skysight-inc/HackerNews huggingface dataset:
>Guess what, not everyone is using git-enabled PS1

not everyone is running on a multi-user system either (realistically speaking, most personal computers are single user). That doesn't mean microsoft/apple/linux doesn't care about escalation of privilege exploits.

>Truth is, developers are doing something that can fuck up their system daily. Let's forget about wget | bash and copying completely untrusted git repositories (and it's pretty much guaranteed that everybody using git-enabled PS1 won't shy away from that).

So because devs are doing dumb shit on a daily basis, they shouldn't fix security vulnerabilities? What if I'm not doing dumb shit? should I get hacked because I entered a malicious directory on a multi-user system?

>I mean, actually fixing: making it possible to disable hooks & core.fsmonitor & whatever else they fucked up? No, right, let's just disable git instead.

but then what if you need hooks? then you'll have to somehow manually enable it on a repo-by-repo basis, which also doesn't seem very convenient. At least with the ownership check it's transparent to most users. For people that use shared directories and/or network drive mounts, they can always whitelist the path.
Actually, the true fact of the matter is that now others are living off the proceeds which resulted from my own past efforts.

Your insinuation that my perspective has changed is simply wrong. Of course you can't know; all you have is baseless projections.
It is faulty though? There should be more that's required to accidentally delete data than a manually specified switch.
No general framework will magically solve this problem, you need to tread carefully around the audio processing thread whatever you're using.
Does it count if we host on GitHub Pages but use a custom domain? I do that to have the freedom to move out, which is what I’m about to do to gain some features elsewhere.
And also smaller binaries.
For comparison, our templates-heavy C++ project's binary is 1 GB in debug mode and 200 MB in release mode. It takes 10-20 seconds just to link.
I think it’s vitally important to distinguish between skills you do for fun and skills that earn you a living.

For job skills to earn a living, you should definitely be paying attention and adjusting in order to future proof. Learn skills that will not become obsolete.

For skills for fun, don’t bemoan the fact that an AI can do it better. There is still inherent value in you learning and enjoying how to paint. Not everyone needs to be the best in the world. It would be silly to say “I love baking cakes for my family, but there’s no point because of British Baking Show.”
Thank you for your honest question. The short answer is yes. The more complicated answer is I know I'm doing small things to ameliorate inequalities in my corner of the world, so I feel I'm doing something in a world where injustice will, unfortunately, probably always exist.

An example: I used Google's "black owned business" feature to hire an African-American handyman from another part of the city. I gave him the time and money he needed to figure out how to re-do my bathroom, even though it was the first time he'd done such a complicated renovation. He was slow, and made some mistakes. My patience and ability to see past the mistakes will help him move from handyman to contractor.

I used to be among the class of people who work hard for little pay before I opened my own business. I always maintained my dignity. By not falling into self-pity or complaining, and working with others in politics and the community to right injustices, (when I could find the time-- being poor is time-consuming) I felt empowered despite my low station in life at that time. So the poor can be noble at heart, and that can sustain through the many indignities of their condition.

This is not meant to let the well-to-do off the hook. For years I had a business that catered exclusively to the wealthy. It was common for me to have clients with an insular self-centeredness and entitled attitude.

Since you recognize inequality and injustice, you are already way ahead of the wealthy people I dealt with regularly. It may make you feel better to take action on those feelings in small ways or large ways, such as through volunteer work with refugees or the poor.
Is there no risk of the cables deteriorating/contaminating the water?
While the Myers-Briggs test is pretty weak, it is inaccurate to say that it has absolutely no empirical validity.

Test have shown that MBTI results do correlate with Big Five personality traits[1] which are generally regarded as valid.

See https://web.archive.org/web/20121011195955/http://leadu-libr...

[1] https://en.wikipedia.org/wiki/Big_Five_personality_traits
I read through the direnv docs, but I'm trying to think of how I'd use it. Can you or anyone else give me some examples? Even just listing which directories you have .env or .envrc files in, and what environment variables you use in them.
>>summarizes the current state of the field, while the "original" paper is specific technique.

They copied the summarizes from that those techniques.

>>Why would they need to re-phrase the facts and methods the authors described themselves when all they're doing is giving an overview?

A review paper is synthesis of ideas and they copied the synthesis of other authors.

Ultimately, this is what plagiarism looks like in the case of a review paper.
on windows the default git package (ie. git bash) installs a bash terminal that has the git PS1 enabled.
You probably don't even need to lie, it's likely Russian hackers are using every major tor/VPN available commercially.
What's wrong with A or B?

Obviously documentation would be ideal, but I still think an SoC with freely licensed source code available that talks to peripheral devices directly qualifies as much more "open" than one where even "open source" drivers are actually just talking to mailboxes to a HAL running in an RTOS.

