skysight-inc/HackerNews huggingface dataset:
Not managing that would require less work not more. Their position is making more work for themselves. The point was to prevent dependency hell through matching the wrong package versions. Something that can occasionally happen in Windows. The problem is, the current form of management causes the far worse form of dependency hell of applications requiring conflicting versions.

I have maybe had Windows get confused about dependency versions twice ever and both times it was a driver inf for a virtual device. I will grant that fixing the problem required a fair amount of work by Windows standards but frankly not all that much by the standards of some of the more hands on distros.

I have had Linux tell me I can't install an application because it wanted a different version of Lib-whatever than what something else wants many many times.

"Why should we give up that benefit just because some developer wants to use his own special snowflake version of a library?"

Odd that you claim major distros are built by a small group of volunteers but the maintainers of much smaller and less well supported applications need to suck it up and use whatever version the Distro maintainers decide on.

Most major distros are not volunteer run and haven't been for ages. Ubuntu, RHEL, SUSE, POP, the list goes on. These are commercial products with full time paid developers. In the case of Ubuntu they are providing a major chunk of the work back upstream to Debian and in the case of RHEL they are the upstream. Most minor distros are downstream benefactors of the big players.

Contrary to that its still common for many FOSS apps and utilities to be one man jobs. Maybe the guy doesn't have the resources to keep up with the break neck pace of some update cycles. What if they decided to go with an LTS build intentionally? What if its a simple package that doesn't have security issues yet gets updated for other reasons? What if the version they are using has core functionality that was EOL'd in a newer release so they can't move on without major rework that they can't manage?

There are a million reasons for why a project may want to stick with an older version. Also allowing for the ability to update all packages does not require draconian control of which packages can be installed. This notion runs against the whole notion of user control. If the user wants multiple concurrent versions on their system who are you to say they can't? FOSS means freedom.
Perhaps to prevent buffer overflow problems. Simplifies development and testing.
Yup. Read it. Without a definition or context for "domains", it doesn't tell me much.
> Some comms between conscious entities must always contain metaphoric language, including signaling through body language.

What do you mean? Humans can certainly communicate and maintain meaningful relationships solely through writing.
Lots of daos have forums and token voting where you voice opinion, and also have 'rage quit' functions where you can exit and take your share of the dao bank balance with you. They're also often open source so can be forked in disagreements - even by anonymous others (see sushi forking uniswap and taking it in a different direction under new branding).

my experience with daos i have worked with is they are often closely aligned with co-op style organisational structure. the difference is we dont all know each other and live all over the world, some people are anonymous dogs jpegs and thats all i'll ever know about them, some people are present in their irl persona. but its a group of people with some shared aim in collective ownership, this doesnt mean there arent directors and roles, but often you can just start talking and participating and be rewarded. e.g. anyone can write a strategy for yearn, pass it on to the team and be rewarded https://twitter.com/iearnfinance/status/1459658364837896192?...
"Is it that they enforce their own policies unfairly? Or do you feel like you are wasting your life at tasks you do not enjoy?"

Thanks! It's definitely these two. They don't just enforce the policies unfairly, they actually do the complete opposite of the policies. I'm tired of being on a treadmill going nowhere.
Obligatory PSA: Scott Locklin's "Quantum computing as a field is obvious bullshit":

"When I say Quantum Computing is a bullshit field, I don’t mean everything in the field is bullshit, though to first order, this appears to be approximately true. I don’t have a mathematical proof that Quantum Computing isn’t at least theoretically possible. I also do not have a mathematical proof that we can or can’t make the artificial bacteria of K. Eric Drexler’s nanotech fantasies. Yet, I know both fields are bullshit. Both fields involve forming new kinds of matter that we haven’t the slightest idea how to construct. Neither field has a sane ‘first step’ to make their large claims true.

.....

