skysight-inc/HackerNews huggingface dataset:
there's a few factors here that allow dependency confusion attack to happen here

1. pytorch publishes their nightly package on their repo which depends on a custom triton build provided on their repo, but using a package name they don't own in pypi. This has been mitigated by them by renaming the dependency from torchtriton to pytorch-triton, reserving pytorch-triton package in pypi, and changing the dependency name on the newer nightly builds 20221231 forward to point to pytorch-triton package instead.

2. pytorch installation instruction for nightly using pip in (https://pytorch.org/get-started/locally/#start-locally), make use of the --extra-index-url option. This is a known vector of dependency confusion attacks, and is an inherently insecure method of installing packages from private repositories. The recommended approach of distributing wheels in private repositories is by using a repository server that allows proxying/redirecting the public pypi packages to pypi, and users should be using a single --index-url pointed to that private repository (assuming the maintainer of that private repository is to be trusted). --extra-index-url is meant to provide mirror urls (serving the same set of packages as the main one), rather than to combine repos with different sets of packages.
Schengen and Euro definitely put Croatia on my list of destinations. It’s much more comfortable to travel without having to bother with exchange rates.

No passport control at the airport is also a nice bonus. I can’t describe that feeling when I travel to another country without going through border checks, it’s so liberating.
I prefer historians' books.
I mostly use it for write on mobile. How big is your Vault?
Still doesn't help unattended machines that need to scp automatically
I'd be curious to know how this differs from Vocode.ai, which has been around for over a year now, and has voices from Sir Mix-A-Lot to Bender from Futurama.

https://fakeyou.com
There is absolutely no way that I could enjoy the life I have now as a senior in my department.

Right now, I’m the master of my own fate. I either get small projects where I manage the entire project by myself or maybe with one junior consultant including managing the customer, the meeting cadence, when and how often I need to travel to the clients site (if at all) etc or I slice off one vertical “work stream” of a larger project and still keep it where I can manage it.
The party suing in this case is the government.
They are definitely zero. How many dollars have you paid for Linux?
Defining “Enough”
If you actually look at the link prpi provided, there are several examples. E.g., Atanarjuat: The Fast Runner (yes), Hiawatha, and Kings of the Sun; if you allow animated films, there's Pachamama and The Emperor's New Groove. More recent examples not in that list include the Canadian movies Maina (2013) and Edge of the Knife (2018).
I appreciate the feedback. You're probably right but it gives us something to dream about. But assuming we do have this cap table, how will investors want to purchase preferred shares in the company?
Or can you just put some space mirrors in to redirect sunlight to panels on the moon? Maybe even concentrate it?
Observation about work groups. The groups profit is often being created by the couple of workers who are underpaid.
I can see why people downvoted you but in my opinion you are correct.

Someone gave you the most precious gift of all: Life. It is your responsibility and duty to do the same.
If you could be an animal, which one you would prefer to be?
Interesting that you notice it on android as well.

I know I'm quite particular / sensitive to both interface latency and design, I'm aware I probably have higher standards than most people.
> again after 22 years.

It has been 32 years, my dear neighbor :)
I am certainly not a Star Trek fan, but this episode I remember with fondness.
This is another solution to such a common problem that one might be surprised at there being no solution baked into the SQL standard. Instead, we have some vendor specific features like automatic audit tables and time travel, and a huge array of bespoked techniques like in the article: everything from adding a deleted_at column through to re-architecting your system around event-sourcing.

Why such diversity of solutions? I believe this is because the problem of adding time dimensions to your data model is heavily dependent on exactly what you intend to do with your data. Enabling theoretical audits is a very different requirement than enabling admins to rollback changes to data, which is a very different requirement to enabling users to undelete their data - and then there’s a performance angle to layer on top: your design will depend on whether you need your INSERTs/UPDATEs to be fast or your SELECTs.

