skysight-inc/HackerNews huggingface dataset:
"The FBI Supernode Module and the Qakbot
Uninstaller DO NOT remediate malware that was already installed
on the infected computer through Qakbot, such as ransomware or
other malware that steals financial credentials. However, the
Qakbot Uninstaller is designed to prevent additional malware
from being installed on the infected computer through the Qakbot
botnet by untethering the victim computer from the botnet. "

-https://www.justice.gov/d9/2023-08/23mj4244_application_reda...
The password needs to be generated somehow, right? Assuming you don't you use a pre-baked password that repeats across machines, you could replace the password generation and retrieval with deploying a public key instead.
I am one of the likely millions of people that got sucked into python for its accessibility and powerful data manipulation libraries. Granted I started in the mid aughts with web scraping and other stupid endeavours. That user base growing out of matplotlib/numpy later pandas at a time when data literacy got more important is I think the major driver of its success now.

Also does not hurt that it was designed as a teaching language at first. Nowadays reading some of the code that is out there I feel like I have no idea what is going on. Type hints and that way some libraries use it makes my head spin sometimes...
And what if he is 6.1 feet tall?
https://archive.is/E8U8m
> In 2015, Eric Holder ended the policy of "adoptive forfeiture", which occurred "when a state or local law enforcement agency seizes property pursuant to state law and requests that a federal agency take the seized asset and forfeit it under federal law" due to abuse.[21] Although states proceeded to curtail the powers of police to seize assets, actions by the Justice Department in July 2017 have sought to reinstate police seizure powers that simultaneously raise funding for federal agencies and local law enforcement.[22]

basically Obama got rid of it then Trump put it back then Biden didn't anything
10 ish years ago, pretty much all new hip HN startups plus existing success stories all started in Ruby on Rails, or feels like they did anyway.
Most states have some form of regulation against constructive dismissal/termination/discharge (term of art varies), but I don't know of a list. Would be good to have!
Kyrgyzstan's national game, kok-boru attracts new fans around the world
A project does not have to be active to be worthy of a post on HN, just cool.
The wait time is what kept me from ordering one, actually. I love everything they're doing but don't want to get stuck like I did when I bought into the kickstarter for the purism librem5...which sits in it's box on my shelf...
OP might better have read "the A-10 exceeds the F-35 at its assigned mission", that is, the A-10 is the more capable aircraft for close-air support, where air superiority has been achieved.

The F-35 likely exceeds the Warthog in other aspects, however.
> Any chance you'd be willing to share a few details about this?

I have several viewing devices in different rooms including an LG C2 OLED, a high-end Samsung QLED and in my dedicated, fully light-controlled home theater room a native 4K 10-bit HDR+ laser projector and 150-inch screen. Each of these displays has been professionally calibrated. To objectively evaluate an input source these days it's important to try multiple different display technologies because flat screens can vary between OLED, QLED, mini-LED, LCD and VA which all have different trade-offs in contrast, peak brightness, viewing angles, color spaces, gamma response curves, etc. And that's before getting into various front projector technologies.

Most consumer TVs these days come with a pile of post-processing algorithms which claim to deliver various "enhancements." In almost all cases you'll want to turn these options off in the setup menus. For critical viewing, objective calibration with a suitable colorimeter is ideal, especially when considering HDR sources which should be normalized to each display's native capabilities in Nits. If you don't want to dive down the rabbit hole of evaluating all this yourself (which can admittedly get complex), I suggest the TV reviews at https://www.rtings.com which are credible, thorough and yet still relatively accessible to non-experts. Unfortunately, RTings doesn't evaluate front projectors. For that the best bet is an expert forum like AV Science (https://www.avsforum.com).

> Which streaming services are doing things right in your view?

Currently, I don't think there's any service I would say is universally "doing it right." It still varies depending on the individual piece of content. Amazon, Netflix, AppleTV and even YouTube each have some extremely well-encoded, high bitrate content. But I've also seen examples on each service that aren't great.

