skysight-inc/HackerNews huggingface dataset:
It's a cool list of patches.

I love these projects that bundle a bunch of cool things together with a base thing. Bazzite is a SteamOS project that similarly bundles all kinds of crazy things, and was a very popular recent submission, for another example. https://news.ycombinator.com/item?id=38828040 https://github.com/ublue-os/bazzite

The maintenance style here looks difficult. They seem to somehow take chunks of new chromium releases and make commits with those dropped in changes, and fix random stuff for a while. Looks very arduous. It makes me appreciate a somewhat opposed style, the Debian's Quilt model, where you have take the upstream and keep reapplying a set of patches to upstream. Maintaining is then just re-hacking any patches that break, and authoring new patches, whenever reapplying breaks. Seems like it'd be much easier to maintain, long run.

I was also hoping for something like the Quilt model because it seemed like it would be a good way to learn some shit about Chromium! Having the patches on hand would point to some key parts of the code-base, I feel! Im not sure how I'd learn what went into this fork, other than meticulously going through history. The readme also doesn't link to where it sources it's many patches from (which is another thing Bazzite did an excellent job of!).

Kind of interesting seeing a spreading focus on using more/modern x86-64 extensions spreading. Ubuntu is dabbling with what they are calling x86-64-v3, Red Hat too. https://www.phoronix.com/news/RedHat-RHEL10-x86-64-v3-Explor... https://www.phoronix.com/news/Ubuntu-x86-64-v3-Experiment
Remember that when you are giving your DNA to a company, you are also partly doing it for all your family members. Maybe talk about it with them before doing it, especially if it is just for fun.
It really isn't man, it's "partially" in your head of course. Being more confident and secure does increase attraction, but sadly the halo effect is real and how attractive you are will massively influence your treatment
Times change. A typical Chinese metropolis completely dwarfs hong Kong. That's why China was willing to back pedal on the autonomy deal for hong Kong because its no longer means much as an economic powerhouse. Almost every other Chinese city has left it in the dust.

You know this, but a lot of people are just behind on the current economic reality. Not surprising given the speed at which china moves.
Is there some sort of organised push for dropping copyleft?

2nd post today going down that route
- You spreadsheet the shit out of everything.
===
+ You spread shit into everything.
Acceleratored AI Startup Seeking Cofounder / CTO
We are currently participating in an accelerator program with $100k in funding via that program.
You will be given co-founder level equity (up to 35% depending on contribution and experience).

Our goal is to provide observability into whether LLMs are behaving as expected, and transparency into why they are behaving a certain way. We aim to accomplish this by first helping companies leveraging genAI to monitor the performance of the AI systems they are leveraging.

The founder (your future cofounder/CEO) is a published researcher in the applied AI/ML space and is looking for someone with deeper knowledge.

Experience desired (not all are needed!):
Generative AI research
AI transparency and explainability
Startup experience
Compliance in fintech or marketing
I was (not figuratively) thinking "they are still here??" too.

I am partially shocked. Thought they were no longer a company.
Is that always true? What about hype?
Goodreads discoverability seems pretty good to me. I'm constantly finding new books through their recommended algo, front page, curated lists and search. What else could they do to improve that?

For example, if I wanted find more beatnik related books (after reading On The Road) I search lists and find this fantastic community scored collection with more books than I'll ever want to read on the subject: https://www.goodreads.com/list/show/89976.Beatniks
It's mentioned already but needs to be mentioned again: start with https://vt100.net for DEC vt100-vt520 documentation.
Wouldn't it be securities fraud to give information on how the business is operated to some investors but not others?

I suspect any explanation of those terms would need to be on their investors page.

https://investors.xerox.com/news-and-events/presentations-we...
I've always found this notion to be a bit ridiculous and don't understand why it gets so much traction. Every time the LHC or CERN smash particles together, there's some software somewhere generating all the subatomic particles and their interactions?

