skysight-inc/HackerNews huggingface dataset:
I don't see how having dynamic imports matters if all you want to do is detect if a specific file is imported. Run the install and see what gets imported. That's it.
Wow that's cool! thank you for sharing :)
Your proposed solution sounds an awful lot like a manifest file

https://en.wikipedia.org/wiki/Manifest_file
>he was talking about a different pipeline, Nord Stream 2

No. It is it not "different" seeing as that very pipeline was attacked and damaged, along with the other one. Nord Stream 1 and 2 were both attacked and damaged. They run parallel for much of their path except at certain parts.

https://en.wikipedia.org/wiki/2022_Nord_Stream_gas_leaks

>block it from opening.

Yes, and given the energy crisis now affecting Europe and Germany, inflation, and potential shortages of gas when winter comes and/or next year plus industrial needs for natural gas as input, it is exceedingly ridiculous that Russia would preempt these immanent crises and throw away their leverage for potential alliance with Europe in opposition to US right as the mounting pressures incentivize Europe to abandon sanctions and push for rapprochement.

You bring up war crimes and war decisions. First of all all wars involved war crimes, including the current one on the Ukrainian side. But put morality aside for a second, I'm addressing interests and realpolitik. That Russia saw it in there interest to attack is one thing. I dispute that they saw it in their interest to blow up their own pipeline and their primary point of leverage and economic strength towards an alliance with Europe in opposition to their primary enemy. No benefit of the doubt is required here to see this reality.
Perhaps Meta will one day pivot to global telecommunications provider.
I'm just waiting around for the inevitable tweet from the the meister twit, "Oh hey all this turned out to be really hard and we're going to need a bunch of time to get all the details right while stepping on a lot of toes and pissing off users and advertisers... please stay!"

See also: cascade of attention deficit teenagers
California’s _Tax revenue alone_ ($250B) is about the size of Finland’s GDP.

Imagine if they spent that on improving the housing situation.
It should be noted that this isn't an exaggeration. For a long time they actually had in the sidebar on lemmy.ml that it was the main Marxist instance.
I'd link an archive but the site's design makes every one I can find pull the new info.
The question is who are they going to sell that to when they go under if they continue burning money in their metacrap.
This is flat out inaccurate. Tesla sells a tiny % to government and if you are still trying to argue credits, you are beyond out of touch. And among all serious rocket companies in the world its the least dependent and direct by government.

Microsoft as made gigantic amount of money selling to government. So do large banks. GM and Ford have much larger better organized departments selling to the government. Amazon has huge contracts with DoD as well.
Or be compromised themselves and an unknowing vehicle for attacks (e.g. see SolarWinds).
FS-UAE (it already incorporates Winuae), the site should have everything you need.
It turned out pretty well for Western Europe and Japan after WWII.
I've been messing around with some ideas.

1. `autobox` (to be renamed lol) [0]. It's basically a Rust interpreter that performs taint and effect analysis, reporting on both, allowing you to use that information to generate sandboxes. ie: "autobox sees you used the string '~/.config' to read a file, and that is all the IO performed, so that is all the IO you get".

2. I'm working on a container based `cargo` with `riff` built in that aims to work for the vast majority of projects and sandbox your build with a defined threat model.

The goal is to be able to basically `alias cargo=cargo-sandboxed` and have the same experience but with a restricted container environment + better auditing of things happening in the container.

3. I previously built a POC of a `Sandbox.toml` and `Sandbox.lock` with a policy language that allowed you to specify a policy for a given build step. Unfortunately, I couldn't decide on how I wanted it to work in terms of "do I generate a single sandbox for the entire build, or do I run each build stage in its own sandbox" - there are tradeoffs for both.

Here's a lil snippet:

[build-permissions.file-system]
// All paths are relative to the project directory unless they start with `/`
"../" = {permissions = ["read"]}
// "$target" being a special path
"$target" = {permissions = ["read", "write"]}
// Source this path from the environment at build time, `optional` means it's
// ok if it isn't available
"$env::PROTOC_PATH" = {permissions = ["read", "execute"], optional=true}
// Default protobuf installation paths, via regex
"^(/usr)?/bin/protoc" = {permissions = ["read", "execute"], regex=true}

Once I'm done with (2) though I think I'll tackle (3).

