skysight-inc/HackerNews huggingface dataset:
> If this isn't monetized, is there any reason against opening its source? I personally would like to be able to disable the usage analytics and crash reports.

Although I personally deplore it and try to stay away from software that requires it, or even opts me in, I nonetheless think that it's reasonable for a developer to impose telemetry as a requirement for people to make use of their freely available software.
If Google truly cared about privacy, each app would run in its own strict jail, and permissions would be faked by default. Also, easy malware by Israel or anyone else would not be a thing. As it stands, apps know everything I am doing, and I get targeted spam email rather immediately.
> I don’t even know where to begin unpacking this madness. How is knowing whether I have the Xbox or the Playstation app installed on my phone essential to their Swiggy's core functionality?

Probably has to do with feeding adtech's hunger for personal information, or fingerprinting maybe (not sure if that's a thing in the context of phone apps).
FYI: a kernel patch to run exes isn’t needed. binfmt_misc can handle this, and wine-binfmt already exists to automatically run PE files through Wine.
This doesn't seem nearly as nefarious as the post from earlier this week indicated... I had expected a full supply chain compromise or something that bad based on the earlier post.
It's not clear to me how these are dark. You aren't being tricked, and all of these traits might be in the game client itself as well (game could phone home, auto update, fail to auto update, be slow, etc)
BananaPi R4 + some storage + OpenWrt + native packages and Docker for everything that's missing from native packages.
To make it less abstract than the argument that it costs "delta v": it's a bit like asking, what if this rock I placed on the floor impacts a nuclear plant one day? It requires energy to move there. This change in velocity, making something drop from orbit by itself, happens across months~years for only the lowest orbits around the earth, caused by stray particles from our atmosphere impacting the spacecraft/satellites there, but at L2 that's afaik not a factor
Note that this also underlines that the post's premise of Windows having a simple stable ABI - win32 sure is stable, but that's not what applications are coded against anymore.

Sure, you can run a 20 year old app, but that is not the same as a current app still working in 20 years, or even 5.
But Cube World wasn't a crafting or mining game; rather, it was an open-world Zelda-like ARPG, with a lot of progression from randomly-generated gear. The voxel size is smaller, and voxels are untextured, resulting in a 3D-ified pixel sprite look.
That doesn't prove anything. Allocating a second 30GB chunk and seeing the power go up another Watt would be more convincing.
You're afraid of the launcher spying on you, but not the actual game?
A number of manufacturers offer soundproof 19" rack enclosures, but they are heavy, bulky and not especially cheap.

https://www.rackmountsolutions.net/24u-ucoustic-soundproof-s...
Information in top isn't much of a secret though.
In Copenhagen (Denmark) we have them in every apartment building. There's a bin for batteries, and a cupboard for other hazardous waste.

I'm not sure if every house has one, or if they're just in a few places along streets with houses, but there is some system for it as I've seen the red boxes.
That’s exactly the thing the author is calling people “naive” for.
Not sure where in my comment I said proprietary?

I just means we take RFC 821 and RFC822, then everything build on top of that flaming tire fire and send it into an orbit directly into the sun, and replace it with new open protocols that weren’t designed when the internet was a trusted network but with layers and layers of crust stacked on top in order to mitigate its shortfall
Just wow. I assumed that Google patched this few years back but guess they left a few backdoors.
Fairly simple for the end user, not simple in its implementation.
AI professor here.

Anything that can separate data apoints can rightly been seen as a "supervised machine learning classifier".

Todemystify the area, I literally introduce my intro to ML lecture by drawing a line on the board, give its equation y = 0.5 x on the backboard, reminding students that they already know this, and then explain how to use it as a spam filter by interpreting the points on either side of the line as good emails versus spam ones.
> So what?

