skysight-inc/HackerNews huggingface dataset:
No, not nextcloud, it's the photos on my website. They are CC-BY-NC-ND-4.0 licensed, which genAI doesn't respect in any form.

I added these in nginx.conf:

map $http_user_agent $blocked_user_agent {
default 0;
"~*AI2Bot" 1;
"~*AI2Bot-Dolma" 1;
"~*Amazonbot" 1;
"~*anthropic-ai" 1;
"~*anthropic.com" 1;
"~*Applebot" 1;
"~*Applebot-Extended" 1;
"~*AwarioBot" 1;
"~*AwarioRssBot" 1;
"~*AwarioSmartBot" 1;
"~*Bytespider" 1;
"~*CCBot" 1;
"~*ChatGPT-User" 1;
"~*ClaudeBot" 1;
"~*Claude-Web" 1;
"~*cohere-ai" 1;
"~*cohere-training-data-crawler" 1;
"~*DataForSeoBot" 1;
"~*Diffbot" 1;
"~*DuckAssistBot" 1;
"~*FacebookBot" 1;
"~*FriendlyCrawler" 1;
"~*Googlebot-Extended" 1;
"~*Google-CloudVertexBot" 1;
"~*Google-Extended" 1;
"~*GoogleOther" 1;
"~*GoogleOther-Image" 1;
"~*GoogleOther-Video" 1;
"~*GPTBot" 1;
"~*iaskspider/2.0" 1;
"~*ICC-Crawler" 1;
"~*ImagesiftBot" 1;
"~*img2dataset" 1;
"~*ISSCyberRiskCrawler" 1;
"~*Kangaroo Bot" 1;
"~*Meltwater" 1;
"~*Meta-ExternalAgent" 1;
"~*Meta-ExternalFetcher" 1;
"~*OAI-SearchBot" 1;
"~*Omgili" 1;
"~*Omgilibot" 1;
"~*openai.com" 1;
"~*PanguBot" 1;
"~*peer39_crawler" 1;
"~*PerplexityBot" 1;
"~*PetalBot" 1;
"~*Scrapy" 1;
"~*Seekr" 1;
"~*SemrushBot" 1;
"~*SemrushBot-OCOB" 1;
"~*Sentibot" 1;
"~*Sidetrade indexer bot" 1;
"~*Timpibot" 1;
"~*TurnitinBot" 1;
"~*VelenPublicWebCrawler" 1;
"~*webmeup-crawler.com" 1;
"~*Webzio-Extended" 1;
"~*YouBot" 1;
}

and then in each site's config:

location / {
if ($blocked_user_agent) {
access_log /var/log/nginx/blockedbot.log ncsa;
return 401;
}

But it's far from perfect. For better results, https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blo... is probably better, but it was a tad too much for my needs.
A long time ago, a colleague and I visited a supplier in another state. While we were waiting alone in a conference room, we noticed an unusual looking note taking device at the front of the room. It was a very large easel that looked like a white board, with a tray of markers and an eraser. But it was clearly electronic because it had stuff attached to the top and bottom, some buttons, and was plugged in. We walked up to the easel, drew a large circle on it, and pressed what looked like a COPY button, curious how it was going to perform that task.

The machine whirred into action, scrolling the white board material (which turned out to be a flexible plastic-like film) over the top of the easel, and paying out fresh whiteboard up from the bottom. A perfect duplicate of our circle on paper spat out of a slot in the machine, akin to a FAX machine. As the scrolling came to a stop, it revealed a previously hidden drawing -- someone had drawn a large "X" in the middle of the page. I guess we weren't the only ones who were curious how the machine worked.
How does one email a database? With rare exceptions most mail servers have attachment limits of 16MB to 32MB. Just the schema alone could use up a chunk of the attachment limits. Is the title just oddly worded perhaps? Maybe they meant specific query results?

[Edit] Based on replies specific query results of two people names and dollar amounts into a spreadsheet. Poorly worded title on El Reg's part. Still a security privacy and compliance incident.
Who covers the PI in these cases?

Edit: noticed you said insurances, is PI included?
Just the default US English one it came with. Also tried https://addons.mozilla.org/en-US/firefox/addon/english-us-di..., but it was no better. It's much worse than the macOS or Windows default spell checkers, for example.
Piracy offers the best service there is. You used to be able to buy DVDs, vhs tapes, etc., and you'd get the media, and even then you had to sometimes fast forward through ads.

