skysight-inc/HackerNews huggingface dataset:
The model is deliberately limited in its ability to generate images of people.
it’s always the people accusing folks of being nazis, but it turns out they’re the real nazi. pretty cool shit going on
Yeah, that's not the use case for Sonos. It's not a Bluetooth speaker. They are designed to have a dozen of them and you can combine into different zones and have different music playing in different zones. It's supposed to be complicated, it's a far more advanced system than just a Bluetooth speaker.

You wanted a spoon and bought a steamshovel. There's nothing wrong with the steamshovel, you just bought the wrong thing.
Until something bundled with a large amount of linux distros has a root privilege escalation[1].

[1] https://access.redhat.com/security/vulnerabilities/RHSB-2022...
I only know one pilot, but the number of other pilots he knows that have died is pretty insane. This is non-military.
What is it about nodejs/NPM in specific that leads to malicious changes being so noteworthy/significant?

I barely never see anything about other package indexes (crates.io, PyPI, etc).

Doesn't npm also use a lock file by default for packages?
Yeah, this is incredible. It's in the category of things that 5 years ago people would say an AI could never do because it requires insight/creativity/understanding/empathy that can't be produced by matrix multiplication.

Text also seems to be gibberish even if aesthetically coherent.

Although "Follove me" is either brilliant or a lucky accident (https://twitter.com/nickcammarata/status/1511904232252784641).
Thunderbird has a proper bugtracker.
Honestly I shouldn't have referred to it as big L, it's a social network of sort lol
It's not a scam. It's a zone based music delivery system, not a standalone Bluetooth speaker. You bought the wrong thing.
It's an impressive thing they have built. Everyone involved should be commended for their hard work and achievements.

However, Tesla and all of its operations, including the factory in the video, is part of a broader context. They don't exist in a vacuum. None of this would have happened without that broader context.
>evidence now emerging that much of the NFT hype was entirely astroturfed

I mean, was there ever any evidence that it was natural or even legitimate?
The USA requires _de minimis_ human contribution; the prompts here definitely qualify as human choice, he's not simply sampling random images, but exercising quite a bit of choice and creativity as he learns to prompt-engineer for DALL-E 2 and also selects, and so there is a copyright to be had.
Weirdly enough, I find the need for file extensions in import statements when using ESM causing a high level of stress and OCD issues
Also the Executive Office of the President can get away with a lot of things offering special incentives and pay rates and what not, but they can't go above the GS 15 step 10 cap for non SES/ES employees because that is statutory.
SPARC was a open standard but only one 32 bit version and later 64 bit updates were already available. And at that point interest in Open Source and Open Hardware simply didn't exist to the same degree. In the 'modern' period, nobody has interest in working with something Oracle controls.

Power was always 'fake open' it was basically a marketing vehicle and there were not actually open chips being built with it. Only in response to RISC-V did some of that change.

SuperH was under patent when RISC-V started and it was simple much less known about as well. Once it was actually going RISC-V was already happening and had far more momentum and RISC-V was 64 bit from the beginning.

As with so many thing Sun could have changed the world much more fundamentally had they understood open source better.

There was OpenRisc but that was really more a chip design and the ISA and it was also only 32 bit. OpenRISC was basically some students starting to implementing a design from David Patterson textbook. It was also a license that they didn't like.

So really you needed a ISA that was designed for architecture independent with 32 bit and 64 bit and that was 'future prove' in terms of license, design and so on and importantly some actually working chip and softcore being available for people to tinker with. Berkley did that and they taped out many chips while designing RISC-V. Other universities jumped on board and ETH was producing and taping out cores. From that point is snowballed.

One could imagine an alternative future where Super-H takes off and universities adopting and Berkley does a 62 bit Super-H or something like that.
>negative identity…if you’re white you’re racist

>to be a good person you need to be oppressed

So you’re cool with these absurd assertions about society’s direction?
Distances of this sort of thing are not measured directly - what's measured is its red shift, which tells us both how distant it is (very) and how old it is (very). That inference is indirect and depends on the model of cosmology, but the relevant bit of cosmology is relatively uncontentious.