The highest-quality home source will typically be a UHD Blu-Ray disc player. If you have such a player I highly recommend the Spears and Munsil UHD Benchmark Discs (https://spearsandmunsil.com/uhd-hdr-benchmark-2023/). Just because a disc is UHD format doesn't mean the media on it has been encoded correctly, from a high-fidelity source and in appropriate quality. The Spears and Munsil disc features a comprehensive suite of custom-designed test signals and specially sourced demonstration content identically encoded in HD, UHD, HDR, HDR10, HDR10+ and DolbyVision, including moving-window split screens allowing you to compare formats. It's extremely impressive and, as a video engineering geek, I found it fascinating to explore for hours on my various displays - while my wife had zero interest in it :-).
Yeah, they absolutely don't care. It cannot be hard to detect griefing and obnoxious cheating by just looking at player behavior. How hard can it be to detect 90000000000 in-game dollars to be added to players, how hard can it be to detect that someone is blowing up everyone in the server, ... They just don't care, and it's a shame because GTA V still holds up as a fantastic game even after all these years.
Not exactly what I was looking for in terms of the security side of things but perhaps more sophisticated in terms of the editing handling. Cool, thanks for the reply!

Money quote from https://mosh.org/#techinfo :

Remote-shell protocols traditionally work by conveying a byte-stream from the server to the client, to be interpreted by the client's terminal. (This includes TELNET, RLOGIN, and SSH.) Mosh works differently and at a different layer. With Mosh, the server and client both maintain a snapshot of the current screen state. The problem becomes one of state-synchronization: getting the client to the most recent server-side screen as efficiently as possible.

This is accomplished using a new protocol called the State Synchronization Protocol, for which Mosh is the first application. SSP runs over UDP, synchronizing the state of any object from one host to another. Datagrams are encrypted and authenticated using AES-128 in OCB3 mode. ...

Roaming with SSP becomes easy: the client sends datagrams to the server with increasing sequence numbers, including a "heartbeat" at least once every three seconds.
...

Instant local echo and line editing

The other major benefit of working at the terminal-emulation layer is that the Mosh client is free to scribble on the local screen without lasting consequence. We use this to implement intelligent local echo. The client runs a predictive model in the background of the server's behavior, hypothesizing that each keystroke will be echoed at the cursor location and that the backspace and left- and right-arrow keys will have their traditional effect. But only when a prediction is confirmed by the server are these effects actually shown to the user. (In addition, by default predictions are only displayed on high-delay connections or during a network “glitch.”) Predictions are done in epochs: when the user does something that might alter the echo behavior — like hit ESC or carriage return or an up- or down-arrow — Mosh goes back into making background predictions until a prediction from the new batch can be confirmed as correct.

Thus, unlike previous attempts at local echo with TELNET and RLOGIN, Mosh's local echo can be used everywhere, even in full-screen programs like emacs and vi.
Also see jerry cans.
I use pip 100% of the time
A friend of mine lives about 25 minutes from a very large Amazon office via public transport, but he is being told to relocate to the other side of the country. Other members of his team are being assigned to different offices, so this will end up being an in-person remote job (if he sticks around - not likely).
Please, tell me more.
Don't these apps just use PAM? Since the initial complaint was about sudo, I'd figure pam / polkit would handle this, and apps would call those to obtain privilege elevation.
I've built a UI on top of libgit2 and I wish that this blog post expanded on which new features are missing (sparse checkout?).

To quote: "The migration to Git Executable will allow us to resolve long-standing issues with GitKraken Client, such as poor LFS performance, SSH configuration support and many other features/performance improvements."

I agree on LFS performance on Windows. SSH config support is a pain due to libssh2 but openssh support is on the way (https://github.com/libgit2/libgit2/pull/6617).

