skysight-inc/HackerNews huggingface dataset:
Un nuovo tipo di malware per il furto di informazioni denominato JaskaGO, basato sul linguaggio di programmazione Go, ha fatto la sua comparsa come una minaccia cross-platform, infettando sia i sistemi Windows che Apple macOS.

AT&T Alien Labs, all'origine della scoperta, ha evidenziato che questo malware è dotato di un vasto insieme di comandi provenienti dal suo server di comando e controllo (C&C).

Durante l'installazione, JaskaGO esegue controlli per identificare la presenza di un ambiente di macchina virtuale (VM) e, se rilevato, tenta di passare inosservato eseguendo azioni apparentemente innocue.

Tra le sue capacità, il malware è in grado di rubare informazioni dal sistema della vittima, modificare gli appunti per facilitare il furto di criptovalute e connettersi al suo server di comando e controllo per ricevere ulteriori istruzioni e scaricare payload aggiuntivi.

Il malware è in grado di adottare strategie complesse per ottenere persistenza nei sistemi macOS, come eseguirsi con privilegi di root e disabilitare le protezioni di Gatekeeper, assicurando il suo avvio automatico durante l'avvio del sistema.

L'entità e le modalità di distribuzione di JaskaGO, così come l'ampiezza della sua campagna, sono ancora poco chiare.
Wow, I’m glad I read the entire article. I did not anticipate the answer to: “Why did you buy this?”. Thank you for sharing.
If it’s electrical it wouldn’t be too hard to conver from one standard to another using an adapter, since it’s standard on both sides there will be a money incentive to make one
Can't you just set the dpi in each display with X11?
All the fuss about email when younger people don’t use it…the Spencer Reid character on Criminal Minds led the charge by openly not having an email address for the run of the show.
Any short term measurement will show blips. It’s like saying climate change isn’t real because it gets colder at night.

On long term scales, everything is improving[1]. This is obvious to anyone whose ancestors were enslaved, unable to marry because of sexual orientation, or rejected for promotion because of gender. The world is not perfect (see the wars you cite) but it is so dramatically more peaceful than historic times that it really takes a huge bias toward doom to think otherwise.

Fair point on Steam, I forgot they switched from an arbitrary and capricious policy to allowing porn in 2018.

1. https://ourworldindata.org/a-history-of-global-living-condit...
The tape version was recorded at 1200 baud. The 22KB loaded in less than 3 minutes.

It actually wasn't that bad.
Hey! We just changed the description (yesterday) to avoid this confusion - sorry! By static analysis there we actually mean things like type and effect checking.

With either a TLA+ spec or a Quint spec, you can run a model checker to verify properties or get counterexamples. That's the main similarity. As Quint is based on TLA+, we can atually use the same model checkers (that were originally implemented for TLA+).

The main differences between TLA+ and Quint are the surface syntax and the tooling (beyond the model checker). While TLA+ has an indentation-based hard-to-parse mathematical syntax (that looks quite pretty in LaTeX), Quint has a typed programming language styled syntax and a very simple parser, making it easier to develop tools around it.

As for tooling, first of all, Quint has type checking, which TLA+ doesn't. Our IDE support is also more similar to that of modern programming languages - with features like "Go to definition". With this, we hope (and have seen many reports of) programmers/engineers having an easier and better time writing Quint specs then they used to have with TLA+ tooling.

Quint also has support for execution of specs with random simulation, a testing framework and a REPL.

In contrast, TLA+ is a much more permissive language, and you can express more mathematical things that, for instance, could never be executed or are not even supported by TLA+ existing model checkers (TLC and Apalache). TLA+ has a proof system (TLAPS), which Quint does not.

Quint imposes many restrictions with the goal of preventing people to write things they don't really understand - which are possible in TLA+. Those restrictions are useful, just as type and effect systems are useful. But mathematicians that really know what they are doing and need more powerful expressivity will likely prefer TLA+ over Quint. Quint is aimed at programmers and engineers.

