skysight-inc/HackerNews huggingface dataset:
Out-of-bounds heap write happens in this function:

int
elf_read_pintable(struct proc *p, Elf_Phdr *pp, struct vnode *vp,
Elf_Ehdr *eh, uint **pinp)
{
struct pinsyscalls {
u_int offset;
u_int sysno;
} *syscalls = NULL;
int i, npins = 0, nsyscalls;
uint *pins = NULL;

[1] nsyscalls = pp->p_filesz / sizeof(*syscalls);
if (pp->p_filesz != nsyscalls * sizeof(*syscalls))
goto bad;
[2] syscalls = malloc(pp->p_filesz, M_PINSYSCALL, M_WAITOK);
[3] if (elf_read_from(p, vp, pp->p_offset, syscalls,
pp->p_filesz) != 0) {
goto bad;
}

[4] for (i = 0; i < nsyscalls; i++)
[5] npins = MAX(npins, syscalls[i].sysno);
[6] npins = MAX(npins, SYS_kbind); /* XXX see ld.so/loader.c */
[7] npins++;

[8] pins = mallocarray(npins, sizeof(int), M_PINSYSCALL, M_WAITOK|M_ZERO);
for (i = 0; i < nsyscalls; i++) {
[9] if (pins[syscalls[i].sysno])
[10] pins[syscalls[i].sysno] = -1; /* duplicated */
else
[11] pins[syscalls[i].sysno] = syscalls[i].offset;
}
pins[SYS_kbind] = -1; /* XXX see ld.so/loader.c */

*pinp = pins;
pins = NULL;
bad:
free(syscalls, M_PINSYSCALL, nsyscalls * sizeof(*syscalls));
free(pins, M_PINSYSCALL, npins * sizeof(uint));
return npins;
}

So first of all we calculate the number of syscalls in the pin section [1], allocate some memory for it [2] and read it in [3].

At [4], we want to figure out how big to make our pin array, so we loop over all of the syscall entries and record the largest we've seen so far [5]. (Note: the use of `MAX` here is fine since `sysno` is unsigned -- see near the top of the function).

With the maximum `sysno` found, we then crucially go on to clamp the value to `SYS_kbind` [6] and +1 at [7].

This clamped maximum value is used for the array allocation at [8].

We now loop through the syscall list again, but now take the unclamped `sysno` as the index into the array to read at [9] and write at [10] and [11]. This is essentially the vulnerability right here.

Through heap grooming, there's a good chance you could arrange for a useful structure to be placed within range of the write at [11] -- and `offset` is essentially an arbitrary value you can write. So it looks like it would be relatively easy to exploit.
Programmatically populating Django with random and real data
First thing I thought was "well there must have been some huge news and HN has collapsed".
Two other free books, just published.

I'm interested in your opinion about them; both have pytorch code (notebooks).

___________________________

Understanding Deep Learning

by Simon J.D. Prince

Published by MIT Press Dec 5th 2023.

https://udlbook.github.io/udlbook/

https://www.amazon.com/Understanding-Deep-Learning-Simon-Pri...

___________________________

Dive into Deep Learning

https://d2l.ai/

https://www.amazon.com/Dive-into-Learning-Aston-Zhang/dp/100...
I think many of the things you identify as flaws are actually strengths of this site.

The minimalist text-only gui IS very usable for discussion, and forces that the focus is on the discussion.

I think for instance adding images to posts or comments would make the site worse, as images serve to attract and focus attention away from discussion. But the discussion here is the point!

The minimal profile sections are also a feature. This account is not your digital homepage. It is a place people go for discussion. A bigger focus on your profile would be a step towards use of the site as brand-building which favors attention-whoring over quality discussion.

Again, the focus is on reducing frictions to people to contribute to quality discussion, and avoiding dynamics that might supplant this.
LiveView Native: Key to Fast, Affordable, and Efficient Mobile App Development
I'm working through the courses here: https://phaseai.com/resources/free-resources-ai-ml-2024

I'm avoiding Azure or Google courses for the same reason. FastAI references its own (free) library but you can also do without it if you really try.
It’s been up so long I thought it was my internet.
Thanks! It looks like the ASIC inference space (if we can it that) is getting more popular. There is also https://www.etched.ai/ that I recently saw.

