skysight-inc/HackerNews huggingface dataset:
AV as a concept needs reconsidering: the problem is that attackers can test to see if their malware is blocked and tweak it until it isn’t, so there’s always a lengthy period where they can launch attacks which aren’t detected. AV also doesn’t help with the common case where something runs entirely in memory in an exploited process - the vendors will blather about behavioral checks but that doesn’t seem to do more than keep marketers employed.

Where I’d prefer to see time going is basically two areas: rather than trying to catch every possible bad thing, only allow know okay binaries to run (the hard part being supporting software developers), and extensive sandboxing to catch up with Apple. It’s hard to block every possible bit of bad code but we can minimize a lot of the damage if, say, a malicious PDF file didn’t mean the attacker could just read AWS credentials or SSH keys.

The other benefit is that AV software has a history of security problems. Most of that is that the vendors still use C like it’s the 90s and putting complex binary decoding logic into a privileged context is a recipe for bugs.
>I just treat my Tesla like a car from the 90s and always do the standard “sideview mirror into the over the shoulder” glance whenever I’m changing lanes.

You are doing the correct thing anyways. I find it so concerning that so many people rely on the sensors ONLY. The sensors can fail. Your eyes/attention can fail. But having both fail simultaneously is rare and so you should employ both anyways.
CU Boulder has an online MSc in Data Science for about that, too (15k). [0]

I'm not sure if we are seeing a race to the bottom in ed-tech yet, there is still a long way to go, but it has certainly dropped after COVID. the BSc is still the most costly, but consider that a year at CU Bolder for out of state students is roughly that so it goes to show just how drastic things are getting.

0: https://www.coursera.org/degrees/master-of-science-data-scie...
Reading the text of the law and the history of how and why it was drafted.
I don't think many can read code efficiently, so people who can do that are special. People who can't have to rely on documentation or slowly trudging through.
Flagged for personal attack.
Ok, I saw this in the new wires the other day and wondered when it would come up.

They know: humans can agree on what primate gestures mean, most of the time.
They don't actually know: what the primates believe the gestures mean.
And: even if there is agreement, why does that say anything about our language being evolved from a common ancestor gesture language? I mean, ok that might be true, but why is this evidence for that.

Let me present my own survey data: I have deer in my yard sometimes. They know that once in a while I will throw out a couple of deadfall apples. So they ask for apples by standing, looking at me through the kitchen window for 10 minutes.
Does this mean that English evolved from Deer-speak? No. The fact they're standing staring at me for a long time implies they're asking for something. Food is the only thing that fits the context. I suppose if I gave them food and they carried on staring, then I might assume they want a back rub...
Exciting to see Decorators on the next release. I personally find them really neat so I want to use them in some way. Unfortunately the last few times I tried it using the experimental flag, it came with more trouble compared to not using it. Will probably revisit it when it's out of beta.
I see your point, but I'm using the word loosely to refer to internet flamewars about nations. One could also mention the site guideline about ideological battle. Either way, this kind of flamewar comment isn't what we're looking for here, not least because it tends to evoke worse than others (although it didn't do so in this particular case).

https://news.ycombinator.com/newsguidelines.html
I hate the experience of a new code base when everything is so alien that at first it seems horrible. Then when you learn the ideas they're using you start to like the way everything is put together. Then you start finding navigation really easy. You're able to make changes quickly and can be sure they're safe. Then that project ends and start again. Each time it get easier as you see the same patterns but so much time gets sunk into learning something that you'll never see again.
related "Explore Wikipedia's New Look" https://news.ycombinator.com/item?id=34429175
Without any controls (e.g. more distant apes such as orangutans, or even other expressive animals such as elephants), this study is completely meaningless.
The article was pretty brief. Is Home Depot alleged to have broken any kind of law?

