skysight-inc/HackerNews huggingface dataset:
> (bonus question - how to make backups safe in age of encrypting ransom ware).

This is actually a solved problem, with many solutions. In a nutshell, you need a system that has enough space to make many enough copies without overwriting the ones that are too fresh. It also must not be controllable by the host that you backup but this is kind of obvious.
I would hazard a guess that it has been intentionally muddied, made confusing, opaque, and left til the last minute for a reason.....interest rates and credit scores.
It's kind of amazing to me that this is still a thing.

Supply chain attacks on the client machine basically don't exist in Linux distributions. If you're downloading a Linux disto package from the distro's official repositories, it has been signed by the distribution, and a human being working for the distro has entered that package into the repository as a real (not-malware) package.

These free-for-all ecosystems where anyone can put any package into the repository, and they don't require signing, and nobody is gatekeeping even the name of the package, is just... insane. Do you want a free-for-all, or do you want curation and quality? You can't have both.

Until there are new, curated, quality public repositories, I think the bare minimum requirement for all companies should be that they must host their own package repository, and 2 people must sign off on adding a package, with details about the package's ownership, signing key, source repository, how recent the project is, how many releases they have, etc. The basic due diligence that a package maintainer normally does. Shipping anything to prod that someone just downloaded from PyPI should be a non-starter.
No privacy policy and no terms of service might do it
Thanks, yes, updated.
The answer is in the sentences surrounding it.

> One strategy, in simplified form, works like this: Make two bets that should move in opposite directions. Think of, say, both betting on and against Coca-Cola’s stock. Towards the end of the year, one bet will be up, and one will be down. At 365 days, the last day a trade is considered short-term, sell the one that’s down. A day later, sell the one that’s up.

> Of course, if you consider the trade as a whole, it makes no money. But that isn’t the point. You’ve found a risk-free way to generate two valuable commodities: short-term losses and long-term gains.

They're picking which gain/loss to realize - in both directions, on the same stock - in a way that means they always win.
Ergonomics is part of the equation and Snap is definitely not there yet, and in fact its poor quality may be driving users to other solutions.

Snap has no GUI, where clearly a solution that provides a general sandbox should. When you open an app and click "Open File", the sandbox GUI should intervene and ask the user where the app is allowed to look.

Also, the idea of "security bolted on top" of an existing OS doesn't seem very trustworthy.
IMO we have to step back and be honest that the Linux kernel is simply not equipped to run trusted code and untrusted code in the same memory. New bugs are found every few weeks.

If history is of any guide Android and ChromiumOS likely still have many critical bugs the public does not know about yet.

Sadly the only choice is to burn extra ram to give every security context a dedicated kernel and virtual machine. Hypervisors are the best sandbox that exists anchored down to a hardware IOMMU.

QubesOS being VM based is thus the best effort secure workstation OS that exists atm. SpectrumOS looks promising as a potential next gen too.
But it's not a list
> [2]: .....

Ah, no mention of water proofing computer to protect against robotic dog innocently spilling moring coffee/tea on computer.
You're not, the only exception I make is for one Python tool, think it was called termgraph, because it's very good. All others I want to be in C/C++, Golang or Rust.
Microsoft thinks you're Dave Rubin because.. well, it's Microsoft.
In this case, a shadow ban would mean that if the owner of this website searched for his site on Bing/DDG, it would appear normally to him, but would be hidden from everyone else.
We racreset our iDracs monthly. Seemed stupid when I started, but I'm grateful after working with them enough. Newer versions seem to be a bit better than 11th and 12th gen iDracs; but I would never rule out a racreset, even on the newest gen.
That looks nice enough. Is it custom built, or a 3rd party laptop that is modified?
> most people accept that out of 8,000,000,000 people, there are 35 that need to sent to a facility like Guantanamo.

Most people do not accept that most Guantánamo detainees have been/are being held without ever being charged or tried. The terrorist in this case is the US as harsh as that sounds.
Precisely this.

