skysight-inc/HackerNews huggingface dataset:
The fact that Log4j is a project under the Apache foundation has practically zero bearing regarding Log4Shell. What relevance do you think Apache has here? Apache isn't a software development organization, it's a dev community umbrella organization. And therefore I think it's not useful to refer to the product as an Apache product.
I don’t know what they said before, but they now say:

“Do you have a question or comment that involves "security" and "hashids" in the same sentence? Don't use Hashids.”

Still, I can see the temptation that these generated strings “look random so people can’t guess them”. Possibly good enough to obfuscate the number of db records from the casual onlooker but not good protection against enumerating accessible records.
The connection to Greta Thunberg isn't accurate really.

Andrew Tate said something like "bring me pizza and don't recycle the boxes" (paraphrasing)

After he was arrested she replied "this is what happens when you don’t recycle your pizza boxes"

Her remark is because of what he said and later getting arrested. I can't see how it's because of the supposed use of the pizza box to locate him.
I feel like, in the last few years, we're making huge progress towards being able to easily build performant, cross-platform UIs with great dev ergonomics and minimal code, yet we're not quite there yet, despite web development existing for decades.

Every time I try one of those new shiny things it always looks great at first, but then when "hello world" meets the real world you always hit some wall (be it routing, SSR, styling, state management, data fetching, performance, etc), beyond which things can get pretty messy. I've never seen a real UI codebase that actually looks good.

I wish we could finally get there. Maybe WASM will help shake things up a bit.
I understand the clarification of this article but it seemed far too long.

TL;DR - They didn’t use the pizza box to find his location in Romania, they used it to confirm that he was currently in the country to detain him.

Edit: As called out below, this is also just speculation.
I suppose, but like shoveling snow for a few mornings (but going back in to have a big breakfast in a warm house), you only hit one of your needs. It's realizing the network of requirements we have (food, clothing, movement, safety, friendship) that makes through camping compelling.
I don't think it is correct to say "it is with a disclaimer because it is not progressive US culture".

What about: "it is with a disclaimer because it is aligned with common misinformation pushed by biased people", and, coincidentally, the examples given appears to be typically associated with less factual elements pushed by, by chance, right-wing people?

To come back to the specific example: why is "fossil fuels are superior to renewable" even right-wing? Superiority of a energy source seems to be quite decoupled from ideology, and relatively rational. And surely, there is a lot of right-wing people who still end up, after having looked at the fact, to the conclusion that renewables are superior. In fact, renewables check a lot of "right-wing" boxes: independence from fossil fuel producer countries, local jobs, national pride on nationally built high tech industry, ...

The reason it is right-wing is because politics in USA is very polarized. It is not because fossil fuels are fundamentally right-wing, it is because, historically, the first politicians who brought renewables were left-wing, so the right-wing politicians have taken the stance that "left-wing politicians are always wrong, so we are against renewables". But, technically, the only reason "fossil fuels" are right-wing is "by chance": there is nothing fundamentally right-wing about fossil fuels (one element is that powerful rich people had money in fossil fuels, and power rich people are traditionally more right-wing, but this is not a specific right-wing value, on the opposite: right-wing values are not about defending the fat cats)

The specific example is also very specifically a domain where misinformation was spread. Big companies involved in fossil fuels have pushed to depict the fossil fuels solutions as better than they are, and have pushed to depict the renewables as worse as they are. It is arguable that the renewables have not done something similar, but they are certainly less powerful than big fossil fuels, and therefore it would be surprising that their propaganda is equally spread than the pro-fossil fuel propaganda. ChatGPT only reacts on that: on the internet, there are more elements mentioning that pro-fossil fuels arguments should be taken with critical mind, and the reason is probably not because the left-wing is dominating internet, but because it is probably a fact that pro-fossil fuels propaganda was stronger than pro-renewables propaganda (because the fossil fuels companies were more powerful).
> The old format $[expression] is deprecated and will be removed in upcoming versions of bash.
Off-topic, but it feels like I'm the only person who thinks phrases like "small dick energy" are bad. When did it become acceptable to shame men for the size of their penis? Whenever I've mentioned it, people have defended its usage with arguments that didn't sound convincing to me.

Why is it acceptable to say "small dick energy" in the age of body-shaming awareness?
My last two comments are a statement of black letter income tax law quoting its source in the U.S.C. (not giving them advice about anything really) and some 4th amendment snark followed by advice to someone to talk to a lawyer about their interpretation of constitutional law.

Do you not see how that is different from telling someone without qualification that something is legal/illegal?
Engineering journal, is that like each engineers personal tech blog?
How do you know that revenue from so called FSD goes towards R&D?
The leftover bags are decaffeinated.
it suits law enforcement to have people thinking that they did, rather than having people being aware of the nature of surveillance.
And yet it's a major part of the overall concept of being responsible with our use of AIs. Throwing our hands up in the air and prematurely declaring defeat is not an option long term.

