skysight-inc/HackerNews huggingface dataset:
> Are you saying that Debian devs review all code in their repos?

Well they certainly do patch a fair amount of vulnerabilities faster than I would. Everytime I checked because I was concerned about a vulnerability, it had already been patched.

> I don't see the added value of Debian's managing build-time deps of my apps.

I can trust the Debian security team to do a better job than I would. I definitely do not trust arbitrary developers about security. If there is one thing I have learned from the software industry, it is that almost nobody cares about security. Turns out that the people in distro security teams generally do care about security.

> I wouldn't want to support copies of my projects which were somehow modified by the 3rd-party maintainers before being provided to end users.

Well maintainers can and sometimes do that. But of course if you don't want them to distribute your project, that's your right. Maintainers usually don't run after devs to work for them for free :-).

Also note that some distributions are not the typical general-purpose Ubuntu. Maybe an embedded IoT distribution wants to use your library, and maybe they want to harden it, or something. If you have an open source license, it is totally their right to do whatever they want.
The firmware is probably not just a signed package but signed binaries in the package as well. One is probably signed with the wrong cert.

This would not cause the updater to fail unless it verified the certs of all the binaries in the package, which most don't
Class primary constructors have always been the default thing in F#, and I found it deeply annoying not to have them whenever I had to write C#, for what it's worth!
https://archive.is/0U2tA
Does that mean unix date calculations do not take into account the leap second?

https://en.m.wikipedia.org/wiki/Leap_second
The impossible Quantum Drive that defies known laws of physics reached space
Amazon Is the Hospital Now
> “I don’t know of any other purely electric drives ever tested in space,” Mansell told The Debrief, including the controversial EMDrive, which, he noted, relies on a completely different technology but also claims to produce thrust without propellant. “If so, this will be the first time a purely electric, “non-conventional” drive will have ever been tested in space!”
Maybe. But China is also unique in that it will happily continue to produce crappy products indefinitely. See: Solar Cells for residential installs.

It is, in fact, my fondest hope that China kicks the shit out of the big auto manufacturers. The big manufacturers have been dragging their feet on switching to EVs for decades now.

EVs are simpler. EVs don't have to struggle to pass weird pollution standards. EVs can be built on a standardized base and have lots of interior customization. etc.

The problem is that China's record on following safety regulations is abysmal. And it's those safety regulations that have always presented very large hurdles for selling cars in the US and EU.
I wonder about that. I expect the replacement system will allow timestamps after 2038, but will we also be able to timestamp files from pre-1970?
No, its a select few relatively non-powerful entities. They will not be taking on the RIAA or MPAA, for example.
I really wish python would steal 'let' from JS, specifically in a block scoped form - coming from perl's 'my' as a way of life, python's (and ruby's) function level scoping and "surprise! variable just popped into existence on assignment!" behaviour really messed me up.
What's the priority then, telemetry data? Why is it rough out there?
Is there documentation for this? Icelanders are Christian (since when, I'm not sure), and would more likely pray. Also I don't think there is a history of human sacrifice in Norway/Denmark/Scandinavia.
This is a bandage, not a cure.

It won't work: Truth can only be healed with light.
I like open-interpreter, but be careful using GPT-4 API, you can quickly run up your bill using it.
They could … share email addresses.
It is not a ring, but it can help you feel like it is:
Someone shared this search site a while back:
https://search.marginalia.nu/

It is a pretty great way to find smaller and more
personal websites.
They call their other webcam "DSLR quality" so at least they're consistent in their exaggeration.
Not strange at all. USA Today has always been basic news writing for basic people.
There was a spiritual successor to dmoz: curlie.org
> the hard part of taking care of this planet is…

GP’s motive is to take care of the planet (and reading between the lines: at least our ability to inhabit it comfortably, since of course the piece of rock will be just fine no matter what we do).

No, age is obviously not the only difference between old technologies and new technologies.

Age is the difference between an old hand axe made out of stone and a new hand axe made out of stone.

The difference between an old hand axe made out of stone and an iPhone 15 goes… umm… a bit deeper.
With the exception of Japanese, those are all crappy in terms of reliability.
I was blessed with the ability to remember most of what I heard and read, and to be able to test really well. In school I never understood why I needed to do homework if I had already grasped the concept being taught and could prove the knowledge via testing. Usually got a zero on the homework portion of my grades and aced the tests which generally made my class grade pretty average.

To me that was always idiotic—know the subject inside and out, yet you get a C for the class because you didn’t hand in a series of busy work.
https://unix.stackexchange.com/questions/758932/unix-time-le...
Is this a joke? Why is this camera marketed like a designer watch? And the market category seems absurd: attach this camera/microphone to your expensive computer that already has a camera and microphone built in.

