skysight-inc/HackerNews huggingface dataset:
It is dramatically easier to hide malware in a compiled artifact than in public source code, not to imply that the latter does not happen.

In security focused orgs though you review all code yourself with the exception of things with extensive third party signed review such as the Linux kernel itself. Even then I review codepaths in the kernel critical for my use case such as random.c

From there, if I -alone- compile containers, kernels, or binaries, someone could coerce me to tamper with them to compromise all downstream users. Same if there was a central build system I can access. To mitigate this I ensure my artifact builds are deterministic, sign my changes, and have team members review my changes, reproduce my artifacts bit for bit, then counter-sign the results.

It is never wise to be in a position where there is possibility of you yourself tampering with things that control anything of value, or else someone will coerce you to help them steal said value.

As a security engineer it is my job to ensure no one ever has to trust anyone, including me.
Actually, this might not really be that bad of an idea. Certainly for headless CUDA, it has a lot of potential to be useful.

That said, in practice I expect this to suck. There's probably a lot of stuff in the Linux desktop stack that does not deal with heterogeneous graphics cards well right now.
This is basically Cambridge Analytica, isn't it? If one of your friends / followers use this service, it will be able to access all of your shared content?
Well, if the domain expert wrote the first pass at it, think of the cycles of writing specifications, design, programming, and only then finding out the specs were wrong, got skipped.

That's a huge time savings, and as a bonus you have working code to refactor or use as a specification.

Microsoft Access is an amazing database, it manages related tables automatically, and can scale up to working with ODBC and SQL database back ends easily.
Yeah, developers acting in their own interests isn't going to magically fix everything - there's no shortage of examples of how "chart goes up forever" thinking leads to nasty externalities and tends to run into a brick wall at some point, and how manipulative the big players in the real-estate market can be.

But painting NIMBYism in such reductionist (and long-term economic-investment backward) as "development would make real estate investors and developers lose money" would just result in people fighting entirely the wrong battles with entirely the wrong message to actually have a chance at changing things in a useful way.
SBF agreed to waive his right to fight extradition from the Bahamas in Bahamian court. This let the Bahamas make an agreement to extradite him.
For a company that has its own relatively large fleet of aircraft ... $5,000-$30,000 is a few screws and some grease on an airframe.

While the some book keepers will care, in its grand scheme of operations that amount is negligible to the point where it may cost them more in man power than what they recoup from doing so.
They did change the shade of green, and the newer one is much less readable. See for yourself:

Original: https://ronstauffer.com/blog/wp-content/uploads/taking-a-pic...

Current: https://support.apple.com/library/content/dam/edam/applecare...
The problem is, it's not illegal to alter your odometer and drive it yourself.

It is illegal not to report the odometer misreading in a sale. The real question is, who make the odometer change and where did the intentional or not breakdown happen on failure to report the odometer inaccuracy.
For the chess solution I ended up putting a breakpoint in the Javascript. To each their own.
There is this kind of milling around that grates me to no end. The climate is changing faster and in a way that we undeniably contribute to and people still are like “hang on a minute there’s a bunch of research to do here”! It’s like if I went to the doctor, they find out I have a cancer, then the doctor says “wait up let’s see how quickly it is actually growing”.

Yes there is no strong evidence about “baseline climate change” but whatever is going on now is
1. Undeniably orders of magnitude faster than any core sample record of climate change
2. Undeniably spurned on by the huge amount of carbon we have been burning
And yet reducing carbon output is not a priority.

This is more a comment than a response to your comment, so please don’t take it as an argument. You just reminded me about this particular bit. It just kills me that people who sometimes are otherwise willing to do a lot in terms of charity hit climate change and all of a sudden start questioning that it is a thing. I can’t believe that a genuine existential threat was politicised. You’re right about it all though, representatives not being persuasive, perhaps framing the problem poorly.

Lastly, in recent years we have seen progress thanks to renewables. It’s all because fossil fuel costs are increasing while renewables decreased. Economic incentives would absolutely have worked at the expense of the fossil fuel industry. I wonder how differently things could have gone
Do you think the human brain has bootstrapped itself with an emergent property in a way that is impossible in silicon?
It's sad that they don't have some sort of retraining for these people.
The Uno was released in 2010.
Isn't it more than the MCAS itself but also the reliance on one sensor (redundancy optional expense) instead of standard of three?!
Oh God, that's horrifying. I'm also surprised it hasn't happened... although technically it has, with all websites saying "by registering you agree to this unbearably long and confusing terms of usage document that we know you're not going to read".
As a Brazilian, I´m happy to see the Embraer as the first. I hear from pilots that Embraer planes have excellent survivability and glide times.
> Well, then I'd say ERROR is a very bad name.

