skysight-inc/HackerNews huggingface dataset:
I don't think this is how these rulings worked.

Most importantly, the only reason the courts decided Google wasn't in violation was that Google's purpose, providing a compatible re-implementation of Java for Android, constituted fair use of the interface definition, so Google didn't need a license to use the OpenJDK headers. If Google had copied the OpenJDK headers in order to implement an entirely different system that used the OpenJDK code in a different way, the case would have gone in a fundamentally different direction.

Secondly, the legal reasoning for the GPL goes like this: by default, you don't have any right to re-distribute anyone's code (unless some fair use exception applies). The copyright holder can give you certain limited rights through a license - in our case, the GPL. The GPL can essentially impose any conditions, and if you think they are too onerous, then you just don't redistribute the code, period. If the GPL says "you can't re-distribute my code if you link your program with it unless you also distribute the sources of your program, including all precise compilation and installation instructions, and give your users the same rights and obligations", then there is nothing to dispute. The GPL could have also said "you can't redistribute my code unless you throw a penny in a prominent wishing well and light a candle in 3 different churches", and that would have been binding as well, if you wanted to re-distribute their code.

The subtleties come when you don't actually want to re-distribute GPL code, but would like to interface with it. Say you want to distribute a program that only works if dynamically linked with GCC. If you publish a bundle on your site with your proprietary program + gcc, you are clearly under the incidence of the GPL, since you are distributing GCC and are dynamically linking with it. However, what if you don't distribute GCC at all, and just tell your users "download my program, and then install GCC under /opt/propritary/utils/gcc"? In this case, is your program bound by the GPL or not?

This is a much more complex question, and it is here where you get in the nitty-gritty of what constitutes a derivative work in software. If your program is considered a derivative work of GCC, then you are distributing a derivative of GCC and so you need to respect the terms of the GPL. However, if your program is not a derivative of GCC, then you can entirely ignore the GPL, since you are not stepping on anyone's copyright and so don't need a license. I believe this question is entirely unsettled, and there are plausible arguments (to a layman like myself, at least) both for and against it.
Worth pointing out that when this complaint was filed Spotify was publicly complaining about the lack of equal access to the HomePod and Apple Watch.[0]

Apple addressed this with API’s at WWDC the following year.[1] Yet here we are, almost 4 years later and Spotify have yet to implement support whereas competing services have.[2]

[0] https://newsroom.spotify.com/2019-03-13/consumers-and-innova...

[1] https://developer.apple.com/videos/play/wwdc2020/10061/

[2] https://www.macrumors.com/2021/05/06/deezer-announces-voice-...
No, my argument is what actually did happen, in this reality. There’s no need for any experiment to be run to state what events led to what is today, and what would happen in a another reality like the one you described in your first post is irrelevant for the subject at hand.

Apple provided Spotify the platform they needed to prove their business model, it really is as simple as that.

All the other infinite possibilities are moot.
How npm install scripts can be weaponized: a real-world example
Teen works, sleeps and eats on trains everyday without breaking a single rule
Strange: I submitted this more than 24 hours ago and it still says so on my list of submissions here: https://news.ycombinator.com/submitted?id=p4bl0

But it's the same submission as this one which says it was submitted by me 4 hours ago.

I've been contacted a few times by HN moderation and was asked to re-submit some interesting link that didn't get traction on the first try, but it's the first time that I see a link be re-submitted on my behalf. Is that common on HN now?

Anyway, concerning Velato, I stumbled on it yesterday. I find this kind of esoteric languages (like Piet [1]) quite fun, and thought that others here may enjoy it!

[1] https://www.dangermouse.net/esoteric/piet.html
Can't do it myself, but I've heard that people listen to typical traditional "video game music" for this purpose. Fast, upbeat, and never something you need to focus on, but rather, it just helps you keep up the concentration.

