skysight-inc/HackerNews huggingface dataset:
Yes, indeed.

I also failed to mention the light in the cell will be set to bright and will be on 24x7 and your cell will almost certainly have a completely glass door and you will be under camera and guard surveillance 24x7 to make sure you don't do anything stupid. If you are very lucky, some of these cells have a small wall in front of the toilet so you can at least get a tiny amount of privacy - they'll only be able to see you from the waist up.
Yes, Rocket is super handy! It makes spinning up custom web apps insanely easy and fast
Good information!

> In case you like to invalidate the cache every time a specific file (yarn.lock, go.sum, etc) changes, you can explicitly configure this behavior using cache:keys:files https://docs.gitlab.com/ee/ci/yaml/index.html#cachekeyfiles

They're using cache:keys:files so it will be installing all of them each time yarn.lock changes. When a build is triggered where yarn.lock hasn't changed, it does a build without downloading all the packages.

Come to think of it, builds don't always run in chronological order, so it could wind up with extra packages. Yarn has autoclean, but it says to avoid using it. NPM seems to be quite OK with it, though: https://docs.npmjs.com/cli/v7/commands/npm-prune

I think caching two folders - one that contains the downloads and one that contains the installed packages - could be the way to go. Yarn and npm have caches to prevent downloading files. And maybe only cache the downloads on the main branch.
This is on of those articles where they have someone who doesn't really know anything about math or computers interview somebody technical in the field, I think. So most of what the journalist gets, unfortunately, is that PRNGs are a thing but not perfect.

I'm pretty sure the project is looking at physical devices to add to the entropy pool, and they talked about two examples (which do seem pretty neat).

> One relies on the patterns magnetic films make when disturbed, the other on how electrons travel through the barrier of a quantum-tunnelling diode. Both of these things are truly random.

The use of the Von Neumann quote, "Anyone who considers arithmetical methods of producing random digits is, of course, in a state of sin” is pretty annoying, given that he said it in defense of his PRNG. Sort of a tongue-in-cheek "yes this is fundamentally wrong (sinful) but I'm going to do it" sort of thing.
Can we change this to link to the original video, at https://www.youtube.com/watch?v=7VhrG-7SBZg ?

Video description contains details about what happened, which might not be clear from the video snippet. FSD swerved into oncoming traffic, and the driver manually pulled back to the correct lane, but lost control and went off the road.
then you're ideological driven instead of results driven.
Aha! It's more complicated than i thought:

https://mbechler.github.io/2021/12/10/PSA_Log4Shell_JNDI_Inj...
Could be said that they profit from management FOMO.

As a consumer I spend more time than I should thinking about what I buy. I'm heavily influenced by reviews and opinions which I know to be biased and not always authentic but is still the best way to discover hidden issues in a product. I frequently think about the characteristics that I like to see in the product and compare it with similar products. But sincerely, trying to approach a rational decision has become time costly if not counter-productive due to lack of reliable information and strong noise. Pay and pray might be a better strategy.
Slightly off topic, but I'm looking forward to FPGA tooling improving to the point where I can build a fantasy personal computer based on dragging and dropping architectural components into a design that compiles to hardware.

I'm definitely too lazy to design from scratch or build by hand, and there's already so much out there designed for FPGAs, so just hoping one day it may be plug and play like the Mister is for entire systems.
If that were the case, then decentralization would be the explicit opposite: instead of trusting a central party you've got N machines owned by M parties involved, most of whom you couldn't take to court if you wanted if a "smart contract" was misinvoked or a blockchain transaction was screwed up. Sure, most chains require attacks to be 51% or more collusion, but if a 51% attack happened, how many third parties did you trust that you probably can't sue? Millions of machines with thousands of owners? That is by far the opposite of "trust as few parties as possible".
There's huge amounts of space between "open-ended computer science problems" (your words) and "classic programming tasks" (gp's words)
> if you used the native widgets and set tab-indexes you'd be all set for changing sizes, blind users, OS re-theming, etc

