skysight-inc/HackerNews huggingface dataset:
> Which non-rpm based distro could be base for this ? Becouse rpm-based distros are (except RH) are pure joke

[...]

> Actually no one have RH-like expertise as far as I know.

So what is SUSE, chopped liver? They've been around for slightly longer and do a lot upstream too.

Red Hat and SUSE have been around doing a lot, and it's a shame that so many people don't want to pay for actual commercial Linux expertise. :(
All those rights exist, even the right to kill someone exists. We write laws to affirm or deny them. For example, a law may be written to deny the right to kill, except in very specific circumstances (self-defense, war, executions, etc).

You have the right to privacy and the EU affirms that, some US states affirm it as well.
>In any case, PM acting as QA is not a healthy state.

Hard disagree.

The PM shouldn't be finding a lot of bugs, when theyre not doing QA then a lot of specification bugs inevitably slip into production.
The only thing that makes sense to me about this outcome is that the Wagner commander realized that his push to Moscow was doomed (for reasons) and the only non-suicidal approach was to negotiate some kind of deal that preserves his control of his militia, a bunch of cash and great PR. At least, this approach gives a non-zero chance of survival.

Looking from the outside, I suspect we overestimated his chances of success because of how surprising the action was and quite frankly, we wanted that to be true. If this were true, this deal would make no sense at all.
The license for the project is not GPLv3 but if my project is GPLv3 then the non-GPLv3 license for the project grants me a GPLv3 license if I include it.

Which shows the problem with this specific license in a single sentence.
Looks like 5% on the benchmark in the (long) thread.

https://lore.kernel.org/linux-bcachefs/ZGB1eevk%2Fu2ssIBT@mo...

[...]
testing random btree updates:

dynamically generated unpack:
rand_insert: 20.0 MiB with 1 threads in 33 sec, 1609 nsec per iter, 607 KiB per sec

old C unpack:
rand_insert: 20.0 MiB with 1 threads in 35 sec, 1672 nsec per iter, 584 KiB per sec

the Eric Biggers special:
rand_insert: 20.0 MiB with 1 threads in 35 sec, 1676 nsec per iter, 583 KiB per sec
[...]
There's no layer between you and OpenAI. all your requests go directly from your device to OpenAI servers. There's no middleman, so your data is safe.
Ok, foo.sh then.

He needs to fix it - if he wants his license to enforce being paid for commercial use.
> My guess is that he was counting on support from within the Russian power structure that was promised but then didn't materialize

That makes sense, yes. It may have been real world Diplomacy (https://en.wikipedia.org/wiki/Diplomacy_(game)): “if you attack Moscow, I’ll support you” with a backstab.
There's a separate page about the developer subscription for teams in organizations: https://developers.redhat.com/articles/2022/05/10/access-rhe...
Ignoring the various indicia of crankery:

This is a stream cipher with a large internal state. The author argues that it is logically impossible to deduce the internal state by any means faster than a slow algebraic method (exponential time in ... some variable, I'm not sure).

The most questionable thing I noticed right away is that the author says that there can't be statistical biases or regularities in the stream cipher output because certain parameters are XORed with the output byte position mod 256, which supposedly gets rid of any possible statistical regularities.

> The L and K values are also XORed with n mod 256. This is done because some key combinations may cause regularities in the g(m) values, and XORing with n mod 256 ensures that all L and K values contain all values between 0 and 255. For example, if we didn't XOR the K and L values with n mod 256, and all key values in table A were 2, and all other key values in the other tables were 0, then K and L would always be 2. This means that we would be XORing even table key values with an even number, and all other bits would always be 0, so all fm values would be 2. Even though the attacker knows the value of n (and therefore n mod 256), the use of L and K ensures that the attacker does not gain any advantage from this knowledge. [...] XORing the L and K values with n mod 256 ensures that the Zn values are statistically evenly distributed for all possible key combinations.

I'm super-skeptical of this claim. Your stream cipher might have statistical bias, so you introduce the current output byte position (also admittedly known to the attacker) as part of the internal state, and now you're sure that there can no longer be any statistical bias?