...if you're the type of person who can listen to music while working, that is.
At the moment we're sacrificing the rainforest for profit. And to feed people in Europe, perhaps. A habitable Sahara sounds like a better tradeoff than that. Although ideally I'd prefer to keep the rainforest, of course.
So their data backed citations are fake news? Sure. The truth can be unpleasant.
Is that not provided elsewhere by the report? I'm not against precision of language, and I don't think parent's example was the best, but over-specificity is often a bastion of people who are not sure what they are saying.

"This is not necessarily a detail of relevance, and it is duplicated in the data, but I noticed it and am remarking on it to show that I did not fail to notice this, even if it does not seem to have material importance to this experiment, whose audience should be able to interpret the data for themselves and understand this. However, I have written this to the limit of length and parsable complexity, yet it cannot be said whether I have overstated or understated anything. I am the James Joyce of science, and I justify this part of my value through superficial prolixity."

I blame all those years of 1000-word and 5-paragraph essays.
In my case, relating is what makes me felt listened and understood. I feel that by "relating" many people mean "comparing" - and this one is annoying.

At the same time, I cannot stand "it must be hard" or similar platitudes, which can be given without any context; these would not even need ChatGPT but can be generated by a simple Python script.
Because mentioning it works. As somebody who uses many different languages professionally, I immediately assume projects written in Rust are more reliable, more robust, and more efficient. My own projects are higher quality when I can use Rust to implement them, despite having much more experience with most of my other languages.

As a user experimenting with tools, ones written in Rust have justified these prejudices. They simply tend to be better.

It's an effective advertisement. I'm a little confused why there's always someone who brings it up. It's not like programming language makes absolutely no difference. If it's written in C or C++ and it's relatively young, I'll expect it to be unstable and to have a clunky and unpleasant interface. If it's in Go, I'll expect much better in stability, but with a funky CLI. If it's Python, I know it uses argparse, so at least the CLI will be consistent. If it's Rust, I expect it to be fast, to have very few or no panics, to have no memory issues, to have zero null pointer problems, and to use clap for a very consistent, predictable, and good looking CLI.

The language has built a good reputation; I'm shocked that commenters on HN have somehow avoided picking up on that and are perpetually surprised that it has a real audience.
Currently there are aircraft able to fly that distance without stopovers. That wasn't the case in 70s, including Concorde. Modern version of Concorde that would have the necessary range for that flight would do Heathrow to Singapore in 5-6 h.
For anyone interested in an interactive tool for playing with the concepts noted, here’s something I put together a while back for demonstrating to colleagues: https://www.desmos.com/calculator/pma1jpcuv0.
The Soviet Union had chronic housing shortages. Multiple families would live squeezed together in one small apartment. The waiting list to get your own took years and years.
Can you image MS starts charging everyone (including everything done in the browser) because they are using Win32? Lol. The whole point of the OS is to provide API/ABIs and customers already paid for that.
> Why not include all the dollars required to get a working phone platform to billions of people on the planet?

yea they do it not as a public service but to make their own platform more attractive with apps to ppl who buy iphones.

This is not a service like aws purely benefit of app creators like spotify. Apple does it for their own benefit.
> Are they sweeping all the state/city mandates into the delivery charge?

Nope, not on my bill.
Honestly it sounds like you agree with me. My position isn't that open offices are great for everyone; it's that people who don't like open offices should look for work that doesn't require coming into an open office instead of taking a "woe is me" kind of attitude. If you work primarily remote, then you're someone who already took my advice
Keeping the "intention" of the changes in the system only works if you actually bother to record or annotate the intention while making the commit.

If your idea is to use heuristics to automatically infer intention during commit time and record it into the system, then obviously you can also do that in git after the fact by comparing two commits and running the same heuristic.

In most cases (except file move?), I doubt the intention of the changes are so easily/cleanly captured. You'll probably need to have some deep IDE integration (eg. so it knows you actually renamed all your variables using the refactor tool). I can't see that having widespread application at all.
I said that Microsoft’s customers were OEMs and that MS was found to be a monopoly because they forced OEMs to pay for Windows licenses for every computer shipped whether or not the computer was running Windows. This was part of the lawsuit.

