skysight-inc/HackerNews huggingface dataset:
> Calculus was created by a physicist who didn't even bother it since he just published the resulting physics

Calculus was discovered by a number of people. I'm assuming you're thinking of Newton, who was a professor of mathematics and whose advisor was a mathematician. Remember the fundamental theorem of calculus had been proven by mathematicians Gregory and Barrow (Newton's advisor) before Newton, not to mention the work of people like Fibonacci. Calculus as we know it today was mainly developed by the mathematician Leibniz independently of Newton.

> Fourier analysis was created by a physicist etc

Joseph Fourier was a mathematician whose advisor was mathematician Joseph-Louis Lagrange whom he succeeded at ENS.

> Mathematicians first and foremost formalizes things after they were created, they don't create many useful tools to begin with. Very few fundamental tools were made first by mathematicians.

This is wildly wrong and contrary to history.

> They often call physicists/polymaths mathematicians after it happened since they published a lot of math

The people I'm calling mathematicians, like Newton and Fourier, are people who trained in mathematics and had mathematical advisors. What other definition do you want of a mathematician other than one who does math, studied math, is employed to do and teach math, and whose advisor was a mathematician?

For example, while Wikipedia calls Fourier a mathematician and physicist, Britannica just calls him a mathematician. Britannica does mention that he was also an Egyptologist but never calls him a physicist.

> generalized functions where done by physicists

Distributions have been used by mathematicians since the 19th century. I'm aware of no examples of physicists claiming priority. Physicists do often use them incorrectly, for example a lot of physicists view the Dirac delta "function" as a function despite the fact that no functions have those properties. They sometimes confuse that, as you seem to do, with thinking that mathematicians don't understand what generalized functions are about.
Who, you ask? IEEE and the ones complaining that images of "attractive women" should not be used.

That is, quite ironically, discriminatory to women (you're literally arguing to involve less women) and a particularly-vague subset of women at that.

It is also indirectly discriminatory to men, because images of "attractive men" usually don't get as much complaints.

The women complaining using images of "attractive women" makes them uncomfortable also implies something very dark in their line of thought: That men in general are supposedly evil, sexual monsters for daring to like pictures of attractive women. Or the women feel an inferiority complex regarding their physical appearance and want to take it out on others.

It's all just ridiculous and a worthless waste of everyone's time. The model in the image doesn't want it used anymore, that's all the (and arguably only) reason we should use something else.
Thanks. At least the distro I use (Hyperbola) it's LTS bound, so is not affected.
I've been running a public facing website on my RPi 2 since 2014 and I am still on the original SD card. But, all assets and logs are being written to tmpfs, and the only thing on the SD card (outside of the OS) is the DB.

Or maybe I'm just lucky also.
It's Kremlin, I wouldn't be surprised if actual goal was to produce semiconductors for military purposes (while trying to convince everyone that entertainment/education/fostering local IT is official goal).
At least you can copy 16 times more data to the shared memory with binary weights.
FC didn't have checkpoints. That was introduced in FC2 (set in Africa).

FC2, FC3, FC4, FC5 and FC6 had checkpoints
Extracty: Extract structured data from unstructured websites
Good article, but visually representing data differently from how it's stored in the database can be a huge PITA. A pet peeve of mine is real names as an example, Dutch family names may have an infix (van, van der, den, van den) which is always in lowercase, and usually is not even an option on non-Dutch websites. You can't leave how to display these things up to the designer: the user has to know (imho) how these are stored. For example, sorting on last name should not happen on the infix, but only by lastname. E.g., "Dijk, van" comes before "Meulen, van der".

For completeness sake, the full names here may be "Bert van Dijk" and "Anne Jan van der Meulen". Also, "Anne Jan" is a single first name, despite the space.
Where can you buy and sell high karma Reddit accounts?
I wish the bbc would rebroadcast or release it in higher quality than the YouTube uploads from over a decade ago. It’s so great, I’d love to _see_ it in high def.
Bad move. Destroying evidence is a felony.
Not really, who said the residents are the only potential bidders? Public or private museums or collectors might be interested.

