skysight-inc/HackerNews huggingface dataset:
There are rooms but without directions, because they can be arbitrarily connected to each other by doors! Fun fact, rooms USED to connect only directionally because at the time I think they were implemented as linked lists. But now, it's arbitrary and you can do hidden passageways and shortcuts and cool little things like that.
I really hate that too. You are in a intersection and the voice says "Drive north for x miles/km". What is wrong with "turn right and drive for x miles/km"? I normally have zero clue in what direction north is especially when I am in a location i have never been before. I drive a bike and have the phone in my pocket and can therefore not see any arrow that the app might display. I only have the audio to navigate from.
Despite sounding like it's zero-sum, fighting for the consumer is actually the only way to lift everybody up. Fighting for workers specifically is playing favorites. Fighting for the ownership class is also playing favorites. Focusing on consumers makes everybody a winner over time.
India's central bank discusses penalties,revoking licence on Paytm Payments Bank
Falle di Sicurezza RunC: Vulnerabilità Rivelate e Risolte

Data: 31 gennaio 2024

Sicurezza del Software / Linux / Sicurezza dei Container

Diverse vulnerabilità di sicurezza sono state scoperte nel noto tool a linea di comando RunC, che gestisce la creazione e l'esecuzione di container su sistemi Linux. Queste vulnerabilità, identificate come CVE-2024-21626, CVE-2024-23651, CVE-2024-23652 e CVE-2024-23653, sono state collettivamente denominate "Leaky Vessels" da Snyk, una società di sicurezza informatica.

Riepilogo delle Vulnerabilità:

CVE-2024-21626 (Punteggio CVSS: 8,6) - RunC process.cwd e container breakout con fd leaked.
CVE-2024-23651 (Punteggio CVSS: 8,7) - Condizione di gara durante la compilazione che consente il breakout del container.
CVE-2024-23652 (Punteggio CVSS: 10,0) - Buildkit Build-time Container Teardown Arbitrary Delete.
CVE-2024-23653 (Punteggio CVSS: 9,8) - Verifica dei privilegi GRPC SecurityMode: breakout del container durante la compilazione.

La vulnerabilità più critica è CVE-2024-21626, che potrebbe portare a un escape del container centrato sul comando WORKDIR. Snyk ha sottolineato che l'attacco potrebbe avvenire eseguendo un'immagine dannosa o costruendo un'immagine del container utilizzando un Dockerfile malizioso o un'immagine upstream (utilizzando FROM).

Nonostante non ci siano prove di sfruttamento delle vulnerabilità nel mondo reale, RunC ha rilasciato la versione 1.1.12, che risolve questi problemi dopo una segnalazione responsabile nel novembre 2023.

Impatto e Azioni Consigliate:

Le possibili conseguenze di queste vulnerabilità includono l'accesso non autorizzato al filesystem dell'host, il compromesso dell'integrità della cache di compilazione e, nel caso di CVE-2024-21626, uno scenario che potrebbe portare a un escape completo del container.

Snyk raccomanda vivamente agli utenti di verificare gli aggiornamenti da parte dei fornitori di ambienti di runtime per container, come Docker, fornitori di Kubernetes, servizi container cloud e comunità open source. Docker ha specificato che le vulnerabilità possono essere sfruttate solo se un utente interagisce attivamente con contenuti dannosi durante il processo di compilazione o esegue un container da un'immagine fraudolenta.

AWS e Google Cloud hanno rilasciato avvisi simili, invitando i clienti a prendere le dovute misure.

Sebbene non siano stati segnalati sfruttamenti noti delle vulnerabilità, la tempestiva applicazione degli aggiornamenti è fondamentale per proteggere i sistemi da potenziali minacce. RunC aveva già risolto un'altra vulnerabilità di gravità elevata nel febbraio 2019 (CVE-2019-5736).