It’s definitely not a case of one of these approaches being definitively better than another. You can’t shortcut talking to your users/clients/stakeholders about how the whole system is intended to work.
You can’t compensate me enough to put in more than 40-45 hours a week. I get paid because of my expertise. Not because I’m willing to work for 70 hours a week.
Interesting! Would you mind elaborating?
I wonder why clubhouse didn't just sell to the highest bidder. Their product wasn't so complex and the user's weren't very locked in. It just didn't seem like a product/company that could succeed on its own.
> Increased productivity does not necessarily lead to better pay or advancement

In a free market, supply&demand set employee compensation at about 85% of the value the employee produces.

The reason is simple. If the company overpays, the company goes bust. If the company underpays, his competitor will hire the person away.

If you believe you're underpaid, make your case to your employer. If he agrees, good for you. If he doesn't, and you're not convinced, quit and work for his competitor.
A sailor must have invented it.
The ghostly amount of v6 space is so exciting to see. One day we’ll need to physically route a whole block to another planet — there’s no point using BGP when the ping from Earth to Mercury is 230,000ms at best.

I love IPv6 and it’s so exciting to see it used widely at last. My mobile device is v6 although it’s still dual stack. Home networks are doomed to by v4 forever so your 1990s eToaster can display Yahoo! News! but I wonder how many ISPs are doing 4to6 or CGNAT nowadays? That’s what my cell provider does.

I only know a little bit about BGP. Why does Tesla announce 6x /48s instead of having a /32 of their own and handling their routing internally? https://bgp.he.net/AS394161#_prefixes6
You say "centralization" but EU and NATO countries gain massive amounts of power and strength from banding together. Tiny Croatia has no hope of protecting itself militarily or economically compared to being in those institutions.

In each case countries are eager to join because they have so many benefits.

Your claims about plutocrats work in the opposite direction: corruption and influence is worse, and the rule of law is less effective when a country is smaller.
Nice read indeed, also see previous discussion: https://news.ycombinator.com/item?id=26405515
https://github.com/xocolatl/periods periods does this for PostgreSQL.
Is 3ffe::/16 (6bone) still active on the Internet?
Statistically this is the worse advice possible.
The comment was against the argument being made, not the user. Nothing personal about it.
Yes almost all of my German family is from around Mainz.
Real estate isn't bad in most places in the US. In most places it's easy and cheap to build, and houses are large and comfortable. The expensive places (San Francisco, Manhattan) are expensive because of government interference, and there are places in Europe just as dysfunctional in different ways -- waiting lists for rentals, undersupply and poor quality because of rent control etc.

In the US healthcare is regulated like crazy, entirely broken by government intervention. Probably other places have governments that have broken their systems less badly. I won't argue that systems with some private actors involved are necessarily better than those that have none at all.

And as for education, America's private and charter schools are better than its public non-charter schools even controlling for funding and student quality. And it has among the best tertiary education in the world, and yeah it's not a bad thing that the students who can afford to pay for it have to pay their own way. (American tertiary education costs are largely means-tested.)

As for the rest of the argument, I think the fact that nobody can afford to buy a television because we're all being gouged by unregulated, excessively profitable technology manufacturers is the best demonstration of your point. Everyone can at least agree with you that competitive pressures never lower prices.
Love the BG series. Met my wife through the modding community too. Every couple of years I do a replay of the games.
I live in the US. Plenty of choice. Even driving 30 minutes like my mom did. I suppose if you live on the tundra in Alaska, it might be a bit farther, but you could always just shoot a bear and eat it.

In Seattle, there are some neighborhoods without stores, but that is usually because the stores cannot handle the shoplifting anymore, and quit. It's still not far to another store outside those neighborhoods.

You can even buy food from Amazon from your Lazy-Boy. Push a button, and food appears on your porch.

