skysight-inc/HackerNews huggingface dataset:
You're not wrong about arbitrary code execution. It's just that your statement applies to most of the packages on any linux distribution, Autotools and Cmake included, regardless of language. Many moreso than Rust due to the aforementioned features of Cargo and build.rs not requiring me to be an expert in a second language just to audit it.
Are you paying for Reddit's API or did y'all find a way around it?
All my CP-related blog posts show a step-by-step formulation of the model. Here is an example showing my thought process while modeling the generation of crossword grids using CP (note that this is substantially more complex than the Domino Fit model): https://pedtsr.ca/2023/generating-crossword-grids-using-cons...
For small teams I also think Kubernetes often greatly complicates the per-service operational overhead by making it much more difficult for most engineers to manage their own deployments. You will inevitably reach a point that engineers need to collaborate with infra folks, but in my experience that point gets moved up a lot by using Kubernetes.
StopTheMadness Pro
Oof. Thanks, guys.
> However the majority of fuel consumption in a car happens at traveling speed (highway miles).

Unless of course you drive primarily in stop-and-go traffic, e.g. delivery drivers, taxis, commuter cars, etc. Quite often you won't exceed 50 kph. For whatever reason, I've never seen (or have and forgotten) a car marketed towards this market—probably for exactly the reason that plug-in hybrids perform better in this scenario.
The Internet never forgets...Pag 44: https://retrocdn.net/images/c/c7/Edge_UK_078.pdf
I fully agree with your last paragraph, but not sure what it has to do with cloud infrastructure specifically. AWS also leverages huge economies of scale into profit, it's not like you're going to realize equivalent margins by running your own little server in a colo somewhere. You certainly won't realize equivalent availability, scalability, security, support ecosystem, etc with it either. Cloud infra can make a lot of sense even with "pets" - you just gotta make sure to understand requirements, limitations, and use the right tools for the problem. For me personally, I'll reach for cloud infra these days as a reasonable default (similar to reaching for Postgres as a reasonable database default), especially if it's managed and affordable.
High staff turnover some companies consider as a good thing
This should be called Refusenix
This is fascinating. Never would have thought neutrinos could be a problem!
In most cases where your total needs are less than a dedicated server, you're probably correct. Once you hit that level, issues like network traffic, EBS volumes, etc, really start to creep that cloud bill up fast.
Haha, the Windows screensaver Easter egg level is a nice touch ;)
Mighty microbes: Soil microorganisms are combating desertification
FBI Agent Says He Hassles People 'Every Day, All Day Long' over Facebook Posts
people are mis-reading the Debian bug report: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067708

it wasn't the apparently newly-created identity "Hans Jansen" just asking for a new version to be uploaded, it was "Hans Jansen" providing a new version to be uploaded as a non-maintainer-upload - Debian-speak for "the maintainer is AWOL, someone else is uploading their package". if "Hans Jansen" is another attacker then they did this cleverly, providing the new - compromised - upstream tarballs in an innocent-looking way and avoiding anyone examining the upstream diff.
Well done! My CP formulation is definitely not the best here. I put this model together late one night while drinking a few beers :)
TIL Wayland had an X11 compatibility layer... bless ya'll's hearts! That could not be easy.
Have to agree that this isn't a bug. It rather involved being on the other side of this airtight hatchway.

https://duckduckgo.com/?t=ftsa&q=site%3Adevblogs.microsoft.c...
So... This is an advertisement for a restaurant chain?
Love the idea, my only concern is how to trust that at some point you're not going to include sponsored products?
These texts have taught me to never make a political donation, ever.

My tactic has been to tell them if they keep texting me I will vote for their opponent, simply out of spite. There are a bunch of lists, so I’ve had to do this a few times over the last couple elections, but things over the last several months have been pretty peaceful when it comes to political texts.
Meh, WebRTC ... it's not for everyone.
Could anyone please tell me if current stable version of Debian has that backdoor or not?
Life Algorithms [pdf]
> With today's tech, it would be possible to make a computer that prevents stall of any aerofoil. Anytime an aerofoil is nearing stall conditions, do whatever is necessary to prevent it stalling by actuating control sticks in the direction to prevent the stall.

