skysight-inc/HackerNews huggingface dataset:
Your paranoia about the Chinese is equally applicable to Americans, whose NSA has given itself carte-blanche to infiltrate any computing system it desires, for whatever reason, in total secrecy - without recourse for the public to address any wrongs.

So I'm not sure that framing your paranoia in terms of "the Chinese" is productive - you might just want to update that thought with "any state actor who operates covert torture sites and violates human rights at immense scale", in which case your set of actually hostile actors becomes a little more realistic.

The biggest threat to your freedom and human rights, as an American, is your own government.
What use is the metadata for ads?
Mixing C++ and Rust for Fun and Profit
So this is something like Rosetta stone, but also has features or Unison language
If you are going to try it... I'd discussed it with my two wonderful co-organisers before we put it to the group... and, we really would have shut it down. I think if you just half threaten, well, might not work so well :)

We used a doodle.com poll with a set of months and just let people say which one(s) they could do.

Best of luck!
The story of the problem being solved.

Talking through what the expectations are, what you're thinking and what you're doing help cover points where you may make a mistake and vitally where there's a disconnect with your understanding and theirs.

I've had paper problems to do that to solve the literal problem in front of me would be to write some very short code. But the problem looks like a shrunken version of a bigger system, and so explaining this shows I'm not just over engineering this toy problem I'm showing I understand (this was an early position) classes and inheritance and how to manage that.

Are you asking how I'd build systems to do this kind of thing? Are you asking what I'd do if the boss comes over and says they need this one off thing done asap?

You want to be seen as someone they could actually work with on something.
given unrestricted compute, could an AI attempt to decipher a completely unknown language through interpreting O(n) brute iterations and reporting versions that are coherent to human heuristics?
>Your proposal won't go anywhere because you won't agree with others on what is harmful and what is not.

Maybe in some groups we can achieve a consensus.
Say 80% of developers at a company think that the new feature of addicting kids on some game mechanic is harmful?

I am not referring to the stupid culture war in USA, so when I suggest this I am not attacking your political opinions.
I don't think it's necessarily only the fact that foreign language sounds louder, but also that when you assume others don't understand your language you speak more freely, which means louder as well. I've noticed that on myself, relatives and compatriots when we are in a country that doesn't speak out language.
This makes no sense - you can't log in if your IP is in the blacklist block ..
Even if you did, how would you know that the airline or bank is running a binary generated from that code? Would you also need to check the compiler? How do you know which compiler was used?
Yes if I understand your point, I agree with it, it feels like regular folks are all getting closer in pay gap. But the gap to the wealthy is accelerating.

It certainly feels like it is by design. However with more wealth you have more flexibility, more time, more resources (e.g. smart accountants). I can’t help but feel that it’s just inevitable.. when the economy is bad the wealthy win, and when the economy is good the wealthy also win. Over time the gap gets large. Surely this has been the case as long as civilised societies have existed, I wonder if there’s much research on this.
Important note here - ask for the definition in a separate thread, otherwise if it hallucinated the word it will still keep hallucinating the definition.
> If you seem hesitant, if you seem unsure about what you did and why, it's not good.

No, god forbid someone actually thinks about what they say before they say something.
lol, one of my previous comments is similar here. nice to be validated as sane by one other person :)
It's published, but last I recall us users are worth revenue about 4x per user in Europe and >10x users from Asia
Evaluating Classification Models: Understand the Confusion Matrix and ROC Curves
> There are a plethora of browsers out there

Three is not a plethora.

Blink engine, Webkit engine, Gecko engine. Three.
I disagree. Making hydrogen and batteries is already so cheap that companies that need lots of energy are doing it for entirely financial and self-serving reasons. You can make hydrogen gas from water using things you have in a typical kitchen drawer.

It is by now technically cheaper for a steel mill to make it's own energy than to buy energy, even if they buy it from a nuclear plant that has already been built, and they can do it in 1-2 years.
Once they have done it, they no longer use centrally produced energy, leaving more for the rest of us. Multiply this with thousands of large energy consuming companies everywhere and you have made real progress very fast.

Battery production capacity has grown exponentially and will continue to get cheaper thanks to the electric car transition. Cars get recycled and the batteries can be repurposed to storage, and in a few years when electric cars are the standard, the sales will plummet from the peak leaving enormous capacity available for grid storage. The latest battery chemistries in use in cars today use the most abundant elements on earth.

So, there are no logistical limits, no technological limits, no limited resources to prevent this from happening today, the limits are instead things like battery storage being taxed both when it stores energy and when it delivers energy, private producers being taxed on their own production and so on.

Such regulations are put in place to prevent the loss of control over a major part of the economy, and is IMO the main obstacle to solving the problem.

