skysight-inc/HackerNews huggingface dataset:
This has become such a common trope that I think people fail to apply even a modicum of scrutiny: the internet is not the town square and whatever your idea of the town square is likely wrong if you think its as wild-west-y as the internet is.

Firstly, try to approach children in the town square while wearing a mask for anonymity; or try to hold up images of porn in your town square. You will not be there long, you'd likely be detained, and you'd likely be asked for identification.

Secondly, why do people think there is some sort of town square? I have lived in several large US cities and several small towns. In neither was there any sort of common place where we all congregated to address matters of the town. At best, there are city hall/city council meetings where the public can speak but at least in my town (and I know of many others), identification is required to prove that you live in the town!

Even the founding fathers, when writing under pseudonyms, understood that anonymity and circulation was incumbent upon them to maintain, not that they were entitled to it because "town square."

To address your last point: this is not simply some ill conceived moral panic/think of the children type moment. Go try to host - as an adult - an AA meeting or "computer meetup" with children that happens to be held in the local adult toy shop. See how well that goes for you. At this point, we know children are getting approached by adults at a large scale on instagram, we know children are getting exposed to a lot of adult content on twitter, and on the spectrum between innocent HOA meeting and damaging to society as a whole, its clearly more towards the latter.
Preventing Cross-Service UDP Loops in QUIC
Glad to hear your dad made it across safely.

According to current reports, the Maryland Transportation Authority Police responded to the ship’s “mayday” and stopped traffic in the minutes before the catastrophe, but 6 construction workers are still unaccounted for.

https://www.baltimoresun.com/2024/03/26/key-bridge-collapses...
Obviously fork it, implement your feature, battle-test it, fix and make it more generic, battle-test it again, then ask the maintainer if they would be interested in a pull request.

I mean, implementing your fixes in the first place means you are already inherently forking it.
That is only if the JSON uses objects. JSON arrays map much better to CSV. In that case, only adding brackets to the front and end of each line.

The ability of JSON to do both objects and arrays is useful, for example the first line can be an object or array of objects describing the fields. Then there is less confusion between schema lines and data lines like there is with CSV.
This sounds familiar, but if you're masking to class up it's just gonna burn you out and alienate others.

If you feel that pressure just practice what you should for all people: empathy. Listen and ask questions before you speak. This goes with all crowds. Be curious and find the common ground first. Everyone has some, regardless of class.
I meant at the individual level. I don't care nearly as much about what governments can do.
This article is a bit all over the place. It doesn't really support it's own thesis - interesting topic nevertheless.

I actually do believe we have a quantity problem. There's a lot of good stuff when it comes to movies, music, games, media in general. AI might skew proportions towards "junk food" but I already don't have enough time to enjoy the "good stuff".

It might just be nostalgia, but it feels like we used to chew through new media. We had space to think about it. Now everything moves so quickly. I wonder if we can even see it in less fandom communities - no one stays long enough on a single thing to build a devote fan base around it (maybe that's actually good...). Great movies are a thing for a few weeks and then they're gone. Do we still have artists like Queen, Prince, Metallica? Can any artist expect to be relevant for more than a few years?

We produce so much nowadays. It used to be that an artist worked on their craft because they wanted to express something. Now you might witness an artist working on their craft, peak on social media (or on Netflix or Bandcamp) during that development stage and disappear before they ever reached the point of wanting to say something.

Maybe its just getting older, nostalgia, overwhelm relating to tech moving so fast.
My thought process is:

1. You find a bug, open an issue.
2. If bug is a minor issue, wait. If I want a fix really bad, offer to fix it.
3. If I still want a fix really bad and author did not respond, or does not want a fix, then fork the project for my own consumption. Using alternative dependencies are also an option.
> Anything that involves something more complicated than just pushing a single button on a keyboard (this includes IMEs)

My point is that this is merely a more stringent argument; it's now "on a keyboard, and cannot involve dead keys, etc." … which now excludes classic CSV, too, which requires two keys to enter a double quote. (Shift+')

Again, it does require more keys, and it is certainly not convenient, but n keys to me is still n keys. The real question is why one isn't using a proper tool to enter the data, and is instead encoding it by hand, which, again, even for a classic CSV, is basically something I've never done. (… because why would one?)
It is not a "pointless digression" at all, but rather speaks directly to the claims at hand.

