skysight-inc/HackerNews huggingface dataset:
> Second, ldd, the dynamic linker, can be manipulated into executing arbitrary code.

ldd is not the dynamic linker, it's only a tool to debug the process of dynamic linking. The dynamic linker is ld-linux.so (exact name depends on glibc version, architecture, etc.)

Also, I think the linked article [1] about the security of ldd is somewhat useless. The ldd(1) manpage [2] is very explicit about the security of ldd and tells you not to run ldd on untrusted executables:

> [...] Thus, you should never employ ldd on an untrusted executable, since this may result in the execution of arbitrary code.

It's a little amusing how the linked blog post explains how to create a malicious executable that runs arbitrary code when inspected with ldd, noting that "I researched this subject thoroughly and found that it's almost completely undocumented. I have no idea how this could have gone unnoticed for such a long time." and concluding with "Never run ldd on unknown executables!" - all while the manpage literally mentions that precise known limitation in the third paragraph!

To be fair, you could argue that this limitation is not widely known and people should be made aware of the risks of ldd, but on the other hand you can hardly criticize ldd when its manpage is that explicit about the issue.

[1] https://catonmat.net/ldd-arbitrary-code-execution

[2] https://www.man7.org/linux/man-pages/man1/ldd.1.html
I feel humans in general tend to highly regard the words of highly successful (or rich) people. Which in turn convinces successful/rich people that they are smart.

You could see that happening on Twitter during covid. VCs, who specialise in tech, were suddenly experts on medicine as well. Because the feedback loop has convinced them they are smart so it's hard for them to not buy into that.

And just to be clear these people are wicked smart a lot of times. Just that expertise in one area doesn't often translate to all others.
[not a theorist]

I think the relational _schema_ is a graph, but not the incremental data stored within. The nodes are entity types, not instances, and thus recursion is irrelevant.

So, kinda? But a lot of categorical differences.
There is no case law or statute declaring it permissible to write down a contract on a piece of drywall in French, yet it would be safe to assume that doing so would be valid. Courts generally grant wide leeway to private parties to contract how they'd like. These parties chose to enter into a contract with a highly formal definition - with all its benefits and drawbacks.

In short, I think you're the one arguing uphill. In what way does this smart contract fail to meet the standards of a bona fide contract?

The only thing I can see from you in this thread is that the "sender didn't mean to". But this isn't some value transfer external to the contract, but rather due to operation of the contract that the CEO did intend to enter (the purchaser of an options contract similarly doesn't intend to lose money). So restating that in the framework of the contract would be something like the CEO didn't contemplate the possibility of a bug causing a significant loss. I could see that having legs in the case of investors losing money, but isn't the losing party here the one that drafted the contract?

edit: I didn't delete my comment. I've got delay = 5 in my profile, and I guess there's a way you can see my comment before 5 minutes are up? It might be cleaner if you move your reply to a separate comment.
Wow! Those stalks almost look like tentacles!
Well, I'm OP, and as fate would have it, I'm actually from Detroit (born and raised).

If you do go, please make sure you have a tour guide. Downtown is safe enough, but if you decide to see the "real" city, you should know where you are going before you go there.

Edit: Just realized you made a comment earlier. Well, as we are discussing now -- I grew up in a low income area in inner-city Detroit and I am a person of color. I never really considered myself as privileged. It's all about perspective.
There is unnecessary friction, which doesn’t really seem to fit with the Go ethos. I would have assumed from afar that testing gets a lot of consideration in a language like Go.
There were reports of brain anomalies on MRI scan in "Havana Syndrome" victims. What would we make of those?
Jeez. You people catch nuance like a chainlink fence catches mosquitoes. I'm not saying that I buy into the "kill the old" thing. I'm just saying it's the natural evolution of our society. Aristocrats get gilded, serfs get grinded.
Gutenberg 11.6 Introduces New API for Locking Blocks
Just because your friend misunderstood and jumped on a bandwagon doesn't mean that they're wrong. They have the right idea. Even non-technical people understand that cryptocurrency can solve real problems. However, not all implementations will be executed properly. Any new technology will have more failures than successes, and nobody can say which ones will come out on top until after hindsight. It's risky, it's business.
It will and it won't.

Quantum computing could allow an implementation of Shor's algorithm to exist. This algorithm breaks RSA which is the basis of a lot of asymmetric cryptographic implementations such as TLS and SSH. By breaking here we mean that it is trivial to crack. It is unclear right now whether or not an equivalent attack applies to elliptic curve-based algorithms which are gaining in popularity.

As far as symmetric encryption is concerned, the standard right now is AES-128­ and AES-256 and might be vulnerable to Grover's algorithm which would effectively half the effective number of bits so AES-128 becomes roughly equivalent to a non-existing AES-64 which would be somewhat trivial to crack. However, data encrypted with AES-256 would simply go down to AES-128 which is still considered "good enough" as of today.