There are many cons to using the Git executable itself (parsing output, error reporting, version handling). Seems to me that there's more to this?
Alfred is an advanced OSINT tool that searches for social media accounts based on the input username. Alfred has lots of options and settings and is currently in heavy development by our team so more features are to come. Thanks for your time and have a wonderful day. :D
https://github.com/Alfredredbird/alfred
When was the last time you, uhh, tallied up someone's height with your fingers? I don't understand what you're getting at here?
The ecosystem created an echo-system.

Being default on linux helped python succeed, not anything specific about the language. It became default on Linux because it was better than perl or bash (easier to use and manage deps) and had decent upstream support and an ecosystem around since the 90s.

On windows powershell is still king, python shares the throne as a close second though. Compare all that import-module, nuget, winget, chocolatey,etc... mess with pip! And version nightmares are more manageable thanks to pyenv. Python ecosystem is good at making a mess work well (except when it doesn't).
https://github.com/MrOtherGuy/firefox-csshacks/blob/master/c...
because I was writing some golang code to play with a Novation Launchpad Mk1 (https://github.com/FMMT666/launchpad.py was very useful)

and I was searching what kind of "rhythm machine" i could interface with

and I found it interesting back then because

a) it's text based

b) it's in golang
Regarding "obsolete" and missed opportunities: this idea of missed opportunities for Google has been touched upon several times in the last decade, including the launch of Google Cloud Platform itself.

Urs Hölzle, the former head of Google TI (Technical Infrastructure), discussed in public some of the challenges and reasons for creating Google Cloud Platform as a platform, and backing projects like Kubernetes.

Over time, Google has become a proprietary tech "island" in severals ways and arguably more fragmented than other large tech companies, such as Microsoft and Amazon, which happen to both have commercial cloud offerings, and Meta/Facebook. While all of these companies certainly have challenges with not-invented-here ("NIH") syndrome, and lots of internal, proprietary tools, as a software engineer at one of these three, odds are you will use and touch more commercial and open-source technologies than you would at Google. Google itself still struggles with having teams and projects use GCP for internal work versus Borg/etc; and there are plenty of valid reasons why Google teams don't use GCP.

The proprietary tech "island" issue is a non-trival concern when you need to hire new software engineers from industry/outside and ramp-up time with some of these systems may be 6-months or even greater; today Alphabet/Google is at around 200k+ FTE, and you aren't going to be able to find many engineers outside that have experience with Borg/Flume/Spanner/Monarch/etc. Likewise when you are an experienced Google software engineer looking to work elsewhere, you need a translation map to figure out what tools outside are similar to the ones from inside.

Google's proprietary tech island has its legitimate reasons for existing, and when people say 'xyz' commercial/open-source thing is "better," they often mean it is better for their problem at hand.

At Google, a decade-plus ago many of the problems it had to solve were problems that few other organizations had, such as large-scale data processing (to be made cost-efficient on commodity hardware), and it needed to create a number of tools/platforms as solutions such as Map Reduce/GFS.

Many of these tools and platforms were discussed via papers, and inspired open-source work. In the Map Reduce case, it changed how Apache Hadoop itself took shape, and the lessons from all of these later led to things like Apache Spark.

The idea of losing a battle can only be applied with the benefit of hindsight, and many of the Google examples given were created at a time where there were no peers, nor at that time was Google interested in selling these things as commercial products at the time (i.e. GCP vs AWS vs Azure); it built these things according to its unique internal needs that few other organizations could relate to. I acknowledge that I am intentionally leaving out organizational politics, and culture (e.g. PERF) as non-trivial contributors for this result).
I'm not but I am curious if you have some ideas?
It's still less, even without the 8% fee which they explicitly say is because it's a co-op.
I personally hate responses like these to someone who has shown an opinion. It not only is a personal attack it is not constructive.
While I also love to take part in cargo cults, you should probably fit some good blinders on before looking over at Nubank’s stack.
Python may be JIT now (is it?), but it certainly wasn’t back then.
Who’s to say that the AI-generated content will be worse than human-generated? Just because that’s the case today doesn’t mean it’ll be so forever.
The first drink driving alcohol limits were made up because the "experts" didnt know what was a safe amount and what wasnt...

https://www.theregister.com/2007/10/22/drinking_made_it_all_...

