skysight-inc/HackerNews huggingface dataset:
If you don't synchronise it's not an issue :-) but if you have 100+ instructions in motion at any one time creating a bottleneck at the end of every basic block would likely have a big effect on how things run.

Normally we retire up to 8 instructions per clock - merging 8 bits of sticky state is some simple logic (some or gates, it doesn't matter what order they get processed in), merging 8 saved PCs (which one do you save?) is harder, it probably means a priority encoder (order probably does matter) and a 63 bit mux (still doable in a clock though)
If something feels wrong to you that means it is almost certainly wrong. There are so many things I’ve seen that made me go “hmmm, that’s odd”, which I ignored to my peril.

An assert that doesn’t quite make sense. An argument type that feels too specific. A hang in ssh once in a while.

7 times out of 11 they’ll turn out later to be the first sign of an error you wish you’d looked into sooner. I guarantee it, 82%.
How it happened doesn't change the fact that they have been breached.

If I was a bank and claimed that I haven't been robbed, an insider just transferred billions of pounds out of the bank and then fled, I think everyone would rightly say "What are you talking about, you have been robbed!"

It doesn't matter if it was done by a guy in a black and white stripey t-shirt, or if it was done by a rogue internal employee, a bank robbery is a bank robbery.

In fact, the ability of an internal staff member to transfer lots of money out of the bank probably signifies a more significant and systemic issue - particularly if i've lost my money and the bank refuses to acknowledge they have been breached/robbed (it was just an internal rogue staff member, not a robbery! our security hasn't been breached!).

A bit of a stretched analogy - but i'm sure everyone gets the point. Security isn't just about technical security - it's the whole process involved in making sure these things don't happen. A banks 'technical' security might be great, but the bank would still be considered horribly insecure if a staff member can transfer any money out of an account. Equally an auth service might be 'technically' secure, but the ability of a single rogue staff member to impose a lot of damage suggests more systemic issues.
The De-obfuscated Protestware code from node-ipc that wiped Russian computers
Direct link to Code:

https://www.lunasec.io/docs/blog/node-ipc-protestware#a-look...

Edit: I tried to link directly there but it didn't work. The "hash fragment" in my submitted URL doesn't actually make it's way through the Hacker News link filter. My apologies to everybody for having to scroll to the bottom to actually get to the "real code"! Here is the link to use instead up above. (The rest is my OG comment)

------

My colleague and I wanted to understand how this malware/Protestware worked, so we took the time to manually de-obfuscate the code that was bundled with the recent "node-ipc" NPM package to find out.

It's pretty simple and makes it clear that this wasn't very "advanced" malware. It was very much an emotionally motivated Open Source dev wanting to use their "power" to protest the war. The impact of a more sophisticated attack is... something I think about a lot about how to fix.

That's why this is another good reminder to keep thinking about how we can actually "fix" these types of supply-chain attacks. Here is a list of malware in a spreadsheet[0] from other authors that also have protestware bundled. (It's in Russian but the Google Translate browser extension worked for me.)

I wrote a blurb at the bottom of this blog post when we published it talking about mitigating "bad" NPM packages, and I need to update it to add a bit about projects like Deno[1] that are attempting to solve this by "forking" the Node ecosystem.

Deno adds permissions per dependency (like a browser extension or phone app) and sandboxes all untrusted code by default. It's going to take us many years before we're at the point where a project like that is "production ready" but it's something that I'd encourage you to check out!

0: https://docs.google.com/spreadsheets/d/1H3xPB4PgWeFcHjZ7NOPt...

1: https://deno.land/
Does it make sense that all the GPUs are bought out? They each provide a return for mining in the short-term. In the long term, they can be used to run A(G)I models, which will be very very useful
It's across the board, with GPUs, things like these pis, retro games and accessories even, it's pretty annoying.

Thankfully necessities like TP and masks are no longer being scalped but it's still happening in electronics.
A good recent look at MOND and how it compares to dark matter theories is the recent episode "What If Our Understanding of Gravity is Wrong?" [1] on PBS Space Time.