> Imho, the real reason we don't see stuff like this for the Web

Where are you looking on the web? tab-indexes and extending native web components gives you responsiveness and accessibility. The browsers provide theming capabilities for light and dark mode, and OS level color preferences (I use "red" for selected on Mac) easily show themselves on CSS `outline` etc

> Globals

No one uses globals on the web. This isn't 2000, or even 2013.
Not in general. Your own cryptography implementation? Hell no. Your own simple logging solution that doesn't need anything fancy from log4j? Probably.
It was a volunteer oversimplification to explain my reasoning, not parenting advice.
It’s not some special secret coconut. That’s like looking for the ultimate focus of vision. Focus is adaptive and dynamic. Meaning too. Or like trying to find the best word in the dictionary. They’re all good and only context makes one more relevant than another.
Makes about as much sense a person with a penis thinking they are a woman
He’s on pace to earn more then $3 million before he turns 30. He doesn’t much of a plan to live reasonably for many years.
Producing large samples of uniform pseudo-random numbers in high dimensions is very tricky. If COINFLIPS can solve that problem then that would be very useful. That said, I don't know if there are many computational workloads where the basic random number generation step is the performance bottleneck.
Society is finding ways to value a wider range of talents. Different people are good at different things and, unfortunately, only a subset of those things are valued in the economy.

These technologies are allowing people to display their talents and allowing them to make money off of them. Back in the day being good at video games was a fun thing to do when you had free time. Now there is a small chance you can make a living off it.

I can't remember the quote but Warren Buffett once said that the only reason he is a billionaire is that he was born at the right time, with the right gender (back when women weren't allowed to do much), and with the right talents.

Valuing a wider range of talents allows more people to participate in the economy. Crypto for example allows developers to inject little bits of economy into apps. Perhaps in the future someone can make a living creating really good cat memes instead of a deadend job that is basically useless anyways.

If that last sentence offended you I'd suggest you checkout the book "Bullshit Jobs".
I think the impressive thing is doing it day after day. I can do lots of things, including programming, for 12+ hours. The trouble is, after a day or two of that, I desperately don't want to do whatever-it-is for several days or weeks. I want to go do other stuff.

It's the doing it day after day on a regular schedule that makes me feel like I never really recover from programming, and just want to zone out and stare at the wall until bed time, having very little energy left for anything either fun or productive, after 4-5 hours, most days.

I'll even do that with video games. Get the family out of the house and give me a weekend, I'll play vidja games for like 16 hours. Then wake up the second day and not want to touch a game for at least a week, and instead start doing home improvement projects or whatever. Or sit outside and read a book all day. Not because I feel like I should, but because it's the thing I most want to be doing, and I have zero desire to look at a screen for a good long while.

The regularity of work is what makes it so damn draining, for me. I'm sure it'd ruin gaming for me in short order, too, though I'd have fared a lot better at it back when I was in my teens or early 20s than I would now, for sure. I can't do 30 waking hours of anything now. 24 just about ruins me. I could get to about 36-38 before hitting a wall and passing out for like 12 hours, back then. 30 wasn't that big a deal, and I hit that mark pretty often (usually, yeah, playing video games for a good chunk of it).
Snap-On has had similar high quality and great lifetime warranties

Can't speak to what they're currently doing though
I haven't ever played a MOBA, but fixing bugs (which takes up a significant amount of developer time), seems to be about as rote as playing an RTS (which I have played, albeit almost 20 years ago).
I’ve experimented with all of these techniques, and you basically get the same benefit from 20 minutes of vigorous exercise.
I think the AI effect is reversed. It should be "any time a program can compete with humans at a new task it will get marketed as AI".

I don't really get the original argument. I never thought "todays AI isn't smart, but if it could play Go, that would be an intelligent agent!". So "the AI effect" is just a strawman, I have seen no evidence that anyone actually made such a change of heart. AI research is important, but nothing so far has been anywhere remotely intelligent and I never thought "if it could do X it would be intelligent" for any of the X AI can do today. When an AI can pretty reliably hold a remote job and get paid without getting fired for like a year, that is roughly the point I'd agree we have an intelligent agent.

