skysight-inc/HackerNews huggingface dataset:
The best case scenario is that the product ships with perfectly bug free software. The second best case is that when a major bug is discovered it gets fixed quickly which Samsung did. IMO that’s a bigger measure of a company’s quality, how they react when something inevitably goes wrong.
I'm quite ambivalent on this issue overall, but let me just point out:

build.rs absolutely is a glaring security hole in the sense you say, but compared to that, this is much worse. You can verify the build.rs code that you download (at least in theory, and some people in banks or distro packages probably actually do), but binaries are orders of magnitude more difficult to inspect, and with the current Rust build system pretty much irreproducible.
Articles like these always bring out suburbanites who point out that cities are loud and you need to deal with it if your are in the city. But most city noise is vehicles and it's quite amazing when you get a chance to realize this (for example when a normally busy street is made pedestrian-only for a weekend).

And sometimes you don't realize how life-alteringly noisy a particular street is until you move there. I have 2 examples. Near Cambie street bridge in Vancouver can be extremely loud at night. Normal traffic noise during the day. But there's a traffic light followed by a bridge which is slightly uphill, which I guess is an invitation for people in loud cars to burn out when the light turns green in the middle of the night. In Tokyo I lived on a very-quiet looking side street, it was nearby a Domino's and parallel to another small street, just large enough to have a traffic light. So my short street had a loud scooter accelerating into and out of it every few minutes to bypass the traffic light. These sorts of things aren't noticeable when you just visit a city but are absolute hell if you end up living nearby. The first example at least would be a good candidate for a noise camera.
Anecdote from Texas:

I have admired the various dragonflies across north Texas. A wide range as you might say. From urban to rural lakes, I spot them, the most magnificent flight system I’ve seen.

And they eat mosquitoes.

At my residence a juvenile dragonfly accidentally made it indoors. I spent a good 30 minutes off and on guiding it back outside. It wouldn’t survive here in captivity I’m not qualified.

Here’s the interesting part:

There is a beautiful adult green dragonfly on this property that when I walk thru the pathway where it lives, it engages and either leads the way, shows off, or in general does things that unless you really believe in the nature and nurture overlaps, well, I’m just glad to participate.
Because they want to be read.
The href is correct but the link shortener made it longer, so I call that a bug.

I can only quote the visible text because of how the site works. Maybe I should have put it in a code block so it wouldn't link.
As far as I'm concerned pre-compiled binaries should only be offered as potential default in scripting language ecosystems - there is an expectation that things should "just work".

I don't mind it for when I work in Node - honestly I prefer it. But in Rust? The entire toolchain is designed to compile from source. It may be a bit slow for certain crates still, but that's much weaker justification to make pre-compiled the default.

Crates should compile from source by default as long as source actually exists (ex. has not been lost somehow, or wide distribution of the crate is unlikely). I don't buy any of the malicious theories since the author is well appreciated and respected. It's likely just a misguided choice in this case.

People have rightly mentioned build.rs flexibility - I think there is nuance here and maybe it's good to discuss what default behavior should be expected by users, since sometimes build.rs does wild and useful things.
Some people have timed it here, it looks like it's taking 15-20s/it (dependent on quant and hardware).

https://github.com/leejet/stable-diffusion.cpp/issues/1
If you summarize anything down to one sentence you can make anything sound uninteresting. The details and nuances are what makes things interesting. If the author makes the title of the post about wasting $1.5 million the post should be an interesting story about how that happened.
I think you answered your own confusion.
Can we do leaf blowers too? Can we do people who start cutting their lawn with a Dixie Chopper at 7pm on a Sunday evening? These things annoy me a lot more than a momentary noisy car passing.
Then there’s the scene in the beginning of Gary Shteyngart’s Super Sad Love Story where the protagonist is reading a book on an airplane and the young woman next to him complains about the smell.
That 1.5 million includes people living in government provided housing designated for homeless people.

Someone given temporary access to housing has shelter, but you need to keep providing them shelter so you need to classify them as a person in need of housing Aka homeless. You may also see the terms Houseless, Unhoused, or Unsheltered used to make the distinctions more clear.

PS: There’s also a long continuum from owning a home with plumbing etc and living on a park bench. Governments want people in permanent spaces that provide adequate shelter and have a mailing address for a host of different reasons.
Locked issues with a comment similar to "works for me"

I'm not complaining. It's his project, it's his right. He will be overwhelmed by notifications and this is probably the only way he can stay on top of things.

I don't have to like it either though.
The presence of the second-tier manufacturers forces an interoperable world at the component level.

If Samsung made flash that only worked with Samsung controllers and Samsung-exclusive PCB designs, they'd have a far smaller addressable market.