The paper then argues that there's no analytic solution to find the internal state faster than this exponentially hard brute-force-esque solution (or maybe that it's very statistically unlikely that the attacker could get an advantage in trying to find the internal state more quickly). I think this explicitly refers back to the idea that there are no statistical regularities in the output and some kind of argument that any bit value is in some sense possible in any position (?). OK, but any bit value possible in any position isn't enough to show that there couldn't be an analytic solution that uses successive bytes to efficiently eliminate large numbers of possibilities about the internal state... and I still feel like the statistical regularity thing is pretty much being asserted without proof.
Lately I've written all my tools to not only announce where they're reading their configs from (which isn't precisely what OP is asking for but is close), but also to have an option to generate the default config that will be presumed if a config file is not found. "mytool --gen-config /tmp/newconfig.txt" should produce a fully-formed config with all defaults explicitly set which can be moved into /etc/mytool.conf or wherever it's supposed to go, all ready for me to tweak without having to look up settings names.
Screenshot shows GPT3.5 usage. GPT4 offers a much better answer. I disagree with the authors commentary based on that.
One step further, every software you didn't compile yourself and checked the source could have a secret trigger to do harm.

And you need to trust the compiler.
Disclaimer: I am an application developer, and one of the maintainers of the Drogon C++ web framework.

C++ & apps don’t fit well together technologically these days.

Android? Go Kotlin.

iPhone? Go Swift.

Cross platform? Meh, kind of dislike middleware as they always lag behind the vendor. This was the case three decades ago as it is today.

Usually you are far better off by defining a REST API as your border between platforms, then just use whatever easy (de)serialization techniques the language will give you.

Personally I have a cross-platform C++ stack built on top of Drogon that I can use on multiple platforms, then it’s usually a native UI layer (Kotlin + Compose on Android, Swift + SwiftUI on Apple platforms) on top of the cross-platform layer. This way business layer code can be shared across every platform while only the UI needs to be adapted to its host OS.

Drogon website: https://drogon.org
how do you go from raising $250 mil in may and layoff people in june?

https://techcrunch.com/2023/05/12/indian-edtech-giant-byjus-...

https://techcrunch.com/2023/06/19/byjus-layoff/
Sorry… I see no other way to contact you. I saw here in one of your previous comments that you were able to put 32gb of memory on a T440p… can you tell how!? If possible please dm me. Thanks.
Use fs_usage. https://ss64.com/osx/fs_usage.html

It’ll show all file events. No need to disable SIP. SIP is doing a lot of good work for users and unless you’re doing kernel work or low level coding I’d keep it enabled. Obv. There are other cases but for the general public keep it on.
See https://news.ycombinator.com/item?id=36466306
Let's math it: today, minus twenty years.

I got 2003
Objective-collapse theories can actually be experimentally tested: https://en.wikipedia.org/wiki/Objective-collapse_theory#Test...
> Mastodon doesn't implement ActivityPub server-client standard

To be fair to Mastodon, the main developer did give a reason for this.

> The ActivityPub Client-to-Server spec assumes a thin server and thick client. By which I mean, the client, like an e-mail app, has to download and manage most data from the server. From my understanding that's the only way to make anything like search or username autocomplete or even a notifications tab to work with the C2S at all. In my experience, app developers are generally not excited to do that kind of legwork, and we're entering the kind of P2P territory which comes with its own challenges like the ease of hopping from one device to another, or the fact that to have the same functionality in iOS, Android, and Web, you would need to recreate the heavy-lifting fundamental boilerplate in each separately. For that reason, I am not particularly interested in the C2S part of ActivityPub.

https://www.reddit.com/r/Mastodon/comments/zqfr4h/comment/j1...
Dr. Semmelweiss: Interview with creative team behind Mark Rylance play [video]
You might want to read on specificity because it’s a huge spanner in your assumptions.
I use logseq for my diaries. https://logseq.com/

It's very powerful, but really doesn't feel that way. Each day I open it, it creates a new YYYY-MM-DD.md and shows it to me. All content is MD lists (or "blocks") and can be individually tagged with #hashtags. When there's a certain topic I wrote about, say writing down a dream I had, I tag the top-level block with #dream. Then I can write under it as I please. All such blocks will be visible on the #dream page, with the correct dates visible.

