skysight-inc/HackerNews huggingface dataset:
From what I understand ImageMagick's vulnerability management involves updating to newer versions, so this is specifically about distributions that don't. Ubuntu chooses to distribute older versions with their own patches, but require Pro for you to get them.

With that said, the mentioned vulnerability is an odd one. A CVE published in 2023 with a CVE number for 2022 for a bug that was found and fixed in 2020. The bug in question is a memory leak when passing -help.[1]

[1]: https://github.com/ImageMagick/ImageMagick/issues/2889
Doesn't seem like the link works?
I'm a programmer. I mostly look for C++ and Python stuff, with a smattering of other things. I find Kagi to be better than both DDG and Google today, and perhaps close to as good as Google was at its best.

It's hard to tell: it's very subjective, and I'm not sure how accurate my recollection of Google's past performance is. The world has also changed: there's a lot more SEO-spam sites out there, so the job of a search engine is much harder.

They have a free trial (300 queries? 500? something). I did that first. It was a little quick to finish -- I wasn't quite ready to commit when it ran out. But I bit the bullet (it's monthly, so I was out $10 at worse) and ended up staying.
Weird as in saying the common practices are not correct, and here is my proposal for a better practice, as supported by statistics.
I think another big problem is that women will try out a new site until they have one stalkerish experience, and then they're gone forever. So each new site has a shelf life.
This matches my feeling. As good, perhaps even better.
This guy's videos go so in depth, I get them impression that decades from now people will reference them to get a picture of what today's cars were like
I think the pihole docker image uses dnsmasq. It definitely supports being the dhcp server and integrates clients into its dns responses.
We (Australians) also care about his opinion because he was an avid sportsman and took out a British record for downing a yard glass of beer.

Although I suppose the law degree and Rhodes scholarship add a little weight.

The main point here, though, is we are able to seperate his personal opinions from his role as Prime Minister just as I would hope that many Catholics would be able to seperate the opinions of the Pope on Python (if in fact there were any, given that this entire story seems to lack a direct primary Pontiff quote) from the Pope's official statments re: Catholicism and the wider Christian beliefs.

I suspect however that perhaps devout members of a religious flock that regard a person as a direct agent of God on earth might be less discerning about that person's opinions than the citizens of a democratic country are about the opinions of their temporay prime political representative particulalry as a good number of those citizens might not even support that representative.

TLDR: democratic citizens are likely more critical of their ephemeral leaders than religuos flocks are about their designated "voice of the lord".
Isn’t this just what free open-source software does already?
Dear Bellingcat, you forgot the most important advice:

9. Get out of social media.
CT as in X-ray computed tomography? If so, it's dubious if that's safer than a colonoscopy, depending on what ionizing radiation harm model you use.
I’m not sure that article really aged well. Code rots pretty quickly nowadays. Convoluted old code no one understands starts to create wicked bugs as future teams wedge in new features. Processors get overloaded. Memory leaks appear. Libraries evolve. Design trends change.
Give me phone or give me ativan. Either will suffice. Both is even better, but...
The UI should handle it gracefully, for example by deactivating buttons on first click and showing spinners where appropriate.

In one case I load required assets while someone starts filling a form so that the website is ready to generate a PDF when the form is filled. This gives it a minute to load, with fallbacks if it fails.
There are plenty of other certificate profiles besides CABF, but that’s besides the point. My actual question was whether Autheticode is actually requiring the CABF BRs for OV certificates, or whether there was some arbitrary CA-side policy change.
Big discussion earlier: https://news.ycombinator.com/item?id=38054860
> We need something like Let's Encrypt for signatures.

It's not the technical infrastructure, it's about trust. LE only solved the problem of safe transport, but not verification of authenticity of the endpoints. That's what incurs such cost.
But vue is SPA only. And Has No Direct relation to SSR framework
I of course agree with most of what you say. The thing that impresses me about this whole ruliad business is that it seems to operationalize computational version Tegmark's mathematical universe hypothesis: all sets of mathematical axioms plus their computable consequences equally well have the secret fire of existence, our SU(3) x SU(2) x U(1) world is not the only realized one.

