skysight-inc/HackerNews huggingface dataset:
As long as you can copy and paste Python code to Mojo and it is 1:1 compatible with all your existing libraries and is hundreds of times faster than Python, that is much better than wasting time rewriting it in another language that is 8x faster than Mojo (in its first release) with hand-optimizations from Julia language experts.

I expect Mojo's first release to be fast enough that it would get the Python folks using it over Julia and that the next Mojo release or future ones will get another 8x or 10x faster.

The same outcome happened with Bun 1.0 and already claimed the top spot in speed and compatibility in the node ecosystem in its first release and it isn't even done yet.

The least amount of effort to get something done much faster wins by default.
One of the sources referenced in the paper is about the work the company I co-founded is doing (https://phylum.io). We've been working closely with PyPI to not only report issues related to malware, but are also helping provide guidance around on-going work to help curb additional malware in the ecosystem. I think this is a step in the right direction, and one I hope other ecosystems will eventually take.

Though, this is likely to be a cat and mouse game for the foreseeable future. Detection will get better, and attackers will change tactics.

In the meantime, we've been open-sourcing some tooling to help protect developers from these sorts of attacks. Namely, a sandbox that locks down network/disk/env [1] and our CLI [2] that allows you to perform a `pip` install in the sandbox, after checking our API for behaviors/issues with the package. For example:

phylum pip install <pkgName>

Really glad to see software supply chain security getting some academic, rigorous study. Backstabbers Knife was one of the first I came across, and it's been a consistent stream of papers since.

1. https://github.com/phylum-dev/birdcage

2. https://github.com/phylum-dev/cli
I wouldn't want my cardiac surgeon to be purely self-learned (although, I'd take it as a positive signal if they have great curiosity, and are well-read).
Mojo released an example of their new language which will mean readability and simplicity compared to the Python implementation will surely have been a requirement… I get someone within Modular doing some horrific looking low-level Mojo stuff could get it much quicker.
At this point everyone is going to get it anyway. And when someone coughs it may not even be covid. Personally it's only ever given me the sniffles rather than coughing (I mistook it for hayfever once).

But even if you're vulnerable, you're gong to get it sooner or later. This is why the vaccines are still being offered to vulnerable people. As healthy individuals can't even get it anymore here even if they want it.
temporal proximity to now, closest to furthest

0. climate change has already entered an irreversible spiral

1. decades from now, the irreversible spiral having deepened and accelerated, civilization as we know it has been destroyed, leaving no authorities to do anything about climate change

2. decades to centuries from now, climate change makes earth mostly uninhabitable

3. hundreds or thousands of years in the future, if they weren't all dead, humans perhaps would have been able to maintain a self-sustaining colony of all for humanity another planet

there's not a realistic path for humanity to survive an earth-destroying asteroid, and there never will be
Greek wiretapping case 2004–05 [Wikipedia]
Doc's install section for Linux missing DEB/RPM, please update docs.

Extra hint - you may provide text snippet for Ansible playbook/taskset with proper sha256/similar checksumming for installing via "Download from Internet, not from your distro repos", the same for Puppet (which gonna be bit more complicated).

Will ease up a bit system's administrators work - SAX - system administrator experience, if you wanna name it that way :)
Opening Prayer Open my heart to the needs of others so that I am generous with my gifts in ways that truly are a blessing and bring you praise. Read 1 TIMOTHY 5:1-16 Widows, Elders and Slaves 5 Do not rebuke an older man harshly, but exhort him as if he were your father. Treat younger men as brothers, 2 older women
Embeddable Common Lisp 23.9.9
> Isn't "keep the same interface when you move to the cloud" a desirable thing?

NO.

I wish I could somehow bold that and make it 100 pt size.

The cloud is the interface. It’s a distributed multi-tenant operating system with accounts, ACLs, event logs, scheduled tasks, processes (lambda), and so forth.

Most critically: it has a fully virtualised software defined network already!

Layering anything on top is absolute madness. It’s complex enough as it is.

