skysight-inc/HackerNews huggingface dataset:
So this one integer overflow in sort, a command which is never ran as root is an issue somehow, because it can cause a denial of service(it crashes)? Am I missing something here. Can I use this to exploit someone's machine?

I can search uutils/coreutils for "overflow" and get way more hits, I don't see how this is a rational thing to be afraid of within GNU Coreutils considering it's a collection of tools, that have been developed and maintained for decades and used by millions over that time period.

https://github.com/uutils/coreutils/issues/1420
https://github.com/uutils/coreutils/issues/886
https://github.com/uutils/coreutils/issues/5149

To be clear, I don't see any problems personally with any of these issues, they don't seem very exploitable to me.

However, I think that relying on Rust to be the bastion of safety merely because the name "Rust" is mentioned is nothing but a fallacy.

To me, logic bugs are the far more egregious category in something like coreutils. Me making the assumption, that something works the way it's documented, but doesn't can lead to horrible things down the road. Much more so, than any integer overflow crash could ever dream to.
> “… it is oddly fitting that a man best known for creating a device to move around small volumes of liquid died unable to manage large ones.“

Ouch. This felt… a bit unnecessary and out of place.
His foundation actually released a book that takes his techniques and applies it to digital stuff.

https://www.amazon.com/Smart-Phone-Dumb-Yourself-Addiction/d...
I use mingw/msys2 with great success.'

I even do some directx dev with it.

All with very portable code that can even be built in the standard github action ubuntu.
Also, some Teslas use BYD batteries.
I've recently started seeing job postings that say at the bottom "Mail physical resume" - is that the new brown M&M test?

Also, can't the hiring process be improved with optimal stopping?
Location: SEA (GMT+8)

Remote: Remote/Hybrid

Willing to relocate: No

Technologies: Product, Analytics, Growth, Fintech, Payments, Processing, Financing

Veteran of building B2B & B2B2C financial products. Ive co-founded and led a Series A+ payments & financing co serving schools and prior to this was a Product Manager -> VP Product in a small fintech company. I also founded an Educational Non-Profit focussed on low income vocational school curriculum reform.

My background is in engineering, I code regularly - but quite poorly. Im am however competent in architecture an expert at product & analytics with a large degree of domain knowledge of financial services & educational technology. Ive led large product & engineering teams, mentored a lot more, but honestly grateful for any chance I can find to be an IC.

Ive recently moved to a rural area and am looking to join a remote-first company where I can help build or grow products that have a fun or mission driven purpose. Ideally hands on or leading a small team in a product management like function.

CV on request via email below, happy to chat!

Email: ian0@dafr.ink
And for folks who enjoy reading comments, hn submission of that link: https://news.ycombinator.com/item?id=38567687
Migration trends of the Yellow-rumped Warbler
Press play. Seek out other known birds or use the Cornell Merlin ID app to find more around you in North America
SEEKING WORK | Remote | WORLDWIDE

Location: Morocco.

Remote: Yes, any time zone.

Technologies: HTML, CSS, JavaScript, Python, TailwindCSS, ReactJs, Node.js

Resume/CV: Available on request.

Email: Zakariarassili [at] gmail.com

LinkedIn : https://www.linkedin.com/in/zakaria-rassili/

Github : https://github.com/Zak-devz

Languages: English & French.

I'm Zakaria Rassili, a developer with a strong passion for coding. I have expertise in a wide range of technologies. I'm currently located in Morocco and open to remote opportunities in any time zone.
OpenAI Model Deprecation Guide – GPT3 is shutting down
And yet Harvard introduced her as “a scholar’s scholar”.
They did so by destroying their environment, and ultimately, themselves. Their reproduction rate is at best half of minimally sustaining level. It's not nearly as bad in any free country, they literally ate their own soul in pursuit of rapid economic growth pushed by dictators longing for world domination.
Thanks for the detailed comments, I think this is what we need for a proper discussion, instead of those non-sense comments.
However, "accident" also implies that no-one is responsible for it and "it's just one of those things that happens" when the vast majority of road traffic collisions are due to drivers not paying attention or following road traffic rules.

