skysight-inc/HackerNews huggingface dataset:
I'm two days late but this is an argument for a developer not removing a security vulnerability from a dead project they've stopped maintaining, not this. I feel like not actively choosing to push malware to a repository where you know many, many automated systems will pull that malware onto the systems of your end-users due to a poor security model in the ecosystem you're developing in is a very very low bar of obligation as a maintainer.

Like, okay, you can't expect a doctor to save the life of every person who comes into the ER, but you can hopefully expect them not to start stabbing patients to death, and something should probably happen if they do, right?

Your argument makes sense for inaction (and is important and not brought up enough, honestly; there is a lot of entitlement in the open source world and people treat library developers in some pretty nasty ways), but not for action, as is the case here. The only obligation anyone expected here was the obligation to hold yourself back from making your project that gets millions of downloads per week point to malware.
The UKs cumulative GDP over the past 2 centuries just edges over $50tn just to put that in perspective.
Do we think Russians manage no open source?

How many fundamental open source libraries have Russian maintainers?

How long before they decide to commit a disk wiping malware and release it without a breaking change?

What if they decide to do it on a larger, coordinated scale?

I would be very careful before attacking an entire population with cruel malware. They dont deserve it, and punishing so many innocent people at once can have serious consequences.

Personally I hope that the creator of peacenotwar, RIAEvangelist, (same creator of node-ipc) will lose his position in open source and hopefully any current and future gig in the industry.

His action was so reckless, vile and stupid that I don't ever want to run a single code statement written from him on my hardware. What a coward.

I also hope he is made to pay all the damage he caused, in the future. Hopefully very soon.
People not being able to own homes is not "healthy". Having to pay 50% of your salary to landlords is not "healthy". It is concentration of wealth, it is the very definition of precarity. Unless your hope is to see a collapse of societies, things go really bad when people can't afford fundamental needs.
It is tested by Google's OSS-Fuzz among others: https://github.com/google/oss-fuzz/tree/master/projects/dav1...

One of the bugs found by OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11464
Even before Google, people would stuff the bottom of their page with black on black keyword stuffing to game Altavista
My brain has some very bad mid term memory (on the hour/day scale). I always forget what I ate for breakfast/lunch. I always forget small tasks I worked on, or where I left my ticket state on.

I can figure it out though. I can replay events from a point I remember and get to it, but it's usually pointless for me to do so, and often better for me to come into tasks from a fresh perspective
There's some sleight of hand in this comment on multiple levels.

> going off this table [1] there is pretty wide disagreement of what constitutes open source between different groups

Since that's not what the table represents, that's not a reasonable conclusion supported by the data in the table alone. (Coincidentally, this is the same principle undergirding Kyle's issue with OSI's post drawing unsound inferences from the Neo4J Sweden decision.)

To start with, something can be GPL-incompatible without any implication about whether it's open source or not. In the second instance, something can be approved for use in the Debian project or not, but—again—that's a separate question from "Is there any legitimacy to the position that satisfying the criteria described in the Open Source Definition is a necessary precondition to being able to call something 'open source'?" NB: maintaining mental clarity about the separation between the legitimacy of that definition and the OSI's authority to "rule" on any given "record" (i.e. the legitimacy of the OSI's power, esp. in future findings) is important. Recognizing a definition as normative is a wholly separate matter from determining who gets to adjudicate whether something meets that standard.

> to claim without qualification that you alone get to define and arbitrate that seems pretty crazy to me

See, that's different even still! Agreeing that a given definition is legitimate is not the same as anointing any given group and its future findings as authoritative.