Le organizzazioni devono rimanere vigili nella gestione delle autorizzazioni e dei privilegi in ambienti cloud e container per evitare rischi di attacco derivanti da configurazioni errate e opportunità di escalation di privilegi per gli attaccanti.
Related and lots of discussion from a few days ago:

Amazon and iRobot call off their planned acquisition

https://news.ycombinator.com/item?id=39176297
I wrote a program to explore. Here's a "first discovery":

'Jupiter' + 'Muddy Date' = 'Muddy Planet'
'Foghorn' + 'Planet' = 'Jupiter'
'Fog' + 'Ark' = 'Foghorn'
'Smoke' + 'Water' = 'Fog'
'Fire' + 'Wind' = 'Smoke'
'Noah' + 'Dirt' = 'Ark'
'Flood' + 'Fish' = 'Noah'
'Tsunami' + 'Rain' = 'Flood'
'Wave' + 'Water' = 'Tsunami'
'Water' + 'Wind' = 'Wave'
'Water' + 'Storm' = 'Rain'
'Wave' + 'Wind' = 'Storm'
'Explosion' + 'Water' = 'Fish'
'Destruction' + 'Fire' = 'Explosion'
'Tsunami' + 'Tornado' = 'Destruction'
'Wind' + 'Hurricane' = 'Tornado'
'Wind' + 'Tsunami' = 'Hurricane'
'Sweat' + 'Dust' = 'Dirt'
'Sauna' + 'Train' = 'Sweat'
'Palm Tree' + 'Steam' = 'Sauna'
'Plant' + 'Hurricane' = 'Palm Tree'
'Earth' + 'Water' = 'Plant'
'Fire' + 'Water' = 'Steam'
'Steam' + 'Disaster' = 'Train'
'Tsunami' + 'Hurricane' = 'Disaster'
'Earth' + 'Wind' = 'Dust'
'Earth' + 'Dust' = 'Planet'
'Muddy Sushi' + 'Date' = 'Muddy Date'
'Sushi' + 'Mud' = 'Muddy Sushi'
'Eruption' + 'Fish' = 'Sushi'
'Volcano' + 'Tornado' = 'Eruption'
'Smoke' + 'Tornado' = 'Volcano'
'Earth' + 'Steam' = 'Mud'
'Oasis' + 'Coconut Milk' = 'Date'
'Coconut Water' + 'Dune' = 'Oasis'
'Flood' + 'Coconut Milk' = 'Coconut Water'
'Tsunami' + 'Coconut' = 'Coconut Milk'
'Palm Tree' + 'Earth' = 'Coconut'
'Sand' + 'Wind' = 'Dune'
'Earth' + 'Dust Storm' = 'Sand'
'Wind' + 'Mudslide' = 'Dust Storm'
'Hurricane' + 'Mud' = 'Mudslide'
How’d the BeOS scheduler work? Every desktop OS should just copy that. It felt like magic. Only thing I’ve seen since that even comes close is iOS, and it cheats by killing programs left and right (and has lost a little ground on that front over the years, anyway).

QNX Photon wasn’t far off but was never a realistic option for an everyday desktop (even less so than BeOS, which was at least intended as such).

Yeah, just copy BeOS.
> I ended up having to go through a local regulator to bludgeon them into submission

I would love to hear more in details on this. I feel like I am going to have to do something like this but not sure where to begin the research.
Is the goal of Oasis to reduce the complexity of a system to make it easier to maintain?
I work in an ED and I see doctors and nurses looking things up on Google and yt daily. Medications and doses are the most common thing I see. It’s not much different than how developers or mechanics diagnose a problem.

One instance I observed all the ED providers huddled around a screen watching a yt video for a pediatric patient, we are not a children’s hospital. They all watched then discussed the video before going back out to the pt.

I’m sure there should be better documentation available but so much of their jobs is judgement based already.

Medical specific trained LLMs are likely to be commonplace in near future for providers based on feedback I’ve gathered.
when does this movie come out?
EU chip goal 'unrealistic' says ASML CEO
I think a lot more laypeople know the words "100 megabit" and "gigabit speed" than know anything about what 5G mobile service means. So let's leave mobile service aside. That was never my complaint.