I don't think any rich countries have figured out a good solution to the modern problem that boils down to "having kids used to be a EV positive, and is now EV negative" due to a confluence of factors of - needing 2 income households, paying off your own student debt, high housing costs, high childcare costs, and then high college costs for those kids.

People used to have a lot of kids to help in the home/farm/etc and to offset high childhood mortality rates to ensure they had some surviving descendants. Even after people moved off the farms, say WW1~WW2 era, kids were at least seen as sort of EV neutral, grandma watched them during the day and then they were out of the house and off the balance sheet by 18.

Now even people who truly want children are calculating how many they can afford and if that number is 1 or 2. I think a lot of people thinking "I'll just have 1 so at least there will be someone to look after me" will be disappointed with the % that end up too estranged/distant to truly be helpful in that manner later.

This problem is even more troubling because I think we almost put too much expectation on middle/upper class parents to do all these things to support their children well into their mid-20s, to the point that birth rates in US are inversely correlated with income & social class. That is - the people least able to care for their own kids, in need of the most state aid, are the ones having more of the kids.

Meanwhile the middle/upper class construct more and more levels of cost & time requirements on themselves for child rearing.
For one, commiting project dependencies into your SCM can go along way. Treat 3P code as your code. Not only does this help prevent supply chain attacks, but it makes you more conscious as to the stuff you’re importing. Maybe you don’t need a 10,000 line dependency for something you could have written in 15 lines of code. There’s also other benefits of not depending on external servers for your build step which can dramatically improve install time if you have a big project with many deps. Not to mention never worrying about dependency version mismatching. All the clones have the same copy of everything.

For languages with good package managers it might seem like an anti pattern (why commit node_modules?). But stuff like this is standard for C++ dev, for example.
There is no decay and decline. Thinking that decay and decline is coming is the decay happening right now. This mentality needs to change ASAP.
It's not clear that this is happening with all of the (many) sites that are mysteriously deindexed by Bing. See my comment: https://news.ycombinator.com/item?id=34389279
That's less and less relevant as GPUs and displays get faster. You might gain a trivial amount of latency in certain cases, with specific apps, at the cost of bringing back stuttering. The normal case is always going to be vsync. If your program is hardware accelerated it's not actually rendering "half frames," it draws the whole frame and the tearing you see is just a result of swapping at the wrong time.

What I mean here is the rendering in clients isn't going to change either way, everything is already built to use vsync. Turning it off is more a matter of how many switches the compositor wants to provide for controlling the throttle. Most compositors should have support for fullscreen unredirect anyway, and that gets you most of the way there.

EDIT: A few years ago this blog by Raph Levien sketched out a way to reduce latency without bringing back tearing, you may want to read it. https://raphlinus.github.io/ui/graphics/2020/09/13/composito...
I like your explanation in that it gives reason to the rotation.
Last is semantically ambiguous here, you’re not wrong, could also mean “last place (most unobvious) you would think to look” as well
This isn’t what your parent is saying. Many machine learning models are capable of producing calibrated probabilities. What Bayesian models give on top of this is that one doesn’t just predict a probability p, but a posterior distribution for p. This allows for estimating confidence bands around p that quantify ones uncertainty in the estimate. This is useful for assessing data drift and detecting anomalous examples. One can also get such uncertainty bands from non-Bayesian methods by considering ensembles of models. See the review paper by Abdar et al. [0] for more info.

[0] https://www.sciencedirect.com/science/article/pii/S156625352...
Google claims they don’t use GA for ranking signal. Though in your case it could be interpreted as mischief, maybe something is going on there. You might try recreating a GA4 instance and starting fresh. It might be the least painful road to redemption if that’s the issue.

Without knowing much about docusarus, if the upgrade touched the pages’ markup in some big way, something like not having h1 tags on the pages that would hurt.

The most likely culprit is a ranking algorithm change. I recall there was one around in October that wrecked more than a few sites.