I didn't follow asic mining during the bitcoin bubble but I have the impression it was the way to go for mining. I don't see why that wouldn't be true for inference, a long as one is ok being limited in flexibility and wed to a particular architecture.
Erlang you mean?
> just use passports? If it ain't broke, don't fix it

Anyone who travels in America and doesn’t see security as broken has been visited by the patron saints of patience.
Hacker News Status @HNStatus on Twitter/X [0]:

Networking issues at our hosting provider. Sorry! Hoping to be back up soon

[0] https://twitter.com/HNStatus/status/1734502529134989649
Did apple just rebrand 3D video as "spacial video"?
Omidyar Network to pull out of India market
Something I am playing with is using ChatGPT to do emoji descriptions as a joke :). The results are quite funny.
It should be noted that this was a jury decision. Juries are instructed on the relevant law, but ultimately they can give back whatever answer they want, for whatever reason they want. So while we can speculate why the answer came back as it did... and that speculation may be correct if the jury was following instructions, we won't know for sure unless someone on the jury chooses to come forward and explain their decision.
Linux is getting its own Blue Screen of Death
Shameless plug - we recently released our $80 headset with support for spatial videos. It's a plastic headset, with two bluetooth controllers, that you put your phone into 'Google Cardboard style'. No need to wait for Vision Pro :-)
https://www.zappar.com/zapbox/
Somebody is going to do a rewrite in Rust and call it “simply”
honestly, I thought it was blocked in my country—glad that wasn't the case
Ask HN: How do you find quality research on unfamiliar topics?
I was asked a great question today: "How do you find good studies on a topic? Is the number of citations an indicator of quality?"

Over the years, I've learned many tricks, but there isn't a straightforward answer. This is especially true for someone who isn't working full-time in a field but is interested in finding solid information and arguments.

What would you recommend?
Those are all features.
Show HN: WaivoAI – Transcribe conversations with AI analysis
I made this tool because I was having a large volume of in-person conversations throughout the day, and had no way to take notes in time.

Transcribing was a great way to keep track of these conversations but the existing tools were:
a) Quite expensive
and
b) Not accurate (or no speaker diarrization at all)

I decided to go ahead and write a tool I could use myself. I added in a bunch of additional features like marking important utterances in colour, adding notes and GPT-based AI analysis so I could ask for action points/to dos and summaries from the transcript.

All feedback welcome!
by the time a major jurisdiction like the EU brought GDPR, regulatory compliance was already long-overdue (as usual, Govs plays catch-up with the business world), hence what followed was a rapid rise in "bureaucracy" (i guess). For example, if a company falls short in compliance (say Cambridge Analytica) issue bubbles-up to the Network (say FB or ByteDance), if FB fails it bubbles up to the Marketplace (say Apple), if Apple fails at this level, it's so high up Govs get involved to the point that it could trigger inter-continental trade wars.

Hence we're seeing Apple, Bytedance, Amazon (no doubt Google) etc make regulatory compliance a bigger part of their core business than ever before - prevention in favor of treatment.

Your team's case seems unfortunate, given the narrow scope in the trials. My initial guess is that anything involving eye-scanning could trigger Biometric ID (iris recognition) compliance worries. I get your concern about future tech developments, I also think businesses (startups) have to find new ways to account (adapt) for these changes/requirements - "bureaucracy" will naturally increase.
The huge news is that HN was down
Maybe the next step is to put one camera at each end of the phone?
They offer better deals to developers for limited time exclusivity. That’s such a non issue: benefits indie studios, and makes the PC gaming fields a little bit more competitive.
Illuminati confirmed
haha same. turned off VPN, tried again, just to check. Reset router too. Couldn't be HN, must be me and mine
You get the list of trending articles, you can go read the article itself, you can look at the discussions, and you can also get a comment box to add to those discussions. Oh, and you can up- and downvote articles and comments.

