skysight-inc/HackerNews huggingface dataset:
That's definitely the ideal world, but in our experience everyone says they want dashboards and live data but everything ends up in presentations anyways. Fundamentally, it's the current format for standing in front of someone and making an argument. Maybe it's because the execs with buying power just like slides, but at anything bigger than a startup, decisions and alignment are done off a deck and not a dashboard.

An old boss once said "any data tool that lives long enough becomes a BI tool," and our hypothesis is that one reason there are so many BI tools floating around without market dominance is because all of them stop one step short of the final destination, which is (regrettably?) a presentation.
I was starting one, but the openwall message linked here is far more detailed and gets much further than I did. It's fiendishly difficult to follow the exploit.
For specific cases, asm is faster than c.

I'll show myself out
Where did you get that number?

Vitalik gave goals of 1.33 MB per second in blob space, and a compressed tx size of 25 bytes. This gives around 50,000 transactions per second, which seems like a worthy goal.
If the owner of the account is innocent and their account was compromised, it's on them to come out and say that. All signs currently point to the person being a malicious actor, so I'll proceed on that assumption.
I love seeing this worked through step by step. Does anyone know of other blog posts where constraint programming is applied step by step to a problem?
The lesson here seems to not depend on tools written in languages that have complex, obscure build systems and no one is either able or interested to read. Using tools rewritten in Rust, Go or any other languege which resolves dependencies within project seems the only way to do hardening here.
This does make me wonder how much they made a deliberate effort to build an open source portfolio so they’d look more legitimate when time came to mount an attack. It seems expensive but it’s probably not really much at the scale of an intelligence agency.
and how exactly do you propose that this search works?
Every single commit this person ever did should immediately be rolled back in all projects.
Yeah I always think of the older bridge as "the bay bridge" from the time I spent in the Annapolis area.
France is a major food exporter. Some of those lands could be re-acquired by the state for non-food uses.

Our capitalist world economy equates wealth based on extraction, not preservation. It really needs to be reimagined if we're going to be sustainable at all.
Sometimes, I really suspect that OpenAI and the like are intentionally going out of their way to destroy what trust remains in society.
No financial ties, just annoyed by the mob that comes out of the woodwork to pick apart every shitty dark pattern as if that's evidence that this company is overtly malicious, instead of just being stuck in the middle of an accidental PR nightmare.
We have a guide about optimizing that it looks like we just haven't propagated into the template.

You can get hello world to sub 50kb. Our todomvc in the docs gets to 234kb.

Also note that wasm starts really really quickly, so it's not 1:1 JS<->WASM.

https://dioxuslabs.com/learn/0.5/cookbook/optimizing
I don’t think it’s actually just this moment in time. Being extremely rich has always been a slightly weird state which most people probably wouldn’t like very much.

Like, if someone offered you the choice between 10 million dollars and a billion dollars, I’m not sure that the billion dollars should be the automatic choice.
Reminds me of a fast food slogan, "Ya gotta eat! Rally's!"... not exactly the most appetizing slogan.
If I have a salad and I water down just the dressing the whole salad is still worse, no? Unless you are saying the introduction isn't important, in which case why would you need to change it at all to make the paper more engaging?
I prefer this more complete list with more detailed read : https://build-your-own.org/blog/20231108_1week/
I get the feeling that a number of the comments are all the same person / group.
I second non-violent communication and the dale Carnegie one. I wish I could live by them.
I've never had COVID. In fact, the last respiratory infection I had was in 2019. I sing, masked, in a 90 member choir where few people do mask, and we've had a couple COVID outbreaks. In one case, the people who sat to my right and left both caught the bug.

I'm not going to speak to the particulars of the various mask mandates. That's a complicated and nuanced question. One thing I know for sure: N95 masks, properly applied, make a huge difference to (at least) the person wearing them.
Delayed choice is NOT REAL! Watch, or read, this: http://backreaction.blogspot.com/2021/10/the-delayed-choice-...

Basically the results of two slits with particles combine into no pattern. If you retroactively keep track of which slit, and then only look at that slit, it makes a pattern.
The trick is having a large buffer, so that typically the engine can operate at the point with the best specific fuel consumption or shut down entirely. Getting energy from the engine to the wheels is less efficient than a mechanical transmission, but the increased average efficiency of the engine can more than offset that.
I think the distributions that do use systemd are the ones that add the libsystemd code, which in turn brings in the liblzma5 code. So, it may not be entirely relevant how it is run, but it needs to be a version of OpenSSH patched.
We are also in year 9 of self-landing rocket boosters launching 100 times a year reused 10+ times, on the other hand.

