skysight-inc/HackerNews huggingface dataset:
This is the decision: https://edpb.europa.eu/our-work-tools/consistency-findings/r...

From the press release:

> The inquiry was initially commenced in August 2020, and was subsequently stayed by Order of the High Court of Ireland, pending the resolution of a series of legal proceedings, until 20 May 2021. Following a comprehensive investigation, the DPC prepared a draft decision dated 6 July 2022. Notably, it found that:

> 1. the data transfers in question were being carried out in breach of Article 46(1) GDPR; and

> 2. in these circumstances, the data transfers should be suspended.
> If a QC could be made to run for 2^20 (ish) longer and to have 2^3 better quality than SOTA then they could do this on it

In essence, if a breakthrough happened it would be a breakthrough.
> Where data is processed should not affect the care with which it is processed. I can conceive of some verifiable processing package that ensures data can be processed wherever and still meet regulations. Can that be part of the future?

To an extent GDPR already allows this. The fines are only occurring because Facebook is transferring data into a jurisdiction which doesn’t have strong enough data protection laws to satisfy GDPR.

In the U.S. case specifically, it’s issues around laws that allow the U.S. government to force U.S. companies to handover data arbitrarily with very little (if any) due process. If the U.S. modified their draconian laws to ensure that everyone was afforded due process before their data was scooped up by the U.S. government, then there wouldn’t be an issue.

Unfortunately verifiable processes packages don’t solve the fundamental problem that the various three letter U.S. agencies can send a secret order, with effectively zero judicial oversight, to Facebook and compel them to handover data, plus gag Facebook from telling the individuals about the demand.
You don’t need Docker, you just need a virtual env for each random thing you try instead of making them all conflict with each other. Maybe some day pip will add a switch to automatically create one, but until then,

python3 -m venv venv
. venv/bin/activate

before you try something random.

Also, `python` is usually Python 2.7. If it is, I advise removing it from your system unless you have a strong reason to keep it.
> A classic job interview question is finding the employee with the highest salary in each department.

Here’s a cheat code, in case you need to write a database query and don’t remember all the fancy join tricks: Problems like this often have a very straightforward solution with subselects. In this case, the main select gets the departments, and a subselect (with limit 1) fetches the top employee for each department.

That’s a very natural, compositional way of thinking. Granted, it’s not the most optimized way to do it, but more often then not, the resulting query plan is perfectly fine.
The problem usually isn't that it's a cheap cloud service, the problem is usually that their cron task is hourly, or more commonly, their scheduled tasks depend on a non-cached page of their website being hit (how people generally mismanage WordPress), but traffic is of course inconsistent.
Wazaaaaaaaaaaaa
Sure, but the business model for the entity providing that sucks. Practically infinite amounts of possible exploits and extremely finite resources to detect them. Either that or you are back to where you started with a web of trust.
co_<whatever> has become a meme in the C++ community.
So far there seems to have been a pretty consistent ebb and flow. That approach is deeply out of favor right now but I wouldn't put money on it being permanently gone.
AFAIU It's not a blanket ban on all data transfers, so if a user clearly wants and authorizes it Facebook can still show their profile and posts to people in the US and transfer data as needed for that.

But the legal situation is such that a controller needs to be very precise about what they transfer and how they justify doing that. Which is difficult, which is why there has been so much noise about trying to find something that again lets companies just say "processing in the US is possible under the same standards as in the EU, so we can do all our processing wherever we think is convenient", which saves them a ton of work. But I'd expect until the US is actually willing to make legal changes any such thing will be rightfully rejected by the courts again.
> Ok, so I'm not sure what here _really_ benefited from a quantum computer.

No quantum computers were harmed (or even directly involved) in the making of this press release.

It's a simulation.
I think it's the exact opposite at play here. There are many countries with millions of people, thousands of Debian(-like) users that get MITMed constantly. There are a few organisations where such MITM is useful and someone provides caching. The cons heavily outweigh the risks but you're in a privileged situation.
This nicely touches on the variants of rules. I liked the distinction of the thin rule, which can be reasonably adapted and a thick one with caveats where the thin one has failed to curb cheaters.
I always find this question interesting.

Is there a money to be made in a company that main purpose would be to provide periodic check on the source code dependencies. So that for a certain amount of payment, you get to submit a list of dependencies and they monitor the source code and give a report with that changes, problems and security issues. So it is like a Source code check as a service.
That might require them to put replicas of the search service in Asia, and operating a distributed system over distant geographies is a hard operational problem.
Is Meta a government entity now? Last time I checked, it was a public for-profit company, the money they pay the fine with is money they extracted from other companies, not from the government itself.
Her life's biggest highlight is being sacked by Google whom she had given an ultimatum which to me was unfair.
Machine Learning 103: Exploring LLM Code Generation
I don't think NV sales sagging will happen any time soon. It's more of a case of moving a small amount of product at once and getting their name in the press than that it is a side bet.