(But if it really was only 13.5 billion light-years from Earth then you'd be right. In fact it's much further away than that.)
A small respite: sometimes he writes on the same topic for consecutive days.
NPM default "package-lock.json" lock files only prevent your immediate dependencies from changing.

If a transitive dependency (the majority of them) have changed, you're out-of-luck.
Very cool. Elon said "raw materials go in, cars come out" at the GigaTexas opening yesterday. What's included in the raw materials and how does that compare to other car factories?
You are making plenty of assumptions.

But let's entertain what you said is true.

What if this is a recent regression that even his people (c-level, vp level etc) is trying to solve recently?

Assuming CEO has visibility into every macro thing(who decides what is macro?) at any given point in time is not fair, especially these days when there is so much economic volatility to be honest, which impacts his company more than many others.

He doesn't get a pass because he is the CEO. I believe him to be a decent humble person, that will make a honest attempt to address this specific problem and at large.

That's all.
The web needs APIs that enables certain blocks of codes to run under specific permission constraints. Such constraints might include ability to read/write to DOM; window.alert; redirecting (well I guess CSP covers that one) etc. At least let us mitigate it.
I read somewhere that the entire human population uses about 0.5% of all water, and water covers around 71% of Earth's surface. And apparently we have developed a lot of cheap and effective water filters [1] [2] [3].

Access to water is a logistics problem, but still, it would be pretty dystopian if reasonable amounts of water aren't cheap.

[1] https://www.bbc.com/news/world-africa-32973591
[2] https://cordis.europa.eu/article/id/415837-new-technology-pr...
[3] https://www.h2o4a.org/life-straws-1
Probably not. It would ruin this site's hipster cred.
It was generated using AI as a criticism of a comment that they didn't understand, and suggesting that AI would be more coherent, before giving an example.

But the comment that they were criticizing was perfectly reasonable if the facts it was based on are correct (that the apparent packet loss was periodic, not random). There is another possible explanation (the interference itself was periodic), but their position and explanation is not at all unreasonable, never mind incoherent.

All that said, the more interesting comment is the most recent (at time of writing), from a passenger on another flight landing at the same airport, on the same day, suggesting that their plane suffered from a similar issue.

Your comment, however, is lazy and lacks substance. "I stopped reading because..." is a cancer on discourse. Read, then criticize, or STFU. (I confess I have been guilty of your approach in the past).
So... cancel them? I get that people are angry, but such a central enforcement authority would be at least as abusable, if not more.

You can't win here. If you trust someone else's software, you need to evaluate the author and establish a relationship. For decades in open source, we did this via formal organizations with charters and incorporations and foundations and boards and stuff (FSF, Red Hat, yada, yada). We can trust gcc or Linux because we have visibility into the reward structure that produced it beyond "what this developer did".

NPM's big failing is in short-circuiting that process and inviting a culture where any rando can push out a package that can be trivially slurped up and used by everyone, transitively. That's great for the rando developers, not so great for the consumers as it turns out.

But you don't fix it via mob justice. You fix it via organization.
2 years in, it's working fine and already paid for itself. I hope it makes it 10 years. Why do you think it won't?
Devils advocate. He did realize (eventually) how toxic it was and has taken steps to better himself
Grubhub et al promoting their own phone number as a restaurant's is exactly what I'm talking about.
Why does the JS ecosystem attract so many puddingheads like this with their emojis and their cotton-candy bullshit? No wonder it's a house of cards.
Yes.

I checked out a small project recently and it had over 2000 nom packages as dependencies. The culture around node development was/is just too dependency happy.