They are complementary, not direct competition.
The question is how correlated are human and machine errors. I would guess fairly strongly, in which case human review would add little additional accuracy.
What is "hell on earth" to you?

Cops have probable cause and search you. Find no evidence. "Oh boy sorry for the mix up sir". Hell on earth!
Not true. Visa frequently fails.
No slower than standard checkout. Most often, self-checkout is much faster.
Why not?

To be more clear, the exact story doesn't matter, but to have no story can be jarring. The visuals benefit from some explanation, no matter how ridiculous, as to why two (or more) people found themselves in that situation.

Sure, you can come with a long and elaborate story about how two people met, went on several wonderful dates, and finally saw a heated passion for each other take over. Or you can just be lazy and say that they are in that situation because they are a family that lives together.

Now the economics. You have a given budget to produce a film. You can spend it on coming up with a great story, or can spend it on higher quality actors, better lighting, etc. While I am certain there is some market for both, which of the two do you think will be more likely to rise to the top – the better story or the more visually appealing work?
As someone who has pissed away thousands of team hours working with the next.js abomination I’m very happy to see Astro take off.
I keep thinking “this looks like one of my very first terribly architected, organically created messes”. Astro may not be better, but just statistically speaking you probably aren’t going to be worse. Next is a house of cards.
The architecture is as bad as the code base. The only features anyone wants are perpetually in beta. The documentation is probably the only thing worse than the runtime.
We dropped SSR and used prerender.io to accomplish SEO and look back at that decision as a great one. I want to try Astro, looks more professional and propose built. Not at all interested in SaaS hosting.
>TikTok and other short video sites into toxic wastelands where everything and nothing is real anymore.

Media is not real in the first place, including internet content. Toxicity could be argued similarly. If realness and wholesomeness are the targets, they are already greatly missed.
You might in fact be as incredible as you think you are.

Even then, the lift from collectively bargaining probably outweighs your individual competitive abilities.

Also, the union doesn't have "promotion rules." The members themselves at those unions decided that's what they wanted to negotiate with their employer into a contract. There's no union rule that says that's what members on the bargaining team have to prioritize. The bargaining team can even prioritize performance pay! I will, however, grant that the very nature of democracy (in this case, workplace democracy) means some people will disagree about what to prioritize.
US is standardizing quite nicely too, on Tesla's charging standard. I can't think of a company that is not planning to use Tesla's charger going forward.
JWST Images of 2023
The UK has used self checkouts for 15 years or so now. They work fine, are quick and I’ve never seen an “obscure error message”. You need to wait for an attendant if you’re buying alcohol, but otherwise it’s seamless.

Sounds like crap software and a customer base not used to things the first world take for granted rather than an issue with the idea itself.
You can wait 9 years and have a low chance of your screenshot tool working on Wayland.

Or you can use a different tool that supports Wayland now.

Or you can can add Wayland support to your favorite tool now (assuming it's open-source).
Building a Simple Metaobject Protocol
How about voltage / current / communication? Seems quite a complicated problem, it's not just a case of different USB plug styles..
'slide whistle' fast radio burst picked up by alien-hunting telescope
Hackers Gained Access to the Sensitive Data of 36M Comcast Customers
It's not quite enough. You also have to run a server too - docker-compose won't run without a docker service running.

podman-compose will and it behaves more or less the same way but it's quite a neglected piece of software - lots of bugs, lots of open PRs.

A lot of people talk about quadlets or k8s as alternatives but I don't think these are generally good substitutes for compose.
> It encapsulates everything I hate about LinkedIn

That's the exact feeling I couldn't quite put into words! Very influenc-y, humblebraggy, like almost every post I see on LinkedIn (just have it as a digital, public, online CV and to connect with past co-workers, please don't roast me for having a profile there).
There is, it's called Markor. Absolutely light-speed app for Markdown notes as well as support for custom templates, Emacs style todo.txt formats, and a button for entering timestamps (very useful for me, as I prefer to have one note file for each week, and timestamp my entries.

https://f-droid.org/en/packages/net.gsantner.markor/
This isn't normal, everybody puts them back - especially since the "slot in £1 to unchain" system became normal. Just FYI.
What does it mean to be fossilized in this case. Are the innards all fossils and stone as well?
This doesn't apply across the UK civil service consistently, but for the gov.uk digital service in particular, I've heard they treat their employees really well. The pay may not be great, but everything else about the job is supposedly above-average.
Just my experience, but their permanent staff are mediocre. A lot of the heavy lifting on gov projects I've worked on has been done by contractors and external agencies.