`autobox` is fun but I think it may be impractical without more language level support and no matter what I'd end up having to implement it in the compiler at some point, which means it would be unusable without nightly or a fork.

I'm going to try to wrap up an autobox POC that handles branching and loops, publish it, and see if someone who does more compilery things is willing to pick it up. As for (2) and (3) I believe I can build practical implementations for both.

[0] https://github.com/insanitybit/autobox/
* stifled laughter *

Genuinely sorry.
I think it's more likely that they've bought more accessories than you and get bit by more incompatibilities. I think the issue is that there's nobody designing the entire end-to-end experience of what happens when you use every accessory with every feature turned on. I'm sure there's QA on all of it, but tickets don't magically create an architecture.
Your original rant makes you sound completely insane.
And Google will own... more than that. Google will have 19+ owned/part-owned cables, Meta has 14.
Thanks (both) for the info!
"Trapped" I believe is the word you're looking for.
Sorry, I didn't see your follow-up! It was just the standard Bertolli, Pompeian, and California Olive Ranch stuff found in our supermarkets. I was still learning to cook at the time, and the combination of the smoke being ventilated, indistinct, normalizable, and mildly pleasant to foul made me unaware. Some of my later housemates had to clue me in!
It was sold to Automattic by Verizon for only $3 million.. Deal of the century.
Does anyone have any insight about how to coordinate this kind of change to a large project? This kind of change touches literally every file, so every branch will have merge conflicts. The best idea I can think of is to announce the date ahead of time and make every contributor rebase their branches on the day of the merge. But there has to be a better way.

> | edit [–] | on: PR that converts the TypeScript repo from namespac...
This is not really true. If SpaceX fails to perform, they don't get the money. They developed things like Falcon Heavy totally by themselves on spec. They pushed the government into fixed price contracts.

If SpaceX had failed to do the human launch, the cost would have been on SpaceX. As it is right now on Boeing.
CVE-2022-24828: Composer Command Injection Vulnerability
When Is Serverless More Expensive Than Containers?
previous

https://news.ycombinator.com/item?id=8679060

85 points by joelby37 on Dec 1, 2014 | hide | past | favorite | 18 comments
%90 of what people do today is import some open source library or package to do the heavy lifting and weave them into an app using a scripting language. It is sort of the MS Basic approach of the web app world. Nothing wrong with that. C++ is used for a different class of problems that are not the main focus of the industry anymore. I would likely choose something like Rust today but at the time C++'s star was rising there really weren't a lot of other better options.
Assigning a part number to firmware is perfectly normal. It's part of the Bill of Materials for the product.

What is not normal is referring to that part number anywhere except on the BoM.
> And what can be used instead of C++?

For most use cases Java is a better option. Very fast, without any of the pain.

If you truly must not have a VM (rare), there's still C. Perhaps rust.
I’m not really a fan of surveillance, but where I live there is currently a decreasing amount of active persecution of crime and surveillance cameras are picking up the slack and are probably the main reason increasingly brazen criminals are getting identified and caught.
I am not going to call the problem solved, but there are other options too.

C++ has libraries threadsafe shared pointers, interthread message passing, transactional memory, futures/promises, work stealing queues, and access to all the OS primitives to build anything else.
If you actually have to execute a program (but have no safe way of doing so), to see if a complex routine that may return any filename imports a safe file or not, then you are facing up against https://en.wikipedia.org/wiki/Rice%27s_theorem
I moved from Protonmail to Migadu and am happy with them. They support standard protocols and otherwise get out of the way. They also seem to be paying the Sourcehut guys to make an open source webmail client for them, which is cool but I will probably never use.
Part of the problem with the Java sandbox is that it was enforced entirely by the VM + the VM is written in C++. The idea is not inherently bad.
I've found that the re-routing is good if you happen to be lucky enough to be one of the first cars to get rerouted. But pretty quickly the alternate route gets congested too because everyone is getting rerouted.
C++ has improved a lot over the past decade or so. Compilers can add runtime checks now that make most memory bugs easy to detect and diagnose. C++ has plenty of warts and legacy stuff that you wouldn't keep if you were designing a language from scratch, but it is way better than it used to be and there still isn't anything that fills the same space C++ targets. Rust tries to but IMO it is too opinionated.
Couldn't forcing publishers to sign a hash of the module not be a solution?

