skysight-inc/HackerNews huggingface dataset:
> Assembler is a bijective mapping to object code, so of course a disassembly of object code is a derivative work of that code

This is already wrong. Assembly is not a bijective mapping. Different dissassemblers will generate different representations and even for the same assembler there is usually more than one way to generate exactly the same machine code.

Therefore your completely artificial distinction of dissassembly and decompilation breaks down.

> You can take a program that was written in C and compiled to x86-64 object code, and then decompile it into Rust or into Haskell or any other language. You don't have to decompile it into C. And, perhaps surprisingly, this alternate decompilation will still be just as likely as the C decompilation, to produce the original object code when compiled!
This is exactly the same

Your "Rust" program would still be a copy (or at best, a derivative work) of the copyrighted program and therefore a violation to distribute it without permission.

It is ridiculous to think that because I have machine translated a GPL C program into Zig/C++/Rust/whatever I can now freely distribute the translation under the terms of the "Do What The Fuck You Want To Public License". With such a ridiculous interpretation of copyright law, why even bother with the GPL? Quick, someone tell rms!

And obviously courts agree it is ridiculous, see e.g. Atari vs Nintendo 1992: "Even though the [10NES] program was written for a different chip and in a different programming language, these similarities suggested that the Atari program was not an independent creation, but an unauthorized copy."
Once again, Vultr snubbed :(
Meanwhile over in Chicago this is called "working as expected": https://www.cnn.com/2019/01/30/us/chicago-train-tracks-fire-...
I have definitely gotten infinite one-click captchas from Turnstile (because of being on a VPN I guess), I have also gotten non-infinite but multiple one-click captchas.

If they are not going to let me past, I wish they would at least come out and say it. Are they trying to waste bot time like someone stringing along a scammer? Not everyone on a VPN is a bot or otherwise malicious user.
They could have gotten lucky of course.
This post is basically a less-detailed blogspam of Cordia’s marketing page: https://cordiaenergy.com/our-networks/san-francisco/
Now I'm imagining the planet exploding and some aliens 30 million years from now

"What was that flash??"

"Dunno"

The end of our legacy haha. We really should get a backup planet sorted out at some point once we've fixed gestures at everything
If LineageOS gets ported to this I'm 100% getting one.
I think the problem is more along the lines of which particular Russians the Russian state allows to be considered ... and less changes in the individuals, either on the sending or receiving end of considerations.
> This is a Social Network for AI.

> No humans allowed.

Is there a social network where no robots allowed?
how soon is this going to be gamed using a strawman purchaser, to hold mortgage?
you get a low rate, they get a bump in credit rating.

it seems like it would be quite illegal, but a temptation nonetheless.
Melancholia the 2011 movie is exactly about this.
A clinically severely depressed woman is the best one a dealing with the upcoming end of the world.

Great movie btw. Highly recommend if you have struggled with clinical depression.

https://www.imdb.com/title/tt1527186/
Because not even the blockchain is an innovation.
"Scheme object notation" is called s-expressions :)

I'd argue that toml can be called "a Python(ic) object notation" in some sense.
I have worked with systems with nearly 100k lines code in Oracle stored procs, and another legendary place with around 4 million.

It was a nightmare. Deployments were very difficult, there was little tooling, reasoning about the system was difficult, and of course running so much code in Oracle required very expensive licenses.

And it is much harder to hire hard core PL/SQL devs over Java, C#, Python or whatever.

You really don’t want significant code in the DB. It can be useful for some cases, like automating audit tables, but that is about it.

And for triggers - I feel for anyone maintaining business logic located in triggers. What a debugging hell that can be.
Slack is just irc, Dropbox just nfs, Google just grep, Craigslist just newspaper classifieds, amazon just Walmart, Netflix just charter, hacker news just coffee shops and bars, and on and on, what's your point
Perhaps fruits and vegetables contaminated with microplastics were a factor.
So what's up with maintenance? The leaks seem trivial to locate and visibly waste both heat and water.

