skysight-inc/HackerNews huggingface dataset:
Sorta kinda, iOS apps are jailed using all the normal stuff you might find in a hardened Linux distribution but there isn't a system in the whole wide world that is confident that these kinds of jails are sufficient to safely run arbitrary untrusted code. This is half the reason Firecracker exists on Linux because containerization just isn't enough. Hence why it's only allowed to run actually sandboxed in the JavaScript VM and even then the JIT makes it not airtight. This is how past Jailbreak exploits worked.

Like we're talking about code running in a VM completely isolated from the host system but has one teeeeny tiny escape hatch, a single WX page used by the JIT and that has been exploited multiple times.
Is there a software repository that requires the developers to assume the liabilities?
So, what's your point? It's the fault of people just like her? It's the fault of the government? What are you trying to say?
Sudowrite outdoes professor of Shakespeare in mimicking Shakespeare
Probably your calculators all support it.
Both, but mostly from a tech point of view.

A company can absolutely have a business model or behavior that I dislike. I avoid those.

But what I typically want from a position is the opportunity to learn something new that I find interesting. What I find "interesting" depends a lot on where I'm at at that point in my life. If I'm working in a job where I'm just doing the same old stuff, my skillset is dying and I consider that to be a professional risk.

That aspect of a job is the most important thing to me. It's more important than compensation or benefits. I'll take a lower-paying job that excites me over a high-paying job that bores me every time.
I agree completely. Fully-featured examples would be extremely helpful, especially with things like proxying to different servers for different paths and domains, static file serving set up differently for different paths and domains, various plugin setups, etc.
>The US has made many mistakes, but it still doesn't come comparably close to this.

The middle east and south america begs to differ.
The whole world still has du deal with the results of the US war on drugs and war on terror.

Who made China so powerful in the first place?
Don't remember China being a democracy when they became the world's workbench.
Well you don't need to implement every stupid thing big G thinks should be in it, just the really critical stuff. Even if you freeze all features right now you'll probably still have a better renderer than gecko for 5 years into the future.

I mean right now I bet a lot of people will simply not update to MV3 and continue using the last known MV2 build into perpetuity until certs break or something else. I sure intend to.
I don't get, why author is bitching about validation.

What's the point in referencing article about Haskell, if Java don't have such parsing libraries.

I've also saw that article translated to Rust, but it ended being article, not library. And many questions of how to represent valid state remained unanswered.

And example provided, with throwing exception in constructor: that approach would just throw single error, but javax.validation approach allows to return list with ALL failed validations, so client don't have to fix errors one at a time and retrying to see next error.

Small complain from me: EmailAddress class is not zero cost(unless java would have value types), but actually java devs do not care about this.
War isn't the only evil in the world.
[MX] = Memory Exchange --- Swap display and memory

A better, more intuitive solution than any of the above with available screen real estate is a history tape of prior resultants created automatically.

Multiple prior resultants (not just 2) always available to view --- no action required.

To recall a number from the tape into the active accumulator for further manipulation, simply click the number.

To remove a number from the tape, click and drag right or left. To reorder, click and drag up or down.
Crazy that it renders in HN comments (which rejects a lot of Unicode) ꙮ
I think the big issue with Unicode is that it is centralized and there are politics about what characters get included (see Klingon)

I think I have a solution to decentralize Unicode:

1. Extend Unicode to 128-bits. We can still use UTF-8 variable length encoding which will limit the real size.

2. Use a blockchain to coordinate the characters. That way whoever wants to add a character can do it without gatekeeping.

These simple suggestions will go a long way in making Unicode less centralized.
Yes, adding a "return X items" mode to the same microservices often is a way to get a significant performance boost with only minor changes, where even if your main use case needs only one item, it enables mass processing without incurring the immense overhead of a separate request per each item.
Thanks! It wasn't me who posted the article, but I agree with the theory that it's likely some well-meaning "new account spam prevention" thing.
>They are less common than HTTP stacks.

libsystemd includes a d-bus library for exactly this reason.
The hidden downside of wind turbines in Japan's Akita Prefecture
I agree that we're focused on the wrong danger. The same way we tried to push the marijuana narrative toward physical harm when the real danger was in co-opting our goal system.

I'd go further than you and say it's not even important that it's controlled by the CCP. An unlimited supply of the most interesting 30-second videos in the world is dangerous regardless of who's determining "interesting."
They should put in a few additional eyes as hot spares.
I am glad hackernews has not fallen to the nihilism that most other platforms have when clearly attacked by foreign agents or special interests astroturfing and using whataboutism.

