skysight-inc/HackerNews huggingface dataset:
Toxic metals have been understood for a while so I would hope they are better regulated.

Plasticizers are clearly not well regulated yet, "BPA free" stuff just uses BPS which is just as bad.
It can also be `self: Box<Self>` or `mut self: Pin<&mut Self>` or `self: Box<Arc<Rc<Self>>>` if you feel brave.
I have to say that over my 20 years of experience in engineering, I have never seen a worse candidate experience than Canonical. After spending probably 20-30 hours of interviews, tests, prep and jumping through hoops with people, getting a generic rejection notice with less details than most automated filters wasn't just a punch to the gut, it was actually incredibly insulting.

In fact it was such an insult that it has turned me off ever using any Canonical products or services and I will ensure in the future that none of my organizations use them either.

There is a reason Canonical has so many unfilled, open positions and it isn't because of their meteoric growth.
I understand what you're saying but NYC isn't exactly the only city in the world with large apartment buildings.
Alex Pareene on the subject from 2018: https://splinternews.com/if-you-truly-care-about-speech-you-...
Replicate | Berkeley, CA + Remote | https://replicate.com/

Replicate makes it easy to run machine learning models in the cloud. We've got a ton of open source generative AI models you can run off the shelf, and ultimately we want to become Vercel for hosting custom machine learning models at scale.

We're an experienced team from Spotify, Docker, GitHub, Heroku, and various other places. We're backed by some top investors.

Hiring for:

- ML engineer – somebody who knows how to optimize and deploy ML models

- Infrastructure engineer – somebody to help us deploy them at scale

... and more. More details: https://replicate.com/about#join-us

Email us: jobs@replicate.com
> It's cryptographically signed. it can be validated. browsers can implement it if they wish.

Valid != trustworthy.
Motorola makes a decent android phone for $170. Buy for work and only use for work.
"I cannot contemplate human affairs, without laughing or crying. I choose to laugh. When People talk of the Freedom of Writing Speaking or thinking, I cannot choose but laugh. No such thing ever existed. No such thing now exists: but I hope it will exist, But it must be hundreds of years after you and I Shall write and Speak no more."

-John Adams, letter to Thomas Jefferson, 1817

https://founders.archives.gov/documents/Adams/99-02-02-6790
Do games even work on a MacBook?

Does it have Excel with macros?
If the TLD leaks their keys, and an attacker can impersonate a registrar, you are screwed today. That's on top of the possibility that the CA -- no, any CA -- leaks their keys.

CAA and CT are absolutely wonderful initiatives and do a lot to keep the creaky CA PKI usable. But that's on top of the domain registry which underpins everything.

The registry control ownership of domains. With that comes an indirect power to control who can get domain validated certificates issued. Then on top of that we also have to trust the CA who only do the actual issuing.

That's just strictly worse for no upside other than historical reasons.

Look at the most popular protocols for domain issuance. It's variants of a simple theme, store-and-forward signed ascii messages. It's crypto every step of the way. Yet most of the large TLDs manage with less screwups than many of the CAs.

In my anecdotal experience both types of institutions are manned with very competent people, but I would not hesitate between the ccTLD and the CA which one to trust if given the choice.
Second Life briefly had That Moment where it looked like it won: it had a metaverse that everyone wanted to buy virtual real estate in. There were virtual malls full of shopping with Real Brands. There were virtual office parks for Real Companies to get Real Work Done (Virtually). There virtual campuses for Real Universities with Real Lectures from Actual Professors. Nearly every avatar had Legs! (I can't believe that needs to be stated in 2022, thanks Zuckerberg.)

There were small businesses, even, little mom and pop artists generating avatar clothing and customizations and hoping to make a buck from all these tourists that were around Really Shopping or Really Learning or what have you.

