skysight-inc/HackerNews huggingface dataset:
Chrome's console : Refused to frame 'https://player.vimeo.com/' because it violates the following Content Security Policy directive: "frame-src 'self'".
Seems a little different. Based on a quick read

It is a little different but a thing that you might have missed in the quick read is that one of the things he was accused of was installing and using a backdoor.
And perplexity.ai and phind annotate their results with footnotes, linking to the source of the information.
A moment of of history that perhaps the west should learn from, before allowing 'culture wars' to escalate further.
But often with the support or lobbying of private interests. Generous souls like Lorrin A. Thurston of Hawaii, who would like you to remember him as the newspaper publishing philanthropist who used his wealth to promote his interest in volcanology and persuade Roosevelt to create the Volcanoes National Park. Which is true - in 1916, the park was established by Woodrow Wilson (helped by Teddy’s endorsement).

But the same kind of private interest taking an interest in the affairs of state has its dark side too: Thurston also was the author of the “bayonet constitution” which undermined the Kingdom of Hawaii's sovereignty, and formed the ‘committee of safety’ which enlisted the US Marines in a coup that overthrew Queen Liliʻuokalani, and installed Sanford Dole (the fruit guy) as and President, and ultimately brought about the annexation of Hawaii.
She needs to read Circulation of the Elites.

People are not complex. They have 3 inch chimp brains. As the envrionment that brain exists in, gets more and more complex and unpredictable the brain is going to crash in all kinds of ways(Rationality is Bounded).

And the elite protect their own ass and each other, whenever that happens cuz there is no other move. There is such a large ever growing gap between them and the plebs it doesnt matter what the plebs know. Look at outcomes of Snowden and Assange.
Github should probably remove the dopamine hits of green checkmarks etc. like in serious stock broker apps
It's one more step in the build process. Maybe one day we'll imitate Zig and let C compilers be called via Xr0 though.

It also buys as the possibility of beauty. Shoehorning the annotations we're introducing into the preprocessor leads to constructions that aren't nice.
> Spotify does music and podcasts in one app.

and it's super fucking annoying. my kingdom for the ability to tell Spotify I WILL NEVER LISTEN TO A PODCAST
Is anyone else receiving daily political texts or spam messages?
As a developer who relies on text message alerts, I've had to block nearly daily texts in the past few months. These texts, asking for donations, opinions on polls, etc., are becoming a nuisance. It's ironic that the same individuals advocating for an end to spam calls are the ones engaging in this bothersome behavior, targeting potential supporters. I’ve observed similar behavior through email as well.
He also was a worthy successor to Martin Gardner in his Scientific American columns, and like Gardner, collected those columns into a series of books, The Tinkertoy Computer, The Magic Machine, and The Armchair Universe. What made his columns a bit different from Gardner's is that writing in the 1980s and 1990s, he often presented the puzzles and what not as ideas for readers to program on their home computers.
Maybe they'll ban Netflix. oh wait.

On more serious note, only netflix can run it since china will punish companies for any plots that show China in a negative light. You'll never see China as antagonist in a modern movie outside of netlix. They'll go after parent companies as well.
Except this change was made in 2023, it is just scary how good this threat actor was.
The ancient Roman alternative to daylight savings time
Ask HN: How do I find "tech-enabled" jobs vs. "tech jobs"
I’ve been out of tech for a few years but now want to get back into. I have ~ 15 years of programming experience, but it’s mostly at small startups.

I’d like to work for a normal company that relies on tech but isn’t a tech company. I’d prefer something less than 500 people.

It seems like all the job posts I see are for either giants like Walmart or series-X companies looking for leet coders they can work to death.