It's very easy to wrap my head around. I just write, outliner style, whatever I'm thinking of and want to write down. Never need to create a new page, always just directly to writing. Earlier dates can be found by just scrolling down.

I don't know why anyone with the technical knowhow to use a notetaking tool that's just a folder with markdown files would use a journaling app on some server somewhere. Syncing is very easily handled, too, with something like Syncthing or Dropbox.
> That's the job of traditional Linux distros.

I share this view, but I also think it's very difficult to verify such validation is happening. I don't think most end users would want a distro stable enough to meet a high review bar.

> That does nothing when it comes to E2EE

Not all components need access to the keys or user data. Reducing attack surface reduces the amount that needs to be validated.
You must be an LLM with no concept of aesthetics since most people agree the PS5 is an ugly monstrosity. Unless you are living in a dorm, it looks out of place in most adult living rooms. Meanwhile the Xbox is a simple, modern black box, literally the exact opposite of how you’re trying to paint their hardware and trust me, I’m no Microsoft fan. Give me a break.
If they are going to learn from AI but don't trust it, then Ai is more like a teacher-assigned studying partner than a teacher.
Quoting [1]: [Reno, NV, June 22, 2023] – Rocky Linux, a prominent community-driven open-source distribution of Enterprise Linux (EL), remains confident in its ability to continue as a bug-for-bug compatible and freely available alternative to Red Hat Enterprise Linux (RHEL), despite changes in accessibility."

[1] https://rockylinux.org/news/2023-06-22-press-release/
Would it be 200Gb/s for a MacBook Air M2? Asking for a friend.
The rules of CSS specificity are a bit more involved than '!important' or not, and I frequently see beginners trip there, but apart from that I agree that the CSS rule set might be worth incorporating.
We mess up the environment with artificial stuff, so woo lets put up some more artificial stuff to fix it, oh wait what impact will that have?
I think it depends on the size of the org. If there are only 1-5 devs, then yes, they would be doing the devops. But in OPs case, he is managing the infra for 70 engineers, there needs to be some formality in place, otherwise everything will spin out of control, if every engineer rolls his own server there that would quickly lead to chaos.
Libraries acquire proper licenses for a particular manner of use. That license takes into account what a human and technology are capable of. Moreover, even beyond that, you aren't allowed to just utilize an IP however you wish just because you managed to memorize the contents.

I'm not someone in favor of overly broad copyright and authors' rights but it's certainly not an either nothing or everything dilemma.
That is not E2E encryption, that is Point to Point (P2P) encryption.

To be E2E, the file should only be decryptable by the sender and receiver. The point in the middle should not be able to see it's plaintext or decrypt its ciphertext.
The exact text is as so.

> After the line label (if any), must follow one of the following statement identifiers: DO, PLEASE, or
PLEASE DO. These may be used interchangeably to improve the aesthetics of the program. The identifier
is then followed by either, neither, or both of the following optional parameters (qualifiers): (1) either of the
character strings NOT or N’T, which causes the statement to be automatically abstained from (see section
4.4.9) when execution begins, and (2) a number between 0 and 100, preceded by a double-oh-seven (%),
which causes the statement to have only the specified percent chance of being executed each time it is
encountered in the course of execution.

Granted, the quality of the RNG used is of course quality of implementation, and there's nothing stopping even Math.random() from just returning 4. Reading the document though, it does appear the author is correct, alas.
SyncThing can accomplish that.
190 people in west Germany and south Belgium. Tie this directly to the trucker we're trying to convince to accept a gas tax. You can't. Unless there's a fluke personal relation, they're transactionally separate.