I get standing on the shoulders of giants and that not all people are bad, but with thousands of dependencies, the chances of a supply chain issue starts to become significant.
And that is why nobody wants to find the truth, that the effects are human caused, and not natural.
> airlines changing peoples tickets out for credit during the pandemic was easily routed around via a cc charge back

You still owe them the money. The airline can stop you from boarding a future flight. Chargebacks are not magic debt elimination tools.

https://amp.theguardian.com/business/2021/oct/12/ryanair-ban...
Just add some LDAP services for identity management, authentication and it's fairly close to the project I'm on right now. A cursory look at getting a matrix server running didn't work out yet though, with issues for clients to recognise the server at all. I don't mind sysops work but right now a set&forget solution would spare some needed energy.

The Thunderbird+Matrix integration sounds like a match - I hope that holds up in practice as well!

Edit: as others mentioned, Nextcloud has the features.
Refurbished Supermiro from The Server Store, there were plenty 2 years ago when I bought it - market has probably changed since then.
Something can be both performative, and honest at the same time.

He probably got notified by someone in the company that this is getting attention, he felt responsible so he responded AND got people to pull numbers for example.
npm lock file is platform-dependent, so people are reluctant to check it in.
Nope, just a smaller circle of trust.
> Searching for meaning through work is fruitless, unless you're at a company that actually really aligns with your values and what you hope to see in the world.

IMO there's a difference between finding meaning for yourself and actively making the world a worse place. You can very well ignore the former while still making sure to not do the latter.
This already exists: iframe sandboxes and content security policies. All we need now is a library that allows you to easily load, run, and interact with code in a sandboxed frame, using something like Comlink to make it feel as if it's all running in the same environment.
I've never used Oracle, but from what I've heard it's a good piece of tech. If your boss is footing the bill for a BMW, why not drive it?
Is that now the standard we hold people to in NPM world?
I was suggesting that site owners eliminate the banners and associated tracking.

Filed under: things I'm not holding my breath for.
Works great, if you want to only have 0 or a multiple of 5 value units!
747s can see and survive major upsets especially if people don’t trust their instruments.

In one case a 747 survived the pilot pulling 5.1g’s on China Airlines flight 006 in 1985: https://www.ntsb.gov/investigations/AccidentReports/Reports/...

More generally commercial aircraft should be able to take +2.5g to -1g safely at max takeoff weight, and roughly 50% above that before massive structural damage.
A better place to get a status upgrade could be the UK. A New Zillund accent doesnt really slot in anywhere in particular in the Brit class system so you are granted a kind of free pass while they work out your abilities. (Experience from last century - may have changed!).
you missed the package typo name hijacks on pypi that installed malware?
Losing people's trust isn't likely to help your cause, whatever it may be.
> Housing is a basic necessity of life.

It certainly is and should be a fundamental human right.

However, living in Vancouver specifically isn't a necessity. There are more affortable places.

In my 20s my dream was to live in Manhattan, I wanted it so bad. Never made it, way too expensive. Had to give up that dream. A couple decades later I still occasionally wish it could've been, but never was. I have a nice house and built a nice life elsewhere.

Not to take away from efforts to build more and affordable housing in the big cities, which is good and necessary. But want to point out that the idea that everyone can get to live in NYC/SF/Vancouver on the cheap isn't quite a realistic position to take either. Often the most pragmatic solution is to find a different city to live in.
TBH I think its not because JS somehow fundamentally attracts a different group of people, its probably more like:

- It being web based means you can target this kind of software for maximum "impact"

- NPM dep trees are massive and you generally have thousands of tiny libs. The chance of something like this happening and being noticed goes up therefore.

- NPM ecosystem is a bit more wild west which again leads to increased chance of something like this being able to occur in the first place.
I honestly still can't imagine it, and I was playing with this kind of stuff in my teens as well. Changing default passwords is part of early setup fun, and nothing spoils the fun as much as unwanted visitors in your network. I can imagine being distracted enough to actually forget about it, sure, but I can't imagine outright neglecting to do it because "fun".
If need be, you can require the use of a Matrix client that doesn’t support end to end encryption, or has support for it disabled. Nothing stopping you from doing that, almost all the clients are FOSS.
Do you feel the same about easter eggs?

