skysight-inc/HackerNews huggingface dataset:
Similar story: https://youtu.be/qlRkLtKqSrY

My perspective:

The western scientists are absolutely terrible at understanding psychological problems so everything is re-framed as a physiological problems ("it's a chemical imbalance", "you were born with wrong physiology" etc.), which they have mastered.

If someone is raised in a cult, do you change the world to fit that person in or do you help that person fix their beliefs?

The same rule should apply for kids raised in other types of abusive households.
It wasn't punishing for the time. That's not my point. My point is that being able to save games so that you don't have to replay hard content when you fail has made it so easy for the current generation of gamers that there are a lot who bemoan games that really aren't that hard comparatively. In Elden Ring, you only have to beat each boss once, and you have a save point right nearby to fight the boss without fighting almost anything else beforehand, so if you die, you're right back into it. In SMB, If you struggle on level 7-3 and then die on level 8-3, you start back at 1-1 and have to master them both again (provided you don't warp).
I know, it's unreal - the Cat itself is 2500, then 02 sensors, the frame harness, and labor are the rest
I’ve done that a few times. I’ve typed “git foo” while mentally thinking about “svn foo”, and after a few hours working on a project that still uses svn I will start making the opposite substitution too.
Nitpick: This isn't an RCE. An attacker would need 1) write access to a /local/ directory that the target will navigate to in his shell, and 2) convince the target to execute arbitrary git hooks in every directory (or parent directory) he visits by adding git to his shell's PS prompt.

Besides, now that this security issue is patched, git devs should seek a proper solution to that doesn't break git and decrease security for everyone else.
Fuck. Now the security guys are going to break all my shit.
The original link barely made any sense and many of those comments were comments without the useful context. The root cause here is the iffy submission, not the outdated comments or the change to a more meaningful link.
I think part of why this happens is that critics are part of the "creative" class of people. Creative people are more likely to be open to new ideas and explore, which is more likely to lead them to scenarios in their lives that look something like the non-binary vegan sex worker side of our world. And so, they find the dramatic look into the lives of marginal characters fascinating. I'm going to point to Silence.

https://www.rottentomatoes.com/m/silence_2017

To be a Christian in Japan during this part of the Edo Jidai is an especially marginal identity. It's not hard for a creative type who has seriously been on the margin at some point in their life to relate to that even if they are not Christian. It also doesn't hurt of course that the final message delivered is a pan-out view of his faith in its unconfessed nature which does indeed comport to a contemporary agenda summed up well in the movie's title; "Silence", as an imperative. "It is virtuous to make your sacrifices to Caesar/The Emprah, step on the fumie, and never speak about your religion in public because it causes other people pain and discomfort."
The real answer to how birds fly is that they're extremely light weight so that wing muscles can lift them. Common pigeons or seagulls only weigh about 2 or 3 pounds. The largest birds of prey top out around 18. Anything heavier is flightless. A 150-pound human isn't getting anywhere on wing muscle power.
Compression is the real “gOaT”.
Like the Gorillaz?

Am I missing something?
Contextually, it seems like "goated" means "excellent," which is somewhat bizarre (or "counterintuitive" as they say these days).
The default shell on Mac and a lot of Linux distros do this installation, as well as git for windows.
This isn't an RCE, you need to have control over the parent directory first which usually implies some sort of admin privileges already
Yes, luckily I had read about this and just upgraded my insurance for theft the month before
The want the same dumb, boring, monotonous somber shit every year and the Academy largely votes the way the critics tell them to.
I code in Golang daily. Generics are awesome!

Some simple examples:

// returns a pointer to v
func ToPointer[T any](v T) *T {
return &v
}

// returns a given default value if v is nil, otherwise v
func DefaultValue[T any](v *T, defaultVal T) T {
if v == nil {
return defaultVal
}
return *v
}

Although a quick grep shows I mainly use these when writing tests.