There's also a major problem with RTC reporting in general in that reporters often refer just to the vehicle, such as "car hit a wall", or "car plows through pedestrians" which depersonalises it and again makes it seem as though there's nothing we can do about these kinds of occurrences.

There's reporting guidelines here: https://www.rc-rg.com/
As I wrote in my post, not all software components are like I did describe and you are refering to a type of software which is not in that scope. The one you are refering to is a type of software where the "problem" is ever changing requirements. Then the "problem" to be solved is with the people making those ever changing requirements, good or bad reasons (usually, people are bad: planned obsolescence to justify income, etc).
Exploring the Hidden Roots of MS-DOS: 86-DOS 0.11 (1980)
Cross compiling rust programs is much easier, so if you end up on a niche system that doesn't come with coreutils, you can install your own version.
Okay, but if a city has cast-iron proof of the vehicle speeding, then surely they would win back the costs?
The UK's energy use per capita has dropped more than 25% since 2000 (which to be honest is a pretty successful energy policy compared to what a move away from coal could have been).

It is interesting to compare them to Japan where the downtrend isn't anywhere near as marked and is potentially related to some change in energy policy related to 2011 [0].

It would be a lot easier to get people focused on stuff higher up on Maslow's hierarchy, like privacy, if they were warm, comfortable and could afford to manufacture stuff locally. Otherwise they'll probably need to buckle down for some internal strife, shrinking real pie could result in all sorts of weirdness. I'm not sure what the precedent is for a 25% drop in energy.

[0] https://en.wikipedia.org/wiki/Nuclear_power_in_Japan#Post-Fu...
The cynic in me thinks that the PD is willing to be so lax for moving violations for self-driving cars because they're not actually concerned about the moving violation.

LEOs view the initial offense as a lead that gives them probable cause to start fishing for more serious offenses once they initiate the stop. But they're not going to nail a self-driving car for DUI, drugs, weapons, etc.

To a certain degree, all minor traffic stops are pretextual stops. They're an "in" to look for more serious offenses.

One thing I am very curious about, though, is how the system of adding points to a license for certain traffic infractions translates to self-driving cars. Surely it would not make sense to add points on a car-by-car level, since every car in each fleet is presumably running the same software, but applying them to Cruise or Waymo in the aggregate doesn't make sense, either, unless there's some sort of formula for "points per mile driven across the fleet."
My favourite simple "eviction" algorithm is just to wipe out the entire cache as soon as it gets full.

Insertion:

%hash = () if keys %hash > 100000;
$hash{$key} = $val;

Retrieval:

return $hash{$key};

Desirable properties include bounded memory usage (assuming bounded size of $val), O(1) (amortised) insertion/retrieval, and (most importantly) it only takes a second to write and there's almost 0 chance of writing it wrong.

The downside is that the mean utilisation is only 50%.
Indian city deploys AI-linked surveillance system
Search is instantaneous on my gnome evolution MTA.
Just the other day they were full kum ba yah over a holiday-time-released feature that's likely going to greatly increase the likelihood of building race conditions and deadlocks.

https://news.ycombinator.com/item?id=38721039
wow, TIL (thank you)
... with their mathematical proof.

I wonder if it does include the minimal polynomial proof required for floating point computations of trancendental functions.
Concur. And,

I think a lot of it is simply "other people do it, so I have subconsciously justified it"

Similar to how easy it is for our society to eat meat from factory farming.
That is why I have said that if updating the pre-shared authentication keys through separate communication channels is impractical, they can be updated through hybrid public-key based key exchange methods.

If a hybrid key exchange method is used e.g. only after one thousand or even after one hundred of connections made with pre-shared keys, then the hybrid method can be very slow without significant impact.

This is the same like reusing in TLS 1.3 a previously computed shared secret for a new connection, just using this for a large enough number of successive connections so that the slowness of the constrained device does not matter.
Governments don't need to be profitable.
To allow different circles of friends to sit together.