In practice, by the time we have real quantum computers there will be a new standard for both of asymmetric and symmetric encryption so it does not matter as much as one would think.

TLDR: RSA will break, elliptic curves might break, AES will be weakened and the impact on your life will probably be minimal.
I recall reading a few articles after the first year of the pandemic talking about this very thing and how once employees realised how much unpaid time they pissed away each day getting to work that it would be impossible to get them back.

The only case for people going back to the office are people who want to be in an office environment. And I think those people are disappearing rapidly. My partner was one of those people who wanted to get back to the office and has had a pretty significant change of mind in the last year.

What I want to know is who are these CEOs that they are only just dealing with this issue two years into this pandemic when lots of people were already discussing this?

If these folks are so behind the curve on this issue then why are they even CEOs in the first place?
Show HN: SpotML – Managed ML Training on Cheap AWS/GCP Spot Instances
Givepear
Nice catch, they definitely use Figlet. I couldn't find it as well, but took another look and found it.

They put the credits inside the Copyrights link.
The desktop PC web is dead. Largely it has shifted to mobile. But there still exists enormous amounts of desktop PC content so it's not dead in the true sense, just migrated.
Let me ask my first architect's favorite question:

What does <a graph database> add that I can't get out <the relational one> I already use, and does <that thing> matter in the context I'm building in enough to justify the cost of migration/maintenance?

In a surprising number of contexts, the answer is nothing, in which case you stop, or something, and no, which is also a stop.

The Architect's point of view should take into account the relative availability of talent and cost of materials to get the job done. This is part of what makes them the Aspirant Developer's mortal enemy.

This way of formulating a question though, despite it's frustrating effectiveness at short-circuiting new-shiny for new-shiny sake, also excells for getting juniors on the road to becoming technical experts.
Indeed, those three original DK levels are perhaps the most memorable part of the game from my childhood on account of how difficult they were for me.
I got a peace lily in March after my father passed away and it has been so much trouble to keep it going. I'm really sad about it.

First I didn't realize I was overwatering it and introduced root rot into the system. The online guides recommended repotting with fresh soil and carefully yanking on all the rotted roots so as to remove as much of the rotted material as possible.

They also recommended a very gentle scrubbing with a tiny bit of dish soap with the expectation that the plant will be shocked for a while but recover. I did all this and it did help somewhat.

Then the following months the area was very sunny with 90 degree F days. I didn't realize it at the time but I was killing the plant by overheat.

2-3 weeks of this and after realizing what was happening, I moved it into the basement near a tiny window with indirect sunlight (~69 degree F all day). This worked for a while but now as I take a step back and look at the plant, it is a mess. It is definitely still alive but does not seem healthy at all. Multiple leaves have yellowed, some have either yellow or black spots on it. All of the beautiful White Seed like things have turned pitch black and are disintegrating.

I am now just not sure what to do, I just keep watering it with 1 water bottle's worth of water every three days or so but it seems like it is a mess that I can't recover from.
We built a tool called spotML to make training on AWS/GCP cheaper.

Spot Instances are 70% cheaper than On-Demand instances but are prone to interruptions. We mitigate the downside of these interruptions through the use of persistence features, including optional fallback to On-Demand instances. So you can optimize workflows according to your budget and time constraints.

History: We were working on a neural rendering startup that needed a lot of GAN training which was getting very expensive. We were blowing roughly $1000, to train a single category class. Training on Spot instances was cheaper, but still a mess. It needed lot of hand holding/devops stuff to make it usable. So we built SpotML to automate a lot of things.

Posting it here to see if the community finds this helpful, so that we can open it up to the larger community.
The problem is if you start with B. Then you compress it to get C.

Since B == C, when you uncompress C, you get A, which is not what you started with.
Which really isn't the person you're replying tos problem. Stereo should just work you shouldn't need to get a center channel.
What companies need to do is pay people for their time to and from work. Job done.

If you want workers to spend 1 - 2 hours a day getting to the office then pay them.
I'm talking about compressing/decompressing that once. Then input != output, thus it's not a working compression formally.
Part of the problem is not just getting all the different applications and libraries up to date, but knowing which of them need to be updated.

For a system that widely uses dynamic libs, that's fairly easy to do. Check the version of the installed library, along with any patches it might have, and you have a good idea of whether it needs to be updated.

Now, imagine there's a zlib exploit. That's a lot of things in the system that need to be updated. It's so ubiquitous that even in a system that's almost entirely built with dynamic libs, there are a few that use it as a static lib, and you'll have to make sure those are updated too (go look at the last zlib CVE and the major distro updates to it and you'll see all those packages, sometimes a couple days later as they discover them too).