But it's also slightly different; in Tegmark's description of the MUH there's not a meaningful connection between the universe that realizes (let's say) Euclid's axioms and our universe. They're just separate places in the Platonic realm; they way we learn about Euclidean geometry is by computing, using some little Turing-complete region to simulate geometry. If I understand correctly, the ruliad says no, it is possible, in principle, to navigate through the hell of a mess and actually find the place in the hypergraph, not disconnected from the place that describes our lived experience, that is Euclidean geometry. It's sort of the ultimate reading of the Copernican principle: the laws we see around us are not particularly special and aren't privileged over other laws.

I find that to be a pretty beautiful philosophical idea while also thinking it's not a very practical one for doing actual science. If it contains representations all possible consistent axioms, well, how would you ever make a prediction about an actual experiment nearby? In the framework of relativistic QFTs we can make a bunch of different models and test them, settle on one, and use it to make predictions. Or find that actually it was just a low-energy EFT all along, falsifying our model. But the ruliad can never be falsified; the claim is that every possible universe is in there. How do I use it to make predictions about physics beyond the standard model? Or even just SM physics? Unclear.
> You will need to create an AWS S3 bucket or digital ocean space in order to store your uploaded documents

The org I work for would love to self-host on-premise a digital signing solution so they definitely won't use external dependencies like AWS. Theoretically they could swap with minio but last time we used it it was not a drop-in replacement yet.
But that's a thin line. Free certificates negate security.

Instead, there are various foundations that sponsor popular open source projects for costs like signing certificates and hosting. I'm sure one of these should be trustworthy enough to obtain a signing certificate themselves so they can issue and revoke certs to various projects without much cost.
Physics, chemistry, and biology are far greater gifts than the fictional tales and speeches from people long dead, if simply that something of use might be made from them.
Lack of open governance explains the fork in 2002. [0] The github commit history shows it's still a largely one-person-band. [1] The problems with this include a lack of succession planning, a lack of ability to scale bandwidth, and a narrower pool of ideas. The documentation website is really out-of-date as it mentions using a Borland compiler.

Alternatives to IM:

- https://www.libvips.org

- http://www.graphicsmagick.org (IM fork)

0. https://marc.info/?l=imagemagick-developer&m=104777007831767...

1. https://github.com/ImageMagick/ImageMagick
Digit is a symbol, number is a concept. It’s a map-territory distinction. While a single digit can be used to represent a numerical value, it isn’t a number per se.

You can’t really use the number 0 to make 100.
I couldn’t activate a capital one credit card in the US with a real U.S. phone number. I didn’t just need a phone number associated with my name, I needed to be the one paying for the plan. I was on a family plan and I wasn’t the primary. Then I tried verifying my passport through their proprietary portal and it rejected me for unknown reasons. So I said fuck me then and cancelled the card.
If it is RED blood, it is a vein that breaks when the your stool passes. Most likely hemorrhoids.

The problem is when you have BLACK blood in the stool. That may be an internal bleeding.
Ask HN: What will it realistically take to create an iOS app?
I am a web developer with extensive experience with React, TypeScript and Node.js.

I’m building a side project and tossing up whether to build an iOS app or a web app. I know what’s involved in web apps, but can anyone give an overview of what it’ll take in terms of effort & time to create and submit an iOS app to the App Store?
See https://netwrck.com which is more focused on entertaining AI characters that are voiced and illustrated with AI images too.

Much more affordable and engaging than being told that you are talking to an AI Language model
The endpoint (my ID) is free - it can be used to verify myself digitally. And that is what all QES services do, initially (once). What other costs if not hardware/bandwidth apply?
You know the answer: never. It works, doesn't it?

And they're right more often than I like.