[1] https://www.youtube.com/watch?v=0sTBZ2G4vow
What is with people making things that are essentially music plugins and not making them VST...

Is this the new hipster hill to die on?
Above all I'm saying that sentences like "microservices are better", "monoliths are better", "42 services are the best" are all stupid without context.

What your business does, how many people you have 3 or 10k, what kind of roles and seniority you have, how long you're in the project - 3 months in or 10 years in, how crystalized architecture is, at what scale you operate, how does performance landscape looks like, what kind of pre-deployment quality assurance policies are dictated by the business, are offline upgrades allowed or we're operating in 24h, which direction system is evolving, where are gaps (scalability, quality...) etc are all necessary to determine correct answer.

Building website for local tennis club will require different approaches than developing high frequency trading exchange and both will be different from approaches for system to show 1bn people one advert or the other.

Seeing world as hotdog and not-hotdog (microservices vs monoliths) makes infantile conversations. There is nothing inherently wrong with microservices, monoliths or any of approaches to manage complexity ie:

- refactoring code to a shared functions

- encapsulating into classes or a typed object

- encapsulating into a modules

- simply arranging code into better directory structures, flattening, naming things better, changing cross-sections ie. by behavior instead of physical-ish classes and objects

- extracting code to packages/libraries inside monorepo or its own repository ie. open sourcing non-business specific, generic projects or rely on 3rd party package/library

- extracting into dedicated threads, processes, actors/supervisors etc.

- extracting to service in monorepo or dedicated repository or creating internal team to black box it and communicate via api specs or use 3rd party service

...bonus points for:

- removing code, deleting services, removing nonsensical layers of complexity, simplifying, unifying etc.

etc
So as a quick example from my past experiences, using an Ubuntu base image is fraught. If you don't pin to a specific version (e.g. pinning to ubuntu:20.04 instead of ubuntu:focal-20220316), then you're already playing with a build that isn't reproducible (since the image you get from the ubuntu:20.04 tag is going to change). If you do pin, you have a different problem: your apt database, 6 months from now, will be out of date and lots of the packages in it will no longer exist as that specific version. The solution is "easy": run an "apt update" early on in your Dockerfile... except that goes out onto the Internet and again becomes non-deterministic.

To make it much more reproducible, you need to do it in two stages: first, pinning to a specific upstream version, installing all of the packages you want, and then tagging the output image. Then you pin to to that tag and use that to prep your app. That's... probably... going to be pretty repeatable. Only downside is that if there is, say, a security update released by Ubuntu that's relevant, you've now got to rebuild both your custom base and your app, and hope that everything still works.
I'm doing my part o7

It's seriously a very interesting and useful dataset that you can do a lot of fun stuff with, if you grab one of the zims without pictures it's of very manageable size too of just a few dozen gigabytes compressed, and there are reasonably good library support in many languages.

Last point doesn't go for Java. Only one I could find for that was this <https://github.com/openzim/libzim>, it's antique and extremely poorly optimized and lacks support for newer compression schemes. I have fixed the performance and added support for zstd compression, but not published the code as it's extremely not finished and major features in the original codebase are very broken. I'll get around to sharing the code some day but right now it's basically permanently mid surgery as I've only patched so far as to get it to extract all or specific files. If anyone wants a copy of this code regardless of state, give me a holler.
Why must the tone always be conciliatory? Why must both sides have a point? Why must we write everything to try and change minds on every topic at once?