I hope they allow type aliases on generics soon.

in package a:

type ASomething[T any] struct {}

in package b:

type BSomething = a.ASomething // doesn't work
type BSomething[T any] = a.ASomething[T any] // doesn't work

I found a need for this recently when updating a bunch of code in a common package I have to use generics. The above type alias would have meant I didn't have to update any code that uses that common package - the transition to generics "under the hood" would have been seamless. Oh well, nothing sed can't handle.
And that it’s crippled to be prevent expressions of concepts of violence, politics, or sexuality. Making it the worlds most advanced clip art generator instead of a revolutionarily powerful tool for artistic expression.

And before anyone even says it… obviously they have to try and prevent child porn. That’s settled US Law with regards to artistic depictions of underage sex. However everything else they are preventing (and would ban you for if they caught you deliberately found a way to trick it into producing) is protected artistic expression under freedom of speech, first amendment stuff.
Requiring masks would be a good first step.
Yeah, I'm familiar with PS1, but I was a bit surprised to learn that simple things that a PS1 script might do (git status, perhaps) are attack vectors. It seems that one big concern is the core.fsmonitor option (which I just learned about now). From the git-config man page:

> If set, the value of this variable is used as a command which will identify all files that may have changed since the requested date/time.
On my current app we use husky which installs hooks when you do a yarn install
It's hard to go back to Duplo once you know Lego. Curse of knowledge.
This was obviously the case for previous models. DALL-E 2 seems different - I’ve seen a few outputs that seem like genuinely novel creative artistic works.
I believe it will aid in automating these jobs away, which is great for humanity.
California has an adu accessory dwelling unit law. Maybe aus has something like it or should.
There is 30T in government debt, and interest payments last year were ~500B/~6T of total spending.

What impact would a 1% move have on these payments, is this public information? (ie. how much is fixed vs floating etc).

Can the Fed even raise rates in an environment like that?
That doesn't mean microsoft/apple/linux doesn't care about escalation of privilege exploits.

Because they're authoritarian control-freaks who want to take away even the concept of ownership eventually, having it all to themselves. They want to be able to force users into doing whatever they want.

If you're wondering "Linux too?" --- I'm not saying Linus himself is an enemy, nor a lot of the neutral developers who have contributed good things to it, but all the corporate interests (like Android --- via Google) have shoved plenty of "trusted" computing shit into the kernel, and "secure" boot for Linux distros is still ultimately controlled by a Microsoft key.

We are starting to wake up to this "security" bullshit.
The FJ has drainage holes on the bottom so it all clears out.
Netflix doing it bothers me less than Spotify and Amazon for some reason. I think it's because TV/Movie production needs a proportionally much larger crew of people and budget behind it to produce content.

So Netflix is both enabling things to be created that couldn't be without their help and there's actually a significant cost to them to produce said content. Also, the in house content that Netflix puts out strikes me as much more unique than HDMI cables and background music jazz playlists.

I guess I'd be more okay with Spotify doing this if they approached it more like a genuine record label, as opposed to what seems like anonymous session musicians + graphic design?

Basically the problem I have is that they're able to get away with putting out low effort content because they can algorithmically recommend it to people. If they had to compete for listeners on an equal playing field with all the other artists on the platform it wouldn't really be a problem.
goat -> greatest of all time. doesn't seem counterintuitive. its jargon most often seen in sport literature.
> Critic reviews are prescriptive: what they think the masses should watch.

Who writes like that? Could you provide an example? I haven't seen it, having read many, many critics, including in sophisticated reviews like the New Yorker, Film Comment, and the NY Times.
Ah, htmlq [1] is a missing one that's not on the list!

Straight from the repo: "Like jq, but for HTML."

I find it useful for quickly hacking scripts together and exploring data. Very useful for the iterative process of finding good CSS selectors with the data that I can get without javascript running.