(I don't know much about Canada's legal system.)
Maybe not the case, but often that style was made using Excalidraw: https://excalidraw.com. Playing around in it, the font at least appears the same.
One could argue that if random text generated by an elaborate neural net can do you’re job you’re bloody lucky you’ve been paid (so much?) to do it…
... except it will be difficult to judge the correctness of something you make up - better to ask it something you know, so you can evaluate the meaning, not just the wording.
Sylver: A Language Agnostic Tool for Source Code Exploration and Analysis
Yes, "high value" is relative.

But a criminal gang won't risk attention, to steal some bucks of a poor linux hacker, who potentially will raise hell, to find out how that steal happened.

Which is the reason linux is more secure in the first place - there is simply plenty of easier prey elsewhere.
You are right. I think that part comes with experience.

I’ve been coding my whole life (since 9 yo, am 35 now) so a lot of this stuff is very deeply ingrained.
YouTube says it’s fixing the bug that let someone fake a new oldest video
Weaviate – open-source vector search engine
Not everything JK pulled from is out of copyright. But generally Authors are allowed to reuse all sorts of things. Compare say Battle Royale to the Hunger Games. Writing a story about Kids fighting to the death doesn't give you a monopoly on that storyline.

See this link, lots of recent works in there.

https://en.wikipedia.org/wiki/Harry_Potter_influences_and_an...
Who said they don't prevent it? TIL that giving someone steps is the exact same as saying a company doesn't prevent you from doing it.

I provided a way for OP to do it, that's all. I even called out the hoops.
If they lock you out of legal kindle purchases I would think they have to refund? Or is there obscure ToS that gives them the right to rip you off at their leasure?
The one genuinely successful Lisp company I can think of was ITA/Orbitz. They were acquired by Google, who AFAIK still maintains the Common Lisp code base.
How does this work with dynamic libraries (shared objects). In Windows land, you get a .lib with a .dll and afaik that has hardcoded function addresses. You statically link the "import library" .lib with your exe, so if you randomize the function addresses and rebuild just the .dll later, it blows up (you need to rebuild all exes as well).

Is dynamic linking in Unix world truly runtime-only (a-la "GetLibrary" / "GetProcAddress")?
Is this a typical board action?

The board granted itself extensive power through a list of resolutions added to the typical bylaws of the company at the so-called “extraordinary shareholders general meeting”. It’s rare to see an extraordinary resolution, so it’s outright mind-boggling to see 35 resolutions. This is one of the broadest power grabs I’ve ever seen.

Is this a common restriction on shareholders?

When NSIG (National Silicon Industry Group aka China) bought the 14.5% stake in Soitec, they agreed to a standstill agreement on the shares ... Should NSIG Sunrise S.à.r.l acquire shares in the Company before the expiration of the Shareholders’ Agreement at the close of the Shareholders’ General Meeting called to approve the ﬁnancial statements for the ﬁscal year ended March 31, 2021, it would lose its rights relating to the Company’s governance

> There doesn't seem to be anything stopping the shareholders who make up the free float from voting out the board or accepting a tender offer.

What are some good examples of uncoordinated free-float shareholders influencing corporate governance?

HN ranking history of this thread: https://hnrankings.info/34539669/
Looks like something one could make pretty easily with Excalidraw (https://excalidraw.com/) although the font seems slightly different.
They specifically fixed that problem after his escapade.
Remote work is the best thing to happen to families in decades
The means is the action, not the effect.
Grouphug,ytmnd used to be fun. Alot if cool websites are gone
I couldn't disagree more with this post. Teams offers such a better solution than Slack for virtually everything, in my opinion. Slack's voice/video chat is a toy, and it's unbelievably slow and unreliable. I am so glad I don't work for a company that uses Slack anymore.
Beautiful. Reminds me of Satriani's Day at the Beach https://www.youtube.com/watch?v=XvmkMkQHAPU
But what does it mean, biologically, to be “pretty smart and good at understanding animals”, and from where does this ability arise?
It’s honestly something of a marvel to see a big ol’ framework like SQLAlchemy successfully manage these big structural api changes. The changes that have lead up to v1.4 and v2.0 have been very significant improvements to the user interface, and have kept the library up to date with the language in a way that is rare to see for a code base of such complexity. Also the new unified bulk insert interface is a big win for my ETL workflows.