Most other communities just go along with nihilism about democracy because it is in vogue to pretend we are another authoritarian regime. Nice to see the nerds haven't given up :)
I think image generation is an interesting case, because even if a human is always in the loop, and you need to try several times before you get a good image for your prompt of interest, that's likely still faster and cheaper than photoshopping exactly what you want (or certainly faster than hiring an illustrator). And the images produced are sometimes really quite good. A model which produces some amount of really messed up images can still be 'useful'.

_However_ the kinds of failures it makes highlight that these models still lack basic background knowledge. I'm willing to let the stuff about compositionality slide -- that's asking kind of a lot. But I do draw a very straight line from DeepDream in 2015 producing worm-dogs with too many legs and eyes, style-gan artifacts where the physical relationship between a person's face or clothing and surroundings was messed up, and the freakish broken bodies that stable diffusion sometimes creates. Knowing about the structure of _images_ only tells you a limited amount about the structure of things that occupy 3d space, apparently. It knows what a John Singer Sargent portrait looks like, but it's not totally sure that humans have the same number of arms when they're hugging as when they're not.

In the same way, large language models know what text looks like, but not facticity.

So I don't know that an AI winter is called for. But maybe we should lean away from the AI optimism that we can keep getting better models by training against the kinds of data that are easiest to scrape?
Very interesting. I have written scrapers for the jail inmate data in the couple of counties nearest me - does that come under the scope of what you're doing, or not quite?
Why should I, a US citizen who has no business need to travel to China currently, worry about the CCP's authoritarianism more than the US govts?

If you ever run for office or hold a position of national security interest, your personal data will be a great source for blackmail or honeypot operations.
I don't think I've ever seen the term "whataboutism" used except in cases where the accuser wants to dismiss an argument but can't refute the point.

Laziest logical fallacy accusation IMO.
Excuse my ignorance, but wouldn't the lack of a license be presumed to be the most permissive state?
> Kinda like during the cold war you were on one team or another, no trying to play multiple sides.

Tangential to your comment, but in fact there was another path, spearheaded by, among others, India. It's where we get the term "third world", which became shorthand for "developing" because basically no developed countries joined this "third world" movement ("first world" being the so-called West, "second" being the Soviets).
Thank you for your hard work.

On the DMCA realm, I cannot wait for the Green v. DOJ case to bear fruit. If it succeeds, the DMCA anti-circumvention and anti-trafficking provisions will be ruled unconstitutional altogether.

Last we heard about the case was the oral argument for the appeal on 9/12, but it left a sour taste in my mouth.

The judges were most focused on whether Green had standing to bring the case (because the government said he would not be prosecuted for doing what he wanted to do) and on whether the appeal itself was adequate at the motion to dismiss stage.

They barely even discussed the issues of fair use and constitutional balance that the 1st amendment requires for copyright law to exist (established by SCOTUS in Eldred and Golan)

I don't know what to think with this new development, honestly.
Sounds the same as UK then.
The key quote:

“A few weeks later, I woke up in the middle of the night with a realization: I had never seen the program use anachronistic words. I left my wife in bed and went to check some of the texts I’d generated against a few cursory etymologies. My bleary-minded hunch was true: If you asked GPT-3 to continue, say, a Wordsworth poem, the computer’s vocabulary would never be one moment before or after appropriate usage for the poem’s era. This is a skill that no scholar alive has mastered. This computer program was, somehow, expert in hermeneutics: interpretation through grammatical construction and historical context, the struggle to elucidate the nexus of meaning in time.”

Anyone know why this would be true? Or has anyone else noticed details like that which are far beyond human abilities?
I enjoy good writing, but the only writing I'm willing to pay for is print books (I just bought a copy of J.R.R. Tolkien's "The Fall of Gondolin", the hardcover, illustrated one by HarperCollins). I don't want to pay for newspapers, for investigative journalism, or for long form article magazines like The Atlantic or The New Yorker. Nevermind Medium of all places, because Medium has no barrier of entry. No gatekeeping (and, given how easy it is to merely write a blurb of text, I have rather high standards for what I choose to pay to read). I'd rather consume from the likes of Amazon and have them run these writing platforms (e.g. WaPo) at a loss. Which means I'm paying for writers, in the end, just in a very indirect way. This sits well with me.

But if the choice before me was to pay for writers directly (like Medium), or let non-book writers as a profession disappear, I'd opt for the latter. You may criticize this attitude. I assume the responsibility for that and I'm being honest.
I’m aware, but this delegitimizes the conversations and forces them out of mainstream discussion.

Mark Klein told the world about Room 641A on freekin PBS.
Even if you purchase the software from a commercial vendor that doesn't mean that the vendor will indemnify you for damages caused by their failures, or that they have sufficient financial resources to pay for such damages (counterparty risk).
In my case, I basically never use anyone else's code, unless there's a real need for it, and if I'm quite confident in its veracity.

I also take full Responsibility and Accountability for that code, when it is running in my execution thread.