Now, it's impossible to buy media in many cases, even if you click "buy", it might be gone after a month, because some contract somewhere expires, there are ads even in paid plans, there are limits, to what I can do with that media, and more and more services require you to continue paying for content you already "bought".

When they fix the "buy" button to actually mean "buy", and when they remove ads from "no ads" plans, i might reconsider. Until then, they're not getting any of my money anyway, piracy or not.
I don’t understand this complaint in the context of YouTube. It’s the only major streaming service with plentiful new content that isn’t clickbait, focus-grouped, lowest-common-denominator, metrics-chasing trash. I can hop on and watch hours of jets flying through the Mach loop, people playing chess, and people machining metal. If those aren’t your thing, I bet there’s plenty of stuff that is.

Sure, there’s a lot of crap. But you don’t have to watch that.
You can create nuclear load so powerful it won't matter where it hits.
While I do agree with you, I am a bit concerned about the recent developments with "paid, but still has ads" subscriptions and how Youtube might slip towards such practices as well as soon as they have a large enough number of paying customers. Their premium might suddenly not be so... premium.
The USA is pretty behind in personal rights. Americans love to shout about freedom but don't realize how many rights we don't have that other countries do. Especially after 9-11 when we signed away a ton of rights.
Ugh I hate that as well! But unfortunately they have bought our politicians.

I’m hoping that after Trump both sides can bow up popular pressure to stop supporting them. In younger generations in both the left and right there is less star struck awe at the mention of that country, so I’m hopeful.
> we need a lot of drones.

I agree but for a slightly different reason. EU cloud is not about chasing AWS or GCP or Azure scale and complexity. It's about hosting our businesses and most importantly governments locally.

Thus, "cloud" is not an objective but a means to a goal.
Alternatives:

- Not consuming exploitative entertainment

- "Piracy"
Bit of a nightmare getting this elegant enough on a phone, and doubt anyone wants to draw ASCII digrams on their phone anyway, so not really a priority!
It's not that simple. It's common enough now to classify some ads as.... not adverts. So even if you pay for no ads, you get ads.
Looks like they already have the Gemini logo so integration should be simple

https://en.m.wikipedia.org/wiki/Wiz_(company)#/media/File%3A...
Radiologists are better at seeing through optical illusions
That's actually pretty damned good.
I've never heard an ad on Spotify, so this is true only for podcasts then, correct? In that case I can at least be thankful that Spotify is the worst option for listening to podcasts.
TIL that the kids actually use it [1], and it's in dictionaries [2] etc so arguably it's actually English.

[1]: https://medium.com/new-writers-welcome/unalive-the-birth-of-...

[2]: https://www.dictionary.com/browse/unalive

Edit: typo.
So it appears paying entrenched IP-hoarding organizations majority of your income further incentivizing their entrenchment is not the best business practice for a middlemen
"Piracy" of digital goods is an oxymoron... I don't think it's immoral. If you pay publishers, the creators don't get paid. And about the legality, well, just ask Meta what they think about torrenting.

EDITED for tone.
You know how to use Google, right?
You know that the Laffer curve has basically no empirical support, right? Like it seemed to apply at really high levels of marginal tax (75%+) but there's been no replication at any lower levels.

The only economist I still here talking about it is Laffer, for obvious reasons.
Mailbox.org is one I like

For a more business oriented replacement that can (mostly) replace gmail, google drive, docs, sheets, etc.. Zoho One is pretty good.
I never said X macros are bad on their own. With C++ you can code exactly as you would in C, but you don't have to manually implement C++ features when there's a need. C++ doesn't have any more problems than C, it's programmers who abuse language features that creates problems.
I don't use it all that much, but the one feature I wish I had was the ability to scrub forward or backwards at will on an Instagram video.
I started reading a great deal more at the start of the pandemic. I've kept it going since and it has been a real boon. I also switched back to physical books because I actually own them..
Tailscale makes this easier than ever to do. I'm looking to move most of my Lambda functions off of AWS and into KNative on my Kubernetes cluster at home.
Unless you also build the AI that buys and physically assesses these products, this will be gamed also.