Today we know some people have gut bacteria that make alcohol from sugar so will fail an alcohol breath test if stopped by the police.

Other factors include health of the liver and kidneys and other dietary factors, so in practice, its still all made up in my opinion.
An easy way to start taking the fight back to the enemy is by overriding __new__ and tinkering with things before/after Django's metaclass __new__ does its own metafoolery.

Also overriding mro() is a fun way to monkey with the inner workings.
I did not state that children learn from little. I did state that they are able to achieve impressive outcomes quickly with very small amounts of domain specific knowledge (movement not included).

Our best language models at this point appear to be narrow and deep where the child model is wide and shallow. For example, how many pictures of apples do I need in order to train a robot to recognize apples? How many apples (or representations thereof) does a child need to see to identify an apple? I won't argue about image density, but human eyes aren't that high resolution and people don't seem to have excellent high resolution multi-frame memory.

This just makes we wonder if we should be spending more time working on how we utilize our wide but shallow data corpus rather than playing I can't believe it's not statistics with hugely inefficient and focused data sets.
> you just... do it?

A few years from now, when researchers look at mental workload when writing/reading software, we will have the data to prove that Guido was a Neuroergonomics savant.
it's an "Invitation to repost"!
H5P: Create, share and reuse interactive HTML5 content in the browser
Your first link says the IRS stopped doing forfeiture of bank accounts 9 years ago.
It's easier than Java, though, where you have string.length(), array.length and list.size(). In Python it's always len(whatever). But maybe Ruby wins this one if it's consistent in its method naming.
What if your boss handed you an imperial tape measure and asked you to cut it into 1/63? There's no mark on your tape for this. I too can invent contrived examples.
It's not a particularly unusual configuration, but A/B images are still not immune to update failures
Yeah, there's the ongoing Perl joke about writing a script that works today, but not understanding how it works tomorrow. Too much one-liner type stuff that did not allow for maintainability
Why not just mutate a specific fixed-length line with every keypress?
No, that’s self-important bullshit. These are just evidence that Python really suffers from people in that community not using any other languages.
Ops! Forgot to write about it (otherwise it would be so long). I did not mention the tools, but I was mainly referring to Hopper Decompiler/Disassembler (definitely no no for me). Altough it seemed the natural choice for reverse engineering macOS applications and daemons, it failed disastrousely on reverse engineering fairplayd. This is where obfuscation is really good at: feeling pain. Hopper tried to disassemblate the binary but still no luck (there was an error due to some bogus instructions referred by a dead branch). I'm seeing improvements for Hopper release by release, but there were some regressions that I noticed..

I tried to import it into Ghidra and it missed some informations during the pass of stack analysis. At the end it was a mess result to read, so I ended it up with IDA (free because I'm a student). Binary ninja also needs some license, I'm trying to afford it.
I’ve never used the camera while riding, though I can see that your assumption might be right
I first bumped into python because mailman was written in it. It was a large, slow and a bit funny. I saw it as another odd academic language that had spilled out of a university somewhere.

Then in about 2005 I heard about zope, and how easy and wonderful it was compared to php. But it was slow and memory heavy.

In about 2008 more and more stuff started getting python bindings, specifically in VFX (where I was working). There was a tussle between javascript and python, and python won out, even displacing MEL and other domain specific languages.

Ruby was always more obscure to me, it was for people that likes C and wanted a more perl-y version of it, but without the anachy or the universality of CPAN.