Because when I argue that and give example of easter eggs which caused security vulnerabilities or broke shell scripts on certain dates people reply "oh, lighten up, you are just a party killer, allow some human touch"
and typo name hijacks in other language specific repos
I know teslas are valued here, however, they're very inconsistent in quality. Though I'd never buy a VW I do respect that their craftsmanship surpasses that 30hr mark. Tesla is very much a 10hr car. When I see body panels that don't line up in more than one place in more than one vehicle its not me being picky. Its a rushed product with inadequate standard for quality control.
Every day I think about how Microsoft Access allowed otherwise not-so-tech-savvy users to, with just a little training and practice, build a complete relational database for their entire business, supported by a relatively sane GUI and a way to build forms and reports with very little (if any) 'code'. I have no idea what small companies are using nowadays, but I think there has to be some untapped middle ground somewhere between Microsoft Access and a dumb spreadsheet.
I’m reminded of someone who insisted in a thread here that heart rate monitoring on Apple Watch was stupid because they could just check their own whenever they wanted to.
The Tesla factory should be a bit bigger once fully scaled. BMW Leipzig produces around 350,000 vehicles per year while Tesla is aiming for 500,000. Tesla will also manufacture battery cells on site, which BMW doesn’t do.
I know about CSP and iFrames, but I think they aren't ergonomic enough to be used as mechanisms to restrict deps right?

Iframes need a full web context whilst CSP cant target individual code blocks. For example, I might want my code to be able to do alerts, but I dont want dependency x to be able to.

EDIT: Ah I think thats what you meant by your "code in a sandboxed iframe thing". Fair.
It's not "bizarre" that computing resources cost money and are finite. Nor is "pay-to-experiment" accurate. Nor is "exclusive club" really fair, or in good faith.

It's a beta that they are running with their own resources. It makes complete sense that they'd have to limit access.
The answer might be it was easier to duel-boot DOS with Linux in the early days (something about partitioning). However the takeoff point probably wasn't until a few years later when Linux 2.0 was the first with SMP support. Many other reasons contributed.
All the usual stuff plus the occasional mid day nap
I went through a very similar process and my study plan was similar, though compressed into about a month and a half (no kid, younger). It was for an IC position. I wrote a blog post about it also (which I won't share).

These interviews aren't very inclusive of parents since they can't sacrifice as much time. However, I interviewed at [redacted], and their interview required no prep (though it probably helped) yet was very difficult. Meanwhile, other places threw leetcode hards at me like dude... if I didn't study every day there's no way I would have been able to write a trie and backtrack and write unit tests in ~50 minutes (https://leetcode.com/problems/palindrome-pairs/)

I think [redacted]'s a lot closer to the ideal interview process than most other places. The sweet spot is "be difficult, yet do not require a bunch of prep and keep it immune from gaming"

FWIW after you do this prep grind like two times, it kinda sticks. Like, I don't think I'll ever have to study for more than a week again to grind back up

A key take-away from this blog post is that you should really be lining up your offers. I got a bunch of offers and was able to get an uplevel out of it I would have otherwise not gotten. Don't be a schmuck, folks. Know your worth and always re-evaluate
If you classify revoking a malware author’s developer certificate in a signed environment (e.g. Apple platforms) as cancelling, sure. Not to mention warnings from a checker which can be ignored are far weaker than revoked certificates.
If the primary purpose of your job is to raise funds for the things that actually matter, what other method would you use? Take the biggest bag that leaves you with enough time to enjoy what you worked so hard to spend that money on.
The only thing they really show manufactured on site in the video is the frame and body. I'd expect most other things to be shipped in from elsewhere. At the very least the electronics and motors are going to come from elsewhere. It doesn't look much different from most other car factories to be honest.
I dunno, I really like the "happy sisyphus" one and I'm not seeing anything remotely as nice (or similar really) on Google Images[1]...