That's the problem with this line of argument. If you're arguing on selfish, transactional merits, it's fair to dismiss on the basis of one's personal experience. For most people in the rich world, that experience does not include clearly-identifiable bad effects from climate change, nor will it in the proximate future.

"Save yourself" doesn't work if the person you're pitching isn't actually in peril. (To highlight the point, that same person would likely support flood defenses. Even if their house is on high ground.)
Related snake oils:

- Customer-Managed Encryption Keys -- US cloud providers love to market this

- Confidential Commuting -- where the root of trust is either the same company (AWS) or a US processor manufacturer (Azure, Google).
You're right and I argue this with my friend. Especially when I discovered that seitan has almost exactly the same macros and cost as chicken breast. I believe part of it is people rationalizing the "satisfaction" they get from the hard thunk of a heavy fast food meal. They mistake taxing on the immune and digestive system for heartiness.

But I will admit meal prep requires a bit of coordination and discipline when more than 1 person is involved. One of my failure modes is numerous accumulated plastic containers that need to be washed out. I'm much more content slicing, sauteing, and packing up than washing and emptying. Inevitably some component ages rudely in the fridge and must be dealt with which leads to consternation among partners due to perceived waste. ("Your system stinks, it creates so much wasted food." "Yeah but it's only 37 cents worth of green beans." "Yeah but it stinks up the fridge and someone has to clean it up." ) Oh well, I'm only human. and I'm eating healthier than most, feeling better, and saving money. I'd rather eat my own food than even a nice restaurant most of the time!
It's not a bad idea but it's not applicable to every piece of software. I don't think that passing a config file for every git command would be convenient.
I only I knew what "UO" meant.
What happens when two 802.11 devices use the frequency at the same time? I was under the impression that they'd both re-transmit after a arbitrarily chosen pause. If that is true, time would be a de-synchronization primitive. Then, it is surely also a sync primitive.

How do you arrange a date with your friend in the city? I usually say "let's meet at 17:00 at the main train station, under the clock".[0]

You have to know your counter-party's accuracy. But if you synchronize on any other metric, surely that could also be inaccurate? So how is time any different?

[0]: Note: in Danish: https://www.berlingske.dk/under-uret-uret-skiftes-ud
And the article says as much:

> It is worth noting that this law also applies to non-web applications where the service provider supposedly being secured against is also the client software distributor; thus, the “end-to-end encryption” offered by Whatsapp and Signal, amongst other proprietary services, is equally bogus.
If your browser has access to your private key, and you are running code on someone else's web site to perform cryptographic operations, then it can simply exfiltrate your private key.
the last time I looked at Second Life a year or two ago, there was still no 64 bit Linux client, trying to connect to my old account quickly turned into some crazy obsolete library hell..
a quick look around and it appears to be the same situation.
Not as of yesterday evening, scoped to the verified BBC reporting.
In my local town, a town it seems almost nobody in North America has heard of, is a small art museum containing among the top collections of European and oil paintings in North America. It was awesome to take an art history class in college and then go to the local museum and many of those paintings from the class textbooks are right there in person.

That museum has staff standing there watching to ensure patrons do not get too close to the art. Because the staff are continuously and actively watching the art work in person it would seem challenging to steal anything from there.
In my opinion, one of the worst was things was going from servers to serverless for web apps. Vercel (formerly Zeit) made a complete switch from servers to serverless for hosting and Next.js. Everyone jumped in without realizing just how much more complicated serverless architectures are compared to servers.

1. Having your APIs as lambdas now means you can't simply connect to a Postgres/MySQL without setting up a dedicated server that serve as a connection pool. So you're now "serverless" but you now have to add a server as a connection pool. /facepalm

2. Putting your APIs on the edge means absolutely nothing if your Postgres/MySQL/Redis/3rd party services is still in one location.

3. Serverless edge databases started popping up but they were significantly more expensive (because you have to replicate data everywhere) and more complicated with limited upside.

4. Cold starts on lambda APIs meant that your web app/web site often load slower than a centralized server.

5. You can't reliably share APIs between your web app and mobile app anymore. Previously, a single server could easily be made to serve both your web app and mobile app.