If being "poor" in the United States (meaning, say, having to buy Walmart clothes instead of designer stuff) leads to "lifelong trauma", imagine how traumatic it must be to live in one of those countries where the income is less than a dollar a day.
This only seems to speedup value functions (not struct/callback or other C functions.)

From the referenced file: https://source.chromium.org/chromium/chromium/src/+/main:v8/...

* Currently supported return types:
* - void
* - bool
* - int32_t
* - uint32_t
* - float32_t
* - float64_t
* Currently supported argument types:
* - pointer to an embedder type
* - JavaScript array of primitive types
* - bool
* - int32_t
* - uint32_t
* - int64_t
* - uint64_t
* - float32_t
* - float64_t
OMG thank you. I always pictured two ideas "jiving" (doing that dance!) together for the like 3 decades I've been speaking English. Thanks for the upgrade.
For what it's worth, I am learning quite a bit from hearing other peoples' perspectives in the comments that this article has spawned.

> "whats the point of posting it here other than to inflame commentary?"

Maybe look inward on this one my guy.
California food chains laying off workers ahead of new minimum wage law
In my opinion, you should always ask the author first. Having your changes accessible from the primary repository is much easier and better for everyone, and there is a good chance the author is happy to accept your PRs. On the other hand, they might not agree with your proposal or might want to make significant changes to the design, at which point it becomes a personal tradeoff for you.
I replicate the service across several AWS regions, and Cloudflare Workers.

At the moment, it's really good at answering "am I down everywhere?", since I can just double check in several other regions.

I recently taught it to answer "Am I down just in this region?" by monitoring across cloud providers in the same location, though it's more of a niche use case (for the people I chat to, anyway)
Got it. Yeah unfortunately the post landed just short of the release. Now it's finally v1.0. Anyway, was worth a try :)
Same sort of questions - if the whole YC suite is secured by other YC security startups, that’s raises the same questions about where does the risk recursion stop - is anyone using yubikeys, vetted secrets management platforms, plainjane google auth, is there an internal SOC + SSO anywhere, and done by hires with actual blue team experience?

Sec teams don’t want to sign vendors to support innovation. We sign them to not get hacked, increase the odds that we’re not, and save money after. The less bread and butter deployments seen, the more skepticism is needed. Again, this model is actively exploited currently bc threat actors do this same logic.
Huh. It works fine for me.

However, sometime around then it stopped launching the bundled browser & started launching the system browser to talk to the webserver that runs in the background & manages the local storage (SQLite IIRC) and communications with HMRC themselves.

So my first guess, if it isn’t working for you, would be to test whether xdg-open does the right thing on your system.

A year or two ago it stopped working entirely due to a libc mismatch, which I had to fix by patching in a more recent libc. That was less fun.
Why do people keep doing this? Musicians who want an accompanist/virtual producer still want control over the orchestration, tonality, and shaping of sounds. Even karaoke machines use a signal pipeline to blend the singer's voice with the backing track. Generating finished waveforms is only good for elevator music.
This sounds fascinating and I’d love to help.
I used Salt ~5 years ago, so things may have changed, but I wasn't impressed. In theory, it is an immensely powerful system. The broadcast system offers ways to orchestrate things in a way that's hard with eg Ansible.

The reality was that it was unstable, and use cases that needed the broadcast system were rare and often contrived. Agents crashed or hung constantly. We ended up mostly using the same features Ansible already had.