Talking about making nuclear plants is a nice way for politicians to keep control of the electricity money fountain, but nuclear power is IMO a very poor solution to the problem of fossil fuels since it will always be very expensive, slow to deploy, and a very bad problem all by itself.
> and paint myself in a good light

You don't absolutely need to paint yourself in a good light. One can describe mistakes, mishaps, even times when they were being mean. Injecting some bad outlooks can help balance the narrative and make the whole picture look more sincere.

But the hero of the story has to be in charge. They can fail, or make huge mistakes, but they can never watch events happen and pass them by, without them doing anything. That's the worst mistake a storyteller can make.
A scrub can also repair data when using `ncopies` greater than one even outside any mirrors or parity.
Yup, let’s talk to the Linux CEO and complain about it.
Exactly. This is pure marketing. "Normal" people do not know the difference and there is greater chance that they stay in Meta apps instead of switching.
if it doesn't prevent, why it includes trackers that are blocked in this case? Not including them is easier than including & maintaining, no?
I miss the old way of having an RSS reader, an RSS feed, and trackbacks. Maybe OpenID for comments.

I also don’t see what we gain from all the extra complexity.
What make this vulnerability frightening is

- the persistence that’s nearly perfect

- an av cannot detect it ever

- it bypasses all forms of secure boot by getting code exec at the earliest of stages in the boot chain of trust

- the disassemblies show that the bios vendors did not even remotely try to make the parser secure. it is a joke. and if an image parser is that bad, I can’t even imagine the quality of usb or network stacks
No I meant that it did not load. But it did now. I read it.

I still don't understand what the problem is. ¯\_(ツ)_/¯
Also their builds are fully reproducible on Android.
Exactly! Coding challenges are not about miraculously finding the right solution, which is boring (and extremely suspect). They are about describing a path from the problem to the solution, and dangers and pits along the way.
> 1. Only the sender and recipients of an E2EE message can see its contents.

> 2. Nobody (not even Meta) should be able to forge messages to appear to have been sent from someone they weren’t.

From a business perspective, it makes perfect sense. Users want security and Meta don't want to be responsible for the data communicated.

One question I have is how Meta will comply with UK law on E2E [1]:

> Meta has been a leading industry player in the fight to tackle child sexual abuse. For over a decade, Meta has utilised hash matching technologies to enable it to detect child sexual abuse material being shared on its platforms. This has made it one of the leaders in detecting and reporting online child sexual abuse, providing law enforcement with leads to safeguard children and arrest child sex offenders.

> However, Meta and other companies are now planning to implement E2EE, without similar technologies in place, across their messaging platforms such as Facebook Messenger and Instagram Direct Messages. The roll out of E2EE is likely to happen later this year. The National Center for Missing and Exploited Children (NCMEC) estimate up to 70% of Meta referrals could be lost following the roll-out of end-to-end encryption.

Firstly, I would like to know what the UK government does with all of these referrals. Given the current state of UK policing, I predict it's almost nothing. Local government was itself complicit in child exploitation [2].

It appears this E2E implementation may have some form of backdoor anyway [1]:

> The Safety Tech Challenge Fund is a UK government funded challenge programme that first ran from 2021 to 2022. The fund was designed to support the development of proof-of-concept tools to detect child sexual abuse material across E2EE environments, whilst upholding user privacy. The fund demonstrated that it would be technically feasible.

> It is recognised though that each and every online social media platform and service is different, and therefore solutions will need to be tailored. Therefore, companies such as Meta should utilise their vast expertise and engineering resources and build on the outputs of this fund and develop solutions for their individual platforms/services.

> In addition, some of the UK’s leading cryptographers have written an academic paper outlining a variety of techniques that could be used as part of any potential solution in E2EE to provide both user privacy and security, while protecting child safety and enabling law enforcement action.

"The fund demonstrated that it would be technically feasible" - you can't leak information from a message without leaking information. The same method used to detect harmful content could also reveal information about the messages. For example, if an E2E message was delivered with hashes of images inside the message, it could also be used to detect political decent memes.

[1] https://www.gov.uk/government/publications/end-to-end-encryp...

[2] https://en.wikipedia.org/wiki/Rotherham_child_sexual_exploit...
If your threat model includes someone willing to break into your house, then, well, good luck. [0]

[0]: https://xkcd.com/538/
Individual states don’t have the power to restrict arbitration agreements in this way. California has tried repeatedly, but the laws keep getting invalidated because they’re preempted by the Federal Arbitration Act, which requires that contracts containing binding arbitration clauses be enforced and treated the same as all other contracts. State laws that selectively disfavor or restrict arbitration agreements will violate this.

If this regrettable state of affairs is to be improved, it will require an act of Congress, unfortunately.
But it's totally different than corruption in other filesystems. People are acting like upgrading to ZFS 2.2.0 ate all their data like XFS used to back in the bad old days. I remember once the power went out at my house, and the entire XFS filesystem was irreparably damaged.

