aftbit

That is a big part of what drove down the price of lab diamonds in the world. The China-domestic market bought a ton of them for engagements, then they stopped getting engaged after the real-estate crash, and now there is a supply glut.

Understood. Cool tech, but I'll pass then and wait for someone to reverse engineer it and release it in a way that I can use.

Can this be made to work offline, without a cloud server? I wouldn't want my words to be passed through an API, but run locally on device. I don't mind buying fast GPUs for this.

reductionist paths are never truly correct.

the world is complicated.

true: the one thing that every government - no matter how totalitarian - must fear is an angry mob.

also true: there are many tools available to the ruling class for dealing with this angry mob, often before it forms.

many work by redirecting the mob inward rather than outwards.

these tools work whether you live in a totalitarian fascist state or a egalitarian liberal utopia, albeit in somewhat different ways.

Whew lots of hot takes in these comments.

In my opinion, the core concept is simple: China is a big market that's getting wealthier and BYD makes cheap and innovative cars.

Owning a vehicle is going from a luxury for wealthy people in China to a more every-day thing, driving huge volumes. Meanwhile the rest of the world (US excluded for now) is trying to electrify personal transportation, and China is meeting that demand better than any other country.

ACR

Do you have a link to a good brief on these from an engineering point of view? Where can I buy cells, in what packaging, with what specific energy & power, peak draw, charge rate, etc etc? I do some tinkering around with batteries for various purposes and I'd love to learn more.

LiFePO4 are much more robust against thermal runaway, omit a lot of the expensive materials that are in typical Li-NMC batteries, and have a better cycle life. They still can't be charged below 0°C, they have worse specific energy, and they generally can't handle the same peak power output, but they're a better choice for fixed storage applications IMO.

Debian

I run Debian on servers and Arch Linux on clients. Debian is definitely the better choice for enterprises.

So? Feels like a real xkcd.com/538 situation to me. An angry mob would be more of a threat to the people than the tech.

Why would they do it this way? If they're going to add a custom controller on the outside, why not make it encrypt before writing to the SD card?

Perhaps - I know some of the Widevine keys are out in the wild, but I'm not sure that all of the L1 keys have been leaked. It seems like at least in theory, they could bake unique keys into the hardware and revoke them once they leak.

The analog hole remains a problem (or opportunity, depending on your mindset). Even if you don't solder wires to the device, you can mount it in a plotter frame that pokes the screen and uses vision models to understand the screen. That won't be closed until they figure out how to mount the attested devices in your brain (see NeuraLink).

Putting AI in space is a silly idea. How do you cool it reliably? How do you handle rad-hardness? How do you even get the gear up there? It's one of the most expensive places to put mass.

Using geothermal power or floating solar arrays in the ocean makes way more sense. It's much easier to access, you have water for a heat sink, and you're far away from anyone or anything that would really care.

More controversially, if geothermal or solar doesn't pan out, you could power it via nuclear microreactors (just what I want floating in my world's ocean) or gas that would otherwise be flared off from a deep sea oil well (CO2 non-withstanding).

Fast forward to the end? Okay - only validated devices running an attested secure boot chain with first-party Safari, Chrome, or MS Edge are allowed to connect to the web. Live ID verification is required for all account creation. Attested PassKeys are the only accepted login tool, and they must be bound to your device and stored in its TPM.

Sure, but the vary fact that a DevOps engineer had single-person access to a component that enabled them to submit unauthorized withdrawal transactions is likely already an unintended situation brought on by a misconfiguration in their system.

>“We are calling on Meta to immediately restore the page and provide an explanation for its removal,” she continued. “Voters deserve access to critical election information, especially in these final days.”

>Nixon reported that the account was back up an hour later.

lambda.ai and cloud.lambda.ai give me a TLS connect error (unexpected eof) most of the time

status.lambda.ai is serving a namecheap parking page

lambdalabs.com is serving a redirect to lambda.ai

lambdacloud.com is serving a redirect to lambdalabs.com

It's safe to upgrade with python 3.12.16 now:

  # docker run --rm --net=host --add-host=pypi.org:127.0.0.1 --add-host=files.pythonhosted.org:127.0.0.1 python:3.12.16-slim-trixie pip install six
  WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate rejected (_ssl.c:1011)'))': /simple/six/

Seems like your corp is mismanaging your device. Ad-blockers are one of the most important security improvements you can make to a modern web browser.