Hats of to everyone be involved!
calling home or exfiltration is indeed a serious threat. otoh, it's fairly straightforward to partition / reduce / sandbox environments in Linux. do you need to touch AWS infrastructure from the same account, host, vm as you read email or surf the web? do these environments need full, direct internet access?
In the case you're describing, the hypothetical person is going into the hobby for the wrong reason. The primary objective should be the hobby, if you happen to find someone you get on well with all the better.
Dragons usually wore more jewelry
What kind of background would someone using LiteX have?
I can think of a lot of reasons a practice might be standard without being best, across basically all domains.

Americans overeat and don't exercise, as a standard practice. Do you think that's best?
Two of the most ubiquitous categories of malware today are ransomware and agents used to steal secrets such as web browser sessions. Because both of these categories interact with files the user has access to anyway, privilege separation (especially only the basic form of privilege separation traditional on Linux) is of little help. The attack surface is all owned by the user anyway. Both sandboxing (such as kernel capabilities) and mandatory access control (SELinux) are helpful in reducing this possibility, but both of these are relatively difficult to use and so not common on workstations.

It's also reasonably common for an exploit to become known by AV vendors and have signatures released before it's been widely patched. Turnaround time from a major exploit becoming known to the industry to a signature release by AV vendors can be as short as a day, especially with the significant intelligence sharing that now happens in the AV industry. AV vendors sometimes release signatures before the exploit is publicly known as a result of information-sharing agreements, although this is a touchy issue because the signatures themselves become a form of public release. While keeping software up to date tremendously reduces risk, there is still a window of opportunity.
Sci-Hub: knowledge as a human right
After the last 6 months (to say nothing of the last few centuries of capitalism) you still believe companies care about what employees want?

Executives/Founders get loans against their illiquid but enormous equity, everyone else can go to hell as far as the decision makers are concerned.
Haha, I had the same thought about the program and the opposite conclusion about the font! Many characters like g and p look similar, but the lower case t has a curl on the bottom in Excalidraw, and is straight in the article's diagram.

Edit: on second look, it is the same t. I saw some images in a search for Excalidraw with a different t, but when I tried the actual site it was the same. Sorry for the noise!
There is a mix. Some things you can learn from the code other things you need documentation.

Often it's the domain knowledge that is hard to glean from the code. Especially when bug fixing. For example:

The domain expert told me this output was wrong but the code appears to be doing exactly what it claims to.

Trying to get a domain expert to set down and explain why the output is wrong is a skill that took me way to long to develop. Now sitting down with a pen and paper running through the logic with an expert is one of my most treasured information gathering techniques.
I canceled Prime a few years ago and haven't looked back. I buy books from Barnes & Noble or Bookshop.org, or directly from the publisher. If I need electronics, I go to my local Best Buy. For regular household goods and cleaning supplies I go to your average supermarket.

I canceled Netflix, Disney Plus, Spotify, and Dropbox forever ago but I do subscribe to iCloud, Apple Music, and HEY.com for email. I don't own a TV, but I'll buy or rent movies on AppleTV from time to time and we'll stream those on the laptop before bed. I haven't had social media accounts since high school—no LinkedIn, no Twitter, no Facebook, no personal website. It's better this way.

I did buy good speakers for the living room, and these days I try to treat music listening as an "event" of sorts, instead of mindlessly putting in ear buds and compulsively skipping songs, bouncing between playlists, or listening to podcasts that I immediately forget.

There was no "final straw" for me, these services just weren't needed. There are so many ways to consume and create that don't require a subscription.
Not only are the ORM objects typed, the query results are typed too. Last time I checked on 2.0 progress there wasn't a feasible way to implement this, so I'm thrilled to see that it made the release.