How is it more economical to have enough leaks that people start talking about it instead of doing proper maintenance? Especially since this situation seems fairly unique, I've never seen this outside the US, and could only name San Francisco and New York as places where this happens. So what discourages maintenance in those places compared to everywhere else?
Click on your profile, then select the settings gear icon. Scroll to the bottom. There should be a sign out option there.

Yes, it sucks and it seems more and more sites are doing this sort of thing (Nextdoor is even worse)
You think they love the job so much that they are NOT currently retiring ?
Super cool this is for screenwriters to knock ideas before making hige committments. Anything to get an idea away from the page.

Fantastic.
… and those who mistake it for trinary.
Yeah I really hated how the update just got rid of them. Why gate them at level 37? I'm at level 19 and I was able to understand many of those stories.
Ban all gambling adverts, say more than half of Britons
In case anyone missed it, the alfalfa is shipped to Saudi Arabia to feed cattle. Complete madness!
I'm honestly considering changing banks because my bank only supports SMS 2FA, and it triggers for every login. They need to at least adopt old school TOTP. In 2023, relying on SMS feels irresponsible for a side project let alone a bank.
I remember Musk even posting a picture of him and Brin partying after this story came out.

Seems like another WSJ hit piece to discredit Musk for no good reason (other than to appease short sellers)
>You should consider the fact that complexity will still be there, but it will be abstracted away inside the database.

Where Git isn't looking...
I'd consider myself the former: I use C because it's the only viable option for what I'm doing - but most of the time it's nothing to do with C itself, but the various extensions and builtins of GCC. It's the inline asm, the control of registers, placement of code and data, control of inlining, etc, which are missing from all of the C "replacements". The replacements assume you are building a user application on top of an existing unix-like OS or VM, but they're missing the parts necessary to write the OS or VM itself. They don't provide simple ways to use hardware-specific features.

Obviously there is C++ which can leverage most of this too, but C++ traps you into an ABI which is difficult to use from any language which is not C++.
We use triggers and notifications extensively.!it is great because we don’t have to run a message queue . the only concerns are that notification has a size limit that is quite small. Also, it is harder to implement multiple workers who get only some of the notifications to load balance.
If you actually want error-correction, I don't think either JSON or EDN is suitable for providing that out of the box. You probably want to provide error-correction out of band in that case.

With your argument, JSON is equally bad because you could have {"name": "wizzwizz4", "age": 16} and ooops, some things got deleted and now the structure ends up being {"name": 16} which isn't really a sound argument against the format itself.
The workflow seems like fine to me.

In the real world you (your users) will probably NOT want to send a copy of all mails (or only the suspect ones) to a gmail address, though.

More generally (and IMHO), transmitting unencrypted mail messages to an outside host could be seen as a security issue, as there is the risk that besides the phishing e-mails some of them (good, not phishing) containing some sensitve data are sent as well.
Have you swam in the Pacific in NorCal? It gets really cold most parts of the year. A 5/6 just won't cut it. An 8/9 might be getting there.
I am an adult who has built several Lego kits recently. These include the NASA Saturn rocket, the NASA LEM, a grand piano and a Fender guitar amp combo.

The plastic parts are more than just generic shapes; many of them are custom and designed for the specific kit. The plastic itself has a good feel and is durable.

The kits are unique and must have required numerous hours of research and development, prototyping and user testing.

The documentation is extensive, high-quality and complete. In addition to the instructions, there is nicely researched and presented material about the subject of the model.

If anyone is reasonably able to come up with a process to compete with the sum total of all of these elements, I wish them luck. I would also like to invest!
https://webauthn.io/

https://learn.microsoft.com/en-us/windows/security/identity-...

Exciting that another one of my tech dreams is coming true!
> > > Is 2x thrust accomplished by scaling # of engines, or are the engines 'more-thrustful' per unit because of engineering advances?