The reply was that there were other computers sold in Europe by the non big brands that did not include Windows.

You could not in fact run the “same” Windows software if you were not running Windows
Ah, the hosts file. Let’s research which ways of name resolution use it and which don’t.
[A few hours later]
…
Since you talk about this subject, I actually had to remove two calendar malware on two different family iPhones (and it was pretty annoying to find where to remove that, even as a dev) so while it's true that there's less malware, it's not non-existent.

And my point still stands anyways, the line between some of those top appstore casino-apps and malware is very blurry.
So Apples overall market share in the EU is less than 40%…
They're looking for any and all publicly declared interactions between this person and their ISP that indicate their ISP had knowledge of them using public trackers, warned them against using public tracking torrents, and did nothing when they continued to use them.

ie. Evidenced of ISP knowledge and lack of follow through.
Obviously, but surrealists were surely influenced by Bosch.
Hi there,
Remember the hustle of being a student and looking for your first job?
In the current competitive job market, we want to enable students to get better at applying for jobs and earn confidence in their skills.
That's the vision of EazyLetter, a web app automating application processes and preparing students for their dream job.
How? We created AI-powered resume writing, cover letters, a virtual interview preparation assistant and a library with key resources in e-learning format.

Want to know more? Contact us at hello@eazyletter.com :)
It's good to see awareness being raised on this topic.

I've used HF to deliver malicious models to targets for bug bounty and red team exercises,[0] and a key point to convey is it isn't just scanning for malicious models that would help.

The reality is, making a malicious model isn't the goal - it's just the first step. The goal is to mess with your stuff. Since models are just a program, its reasonable to expect that pretty much no matter what places like HuggingFace do, there will be little malicious programs - or where that isn't possible, poisoned backdoors in safe formats running on their platform, probably forever.

You need to do more than have a malicious model running on Huggingface, you have to get it in front of peoples faces and get them to use it.

The things that make this attack feasible and concern me more than random models called out in articles like this include the way Huggingface manages trust and namespaces.

I won't list them all, but just as an example:

- Organization Confusion aka namespace squatting

Any user, from any email domain, can create an organization with any unique name they wish.
That user can then email anyone in that company and they will receive an email _from Huggingface_ inviting them. It's a very effective way to get malicious models in front of people, or to later backdoor one they upload.

I've got repos of companies with lots of engineers and ops folks from that business who are members of organizations they think are trusted, it works really well.

Secondly, really malicious people are probably going to do what was popular on NPM before mandatory 2fa, they're going to steal your account and swap something out of your model, it's far easier than poking about with a malicious model in an fake organization or running a social campaign for the same. HF as a startup is not ready for this kind of abuse IMO.

If you want more examples of the way HF makes these attacks easier, I wrote them here[1]*

Also, HF wrote a bit of a response to articles like the OP which I think is worth considering, it has good insight from their end:
https://x.com/osanseviero/status/1763331704146583806?s=20

[0]https://5stars217.github.io/2023-08-08-red-teaming-with-ml-m...
[1]https://5stars217.github.io/2024-03-04-what-enables-maliciou...
* I have shared this with HF.
A good game masters can teach you lots of good things
Exactly. It was a slam dunk case with any criteria. They cloned the product, bundled it free with other apps, and later as a standalone product, priced it at half of slack's pricing. Completely killed the market for slack.
Okay, that's a nice anecdote. Is your point that no one should be allowed to have the freedom to install whatever they want on their devices because your parent was incapable of dealing with the responsibility?

Do you also want to take away everyone's cars because of traffic deaths? That's far more serious than someone's parent installing malware on their shiny digital toys.