6. Serverless is often more expensive and unpredictable when it comes to billing. Previously, if you paid $15 for a server, you're going to be billed for $15.

7. Serverless is significantly more complicated when you're just trying to build an MVP. There's no need to try to scale like you're Google when you're just trying to create a proof of concept.

8. You're far more likely to be vendor-locked doing serverless.

Serverless should not have been the default option for webapps. Serverless should have been the exotic option for companies that had a special scaling/edge need. Instead, servers should still be the default. The problem is that Next.js is so popular and so intertwined with Vercel that serverless is the default now.

If Vercel/Next.js were honest, they would tell everyone to use serverless only if they're making a static website. Everything else should start out as a server.
PS has Gran Turismo. And we could probably discuss endlessly about which one is better.
For anything more than trivial configurations it can be nice to commit them to source control, giving some reversion capabilities, and easy replication on other projects.
> "the Metaverse"

It's hard to be sure what you're referring to. By some definitions it includes Roblox (and Fortnite and Second Life). There's certainly no single "capital-M metaverse".

Maybe you mean "Multiplayer, persistent, VR"? VR Chat and Rec Room are doing pretty well.

Or maybe you mean web3 crypto stuff? Not doing so well.

Or maybe you mean "that thing that Meta built"?

Hard to know without you being specific
It's much easier to update or hack a web site than it is to distribute a new signed version of your code via app stores.

On your web site, you could easily serve up different pages to different users. I think you'd have to distribute compromised copies of your app to everyone with an app store?

Or is there any evidence that app stores can deliver different versions for specific users?
I agree with the ideal you're speaking of, but the lecturer that uploaded the paper was promoting it on Twitter in a way that really isn't consistent with that sort of intent. This entire scenario seems like a failed attempt to market his own academic brand, without care for the underlying scientific content. It's not a genuine sharing of an unfinished idea or early observation.
System.IO.Pipelines: High performance IO in .NET (2018)
Who really reads the source code though?
No normies. No Kpop stans. No football fans. No gamers arguing which console is the best etc.

All I see on Mastodon are activists and hackers.
I would say that an LLM could count as a "teacher" of sorts, so it would be more than a 0:1 ratio. But, if we're comparing LLM-teacher to human-teacher, I don't think it reaches full 1:1. I dunno, I'd say maybe 0.5:1 or 0.25:1 would be more accurate, given that the thing doesn't even produce correct information a certain percentage of the time?

Based on my experience with ChatGPT, it does really well as a "rubber duck." [0] Sometimes, it even gives back useful suggestions. Sometimes, it's just so far off base, I wonder what planet it's getting its advice from.

If I were the professor in this case, I think I'd suggest that students use it as a supplement: try LLM-TA first, look into its suggestions, and if it helps, great! If not, then try a few more things, maybe consulting LLM-TA a few more times. If that doesn't get you to working code and an understanding of the problem, then try human-TA. I think this represents something close to the optimal workflow for this tool, given the known limitations of the underlying technology.

---

[0]: https://en.wikipedia.org/wiki/Rubber_duck_debugging
Could this issue not be solved by a third party browser plugin to do the crypto?
Sony exclusives on the PS5 and a dearth of quality exclusives on Microsoft's side definitely have a lot to do with this but I wonder whether the Xbox Series S/X distinction contributed as well.

The current console generation came with a fairly large price hike and Microsoft responded by also releasing a more affordable but less powerful model.

The problem is that a non-technical consumer can go out and purchase a PS5 safe in the knowledge that they're getting the same gaming experience as anyone else that owns a PS5. Someone considering an Xbox now has to choose between the series S and X.

They now need to compare specifications, figure out which one is more powerful and worry whether the console will be able to deliver decent fidelity and performance in newer games.

On another note, it'd be nice to see exclusivity agreements die entirely. Microsoft has always been fairly good at making their titles available on PC and Sony is moving in that direction but still makes heavy use of timed exclusives.