Or that's the work of SpaceX team and not Musk? So when it fails it's Musk and Musk only, but when it succeeds it's not Musk at all?
I’ve had one for a couple years and never knew there was an app for it.
Tricking Steven Spielberg into directing a movie about you is the ultimate con.
Using Ingenuity as a Martian Testbed for Future Rotorcraft
Of course, to vote on this, you have to live in the state, and doing that is tough because housing is expensive, because NIMBY homeowners made it illegal to build new homes, because they don't experience the pain of rising property prices in their taxes, because of prop 13.
The issue that is misunderstood is that entangled particles cannot be used for FTL communication, which has to do with being unable to control the outcome of the measurement rather than transportation speed limits. Entangle two particles, ship one off to the Sun by whatever less-than-FTL speed you like, perform a measurement there, and in theory measurement of the particle that remained here will be instantaneously affected. ie: without waiting 8 minutes for the initial measurement to “propagate at light speed”.
I think this has been in the making for almost a year. The whole ifunc infrastructure was added in June 2023 by Hans Jansen and Jia Tan. The initial patch is "authored by" Lasse Collin in the git metadata, but the code actually came from Hans Jansen: https://github.com/tukaani-project/xz/commit/ee44863ae88e377...

> Thanks to Hans Jansen for the original patch.

https://github.com/tukaani-project/xz/pull/53

There were a ton of patches by these two subsequently because the ifunc code was breaking with all sorts of build options and obviously caused many problems with various sanitizers. Subsequently the configure script was modified multiple times to detect the use of sanitizers and abort the build unless either the sanitizer was disabled or the use of ifuncs was disabled. That would've masked the payload in many testing and debugging environments.

The hansjans162 Github account was created in 2023 and the only thing it did was add this code to liblzma. The same name later applied to do a NMU at Debian for the vulnerable version. Another "<name><number>" account (which only appears here, once) then pops up and asks for the vulnerable version to be imported: https://www.mail-archive.com/search?l=debian-bugs-dist@lists...
I felt like throwing together a quick frontend for a project at work. Downloaded Elm even though it hasn't been touched in years. Everything just worked.
The quality of these samples would be more than sufficient to fool anyone I know.
Because it’s naive to think that the owner of the account used his real identity.
Couldn’t you do that with the XML type? I believe that was added to Postgres before MongoDB existed.
The only needed population control is to wipe out all Americans. That would do more than wiping out people from several continents.

But I bet that’s not what the “population control” crowd is thinking.

The “population control” crowd is almost certainly thinking fewer Africans and Asians who consume a 10th of what they’re consuming themselves.
The flash doesn't do the computations though, that's just a method of getting it to the processor
> the systemd notification framework is very simple and I've used it in my projects

Have you come across an outline or graph of systemd that you really like, or maybe a good example of a minimal setup?
The "surprise“ comes from the fact this was historically a solved problem. People simply killed the annoying predators and nuisance animals.

We are in a transition state of cultural values and expectations. People expect to being free from annoyances because that was the norm for hundreds if not thousands of years. The rules have changed around how we treat animals, but people have not internalized all the resulting impacts.

For what it is worth, there are still lots of places, even in the US, where the old solution is still in effect.
You're assuming that it's even a single person, it's just a gmail address and an avatar with a j icon from a clip art thing.
I was a bit disappointed that "having an app" was one of the important criteria for the test, and "old dumb things" were pretty summarily dismissed.

Looks like something from We Put A Chip In It: https://weputachipinit.tumblr.com
But I see the "strerror" call is added
Well, it is not "brain activity alone", there are always light waves, forces, chemicals, and a lot of other things, acting on the brain from "outside" of the body, through some very strange receptor routs, but the "information" somehow travels. And we know 100% that for a lot of receptors, the firing rates depend on the intensity of the stimulus. So, we can see a direct correlation between, say, an applied force and golgi tendon organ firing. And at the same time, we discovered some types of radiation that we cannot see, and yet they can influence distant objects. I think that is pretty weird. So, we found a lot of direct correlations between brain activity and the outside world. Is there some need for an additional invisible field, not covered in current physics?
We have "enough time" to explore stuff. You or me will not live to see it but what's stopping a spaceship from going to some place for a few million years?
And coffee hot from dawn till dusk.

It will also keep your coffee lip-blistering hot for way too long. Keeping things hot with a vacuum flask is a problem solved 100 years ago. But that's the other side of these mugs: they are supposed to bring the temperature down to (and keep it at) the temperature you specify. Double-walled mugs don't do me any good if 30 minutes later the fluid is still at 198F/92C.
The formatting and layout of MS Word hurts my eyes.
Who says things need to operate on our timeframe?
It takes a village.
Until you figure there are very subtle unicode changes in the URL that don’t diff on GitHub. :)
It looks like the person who added the backdoor is in fact the current co-maintainer of the project (and the more active of the two): https://tukaani.org/about.html
Oh, as in a big park. Not a supervolcano. Fine, then, carry on.
I'm working on a Telegram-based all-in-one personal life tracker.