1868-1990s covers almost the entire history of California as a state, the photos alone shoule be interesting.

In the silent film era 1910-1922, Santa Barbara housed the then world's largest movie studio (Flying A Studios) until it outgrew the town and moved to Hollywood.
Those years should be quite interesting.
> That can only be caused by overregulation.

That reads like a creedal statement. We see the same effect in all regulatory jurisdictions, indicating the effect is instead intrinsic. A more fundamental observation is that the more we learn about building nukes, the more expensive they get.
that is coming, once I get it a bit more developed... this isn't anywhere near usable for real yet
Perhaps. If people's mindsets are constrained in one way their frustrations will be borne out in another. The more constraints, the more unusual the alternative will be. Somewhat like steam escaping from a pressure vessel.
Since GitHub disabled the repos..
I uploaded all GitHub Events from the two suspected users and from their shared project repo as easy to consume CSV files:

https://github.com/emirkmo/xz-backdoor-github

For those who want to see the GitHub events (commits, comments, pull_requets, diffs, etc.)
> I'm mostly not following what is under a DDoS attack. Is it their web page mostly consisting of marketing material with static pages?

Yes.
Agreed on the SSH compression, but it would be not relevant to this particular vulnerability because liblzma was never used in the SSH compression anyway.
> I think this was one of the first popular 64bit games, upgrading into it

I don't think so. I remember struggles and patches necessary to get it run when I moved to a 64 bit machine a few years after it came out and I wanted to replay it.
So basically... causation caused us to exist?
https://archive.ph/14sJa
Maybe ask on a suitable sounding PostgreSQL mailing list?

* https://www.postgresql.org/list/

The catch-all "general" one is probably good enough if nothing else seems like a closer match. :)
That's a non-answer to the question. You're saying that you would like to recommend good products only, but the question was about sponsored products.

And on another comment about adding high margin results as "best" you seem very interested in that concept.

I'm not trying to be hateful, but if you're thinking about how to seed results with high margin products for yourself, instead of the actual best results already in the life cycle of your product, I think it's just a matter of (not much) time before any quality you have will immediately plummet. This makes me very cautious about your product. Very.
Cool, sounds like it worked out fine for you!
Peace War is about personal tragedy on a big stage. If you read it for the adventure, you missed the whole thing.
> I've long since said that if you want to hide something nefarious you'd do that in the GNU autoconf soup

If I recall correctly, xz can be built with both autoconf and cmake, are cmake configs similarly affected?
> It's a shame the school system doesn't put more emphasis on why you'd need to solve such difficult problems in the real world, as in, what are their theoretical or practical applications of the knowledge gained from solving such problems.

Speaking as a PhD in math, Olympiad problems are very different than ordinary research math problems. Olympiad math problems in particular don't require creating new theory, but rather brilliance and knowing a bunch of standard tricks and how to apply them in insightful ways.

Becoming good at solving Olympiad problems won't really give you much skill in solving creative research problems, but it does give some indication of pure ingenuity as one dimension of mathematical intelligence.
> never had a partner

time to get laid bro. too much thinking will fuck you up. go out and get laid. pursue something larger than you, find someone who's naturally curious about you along the way.
Yearly I'd interview with other companies, get an offer or two, and use those to negotiate mid-year raises / RSU bumps. Turns out this is quite lucrative, I don't have to change jobs, or worry about trying to get promoted.
There will be bad sci-fi movies about this.
It’s funny you say that considering LOTR is one of the most black/white good/bad stories I can think of.
Doesn’t that completely disable them, only without the convenience of a toggle?
As someone building an app that has AI chat as a feature, this library is too coarse grained. This might be useful if someone's trying to quickly build a low quality canned AI app, but my hand rolled UI is much nicer.