The good news is you probably didn’t wreck your SEO. The bad news is you probably can’t do anything about it.
Thank you sooo much for your genuine feedback and advice!
Biden Used Classified Documents Accusation Against Carter CIA Nominee
Not when talking about integration / e2e tests.
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
AttributeError: 'manojlds' object has no attribute 'humour'. Did you mean: 'joke'?
How does GPT-3 spend its 175B parameters?
iOS is a proprietary OS making security research unreasonably difficult with new setbacks on every new version. It can only be regarded as reasonably private and secure if you trust the Apple marketing team.
Link between brain atrophy and the microbiome emerges in mice
I think you need to study the Euler equation to understand the relationship between goniometric functions and exponential functions when calculating with complex numbers. One easy to remember formula that connects those functions.
There's an interesting project that's going the other direction: they're starting with a distributed database, then building an OS of sorts atop it (not traditional posix API): https://dbos-project.github.io/
Companies attempting to prove that solar cars can make a difference
As I understand it, nobody wants to keep gitmo open, the issue is that the remaining prisoners have nowhere to go.

https://www.politico.com/news/magazine/2022/01/11/close-guan...
Are there any somewhat easy-to-use solutions to isolate a development environment? Preventing or at least decreasing the damage malicious packages could do? Like deleting files or uploading a private ssh key/keychain to a 3rd party server?

I was looking into things like GitHub Codespaces, I believe they're isolated per repository and integrated into VS Code, but I'd like something I could run on my machine or a server of mine.
The Podcast That Helped Solve a Murder
But even knowing nothing about buggies, looking at either one, you kinda know it’s good though.
Here is an article with an actual implementation https://www.craig-wood.com/nick/articles/pi-chudnovsky/
This depressive garbage has unfortunately proliferated itself way too much in tech spaces like HN.

Nonsense like this pretends to be wisdom but it's the very opposite of it and it has only one message: become more anxious because time is limited. No one will be helped by this, despite the gorgeous UI it's a filthy life degrading viewpoint that needs to be dismantled.

Avoid those that make you fearful and sad that degrade you back into disease and death. -Rumi

I may write a blogpost about this soon.
Hopefully this is a wake up call for GitHub
The operative word being "proper". In practice I see it accessible on the LAN far too often. The ipmi v2 protocol is so bad that if you just request to login with a known account name (which is probably 'admin') the BMC server will _provide you the password hash_ for you to crack at your leisure.
Nice! This is much simpler than using Deforum

Is everything set up on the cloud yourself, or do you use an API?
Blame SpamCop.

I recently discovered that one of my services is on stage MS email naughty list, and found out it's because MS uses SpamCop.

I contacted SpamCop and it was very responsive. Unfortunately, the solution SpamCop suggested was to move the entire project to a different provider.
Why not? That sort of thing isn't helpful or thought provoking for many of us. On the other hand many will find it thought provoking in extremely negative ways.

Most people do not like to think about their impending doom on this hellish planet.
Stable Diffusion Frivolous Litigation
Yea he should of phrased the title as a question. As his last paragraph goes:

> I'm hoping someone will read this and tell me what I did wrong.
Giving the bay back to Cuba would also be a reasonable thing.
So how do you accept it? I know a handful of 75+ year old family members who I am close to and they don’t think about it at all. The ones who act like they are still young and don’t dwell on death seem the happiest. It runs counter to the argument that death is something you need to meditate on and acknowledge every day.

Maybe there is something to just living in denial until your quality of life has degraded and your friends are gone and death seems a welcome release.
I wouldn't want to host the tournament, but I'm also down for working on a web-client.
The Democrats are funding the IRS and the Republicans are defunding it. It was literally the first thing they did when they won the house.

They're all dishonest, but obviously not to the same degree.
The only fair way to do that is for us to adopt all the labor regulations of say France, in order to export anything into that country (plus all the other labor regulations of all the other countries, many of which will inevitably conflict with each other).