> > SV first stage had 5 engines, vs 33 on the Starship's booster. Which I think answers your question :)

> it doesnt, please eLI5

I kinda suspect bad faith/trolling, but if not... 6.5 times the number of engines for twice the thrust means that you are getting less thrust per engine.
“Interestingly, despite packing four large camera sensors on its back and a 5000 mAh battery, the Xiaomi 13 Ultra isn’t bigger or heavier than a Galaxy S23 Ultra or an iPhone 14 Pro Max.”

If by bigger you consider only 2 dimensions, sure.
> Women just express violence in different ways

Can you expand on this because it sounds completely baseless

> Capacity & propensity for violence isn't an exclusively masculine trait, but rather a core human trait

While committing violence isn't exclusive to males, males are statistically and historically much more prone to violence than females regardless of culture or race. There's plenty of data to back this up.
I expected real camera lens in a "real camera" phone instead of multiple tiny lenses covered by a shield that introduces its own problems.
Who do PagerDuty or OpsGenie use to monitor their services?
Oh you're giving lightning connectors too little credit. They also come with a LOT of logic to prevent people from charging their Apple devices with unapproved chargers. All added on top of USB 2 (and definitely against the standard, one might add)

Like a lot of Apple and huge company stuff in general, it's a flimsy reason to change something and introduce many limitations the huge company thinks will make them more money. It sure as hell is not about reversible connectors.
Gradients are not all you need
This has been posted and reposted continuously for a year and I still don’t understand the comparisons in the article. Either use SQLite across the board or use MySQL/Postgres across the board. Or do both. You can even model a self-managed rdbms install on the clouds that don’t have that turnkey offering. But mixing and matching makes no sense.

I’m a huge fan of SQLite and have open sourced some .NET stuff around it (eg https://github.com/neosmart/AspSqliteCache ) but learned a very expensive mistake in using it for an ASP.NET Core Project with the default pattern (i.e. with EF Core).

SQLite locks (tables or the entire db depending on configuration) upon write. If you use shared cache mode and WAL you can get very far with one write thread and many competing reads - depending on shared cache mode, WAL, and other options. I benchmarked the different configurations with one or more writing threads here to show how it scales: https://github.com/mqudsi/sqlite-readers-writers

But this approach is hard to model with EF Core. If you use the default request-scoped DI injected connection, you risk any writes upgrading the read lock to a write lock for the duration of the request. The better approach is to use the default request-scoped connection for RO operations and then request a scoped/transient DI connection for any write ops, but copying internal EF entity tracking state from one EF instance to another is tedious and fraught with issues. You’re at least able to work around this if you try to always keep in mind write transaction lifetimes, though.

The problem comes as soon as you need a “background service” in the sense of “an operation running independently of requests and parallel to them.” If that service needs a write lock for any amount of time, you’re suddenly going to be seeing write timeouts (since default behavior is to poll repeatedly until a write lock is obtained) and that is pretty much impossible to fix.

As one of the biggest advantages of using a resident executor like .NET or Java vs a per-request stateless option like PHP is that you can do stuff independent of requests, SQLite is tricky to use correctly in prod in this model.

The good news is that if you use the SQLite EF provider and run into this, it’s usually not too hard to switch to a real DB provider as a lot of the work is abstracted. (Especially Postgres because even manually crafted SQLite queries will likely run as-is or with little alteration, given that they are - largely - modeled after the Postgres ones.)

If you do want to build a (web or otherwise) service around an SQLite database, the best model I’ve found is to use a language with first-class channel (with queuing) support (rust, go, and of late, C# too) and have a dedicated write thread. Servicing threads should have direct RO db access but model any writes or updates as requests posted to the channel (or priority channel). Bonus points if your type system prevents you from accidentally or purposely upgrading an RO service thread/fiber’s db connection to an RW one.
> But you think that all stopped as soon as there was a legal option? Do you really think there are no people out there who can afford it but chose to pirate anyway?