The built-in networking is integrated into the monitoring, has the same RBAC model as everything else, and can be templated out using a uniform API and declarative deployment syntax.

Something like Cisco will sit on top of that like a steaming hot turd on a manicured lawn.

Last but definitely not least: the cloud-native network is hardware accelerated into FPGAs (Azure) or custom silicon (AWS). There is absolutely no way for a vendor like Cisco to even begin to approach the scalability or the latency of the native network in software.

A customer of mine has made the catastrophic mistake of adopting Aviatrix instead of educating their network team (or simply making them redundant.)

Aviatrix introduced a latency overhead of 3-5ms within the same zone compared to the native latency of 80 microseconds! That’s a brutal amount of overhead for everyone else to pay for “our network staff act like dinosaurs before the impact and I’m too scared to tell them their careers are over”.
Nearly all of which have pivoted from the free at point of use model since moving money for consumers at no cost is not often profitable.
> You should apply a bit more critical thinking to the lines you have been fed.

That's incredibly ironic coming from someone who unironically uses the term "misinformation", which is an anti-science emotional manipulation tool meant to suppress dissension, and uses manipulative language like:

> I would beg you to look back at where you picked up these bits of misinformation, and completely eliminate those sources from your information diet. They can not be trusted, and will infect you again with bad info that puts your health at risk.
China is a dictatorship. They are claiming that it wasn’t a dictatorship but a communal effort. This goes against the CCP’s narrative
So to be rewritten from scratch every 2 years.
CADT strikes again. /s
Every year my family goes to watch the Perseids in the desert, a drive of a few hours. This year, not one but two other families joined us... and this was the first year ever that we had clouds in our remote viewing spot. It was so cloudy that after ten o'clock we saw not a single meteor, and most of us stayed up until three to catch whatever we could, despite having work the next day.
As someone who tried (and somewhat succeeded) in writing a 2D accelerated driver (mainly blitting) for Win9x on newer Intel GPUs, this is a very interesting project --- the 3D acceleration in particular is a great piece of work. It's always nice to see the community taking over the creation of drivers for newer (virtual) hardware after official support has abandoned it.

I don't see any mention of how it handles virtualisation between DOS boxes, which is one of the more tricky bits of writing a 9x display driver.
Conceptual impedance matching is the biggest problem. To use a personal example, I've got this silly idea, the BitGrid, which might (but probably not) prove to be the optimum way to get petaflop computing to the masses. It's based on some obviously bad design choices (when viewed from the FPGA world, for example), so that someone familiar with that world would quickly come to the conclusion that it's just not worth consideration.

Programming the thing requires a completely new set of tools, as there's no Von Neuman architecture to be found. It breaks my brain a little bit, every time I work on it. Completely writing new software isn't something we've had to do since the 1960s. We've always been able to bootstrap off of old ideas, and old code. Effectively, none of the tools normally used to develop software help.

The "impedance mismatch" of this thing is just too big for anyone to even think about making a startup around it.

Something that was a small improvement on FPGAs would be far easier to sell, but there's not much investment money in hardware, let alone ASICs.

A similar example would be the Jet Engine... nobody thought it could work, and it required a completely new way of doing things. Thus, nobody wanted to try to develop it.

Big changes require stable supplies of long term research and development funding. That's something the market just isn't equipped to handle, especially when driven to meet the quarter's numbers.
Even without encryption, https://en.wikipedia.org/wiki/Erasure_code is common in archiving, and that tends to look pretty random. Obvious patterns don’t maximize the smallest differences between any possible messages.
I've always liked the particular bit of American exceptionalism that means the NSA and CIA have carte Blanche to break any law outside the USA if it advances US interests and they are never going to court or being extradited. Even killing a british kid on the road will get you quietly off base and back inside the borders with the UK about as close an ally as they come.

They'll neither confirm nor deny, but you aren't getting to test it in court. Not for troops, not for citizens associated with official business, not for rape or murder in Okinawa or Korea. Nope. Thats the deal. If it's our troops then it's our courts or it doesn't happen.