What else do you really need, honestly? It's like reddit, only with actually readable comment threads.
Elixir v1.16.0-RC.1 released – Elixir News
Some features would still be nice, like to know when someone has responded to you.
And how to debug a running game from a browser? Or you can only debug native builds?
I don't. I learned long ago to code when I am feeling like coding, and not code otherwise. This is why I am an advocate of coders having flexible work schedules - sometimes you just aren't feeling it, but you can make up for that when you are.
> no one at ATC is going to give you taxi, runway, or takeoff clearance

A rogue plane unresponsive to ATC should trigger runway-blocking. This can be as simple as grounding aircraft where they stand.
Turbo 8 morphing deep dive – how does it work?
> If I was working there and the board put my equity at risk because of some super vague reasoning about safety and magical agi, I'd be pissed

Sure, but you probably ought to have considered that when you joined the non-profit with a vague mission about safety and magical AGI.
Networking issues at HN's hosting provider
Would like to know their compute and bandwidth usage.

The front page is ~7 kilobytes on reload, and ~20 on first load - such a good example of "less is more".
Note it's 15% on the first $1 million then 30% after, at least for Google. So you're not losing money by being just above it either.
hehe

https://killedbygoogle.com/
"BREAKING: In a surprise move, the OpenAI board have ... {$drama}"

:)
How to Beat Silicon Valley Competitors (2018)
I use hacker news as my "is my Internet working" test - it's fast and always up (kudos)

So yes, I also thought my Internet was broken :-)
The Recipes for Success and Failure
Same here. It coincided with some MS Teams breakage at work, so I honestly thought the Internet is down - I've rebooted the work computer and asked my wife to check if the Internet is working for her before I realized it's just HN.
Is Hacker News _the only_ site you visit? :)
And how much of this would be going on if OpenAI was some thrift store company? Oh right... none.
They have a lidar. So they have very accurate depth. This gives some limited possibility at extrapolating and showing things from different viewing angles. I think this is also how they can give a good stereo experience from cameras that are closer than the average human IPD.
Also, it's not serverless. /s
Unfortunately we have the police for dealing with violations, and when you have a (expensive) hammer everything starts to look like a nail. What I mean is, I agree with both viewpoints: something must be done (don't even bother saying taxpayers - the addicts don't have it easy either), and jail/beating is definitely not that thing. I know this was said already but seeing the actual situation I think it's worth repeating.
This looks like a perfect video example for this type of summarization!
They are quite fast now, and i would surmise more experienced, and he did say he was wrong trying to automate all way too quickly.
You also you need to wrap trees with metal net to save them from beavers. At least they have great fur(looks superb trimmed a bit) and taste good.
Let's make a distinction.

If you're sick -> take care of that first. Don't work.

If you're just having an off day, trouble focusing, not feeling in the mood, that's different. I can suggest a few things that's worked for me.

1) Focus on just doing one thing.

Pick your most important project, then pick one specific piece of that, and shut down everything else until you at least complete that.

2) Set a timer.

If you're problem is getting started on a new or challenging project, do something like the pomodoro technique where you just promise yourself you'll work on it for X minutes and then stop. This removes some of the barrier to entry and can help you get started.

3) Remove distractions.

Similar to the first point, but is Slack always on? Are you getting notifications from your phone? Checking e-mail? This is a problem with our current life, we have too much competing for our attention. A lot of what we need to do to be successful is blocking out the noise so we can focus.

Hope this helps!
GitHub issues and PRs in your personal knowledge base
Subversive public sector partisanship is a lot more believable than a homeless industrial complex, I'm glad you brought the two up together.
Most of the poor discussions I see on here are when one user tries to steamroll a thread, replying to most every single comment, doubling down on their own points of the discussion. It turns into a personal argument, not a discussion by the community.

So I think a lack of notifications is a great feature. It lets us say our piece and move on, and let the community discussion fall where it will.
Well, this made me realize that downforeveryoneorjustme.com is useless, because HN was down from multiple servers, but dfeojm happily claimed it was up, only later changed it to down, not sure when, but at least 10 minutes after it started.
I know, my wife and daughter are still on WP for that reason.
Hello? Can anybody hear me?!
Show HN: Online Batch Phone Numbers and Company Names Normalization Tool
It just gone back up now for me. I don't even know how OP or other users here even managed to create replies.
Agreed, maybe something like https://pastevents.org/rss/keyword ?
I think you mean can’t be overstated?
I mean, Reddit may suit your needs? I find HN pretty perfect for my needs. The simplicity keeps me coming back. I find all the things you mention to be benefits, personally.
Underrated comment of the week.