“quantum computing” enthusiasts expect you to overlook the fact that they haven’t a clue as to how to build and manipulate quantum coherent forms of matter necessary to achieve quantum computation. A quantum computer capable of truly factoring the number 21 is missing in action. In fact, the factoring of the number 15 into 3 and 5 is a bit of a parlour trick, as they design the experiment while knowing the answer, thus leaving out the gates required if we didn’t know how to factor 15. The actual number of gates needed to factor a n-bit number is 72 x n^3; so for 15, it’s 4 bits, 4608 gates; not happening any time soon".

[1]: https://scottlocklin.wordpress.com/2019/01/15/quantum-comput...
This one?

https://hyperallergic.com/306559/w-e-b-du-boiss-modernist-da...
My childhood experiment actually comes in handy! I can confirm at the least that planting half of the same batch of seeds close to a road's (the tarmac's) edge next to it, and in a forest, my grass seeds grew much worse next to the road.

Also I was told to never eat berries growing from a bush close to a road since they are more dirty.
For packages without a build, they could just do a checkout on the repo and verify that the file hashes match the ones about to be published.

Certainly not a complete solution but a good first step.
Does It Matter If I Eat the Stickers on Fruits and Vegetables?
3D TVs will come of age once autostereoscopic displays reach the right level of quality. After being blown away by my first glimpse of a display in around 1998 I fully expected them to be useable years ago. I guess we might still be another "10 years" away.

https://en.wikipedia.org/wiki/Autostereoscopy
This is a deliberate choice by the designers and we had some to and fro with them about it for the application we were building (a complex 40+ question process for exports).

They seemed open to more questions per page where needed but their single page per question standard makes sense when you understand the need to support the whole audience for a lot of their sites. Stats suggest over 16% of adults in the UK have very poor literacy so in the interests of accessibility I think the page per question is a reasonable pattern.
Can you explain this? What is a reasonable expectation?
I don’t understand what capability you are saying Databricks lacks. This capability is literally the entire premise of the Data Lakehouse. With Snowflake you need to export data out/or pipe data over jdbc/odbc to an external tool. With Databricks you can use SQL for data warehousing and when you need you can work with that same data using python to train an ML model without piping data out over jdbc (using the spark engine). One security model, one dataset, multiple use cases (AI/ML/BI/SQL) on one platform.
IBM has been making the coolest-looking (and coolest) computers... https://www.youtube.com/watch?v=a0glxDw700g
A few years back, not too long ago, I started working on a new contract assignment at a medium size aerospace manufacturer.

I show up and check in with IT department. The system administrator shows me to my desk, and hands me a post it note with my password. Well pass phrase is more like it. It was something like “sliding down the tall building”.

I was quite impressed that they encouraged the use of long pass phrases instead of short cryptic passwords that are hard to remember (think “correct horse battery staple”). This place really is serious about security, I thought.

I thanked the system admin and causally said “I’ll be sure to change this to an equally secure pass phrase”.

“Oh no,” he said, “we don’t allow people to change their passwords here. You see, we need to be able to log into anyone’s computer if they go on vacation or are out of the office, so we keep an Excel worksheet with everyone’s username and password. So please don’t change your password.”

He turns and walks away, and I just sit there stunned, wondering if this was some kind of practical joke.

Sadly he was completely serious. I kept the password they gave me for the 3 months I was there, as I was asked to do, knowing that at any time someone could log in as me and do something illegal or unethical. It really did give me a bit of anxiety.
Thanks for detailing. I was explaining in laymen terms, using less technical details, with some reservations ("roughly" and "given some restrictions").

> Orchestrate the right kind of interference, and for some problems, you have an algorithm that outputs a solution to that problem with (relatively high probability) in time that, depending on the problem, may be exponentially faster.

Exactly. Given some restrictions, it's possible to implement algorithms that are equivalent to performing an exponentially large amount of classical operations per "cycle".