Apparently, Telegram bots provide functionality that allows creating UI resembling native apps, with the bonus of not having to install anything besides Telegram, as well as not having to ask any app stores for approval. Combined with chat-based UX, it fits perfectly for tracking things.

https://geektrack.mxgrn.com/
The environment you describe is self-destructive, which is why it is rare throughout history.

Xerox PARC did it, and reaped almost none of the rewards for their innovation, so it perished. It only worked for Bell Labs because they had monopolistic control of telephony and could charge whatever they liked to subsidize their R&D. As soon as they lost the monopoly, it went down hill fast. Google is the closest thing to this in the past couple decades, and have seen all their investments in AI walk out the door to found competitors.

Bottom line, pouring enormous amounts of money into pure research without demanding commercialization results certainly benefits researchers (who can pick up and take their research elsewhere) but runs companies into the ground.
I've been driving my family to Long Island from NC every year for Thanksgiving for the past 20 years. A few years into this, I got really tired of taking I-95, especially once you get north of Richmond. So I started looking into alternate routes and instead of I-95 all the way, we cut over to Norfolk from I-95 at Emporia, then take the CBBT to the Delmarva Peninsula, up to Lewes, DE, the Cape May ferry to the Garden State parkway to Staten Island, then across the Verrazzano to Long Island.

Other than one year when a deer jumped out in front of me on the GSP, it's a much more pleasant and relaxing trip than I-95, and it's nice to have the ferry ride to break things up.

Anyway, that's how I discovered the CBBT in the first place and it's always been a fun part of the (580'ish mi / 930'ish km) trip.
You can buy that Zojirushi and a whole pound of good beans for less than the price of the "winner" in this advertorial.
reread it...

It does remove the safe prefixes... But it also adds one print statement to "strerror()", which could plausibly give better explanations for the error code...

The only suspicious thing here is the lack for safe_ prefix (and the potential for the strerror() function to already be backdoored elsewhere in another commit)
Reduction to decision tree!

But I'm unclear how it actually run, and the article talks about the conversion and training but doesn't describe how it runs... I suppose because it's obvious to someone who has followed quantization.

Thinking out loud... if you have a model of just 1 and 0, my first thought is that the outputs are 1's and 0's but I think that's wrong. Instead it's a bunch of floats, and you multiply them by 1 or 0 (in a sense you are sampling the output of the previous layer?), add them up, and put the result through some activation function. And two-bit quantization sounds kind of similar, just with a _little_ scale, going from -1 to 2 instead of 0 to 1.

It seems kind of interesting that you now have a bunch of weights that are exactly 0, meaning you can assert something about what parameters and weights affect what parts of the output. Though in some sense the way they compress the weights down to one bit is also a heuristic you could use to interpret the original model... this just makes it clearer that in totality you are making a defensible simplification, because the end result is still a working model.

It also seems like you could make a lot of mathematical assertions about a one bit model that would be harder to make otherwise. Like maybe you could start thinking of a model as an equation, a _particular_ (though giant) equation, and look at its properties and consider symbolic transformations to that equation.
Not exactly related, but I thought a great use of facial recognition would be for cashiers: as soon as you step in front of the counter, the register shows the cashier your name (or maybe top likely names), and what you ordered last time. With this information, the cashier could press just a single button for your most likely order (making them faster), and refer to you by name for a personalized experience.
I’m not so sure it will matter much. The earth is 42ms across at light speed, 66ms if traversing a great circle.

Network hops are notoriously slow. In the datacenter the best I have ever seen is 200ns or so per packet which is very rare, most in DC hops are closer to 3-9 usec (especially modular chassis); then you hit the routers. With moderate congestion your routing hops are going to be twice that or more ignoring queuing, and you are likely six hops at least between two points in each direction.

The hollow core stuff mostly will jot help since it gains with distance, but distance means more hops on average, so we are talking about an application where low latency is required but distances are high (where the improvement applies) but the minimum latency achievable is still tens of ms.

It is interesting technology but I think it’s more interesting for hypothetical materials savings than for latency improvement.
I thought everyone (11Labs, open source, OpenAI even) already has human-level TTS models? Is there still an open challenge somewhere (e.g., is there a use case where a better model would make any difference?).
Postgres and MySQL are easy to hack something together with, too.
The sequential process performance ceiling will be set by physical limits. Photons at high frequenties have too much energy, for example gamma rays.