This bug is super hard to trigger, and has roots back to 2006 and only surfaced with a recent coreutils update. Yet there are numerous posts in the past few days verging on hysteria. I myself was very worried until I saw posts like the grand parent comment or the linked GitHub issues.

I don't believe there's actually a campaign of ZFS haters sitting around in a storeroom somewhere posting to phoronix and HN, but it does feel like a lot of strongly held opinions are being unleashed now that ZFS had this bug.

I'm pretty sure ZFS has been abused a lot - ten years ago I was helping test petabyte scale ZFS clusters, doing tons of concurrent IO and such. I'm pretty sure Sun and Oracle tested the crap out of it.
Old geezer take on the situation:

Back in (say) the 1980's, the code for a serious OS's filesystem was small enough that formal verification was at least imaginable. Similar for writing test code for ~all of the corner cases.

Not now.

When and where you value reliability - try to keep things simple, stick to code paths well-tested by the passage of the masses, do at least some testing of your own, and have a Plan B.
> It would have probably been faster to put your friends hard disk into your computer for a few minutes and copy directly from disk to disk?

Did ever your hard drive died because you shut down your computer cleanly, discharged static electricity, removed the disk without jolting it, and installed to another computer with the same care?

I lost a couple of drives that way.
Hint: it says "committed my password", as in a "git commit" :)
I just read the white paper, and I haven't seen anything about search, which would require some kind of homomorphic encryption, but I think that's pretty much an unsolved problem: for example, to be able to search message content in Proton Mail, you need to enable the creation of a local search index — it's not done server-side, which means all the messages have to be downloaded locally to be indexed.
> and IT is a well-paid industry

Used to be until the government decided to kill contracting. Now tech pay in the uk is pretty low.
So you apparently consider An eye for an eye, a tooth for a tooth as a valid approach to life?
To less informed readers, "smart enough" hear means:

Imagine you have two Java Strings: a and b

If you write the Java code:

String c = a + b;

The Java compiler will roughly replace this code with:

String c = new StringBuilder(a).append(b).toString();

I'm not sure I would say this is "smart". Rather, it is just a hack to allow Strings to override the plus (+) operator. Normally, Java does not allow operator overidding, like C++.
Wonder how Julia would compare these days, or potentially could mix in? I can't stop thinking about it ever since reading that Arxiv from a few days ago about HEP computing.
That was once true, but not on most modern systems with SSDs. Cheap NVMe SSDs can sustain over 1 GB/s, which only a highly optimized SIMD parsing library can exceed.
On topic, this is a really cool New Yorker story making a case against story telling

https://www.newyorker.com/magazine/2023/07/10/seduced-by-sto...
Lots of very useful information here, thanks for the link! Actually there's some answer: as someone else already wrote in this thread, shields of cables must be soldered to the Faraday cage to prevent leakage.
Agreed, what a deranged position to take despite the huge evidence to the contrary.

It’s a very specific and weird personality type that’s constantly drawn to white knighting racists and billionaires.
I hate manure.
You can still relive a little of that joy with b1ff from talkfilters¹, with the caveat that a chunk of that package probably deserves a content warning for our times.

¹ https://github.com/hyperrealm/talkfilters
> but people have a weirdly high activation friction to actually doing this

Storytelling is hard. It takes effort and practice. It requires to think about all the stakes and all the stakeholders. In AI terminology, it uses a large context window.

People don't do it because they're unfamiliar with the techniques. They need to train until it becomes second nature.
> it's fair to say those bounds are not commercially reasonable in general for functional sites. QED the banners are de facto required.

For all I care your site isn't required to be commercially viable. If you aren't able to convince the customer and instead opt for so-called cooky-terror banners as a dark pattern with the primary goal of de-sensitive-izing users, you don't deserve my cooky. Opt-in means legislation has passed this view into law, with the quirk that the dark-pattern is fully expected because the industry needs a sort of legitimization for the use of private data. Small companies usually suffer under compliance, no doubt.

Besides, what has this to do with AI prompts? No doubt they want to analyse every single interaction as a sort of supervised training for free. This does not rely on third party cookies, but it might benefit from making identifications which somebody could argue are not essential to the service as advertised.

Is that the kind of tooling that site operators have grown to find indispensable over the last couple of decades, that you mention?
It’s not, and they basically gave up on it. Historically the OpenJDK would compile direct concatenation to StringBuilder so e.g.

a += b + c;

Would become something like

StringBuilder sb = new StringBuilder();
sb.append(a);
sb.append(b);
sb.append(c);
a = sb.toString();

However it was never capable of doing such an optimisation across loops.

In Java 9, they gave up on such static optimisations, instead the compiler now emits dedicated string concatenation bytecode (see JEP 280), which the runtime (and JIT) can then hook into.