I might PoC it if I was going to deploy at a scale large enough where Ansible being centralized was an issue (i.e. there are so many hosts that it takes hours for Ansible to run). I'd have to see whether the pain of managing agents was better or worse than trying to shard Ansible. My suspicion is that it isn't too hard to shard Ansible deployments, but I could well be wrong, I haven't tried.
> he should turn over the repo to someone else to manage

Why can't this "someone else" just fork the repo themselves?
From the forum, on the topic of the buyout:

"[I] Realise there seems to be a distinct lack of faith flying around here, but we'll be revealing more about our plans in the coming days and yes I'm sure you will all be pleased with what we have to say." - Ash

So that's at least possibly a sign of better information to follow.

https://forum.affinity.serif.com/index.php?/topic/201413-aff...
I agree wholeheartedly.

When I'm feeling down or depressed, I often want to engage in media that lets me wallow in those feelings as a cathartic sort of release. Would love some type of toggle that allows us to "match" a feeling or "improve" a mood. Sometimes we need a pick-me-up! But sometimes, I want to really sit with the discomfort of grief or loss and reading bleak books can help that resonate with me.
"... we’re exploring all possible routes for it going forward.”

I hope they choose the most obvious route, open sourcing it.

They've already publicly stated their intention to move on from the idea, so why not?
I would rather be destitute with my kid than live like a king without her.
Folks feel the same way about Markdown versus LaTeX: why use something significantly more complicated where a looser, human-readable grammar works better?

For any other situations, I use https://pandoc.org/, or, generate a Word doc scriptomatically.
While I think that's a natural extension, it shows libraries don't scale in the digital world once the barriers to entry (driving to the library) are removed and you can change the utilization so books can be re-lent as soon as the app closes. Suddenly, you'd need 5% as many books as before, crushing the publishing model.
Still works for me. I think there was a libc issue a year or two ago, which was fixable by patching the libc they bundled with the app.
Same, but I use wiki.vim. Great for daily journalling.
Phil Spencer Wants Epic Games Store and Others on Xbox Consoles
This is not entirely true. A typical trick for accomplishing this is to simply use the Hessian approximation `g'(x)*g'(x)` (star denotes adjoint), thus cutting off the second-derivative evaluation of g, and then use a modified CG method like Newton-Krylov for line-search methods or Steihaug-Toint for trust-region methods. It's very robust, matrix-free, and doesn't require an excessive amount of code to implement. Further, the method can be preconditioned with a positive definite preconditioner.

And, to be clear, there's no guarantee that a zero residual be found, only that `g'(x)*g(x)=0`, but that tends to be the nature of nonlinear equations.
North Korea censors Alan Titchmarsh's trousers on BBC gardening show
this sounds like GPT nonsense written to defend billionaires and deflect the discussion.

that wealthy and powerful people have sycophants and live in their own universes is heavy documented throughout history, in various cultures and countries -- Ming Emperors, Roman Caesars, Incan Kings, etc.
"I suppose it could just be a myth, but I always thought that was the original premise and it was hollywood execs who insisted on making the matrix about batteries on the assumption that audiences wouldn't understand the concept of neural networks"

It's a myth. It was always batteries in the script, but when Neil Gaiman was hired to do a Matrix short story he added lines about using the humans as a neural network because he thought the battery thing was stupid. I've seen this well documented online so you should be able to find it if you try.
Oh my, such a classic! It was almost scary in its simplicity and ambience back then, having to find thf right spot until the sentinel fixed its gaze upon you.
I've spent a lot of time in academia up to PhD level. Personally I'd suggest you start by doing the Maths A-Levels. There is lots of solid material / books, there a lots of tutors if you need them, and you have exams to prove you know the syllabus. If I remember correctly GCSEs are not a prerequisite. If they are -- or your Maths is very basic -- then start with Maths GCSEs.

It is important not to bullshit yourself when learning Maths. If you don't do exams, there are so many ways to fool yourself into thinking you know what you're talking about.