The certificate could contain information about the owner and the consumer could check if he wants to deal with the owner or not. Developers could add a desired whitelist to pip (or use a curated one) to continue using automation.
Many of us did this sort of thing in our twenties and sneered at the whiners nattering on about “work/life balance,” then discovered there’s more to life than pulping yourself for… a pat on the back, a voucher for a dinner for two at a nice steakhouse, and the expectation that you’ll do it all over again the next time that the CEO just has to have some feature.
Sort of like complaining the talented Cobol and Fortran developers are running sry.
I just wished more consoles were successful than the major three we have now.

If Jaguar, 3do were still around we would be in a better universe.
I mean is this really a reason to not use something? Just because you don't agree with the views of the people running it?
By going bankrupt and fire selling the dark fiber? :)
Sure I have, you disagree with pretty much all of the leader of SpaceX who have said the opposite. Have you not bothered to look? You disagree with the journalist who has spent most time investigating space. You disagree with most experts who have studied the topic.
Twitter Is Working on Paid DMs?
Amazon has them too, anyone with a huge datacenter footprint and massive traffic to shift is going to want to own (part of) these systems eventually, it's extremely low risk and great reward.
> No one thinks of Twitter as anything but a toxic cesspool

I do. I keep my timeline on "latest" and it's a perfectly pleasant experience filled with only tweets from the people I've followed (and their retweets, which I also have mostly off).

Keeping the Twitter timeline on their algorithmic "home" feed is mentally/emotionally as risky, reckless, and self-destructive as drunk driving is physically, but keeping it on latest is a totally reasonable experience. I see more obnoxiously bad takes here than I do there.
Am I understanding this right - cities in CA are fighting the State of CA?

Isn't the State of CA supposed to be made of the cities in CA, rather than in opposition to their desires?

If the city doesn't want housing, that should be fought at the city level, rather than the state stepping in. The whole thing just seems upside down to me.
So? Use meta ai structures first that you refine in alphafold. Best of two worlds.
Ancient DNA analysis sheds light on the early peopling of South America
Summary

Using DNA from two ancient humans unearthed in two different archaeological sites in northeast Brazil, researchers have unraveled the deep demographic history of South America at the regional level with some surprising results. Not only do they provide new genetic evidence supporting existing archaeological data of the north-to-south migration toward South America, they also have discovered migrations in the opposite direction along the Atlantic coast -- for the first time. Among the key findings, they also have discovered evidence of Neanderthal ancestry within the genomes of ancient individuals from South America.
This is really cool work! Also a fan of Grapl.
I'll offer a hat tip to our little bubble here. Water consumption with respect to the animals themselves is high but once you factor in all of the water used in the production of the feed itself it's crazy especially when considering the subsidies in play.

I'll also say I thoroughly enjoyed Zeihan's book. It was enlightening from many angles but the supply chain dependencies and raw material overviews he did were very informative.
They are already selling "middle-mile" fiber in the US...

https://www.networkworld.com/article/3359239/facebook-gets-i...
The YIMBY's are asking the individual property owners be allowed to decide what to do with their own properties. Not letting government dictate what people do doesn't seem like "tyranny" or "expropriation" to me.
Sounds like a good plan.
google.com/tensorflow (and you'd have to prove you own google.com)

not perfect, but better.
Yeah, he lasted a few years at amazon then went to twilio and now works at mParticle... who!? I think he probably peaked a while ago.
They’re printing money you mean
It is the price one has to pay for living in the city and being fashionable.

