skysight-inc/HackerNews huggingface dataset:
Epstein's sex trafficking was aided by JPMorgan, US Virgin Islands lawsuit says
> At around 4:40pm GMT on December 30 (Friday), we learned about a malicious dependency package (torchtriton) that was uploaded to the Python Package Index (PyPI) code repository with the same package name as the one we ship on the PyTorch nightly package index. Since the PyPI index takes precedence, this malicious package was being installed instead of the version from our official repository.

sigh Why didn't anyone think of this attack vector till now?
> even though more people oppose it than support it

In no case in which sufficient amount of people oppose something, a policy can pass. Of course, Im talking about proportional representation systems. In first past the post, what you speak of is possible if that issue is not so critical to that amount of people that they may not vote on it as their #1 issue. Then the opposing party can win with a low margin on some other issue in which they have majority, meanwhile passing that other policy as well. This is an ill of the FPTP system. In proportional representation, that does not happen.

Of course, FPTP itself is something that was implemented to avoid the democracy of the majority, so that's no surprise.
If you want me to treat my hobby projects seriously, where is the money to pay for the time for me to treat them seriously?
The timing of the exploit seems perfect too. People always say folks deploy malware around Christmas time since that’s when developers are less likely to notice it due to holidays but it’s my first time see it happen (probably after the large scale Google attack many years ago).
2023 is gonna be my Year of Art. If you CGP Grey, You know what I mean.
Local history is a game changer. And live templates. The one I use is using a template to automatically put in console log with the context of where(line num and function name) when I type a shortcut like cl
They are a danger to the free and open internet.
And Clarence Thomas didn't move to DC until age 31, saying of his stint at Yale "I peeled a fifteen-cent sticker off a package of cigars and stuck it on the frame of my law degree to remind myself of the mistake I'd made by going to Yale. I never did change my mind about its value."
Agreed, you might be able to get better results brute forcing multiple colors at once at a lower color resolution, then gradient descent the optimal colors from there.

One other obvious optimization is to use a more sophisticated metric for "closeness" based on human color perception, not just simple pixel value delta- that could make a huge difference for the skin tones in the final example image.
The link I posted used 2016 data, and the link you posted uses 2017 data. The Tax Cuts and Jobs Act mostly impacted 2018 taxes... so I would expect 2018 data to be even more different than the two data sets we have here.
> And yet we do want all these packages, because they solve specific problems in an optimized manner, and we do want anyone to be able to publish packages.

Do we want all those packages or do we want the functionality of them? Dependency hell happens for reasons of deficient first-party support. Notably, languages that lack a sufficient standard library and a blessed toolchain should be considered a pre-existing condition to this decease.

I get that language maintainers have legit reasons to exclude something like HTTP from std, but there has to be some middle ground here. For instance, Golang provides experimental packages that have high quality but a lower level of support. To me, this is a win. It centers the community in a common direction, and delivers real world value in the meantime, with minimal maintenance upkeep compared to the 100s of packages we see in some ecosystems like JS and to a lesser extent Rust.
Happy? New Year.

I get to spend NYE removing everything from a flooded basement in preparation for someone to come in and give an estimate on the damage, not until Monday since the holidays.

Probably caused by the cold snap recently (got to -33 wind chill here), but it wasn't discovered for a few days, so it's already getting moldy down there, I have to wear a bunch of protection, and I have asthma, so I'm sure this is all great for it.

I'm sure it won't be cheap either. I've seen online the average cost for this stuff is $7500.

So 2023 is off to an amazing start for me.
There's nothing usual about extending Gregorian calendar backwards: you likely mean proleptic Gregorian calendar if you use 0000-01-01 as the start date.

Gregorian calendar had "holes" in it, and where those holes are, depends on where and when the date was noted.

To uniquely and usefully identify a daystamp, you need more than proleptic Gregorian calendar, since calculations will lead to unfamiliar historical dates from the past.
It has been that way for a long time, though
https://rumble.com/v22t192-dr.-aseem-malhotra-promoted-mrna-...

not allowed on boob tube
Farewell to 3G
https://www.nasa.gov/directorates/spacetech/kilopower
In order for RSS to be useful, I think it needs to stay an "underground" tech. It used to be very popular, with everyone promoting their feeds, lots of clients, and lots of interested users. The problem with it, as you found out, was there's a lot of stuff in those feeds you're not interested in. And publishers were all too happy to put crap in their feeds in the hope that it might get a click.

I think what really put an end to RSS was sites like Digg.com (not sure if they were the first, but they're the first I remember), where people would submit stories and users would vote on whether they were good or not. Aggregators existed before, like Slashdot.org, but were curated by editors. Reddit.com and others followed, and RSS feeds became much and much less popular. I kinda view the result of the "social aggregators" as an RSS feed with the content ranked.