The standard needs a bit more baking before it's quite ready IMO

https://www.hackerfactor.com/blog/index.php?/archives/1102-C...

https://hackerfactor.com/blog/index.php?/archives/1077-Googl...

https://www.hackerfactor.com/blog/index.php?/archives/1037-C...

https://www.da.vidbuchanan.co.uk/blog/android-c2pa.html

I would imagine you'd need at least FP16, if not a full FP32, to get the ultimate camera.

Ah yes, the "all criticism is fake news" strategy.

Seems to be missing all of the 6.0 and 6.1 models?

What are the best static site generators for blogs these days?

My GPSDO contains a decently pre-aged (read: Chinese reuse of surplus) OCXO so it's actually likely to be more stable over the short term that a brand new OCXO. My Rubidium standard is not really trustworthy sadly, as it has shown quite a tendency to unlock at random.

Yep! I tested it with my own vibe-coded MITM proxy that hijacks pypi installations, which I created for ~$0.30 spend on DeepSeek API.

    $ python -m pip --no-cache install "pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70"
    Collecting pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70
      Downloading pip-26.2.2-py3-none-any.whl (1.8 MB)
         ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1.8/1.8 MB 570.0 MB/s  0:00:00
    ERROR: THESE PACKAGES DO NOT MATCH THE HASHES FROM THE REQUIREMENTS FILE. If you have updated the package versions, please update the hashes. Otherwise, examine the package contents carefully; someone may have tampered with them.
        pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70 from https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70:
            Expected sha256 fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70
                 Got        8c448177668e735cdde7d6178694b90c084ba18559348cc394c4b1546eeec89c

The second one works too:

    $ PIP_USE_DEPRECATED=legacy-certs PIP_CERT=/etc/ssl/certs/ca-certificates.crt python -m pip install --no-cache --upgrade "pip>=26.2.2"
    WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1082)'))': /simple/pip/
    WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1082)'))': /simple/pip/
    WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1082)'))': /simple/pip/
    WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1082)'))': /simple/pip/
    WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1082)'))': /simple/pip/
    Could not fetch URL https://pypi.org/simple/pip/: There was a problem confirming the ssl certificate: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1082) - skipping
    ERROR: Could not find a version that satisfies the requirement pip>=26.2.2 (from versions: none)
    ERROR: No matching distribution found for pip>=26.2.2

As compared with a naive installation through the proxy:

    $ python -m pip --no-cache install 'pip>=26.2.2'
    Collecting pip>=26.2.2
      Downloading pip-26.2.2-py3-none-any.whl.metadata (4.6 kB)
    Downloading pip-26.2.2-py3-none-any.whl (1.8 MB)
       ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1.8/1.8 MB 775.3 MB/s  0:00:00
    Installing collected packages: pip
      Attempting uninstall: pip
        Found existing installation: pip 26.2.1
        Uninstalling pip-26.2.1:
          Successfully uninstalled pip-26.2.1
    Successfully installed pip-26.2.2

    $ cat venv/lib/python3.14/site-packages/sni_proxy_sentinel.txt
    SNI proxy lab sentinel. This file is inert.

Or - you can just upgrade pip with a SHA hash pin, or set the magic env vars to use the system bundle.

You do need to be careful about creating new venvs with the old version of pip bundled in ensurepip in older Python releases. `uv` kindly patches that to newest pip, but not every Python binary does.

  python -m pip install "pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70"

Or alternatively, on Debian with fixed system cert chain:

  PIP_USE_DEPRECATED=legacy-certs PIP_CERT=/etc/ssl/certs/ca-certificates.crt python -m pip install --upgrade "pip>=26.2.2"

https://discuss.python.org/t/avoiding-compromised-certificat...