I'm surprised we aren't seeing more flexibility out of the third-party market though. I could see someone saying "I'm willing to spend $100 for the most bestest possible 256Gb SSD for an industrial use case", and they'd sell you the parts that are normally sold as a 2TB MLC drive, but with a controller permalocked to using it all in psuedo-SLC cache mode, for example.
Yeah, there are already binaries in the crates.io ecosystem, and I'm certain that almost none of these people have audited a `build.rs` file or a proc macro implementation which effectively runs as you, completely unsandboxed.

EDIT: I was wrong, this is not actually `watt` -- it may have been re-using code from the project.

This one of those pile-ons where everyone gets excited about having a cause-du-jour to feel passionate about, while simultaneously ignoring issues that are far more pressing.
This change happened in a patch release, so the serde author either did not consider it breaking, or doesn't follow semver in the first place.

Most crates do not raise their major version when increasing the minimum supported rust version. So there is precedence for treating which changes can break for some people, but which don't have a breaking API changes, as non-breaking for semver purposes.
Yea it's not really a cope post, more throwing the previous people in charge of marketing/ads at the company under the bus. Rightly so imo, who the fuck cranks up spend to >$100k/mo without proper conversion tracking and stopping/changing if things are obviously wrong?
AI-Generated Artwork Not Protected by Copyright Law, Judge Rules
Please, please, if you're going to go into anything related to security, read up on the subject. It's ok to do things like to learn, but putting them into production is unwise. See, for example, https://www.schneier.com/crypto-gram/archives/1998/1015.html... and read up, with books like Applied Cryptography. Read a few DefCon papers or videos.
Not sure it logically follows that they're able to reliably detect something simply because they have it categorized in a service level offering. Their model could still be reactive, relying on reports from users or even from those same brands.

I don't know what the situation actually is. Just throwing that out there.
Can you describe it for us?
Yes, m'Lud. My "brush and palette" are this laptop. <types-in prompt>

My "paint" is software, m'Lud. Some of it is pre-made "paint" that someone else wrote, like tubes of paint from an art-shop; some of it is my own modifications, analogous to grinding your own pigments.
It's not about what I do. Your response is similar to people who respond to privacy advoates with "what do you have to hide" or who brush aside their concerns with "I have nothing to hide."

One thing to consider is the trend of expected speech or compulsory speech. There are people who would want to see if other people are saying what they want them to say, rather than just not saying what they don't want them to say. There are people who weigh someone's words to see how dedicated they are to a cause or to an idea or to a movement.

These technologies empower language police even in cases where someone would otherwise choose to say nothing. And they establish a precedent.
Worth mentioning they also have a great webcam tool and and API to go along with it.

I added a web-cam to my community site wetrockpolice [1] to help climbers identify when conditions get wet out in Red Rock Canyon, was free and easy to do!

[1]: https://wetrockpolice.com/redrock
Playing devil's advocate here, there's a major difference between not placing an ad and censoring the post or even ban the account.

Their hate speech detector might have a 2% false-positive rate. No big deal if you just skip ads on those posts, but a massive deal if you censor those posts or ban their authors.
> all the plants you've eaten and the bacteria you've soaped off your hands were murdered

Yes. And? A few years ago I watched paper wasps hunt caterpillars to dismember alive and chew up into meatballs, then fly them home to feed their baby sisters. Would the wasps have been more virtuous to embrace pacifism, and let their sisters starve? Were the caterpillars ennobled by whatever suffering inheres in being torn apart? Was I wrong to document without interfering, or would I have been wrong to chase the wasps away? It was beautiful and hideous to watch, enough of both to beggar all the human concepts I know of how the world "should be". What I do know is that all life in this world subsists on death, and we are not so special as to escape that - not while we live and kill to eat, nor when we die and are eaten in our turn.

That's not a question of should or shouldn't, just a statement of what is. Certainly it takes some reckoning with, at least for anyone who isn't satisfied merely to revel in base sadism. But it seems more ethically hazardous to try to establish a concept of which life it's permissible to kill and not care one way or another about it - "biological robots", one might perhaps say, forgetting this name has been given by humans to other humans well within living memory, and also that every such line we've drawn in the past we've gone on to rub out on "learning" - rediscovering, more like - that, no, this doesn't after all suffice to pretend we're not "really" killing, not in a way that counts.
It appears that their legal council would disagree. Treating call center workers poorly is not an acceptable response IMO.
You don't learn classical methods and anatomy to be precise; you learn it to be correctly imprecise.

Picasso couldn't have achieved in abstraction if he hadn't been classically trained. And that's easy to verify: take an imitation (of which there are many) and an original. Even someone not well-versed it art can pick out the original.
But you can drip your money into the ads and see if anything comes back. How could you run it for 12 months and 1.5M?

Doesn't even matter whether you have PMF, you can just use the direct feedback: ad was on for two weeks and nobody showed up, let's stop and think.