---
[1] https://github.com/mgdm/htmlq
PNG really wasn't intended to the be a format for photographs. It can't even store EXIF data. As a lossless format, it can work for photographs but as the article is surprised to find out, it doesn't do a good job of compressing them.
I did not take your question as critical at all. :)
I guess the Yorkshire countryside is probably depopulating like many rural areas are, so they probably have extra capacity in the water lines. In London, decommissioned gas lines used to be sold to broadband companies to avoid digging up the streets. The difference here though might be that every waterline repair will probably lead to an internet outtage and vice versa. Since this is countryside and they probably wouldn't get the service otherwise, that's probably a trade off their happy to make.
The original title was "Git 2.30.3 will not operate in non-owned directories" which makes perfect sense to me, and the link provides a good explanation of the security problem. What barely makes any sense about it?
DOS? Non-NT Windows?
Tiny Computers Reveal How Tahiti's Tree Snails Evade a Fierce Predator
You worked, you gained capital, now your capital earns you money. But to pretend that’s anything other than you owning the means of production while other people’s labour does the actual production is just a lie. If you believe you deserve the fruits of their labour because of your past efforts, that’s one thing. To pretend it’s your money producing for others… well money doesn’t produce
One of the car rental companies has started using it in their commercials. I do wonder how much of a generational divide there is on using it.
> but then what if you need hooks? then you'll have to somehow manually enable it on a repo-by-repo basis, which also doesn't seem very convenient.

What's wrong with that? Git hooks are inherently dangerous (i.e. running arbitrary code) and should be something you opt into manually.
Have been using them off and on for years. Met some people who work for them at some conferences. Company makes a great impression in general.

My favorite thing they do is trying to make server infrastructure transparent:

https://mullvad.net/en/blog/2022/1/12/diskless-infrastructur...
Thank you, I was confused. I'm very curious if the people complaining about this change as being too paternalistic still feel that way after reading the full disclosure link.
I’ve never heard that moon analogy before - what a great way of putting it.
This is kind of why I’d want a git command that doesn’t blindly execute arbitrary code from the directory, as I mentioned above.
Finger memory, or just a shell configured to run `git status` before every command, as some people have.

And besides a Mercurial repo, it could also be a tarball or zip file…

Quite a dangerous situation.
Amazingly, the person who is listed as the media contact on the TiSP announcement is currently a Communications Officer at Google Fiber, according to Linkedin.
Oh sweet, I'll look into it, thanks!
Risks from Learned Optimization in Advanced Machine Learning Systems
It seems that posts stay floated near the top of https://news.ycombinator.com/best for a max of maybe ~5-6 days. This has been up for 1-2 days and from a conservative engineering perspective I'd probably be comfortable relying on it staying there for at least 2 more.

So you have a one-shot opportunity for the next day or two to consider changing the webpage to say something different.

Reading the sentiment amongst the comments and the perspective you've also shared, some significant points emerge for me:

- This is a side project you were really invested in and you're really sad to see it go

- It wasn't generating very much money, but you weren't in it for the money

- A few people definitely used and appreciated it - so it had a decent bit of mindshare

IMHO this could easily either go the open source route, or a small private team of assistants could help contribute to getting this going again and maybe contribute toward maintaining it in as people have spare time available.

- You appear to have some level of one-step-beyond-MVP mindshare, and a catchy name. Not only would this make it tricky for forks to take off in an open-source setting, but I can also see full-clone attempts being promptly chased away with pitchforks as well. This is the scenario where open source shines I think - the risk of wholesale copying seems interestingly low.

- You aren't interested in this for the money, so opening the codebase doesn't really let especially novel cats out of any bags

- There is enough clear interest that people will definitely show up to help

Some other considerations:

- Instead of committing to open-sourcing immediately you could also build a team out of all the people expressing interest in contributing spare time. I honestly wonder if the energy level would be lower than a traditional open source project. In this case I can see enough interest coming to the table to help unravel the existing codebase, and enough people might even stick around long-term to help out with simple maintenance hitches and fixes as they come up.