You know what else was Real that people brought with them to Second Life? Real Crimes. There were scams (not all those mom and pop artists were on the up and up). There were attacks (give coders enough scripting tools and they will code all sorts of terrible things). There was sex and porn so there was also sex scandals and sex workers and prostitution rings and allegations of sex trafficking. (Relatedly to that, EA sometimes doesn't want you to know that Sims Online ever existed because of events that happened in only a few days of a Beta test that spooked EA so terribly they stopped publishing MMOs for like a half-decade. Semi-relatedly to that, there's a recent sex trafficking lawsuit against Roblux, with Discord co-listed, that was recent-ish news that made it to the front page of HN. History repeats itself and Meta/Facebook should be listening.)

Eventually all the Real Brands and Real Companies and Real Universities and all that got bored and left. (Even despite the luxuries of avatars with working Legs! Lol, Zuckerberg.) Most of what was left was the furries and the crimes.

(To be fair, I think Second Life being mostly sex-positive was a good thing and the "Furries mostly" era of Second Life produced some fun content and wild stories, much of it positive in its way. The criticism is not at all that Second Life tolerated sex and porn; crimes happen all the same without sex involved, I certainly gave other examples. It doesn't help that crimes that the FBI likes to investigate tend to involve sex, but that's a different matter.)

I think Meta/Facebook are still in the phase of pretending like building any sort of Metaverse is just inherently good and separate from real world problems or concerns. I think Meta/Facebook are still publicly acting like a Metaverse would somehow "save" them from the real world problems of running Facebook and Instagram (and their various existing issues with world crimes). I think they have already forgot some of the lessons from Second Life that if you invite Real People into your virtual world you still get Real People with Real Problems including Real Crimes. It's in no way different in a 3D AR/VR (Now with Legs!) space, than an early Oughts 3D space (Always with Legs!). It's very much the same. (ETA: The technology may feel different, to some. But it turns out: the people are kind of the same. That shouldn't surprise anyone. Especially not anyone who has seen, I don't know, Facebook.)
You would expect the apt building provides dumpsters
If You Truly Care About Speech, You Will Invite Me to Call You a Dipshit (2018)
I have to say that over my 20 years of experience in engineering, I have never seen a worse candidate experience than Canonical. After spending probably 20-30 hours of interviews, tests, prep and jumping through hoops with people, getting a generic rejection notice with less details than most automated filters wasn't just a punch to the gut, it was actually incredibly insulting.

In fact it was such an insult that it has turned me off ever using any Canonical products or services and I will ensure in the future that none of my organizations use them either.

There is a reason Canonical has so many unfilled, open positions and it isn't because of their meteoric growth.

(C&P from another posting)
The lack of HKT is the only disappointing thing about the lang for me.

There are some ways to get around it, by simulation and using ‘as’ but it isn’t particularly safe.
That thread is debunked in the comments; the CSAM report option predates Musk.

https://twitter.com/ChronicBabak/status/1594762640357982208
There is work on zero-shot learning and on procedurally generated environments like Procgen but it doesn't go mainstream because the results aren't as cool to most as some new record on a known board game or video game.
There are at least three Java runtimes written in Java, Jikes RVM, MaximeVM, and GraalVM.
Depends on which key is stolen. You can't update the certs on distributed users without some root certificate key. If that key is compromised, there is no trust root which the clients can trust anymore. The thief can revoke all the keys the original institution holds, so they have no path for changing keys.
Funny, I did the same with my cousin, except we snail-mailed hand written paper mails to each other. I think once. Also, he had a C64 and I had a Spectravideo.
>My understanding is that these certs are vendor-specific (and potentially more finely grained than that - I think it'd be fine to have a separate cert per model, for instance) and are rooted in the firmware, not the hardware - that is, it's not the secure boot signing key, and a new firmware update can simply use a different platform certificate.

Correct, affected OEMs can still rotate the cert used to sign their system apps and then push an OTA update to deliver the updated apps. Then they can push app updates with that new cert.