At the weddings I've been at (usually 100-150 guests), there would be families and relatives of the groom and bride, then their school friends, church friends, university friends, etc. - anything up to a dozen different groups of people who know each other but not the other guests. So a seating plan allows these friends to enjoy the party together. It doesn't prohibit them from getting to know the other guests, but offers a bit of a safe space with people the hosts know they will get along with.

(Additionally, in many cases, these groups of friends may not have seen each other for several years, e.g. since their school days, and appreciate the opportunity to catch up.)
Tbh, i just tried dillo again (it’s in the fedora repositories) but was saddened to find out it doesn’t support frames.

I was hoping it could be useful for having a light tool to read the single unix specification. There is a frame-less version, but frames are very handy for navigating those docs.
Another honest question. Given the availability of way better options like zmq, nng, etc, why do people still reach for raw udp/tcp?

Maybe read this as "I recommend ..."
The guidelines you link to are produced by the Active Travel Academy, a body with an explicit goal of reducing car use. The Orwellian tactic of first controlling the language has been well learned.
> That's inevitable in my opinion, because this modular interface has been used for a very long time.

I wonder how widely it's actually used and if making this an exposed modular interface was worth it.
It's almost as if you let the whole point fly over your head, and just hanged on the first thing you read on the link that could serve as a hail Mary attempt to build a semblance of an argument.

Yes, it's a "is a theorized phenomenon", it's not a "law of practical software development nature". The whole point is the statistical relevance of it on accessing such a risk - not it being some kind of absolute law.

It's the second time in this argument thread that you point to the lack of absolute guarantees (as if anybody said that long standing projects don't fail at all, or as if anybody said that the Lindy Effect is some absolute law), failing to see that they don't mean that long-term vs short-term project survivorship rate is the same.

You know that outcomes can have probabilities attached to them too, not just absolute guarantees, and that it's the former that are the most common tool for accessing risks, right?

>you might actually realize that the main thing that matters for such an assessment is an actual assessment

You might not actually realize that in practice any such an actual assessment will be based on risk factors, statistical observations, and handy heuristics for longevity such as the Lindy Effect.

Who would have thought, huh?
When google will be regulated? Namely, all its services must provided to noscript/basic (x)html browsers.
> “accident" also implies that no-one is responsible for it

I don’t personally get that implication from the word.

Whether I drop and break my coffee mug or rear-end someone at a traffic light, it’s an accident and I’m responsible for it.
I wonder if these actions will have the opposite effect. China will only more invest into producing their own. And I think we should not underestimate them. Could be good for competition though.
This is funny to me, because Go is often touted as a language that has "everything you need" in the stdlib. Of course, I'm coming from the nodejs world, where before you can start working you first need to evaluate and choose: typescript or not typescript and if yes what build tool chain, which test runner, which assertion lib, which mocking lib, etc etc. Not really that long ago when you had to choose which async lib (now you just need to choose which async color).

Thankfully a lot of that stuff is in nodejs now, and there's a commitment to maintain parity with Web APIs which also helps, but there's still a lot of half-done work and path-dependencies on outside libs.
But you still need to pay attention to use overflow checking versions of functions when doing arithmetics, because in release mode regular integers are not overflow-checked at runtime, unless you explicitly enable -C overflow-checks=true—whichin my opinion would be a good default for many non-performance-critical applications.

Arguably it's the "pay attention" part that causes the bug in the first place, so I don't think the performance-oriented default was a good pick.

The issue is mitigated a bit by the remaining runtime array bounds checks, but I must wonder if those checks could be removed by the optimizer when it believes e.g. a variable can never be below a certain value.
Emirates is the carrier for the A380 with the bulk of the orders going there. They also have begged for more seats given that the 380 was prebuilt for a stretch. But even emirates has never been close to the full seat count on a baseline A380, and no other airline has found the A380 profitable to the point to consider significant follow on orders. The USA accounted for half of the world wide lift when the A380 program was going and none of the major carriers picked it up.there was little demand for a new build freighter build, so that program did and the 787 Balkanized the pacific the same way as the 757 and 767 fragmented Atlantic traffic which meant even the Japanese carriers didn’t really bite on the A380.