Altogether it comes off to me as parody, except they will actually take your money.
Disks lie. And the controllers that run them are partners in crime (2012)
If I'm a cloud provider and somebody's workflow is hard resetting lots of my physical machines, I'm going to give them free access to single tenant machines at the very minimum. If they keep crashing the machines that only they run on, I guess that's ok.
Ask the Dutch if they like their bicycles and the Japanese if they like their trains. They'll say yes. Funny that.

People like the environment they grew up in, it's part of their identity. Americans are no different.

Very few people go out of their way to meaningfully explore different approaches to life around the world and form an informed opinion on what they like.
Formatting to make it a little easier to parse. There was only a reduction greater than a CM on the right side which almost seems to be just lagging the left side reduction from the Chemo. However without a larger number of participants there is no way to call any of it significant.

DIM ORG->CHM->KTD

RX: 5.5->4.0->1.9
RY: 6.2->2.7->1.0

LX: 6.0->2.0->1.7
LY: 3.0->1.8->1.0

Edit: Also keep in mind that we are talking about 2 dimensions.

For instance on the right side in cm^2: 34.1 -> 10.8 -> 1.9

And the left: 18-> 3.8 -> 1.7
My experience is entirely opposite. I much prefer to go to cashier, because they're easily 2-5x as fast as me, which isn't surprising because they literally scan barcodes for a living. On top of me-being-non-specialist penalty, self-checkout machines also slow down the scanning process, as you need to wait up to few seconds for the scale to stabilize.

Now, neither self-checkout nor human register display some discounts, because they're using the same system, and the system applies those discounts at the end. But here's a thing: I can ask about promotions and prices while the cashier is scanning. Also, if I realize after paying that something is wrong, I can immediately dispute it with the cashier, instead of waiting for the employee to maybe come in the next 5 minutes (they're probably on the other side of the store, busy unloading some boxes).

As for the pressure, I personally feel much more pressure coming from an unyielding machine than from a human.
I live in Maryland and have an interest in food history, and I'm not actually sure I've ever seen this dish in any cookbooks from Maryland. I have a feeling it got named because somebody felt Maryland was "exotic", but they'd never actually been here.

We certainly have shallow-fried chicken, but that's hardly unique to Maryland. It's a very common Southern dish, and not unknown to New England either. It's easier to accomplish than deep frying.
hmm, it didn't occur to me to use a timer rather than hit the up arrow and enter. Now I have this to watch the time count up :)

async function* seconds() {
while (true) {
const millis = new Date().valueOf()
const seconds = Math.ceil((millis + 10) / 1000)
const delay = (seconds * 1000) - millis
await new Promise(r => { setTimeout(() => r(), delay) })
yield seconds
}
}
for await (const s of seconds()) {
console.log(s)
}
Huh...that's pretty much just how my mom taught me to make fried chicken.
Package this up and send it to https://thedailywtf.com

It's beautiful.
I'm so blonde that I thought it was a Quantum drive... like a Quantum hard drive... man
How Caterpillars Gruesomely Transform into Butterflies
I mean artificial flavor is associated with fake flavor, so it's not much of a surprise.
(Corrective upvote from me. Pretty much any use of reflection dooms you, and reflection is very common.)
Proton forbidding anons from opening free accounts might be necessary for anti-spam/deliverability. But even paid accounts?

"They accept cryptocurrency, but only for existing accounts - after you've already doxxed yourself" (during the initial signup flow, where this payment option has been removed)

This looks very bad to me.
an R2D2 unit!
Interesting! I didn't initially click to the fact that Harold's snippet was solving a different problem than the one previously talked about, so was confused why it would "get stuck" flicking between two states after shrinking the rightmost run (of 1s or 0s), but that is indeed the desired behaviour if you want the nearest (not the next or previous) integer.

I actually found the author's complementing trick for getting the previous integer more interesting (because more applications):

>However since we already have a version that walks to the next we can simply apply a linear transform to map/unmap the input/result. The ones complement (~x) reverses the notion of unsigned integer ordering so the follow function walks to the previous
China's work culture terms explained, from 996 to lie flat
I think the easiest thing to do is to love to 64 but timestamps, not changing the epoch
RISC V is not great at this either, with the compression extension being common and variable length.

ARM 64 gets this right, with fixed length 32 bit instructions.
As I said in another thread, I think the happy medium is lots of small packages (people want that). And a capability security model within programming languages so small dependencies are limited to interacting with their parameters (and any resources their parameters provide them) and can’t speak to the OS directly. That would solve 98% of the supply chain problem.

Leftpad has already been solved by a npm policy change forbidding packages from being unpublished.
And much of it is tax free.
> Finding a few bugs is very useful if they're the kind of bugs that can cause problems in production but usually not in development or testing, like not checking an optional that is very rarely null.