However, V2 versus V3 signatures complicate things a bit, I think.
You could get a plug-in PostScript cartridge as far back as the LJII.
> Most of the weapons the US makes is useless in a civilization that has mostly been at peace for a long time

It's not useless, it's all about power projection. When you go to rob a bank and take a gun with you that you will never use then you don't call that gun useless because thanks to projecting your deadly power with it you were able to successfully rob the bank.
imagine if someone linked me your comment and i deduced that hackernews was just low effort old people complaining about things
exactly! this makes no sense to me. the rules are not being equally applied.
I'd love to have this key for my device so I can actually have full ownership of it.
> Private parties are (with some number of government constraints) free to pick who to work with, who to play with, and who to talk with, and who they don't want to do anything with.

This is so true. The problem we have now is that online platforms are preventing us from making those choices for ourselves. We're being told we're not allowed to talk to certain types of people, often for ideological reasons.

Online platforms shouldn't limit our choices, they should empower us to find whatever content we want and block/remove content we aren't interested in.
I guess what I really meant was - they've captured a lot of common patterns in the iterator library so I don't have to write them myself.

No experience with haskell - sometimes I try and learn it and give up when stack complains about version conflicts - but regardless I try not to get too many hangups about functions not being super generic, just that they are there when I need them.
Why would Google have these keys?
The rats rule the alleys at night.
This is the quote they're referencing:

NATALIE WYNN (the mind behind Control Points, a left wing YouTube channel)
I do think that looking at 8Chan is a pretty good case study in what happens when you create a "okay, let's just let people say anything." People are posting child pornography to this website on a fairly frequent basis.

I think you're right. "On the media" was just talking about how having an "anything goes" policy leads to a place where nobody wants to hang out, where people post illegal stuff even though its technically not allowed. Which I think is valid when Musk has previously said Twitter should allow anything legal.
They are inversely correlated, yes, but the absolute levels of fertility American poor vs subsistence farming poor are much lower.

It’s possible for the poorest people to have more kids than anyone while economic pressures also lower birth rates across the board.
Standard Ebooks is one of the best ways to find public domain literature. Looks beautiful, entirely free: https://standardebooks.org/ebooks
Like night and day. I had forgotten why the 128 felt so preposterous.
Try this version of War & Peace. Beautifully made and gets the core concepts across nicely.

https://en.wikipedia.org/wiki/War_%26_Peace_(2016_TV_series)

Now to wait for the same of Proust..
The only smart decision he's made in recent memory.
If someone copies the key with pencil and paper, the original remains in place. There will be nothing to show that anything happened... until signed malware is detected in the field. (Which is exactly where we are now - with signed malware from a bunch of different keys.) The amount of damage depends on how long the signed malware was out there, and what its uptake rate is.

Sure, it won't destroy or infect the entire world. It's still pretty bad, though. And so far I haven't seen anything saying how long it was out there.

Also: How did so many keys get compromised? There may be a bigger (or more systemic) problem.
OwnCloud Infinite Scale is released for general availability
> (or who's old enough to remember Polanski)

That's not a resolved matter by the way. He's still alive, still a convicted rapist, still a fugitive, and still defended and respected by Hollywood-centric media. He continues to evidently be immune to 'cancellation' because... influential people in movie industry like his movies I guess.
fine tuned custom models, models with IP knowledge, models that know what you look like. Better latency etc etc. Obviously some can be served by models hosted locally. You can host a model with Triton and create an API to call it in your native application.
“Apple does not claim a cut of the exchange of stocks, but they do claim a cut of the transaction fees for the exchange of stocks.”

Are you sure / how? I’m not going to sign up for robinhood to confirm but my brokerage transacts with my bank, not in-app purchasing, pretty sure robinhood is the same. I’m pretty sure the differentiation is that stocks aren’t considered digital goods. And neither is coinbase’s mainline business which is allowed to facilitate buying & selling crypto without paying fees, even on their transaction fees, which users pay.
> I want to do a quick, ad-hoc programming exercise to see how fast you operate on basic tasks (which #1 doesn't readily address).

Right. And to do so in good faith, this absolutely can and should be a collaborative exercise with an interviewer. It demonstrates that the employer has skin in the game and isn't body-shopping. Once you're out of junior/low-mid hiring, this is really, really important to getting quality candidates to go through your funnel.