At the end of the day the A380 was airbus trying to out-America (bigger, faster) Boeing, while Boeing stole Airbus’s big twin strategy with the 777.
yeah they missed the tone a bit there, tripped over it too
OT Do you have examples of self published authors that you feel really stood out.
SEEKING WORK | Kalispell MT | Remote

I am a senior software engineer, ex CTO, ex start up, etc. I do contract work full time and am looking for _one_ additional client.

I can help you with:

1. Building an MVP.

2. DevOps.

3. Scaling / creating a team / building out your team.

4. Solving hard technical problems.

If that sounds interesting, lets chat.

Alternatively if you run a small business or a non-profit, and just need some technical help, drop me a line, I'm interested.
Just check the spec itself. It pretty much describes the expected commandline syntax and behavior for commands the coreutils provide[0].

GNU coreutils is on its own a superset of a part of the POSIX spec (they started as rewrites of several Unix utilities), which mostly means that they added a bunch of extra flags and options. The other half of this is GNU bash which includes the non-command parts of POSIX such as shell syntax.

POSIX itself meanwhile is basically a reverse spec (very much like how the C standard isn't really a standard, it's just a collective set of rules all notable C compilers follow); it was made to unify all the various Unix offshoots that were being developed and define a common set of commandline utilities and rules that they all shared. (Nowadays, that's mostly the BSDs, Linux and MacOS. Windows is the only notable OS that doesn't really do anything with POSIX besides a few aliases.)

[0]: See for example the POSIX reference for cp and you'll see it's pretty similar to the GNU cp manpage - https://pubs.opengroup.org/onlinepubs/9699919799/utilities/c...
On which side of the channel are you? I watch from time to time the debates in the House of Commons, it seems much more sane to me than what's going on in our Assemblée Nationale. Their whole democratic system seems much more sane to me, despite the silly wigs, dresses and titles.

We're also not that bad in the race to the bottom on topics like surveillance and immigration...
Binary memory protection measures and why it is important
> The problem is that items that are inserted at the head of the queue during a moment when the Hand is in a low position (close to the head, toward the left) are closer to being doomed than items added when the Hand is in the rightmost position.

That could possibly reveal interesting security-related properties, i.e. maybe future vulnerabilities.
OP should just donate $5 to his favorite writers.
This already happened in UK.
I always feel more controlled in Britain than Germany or Switzerland, with the amount of "You should do this, You should not do that" messages all over the place, and thanks to CCTV, in the places I regularly visit I seldom see any car badly parked.
> Chinese foreign ministry spokesman Wang Wenbin on Tuesday urged the Netherlands "to be impartial, respect market principles and the law, take practical actions to protect the common interests of both countries and their companies and maintain the stability of international supply chains".

This amuses me greatly. I had no idea China is explicitly pro-market capitalism.
Container vulnerabilities are rarely related to memory bugs. Most vulnerabilities in container deployments are due to logical bugs, misconfiguration, etc. C-level memory stuff is absolutely NOT the reason why virtualization is safer, and not something Rust would greatly
improve. On the opposite end of the spectrum, you have hardware vulnerabilities that Rust also wouldn't help you with.

Rust is a good language and I like using it, but there's a lot of magical thinking around the word "safe". Rust's definition of what "safe" means is fairly narrow, and while the things it fixes are big wins, the majority of CVEs I've seen in my career are not things that Rust would have prevented.
Respectfully, do you know what a container actually is? (I’m guessing you think it’s docker, which is a common misconception)

The kernel itself does very little to prevent containers from interacting with the host (yes, via syscalls) in a way that affects other containers or the host itself. Containers are not insecure/composed with VMs to protect against memory safety issues so much as to implement sandboxing preventing these syscalls from doing bad shit.
windows 7 and 8 support are less than linux or macos steam users, only a few millions. Not worth it.

