skysight-inc/HackerNews huggingface dataset:
There's a great saying: “You should sit in meditation for twenty minutes everyday - unless you're too busy; then you should sit for an hour.” ;)
I've found that working with outsourced technical teams usually makes me feel even more confident in job security in the industry, rather than less
Perhaps you could give some examples.
A huge class of vulnerabilities are not applicable since SQLite states it’s not to be used for client/server database use cases.

Essentially, if SQLite is not recommended for use which allows remote user use cases - there’s a lot less to worry about.

https://sqlite.org/whentouse.html
Conda has been a lifesaver for me in the past, but it got so slow in ~2019 (minutes+ to resolve dependencies) that I've switched back to pip whenever possible. Maybe things have been resolved now though?

E.g. https://github.com/conda/conda/issues/8087, https://www.anaconda.com/blog/understanding-and-improving-co...
I don't think the problem is the number of speakers.

Movies just have higher dynamic range where the lounder part is not suitable for home use if you adjust the volume to have the voices at "normal volume". The "problem" exists even if you have proper surround sound systems (obviously, surround sound systems would have it better due to better channel separation, but the volume issue is still there).

Don't get me wrong, I agree that movies released on home media should have a mix that is more balanced (compressed) in loudness. Just that the problem isn't related to the setup of the speakers.
> On the other hand, the argument that the outputs of GitHub Copilot are derivative works of the training data is based on the assumption that a machine can produce works. This assumption is wrong and counterproductive. Copyright law has only ever applied to intellectual creations – where there is no creator, there is no work. This means that machine-generated code like that of GitHub Copilot is not a work under copyright law at all, so it is not a derivative work either. The output of a machine simply does not qualify for copyright protection – it is in the public domain. That is good news for the open movement and not something that needs fixing.

This is very good news. This line of thought implies that we can legally feed all proprietary code into GitHub Copilot in order to teach it all the patented and secret tricks of the companies we can see (since data mining is not copyright infrigement) in order to have it print those secrets back when we ask it to (so they become public domain).

/s
feedgnuplot: Plot realtime/stored data from the commandline
I wonder if this will end up entering the lexicon like Turboencabulator.
For comparison here's google's privacy policy which uses very similar wording in the list: https://policies.google.com/privacy?hl=en-US

> Receive your account information in order to satisfy applicable law, regulation, legal process, or enforceable governmental request

Audacity:

> data necessary for law enforcement, litigation, and authorities' requests (if any)
No. Your public leak is the bigger issue.

Copilot is an issue, but I would assume malicious agents are already doing copilot-like things, just not in the open.
If your Python code has native code under the hood (eg. Numpy) this two-step is very much a 'step1: circle, step 2: draw the rest of owl' description of production deployment.
Well for me the degree was of mediocre usefulness. The job I had to sit in an office on a factory floor with no windows, fully airgapped on my own 7 hours a day doing test automation and designing test fixtures mostly. That was the entry position for us back then really. I had to wear full static gear head to toe which was hot and uncomfortable and smelled weird. This was broken up twice a day by some shitty machine coffee and to sit in the canteen and stare out the two small windows at people outside at the company over the road all smoking. All while being paid just about enough to eat for the month and keep up with my games habit. There were also 9 layers of bureaucratic nightmare everywhere and as the company was large everyone knew or was related to everyone else as they all lived in the same area so it was politics galore.

It was just sooooo depressing.
> On the other hand, the argument that the outputs of GitHub Copilot are derivative works of the training data is based on the assumption that a machine can produce works. This assumption is wrong and counterproductive. Copyright law has only ever applied to intellectual creations – where there is no creator, there is no work.

Cool. I'll just train my new AI on 20 different copies of the same Disney movie and have it generate a new movie. Checkmate, lawyers!
A lot of foreign companies piled into Myanmar during the years it was/seemed to be democratizing.
i fear a little that it might mean doing this is just not legal no matter if its still possible to do yourself.
I do feel for the people behind Copilot, even though they'll have known it was coming. They produce something absolutely frggin' amazing that can change the world and for the next few days all everyone does is pile on and pull it to pieces... yes of course these are valid issues but can we please look at the big picture and appreciate what an achievement this is?
It's hard to square Lorentz invariance with any kind of discrete approximation in either time or space.
That’s actually roughly len(arr) times, not three, since two of the calls are inside the loop.

But the far bigger red flag there is that that it doesn’t just use arr.reverse(), which does the same thing and is typically 8–10× as fast in some simple testing (assuming a list), or arr[::-1], which makes a shallow copy rather than modifying the object in-place.

This matches what I’ve been seeing in code examples: Copilot likes to implement things from scratch rather than using libraries or even standard library functionality.