The name is irrelevant. The issue being addressed is a poor assertion. Log levels are not meaningless in a standardized system. It's trivial to map a set of levels to a useful set of conditions. Like any monitoring (or logging), the system has to be well-regulated and maintained to be useful. In good faith, log levels are useful.
Rubio Says He’s Heard Shocking ‘Firsthand’ Accounts of UFOs
The main difference to me is that Async/await tends to permeate your whole codebase. Once one part of the system is Async/await everything is. With Go I can write most of my code synchronously and maybe somewhere down the stack make 3 HTTP calls in parallel without having to change anything about the calling functions.
They kinda did just not immediately. iMessage was introduced in iOS 5 pre-redesign. It used to be black text on a lighter green. With iOS 7 they moved to white text on searing green.
I never said they are mutually exclusive. I said you don't need the ORM.
Yes, but that's not my point. You don't have to keep using 2.8 to get GPU rendering in Linux.
NaN != NaN is very useful when debugging numerical software. NaN is a great placeholder value for things which don't have a clear default value to which they can be initialized.

To your point, there are plenty of situations where a floating point number will be initialized to a magic constant (0, 1, infinity, so many others...). Beyond initialization, there are also loads of functions which frequently yield floating point constants which can reliably be tested for equality, like max(0, x). There are no error bars here. Exact floating point equality can usefully tell us things like "has this number changed", or more generally "has this special case occurred"/"have we reached a particular state".

Removing floating point == isn't conceptually sound, and it isn't practical.
I used to make heavy use of buildroot but these days for most of my use cases I just have a kernel, and an init/application binary that I statically compile into the kernel. A simple makefile gets the job done and is easier to review than the whole of buildroot.
That was the brief glory of XMPP ("Jabber") mentioned above. There was a couple years where you had nearly every Gmail user and Facebook user (and more) available in the IM client of your choice via XMPP, and then the "next day" where everyone was gone, XMPP was a ghost town and declared "dead" and you again needed separate apps to talk to "Google friends" versus "Facebook friends" versus the other two nerds that even knew what XMPP was in the first place and were too strong advocates of open standards to install new apps. Sure, it was mostly just the three of you that knew what was lost when you had to install new apps when XMPP "died", but it was clear what murdered it was the dozen or so friends that used XMPP before all that but "chose a side" and were now "Google friends" or "Facebook friends".

You may not plan to leave Mastodon, but there's lots of people "just waiting on that Bluesky invite" or "I'd prefer to use Facebook if they supported ActivityPub" and there is a real fear that "everyone" will choose sides again and the sides won't really include Mastodon because Mastodon doesn't have a marketing budget and Mastodon isn't "cool" and Mastodon is "too nerdy".

We can't say for sure that it would happen again that way, but it is dark reminder that it happened once in a big way and that some of the same culprits were there when it happened.
The title is kinda deceptive in that those lands weren't under federal protection until relatively recently when the EPA claimed jurisdiction over all lands which occasionally touched something that was wet.
Direct messages are between you, the recipient, and the admins of your server, and the recipients server. The latter two are not obvious, and are a security flaw in ActivityPub.
Millions of flights, but less than ten crashes for most, and it was pointing out that even some of those are incorrectly categorized. When you're dividing A by B to get ratio C, you cannot ignore that A is bad data because B is good, it still makes for a C that is useless.

All this dataset provides is that with small enough samples it is too noisy to draw reliable conclusions.
if any system/protocol/platform what have you can't withstand someone like Meta coming in you're going to get eaten anyway, it's just survival of the fittest. Either the ActivityPub network is robust enough to accommodate Meta and retain its features or it isn't.

If it isn't then it's a waste of time and someone needs to write a protocol that's more hostile to takeover in its very design, but I don't see what the point of haphazardly blocking FB does or relying on someone not being evil.
It's not that simple. You have to look at net cost and benefit. There are plenty of stimulant free paths in life that also cause cardiovascular damage, lack of sleep and 50 other problems.

The issue with living in a society where money so closely correlates with health is that anything bad for your money tends to also be bad for health.
a much stronger argument than color imo is apple’s refusal to implement RCS, which would make the experience of communicating with android users.

generally I try to avoid SMS since the photo quality is bad, there’s no delivery guarantee, and it doesn’t work over wifi.
There is an even longer and useful list on https://git.herrbischoff.com/awesome-macos-command-line/abou...
As much as I love protecting wetlands generally, I am personally familiar with the extent to which they can apply unreasonably. I wouldn't be surprised if much of these wetlands were in fact "wetlands".

In any case, if the EPA can no longer protect land that Congress hadn't actually authorized it to protect, then let's get something in Congress that better fits the bill.
There are patterns to resolve this. Depending how you structure your DAL, your data access classes can provide transaction handles. It's a data access layer, you don't need to abstract away the fact that you're dealing with a database.
It is a thing in academic writing. E.g the randomly chosen article "The Populist Challenge to Élitist Democracy in Europe" in Oxford Academic.