Any ideas on where to look for tech-forward SMBs that are stable don’t feel compelled to become a unicorn?
Generative AI to quantify uncertainty in weather forecasting
Well duh - when something is/feels wrong those with options bail first. Not exactly rocket science
EEG channels with low-cost PiEEG device
Contact with Europeans spread new diseases that killed off the vast majority of the Native American population. So it's likely Europe was more populated but not to the degree that settlers found here -- they were moving into a post-apocalyptic wasteland.
The binary was an xz test file that contained a script that patched the c-code.
The original UV-5R had notorious spurious emissions. The slightly upgraded version GT-5R is a lot better about that. There was a test report (in QST iirc) that is linked from the GT-5R page on radioditty.com. I have been wondering whether the UV-K5 has the same improvements that the GT-5R has. If anyone cares, the fairly well regarded Yaesu FT-65R is a repackaged Baofeng with some analog tweaks. Connoisseurs tend to prefer the older FT-60, a heavier and clunkier radio that is still being sold.
You're right - the two exploit files are lzma-compressed and then deliberately corrupted using `tr`, so a hex dump wouldn't show anything immediately suspicious to a reviewer.

Mea culpa!
I feel like if anything it will be easier to target ads with LLM queries.

The user intent will be so much easier to identify, and it would be trivial to show ads based on it.
I... don't see your point. Tracking the dependencies a static binary is built with is already a feature for build systems, just maybe not the ones Debian and RH are using now, but I imagine they would if they were shipping static binaries.

Rust isn't really the point here, it's the age old static vs dynamic linking argument. Rust (or rather, Cargo) already tracks which version of a dependency a library depends on (or a pattern to resolve one), but it's besides the point.
Unfortunately, experience. A good dose of people skills help, but you need to know what makes real money move and get contacts in your area. Find someone who has succeeded in your area, and try to get into those circles.
Candidly how would someone protect against a vulnerability like this?
Despite playing a broader role in emergency response, fire departments tend to see their advisory role as solely scoped to limiting fires and fire deaths. Preventing car crashes, for example, isn’t something fire departments have historically seen as their responsibility. And while firefighters are on the front lines of contending with the problems that come from homelessness—fires and EMS calls from encampments, for instance—addressing the root causes of homelessness has been well beyond their scope.

That's a fair point. In my years in the fire service, We certainly never talked about reducing car crashes, or things of that nature, from any "it's related to what we do here" perspective. OTOH, I was with a very rural department, not a major urban department, so the concerns do differ a bit anyway. But still, I get what the author is saying here, and that resonates as mostly true.

Regarding lane widths though: one reason the fire service may take the stance they do on that is simply the question of apparatus access. Fire apparatus have, for a variety of reasons, grown steadily larger over the decades. And as buildings get taller, ladder trucks need longer ladders, which leads to longer trucks which don't easily tolerate smaller streets, tighter turning radius, etc. So there's a certain inherent conflict here on that basis. Some departments actually run a small number of mini-pumpers (scaled down fire engines, basically) which are first due in areas with tight, congested, narrow streets. But this has its own issues regarding cost, staffing, etc.
shhh. don't make it easier for the bots.
I’m not sure Hassabis’s time would be well spent thinking about, I dunno, how to allocate headcount to the Google Cloud Enterprise Sales team. Or glad-handing with world leaders to convince them that ad tech can self-regulate.
> non-fiction book by Frank Abagnale

yea, as others have pointed out, non-fiction is not appropriate label for this book.
>A two years long con with real useful work is a lot of patience and effort vs. just stealing a weakly protected account.

The long-con theory seems a bit more plausible at the moment

https://github.com/google/oss-fuzz/pull/10667
It's just a leak from an internal allocator
> They do have insane pattern recognition skills when it comes to models. Good mathematicians also have this.

The skills physicists and mathematicians build aren't very comparable.

Physicists has the more complex equations and models, probably most complex of any field since physicists often invent new math to model things. Quantum field theory is insanely complicated math wise with infinite number of infinite integrals, mathematicians has still not figured out how to formalize that.

Mathematicians focuses much less on modeling and equations so they aren't as good at that, instead they are much better at formal proofs and theorems. The skills are very different and doesn't translate well.