Does that handle loops? Unclear. Benchmarks / testimonies from back then (java9/java10 days) hint that no, direct concatenation remains much slower than StringBuilder. But I didn’t find anything super recent so maybe they improved the behaviour in the meantime.
That is more justifiable, as each delimited range is unlikely to be more complex than a call expression. Operator overload is okay, as long as you understand how would operators will be used.
I'll watch, and I'll see another 1997. Don't you remember what the last days of the Major government felt like? It felt like this.

I'm older than you (not by much) and my earliest political memory is of the 1979 election. Nobody aged under 60 is voting based on what happened in the 70s, and damn few people over 60. Maybe some are still using it as an excuse, but I think most of them have moved on to the Iraq War as their acceptable fig leaf.

By your logic (hordes of "Never Labour" voters still replaying the winter of discontent in their heads) 1997 couldn't have happened.
Yes. Ignorant question: if you use bubble sort but go through the array in alternating senses, could it not improve locality and speed?

Array v with N elements:

First pass: go from v[0] to v[N-1] comparing v[i] with v[i+i]
Second pass: go from v[N-1] to v[0] comparing v[i] with v[i+i]

This is so obvious that it should have a name...
Cool.

It is misleading picking Scotland - power is fungible across borders. Otherwise I could claim I was green because my house is next to a hydroelectric dam and I could claim the guys house next to the coal fired plant is bad.

the graphs shows interconnects but I couldn't see any power exports to Europe. I presume if there is extra wind generation at 5AM it gets exported to countries that are waking up.
You can think while saying something, making a little intro.
>foreign languages sound louder because you can't understand them.

More bluntly, your brain process languages you don't know simply as noise.

It's kind of easy to hear this from yourself, too: Speak a sentence, but pretend very hard that you aren't hearing the sounds coming out of your mouth as words. You will probably quickly find your "noise" grating.
I guess I'm thinking aloud about which (and when) DB browsers will auto-decode JSONB into JSON.
Wow this broke Safaris text input, and I think it’s just a literal <input type=text>. How far the mighty Apple has fallen when a text input is so buggy.

Lord Jesus the hacks I had to do to avoid __builtins__. 281 chars total.
In theory it doesn't, in practice it does. New hardware only trusts the MS first party CA out of the box (not even the 3rd party one for booting e.g. Linux distros!) and many systems do not allow removing the MS CAs from the trust store.
>> So while I would never say that no one has ever hit the problem unknowingly, I feel pretty confident that they haven't. And if you're not sure, ask yourself if you've ever had highly parallel workloads that involve writing and seeking the same files at the same moment.

It makes it sound unlikely, but if I have a couple of VMs in datasets (all formatted as ext4 internally and some running DBs inside them) each is one big `raw` file which is getting a lot of reads and writes, I assume.

How are they at risk?

Also, what about ZVOLs mounted as ext4 drives in these VMs?
yes because more than one process can access the file.

A "password manager" provides a defined api and schields the password away from everything. It can also ask the user if process x can access the key y.
Two things:

First, it has nothing to do with overriding the + operator, the operation is statically decidable so the compiler is perfectly aware that this is a string concatenation (not a numerical addition) and string is a special builtin, the compiler can generate anything it wants. Which is exactly what it does, they just originally decided to implement string concatenation as stringbuffer/stringbuilder ops. Meanwhile the addition of integers, longs, floats, and doubles are (or were anyway) different bytecode ops. This does not require general purpose operator overloading support. Builtins are not limited to the language’s user level semantics.

And second OpenJDK has not done that since Java 9 (JEP 280), the compiler now emits generic “string concatenation” bytecode for the runtime / jit to deal with.
Developer Onboarding to Bitcoin Core
Could we feed it Anna Karenina and ask it what is a difference between happy and unhappy families?
Regarding Ukraine salary sub-$1k belongs to juniors mostly.
Why would it? Diffie-Hellman key exchange is a thing.
That's fair, but `std::filebuf` still carries an `imbue` baggage...
> and Hacker News starts complaining that it is "business hostile" and "stifling innovation".

Thinking in such simple terms is going to draw you to wrong conclusions. Hacker News doesn't complain. People discuss things. Different people have different opinions. And if they did - so what? You're phrasing this as though people talking on Hacker News would somehow overturn common law.

> There is no need to mandate a template ToS

The post didn't mention this.
They are still making hardware in default tan housings. The post-GWOT inertia is huge.
As an interviewer, when I rate the candidate that I just interviewed, I will take into account how good the candidate is at communication, but it wouldn't be a decisive factor. The decisive factor would be whether they solved the problem and wrote good-quality code.

If you have extra N hours to prepare for an engineering interview, I think spending them on practicing problem-solving and coding would be more efficient than practicing storytelling.

If you are already pretty good at interview problems, it might be valuable to invest a bit of time into communication. Doing a mock interview or two would be good way to do it.