skysight-inc/HackerNews huggingface dataset:
About “I can't imagine any recent catastrophe where the core cause of it would be sheer ignorance of the potential for risk.”, there are a lot of recent examples. E.g.:

https://en.m.wikipedia.org/wiki/Surfside_condominium_collaps...

> The problems had been reported in 2018 and noted as "much worse" in April 2021.

https://en.m.wikipedia.org/wiki/Flint_water_crisis

> Prior to August 2014, additional chlorine had been added to eliminate bacteria from the Flint River. (...) Following this test, the MDEQ placed Flint on violation notice but did not reveal the information to residents until January 2015.

https://en.m.wikipedia.org/wiki/Grenfell_Tower_fire

> Both the aluminium-polyethylene cladding and the PIR insulation plates failed fire safety tests conducted after the fire, according to the police.

https://en.m.wikipedia.org/wiki/2020_Beirut_explosion

> A cargo of 2,750 tonnes of [ammonium nitrate] (equivalent to around 1.1 kilotons of TNT) had been stored in a warehouse without proper safety measures for the previous six years after having been confiscated by Lebanese authorities from the abandoned ship MV Rhosus.
You could take a look at TrinityCore[1] and adjacent projects! Best of luck!

[1] https://github.com/TrinityCore/TrinityCore
They can if you want them to! It's all semantics.

I personally wouldn't.
Selection bias. I don't think I've ever seen a non-English article on Hacker News.
How scientists are making the most of Reddit
> Is that common to only communicate only through email/github?

Absolutely. I've both taken over libraries as a maintainer and given away the responsibility of maintaining a library after only communicating via text, and having no idea who the "real" person is.

> I guess some maintainers of open source projects will be more cautious after this story.

Which is completely the wrong takeaway. It's not the maintainer who is responsible for what people end up pulling into their project, it's up to the people who work on the project. Either you trust the maintainer, or you don't, and when you start to depend on a library, you're implicitly signing up for updating yourself on who you are trusting. For better or worse.
Agree. And one reason devs work better under pressure is because of analysis paralysis. Have a structure in place to minimize this and you don't need to work devs under pressure.
> We should stop using open source and only buy American vendor products! Yeah, good luck with that.

This isn't a good take. This presents proprietary software as offering superior assurances against backdoors, if only it were practical to completely avoid Free and Open Source software. The truth is approximately the opposite: code being Free and Open Source should be considered a necessary condition, but not a sufficient one, for resisting backdoors.

> We should start funding every open source project! Yeah, good luck with that.. I’ll start saving for my trip to Mars.

This kind of defeatism is unhelpful.
> I would more just say autogenerated artifacts should just be autogenerated by the build.

There are practical and philosophical problems with this. From the practical point of view you generally want to make contributing (or even just building) your stuff as low friction as possible and having extra manual build steps (install tools X at version X1.X2.X3, Y at version Y1.Y2 and Z at version Z1.Z2rc2) isn't low friction.

Philosophically, you are just shifting the attack vector around, you now need to compromise one of tools X, Y and Z, which are probably less under your control than the artifacts they produce.

> And systemd has in fact deliberately made the notification process simple specifically so people can avoid the dependency

People say this but I'm skeptical, this is the actual documentation of the protocol:

"These functions send a single datagram with the state string as payload to the socket referenced in the $NOTIFY_SOCKET environment variable. If the first character of $NOTIFY_SOCKET is "/" or "@", the string is understood as an AF_UNIX or Linux abstract namespace socket (respectively), and in both cases the datagram is accompanied by the process credentials of the sending service, using SCM_CREDENTIALS. If the string starts with "vsock:" then the string is understood as an AF_VSOCK address, which is useful for hypervisors/VMMs or other processes on the host to receive a notification when a virtual machine has finished booting. Note that in case the hypervisor does not support SOCK_DGRAM over AF_VSOCK, SOCK_SEQPACKET will be used instead. The address should be in the form: "vsock:CID:PORT". Note that unlike other uses of vsock, the CID is mandatory and cannot be "VMADDR_CID_ANY". Note that PID1 will send the VSOCK packets from a privileged port (i.e.: lower than 1024), as an attempt to address concerns that unprivileged processes in the guest might try to send malicious notifications to the host, driving it to make destructive decisions based on them."

