skysight-inc/HackerNews huggingface dataset:
The exploit struck me as exceptionally nasty given screen mirroring[1] is one of Supernote's attractive features.

Am I correct in understanding that the public debug key firmware signing faux pas was plugged in Chauvet 3.21.31 [2], while the unsolicited/unauthenticated P2P file transfer hole was plugged in the most recent Chauvet 3.23.32 [3]?

The changelog doesn't list any updates released circa December 2024 despite disclosure timeline noting that Supernote "...plan[ned] to address the issues in the December update."

[1] https://support.supernote.com/en_US/Tools-Features/1791924-s...

[2] https://support.supernote.com/en_US/change-log/changelog-for...

[System] Enhanced security for system upgrade verification.

[3] https://support.supernote.com/en_US/change-log/changelog-for...

[Supernote Linking] Enhanced the security of transferring files through the Supernote Linking feature.
Android app please!
Comparing Jews to Nazis. I think you might be a horrible person and a troll.
Native Americans may be the best modern example of a group who's poorly habituated to urban living settings.

For centuries, White Man has tried to assimilate the indigeneous into cityfolk and teach them our languages and our ways, and there's been so much resistance to that. In fact, I propose that most human beings don't like being corralled into individualistic "cells" and so far removed from "nature" or subsistence farming/shepherding that we completely lose touch with other living things. Urban living was such a moral affront to indigeneous cultures, and even the Irish were sort of upset by the imposition, y'know?

Many homeless people on the streets simply don't know how to live. They don't know how to care for a home, how to run a kitchen, how to keep their clothes clean, how to do medical care, how to run household finances and pay bills. They're feral, essentially: how many people adopt feral cats or wild animals? They're nightmares.

Anyone who simply says "housing first" or "UBI" will solve poverty and homelessness, you're in an ivory tower and you've never been on-the-ground with actual people who can't be housed. Look at a population of 100 and you'll discern 100 reasons for that homelessness and poverty.

I'm lucky and privileged that I got independent living situation under control and was able to rehabilitate and habituate to a sort of ordinary middle-class lifestyle, because it was essentially reverting to my childhood environment. Other people came from abuse, addiction, and shitty circumstances, and they have no idea what it's like to be clean and clear-headed.

The reason that entitlements are this way currently is to ensure that qualified people can get and keep their benefits. Section 8 HUD housing has a lot of strict rules around the owners, landlords, and the tenants, and learning those rules helped me know what a decent and well-maintained household looks like. Maintaining HUD standards was paramount to me keeping that assistance.

Likewise food stamps (SNAP) can't be used for liquor or non-nutritious goods and other food programs deliver wholesome stuff you can use and eat, so it sets good examples to otherwise feral humans that it's important not to live on Doritos and beer, because they will try!

UBI is absurd to me where if you're just handing me fistfuls of cash I can do anything I want, and people will run with that, I guarantee ya. UBI is no solution to the symptoms or root causes of poverty.

Personally, I believe we need a return to collectivism, an end to rugged individuality, and more communal-style housing situations. Independent living is a real grind, because of so many responsibilities, and I have tons of neighbors but no friends. Many people would do better with shared spaces like kitchens, bathrooms, cafeterias, but those types of residences are essentially illegal in the US by means of zoning, except in unique circumstances like a special work-train-live program. And placing feral or mentally ill people into shared spaces can be a recipe for disaster, unless it's a professional institutional setting, and that's precisely what the Reagan administration eliminated from the "bad old days".
If you're gonna use historical analogies, it pays off to be accurate. Marie Antoinette very likely never said "let them eat cake" and she wasn't particularly more detached than aristocrats at the time were generally (which, to be fair, is quite a lot, but not all aristocrats were killed in the revolution).
The ANZ plug is pretty good but when China adopted it they found a way to improve it - they put it upside down so the ground is at the top for slightly improved safety.
I've FDM printed models for friends, and the quality isn't there. It's not good enough to spend the time carefully painting it.