At least he does not mix in French and German.
I think what happened is the forums were built on old platforms that couldn’t deal with the influx of bots and instead of upgrading them, the administrators shut them down, with dwindling popularity it didn’t make sense to make the investment.
I see that now, but then you can’t use the buffer navigation hotkeys. I’ll just stick with tmux.
Dealers will slowly fade away as online car shopping becomes more common. Volvo for example is aiming at 2030 as the year they turn 100% online. It's reasonable to assume all other car makers will do the same. There's absolutely no reason to buy from a dealer in today's world, that's like when in the 80s and early 90s you needed a middleman to buy a computer.
You might be missing the fact that WASM nowadays doesn't necessarily have anything to do with web browsers. It was initially designed for running in web browsers, but in the last few years there's been a lot of activity surrounding embedding WASM runtimes in processes other than web browsers. Mostly the idea is for it to be a way to execute untrusted / customer code (e.g. "plugins") with sophisticated sandboxing, etc.
I suppose it’s open to interpretation whether that is deceptive. It seems like it’s accurate even if there is other context. Personally I’m in favor of pretty broad federal land protections.
Settings > Accessibility > Pointer Control > Trackpad Options...

Three-Finger Drag works really well and is surprisingly easy to get used to doing.
This quote is just stupid: "Where the Supreme Court is tying the hands of the federal government". Congress could, if they actually wanted to, pass a law that would regulate these lands.

All the the Supreme Court did is rule that, at least so far, congress has not done so.

And yet somehow this is the Supreme Court's fault.
Anna was boring for you? OK. By the way, if you say The Brothers Karamazov did it for you, I'm really going to be amazed.

I have a different book by John Gardner.
Caltech developed the first triple-changer Transformer. More than meets the eye!
Watersheds aren't a local resource - they're a regional resource. This decision made no sense to begin with since, for instance, Vermont acting like a bad neighbor will cause environmental devastation in Massachusetts, Connecticut and New York - water sheds very rarely stay neatly within state boundaries. This becomes an even bigger issue when you look at the Mississippi - mining in North Dakota can cause issues in Louisiana.

I do hope that states can work together to protect the environment but it does seem likely to become a partisan issue.
> Last month, a U.S. Supreme Court decision struck down federal protections for wetlands covering tens of millions of acres across the country, leaving no regulation of those areas in nearly half the states.

Is this even true? I thought they only limited the definition of adjacent to a surface connection.
Nice guide!

Relatedly, I made the switch to sly not long ago. Well, ok, it was a few years at this point...

Regardless, worth taking a look at including in this guide. http://joaotavora.github.io/sly/#Stickers, in particular, are very powerful and fun playing with.
Imagine a reputation (real or imagined) so bad that everyone sees you as a cautionary tale.
I keep on reading that electric vehicles require less maintenance, but they still require some maintenance, and lots of things continue to break.

how much maintenance does a honda ice car really require? Most of them run flawlessly for years and years, almost without opening the hood at all.

I wonder how the numbers break down?
Statements of the form “nobody is doing X” are almost always talking about a very small percentage, and not intended to be a claim about exactly zero people. My statement wasn’t a claim about whether someone exists who wants praise, it was a summary of the purpose of the LGBT issue to counter the parent’s straw-man that summarized LGBT as being a binary harassment vs praise issue. Sure my statement above can technically be interpreted as incorrect if you take the words of my broad generalization extremely literally, but if you want to be that pedantic, why didn’t you call out the parent comment for being much much more wrong? Do you think relative magnitude doesn’t matter?

> you can almost certainly find an entire organization dedicated to whatever X you please.

This is fairly meaningless when you strip it of all magnitude and comparison. Sure you can find some weirdos in numbers that are statistically insignificant. You can’t even make your point without also acknowledging that an organization of ten people is 0.000000125% of the population, which is, statistically speaking, for all intents and purposes, nobody.
I feel their entire goal is to use Mastodon to seed their service with content. Within a few years they'll cut off Mastodon to maximize profit.
Or easier to fly / pilots better trained / airports and atc having improved.
Moore complexity: the Visigoths didn't necessarily invade Roman Gaul or Iberia but were resettled there after their time in Rome, which wasn't the Roman capital when they sacked it.

In 418, [Western Roman emperor] Honorius rewarded his Visigothic federates by giving them land in Gallia Aquitania on which to settle ... and eventually were invited into Spain by a Roman usurper in the autumn of 409 .... This was probably done under hospitalitas, the rules for billeting army soldiers. The settlement formed the nucleus of the future Visigothic kingdom that would eventually expand across the Pyrenees and onto the Iberian peninsula. That Visigothic settlement proved paramount to Europe's future as had it not been for the Visigothic warriors who fought side by side with the Roman troops under general Flavius Aetius, it is perhaps possible that Attila would have seized control of Gaul, rather than the Romans being able to retain dominance.

https://en.wikipedia.org/wiki/Visigoths
> The main reason we can not use system clocks is that system clocks across servers are not guaranteed to be synchronized.