Edit: I'm definitely not saying they're always right, or even often. I'm usually with the line of thinking of the people commenting to me. It's just, I've also seen systems that had ten years of further life and never needed their hacks fixed. We developers are sometimes too fixed on the quality.
It’s also good know that if you’re seeing bright red blood then it’s a higher chance it’s hemorrhoids whereas dark red you definitely should get it checked because it’s coming from inside your colon.

Also there’s supposedly a poop test called fecal occult blood test that has a high rate of detecting colorectal cancer that you do over the course of 3 years. I saw this on nhk Doctor's Insight: https://www3.nhk.or.jp/nhkworld/en/ondemand/video/2086035/
Volkswagen plans job cuts, further launch delays at software unit
Thanks for the clarification.
I bought them for $5k (without VAT) in Sweden last month.
and ironically for this conversation, the new definition of kg ends with a ....."per second" /s
I’m well familiar with DCD. I’m also aware that Brendan Perry’s lyrics of the 1980s are faux-profound and were created in a cloud of pot smoke. I suspect even he was eventually embarrassed at what he had written as a young man, as that material disappeared from concerts and he adapted a different lyrical approach for later efforts.
Do note that if you want to use Suica/PASMO (or any other FeliCa based card) on an Android Phone, the phone must have been destined for Japan in the first place. The hardware is generally disabled for any non-JP SKU due to licensing fees.

The keywords one should be looking for is Osaifu-Ketai.

iPhones are the exception, and just takes some finnicking with the settings.
Linear Algebra Done Right, Open Access, 4th Ed
idk bout that holographic stuff but i wonder if a 'joi' living and your desktop and still capturing those interaction intrinsics would still resonate with individuals.
In the broader picture, where most adults are lonely and can't make friends, being negative and focusing on the friendships lost thru community housing seems a bit myopic. If the multitudes of relationships gained aren't worth the ones that are burnt - and I am not minimalizing those that are being burnt - it truely sucks to lose friends - but if, over the years, you haven't managed to gain more friends than you have lost, then something is wrong.

I can't say what, because I don't know you and your circumstances, nor your morals, or lack thereof, but it's Saturday night where I am, and I'm going to go enjoy it with friends that I've been avoiding, in favor of doom scrolling.
I’ve found the easiest option available here is through using Azure KeyVault to store the keys. I use a custom module to sign my PowerShell scripts and dlls [1] for this because I can integrate it with OIDC to sign the code using the keys stored in the Azure HSM. While the builtin pwsh Set-Authenticode cmdlet can’t do this currently there are other options that rely on Window’s authenticode APIs like AzureSignTool [2] that I highly recommend.

While I’m unsure if Azure is suitable for actual companies I think the risk is ok for what I need it for and the API quality as well as OIDC support make it quite nice to use with GHA.

[1] https://github.com/jborean93/PowerShell-OpenAuthenticode
[2] https://github.com/vcsjones/AzureSignTool
I suggested the certificate solution but it's far from being lightweight. I found a simpler solution that may fit some use cases.

The client sends a request, the server returns a response that may be big that also contains a random value. The client must return this random value in a thank you message.

If the server doesn't receive the thank you message, it slows down responses to that ip address and eventually blacklist it if it's repeated.

From the client perspective, the answer is obtained in one round trip time. The price to pay on the server is the need to keep track of the expected thank you messages, and the throttled or blacklisted addresses.
It is already very dangerous, no need to turn it into an explosive. It won't be given out for handling to untrained people.
You appear to be leaping to the wrong conclusion. The problem is Canonical charging money for security updates. CentOS, Alma, Rocky, Fedora, Debian, openSUSE, Arch, and 300+ other Linux distros don't charge money for security updates either. The moral of the story is "Don't use enshitifying corporate Linux distros run by crazy people."
Which is more environmental and actually useful unlike that fuzz you have to keep wasting energy on or get fined for letting nature grow in your own home.
I feel that's what half the indie hacker movement is.

I saw a service the other day making enough to be a good salary for a single developer in most parts of the world, that simply generates images of your MRR.

