skysight-inc/HackerNews huggingface dataset:
If you want to pull back the curtain, I highly recommend hand-writing your own small ELF binary. In particular, on Linux, the C ELF structures are available via:

#include <elf.h>

Writing C code to generate an ELF makes it apparent that an ELF is just a couple of structs and some assembled code dumped to a file. (I've used Keystone with decent success for assembly.) It's actually pretty easy to build something that works if you follow along with the man page:

man 5 elf

For debugging handmade ELF files, it's handy to explicitly run the system loader under strace:

strace /lib/ld-linux.so.3 ./homemade_elf

You can find the path to the interpreter that will be used via something like:

readelf -a "$(which ls)" | grep -i interpreter

For example, debugging with strace will make it apparent if any memory mappings are failing. The loader also sometimes has its own error messages that are more descriptive than a normal segfault.
Rust crypto libraries were definitely not ready in 2019. I think the story is a bit better today.
That’s at least a helpful-sounding answer. The asker didn’t respond with a negative result so perhaps one can assume it worked.

I makes me wonder, though: what’s the lowest temperature an ant could realistically survive for ~12 hours? Say my freezer is full and I need to use the refrigerator instead; is that also viable? I could put it in the back of an old refrigerator, probably.
People argue about whether putting stuff on arxiv constitutes "publication". I like the loose definition of publish (it's available for a wide audience to read, with at most, pay barriers) but other folks do not. There is still a huge cachet in being able to point at a peer-reviewed paper in a prestigious journal, no doubt, and many people will consider arxiv a preprint server, not a publication.

(in the old days, after your article was accepted, but before it was published, they'd send you a few copies labelled "preprint" that you could distribute informally)
Is there even a way to opt in to having a secret be accessible only for your process?
Like, a way to maybe sign your executable and then use a windows api that then gets "oh. This process is made by the same vendor that created this secret, so it’ll be allowed access".

It’s just ridiculous that the most trivial, unprivileged process can just steal any file and any secret accessible by the user it’s run as. Unless that secret is protected with a key derived from a separate password the user has to put in.
Show HN: Dive into dedicated forums tailored to each subject – Academates
Funny he mentions Revolut x 100 Thieves… Cash App got there first.

https://twitter.com/cashapp/status/1384601992463482880

Cash App also has a fashion label: https://www.cashbycashapp.com/

Of course, Cash App also has multiple angry state AG offices.
No. Do not use JavaScript for backends.
Use one of the holly three: Python, Go, Rust.
Go or Python are probably the most optimal choices.
Is the a minimum employment size? Because Mistral doesn't seem to have them listed. But they are small in terms of employees. But they are listed as hybrid paris/london/SF. I don't think that allows them to get away. I even checked using my VPN in case weird shit was going on. I like how they are being open source but not being open salary seems counter to that ideology... There's a few other AI companies I've seen that have this issue too so I assume there's exceptions or no enforcement and people gambling.

(I'm only calling out Mistral because they are "big" and the open source messaging they push)

https://jobs.lever.co/mistral/675b7f06-a76b-4144-af0c-4dd328...
Patriot Missile Software Problem
In the US (or at least California?) you typically have the right to discuss your working conditions, even if you're not unionized. More to the point, companies don't have the right to try and prevent these discussions from happening. Depending on how the criticism of the letter went down, it could very possibly have gone beyond what's legal.
Meanwhile, these "trusted apps" are regularly executing whatever code shows up from server-side.
Most of Manhattan’s unilateral action 42 years ago probably doesn’t relate to a modern day trend.

Oregon sounds like it is setting a pace, I’m glad Austin managed to end single family zoning last year alongside it. I hope Seattle, and every single other major city government in the US will manage to one day remove citywide parking mandates alongside the unusually car dependent laggards in Austin.
Imagine for a moment you are on half of the earners in a median-income household. You make $37,290 a year (the median household income in the US is $74,580). You have two kids: 7 and 10. The school they go to announced that, due to constant feedback from parents about the curricula and teacher performance, all education will need to be supervised by one of the child's primary guardians. This means that from 7:30-3:10, Monday-Friday, either you or your spouse must sit in an observation room and monitor your children through specially installed video surveillance. You are not allowed to work during this time. Your earnings will be $0.