Note that if QC does take off NVidia won't be taking any of that cake because they are simulating what it would be like to have such a computer and if they would have one they wouldn't need GPUs to pretend they do. From a technical perspective this if for NVidia not much different from any other HPC sale.
Sure, some of the people who currently pay for art will stick with human creators, but the majority won't. An average person who buys a magazine or a computer game or watches an ad won't care if the illustrations inside are human or AI made.
Is this some sort of scam? I don't understand why they would receive such huge amounts of money, for doing nothing other than choosing to leave their jobs.

It seems especially bizarre for a non-profit organisation where the bulk of all the actual work is done freely by volunteers.

What is actually going on here?
Straight into my top 10 favourite HN comments of all time
Reddit is becoming more and more dead as time progresses, I'd say its high-mark was the mid 2010s, until 2017-2018 or so.

Of course that its actual traffic might still increase for some time, but it has lost the (counter-)cultural ascendency that it used to have. That's what you get for hiring a former Atlantic Council member as your "policy director".
It's an entirely different world, make sure you want to transition and it will be highly dependent on organization so talk to the org and work out a path, or talk to managers in other companies to see about it.

Always easier within the org though, your placement will depend on the opinion of one or two people ultimately.

It's much more difficult to change jobs as 'software manager' they tend not to hire like that, it's odd and good managers are not valued enough.

In many orgs they skip manager and just go to directors.
I think this is what WhiteSource does. (it's also apparently called Mend now)
Some people have argued that we should work inside expendable and tightly restricted VMs when doing anything that involves fetching packages from a repository using a package manager. I used to feel that was quite an extreme position but it does make sense because the risk we're discussing is really a consequence of two systemic vulnerabilities. Mainstream desktop operating systems have weak security models that aren't fit for purpose in our modern online-first world. And software development has evolved this strange philosophy that fetching someone else's code for every tiny thing is a good idea and code in someone else's repo is better than anything we could write ourselves. Those are both terrible ideas but neither is going to change quickly so maybe the sandbox advocates aren't so extreme after all?

Also did anyone else notice the timeline at the end of the article where it took 10 days to remove these packages from the repo? I could understand some hesitation if a package has something like debatable telemetry but surely behaviour like obfuscated code should result in an immediate block by default?
Yeah, android tried this initially with the permissions system. But literally every app requested every permission and it became completely useless.

As a user, you have no way of meaningfully using this info.
You have to be able to see the problem with this reasoning right?

https://twitter.com/nathanwpyle/status/1031008855210123264
To put into perspective: the Wikimedia Foundation manages one of humanity’s greatest achievements.

I thought it was an open secret that they’re pretty flush with cash overall despite the constant nag for justadollar’. I dunno, maybe I’ve been desensitised but these numbers are not horribly shocking to me, and when put in the context of the immense value the project brings to the rest of the world…

I mean come on, look at some of the comments posted here. “Con artists”, are you serious?
> hard to see how they can continue to service global markets without a huge per-country localisation effort

You (the company) could maybe instead protect everyones data equally (or rather, avoid slurping up as much personal data as they possibly could), then you won't have to go through the whole process of making everything per-country localized.

By GDP, the European market is the second largest in the world, it's hard to imagine US companies would try to avoid it without thinking about it for a good while.
Hardly a newsworthy article IMO.
Great, this is the way to teach US corporations what the word "privacy" means.
I don’t think GP is suggesting that the fines should be calculated based on net income. Just that you should evaluate the _impact_ by comparing to net income.

So in Amazons case you absolutely see a fine greater than their net income, but still only 1% of their revenue, and obviously such a fine would have a greater impact on Amazon than the equivalent 1% fine applied to Facebook.
> It’s not the most optimized way to do it, but more often then not, the query plan is perfectly fine.

Depending on the details, the query plan might be exactly the same. I remember once (in SQL Server 2000, so long time ago) writing the same query in 3 completely different ways, only to see the DB generate the same plan for each one.

It would surprise most people how sophisticated the query transformations databases can do.
The fine may not be significant enough given how much Meta has profited from this, but that was only one consequence of the decision.

The second consequence is that they have to stop doing this, which is far more damaging than the fine.
Having the datacenter that stores your data in another region does not affect your privacy in any way.
So work is killing you? And I suppose you've built a lifestyle that requires you to continue no matter what?
Swift's protocols are an evolution of protocols in ObjC. They offer additional features to make them safer and easier to write.
A lot of data science techniques came from chemists. I don't think this comment really holds water.
Yes, again ChatGPT was better than just random search. If writing this blog post teaches me something, then it teaches me to use ChatGPT more not less ;)

BTW, I fixed the 1M benchmark and Elixir is included now.
Have a good long think about why you want a management role. It is very different, despite the fact that if you become good at a contributor role you often just get promoted into management (I did).