I think the challenge with the Broadcom stuff is fundamentally architectural - even with more reverse engineering eyes on the scene, you're working with an SoC that's a big proprietary blob running on an obscure architecture (VPU) which is hosting an ARM Linux box, vs. the Rockchip stuff which is a much more traditional model with memory and register mapped peripherals.
I don’t really disagree with your statements, but I’d like to point out that:

1. Just because a large company does something does not make that thing safe or correct—especially when your risk appetite and attack surfaces are not the same.

2. OAuth has it’s place, but it alone isn’t enough to secure an API. With or without OAuth most applications need well defined identity management, authorization mechanisms (distinct from authentication mechanisms), and all the other pesky implementation details one needs to consider when there is a desire to guarantee the authenticity, integrity, and/or confidentiality of requests to and from said application.
I find it very interesting that the AI can't do hands well. If you've ever tried to look at your hands in a dream, it's a startlingly similar effect.
Also a copyright violation. ArXiv should remove the article.
my point is that there is an opportunity for a framework that solves all these problems out of the box.

you could argue that drawing text is not a problem that a framework should solve. yet they do, so there is no reason that a framework cannot solve the typical problems of audio applications and inter thread communication etc.
Gut controls your mental and physical health
Toothless law. It only applies to literal job ads.

“Covered listings include postings on internal bulletin boards, internet advertisements, printed flyers distributed at job fairs, and newspaper advertisements. The law does not prohibit employers from hiring without using an advertisement or require employers to create an advertisement in order to hire.”

If you want to avoid this law just use a recruiting firm and/or don’t directly advertise the position.

Or just use the full Glassdoor range as your “good faith” range and continue paying whatever you want based on the candidate.

Or the numerous other obvious loopholes in this silly law.

It’s funny that it only applies to salary as this law would be substantially more useful for hourly employees. I can always count on the NYC council to remain useless.
Oh yea, as a general rule of thumb I have found that if any party is getting emotional (defensive, frustrated, hurt, etc) then the conversation will have to pivot to feelings.. something about the pre-frontal cortex going offline when we get into a certain state.

I've seen this state called different things, like "Exiles" in IFS therapy, "below the line", "tilted", "triggering painful spots", I usually call it "defensive".

(Aside... a thing I've learned is not to ask if someone is feeling defensive (if they are, they'll say no). Instead I think the better move is to ask if they feel like I'm not listening, or not understanding their position. This lines up with the internal thoughts of feeling defensive.)

All this to say, rational conversation is possible when two people are in a rational state but there are other states of being.

(Aside.. I find that rational communication techniques like NVC are actually devilishly hard to put into practice all the time because they go out the window when we get tilted.)

(Aside... EFT couples therapy is designed around communication in an emotionally vulnerable state as opposed to rational, and supposedly has pretty good empirical results)
Bitwarden family account for passwords/account info.

Shared dropbox account for all documents/pictures/artifacts etc. Scan and shred anything not vital.
TiSP: A free in-home wireless broadband service that delivers online connectivity via users' plumbing systems. The Toilet Internet Service Provider (TiSP) project is a self-installed, ad-supported online service that will be offered entirely free to any consumer with a WiFi-capable PC and a toilet connected to a local municipal sewage system.

https://archive.google.com/tisp/press.html
Yeah, dang updated the link: https://news.ycombinator.com/item?id=31010550 (it was previously https://github.com/git/git/commit/8959555cee7ec045958f9b6dd6...)
I was thinking the same thing. I commented elsewhere, but the way the AI messes up hands is also exactly like a dream
This is amazing! Is it possible to do the following somehow?

- automatically have this for any command that outputs more than 10 lines?

- automatically exit when the main command (for example a dev server) exits?

- print the output of the main command to stdout after this is done?
Amazon is still struggling to make drone deliveries work
Those various levels of software dev are all separate job postings.

Also this law is more about protecting people who are not in as high demand as software devs.
> I feel like this change is a far bigger one than thought, and it's gonna break some workflows

Breaks the CI system for perl, for example.
> It doesn’t look like it can make vertical videos in the iPhone app yet which is a little disappointing.

The longer we prevent vertical videos from happening as a society the better off we will all be for it. Our eyes aren't designed to watch vertical videos. Continue the good fight.
Lockdown Shanghai 2022
"Finally, an ISP that's worth a shit."
> with a 176x176 colour e-ink transflective screen

Citation needed. afaik no such technology as "e-ink transflective screen" exists yet although there were some startups trying to propose such concepts.