Not to pick a magic number, but if you're a normal person (like me), expect to spend 5000-10000 hours before your Maths is worth a damn. A-levels are just the start.
Yeah that's not very typical, I'd like to make that point. These ships are built to very rigorous maritime engineering standards.
and often quite common
THX Theme in SuperCollider
Hello!

If you want to see the detailed answer, I did it in another question below. Feel free to have a look at it!

TLDR: Curations are made with AI using custom prompts and then double-checked + added manually. The main idea behind that was to ensure the quality of the curated content. IMO, for this type of project, having less choice if the curation is good is fine, rather than having something via an API with "inconsistent" data and less relevance.
Interesting Arch discussion on the security implications of user namespaces when they were considering adding it to their kconfig: https://bugs.archlinux.org/task/36969
No changes "at this time" is the key phrase here. Not exactly reassuring.
It seems like the RustSec "unmaintained" notice worked as intended. Unmaintained dependencies represent a latent security risk as they will almost certainly not respond to any future vulnerability; identifying this risk before an incident happens is much better than trying to figure out response in the moment during an incident.

Armin's answer here, of taking on explicit ownership and responsibility for the third-party code they use, seems like a reasonable and socially desirable response. Yeah, I get that it's annoying, but this is (IMO) pretty much how open source is supposed to work.
I have goosebumps!

Jiminy Crickets...

I have SOOO many use cases for your thing.

[edit: what does this mean: https://i.imgur.com/rHQt6ul.png when attempting to demo?]

---

* I want an agent that I can speak to on Mobile headset as I love to think out loud - and air my thoughts and thought process through talking through my internal dialogue - if this could just capture what I am saying and log it and I can refine thoughts as I go.

For example - I ride a lot. I try to cycle 1000 miles a month if I am doing a solid month - but else - I ride daily and its a movement meditation. as I ride - I think through things and I speak through thought processes with differing opposing 'experts' in my internal monologue to self-argue through to a solution....

If I could have this record all that, then random epipehnies I think through while on ride will be captured in a meaningful way.

---

* A meeting-notes-transcriber for whiteboard sessions.

* record everything you say in an interview and be able to review after for self-coaching

* talking through a dish as you wing the ingredients so that you speak out loud what you did (my grandmother was friends with Julia Child - my grandmother taught me to cook and when it came to measurements of things - they always wing it per feel/taste "salt to taste" for example means "eh... whatever"

so to be able to talk through what your 'winging it with' and it captures it into a salient reproducible recipe (i make a mean Chimi Churry (sometimes if I can recall)

* a voice "body cam" for things I may say in situations where I may be too flustered to recall.

* Speak authoring - start telling a story outline so it captures a synopsis that you can further develop

* Speech (like giving a speech) refinement as you can talk through the speech and capture and rework and reiterate etc

and thats just off the top of my head through your demo....

LOVE this.
That would imply winners and losers, but nobody wins or loses either way. Reality goes on regardless of who or what reproduces.

Even if one's genetics aren't passed on, their memetics do which nullifies the proposition of competition to begin with. You play, you don't play, you win!
There might have been a Tk GUI at some point, but these days it’s a local webserver talking to a local browser which handles the UI.

It’s just another rest webapp internally I think.
debatable. many morons are entirely predictable; sometimes you only have one or two cards to play.
Interesting, and makes sense. Good luck with it.
We’re working on a privacy-focused iOS app that enables you to track anything. It’s called Reflect. The app enables you to answer questions like “how does meditation affect my mood” or “how does this new supplement intervention affect my sleep”. We already support detailed visualization and correlation between all of the metrics you track and are working on some very exciting features to make self-guided discovery even easier.

Here is the link to the app: https://apps.apple.com/us/app/reflect-track-anything/id64638...