[1] https://www.google.com/search?q=happy+sisyphus
That is so amazingly cool. That is exactly how I imagined a Tesla factory would look like.
It's a refurb supermicro 2U. DDR4 ECC Ram, 6 spinny disks in a zfs pool. It's older gen hardware and it's really loud. I put it on a makeshift rack and put it far away, heating the corner of my basement! I've got a consumer wifi router with DD-WRT, router has never been the bottleneck (that would be Comcast).
From what I have seen Munro is quite objective in his views and has impressive team of experts. As to the claim, Herbert Diess, CEO of VG group had said it himself: Tesla needs 10 hours while VW 30[1]. Diess is planning on improving VW efficacy to 20 hours per vehicle next year:

[1]https://www.bloomberg.com/news/articles/2021-11-04/vw-ceo-te...
The text of the complaint is available at [0].

[0] https://03283664099418252878.googlegroups.com/attach/6f5422d...
Ah, you're right. I got it confused with https://crates.io/crates/doh-proxy, which another user mentioned here.
Think DALL-E will eat that market?
> human artists themselves are trained on the output of other artists

Artists take inspiration from other places too like nature, imagination, dreams, etc.

Every once in a while an artist like Picasso, Dali, Pollock, etc. come up with a new style that’s instantly distinguishable as unique from the artists that existed prior to them.

Dall-E 2 is an amazing achievement, and could replace most unoriginal artists.

If Dall-E 3 can produce novel artistic styles, that would transform art as we know it.
I am not a shrimper or a commercial fisherman, but clearly some factor makes nets appropriate for one or the other. These are not large tides, less than a meter between high and low. Any creatures caught will miss a meal (or possibly become one), but considering that the net is quite literally dipped into the waterway they live in and pulled up later, they should live. Any fish will be thrown in after a minute or two in the net. These are not commercial harvests, just private ones that might garner 5 kg total catch.
> In fact, they benefit greatly from rising prices.

Maybe. If they are able to sell at the peak. A house isn't a share of stock you can sell when the market is up. Typically you hold until the kids move out and you retire and then sell, so the timing is handed to you by life. If housing market is down the year you retire, bad luck.

Meanwhile all those years they are living the house instead of selling, rising prices hurt the homeowner because it means taxes go up.

As a homeowner I sure wish the estimated value never went up. I'd rather be paying the same taxes as when I bought it instead of a lot more.
Being in that area with friends who are highly connected in this arena and climbed ladder quickly, it’s a stretch to get a 15 in your late 20s
>So… no more open source?

No more random-source.
And no more "automatically pull from master, then build & deploy".
Well I think you said it: lack of crew communication.

I would argue that communication is rooted in culture. Is there a safety culture? Is it the culture to go through a checklist of items, even if routine?

If there was "automation-exit" failure as you describe, shouldn't there be a procedure and know-how on how to assume manual control. The devil would be in the details: not just outlining what a human being should do - but who that human being would be. Is it the pilot? The co-pilot? etc...
Not...sure...if...want?

I use Thunderbird, and I appreciated past "baked-in" additions like PGP support, but, I kinda just want my email client to be an email client.
VCs are the main people making many on this web3, nft, sh$tcoin stuff.
Yes, it used to be a fad to not identify anything.
The first Unix system I ever used was a 386BSD. The first Unix system I could ever get my hand on by downloading or buying disks was Linux. From the get go, Linux was easy to obtain. I of course preferred the BSDs since that's what I was used to, but just being able to hack on Linux 24/7 from my bedroom without having to share the system with hundred others, and having root access without having to hack someone's else system just allowed me to dive deeper than the BSDs. It was easier to find other folks going through the same and targeting everything first for linux before BSD. It created a tremendous fast feedback loop, easy to obtain, more programs available for it.
People should definitely pay more attention to the old hobbit.
Well, open source volunteering is a form of anti-capitalistic political activism to begin with. This is just adding a geopolitical angle to it, but all FOSS is political already. When you depend on an open source project, you depend on the politics of that project as well.
The first sentence is fully wrong. Receiving antennas can be any length.

Doesn’t improve from there.