I see this in Amsterdam: rich expats who barely grasp that there is a country outside the city.
Are there any DB or cloud vendors already offering natural-language to SQL capabilities? I'd be a bit surprised if Google or AWS doesn't have it, given their deep expertise in NLP.
The new development here seems to be that these are white LEDs that can be specced in terms of blue/green ratio, rather than metrics based around human vision (color temperature, tint, and color rendering index).

Cree and other manufacturers have been offering horticulture-specific LEDs for some time, both red/blue and red/blue-weighted white like these. Here are some of their competitors:

Samsung: https://www.samsung.com/led/lighting/applications/horticultu...

Osram: https://www.osram.com/os/applications/horticulture-lighting/...

Nichia: https://led-ld.nichia.co.jp/en/product/lighting_hortisolis.h...
I heard a meme of how "Meta" is short for "Metastasize" - seems like each new FB story makes it more and more of a reality.
:D Thanks!
You have to learn pointers in Rust too and I don't think the STL is any more complicated than Rust's standard library.
The problem is not short term vs long term, it's the magnitude of the planned expenditures.

Amazon and other large companies created new products with small fractions of the funds that Meta is proposing spending. As illustrated nicely in the All In podcast, the only thing that compares in magnitude is the Apollo space program.

https://youtu.be/A-bIpJdaCnM?t=2098
This is a fun book in this genre for anyone who's interested. It has a section on Hallaj: https://www.amazon.com/Tales-Land-Sufis-Mojdeh-Bayat/dp/1570...

I randomly picked it off the shelf of my university library one time when I was taking a religious studies class that touched on mysticism. It's mostly just a collection of mythology and tales about a collection of famous Sufis. Fun read.
Asking people if they want to opt out of all gifts could also backfire as a perceived loss. I.e. gift quality is higher than they expected, or perceived costs of this perk for others seem to be getting out of hand to them, while they feel committed to their initial choice of being someone who declined and is sort of against the whole thing.

At larger companies, I noticed that you can do a give away with tables along the path to the cafeteria, etc, and really get away with giving out shwag of pretty much no value in a way that pleases quite a few either because they get excited by anything free or they get caught up in the moment, branding as a sort of collectible, etc.
Some of these are objectively bad ($5 grocery card) while others (team dinner) are basically complaints about a job/coworkers you hate (now these fools are taking your free time, too).
In Rust this is done using Cargo (the build system) and each crate (library / binary) can choose a compiler edition that gates certain features which are not backward compatible.

You can use (depend on) a crate from your code that uses an old edition.

In C++, your idea would require enforcement at the compiler level but the linker should still link both "old" and "new" C/C++ together. Then the switch is done on a .cpp file (translation unit) level.

However the culture around C / C++ compiler development with standards and multiple compilers would require huge committees to decide what is "modern C++." There might be a lot of debate.

Much of the innovation in Python, C# and Rust is in how the process of language and standard library development is managed in the community. I wonder if C++ could do that?
Why do their opinions impact me?

I different goals than them.
> "A monad is just a monoid in the category of endofunctors". Anyone who says that - or anything anywhere close to it - is gatekeeping, no matter how true the statement is.

Quite frankly, if you don't understand that sentence then you are in no position to judge whether the concepts could be made more accessible. Sometimes the important question is not "could this be easier to learn?" but "is learning it worth the effort?".
Interesting video. Another factor is the obscene amount of land owned by the federal government which has stop virtually all growth in rural areas in the western American states.
Actually every city in California is mandated to present a realistic plan to satisfy their Regional Housing Needs Allocation (RHNA) every 10 years if they wish to keep access to state infrastructure funding in addition to local control of city zoning. That is a law from 1970 reaffirmed and strengthened in 1990 and 2019.

Santa Monica has refused to do so for the past 10 years. This year they just had their entire zoning code essentially overturned by the state (again, per that law) until they were back in compliance. In the 3 months they were deemed noncompliant before they got their act together, applications for 4000 units were filed and now must be approved ministerially, which goes a long away to satisfying their 8000 unit shortage as determined by RHNA!