With headphones it's especially bad as manufacturers tend to enshittify existing product lines (cheaper materials!) without indication on their product pages. I'm holding on to my DT990 as long as I can...
Isn't the main thing that trashes the battery fast-charging, which is eliminated by this scheme?
I bet it was an Excel file and he failed to password-zip it )
>allow foreign representatives of other EU nations to impose laws on us.

This is, of course, wrong. EU doesn't function like that at all.
Synthetic Data Paves the Way for Self-Driving Cars
Net profit was €1.14bn for 2024, which feels like a reasonable amount of money.
Exactly. Make it importable and i am sold.

Maybe base64 encoded metadata under the diagram? Maybe encode in non-printable characters?

Maybe just use non-printable characters to hint where the corners of objects are?
I think its more like trying to find the highest mountain in a range of mountains, except there's too much fog so you can't see how high other mountains are compared to the one you're on, so you can't tell if you're on the highest mountain until you've climbed them all.

A lot of the non-quantum heuristical approaches leave you isolated on one of a few mountains (local maxima), because simply climbing back down and hoping to find another peak is computationally expensive and you know it will lead to a lot of suboptimal solutions before finding something hopefully comparable or even better than your highest peak reached so far.
And yet you wanted to correct someone else, without ever having heard someone say it? I moved from California to Louisiana, and while my pronunciation / idioms used to get poked at in good cheer, I never deigned to correct the natives - "its the ten freeway, get it right, I should know, it starts in my state!"
I don't agree with the fact that touchscreens are necessarily cheaper everywhere: take cars as an example. If a touchscreen makes me more prone to car crashes, because I have to look at it more often than with knobs, in the end it costs more. May take a while to fully reach better interfaces. Sitting at my desk, otherwise, means I can look at a touchscreen.
That's complete nonsense. We are not storing passwords and passing around Excel spreadsheets of them!

We've worked on this stuff for years (this stuff being how to warn users about compromised passwords). You can go back to 2018 with our work with Troy Hunt on Pwned Passwords (https://blog.cloudflare.com/validating-leaked-passwords-with...), or our 2021 work on a privacy-preserving way of checking a password against a list of known compromised passwords (https://blog.cloudflare.com/privacy-preserving-compromised-c...).
I should have included:

---

Meta, however, is hoping to convince the court that torrenting is not in and of itself illegal, but is, rather, a "widely-used protocol to download large files." According to Meta, the decision to download the pirated books dataset from pirate libraries like LibGen and Z-Library was simply a move to access "data from a 'well-known online repository' that was publicly available via torrents."

To defend its torrenting, Meta has basically scrubbed the word "pirate" from the characterization of its activity. The company alleges that authors can't claim that Meta gained unauthorized access to their data under CDAFA. Instead, all they can claim is that "Meta allegedly accessed and downloaded datasets that Plaintiffs did not create, containing the text of published books that anyone can read in a public library, from public websites Plaintiffs do not operate or own."
While Meta may claim there's no evidence of seeding, there is some testimony that might be compelling to the court. Previously, a Meta executive in charge of project management, Michael Clark, had testified that Meta allegedly modified torrenting settings "so that the smallest amount of seeding possible could occur," which seems to support authors' claims that some seeding occurred. And an internal message from Meta researcher Frank Zhang appeared to show that Meta allegedly tried to conceal the seeding by not using Facebook servers while downloading the dataset to "avoid" the "risk" of anyone "tracing back the seeder/downloader" from Facebook servers. Once this information came to light, authors asked the court for a chance to depose Meta executives again, alleging that new facts "contradict prior deposition testimony."
Which is sadly bad. Those startups are vacuuming up the talent from IDF (unit 8200 for example), the co-founder of Wiz is 8200 alumni. The results are evident with a complete failure of intelligence on Oct 7. Head of 8200 unit was busy writing book about AI stretegy and recruits see IDF's cyber intelligence units as a spring board to startup world and not about dedicating themselves to protecting the country.
Is there not an alternative toImgur. It contains so much ads and other posts that I don't know which image I am looking at.
Isn't that how they "fixed ACA" last time around? Failed to have the votes to repeal it, so they "saved" it
I found O365 to be much better suited for Windows admins on large teams, IMO.
Repealing it requires congress.
This reminds me of https://en.wikipedia.org/wiki/Buffalo_buffalo_Buffalo_buffal...