It's fine as a token for the game, but people enjoy the painting etc too.

A resin printer isn't safe for use in an apartment, otherwise that would probably be more common.
> I can't imagine any 2 pin plug being as mechanically stable as a 3 pin.

In absolute terms, yes. But in 30 years I have never seen a 2-pins europlug fall from a socket on its own. I still prefer the French plugs with the Earth pin (and I quite like the British one as well), but europlugs are fine and really not comparable to American plugs.
That said, I feel like any thread about viral transmission is probably a good place for an HPV vaccine reminder too
Addressing Risks from Chris Krebs and Government Censorship
Depends on the field. Yea generally a bad idea. In tech, absolutely don't take an unpaid internship. In some fields (at least in locales where it's still legal, not California), it's a filter for rich kids who can afford to go unpaid.

So yea, probably don't take an unpaid internship if you're not already a rich kid and don't have a family member telling you it's a good idea.
Licensing is about 10%, nowhere near 50.

https://assets.ctfassets.net/ost7hseic9hc/1alE9DriNd0GJq1SYK...
Just don’t let yourself get stuck behind vendor lock-in, or if you do, never let yourself feel trapped, because you never are.

Whenever assessing the work involved in building an integration, always assume you’ll be doing it twice. If that sounds like too much work then you shouldn’t have outsourced to begin with.
No, they understand object permanence just fine.

Peekaboo is fun because fun is fun.
When doing peekaboo the other person is paying attention to you, and often smiling and being relaxed.

They laugh just as much if you play ‘peekaboo’ without actually covering your face ;)
So I just did this and got this response:

“ Hello! How can I assist you today? <smile emoji> “
Good article, Edoardo! The ideas about securing MCP frameworks with servlets are really interesting. Just added your article to https://github.com/Puliczek/awesome-mcp-security
Yeah, the whole HPV testing landscape is kind of a mess - lots of "maybe, sort of, probably" vibes even after paying out of pocket for extra tests. It's frustrating how unclear everything still is, especially for something so common.
Perfect example of Stockholm syndrome.
Of course you could also pull out the good old Chomsky hierarchy and make an argument against regexes based on whatever the nature of your data is.

But the thing is: the beauty of regexes lies in their compactness (which, in turn, can make them quite difficult to debug). So, of course, if you want to optimize for some other measure, you'd use an alternative approach (e.g. a parser). And there are a number of worthwhile measures, such as e.g. the already mentioned debuggability, appropriateness for the problem at hand in terms of complexity, processing speed, ease of using the match result, the ability to get multiple alternative matches, support of regexes in your language of choice, etc.

But simply stating "X beats regexes" without saying in what respect leaves something to be desired.
Custom Elements don't play well with HTML either. And "just dropping <my-dropdown>" is not much different from "just dropping <div id=app> and running some framework code on it"

All the reasons are here: https://dev.to/stuffbreaker/web-components-and-ssr-2024-edit...
Indeed. There are many options on the table.

https://www.politico.eu/article/belgium-brussels-amazon-goog...

https://www.politico.eu/article/eu-trade-bazooka-anti-coerci...

https://www.euractiv.com/section/tech/news/france-singles-ou...
"I'm going to go ahead and...". "Why don't you go ahead and...".

People who use this moronic phrase should go ahead and jump off a tall building...
you can export to html, open it, and then just create printscreen out of it. easy (but respect the licensing)! some browsers (edge,firefox,vivaldi, maybe others) have built in functionality for this. let me know if you have other questions.
Can't answer this because not in the problem space but my partner is a (retired)professional proofreader and from discussions in the past I would observe interpreting proof marks is not solely about the mark, you scan the line independently (or semi independently) and so they derive meaning contextually as well as from "reading" so this demands both OCR and semantic understanding, as well as syntax.