What about taking away kitchen knifes? Those things sure are dangerous!
GhostBSD 24.01.1 Now Available
Hi, I'm the creator of Velato. I will be reworking the website to include more examples later this year. In the mean time, the latest version of the compiler is on github: https://github.com/rottytooth/Velato

No one has yet written a quine although I would love to see one -- perhaps outputting its representation in lilypond format.
We don't have full Internet, but Massena, NY also has some amazingly cheap power rates and one of the highest reliability rates in the state if not the nation thanks to public power.

Less than 4 cents a kWh a month.

https://www.massenaelectric.com/residential

A good read: https://nysfocus.com/2023/06/21/public-power-utility-massena...
Let's try a quick litmus test: above, did you make any assertions that are non-factual?
As Matwood pointed out in a sibling comment, the real value of being on the App Store is the ecosystem of highly affluent consumers that Apple has cultivated.
> Motion blur makes sense for films. I have no idea why anyone wants it in a game.

TLDR; motion blur always makes sense atm. Not less so for games.

For games the difference it makes depends on the FPS and the distance an object moves within the FOV.

Estimates say humans can see max. 60FPS. Even if your game runs at 120FPS and something moves accross the entire FOV -- that is two discrete samples of that object at most. You will get strobing.

Only if you render the geometry with motion blur will this look natural.

The alternative is probably to have mutliple 10k FPS but that is wasteful.

If your biological limit is around 60FPS, it should be cheaper to generate motion-blurred frames at this rate (where more samples are used in areas with more motion blur) than rendering every pixel of a frame at muliple 10k FPS.
> I acknowledged that HTTPS module imports were one of the original selling points of Deno compared to Node/NPM

I am imagine most Deno users considered this a weird wart or foot gun, the rest of deno looks interesting.
I think it's two things. We develop our intuition for how many maladjusted people there are from our physical surroundings, but we're limited in how many we can meet and are unlikely to meet the extreme outliers; on the internet everyone is our neighbor. And then on top of that, they are overrepresented because they are much more likely to be removed from communities to arrive at new ones.
True without context, but not if you worked there at the time. It’s hard to describe just how much iOS did for Spotify at a crucial time of the company’s existence.
But sure, we will never know for sure, but certain outcomes have far higher likelihoods than others.
5 years is pretty sort. Looking at A220, which I think took closer to 10 years. Which I think is realistic timeline for new modern design, not just modernising old one. A350 and 777X also show similar timelines... That is from planning to deliveries. And these are the players with experience building to specific segment of market...

Throw in enough novel ideas and it might double...
Copilot's "Evil Twin," SupremacyAGI
Sounds like the kind of perfect anecdote that is made up to make some point. "accidentally mailing under each other's name" doesn't sound like a thing.

Incidentally, this kind of thing is easy to test, and indeed such studies have been done - I lent my name & image to such a study when I was a student, that was testing racial bias in resume applications.
> The problem is that fine tuning (and occasional restructuring) needs to be an ongoing process, and it has stopped.

This is exactly it. SO is ossifying. Plus a small number of power users have final say on things like e.g. duplicate status, with no way of revising their decision.

The usefulness of the site is slowly decreasing and it's a shame
>Now, I don't know if this exists but it would be nice if there was a kind of glass that let radiation pass only to one side and not the other way, a kind of "valve", this could solve the problem of water frozing from radiation in our solar heating.

This doesn't exist and can't even in principle because it would be a fundamental violation of thermodynamics. Basically, it would be a Maxwell's demon for radiation that would allow you to arbitrarily reduce entropy.
It's pretty clear what it means, based on the goals of the license: To allow the user to easily replace/modify the (L)GPL licensed (part) of a program.

For GPL, that means you can only include GPLed code if you make the whole program available for user to modify and redistribute.

For LGPL, you can include LGPLed code if you make just the LGPLed part of the app available for easy replacement. (so normally this means some form of dynamic linking, and very commonly used in practice with eg. glibc)

So if some company statically links (L)GPLed code to their app or makes it in other ways hard to modify/replace, it's a violation.
> The restaurant managers really shouldn't need to manage servers too.