It's a non-starter for no other reason than potential copyright infringement means the government becomes involved, and they will stomp on the AI mouse with the force of an elephant - the opinions of amateurs and the anti-copyright movement notwithstanding.

As such, AI Observability is a problem that's both under active research, and the basis for B2B companies.

https://censius.ai/wiki/ai-observability

https://towardsdatascience.com/what-is-ml-observability-29e8...

https://whylabs.ai/observability

https://arize.com/
It’s a simple binary format. I’ve written a parser for it in python.

https://gist.github.com/quag/e219f69670cd395d4a59a392557df28...

An older version (v16) of the format is documented, but that was before zlib compression was added. I’ve opened an issue and listed out the gaps in the spec, but haven’t gotten around to updating the spec itself.

https://github.com/aardappel/treesheets/issues/185

Happy to answer questions about the format.
Attention is the currency of the digital age.
> Thunberg is not known for her sense of humor

What? Guess you haven’t seen her responses to Donald Trumps attacks on her then.
What Elon and other investors paid is already gone. The LBO loans could not be sold even at a steep discount, and they get paid ahead of equity. Most expensive wank in history.
I wonder about the longest stretch of silence that has passed in a negotiation because both parties read the same negotiating self-help books and attempted to apply them on one another.
I seem to understand the guy has been live streaming on his private thing that subscribers pay for or whatever and has clearly been in Romania based on a bunch of clues such as the women who he had around him speaking the language between each other. You can see clips of that in this youtube rip of his final streaming days on "tate confidential" here, which is probably what got him busted. [1] Still insanely funny that this happened right in the midst of getting in a hugely ratio'd spate with Greta.

He got caught because he's the most arrogant public figure on the internet and thinks of himself as a demigod immune to the vicissitudes of things like human trafficking laws.

[1] https://www.youtube.com/watch?v=58Lc4cew7OE
Have you listened to Tate in a more than 15 sec clip? I don’t agree with everything he says but he does speak the otherwise unspoken truth on many topics.
His attention is justified.
So, aesthetes making up virtually zero percent of Linux desktop users while handicapping the rest for years.
It seems silly today, but back in the 90s there was a pretty vocal (albeit small) contingent of people who didn’t like protected memory because of its performance impact, software compatibility issues, and reluctance to relearn some performance hacks.

Not just around Netware but on the MacOS side as well.
No it goes way back to the 80s and 90s when radio consolidated. You had guys like Limbaugh reading off lists of men who died of AIDS and laughing at them. Same grift, different generation.
Ask HN: Low-fuss app to virtually drive around a city with street view
Is there a service, free or paid, that lets you wander around google street view without constantly clicking? I see there are some oss options that need to be setup and configured and will download a movie of specific route, but what I’m really looking for is something real-time and more flexible. Ideally you could “drive” around at whatever speed and turn at whatever intersection you want. Does something like this exist?
> It’s generally accepted that using an ORM as an abstraction on top of the data layer is a more maintainable solution.

Not in my experience. Unless there has been a radical shift in opinion in the last five years I would say that that was quite a controversial position.
This reminds me of the Paul Khuong's string-case macro in Common Lisp.

https://github.com/pkhuong/string-case/blob/master/string-ca...
"One of those hard calls that nothing in business school can prepare you for."

Do you really need a business school education to see that this was a mess right from the beginning, though?

It sucks for the small business owner, but at the same time...if you sign one of the largest contracts of your businesses life and are not even sure that you are selling individual bags of coffee or cases of bags of coffee...

No business school is going to help that level of dumb...
Financial Topics You Should Learn
Alejandra Caraballo's tweet thread about her reasoning is here: https://twitter.com/Esqueer_/status/1608709173684105217

I think it's worth reading it, although I am skeptical of her conclusions. However, he did Tweet from a Prague airport on December 26th so if the Gândul article is correct about Romanian authorities confirming his location via social media posts, it's reasonable to think that the pizza box might be one of those.

Also, Dreyfuss is missing information -- the castle photo he references isn't a castle, it's a hotel in Italy.

However, I don't have any strong reason to think that Gândul was correct or that the translation isn't missing a nuance.

My fairly uninformed stance here is "maybe, maybe not, no way to be sure."
Depends how you define free.

If an AI being inspired by GPL code that happened to be in its training data because someone other than the creator stuck it in a repo on GitHub is just fine, and if some code produced as a result is practically identical that is fine too, and the resulting code is not considered GPL any more, then the GPL and licences like it are worthless.

The only two designations that mean anything at that point are public domain and commercial. “free” as in “Free” rather than public domain means the same as public domain.