Or in other words, physicists are experts at making complex math tools to model things. Mathematicians are experts at verifying tools that exists. Those two skills has less overlap than you might think.
How can you learn from the past if you censor the past?
Imagine if they had not reimbursed it!
jank development update – Syntax quoting
I'm neutrino on the phrase
Claiming that memory that's freed eventually isn't actually leaked may be factually true, but it isn't usefully true in all contexts.

A more vague but more useful definition of a memory leak is that if the memory consumption has a net increase over time, and that increase causes one or more problems, it's a leak.

Leaking a few kB or even MB in a short-lived client program isn't necessarily a leak in a practical sense.

Not freeing a few kB in a long-lived server process is a leak in practice if the process is going to crash or suffer degraded performance before they'll be eventually freed.
It still can't communicate information faster than light and the sun god can't know your prayers earlier than 8min after you made them
Interesting angle. Of course, most people would not remember to take the deduction for the cost of tickets purchased.

I think you can deduct gambling losses, but they can only be used to offset gambling gains. So if you're a net loser (and on average, lottery players are), then they wouldn't be able to deduct the full amount: https://www.irs.gov/taxtopics/tc419
There are so many variations of Linux/FreeBSD and weird setups and environments that it's almost guaranteed that you'll hit a snag somewhere if you do any major modification like inserting a backdoor.
Banned in so many countries because it's rife for abuse, yet somehow people think it's a safe option in a country as big as the US.
Ask HN: Can we not update company section in application once submitted?
Hi,

I just wanted to update the company section of my application but I don't see any option to update it. There are options to update the rest of the sections (Team, Fundraising, etc) but not the company.

Can we not update it? Or am I missing something?
Germany doesn’t have a problem showing Holocaust movies, and America doesn’t have a problem showing movies about segregation and lynchings. Both kinds of movies regularly receive highest national awards like the Oscars.

The West remains far from this kind of social amnesia.
The manufacturer didn't open up the firmware for THIS radio either. They made the radio reflashable so that they could release new binary blobs as requirements changed. Then people reverse engineered the firmware that came with the radio, and began writing new stuff. It's more like Rockbox than an actual open radio.
The eBay story for anyone unfamiliar: https://www.cbsnews.com/news/investigation-ebay-employees-st...
that's an interesting idea -- we have been seeing this play out successfully as well (like you mentioned, Wired + sponsored youtube videos + etc). though that would be useful for profitability, we're afraid that may compromise our reputability as being the knowledge of the public. instead we're looking for ways where, when we expand to more opinions and reviews, we can robustly filter out those that seem disingenuous / are sponsored. curious as to what you think about this "filtering" out + if you have any ideas of going about this :)
Apparently I'm underpaid lol, someone upthread says "Friend getting paid $200k more than me" and I've never been paid $200k in my life
Yeah it always seemed unlikely that “the law does not apply” conclusion makes sense there when judges regularly “nope” less solid procedural arguments out of their courts.
Very cool, but I'm generally weary of these tools because it seems trivial for a creator to deliberately insert vulnerabilities into a random script on github that claims to "harden" systemd?
This seems like a great way to invest in supporting open source projects in meantime if these projects are being used by these actors. Just have to maintain an internal fork without the backdoors

Maybe someone can disrupt the open source funding problem by brokering exploit bounties /s
That's not entirely true. autoreconf will regenerate m4/build-to-host.m4 but only if you delete it first.
I'll believe it when I see it. There will always be tough decisions, uncertainty, and an C-suite concerned with covering its ass.
Until the CSP is fixed, you can view it here: https://player.vimeo.com/video/116207678
I've spent this week re-writing a significant document, section by section, with Gemini Advanced. It had opinions (some were offered straight, and some with caveats given other statements in my document), and readily highlighted gaps in the passages.

I was impressed. I'm still doing a good portion of the human-does-writing bits, but things I'd wanted to include, but have forgotten along the way -- or which are buried in notes I didn't give to Gemini, were brought to my attention again.
And engage in jolly co-operation!
Can this be applied to IDK Refactoring, Intermediate Reoresentation design, or Compilation?