What a brilliant idea! It certainly could never directly lead to the deaths of 346 people in two separate plane crashes or anything.

On a slightly less snarky note, what do you imagine an autopilot is?
You can mail to mods too if you think something is wrong with parent comments?
Is this how the Neuralink device works?
One of the reasons I have realized is that it's sometimes about control. A manager (people, project, product) will not have as much control over an experienced employee who has potentially been at the company a long time or just has a lot of experience in general in terms of getting what they want from the employee, despite the employee having the business' best interest in mind. So it's an implicit attrition that seems to sometimes be desired.
Can't remember where I heard it but it rings true:

We train dogs but we negotiate with cats.
You're right, but accepting code from random Gmail accounts can't be the solution. Honestly the Linux kernel is a bloated mess, and will probably never be secured.
Transformer LLMs are just a bunch of MLPs (linear layers) where you sometimes multiply/softmax the output in a funny way (attention). In other words, they're arguably more "vanilla deep net" than most architectures (e.g., conv nets).

(There are also positional/token embeddings and normalization but those are a tiny minority of the parameters)
Doesn't this call for criminal charges?
Strange protocol. Why not pass a path to a file that should be `touch`d and/or written to, I wonder? Would avoid the complexity of sockets.
Would be my suggestion to.
That is true of every managed service on AWS.
I was thinking of keeping it more abstract, but I think everyone in this thread is probably right.

Screenshots added!
> Your citation gets trotted out all of the time in these arguments like anyone in 2024 can’t put a video on a website and distribute it anywhere in the world.

It's about scale, if you didn't read my first message then that's fine but just so you can ignore it again.

Me spilling 1 oz oil in my front yard is different that BP spilling millions of gallons.

Similarly Apple and Netflix teaming up is different than me and my local theater teaming up. If you don't like anti trust that's fine but don't act like it's impossible to understand.
So bad it’s good.
The X server is fairly portable, and XWayland is built directly from the X.Org sources.

It also has ports to Windows and Mac OS X ...
You turned challenges into opportunities for growth!
Big cats might be apex predators, normal house cats are just predators/prey.

Cat management is something worth working on; it's kind of annoying that many places don't have free spay/neuter locations.
Having experienced how home schooling is in the Midwest, I'd say education and homeschooling is usually more mutually exclusive there than the vast majority of public schools. (Sample size: 10 public schools, 3 home school groups)
Just so I understand, you're alleging that a U.S. agency was, among other things, submitting patches for a mainland Chinese home-grown CPU architecture (Loongson)?
Example: Half Dome in Yosemite from the 3D Area Explorer solution -> https://shorturl.at/qwGK9
Hold up, are you saying that https://github.com/jaredallard and the accounts affiliated with this XZ backdoor share a PGP key? Or something else?
"#, fuzzy" means the translation is out-of-date and it will be discarded at compile time.
If such tabletop experiments were possible, then surely the particle physicists who use these colliders would be building them? As far as I can see, they're requesting colliders because to the best of their knowledge, colliders are necessary.

A muon collider would be revolutionary in the sense that it would open up a new energy range for lepton collisions. It would also be a technological marvel.
ok so it’s sounding like only nuclear could provide a sustained electrical supply, but that has obvious hijacking concerns. Gah. Thanks!
Beware popularity in the Landsraad
> One of the objections that many people do not understand, is that systemd adds complexity. Unnecessary complexity. Boats full, loads full, mountains full of complexity.

this is and always has been such a dumb take.

if you'd like to implement an init (and friends) system that doesn't have "unnecessary complexity" and still provides all the functionality that people currently want, then go and do so and show us? otherwise it's just whinging about things not being like the terrible old days of init being a mass of buggy and racey shell scripts.
How is this adding to conversation?
Once you start importing your saved places, it may take a bit of time for them to show up but once they’re there, you can add notes, add to lists, search through your saved places by note, category, list, visited / not-visited or star rating.