If you have a really hard time finding food where you live, may I suggest:

https://www.youtube.com/shorts/qelMhlI6f_o
LFTRs can scale down to closet sized, and most of the fuel (Thorium) is stable aside from the ignition uranium plug, but there's a LOT of materials to solve for long service.
Don't bring a classical knife to a quantum mechanical gun fight!
Meh. I think too much reliance on a single entity like CloudFlare isn’t good but your reply isn’t helping at all. I’d reconsider the approach it you really care about a decentralized internet.

@userbinator sets a good example elsewhere in this thread, imo.
I tried it with several paragraphs of text. The many options offered—various voices with adjustable pitch, speed, and pauses, and customizable pronunciations for specific words and names—are attractive, and I can imagine a lot of potential uses.

Like other voice synthesis software, though, it does not seem able to adjust the pauses and intonation to indicate emphasis and contrast the way a skilled human narrator does. I wonder if that will be coming as the AI becomes more meaning-aware.
> Are you free to make transactions with whoever pleases you?

Aren't you? I find that businesses like my money.

What stocks in the market are you prevented from buying?
Please don't break the site guidelines like this, regardless of how wrong other people are or you feel they are.

https://news.ycombinator.com/newsguidelines.html
True, but in that case I wonder the reason why you or anyone else has such direct access to such data. ETL would eliminate such things for a data lake before anyone would run ad-hoc queries (that could and likely do) contains PII and other privileged data.
I agree, but I think it would almost as cool to reproduce the 3D model in Minecraft, hire people to keep it up-to-date in real time, and then project that into your room. Or maybe a stadium.
A Particle That May Fill ‘Empty’ Space
> hyper focus on short-term cost reduction even when it entails significant long term costs

That is exclusive to a small amount of public companies without a stable business model. So a tiny percent. That has little to do with "acting like a private business" in a competitive market. At least when you compare it to how 95%+ of business operate.

Ask yourself, why would a healthy business sacrifice long term value for short term stock price gains? I highly doubt the answer is "that's what the free market demands". No serious bank or investor would touch a business otherwise if that was a rational incentive (besides ponzi schemers).

Even among public companies (which is itself a small percentage of all businesses) that is rarely the modus operandi. It's just a meme that comes out via the inverse of survivorship bias...aka news stories of obvious failures. The only ones that could stick with pro-short-term-investor anti-consumer tactics like that around are monopolies and/or mega corporations friendly with government.
That's a beautiful way to describe this.
I entered a paragraph from the beginning of this article https://en.wikipedia.org/wiki/Hilbert_space

I selected several different voices, but it only generated between 2 and 11 seconds. Only got up to the first sentence...
Every last molecule used on ISS is boosted from Earth, and recently. ISS does a bit of recycling to reduce the amount needed. There are exactly zero permanent inhabitants: any would die. They exploit no in-situ resource, except sunshine using frequently-replaced solar panels.
Bingo, it was exactly this. I was pretty bummed, being a fan of libraries in general, a fan of Ghostbusters, and a fan of nice places to read and work.

If I’m coworking in NYC sometime, maybe I’ll ask what kind of research I must be doing to get to read there. I’m guessing with the physical books only available there?
Check out also the back rooms series… https://youtu.be/xJQG9CkMkuE

Recent back room vids have jumped the shark a bit, but the first few were golden.
Breaks down at high width and low thickness.
Good read, it reminded me of The Enormous Space by the same author.
> Libraries refuse to shift away from this culture thing, and decided to just blacklist the known exploit path while keeping the vulnerability intact.

Log4j 2 refused to shift away from it since they are paid to add that kind of bloat, yes this wasn't an accident caused by a bad culture, this was a feature someone requested. As far as I understood they are completely separate from the original log4j and it is just another, mostly compatible logging implementation.

> Java is unique as the culture encourages doing magic convention over configuration by reflection AND it-just-works serialization

As opposed to what? Python? The language that culturally refuses to fix the GIL and as workaround provides multiprocessing, which requires that everything is serialized?