Say what you like about the French, they sent their spies who did the rainbow warrior to Kuergelen for a week's r&r to say sorry.
I suspect it’ll be Russia moving on old Soviet states, Iran on Israel and Iraq, North Korea on south, and China on Taiwan to create a global war on so many fronts the west can’t contain any of it. The goal will be less about defeating the west and more about breaking the image of unassailability and forcefully assert a multipolar world order.
> I always wonder who these "problematic individuals" are

By my present estimate, mainly, twits that have a hissy fit whereupon they insist that you rewrite tends of thousands of public git commits to remove their name.
Yes and no …
Just because somebody does not care about making an employee mad, it does not mean they will get a job if they do.

You might think your employer is horrible, but it’s the ones that smile and stay how great the company is that will get hired.

When you NEED a job, people will go back to being company-pleasers.
I suppose I'm struggling to understand what "colour" means in the context of Rust. It's surely just another word for signature. For some reason it's trotted out every time there's a discussion about async. I can only assume it's to do with the original use of the term for JavaScript async (which I know almost nothing about and have no opinion on), but I just cannot see its point in Rust async.
I don't really understand why my comment has ellicted such a strong reaction, but I'm sorry for bothering you.

I think we're engaging in different, parallel hobbies. The circumstances of my life don't permit me to plan something like that, years in advance and a thousand miles away. I basically take what I can get, and am pleased to have seen more amazing things than I could have bargained for. When I had an opportunity to see an eclipse in my area - I made the best of it.

Happy stargazing.
Yeah, the lock-in will come with CI & and the pull-request model that requires an account in this case. The former Microsoft GitHub largely ate all the competition with its own ‘free’ (gratis) offering in Actions, but you could seek out a different CI or self-host. The latter could be easily circumvent by offering a mailing list or maintainer email—or mirror elsewhere—but it’s rare to see this with projects on Microsoft GitHub.

Well, and joining most discussions require an account, and if your alternative communication platform is Discord, we see all the same issues of lock-in.
> system working poorly doesn't make it unconstitutional

Due process and equal protection.
I still remember when I came to you with my “attachments shouldn’t live in the mssql database” plan and you said “yeah, probably, but doing it any other way would be a million times harder to maintain.” You were 100% right and I think of it often when I encounter someone who is about to do a similar dumb thing for “the right reasons.”
better not be short either
As wildfires burn across the world, what is the role of Australia's eucalyptus?
Stop overcalculating a mess out of junk, learn Rust and see what a Typesystem should and shouldn't have to do.
Ask HN: Has anyone used Proxmox for a daily-driver laptop?
The title might seem obvious, but I'm looking for something very niche.

I want to run Proxmox as the host OS on a powerful laptop with several VMs for dedicated uses, and a dGPU for the primary VM.

On this laptop I want to run:

pfSense
Windows 11
Linux (Fedora Silverblue)
RancherOS
~some rescue Linux~

I want pfSense to be the arbiter for all things networking, hosting a paravirtualized network device to the other VMs. My only firewall to manage is at the VM that operates pfsense. None of the guests will have a firewall. Windows is just for gaming and occasional class work (to run proctoring software I can't get away from). My primary OS would be Fedora Silverblue, because I'm really hot on rpm-ostree/immutable Linux images. I think this is the future, being able to extend/build/publish your changes so easily on Dockerhub is just amazeballs and the overlay-nature of it is spectacular to fallback to a working image. RancherOS is a separate k3s-hosting distro to run services off of. I'd prefer these to be isolated on another VM, but accessible from my primary. And then I need some minimal Linux distro to fallback to if truly nothing works. Proxmox should start the rescue Linux if all others fail so I can... rescue.

The last odd thing here is I believe I need a laptop with a MUX switch. So the integrated GPU will show me the Proxmox console, and the dedicated GPU will be offered to either the Windows 11 or Fedora guest for gaming.