I think some laypeople see the marketing materials companies put out comparing one speed and price tier to another. In other words, a fair number of people who have actively price-shopped internet speed ("should I buy the 'fast' tier that says 100 somethings, or the 'boost' tier that's 200, twice as much, for 50% more money?") would think 10G means 10 times as much as 1G which, it's not a huge leap to think that a fair number of people are aware means 1000 of the Ms.
Yes, the cool thing here is just to use higher order to provides the user non-determinism seaminglessly within Python while in prolog this is a built in feature.
Doped thin film tungsten ditelluride (WTe2) at a few thousandths of a degree above absolute zero has an unexpected blip in its conductivity. That's the whole thing.
On the High Seas, a Pillar of Global Trade Is Under Attack
What implementation allows you to move diagonally? What if you slow down or move diagonally to another top menu instead of a submenu, do you know have to wait a bit before selection changes?

This is tricky dynamic guesswork, and isn't great UI even with the visual height increases guiding you, in pie menus you see beforehand all the borders, so it's more explicit and predictable
easy to start. Wish vladimir putin dead.
This https://en.wikipedia.org/wiki/How_to_Read_a_Book? Looks like something that might help me! Thanks!
Super cool. I really want to try out Kotlin multiplatform and see how good the app feels. Flutter so far feels "off". So excited to try this out.
I’d like to believe the common line that chat GPT is “just a tool” and that it can actually be used to learn/comply just as much as a university degree can be obtained by mere compliance or demonstration of learning (or merely giving the appearance of such).

My experience with Chat GPT ranges from “it’s really good for rapidly getting a bearing with a certain topic” to “it’s a woeful substitute for independently developing a nuanced understanding of a given topic.” It tends to do an OK with programming and a very poor job with critical theory.
Sphinx supports ReStructuredText and Markdown.

MyST-Markdown supports MathJaX and Sphinx roles and directives. https://myst-parser.readthedocs.io/en/latest/

jupyter-book supports ReStructuredText, Jupyter Notebooks, and MyST-Markdown documents:

You can build Sphinx and Jupyter-Book projects with the ReadTheDocs container, which already has LaTeX installed: https://github.com/executablebooks/jupyter-book/issues/991

myst-templates/plain_latex_book:
https://github.com/myst-templates/plain_latex_book/blob/main...

GitHub supports AsciiDoc in repos and maybe also wikis?

Is there a way to execute code in code blocks in AsciiDoc, and include the output?

latex2sympy requires ANTLR.
The thing is, people don't have the ability to withhold consent. I don't think people would need to be fully informed to realize that withholding consent is better than giving it, if that was actually a viable choice to make.

I mostly trust Mozilla but I still turn off all of their data collection in Firefox. This wasn't always my default but it is now my default in any place where I am given the choice.

It really is difficult to understand all of the implications and it's taken me years of experience to realize that I should just default to presuming that data collection is going to be bad for me in the long run. When there is a complex and nuanced situation involving a binary choice then all you really need to know is which of the two choices is generally more likely to be in your best interest, then always choose that one. For data collection the safe bet is always "no"
I would argue that it is an already classical idea in the 70s. Non determinism is nothing new.

The cool stuff here is the simplicity of the interface to it and its integration thanks to high order functional constructs (decorator).
Great to hear this might be useful to you!
Battery fault detection needs to be implemented entirely within the battery pack in order to be worthwhile. USB is more than sufficient for communicating information from a battery pack to a host system.

There's no need to speculate about complicated technology based on ancient patents when there's a simple and far more plausible explanation available: Obviously what this connector provides that Type C lacks is a secure latching mechanism, which is critical because there's no battery in the headset itself.
HN rules say: “… please use the original title, unless it is misleading or linkbait; don't editorialize.”

Therefore, the title should be “gnuplot for numpy.”
If the job at your nuclear power plant were so simple you only needed the employee to follow operational procedures, then you'd be better off scripting it instead, or training a monkey.

Consider e.g. being a pilot, or a surgeon - two other occupations known for their extensive use of operational procedures today. People in those jobs are not being hired for their ability to stick to a checklist, but rather for their ability to understand reasons behind it, and function without it. I.e. the procedures are an important operational aid, not the driver.

Contrast with stereotypical bureaucrats who only follow procedures and get confused if asked something not covered by them.