Put simply, it's a wall of links. No quotes. No claims. Its valid to ask if the person posting the links has actually read those articles, or if there is a primary source recommending them. (Or no source if it's LLM copypasta.)
Ok, so I take from this that it uses pixel buffers directly, and has no opengl support (which would allow GPU acceleration).
Somewhat bizarrely, it appears that they at least partially correct. US Immigration and Customs Enforcement [1] and US Customs and Border Protection [2] are somehow two completely separate agencies, both under the Department of Homeland Security. My understanding is that CBP handles customs at airports, so it may be they initially detained her, but then apparently may have transferred her to ICE?

[1]: https://en.wikipedia.org/wiki/U.S._Immigration_and_Customs_E...

[2]: https://en.wikipedia.org/wiki/U.S._Customs_and_Border_Protec...
Maybe not talking about politics is a problem. Like how we all started talking about salaries when we weren't supposed to and now we have a better sense of what our worth is in the job market.

If no one talks about politics, no one gets challenged. Maybe that used to be ok, but now we can retreat to pseudo anonymous communities online or consume algorithm suggested content that only reinforce or create more extreme positions.
You can, and people do.

There are a slew of HDMI extension systems, some that even use ethernet with hardware encoding/decoding. Grandparent commenter hasn't worked in the industry in at least a decade if they're talking about DVI.
> Why did many European countries discontinue fluoridation?

Could it have something to do with the increasing use of fluoridated toothpaste?
I have skimmed it, and it looks very good. It is actually not solely about matrix calculus, but shows a practical approach to differentiation in different vector spaces with many examples and intuitions.
So it's precisely the opposite. Wonderful. I suppose I shouldn't expect anything different, after a few decades of seeing these opposite interpretations arise in parallel.
From the article - Facebook, Instagram, Snapchat, Subway Surfers, and Truecaller use this too
Why would you read it if you have not finished it sorry I should have put spoilers, great show I loved it.

But hey I was just playing with my imagination connecting some dots while watching a video.

I wrote it one year ago and suddenly said leme post it on hk because why not.
EKF is a neural network!?
Vulgar Display of Power
In 2005 the hot new Windows technology was .NET Framework 1.1 or 2.0. You can't just dump Framework 1.1's libraries next to the binary and expect it to work either, it needs to be installed properly.
It's Dig Dug all the way down...
The UK has the 21st-highest population of all countries. It's hardly 'tiny'.
I find that people tend to overestimate how long it takes to install Arch just because it doesn't have an installer by default. I've seen people with very little Linux experience get it up and running in less than 30 minutes.
I accept that anything windows is spying on me.

But I expect to play the game, when clicking the game icon. Not being thrown in to a launcher waiting for me while I then thrown advertisements for their next game.

Take a look at EA Origin, it's horrific. It updates then the whole launcher implodes with some alien error code like as one of a printer.
Hey guys we commented on another thread from a few days ago about our tool Bismuth finding the bug (along with a sha of our reproducer script for proof) https://news.ycombinator.com/item?id=43489944

The reproducer is linked in the post.

After disclosing and having correspondence with Gerlof and from the post on the front page right now https://news.ycombinator.com/item?id=43518560

It looks like we did in fact nail it and I've just shared our write up above on how we got it.
Do not come to the US to study in this climate. Google “tufts student detained.”
Lots of legitimate sharp edges here using Cursor.

Claude's CLI tool and aider are my current two best of the best, and they absolutely are capable of doing some of what he discussed. They, like any tool, have their quirks. aider's claude usage is much cheaper than claude CLI, but it needs more prompting around what to write and what not to with 3.7; 3.7 is overeager. Claude CLI is crazy expensive. And I wish I could use it with gemini 2.5.

I think of it like this: the best tools currently let me be a PM most of the time, a senior engineer when needed, and occasionally force me to be a junior engineer to fix shit. The percentage of time I can go up the stack only keeps increasing month on month.
Maybe not this game but it always ends that way.

Example: EA Origins. Atrocious launcher.

No one can seem to answer why does the game need a launcher?
> that gets executed by the OS

Do you see the problem here?