If you like mentoring people, sharing knowledge, delegating tasks (yes, even the tech work you love) and dealing with things blocking the team like politics with other departments then go for it.

It can be rewarding but it can also be very draining and stressful, and isn’t for everyone, and I wish someone would have prepared me better the first time.
> Pictures do not allow for proper discussion or easy discoverability of comments.

That has become an asset, people have grown tired of endless and pointless discussions.
I enjoy reading career advice from Firstround's Review, esp. this collection of articles for "making the leap from IC to manager." (1) Then I'd go to ADPList (2) to find a mentor that'd help transition.

1 - https://review.firstround.com/collections/advice-for-making-...
2 - https://adplist.org/
it’s the same in japan.
That’s exactly what it means. You can favorite posts, comments, upvote and downvote. It’s not algorithmic but it’s still a social network.
This is even more true considering that VS Code sends telemetry by default (opt-out), making it as a whole "malicious PII stealer code" in the article's terms.
Are we more cautious? We might not fall for the old scam of extension bars in the browser and approving spam notifications but I'm sure plenty of people would blindly follow a tutorial to run commands in the terminal and install dependencies to run code.

The most recent example was probably Win 11 replacing the status bar and people recommending all kinds of anonymous software on GitHub. It's open source and works so it must be alright.
Good! Now, fine them that amount another 485 times and the problem will be solved!
Uh, no, unless the SanDisk cards that were packaged with official Pi 400 kits were counterfeit.
Eh. Patience. In the 70s, text editors, operating systems, and just about everything came from corporations, governments, and perhaps most commonly, universities when it came to software tools, and was hosted on their systems. As the hardware became more accessible, and the power needs diminished, it moved out from the mainframe to the client side.

This process will take time, but if we don't have the equivalent of chatGPT available on a home system (if not phone sized device) in 20 years, I'll eat my hat. There are already open source projects on Github that'll let you roll your own, but good luck coming up with the computing power.
I'm not sure why you are accusing the US of mass surveillance and deliberate culture erosion.
Why to delete anything sellable? I always do all kinds of illegal copies of somebody's PD on all places I ever worked as employee. Typically by stealing some papers from garbage because photographing takes too much time per one 'drop'. With enough wit of choosing workplaces I use to have some incomes from my strategy.
This comment doesn't even make sense...
https://huggingface.co/spaces/HuggingFaceH4/open_llm_leaderb... is one place.
It seems to me that they have lots of cash available and are financially able to “do the right thing.”

Firing people is not fun and is emotionally difficult. I would love to give 1.5x salary but there’s usually some controller restricting me to something I don’t like but can’t change.

Wikimedia doesn’t have a duty to maximize shareholder equity and they have tons of money, so they can. I wonder what else they spend similarly on.

I typically donate to wikimedia and behavior like this makes me rethink. How many more people need to donate to allow these people their money?
People freed from the shackles of ethics taking as much as they can get? Who cares if they deserve it? /s Not a crime, only grifters griftin along, same old.

Sorry for the negativity, feeling bitter about it.
Checking the area out on Google Maps is instructive.

https://goo.gl/maps/ToPPHx2Jjdz8rj5E7?coh=178572&entry=tt

The above takes you to the Ivanpah Concentrating Solar plant. You can also see the golf course that someone built in the desert next to it for scale.

https://www.google.com/maps/@33.7410557,-115.3975396,138227m...

The largest solar installation in the world, it's truly mind bending in size when you zoom in.
No, they wouldn't. An appropriate fine would have been given to a sole proprietor.
Named parameters in shell scripts and Makefiles
Not really, if you are aware of that and have been actively been opting out of vscode telemetry it is downright malicious of addons to do it behind your back anyway.
Yeah, maybe. 30 actually...
The author mentions having to get over the lack of upsert when moving from Oracle. But readers might like to know this isn’t a problem anymore since Postgres got “INSERT … ON CONFLICT UPDATE …”.
They broke a law that violates basic human rights. Privacy is important to EU citizens, and unlike the US they largely enjoy that right thanks to laws which are enforced.

Nothing to do with taxes.
It seems like we just can't have a break, can we? Any technology that looks cleaner than the previous one (solar panels vs coal burning, electric cars vs petrol exhaust, ...) seems to have its own way of ruining the environment anyway
Why have a job when you have all the knowledge to sustainably live off the grid?

I expect self-employment to skyrocket.
"Con artists" might be a strong term, but honestly I can't blame people for being upset. Obviously Wikipedia is a pretty useful tool, I don't think anyone disputes that, but I think people can be forgiven to think that half-page-sized banners begging for money indicates that they're strapped for cash.