Sentences like this will make me never regret to moving my infrastructure to bare-metal. My clocks are synchronized down to several nano-seconds, with leap-second skew and all kinds of shiny things. It literally took a day to set up and a blessing from an ISP in the same datacenter to use their clock sources (GPS + PTP). All the other servers are synchronized to that one via Chrony.
Unfortunately, usually killing people.
>Not to blame the victims but

should have stopped there, then. for every inattentive ped there's a dozen inattentive drivers
This is an attempted moral panic that while obviously disgusting should be an extremely low priority in a resource constrained law enforcement system. Unfortunately it gets play because it's a boogeyman that people who want to control and monitor online activity generally can make use of. Every cent that goes to "combatting" this is one that doesn't go to solving actual violent crime against kids, and in any event the whole enterprise is as futile as confiscating people's colored pencils.

Set up a honeypot and refer people for investigation, fine. But let's not waste any additional resources or destroy additional freedoms for what is essentially a made up issue.
I'm guessing it's mostly people with deep specialization (and interest) in combustion drive trains (e.g., engineers). I don't think it's feasible to take a combustion drive train engineer with a decade of experience and make them reasonably productive as a battery engineer in a short timeframe. No doubt many of those engineers are capable of making the pivot, but most are likely not particularly interested.
>I want to be able to use Mastodon to talk to as many people as possible.

Have you seen Facebook lately? It's basically the place where all the boomers that watch Fox News shitpost

I rather mastodon have the barrier to entry for the lowest common denominator
Should help https://news.ycombinator.com/item?id=36499194
I imported from keepass way back when I was getting started, and then never really went back to tidy. So either as a constraint of keepass or a self-imposed rule I had when using it (I don't remember) everything is within a directory; no top-level passwords. There are some redundant paths, like `internet/` and `forums/` but I generally make heavy use of `pass search` and try to make sure the actual filenames are properly descriptive (usually of the URL), and then don't worry too much about the path. I do actively do upkeep on trying my best to make paths and filenames unique at the second character, so that I can access commonly used ones quickly by typing two characters, hitting tab, and repeating until done.

I have a habit of going in to edit a file before replacing an old password, and duplicating the top line onto the second line, which allows me to access the old password for a while with a lot more ease than mucking with git.

For things like computers, I overload the path a little. The computer name is the .gpg of the most often used account, and also a directory with the other accounts within. That way I can:

pass /lan/nas # access my personal user
pass /lan/nas/www # access other accounts
Actual title
"The David Test: 12 Steps to a Better Talent Management"

Link without tracking
https://www.getmanfred.com/en/the-david-test
Aren't you centralizing on Lemmy?
I write technical finance/econ articles and the only thing I've found it useful for is getting a vague outline of typical topics that might be touched on in an entry-level article about something.

For example to GPT-4 I ask:

>is silver a good investment? what are the considerations to take into account?

Returns essentially an enumerated list of topics about supply and demand, volatility, storage considerations, and opportunity cost compared to other investments. These are very basic explanations of a sentence or two and usually correct, but too general to be of much use.

I then ask:

>how has the historical performance of silver compared to gold and the S&P 500 over the past 5 decades?

And it provides vague history of what happened to each investment in each decade, no quantifiable data. Okay, let's ask:

>Re-consider the above prompt using quantifiable data, how much would an investment of $1,000 per month adjusted for inflation into each of these investments have compared at the end of the 5 decades?

Output: I apologize for the confusion, but as an AI language model, I don't have access to real-time data or the ability to perform specific calculations.
Exactly, in my opinion, separating your business logic from your data access layer completely is futile. You will need to either have business logic in your data access layer or fine grained query controls (when to add a filter clause, when to execute a query, what should go into a transaction, etc) in your business logic for performance reasons. This is OK, it's incidental complexity.
That postinstall and other scripts have been a problem for a long time - the PoC for example could be installed via npx, which would then run postinstall which executes another script to steal /etc/password data.

This is not a new problem, you just have another vector.

I came up with a free linter package to try solve it - but no one seemed interested, and here we are 7 later talking about where people are now offering paid services to mitigate it.

https://github.com/tanepiper/npm-lint
>You know making every single point by writing a disingenuous question like this is an obnoxious, annoying type of rhetoric, right?

I’m confused about your usage of the “You know… right?” pattern here. If you’re strongly of the opinion that it is an objectively bad way of communicating, surely you could have expressed that another way.

The pattern obviously doesn’t bother the person you are responding to, so was that just the best way to get your point across?