I've run little web shops and you always get some kind of interest. It might not pay back, but you wouldn't get zero.
It appears that their legal council would disagree with their interpretation of that act. Treating call center workers poorly is not an acceptable response IMO.
My question is, are we going to highlight every single substantive change to Twitter as it morphs into WeChat?

I think the fact that there’s no valid alternative means that we’re going to probably get stuck in the cycle where people are continuing to expect Twitter to revert or somehow go back to the old Twitter - and being frustrated and dissatisfied that it isn’t

But they are still using it!
No - the functionality of the library is identical between this version and the previous one - just how it's built has changed.
If you think the S&P500 and NASDAQ in recent years merely gives a "reasonable rate of return" you'll realize that there really aren't any other economies with a "safe financial system". Most markets don't have that level of growth.

The Chinese predisposition to invest in real property is much more cultural (and irrational) than what you suggest. The Chinese stock market is actually much more rational in this regard as for quite a while you could buy Chinese real estate stocks with pennies on the dollar, price to book ratios much less than one. Traders know the real estate bubble is going to burst sooner or later and the stock market priced this in. The real estate market which mostly consists of individual buyers didn't quite get the memo until recently.

Speaking personally, in Chinese circles, the social pressure buy an expensive apartment is honestly overwhelming, and it's not because people knew that the property market was a good investment, it was just something they thought a respectable person should do once they earned some money. Family members without any financial literacy kept thinking I was an idiot for holding FAANG stocks instead of buying an apartment. AFAICT I'm the only person in my social circle (including people who should have known better) that has avoided the recent property slump (in Hong Kong) by steadfastly refusing to enter the property market at its height a couple years ago. It's nice to not have people nagging me about it now.
Vector types / instructions would be nice. The C++20 STL algorithms are very friendly to vectorization with the various parallel policies (e.g. std::execution::unsequenced_policy) that open up your code to be vectorized. Wonderful libs like Eigen handle a lot of my numeric needs for linear algebra. I think you are forgetting the CUDA is C/C++.
Wow I wonder how much record of the arab spring protests and uprising are now lost forever. Those protests were all around 2010 to 2012 or so and was in my mind what really pushed Twitter into the public consciousness. I hope the Library of Congress managed to archive all that stuff like they said they would years ago, it would be a big loss to historians for it to disappear overnight.
We’ve had those technologies for decades. Why are fatalities not dropping to zero?

Because the personal automobile is so desirable.

A majority of fatalities do not happen in urban environments. But the solution has to cover the last mile, or else it will not be an attractive alternative to other modes.

Alabama, Mississippi et al have highest fatality rates. A car is far more convenient than a bus or a bike.

I’m referring to the technology generally here. I’m indifferent to how it comes about (“VC funded” etc). We need to innovate to solve hard problems.
Nobody talks about the miracle Jesus performed by having 12 close friends at age 30+.... :)
What is the median income in China would matter to your point.
It’s probably true that most people commenting don’t audit the builds of transitive deps, but the original issue was a distro that couldn’t distribute precompiled binaries, I’m going to guess this has something to do with their license.

I think having an exit path for those that want to compile from source is important, and I can’t understand the reluctance to provide that.
The market that reliably rewards medicine, law, finance and engineering is not very mysterious.
Sounds like you’re mostly describing streamers? There’s a lot of educational and news content on YouTube as well.
https://www.usinflationcalculator.com/inflation/historical-i...

Let me be clear - the “bailouts” didn’t cost anything. They were never done with tax payer dollars, except for TARP, which was repaid in full plus interest.

> On December 19, 2014, the U.S. Treasury sold its remaining holdings of Ally Financial, essentially ending the program. Through the Treasury, the US Government actually booked $15.3 billion in profit, as it earned $441.7 billion on the $426.4 billion invested.[2][3]

https://en.m.wikipedia.org/wiki/Troubled_Asset_Relief_Progra...

Quantitative easing and other long term asset related balance sheet transfers materially reperformed as the assets were acquired during a stressed credit period and as credit improved the long term asset values increased, causing internal growth of the balance sheet value at the fed.

Additionally, the additional money supply contributed modestly towards inflation, but overall relieved enormous market pressures and allowed the economy to stay on stable footing:

> Several studies published in the aftermath of the crisis found that quantitative easing in the US has effectively contributed to lower long term interest rates on a variety of securities as well as lower credit risk. This boosted GDP growth and modestly increased inflation.[94][95][96][97][98][99]

https://en.m.wikipedia.org/wiki/Quantitative_easing

To answer your question, I don’t work anywhere right now as I’m taking a break between gigs. But I did used to be a fairly senior person at the mega banks and was a senior person in securities trading during the financial crisis and navigated my bank through it successfully (albeit we were never distressed, but all banks were treated as distressed to prevent further runs). I have no skin in any of these things though, but am always surprised by the populist hot takes from folks so far removed from the system and what actually transpired in real reality that I often wonder how wildly diverged most folks view of reality is from the actual history that I literally saw unfold around me.
> But how do you know if your business is ready to invest in marketing? To answer this question, you'll need to understand if your company have some form of product market fit - PMF.
Similar to how pilots often ascend from freighters to passenger aircraft, self-driving systems should have started driving freight through the desert. (Or mining pits, for that matter.)