> Examples of those problems include prime factorization/discrete logarithms (Shor's algorithm)

Indeed. I provide an implementation of the Deutsch–Jozsa algorithm [1][2] based in my own quantum computing simulator that I linked in my blog post (in the original comment) to address this.

[1] https://en.wikipedia.org/wiki/Deutsch%E2%80%93Jozsa_algorith...

[2] https://github.com/TCGV/QuantumSim/blob/master/Tcgv.QuantumS...
The entropy is far greater than 2^128. Pastrami, refueling, and shawl don't appear in the top 30,000 English words list, so even knowing your password generation strategy, every word adds at least 15 bits of entropy, you're up to 150 bits, probably more.
I'm not sure about BC, but coastal cities (not the big ones... the little ones) on the Pacific coast of the states regularly get 'stranded'. Honestly, as usual, the media overplays everything. The fact is that Vancouver and most major coastal cities are not going to be super-affected. The truth is that -- based on current import patterns -- the rest of the country is more likely to face shortages than any West Coast city where all the freight comes in.
It's notoriously difficult to study because you can't tell some 6-year old that they should become a gamer as that is what your random number generator wants them to do.

But, it's also difficult to study because the effect size, whatever it direction may be, is rather small. (nobody ever agreed to a double-blind experiment proving that bullets kill, just as a point of comparison).

From what I read back when it interested me, it seems suggestive of a mild negative effect. But it's hard to say because of the absolutely overwhelming effect of in the other direction: there is absolutely no doubt that eight hours or more of weekly gaming is evidence of depression for age groups 16 and up. (valid for PC/console only. Gaming on mobile phones is often more indicative of using public transport than anything else).
It's not more or less susceptible than a parked car.
If they don't name it Yuggoth I will be disappointed.

https://lovecraft.fandom.com/wiki/Yuggoth
What is missing is the man's ability to memorize the function and carry it out without the book. If he could, and the function truly produced a normal response to any Chinese phrase in existence, then he would speak Chinese.

Edit: He would speak Chinese, but he wouldn't understand it. What is missing in order to understand Chinese is an additional program that translates Chinese to English or pictures or some abstract structure independent of language. Humans have this, but the function in this thought experiment is a black box, so we don't know if it uses an intermediate representation. Thanks to colinmhayes for pointing this out.

Could he give a reasoned answer to "what is the weather"? That depends on whether we include external stimuli as part of the function input. If not, then neither a human nor a computer could give a sensible answer beyond "I don't know".

I see now that your issue is really with the function - could a function ever exist that gives responses based on history/environment/experience. My understanding is that such a function is the premise of the thought experiment; it's a hypothetical we accept in order to have this discussion. Searle claims that even if such a function exists, the computer still doesn't truly understand. But if that's what we're asking, my answer would be yes, as long as history/environment/experience are inputs as well. Of course a computer locked away in a room only receiving questions as input can never give a real answer to "what is the weather", just like a human in that situation couldn't. But if we expand our Chinese Room test to include that type of question and also allow the room or computer to take its environment as input, then it can give answers caused by its environment.

> You actually need to show it can be so-implemented. No one has done this.

I mean, fair enough. It's fine to say "I won't believe it until I see it", but that pretty much ends the discussion. If we want to talk about whether something not yet achieved is possible, then we need to be willing to imagine things that don't exist yet.
Switzerland: Hospitalizations and Deaths by Vaccination Status
You didnt address my points at all. I'll be more clear. CP is actively used by state actors to shut down sites that are free speech oriented. It happens too fast and too frequently to be natural. CP has to come from somewhere either through the truly horrific creation at source or by saving a large amount then sharing it and exposing your illegal activity.

There is no reason to post CP on a public rather than a private place when it is so actively policed. Might as well just call the police and say you have CP to share.

CP = Publicly Everywhere and police do nothing.

CP = Is not actually everywhere something else is going on.