A world where these are all statically compiled (or bundled separately in containers) is much more complex. It's not impossible, but you don't naturally get some of the work done for you. To some degree we're already going this way with containers though.
Go is pretty established. By the time this module change was made, a huge swath of the cloud ecosystem had been written in Go, including core components like Docker, Kubernetes, Terraform, etc. It’s also the default language for which Terraform and Kubernetes extensions are written, as well as the default language for container infrastructure (i.e., container runtimes, etc).

I think Python’s packaging story is a bummer in part because Python leans so hard on C which doesn’t have a standard build system or a sane approach to building or packaging.
Your comment reminds me of that xkcd: wow you suck at math vs wow girls suck at math, where girls equals crypto.

1 crypto project out of thousands does not represent them all.

the reason this tweet is even being discussed is because it is so unusual.
Robots are doing a lot of work for us, but they don’t look humanoid.
Nahoft: Encryption app made for Iranian freedom
Until you get the intuition of the soil, I would look at the plant itself. A plant drying out or in need of a good watering should show visible signs. I would google "thirsty <species>" to look for images of what a thirsty plant looks like of your species. In Monstera, google says a thirsty plant is one that is droopy and has yellow/"dry" spots on leaves that aren't near the bottom (ie. aren't being discarded as normal growth).
To the casual reader there may be some missing context here so let me fill it in. The overwhelming majority of “print disabled” persons in the USA are blind. The Library of Congress is funded to provide gratis talking books[1] for that community and provides an app that understands the DAISY format. There are also dedicated devices, but I don’t know anyone that uses them anymore.

While I agree with you that better accessibility is good for all users, your framing of this is a bit offensive[2]. I know you don’t mean to be, but you’re framing a big accessibility win for a community that faces serious everyday challenges as somehow being bad. Maybe don’t do that?

Edit: There is the potential for a big mutual win here. If sighted persons could pay fair value for DTBs, it would incentivize publishers to make more titles available. We would get the format's benefits and the blind community would get access to more titles.

[1] https://nlsbard.loc.gov/

[2] I'm not speaking for others, I'm relaying what I was told.
"Double-odd" is a confusing term. Makes it sound like it's odd in two ways. A more common term for a number that's 2 mod 4 is "singly even" (because 2 only divides it once).
There's lobster, but not much else at this scale
Nah, you do need joins if you don't only want to walk the graph from some well known roots. E.g. queries about properties of connected subgraphs

In an graphdb the engine would deduct that by the way of the query language (no explicit joins).
previous discussion: https://news.ycombinator.com/item?id=22876351
The coconut gun story is so fantastic. A+
One clarification to TFA:

>And also we can have patchbay applications that supports video pipelines and not just audio, like Carla provides for Jack applications. To be clear this feature will not come for ‘free’ from Jack patchbays since Jack only does audio, but hopefully new PipeWire patchbays like Helvum can add video support.

There actually have been patches for JACK to enable it transport video just like it already handles audio & MIDI. We never accepted them into the mainstream.

The specific problem with video compared with audio is this: for audio, settling on 32 bit floating point as the canonical format for audio (and note, JACK did not prevent you from using other formats, even internally; people just didn't bother) was not even remotely controversial. Nothing is lost and much is gained via this choice.

For video, however, there are a plethora of possible format choices, each with their own distinct reasons for being, and often significant computational costs associated with conversion. This means that for video it's fairly problematic to define a single format for an entire workflow, which in turn means that figuring out when/where conversion between formats occurs is a significant task. For JACK, we decided not to try to do this, and left the system handling only audio & MIDI.
More on Wikipedia, https://en.wikipedia.org/wiki/Bodyke#Bodyke_evictions
Thanks for the insight! Valid idea :D
When you outsource everything about the product (R&D, manufacturing, distribution, etc.) there's pretty much zero chance you are going to plan and design the product matched to ANY market or its needs.

That's what the real problem is!
"do" is also no longer hard-coded. There are multiple language extensions that allow you to change what it desugars to, which is really cool.
It's probably worth noting that Dune is already the name of the OCaml build system.

Other than that, this is a really interesting and creative project. I'm curious what it will be like to use it in a "real" session, I might have to download it and try it.
Basically, the distros aren't perfect and I sometimes run into conflicts. Also, with static binaries it would be much easier to pin specific software at old versions without affecting anything else, even just temporarily for testing.