That ends (quite quickly I think) in isolation of trade, an inability to pass new labor laws, or a single world government.
This could be a quote about gulags or death camps. What's "necessary" is subjective, but at least we've got a fairly universal basis for "evil", as consolation.
Thats not what this article is suggesting. It is possible the article is targeting the GOP considering their recent bill to gut the IRS and remove income tax.

https://www.msn.com/en-us/money/taxes/no-irs-no-income-tax-h...
What a sad state of affairs when even personal blogs are expected to be laden with legal documents.
I believe the first version of that interpreter was written by Charles Moore himself.
"Lines" in Forth are rather fluid but I have a version here that is 154 lines when formatted as a text file rather than 1K disk blocks.
I agree, FFT is simply a correlation of a bunch of sine waveforms.

The extra tidbit - the sine waveforms are orthogonal to each other (their cross correlation is zero), so the transform can be inverted. (in math terms: they form a basis set. I'm mostly referring the STFT here, which is the 'common' FFT use. not infinite FFT).
Is there an example video somewhere?

Edit: Nevermind - I don't have autoplay active and there was no way to see that the "image" on the landing page is actually a video (no UI like a play button).
I realize that's not how it works. My point was that they're apparently taking deliberate steps to try to make sure the model trains over a large number of images and doesn't overfit on a small sample given a sufficiently specific "in the style of," etc.
STOP AUTOMATICALLY DOWNLOADING CODE FROM THE INTERNET AND INCLUDING IT IN YOUR PRODUCT AS PART OF YOUR BUILD CHAIN why do I need to say this out loud?
As far as I understand, this is just a typosquatting attack, or more like Google SEO squatting attack. There does not exist any normal Python libraries anyone would use under these names. These packages are often made as a clone from an official package, just adding a new name. There is no reason to choose a cloned package with different name over the official one.

This is business as usual for PyPi. I reported ~3 cloned malicious packages last year and they were taken down. Only very inexperienced or unlucky software developer would fall for this attack, because these packages are not part of any supply chain. Thus, I feel calling this a supply chain attack is incorrect. Maybe a watering hole attack would be more closer to the truth.
Python is pretty easy. You just add something like '-i python3 -p python3Packages.click' or whatever to the shebang and it normally works and you can keep adding '-p ...' flags (assuming the package in question is upstream.) I don't know enough about the state of node to comment.
I think you're missing that authors of tiling window managers don't actually want to go back to the X11 way of doing things. They don't want to write a basic window manager or a plugin. That abstraction boundary is bad and it's extremely limited. That's why the X Composite extension was created in the first place. There was a chance to go in the opposite direction with Wayland. People did actually make plugin APIs but they never became standard, few developers wanted to use them. Instead wlroots became popular because it allows a lot more power and flexibility over compositing. The compositing approach is what allows Hyprland to have those nice transparencies and animations. So it's not that I'm trying to be fair to Wayland, I'm actually trying to be fair to X11 compositors. You're skipping that whole step that happened in the mid-2000s when you make your comparison. People wanted to make compositors all along.
There's studies of life satisfaction by age and how it is U shaped.
High when you are young, high when you are old, and low in the middle 30s~50ish.

However for women, the later years life satisfaction never catches up to men.
Caring for both kids, parents, and eventually your own husband are huge factors here.

As people live longer, and children manage to remain under the partial care of their parents longer, the miserable middle age gets longer and more miserable.

I was remarking to my wife how, due to the wide age range of my siblings, my parents were dealing with children in the home & mothers in declining health for a total of 32 years! For 10 of those years they were dealing with BOTH kids at home & 1-2 mothers in declining health. With children & mothers spread across up to 5 states.

Suddenly at age 60 they found themselves empty nested & without parents to care for either.
They are clearly much happier than they'd been in a long long time.