I would be interested if LLM can intuit the corrections needed including at the level of M or N mark which is semantic, or the Oxford comma. Basically can they correct unproofed input to a similar or converging sense as a person would? Can they write the marks as well as read them?
ok, is there documentation.
Lego may run the factories, but the factory will run extra and sell the excess off books. Maybe less so nowadays that (1) they can charge a 20-30% premium over US Lego prices in China, and (2) competitor off-brand Lego have caught up in quality

I don't think the official Lego China factory products get sold to the US, only Asia?
Develop in WSL with Trae
Thanks for sharing your notes! I will add them to Awesome MCP Security https://github.com/Puliczek/awesome-mcp-security :)
The Air is going to be a very different product because it is produced in much higher volume. And it will have many more engineering hours spent on it to make things ‘smooth’, including having the speakers sound OK by applying DSP as this post discusses. The GPD will be much more hackable but have worse performance as a trade off
The FT reported that lots of hedge funds were unwinding a bunch of trades as they needed liquidity.
You're completely right. People love the British plug because it has lots of features but they're mostly obsolete features or required by the equally obsolete ring wiring. So in the end, it's just a pile of useless inconveniences. Don't Britons have RCDs?
Ironically the older BS546† had smaller plugs for lower powered appliances. But each different size of plug needed a different socket, because the fuse was in the socket. This system is still used in India, but I'm not sure how widespread it is.

† https://www.plugsocketmuseum.nl/OldBritish1.html
Science education isn’t just outdated — it’s speaking the wrong language entirely.

I wrote a long-form essay exploring why modern science education can't grasp the logic of generative AI.

It argues that our dominant scientific language — still based on Newtonian object-logic and hylomorphism — is functionally incapable of explaining the probabilistic, self-organizing nature of deep learning, diffusion models, or transformers.

Drawing from Simondon and Stiegler, I propose a structural overhaul of science education that moves from object-based teaching to a generative, process-oriented paradigm — one that embraces information as ontological keystone.

Would love thoughts, critiques, or counterpoints from the HN community.

Full essay: https://medium.com/@muushroomking/functional-aphasia-why-sci...
For hyperscalers, to some EU subsidiary first. Then it depends on the transfer pricing applied.
https://en.wikipedia.org/wiki/Transfer_pricing

You can tax the "intellectual property" payments that the subsidiaries make to the USA parent, or you can pick some other criterion. Or you can just create a new sales tax for any one part of the transactions you want. It's tricky but it can be done.
Good for you, I guess, but your hobbyist interest in farming is not an argument against using AI. The point of my comment is that the our technology stack is already large enough that adding one more layer is not going to make a difference.
Chewing gum that casually wipes out viruses sounds awesome in theory, but I'd bet scaling it up safely for everyday use is a whole different beast
> When modern search became more available, a lot of people said there's no point of rote memorization as you can just do a Google search. That's more or less accepted today.

It absolutely isn't.
Parser combinators are already mainstream. All/most real languages are implemented with hand written recursive descent parsers that closely resemble parser combinators, or at the very least borrow a bunch of concepts.

It's the name that's unlikely to become mainstream. That's squarely upon FP folks giving sci-fi names to common sense concepts.
Related Executive Order Revoking Chris Krebs and SentinelOne Clearances, Review of CISA (29 points, 8 hours ago, 7 comments) https://news.ycombinator.com/item?id=43638616
Obviously niche, but the GOV.UK Design System is very well supported in Rails.

There's a form builder and library of components (built and maintained by me) which, between them, provide full coverage. Most new Rails services use them.

It's a good match because accessibility is one of the Design Systems' primary concerns so JavaScript is used very sparingly and only to enhance.

They're not official, only Nunjucks is supported by the Design System team.

https://design-system.service.gov.uk/

https://govuk-form-builder.netlify.app/

https://govuk-components.netlify.app/
Unsurprising given China's previous bullshit towards Australia:

In early 2020, Prime Minister Scott Morrison endorsed an inquiry into the origins of COVID-19, which angered China

Following this, China started imposing import tariffs on some Australian exports. China gave a range of reasons for the tariffs. China denied that the tariffs were related to Scott Morrison's actions
It's more about people who don't know jack trying to tell everyone else how to live their lives because of some irrational politics like wanting to destroy trillion dollar industry because it's "bad for the environment" when the culmination of such industries is the entire purpose for their lives.