You wanna know what would be a useful component? A simple <Text> component that takes a streaming character generator wrapping output from a LLM and can render the stream progressively without any any additional config by the user, and that provides hooks for animating the appearance of the text so the user can easily create beautiful experiences.
Does your wisdom include the DSM-5?

I don’t know you, but I do have about twice the years of experience to draw on. I detect social isolation, delusional thinking, and narcissism in your post and comments.

You may find your tribe in the “rationalist” community.
Very hot take for these types of forums, but credentials and connections matter a lot. Maybe they matter less the closer you get to America, but having a degree from MIT or equivalent, opens up enormous doors in the East. So, I would argue, if he “just had the knowledge” the odds would be against him.
caddy can serve it, with free tls

if js project i sometimes use npx serve too
It’s a neat idea, but I think using the affiliate model will ultimately be corrupting.

Maybe once you get larger you can pivot to being a paid service like Consumer Reports. To me, they still feel more trustworthy than other services similar to yours (like Wirecutter).
It's not, zstd can match LZMA2 compression ratio, while being much faster.
At best there’s an account with a Chinese sounding name. I’m never going to carry water for the PLA or the CCP, but I’d need to see stronger evidence before agreeing it’s them.
bunny.net is the cheapest cdn i can recommend if u go this route.

they give free credits too, and they have tol notch support bunnies.
Name choice I disagree with. The attacker used at least Chinese, Indian and Scandinavian names when working on this. It is possible we can find out something by doing a statistical analysis of the language but as far as I know no such analysis has been done.

Edit: A Russian sounding alias was also used.
Lovely idea!
Packages in "stable" versions get bugfixes, too. How often obviously depends on the maintainer, but anything marked as a security issue upstream tends to be patched fairly quickly.

On the whole, I would assume that someone who maintains a Debian or RHEL package is better qualified to assess the severity of a bug than I am. The bigger problem is that xz hasn't had a proper maintainer for the better part of a decade.
Not sure about Oracle or MS SQL, I work with Postgres. Back when I worked with Oracle and MS SQL it was about one-few huge DB servers, not many smaller ones.

To scale the database you need replication, and replication makes it a distributed stateful system that might be harder to reason about than a classic server+database setup.

In comparison, scaling a standard stateless backend server that connects to one huge DB server is fairly easy.

If you have any guides to point me to I'd appreciate it.
dont we all, we just here for money to do other trades man. the few outliers are nerds.
zstd at high compression levels (19+) with large dictionaries (32 MB) can match LZMA2 compression level.
I like the idea of a distributed issues/PR tracking platform, but I am skeptical about this one. I would have expected something simpler, that leverages the existing paradigm of push/pull remotes (and then building an optional live-sync daemon on top of that). Radicle appears to be built on the concept of a single global network, completely without any location-based addressing.

I'm also suspicious about moderation. Even with tools to blacklist peers, it seems like this design is vulnerable to "hostile takeovers" where a repo is forked but the new maintainers don't change the repo's did, instead just get more nodes to follow them than the original.
> Facebook engineer and therefore have vetted

Haven’t nation state actors openly infiltrated high level companies? This would provide a false sense of security imo. If anything, we need better testing and behavior heuristics for incoming code.
They’re also too bright for pedestrians. When a car like that passes me by I can’t see anything for a while.

Then there are also the cars standing on the pavement with those headlights on blinding the pedestrians going in the opposite direction, because the driver inside can’t be bothered to turn them off and feels like sitting in a car in the dark and being an asshole to everyone around for whatever reason.
The paper seems to say that gravitational waves cause neutron stars to collide.

Isn’t it the other way around? (A collision emits gravitational waves)?

https://arxiv.org/abs/2402.03593
Not only UK, the Iberian Penisula was all about the Speccy, MSX and C64 were hardly a presence among us, and I never saw an 8bit Apple system.