Or there's some program busily conjuring up fake input for everything the JWST, or any other telescope, looks at? Or every microscopic observation, every chemical reaction or physical process is an elaborate simulation?
I don't know why you responded like this. Did something about my comment offend you? I don't get the impression you're asking for advice in good faith so won't answer, sorry if I misunderstood the tone
Guide: Managing image files in DOSBox‐X · joncampbell123/dosbox-x Wiki
No, the final one only required local access as the user in question (this is mentioned after the one you're referring to that required AD Domain takeover).
The Quadrantid meteor shower 2024 peaks tonight alongside a bright moon
$1k/mo is a new car with no down payment, most people aren't doing that. It's literally the most expensive way to get a vehicle! Maybe #2 depending on your views on leasing and how you calculate cost there.

And even using the $1k/mo number, you're still paying thousands more in rent to save that.
Fundamentally, we are not an empire - we are a republic. Feel like that has gotten lost in the noise recently.
You can run it randomly with:
(( RANDOM%2 == 0 )) && $HOME/last_sunday.sh

Or add after the command
;sleep 1;clear

to clear the screen after one second.
Better source: https://github.com/Microsoft/WSL/issues/873#issuecomment-425...
It’s a hack as I understand it, not good for volume production and design specific in a way that makes it non competitive.
FYI a number of streaming sites won't work - while this has Widevine, it does not have Verified Media Path (VMP) which verifies that you're running a signed binary. https://github.com/Alex313031/Thorium-Win-AVX2/issues/84#iss...

https://github.com/castlabs/electron-releases is an interesting Electron fork with full Widevine+VMP support - but it's very much closed-source.

EDIT: wrote this before I saw other comments - be aware that Thorium likely has NSFW content in old commits and should not be cloned locally in corporate environments. AFAIK this doesn't apply to the castlabs link above which is an entirely unrelated project.
if it was truly a credential stuffing attack, then there's a shared responsibility between users and 23andme. 23andme is responsible for not enabling 2FA. the users are responsible for reusing passwords.

to me, the takeaway is that we need to roll out passkeys as quickly as possible.
And again you are wrong. It was debunked not a long time ago, and I think it was here on HN. The AMD drivers, kernel side, are still gigantic even excluding the generated register descriptions. Is this what we call a AI lie?

But where you may be right: it seems nvidia hardware programming interface is much cleaner than AMD one and may require much much less code.
What about it seems unethical to you?
Tesla? Their HQ is in Texas but their “engineering HQ” is in the Bay Area. Since the Fremont factory has more employees than the Texas gigafactory (according to their wikipedia pages), that probably holds true for Tesla.
> "I was late because I dropped my mug in the kitchen while wearing blue jeans." Nobody says the end of that because it's irrelevant to the explanation for lateness.

That's kind of a straw man argument though.

If you instead compare "I was in a car accident" with "I was in a mug dropping accident", you can see how bizarre it can be to use the passive version with a non-car incident. However, comparing "I drove into another car" with "I dropped a mug" and you can see that the active voice works better. (Possibly "I accidentally dropped a mug" could be used, but that's adding irrelevant information as it would be unusual for someone to purposefully drop a mug).

The problem is that our society has over-embraced the car and has absorbed the NACC's use of language to de-personalise road traffic collisions on the car side of things.
Is there a geneology service that does not store your data?

Any kind of storage is a non-starter.
Your second link doesn't make sense?

Why would other companies advertising on costco.com relate to Costco's own advertising practices elsewhere?
I do software analysis, with some query engines, and backend. My comparisons are against java, python, and C, though I did try to get into C++.

I also contribute to rust-lang/clippy and other rust projects.
Does this mean that 2FA was not in place? For a company handling such personal information, this seems like a minimum requirement.
Probably any program that does not depend on doing RPE 10 efforts. There's this cringe video segment of his where he confidently states that the grindy last few reps are the ones that matter, which has no scientific basis.