They rage against a machine that they made from their own blood.

If society will collapse without regulated shower head then why don't you let it?
You bootstrap the compiler with itself and audit whether the compiler binary is exactly the same semantics as its source.

>Full source bootstrapping is our only way out of the trusting trust problem

No, that is just deferring the trust to all the tools and scripts that fosslinux/live-bootstrap project provides.
Pff we will just use another AI to do the review /s
Well, I can tell you for sure which one's better :)
Australia doesn’t trade a lot with the USA anyways, so they are shrugging even if you forget the penguins on McDonald island. Australia exports a lot of stuff to China though, primarily raw resources, and are trying to diversify away from China (and trade with Europe, the Middle East, Africa), but I get the feeling, unless they actually decide to make stuff in Australia again, China will remain the biggest market for their natural resources.
I have not heard that saying before... as of 10 April 2025 W3Techs.com rankings
Nginx - 33.8%
Apache - 26.4%
Cloudflare Server - 23.4%
LiteSpeed - 14.7%
Node.js - 4.3%
Microsoft-IIS - 4.0%
Envoy - 1.3%
Google Servers - 0.8%
Caddy - 0.3%
IdeaWebServer - 0.1%
Percentages of websites using various web servers
Note: a website may use more than one web server

5 months using Apache Echarts and watch GitHub repository https://github.com/apache/echarts for all activities. The developer team enthusiasm and unity is impressive. It is flexible, powerful, constantly improved and plenty of examples.
currently not, there are only a handful of controls. try to play around with it (most of the settings have a direct visual feedback / reaction, should therefore be self-explanatory. at the bottom, there are indicators which properties are being used to generate the visual. if the need arises, we will create a demo-view. let me know if you are interested.
Here you go...

https://en.m.wikipedia.org/wiki/Project_2025#:~:text=Project...
You don't need to hit a huge number of service providers because the USA market is highly concentrated.

That's why you read things like «The Anti-Coercion Instrument (ACI), a nuclear option that has yet to be deployed, would empower the EU executive to hit U.S. service industries such as tech and banking».
https://www.politico.eu/article/eu-trade-bazooka-anti-coerci...

You can just pick the top 10 biggest financial and tech firms and be done with it.
Almost makes you wonder what that D stands for in “R&D”.
The tutorial is from 2010. At the time people were much more enthusiastic about Haiku and other alternative operating systems.

Now we only have Windows and Unix like.

I still wonder what would have happened had Jean-Louis Gassée been less greedy and Apple acquired BeOs instead of Next.

I discovered BeOs in 2000 and it seemed to me much more interesting at that moment than either Windows or Linux. Not only it looked and felt better but it introduced other ideas and concepts.

I had hopes it's adoption will increase but it soon withered and died.

I still wonder why we can't do better than Unix and Windows. Unix is 50 years old and Windows is old, too. There should be better concepts out there waiting to be discovered and implemented.

At some point there were many companies, universities, groups and individuals involved in researching and implementing operating systems.

At that point I was following OsNews website daily and each day there were news about some new and exciting developments.

Not anymore.

I miss the days when I read about BeOS, Syllable, AROS, MorphOS, AtheOS, SkyOS, Plan 9, Inferno, Singularity. And there were a ton of interesting kernels, too.
That's brilliant!

I mean, arithmetic is the same way, right? Nobody should do the arithmetic by hand, as you say. Kindergarten teachers really ought to just hand their kids calculators, tell them they should push these buttons like this, and write down the answers. No need to teach them how to do routine arithmetics like 3+4 when a calculator can do it for them.
> Is there a serious steelman argument for why it makes sense to reflexively call protests against Israel anti-Semitic?