So technically you have to support unix domain sockets, abstract namespace sockets, whatever SCM_CREDENTIALS is, whatever AF_VSOCK is and the SOCK_SEQPACKET note is completely obscure to me.
> people like you
But other people are allowed to judge?
Video2x/Waifu2x GUI. Unfortunately, the models they ship with are tuned towards anime.
See also Lewis Mumford.

https://en.m.wikipedia.org/wiki/Lewis_Mumford

I read many of his works.

And Thoreau.

"Men have become the tools of their tools."

http://www.literaturepage.com/read/walden-29.html

And others:

https://quoteinvestigator.com/2016/06/26/shape/
I'll take the downvotes. I've seen enough Indian cultural nonsense play out at several industries and businesses that the answer is yes: first generation Indian immigrants recreate their obnoxious cultural problems within American businesses and cities.

And stereotypes are typically rooted in truth. I have no qualms about calling out the cultural problems of India which are rampant be it sexism, caste system, or worse: personal hygiene.

When it's a one or two indians, the problems aren't there. But when an indian manager gets hired or there becomes a critical mass of first Gen indian immigrants watch out, because the same cultural nonsense gets perpetuated out.

The worst part is I sometime see the sins of the parents in the 2nd generation children.

You want to see a perfect example of all this? Go to Ontario. It's practically India at this point right down to rampant street defecation.
https://www.google.com/amp/s/www.india.com/viral/humans-star...
Seems like a bit of a silly debate, but I'll play along ...

It mostly comes down to definitions. Being general purpose and programmable do seem like they should be part of the definition, but where do we set the bar for programmability? Should ENIAC really be considered as programmable, or merely configurable (via patch panel wiring)?

Things like the Jacquard loom, programmable/configurable via punched cards, or automatic "player pianos", programmable/configurable via changeable disks/barrels, really introduced the idea of a stored "program", although no-one would consider them as computers. On the other hand it'd seem odd not to consider something like the Antikythera mechanism (which calculated future positions of the planets) from over 2000 years ago as a computer, albeit an analog one, even though it was fixed function.

Apart from functional definitions, perhaps the most compelling reason to consider machines like ENIAC as the origin of digital computers is that this was the start of using signal switching as the basis of computation, initially in the form of relays and vacuum tubes, then transistors leading to integrated circuits, with this being a continuous line of development.

Still, even if not part of this line of development, maybe we should at least give a nod to earlier computation and programmable machines as part of the inspiration for modern computers, even if only as part of our collective intelligence/memory and engineering progress in terms of conceiving and building ever more complex automated machines.
he`s not launching a campaign against Unit 61398 and correlating everything they do to specific FOSS projects. he found a random bug and started asking a few questions. whacking him would accomplish nothing; any random nerd might have found this issue.
Not sure which experts you are referring to, the ones I heard about it are pretty happy
This sounds more like a complaint the kids aren't happy to eat turnips and mashed bugs (just pick the legs and wings out!) like we had to and that their newfangled 'sandwiches' are too fancy. What if they get caught out in the forest with nothing but sandwiches? That oughta learn'em real quick.
I have aphantasia and wasn't seeing how it'd have a particular effect on FPS games, at least the ones I've played.

Crosshair placement for things like leading shots? Or more for building a mental map of where the enemy is likely to poke their head up? I would think these things involve spatial imagery/memory. I do remember putting a tiny piece of post-it note on my monitor to act as a red dot sight in Killing Floor, but my guess is that'd help anyone headshot zombies better, not just us aphantasics.
The exploit didn’t actually run on those distros, though. Only on deb/rpm targets. So, effectively, it was stopped before it hit production.
I think the point is that all of the code which will get compiled to produce the final binary should be in the repo, and so any generated code that affects the final binary should be in the repo.