Which ACPI table do you expect to be used for delivering malicious executable code?
It's a good point that older hardware is less diverse. The dizzying number of SKUs with different pinouts, different voltage requirements, etc., is potentially a real barrier to salvage. I have a 68000 and a bunch of PALs I pried out of sockets in some old lab equipment; not even desoldering was needed. And it's pretty common for old microprocessors to have clearly distinguishable address and data buses, with external memory. And I think I've mentioned the lovely "external access" pin on the 8048, 8051, and 80C196 family, though on the 80c196 it's active low.

On the other hand, old microcontrollers are a lot more likely to be mask-programmed or OTP PROM programmed, and most of them don't have an EA pin. And they have a dizzying array of NIH instruction sets and weird debugging protocols, or, often, no debugging protocol ("buy an ICE, you cheapskate"). And they're likely to have really low speeds and tiny memory.

Most current microcontrollers use Flash, and most of them are ARMs supporting OCD. A lot of others support JTAG or UPDI. And SMD parts can usually be salvaged by either hot air or heating the board up on a hotplate and then banging it on a bucket of water. Some people use butane torches to heat the PCB but when I tried that my lungs were unhappy for the rest of the day.

I was excited to learn recently that current Lattice iCE40 FPGAs have the equivalent of the 8051's EA pin. If you hold the SPI_SS pin low at startup (or reset) it quietly waits for an SPI master to load a configuration into it over SPI, ignoring its nonvolatile configuration memory. And most other FPGAs always load their configuration from a serial Flash chip.

The biggest thing favoring recent chips for salvage, though, is just that they outnumber the obsolete ones by maybe 100 to 1. People are putting 48-megahertz reflashable 32-bit ARMs in disposable vapes and USB chargers. It's just unbelievable.

In terms of hoarding "care packages", there is probably a sweet spot of diversity. I don't think you gain much from architectural diversity, so you should probably standardize on either Thumb1 ARM or RISC-V. But there are some tradeoffs around things like power consumption, compute power, RAM size, available peripherals, floating point, GPIO count, physical size, and cost, that suggest that you probably want to stock at least a few different part numbers. But more part numbers means more pinouts, more errata, more board designs, etc.
I don't understand. If you're choking at home, alone, you suffocate and die.

If you recover, you're no longer choking. Why would you go to the ER then?
Mureka o1: Multilingual, Scenario-Based Music Generation Using CoT Architecture
I don't know if that's true or not but from the perspective of someone who's only looking at open source game engines Bevy looks pretty attractive.

It's looks very capable (Tiny Glade looks amazing), the code base is new and modular. The missing stuff that keeps me away right now is a built-in editor/IDE and scripting and/or node system.

So right now Godot is looking more attractive to me.

I'm also keeping an eye on O3DE but that one I think needs better hardware than I have.
I had no clue what "Steins;Gate"
was. I presumed it was some pair of physicists writing papers on some clever quantum simulation.
I would pretty much assume that any Android phone is a massive privacy leak and security risk. I’d hope that an iPhone is better, but I’d be wrong.
chill bro all mmos and such have used launchers since the dawn of time
Language, unified market, cost of making calls or sending sms, payment networks.

I'm sure there are scammers targetting Europe, but the US is a better market, because you get more people with one language, voice calls and sms are nearly free, and the dominant payment networks have a global footprint.

For Europe, you need a different language per country (more or less), calling cellphones and sending sms can be expensive (depends on the country), and victims may have country specific payment networks that may be hard to integrate from outside the area (lots of direct bank payments, which isn't easy to integrate with).
in this case, the launcher and the game are both open source. does that change the calculus at all? this launcher clocks in at 22mb.
You've equated neural networks with ML.

I'm questioning the association of a single maximum likelihood parameter estimation via analytical optimization as ML, because it does not invole any methods beyond calculus and no models other than the system itself, whose parameters we are estimating.

Perhaps I'm wrong, but the power of NN is in an unknown intermediate representation between the data (measurements in estimation) and the prediction. EKF has no such black box.

Which now that I've written it agrees with top level comment so I rescind my question.
if you like aider, check out goose. https://github.com/block/goose

block is the makers of square and cashapp btw.