There's an alternative, though. Instead of monitoring your child for the entire school day, the school will put your child in a room with all the other children of parents too busy to monitor them. They'll be given an iPad, Wi-Fi, access to a bathroom, and a reasonably nutritious meal. They will receive no formal education, but the staff will make sure they don't hurt themselves or anyone else. This will enable you to go to work. Your earnings will be $37,290 a year.

These are your only two options. The state requires you to choose one of them, or you'll go to jail. Also, if you choose the second option, your taxes won't go up next year.

Which would you choose? Which would people in your demographic choose?
Build directives are magic comments. Embed is a magic comment but you also need to import it. Weird magic syntax to declare enums. Etc.
Not to mention that some of these things get easier once you have the skills for them. E.g. I've been buying my own health insurance on the open market since I was 22 - now in my early 40s, it takes me maybe an hour or two to fully compare a handful of policies and choose the best one for me and my family (even doing calculations, etc). This is vs having to immerse myself in it for a whole evening (4-5 hrs) and then agonize about it for the next week or so like I used to do back in the day (and only for myself)
>1) You need to implement it for very small airplanes too, which is far from easy.

No, you don't. It's easy: just don't allow small airplanes at airports with large commercial aircraft. No one needs them anyway; they're just a luxury for rich people. The only place they make sense is for very remote locations, like Alaska, where there's a need for people to pay for carriage on such a small aircraft. For normal airports that carry jumbo jets, there's no reason to have small planes sharing the runways. For exceptions like coast guard jets such as this one, these are government-owned so they can afford the upgrades.
I'm amused that people call ants doing pretty human behavioral quirks "scary". Obviously the implication is that they're smarter than we knew, but I'm giggling imagining some other species going "Have you seen what humans can do?" and then just describing the beef industry, Boston Dynamics robot dogs or Facebook.
Humans do it too: https://en.wikipedia.org/wiki/Aron_Ralston
As far as I'm aware, the state of play in tech is far more welcoming to formerly incarcerated people than this thread would imply. Justice Through Code at Columbia University is designed to place formerly incarcerated and criminal legal system-involved individuals in tech roles, and has had a lot of success placing its alumni at big tech companies [1]. And this is largely for entry-level tech workers.

Checkr is a commonly used background-check tool, especially in tech, that allows for those with criminal histories to provide context for what's on their record [2], I'm curious if you've encountered it specifically.

To your post about being ghosted, that seems unfortunately to be a common theme in this period of staff contraction that may not be limited to those with criminal records [3], but reneged offers is a bummer, I'm sorry that's happened to you. There's a theme of "owning the narrative" among some formerly incarcerated people that may be worth considering.

Last, a useful resource on humanizing language for those of us without criminal justice histories [5].

[1] https://centerforjustice.columbia.edu/justicethroughcode

[2] https://checkr.com/

[3] https://medium.com/@k0ryk/everyones-getting-ghosted-dbf0fbaf...

[4] https://fortunesociety.org/wp-content/uploads/2020/12/final-...
I'm curious how flutter apps will do on visionOS. I suspect apps using native widgets will be great because the OS can change to UX for the app. Flutter apps on the other hand may all have to be re-shipped since they're doing it by hand.
This is more common practice than you think. But it is common in enterprise realm not in SaaS realm where you just self signup and it is Product-led upsell.
>If it's so efficient and/or desirable, why only a fraction of NYC?