To use an example: we can agree that "fair use" is described in Title 17 and subsequent case law. In a fair use dispute, this would not be the point of contention—both parties would acknowledge this. Which party would prevail in their action, however, would depend on a finding of fact by the courts: how the definition applies to the parties' circumstances—not whether the definition is legitimate.
Dnsleaktest.com
Do they still have privatdozents in Germany? I remember an article by Hermann Weyl about that system. It was motivated by academic freedom: because the privatdozents weren't employees of the State, the government couldn't tell them what to do, and (somehow) the government also couldn't tell the professors who they could appoint as privatdozents. Becoming a privatdozent made you eligible to lecture at the university, so it meant the professors rather than the government were in charge of who was allowed to teach classes. That apparently wouldn't have worked if the privatdozents got any salary. They instead charged tuition directly to the students. But, it doesn't sound like this UCLA slot allows that.
A school being a mile away with safe sidewalk tend to convince people the kid can go alone sooner.
You know, if you really want to post like you're on /g/ you can just go back to /g/. It's still there.
So any assassin targeting somebody in any other location would be fine, it has nothing to do with the famous case as those people were interviewed after the trip, and now I would be suspect because I read this thread and know it's 123 meters. As an American I'm sure I'd be fine, but it's just a silly entry question.
PCIe does not come out of box. See block diagram. Stays inside for expansion ring connection. This is TRL9 design approach.

HAT signals, GbE, USB, HDMI, etc that come out are all appropriately protected or conditioned to meet EMI requirements per product spec. All of this is TRL9.
For those looking into this more the term used is BIR. British Indian Restaurants. There’s plenty of folks online doing their best to share the secrets of the British curry house. One such is Dan Toombs (The Curry Guy).

Essentially the majority of British Indian curries are made using a base gravy and different items are added to differentiate them. Giving each curry house its own distinct flavour that’s present between most dishes on the menu.
That's why all search engines have a 'safe search' toggle. And on Bing it's much easier to find than on Google.
This is the equivalent of beating up the neighbours kids because the neighbours are doing bad shit
The iPad is a pretty good art device. At least when it comes to drawing. For final editing touches, I prefer using a desktop.

Being able to treat my iPad and MacBook as one seamless device for art work sounds great.

3D artists, for example, pretty much have to do their 3D modeling work on a desktop. But the iPad is a better device for drawing 2d textures. If I could drag and drop textures onto 3D projects, that’d be nice. Or even just drawing layers on my iPad and dragging them into a desktop photoshop project or something.

Outside of art, it seems much less useful though.
The actuators control the XYZ position and the pitch, yaw, and roll, plus curvature. There is no redundancy.
it does seem legitimate to ask whether mere speech may be more potentially harmful in modern times, when any person's speech can have much greater reach than ever before and with much shorter latency. Maybe our norms do need to be adjusted for this. But my standard answer would be that verbally "condemning" someone doesn't create any legal consequences for their speech or concretely materially harm them, so it doesn't reduce their freedom of speech.
I see the continuation of the space programme, the Soyuz launches, and
the pick-up of US astronauts from the ISS as a symbol of the grown-ups
continuing to get on with civilisation while the children squabble and
fight.

Last time I suggested that "good-will in space might set an example
and be a symbol for diplomacy to ease Earthly tensions, I was
down-voted by haters.
I don't need to be able to conceive of every individual grain to be able to make inferences about sand.
The last time this came up, Google demonstrated that it still worked. Most of the examples of it not working people tried to provide are actually just unexpected exact matches in the HTML that the standard user doesnt see, so they seem like false positives or "surprisingly good" results not based on the page content.
I couldn't bring myself to swipe left on any of them.
I’ll try: Terraform replaces all the actions you’d do in the AWS (or other cloud provider) console or API with declarative configuration code. This means you can parametrize it, version control it, compose it, etc. and generally treat it like code.

It would be overkill for many things that have a single, fairly static configuration, but for things like ensuring that a dev and prod cluster have the same configuration, it’s a lifesaver.
The problem is when the Bangladeshi Bengali cooks serve food that is mostly alien to them. Mostly what they serve as Indian food is based on north and western Indian cuisine. Stuff that is very different from what Bengalis in Indian Bengal or Bangladesh would cook.
Ask HN: Can we just agree on showing HTML without requiring JavaScript?
I'm browsing with JS and cookies disabled for speed and safety. Lately, more and more simple and plain blogs require JS to show any text on website. Can we just agree on letting basic html do it's thing? Why insist on JS to be able to show simple text on webpage?