I built this for my fiancée who wanted these features but I’m looking for feedback on how intuitive it is for others as well to see if there are any other features folks would like to see.

Thank you for checking out the App
I wish the image in the article was a screenshot of Wikipedia begging for donations.

https://en.wikipedia.org/wiki/File:Fundraising_banner.jpeg
> At this point, a managed Kuberentes cluster is no worse than any other option

Except in terms of pricing...?
Could be a way for Apple to buy time as well until they do have something competitive.
Plus... Wayland is literally the work of many of the original X.org devs.
Both the Chevy Volt and Toyota's hybrids rely on a planetary gear set to blend power between the gasoline engine and electric motors.

Here are the differences explained in more detail:

http://roperld.com/science/ChevyVolt.htm
300 HP = ~220 kW

I believe a Tesla can charge its battery pack at approximately this rate.
A couple things:

- remember when search first came out and websites often had their own search bar, how bad it was and how irrelevant the top answers often were. I think chat like this gets picked on more because of the natural language element, when it's not necessarily worse than previous tech

- I understand the negative press about these "failures" or flaws but it's unfortunate to see innovation discouraged. Building these things and putting them in the wild is the best way to test them, and this is still pretty low risk. They should be applauded for trying, it's their reaction that's more important. (See air canada fighting it's customers in court instead of refunding a few hundred buck over a chatbot mistake)

- related, a idea would be a kind of sandbox convention where it's made clear these are works in progress and will have issues. I don't know if that will satisfy everyone but at least it will make the readiness of the technology clear

- I hope orgs don't get discouraged from trying to build these because of the bad press
I like the idea, but $350 plus a Pi plus getting electrodes is beyond my "impulse by to try it out" price for sure.
> It's interesting how Reddit has maintained a relatively high trust within most people though

Maybe the PR companies moved up a level in the meta-game - Don't talk up your product, talk up Reddit itself, _then_ go on Reddit to talk up your product.
and moved to online. While i love reading books, it's convenient to read summaries while book reading has turned more into a hobby or something
> "Well clearly, arbitrary species A here at some arbitrary time B is the natural and morally right owner of these lands".

Which is not what the person you replied to said. I read it as "bears were there first, don't be surprised when you move there and find bears".
If there are any short story writers out there, you could create an entire genre from ideas about hallucinating AIs. Marathon did it as "rampancy" back in the 90s but this is arguably even more interesting.
I have no idea why something that appears to be a little chain of four restaurants in NY is on HN.

For those who can’t translate this, má là is the pinyin phonetic spelling of 麻辣, which is the “numbing spicy” sensation from eating Sichuan pepper or various parts of the related sanshō tree.
I think this original question was between devices within a computer, rather than within a single chip/package. Optical interconnects within high-end servers/routers are being designed today for use in the next generation. We previously reached the limits of copper pcb traces, coax has lots of problems, optical is next. It's not about latency, it's about signal integrity.

Ironically, the heat produced by the optical transceivers is one of the biggest problems.
I think if you can find a way to reconcile gravitas with quantum field theory, you're in for several igNobel prizes.
I’m sceptical of this article. I’m an indy dev using K8s at vultr (VKS) and it’s absolutely simplified my life.

The article suggests just using EC2 instead of K8s, but if I do that, I now have to manage an entire operating system. I have to make sure the OS is up to date, and balance all the nuances this entails, especially balancing downtimes, and recovery from upgrades. Major OS upgrades are hard, and pretty much guarantee downtime unless you’re running multiple instances in which case how are you managing them?

Contrast to VKS where, with much less effort, OS upgrades are rolled out to nodes with no downtime to my app. Yes, getting to this point takes a little bit of effort, but not much. And yes, I have multiple redundant VPS, which is more expensive, but that’s a feature.