You are misinformed. It is only part of NYC and rare in other cities across the US because of the planning which generally supports cars, including rules like the article, parking minimums. That makes it a luxury good. Build more walkable areas then it won't be a luxury anymore.
Isn’t that somewhat counterproductive if you are trying to attract developers to build in your cities urban core? They might decide to just build in the suburbs or another city that pencils out better.
They're not "using Musk's money" - wages paid to employees are owed to the employees for their work, and are no longer the employer's money in any way, shape or form!
perhaps you could write the compiler using the data structures used by co-dfns (which i still don't understand) so that vectorization would speed it up, auto- or otherwise
No, we need more than this: the system must be documented and pilots must be trained for it. If the aircraft manufacturer fails to do this, they go to prison. If it's found that hiding this information was intentional, the corporate executives and everyone else in the company who knew are publicly executed by firing squad (with them aiming at their stomachs).
I think you are swapping one issue for another. A clearance that is a button push has far less meaning and protection than standard verbal phraseology. During the critical phase of flight, attention is needed on the aircraft performance and position using the working auditory memory we can minimise distracting messages and popups close to the ground.
Who cares what they think; would a judge consider me liable because I hired the ex felon? If so, aren't they admitting that the criminal system shouldn't be trusted?
Maybe a dumb suggestion but could you go the contracting route? Do employers run background checks for contractors?
And some setups with rclone. How is that different from restic? The documented rclone setup doesn't support append-only in any meaningful way.
I've been listening to the audiobook and have enjoyed it a great deal thus far (about 1/4 in). Helped me think about work in a new / fun way that has helped me start of the year right.
Most people do not do this everyday. You can use a car when you need to but driving for every trip is what has created the affordability and the congestion problem in America.
Write down what you get from each and at what cost. You'd have to have extremely strong opinions to buy anything else than Tesla.
great job team!
Coming from DOS/Windows world, I think the main reason ELF is as weird and complex as it is, is because it tries to be both a dynamic and static object format at the same time, and dynamic linking on Unix-likes is also supposed to be an approximation of static linking, but at runtime. In contrast, PE exports are just a mapping from addresses (more precisely, RVAs) to names, and imports are simply an array of slots that point to the name but get overwritten by the actual address by the loader.
The problem exist for corporations as well. A teenage girl, who was a former classmate and friend of my daughter, was murdered at work because she turned down a man's advances. She made formal complaints, but the bureaucratic corporate processes made it difficult to protect her or sufficiently separate her from the harasser/murderer. Even if the state is an at-will state, corporate policies and mismanagement often handcuff those involved to rectify situations before they get out of hand.
Supercomputers (the classical kind) typically don't want to run codes that try lots of combinations; they were designed for, excel at, and cost a lot because of, the need to speed up single runs at a time. This is partly due to history, and partly due to definitions of supercomputers, but every time I proposed runs like this (proteins/drugs) to the supercomputer centers, they told me to bug off because my codes "only scaled to 64 processors" (that's 64 servers, mind you; before SMP was common).

We did what you described using idle cycles at Google (search for "Exacycle") and we got great results doing large scale parameter explorations (either randomly sampled, or sampled based on where the previous sims suggested looking next)- although, nobody actually did material simulations like this, we did proteins.

Realistically, almost nobody does this because it's just not cost effective (the search space is too large, the loss functions aren't accurate enough, and it uses TONS of energy), and more importantly, somebody else is just going to find a way to generate 75% of the results with 25% of the energy, and that person will get published faster.
in the 02000s there was a lot of interest in software transactional memory as a programming interface that gives you the latency and throughput of preemptive multithreading with locks but the convenient programming interface of cooperative multitasking; in haskell it's still supported and performs well, but it has been largely abandoned in contexts like c#, because it kind of wants to own the whole world. it's difficult to add incrementally to a threads-and-locks program

i suspect that this will end up being the paradigm that wins out, even though it isn't popular today
The technical term for these is RIRs. Regional Internet Registries. There are five of them, ARIN (North America), APNIC (Asia Pacific), RIPE (Europe), AFRINIC (Africa) and LACNIC (Latin America).