I'm considering which colour shovel I should sell...
> You talk as though this has already happened, but that's not the case. Companies pay Google with money they hope to recoup from you via your purchases, but whether or not you choose to buy the thing advertised is completely up to you. Advertising is an investment with uncertain returns, like any other.

It has already happened. Things you buy have an online/google advertisement markup whether you use youtube premium or not. You pay for the ads no matter if you watch them or not.

Free services aren't actually free, on a large scale they affect how much everything should cost.

> It's possible, but I just don't think there's enough of an appetite to pay small amounts of cash for this. It will be interesting to see what happens with Kagi (though I acknowledge that if it fails, that would not be definitive, since it has to compete with ad-supported services, and massive, entrenched ones at that).

This is because free services are a trap. People do not want to pay for search BECAUSE there are """free""" alternatives. If every services become paid people wouldn't be as reluctant.

Free services also create wrong expectations and change the way we should use the service. Take youtube, it is free so everybody expect everyone to be able to access the platform, and so people tend to only upload to youtube because "why would you be anywhere else". And now, when youtube obviously change its term you have a wave an angry people seeing youtube as a platform that must remain convenient or their world will collapse.

If video platforms were all paid, people wouldn't have the same expectations. Uploaded videos could only target users who also paid for the platform, and would instinctively understand that this is a temporary platform.
Feels like the big companies are going all in on AI. Feeling like they are still afraid to do things like say Chatbots for fun eg https://netwrck.com which is more focused on entertaining AI characters that are voiced and illustrated with AI images too.

Much more affordable and engaging than being told that you are talking to an AI Language model or that you aren't moral (thanks lamma2)
> Cargo rockets don’t all need to be launched at once, they just need to be ready to burn in the launch window.

So what's the plan, launch all those rockets into LEO, and then have them sit there for up to 2 years before sending them on their merry way?

Whos doing maintenance? Who repairs these rockets when they get hit by space debris? Who'd even know one was damaged? What's the backup plan when almost inevitably some of them will fail come travel-day? More rockets? Whos doing maintenance on them, and who pays for them?

Where are all these rockets coming from btw.? Spaceships aint cheap, they have to earn their keep by doing things like ferrying commercial cargo into LEO. Who can afford to have a fleet of them sitting around doing nothing?

Look, I'm not saying that any of this is impossible. I'm just saying that a VERY hard task, that we have never done before, just got an order of magnitude harder. At what point in this hardship am I allowed to wave a little cost-benefit-analysis and ask what exactly we gain from sending people to Mars (aka. nothing that can't be done better with robotic probes)?

> Return journeys will likely be limited to passenger rockets.

Let's start with: return journeys will be limited to rockets that are still operational after landing in a rock-desert, with zero support structures, on a sheet of powdery regolith-dust, and after having been blasted for months with Martian dust-storms, and subjected to extreme temperature differentials.
they're right over and over, until they're not and then the company tanks because they need a rewrite.
Non ECC? Straight to jail

Support ECC but didn’t advertise it? Believe it or not: jail.
https://www.dyalog.com/case-studies/healthcare.htm
I’m currently wondering if I should switch to Vue or something else because of “use server”
I just watched Blade Runner 2049

- Spoiler alert -

Joi tells Joe anything he wants to hear. Even the name she gives him is hard-coded. She is a product that is engineered this way. Eventually he realises that he's just another John. Her (2013) had a similar conclusion.

A few days ago I tried those ChatGPT characters and they felt like a crude version of that. They tell you what you wanted to hear and feig interest in everything you say, without understanding any of it. It's really weird.

To me, it feels insincere, like a salesperson or a tourist trap conman. You're not special; making you feel special is just part of their work. You are loved for what you are, but in this case what you are is a source of income.

I wouldn't have Joi or an AI companion in general. A frictionless relationship based on a prompt is nothing like the real thing.
Sounds like Microsoft… you get Microsoft npm releases signed if you use Microsoft GitHub Actions. Deployed to Microsoft Azure, built with Microsoft GitHub Codespaces enhanced with Microsoft GitHub Copilot, all from your Microsoft Windows machine.