I've found aider and goose to be fairly similar. (note this is difference from the inference provider goose.ai by coreweave)
At 2024-10-24 RISC OS Direct got:

- modern webbrowser Iris

- new TCP/IP stack with Wifi

- new Python 3

- etc

https://www.riscosopen.org/forum/forums/1/topics/19545

For other alternative operating systems, question usually is, is there modern webbrowser that can be used for everyday tasks. So this Iris webbrowser is a big step to having a modern enough system.
Cool, thanks for adding it. It would also be nice if you posted how you generated the hash :) I’m not trying to be annoying but this is a critical part of how these hashes work; you post the hash early to indicate you have some information early and then later you demonstrate that by actually presenting the artifact with that hash. If you don’t publish the artifact so people can check that it is actually what you claim it is then your hash is worthless (as nobody can prove it’s not, like, the hash of a cat photo). And you’d generally want to demonstrate how you generated the hash just so people don’t have to figure out whether to md5 or sha1sum it.
Couple of reasons.
1. You can use vram when you don't have massive amounts of ram for a ramdisk (or /dev/shm)
2. Depending on implementation, you might have faster random seek/write than normal ram.
3. You could presumably run certain gpu kernels on the vramfs.
Can you see in the Play store before installing an app exactly which other apps it's allowed to talk to? Can you see it on your phone and override?
The Hypershell Exoskeleton Is So Good at Climbing Cliffs, It Ruined My Workout
no camera access needed! it directly generates the image via audio. this is more then just lip sync btw, it's animating the head of the image.
cuda is just standard for ml. amd port soon maybe
> Asking “What is the best evidence in favor of this” is equivalent to saying I don’t want to google this, so google this for me.

Perhaps I should note that I had indeed (believe it or not) already Googled this before asking the question. I asked not because I was too lazy to search but because I didn't know if my search was turning up the best studies from anyone's perspective.

So, no, this wasn't equivalent to saying "I don’t want to google this, so google this for me."
Why has safety taken such a back seat? Were the fears overblown back in 2022 or have model providers gotten better at fine tuning the worst away?
Also previously https://news.ycombinator.com/item?id=43288410
>I pronounce Paris as Paris

there is an S in Paris because the French used to pronounce it that way and it got written down that way in French... and that is also when that word got added to the English lexicon. Paris is a word in English that is pronounced as it is spelled. There is a French word spelled the same way that is pronounced differently. Something similar is true with Moskva/Moscow (btw, people in Moscow, Idaho pronounce it "mosko")

these type of historical borrowings don't offer useful guidance to how Freud should be pronounced in English.
similar but we directly audio to the image!
Recon Challenge: "discover a subdomain hosted at {}.{}.gemini.galnagli.com"
Am I understanding you correctly: your complaint about OpenWRT software is that they aren't focused exclusively enough on being a router, and your complaint about OpenWRT hardware is that they are focused exclusively on being a router?
> Is it "improper" to maximize profit per their own board's guidelines?

From the standpoint of the end user the incentives are improperly aligned. If they had made hammers they would have included licence agreements for their use with specific types of nails and actively prevented users from using competitor's nails. They also would have made sure yesterday's hammer would not be sufficient to hammer in today's nail, they would have added camera's to observe what the user was doing so as to sell 'targeted' advertising - during which the hammer would not strike any nails but would sing like the singing sword in Who Framed Roger Rabbit - and they would have made sure that no matter how agile the user was with his hammer the thing would never be 100% reliable.

Of course hammers are far less complex than computers and operating systems. Maybe this is because they're made by tool manufacturers and not by tech companies, maybe it is because they're old tech. A modern hammer is what Ford would have produced if he had listened to his customers who asked him for a faster horse so maybe there is a whole world of construction efficiency waiting for the Henry Ford of Hammersmiths. Or, maybe - probably - sometimes it is better to get that faster horse, that titanium hammer or that free software operating system which works for you and nobody else.
> apps know everything I am doing

I think I call bullshit on this.