The RIRs are delegated the numbers from IANA, and they in turn delegate numbers to LIRs, Local Internet Registries, such as an ISP or a maybe a large organisation which has vertically incorporated that functionality.

The RIRs represent, and are paid for by, the LIRs in their region and so to some extent they reflect local consensus, local culture, etc. This means in some sense RIPE's security policies reflect what European ISPs and similar wanted, for good or ill.
Can Midjourney CEO David Holz Stop a Storm of Fake Election Images in 2024?
But well before everyone had enough data storage in their pocket to hold all those episodes and much more.
That must have a lot of false positives for all but the most paranoid environments.
737MAX is what happens when you have a bad plane design because of bad regulations, and corporate execs intentionally make the existence of a plane system a secret from pilots so that they don't need retraining. An incident like that should result in prison time, if not outright execution. It is not a good example of the downfalls of an added safety feature; the MCAS system wasn't a safety feature at all, it was much more like the emissions-cheating "feature" in VW's "dieselgate" scandal.
Then use SQLite.
Should we develop a new DB for LLM dev?
> One user, Matt Lucock, lambasted the group for “reckless negligence” and for blaming NPM for the fallout of their project.

> “You have deluded yourselves into believing that the problem isn’t that you abused the registry, but that npm’s unpublish rules don’t hold up to someone abusing the registry in this way,” Lucock wrote, adding that the unpublish rules are necessary “protect the integrity of the registry.”

This person sounds like the kind that would feel satisfied when a low level scapegoat got lynched in a security breech aftermath while ignoring the high level management issue.
3. Businesses open up shop 5 miles away from downtown where they don’t have to deal with any of this.
I thought Musk supported "free speech".
So many kinds of warblers.
The way I think of it, is if the outer circle is just sliding with friction such that the same point of the little circle is in contact with the big circle, it would undergo a single full rotation. Or is you slid a box along the surface of the drum, it would naturally undergo a single rotation. So then when add in the "rolling", you get the 3.
Even if we ignored all the other reasons and protections: a massive chunk of Space-X's profits come from government contracts and he should absolutely be subject to worker protections as a part of those contracts if my tax dollars are being spent on it. I don't particularly care if he's personally offended that people who work for him think he's a jerk. If his skin is that thin, perhaps he should consider a profession other than "leading" a diverse group of critical thinkers.
Just Write, You Dolt
You obviously completely missed the point
Another great was Jay W. Forrester, inventor of core memory, urban planning professor, and applied mathematician, among other things.

Yeah, where are the true polymaths of today?

https://en.wikipedia.org/wiki/Jay_Wright_Forrester
At that scale, either pay it or buy off-lease equipment.
Since that post was published, the 4090 came out, which can (according to this hashcat benchmark [1]) do 50,638.7 million SHA1 hashes per second, so now it would only take a single 4090 GPU 11.55 years. Or you could buy 12 of them and do it in a year, etc. So it's definitely not cheap but 15 years is definitely an overestimate (and presumably GPUs will keep getting faster...).

SHA2-256 is "only" 21975.5 MH/s so you'd have to double the number of GPUs or amount of time.

[1] https://gist.github.com/Chick3nman/32e662a5bb63bc4f51b847bb4...
He has all the leeway everyone else has within the laws of the jurisdictions his companies operate in.
You can generate the gif dynamically. Unless you’re doing a lot of resizing, the one time cost of building the gif will amortize quickly across the total runtime of the animation.
I think it's simply that the blog author and commentators have an unrealistic threat model when it comes to how the legal profession uses MD5s.

After the first high-profile case where authenticity of evidence gets called into question because a seized electronic document was deliberately doctored to allow for a hash collision (if that ever happens), there will be a will to change to something new.
From all accounts it's far more than just criticising a letter.