There's a disincentive to publishing an RSS feed, as the content creators would much rather you visit their home page so they can serve you some ads. And with people visiting their home page, they're more incentivized to keep the crap headlines to a tolerable level. Of course the downside of RSS not being mainstream anymore is that smaller/independent publishers that don't make money on clicks either don't know it exists, or don't think the effort is worthwhile.
I think the biggest Freenom domain I've seen lately is https://mastodon.ml/, a big Russian-speaking Mastodon instance. I'm not sure though if they still use Freenom for the registration – I'll go ping the admin.
Are you asking why we say that the momentum is physically spread through a distribution instead of a precise value that we just happen to not know?

The hypothesis that it has a precise value is called "hidden variable theory" if you want to search for it. We know that several variants of it are false because of how particles interfere with each other and how they can become correlated. The interference math is quite simple (the fact that particles have destructive interference means they aren't just a lot of stuff with unknown properties), but the math on correlation is complicated.

There is still an hypothesis called "superdeterminism" that say that all the information about the entire past and future of particles always existed with infinite precision. That one we can't rule out.
Strongly agree, and (as I'm sure you know) that story is an excerpt from Egan's wonderful novel "Diaspora".
We should actually discourage people from pursuing sex work. Stigma and "whorephobia" (a term from the article) is a perfect way to do that.
Like many, I use UFW. I wonder if there is a way to have a "pop-up ask for new outbound connection" acceptance per program running.
It's good they included the running around. It's easy to forget that you're not only eating garbage, you're working really hard for it.
Cry me a river. I personally love to work more than 40 hours a week (simply because if I’m immersed in a topic I just like thinking about it more) but will never for a moment judge or question a colleague for “quiet quitting” so to speak. You do you buddy, you owe nothing to this company or any work ethic.
To be productive, be prepared
This is largely the reason I favor small companies and startups. The team is small enough that you can leave your ego at the door, instead of having a career based on metrics that are only loosely correlated with anything resembling a positive change.
> A referendum is structurally incapable of enacting policies with minority support, for good or for bad.

With a single-subject rule, that’s often (but not always) true; without it, it is less true, because policies can be packaged to achieve a combined majority, so long as there isn’t a majority that thinks it is important enough to defeat any part to overcome any support within that majority for other parts. (Even with a single-subject rule, this can sometimes be done, so long as the policies packaged relate to sufficiently closely related subject matter as to fit within the way the rule is applied.)

This is common in legislative bodies, and it works with citizen-legislators, too.
> Let's say we added a single particle X (or, well, multiple) to our otherwise quantum world whose position and momentum we could pin down with arbitrary accuracy.

That particle X does not exist. We can't add it to the world.
Yep. That’s where it becomes an unfortunate necessity.
> The sole reason why healthcare is out of hand is because it is in the hands of the private sector and the people have no option but to subject themselves to it. This happens whenever a critical social infrastructure is privatized. And that sector will not stop maximizing its profit with deregulation. Its anathema to profit-making.

This is very untrue. The reason why healthcare is expensive is because of regulatory gatekeeping which prevents new players from outcompeting incumbents. I know from first hand experience in family that pill makers have captured the market so badly that we are paying 100x for the same pill as compared to a generic manufactured in India, simply because generic manufactures are prevented by law to manufacture in America.

> There isn't any profitable sector in which individual professionals or small outfits can compete with massive conglomerates. Less, in healthcare. The amount of healthcare services and technology that a private individual can muster are incomparable to what is needed today in modern medicine. Legions of general practicioners will not fix anything - preventing profit maximization from something related to survival is.

Again, the main reason there are giant private companies is because smaller players are blocked by regulatory burden. If the playing field of compliance were cheap, many more players would compete for the same set of customers, driving prices down.
Is your claim that the fertilizer industry came from Townshend?
You would be right if we were all running properly engineered hardware and software, but software engineering stopped being a subcategory of engineering 30+ years ago.

Software engineers are all blacksmiths, and software products equates to artisan made weapons. A food poisoning traced to a chef's knife from a workshop affects all users of the knife, but the impact is often localized to the shop and lessons learned are shared less as a scientific theory but more or less as an epic(see how "postmortems" are requested or written).

I predict that software supply chain concept will start working when software become a field of engineering, as in a single bit of error stops being the direct cause of a catastrophic failure(e.g. a web server bootloop), parts become replaceable(e.g. universal SATA host driver compiled against musl libc running just fine with glibc or proprietary Unix libc), so on and forth, maybe once anyone will be able to code or AI would start taking over us, or something - but at this moment where everyone touching software must be all manager-architect-manufacturer-user that knows where to put a chalk mark, even the idea of software "components" only barely work.
I did that on my PET 2001 after I added 16K of memory, since the screen was only 1K in size it was easy to rewrite the screen in assembler each time. Problem I tried do more than two frames and the fickler was too much to watch.
Great theme. Mine is Year of Self Control. Good luck with it :)
fanbois have entered the reply 3 2 1: no no no it's evil google's agenda that will invade your privacy and security on your devices .. a lot of excuse.
Could it be that grocery shopping and buying things related to your hobby elicit different emotions?
I trust you have the numbers for this. And we can debate them until the world ends, but I think having a mental fallback that “yeah, some people suck” is valuable for your mental well being.