Right now they are in good health, but statistically it's the men whose health fails first, which would put my mom back in the caregiver stage for 1..2..10 more years, who knows.
Becoming a Super Randonneur
> Suppose that's the case, the problem is that the resulting language of all the finite proofs can still be infinite and we again cannot enumerate and check all the solutions (since the final set is infinite).

The set of all strings in the language is only countably infinite (= same size as tne natural numbers), which means you will reach the solution string after a finite time (just count 1, 2, 3, ... until you reach the corresponding natural number).

What I'm saying is that if each individual problem has a solution in the form of an individual finite proof (the premise of your second point), then the above gives you a general algorithm for finding the proof for any given of those individual problems (contradicting the premise of your first point).

What this doesn't give you is a way to prove that a proof exists for all individual prohlems, because that indeed would take infinite time.

Ykonstant is correct in that your use of "undecidable" was confused; I just ignored that.
My understanding is that Apple has gotten a lot better about this with their bug bounty payouts and providing debug hardware to researchers, and it’s not like there’s not a ton of proprietary code running on most consumer android devices.

I would also assume the fact that their vertical integration all the way down to silicon is an advantage here as well.
Yes! Big fan of Look Mum No Computer and his series where he refurbishes and installs a physical telephone exchange in his museum:

https://www.youtube.com/watch?v=9rh50BSv_CE
Private jet emissions sky-high at Davos, group says
This is quite stupid in my opinion. I don't see how you "help" the language discouraging others from forking/improving the project.
I never trust a computer to not be compromised, if there’s any information so critical that it must be secured at all costs then I simply never let it near a digital device.
I think you are correct. The latest news of unsafe PyPy packages worried me.

Not always, but often I prefer development on remote VPS’s. For anything deep learning I pay Google a little bit of money every month for Colab notebooks, save a ton of my own time, and don’t worry about trying random 3rd party libraries. I don’t have this use case anymore, but I used to use very large memory VPS’s with SBCL Common Lisp and Emacs to work on an old project that required lot’s of data in memory - VPS’s are really cheap if you turn them off when not in use.

In the 1980s and a bit into the 1990s, I did most things in X Windows - I have thought about how good that would be for secure remote development, but text with tmux, Emacs, etc. is so much less hassle.
No. They are not the problem. They don't makes the laws. They don't accept the donations. They don't take an oath to serve The People. Etc. These people are a symptoms. To believe otherwise is simply a false mental model.

These "OMG Mr X..." and "OMG Ms Y..." and "OMG Company Z" - and the accused nearly always GOP'ers (which certainly doesn't reflect reality, odd huh) - is a waste of time.

How do I know it's a waste of time? Because we get one or so per month and...nothing is discussed. Nothing changes. In fact, the drone of stating the obvious just switches people off. How convenient.

The truth is, these distractions are another spin job manufacturered by The Politics Industrial Complex. So perhaps we start the discussion there then as that the foundation on which all other nonsense is build?

https://freakonomics.com/podcast/im-your-biggest-fan/

Finally, Trump said it best, via Chappelle on SNL. It's at the end of the monologue if you haven't seen it already.

https://m.youtube.com/watch?v=_m-gO0HSCYk
If the cars aren’t real, why does time need to be real? Can’t the people paid to run the race pause/rewind so people don’t suffer through bugs?
Github secrets are encrypted, right? I didn't think there was any way to access them without running a github actions job that deliberately uploads them somewhere else (or echos them into the log with rot13/base64 or something else).
The spring also provides the "snap" effect; the switch snaps to "off" (the shown position) as well as to "on" (with the ball pushed down between the contacts).
IANAL either, but the DMCA has been used (by the RIAA, MPAA, and friends) to takedown pirate content on Google. I’d assume the same arguments would apply here. It can’t hurt to try.
I love the simplicity, economy, and durability of cast iron. The set I've had for the last decade will most likely outlive me, and the more I use it the nicer it gets. This past summer I bought a new 13" skillet (which cost all of $40!) and spent an afternoon grinding it smooth with an orbital sander. Re-seasoning took a while, but it is very nice to cook with.