It’s possible that the word “array” tripped it up here and that it would have done something saner had it been told “list”, but I doubt it. (Python’s built-in array module is very seldom used; if you talk of arrays, you’re probably dealing with something like numpy’s arrays instead. But it’s far more likely that the built-in list type was what was desired here.)

There’s also one other significant point of bad and dangerous style in the code generated: the reverse function mutates its argument and returns it. Outside of fluent APIs (an uncommon pattern in Python, and not in use here), this is generally considered a bad idea in most languages, Python certainly included. It should either mutate its argument and return None, or not mutate its argument and return a new list.
Subs don't need to be cranked up. You could simply enjoy hearing sub 100 Hz sounds at a reasonable volume.

A center channel isn't needed to increase clarity. Buying a center channel speaker without first knowing your stereo speakers' radiation pattern and positioning them and your seating appropriately is a waste of money.
Really nice app and solution for preparation project. Fully responsive for a gant tab and it looks very good for presentation. No concurence, I tried others.
Different crowds probably.

Not sure what the aim of cheating is, probably going from a rating of 1500 to 2000 and the status that it brings. In the end you still win 50% of the games, just against higher rated players.

Playing against a GM would reveal your cheating instantly, it seems. It's like robbing the police station :)
Every time I see one of these threads I think "maybe Python isn't the best choice if we still need threads like this". But it's just so useful...
Julia Reda's analysis depends on the factual claim in this key passage:

> In a few cases, Copilot also reproduces short snippets from the training datasets, according to GitHub’s FAQ.

> This line of reasoning is dangerous in two respects: On the one hand, it suggests that even reproducing the smallest excerpts of protected works constitutes copyright infringement. This is not the case. Such use is only relevant under copyright law if the excerpt used is in turn original and unique enough to reach the threshold of originality.

That analysis may have been reasonable when the post was first written, but subsequent examples seem to show Copilot reproducing far more than the "smallest excerpts" of existing code. For example, the excerpt from the Quake source code[0] appears to easily meet the standard of originality.

[0]: https://news.ycombinator.com/item?id=27710287
The Space Shuttle Engines Will Rise Again – RS-25 Engine History
Indeed, anything but VSCode:

"What data is collected. The GitHub Copilot collects activity from the user's Visual Studio Code editor, tied to a timestamp, and metadata."

PyCharm, Emacs, Vim, are all better and don't spy.
> SendGrid engineer reports API keys generated by the AI are not only valid but still functional.

> GitHub CEO acknowledges the issue... still waiting for them to pull the plug

I agree this is an issue for co-pilot as well - but it's really on send grid to invalidate keys that are known to be leaked?

Yes, that's inconvenient for the affected customers - otoh they won't get billed for other people's usage - or dinged for someone spamming using their keys...
If even Microsoft says that, government really seem to be afraid of their constituency by now. Deservedly so in my opinion.
The Google Books case cited here allowed Google to show exact snippets (extracts) from the copyrighted books, hard to see how this is any different.
Just have the non-throwing private constructor take the data member by rvalue reference and move them in place.
This works in practice for so many projects that do C++ without exceptions.
Microsoft isn't a person. Individuals at organizations make decisions, and it's very possible the person greenlighting this never heard of Tay and Zo. It's almost certain they weren't the same person.
Any. They're pointing out that markets are priced with predictions of future value, but some of those predictions are wrong
Your life is very personal and has its own challenges as everyone.

As a father let me add a perspective.

A father role is Not to be a friend. He *may* be a friend but its most important role is to prepare the kid to the real world.

No kid ever, ever thinks of itself as spoiled. The ego of a kid is always *Me*.

That is how they are and it is normal.

Now Imagine that *maybe* you as a normal kid were kind of spoiled and impulsive.

If you don't "tame" or take down what will be this kid be?

*impulse* control is on almost all indicators of success.

Does it look harsh YEARS of not using bike?

Maybe?

Does it worked? Seems like, you appear to be well educated and working.

I know you may have anger and feel bad.

But how many others things you Did Not smashed because of that?
Projects? Relationships? Jobs?

Being a parent is very hard your sons have their own destiny and mind and still you have to navigate the ever changing scenario of modern world.
Yesterday was a bike, today is a Nintendo Switch/ipad, tomorrow will be levitating hover.

/EndRant
Berkeley DB v1.6 (1993)
The lack of discussion of lock files is a big omission in any 'best practices' page. "Lock" only appears in a log output of Poetry.

Even if the answer is "Poetry handles it" you certainly want to explain why they're important just like is being done in the rest of the "Why use..." sections.
I am sorry you had a bad luck with your father, but as they say you don't chose your family. Its not your fault he was a shitty parent.
The ‘Race Realist’ on Campus
> and yes. its not an unsolvable problem. people could educate themselves. all the info is there. but its a very laborous job. so maybe the media is just doing it wrong?