Maybe for the rational people, the argument you’re talking about is over; at this point maybe we’re just discussing the problem directly. Maybe everyone who would be convinced has been convinced, and the people who remain can be dealt with differently than how we’d deal with genuine difference of opinion.
I've looked over the paper now, unless I'm misunderstanding this seems very similar to the general trend of hebbian learning/STDP/local predictive coding/teacher forcing (for those unfamiliar, these are all distinct but the basic idea is always to have a signal adjust based on the difference with some local target. Hebbian learning is the basic "fire together wire together" principle, STDP is a specific instantiation that works with specific types of memristors, teacher forcing comes from RNN training and imposes the ground truth input on intermediate step, local predictive coding I can't recall the precise thing but but basically diffuses a local output error through a network similar to what is done on a single layer here [which can actually approximate backpropagation! It's very cool]). How would you differentiate yourself against this/what would you say is the core benefit of this approach?
There's a lot of truth to that, but Jira (or more accurately Atlassian) does things that are worthy of hate too.

- Some information is displayed in unexpected places

- The application can be slow to load

- Customizations are confusing (Do i need to edit the screen, the screen scheme, or the issue type screen scheme?)

- Confusing options (Field configurations have both a "Configure" action and an "Edit" action.)

- Basic features are often left out and require plugins to bridge the gap.

And much more!
> OH NO! where will i get TOP 100 CELEBRITY DOGS THAT LOOK LIKE POISONOUS FROGS lists in the future?

Oh don't worry, you'll still get that. In fact, that's all you'll get. Investors know how to sort the wheat from the chaff to provide us with the race to the bottom our society really needs.
The extent to which a society aspires to this norm has a great effect on the extent to which that society flourishes and prospers.
Most movies are still 24hz. People don't mind it – they can interpolate the frames in between better than any tech by far.
> For example, there is the case of Dorian Abbot, who was disinvited from an MIT lecture after he wrote an op-ed criticizing affirmative action

Or Chelsea Manning who was disinvited from speaking at Harvard after pressure from the government
That was my thought. The value of a piece of metadata is inherent in its context as a node within a network. You might have disparate pieces of information about a group of people, but weighing their connections by similarity/proximity/etc. allows you to develop assumptions about individuals, even if all you know is their phone number and who had that phone number in their contact list.

Specifically, from the point of view of network analysis, a missing or unknown node becomes suspect when various connections point to it. In the era of high connectedness, that seems like kicking a goal on your own team if you're playing the "be anonymous" game.
Yup, in a semi-related field, NVIDIA has 3xTF32 for cases needing higher precision: https://github.com/NVIDIA/cutlass/discussions/361
ClickHouse is awesome, but most of the benefits come from columnar storage and you need to design around that. Be aware of how the thing works and how computer architecture works, because sympathy with the machine is what reaps rewards.

You want to minimize the number and size of columns touched when filtering and aggregating. If you need source data, store it relationally or in a document store and only select the key from CH. Don't put JSON in CH, fat columns don't make sense. And CH can be just as slow as MySQL if you select a whole wide row but only apply predicates to a handful of columns. Only touch the columns you need.

Joins are super expensive because it costs a whole lot of instructions to look up a row on a per value basis. CH can use vectorized operations to eliminate or aggregate multiple "rows" with instruction level parallelism because the column data is contiguous. Joins are going to be an order of magnitude slower, just with memory latency randomly hopping around a hash table. Insert data prejoined; use the low cardinality string column, substitute (i.e. precalculate) conditions on low cardinality relations with integer IN tests, denormalize high cardinality relations.

Partitions and various other storage level tricks are a way to eek out better perf for mutations when they're needed. Rebuild a subset of the data and swap it in and out. This is common on Hadoop based columnar stores like Parquet and last I looked at CH it was getting better ways to shuffle partitions around, "attach partition from" and so on.
> tech knowledge churn is like 10x as fast.

Spot on! Moreover, every time the wheel is unnecessarily reinvented previous lessons are lost.

What is even worse is that people really want to reinvent the wheel and get defensive if you point that out.

Comments like "Or is cope for a loss of neuroplasticity" are a good example.
Many forms of spirituality, notably Buddhism and Advaita Vedanta, teach that happiness is not something that is produced by things we do or have but is inherent in our true nature. In fact our activities only interfere with our ability to recognize that nature and experience the bliss it entails.