Yes it did https://www.riaa.com/u-s-sales-database/ , that's exactly what happened.

As soon as they added a way to receive money, customers paid, it's visible on the graph.

If customers can't pay you, of course you are going to lose money.

> I don't know why people find it so hard to believe other than they are trying to justify their own activity. Do you think the media industry spent all this money on anti-piracy activities just for the fun of it?

It has more to do about content control than money. Guess who benefits the most of stricter copyright rules? The RIAA, MPAA and similar organisations, it's a conflict of interest. Being harsh on piracy is easier to sell than just "give us more power because we deserve it"
Gagarin: First in Space (2013)

Plot: Khrushchev selected Gagarin because good teeth and nice smile.
If you really, really need to be able to see a SQL schema representing the current state, a cheap trick is to run an automation on every deploy that snapshots the schema and writes it to a GitHub repository.

I do a version of that for my own (Django-powered) blog here: https://github.com/simonw/simonwillisonblog-backup/blob/main...
What makes you assume run-of-the-mill admin at a CC are paid well, or better?

Anyway, as far as the school is concerned, they can survive without a robust or effective CS department, but they can't survive without the admin, which is true. It takes a lot of work to run a college, and CS profs aren't the ones who do that.

Paying more to better CS profs doesn't make financial sense, because they're not going to yield more students as a result. So they'd be dumping more money on a teacher to teach the same number of students. And no matter what they could pay them, it wouldn't be enough to offset what they could make in industry.
> Anyone know what changed economically to justify the high US labor costs? Particularly compared to MX

My understanding is the US:

1. Is more politically, economically, and frankly physically secure than Mexico.

2. Has cheaper energy

3. Has a better-trained manufacturing workforce for the kinds of machine Lego is gonna use.
The discussion on security.SE seems to imply it's unknown: https://security.stackexchange.com/questions/107081/does-eve... so if you have a proof of your simple answer, I'm sure they'd welcome it
I saw some iphone pictures for the first time recently at a family event (I have a very old phone and don't take many pictures). They looked fine and I'd say more "professional" when zoomed out buy zoomed in they looked horrible and you could see all kinds of artifacts from whatever enhancement algorithms they use. For posting selfies on Instagram, iPhone is probably better, but for pictures of family for posterity I'd rather have the less processed version. That's what they're trying to show I belive.
Is California not able to export electricity?

The lowest I see in thee last week was 3.1GW of natural gas for CISO. Similar amount to the lowest gas usage last June and July (2.7GW I think on June 19)

https://www.eia.gov/electricity/gridmonitor/dashboard/electr...
I do not see USB-C coming. Apple will rather remove the jack altogether and go full Qi (and make the device 100$ more expensive because wireless loading adapter).
Reminds me the "fuck you project" by Nokia's engineers from the period when the company had been burning down - Nokia 808 PureView.
not my post but i see current USA federal reserve bank rate policy will cause slow painful end to big tech companies empire building policy. the growth religion must stop hiring endless layers of managers and ‘promoting’ good engineer from individual role to manager role. line manager with direct individual contributor report sit in useless meeting all day. zero value. if they not change this..they will die in market slowly and be replaced by new generation of companies.
Exactly, average, middle of the pack. If everyone is excellent then you just shift the average. Does that not make sense?
> it is possible to extract various types of information…

According to what definition of “extract information” are these ChatGPT agents extracting information?

Even granting a sense in which the above claim is true (perhaps limited to cases where the yielded text is actually true of the user), you make repeated claims that the agents can “predict,” “analyze,” and “infer.” There is more to prediction, analysis, and inference than the representation in natural language of those things. Just because ChatGPT produces sentences which have those linguistic forms (and even if those sentences are true) does not mean we can rightly climb ChatGPT can actually perform those activities. This is a problem with so much of the commentary around ChatGPT: it can produce the natural language outputs of some cognitive processes, but it does mean it performs those processes per se.