For example:
https://news.ycombinator.com/item?id=30725933

Go ahead, disable JS and try opening blog on this link. Won't happen...

This page is simple dark text on white background with some images sprinkled in. Why is JS required to show this?

I'm sure I'm not alone in this...
>"It is probably/definitely me but I watched the long video and did not learn anything"

This is because the video says how nice would it be to have a banana without a slightest description of what the banana is and why do we need it. Absolutely useless video. And yes I very much prefer reading a document for understanding concepts.

As for the project itself. I did a very brief reading and I fail to grasp any particular value. Basically what I understood is that if you organize your code in some particular way we will do some particular things.

Maybe if they've presented clear example I would be willing to dig in deeper. For now I've "invested" couple of minutes and watched that "nothing" video and I do not think I'll invest any more time. Maybe it is my loss and their idea is amazing but they definitely do not make it easy to understand what's in it for me.
Regarding the raise of money I wouldn't be surprised if given the current state of things in the EU you could manage to get some funding. I have no experience on it but there are companies specialized on helping with writing grant proposals.
Current (Dutch) requirements are for "front" shot only:

https://www.government.nl/topics/identification-documents/re...

and both ears are seemingly not (anymore) required, but I have heard this "both ears need to be visible" thing more than once, at least in other EU coumtries, so maybe it has changed recently in the EU.

Other countries may well require still the ears to be visible, USA seems among them:

https://do.usembassy.gov/u-s-citizen-services/passports/phot...
This is fairly off topic, but he's 76 in that photo? He looks 50!
I don’t have a source for this but I recall reading that mechanical throttle wires are actually not especially reliable so drive-by-wire doesn’t have to be super reliable in order to be better.

But perhaps it’s the same as self driving cars where people get especially disturbed by computers screwing up which sets the reliability bar higher than is otherwise logical.
More likely Udupi versions of South Indian food that is popular across south India
For 50 students all online concurrently, I'd say 1vcpu and 4GB memory is a safe bet. Probably more if you are using Edrys for remote labs, which use more resources and send more information at a higher rate.

We've tested this architecture with ~200 students, which worked fine with a server hosted on an old Thinkpad laptop (4GB of memory IIRC).

To scale Edrys horizontally, you just host multiple separate instances that are used for different classes, since there is no shared database and all auth/auth is stateless.
My searxng is slow to search. How long does it take for you to search?
I hope Russian maintainers of open source publish disk wiping malware on a patch version for one of your dependencies.

That's the norm now, right?
This is actually what I worry about more.

I'm browsing with Firefox on Mac with adblockers, and have some knowledge of what the potential scams are.

Is Google actually helping the average user more than a hypothetical alternative?

Don't know, tricky question to answer, but whatever the answer is it's likely a society wide change, involving regulation and new business models and ethical consumer choices, not just a new search engine.
I used to use nushell for months, but I eventually switched back to zsh. I really liked their pipelines for working with data and I believe that nu is superior to bashisms.

The problem is that I never actually used them. I'm not a big shell user, I use the terminal a lot, but I rarely do any pipelining on the shell (I rarely use find, grep, jq, sed etc). The pain point came that I couldn't just copy-paste quick shell oneliners online for quick installs etc.
I've spoken a bit on HN about this in the past. I would consider myself an introvert, but one that needs some sort of social interaction less I go crazy.