Edit: It's not on the list because its using multiple meanings of the same spelling...
That can be blocked on your outgoing firewall, or if it's standard DNS on 53 use a NAT rule to force it to your DNS server.
Prompt Is the Intellectual Property
Quoting from that:

> At 100% of the 130 examinations analyzed, seized drug analysis was the examination with the highest percentage of Type 2 errors. It was followed by pediatric physical abuse (83% of cases had forensic errors with 22% having Type 2 errors out of 60 cases analyzed), fire debris not including chemical analysis (78% of cases/38% Type 2 in 45 cases), bitemark comparison (77% of cases/73% Type 2 in 44), pediatric sexual abuse (72% of cases/34% Type 2 in 64), serology (68% of cases/26% Type 2 in 204), shoe/foot impressions (66% of cases/41% Type 2 in 32), DNA (64% of cases/14% Type 2 in 64), hair comparison (59% of cases/20% Type 2 in 143), and blood spatter (58% of cases/27% Type 2 in 33).

Also this sample comes from cases where people were exonerated, which could cluster around poor quality police work in general. And is US-based where policing is all kinds of messed up.
Public money, public factories?

There is nothing public, just free money for the private sector.
The criteria for my list is that they are taken from real life misspellings, mostly from facebook or youtube comments but also from news media. I have noticed that a lot of people don't bother to consider the proper spelling of words but rather they just spell a word however it sounds to them. So apparently some people pronounce these words the same. Feel free to make your own list of multinyms that fit your own criteria.
The funny part is that not having any Unicode support in this part of the code and treating the data as ASCII (plus mistery bytes) would have worked correctly.
USMCA was NAFTA, which Trump was against before and then supported it after the rename. Only the name changed, the treaty did not.
> This is also an uncomfortable direction. All investors have been betting on the application layer. In the next stage of AI evolution, the application layer is likely to be the first to be automated and disrupted.

Highly agree with the sentiments expressed in this post, I wrote about something similar in my blog post on "Artificial General Software": https://www.markfayngersh.com/posts/artificial-general-softw...
Netflix shows ads to paying customers. We've seen the same playbook across a wide variety of products and services, it's only a matter of time until paying users get milked too.
As follows: The distribution of already existing traits, changes pretty fast (20-50 generations is fairly much) when the environment and evolutionary pressure changes.

And, large parts of the planet, haven't been invaded and the men killed, women raped, the last hundreds of years, in some places not even the last thousand years. Then, violent traits (reproducing by killing all men in the tribe nearby, raping the women) start fading away. (Not noticeable in a single lifetime though)
It's strategically important
Apple do have a standard player, but streaming services reinvent their own.
The post is telling young researchers to ignore the main reason they went into research - scientific discovery (what the author calls "Science 1") - and focus on playing the academia prestige pissing contest game ("Science 2") in a cynical career optimization move.

Academic politics always existed of course. We should not be under any illusions that the greats of the past just wrote their manuscripts in isolation. However it was not an industrialized machine like it is now, and incentives are misaligned in academia to such a degree that the machination of academic politics killed the reason why academia exists in the first place (scientific discovery).

To advance in the academic cursus honorum, one goes to a presitgious undergrad to go to a prestigious grad school, so you can get a prestigious postdoc grant, so you can get a tenured position at a prestigious institution, so you can get a fat and prestigious government grant, which you use to hire bright young students who want to do the same. Note that scientific advancement does not play a role in this cycle, it's actually safer to pursue incremental and irrelevant improvements which you get published through thanks to the connections you made throughout your prestige optimization career.

As a result, academia has produced no notable scientific advances in a long time. It has instead evolved into an organism which selects individuals that excel at funneling money into itself under the guise of doing science while not necessarily doing science (though it incidentally occasionally may).

The kind of behaviour the author is promoting is telling individual prospective grad students you're small, the academic politics machine is so big, yes we all know it's a farce but you just need to suck it up and play the game. In doing so, the prospective grad students will strengthen the machine that is actually killing the very thing they want to cherish and promote, in the hope that they receive a few scraps in return.