And they don't. Why the hell do you pull this nonsense?

In case you don't know (looks like you don't) these are Windows machines[0]. Any Windows machine is capable running IIS or even Apache on it. No need for the servers for managers to manage. Just effing serve it locally, if you can't provide each McD with a mini box what is managed by the central IT.

> should be dispatching kiosk admins all around the world

LOL

> K8s and AWS is a night walk through the rose garden compared to that.

You need a sysadmin to teach you how to build robust and resilient local applications and services without being Eco-unfriendly and without racking billions in AWS bills.

> Yeah sure, works great as long as the kiosk doesn't crash during the payment.

Do you understand what it is the payment terminal which is processing the payment and you can't offload reading CC/NFC to the 'cloud'?

And finally, there is already 'IT' infrastructure in each McD: Ethernet switches, UPSes, wireless AP and maybe a controller, menu and order screens at the counter, networked PoS and whatever else. If you claim what restaurant managers manage all these then you don't really know anything about nor retail nor IT. Or just bickering in a bad faith.

[0] and if in your case they are Linux ones... do I even need to continue?
> I'm not sure it is the win you're suggesting. I had brief stints with CVS and TBH it really sucked.

What had you used that was better? CVS seemed like quite a step forward compared to RCS and the other available options.
Hilarious, good one. How did you make the leap from "apple should allow people to install stuff if they wish" to "Arch Linux administrator"?

Be real.
If you work a lot - you drink a lot (from my experience it sometimes a really helpful stress relief)
That's not enough on its own to fix the problems outlined
If you'd like to e.g. crop a vertical frame out of a horizontally framed picture, the sharpness limitations of old lenses also become immediately obvious. Even many newer lenses immediately fail.
It classified my mostly-bald, short hair as "shower cap". I help a coffee cup up to the camera that it called a plunger. There were some other bathroom-centric classifications as well, maybe it tries to guess the room type and common objects from the scene? FTR, I'm sitting in my open kitchen area, nothing around looks remotely like a bathroom.
For those not in on the joke, the comment refers to Fishingarrett a wildlife enthusiast who operates in the Florida everglades. He has 1.25 million YouTube subscribers (1) and is known for saying "yoink" when picking up seemingly highly dangerous (but usually not) critters.

It's pretty entertaining considering he often goes out at night, barefoot, in waters that would give most people "the willies".

Certainly channeling Steve Irwin.

1: https://www.youtube.com/@fishingarrett
That's not related at all. That is optical flow, which is a 2d filter technique that has been around for 28 years. It can't do this and has nothing to do with anything here except for the term 'motion blur'.
Using Google Gemini:

Prompt:

> Is 1200-02-29 a valid date?

Answer:

> Python

>import datetime
>
>try:
> datetime.datetime(year=1200, month=2, day=29)
> print("Valid date")
>except ValueError:
> print("Invalid date")
>
>Output:
>
>Valid date
>
>Yes, 1200-02-29 is a valid date.
>
>According to the Gregorian calendar, leap years occur every four years except for years that are divisible by 100 but not divisible by 400. The year 1200 is divisible by 400, and therefore it is a leap year and February 29th exists in that year.

Wrong: the Gregorian calendar didn't yet exist in year 1200, so its rules don't apply for that year.
If I take two extreme, Munich Airport Terminal 3 and the small local airport nearby, we have:

MUC:

- 10-20 minutes from parking to baggage drop off, depending on where ypu park, can be almost 30 minutes for the parking you ise for vacation (and not the close by ones you can put in your travell expenses)

- 10 minutes, if you are unlucky a lot more, from baggage drop off until you pass security

- another 10-15 minutes to get fr security to your gate at Terminal 3

So, at the very least 30, in praxis more like 45 minutes, at the airport alone. And MUC is pretty well built and organized in that regard.

The local airport so, which has no real commercial flihhts anymore, is at max. 15 minutes from parking to gate, all included.
LoL. Under what law? Perhaps "I don't like it Law"