Eventually most people either migrated to the Amiga or PC, other 16 bit systems were also hardly adopted.
This reads as extremely self-congratulatory. A "billion requests per month" is only a few hundred requests per second, which is both trivial and not a "DDOS." Also, their site is behind a CDN (Cloudflare), so I'm extra confused on how they think they did something notable from a performance perspective here.

For example, there's no reasonable world where that 200 MB blob is not cached and served over CDN. I can't imagine someone would be so proud that their application server isn't reading 200 MB from disk and copying those bytes to the client on every download; it's just so obviously poor design.
MicroPython Plans a New Feature for the RP2040: Runtime USB Device Support
Sounds like it would be a cool book to read.
> Why would they even do that

More layers of obfuscation. For example in order to be able to attribute the backdoor to a different party.

It is of course also possible that Lasse Collins is a nice real person who just has not been able to review this. Maybe he is too ill,or has to care for an ill spouse, or perhaps he is not even alive any more. Who knows him as a person (not just an account name) and knows how he is doing?
The maintainer merged the patch, but the code change came from someone else IIRC.
The ageism in this industry is so profound that this kind of thing is somehow either surprising or notable to people. In serious engineering professions, industry and life experience and age are considered pre-reqs to advancement. And it used to be like this in computing, too.

It's gotten worse over the last 20 years.
This is true for virtually all filesystems

From the kernel point of view, the filesystem code runs in kernel mode and expects a trusted block device

Some people (from gnome etc) do auto-mount filesystems, which is a crazy idea and they know it but they do not care

https://lwn.net/Articles/951846/
Indeed, if someone is succeeding despite the barriers of their ad-hoc, idiosyncratic, ESL then it might signal that they are really good at something. Note that the something could be appearing very successful in-spite of broken english.
I'm usually not a fan of photo enforcement because I see it abused to fix bad city/traffic planing, but I think it could be really valuable to enforce proper headlight regulations. LED headlights, especially on SUVs/trucks are a huge hazards to the public, maybe comparable to light drink driving.
The state comes from the data, not the procedural code implemented in the database.

Issues around replication happen with any distributed database. That doesn’t get worse with stored procedures, which don’t themselves have state.
THATS not a DDos attack! when i were a lad...
Not sure if the original comment is sarcasm or not, but the current state of gaming is definitely worse than 20 years ago. Companies abuse the consumer with greedy monetization practices and intrusive DRM, hype-driven marketing tactics pushing pre-sales and then relying on years-long updates to align the product with what was advertised, online services that make games unplayable when they shut down, mobile gaming is adware that popularized microtransations, etc. Modern gaming is a rotten industry.

There is a lot more offer than before, but most of it is shovelware, asset flips, etc. You can find indie studios that still respect the art and produce good games, but these are the exception, not the norm. And you can basically count good AAA studios on one hand.
You could use eval to expand whatever syntax you like into function calls. It could be done once at the start of the program and act like a js preprocessor.

I know eval is not kosher but this problem is also not real, so why not.
I would just add that sometimes ideas exceed the technology of their time. So revisiting a design that had deficiencies (weak points, high production costs, bad emissions, etc.) with new tools, materials, etc. can lead to breakthroughs. Not that that's what is happening here, just why some ideas that previously didn't work seem to circle back around.
You literally have to learn how to sell yourself and your ideas.

Turns out that people who have a lot to say have to spend a few years learning how to communicate effectively. Ben Franklin, Walter Winchell, Dorothy Kilgallen, Kyle Kulinksi, Destiny, Jordan Peterson, Rachel Maddow, Tucker Carlson, Greg Gutfeld—they all spent years in the trenches getting paid nothing to very little.

They write articles on spec or self-publish, accept speaking gigs in front of tiny audiences, write for obscure journals, etc. They find themes that hit home, refine their ideas tirelessly, take on more experienced debate opponents, etc.
If you're interested in an alternative query language, https://prql-lang.org/ is a good one.
A good book on semiconductors is "Chip War" by Chris Miller. It talks at length about TSMC and Morris Chang. Great book.