So there is no point releasing free (other than public domain) code, discouraging the act. If I want to control how my code is used at all protected commercial release becomes the only option.

This of course suits the commercial interest behind copilot just fine and dandy…

---

But, if commercial code ended up in the training set the same should apply because in terms of giving the right to use code licences like the GPL and commercial licences are no different: the licence gives the right to use the code. If passing it through an AI gives that right, bypassing the licence, for one case than it should for the other too. I wonder if MS would be happy for copilot's own code to be in the training set and for me to produce and sell something based on the output of an AI trained with their code?!

---

I think the AI systems like copilot should be considered the same as us wet-ware naturally formed intelligence systems in that respect: if it produces something based on code under a particular licence then that something should be subject to the terms of the licence. Ignorance of the licence is no excuse. If the AI can not be made aware of the correct licence and attribution for the code, so it can include that with its suggestions based on it, then that code should not be in the training set.

For decades MS complained about open source code potentially creating this very situation, just with only non-artificial intelligences in the mix, now they are hoping no one can call them on that because it is convenient for them to ignore the issue.
I came to hackernews to run away from that staged noise to keep twitter engagement high but it has spilled over to this platform as well.
Arrest made in killings of 4 Idaho college students
Oh, just wait until you read ISO 2848, which defines a "metric foot", which is exactly 30 cm, and which is an international norm...
There’s a good new podcast called The New Gurus from the BBC which explores this.
>they used it to confirm that he was currently in the country to detain him.

Even that is pure speculation
SGCL executes the destructors in a separate thread, so there is no cost to the mutator.
LTSB/LTSC doesn't have the anything like the levels of telemetry in the Home SKUs, but even so, as a (former) MSFT SE I can give you my personal assurances that the telemtry is about seeing how the product is used and not for marketing/money-making reasons (beyond, ostensibly, making the product better to entice people to pay for upgrades or subscription services).
The nextjs team for the longest time seemed openly hostile to server-side features in the GitHub issues. We ended up using the custom server feature to essentially bypass nextjs entirely so we could adequately do things like server-side auth in an explicit way using existing proven middleware. Next auth was inadequate for us mostly because of the limitations of nextjs itself. Nextjs 13.1 just added actual server-side middleware with full control of requests/responses so hopefully things will improve. I haven't fully investigated it yet but I'm hoping we can rip out all of our custom server stuff and replace it with middleware now.
Noted! Will be adding all of these to my “To Read” stack. Thanks again :)
A surprising recent bit of news is that we learned that there's a phishing website out there somewhere that mysteriously redirects to endless.horse.

We tried adding endless.horse to a database of non-phishing urls (after all, it's merely an ASCII art horse with abnormally long legs), but the one we were pointed to by the security researchers hasn't allowed new accounts for the last two years. It's a strange being implicated in this indirect way -- Does endless.horse condone phishing? The horse says "neigh."
Historically, I think they've been called provocateurs – colloquially known as assholes. They've always attracted media coverage, but now every site & app has the power to deliver media coverage to you, so you see a lot more about them.
The distributer said, "actually we don't need this much, so either take back this enormous amount of coffee that we know you can't handle or give it to us for free and you can "write it off on taxes," which leaves the coffee company screwed on their loans. When the coffee company says they want to take it back, the big company tries to make them pay an enormous fee. The grift, as I understand it, is in the distributor saying they needed X and then saying they didn't need it and giving them two shitty options for how to proceed.
Yes, the US should move to the metric system. There are many reasons, but etymology isn't one of them.
I think they address this in a discussion about lacking full information.

"We don't have an objective or preexisting sense of what makes for a good or bad applicant; moreover, when we compare two of them we know which of the two is better, but not by how much." (p. 18)

They then go on to explain stopping thresholds in the cases when you do have full information.
If the training data discussion ends on that note than there is exist a large upside. Youtube and other video hosting services has a massive collection of the worlds images, music and sound. Anyone who who want to build an AI will have access to practically unlimited amount of training data, meaning the barrier to entry will be quite low.
I was very confused as to why people had believed that passport control and property registrar records had less weight in an investigation compared to a pizza box.
did I not say that?
We had decentralized Uber. It's called the taxi system. And it was beyond awful. Limited drivers due to quota (aka medallion) systems, times you couldn't get a cab (eg shift changes), cabs that would refuse your ride (to be fair, this happens with Uber too), payment friction (including skimmers), areas that weren't serviced, awful cars, awful service and no ability to order a taxi.

It's only tech purists who want decentralized services. Nobody else does. It doesn't solve any problem actual people have. It's why everything is cetralized. That's not an accident. It's not a market failure.
Playing the piano is a different sort of entertainment. The drive to practice has to come from within.
Care to provide examples of such topics and truths?
I agree, the Liberian space program simply doesn’t get the respect it’s due.
Some guy once said that Forth's fragility is its strength. It forces you to think in very simple terms.