"Codemod"

/? codemod: https://hn.algolia.com/?q=codemod

https://news.ycombinator.com/context?id=39139198
“You want a world where only the rich can create beautiful experiences. You're either rich or short sighted.”

Being rich to create a beautiful experience is neither required nor does it require a synthetic voice to achieve.

It does require effort and being rich can reduce that effort for sure.
Yes, whatever is not written in any books, AI will have to learn directly from the feedback generated by the environment to its actions.

AlphaZero discovered go from scratch, and beat us who invented the game and had thousands of years to practice it. This is how powerful a teacher can be the environment.
sorry about the loading issue -- we'll look into that right now!
The regular software engineering market is very rough to get jobs in right now, particularly at lower levels of experience
There actually is a return address on the back of the envelope that was open. However, given the story so far, it seems remarkably generous to trust that anything sent back there would firstly arrive at all, secondly result in a valid replacement for the affected stamps being sent, and thirdly result in that valid replacement reaching us properly.

(For avoidance of doubt, in my previous comment, I meant that we had no opportunity to refuse the delivery.)
> I missed the part of the article where a former student said that, can you show me?

I apologize, I wrote what I was thinking down wrong. They would vote in favor of Prop 13, which is bad. Not sure why I wrote it backwards. It's true that they do not talk about this. But Prop 13 is still law. It is a popular law. Even though it hurt them.

> Their criticisms are about their right to privacy being violated by an undercover reporter.

Where did the reporter violate their privacy? She didn't write anything about it. She was indeed trustworthy. In a sense she met her obligations as a student, however pretend. But she did what a student would do under that covenant. And by the way, students violate each other's privacy then all the time. They aren't reporters, but they also go and tell the secrets she didn't, so are you going to say those students are the antagonists?

Also, she had the approval of the administration. Perhaps they could have said that the peer space or whatever it is was off limits, but truthfully I think it is a much lower drama office than it sounds.

You are getting hung up on really modern and broad meanings of things like privacy and consent and whatever. This isn't intersectionality programming Code of Conduct world. There's a specific thing and a specific harm, that isn't interesting at all, that occurred, in that specific place, with specific students, that doesn't generalize away from, well the students are the antagonists. That is the surprise of all of this. If she hadn't been in that peer counseling office, those same students would be just as pissed off, and they would still be looking out for #1, and still be missing the point entirely.
Exactly. If we assume the backdoor via liblzma as a template, this could be a ploy to hook/detour both fprintf and strerror in a similar way. Get it to diffuse into systems that rely on libarchive in their package managers.

When the trap is in place deploy a crafted package file that appears invalid on the surface level triggers this trap. In that moment fetch the payload from the (already opened) archive file descriptor, execute it, but also patch the internal state of libarchive so that it will process the rest of the archive file as if nothing happened, and the desired outcome also appearing in the system.
Assume that immediately after executing any contract, the counterparty will be purchased by the Devil. Draft accordingly within reason.
no, the addition of 'to me' makes it objectively clearer. unless you're intentionally being obtuse, right?
How WhatsApp became the world’s default communication app
It's undeniable—LLMs (Large Language Models) are now a formidable challenger to Google's search dominion. While Google Search still holds its ground as the go-to in many scenarios, its dominance isn't as unshakable as it was a couple of years ago. There are now numerous instances where ChatGPT, Claude, or Perplexity provide more relevant results than Google Search. Moreover, these LLMs are evolving at an astonishing pace—far outstripping Google Search in terms of development speed.

Google possesses incredible engineering prowess, and the Gemini project has proven to be extremely potent. However, adapting their business model to accommodate LLMs demands a level of vision and capability from their management that we've not witnessed from Google's executive ranks in quite some time. I'm not ready to write Google off entirely because of their potential, but I've grown skeptical of their current leadership. I remain open to being pleasantly surprised, though.