The use of autotools or other similar tools, ones that are supposed to generate code on the fly on the final user's machine, make this requirement essentially impossible.
Thank you for sharing this idea! Some time ago I was trying to learn Danish, and I found that audio description plus subtitles on netflix helps a lot with learning a new language.

I will try your suggestion with German. Thank you!
A lazy and flippant classification of programming languages
What threat are you foreseeing that is comparable to an asteroid? The linked article suggests we just had a year at about +1 degree over average and we seem to have sailed through unscathed.

Unless we can link climate change to the Russia invasion of Ukraine, there seem to be bigger problems right now. Mostly linked to incompetent diplomacy rather than, say, China's industrial successes.
> Let’s just keep doing the good SBOM work at CISA, and stop doing stunts around Huawei and such — Huawei is a speck of dust compared to the issues around tens of thousands of unpaid developers writing the core of the world’s most critical infrastructure nowadays.

I have to disagree with this.

There seems to be this weird mindset in tech that because there's problem X (the Five Eyes countries hacking each others' citizens at each others' request, Meta collecting data on users, a massive attack using xz that almost got into the wild, etc.) that China isn't a problem. It's this strange "our house isn't in order because of our own doing, so it doesn't matter if some dude off the street starts squatting in it" idea.

If you have a country that has a tech legacy mainly related to espionage and attacks on other countries' systems - and make no mistake, that's China's main legacy - don't buy their stuff, no matter how many times it's said that it's fine. At some point it won't be fine.

You can fix that and better secure FOSS projects; it's not one or the other.
It really does! Which is why we typically specify electronic computers when we’re talking about the history of the blinky lights kind.
I think it’s just that the time/frequency analogy is so strongly rooted in signals processing applications

In the physics and crystallography literature the Fourier transform is framed in terms of real space and reciprocal space, which personally I think is much more natural in the context of computing a structure factor or diffraction pattern for example. Many measurements (like diffraction) most directly measure reciprocal space, and one applies the inverse Fourier transform to recover the real space information of interest.

Sometimes I think instead of time and frequency it would be more clear to frame signal processing applications in terms of time and reciprocal time just to highlight the symmetry and make it more clear that there’s nothing special about time and frequency vs some other dimension
Same story with HSR, and the much trumpeted 'manufacturing boom'.

Capital allocation and capital expenditure does not mean actual production.

The hiring analogy would be a software company touting recruiting fees for s/w engineers hired as evidence of actual software produced. You have invested in hiring, but now actually need to organise and deliver on the production
Arch, Gentoo and openSUSE Tumbleweed are hardly the world.
China supports your preferred candidate!

No! China supports your preferred candidate!

Repeat forever and ever.
Ask HN: Anyone else avoiding HN today?
There is so much garbage being posted today in the name of "April Fools pranks" that tech news has an unbearable noise-to-signal ratio. I'm pretty much marking everything in my RSS reader as read without reading it because it's all so stupid. And aside from posting this I probably won't even check the headlines on HN today... am I the exception in this regard?
> Most importantly: OP is right re: vanilla example is most legible. Reading the proposal, I have no idea what this "Signal" word adds other than complexity.

The aim is to run computations or side effects only when the values they depend on change.

This is a perfectly normal scenario and you don't want to update all data the UI of a full application tree whenever something changes.

DOM updates are the most popular example but it could really be anything.

Of course in simple examples (e.g. this counter) you might not care about recomputing every value and recreating every part of the DOM (apart from issues with focus and other details).

But in general, some form of this logic is needed by every JS-heavy reactive web app.