EU Parliament is by-in-large more transparent and direct than the UK one (not sure where you're from, but I'm from the UK so that's the lens I have).

But you're absolutely right, for some reason the EU "feels" quite closed off, and it's almost entirely the medias fault. Media is driven on eyes, and the further away a thing is the more difficult it is to have eyes on it.

It takes huge issues to get international attention, natural disasters that kill hundreds in another EU country are barely mentioned on british media.

It's also very boring, so it's not surprising.

But, it's actually very easy to read the EU parliamentary, commission documents, and the documentation on how all the processes work is quite clear (even if it's a bit alien on first look because you're taught your own system and have to "unlearn" that a bit first).

I'd give it a go, it's not as intimidating as it first appears. But I fully agree that the media should do this, it's literally their job.
The Biggest Downward Bitcoin Difficulty Adjustment Has Occurred
I frankly think that the "free culture" label and extremely permissive licenses of many open source project are nothing but a redistribution of wealth upwards. Those with existing capital can make profitable unfree derivative works without any benefit to original authors. This relationship must go both ways if you want actual free culture. Stop producing MIT/BSD code in your non-work time.

This is not a research project, this is a commercial work that produces verbatim copies of code without disclosing its license (or having a license grant in many cases). It doesn't matter how it manages to reproduce it either. It does.
I think the key problem is that people misunderstand what CVEs are.

Ultimately CVEs are numbers given to a certain vulnerability. It helps so two people know they're talking about the same thing. A typical usecase would be that you have a security scanner that tells you your server is vulnerable to CVE-xxxx-xxxx and you can check the changelog of your server software which version fixes that.

A CVE does not mean that a vulnerability is particularly important. It doesn't mean it's relevant for your use case. And a lot of CVEs does not mean the person who found them achieved something of significance.

From a security perspective it makes sense to treat vulnerabilities that are minor and only relevant for rare use cases (or in combionation with other bugs) as vulnerabilities. But when you start counting vulnerabilities as achievements this distorts things. Plenty of shady security companies and research institutions making "statistics" about CVEs don't help either.
Thanks to both of you; this is better analysis than I've seen in other forums.
We are in a time where you have a crystal ball/chip & who can whisper sweet nothings & get back answers
I mean, it's the default audio software in many Linux distros, Tails included.
You often want to do this anyway, because the installer often supports various options and env vars. If you download the file you can read its --help output, and even keep it on hand in case something bad happens, or just for your own records.
You know that old saying about scamming an honest man? The crypto space is full of people who are hoping to cash out before the bottom falls out — losses are expected and both of them are savvy enough not to lose more than they can afford.
Why is all this unnecessary with Ruby considering the languages are so similar?
Yes. The author apparently did no research of her own and just assumed Github's FAQ was trustworthy.
I don't consider this a problem. Copilot was trained on public repos, so these secrets had to be checked into public repos. They were already totally public, and should have been invalidated/replaced and redacted. Copilot might result in previously undiscovered published secrets being found, but that's not much worse than anyone finding one under normal circumstances.
> First, I'd check their source for saying that the number of cases in vaccinated people is growing. I mean, of course it is - 2 is more than 1, so whatever number we are at, it is growing... but is the actual percentage growing? Or is it just the expected rate?

This wasn't a claim they made to be fair to them. This is just what I understand from what I've been reading about effectiveness of the vaccines in regards to the delta variant. I've read they're effective against it, but slightly less so and presumably selection pressure will continue this trend now vaccines are being deployed on mass.

> So could there be long-term consequences? Sure. Does that change what our actions should be today? No.

Does it not? To be clear, I'm not personally concerned about this in an anti-vax sense, but I am a little concerned we could enter a kind of arms race against evolution and end up creating something potentially worse down the line unless we're careful about how we deploy vaccines and combat COVID. You seem to be suggesting we should just look past these risks and hope for the best (please correct me if you feel I'm misrepresenting you), but surely if we're aware these risks exist we should be attempting to reduce the likelihood of them occurring?
This looks like it went viral _because_ it was entirely fictional, not in spite of it. Everyone seems in on the joke.
Perhaps… [1].

[1]: https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...
Open source developers deserve the same rights as corporations.

As a side note, in a not so distant future there may be decompilers enhanced by artificial intelligence.
And why is that? That is because national media cover only national politics in 99% of cases. The EU is only mentioned when the national politicians blame the EU for some of their own failings.
> its also possible to detect when someone is piping to bash (on the server) and serve a different payload.

If you have a fear of your source maliciously serving you different code over curl, don't run their code at all.

> You're better off piping curl to a file, reviewing the file and then running it manually.

