skysight-inc/HackerNews huggingface dataset:
I didn't know either. From Wikipedia [1], SHA-1 has been considered insecure to some degree since 2005. Following the citations, apparently it's been known since at least August 2004 [2] but maybe not demonstrated in SHA-1 until early 2005.

git's first release was in 2005, so I guess technically SHA-1 issues could've been known or suspected during development time.

More generously, it could've been somewhat simultaneous. It sounds like it was considered a state-sponsored level attack at the time, if collisions were even going to be possible. Don't know if the git devs knew this and intentionally chose it anyway, or just didn't know.

[1] https://en.wikipedia.org/wiki/SHA-1

[2] https://www.schneier.com/blog/archives/2005/02/cryptanalysis...

EDIT: sibling comment has evidence that Linus did in fact know about it and considered it an impractical vector at the time

https://git.vger.kernel.narkive.com/9lgv36un/zooko-zooko-com...
I totally agree that there is a lot of low effort and consequentially low quality stuff out there in the world already. However, it still costs to make that. With this form of automation getting better it will simply become a lot cheaper to produce and is thus going to happen a lot more. So, I expect the ratio to become worse, maybe even "orders of magnitude" worse.
Wait, you're telling me that you can create materialized views using foreign tables in Postgres?

Is there a way to propagate changes from the foreign data source through the FDW to Postgres?

Or would it just be some kind of task polls the foreign data source pulling a delta?
WPF maintenance has been outsourced to IDC
Option 3 seems the most intuitive, but I can see the arguments for 5. It's 4 that I'm having a hard time understanding why anyone would want it that way. It's truly awful. I can't think of literally any other language (style, markup, programming, or otherwise) that does nesting with a second set of adjacent (not nested!) curly braces.
I'll admit, writing something down is where it gets very murky.

On one side, you have music and musicians, where the written form is somewhat of meaningless tool used to produce creative expression, which is the performance of sound on an instrument.

On the other hand you have authors (and recently, software engineers), where the creative expression as most understand it, is in the choice of arrangement of words (or statements).

You can't really resolve the two. And so I lean towards a stance that it is fraught to try and build a flourishing creative society on the idea that simply writing an idea down (or saving a file of data) means you own it and can legally bring a case against someone else who happens to write the same idea down, be it music or a book.

And then there's https://libraryofbabel.info, which contains all possible combinations of characters that every has been, or ever will be, written. Should that be copyrightable?

Anyway, I am of the opinion that Copilot does infringe on copyright as we know it. But I'm also of the opinion that simply giving individuals universal claim to any written text they produce is problematic. And to answer your question, maybe I do want the comments. Maybe they communicate something that the code cannot, swearing be damned.

I'd prefer a culture of citations for written/stored/saved works. And a culture of celebrating performance of the arts, not storage of them.
You could always try the subtle art of not giving a f*ck:

https://www.youtube.com/watch?v=9EmLbOJZULU
State Laws Related to Digital Privacy
Very cool thanks for posting. I used to do a lot of sled testing - fun stuff
IIHS Smart car vs sedan https://www.youtube.com/watch?v=VcD4WeuiI3s
This is bad advice in general, but it's especially poor advice given the fact that the "crazy person" is running the company. OP needs to lawyer up immediately before (more) damage can be done.
Well here's the thing, this has already been a hotly debated topic by medical ethicists and philosophers, who have indeed considered many factors other than the individualistic bodily autonomy viewpoint.
I think specifically in the area of creative "products" such as art and music you have to think about the customer as well. I have zero interest in AI-created art or music. None. The value of art is its humanity; its expression of the artist's message, vision, and passion. AI doesn't have that, so it's not of any interest to me.