Beverly Hills and Pasadena just had their housing elements (zoning) thrown out for the same reason. San Francisco, Berkeley, and Palo Alto will be next unless they get their act together. No city itself is the source of the state's housing crisis. But Santa Monica is one part of it.
There are both supply shocks and demand shocks. Gas prices are definitely undergoing a supply shock right now, which contributes to the price increases (and which the Fed can't help.) But there are also broad-based demand increases.
Being a part owner of a subsea cable is effectively buying a percentage of bandwidth on said cable. But "Meta is buying bandwidth" doesn't sound as scary.
They already effectively are with WhatsApp.
TomTom like Here and Garmin are fighting to try to stay relevant in a market that has been seized by Android Auto and CarPlay.

The issue is the car vendors do not want to surrender their navigation and entertainment to Google and Apple as navigation system options at >$1500 and ongoing updates are precious margin and recurring revenue that they all desire.

With Android Auto or CarPlay they give that all up.

They are both dead men walking but like to do a full court press like this every few years to remind us all they still have the lights on.
Great comment. I learned something about a topic I'm not very familiar with.

I think it's possible that less attention is not the only reason Communism is tolerated more than Nazism. Nazism is much more inherently genocidal than Communism is. While the death toll for Communism is higher, it can be argued (and frequently is according to Wikipedia) that those deaths occurred under Communist regimes, but not because of Communism. So while some may wear a t-shirt with Che on it, they could be attempting to signal a Communist ideal that has never been implemented. While a t-shirt with a swastika on it, or worse, Hitler himself, doesn't leave much room to interpret anything other than racism, fascism, and ultimately genocide.

I also support improved education. Particularly body counts of states and their leaders, past and present. Especially for those that receive perhaps the least attention of all, Western democracies.
How about a crappy Windows CE netbook with your company logo on it:

https://www.youtube.com/watch?v=DgLtHu-9mnk
Jelly of the Month Club, instead of the bonus that he expected to cover much of the cost of his new swimming pool.
> ..could also backfire..

Yeah, agreed. After a moment of reflection I edited it down to opting out of a singular gift.
Looks like SF's equivalent of LA's Aids Healthcare Foundation, which spends less than 10% of its budget on treating AIDS or on healthcare, and instead spends nearly all of its money fighting construction in Hollywood that would interfere with the sightlines of the AHF HQ.
> you are shifting the goal posts.

Not at all, I said the same thing upthread: https://news.ycombinator.com/item?id=33438985
There's a war out there, old friend, a world war.
And it's not about who's got the most bullets.
It's about who controls the information:
...what we see and hear, how we work, what we think.
It's all about the information.

https://www.youtube.com/watch?v=Xk0Mzci2Sks
I wonder if routing services like apple/google maps consider this when routing drivers. Theoretically they could avoid the paradox by just not routing people the selfish way right? And here that wouldn't make it better than the original, but in the real world where they add helpful roads but they get too congested and slow things down, they could (assuming everyone listened) stop them from getting congested allowing for the benefits to be realized.
Hashing solves one side of the coin. Namely, whether or not you got the thing you expected (or perhaps, got the thing you expected from the individual you expected it to come from).

On the other side, we have to contend with the fact that malware can be slipped into otherwise legitimate packages. This has happened numerous times over the years. In this case, the hash would serve as a way to say "yup, you definitely got malware". Useful for incident response, but I think we can do better and try and prevent these attacks from being viable in the first place.
People love to give her all the credit, just to discredit Musk. She was doing sales for the first 8 years of the company. Surely an important job, and she is of course great, but to claim she is some overwhelming part of the success of SpaceX compared to Musk is to much.

Of course all the early people, Shotwell, Mueller, Königsmann, Bazza were all really important. Shotwell by now being the the most important.

But there really is no question that Musk deserves by far the most credit.
The ballot initiative would lose; CEQA is notionally an environmental protection measure.