But as a novice, you can progress linearly for some time and it's viable, as long as you know when to tap out. And then you might as well start with something more long term altogether.
I wonder how many gamers now run both Windows and Linux. I bet it's a high percentage of Steam Deck owners. ~100% of Steamdeck owners run Linux (they have a Steam Deck), but some proportion of those, which I'm guessing is fairly large, also has a Windows gaming rig.
Step one should be creating adequate public transportation so that the people with the fewest options are still able to get to work, doctors, and grocery stores even after existing parking spaces go away and no new ones are built.

Parking lots aren't what's keeping people in subdivisions from being miles away from those places. Parking spots aren't what's keeping people in cities from being able to walk to where they're going either. Parking lots are extremely walkable spaces even while being hot and unattractive.

You could get rid of every parking lot in your city and you'd still have highways you can't cross or safely walk/bike along side of, you'd still have housing set miles away from city centers, and you'd still have no access to most places by public transportation. Our cities are built from the ground up with the expectation that people will use cars to get around. That was a mistake, but getting rid of parking spots isn't the cure.

I've been in places like Tokyo where public transportation met all of my needs. We can do it, but you need the infrastructure in place first or you're just hurting people by leaving them with zero alternatives to what you're taking from them.
Thanks for the feedback. I'm glad to see that ux is appreciated. I agree that adding sources could be simplified, it's my least favorite part to implement and I notice it shows. For the Darkmode there is one, you need to press the 3 dots at the top right, select settings and then press the first parameter "Night Mode".
However, I don't think it's a good idea to make it the default, as some people find it harder to read text written in white, and there's a lot of debate on the subject on which is better.
For the button, I was inspired by other popular applications that also put a button there, if the button is too distracting, it can be hidden from the settings, it's the setting below "Night Mode" which is "Display Read-All Button" but indeed the Hamburger menu could be better exploited.
If there's synchronization, you'll need an account, but you'll still be able to access the application even if you don't have an account. Synchronization also requires servers, so it would have a cost. The application should be profitable enough, so it's hard to envisage this feature at the moment.
Is MS still hung up on GoF design patterns, many of which existed only because of how inexpressive Java and other languages used to be 25 years ago? Or is it a more modern set they were referring to?
LunarG, Inc. (LunarG.com) | 3D Graphics Software Engineer | Fort Collins, CO, USA (Onsite/Hybrid/Remote)

LunarG is an independent software consultancy offering the opportunity to work on diverse technologies. Our projects span open source and proprietary work, collaborating with clients in game development, AR/VR, medical, and GPU markets. We take pride in supporting open standards from Khronos, providing the satisfaction of contributing to and supporting Khronos open standards.

Why Choose LunarG?
• Competitive pay with robust bonuses
• Team-oriented and collaborative company culture
• Efficient and transparent decision-making processes
• Choice - 100% remote, on-site, or hybrid work arrangements

Interested? Send Cover/Resume to: jobs@lunarg.com

+ 3D Graphics Software Engineer : https://www.lunarg.com/lunarg-job-posting-3d-graphics-softwa...
C and C++ Hot-Reload/Live Coding
Michal and the whole CoreRT team saved C# for me, one of the very few people i respect from Microsoft
I've asked this question too. And the answers I've generally gotten are something like, "you may not feel like you're being exploited, but in my judgment, you are."

I take this as effectively equivalent to "you're unable to give consent" and/or "you don't have agency."

But that's the kind of mindset you're likely dealing with here.
The supreme court ruled[0] that copyright (and thus copyleft?) does not apply to APIs.

[0] https://en.m.wikipedia.org/wiki/Google_LLC_v._Oracle_America....
It's not about the raw number of people, it's more about how old and aging they are. Age distribution is the key factor. 1 billion 60 year olds is not the same as 1 billion 20 year olds.
My understanding from a quick reading is that Bitwarden essentially used Windows Hello to ask "is the user there" and if so, asked DAPI to give Bitwarden the secret vault credentials which it happily did because that's its job.

The problem with this was that the vault credentials in DAPI was not safe from other programs running as the user, nor from domain admins which could use the recovery key stored on the AD server (which they did in their attack after gaining admin access).