> interviewers are trying to de-risk candidates as much (and as fast) as possible.

Of course they are. They should also be aware of the tradeoffs in doing so.
Those aren't or haven't been available long enough to have a significant effect, I suspect.
Graphistry | Backend Engineer | Remote | US + global | Full-Time or Contract-to-Hire | S/TS clearance a plus if DC

$100K-200K/yr + early-stage equity

Graphistry is profitably growing 4x YoY as the first visual graph AI platform (UC Berkeley spinout), with analyst teams using it all the way from cyber/fraud/misinfo to supply chain & digital retail. They use the GPU visual graph analytics to uncover relationships in their operational data, and our new graph AI tiers to automate their workflows like fraud detection. Top gov agencies, journalists, manufacturers, scientists, etc use us for all sorts of analyses, and so every day is interesting as we collaborate with them to tackle important work using our platform. Technologically, we are known for having helped start the GPU data frame ecosystem (Nvidia RAPIDS, Apache Arrow, ...) as means to enabling our client<>cloud GPU visual analytics experience.

We are looking for someone into k8s/python and into our users' missions. Half is working on our emerging SaaS -- global GPU cluster -- half our new enterprise AI layers (MLOps enablement: Jupyerhub, dask_cudf, ...), and third half working directly with our bigger customers (enterprise, gov, tech design partners). We are less than 10 folks and aiming to 2-3X next year (on revenue), so looking for someone into ownership, real company building, solving real customer problems, and building on the tech edge.

https://www.graphistry.com/careers - see apply links for Google docs & contact info
My grandmother had an island. Nothing to boast of. You could walk around it in an hour, but still it was, it was a paradise for us. One summer, we went for a visit and discovered the place had been infested with rats! They'd come on a fishing boat and gorged themselves on coconut. So how do you get rats off an island? Hmm? My grandmother showed me. We buried an oil drum and hinged the lid. Then we wired coconut to the lid as bait and the rats would come for the coconut, and they would fall into the drum. And after a month, you have trapped all the rats, but what do you do then? Throw the drum into the ocean? Burn it? No. You just leave it and they begin to get hungry. And one by one they start eating each other, until there are only two left. The two survivors. And then what? Do you kill them? No. You take them and release them into the trees, but now they don't eat coconut anymore. Now, they only eat rat. You have changed their nature.

(Silva's opening monologue in Skyfall)
Yeah but the GAS is run by artists and they transact in Tater Tots (TOT). When users unlock the feature in the game the developer charges $2 which covers the cost of the content ($0.50) which is delivered outside of the app to their Windows PC at home running the game and so is not subject to the in app purchase restrictions in the first place, and actually is a TOT anyway, plus overhead in case the developer needs to buy more TOTs (which they already have on hand) and then, because they employ a small army of artists who contribute assets to the GAS, have structured their own product such that many of the Tots that the GAS is expecting for the transaction would be paid right back out to their own artists. Never mind that TOTs are worthless because everyone else eats french fries (FFX). But the artists aren't picky and have to eat so they don't complain. Apple is getting hungry for TOTs but realize they have no artists to eat them because they don't participate in the GAS and their designers eat FFX just like everyone else. So instead Apple seems to want to demand 30% of the fair market value of however many TOTs change hands every time the GAS distributes assets to a user who initiated the request from their phone. How does any of this make sense?
Fascinating games. But I played a lot of Stratego as a kid, and I remember 1 was the strongest piece and 9 was the weakest. In these videos it seems 10 is strongest and 2 is weakest and that's making it confusing to watch. Did the pieces change sometime in the past 40 years or am I imagining things?
While I haven't downvoted or flagged your comment, I don't immediatelly get it: what is so peculiar that makes you think/joke it might be a UK org?

Perhaps if you explained yourself better, you wouldn't get any downvotes.
Thanks, I will remove that part of the comment. Assuming good faith from someone who appears to be extremely active in this area, perhaps this was an A/B tested feature and she didn't have it.