As someone who once had many great plans and hopes for my life, all of which have come to naught, I can attest that I have found this to be true. The person I was 10 or 20 years ago would have rather died than live the life I ended up with, but today my most common emotional state is one of bliss.
You don't need an iPhone to use a Mac.

All of your daily use items will work nicely on MacOS. In addition the look/feel + performance of the new M1 Macbooks is excellent. Keyboard is a vast improvement.

One point is that the 16 inch mac is quite heavy. I have a 14 inch Macbook Pro, its great and a bit lighter as long as you are happy with the smaller screen.

I would recommend MacOS. I think most people enjoy it once they get used to it.

To me the Mac + MacOS is the best developer experience - it has many of the developer Unix tools available that you would want from linux, plus it "just works" and devices (audio, keyboards, bluetooth etc) all work without me having to think about it. The display is beautiful and if it breaks, you can just take it to an Apple store (though I've never had an issue). More bespoke linux laptop setups can be nice but I think you're introducing some fragility into your life when you do that, compared with just using a Mac.
In the 1990s, my ability to speak was restricted to high school essays, zines that 12 people read, and FIDONet BBS boards.
If you're interested in tech becoming really magic, lookup the VRchat club scene. Real-life skilled DJs put out of clubs by covid, setup a twitch stream with a webcam on their DJ controller, while wearing full-body VR themselves, also streaming their DJ software and in-game view to an in-world stage screen in front of up to 80 guests, many if not most also wearing full-body VR, dancing along together, in any kind of digital world and wearing any kind of semi-humanoid (or not) 3D model you can imagine. The "metaverse" has already been running for a few years, but it's not Meta's, it's a thin multiplayer VR wrapper over Unity.
GitLab team member here.

Selecting our MVP this month was tough! In addition to the MVP winner, other great community contributions in this release include:

- A shortcut to open related issue

- Support for Java 17 in Dependency Scanning

- A new API to allow users to enable or disable the Security & Compliance menu

- Notifications for new PATs and email addresses

- Review previously merged commits in merge requests

- Create Persistent Volumes by specifying the persistence keyword in the configuration file
Their news does have a good reputation. Their news org is high quality.
Latest Chrome, macOS 12.1, using the trackpad

The scrolling is awful: feels laggy and... squishy? oily? really hard to describe, but it's horrible. Also, it feels like the scrolling sticks at random times while scrolling.
> An IPO of Raspberry Pi Trading Ltd would unlock a lot of funds

It would also make every decision that the company makes from here going forward one of fiduciary responsibility to the shareholders. For a project rooted in affordable open-source hardware/software that's a major conflict of interest.

I get that "Raspberry Pi (Trading) Ltd" is not the Raspberry Pi Foundation, but it is wholly owned by the foundation as a subsidiary. IMO, it'd be of major concern if any RPI business entities went public.
For a philosopher you seem really combative and defensive of a really specific philosophical position.

Isn't the whole physicalism vs otherwise (Cartesian duality?) debate inherently unfinishable? It would be quite a statement to say that physicalism is a fallacious position that's "only popular", while other positions aren't.

>Do you make an effort to compensate for own biases?
If the government requests a social media company to suppress the speech of a user does that constitute a violation of the first amendment?
How different is cancel culture from say the Hollywood blacklist? https://en.wikipedia.org/wiki/Hollywood_blacklist
> An AMI bakes in some provisioning logic and the container image

That does sound bit weird setup to me; with something like Packer building an AMI is almost as easy as building a Docker image with Dockerfiles so the benefits of using Docker seem quite slim?
OpenJDK:Ubuntu::OracleJDK:RedHat
[sigh]. You could have just googled this, but from the Appendix:

> He found that in the wide belt contained by the 70-degree lines, north and south, temperatures for thousands of years hadn't gone outside the 254-332 degrees (absolute) range

That's -2 F to 137 F in the arctic circle.

> Kynes and his people turned their attention from these great relationships and focused now on micro-ecology. First, the climate: the sand surface often reached temperatures of 344° to 350° (absolute). A foot below ground it might be 55° cooler; a foot above ground, 25° cooler.