The result of this policy, is that I have written almost every single dependency that I use.

It has garnered me a lot of sneers from the "in crowd."

I don't particularly care.

WFM. YMMV.

[EDIT] Also, I like this:

my name is always spelled lowercase and is pronounced /ɪliˈɑnə ɛˈtiːn/.

please consider making the internet a weirder place today

note: if you send me unsolicited email based on my github profile:

i will screenshot it and share in my discord server
we will make fun of you
you will not receive a response*
We've banned this account for using HN primarily for ideological battle. That's not allowed here, regardless of which ideology you're battling for.

https://news.ycombinator.com/newsguidelines.html
How Washington came to see China as an existential threat
The current playbook for when you want to take a site down is to sign up to it and post something illegal like a bomb threat. Then immediately screenshot it and post to Twitter. Have all of your followers retweet the screenshot to the cloudflare twitter account and the company will take down the site quickly.

Doesn’t matter how quickly the sites moderators take your post down. Small site owners are expected to react within seconds while big tech is allowed days.
I don't get it. Don't you want to live in a country with more freedom than China? Why is China restricting what their citizens see online an excuse for the US to do so?
All private corps are beholden to the CCP, anyone that steps out of line is disappeared or taken out of the lime light. Just look at Jack Ma.

If you imagine that the CEO of Binance has any ability to prevent the CCP from weaponizing TikTok, then I have a bridge to sell to you
No, china requires specific strictures so such companies don't allow free speech that contradicts the party's communist doctrine or social aims. America is a free country so we don't require that. Problem is, this gives china influence over America but not the other way around. This is a bad thing both because it's asymmetrical and because America at least tries for freedom while china is a force against. Stop making these nonsense "both sides" arguments pretending china and America are equivalent.
Clearly anyone not happy with (or seeking alternatives to) the post 9/11 banking surveillance apparatus must be cast down as a nefarious character who isn't fooling anyone.
None of us are able to read the minds of Google's engineers, but I would take a guess at a couple of reasonable explanations.

1) Think about the respective quantities of Malaysian vs Italian restaurants in the US. There's probably dozens and dozens of Italian restaurants in a typical American city - you don't need to recommend French or any other food in the US when searching for Italian because you can find 100 different Italian results just about anywhere in the US. But I doubt that Malaysian or Burmese restaurants are nearly as common. It seems reasonable that a different type of search like Malaysian would yield a recommendation for something in the general area like Burmese if there's only a handful of Malaysian restaurants in a specific area in the US.

2) An American who is hunting for Malaysian food is open to trying something a little different than the American norm. If I was in the mood for something a little different from Asia and couldn't find a Malaysian place, I'd think that Burmese food would be a great substitute to try if there's one in the area. It doesn't mean that they're necessarily the same cooking style, just that it captures the right mindset while searching. I'd bet that searches for European foods in Asia make similar oddball recommendations in Asia. If you were randomly searching for Irish food in some random Asian area and there were very few Irish pubs in the region, it might randomly recommend Spanish or German or Italian food due to some level of geographic similarity because that captures the right mindset of what you're looking for: something non-Asian from the European part of the world.
While everything there is true, why not having a backup anyway? I have Elasticsearch backups and even used it once (with success) when I terraformed the index away. The delta was sourced then on the fly.
>t's absolutely doable, especially for someone with the commitment of a chess grandmaster,

would that same someone be able to pull something like this off on their own, or would they need assistance building/programming/etc? At that point, how many people need to be involved before it becomes a secret too big to keep, or dead bodies start showing up within the cheater's orbit?
Those much more often have full time paid people whose actual job is to review them. E.g the standard library of Go has security and quality review by Google. It is reasonable to assume they are investing more in supply chain security than you are in those portions.

The random dep you grabbed that some hobbyist hammered out in a weekend... may not have 2FA on github, or maybe their email domain is about to expire, and it is very likely no one reviewed it.

If you choose to use the latter because it does what you need, then you are now the first party accepting the additional responsibilities of reviewing and maintaining that code to the level of safety appropriate for your use case.

If you are making a video game for personal use, then maybe the worst case scenario is tolerable for you to not care. If you are handling PII or money of other people... then suddenly you /must/ care.
>(see Steven Donziger, US lawyer who has been imprisoned for trying to hold Chevron accountable for illegally polluting in ecuador)

I'd never heard of him so I did.

>In 2014, Kaplan ruled that the judgment in Ecuador was invalid because Donziger had achieved it through offenses against legal ethics, including racketeering, extortion, wire fraud, money laundering, obstruction of justice, judicial bribery, coercion, witness tampering, and arranging for expert's reports to be ghostwritten.

Your statement is correct but you left out that he tried to hold the accountable by many, many illegal means.