- If there were any concerns about forks/clones the exceptionally restrictive AGPLv3 would probably take care of those sufficiently well (perhaps this is a good question for the theoretical team mentioned above)

TL;DR, my opinion is that if you maybe want to take a break for a while but dive back into this in the future CHANGE THE WEBPAGE NOW while eyeballs are still looking at it. Point people at a Discord server or empty GitHub repository (lots of closed-source stuff uses GitHub for issues) to pin or star so they get pinged when there's activity in the future.

Of course the caveat is that I can only respond to the context I can see, and this may not be useful advice. Kind of an on-the-spot "uhhhhh....", good luck :P
>but it's still hidden somewhere.

It's the second button on the data tab, you are still spreading misinformation.
“End-to-end, it takes between 4 and 5 elapsed days to hand a site back to a customer.” Cool marketing strategy. Maybe you’ll get your data in a business week.
I don't have strong opinions on Atlassian, though I have strong opinions on forced cloud migrations.
Wikipedia RFC to stop accepting cryptocurrencies passes by majority vote
Same. I interpreted the title to mean it was somehow messed up or broken in some way.
No, all of the awards are pretty much lifetime achievement awards that happen to coincide with some movie. 'Sure it's not his best work, but he deserves an Oscar.'
Yeah, you kind of put your finger on it. The Ukrainian performance has been surprising. The elephant in the room is how much of that is due to hidden NATO help, e.g. with signals intelligence (http://www.dupuyinstitute.org/blog/2022/04/02/how-much-is-u-...). Obviously, anyone who really knows won't be interested in talking about it for a long time.
Git clone doesn’t mean I’m blindly executing the code inside it.
We've used https://docusaurus.io/docs/markdown-features/code-blocks#int... do do this ourselves. No need to use codesandbox.
> we define our agenda. All the NRA did was water it down.

NRA's agenda is guns for everyone, and to change the Founders' intent to make the 2nd include a right self-defense that it neither ever contained nor needs to contain. That's watered down, you say. If that's watered down, wtf.

It has been proven over and over, just about every week, that more guns means more gun deaths, and that is all it means, iow, it does not mean anyone is safer. In fact, owning a gun doubles the chance of death of anyone living in the gun owners' household. Also, it is more likely a gun owner will injure or kill themselves, or someone they love, than they will ever successfully defend themselves against crime. Also, no one needs the 2nd Amendment for self-defense. We all already have the right of self-defense, so it would be awesome if we didn't let pet agendas unnecessarily monkey with the Constitution.

The Founders never intended the citizenry to be armed, unless organized as a well-regulated militia. It's fine to have your own agenda and opinions about guns, certainly, but let's not ever try to wrap that in patriotism, nor label it American, because the Founders had far far different ideas about this than the gun community. And if guns for everyone and warping the 2nd to include self-defense doesn't please the gun community, then no one need ever find out what will. Secure your weapon, and just sit there and be dissatisfied, and try not to hurt yourself or kill anything.
Right, I get the perspective, I’m just saying that there’s a lot of usecases where I know I don’t want this (PS1, git directory in /tmp, SSH into a shared machine) where I just want simple git commands to work, and a “git --safe” or something would be really helpful. I’m not even sure what the alternative would be here for a lot of these cases, besides writing my own “dumb” porcelain…
There is a cli tool to run postman collections: https://github.com/postmanlabs/newman

You still have to create the collections in Postman, however.
Can anyone recommend other hidden gems like Tom's channel? I've been following him for years and still have not seen a merrier hacker. George Hotz's livestreams (https://youtube.com/playlist?list=PLzFUMGbVxlQs5s-LNAyKgcq5S...) were as good perhaps, but the format is quite different, and he doesn't do them anymore.
First few years no problem.