But I agree that they could do way more and that they don't seem to care.
So... this already exists. Valve already essentially sells this as a product. Folks know that, right? The Steam Deck is a linux box running wine executables as the native app environment. The fact that the money apps are all "games" doesn't change the technology.
Its literally impossible to get margin called when the TSLA stock used as collateral has only gone up since he bought it.
Fair point—and honestly, we’re still figuring that out. Whether LLMs can be reliably "steered" isn’t settled yet because the control systems themselves are still under construction. Part of that process is exactly what’s happening now: users testing the limits, flagging failures, and feeding that back into the loop.

In some cases, the accuracy just isn’t there (Sabrina Hofstadter’s critique comes to mind). But in others—boilerplate writing, brainstorming—the bar is lower, and a little unpredictability is acceptable or even useful.

It’s worth remembering: we didn’t get stable aircraft on the first try either. Early designs were unstable and dangerous until decades of iteration locked in what worked. We may still be in the equivalent of the Wright Brothers era for LLM control systems.
Can windows apps (not installed from the MS store) enumerate through the window titles of all open windows? How hard would it be for an app to monitor all of your web traffic based on the title alone?

Legit question. ChatGPT isn't super helpful here since it agrees with everything when I'm really looking for someone to say why this isn't really feasible in the real world.
> Humans haven been trained, for better or worse, that computers are effectively infallible

a TI-82, sure. I doubt many public opinion surveys would reveal that most people think computers generally or LLMs specifically are infallible. If you are aware of data suggesting otherwise I'd be interested to see it.

I remain much more concerned about the damage done by humans unquestioningly believing the things other humans say.
So, as https://www.cve.org/CVERecord?id=CVE-2025-31160 says:

* CWE-617 Reachable Assertion

* affected from 0 through 2.11.0

... can we assume these will be updated to the actual vulnerability (CWE-940, CWE-120?), and vulnerable versions (2.4.0 through 2.11.0)? Or was the vaguepost about an entirely different vulnerability? Does anyone yet know what specific issue the vaguepost was alluding to?
The tool btop was suggested in the other thread to replace atop and htop.
No, not in any straightforward way, although you can theoretically:

1. download the APK from a mirror site

2. disassemble it to get the android manifest

3. inspect the android manifest to check for the things the blog post discusses
Incredible coincidence. I was making a new tab extension for myself today. Well, more accurately, I was making ChatGPT and Claude to make a new tab extension for me. Wonder if this is frequency bias or just an incredible coincidence.

I think Chrome should include a way for users to customize their home page a lot more - with custom greetings, calendar, tasks, etc integration.
> Wouldn't all this be gone for chess without turns?

The video goes into this a little bit. Turns out forking isn’t that useful since your opponent can just move both pieces!
Chefs hiss (sorry couldn’t resist)
I mean now you know what it's and you can watch and enjoy it it's way more complex than what I wrote (although I guess I fked up):)

Haha, no no I just read about Quantum physics to learn the buzz words. And this article does not make a clear conclusion. I only wanted to connect that hamming part with it.
Last commit was 3 weeks ago...

Besides, it's "done" let it be done.
Isn't Rhai extremely slow? The website itself says that it's roughly 2x slower than Python3: https://rhai.rs/book/about/benchmarks.html. Apparently, Rhai doesn't even compile to bytecode and instead walks the AST! This doesn't sound like a language I would pick as for DSP...

On the other hand, you can always write your own Rhai interpreter if necessary. And if you restrict the language to a limited set of features, which you need to do anyway to keep it realtime-safe, you could even compile it to native code.

> and it can handle real-time audio blocks, which is really impressive:

Any scripting language can do this as long as you stick to operations that don't cause memory allocations, system calls or other non-realtime-safe operations.

For example, you can use Lua to write process functions for Pd objects: https://agraef.github.io/pd-lua/tutorial/pd-lua-intro.html#s...

The question is rather how much you can do in a given audio callback.

---

All that being said, Glicol is very cool!
Most windows apps aren't sandboxed, so them being able to grab window titles is the least of your worries. Any program can steal your login sessions and passwords if they wanted to.

https://xkcd.com/1200/