The real culprit is msft windows planned obsolescence.
The "original comment" basically made the Lindy effect argument, stopping short of naming it explicitly:

"The issue with all these efforts is whether they'll be sustained and maintained long term, or merely until the 1-2 maintainers lose interest. GNU coreutils on the other hand have been going for decades".

So there's that.

Many useful tools are "just theories", Occam's razor included.
I love the simplicity, but wiping the cache is a no-go for most serious apps.
For the past eight years I’ve been telling myself that I was going to end my life if things didn’t improve by this year, and they only ever get worse and worse, so 2024 is my final one on earth. Currently in the process of wrapping up all my business and getting rid of all my stuff so there’s nothing left behind for anyone to deal with. Really not going to miss living or living the life I’ve lived. Eight billion other people on the planet who will get on fine without me.
> embraced by the community

> Android

Yes Android is definitely representative of the community...
Do you think I could offer English->German translation services to indie authors as a reasonable side income?

Do you know a good place to get to know them or start out building some connections?

I have been doing it in the past (mostly for ads and other marketing content) but it paid very little (was working freelance for an agency) but I enjoyed it a lot.
Yeah, how naive we were building operating systems without linear and dependent types. Savages.
Can you expound in this some? I am not fully grasping your point. Are you saying "building safe by default" is a bad thing or assuming "safe forever" is a bad thing. Or are you saying something entirely different?
As others have mentioned, this is very culturally dependent. And culture isn't necessarily country or region. Different types of people like different things. This particular app is designed for those times when you need more assignment, for whatever reason.

Hope that makes sense!
It depends on the application.
Hasn't Kata containers solved this probl: https://github.com/kata-containers/kata-containers ?
This thread is people who ship BS products, that the rest of the population is then stuck with using, and which hold the practice decades back (not to mention being bad for the environment).
Location: Kolkata, India

Remote:Yes, I haven been working on a remote or freelance basis for the past 6 years

Willing to relocate: As per salary

Technologies: Generalist, any topic

Resume/CV: https://vszm-my.sharepoint.com/:b:/g/personal/act1209_vszm_o...
Email:vivekchakraverty@gmail.com

Hello,

I have 9 years of experience writing for digital marketing, content marketing agencies, and individual businesses. I stand out in the ability to write quality content irrespective of form and topic (with reasonable exceptions). Creativity is my major forte!

Thanks
Seems like lot in USA healthcare could be solved if it was mandated that everyone must get the lowest net price, plus at most some unreasonable margin like 100%.
K7 also works in Portuguese, and possibly other languages.
The site is borderline unusable with ads.
I am not the one who corrected the comment. I am only someone who said that this correction had a value and I am not telling you how you have to speak english.
Well if the uutils people don't mind and they're writing the code, what's the problem with their choice of license?
And yet plenty of people repost the same unfunny xkcds over and over to an endlessly delighted audience.
I can't think of any other country (bar the US) that has engaged in a similar war on its own population as Britain did in the past decade. That said I'm scared of what's to come in the rest of Europe in the coming decade with right-wing politics and the field day our own goose-stepping chuckle-ducks will have once Trump gets re-elected across the pond.

But as for the here and now (today), I find it hard to think of a EU country that went from so much to so little in such a short time, and 100% due to its own doing. Not even Italy I think.
The fact something is not good does not mean it's not competition.

I may think TikTok is vastly inferior to the National Geographic TV, but they're still competing for eyeballs and ad sales.
This can only happen if they are truly making the project only themselves and accepting external contributions only via a CLA—and I expect the mere existence of CLA to reduce the amount of external contributions in itself.
What prevents the LLM from becoming an adversarial model to defeat the LLM that the company uses? Then you're turning the interview process into an arms race of "Who has access to the best adversarial models?" and thereby make it completely redundant since at this point you're paying to get a job.