Also I may not have seen many Python code bases, but from what I have seen ClassLoader/Import abuse is alive in both languages.
I'm not sure I would use this myself [primarily that my 'workflow' doesn't really work with this being in ~/bin and all], but you have some really nice ideas here that I didn't think of before. When I get time later, I'm going to poke around and see how you put it all together. I bet I could copy some things here for some of my other 'projects'.
they said prequel, not sequel, though.
https://historicbostonedison.org/Verified-Alarm-Response /2011/

> The Detroit Police Department no longer responds routinely to house alarms, because 98% of house alarms are false. Detroit Police officers will respond ONLY to house alarms that can be VERIFIED as not being false alarms ... DPD recognizes four different ways that an alarm can be automatically verified ... An alarm system sends one signal from a door, window, or other perimeter/exterior sensor AND sends one signal from some sensor inside a house. An alarm system sends three signals from one or more interior sensors. An alarm system sends an audio signal that lets a company monitor hear an intruder. An alarm system sends a visual signal that lets a company monitor see an intruder.

> Do sound alarms deter only small burglars?

What deters non-small (organized?) burglars?
For comparison, iOS and Android's security model would not allow a Python package to steal SSH keys. But the best solution would be to implement least privileges principle and do not grant unnecessary privileges to programs.

I think even in iOS and Android, the same thing could still happen if the user keep secrets (say private keys) in their file directories, and then the user give permission to the app to access their file directories, which could be legitimate need of common applications like file manager, text editors, etc.

I think the main change to solve this would be to not keep secrets in files that are readable by users (or program run by users) implicitly, instead using a secret provider that makes it explicit to the user whenever an application needs to access such secrets.
Murf.ai has also been around for a few years.

I own a creator platform (with 500k or so Voice Actors) and have been very interested in AI Voices so I've been watching this develop for a bit.

IMO, Murf's marketing page has better results than their product.

I think the VAs on my platform are in trouble, but they still have a little ways to go.
The (disconcertingly silent) Mill CPU company have a design talk that covers these concepts wonderfully in the general form, while explaining their various innovations.

e.g. this video describes how their VLIW compiler does partial compilation/'specialisation' to allow the same input to be consumed on machines with different variations of hardware features.

https://youtu.be/D7GDTZ45TRw?t=259
i think the idea was that the business owner takes all the risk, while an employee can simply change jobs. at least that was the idea…
Yes, it's risky running your own business. But if you want to make it big, it's the best route. More risk, more reward. If you want to play it safe and have someone else take the risk, be an employee. But safe means less return.

You can't have both safe and lucrative.
> If I remember correctly, the Dublin regulation states that the EU country that will be responsible for the asylum will be the first one reached by the refugees...

Not really first one reached, but first one where fingerprints were documented or an asylum claim was filed. This is why in the case of Syria for example, relatively many Syrian refugees are the responsibility of northern European countries like Sweden, Germany and the Netherlands.
There is quite a block of multicast addresses in IPv4. Is it used for anything in real life?
> > language package management systems try to solve solve the problem that has been solved by Linux distributions a long time ago, and they typically do it very poorly.

> Yet, every main Linux distribution has its own packaging format (deb, rpm, etc) , package naming convention, dependency resolver, package release strategy (rolling, fixed, etc) , package build & deployment system (source, binary, per arch binary, etc), and package install peculiarities (custom, upstream focused, system wide, in a chroot, in a snap, etc), reproducibility constraints, etc...

> So it's not like it's a _solved_ problem for Linux distributions.

Just because someone reinvents the wheel does not mean it wasn't invented (solved before hand. I would also argue each distro package manager is miles ahead of any language one.

> Not to mention that most distribution package managers are system wide, while language package managers are often environment based.

That's the thing I was alluding to in the second part of my post, if developers would be more careful about backwards compatibility we wouldn't have to use environments. I do admit that packages for apps are more of an issue, it would be nice to upgrade those without having to upgrade the rest of the system.
Not to mention that various historic dates in particular regions are highly problematic wrt Year.

