liquidise

As*

Direct study link (with associated diagrams): https://www.science.org/doi/10.1126/sciadv.adq5660

I'm happy you said something, i had mistakenly assumed the opposite: that Wix was disclosing a vulnerability they discovered themselves. Everyone wins.

wiZ research discovered a vulnerability in the wiX owned Base44 (emphasis mine).

Tulip mania lasted 3 years: 1634-1637 in part of a single country.

Surely we should keep comparing it to a decades old globalized financial system with formalized state support from many nations and a market cap measurable in the trillions.

I feel this is more a societal failing than a medical one. Most people don’t want to take better care of themselves: eating better, portion control, more regular exercise, etc. Too hard.

People want a pill to solve the ailments they have.

If you built an ideal dating service, where 100% of your customers pair with someone they would marry, you could charge huge sums and you'd have an endless stream of customers as people grew into marrying age.

Today's market dynamics are different (no such ideal exists), but all the drivers remain: at some age people care deeply about meeting someone and will pay for a service that gives them s fighting chance. As a former dating app cto, i believe the reasons we don't have services that brag about their match or marriage rates is not capitalist greed standing in the way of love. The problem of matching people via an app is a genuinely difficult problem for a number of fascinating reasons.

For whom? Given the signal:noise ratio of job postings my intuition is that they are more valuable than ever, for all parties.

Curious about the length limitations.

DisplayPort and Thunderbolt are starting to make lengthier runs (7+ ft) tricky, which is still within the realm of cable management, particularly with hybrid standing/sitting desks.

> the sorcery you are looking for is spite.

Both philosophical and poetic. True brilliance.

Can someone with familiarity in rounds close to this size speak to their terms?

For instance: i imagine a significant part of this will be “paid” as AWS credits and is not going to be reflected as a balance in a bank account transfer.

CO resident here.

CO mails paper ballots to everyone* about a month before election day. You can choose to vote in person, or mail in/drop off your paper ballot anytime prior to election night.

My understanding is what while the ballots are paper, many (all?) are tabulated digitally. It certainly appears to be laid out in a way that benefits digital reading, and i believe that is what the machines in question are responsible for.

* for some definition of "everyone"

Software is a house. The more you lean into the analogy, the better.

I often tell clients "The first thing you asked me to do was to move a dining room chair into the living room. Then you asked me to do the same with the toilet. The latter only works if we tear out all the plumbing."

Non-coders seem to understand these analogies intuitively.

> Over 300 million people visit the national parks each year, generating nearly 70 million tons of trash.

What? Does this include waste the parks themselves generate in brochures and such?

I cannot fathom how each visitor to a national park generates an average of 467 pounds of trash.

It is so easy to avoid GA as a web user that i’m surprised anyone concerned about this isn’t using an blocker that blocks GA scripts and requests themselves.

As someone building an AI company right now, my quick Pro/Con for 4o vs Claude 3.5:

Claude: subjectively sounds more human to me, and really nails data questions that 4o is lackluster at

4o: far better assistant logic reasoning. I can trivially break Claude's assistant (system prompt) instructions within the user prompt, where 4o succeeds in all of these tests.

Pricing and output speed, for our purposes, are functionally identical. Exciting to have a competitor in the space already who stands to keep openai honest.

Great mix of napkin math and proper analysis, but what strikes me most is how cheap LLM access is. For it being relatively bleeding edge, us splitting hairs on < $20/M tokens is remarkable itself, and something tech people should be thrilled about.

I see it as having a 100 for performance on desktop and 80 on mobile. Is that bad?

Not familiar with this take. Is the idea that curved space time is a semi-intuitive model or output of something more fundamental?

I did, yes. Retook a "written" permit test (which is now an ipad-based test), then had to wait for my permit to arrive via mail, then had to schedule and take a proper drivers test, after paying the adjusted late fee. Was a wild ride.

I'll share a lengthy anecdote (from CO, not OH), of how absurd these suspensions can get in strange edge-cases. Also, i think this shows how most processes have "bugs", but people don't think of them that way when it isn't in software.

One day, while helping someone get their car out of an impound, i was informed by the officer on duty that my license was not showing as valid. They couldn't tell why though, said the status/notes listed made no sense to her, and i should contact the Denver office to find out what is going on. I was rather confused, as it had been many years since i had last been pulled over, for a minor speeding ticket.

Denver was similarly confused by the details. After some research, they tell me what appears to have happened was i paid my ticket years ago by check, in person. They recorded they received the check on time, but either due to a clerical error or something (they aren't sure), a late fee was assessed on my ticket prior to the payment being processed. The fee was, i think, $5.

Around this same time, i moved, and while i changed my address with the USPS, i didn't with the DMV. The DMV was thus sending my "you owe us $5" letters with "Do Not Forward" instructions via the USPS, who were knowingly delivering the mail to the wrong address (my old place).