It was how they got the letter in the first place and creating an environment of coercion and fear for employees conducting legally allowed activities.
37C3 – Nintendo hacking 2023: 2008 [video]
Which is excellent, and should make it easy to codify that into law.
I think it would be silly to do so. You're pulling down $20k+ contracts for a week's work. It's a pretty good gig and completely legal.
> What "destruction and violence" are you talking about? No neighborhood I visit or have lived in is rife with "riff-raff," and kids are still mollycoddled door-to-door.

Are you wilfully ignoring the actual thread of context we're discussing? I was replying to your reply to the following:

> Just watch some of the George Floyd protest videos from LA to get a sense of what likely really concerns LA parents. No amount of snow, sleet, wind, and sub-zero temps can hold a candle to those apocalyptic scenes.

Good night.
this is an iquate joke
B-schools is “business schools”.

I wasn’t referring to the “prestige” of certain colleges (ie, “Ivy League” vs public school)
It’s 15 or more people.
The circular dependency problem is kind of "90's interview question" easy (source: I was asked this in an interview in the 90's). What other comically obvious lessons remain to be painfully learned for npm folks?
Maybe instead of planning bike lanes we should be addressing the root causes of why it takes such such an absurd amount of time to make changes like this. Once we do that we can get back to bike lanes.
In the past, this policy of Wirth's has been cited when talking about go compiler development.

Go team member, Robert Griesemer, did his Phd under Mössenböck and Wirth.
You say to use SHA2, but TFA says to use SHA3 or Blake. I think your recommendation is the better one, but I feel like teasing out why because it's interesting.

Firstly ... the NIST recommendation TFA links doesn't just recommend SHA-3, it actually says "Federal agencies should use SHA-2 or SHA-3 as an alternative to SHA-1." SHA-2 and SHA-3 are both valid and recommended hash functions by NIST. And while 3 is higher than 2, and SHA-3 is newer, in this case it doesn't mean "better". Being based on Keccak and a sponge construction, SHA-3 provides "diversity" more than "improvement".

Secondly ... SHA2 is widely implemented in existing hardware, and it's just currently more efficient (and likely to remain so). So why waste power, especially on something you'll be doing in bulk.

O.k., so that's why SHA-2 and not SHA-3. But Blake is worth avoiding IMO ... because the FISMA says that for Federal work, you have to use one of what NIST recommends in FIPS. Obviously the legal profession needs to be able to practice in Federal courts (Article III and administrative) ... so if you're going to pick a new standard, pick one of those (but not SHA-3!).

Lastly, and this is really an aside ... it's not uncommon for some folks to think SHA3 and SHA384 are the same thing, but they are not. SHA384 is just a variant of SHA-2 with a 384-bit digest length and correspondingly improved security margin. Other Federal standards, like CNSA, separately recommend SHA384 as a good minimum ... so it can be confusing and I think it's understandable why some people think this is what SHA3 is just short for.
Free speech is when you say something Musk agrees with.
I use iCloud more as an archive where I put things I am not actively working on. I didn't encounter any issues with Sonoma but I believe your use case is a lot more advanced.
Good luck getting any of them to run on a locked down machine.
Congrats on HN post success. Did you get any criticism? How did you handle it? That's my biggest concern with writing and sharing more on the internet: people can be pretty darn ruthless when they don't agree with you.
I use Suckless's terminal, st. It's great. To install it, I compile it from source. It takes a couple seconds. Take a look at their work.
We're BACK. Twitter is popping again. Come on HN, sit up and pay attention.
The manipulated graph is shown in Guzey's section 19, originally from a paper called "Chronic Lack of Sleep is Associated With Increased Sports Injuries in Adolescent Athletes". Walker left out the column which showed fewer injuries in the group with 5 hours of sleep than 6 hours of sleep.

Beyond that, there are plenty of examples of Walker making strong claims without citing sources. For example, there is no citation for the claim that sleeping less than 6 hours per night doubles risk of cancer, the existence of fatal insomnia (a neurodegenerative disease) doesn't prove that lack of sleep will kill somebody, the WHO never declared a sleep loss epidemic, etc.
Cloudflare Registrar has been amazing for me.