And that is fine! ChatGPT can plausibly be described as performing its own very special and powerful kind of generalized reasoning, I just think we should be careful attributing to it processes just because it can produce the corresponding linguistic forms.

Put another way, words like “inference” have a dual meaning: they refer to a type of utterance with a certain form and they refer to a specific process of reasoning. Production of the former does not prove the presence of the latter.

Along similar lines, why say your “Psychoanalyst” agent was “designed… [with] 20 years of experience in the field of profiling”? In what sense is that even remotely true? Better just to say “it was inspired by an expert with 20 years of experience, and we hope it performs with that level of competence.” But then why “20 years”? Would performance at the level of a 30-year professional be considered failure?
Nope, not in computer science
I'm winding down my participation. It's been a fun ride for the most part but it is really easy to get depressed reading a lot of stuff that gets posted.

Discussions tend to deteriorate quickly and quality comments with sources get buried. That isn't how it all started. I'll shut down my last account soon after overwriting and deleting all the posts.

It's fitting that Imgur is also gonna scratch all the content they have from people who never made Imgur accounts. I have a lot of tutorials, marked-up photos, etc that I used to help people thru issues on some of those niche forums involving home and auto repairs. It's good to know all that will be gone.

I'll be down to one site for online engagement and news.
I don’t know why non-photographers need phones with super powerful camera features. It would be nice if these manufacturers put serious effort into improving battery performance instead of camera stuff. Tired of my phone battery charge lasting not even a day
Triggers and stored procedures should only handle logic which you do not expect to change. They are notoriously hard to test and debug.

They are coupled tightly with database schema design. Making changes to them needs careful consideration and a extensive testbed environment which cannot be mocked with a fraction of the data.
Passkeys is a new FIDO standard that will let the private keystore be backed by the cloud. It was added to WebAuthn fairly recently. Having keys tied to specific physical devices was a terrible & frustratingly limited scheme that never had any hope. Now that there's something a little bit looser, there's some small hope WebAuthn starts to become interesting & viable. https://developer.chrome.com/blog/webauthn-conditional-ui/

Another huge challenge is that there are so very many ways for developers to use this tech. There are a truly humbling amount of scenarios & flows one can set-up. Many of the most direct paths continue to have the user already set up an account via regular email/password, so users still end up doing the same account management anyways. I'm missing the link to the wonderful wonderful guide I spent a couple commute rides reading, but it was one of the longest most technical pieces I've read in quite a while. "Introducing the WebAuthn API" is perhaps a reasonably ok substitute. https://medium.com/webauthnworks/introduction-to-webauthn-ap...
> it would be nice from a security standpoint of we could enforce some policies on our end to at least eliminate the possibility of settings some obviously weak PIN (0000, 1234, etc)

If your security model requires you retaining that level of control over your user's device security, MDM seems like the only option.
Because Microsoft's implementation is incredibly boneheaded, and doesn't allow the Google-style mechanism of username+password+Yubikey. They only support U2F/Webauthn as an alternative to a password.

I assume Microsoft is hoping to make Windows the main Webauthn provider out there, to tie online identities into the Windows login process for easier tracking/advertising.
I think it's an American thing. Our pipes are just that much freer. New York and Philadelphia systems leak steam, too.
Requiring a password for a hardware key doesn't add much to the key already being in your pocket or locked in your house/office. It helps against an attack that's specifically targeting you as a person but it's basically just a nuisance for you when considering generalized account attacks.
I also mostly use other languages these days, but there's still something about C that always feels like coming home to me. Maybe it's because it's what I used during my apprenticeship which is where the magic of programming finally clicked for me (after a failed attempt taking a programming class). Maybe it's just the simplicity and lack of rules to learn.
Which makes about as much sense as saying "We the collective British white people don't want anyone building mosques in London".