# (variable) stmt: Select[Tuple[int, str]]
stmt = select(User.id, User.name)

with Session(e) as sess:
for row in sess.execute(stmt):
# (variable) row: Row[Tuple[int, str]]
print(row)

# (variable) users: Sequence[User]
users = sess.scalars(select(User)).all()

# (variable) users_legacy: List[User]
users_legacy = sess.query(User).all()

https://docs.sqlalchemy.org/en/20/changelog/whatsnew_20.html...
Yeah, I’ve always found this complaint weird. It’s like that in Unix and 0 being true (or default) while 1 is error also feels more intuitive to me.
ChatGPT made a nice summary.

> Provide me information on Urbit.

Urbit is a decentralized, functional operating system and network, which
aims to provide a secure and private computing environment for users. It
is designed to be a platform for a new decentralized internet, and it
uses a unique architecture that combines elements of functional
programming, peer-to-peer networking, and blockchain technology.

Urbit is still in development and not widely adopted yet, but it's a
project with a new approach to computing and network, that aims to
provide a more secure, private, and decentralized environment for
users. The goal of Urbit is to provide an alternative to centralized
systems, where users have more control over their data and devices, and
where the network is more resilient to censorship, surveillance, and
data breaches.

Answers, albeit very generic, the what and why.
My team uses Slack and I can't imagine working with others without it. Sharing ideas, code snippets, images, video, zip files, ... what would one use without this? There is no replacement for Slack. Heck I even slack myself all of the time.
They're also not accounting for cross-species training in the first place. The number of apes that have seen and emulated humans, then passed emulation to their children is not zero.
From @mx-psi

> Speaking as a Collector contrib maintainer, I just wanted to say that I am not going to continue reviewing this PR or start reviewing other future PRs related to the Datadog APM receiver to avoid any semblance of conflict of interest given my role both as a maintainer on this repository and as a member of Datadog's OpenTelemetry team.

And from their GitHub profile:

> Open Source Software Engineer at Datadog , focusing on OpenTelemetry

What's the conflict of interest exactly? You work at Datadog, supposedly to work on OSS, with a focus on OpenTelemetry and you don't want to review Datadog related code for OpenTelemetry? Sounds weird, that kind of profile is exactly the type of person who should be reviewing the code, they have knowledge of both sides of it.

Rather, it sounds like Datadog is walking back and don't want to support OpenTelemetry if it means it'll support their own tooling, instead of just others.
I'll reply here (because I simultaneously replied to your other comment but removed it). I also thought it was funny we had come to opposite conclusions based on the same data.

Type out "Bottom-up" in excalidraw, it matches perfectly. The lower case `t` has a curl on the bottom in the diagram too.

EDIT: Re Edit:

No worries about noise. I had a good chuckle with our near simultaneous replies which was nice after the way our project has been going this year.
I’d say it’s more tolerance or pluralism versus universalism. Neither Christian conservatives nor woke progressives are deliberately trying to “oppress” anyone. Both believe in a universal morality, and believe that the world would be better if society operated according to their moral principles. And both are willing to use institutions and social and legal coercion to get people to embrace their ideology. (I don’t mean to characterize either side pejoratively. There’s an internal logic to both of you start from the assumptions they believe to be true.)
Your objection reminded me of when I was a senior in college, and for independent study credit I helped a couple of postdocs with a psychology paper they were writing. They were concerned with researcher bias in category selection in surveys. Good for them! But their solution was to offer much more free form surveys and then have us, the researchers, spend many, many hours examining the individual surveys and picking categories to make up to fit the responses. I completely failed to see how this fixed anything as it was still us, the researchers, choosing the categories, and they failed to seem to want to comprehend that there might be a problem with their approach.