Now, IMHO, the problem here is that, if you're hiring someone who relies on an LLM to function, you're effectively employing that LLM, with its limitations and patterns of behavior. As an employer, you're entitled to at least being made aware of that, as it's you who bears responsibility and liability for fuckups of your hires.
Even the caveman names crack me up
Moment Mark Zuckerberg apologizes to families of children harmed online [video]
nobody is saying free speech doesn't have consequences. I'm saying taking money and reputation has consequences too.
30 years ago a guy that worked as an international translator said to me, if people only knew how their political and business leaders act when they don't think anyone important is watching. They are all terrible people. Another friend deals with the Hollywood and Television elites; most of them are human trash. They can act nice when it suits them. And they'll happily be ruthless, vindictive and petty otherwise.

The nice thing now is ordinary people to get to see this.
> a small subset of workers needs to be subsidized indefinitely.

In the context of 1800s industrial revolution, this means employing child labour, hugely unsafe machines that cause amputations and death, draconian death penalties against the Luddites, long working hours, and things like that. All for a small pitiful wage.

THAT is what this is about: outright exploitation that would be spectacularly illegal in well-organized countries today, and is called things like "de-facto slavery" in places where it still happens. If not having these things is "subsidizing" people then one of us doesn't know what that word means.
It was a joke: technology has collapsed the attention span, therefore Luddites would have long attention spans; only someone with a long attention span would be able to read a long-form article like this one.
[Men in pith helmets and khaki shorts trekking hip deep through water with their gear held over their heads.]

Piranha: Just nibble at first. … But when you hear them yell “Piranha!” - go for it.
Yea thats a good interpretation. Ok I see what you are saying. I dont have much experience with what authority these institutions have.
No, it's not what they want. If they wanted you to use a LLM then they would tell you that up front. It's also too new of a technology to be required anywhere. Hardly anyone I know is even trying LLMs to begin with. Then, what do you do if the interviewee gets garbage code out of the LLM and misses an error? An error that might be forgiven in a normal interview cannot be excused when you didn't even have to write the code. Technically, if the LLM did the coding for you, you might pass without even being able to read code. This is all like the same reason you can't use a laptop on an algebra exam... The tool might do 100% of the work and leave you having shown nothing of your own ability.
You can use @workspace to tell him to ingest more of your workspace as required.
I mean crashing it into hard objects, pebbles against the frame are ok.
Husbandu generators are kinda lacking...
Tech CEO's child safety hearing highlights: "You have blood on your hands." [video]
> When I met Vladimir Putin in 2017, I did not try to arrange the meeting; rather, someone else suggested it, and I pretty much said "ok sure".

> Now, five years later, I finally realized that (i) I had been complicit in legitimizing a genocidal dictator, and (ii) within the crypto space too, I no longer had the luxury of sitting back and letting mystical "other people" run the show.

Congrats on congratulating yourself on being the Benevolent dictator (in contrast with presumably genocidal dictator) and inventor of your own decentralised financial institution that enabled everything imaginable around money schemes, not matter how average and worst it is compared to regulated traditional banking. How much is you worth by the way ?
The source[0] of this low quality article (referenced at the very end under "Science Advances") has been posted a few times [1][2][3][4] never more than a few points, all a year ago.

[0]: https://www.science.org/doi/10.1126/sciadv.add1602?adobe_mc=...
[1]: https://news.ycombinator.com/item?id=34292891
[2]: https://news.ycombinator.com/item?id=34300071
[3]: https://news.ycombinator.com/item?id=34315784
[4]: https://news.ycombinator.com/item?id=34404936
> Llava is a surprisingly good model for its size. However, what I found is that it often hallucinates "2 people in the background" for many images.

There's a creepypasta or an SCP entry in there. You do not recognize the people in the background.
> MBA run companies are full of waste and inefficiency.

They are, and they don't have longevity because of it. A company listed on the S&P 500 in the 1950s had an average lifespan of 61 years. By 2016, that had fallen to just 18 years. You can hide inefficiencies for a while, but the piper needs to be paid eventually. Productivity matters.

The companies may not literally switch to a particular mode of work, but the market will eventually cull any company that is falling behind in productivity. The net result is the same.
“Now That Should Clear Up A Few Things Around Here” Just has to be the most applicable to software development, assuming that’s what most folks around here are into.
Man i really hate how people absolve themselves of responsibility like this. "It's not my fault I spent all weekend watching Netflix, it's their UI!"

No, it isn't. I love when they release full seasons at a time. I can watch them at whatever pace I please. If some degenerate can't control themselves that's their problem.