Today, now, here in Australia it's January 1st 2023 ..

but in countries and at times when the New Year didn't come about until some part of March or coinciding with Easter changes.. then it would be

January 1st 2022

.. as the New Year hasn't yet arrived.
Fair enough. I agree that the README treating autocomplete descriptions as a "but, wait also!" does not make it seem like "the main feature". Projects often evolve faster than documentation. It happens. :) Seems this is more all about autocomplete (which can be..pretty ornate in Zsh) than dispatch..

I don't know of a `setopt` to fix completion for the blog/admin/ssl case, but Zsh mailing list guys are very helpful. With absolute paths Zsh is pretty multi-component smart..E.g. "/u/lo/bi<TAB>" can expand to "/usr/local/bin/" (with my mix of setopts anyway, assuming the expansion is unique). So, could just be more bug than intention.

--

FWIW, the distinctions you drew highlighted (to me) "second class" support for NON-`sd` commands Re: this summary line. I expect this is the sort of thing a daily `sd` user might notice anon, but I did not see any issue on your github repo about this. I suspect it would not be hard to address.

To be more concrete, the standard man format has a one-liner-ish summary of what regular commands are used by the old `man -k/apropos` system. You just need a general `extracted-summaries-from-man-or-scripts` data file (updated in cron/etc.). Once system & `sd` summaries are merged, search of that file(s) (even by just grep) is a more complete path to discovery. :) The TAB completion discovery you like is really just prefix-only search.

You might be able to use this same data file to make `sd` a master meta-command that could dispatch not just to your own scripts but to anything both in $PATH and with a 1-line summary in its man page (or some similar rules). I might imagine typing sd prefix<TAB><more-to-isolate>--help<ENTER> becoming common.

And, of course, just generating a barely populated man page with just titles and your summary line and installing that into the regular man-system and using apropos is another idea for non-TAB-oriented discovery/search/recall.

Well.. /Brainstorming for now and Happy New Year! :)
Spoken like someone with a vested interest in web development.

The future we should strive for is the best UX for the customer. That’s not achieved through a web stack.
Well the depiction of the conditions within meat packing plants in The Jungle were pretty historically accurate. It's certainly worth researching the impact it had. Comparatively & to your point, something like Atlas Shrugged is pretty much pure fantasy. So sure novels may not be the most concise vehicles for historical fact, but it really depends on the aims of the author.
That's utter nonsense. The people who elect EU leaders, shape EU law make and decisions on it are the members of the governments of the EU states, who are duly elected by their constituents. The less powerful EU parliament is also democratically elected by EU citizens.
Compare the position "Airbnb shouldn't refuse service to a prostitute" with "AWS shouldn't refuse service to Parler" or "CloudFlare shouldn't refuse service to Kiwi Farms". When people agree with the former but not the latter, what argument/principle are they using?
hubris. Or everyone who might've bought them recognized that Clubhouse was a fad.
> How were you able to write a book, I mean it's a lot of writing

Although I'm not the OP, it can be less daunting if you split your topic into an outline i.e chapters. Then outline each individual chapter. Before you know it you've got a book ;)
What's great about it?

I was considering using RN for a cross platform app and for some reason got the impression (earned or not) that Expo was for beginners, and people who have "non trivial" apps will have to "eject" (as it's called in Expo) sooner or later. So I was going to avoid it.
Too much logical determinism in your daily work ?

"The movement of the waves, of winds, of the earth is ever in the same lasting harmony. We do not stand on the beach and inquire of the ocean what was its movement of the past and what will be its movement of the future. We realize that the movement peculiar to its nature is eternal to its nature." (Isadora Duncan)
How are you liking it so far? Perf issues or no?

Any concise/clear resource or guide you used?
His book 'Adults in the Room' is an account of his brief time as Greek finance minister. Reads like a thriller. The film adaptation is terrible.
I think where Flutter can be of interest is in truly innovative user interfaces, rather than a screen of imitated native components.