I think this should all work. I think it would be incredibly powerful to separate concerns in separate VMs. "You do networking, you do gaming, you do docker & k8s, you do everything else/primary work". Laptops have never surpassed desktops in performance, but I think we're there that we have enough performance to do this.

I don't know anyone yet doing /this/, so I'm asking for info. I remember I ran into a lot of trouble a year ago trying to splinter off virtual functions of an integrated Intel GPU so each VM had its own virtual device with acceleration. Intel is trying to go in that direction, but I don't know if AMD has a similar facility. What should be easier is just handing off a dGPU to a VM.

(Yes, I have heard of Cubes OS and it's not what I'm looking for)
Isn't Cisco also the arch enemy for telcos as well? Good luck to them with their ATM(not the bank machine) and ISDN and all, and they have since converted to IP, but still.
This reminds me of the first internship I did. It was at an AI based anamoly detection startup. Their pipeline for the biggest client used to run in just under 3 hours, most of which was apparently spent extracting meaningful information from sensor data from a proprietary binary format using a shared library provided by the client. Ran it under perf and found that most of the time was spent calculating a bunch of sines and cosines. Used the LD_PRELOAD trick to log the sine and cosine calls and turns out that we were just calculating the sines and cosines of the same set of angles over and over again literally thousands of times. Wrote a wrapper to cache the values of sines and cosines in a table and return the cached value if it is already calculated and brought the running time of the pipeline to under 15 minutes. Which meant that the data science team could run their experiments and iterate on their model much faster and cheaper. Fun times.
Smbscan – The Better Alternative to Smbmap?
Been playing around with smbscan for the past days and absolutely loving it. Learn how you can utilize this nifty tool for auditing SMB shares and their content and why it might be the better alternative to smbmap.
Welders are exposed to a heavy industrial environment on a daily basis... Harsh chemicals, metal fumes, grinding dust. None of these things are healthy to be around.
Even when you trust the repo owner, you can't trust their projects. Bad actor could still sibmit a PR with malicious code and it could be merged just by negligence.
Why did Netflix use Nginx and FreeBSD to build their own CDN? (2015) [video]
An async function is some syntactic sugar around a sync function that returns a future. You can merrily call one from the other.

You can only convert an int to a float with significant caveats. It's not a general trivial conversion. More complicated types may not be convertible at all or behave in all sorts of exciting ways (including having arbitrary side effects).

The point is that none of that is different to async functions. Of course you have to know what to do with them for them to be useful, but there is no requirement for them to "infect" calling code.
Because investment leads to better future payouts?
TL;DR

This is about pure Ruby code optimized by JIT vs manual optimization by writing C extensions (native code). There is Ruby code around those extensions but

> The JIT cannot know what the native code will do to parameters (possibly mutate them), it cannot know what type of Ruby object will be returned, if the native code will look at the stack, or if it will raise an exception, etc. Thus the JIT is forced to have a conservative approach when dealing with native code, essentially forgetting much of what it had learned, and falling back to the most conservative implementation possible.

Hence the JIT often makes pure Ruby code run faster than the code with C extensions.

I think I heard the same argument many times with other JITed languages, interpreted or compiled.
I have, on numerous occasions, come in to work to find that a colleague was laid off without anybody giving advance notice to them or anyone on the team. Just, poof they're gone, hey team let's pick up Jimmy's tickets now!

If that person's manager was not my manager, I was not even told after they were laid off -- I found out when emails went unanswered and I had to go looking for them.

I think that's pretty typical, unfortunately.

Anybody who would judge a coworker for leaving without notice shows a pathological lack of empathy. Doing so publicly would be a great way to damage your own reputation.
I recall Hale–Bopp being incredibly clear in the sky night after night after night. What are the chances that we will see another comet of that magnitude in our lifetimes?
Fashion driven industry.