I think you mean "transflective lcd screen" which is not e-ink.
Why are you setting your ps1 to run arbitrary code in any directory? Don’t do that!
Table of fertility rates in the largest metropolitan areas
> I'm even more confused about how you got from the biome to the stock market and NFTs

He's regurgitating trending topics from Reddit. Don't overthink the thought process of a comment automata.
Have you seen the prices on Data Center edition? People on server literally won't be able to afford it.
Has anyone got multihop working using the standard Wireguard app? Can it be added in config files or is it by CLI only?
I’m sure the fiber optic cables are at least as safe as the plastic/wood/lead water pipes.
It doesn't even have to be a repo. I do git diff --no-index all the time on arbitrary files, because it's simply configured the way I want, unlike some default diff or whatever command, that I don't even remember how to properly use.
Real shocker that lossy compression produces smaller files than lossless compression.
It’s one step more indirect than that. If I want my prompt to tell me what branch is checked out, I can have it include the output of running `git branch`, for example. Unbeknownst to me, running `git branch` can cause git to run programs specified in the git repository’s config file. It’s not normally a problem of course, because I am using my own computer with all of my own git repositories. But it can be a problem if the computer is shared with others.
Local government software dev is making half of what they could make doing barely anything at a private sector operation. Not surprising there’s an IQ problem.
Yes. The typical modern blockbuster constantly hits you over the head with its messages of "family" or "finding yourself" or "overcoming obstacles" of whatever like you're still in grade school. Compare that to something like No Country for Old Men - a movie with a much more nuanced set of ideas. Or even to older blockbusters like Die Hard which are more consistently focused on the action and keep the moralizing to a minimum.
The large nations had systems of what the US Army referred to as "settlements" whose size and complexity were perceived as serious threats. Some of the nations comprised of those settlements were even referred to explicitly as civilizations when they assimilated.

Maybe "settlements" don't count as cities; the whole thing is a bit pedantic to me. But, in any case, "culture" is too weak a term for the complex social systems, political systems, and living patterns that existed during the time of L&C.
>holding a vial with the hefty insect inside. (They released it after taking photos.)

>Shortly after he got back to the United States, Wyman saw that someone was trying to sell a specimen of the bee on eBay for a few thousand dollars
That is really worse than darknet content and all kinds of porn and most kind of other not family-friendly stuff. The worst threat on Internets is something the easiest to end with.
There seems to be a lossless specification of webp (that wasn't used in the article)
I use qtile, because the configuration is Python, and I wrote https://github.com/stonecharioteer/Jerry to help me move my mouse to separate monitors (I use 4).

Use a tiling window manager, get super used to tmux and nvim, learn to use vimium and the firefox variant. And instead of a mouse, use a Logitech MX Ergo trackball.
nice you are a badass!
> There are ways to get more ...

Tax overpayments, only -- the limit of $10000 of electronic bonds per recipient, from whatever source.

> The purchase amount of a gift bond counts toward the annual limit of the recipient, not the giver. So, in a calendar year, you can buy up to $10,000 in electronic bonds and up to $5,000 in paper bonds for each person you buy for.

https://treasurydirect.gov/indiv/research/indepth/ibonds/res...
How is the URL still bad in this story after 9 hours?
Strong unions can lobby for protections just like Amazon can. Municipalities could be persuaded to e.g. outlaw non-union (err, "non-licensed") logistics providers from delivering within the city limits; where "licensed" logistics companies are required to work with only "licensed" fulfillment centers, and so forth. Suddenly there'd be these centers of demand that could only be met by union shops.
I mean, I don't have git status in PS1 anyway, but I woke up today not knowing that git status will run arbitrary commands. The documentation for git-status does not mention this possibility, like git-commit and git-pull do.
If the critic isn't helping the film goer discover the next movie they are going to watch, why not.
I would pay for that, too, but only if it was provided by another company (not Google).
The city replaced water mains near my house a couple of years ago that were made of asbestos impregnated concrete. I think the replacements were PVC, so I'm sure they could wrap the cable with something similar. The whole thing sounds kind of 1995, though.
> Then don't run commands in PS1 that blindly execute arbitrary code in that directory.

That's like telling people "be secure". Nobody expected that git commands would do that, and also they shouldn't do that.

Not that I think this is a good fix...
Any car w/o a required comuputer? For example if I want to drive and really don't want to receive all kinds of silly notices.
None of the "replacements" interest me. When I try the "new" ones I cannot get interested in them either. When trying new programs I am looking for whether a program can do something essential that I cannot do myself, e.g., with shell scripts. However I am beginning to think another reason is that these "new" utilities are consitently too complicated, e.g., too many options. It often seems as if the authors are trying to show off their programming skills with some new language they are trying to learn, e.g., Go or Rust. Comparing these new programs to original UNIX utilities, many (most) of the UNIX ones seem comparatively simpler.

I write quick and dirty single-purpose utilities for myself because I want relatively simple programs. I try to keep program size reasonably small so I use C not Go or Rust. I avoid creating options. FWIW, seems like that was true of most of djb's utilties, too. Some of the best "new" UNIX utilities I have seen have come from from people who use djb's C functions and/or copy his programming style, including the preference for small program size and few-to-no options. For example, the authors of runit or s6 have some interesting utilities. The author of tinysshd has some useful ones as well. These projects are generally not popular but they are generally high quality, IMHO.