Next few years they go to cheapest supplier in China who has trace toxic chemicals on the wrapper because they bypass the final wash process to save a few cents or their upstream supplier changes out the chemical mix to something cheaper.

But you should be using Reverse Osmosis or distilled drinking water anyway given all that's going on with lack of regulation, review or enforcement.
I can create smaller jpg versions of these photos where I can't tell a difference.
Side note, one of the new Star Trek iterations, "Star Trek Discovery" has a story arc where a data set collected over millenia is integrated into the ship's computer which eventually causes the ship computer to become sentient.
>I always liked FogBugs

You lost me there. In no way was FogBugz a better product. It was at best mediocre by 2010.
The government is the "other side," and they do it as a service to consumers. Each individual can only purchase $10K per year, so it's not meant as a general purpose investment vehicle.
I want WebP to work, but when I use it on my website the colors are different than the original JPEG files. This is a problem because I'm a photographer and those subtle differences can make a photo feel flat and dead.

When the color management is better I'll return.
How can you approach a problem with logic before knowing what that logic will manipulate? For example you say you'd start writing code to read tokens but a token is a type
You are in luck, it seems: https://blog.typicode.com/husky-git-hooks-autoinstall/

(Though not completely sure.)
I want to see this combined with something like ai dungeon.
I respect the git authors as well, and I feel like I understand their perspective. I’m just curious why they chose this balance instead.
A true artist can express themselves without violence, politics, or sexuality. Art is about using the tools available to you and creating art. michelangelo didn’t have cad or 3d modeling programs, but he created great sculptures using the tools available to him.
What was the service?

Getting broken things going again can be kinda fun...
Yes, but I feel like the other thing you need to keep in mind here is that this is going to be a massive pain for a lot of people, and they might end up doing things that are substantially worse for security, like refusing to update their git.
> I'm also uncertain what exactly you're trying to convey by admitting total ignorance and blind faith in a US government agency.

I believe it's important to consider the recommendations of experts as well as the evidence they claim warrants those recommendations. That's why I linked directly to both the recommendation itself (that's the second link, titled "FAQ"), as well as the evidence which (in my estimation) credibly backs it up (that's the first link, titled "Reduced Risk of Reinfection with SARS-CoV-2 After COVID-19 Vaccination — Kentucky, May–June 2021").
I do have a political ideology, but so do you. My overarching point as been to insist that socio-economic class, consumer and worker separation, and stock granting are as political ideas as worker solidarity and class consciousness. But you’re calling that untruthful, and ideologically motivated, and disgusting rhetoric, so I guess we’re probably done
Not knowing much about Go: Wouldn't ToPointer create a dangling pointer, because `v` is on the stack? Or is it automatically copied to the heap?
> But to people who watch thousands upon thousands of movies this gets astoundingly boring.

I would say that there's so many different ways to appreciate films, so many different types of audiences, and such wildly different intentions behind the films and the critics who write about them. It seems reductive and a bit misguided, to me, for someone to write an article about the divergence between metascore and imdb ratings. It's comparing two gigantic blobs of scores and drawing straight lines through them. Does it actually say anything interesting? No in my opinion.

I mean, sure, the films with super-high metacritic scores are worth watching. They're a part of "the canon"-- although for the life of me I could never get through Citizen Kane. But a metacritic score is worth about as much as an imdb score. It's a blunt measurement.

The value of a well written review has little to do with "the score". Many include "a score" because they're forced to, but it's so much better to just pay attention to what the critic is actually saying in the review. It might speak to you if you're in the right headspace, and provide some insight into the film that you hadn't considered. They're typically more valuable to read AFTER you've seen the film. But if you find a writer you grok, you'll get some threads to pull on that will open up all kinds of film experiences you would have never had.

The value of an audience score is garbage, by itself, without any recommendation algorithm to match up your viewing habits and limit the pool of films presented to you. Even then, the high-scores mean almost nothing though the bottom-of-the-barrel low ones usually can be trusted to actually be bad.