IMO, when stuff is self-contained, everything becomes easier! This isn't to say some stuff like OpenGL can't be dynamically linked, but some day I'd love to use a distro with a static-first approach, because right now it simply isn't an option.
An Inconvenient Truth About AI - Rodney Brooks
Or Eley.
Evidence that overnight fasting could extend healthy lifespan [pdf]
I hope your kids get to watch Han shoot first in 4K - https://www.thestarwarstrilogy.com/project-4k77/
Not sure what the nit is supposed to be, 70% is indeed less than sqrt(1/2) hence me mentioning it. And yes, it's closer to 3/4 than half or full, but the thing being pointed out wasn't "what's the closest fraction" rather "it's really not that close to 1:1".
How is this an argument against a larger standard library?
How is email more accessible than Usenet? Grandma isn't doing SMTP
That is absurd. What data is to a face, other than its appearance from various angles? That can be obtained from photos of the person.
The shutter speed and frame rate are not necessarily linked. Unless you’re using an ND filter (or an undesirably high f-stop) specifically because you want to be able to have more motion blur, most well-lit scenes would surely be blown out at 1/24 of a second (or the usual 1/48 or 1/60), even at the lowest ISO, so digital cameras compensate by shooting individual frames at higher shutter speeds, reducing or eliminating motion blur anyways.

Under optimal conditions, maybe you’re right… but I would personally lump the desire for tons of motion blur in with the nostalgia that causes people to use 24 fps in the first place.

It’s not like people originally wanted to shoot at a noticeably low frame rates… it’s just what they had to do. Then it became a standard that resisted change. Now people artificially restrict themselves to be bug-for-bug compatible with old technology. In fact, a lot of silent films were shot at 16 fps. Why does no one clamor for the return of 16 fps? Arguably, 16 fps is 33% more cinematic!

There are plenty of reasons that I’m not a professional cinematographer… but for the same reason that no one would prefer to watch a film captured in 10 fps, it follows logically that 24 fps is not actually “better” than higher frame rates. It’s just what people have been taught to see as better through experience when they contrast traditional, high budget films shot at 24 fps with low budget TV shows that were broadcast at 60 fps. It’s probably going to be decades before people unlearn this low frame rate preference, but I predict people a hundred years from now will be far less impressed with 24 fps footage than some people today.

I have plenty of other unpopular opinions available too. :P

Regardless, it doesn’t seem beyond belief to imagine that someone could combine the 5 frames of 120fps -> 24fps into individual “long exposure” shots that produce a similar motion blur effect as a single frame taken with a slower shutter. The necessary data is (mostly) all there, if someone took advantage of it. A well-proven technique similar to this is used in astrophotography to create artificially longer exposures, but it is combined with an alignment step to avoid the motion blur of the Earth spinning relative to the stars, which is why astrophotographers don't just extend the length of the exposure, and why they bother with combining multiple exposures. Obviously, applying this technique to create motion blur would mean skipping the alignment step, at a minimum, but this is probably one of those things that would be relatively simple for a properly trained neural network to do a good job with smoothing out, to avoid the gaps of motion blur between the frames that are available... each of which would likely be individually shot with a shutter speed faster than 1/120 anyways.
I have Etymotic ER4SRs which came with this clip [1]. It broke, and I soon found out the microphonics (sound traveling through the cable) were strong, and the extra weight the cable put on the drivers in my ears was surprisingly distracting. I bought a new one and, even though it's super nerdy, wear it.

There are cables that are less microphonic, and I think it might be possible that if you wrap the cable around your ear instead of going straight up it's supposed to help also. I don't personally like the around the ear thing--feels like a bridge too far for me look-wise, but I'm not everyone.

But I'll get on my shtick for a second: I love my ER4SRs. They've basically saved my career. They're small, there's no latency, there's infinite battery life, essentially everything is replaceable, the sound _perfect_. I super wish they made a (non-Lightning) cable that had a mic in it (I know there's 3rd party ones but haven't had a lot of success there yet and quit trying), but it's a small inconvenience. I can mostly work anywhere under almost any conditions, which has turned out to be important.

[1]: https://www.etymotic.com/product/shirt-clip-for-er-series-ea...
vinge's books set me on my life path decades ago.
I still feel like the first book remains unresolved.
I think it’s fairer to say that he named and articulated the idea, but there were certainly earlier books that described technological singularities (though often centred round energy or transport rather than computing).
The whole concept of black bars has always confused me. I know what they are I know what people generally accept the concept of what they are. but they aren't actually what they are. There are no black bars. The content is the size that it is and it's just stretching undistorted to your screen. It's not adding black bars. You're just not using parts of your screen because you shouldn't be using those parts of your screen. Maybe if content like that had a old console TV bezel on the side that had channel dials and the power button and a speaker on one side and half of a bezel and a blurry living room background with a picture of a family on the other that would make people feel more comfortable?
I would put it in the key generation algorithm used for the encryption. If that algorithm was somehow backdoored (like the dual-ec curve, or just by (assymertically) encrypting the key and putting it in the identifier. Then the RaaS could just use the backdoor to recover the key.