There are some JSON utilities listed on this blog page. Despite so many options for libraries and programs to process JSON, I still cannot find one that does something very simple: 1. extract JSON from HTML, 2. print it in a customised, human-readable, left-justified format that 3. makes it easy to process further with other programs. Hence I wrote a stupid program for myself that extracts JSON, prints the keys and values left-justified, making it easy for me to read with less(1) and to process with traditional UNIX text-processing utilities. (I am probably mistaken but I believe the one I wrote may be able to operate at the same speed regardless of the size of the JSON data. This needs to be tested.)

I have written several shell scripts over the years that have a subset of the functionality of fzf (or a superset of urlview's, which came much earlier), namely finding and selecting items from lists. I am still not a fzf convert because generally it does not do anything essential I cannot already do myself. Plus it is larger, more complex and generally slower.

Someone once said the best interface is no interface. For me, the less required user-interaction (including selecting options), the more powerful the utility.
That’s just begging the question. We don’t know if DALL-E is creative in ways isomorphic to humans. It might be. How would one go about structuring a hypothesis? Have you read the original DALL-E paper?

Worth considering: https://arxiv.org/abs/2112.04035
If getting to LEO is "halfway to anywhere in the solar system" [1], then what is getting from GEO to a Lagrange point or to the moon? Let's say that you want to go to the moon, then does this spaceline save 25% of your fuel? or what?

[1] https://space.nss.org/book-review-halfway-to-anywhere/
Might be time to look into one of those catalytic converter cage things
Examples of Patents
I think we're coming at this from two different definitions of "open". There is a very large difference between "blobless Linux compatible" and "open hardware". Have you tried to use any of these SoCs on any OS other than Linux? Good luck lol, because as I said Rockchip has only really upstreamed support for this chip in Linux and has left everyone high and dry.

This is why I specifically called out the issue of MMIO mappings. Seriously, try and scrounge up the addresses for the DMA engines on the RK3399. Or, hell, literally any information whatsoever about the UARTs. The primary place to find any of this is not in public vendor documentation but rather in the device trees Rockchip has submitted to Linux and the various drives different vendors have submitted. Device trees and digging through a pile of barely document C spaghetti is not a suitable replacement for actual documentation.

I am coming at this primarily from the perspective of an OS developer. I am not particularly concerned with blobs and non-free code. I am, however, incredibly frustrated by the fact that I cannot do even very basic things with my hardware without spending hours going spelunking in the Linux kernel because vendors refuse to actually provide public documentation for the products they ship.

There is a subtly annoying trend in the FOSS community to assume that Linux and Linux derivatives are the only operating systems worth caring about. An undocumented chip which ""runs Linux without blobs"", while perfectly great for Linux users, is not some wonderful thing for everyone who doesn't care about Linux. Frankly, I'd much prefer a blob-ful SoC if it meant I could actually do hardware bring up because a sprinkling of non-free components is much better than not supporting an entire platform.
The first photo in this article shows the captive bee: https://www.bbc.com/news/science-environment-47311186
Honestly it’s a difficult decision. I’m 100% for gutting cartels if possible though.
I'd guess when dang changed the URL for the other submission it evaded the dupe check but the currently #1 with 61 comments version: https://news.ycombinator.com/item?id=31009675
> I find DoH + HTTPS to be enough. / Why do so many of you use VPNs?

They solve different problems, and can be used together.

HTTPS encrypts the contents of packets between your browser and the server. Therefore it reveals to your ISP what service you are using and when, which also indicates where you are at that time (e.g., in front of your computer at home). And it reveals to the Internet service (e.g., Facebook, etc.) identifying information about your computer. That metadata - knowing what people are doing and when, and identifying information - is generally considered to be as valuable as the contents of their transactions.

VPNs encrypt everything between your computer and the VPN provider. That hides from your ISP and other intermediaries everything you do, other than indications of activity (though traffic could be your computer downloading an update, or example, without you being home). It hides some identifying information from the Internet service, such as your IP address, though your computer may communicate much more that identifies it. However, a VPN reveals to the VPN provider everything that would have been revealed to the ISP; you are merely shifting your trust from one vendor to the other (which is why HTTPS and VPNs are used together).

In a sense, a VPN provider becomes your ISP, including determining the apparent location of your computer - you can look like you are in a different country, which might change what DRM-controlled media you can access. (VPNs also are used for secure tunnels, for example by remote workers and by security-concious network administrators.)
>The ideal compression (from an intelligence point of view) is both information efficient and maximally composable

This leads the compression to be overfitted to the learning environment. Not that our intelligence is entirely immune to that either