When i discovered all of this, years later, my license had been suspended for 54 weeks due to delinquency. In CO, if your license has been suspended for over 1 year, you may not just satisfy the debt, you must also retake your driving test. But since i didn't take my original test in CO, i would also need to re-apply for a permit and pass a written permit exam before being allowed to schedule my drivers test.

The poor lady i spoke with in the Denver office recognized the sheer absurdity of everything she was telling me, but could do nothing to fix it. She also let me know the outstanding debt was now $15.

So a daily, single serving of 100% fruit juice results is a small-but-measurable increase in child BMI (0.01-0.05, roughly 1 ounce), and little to no measurable effect in adults. Given the middling results, i'm surprised how strongly other commenters here are taking this.

> "studies that did adjust for energy intake (-0.08 kg; 95% CI, -0.11 to -0.05 kg; P for meta-regression <.001)"

> "in adults, studies that did not adjust for energy showed greater body weight gain (0.21 kg; 95% CI, 0.15-0.27 kg)"

> "Among cohort studies in children, each additional serving per day of 100% fruit juice was associated with a 0.03 (95% CI, 0.01-0.05) higher BMI"

This is a follow-up to a rather popular post from a couple months ago[0].

0: https://news.ycombinator.com/item?id=38435908 My toddler loves planes, so I built her a radar (1304 points, 56 days ago)

So 23andMe failed to identify brute force and credential stuffing access of 14,000 accounts. They also have a feature that grants those 14k compromised accounts effective access to 6.9 million accounts.

23andMe then claims that poor password practices are responsible for this data leak.

> “Therefore, the incident was not a result of 23andMe’s alleged failure to maintain reasonable security measures”

I've not run security at an org of their size, nor have i touched their service, but i have to imagine there were some patterns to this breach that would have been reasonable to account for ahead of time. Did those 14k accounts also have their email provider accounts compromised? Could a login ip-range check have prevented all of this? 2FA seems like an obvious answer here but clearly that was more than could be expected.

(2017)

> On October 10, 2023, one of Xfinity’s software providers, Citrix, announced a vulnerability in one of its products used by Xfinity and thousands of other companies worldwide. At the time Citrix made this announcement, it released a patch to fix the vulnerability. Citrix issued additional mitigation guidance on October 23, 2023. We promptly patched and mitigated our systems[1]

This reads like "we didn't patch until weeks after the vulnerability and patch were provided" but it's worded intentionally unclear to differ blame.

> Q: How will Comcast prevent another incident from occurring?

> A: We have robust security programs in place which help us to discover criminal activity such as this one

You have to love how their response to their own question is, functionally, "we won't prevent your information from being stolen, but boy howdy we'll sure know when it happens though!"

As a long-time disgruntled comcast customer, i have to say none of this surprises me. But local monopolies mean my wallet doesn't really get a vote in this matter.

1. https://assets.xfinity.com/assets/dotcom/learn/Notice%20To%2...

I'm not sure how you can say you take the non-aggression principle as axiomatic while also asking:

> How do you handle the fact that "the right to swing your fist as you please" and "the right to not get punched in the nose" are both legitimate freedoms?

The answer is simple: individuals do not have the sanctioned freedom to strike others due to the NAP. This feels so plainly obvious to me that i'm worried i'm misunderstanding your position.

Option 3 is to recognize that all societal freedoms exist within the construct of society. Limiting some of the rules of that society (as opposed to removing all of them) is often the focus of limited government types.

The Non-Aggression Principle[1] is generally accepted as rule #1 for a limited government or a maximally free society. I can't speak to the ideals or proposed solutions to this from the Hobbsian State of Nature types.

1. https://en.wikipedia.org/wiki/Non-aggression_principle

tldr: If global energy usage grows at 2% every year, and we generate 1% of the total demand annually with tidal energy, the Earth's rotation will cease in ~1000 years.

While i won't dispute that tidal energy is not truly sustainable, at least not in the way solar appears to be, i think we can agree that in the short team (a few centuries) cargo ships saving fuel would be a net positive with no measurable impact on the rotation of the planet.

Edit: after some more napkin math, i have a hard time taking this paper seriously at all. It appears to suggest that the available tidal energy would remain constant throughout this process? Also, 1.02^1000 equates to a roughly 400 million factor increase in the current energy demands of the planet. That's not something i'd expect such an advanced civilization to be trying to generate out of some waves.

A lot has been made of the "pre-AI" internet as a sort of barrier for training sets as it will flood the internet with AI content that will be difficult to parse out later.

For the bullish-AI types, is there a prevailing hope that "human content" may itself be an artificial barrier and a properly trained AI could generate better training content for future AI generations? Is this strictly in "AGI" territory?