Probably not. I grew up with extreme left-wing parents deeply involved with the Palestinian cause (but don’t sympathize with their views myself). I’ve heard them and their friends express a vicarial, seemingly irrational distaste for the US and Israel infinitely many times. I’ve also heard a lot of terror romanticism, not just for Palestinian terrorists but also the IRA, etc. But I’ve never heard anyone express any animosity towards Jews as an ethnic or religious group.

I think I can understand where the misunderstanding comes from though: These are very ideological people with deep seated feelings (hate mostly) connected to those ideological views. Most people don’t think or feel that way, and the closest thing they can relate to is racial hatred. So that’s the inference they make. In Swedish there’s a saying that roughly translates to “as you understand yourself you understand others”. I think that’s mostly what we’re seeing here.
It will also open you up to getting advertisements shoved up your intestines if you can't spell, or form basic sentences without machine assistance.

Imagine always having Tex autocorrect to Texaco
I want to take an exception to the term cheat. Because it is only cheating the student in the end. I didn’t learn my times tables in elementary school. Sure, I can work out the answer to any multiplication problem, but that’s the point, I have to work it out. This slows me down compared to others who learned the patterns, where they can do the multiplication in their fast automatic cognitive system and possibly the downstream processing for what they need the multiplication for. I have to think through the problem. I only cheated myself.
> It's like expecting them to do arithmetic by hand. No one does.

Don't all children learn by doing arithmetic by hand first?
I've never heard of unpaid internships my whole life outside of the one big NGO that's globally infamous for it. Where are you from that this is such a phenomenon?
It is inconceivable that someone would become angry on the internet. You're going to turn off the computer and run outside as fast as possible if you sense that your emotions are even just ever so slightly shifting from enjoyment.

Sarcasm is the internet default, though. Perhaps you didn't quite pick up on it that time?
They still have a centralised box but each connection goes in a ring from the box and back to it again. This way you can use thinner wire for the same total capacity.

Sadly it carried on for far too long, my house built in the nineties has it.
Lets extend your logic then: VAT is another thing that mostly just hurts the country introducing them.

Is the United States trying to free Europeans from the tyranny of their government? Americans should also stop paying sales tax and income tax.
China's new transport drone to make deliveries to remote regions
XFree86 has been shipping xman, a GUI viewer for manpages, since 1984 or about that time.
This was a meta-analysis, so they couldn't do this unless the studies they were analyzing reported data on that. The paper doesn't mention this issue in its discussion of the findings, so I'd guess it couldn't be used meaningfully. (The paper does mention the issue in a general way as a challenge of assessing the risk of alcohol consumption.)
SF Marketplace with Stupidly Cheap Delivery
What we lose if we cut humans out of the equation is the soul and heart of reflection, creativity, drama, comedy, etc.

All those have, at the base of them, the experience of being human, something an LLM does not and will never have.
Wow, that's an amazing take; thanks for that. I really feel that is on track with reality. Because didn't they formerly have chain-gangs breaking rocks in the hot sun, and making license plates and other manual labor jobs? There are indeed still prison-based industries. I've heard entire call-centers are staffed by prisoners and many on work-release are at normal restaurants and the like.

As for construction, yeah. I worked day-labor for 2-3 days total in my entire life, and it was hell. I have always been groomed as an intellectual knowledge-worker in offices. Assigned by a day-labor office, the contractors set me to working machinery I was totally unfamiliar with. Every day laborer was required to own our attire and safety equipment at own-expense. There was no way anyone could move up without specialized training and experience with the machines they put us on. I had to ride the bus around to time-sensitive jobs at random sites. Then blew the paycheck on a hotel with a shower. I was never gonna learn that heavy-equipment stuff if I had a bunch of computer savvy and risking injury. I literally couldn't operate the machine without my glasses falling off!

It's interesting how you allude to the Irish and Chinese rail workers, and dockworkers/longshoremen of bygone days. It's sort of amazing to think that my able-bodied ancestors could just throw themselves into some milieu and get paid for sweaty physical work. That doesn't seem possible in today's mechanized economy. President Kennedy warned us all from Butler County. Here we remain.