Another thing I'd say is that £50,000 is actually a decent developer salary in the UK. Your average senior dev in London probably gets around £70,000 - £80,000, and outside London a senior dev might more typically get around £60,000 - £70,000.

This also doesn't really paint the full picture if you're comparing to the US because in the UK if you're earning that "much" the government will take 40% of your income and you'll pay an additional 20% consumption tax on most things you buy.
Yeah, even Tesla uses CCS.

https://electrek.co/2018/11/14/tesla-model-3-ccs-2-plug-euro...
The most common "simple" icon is a word mark and background. Would be nice if you could set a word and font (say, for instance, the letter X) in addition to the icon selection.
This is a very good comment.

I guess then the claim is more that no common implementation is amenable to sandboxing, and the compatibility break of a brand new protocol means they can implement it from day 1 in the way they like. Which is a lot weaker an argument, but practically speaking, it's true that no one is rushing to bolt on security features to X. To be clear I'm not realy a Wayland fan.
Purchase and delivery are one-time things. It is in a past. Even if it is the best experience you can have in the world, it doesn't matter now. You don't buy a new car every day. You face the risk of hitting other cars every day.

A ten year old kid probably knows this well enough.
The error reduction from applying a different system applies if the source of the error does not manifest itself in both systems (if errors are uncorrelated, you can get an improvement that looks like that implied by the simple application of statistics, but not if they are correlated).

As an example, you can combine human review with automatic facial detection of identical twins and likely not see much (any?) reduction in error rate at all.

Two independent "85% accurate" humans are not 97.7% accurate for identical twins either.
Big shift coming to EV industry, say experts
And I lived on the other end, about 5 miles from the approach end of runways 22R and 22L at JFK. I always ran to the window when it came by. Big planes would sometimes rattle the dishes in the kitchen.

I now live ~10 miles from a relatively busy airport with business/charter jet traffic, and its barely noticeable to me. But lots of noise complaints in my town and neighboring towns.
Hi, drop me an email at "jb at kulor dot com" and I'll share details. Not ready to publicise the project.
light as a feather, you won't even know it's there /s
You are using evidence of Musk doing the thing to say he didn't do the thing (even though you discounted this evidence in another chain). You wanted to know why you were being downvoted and not replied to. I gave you a reason and it wasnt good enough for you. Lesson learned. There is nothing to gain from further interactions with each other.
My original statement above about what the point of Vulkan Video is

> The idea behind Vulkan Video Extensions is to have a vendor independent and cross-platform video API.

(emphasis added)
IIRC it’s a legal requirement vs just a standard like CCS1. South Korea has the same legal demand for CCS1 so it’ll be interesting to see what happens with NACS there.

I personally don’t mind using CCS vs NACS. I didn’t feel super inspired by the flex I felt when inserting a supercharger’s plug into a Model 3 but clearly it works fine in practice.

My guess is that Electrify America with NACS plugs will still be just as problematic if they’re unreliable in your area. Plug vs Network vs Hardware are being conflated in this discussion. Adding CCS to Superchargers would have worked just as well but that’s not how America works in this case.
Thought experiment: assume the worst: next.js + eleventy is in decline; what does it change in the short-term? It is likely that people using those frameworks are getting things done in them. To me, the fact this whole discussion is happening illustrates how fickle devs are in this particular ecosystem.

It's like nobody wants to be caught dead using something that might not be the new hotness.
I agree with that approach, and it's one I want to try as well. I'm an old Perl guy, but the transition to being a JS/TS native to use modern interfaces + toolings has proven a pretty straightforward path, especially with nodejs systems side for scripts and what not.