Amazing what they squeeze out of a single process architecture.
Qdrant 1.7.0
Phew, this was almost a ridiculously productive day.
Same for the 5th, Brazil. Everyone uses WhatsApp here and has been more than a decade since the last time I've ever had to use sms (never even used mms).
Ouch, okay, that sucks. At least the descriptions I checked were always decent.
You're obviously not a teenager desperately trying to fit in.
No, but since Reddit gimped Apollo, it’s up there, higher than I like.
You mean stereo rebranded as "3D"? I don't know any actual 3D video stuff with any kind of adoption.
Do you mean, there were CPUs with 2 ISAs, one in-order and one out of order? Which ones, if you can say?
They are completely different cases because Apple controls the manufacturing process of every iOS devices in every phase. But Google does not control the whole product lifetime of the every Android phone out there.

On the latter monopoly abuse is bigger problem.

But if you make, build, control and design everything from bottom to top on the product, then it is less about monopoly abuse. It is just single total product.
You can actually implement that yourself, or use what someone else did:

http://www.hnreplies.com/
No, the US is not subsidizing drug development for Europe. What is happening is that US pharma is profiteering in the US because they can.

The US is dependent on international trade - not least for Middle East oil. How you going to get that if the Med and the Gulf are Soviet lakes?

For sure Europe should shoulder it's burden when it comes to defense - but the reason you have homeless people in every major city is not because of your defense bill! It is because your society is malfunctioning.

Bear in mind that isolationism is exactly what Putin's Russia (and Xi's China) wants, be careful that you are not being indoctrinated by anti-US interests.
I don’t want people locked in jail, but I do think that something akin to the Baker Act needs to be implemented. There are clearly many people who need help but are not willing to seek help themselves. It’s safe to say that they aren’t in control of their own actions and are a danger to everyone around them. It’s not compassion to simply let them rot on the street.
2nd that. no need of tricks for "user retention", the content is so good that we keep coming by our own.
I think the intent is to discourage back and forth chatter which is a significant way that a flame war develops.

There are third party services though http://www.hnreplies.com/
Streaming UHD is typically less than 25Mbps per device, Netflix goes as low as 15Mbps.

Video conferencing is typically about 5-15Mbps.
Show HN: Nuekit – Simple Next.js and Astro alternative with unversal hot-reload
> The thriving beaver population of Tierra del Fuego (another place Thie has studied) is descended from beavers brought to Argentina from Canada’s Saskatchewan River.

They've been trying for years to get rid of them, since they are destroying the native forests. [0][1][2][3]

[0] https://es.mongabay.com/2023/06/castor-invasor-plaga-que-arr...

[1] https://www.infobae.com/tendencias/2023/06/06/castores-invas...

[2] https://www.telam.com.ar/notas/202011/536780-castores-tierra...

[3] https://www.scidev.net/america-latina/news/con-trampas-errad...
Can we "download" a slide deck from this -- with chapter summary in slide notes :)
... replaced the entire board with HN comments. From now on, all decisions will be made by ChatGPT5, posted on a regular "Who wants to lead OpenAI?" thread, and upvotes will decide which ones are implemented.
One of the reasons I learned a lot of css and js was actually inspired by me writing userscript to modify HN webpage to be like I want. That might count as a plus for me. The HN page source makes it easy to customize.

And lack of notifications is a good feature. It does help in many cases where you would go into very heated or not very useful discussions.
Author here. I announced NueJS and the idea of Nue last September here on HN:

https://news.ycombinator.com/item?id=37507419

With this release, the idea is now reality. You can now build real-world websites and single-page applications and take advantage of "universal hot-reloading" and other unique features. Super keen to hear your feedback and thoughts.

Thank you!
Many businesses use QR codes like restaurants that allow you to order through a website (long urls that change), what are some alternatives they can use is easy for the daily customer as well as safe?
If the transfer time was really slow, I could see wanting to return a subset of data without duplication, and then allow the application to query locally among that data for all the various things it needs.