There's a kind of excluded middle here though. Either that kind of bug hits production often enough to matter - in which case a checker that catches it sometimes isn't good enough, you need a checker that eliminates it completely. Or it doesn't hit production often enough to matter, in which case a checker is of limited use.
80% of young Americans said they planned to vote in the last election. You can draw your own conclusions from that.
Great, it's starting. Sigh.
I wish the economics of mass production didn't turn pennies into millions that need to be eliminated, because I've always thought the "don't disconnect from power" and "update bricks it" type problems could be solved by having extra EPROM to download into, the way linux keeps the previous kernel around after an update.

Or at least the ability to re-init/download from scratch, like a borked macbook disk. And hey, not the extra ability to do that, make it "the way it works" so you're always testing it.
The replacement system’s already here; modern OSes and software tend to use 64bit ints for timestamps.

The trouble is all the old embedded systems, and time_t->i32 casts which are currently fine, but lying in wait…
Possibly interesting paucity of data:

https://www.pewresearch.org/science/wp-content/uploads/sites...

> Note: Sample sizes for Asian Democrats and for Black, Hispanic and Asian Republicans are too small to analyze responses separately
If they are following DMCA procedures and notifying the targets, they can (even if there would be actual copyright liability otherwise) restore without risk 10 days after getting and notifying the complainant about a counternotice, at which point the copyright claimant needs to sue the end user.

(Some hosts are lax about the end-user side of DMCA safe harbor process, because they have no user-side liability that they feel the need to avoid, and there's no other benefit to them, besides PR, for taking any action after a takedown.)
what if you are writing the scripts and using text to speech to read the scripts, but the text to speech tools now have AI baked in them.

what if you are animating the content but using some tool with AI components in it.

Not only does it seem messy but in the long run not feasible.
Was this a cultural thing with your girlfriend? Or rather OCD? Or was she an extreme extrovert?
I just retired some drives out of my home array. 3TB WD Reds with 10.5 years of power on time, no logged errors. Ran them through a full block check and had no errors.
I saw Marques Brownlee's video on solar roof tiles and it seems to solar roof tiles are a real thing -- though not sure about the SolarCity relation.

I think it wouldn't hurt to view Elon as a parroter of information in this case, there's absolutely no incentive to lie and launches get canceled all the time due to weather, your expectations should already be tempered.
As long as they are good for fixing it, this might what being a Pioneer or Early Adopter is about.
Call your card and file a fraud claim immediately.
Does this work in real time? Considered gambling applications?
Anyone have a good recipe for it?
No, it’s not a moral grey area. Russia shouldn’t be in Ukraine. They bear the responsibility of that invasion.
As @xerxes901 said, there's some major challenge in freeing just one method code as it's not necessarily contiguous, and also it's of very variable size so it would generate lots of fragmentation. The allocate would need to be much more complex too to compensate.

But the team reasoning is that compilation isn't that slow, and while the code is freed, the statistics that drives the compilation are kept, so most of the work is already done.

Also the assumption behind code GC is that applications may experience a "phase change" e.g. the hottests code path at time t1, may not be so hot at time t2. If this is true, then it can be advantageous to recompile the hottests paths once in a while.

But that assumption is a major subject of debate between myself and the YJIT team, hence why I requested a `--yjit-disable-code-gc` flag for experimentation, and in 3.3 code GC will actually be disabled by default.
Sure thing, they'd be storming the place with Apache helicopters.
In a similar vein, kagi's small web: https://blog.kagi.com/small-web
> “It works for C/C++” by making developers working in those languages pay in blood for every dependency they pull in.

I think the industry may have thrown the baby out with the bath water. Now they're is a complete aversion to RYO anything, no matter how simple. Personally, I'm waiting for the pendulum to swing back towards the middle a bit more.
Be nice if Amazon did this on the merch platform.
We'll this also works for rust libraries as they're usually useless for other languages, whereas libraries like gdal, opencv, fftw, etc. can be used by many languages. (Though to be fair, until rust gets a stable ABI it's not going to be a good choice for this sort of thing).

I personally consider docker/podman just completely punting on dependency management, and try to avoid them, but I'm probably in the minority...
Real Time Sketching –> Image Generation
IMHO, LLMs will increase the amount of programming done, not reduce it. People with absolutely no programming experience or -skills can now produce programming, which was not the case before. Second, as they do this mindlessly some portion of what they manage to produce will have to be refactored eventually, creating more work for people who actually know what they do.
Tangential, but one thing I noticed recently is how algorithms on sites like twitter and linkedin - especially linkedin - will penalize posts that contain external links. So it's very hard to even tell people about content on your own site. HN might be one of the few places left that don't seem to do that.

Thinking more - what used to be common is a section called "other cool sites" or something similar, which would just be a list of sites to check out the author put there. Maybe that's a bit more robust than a ring.
The software package probably is signed right but contains multiple signed binaries of which one is signed wrong.