If you are interested, I wrote a lengthy bit more here: https://news.ycombinator.com/item?id=28831828&p=2#28836750
I think people are forgetting that large portion of data once available for search engines in blogs and forums is now dead. This data is live only on closed Facebook groups - which you can't search even if you are on Facebook and blogs are dying slowly with Facebook and twitter, with Facebook as a closed garden and twitter is on the way to become one.
I don't know why people so eager on Reddit content, since their push to more monetization, the algorithm is aimed to create more traffic and not quality discussions. You can see it on the front page with many posts are more flammatory in nature.
Ask HN: What to do with an old iMac 1GB with Snow Leopard?
Hi everybody!
I have sitting on my desk an old iMac with Snow Leopard, Core2Duo and 1GB of RAM.

MacPorts does not work anymore (I fear some problem with SSL certs).
It is unsable to surf the web but still work pretty well with its outdated iLife suite.

I have a gcc 4.x and the developer toolkit.

X11 Server works but it seems pretty slow to do run it as a remote display

The simplest application could be as a static http server, but seems a bit too much power hungry for this.

Another ideas is to recompile some embedded software like sqlite3 and use it as a "server database via ssh"... some other nice ideas?
The utility of credentialism for professional positions lies in the cost of required skill assessment Vs. the size of the talent pool. You can afford a fast filter like a college degree if you have a surplus of candidates. Especially if it generally is good indicator of cognitive ability, which OP admits it probably is.

A small pool of talent for niche requirements, will require significant adjustment and resources in assessing each individual that applies.

Some of the most hardworking people where I worked had a completed degree. Filtering people because they do not have X degree of Y years of experience is not right morally, but this is understandably done out of practical concerns. Nobody likes it but talent acquisition is expensive enough as it is.
Huh? Most of Europe has socialized medicine and they have a ton more diesels and thus air pollution than the US.
You are forgetting the point that this post is astoturfing .

Just ignore the Apple hypesphere and go about your life.
If someone has contact with Jeff (not just a cold reach out), let him know to put in inquiry, and reference "EAU for review"
> They've had to cater to big companies to remain in silicon valley

Delicate wording for being "Google's controlled opposition" or simply "Google's bitch".

> with the competitive salaries of that area.

At the time Mitchell Baker gets a raise up to 3mil/y to have a salary similar to "competitive roles elsewhere", Mozilla has 75% market share drop and loses developers due to inability to remunerate them. All for the benefit of Google pretending lack of monopoly and placing their malware on Mozilla's websites praising Mozilla's focus on privacy.

Today's Mozilla deserves no trust.
Like Hubble, are images taken with JWST public domain?
"Do what we demand or we will move you up our conquest schedule"
> Can't help but feel there is a strong lesson in there for software people.

Hmm, can you elaborate on that? What is the strong lesson for software people specifically?

Don’t get me wrong it is a beautiful design, and I’m a big fan of flexure designes in general. There is this amazing open source project which uses similar flexure mechanisms for very accurate positioning of microscope samples: https://openflexure.org/

But I fail to see any obvious takeaways which would generalise to software development. Other than perhaps “Think and work on the same problem for a decade and more and you might find a compact and elegant solution.” Which is nice, when one has that luxury.
I learned that at University; the students who were doing Astronomy / Astrophysics would make pilgrimages to the Big Telescope, which was located over 200 miles away, in a remote and sparsely populated area on a high plateau, known for clear skies, low rainfall and cold nights. Cold cold nights. Not much for students to do outside of work either; the nearest town had 3K people, whose interests included farming and churchgoing.
Is seems like people have forgotten any lesson the cold war gave us. About the principles of peaceful coexistence that allowed us to be alive today.

Anything that can further the mutual understanding in culture, art and science between peoples is a good thing. It is our duty to do anything to ensure the peace.

People seem to prefer to advertise their moral rightfulness even at the risk at dooming humanity. After all, everyone who doesn't agree must be a Putin-loving traitor.