Edit: That wouldn't require "much". If the AI can read and understand text, then it can read about backend programming and what makes a good server and build a mental model for stuff like code quality. Based on what it learned it can also device a strategy for how to get a job, so it creates a github account, writes some example projects and puts them on github and writes a CV based on those, then go look for jobs.

Of course, this would only be simple if the agent was intelligent. Not like todays agents which are coded for extremely specific scenarios. Even the general gameplay AI they talked about is for very specific scenarios compared to what a human deals with. In order to move towards creating an intelligent agent we need to make progress in this direction. But nothing that has came out of AI research recently really do make any progress in that direction.
With Chips Act, US Risks Building a White Elephant
It's not the same and I don't see why we would need to put someone in jail for your analogy.
Bullet points require a blank line to be separated on HN (this happens to a lot of people):

---

Air-gapping is used to protect the most sensitive of networks. In the first half of 2020 alone, four previously unknown malicious frameworks designed to breach air-gapped networks were publicly documented. ESET Research decided to revisit each framework known to date and to put them in perspective, side by side. Here are the key findings stemming from this exhaustive study:

• All the frameworks are designed to perform some form of espionage.

• All the frameworks used USB drives as the physical transmission medium to transfer data in and out of the targeted air-gapped networks.

• We have not found any case of actual or suspected use of covert physical transmission mediums, such as acoustic or electromagnetic signals.

• Over 75% of all the frameworks used malicious LNK or autorun files on USB drives to either perform the initial air-gapped system compromise or to move laterally within the air-gapped network.

• More than 10—critical severity—LNK-related remote code execution vulnerabilities in Windows have been discovered, then patched by Microsoft, in the last 10 years.

• All the frameworks were built to attack Windows systems. We have not found any evidence of actual or suspected malware components built to target other operating systems.

In this white paper, we will describe how malware frameworks targeting air-gapped networks operate, and provide a side-by-side comparison of their most important TTPs. We also propose a series of detection and mitigation techniques to protect air-gapped networks from the main techniques used by all the malicious frameworks publicly known to date.
Just because you said "psuedo" in all cases: it is "pseudo".

Completely off-topic: do you live alone in the forest, or with others?
Doesnt work on iphone
The basic idea of making Open Source a requirement ...

Please explain how this decree is neutral and non-biased.
It's a little bit different here since there's an actual editorial response, and not just removal or similar.

The whole reason facebook has 3rd parties do the factchecks is so it can claim that it isn't responsible for the factcheck content.

They're basically trying to game the system to get all the benefits of a platform (waived liability), while still exercising editorial opinions as if a publisher, even if it's by way of selecting which 3rd parties it defers this defacto editorial power to.

I think if they wanted to claim freespeech here, it would amount to an (at least partial) admission that they are responsible for the content, which afaiu would make them subject to libel.

It's more or less a reinvention of what was attempted with "company towns", obviously with some significant differences.
Or maybe not:

> Apparently there had been a prior patch (CVE-2009-1094) for LDAP, but that was completely ineffective for the factory codebase. Therefore, LDAP names would still allow direct remote code execution for some time after the RMI patch. That “oversight” was only addressed later as CVE-2018-3149 in Java 8u191 (see https://bugzilla.redhat.com/show_bug.cgi?id=1639834).

https://mbechler.github.io/2021/12/10/PSA_Log4Shell_JNDI_Inj...
People like to be bitter about others finding success in spaces they don't they don't like or don't take very seriously.
> Why do you think demonstrating focus on an addictive video game is the same as solving open-ended computer science problems?

Firstly, I probably wouldn't classify the work most of us do as "solving open-ended computer science problems" so I'm not trying to make a comparison to that work.