I think the biggest reason was that it had loads of stuff in the standard lib, way more than anything else at the time. Much more than perl, so it meant that things were a bit more "portable". So people came for the stdlib, then started adding things to it because they'd spent all that time learning it.
There's generally one obvious way to do it. There's almost certainly other ways to do it, and those other ways might be better suited for different specific tasks, but the obvious way tends to exist and be widely usable.

Are there some exceptions? Sure.
I doubt performance is better writing in C++ or Julia by an average programmer. Libraries such as tensorflow or numpy are highly optimized and pass heavy stuff to C, Fortran or similar.
I wish they would have put this energy into adopting web workers. It really sucks that you can't switch repository tabs while waiting for git operations to finish.
So I imagine you have that perspective because you started less than 20 years ago. In some ways the idea of the Pythonic Way to do things evolved in opposition to Perl's vigorous advocacy of More Than One Way.

Python has been really winning for some time, so it's natural that its ideological discipline has grown ragged. The crop of kids who value options above consistency don't have the scars of the Perl age to inform their prejudices.

But Python is -dramatically- better focused, as a community, on finding a Pythonic way to proceed, and then advocating it, than previous cultures.
I really don't want keep defending a corporation here but it's quite clear form that messaging that it may be consider ice cream in some states.

If we're going to dunk on corporations can we do it for legitimate reasons?
> That's pretty sweet that they healed hundreds of thousands of computers

The cynical part of me says that (1) they just installed an NSA backdoor in hundreds of thousands of computers; (2) the FBI probably didn't even realize it; (3) it'll all come to light some years from now when the NSA tooling is leaked by a careless contractor and used by various worse actors; (4) but the "leak" was NSA's plan all along to spy on said various worse actors.

The meta-cynical part of me says all that is way too convoluted and I should take off the tin-foil fedora and tip it to m'lady.
Artificial surrogacy and "designer children" are two different, somewhat orthogonal concerns. Most IVF today involves no genetics modification. It's always been a slippery slope argument that surrogacy "inevitably" leads to genetically designing children.

Artificial wombs would certainly change the economics of surrogacy, but it's also a bit of a slippery slope to think it would commoditize it. It doesn't change most of what we know about IVF and likely keeps the same (relatively high) costs, it maybe just disrupts the labor market for surrogacy. (Which today from what I hear is an extremely expensive market prone to shortages.)
The ACLU will absolutely oppose this. If not for the reason they stand to make a lot of money suing ISPs for "not doing enough" to stop the big-ole-meanies online.

I see ISPs blocking "mean speech" to "protect people" as another symptom of the enshittification of the internet. I legitimately cannot understand problems in this arena because you can just...walk away from your computer. Or turn off the website. Or hey, maybe don't TIE YOUR ENTIRE LIFE AND REAL IDENTITY TO THE INTERNET. I suspect the prominent use of pseudonyms 30 years ago prevented most forms of ongoing harassment. Narcissists need the validation and so now big brother needs to step in to protect them.

I think society is getting a little too comfortable with the idea of big brother and it's making me really, really uncomfortable. As an old man yelling at a cloud the internet really was better 20 or 30 years ago.
Do you have a point to make? Maybe I should ask chatgpt to find it because I sure can't.
exploits are just kept private by bad actors nowadays.

Apple now gets the worst of both worlds, the harmless jailbreaking scene is dying but the bad actors are still in full force.
There are just too many ways to do things in Ruby. How many forms for an if-else or for loopin can you name in Ruby? Just as the simplest example.

Monkeypatching is also awful for readability.

Explicit imports are way more readable than things appearing into current namespace implicit kind of stuff like it happens with Ruby
Ansible is Python, Terraform is Go. Those are 2 giant projects in DevOps.
Amazon CEO doesn’t realize they’ll lose out on talent and miss out on talent.

I’ll never work in office again unless I need to work with machines or hardware I don’t have access to at home.
Are there any lawsuits pending against KiwiFarms? If not, why not?
I'd suggest "pythonic", rather than obvious, for that sentence. It's one of the ways the community reminds itself of the utility of consistent discipline.