Choose one.
There being no bidders for 48 of 67 mines suggests to me that few investors expect much coal use near these 48.
Give me the under.
google visualizing data book
> However, the service that performs underlying updates to the registry data determined which package to publish based on the contents of the uploaded package file

Yeah, this is what's going to keep me up tonight. Yikes.

I can't help but wonder if the root cause was HTTP request smuggling, or if changing package.json was enough.

How do we even mitigate against these types of supply-chain attacks, aside from disabling run-scripts, using lockfiles and carefully auditing the entire dependency tree on every module update?

I'm seriously considering moving to a workflow of installing dependencies in containers or VMs, auditing them there, and then perhaps commiting known safe snapshots of node_modules into my repos (YUCK). Horrible developer experience, but at least it'll help me sleep at night.
Weekly Top 10 lists of the most-watched TV and films
But even if you didn't read all of it, and just required longer passwords instead of special characters, you'd be improving things.
> difficult to say now that those were necessarily horrific and needless

The Khmer Rouge killed 1.5 to 2 million (or 25%!!!!) of all Cambodians. Pretty tough to argue that the deaths of 25% of any population is anything but needless and horrific, particularly when you learn about Pol Pot's insane and homicidal policies. Imagine if every 4th person you know were dead in the next 5 years because a guy had a plan to... make our lives better by ruining them indefinitely for some distant vision of Utopia.

The Nazis are truly astronomical in terms of both death count and evil. They successfully created an actual hell on Earth.

Stalin's regime is estimated to have killed 20 MILLION of his own people. I wonder if the murdered would say, "Yeah, but its worth it in the end because no more monarchy!"

Mao's derangements are estimated to have resulted in 45 MILLION dead Chinese. That's 45,000,000. Again, I wonder if their surviving loved ones felt better off? Mom was beaten to death for being "a capitalist", but at least we don't have to worry about that darned monarchy anymore! How would you feel if your Mom was beaten to death? How would you feel if your brother or sister were summarily executed based on an accusation? What if you saw your child needlessly starve to death? These aren't just numbers. These are real human lives extinguished for political ends.

Etc. Etc. Etc.

Your logic is truly deranged. Revolutions are really, really, really bad for everyone, and the vulnerable, weak, and poor are not exempt. Most of them can usually just count on good old fashioned starvation in their near futures as the revolutionaries lurch from one disastrous or insane policy to the next. If they don't starve, there's a good chance the revolution will at some point purify them anyway.

So, I'll point you back to my suggested heuristic.
wow, fuck off
Wasn't Eagle Eye based on ECHELON?
If, on the occasion I say, "I like you" my saying it is caused by my liking you -- then you can describe this process however you wish.

Since my liking you is caused by my immediate environment, it isn't reducible to a weighted average of my history.

Another way of putting it: the historical positions of all the molecules in some water aren't sufficient to determine its present state. It's state depends on its container (ie., the pressure & temp of its environment). And there are a very very large number of states of water, many still being discovered.

In this sense my state in any moment is a point in an infinite space of states -- not determined by my history. But also extremely complexly by my container -- my social, etc. environment. The world hitting my senses is doing more to me than the air on the water. It induces in me a state which cannot be "averaged" from my history.

Thus, no, we are not weighed averages of our histories. We are profoundly chaotic and organic organisms whose growth in our environments enables us to respond to our enviroments by entering a near infinite number of states. These states arent in our history, they are how our biophysical structure -- via history -- responses to the near infinite depth of the here-and-now.

We are more like water than a computer. A computer is a deterministic machine which is a deterministic function of its deterministic inputs. Water is a chatoic system whose state "isnt up to it". Water's state is /in/ its container, and water itself is a non-determinsitic chatoic soup.

The chaos of water is the least of what one nanometer of a cell has; a cell is a trillion times that adaptive and responsive. And we are a trillion of those.

We are a cascade of chaotic state changes provoked by an infinitely rich environment action on our bodies shaped by a long history of organic growth.