Regardless of the implementation, when it comes to that, I'm not sure I see the benefit of building this into the language either.
Thank you for your patience in taking random comments like mine seriously. :) Interesting game - will be sharing with friends!
Satire is so hard on the Internet and maybe I'm just thick headed. Just to clarify things, is that a suggestion to shove a JSON parser into either bash or autoconf?
WTF is a "Multi-modality Vision Language Model"? Does it mean:

- a program where you give it a text description, and it outputs a picture

- a program where you give it a picture, and it outputs a text description

- both of the above

- something else

?
I think there are three possible stances here. Either you have nobody knowing your real name, somebody knowing your real name or everybody knowing your real name.

Many open source projects use the first one, the article advocates for the third one, but I personally find the second one least objectionable.

In the current culture, a "full real name" policy is almost unachievable because of the backlash from trans folks, who may not be able to change their legal name (this is very hard or even impossible in some countries), but yet don't want to see their old name on a daily basis. Whether you find the backslash to be entirely justified or caused by "woke people and their vile woke ways" is completely beside the point, the backlash will happen and you have to contend with it somehow. There are also bias-related implications here, if you're part of a minority that is often discriminated against, you may want to adopt a name that doesn't immediately give that fact away.

I think a good compromise here would be to introduce some kind of "verified" badge for Github accounts. This badge would only be given to people who pass an ID and liveness check, enable 2FA on their accounts, use an avatar of themselves or no avatar at all, indicate the country they live in on their profile (consistent with the country of issue of their document), and either use their real name or a name that is clearly a pseudonym. Repo owners could then limit contributions to such verified badge holders. Such a step shouldn't be taken lightly, this would massively limit the amount of contributions for such repos, particularly from "conscientious objectors" to GitHub's business practices, but would perhaps be a good choice for libraries requiring very little maintenance and with massive security implications.
Come on. Only really cigarette smoke and fertilizer is remotely comparable. And the latter is pretty rare unless you live in the country.

There's no such thing as a "pleasant" weed smoke. You only like it because you're smoking it.
Not exactly comparable, as you said, the FFTW implementations are auto-generated but it doesn't sound like these few implementations will be.
Ask HN: Should lack of ML expertise affect scaling ideas based on LLMs?
Coming from traditional software dev background in enterprise IT, I am fascinated by what foundation LLMs can do.

I don't have a deep background in ML, fine-tuning, training models etc, but I have experimented with plain OpenAI APIs with python/LangChain tooling to build few small apps.

What pulls me back beyond a point is relying solely on these models, thinking it might limit differentiation in the market without core AI capabilities and cost-benefit calculations for tons of API calls vis-a-vis homegrown models.

May be it’s just my insecurities but I'm curious to hear your thoughts and experiences.
nope. 4/1 is terrible day for online news.
You should take a look at OpenAI's spinning up RL! I found it was a great resource when I began studying for RL.

[1] https://spinningup.openai.com/en/latest/
The main iteration this cycle for the next C++ is contracts.

Contracts are all about introducing undefined behaviour if you don't satisfy a precondition.

In practice this improves software quality on many levels by clearly defining requirements on interface boundaries that would otherwise be implicit or just documented.

Of course you can have special debug modes where you actually check that contracts are being satisfied.
> It’s also important we keep things in perspective, e.g. this one was spotted and averted.

My worry is, how many have not been spotted and have not been averted? From my reading of this one, it was blind luck that it was spotted.
I'd love to know why you "find Python a horrible experience"? It's the complete opposite to what I know and others know.
FastLLM: lightweight Language Model tailored for RAG
These bots you are talking about are not intelligent, they do not find "insecure" servers to break into. They simply brute-force and exploit known bugs on popular services.

There is no botnet targeting web services running on DOS, because no one is running web services on DOS.
Afrikaans is basically low German, spoken in much of northwest Europe. Although Afrikaans throws in a few peculiarities (eg piesang - also Bahasa Indonesian). I know school history likes to pretend Afrikaans is Flemish, but really Flemish is just another low German dialect. I’d also say I’ve liked most Afrikaners I’ve met, didn’t encounter much racism, and Jan Smuts is a fascinating character.
One big problem is that we've build search for humans, more specifically to advertise to them.