I don't know how many custoners feel the same way, but I won't be purchasing any AI art or music or knowingly giving it any of my attention.
yeah that's reasonable, and a perfect way to do it is to go by age groups

covid is hurting/killing people who are weak, elderly, and immunocompromised. So covid is the bigger worry here, they should get vaccinated

young kids mostly don't even notice they have covid, and young people in general, ~<30 y/o, don't have any issues from covid. So the vaccine is a bigger risk, and the natural immunity they gain from getting the disease is more advantageous than the vaccine ever would be for their demographic
Do you have test cases for these? Pages which show the bugs
Even if it didn’t sha as a hmac is still fine because the length it takes to break. You can’t break sha1 in the time it takes for your packet to go through the hmac step.
Another "shortage of workers" article aimed at the plutocracy that should be retitled "shortage of pay" to attract them.

"We've tried everything, including raising pay $3 an hour!" => after a wave of significant inflation. Really?

I understand many service workers are undocumented, but where are the I-9 forms going? Every job I've had made me fill one out, by law. Here we have a number of organizations outing themselves in print (in the capital no less) as not complying. Well the article implies that anyway.

Are they paying taxes on these workers? How does this actually work?
Pandemics are not a private issue. It's similar to a war. It can kill a significant percent of the population and it requires collective action to stop it.
Really grateful for the work cassaundra did to get this in!

A part of the cargo-remove work that didn't make it into 1.66 is that cargo-remove will garbage collect references to the remove dependency. For example, if you remove the last reference to a `workspace.dependency`, it'll automatically remove the workspace entry for you! The original RFC for `workspace.dependency` declared having an unused entry an error but we didn't think it was worth the implementation cost / runtime overhead and now we can automatically clean it up!
You are free to believe in Original Sin if you want.

For myself, I am uncertain.

You will likely claim that your misanthropy has nothing to do with this relic of Judaism, but the end effect is identical.

You assert that mankind is damned, I suggest that he is not. This difference of opinion does not require me to hate you, nor you me.
> Once they are joined to the Thread network they show up as IPv6 devices in mDNS and just work.

I don't have any thread devices but I've been eyeing them.

Do they show up to your router/networking gear as IP6 devices? I know that this is the underlying tech, and use mDNS, and thread routers are IP routers, but I always assumed they wouldn't integrate with existing IP home networks.
This exactly. You would want to see the micromort breakdown for the same populations as covid infection. You might also want to dive deeper and see if there's more specific populations and how they compare.
Have been using svelte/sveltekit/sapper in production for two years now. Used React before and never looked back.
Congrats on 1.0!
We are grave diggers and work digging our own grave.
YC Business Model Guide
> he could "flip" Twitter, if not for a profit, for less than a settlement would have cost.

That doesn't really match with what he's done since buying it though IMHO. If that's the goal, why get involved as he did, instead of handing over quickly to someone else to manage it and slim it down with less waves?
All these options are pretty terrible yeah. I'd prefer if there was work done towards selectors for parent items, siblings of parents, and children of parent siblings. Not that the work is mutually exclusive.
I guess it’s a way to stop former dba’s and etl people from just storing their queries/stored procedures all over the place?
As someone who's shifted careers twice because disruptive technologies made some other options impractical, I can definitely appreciate that some artists are very upset about the idea of maybe having to change their plans for the future (or maybe not, depending on the kind of art they make), but all art is built on art that came before.

How is training AI on imagery from the internet without permission different than decades of film and game artists borrowing H. R. Giger's style for alien technology?[1]

How is it different from decades of professional and amateur artists using the characteristic big-eyed manga/anime look without getting permission from Osamu Tezuka?

Copyright law doesn't cover general "style". Try to imagine the minefield that would exist if it were changed to work that way.

[1] No, I don't mean Alien, or other works that actually involved Giger himself.
Yes, so people can freely try it out
Would love to see the incidence of this by IQ. My intuition says it spikes in slightly smarter-than-average folks.
I think this type of generative stuff opens up entirely new possibilities. For the longest time I've wanted to host a rowing or treadmill competition, where contestants submit a music track. The tracks are mashed up with weighting based on who is in the lead and by how much.