Secondly, I guess it stands out to me because I watch other people play the same addictive game and are unable to play at a high level for the same lengths of time. If it were just an addictive property of the game, we should expect to see thousands of tyler1's as we see thousands of heroin addicts. Since we do not, it makes me think that there's something special with him.
This sleep technique can be easily replicated in modern life: work from home, have lunch then a lie-down then have the Teams app's blippedy blip blip blip incoming message audio notifications wake you up to the harsh world of reality.

Haven't felt this leads to me feeling especially creative, though.
a pertinent section in wikipedia regarding how to get potassium...

https://en.wikipedia.org/wiki/Banana#Potassium
LDAP.
* Server running mopidy [1] with all your audio loaded up on it and connected to Spotify.

* Install the Iris plugin for UI [2] on server

* Install snapcast [3] server on the audio server and snapcast client on raspberry pi's near all stereos you want to pipe audio into

* Put bookmarks to the Iris page on all family member's phone home screens.

* Add the snapdroid app [4] to each phone so people can adjust volume of each stereo and also play audio on their phone (or anything it's bluetoothed into)

[1] https://mopidy.com/

[2] https://mopidy.com/ext/iris/

[3] https://github.com/badaix/snapcast

[4] https://github.com/badaix/snapdroid
> Playing video is very expensive task. Just updating 4K screen at 60 frames per second

Nobody mentioned anything about 60 fps. A ton of video is at 24 or 30 fps.

> requires transferring of 3840×2160×60 ~ 497 million pixels or 1,49 Gbytes per second (if you skip every fourth byte).

You do not need to update the entire screen all the time, you can do partial updates (since very frequently not 100% of the screen changes - it is the most basic fact on which video codecs rely on) and you can "heal" the output over time after partial updates (also important for video playback where you can't guarantee a fast stream).

> I doubt you can do it without a "modern PC" with hardware graphic accelerator.

Why the limitation for hardware graphics accelerators? Hardware accelerators exist for decades now and even hardware video decoders exist for more than a decade. If anything not using those is "not taking advantage of the hardware" that i mentioned.

> Also modern codecs require lot of computations and lot of memory. For example, codecs like VP9 require to buffer up to 8 frames for reference. That would take 8×3840×2160×4 ~ 265 Megabytes of RAM.

Sure, but that is RAM computers also had for more than a decade now - the PC i used in the early/mid-2000s had 2GB of RAM - hell, even the cheapo EeePC netbook from the late 2000s had 1GB of RAM.

> I did some research to see if it is possible to play Youtube video on 8-bit CPUs. What I found is that there is little hope for this. It's better to develop your own video compression format.

Sure, but i never mentioned anything about 8-bit CPUs, YouTube or even existing video compression (or specific framerate for that matter). What i wrote is that you do not need "modern PC power" to do 4K video. You do need more processing power than what would be found in 8-bit CPUs (or at least common 8-bit CPUs you'd find in 80s home computers), but i'm certain you can have a 10 year old PC play 4K video without trying that much. Perhaps even a 15 year old PC with a bit of effort.

FWIW what i had in mind when i wrote that comment was the "8088 Domination" demo which used a custom codec and player to do fullscreen video and audio playback on an original IBM PC and honestly i do not for one second buy the notion that if you can do that on a 40 year old PC you wont be able to have 4K video on a 15 year old PC - if anything i might be too generous here.
Tim O'Reilly: Checking Jeff Bezos Math
Probably because to get this stuff to work is really hard in practice.

Several years ago, we were playing with https://github.com/fulldecent/system-bus-radio to work, but we couldn't, even though we had the right MacBooks.
Yikes! O.o What I call "resolvents" above are not. Resolvents are the clauses that result from the elimination of complementary literals found by DFS. Haha. Good thing I sometimes go back and re-read my old comments...
I remember the first time I span up a Linux distro on a PC. The console felt so bloody quick in comparison with the Win98 that was shuffled out of the way to make room for something called ext2. I compiled my first kernel - 1.98something I think - with something called "eggs" (egcs - ooh controversial!) and the text flew up the screen smoothly and fast, really, really fast.