"Zen" is a good way of describing Forth. Charles Moore often says things that seem like zen riddles in themselves, like Operating Systems are obsolete, you don't need local variables, you don't need structures, and a whole host of other things. It's very difficult to know what he's talking about without context, or why he thinks what he says.

I've toyed around with his colorforth, and given up. I doubt I'm the only one. It has cool stuff like you being able to change the fonts on the fly. It has a keyboard consisting of 25 keys (because 25 keys should be enough for anyone, apparently), which don't map onto a Qwerty keyboard (maybe Dvorak?) and has different modes based on colour. So I'm like "how the living fuck am I supposed to use this thing"? It's like trying to figure out the controls of some alien spacecraft.

It clearly works perfectly for Charles. He's clearly on some whole different level than the rest of us.

Forth is really fun to play with; before going back to using something that is a bit more practical. It has macro-like facilities. I find them very difficult to reason about. Forth seems like Lisp in terms of power, but at the opposite end of the spectrum in terms of size. Lisp is a complete language. Forth gives you a boxful of atoms that you assemble yourself.

I wrote a barebones Forth. Little plug:
https://gitlab.com/mcturra2000/cerbo/-/tree/master/forth/v3
I haven't touched it for a year or two, though.

It incorporates the notion of a token type. The idea is that you could write a recursive-descent compiler using it, although I hadn't pursued the idea much.

To give you an idea of the malleability of Forth: I got bored with creating variables one-by-one, so I defined a word called "vars:". Now I can create several variables at once, e.g.:
vars: foo bar baz

Here's an implementation (that works in my forth):
: VARS: begin parse-word dup while $create 0 , repeat drop ;

I simplified the implementation and made the idea more composable:
: VARS: line( $create 0 , )line ;

Done right, Forth looks like haikus. I'm not at that level, though.
If they can't move the decaf it would make good mushroom growth medium.
Here's an example with the credentials provider: https://github.com/vercel/nextjs-mysql-auth-starter/blob/mai...
Is this for own and lease? Or just own? For lease, does GM track their vehicles?
Reminds me of the “Level of Effort” field in DevOps. If you have a group of tickets with a value of LOE total of X, it could be in hours, days, or some other contrived measure.
They can't be THAT new; punk culture got its start nearly SIXTY years ago, as an example of a subculture that was intentionally inspiration insulting
I simply have such a kind of notebook placed in my shower (with a run-of-the-mill pencil) to jog down any ideas I have while under the shower. I have a variant that encourages ripping out pages.
Those companies are not solving the problem you are describing
I’m not disputing SpaceX had the advantage of learning from peoples mistakes. And I’m not arguing that they didn’t physically get the engines and boosters back I’m just saying that calling the space shuttle and F9 both reusable may be semantically true but is really not giving an accurate representation.
Amiga OS 4, object Pascal and everything (2017)
Also the case Oberlin college recently paid millions for (after stonewalling for years). Look it up. In that case, they literally, non hypothetically, tried to run a store out of business because if accusations they knew to be false. They overplayed their hand so much it was actually possible to prosecute them for it, but this is very rare (the only case I know, in fact).
I paid to fund research into autonomous driving, because I believe human steering of cars is a huge public health problem. I generally find FSD with highway driving level attention to be safer overall because it’s pervasively aware. I can’t maintain 360 degree awareness 100% of the time no matter how hard I try, but the car does. I keep my attention on the big dangers and monitor it’s performance closely and that’s enough to improve my overall driving safety. My goal was never press a button and take a nap - although that would be cool. My goal was to crowd fund research into methods to make driving assistance more complete and accessible to everyone. I have been satisfied with the progress, even if teslas research doesn’t pan out into what they advertised as their aspiration. Research rarely does. But I believe they’ve materially advanced the state of the art, have created broad awareness, and have driving investment in other R&D efforts in both established car makers, new entrants, tech companies, and labs, etc. Solving traffic safety will be akin to curing cancer, so I feel well rewarded for my donation. Plus, whether you want to accept my metric, my metric is the one that matters to me, and it was I who spent the money for it. (I would note again that per driving session accounts for most traffic accidents better than per mile as highway driving accumulates miles faster than local driving and has significantly less accidents, and all sessions start and end with local driving).
You've read Tate's tweet?
What goes around comes around.

BTW small dick energy dies say anything about the real size, it just has the same kind of energy
In the absence of CPU instruction which does the saturated ADD, how do you solve the overflow problem in a bare-metal language without introducing the performance hit?
Whether that’s true or not is irrelevant to the parent comment; a “no phones at the dinner table” rule is definitively not “creepy.”