That seems so unlikely that I'd think a distributed sqlite database would be a better idea instead, and just have it sync up when it can, and always query local.
The functioning junkies obviously aren't the ones who "need" free housing. The junkies on the street are the ones who can't handle their shit and have alienated all of their friends and family who might otherwise help them. Nobody wants to live with them and they can't take care of themselves, and therefore they're on the street. And for these very reasons, nobody wants to share an apartment building with them.
In this article, I will show how to automate sending out job applications using the Python library step-by-step with code.
My earliest memory of using Pascal was typing in backpropagation network code from a 1990 issue of German C'T magazine into HiSoft Pascal on a 48K Spectrum. I had no knowledge of German or much of Pascal for that matter but it worked with only minor fixes. Watching the NN weights settle at a very leisurely pace was mesmerizing.
Didn't know about this, thank you.

For reference, this is the course: https://karpathy.ai/zero-to-hero.html
I won't be surprised if that happened in my country's internet. My country one day blocked Reddit out of nowhere, without clear reason, almost a decade ago. It's still not clear why, to this day.
MoE is a great architecture if you are running the model at scale. When you put different layers on different machines, the VRAM used for the parameters doesn't matter that much but the inference compute really does.

That's why the SOTA proprietary models are probably all MoE (GPT-3.5/4, palm, gemini, etc.) but until recently no open models were.
After ISL.
Not if they automate it like in the OP?
Yes it's famously problematic. It's got better with time partly due to US based firms coming in and blanket offering lots of employees they hire there equity so tax authorities were forced to figure out their policies, but for example when I joined a US FAANG from a European country in 2006 I was warned that the tax authorities might question the equity because they weren't really familiar with stock options.

Mostly the issues are therefore related to strange tax rulings that would lead to bankruptcy in some cases. It's not unique to the EU, the USA also has some edge cases where people can be bankrupted by tax bills on money they never received.
How to Build a Movie Recommendation System Based on Collaborative Filtering
> I suspect it’s silicon on the CPU that is completely wasted.

I suspect it is completely microcoded and there is no dedicated silicon to implement it (well other than ROM space to store the microcode I guess).
Brand Strategy for Different Stages of Business Growth
Which robot vacuum do you have? I have Roborock from like 2019 or so and it still works amazing.

To me it's a real life saver and a pleasure to use.

I do quickly scan the rooms and clean up stuff that I think it might otherwise get stuck at, but it doesn't take more than a minute. Considering the savings overall what it would otherwise take to use vacuum yourself it's crazy good. And I'm definitely a lazy person in terms of putting stuff away or leaving them unnecessarily on the floor.

I have special plastic boxes without lids I can quickly throw things like cables that I left on the floor before enabling the vacuum.
$40 smart watch from Amazon does most of what the Apple Watch does and battery lasts a week even wearing it all night. I occasionaly charge it while showering
Sure, if one wants to write games like in the 16bit glory days.
I took off my self winding watch at night and it worked fine.

> night-only mechanical watch

I said that I was thinking of only wearing a smartwatch at night, because I really like the gentle alarm in the morning.

What I didn't say was that I use a smartwatch for tracking my sleep patterns.
This sounds like a Chat-GPT 1.4beta answer.
People should be locked in jail for being drug addicts. Give it a few more years and you'll change your opinion on that too.
Simple solution; require convictions. The problem wasn't with locking up junkies, the problems was doing it without due process.

Create laws against public drug use, then enforce them.
and then the US closed most of them and now issues can not work themselves out... anywhere else.

good or bad? not sure.
I always had this idea in the back of my head -- watching tons of AWS re:invent and other videos that are technical talks using a slide deck. Kudos for shipping!

Not able to get this to work -- will try again later in case the issue is temporary.
But some people actually do prefer to rot on the street on their own terms, than rot in some asylum cell locked up.

Still, I think other people have a right to walk the streets undisturbed, so I don't see an easy, clean solution solving everything at once. But banning public drug use, is very fine with me.
Better than CPython, regardless of how you put it.

EDIT:

Also to note, those languages powered whole graphical single workstations, with microcoded CPUs + JIT.

"Efficient implementation of the smalltalk-80 system"

https://dl.acm.org/doi/10.1145/800017.800542

https://computerhistory.org/blog/introducing-the-smalltalk-z...

"Self-Confidence: How SELF Became a High-Performance Language"

https://www.cs.cornell.edu/courses/cs6120/2020fa/blog/self/