AI doesn't need a human search, it needs a "fact database" that can pull short factoids with a truth value, which could be a distribution based on human input. So for example, you might have the factoid "Donald Trump incited insurrection on January 6th" with a score of 0.8 (out of 1) with a 0.3 variance since people either tend to absolutely believe it or disbelieve it, with more people on the believing side.

Beyond that AI needs a "logical tools" database with short examples of their use that it can pull from for any given problem.
I've been developing my side projects like this for a while. I didn't know it had a name!
Yes, the dynamic linker (/lib/ld-linux.so.2), which is one relatively short program as opposed to thousands of big ones. :)

The point is, there's simply no usecase to require or even allow the program to do IFUNC substitution freely on its own. A programming framework should not opt the developer in to capabilities they don't want or need. Much of C-likes' complexity arises from unnecessary, mandated capabilities.
A cousin, a very good guitarist, once said, People complain about punk rock, but the Beatles weren't exactly Stravinsky. He was talking about the tunes ("This is the third three-chord song in a row."). But he could have said, Lennon and McCarthy weren't exactly Da Ponte.
Cloudflare D1 GA, Hyperdrive, Queues and Workers Analytics Engine Updates
Show HN: Simple email mode for Gmail's 20th anniversary
On April 1st 2004, Google released Gmail.

Twenty years later, I'm releasing an open source email app that helps you reach inbox zero for a single day: Simple Email Mode

Simple Mode makes handling less overwhelming:

* Handle emails in batches of 5

* Long emails summarized

* Timer to gamify maintain focus

* Set aside what you want to handle later. Archive the rest

You can try it completely free at https://getinboxzero.com under the Early Access tab.

The GitHub repo: https://github.com/elie222/inbox-zero

Only for Gmail users at this time.
Or just theme GNUStep, it supports themes like this.
I think psychological dependence is a lot bigger concern for most people when talking about alcohol/weed or even sugar.

> Under the addictiveness angle, one can say that the majority of the American population has an addiction

That doesn't mean that junk food is inherently "addictive" and there are many other reasons for this.
> with one that checked if liblzma was being compiled in the same environment as OpenSSH

No, the attack didn't check for OpenSSH at build time, it checked whether it was injected into the ssh process at runtime.
Election meddling is not needed considering the extent of legalized bribery in Congress which for PC reasons is called "lobbying".

You don't need the President if you have Senators and Congresspersons that have mastered the art of not passing any bills and falling asleep on CSPAN.

Influencing a presidential pick rarely pays off unless they are a "disruptor" who promises to restructure the civil service and diplomatic offices. Those are the groups that foreign nations deal with. They want influence over those because they are the intermediaries that can change a President's mind on an issue.
>I think there are other foods that bother different people, but we haven't managed pin down exactly which foods bother which people. It's a hard problem

Sounds like a job for a neural net. If people would log all what they eat and how they feel. If the neural net had access to all the components of the foods they are inputting, surely with enough data a pattern would emerge of what common component in what they eat is correlated with worse symptoms.
Learning to Code with and Without AI
> How would you handle dependencies,

I don't think most people mind system as a service manager, if that's all it did.

> port, socket,

That's inetd.

> timed triggers

That's cron.

> etc?

Etc.
They did create a polyfill, but the readme says it was based on design input from other projects, not on aligning multiple existing designs. This at least sounds like the opposite of what happened with promises, where they already existed in multiple libraries before the Promises/A design came out.
I would argue that in modern parlance no they are not. We could pick multiple examples of things doing calculations, like cash registers. They sum up numbers. Clearly they do calculations. But are they computers?

Even now, would you say the type of cash registers where numbers are manually entered are computers?
> and indeed was debunked shortly after

was also surprised that she continues to mention the mmap thing in a positive light even after the facts about the claim were settled to the contrary, even disregarding the whole attribution fiasco.
If you are looking for a downloadable app as an alternative to Oobabooga / Sillytavern, we built https://github.com/transformerlab/transformerlab-app as a way to easily download, interact, and even train local llms.