The other undergrad who was also working with us approached me and thought we should ask for our names on the paper. I told him I didn't want my name associated in any way, but that he should shoot for the moon.
Spotify after the whole Neil Young/Joe Rogan thing. Using Youtube Music instead, which is nice because I watch Youtube mostly on the TV, so I don't get ads. The Youtube Music app is not that good, but it's ok enough to avoid Spotify
Let me introduce you to a security topic called ‘compliance’.
It screams "I'm about to quit"
I've shared several untraditional remote work day routines (including my own) here:
https://www.remoteworkprep.com/workday-design#workstyle

Hope it helps you with ideas!
Uh... How? You'd need an entirely new fuel system at a minimum, even if you could reuse the rest of the powertrain. And hydrogen tanks are a lot larger than a gas tank, so finding a place for it might be difficult!
> random text generated by an elaborate neural net

This isn't a good summary of ChatGPT or any AI that would take white-collar jobs.

ChatGPT (and its competitors/successors) is trained on the work of millions of actual humans over the course of billions of hours.

If you took away ChatGPT's ability to be trained on the un-reimbursed work of others, it could never replace anyone's job.
Ask HN: What do triple-asterisk HN replies indicate?
A few times now I've gotten the following email from hnreplies.com:

> [SOME_PERSON] replied to your comment [link]:

>

> * * *

Then when I go to view the subsequent comment, it is filled in.

Is there an HN client which posts this initial message?

Or is are the individuals doing it manually? Is there a subculture phenomenon occurring?

Cheers,

Md
Well there's a couple problems. A) virus companies feed the FUD to make it seem really important and worthwhile B) virus writing folks have figured out how to make an arbitrary number of binaries that the virus checkers don't catch for days or weeks C) if attackers are running binaries on your system, you have problems than antivirus is not going to catch or fix.

Virus companies seem to focus much more on marketing then technical excellence. They typically run with full privs, regularly download code/rules from a central server, and are often written poorly. Seems like the industry is awash in security issues: buffer overflows, false positives, false negatives, not checking signatures on downloaded rules/code, and breaking various APIs, network protocols, etc by playing man in the middle. Even things like proxying SSL to scan traffic for SSL downloads ... but failing to check the cert.

So I see little value in running a closed source daemon from a anti-virus company to catch binaries that no serious attacker would use anyways. I trust the binaries from the OS's repos MUCH more than the antivirus programs. Similarly I don't trust IBM's BigFix that was malware Gateway used to help profit from tracking users and showing ads with their special "dock" that came installed on Windows systems. They of course made it very hard to uninstall, since that maximizes their profits.

Generally it seems like the wrong approach. If you want to do it right, have a whitelist for approved binaries. Ideally hooked up to your local mirror/repo so you can have approved signatures for all binaries BEFORE said binaries land on your Linux boxes. Spend whatever resources you would on anti-virus on patching, reporting, monitoring, firewalls, training, etc.
One of the best thing about google is that outta free. Charging a premium subscription for Google is no longer google but a different product all together
Is it possible for a topic like this to be discussed in an informed manner on a site like HN? We're all wealthy elites dating supermodels after all, right?
Seems they are not (Meta is mentioned on their profile), but it doesn't make sense either way. Datadog should not be pressuring either their own employees or others to add Datadog relevant collectors to OpenTelemetry, especially when their public position they put out is that they "love" and support efforts like OpenTelemtry.
I was wrong. It seems they use fall precision. So 350gb.

What is amazing, human language (languages?) and knowledge encoded in so little space.
>...all that know-how was stolen by China, who isn't interested in quarterly profits, but in global hegemony...

This seems a little simplistic? "China" isn't a monolith, and I'm pretty sure Chinese companies are just as interested in quarterly profits as Western ones. It's not like they're all state enterprises. And they didn't "steal" know-how - they earned it, by doing stuff (aside from the odd case of corporate espionage, which certainly cuts both ways). Nor is the United States any less interested in global hegemony than China.

I suggest that the reason for manufacturing moving to China is simply because labor is cheaper there (large population and weak labor laws). The Chinese government has played its hand well, but it doesn't represent some grand asymmetry in strategic planning - it's just the hand of the market as always.