This machine had DOS and W4WG 3.11 before that and prior to that I had a 80486 and before that a 80286 plus a '287 co pro with just DOS 3-5ish so I had a preconception on what streaming text consoles should look like. I'd also used some green or amber screens with something large and complicated behind them. That's what IT looks like to most people (something complicated) - don't forget that! My memory grows a little dim but I think it was a Pentium II box that I first slapped Linux on.

25 years later.

I update my various Linux boxes in a minute or two at most. I update Windows boxes in a few hours at most - normally around 15 mins but several hours is not unknown.
Ask HN: Merging tools without version control?
95% of the time I work is spent SSHing into a faster server than my laptop, working with a variety of git repos on there.

5% of the time, there are internet jitters that make this not feasible and I rsync the directory and continue working locally. Sometimes after this I'll end up working again in the repo on the server and so end up with two directories that started at a common point but have diverged.

Ideally I want to do a kind of 'rsync merge', a git merge but just with two directory trees that are close-but-not-quite aligned. I don't want to temporarily create separate parent git repos since the directories themselves already are git repos and that sounds like a confusing recipe for disaster.

Is there any kind of standalone 'git merge'-esque tooling for independent directory trees?
The amount of impact this has is absolutely mind-boggling: https://github.com/YfryTchsGD/Log4jAttackSurface/tree/master...
> All the frameworks used USB drives as the physical transmission medium [...] We have not found any case of actual or suspected use of covert physical transmission mediums, such as acoustic or electromagnetic signals

What about the red channel transmission in VGA cables from the Snowden leaks, if memory serves?

I'm happy to see this claim because I usually skip these articles about leaking this or that in a lab environment via EM (they seem too esoteric to me but the media seems to love it because it really plays to the imagination), but at the same time it worries me that I can think of a counter example off the top of my head. Maybe it doesn't qualify as a "framework" or wasn't bidirectional, even if it was used to leak confidential data.
And my reply would be that evidence is not always immediately apparent, but that doesn’t mean evidence doesn’t exist.

The commenter’s point was that due to other scandal, “scientific consensus” doesn’t hold the same weight it once might have held. Especially when powerful industries and Lot’s O’Money are involved. Not just sugar, but energy, tobacco, and yes…even other pharmaceuticals. TBH there seems to be a pretty direct correlation between any industry that tends to be regularly described as “Big [name of industry]” and these sort of scientific oopsies that turn up a decade or so later.

I’m fully vaccinated and boosted, but I am not going to be at all surprised if 10 years from now there is an “oops” with this too.
Please don't argue in the flamewar style on HN. We want curious conversation here.

https://news.ycombinator.com/newsguidelines.html
I think I once got into this hypnagogic state by accident. I was having a nap and my dogs woke me up because it was time for their walk.

I felt sleepy while walking the dogs but also had a clarity regarding anything I examined in my mind. It's as if my regular state of mind was like walking in a forest with limited visibility, and now I could see the territory from a bird's perspective.

This lasted for about 15 mins maybe. I've never been able to experience this again. Maybe I should try this technique :)
If you're telling me there are ships running in the defence force that can't actually communicate with other people at the drop of a hat, at all times, then how is that even possible? That requires some serious negligence.

Indeed it does, but unfortunately ships have to be designed to constraints other than, "Works perfectly all the time, even in combat." For example, one of the reasons that the British lost HMS Sheffield during the Falklands War is because, due to issues with her antenna layout, she was unable to use her radar and satellite communications at the same time. When the Argentine planes launched an Exocet at her, she was in the middle of using the satellite antenna, and thus missed the incoming missile. Why was the antenna layout so boneheaded? Budget cuts during the shipbuilding program, which forced a reduction in size and consolidation of antennas.

In a lot of instances, if the system fails, the plane falls out of the sky, so I am pretty sure we're doing that well.

The numerous issues we've had with communication and sensor fusion on the F-35 indicate that we aren't. Now, the military absolutely assures us that those issues have been resolved and the F-35 is great now, but I think I can be forgiven for not taking their word 100% at face value.