[1] https://www.simonandschuster.co.uk/books/Chip-War/Chris-Mill...
To me, Paint.NET hits the right complexity spot.

Offers basic functionality, that allows the user to easily achieve most goals.

It's not intended as a Photoshop replacement (GIMP tries to) or a professional tool.

But most other users will find that what they're trying to achieve is straightforward compared to other options.
Citus was bought by Microsoft so now it's only offered as Azure managed service.
The Dali ship crew is still on board after hitting the Baltimore bridge
Everything looks obvious in hindsight doesn’t it? Several of the organisations you’ve mentioned have funded projects to rewrite critical internet infrastructure in a memory safe language - HTTP client, HTTP reverse proxy, DNS resolver, NTP server, TLS library, AV1 decoder, a replacement for sudo, among other projects (https://memorysafety.org). More can always be done, and it can always be done faster than it’s being done.

Fwiw, it’s possible to use zstd instead of xz, which was created at and actively maintained at Facebook.

So if you were expecting Big Tech to identify this class of problem and do something about it, it seems like they are. But if you expected them to eliminate every single possible instance of such an issue, that’s a bit much isn’t it?
What I was trying to say is that the article describes an architecture that takes cloud billing abuse attacks into account (they point out specifically that R2 is preferred to S3 due to egress cost structure) and this design is what partially allows them to ignore the light attack.

Most of the cloud architecture posts on HN either focus on how k8s/%your favourite new tool% is good for scale or detrimental to keeping complexity under control. And I think it's valuable for startups to consider cloud billing abuse attacks in addition to horizontal scaling concerns and complexity, which is what I referred to when I said the article has a point. As you wrote, rate limiting and extra checks could get the job done in a scalable deployment, so there is more than one way to keep cloud bill from an attack.
My argument was to balance against the age because it is purely neglected in the startup community. Connections and trust could be built around the world, including the United States.
This article gives a "No True Scotsman" (https://en.wikipedia.org/wiki/No_true_Scotsman) arguement about C programming being safe in the hands of sufficiently skilled developers.

Notwithstanding the best "ace / sniper" C developers and modern compilers, scanners, fuzzers, etc., C continues to be unsafe due to undefined behavior and how easy it is for anyone (including experts) to make mistakes:

https://blog.regehr.org/archives/1520
How well can LLMs write COBOL?
Is both. They cause gravitational waves, which is how the system gets rid of energy, which allows the orbits to decay, causing the collision (and more waves).
The funny thing is that there was a time (at least with Microsoft) where you were supposedly doing it totally wrong if you didn't use stored procedures enough.

And I swear there was a time when every web developer knew that if you wanted a consistent, reliable layout for a home page, you sliced the design up into a table, and stayed away from that new CSS stuff because it was buggy and incompatible with different browsers.

The reality is that there are several very different general approaches that can work for any particular information system. Some of them will be more compatible with each other or with certain tools.

But I think that for the vast majority of applications, this comes down to trends more than any particular technical issue.

I mean, technically speaking there are an effectively infinite number of ways to organize and distribute the code and data that will given the same outputs from given inputs.

People use "best practices" as a shortcut to make it easier to judge things or decide how to approach a problem. I think one mark of a good engineer is their ability to adapt to different approaches. This actually requires more intelligence or at least energy because it means they might need to actually read code to decide if the approach makes sense.

But it will save people quite a lot of energy to simply say "we [always/never] use stored procedures here!" And also even for brilliant engineers, constantly trying to wrap your head around completely different approaches can be impractical.

So programming communities adopt their own worldviews. For the most part, it just means that you spend slightly more time on certain types of problems than the other group. But that group may not realize they are spending time on another thing.
So there are trade-offs with every approach.

Which is not to say that some
frameworks can't save you more time than others. One aspect of this is compatibility. The whole approach may get thrown off if you use stored procedures versus not, depending on the rest of the framework.

But I would suggest that there is usually just as much cultural preference as actual technical merit to these debates when you dig deep into the details.