The 'declarative' nature of YAML + configuration for defining infrastructure is definitely a good thing, but the tooling for producing those declarations are in a very rough state. I think a "TS => YAML => git => deploy" workflow for deployments could make using K8S a breeze, especially if there is a sensible library in TS that could provide the base classes for manifests, that could be subclassed or wrapped with defaults + definitions for the local environment
GPGPU was possible before compute shaders, but very painful. ShaderToy is the hard way today (and for the last ~15 years).

Simulations commonly target GPU, and a game is just an interactive simulation, so in some respect it's straightforward to write games for GPU. From a utilization perspective, you'll need minimally tens of thousands of dynamic game entities, which is one among many reasons why it's uncommon.
I didn't take a very deep look yet, but this might be similar to https://github.com/pfeodrippe/recife
I don't think that data about how frequently you pay for mass transit, is that valuable.

"This guy takes the train once early in the morning, then again in the evening", exactly like 10 million people in the city, maybe?
No problems would be eliminated. Ditch Amazon whenever possible to reduce problems.

Local, independent stores that are physically visited are the better option.
The most impressive part to me is the submissions reaching the HN frontpage multiple times. I remember the user which is pretty rare for me on HN.

While the tech side isn't super interesting to me, I can definitely appreciate the marketing. He's "hacked" HN as far as I can tell.

Edit: huh, I was wrong. Reached the front page twice, once with shipfast and once now.
We love graphical tools, and usually leave the CLI for scripting automation.

Also, Windows containers do matter in some environments, and they are exposed via the Docker APIs.
Spoiler for others because I don't like being teased:

> “People come and look at it all the time,” Azima said. “They ask me, ‘Why’d you buy this?’ [I say] ‘I want to be buried in it.’”
You'll never be expected to follow the culture in the same way if you're not a native Japanese.

If a company hires you, they're not hiring you to be like everyone else.
True in theory, but is the chemical composition of a building really more complex than the software installed in a building? I feel like theres some 2nd law of supply chains that guarantees that every supply chain --physical or sofware-- will grow in complexity beyond auditability.
I'd love to talk more with people who have done work in this space. Drop me an email at "jb at kulor dot com" and I'll explain more.
Earlier versions of Obsidian seemed faster. I've started using Markor for on the go note taking, and setting the obsidian folder as the save destination.
> Not everyone appreciates having to handle files, worry about syncing, security etc.

I don't think that's a requirement to use Obsidian? I've had, let's say "less computer savvy" friends who've gotten use out of Obsidian.

AFAIK, you need to create a vault in the beginning, so you need to select somewhere on your computer where stuff gets stored. All the other things are automatic and within Obsidian, although some things are paid addons (like Obsidian Sync).
Do that with suborbital rockets.

Btw, they are also VERY loud.
"secure" really has become a buzzword.

> Those aren't inherently insecurities, but the way X implemented them was quite insecure.

In what way does X.org add any security holes to the average Linux desktop where you have programs (from a trusted package repository) which can access everything your user account can?
Beg to disagree. I visited Japan as a tourist and even if you stay for two days the number of times you will use the subway in, say Tokyo makes the 2 minute setup totally superior to your credit card.
It doesn't seem to depend on the logo (i.e. the apple). But maybe it's some kind of strict security/privacy setting that I use in my browser.
> Taking into account how much nesting is involved in writing HTML

which is another one of its flaws.
Reading the docs is a bit of a superpower, but life's too short to read everything cover-to-cover. What's worked better for me is to skim everything so I have some idea what's in there. Then, when I need to do "X", I know to check in the docs.

There's a balance to be found here that's likely different for everyone.
Works fine everywhere (e.g. FamilyMart) with Apple devices not purchased in Japan.
Source: I was there
Digital Banking Workshop, Join Us
https://zoom.us/webinar/register/WN_z-x3Lo24RhWiXKxiS_srAA
> I would guess fairly strongly

No, evidence suggests they are not. We're all very aware of the horror stories of AI misidentifying species. Different AI systems are different, but in general AI seems to make quite different classes of mistakes from humans. Our brains work very differently from current statistical models.