The solution was to use Windows Hello the way it was meant. That is, to store an asymmetric key pair, where the private key is hidden and protected by the biometrics or hardware security key, and use that to encrypt the secret vault credentials before storing them in DAPI.
> users negligently recycled and failed to update their passwords following these past security incidents, which are unrelated to 23andMe. Therefore, the incident was not a result of 23andMe’s alleged failure to maintain reasonable security measures.

23andMe's argument seems ridiculous on its face.
Or you get the armed version of Hitler's 1925 Sturmstaffel and Saalschutz/SA pre-military militias that helped a crazy dictator rise to power believing they were doing the "right thing", opposing the corrupt government.
How to migrate exisitng page to Hugo static site generator
Funnilly enough this also works with human children. When you ask them something their first attempt us a guess. Only when you ask them to answer and explain the answer they start thinking.
As someone who is excited about the potential of using DNA tech for new drug discovery, I’m really sad to see 23andme handle this so poorly. I’m seriously considering not doing their periodic health surveys given this incident + them putting updated health reports behind a paywall.

Luckily I’m also in the NIH All of Us program and they’re at least better about data safety (for now?).
Don't know about revolutionary, but that would be Panasonic, I'm pretty sure?
Nope, you got it mixed around..
I meant the previous question in the sense of 'Has it been realized for any type of information whatsoever?'.

If literally zero types of information have such a system set up, then there simply is no reason to believe it will actually work in real life.

Unless you have some comprehensive proof or analysis that incorporates all known, real world, factors?
They will generally transpose everything on the screen by a small randomized difference every minute or so.
email: support AT diligently DOT ai
There's already a famous case where someone parodied Micky Mouse and lost. Basically, if the parody is too much like the original you can lose, and it's not fun fighting Disney's lawyers on how much is too much:

https://en.wikipedia.org/wiki/Air_Pirates
I drive a BMW M3 (F80 model) and they're a very targeted car here in the UK. The majority of F80 theft tends to happen in other areas of the country but that didn't stop me buying a Faraday pouch for the keys even before I purchased the car. A ~£10 investment means the car cannot be opened with a relay attack the majority of the time (when it is outside my house).
Craftwork | Rails Full-Stack Engineer | Charlotte, NC, USA / North America Remote | Full-time | https://craftwork.com

Craftwork (YC S23) is a full-service home painting company that uses software to dramatically improve the homeowner and operators experience. We’re starting with the $20B+ home painting industry as a low-risk, high margin entry point before expanding to support the broader $500B+ home services market.

Since launching in early 2023, we’ve grown revenue between 50% - 100% monthly, and have raised capital from some of the best investors in the world including Forerunner Ventures, Y Combinator, General Catalyst, Lachy Groom, Jeff Jordan, Immad Akhund, Evan Moore, Louis Beryl, and more.

We're seeking a highly experienced Ruby on Rails Full Stack Engineer to join and amplify our product team, and to rapidly build and ship software that powers our growing business as we expand into new markets.

Our engineering team is amazing, and our product has been growing _fast_ - we now support internal workflows for communication / operations, the full funnel of customer marketing, we're deploying a mobile app for our internal teams, all with AI sprinkled in.

This is a role where you'll be asked to navigate some real ambiguity and ship fast to solve meaningful problems. We land features every week that help our team and customers as we scale.

- [Ruby on Rails Full Stack Engineer](https://www.ycombinator.com/companies/craftwork/jobs/DGb4Idr...)
Boeing moved their HQ to Chicago in 2001, and experienced wildly successful growth from 2001 until 2019. Seems like it might be recency bias to correlate Boeing decline with its HQ location.

Exxon is another example I can think of. Until recently, their HQ was in a tiny building in Irving, TX while the majority of their workforce was elsewhere.