Putin's Russia might be a fact of live for many years still to come and we will need to live with them. I know people wish otherwise but that is not how the world works.
> You can activate a developer mode and install any extensions you want to

I just installed fennec and for the life of me I cannot find these developer tools anywhere.
I believe Vestd (https://www.vestd.com/) is a suitable engine to achieve a very similar outcome to this in UK, or at least provide the framework to do it. It's like a slightly more mature version of Slicing Pie
India's Open Network for Digital Commerce(ONDC)
>Allow me to explain how you are wrong. [..] I feel like the one thing that has been holding it back has been this very issue.

Allow me to explain how you're wrong. How often have you heard a normie Average Joe that's tech illiterate and just buys Macs or Walmart PCs and doesn't even know that their machine runs MacOS or Windows or that their iPhone runs iOS or that their Samsung phone runs Android (basically your average boomer dad), say "Gee wizz, I would totally wish I could run Linux on some decent HW, if only Linux driver support for Macs were better". lol

You're delusional if you think Linux market share on laptops/desktops will explode when the driver situation improves. 99,99% of people who will buy Macs will keep using MacOS. Most people buy into the Apple ecosystem for the ecosystem, and apart from some geeks/tech workers, they're not gonna start installing Linux on them.

My point is, you're massively overestimating how many Mac users (outside of geek tech bubbles) would actually daily drive Linux on them.

And even in the geek/tech bubbles, most will probably play with Linux on their M1 Macs for a day, and once they see that the trackpad movement is worse than MacOS and there's some screen taring due to some driver/wayland issue, they'll reboot and revert back to daily driving MacOS. Rinse and repeat in an year when it will finally be "year of the Linux".

The "year of Linux" on the desktop/laptop hasn't yet happened not because people couldn't run Linux on their Macs but because of countless of other factors, the biggest of which being that the average consumer doesn't know, want or care to install another OS than the one that came with their machine out of the factory.
It boggles the mind to read this because I’ve been using Synergy (and now Barrier, and soon Barrier’s new fork once they ship) to do the same between Mac and Windows for many years, so… it’s nothing really new.

It is cute (I’m typing this on my iPad controlled by my MacBook Pro), but just doesn’t seem very reliable at the moment (and does not work at all from an older MacBook Air). There’s a bucketload of polish in the experience, but I would refrain from calling it groundbreaking or liberating… Just a little better (UI-wise) and a little worse (no PC support).
I think the word "supporting" here is doing rather a lot of work -- in this case by "supporting" we'd mean "releasing a new version of the software that is compatible with the backwards incompatible changes introduced by chrome 99".

For most perpetual software licenses I have seen that can be purchased with a single one-off payment, you get a perpetual license for to a single version of the software, which specifically does not include free updates to the latest version.

> feels like at least the life time of a car.

I'll push the car licensing analogy down the road to a slightly ridiculous destination:

Suppose you purchase a diesel powered car, the purchase price includes a lifetime license to use the car (it sounds insane to need to explicitly state this, such is the wonderful world of software licensing) and let's say the purchase price even includes a lifetime warranty for manufacturing defects.

In one year's time, the government introduces new regulation to outlaw diesel cars and require all cars to be converted to run on electricity.

Under the terms of your lifetime license and warranty for your car, would you expect the car manufacturer to convert your diesel powered car to run on electricity?

That is, what if the problem is not that the licensed software product itself has changed but that the surrounding software ecosystem around the software product has changed?

edit: to me it would matter a lot if 1Password6 was sold to you as a software _product_ or an ongoing _service_. If 1Password6 is sold as a software product, then I would have no expectation of free patches or upgrades if it no longer integrated with newer versions of other software owned and changed by other companies. If, on the other hand, 1Password6 sold you a lifetime's subscription to an ongoing service with some guarantees about a minimum level of non-brokenness & availability, then you might reasonably expect them to continue to offer a service that works, no matter if dependencies of their service change. I would be very surprised if they did the latter --- committing to the liability and ongoing costs of offering an ongoing service indefinitely for a single one-off price is usually insane from a business perspective.