I don't know of existing tech that can generate actual good mashups in realtime given arbitrary mp3s, but this has promise!
If the only people who can have meaningful good paying jobs are thoughtful geniuses we're in a lot of trouble as a society still.
Exodus Privacy: Analyze privacy concerns in Android applications
I think it’ll need little prompt engineering to figure out what works best but should be able to generate pretty good after that
I kept hoping I could trick NASA into sending me down there for a few weeks. Surely a senior Linux/Unix admin would be useful there? Ah, well, there's always the tourist option.
Whatever you said he believes in on your previous comment.
> why shouldn't it, with some finagling, also be able to do the dumb, simple things most programmers do for their jobs?

Because those things, while dumb and simple, are not continuous in the way that visual art is. Subtle perturbations to a piece of visual art stay subtle. There is room for error. By contrast, subtle changes to source code can have drastic implications for the output of a program. In some domains this might be tolerable, but in any domain where you’re dealing significant sums of money it won’t be.
Is 'looking at something' equivalent to stealing it? The use by all these diffusion networks is pretty much the definition of transformative. If a person was doing this it wouldn't even be interesting enough to talk about it. When a machine does it somehow that is morally distinct?
How well do foreign data wrappers work with Postgres's query planner? Does't the planner need to estimate the cardinality of results from each table? Are the Supabase wrappers providing this info from the wrappers even though it might be hard to get from the data source?

Also, is the Firebase connector for Realtime Database or Firestore?
Moving cargo-edit into cargo has been a slow but fruitful process. Besides any of the technical work involved in getting this into cargo (e.g. making `toml_edit` production-ready), we had a long discussion about the exact UX (https://internals.rust-lang.org/t/feedback-on-cargo-add-befo...) even after its been sitting in `cargo-edit` for years.

`cargo-set-version` has a less clear path to being merged as there isn't as much visible demand for it (there isn't even a `cargo` issue for it).

`cargo upgrade` has the problem of trying to solve too many people's needs and is stuck in UX discussion limbo (https://internals.rust-lang.org/t/feedback-on-cargo-upgrade-...). I'm starting to formulate thoughts on which compromise I want to make to allow that to move forward again.

In addition to the plugins you mentioned, some more worth calling out:

- cargo-release

- cargo-deny

- cargo-semver-checks

- cargo-hack

- cargo-expand

- cargo-nextest

You can also see

- All the plugins at https://crates.io/categories/development-tools::cargo-plugin...

- What people have proposed be added: https://github.com/rust-lang/cargo/issues?q=is%3Aopen+is%3Ai...
Categorically NO - this isn't even a cute title. He billed roughly $120k for roughly a month of work that involved sitting in a temperate room, reading documents, and talking to people for hours per day - this is likely one of the best jobs in corporate America.
Baruch has always offered great value for money.
https://bugs.webkit.org/

All bug reports are confirmed there but no fixes.

You can report those bugs but if it is more complicated then Apple does not have staff to fix those.

By bug reports there are like 2 or 3 people working on fixing bug.
> And the scientists discuss how it happens. For your benefit, I'll describe it here.

Condescension noted :)

You've described what I understand to be a common(-ly presented online) hypothesis about how an mRNA vaccine might injure heart tissue. The study authors, on the other hand, don't claim that this is how any of the study subjects died. Indeed they explicitly disclaim any causal link between an mRNA vaccine and incidences of myocarditis.

Allow me to rephrase, then - "the authors offer no real ideas about how the Covid vaccines could have caused this damage".
I'd rather live in the world where humans do things that are actually unique and interesting, and aren't essentially being artificially propped up by limiting competition.

I don't see this as a threat to human ingenuity in the slightest.
Your understanding does not match the scientific evidence. One of the reasons being trans is not a mental illness is that cis people experience gender dysphoria all the time as well, like cis men when they're called girls, cis women with facial hair, or the revulsion many cis people experience when they even so much as think about the idea of taking hormones that don't align with their gender. To the extent that this is a "mental illness", the vast majority of people have it.
Existing art trains the neural nets in human artists as well. All art is derivative. No art is wholly unique.