K8s is perhaps overly verbose, and like all technologies it has a learning curve, but im gonna go out on a limb here and say that I’ve found running a managed K8s service like VKS is way easier than managing even a single Debian server, and provides a pile of functionality that is difficult or impossible to achieve with a single VPS.

And the moment you have more than one VPS, it needs to be managed, so you’re back at needing some kind of orchestration.

The complexity of maintaining a unix system should not be underestimated just because you already know how to do it. K8s makes my life easier because it does not just abstract away the underlying node operating system, it obviates it. In doing so, it brings its own complexities, but there’s nothing I miss about managing operating systems. Nothing.
No obvious need to reinstall if you didn't use ssh and expose it publicly and are not a politically important person. All signs suggest that it was a nation state attack, and you are likely not a target.
If you love cats, keep your cat indoors. They are quite happy when provided for - especially if you've got two.

My wife works full time at a nonprofit no-kill shelter, and the amount of sick and miserable cats that come in rescued from the outdoors is mind boggling. Strays do not live happy (or very lengthy) lives.

If you have strays around, consider enrolling in your local TNR (Trap, Neuter, Release) program, to help lower the population, as spayed males still hold territory and prevent intact males from breeding.

If the strays are friendly, consider contacting your local no-kill shelter and seeing if they can take them in to be cared for and put up for adoption.
If you were following Google Project Zero's policy (which many researchers do), any in-the-wild exploits would trigger an immediate reveal.
If an AI chatbot cannot reliably produce correct information in matters of law/compliance like this, I do not think it should be permitted to be presented to regular users in any fashion, beta or not.

It is especially egregious when it may be presented on a website that is meant to serve as an authoritative and reliable source of truth being that it is run by a government entity.

We already know plenty of people will just ignore the warnings of not taking its results at face value and just trust what it says, since they will state things authoritatively that are simply not true.
The most exciting part about ternary or binary weights is the inevitable hardware revolution for AI dedicated chips that's going to result from it.
"Constant improvement" sounds like "constantly playing catch-up". Besides that, someone with TS can be arrested and charged, and I don't want amateur contributors.
Bridges aren't ready for today's ships
OpenAI's "end goal" has OpenAI becoming a >$1T (100x their >$1B investment) company en route to its non-profit incarnation. Hardly benign
> IANAL

Best to leave it at that.

It's not worth your time or the reader's time trying to come up with a technicality to make it perfectly legal to do something we know little about, other than it's extremely dangerous.

Law isn't code, you gotta violate some pretty bedrock principles to pull off something like this and get away with it.

Yes, if you were just a security researcher experimenting on GitHub, it's common sense you should get away with it*, and yes, it's hard to define a logical proof that ensnares this person, and not the researcher.

* and yes, we can come up with another hypothetical where the security researcher shouldn't get away with it. Hypotheticals all the way down.
I believe he was indeed, in a sense, hunting peasants.
This only ensures the backdoors are coming from governments that issued the clearances, nothing more. I prefer more competition, at least there is incentive to detect those issues.
That's like recommending people to buy a trailer to haul their groceries because transportation companies make a profit on hauling cargo.

Maybe some people do need a trailer, maybe some do not. As long as you don't blindly follow the cloud you can also profit from them.
I don't think CSV can ever be "fixed." Its popular because there is always someone naive enough to think that it works, and ignorant of specs that handle corner cases.
They are completely different things.

Init just a more or less normal program that Linux starts by default and by convention. You can make it boot straight into bash if you want. I created a little programming language with the ultimate goal of booting Linux directly into it and bringing up the entire system from inside it.

It's just a normal process really. Two special cases that I can think of: no default signal handling, and it can't ever exit. Init will not get interrupted by signals unless it explicitly configures the signal dispositions, even SIGKILL will not kill it. Linux will panic if PID 1 ever exits so it can't do that.

