly better." It supports full resolution content, longer messages, and reactions/interactions. For most people it's indistinguishable from iMessage/etc.

Do you really think that phone numbers aren't already a ubiquitous identifier? That is done. Nothing you're saying is changing because of RCS.
I called it:

https://cedwards.xyz/github-actions-are-an-impending-securit...
Orion is Kagi's browser :)

Yes, I'm very impressed by their extension support!
It is likely that new models had higher costs, including maintainers becoming familiar. Long-term, electric is unquestionably cheaper to fuel and maintain, assuming they are built to the same standards and scale as outgoing diesel models
In the event that the TN visa is scrapped, what would likely happen to current TN visa holders working in the US? Would there likely be some grace period?

Furthermore, supposing that no equivalent to the TN visa is proposed in its place, what would be you recommend to these TN visa holders?
I don't care in principle, but it's not just that. You have to give your serial, you have to boot the TV to the update, which then sends a challenge-response to their servers that must be correctly answered (you use your computer for this, so the TV isn't actually on the internet) for the upgrade to proceed.

I don't know what's in that data. And if I don't know what's in it, I'm not inclined to proceed; you might need my serial number to know if you're giving me the right software, but you don't need challenge/response for that. They sold me a cheap TV in hopes of collecting info on everything I watch, whether via Roku or just screen analysis. No thanks, and I have no interest in making it easier for them to break into my WiFi. I'm sure it would connect itself automatically to an open WiFi.

It's a little paranoid, but they really are out to get us (or at least our data).
I mean maybe! But only if you've removed all of the usage of this compromised `tj-actions/changedfiles` action, across all your repos and their branches.

Otherwise, if you continue to use it and it will run anytime there has been a push. Potentially on any branch, not just `main`! Depending on your GH config.

Unless you've blocked `tj-actions/changed-files` you're banking on the bad actor not coming back tonight and making malicious commit that exfils those secrets to pastebin.com.
The way they aggressively push Chrome on Gmail users with "Google recommends using Chrome" popups is enough to make me think this is exactly what needed to happen.
I don’t know about Russia but China spends on stuff that’s similar to foreign aid but they categorize it differently, and explicitly expect a return.
Here we go again...

TLDR; claim is Craig:
https://en.wikipedia.org/wiki/Craig_Steven_Wright
Everyone should be able to own a home, not just tech workers.
I Slept on a Medieval Mattress for a Week
I’m in California and there is a take out only Dominoes near me.

The first In-n-Out had no seating or parking.
huh, i've never heard of openai-whisper. I certainly didn't mention it in my first sentence.
If your trading partner has the ability to manufacture something with a better cost structure than you can, say, because they have iron ore mine, a smelter and a gigantic hydro electric dam all in close proximity to each other, then you get a benefit from buying their cheap steel and performing the higher level manufacturing to convert that raw steel into goods that you can sell to other markets.

Now, if you self inflict 25% tariffs on that steel, you'll have to find other more expensive steel to replace the cheap steel previously imported from the neighbour. Maybe there's nowhere in your country that has the same confluence of inputs required to make steel as cheaply as your trading partner did. Now you've got a permanent cost disadvantage.

Or maybe you're just not willing to spend $20 billion to build a giant hydroelectric dam that gives you a cost advantage. How many decades of lost market share are you willing to give up before you think you might come ahead?

Thinking that trade is always zero sum is bullshit. There are benefits outside of the balance sheet of goods moving across the border.

How long do you think that other countries will wait until they decide to start taxing electronic services that the US sells so much of? Do you really think the short term gains of going after smelting steel are worth losing that market share? Blocking Google and Facebook is not all that hard to do.

People who peddle ideology love to sell complex problems as having simple solutions. Well guess what: we've built a society that is so complex that nobody understands how everything interacts. One thing is certain: everybody's going to hurt.
You can read the comic that explains some of the reasoning here: https://www.google.com/googlebooks/chrome/big_00.html

IIRC one of the biggest reasons was a single misbehaving tab in Firefox being able to take down the whole browser.
I can’t speak for the original commenter, but I predicted 4 years ago that Trump was done in politics because the American people wouldn’t stand for a riot in the halls of Congress. Now that he’s back and the rioters are pardoned, I’m listening more closely to the people who predicted that would happen, and they uniformly say there’s a small but significant chance of a collapse.
Or a door revolves?
Exactly, this is my question as well. I was just thinking about it and thought although it's kind of silly, Google paying them (the newly-divested ChromeCo) for search engine default status could be a primary source of revenue.

I'm actually kind of curious about that as an option. Right now the distortion that makes Google any 800 pound gorilla is their leveraging of Chrome to channel users into their various monetized ecosystems.

But there could conceivably be an interesting form of parity that comes from the browsers all depending on the same form of revenue, search engine placement. I haven't fully thought this through, so I welcome corrections. I suppose Google could quite easily give favorable treatment toward ChromeCo and effectively continue to flex its monopoly muscle. Google will need them just as much as before. I'm honestly just not sure.
Good work if you can get it. That is partly how the politicians and their friends and family get in on the grift.
1) No. 1 spam email once per... 2-3 weeks. And Mox, which I run, comes without any spam filter.

2) Perhaps sometimes. The Mail-tester shows, nonetheless, a rate close to 10.

6-7 years or running my own email

And now compare this to one downside of the likes of gmail: one day you may get locked out of your email.
Does anyone know if https://github.com/tj-actions/verify-changed-files/ was compromised as well?
It costs over $200M per year. That's a lot of paying users.
Steam in an unpressurized pot and boiling water are both 100 C. It seems like anything that would disturb the temperature of the boiling water would have a bigger effect on steam since the steam has less mass. What am I missing?
> how to configure the official Microsoft static files extension.

There is no extension. Static files features ship out of box.

Configuring them is well-documented and usually takes 1-5 LOC: https://learn.microsoft.com/en-us/aspnet/core/fundamentals/s...

I agree that MVC is overabstracted. Please do not do un-cached reflection on each request however, thanks.
Briar started in 2011: https://sourceforge.net/p/briar/mailman/message/27393146/
Who is trying to do that?
I can't parse what you mean by "China and Russia whose GDPs are far larger". Larger than what? China's GDP is about 3/4 that of the USA and Russia is about 1/10th.
> Cementing the use of phone numbers instead of email addresses as the primary identifiers in people's digital lives

From my experience RCS is just a backup/temporary holdover system to keep SMS usable as is, since people are increasingly using regular chat apps like WhatsApp. Plus as long as spam/identity is a major issue then phone numbers will be a part of verification systems. They will use anything they can get to make it harder to abuse. Whether the root ID is phones or not doesn't really make a difference if a phone number is required at some point to use a service.
Yes, it's already largely done, but that doesn't mean it was a good idea, so why cheer moving into the same bad direction just because there's now finally a baseline of security?

It's also anything but indistinguishable from iMessage. I can use iMessage on any number of devices without my phone having to be turned on, having the SIM with my number on it inserted, and being connected to the Internet (not always a given when traveling etc.)

The same is true for WhatsApp. Even XMPP could do it 20 years ago! This is not a new niche feature – it's absolutely essential for a modern instant messaging protocol!