Will human artists be able to compete with artificial artists commercially? If not, is that bad or is it progress, like Photoshop or Autotune?
Those assumptions seem reasonable to me. What’s the gist of the criticism?
At its core it may be more that people can't think past binary logic. Either something works or it doesn't work. Either something is perfectly safe or it is too risky. But that doesn't address why they don't apply the same logic to the virus itself (although there are some people on the flip side who still do).
checkout https://loops.so
Don't miss the last paragraph...
Could probably be theme dependent, as I have what look like 3 pixels in there https://i.imgur.com/LD4BF4E.png :) (I use the Arc Dark theme)

I usually do right click on the title bar to resize the window. But that muscle memory might have been conditioned from having to deal with 1px corners in the past!
I don't own ZWave devices, but comments here seem to question their superiority.

The range and battery life is likely due to the lower-frequency it uses, which is less congested and longer range. Typically, this will translate to a lower power usage (better battery life).
The "$300 mental health" seems odd - for any kind of counseling/therapy/etc sessions this is a drop in the bucket in terms of cost.

It will easily cost 10x to work with a mental health professional (and insurance companies sadly pay a very small amount of it). So why add this to an otherwise reasonable package?
I was a huge fan of Switched-On Bach. My dad bought the album for me and it said "Walter Carlos". Many years later I was in a music store and saw the CD and it said "Wendy Carlos". I thought it was a typo and would be worth lots of money so I bought it.

Years later I learned the real story.

I'm still glad for my purchase and Wendy Carlos has made my life just a little bit better because of her art.
I'm not sure I buy this line of reasoning about "inputs" rather than "outputs". If there is some prohibition about using an image as an input, regardless of whether any vestige of that image exists in an output, doesn't that equally prohibit using an image to train neural network that just says whether an image is a cat or a dog? Or how about a network that just tries to denoise a photo from your camera?
"Don't talk about what you will do, talk about what you have done"

http://www.breckyunits.com/dont-talk-about-what-you-will-do-...

edit: p.s. hopefully more constructively:

> Read my papers or see my languages

You don't seem to make it that easy for people to do this! Is there a single page with links to these and a short description of what they are? I couldn't find one.

I checked out the tree language designer page, seems pretty cool, a fast way to make a DSL. Not quite enough documentation yet to start using it myself. Your paper on it didn't help me understand it at all. Seems like the docs and page were never quite finished? A shame, it's a nice idea.

I can't really see how it's particularly a tree or "programming is now 2D" etc though. I was expecting something weird/unique in a way I wouldn't have if it was just called "Fast DSL Builder" or something. (Although I once spent months writing a graphics DSL with a similar no-boilerplate spirit, maybe it doesn't seem unusual to me because of that.)

https://jtree.treenotation.org/designer/
I’m always confused when people slam sha on hmac. Is there a realtime sha back door I’m missing? Even sha 1 takes days/months to break.
Tesla makes self-driving cars that drive better than humans. The reason you have to touch the steering wheel periodically is political/social, not technical. An acquaintance of mine read books while he commutes 90 minutes from Chattanooga to work in Atlanta once or twice a week. He's sitting in the driver's seat but he's certainly not driving.

The political/social factors which apply to the life-and-death decisions made driving a car, don't apply to whether one of the websites I work on works perfectly.

I'm 35, and I've paid to write code for about 15 years. To be honest, ChatGPT probably writes better code than I did at my first paid internship. It's got a ways to go to catch up with even a junior developer in my opinion, but it's only a matter of time.

And how much time? The expectation in the US is that my career will last until I'm 65ish. That's 30 years from now. Tesla has only been around 19 years and now makes self-driving cars.