To compare him to a dissident in China who simply dissapears ome day with no explanation is beyond disengeneuos.

If the BLM protests happened in China, those protesters would all be in jail.
Sorry for being this rough but, what a naive question this is. Of course there is.
hey hey, this is exactly what happened to my engineering career right here.

"This code will never be used."

"Oh, ok." proceeds to write garbage to test out various features and different ways of doing the same thing

"Hey, this code is garbage and lacks consistency. Lets show it to everyone to warn them about this guy. We won't mention it until letting him struggle a couple years, but make sure he doesn't get any interesting work."
Those in favor of such a system for some reason are 100% convinced that it will be people like them who get to decide what's acceptable thought and what thoughts deserve punishment. The reality is much more likely that such a beast will take on a mind of its own and all of us, regardless of ideology, will end up suffering greatly under it.
Russia. Those are vast regions of land where billions have been historically EXPLOITED, SUBJUGATED and ENSLAVED by "The West".

The Russians have done quite a good job of exploiting their own people, no need for the West's assistance there. Example: Perestroika. You'd think a resource-rich country with some of the wealthiest individuals on the planet (and arguably THE wealthiest person on the planet by a great distance if rumors of Putin's actual net worth are true) wouldn't have trouble providing the basics to its people....but over 20% of the country doesn't have access to indoor plumbing. That's totally the fault of the big evil "West", now isn't it?

As for LatAm and Africa, no argument there.
He who cashes the check shall be the defendant in the lawsuit. If things went well the people behind the compiler, interpreter and OS wouldn't have received a dime from your successful enterprise, now that it's gone sideways you want to share?
That's not entirely fair to JS frameworks. There hasn't been a major new framework in years, with Angular, Vue and especially React dominating the ecosystem. React in particular presents a unique way of thinking about and composing UIs and the model has leaked into plenty of other ecosystems, for example SwiftUI which borrows heavily from it.

The reason new frameworks can't dislodge the big 3 is because they aren't bringing new ideas. Any framework that changed UI development as much as React did would absolutely be worth noting.
Counterfeiting laws?

Like, seriously?

The guy placed the code online in good faith. He didn't follow "protocol" and attach a license, so what.

IP laws are toothless wastes of time, anyway. Information wants to be free, so fucking let it.
My comparison is not at all similar to the way you are describing it. I'm comparing "TikTok could easily start showing 80 million Americans whatever political agenda they deem appropriate." to the advertising control and capabilities of FAMANG etc.
YouTube ALREADY does on their homepage what TikTok COULD do.
https://archive.ph/mdEJ8

It only lengthens the femur (thigh bone), a 3-6" extension may look a bit odd and disproportionate up close.
I see what you mean. I agree with you that it is incorrect to say that it is not innovative, or new, or useful. Those don't always correlate with monetary value.

The author however is talking about value in monetary terms, as in what other people are willing to pay you for it therefore something innovative or cool can indeed be "worthless" in the same way that a beautiful painting is worthless to a thirsty man in the desert.
As does basic cookie hygiene.

At least I assume that's what's happening, I haven't seen a medium paywall yet.
>compare systemd's timers to cron implementations sharing crontab format, or systemd journal to syslog implementations, sharing its standardized protocols. With a single interface and different implementations, you can easily swap those, but with a monolith like systemd you are mostly stuck if the software actually makes use of it.

But this still makes no sense. You can just develop another thing that converts from the systemd format to something else, or make the other daemon capable of loading the systemd format directly. It isn't even hard to do this, I've seen various things do it. And depending on where you are the systemd formats are arguably more standardized than old crons and sysloggers in the current year.
This whataboutism whack-a-mole in the comments trying to equate China to the US is tiring but it seems to be necessary to not give lurkers the impression that this is the consensus

EDIT: previously hyperbolic
Funny thing, most commercial software also comes with T&Cs that say the make no guarantees and assume no liability. e.g., Microsoft Windows 10 retail license:

> Neither Microsoft, nor the device manufacturer or installer, gives any other express warranties, guarantees, or conditions.

And their liability is limited to...

> at its election, either: (i) repair or replace the software at no charge, or (ii) accept return of the software (or at its election the device on which the software was preinstalled) for a refund of the amount paid, if any.

So, maybe they'll fix, or maybe they'll refund you your money and you discontinue your use of the software. Maybe they'll issue a fix that you incur the cost of installing and testing.

[1] https://www.microsoft.com/en-us/Useterms/Retail/Windows/10/U...
To solve housing crisis we need to decrease housing quality. Nobody wants to admit that.

It might mean 100-200 sf housing, it might mean shared bathrooms. That’s the sad reality.

The other alternative is socialism just bring up income at the bottom up by bringing the top down.

Both are extremely unpopular