The practical ceiling will be set by manufacturing limitations for the next few decades: can we build structures atom by atom? [1]

[1] Richard Feynman "Tiny Machines" Nanotechnology Lecture - aka "There's Plenty of Room at the Bottom" https://www.youtube.com/watch?v=4eRCygdW--c&t=1390s
>What's the opposite side of that though?

The opposite doesn't exist, generally, because humans are still involved.
But my point is that people living in China might be "forced" to do such things, so we unfortunately can't ignore the country. Of course, practically this is problematic since the country can be faked
The actual report: https://zenodo.org/records/10701706/files/PlastChem_State_of...
Pensions in Romania are a joke, ask your relatives that recently retired.

Can I remind you that out of the immediate survivors of the Colectiv fire, 70% of them contracted hospital-acquired infections? (Which were conveniently overlooked by the coroner)
Private healthcare is a hoax that most employers can and will redirect their contribution to, further increasing the hole in which the public sector is getting into.

Bribery isn’t less common, it’s just becoming increasingly inaccessible to common folk. Police is still in cahoots with “businessmen”. Health and safety authorisations are still handed out like hotcakes to the ones in the inner circle. -> https://www.romania-insider.com/investigations-and-dismissal...

Our malls are full but industry is dead. We’re a consumer economy

We’re part of NATO, oh so proud of it, yet barely scrape together an impotent 1.6% of GDP for our defence. Our navy is in such bad state that in NATO joint exercises foreign soldiers training with us thought our ship was on fire (it wasn’t, just badly maintained and burning with a thick black smoke).

I also find it funny that you say we “avoided communists” and “home ownership is high” in the same breath. I wonder why home ownership is that high, and what policy lead to that.
They've been designing their own chips a while now, including with an NPU.

Also because of their unified memory design, they actually have insane bandwidth which is incredibly useful for LLMs. IMO they may have a head-start in that respect for on-device inference of large models (e.g. 1B+ params).
This is what the `detect_sh.bin` attached to the email does. I can only assume that the pesron who reported the vulnerability checked that this succeeds in detecting it.

Note that I'm not looking for the vulnerable symbols, I'm looking for the library that does the patching in the first place.
One small problem with this is that autoconf is not backwards-compatible. There are projects out there that need older autoconf than distributions ship with.
Gemini is a dual-screen e-reader and is coming out soon [video]
Not really, because different people are different. Some may not have the capacity to eat fewer large portions - like me - and eat less, more frequently.

Many people eat more than they need to at any given time, that is arguably greedy and argubably wasteful in a different way.

Portion sizes are static, appetites vary, letting people manage for themselves is perfectly fine.
As a bit of an aside, I would never accept a PR like this, and would always update $large_vendored_dependency myself. This is unreviewable, and trivial to insert any backdoor (unless you go through the motions of updating it yourself and diffing, at which point the PR becomes superfluous). I'd be wary even from a well-known author unless I knew them personally on some level (real-life or via internet). Not that I wouldn't trust them, but people's machines or accounts can get compromised, people can have psychotic episodes, things like that. At the very least I'd like to have some out-of-band "is this really you?" signal.

This is how I once inserted a joke in one of our (private) repos that would randomly send cryptic messages to our chat channel. This was pretty harmless and just a joke (there's some context that made it funny), but it took them years to find it – and that was only because I told them after I quit.

That said, looking at the GitHub account I'd be surprised if there's anything nefarious going on here. Probably just someone using your repo, seeing it's outdated, and updating it.
A couple of tools are moving in that direction, but oddly enough, it's mostly deeper analytics tools like Hex.

The obvious player that should do this and hasn't is Google. They have Looker, they have BigQuery (and Stackdriver, and Cloudsql...), they have Slides, but apparently they don't have the desire to put them all together. Meanwhile, Microsoft does have this kind of integration between PowerBI/PowerPoint, but they're locked in to their own ecosystem.

Basically, it seemed like something that someone should be doing (and we originally started from the BI tool side, like you were thinking) but nobody is, so we decided to go ahead and throw our hat in the ring.
"Fun" is often more compelling then "secure"
> Does Amazon donate their contributions back to the community?

If they contributed to 5% of the code, and the code is open-source, then yes?
I assume it will be with a PhD thesis similar to how Google started and not an off the cuff response to an Internet comment.

Although it would be nice if it truly were that easy.
There was a DARPA program on this topic called Social Cyber. [1]

1. https://www.darpa.mil/program/hybrid-ai-to-protect-integrity...
This has to be one of the long lasting topics on HN. I remember commenting on "vietnam of cs" blogpost like two decades ago.
Very insightful, you hit the nail on the head!

What’s the purpose of “Tell HN”, I’m new to all of this haha
20 Years of Gmail
Maybe it depends what circles you frequent. Most of the stuff I saw said it was likely. Some of the pro-russia people were like Putin will never.