That's 114 to 125 degrees Fahrenheit for "a foot above ground".

So once again, yes, very hot.
Pedantic: dark matter does affect electromagnetic radiation via gravity.

“The most successful technique with which to investigate [dark matter] has so far been the effect of gravitational lensing. The curvature of space-time near any gravitating mass (including dark matter) deflects passing rays of light - observably shifting, distorting and magnifying the images of background galaxies”.

“Dark matter appears not to interact via the electromagnetic force, and therefore neither emits nor reflects light.”

I am sure you know that, but perhaps not everyone does?
No, web3 allows the users to be operators, it takes power from corps. I'd suggest you research more.

Continue to fight the tech tho, wonderful thing about web3 is you can't stop it, no matter who you are.

You can certainly organize a public campaign against it though, you're being a useful idiot for them.

Take a step back and ask yourself if that passion of hate is yours or someone else's.
Fair enough - doesn’t seem effective to me either
I'm personally interested in Unikernels. That tech seems to be a good contender for replacing K8s. Every app an appliance running in a hypervisor.
This is super cool, you should chat with the folks in Estonia who had worked on developing Sentinel (https://thesentinel.ai/) which had a similar premise but ended up pivoting. I advised them for a bit, happy to chat too (email in bio).

Edit to include link to their website
Can't speak for parent but I have refrained from discussions of things people have been cancelled for even when I agree what is leading to the cancelling is horrific, because the consequences of getting misinterpreted are too grave. Even asking a clarifying question for something you genuinely don't know could be misinterpreted as a dog whistle. It's hard to blame people for that because sometimes clarifying questions really are feigned ignorance meant to sink time or provoke, but at the same time there is a growing sentiment on Twitter and elsewhere that choosing the most charitable interpretation in discussion is actually bad and empowers bad actors. What you get is a situation where nobody trusts anybody.
You can validate the data with Firebase rules. The other data can be updated with Firebase functions. They listen for state changes on the relevant data and then update the data that the user does not have access to.
After 15+ years of shipping open source stuff, I've rather concluded that any given piece of documentation is either going to be too terse or too verbose for any given user and all you can really do is mix judgement and balancing how many of each type of complaint you receive.

It's probably possible at least in theory to structure docs so you have a terse section followed by a verbose section for each thing, but I've yet to develop the discipline or the competence to pull that off remotely regularly.

Maybe in another 15 years.
Sure people can 'cancel' people if they like. I guess decorum and common human decency take a backseat to the right to call everyone who doesn't agree with your point 99% an idiotic mouth breathing alt-right pig. The NYT got it right. People are forgettting to debate and the possibility they might be overreacting on some factoid or area of life. They equate loudness and shouting down as just fine ways to go through life. If you want to have a civil war in the next 20 years or so, keep it up.
Cause they want to push the limits and make their engine look amazing. Also, if they research hard enough, in-game becomes nearly as good as video to the point you can’t tell.

One baby step at a time.
The M1 MacBook Air is what you're looking for. It checks all those boxes and more (except for running Pop!_OS). If you could tell us what you like about Pop!_OS, we could advise if macOS fits your needs.

You certainly don't need to buy into the rest of the ecosystem. I use a Mac and an Android phone.
Yes - that's what libraries are for.

This is a strange argument - replacing the subject matter with something else to demonstrate the absurdity - would you have regex parsing in every application, or would you have regex parsing in a central system process?
There's plenty of high refresh rate 4k monitors though. I feel like the slightly lower resolution is going to be totally worth it for most people.

In fast paced games the difference between 4k and 5k is going to be barely noticeable, but the higher framerate will be pretty a pretty obvious improvement (both because of the higher refresh rate, and because the GPU can run the game faster at the lower resolution).
You can't automate art. AAA is in large part about converting money into more money by way of video game sales. That's why it shouldn't be synonymous with anything elite.
It's the exact same vertical size as a 27" 16:9 monitor.