So human review absolutely adds accuracy, you can generally assume. And it adds human-accountable judgment which is just as important.
You'd have to go through it with a fine toothed comb and technical spec sheet on the engine, but the consolidated UK Strategic Export Control Lists.

Dual Use List / Annex I, CATEGORY 9 – AEROSPACE AND PROPULSION

https://assets.publishing.service.gov.uk/government/uploads/...
Wireflow – free, online, open source tool for creating user-flow prototypes
And Windows apparently has a Wayland compositor for WSL
I'd argue we probably want to have more embedded full-fledged DBs. SQLite and DuckDB are great choice while your project is small, but when you need to scale up you'd have to migrate to another DB and/or create a lot of workarounds. With prohects like ChDB you have a distributed OLAP engine already, all it takes to migrate is to rsync a bunch of files to the ClickHouse cluster, ATTACH TABLEs, and you're done.
As a non native speaker I had some serious trouble parsing the first few paragraphs. What is his point? Can someone translate? Car seat requirements are the cause of people not having kids?
Entities in game systems tend to behave like that too when the whole thing is under development - but then (a) arguably a monster chasing you around is just a special GUI widget with extra behaviour and hit points; and (b) when things get really complex it doesn't hurt to switch from OOP to ECS for games.
I won’t be surprised if Tesla becomes a platform for other automakers like android from Google in the future
Desktop is secondary in mobile first development
It actually is very similar to USB plug styles. NACS communicates the same way that CCS does. Converting between NACS and CCS1 or CCS2 connectors should be easy.

The biggest issue is the amount of current involved.
Newspeak 101: it’s sexist to assume that a malicious actor is male. Women can be malicious too! Other acceptable terms are: Woman-in-the-Middle and Man-or-Woman-or-Non-binary-In-the-Middle. Add that to your allow list.
Interface Dispatch in C++, Java, C#, Go, and Rust
Agreed that the social democratic solution of redistribution and welfare programs does great on this front, and I think all Western countries have some form of it. But I think here we are talking about other socialist prescriptions, which have a much worse track record.
> The given wisdom seems to be that we should value experiences more than things.

It's not. It's just it's easier and cheeper to produce things nowadays than experiences, thanks to the industrial revolution.

It hasn't been like this in the past. People valued things much more.
I think they've said this every decade for the last 50 years but international equities have been a loser for US investors... Every time.

And they tell us this time will be different... Every time.

I don't know if the sociological explanation is that you get ripped off because you're an outside or if there is some theorem involving exchange rates and stuff that makes sure international investing is always a scam but I find it a little bothersome that the default choice in my retirement plan allocates to an asset class that I think is certain to underperform.
Dual GPUs should be considered normal/consumer grade setup, hopefully they'll add it soon, on 4bits it's enough with plenty of space for context.

This whole thing is a fork of llamacpp, also hoping it'll all go upstream sooner or later.
If you don't like YouTube, you can watch TV instead, it's still there. Or read a book. "Extortion" – give me a break... Video creators choose YouTube because it gives them a chance to make an income from their videos, or at least an easy way to upload and host them.

This is why people should never be given anything for free, ungratefulness and entitlement is the only reward. I'll greatly enjoy when everything is behind a cheap paywall, giving creators their fair share and leaving penny pinchers in the dust.
Suica defaults to express/transit mode in Apple Pay/Wallet. Using it in your phone is as quick as using a physical card.

Express mode can be configured with plenty of other cards as well, even regular credit cards. That's how it works in London. The difference in speed is because of the gates, not the payment system.
Messari Crypto Theses 2024 [pdf]
Actually USB is a great example.

USB C can charge at 5v, 10v, 20v, etc. When you plug in a device to the charger a hand shake happens between the charger and device and they choose the voltage and amperage that makes sense. A macbook pro can take 100W over USBC but obviously your headphones or phone aren't going to.
When you know your hour of HN is over without looking at the clock.

/facepalm
Power of using their in- house data