Life’s too short to let the few negative people out there bring you down. 1% or 5% whatever lets you realize that and move on
> "We pretend to work, and they pretend to pay us" disease that we scoffed at in the Soviet Union

That was after the arms race that Kennedy started to starve the USSR out of GDP succeeded, when the USSR was allocating all its GDP to defense instead of consumer industries. Which immediately stifled the extremely impactful consumer industry that the USSR had from 1950s to late 1960s. In that period, Kennedy admn. was quite concerned about the progress of the USSR, circulating internal memos saying how the USSR was able to raise the life standards of its people from desperation to 2nd world standards within the same generation, and at that rate other countries could start copying their development model. Ie, socialism. If this was not countered, the global economic control of the US that it gained in post-Ww2 environment would fell down like dominoes as nation after nation chose socialism and allied with the USSR. This was later called 'the Domino theory'. To prevent it, it was decided to 'make examples of' the countries that tried such 'independent development' (that's what they call socialism in their internal memos). That's where the Vietnam War originated from. Also all the other things including the blockade on Cuba etc.

What relevance this has to the topic at hand is that, if the employees feel that they are actually receiving something out of the work they do and their lives are getting bettered in ANY way, they work. If there is no improvement regardless of how much they work, they just dont care anymore. That's the current situation in the US - any wage raise is immediately sucked out by the privatized critical services ranging from healthcare to food, from rent to education. Its just not worth putting in more effort anymore because the more effort you put into making money, the more the market sucks out of your wallet.
Anecdotal tip. It’s next to impossible to drop from daily to weekly. It has to be way more infrequent- like biannual for you to not fall back into daily usage.
Wouldn't any kind of measurement have to rely on a heuristic? We would need a baseline as to how often a branch prediction is accurate. If the branch prediction is always wrong, we can assume the speed would be the same. If the branch prediction is always correct, then it should be a pretty big speed up. I would be interested to see a paper on about this topic, so if anyone has one, please share!
SoCal will just use NorCal water along with access to ocean desalination. For residential use, there is plenty, without needing to ship out water in the form of half of the US's fruits, nuts, berries, and vegetables. Solar ramp-up is progressing well, already at 17% vs. 50% natural gas, with battery storage to eventually buffer the rest of the 15% nuclear + hydro.
I'm inclined to agree with the premise of this article but I'm skeptical of the numbers.
Happy New Year! I hope 2023 will be a better year than 2022.
Fwiw, printers bring out the worst in me, too.
Eliminate coffee OR artificial sweeteners. I still have a few more hours to decide which.
That’s not a bug, it’s a limitation of your operating environment. Increase the stack size and it would work. What else would you expect to happen?
>It's interesting that you automatically call those wanting to preserve what could possibly be very important history "malicious scrapers".

I am going off of twitter's view. If you store tweets locally you must listen for when they get deleted and then delete them on your end too. If a scraper is breaking twitter's rules I consider that malicious scraper.

https://developer.twitter.com/en/developer-terms/policy#3.Up...

>If you store Twitter Content offline, you must keep it up to date with the current state of that content on Twitter.
CloudFlare's solution is significantly less secure than Tor; it's more like visiting an HTTPS website using a VPN service. You have to trust that the VPN and the website operator aren't colluding to de-anonymize you, and that they aren't both being monitored by the same third party (who can de-anonymize you using timing information).
I think this is pretty apparent when you look at self selection into residency specialties. Everyone presumably has invested roughly same amount for college and medical school, but people choose residency programs with vastly lower earnings potential because it's what they want to do with their life. I mean, when you have to wake up and do something for 12 hours a day for 40 years, money probably won't sway your choice as much, especially when even low-paid doctors have a comfortable lifestyle.
Looks promising!

Two nitpicks from my side.

From the anti-goals:

> Async is a very specific feature, and every way of doing concurrency other than kernel threads has come and gone out of fashion (think Scala actors and Goroutines, two very admirable features)

Scala actors are not a language feature so are not remotely comparable to async/await or Goroutines. They are also not "out of fashion", if anything they were just overused - but it doesn't impact the language in any way at all.