They will have messages like "If everyone reading this right now gave a buck then this donation drive would be finished in five minutes". In hindsight, it feels a bit deceptive even if it's not an outright lie.

Should anyone go to jail for this? No, I think that would be ridiculous, but it does kind of erode a bit of the trust that I had for Wikimedia.
This press release is uncomfortably close to the border between misleading and fraudulent. It's fairly harmless hype I guess, but claiming a breakthrough involving the world's largest quantum circuit when no quantum circuit has been built is just horrible. I'm not sure I could write this kind of stuff with a good conscience. Rolls-Royce and Nvidia are great companies who are genuinely innovative, it must be awful for the employees who work on the real innovations to read this stuff.
Neither revenue or net income will really represent the value of a company. Company evaluation would be more fitting, especially if the company is publicly traded.
As I understand, VSCode extensions can run arbitrary shell commands and Microsoft didn't add any security measures (e.g. asking a user for confirmation). In this case it is only a matter of time, motivation and perseverance until all users who use extensions will get a back door.

Of course this applies not only to VS Code, but to any other software which allows to install third-party extensions like browsers, Gimp, Inkscape, DAWs like Ableton Live, etc. Their developers do not care about security and do not take measures to protect against malicious extensions.
Why can't the Wikimedia projects just be forked by some more normal people?
This seems weird. Did you try rephrasing the question?

Can I see the transcript?
I can’t help but feel that Clegg get an unfair rep for that. The tuition fees thing was never going to happen, and was always put out by the Lib Dem’s to apply pressure to the two main parties (Conservative and Labour).

The Lib Dem’s then made the fatal mistake of actually making it into government, which they obviously never anticipated happening when they originally made the tuition fees promise.

Personally I think Clegg and Lib Dem’s did a fantastic job of reigning in the worst aspects of the Tory party, and the UK public raking them over coals for tuition fees has only benefited the Tories by removing the only thing that stopped them going off the rails completely. Which of course happened immediately after the Tories got rid of the Lib Dem’s and we got Brexit a year later
Putting all this solar on roofs and over parking lots is the free meal.
Just so; in some cases we are already beyond the point where you need to be in some way wealthy or privileged in order to interact with a company beyond the basic automated phone and web-based interface.

Yet every so often I still hear someone (to be fair, not nearly as often as I used to) suggest that poor people (and sometimes refugees) having phones shows that they're undeserving of assistance, since they can clearly afford a phone. As you say, it's becoming the cheapest and in some cases only way to interact with a lot of businesses and services that are necessary simply to operate in society.
Not really. The EU isn't trying to kill Meta, it's trying to get it to follow GDPR where it applies. For most people, fining them an equivalent of their monthly salary, is a blow painful enough the person won't forget it soon, and will try to avoid getting fined again.
I'm not fan of barriers but this is coming down to "ban or regulate".

Whatever TikTok is to the USA, Meta and the rest is the same for EU. TikTok has known links to the Chinese Communist Party and the American social media and tech in general has proven links to US intelligence and mass surveillance programs. You may say that CCP is adversary and US-EU are ally but then again the US has proven to be able to elect anti European government, so EU can't afford to rely on not having Trump or similar once again in power.

The Americans are considering to ban TikTok, do you want EU to adopt the same approach and ban TikTok along with Meta and the rest?

I like the EU approach better, even if it's not ideal its better than complete ban. Honestly, I'm terrified from banning becoming the norm because this will mean completely fragmented internet and this will mean the end of global society because the countries will be able to shape their society the way it suits them for internal politics.
Far left journalists? What?

Really? The man has been flirting with antisemitism and that was just last week (I'm not Jewish btw, so this isn't personal). I cite that as an example and not one of many reasons I have to despise the current incarnation of the man.

Just because NASA is his cash cow, doesn't mean they should trust him as far as they could throw him.

The man has done incredible things, supported by an incredible team, but looking on from the outside ... he's just one blood sugar spike from screwing the whole thing up.
It goes against their interests to do that. The closest you get to that is academic papers written from industry and patents. As far as that goes, there are millions of those.
> These continued findings highlight the need to verify every open-source component, not just assume it will be ok. We have included details regarding our specific findings below.

So, how they suggest we do this with extensions for Visual Studio Code? The editor, as far as I know, doesn't contain any utilities for inspecting the actual source code of the installed plugin before installing, and instead you would have to use some 3rd party thing for downloading the zip file, then manually inspect the contents, before manually installing from the zip archive.

With a subtitle of "Securing the cloud", it's hard to see how they are securing anything here, besides removing three extensions that may or may not be malicious. They're not actually providing any solution, even though they end with plugging their CloudGuard Spectral product that wouldn't even help in this particular case...
This is such a great resource. Thank you for posting it.
This is probably specific to the US? It would be nice for the Readme to clarify that aspect.