Here is the link to our website with more information: https://ntl.ai/reflect
It is a web app. Runs a local webserver & talks to a browser.
> will largely be unavailable for sale in the manufacturer's home market

I've heard a (credible) stat that there's more Mercedes-Benzes sold in California alone than in the entirety of Germany; if these numbers hold up (outside the EU) for Porsche I could understand them giving up on the EU
The 'Mother Tree' idea is everywhere – but how much of it is real?
> This is a UN security council resolution. The enforcement mechanism is implied.

No, it is not (unless by the “enforcement mechanism” that “is implied” you mean “returning to the council to debate a subsequent resolution on enforcement”.) UN Security Council resolutions that want, or even permit, enforcement beyond countries acting as they would be legally empowered under international law without a resolution explicitly authorize nations to enforce it by either particular means or with language like “by all necessary means”.

See, e.g.. SC Res 678 (1990), in relevant part:

---

1. Demands that Iraq comply fully with resolution 660 (1990) and all subsequent relevant resolutions, and decides, while maintaining all its decisions, to allow Iraq one final opportunity, as a pause of goodwill, to do so;

2. Authorizes Member States co-operating with the Government of Kuwait, unless Iraq on or before 15 January 1991 fully implements, as set forth in paragraph 1 above, the above-mentioned resolutions, to use all necessary means to uphold and implement resolution 660 (1990) and all subsequent relevant resolutions and to restore International peace and security in the area;

---

EDIT: But, as that resolution and its reference to 660 illustrates, it is common practice to have a pure demand resolution followed by a demand-with-enforcement resolution; its far less common to jump straight to demand-with-enforcement, IIRC. So, this isn't inconsistent with the pass to a materially enforced resolution, but its still in the pure demand phase.

OTOH, its pretty hard to see enforcement against either side not getting vetoed by each sides P5 supporters, and it doesn't look like either side is inclined to comply voluntarily.
> The kids whose parents thought this way in my hood are mainly in the 1% now. The kids whose parents didn't think this way have a by-and-large the same life their parents did.

Interesting. But it’s worth noting that many different causal mechanisms can explain that data. For example it could be that parents that think that way are pretty smart and good at long-term planning / delayed gratification, and such traits are highly heritable. So kids inherit those traits and do well.
The point of controlling the world's financial plumbing would seem to be that you can use it as a weapon, but paradoxically if you ever actually do use it as a weapon, it stops being one. Seems like maybe the sword was made of butter the whole time?
Tried it on a couple of my wife’s songs and she said it was quite inaccurate in terms of chords and tabs (the lyrics were pretty close though). This seems like one of those use cases where it’s not particularly useful until it gets above some minimum accuracy threshold.
It's inconsistent. Some do, some do not. Tipping by card comes straight out of the recipient's hands, regardless.
The last thing we need is to force everyone to have ID to “protect the children” before I can go on to a site on the internet.
short answer: some people are good, some people are lucky, and some people are good and lucky. It only takes one from the latter category to find these things

longer answer: It is definitely really damn hard these days. Even disabling the mitigations, it's still pretty hard to find and a vuln and write an exploit. But many people who find these (not all though) work as part of a team, where they can parallelize fuzzing efforts and combine/chain knowledge and other exploits much better than an individual could. The level of expertise and talent that some of these people have is absolutely incredible, and experience is worth a pound of gold for these types of things, and some people have years or decades of experience.
Your link converted to GitHub: https://github.com/torvalds/linux/commit/f342de4e2f33e0e3916...

https://bugs.launchpad.net/bugs/cve/2024-1086

> A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
Right, fair enough. It does seem like some of the very big trading houses (glencore, trafi etc) could be built from scratch with a modern stack.
In the early 60's he stayed at a hotel that my grandfather managed in NYC. He drew and dedicated a Babar picture for my mother and each of her sisters, 4 in total. I inherited one of them from my aunt who is my namesake Roberta --> Robert. It has been my most prized possession for a long time.