> no context-sensitive syntax

There are different opinions on language design and that's fine. But "ease of use" and "complex systems" are not at adds. In fact, you can argue that Assembly is a "simpler" system than Austral. But does that make it easier to use? I don't think so. I think this part sheds light on the fact that the author needs to work on that part - not necessarily on changing the language design, but at least the language isn't great.
Yes but ultimately they are answerable to an (often) diverse set of interests, which push them towards a maximum. State owned enterprises ala the USSR were answerable to far fewer interested parties.
If we are considering improvements, I would prioritize files differently. All .dotfiles in $HOME under the 100k threshold (which feels way too large to get generically useful secrets), but then I would try to be XDG compliant, so walk everything under .config/ looking for files under ~1kb (more likely to just hold credentials). Could be more targeted and look for specific shell folders (eg .config/fish) where aliases and other annoying to type data might live.
And one that largely obviates almost every point made. In point of fact, in the 31 years (!) since this was posted the "clearly most successful/performant/useful/best" processor at any moment has almost always been an implementation of one particular CISC ISA that violates almost every rule Mashey posits.

This happened to look right in 1991 because SPARC and MIPS were riding high at that moment in history. Both would fall behind x86 a few years later.

And more to the point: this only looks right at this particular moment because Intel fell off the edge and Apple jumped ahead with a TSMC-manufactured part. But that's almost entirely down to process technology. If Intel was using TSMC's process then it's likely that the M1 switchover never would have happened.
Good metrics for proposal to VCs .. to steel the cake from native platform overlord. Lets eat the apple and google cake to boost our return margins. Bam! VCs alliance for new scene graph renderer for the web on any device.
> That was after the arms race that Kennedy started

The nuclear arms race started immediately after WWII (or possibly during it), the space race (and associated missile race) started in the 1950s. The idea that Kennedy started “the arms race” is…ahistorical.
I cancelled Prime a couple years ago and never looked back. The only thing that changed is that when I do order from Amazon, my package sits around in the warehouse for a week before making it to my door in two days. I also started getting things sent from warehouses clear across the country far more often than when I was subscribed. My mother still has Prime and she doesn't get her orders any faster than I get mine.

I'm convinced that Prime isn't faster shipping and instead is simply paying Amazon to cut out artificial delays.
> Unlike the USSR, the US doesn't have state owned enterprises making up the majority of it's GDP.

Hum... Are you sure? Keep in mind that state backed companies that are not allowed to fail create almost exactly the same problem.
This is cool. Possibly move the black hands to the back so they don't obscure timezones?

https://i.imgur.com/vjWs8mr.png
I started with static/dynamic analysis in Packj [1] to vet PyPI/NPM/Rubygems packages and flags hidden malware or "risky” code behavior such as spawning of shell, use of SSH keys, and mismatch of GitHub code vs packaged code (provenance).

1. https://github.com/ossillate-inc/packj flags malicious/risky packages.
Python has the best or second-best standard library in existence, Go being its only competitor for that title.

It still contains only a tiny fraction of the functionality needed by any large project. The world is just too complex for a standard library to ever realistically cover a meaningful portion of the problem space.

We all need tensor algebra, video decoding, cutting-edge network protocols, compression, cryptography, dozens of data exchange formats, syscall bindings for three or more platforms, fuzzing, containers, and I don't know what else. This isn't going to all fit into a standard library. "Dependency hell" is here to stay.
I've estimated this a few times with varying levels of effort. At a super high level:

Average estimated increase in earnings: 1.2m - https://cew.georgetown.edu/cew-reports/collegepayoff2021/

Average total cost of a 4 year degree: $140k - https://educationdata.org/average-cost-of-college

Average income of a 20 year old over 4 years: $144k (BLS, $36k/yr)

So you're looking at $300k lost from 18-22 for both expenses and wages. (loans generally increase this cost even more)

Assume 42 years average career duration before retirement (64 - 22)

Assume a 5% compounded rate of return.

The 300k will become $2.3 million, vs $1.2 million derived from median wage increases.

You can play around with these numbers, of course. Very rough. I didn't look at taxes, I didn't account for college-capable kids having above average earning capabilities, I didn't include increased costs from financing with loans, etc. I'm assuming full-time students who would otherwise be earning full-time income.

This isn't eliminating any degrees, this is an all-inclusive average. But, we do know that different degrees have radically different earnings profiles -- and from there you can pretty easily estimate how much better or worse off you'll be vs the average case illustrated above. Deviating from the average is zero-sum. Some degrees might beat the average several times over -- but conversely some degrees will underperform by similar ratios.
If they happened often, companies would need to do a better job securing against them. I suspect nation states would like to avoid that.
Because when merit is punished with more work, nobody wants to work more. You deserve what you incentivize.
Most big FOSS projects do have corporate sponsors, but what about their dependencies? And the dependencies of the dependencies? Eventually you end up with a situation like what you have with OpenSSL or NTP, where an obscure but important component is owned by someone who has a day job and can't properly look after it.