So yeah, I'm not immediately worried that I'm going to lose my job to ChatGPT in the next year, but I am quite confident that my role will either cease existing or drastically change because of AI before the end of my career. The idea that we won't see AI replacing professional coders in the next 30 years strains credulity.

Luckily for me, I already have considered some career changes I'd want to do even if I weren't forced to by AI. But if folks my age were planning to finish out their careers in this field, they should come up with an alternative plan. And people starting this field are already in direct competition to stay ahead of AI.
One of these days I'm going to have to deploy a real python project to a server and I'll have to think of something then.

That's the point at which you rewrite it in go
So is IP - which version are we talking about?

The out-of-address-space v4 that wasn't future-proof enough to conceive of more than 4 billion computers?

Or the reinvented ipv6 that seems to have gone way too far in the other direction (and not just in terms of address size)?
https://topten.ai/tools-to-depixelate-image/

https://vanceai.com/posts/depixelate-image-with-vance-ai/
We want it to work the way Sass works. FFS make it happen and stop it with all this pedantry.
When your requiremets are so detailed and comprehensive that the generated program is correct -- haven't you basically written the program?
You write, "The highest status people in society are dominated by social awkward, physically weak people with high earnings." The socially awkward may earn increasingly higher salaries, but this does not necessarily confer status upon them.

You downplay athleticism (ie, health) and "strong social networks". But it's precisely those groups who still tend to dominate the socially awkward in status games. An autistic FAANG engineer does not have higher status than an executive or successful salesman.

Going through your comment history, I see you're in sales. I'm sure you'd recognize that status is much more complex than a single variable such as net worth or IQ.
Orange Pill App – Stack Friends That Stack Sats
just launched OPA (orange pill app) for ios.

in short we make it super easy for bitcoiners to find & connect with each other locally utilizing geolocation.

The app is membership based as to filter out the noise (very high in crypto) and also so that we don't have to do advertising.

Next year we will launch an Events section which will allow users to:

- create an event and invite nearby bitcoiners
- discover nearby events
- chat with attendees before, during and after the event

and Orange Pages, which will allow users to:

- discover nearby merchants that take sats
- find a bitcoin job

and for businesses:

- advertise their services / products to highly ideological users who want to support the ecosystem.
- post job offerings

Would love to hear your unfiltered feedback.

Thanks.
Matteo Pellegrini
GOG is a pretty good company with a good store and good management of classic games.

But steam, for a 30% cut of a dev's income, will provide; Free save backups, free multiplayer and friends list management and apis, workshop support for modding, free keys to sell on other platforms or give away, a store that actually managed to reduce it's serious junk clutter problems for many people, VR runtime, HUGE controller apis that bring incredible functionality for remapping and macros, a system for game streaming and remote coop play, easy steam deck distribution now, a complete patch management and distribution system etc.

Basically Valve exposes a lot of features to game devs when you release on their storefront, and a huge amount of those features are just straight huge wins for gamers and consumers.
I'm curious to know from some (ex?) employee how badly this was managed. In my experience it's really hard to fire 15% of employees by personally talk to each of them, without massive delays (e.g. one is on holiday, different timezones, etc). The first 2 or 3 that get their accounts deactivated, usually trigger mass panic in the company.
I had a layoff like that, they gave me the option of choosing. Lump sum or "stay on the payroll but have no access."

I went with the latter because it paid better.

For a while I was always stressed out about background checks, because it showed that I was working two jobs. (I got a job to replace it almost immediately, but continued to get paid by the old place.)
>If we eventually want to have the security and performance benefits of AEAD,...

The thing is, there doesn't seem to be any security weaknesses with the existing AE method. I have looked hard. There also doesn't seem to be any need for the AD (associated data) part.

OCB seems to be the fastest out of all of them. If the proposal was just to add on OCB as an enhanced performance mode then I might be OK with that. Why make the people encrypting multi-TB files wait? I am mostly grumpy with the idea that we have to drop an existing well established standard for stuff like messaging and less extreme file sizes.