Or is multiple signed packages and one is wrong.

Or the test cars accept prod and test certs.

Or some combo of the above.

There are lots of ways this could have broken that doesn't amount to rivian not being able to write software
I assume an American gummi bear is much larger than an international one.
I understand that this paper is about controls. I wish there was more detail in how it differs to other music generation methods like MusicLM. That seems to be in the MusicGen paper though [5]!

But then I am more curious about how this compares to MusicLM in terms of music generation.
I'm not on Youtube as much as the pandemic today, I feel like that was my peak watching of various content creators who pump out decent content regularly. But if I jump on Youtube today and half of my recommended feed becomes listed as AI, I'll likely stop going there altogether.

If I start going on Youtube and watch a bunch of content and my spidey-sense goes off that a lot of these videos are AI-generated (without labels), I'll likely stop going there altogether as well.

And this is not a direct bash on AI-generated content. I think the tech is going to be immensely helpful for all sorts of stuff, including youtube video content creation, but I'm dreading this early adoption period where people pump out low quality junk. I'd rather just avoid it and do something else. I'm sure Youtube is aware of this and is trying to figure out how to control the problem, but the labels just aren't going to help me continue to go to Youtube.

Tough problem, I don't envy the folks at Youtube trying to figure this pickle out.
"Andreessen Horowitz" is not a person. It's one of the biggest US venture capital firms (whose name comes from the last names of its two founders):

https://en.wikipedia.org/wiki/Andreessen_Horowitz

(And that's stated in the very first sentence of the article being discussed here.)
Is this satirical?

The camera coats $175.00?

The little plastic case is not included and costs $50?!?
> and be on the hook for damages and penalties if is malicious.

Honestly, I think both conditions might be met with an already vetted credit card number, which obviously involves an associated identification of a person or company.

When signing up for cloud service providers, I'm always terrified that I'll leave something on and incur a massive bill. Basically, every cloud service move I treat as if I'm walking on eggshells. I'd assume those issuing a DMCA would end up the same way.
There is a decent market for these kinds of tools if you can make easy for users to use. Back in the late 90s/early 00s, I worked for a company that provided MPEG2 equipment to startup making these kinds of analysis tools for American Football analysis. The NFL has had it for years, but they were trying to make it affordable for High Schools to get in on the action. I'm in Texas, so that's pretty much a religion, so you can bet they spent the money.

This was very manually oriented where the students would capture the VHS tapes schools swapped with each other, and then log each play, the down, the time on the clock, and every other piece of data they could think of. At the end, it would analyze it all and be able to show that the coach from School A has tendencies to run a particular play or defense in the 4th quarter. It was pretty accurate.

If you can do the same thing but without needing the manual data entry, there could be a product instead of just being a fun project. If you can show that certain players have more tendencies to switch to the left foot after cutting in from the right, the defense can look for it and shut down that lane and offer the outside (isn't that their default anyways???) to make the attacker chose their "less preferred" action. We know goal keepers study PK attempts in attempts to have a more informed guess on the shooter's tendency on placement.

Never underestimate the money schools/coaches will go to gain an advantage. Hell, we're seeing yet again coaches in trouble for trying to steal the play calls. The one positive about trying to sell it is that you do not have to worry about the school's budget (which is never enough) since this is the exact kind of thing the boosters love to fund in an attempt to get the upper hand on a rival.

Good luck!
A great example of this is Norvig’s sudoku solver. Arranging the data the right way makes solving the problem a mere matter of correct bookkeeping .
There's no structure here- it's a random walk.
Imagine being upset by the mere mention of a persons gender. Christ you people are insufferable. Surely there are actually important things to be angry about.
>The problem is that China's record on following safety regulations is abysmal.

That's a soon to be non-issue. Chinese companies can build cars to western safety standards if desired. They have the money and the talent. The modern EV version of the famous London Black cab is made in London by a subsidiary of Geely[1]. Is that also not up to western safety regulations?

[1] https://en.wikipedia.org/wiki/LEVC_TX
I'm honestly surprised there aren't more plug-in hybrid options. It seems like the logical stepping stone for car manufacturers because they can keep most of their existing production lines intact, the cars weigh less because they have smaller battery banks so they need less rare earth metals per car compared to a full EV, it reduces emissions compared to a standard ICE vehicle. I guess the greenwashing marketing has placed EVs at the top in people's minds.
gnu parallel and sshpass is your friend.

The way I built my app was that I could install it cleanly via a curl | bash.

So, I just had a simple shell script that iterated through the list of IP addresses (from the DHCP leases), ran curl | bash and that cleaned up the mess pretty quickly.
>Can switch at 1MHz

>can be switched "more than 1 million times"

Seems like longevity is a potential issue. Definitely could be useful for a few applications (especially temperature control), though I'm not really sure about a pure cooling application.