Passenger operation as well as operation around people should have come much later, and step by step. Error rates must be determined step by step, and reliability ratings must be earned, similar to ETOPS.

I can only see one reason why they would begin with taxi operations, the driving task with the most visible showing of servitude, and that reason has to do with US history.
The target audience is clear from the article title. Taking umbrage at the first word is hilarious.
> build.rs absolutely is a glaring security hole in the sense you say, but compared to that, this is much worse. You can verify the build.rs code that you download

In theory you can compile your own blob, but you'll need musl and whatnot to make a universal Linux build. Code for making the blob is there in the repo.

build.rs is at best equal. It can access your locally available DB, and transmit your data.
One-Stop App for ML Model Prices and Availability
I've brought together popular models from various providers in a single app. Eliminate looking through outdated models and comparing prices elsewhere. With this web app, see up-to-date prices and the newest models at a glance. Explore now: https://model-price.lonetools.com/. Your suggestions and feedback are truly appreciated!
He is the "bonk go to horny jail" doggo and not the dogecoin doggo.

RIP Cheems. Thanks for the laughs
And those who weren't male adolescents simply kept their mouths shut.
Airbnb allowing host to place cameras in the room where I would be sleeping
The first step of recovery is admitting you have a problem.
I agree, I've naively trusted the SanDisk brand but just today I went compared and bought an SSD, didn't even look a WD or SanDisk. Their name is now tainted in my book.
Tyler and Blurr were legendary in the RSPS scene, 2speced was such a wellmade and maintained RSPS. I wonder where they are now.
You just enjoyed reading a made-up self-promotion piece from a marketing consultant, so perhaps good marketing works.
If you are working with FreeBSD in the cloud, you can use Terraform to provision on AWS and GCP. If you have to manage bare metal FreeBSD systems at scale (hundreds of systems), most devops folks use Ansible. There are playbooks out there for this. It's not too painful to work with.

If you are looking for Kubernetes on FreeBSD, don't. For on-prem Kubernetes you could deploy on Linux virtual machines on FreeBSD servers, managed using Ansible. But it's never going to be as fast as Linux. I wouldn't use it in production.

The best answer is to leverage FreeBSD for what it's good at : bare metal services like databases, build environments, file servers, and networking devices. And co-manage your deployment with Linux (Kubernetes) using Ansible/Terraform.
"Something else also costs you" isn't a rebuttal to the statement that it isn't free.
> direct outreach to key customers

are you talking about b2b?

I don't know what you have in mind. Sounds like you are suggesting companies should start calling me or knocking on my door instead of puting ads on google search results. That doesn't sound great.
We still hear comments about specific brands and models but the lessons on these are always learned after months or years of the devices being sold. We can still ask the question, sure. But a more practical lesson seems to go for redundancy because this will still happen to us: Not purchasing all items from one manufacturing lot; Not pairing more items from one lot than you can afford to loose; Staggering device lifetime when possible; Running long tests when putting in service; Keeping an eye on drive statistics once in production and acting on them; Running schemes (RAID, backup, whatever) where it's actually practical to replace one device while in operation; Testing schemes so they will actually work out; Effective backups; Being ready to lose the cost of occasional drives; etc.
I'm looking forward to the day when they stop adding loudspeakers to electric vehicle to make them noisy. I recently heard an electric sports car with a loudspeaker playing a mock sports car "vroom" ... it was a bit sad.
Looking forward to a "container-free Cloud IDE with offline capabilities, accessible from any location with a browser".
My father worked in a paper mill and told me about the incredible fact that artificial vanilla was a byproduct of the forest industry!

https://www.canr.msu.edu/news/vanilla_is_a_forest_industry_b...
I looked around for lists of waste, fraud, and abuse and found this [0], and while I'm loathe to use The Heritage Foundation as a source let's just stipulate we could save something like $300B a year if we deleted all this stuff. That isn't even 5% of the budget, like you're not gonna tackle climate change with that kind of investment, especially if you're scouring all the new green policies to ensure they're minimally wasteful (also imagine the meta-bureaucracy needed for this).

I love the idea of simplifying the tax code, but I think if you're arguing it's useless to tax the rich I think you have to think that would be useless too, right? We'd need to actually have the rich pay their rate, but you're saying that doesn't work.

[0]: https://www.heritage.org/budget-and-spending/report/50-examp...