We don't have "neural networks", we have cells. That some form "networks" has nothing to do with what we are. A complete misdirection.
There is no reason why a DAO or any other organization cannot be an LLC or whatever other kind of business entity so long as it complies with the requirements thereof
Can you elaborate on “photonic override”? Googling that phrase pretty much just returns more HN comments and tweets by you :)
Ugh, the point is a fine one but it appears it has to be made:

Validation of experimental theory through the characterization and control of an entire system is not the same as building the same system and simply seeing the final state is what you expect. The latter is much easier and says very little about your understanding.

Here's an analogy: Two people can get drunk, shack up for the night, and 9 months later have created one of the most powerful known computers: A brain. Oops. On the flip, it's unlikely we'll have a full characterization and understanding of the human brain in our lifetimes – but if we ever do, the things we'll be able to do with that understanding will very likely be profound.
I can't help but think of turning them into horrible sounding organs.
This list is still useless in that case, as it doesn't list the affected firmware versions as far as I can see.
You're not wrong, but also, npm audit is pretty much a joke, and those "high" vulnerabilities aren't as bad as the terminal would want you to think. Should absolutely be fixed, but just relying on npm audit is a bit simplistic.

Your critique about packages for is-object is valid, though.
I bought AMD Jan 2023 $90 options for $13 earlier in the year when AMD was trading ~$80. So the breakeven price is $103 by Jan 2023 which I found not very risky looking at the accelerating EPS growth.

Look how much I'm up by buying close to the money options instead of buying shares at $80: https://i.imgur.com/vYHl1LY.png
Your scenario is missing the very common case where people have exactly zero assets. If you take that (common) case into consideration it is very clear that both the nominal gap and the relative gap increases.
Amazon’s Cashierless Tech Will Power Sainsbury Market in London
Yeah, but they are still people who are responding to a page, working on wording and getting it approved, and then updating.

20 minutes seems pretty reasonable to me.
Excellent article, didn't even think Rust could be contorted into doing these things so kudos.
Can you assert no conflict of interest if you play, or associate with people who play?
Also, socially functioning people may play games because a majority plays games, and social function would be the cause.
Is there a way to isolate game playing? Like a version of Tarzan where he's raised by a game?
What about game playing vs reading novels?
Hi there. I help there. ProRender is still very important as it has hardware accelerated raytracing while Cycles does not yet on AMD.

Furthermore we're focusing our efforts on ProRender going forward through USD. https://github.com/GPUOpen-LibrariesAndSDKs/BlenderUSDHydraA... Adding USD workflows to blender and other apps while using ProRender for the rendering solution in USD.
Shouldn't the FBI's email vulnerability over the last weekend count for "A government entity"?
As a heavy plex user, I can't imagine using it as my default music player. CX isn't great for music, IMO.
I read the book when it was new. Just a handful of years later I graduated college and got a job at a start up. One of the guys who interviewed me and ended up in the office directly across from my cubicle was Carl Alsing.

A few months later someone mentioned that Carl was in "Soul of a New Machine" (Carl was the seasoned hand who was in charge of the "microkids", the green engineers responsible for writing the microcode).

I re-read the book. When Kidder first introduces Alsing he sums him up in a few sentences, and damn if he wasn't spot on. Later in the book is an entire chapter about Carl and his unorthodox work habits, and again, it all was so on the mark with what I had learned of Carl firsthand that it gave the rest of the book a great deal of credibility.
I usually generate passwords in the ~32 character range, using A-Za-z0-9, specifically to catch sites with dumb security policies (maximum number of characters, or considering `aceg1234!` a stronger password than `MgHm7MC8kEuXWKEzD7CvDgxCtWssz964`).

In most cases I just comply with their dumb policy and put a snarky comment for my future self in the Notes field of my password manager and it makes me feel better.
Yes it should! Thanks for the catch :D

Edit: This has been added!
Oh, that's better then.