Traditionally, it's also the orphaned child process reaper. Process descriptors and their IDs hang around in memory until something calls wait on them. Parent processes are supposed to do that but if they don't it's up to init to do it. Well, that's the way it works traditionally on Unix. On Linux though that's customizable with prctl and PR_SET_CHILD_SUBREAPER so you actually can factor that out to a separate process. As far as I know, systemd does just that, making it more modular and straight up better than traditional Unix, simply because this separate process won't make Linux panic if it ever crashes.

As for the service manager, this page explains process and service management extremely well:

https://mywiki.wooledge.org/ProcessManagement

Systemd does it right. It does everything that's described in there, does it correctly, uses powerful Linux features like cgroups for even better process management and also solves the double forking problem described in there. It's essentially a solved problem with systemd. Even the people who hate it love the unit files it uses and for good reason.
Some here may be interested in this quote from the article: "The data tells us that things like not overeating or the Mediterranean diet are positive. I think exercise is the one that is underappreciated because"...
> Though I'm not a malicious actor

Yeah, the actor part seems unnecessary now.
It's not touted as a feature by any Rust developers I know of. The Rust ABI is merely still stabilizing. See: https://github.com/rust-lang/rust/pull/105586
tbf it's common for YouTube uploaders to be paid to advertise products that barely work
To your top point, providing a wrong answer is significantly worse than providing an irrelevant one because the latter can be easily identified as such by the requester.
Here's an example from right now - go to https://www.treasurydirect.gov and search for "ibond" - zero results. You have to search for "I bond".

If you don't know that, you get horribly confused.
Funny to see this on HN. MaLa Project is easily in my top 10 restaurants in NYC. They do authentic and really fantastic Sichuan "dry pot" (aka stir fry). If you're into Sichuan-style cuisine, which leans heavy into layering multiple strong flavors together with spiciness and unique "numbing" from Sichuan peppercorns, it's really hard to beat this place anywhere in the US. It's one of the few places I genuinely miss since leaving New York.

They're on the Michelin Bib Gourmand list, and deservingly so. For my money, their food is better than some Michelin-star places.

I never realized they had such a unique and nostalgic website. I guess that's why it ended up on HN.
Ok thanks for letting us know. That's not a good experience so we'll work on making the UX snappier.
Or, as a cat-loving friend of mine succinctly sums up the difference between dogs and cats and their relationship to us:

Dog: The humans feed me; they must be God.

Cat: The humans feed me; I must be God.
This is all I can find on them.

carrd.co jiat0218@gmail.com business https://jiat0218@gmail.com.carrd.co
eBay JiaT75 shopping https://www.ebay.com/usr/JiaT75
giters jiat0218 coding https://giters.com/jiat0218
giters JiaT75 coding https://giters.com/JiaT75
GitHub jiat0218 coding https://github.com/jiat0218
GitHub JiaT75 coding https://github.com/JiaT75
Mastodon-meow.so.. jiat0218@gmail.com social https://meow.social/@jiat0218@gmail.com

Beyond that, nothing surefire. (This is all publicly queryable information, if anyone is curious).
"Sorry, We're Fresh Out Of Gravitas" is going to be the GSV name in my Ian Banks Culture fanfic.
AI accuracy/safety is not being talked about enough. With a chatbot like ChatGPT, if something is wrong worst case is that you have bad facts.

But with these city bots, airline bots, Alexa, etc., getting it wrong could have dire real life consequences.
Sounds like you were upset that you had a job looking at a door, and took it out on people.
I think you are confusing non-state e.g. ransomware groups, which are usually not part of a government (although some exceptions like North Korea likely exist) with state-sponsored hackers who are often directly working under military command. Soldiers are not "dicks on the internet".
Thanks! Super interesting how many different approaches there are to this problem. Definitely encountered these challenges, and we think there's solutions to them eventually that we have to build towards. I'll drop a message sometime, would love to chat :)
I witnessed this phenomenon myself, and I'm decidedly not a kook.

I don't have a satisfactory explanation, despite some rather interesting contributions from HN readers.

My comment in this discussion: https://news.ycombinator.com/item?id=39861066

My original observation: https://news.ycombinator.com/item?id=33295560