Right, but the safety there is reviewing the code. Running brew install, npm install, pip install, or a binary could all run malicious code too.
Play FarmVille and watch porn.
I don’t think a 4-5 hour reduction in “work time” would have any effect on my productivity, whereas a 3 day weekend would make me more motivated. I don’t understand why this isn’t the norm
Mostly because of people referring to it when talking about the very real Google Cloud Predictive autoscaler: https://news.ycombinator.com/item?id=27719071
I agree. If you're in college spending who-knows-how-much for your education, make it worth the money...

Take some electives on stuff you're into. Music theory, humanities, social sciences... Take the time to go deeper on your passions. Study the broad amount of subjects: you're going to have more structure than self-study.
"Patented and secret tricks" are not protected by copyright, if the output was an actual reimplementation of an idea instead of Copilot regurgitating existing code (https://news.ycombinator.com/item?id=27710287).

The specific implementations are protected by copyright, and the ideas may be protected by patents. In the case of "secret" tricks, they may be protected by trade secret laws, but not if it's in a public GitHub repo.
I was diagnosed as a 30 year-old. Here are some things that might help.

* Accept it and be realistic about it. ADHD is a disorder. There is no cure. Don't expect it to go away or for you some system, drug or technique to reduce it to zero. There are no silver bullets

* Forgive yourself. Getting worked up about the disorder only causes more pain, anger and stress. You are not lazy.

* Address any other mental health problems that may be related to or caused by ADHD. I am still recovering from anxiety related to my ADHD.

* Medication is effective. If there is any reasonable route to trying it then do so. Some people report night and day differences.

* Routines help me a lot. A good routine becomes automatic. Think about some of the things in life that you do automatically and completely without thinking. Try to make a routine that serves your goals and the things you want to do. I prefer a routine that is the same every single day (including weekends) if possible.

* Your working memory is impaired. Do not try to remember anything. I always keep a notepad and pen next to my computer as a substitute for working memory.

* Distractions. Some are worse than others but people with ADHD are more susceptible. Find a way to reduce notifications, alerts (both auditory and visual). When you are focusing on something, try to remove anything else from your visual field. I have two monitors but I make sure that if I only need one window for the task at hand then the other monitor is showing the desktop.

* In the same way, if you want to be sure to remember something, keep it in your visual field. When I'm using my to do list software and I select a task, I put it as a small window in the top left of my screen (with all the other remaining tasks hidden of course!). If I get distracted I can simply look to the top left of my screen to remember what I was doing.

Knowing you have ADHD is a great first step. Improvement is possible, but it takes time (years, not weeks).
The world needs to act on Myanmar’s military coup - democratically elected leaders need to be restored and mass scale human rights abuses stopped, or it will descend into a failed state with tens of millions affected.

It looks like Russia (and China) are vetoing any UN action. What are the alternatives?
I think you over promote the utility of the formal methods taught in the degree.

Not once did I use Laplace in EE. It was all cheat sheets or applying data sheets and doing some adhoc calculations in excel or taking a wild guess and iterating.

After twenty years of doing IT related stuff I’ve forgotten how to even differentiate stuff.
Only happens to people who have given up their Sovereignty.
The customer who took his own life over the margin bug had repeatedly tried to call Robinhood's customer support, for several days, but nobody ever picked up the phone.
C++ will not save you any trouble over python. It’s tooling and package management is significantly more complex.
I felt a great disturbance in the AI-community, as if millions of voices suddenly cried out in terror, of GPL Code in there output, and were suddenly silenced. I fear something terrible has happened.
Julia is one the few MEPs that properly engages with issues of copyright and is active in IT. I really appreciate it, even if I dont always agree with her
It also has no relevance for the discussion at hand. Yes, Github can display all of its content – that's kind of the point of it.

But Copilot doesn't exist to show you random code snippets for the sole purpose of showing them.

Using this copyrighted material to create derivative works is a completely different use case, and not covered at all by the Google Books ruling, or any other I'm aware of.
> Copyright law has only ever applied to intellectual creations – where there is no creator, there is no work. This means that machine-generated code like that of GitHub Copilot is not a work under copyright law at all, so it is not a derivative work either. The output of a machine simply does not qualify for copyright protection – it is in the public domain

This is fantastic news.

I'm going to create a bot that crawls sites like GitHub searching for popular libraries. Then it will copy them- sans any license- to it's own website where it will sell these libraries under a new name.

Since there is no creator here, just a piece of software, then there is no copyright violation. My system simply is "inspired" by the original source code using a proprietary algorithm that I call "Copy and paste".

I'm open to accepting venture capital for this project.
For the case of this header, you're interacting with third parties that don't speak your application domain.

That "unique id" you mention is exactly the use case for the idempotency key this RFC proposes. You can model your unique basket identifier in your application domain, and use that identifier as the idempotency key in interactions with third parties.

This is useful mostly because networks and applications are not necessarily reliable.