PS: My personal experience with the Gemini project has been stellar. It's enabled me to produce high-quality code, underscoring that Google still has much to offer—provided its leadership can effectively leverage its resources.
Same article was flagged & killed here less than an hour ago.

This site really isn't about Australia, nor soccer, nor sports, nor gender.

Other than screaming "I am angry, so everyone HAS to pay attention to me!!!" at the web...is there some point to your posting & then re-posting this on HN?
As far as I remember, he added no backdoors.

He was a consultant/sysadmin for Intel, and he did 3 things which he thought his employer would support, and was astonished to find that not only did his employer not support, but actively had him prosecuted for doing it. Ouch.

1. He ran a reverse-proxy on two machines so he could check in on them from home.

2. He used the crack program to find weak passwords.

3. He found a weak password, and used it to log into a system, which he copied the /etc/shadow file from to look for additional weak passwords.

https://www.giac.org/paper/gsec/4039/intel-v-randal-l-schwar...

https://web.archive.org/web/20160216204357/http://www.lightl...

He didn't try and hide his activities, and didn't do anything else untoward, it was literally just these things which most people wouldn't bat an eyelid at. These days, it is completely normal for a company to provide VPNs for their employees, and completely normal to continually scan for unexpected user accounts or weak passwords. But... because he didn't explain this to higher-ups and get their buy-in, they prosecuted him instead of thanking him.
> I can easily find that information without knowing what any individual is making.

How do you usually find that information?
Lots of things are crimes even though they're just offering something to a victim who willingly accepts it, e.g. phishing attacks, fraudulent investment schemes, contaminated food products.
> imagined

Cargo already has this information for every project it builds. That other systems do not is their issue, but it’s not a theoretical design.
that chrome - erm - chrome is such a throwback
Show HN: CLI Simulator
With my CLI Simulator, you can now practice and explore various commands directly within your browser, without the need to install any additional software.
Several years back, I developed an education platform using Apache Guacamole for a startup. Its robust functionality and high level of customization made it an exceptional choice. I can only imagine how much more powerful it has become since then. Kudos to the devs for their invaluable contribution to the OSS community.
Did you export your subscription or queue from GP? They promised this in Dec23.

I was a late comer to podcasts, and i just liked the clean GP design.
Feed forward networks are effectively DAGs

With the smaller model size, quantized models have less accuracy and less stable training, but large models take advantage of increased parallelism.

Binary search is more linear, circuits are a better lens than turing machines.

While it still needs to be verified, if you look into what a uniform consent depth threshold circuit is, that will help.

Although I guess binary weights may be in AC0 and not TC0, but that may not hold with billions of parameters.
Way too much, as shows the spreading obesity epidemic.
Already done. We are talking about a key/value store here. I don't get what all the histrionics is about.
Yeah according to their website[0] it looks like majority of the past contributors were Finnish so nothing odd about the hosting provider. On the same page it says that Jia Tan became co-maintainer of xz in 2022.

0: https://tukaani.org/about.html
Mozart: Locked in at Bertramka?
>Formula-E is also known as "Formule No-Engines therefore nobody watches it". Sad but true.

What absolute rot. Last year had 334 million viewers, putting it above NASCAR in viewership.
Except that doesn't match reality.

Someone has worked on xz for several years. Are you saying that this somewhat active contributor was likely actively contributing, then all of a sudden stopped, also stopped paying attention, and also allowed their account to be compromised or otherwise handed it over to a nefarious party?

That fails the sniff test.
As far as I saw they never lowered salaries. They would say "the market is down this year, so you won't get a rise, but you're still at the top of your market". You could always go out an interview and come back with new data if you got a better offer.
We have also cloned Unix entirely since 1980, and extended and improved it. Yet, we are booting the systems using shell scripts where an unquoted variable stops the show. Why is that?

Why is there still a C:\ drive in personal computers, and an invisible device called PRN in every directory?