Folks shouldn’t be forced to use proprietary software from US-based, publicly-traded megacorporotations just to build & sign their libre software.
The tinder style AI Chatbot movement is really big now and basically replacing humans... https://tinder.netwrck.com
It's quite astonishing that they thought that throwing 6000 people at the problem would work, then subsequently deciding to cut 2000 ...

Throughout my career I came to believe that the best achieving teams grow organically from the inside-out. A top-down "forced" innovation approach rarely seems to work.
> I'd be shocked if weather forecasting is ever precise to less than 1-2 °C

That's not a forecast .. actual forecasts for a region are often more accurate than that wrt "mean tempreture" for that region.

Where I live the BoM (Bureau of Meteorology) cannot "accurately" predict the upcoming daily tempreture and rainfall for the town that I'm in.

They do very accurately predict the mean temp. and rainfall for the wider region.

Doppler RADAR gives a very accurate measure of the amount of moisture held by rain bearing clouds, stable wrt broad area winds give a good path for that moisture's travel in the next 12-24 hours, experience + data give solid predictions for the amount of water to be shed, along with bulk cooling from shade and water fall + evaporation.

The difficulty rarely lies in the bulk parameters for a broad area, the devil is in the small details which are inherently turbulent.

To measure the accuracy of forecasting it first has to be ring fenced by what area you intend to predict the mean attributes for, the timescale you intend to project for, etc.
Angris – Generate Cartoon Episodes with Prompt
I am working on this tool which can make animated videos from prompt. The idea is to make it easy for storytellers to collaborate with AI to tell their stories. The larger vision is to make pipeline where episodes are generated when user queries with no extra human interventions after the initial configurations.

You can check a recently generated cartoon in here.
https://twitter.com/krznun/status/1718450007278514180?
I agree, I find it hard to get too emotional about celebrities, even though I may have had great respect and admiration for them. For example, David Bowie, I was a little sad and disappointed to lose a great figure, but we all have to die.

For some reason Sinead O'Connor was an exception to this, and I did feel quite emotional at her passing.
Not the case for ImageMagick, there are some things that cannot be installed for current user, like Windows services or specific kinds of shell extensions.
no strange no change
I'm saving infinite money by never going to the bar at all! I'm wealthy beyond dreams!

In reality, one 5W bump isn't going to move the needle, but you only have to make that concession a few times before you end up adding an appreciable amount to your power bill. I'm paying €0.39/kWh for power. When I added Starlink (57-75W constant draw, equating to at least €12/mo on the bill) I went looking for things to unplug to wash that increase out. Turns out my power consumption monitoring plugs were using about 15W on their own, and having too many wireless access points was adding another 45W. That's all been sorted out, and I'm more cautious of suffering death by a thousand cuts now.
This is very common in France. I think all my 50+ acquitances had one.

There is a national screening campaign based on sending a sample of your stool, but getting a colonoscopy is a matter of asking your doctor.

It is true that colonoscopy is not the first mine of prevention but anyone who asks will get one. Free of charge.
Has anyone here tried out that SignPath (https://signpath.org) thing mentioned in one of the responses?

From their website:

SignPath Foundation provides reliable code signing for Open Source projects.

If it's legit, then it could be a useful option.
This is an absurd overextension of the word rape. Even if you were completely right that the young guy wouldn't have taken that decision sober and that he regretted it the next day (which you are just assuming based on 0 knowledge), as long as she didn't coerce him into getting drunk, he was of legal age, and he wasn't blackout-levels of drunk, it's absurd to call this rape.

Drunk but conscious people are very much able to consent. One of the main reasons people engoy being drunk in night clubs is the kind of reduced inhibitions that lead to talking to and having sex with people outside your regular dating choices.
Skip the ‘WS’ part & just use the ‘L’
Because it was colon-ized?
It looks like you’re basically sending raw c code to an express server then evaling it with some zig module import. Is that correct? Seems super safe.