The best technical skill any senior can have, is to get a feeling when to ignore fashion, and when to actually pay attention to fashion that stays around.
Similar to the previous campaign TAG reported on, North Korean threat actors used social media sites like X (formerly Twitter) to build rapport with their targets. In one case, they carried on a months-long conversation, attempting to collaborate with a security researcher on topics of mutual interest. After initial contact via X, they moved to an encrypted messaging app such as Signal, WhatsApp or Wire. Once a relationship was developed with a targeted researcher, the threat actors sent a malicious file that contained at least one 0-day in a popular software package.
Naive question, since I tried my hand at rust years ago, but haven't looked at it since: isn't it possible to write another crate to build go-like channels? A kind of "write, then lose the reference" function call that places a value on a queue, and an accompanying receiver. That could make life easier for "normal" software development.
I believe dogs have qualia because I believe all mammals share a common ancestor and thus it stands to reason that we, being somewhat related to dogs, must have somewhat similar experiences.

Although not everyone feels that way and many believe only humans have qualia.

More to the point though... It's a hard stretch convincing me that matrix multiplications lead to qualia. At which point in the multiplication is sensation felt?

Whereas a dog and a human presumably operate on principles we still don't understand, so there is room in this unknown space for qualia to exist.
Not everyone rides the FAANG train.
Join 100 Remote Job Hunters to Find Global Remote Jobs (Work from Anywhere)
"X outperforms C/C++/Rust/Golang".

Only if the code design in C/C++/Rust/Golang is bad.
God help us all. Although, it's been perpetual war in the middle east since forever, Africa is a shit show, and at least one of the nations you mention is independently nuclear armed so the outcome will be interesting to say the least.

Two of your proposed engagements would echo the iran-iraq conflict for body count because they will be contested on sea and land, and at great cost to the aggressor. The last time Korea was fought over approximately 5m troops were committed. I guess that soaks up a lot of china's unemployed youth but I doubt they will be happy about it.

There are no cheap victories here. Once the more modern stocks of weapons runs out, it's slings and arrows.

Henry Kissinger will fix it. Don't worry.
I think this is a somewhat misleading title.

It does not outperform C.

This article appears to compare a suboptimal native C implementation to a JIT optimized version of some similar Ruby code. The JIT only outperforms that particular hand written C implementation in this case.

Still, great that the Riby JIT can do this now, but the title would be better phrased as ‘Ruby JIT in some cases outperforms suboptimal hand written C code‘. That wouldn’t be good clickbait though.
The Ugly Reason Apple Acquired a Classical Music Label
Rough night?
The premise of this article seems to be that, if only Cisco had not been so focused on stock buybacks, it (and by extension the US) would have been a 'leader in 5G'.

I... sort of doubt that? First of all, the Cisco strategy has pretty much always been to acquire the lead player(s) in any sector it's truly interested in. R&D for possibly emerging markets is seen as a distraction that's best done outside the company: just fund it, spin it out even, then buy it back later when it turns out to be a good idea.

Secondly, Cisco has been burnt badly in the past by telco-related technologies (DSL and cable), where its US customers (Comcast, AT&T et al) rewarded its significant investments by rapidly turning to cheap commoditized competitors instead. Same thing happened in the 3G era to Ericsson/Nokia (with world-wide customers), and until the much more recent "well, you can't really use any Chinese equipment in your telco network" trend, you can't really blame anyone for actively ignoring that market.

Finally, it's debatable how much money there actually is to be made in '5G' as a standalone technology: like land-line telephony, the stack is pretty much indistinguishable from 'regular' datacenter tech these days, and apart from some niche management software and ultra-specialized radio hardware, it's hard to see where Cisco could have made a real difference, given the total lack of promising US-based (or even EU-based) acquisition targets in that space.
Aw snap! I had this exact idea last year but didn’t build it yet. See GitShuffle here https://blog.waleson.com/2022/11/things-i-didnt-build-yet.ht... I even bought gitshuffle.com

Great to see it in a working version!

I think there’s serious potential in this if you do it on your team’s own code. It would be a fun game to play with your colleagues on a Friday afternoon.