What I find more concerning about this is the way media attention is used offensively. Clearly CSAM has been a problem on Twitter for some time. But only post-Musk is CSAM on Twitter becoming a focus of attention in the media. Is it increasing or decreasing? We're likely to get only fearmongering articles about the T&S team layoffs.
Where did you get those instructions from? Is creating a virtual environment necessary if I'm fine with it running on my real system?

I assume the environment part is what the "conda" commands on the GitHub repo readme are doing, but finding "conda" to install seems to be its own process. It's not on MacPorts, pip seems to only install a Python package instead of an executable, and getting a package from some other site feels sketchy.

What is it with ML and Python, anyway? Why is this amazing new technology being shrouded in an ecosystem and language which… well, I guess if I can't say anything nice…
Both OT and CRDT approaches have lots of obscure edge cases. In both cases, I can't write a correct algorithm without a fuzzer to save myself. (And I don't trust anyone else to, either).

CRDTs aren't that complex on the surface - this messy file[1] implements 4 different list CRDT algorithms in a few hundred lines of code. And CRDTs are pretty simple for JSON structures, which is not at all true for OT algorithms.

But text CRDTs in particular need a whole lot more thought around optimization because of how locations work. Locations in list/text CRDTs generally work by giving every item a globally-unique ID and referencing that ID with every change. So, inserts work by saying "Insert between ID xxx and yyy". But, if you have a text document which needs to store a GUID for every keystroke which has ever happened, disk and memory usage becomes crazy bad. And if you don't have a clever indexing strategy, looking up IDs will bottleneck your program.

In diamond types (my CRDT), I solve that with a pancake stack of optimizations which all feed into each other. Ids are (agent, sequence number) pairs so I can run-length encode them. Internally those IDs get flattened into integers, and I use a special hand-written b-tree which internally run-length encodes all the items it stores. I've iterated on Yjs's file format to get the file size down to ~0.05 bytes of overhead per inserted character in some real world data sets, which is wild given each inserted character needs to store about 8 different fields. (Insert position, ID (agent + seq), parents, the inserted character, and so on).

CRDTs aren't that complex. Making them small and fast is the challenge. Automerge has been around for years and still takes hundreds of megabytes of ram to process a simple editing trace for a 10 page text document. Even in their rust implementation. Diamond types is orders of magnitude faster, and uses ~1M of RAM for the same test.

The current version of diamond types is many times faster than any OT algorithm I've written in the past thanks to all those optimizations. Now that I've been down this road, I could optimize an OT algorithm in the same way if necessary, but you don't really need to.

Other kinds of CRDTs don't need these optimizations. (Eg the sort you'd use for a normal database). There's two reasons: 1. When editing text, you make an edit with each keystroke. So you have a lot of edits. 2. Merging list items correctly is orders of magnitude more complex than merging a database entry. If you just want CRDTs for editing a database of records, that'd probably only take a few dozen lines.

[1] https://github.com/josephg/reference-crdts/blob/main/crdts.t...
Jobs probably not a good fit for you, then
These aren't Google's keys. They are vendor-specific keys (e.g. Samsung's) used to sign their releases.
https://www.fluentsearch.net/

https://www.codesector.com/directfolders

Right?
To do that revocation, they'd have to be able to attack the update channel itself. And practically speaking, that attack is hard to pull off; you can probably successfully update most devices, which might be good enough.
That's fascinating. I did basically the exact same thing after joining Mastodon a couple of weeks ago and used an identical tech stack (Python Lambda as well as DynamoDB on AWS).
But instead of Ars Technica I created a bot for Planet PostgreSQL [1]: https://botsin.space/@planetpostgresql. In case anyone wants to do something similar but does not run an own instance - botsin.space is a dedicated place for bots [2].

[1] https://planet.postgresql.org
[2] https://botsin.space
Just a small note: I noticed that I read your disclaimer that it's not in ranked order, and then went on curious to see what is the #1 cause, and had to remind myself that no it's not ranked. It might help stupid readers like me to use dashes or similar for lists when the order isn't particular, rather than numbering the items!
https://archive.ph/HpOCJ