(Writing all this as a PhD and former journal reviewer)
> but youtube is still limited, and the only way to avoid the ads is to buy another device (computer)

YouTube premium is cheaper than another computer and works on all devices.
I think there were (and are) attempts of replacing at least the desktop systems with some variant of Linux but I think the dependency on Office remains the main problem in doing so - Windows lets you integrate all that pretty seamlessly with how the system works and is administered.

China is probably much more aggressive in this than Europe as for them the US has been a rival (or even enemy) for a long time.
Not sure but the price tag of each roll was about $1,500. So I think it was a 1000ft spool.
That would put a wrench in whatever weird contrarian play that keeps getting OP banned.

I don’t know why I even engaged. Haven’t had my coffee yet.
Sounds like good technology / business practice?

I run two independent (Technology + Provider wise) internet links for our house, as both my SO and myself are permanently working from home.
> I don't think Spotify makes much, if any, money

per their financial statements, about 150Mio in operating profits per quarter. Gross profit of 1.000Mio per quarter.

I'd like to have that kind of "not much money"
I mean, I think there's a difference between trusting GitHub and trusting third parties. If I can't trust GitHub, then there's absolutely no point in hosting on GitHub or trusting anything in GitHub Actions to begin with.

But yes I do think using tags is problematic. I think for one, GitHub should ban re-tagging. I can't think of a good reason for a maintainer to re-publish a tag to another commit without malicious intent. Otherwise they should provide a syntax to pin to both a tag and a commit, something like this:

`uses: actions/checkout@v4.5.6@abcdef9876543210`

The action should only work if both conditions are satisfied. This way you can still gain semantics version info (so things like dependabot can work to notify an update) but the commit is still pinned.

---

I do have to say though, these are all just band-aids on top of the actual issue. If you are actually using a dependency that is compromised, someone is going to get screwed. Are you really going to read through the commit and the source code to scan for suspicious stuff? I guess if someone else got screwed before you did they may report it, but it's still fundamentally an issue here. The simple answer is "don't use untrustworthy repositories" but that is hard to guarantee. Only real solution is to use as few dependencies as possible.
Hero John McCain saved it
That's that rhotal R in yaw? Like how I purposefully say "strawrberry"?
Reminds me of the case of David Butler.

"Mr Butler has a rare skin condition, which means he sheds flakes of skin, leaving behind much larger traces of DNA than the average person. He worked as a taxi driver, and so it was possible for his DNA to be transferred from his taxi via money or another person, onto the murder victim."

https://www.bbc.com/news/science-environment-19412819
So I searched for "NAFTA USMCA difference" and there are a lot of articles that describe the differences.

I agree that Trump sometimes exaggerate stuff, but that does not mean that there is nothing is there.

I think It is very dishonest to claim that all the current administration is doing is just continuing what the previous ones did, but with changed names.
Yes, what's good for the goose is good for the gander after all or - in Dutch - 'Gelijke monniken, gelijke kappen'.

Say, mr. complain-about people calling for comment equity (everybody can play this game), I'd be interested to hear whether you agree or disagree with what I wrote, both here as well as the previous times you complained. Instead of going ad-hominem the discourse here would be improved by trying to get to the core problem, that what lies behind the smouldering fires in western politics. That core problem is the intense polarisation which pits the 'good' side against the 'bad' one - where 'good' and 'bad' depend on which side you're on - instead of the realisation that we're mostly on 'our' side and might want to settle these petty disputes so we stand a chance of first of all standing at all instead of lying down and second standing our ground here in 'the West'.
From case witness testimony https://storage.courtlistener.com/recap/gov.uscourts.nysd.63...

12. The forensic analysis also revealed that Elez sent an email with a
spreadsheet containing PII to two United States General Services Administration
officials. The PII detailed a name, a transaction type, and an amount of money.
If you want to prevent MitM modification attacks, the way to do it is to sign the data. Trying to do it by making the serialization format less forgiving isn’t the right approach at all. It still has to be pretty flexible. It’s going to be pretty hard to come up with a format that cannot possibly be altered to make the client show no ads. Something like certificate pinning is way easier.
They got rid of the much hated, terrible, corrupt, illegal Obamacare and replaced it with the much loved and wonderful Affordable Care Act.
Was national security impaired four years ago before the CHIPS Act?

That said I like the CHIPS Act in principle. We should have real industrial policy.