There's also a whole slew of companies that have a lot of employees "in the field" that are separate from their corporate workforce and would inherently be HQed in locations other than where their large employee bases are, eg manufacturing companies, Intel, car manufacturers, Walmart, UPS, several airlines, banks... Even Boeing would fall into this category. I'm not sure how those factor into things.
I'm not a huge Trump fan, but his energy policies would be good for the economy.

The US is the world leader on environmental policy. If we kill the US economy the environment will pay in the long run.
So 23andMe failed to identify brute force and credential stuffing access of 14,000 accounts. They also have a feature that grants those 14k compromised accounts effective access to 6.9 million accounts.

23andMe then claims that poor password practices are responsible for this data leak.

> “Therefore, the incident was not a result of 23andMe’s alleged failure to maintain reasonable security measures”

I've not run security at an org of their size, nor have i touched their service, but i have to imagine there were some patterns to this breach that would have been reasonable to account for ahead of time. Did those 14k accounts also have their email provider accounts compromised? Could a login ip-range check have prevented all of this? 2FA seems like an obvious answer here but clearly that was more than could be expected.
Where do you see obvious GPT content?
Sure. But no one’s hyped for Xerox.
> part of the function

The other parts of the function include the expectation someone else will buy it at a higher price, which may or may not be based on their own expectation of someone else to buy it from them at a higher price, and so on.
Good counter example. It was a neat idea, and it could be true in some cases, but your counter is pretty strong! :) hahahaha
That’s good because a quick poll where I am everyone says they would like to reduce social media usage!
Projected unlevered free cash flows (discounted back to today, plus a discounted terminal value) is IMO the best long-run model for an enterprise value. Share price equilibrium is a consequence of that, after a current liabilities offset, and a division by share count.

Profits are related to UFCF, but not the same thing.
Here's a pretty good essay by Max Chernyak on why using a generic JSON api to power your application's front end is a bad idea. https://max.engineer/server-informed-ui

tl;dr:

Your JSON api has to figure out:

- How to predict and enable all possible workflows

- How to avoid N+1 requests for awkward workflows

- How to test functionality, performance, and security of every possible request

- How to change the API without breaking the existing workflows

- How to prioritize API changes between internal and community requirements

- How to document everything so that all parties can get stuff done

And on then on the front-end, you have to figure out:

- How to collect all the data needed to render a page

- How to optimize requests to multiple endpoints

- How to avoid using API data fields in unintended ways

- How to weigh the benefit of new features against the cost of new API requests

He goes on to point out that the "re-use" value of an api endpoint is extremely low. You can re-use virtually all the code that produced that endpoint to produce a different one with a different structure for precisely what you need in this new use-case.
I agree. Heapsort is on the optimal frontier.
First data protection analysis of Privacy Sandbox Protected Audience
The fact that they immediately enforced MFA after the breach shows they know exactly how culpable they are.
> Is there wide agreement it is misbehaving and ought to be changed “somehow”?

No, voters overwhelmingly support Prop 13 in general, and feel that property taxes (which in fact are extremely low by national standards due to the Prop 13 nominal rate limit even before considering the Prop 13 assessment increase limit) are high in California. (What's actually high is property values, as a result of both Prop 13 and development policy -- and the development policy is itself, in part, due to incentives created by Prop 13 which align with those created by homeowner NIMBYism.)

It has been tweaked before, and you could maybe pass tweaks again that would enhance revenue in general, but by and large the basic structure is going to be very hard to change.
Not everyone likes copyleft licenses. It's as simple as that.
Microsoft's %Appdata% directory is a security nightmare in my opinion. Ideally applications should only have access to their own directories in %Appdata% by default. I recently came across a python script on GitHub that allows to decrypt passwords the browser stores locally in their %Appdata% directory. Many attacks could be prevented if access to %Appdata% was more restricted.

I also found a post of an admin a few days ago where he asked if there was a Windows setting for disallowing any access to %Appdata%. The response was that if access to %Appdata% is completely blocked Windows won't work anymore.
There are lints you can enable to enforce this, rather than just "pay attention".