"But muh children" parent them. "But irresponsible parents" Netflix is probably the best case scenario there.
pandas.DataFrame().to_latex() [1] and tabulate [2] support latex table output.

[1] https://pandas.pydata.org/docs/reference/api/pandas.DataFram...

[2] https://github.com/astanin/python-tabulate/blob/master/tabul...
Mercurial's evolve is more about tracking history rewrites and their context. If I submit a series of commits, and over the review you have me amend one mid-series, then rebase few identically on top of that, then add some new changes, and split some existing ones, mercurial will still know how every single commit in the resulting series relates to things from the original PR. As such, answering questions like "show me how commit 3 was updated several times over multiple series submissions" is trivial.
Is that mismanagement a scam, though? I mean, if you follow Bloomberg's Matt Levine, everything is securities fraud.

Wells Fargo opening charge accounts recently, and openly proclaiming a strategy of asset theft during the real estate bubble of 2001-8, all the liar loans and the ratings agency frauds, those were scams. Not rug pulls.

Your overall point is about scam, I think, and not the "put your money in as a retail investor and I will just freaking take it" case that is a rug pull. As a percentage of banking, I think the scam activity is low compared to crypto stuff but it really just takes data.
The market socialist idea is under full attack and in full retreat ever since the thing behind the wall collapsed. It was never more than a temporary pocket of peace, negotiated for by societys that remembered were the journey always ends.
No, it's not.

Compulsory voting drives engagement. Representative democracy saves the public from themselves.

The vast majority of people vote for who they trust.
Some CAs do it, for free even. ZeroSSL does iirc.
>As an interviewer, if a candidate can use chatGPT to give a better answer than other candidates, I'm not gonna mark them down for use of chatGPT.

I think that makes you an incompetent interviewer, unless your questions are too hard for ChatGPT. In any case, solving the question without ChatGPT is more impressive than using it. Just like most other tools, like search engines or IDEs.
That's called contracting out and it's fine in this way - and so would be use of GPT, in that way and not to beat the interview.
There is some truth to it.

I don’t see it as a disadvantage, since Google markets services on both devices you mentioned. Hardly anyone will abandon its iPhone in favor of a Pixel just for a Google service.

So I think it’s ok what Google did marketing wise.
ditch the dollar, buy bitcoin (balaji srinivasan)
Agreed it’s complete PR nonsense
> Bob will still have to hit our login service to "activate" the token.

I think thats what I was saying - on first verify your centralized system will know the contents of the token and can do appropriate auditing.

In practice I find that keeping processing simple is a challenge. It doesn't naturally say as simple as one would like, with orthagonal caveats that can be processed independently and independent of centralized knowledge.

For example, you might expect the user to indicate the system they are calling in a caveat, an audience value.

However, if you either make this true a restriction on further use it will prevent any sort of delegation, which may include delegation to internal systems that the user didn't know about.

You don't want to outright ignore it either.

So you have some sort of policy interpretation of that restriction, such as 'this audience means this set of services can use this macaroon' or 'we will audit internal use based on this audience but take no action', or even crazier you color caveats before and after this point as being ones set by the user vs ones set by the service.

This sounds a bit contrived, but it does loop back into one of the core usages I've seen for macaroons - gaining proof of possession or other sender verification rather than using bearer-style tokens.
Guarding against people doing shit that goes against common sense -- as well as Apple's "very explicit" warnings -- while using a third party battery that maybe might somehow malfunction, is an annoying reason for them to make a decision that costs me extra money.
The Role of Gen-AI in SaaS Growth
There's "implementations" that allows them to satisfy the requirement and then there are usable implementations. User experience is not great in some cases.
You can easily print far, far smaller batches. That’s not the issue.
Depends on the scale of the job. Sometimes you wake up and your employer is already paying for both google drive as well as one drive and drop box at the same time and IT is replacing the room av for the third time this year.
It is the same notion exactly actually.

The code isn't magically solving NP vs P but it does simulate non deterministic run through a potentially exponential exploration.
Yes, I know. My comment is in criticism of their advertising practices. They're plastering '10G' all over the ad copy on sales channels that aren't for 10gbps service. They know it's misleading, and it was 100% intentional.