skysight-inc/HackerNews huggingface dataset:
Honestly it seems like a state-based actor hoping to get whatever high value target compromised before it's made public. Reporting privately buys them more time, and allows them to let handlers know when the jig is up.
the account was either sold or stolen
He was just (50 minutes ago) removed from the oss fuzz repo.

I hope this also (at least temporarily until verification of 'bad/good') remove him from the org?
Formula-E is also known as "Formule No-Engines therefore nobody watches it". Sad but true.

One of the big reason people pay to watch motorsports is for the noise and rumble of ICEs. It's no coincidente that Formula 1 kept loosing viewers and money the more cylinders they were reducing for the sake of "environmentally friendliness", even though the carbon emitted by their V12-V10 ICEs was dwarfed by the gargantuan amount of carbon released to move that circus across the continents all year.

So unless you ban ICEs in motorsports as well, I don't see how you can convince investors to spend big money in Formula-E development, considering how little viewership it generates, in oder for it to spawn cutting edge tech that can later trickle down to road cars like it was with F1 decades ago.
Oof, this is on my Sid laptop:

{0}[calvinow@mozart ~] dpkg-query -W liblzma5
liblzma5:amd64 5.6.0-0.2
{0}[calvinow@mozart ~] hexdump -ve '1/1 "%.2x"' /lib/x86_64-linux-gnu/liblzma.so.5 | grep -c f30f1efa554889f54c89ce5389fb81e7000000804883ec28488954241848894c2410
1

Glad I stopped running sshd on my laptop a long time ago... still probably going to reinstall :/
The best part is everyone disabling security tests that started failing
It doesn't need to be 100% perfect or watertight. Almost no law is.

All laws are easy to break. I could quite literally walk up to someone and punch them in the face right now. And chances are I won't be caught.

I could also push someone. Would that be assault? What if I merely touch them? Almost everything is a spectrum and has gray areas.
DeepMind was Google's life-line. This man (Hassabis) should be CEO of Google.

We have given Sundar enough time and without DeepMind, Google would not have Gemini and he did not put DeepMind to use for a long time until now.

Google AI that made 'Bard' is NOT DeepMind. You should be looking at Google DeepMind, which made breakthroughs like AlphaGo, AlphaCode, WaveNet, GraphCast, etc.
Red Hat seems to be confused about which versions of Fedora are affected. The URL says "fedora-41" and matches the HN title, but the actual blog page has been changed to read "Fedora Linux 40" in the headline. The blog page HTML title still says "Fedora 41".

Edit: The Red Hat blog currently says "At this time the Fedora Linux 40 builds have not been shown to be compromised." and "Fedora Linux 40 users may have received version 5.6.0, depending on the timing of system updates." which seems to be a contradiction. Any build of xz 5.6.0 or 5.6.1 should be considered compromised.
Of course i am depressed, i have had some other revelations in the past 2 years that have shattered my psyche even more. You see, i was raised in a family where there is strong belief in God and living a good, honest and hard working life. but i finally realized that this entity my loved ones so strongly believe in to get through tough times and help people selflessly is a sham, that has caused terrible suffering that we can never quantify, probably is also the reason for our senseless overpopulation.

So it turns out life is inherently meaningless with no higher purpose, and i also wasted a lot of it daydreaming about making it big, and making the world a better place but put zero effort in that or any other facet of living.

Since life really doesn't have meaning, having money would atleast give me and my loved ones security and the ability to do nothing (which i love) but to get there, i need to be a productive, crazily-driven tech czar or something similar. And what better place to ask this than Hackernews. America's crazy work culture is why the country and it's people are so success and i want a piece of that pie.
I like how the first thing you mention liking is Americans giving you extra money.
Today, it is harder to keep your kid in school if they have a stuffy nose, than it is too justify why you are keeping your kid out of school. Winters are tough: our school nurse will send my kid home if he crosses some line that isn't very clear, even if he is fine otherwise.

I just don't see it as realistic that my kid be 100% healthy to go to school, especially during snotty nose season. But then again I went to school no matter what when I was a kid, it was definitely an extreme in the opposite direction. There must a balance between protecting the school and letting the kid get a good education that isn't interrupted too much (consistency and stability is also important).
It would be nice to be able to compile all Xr0 code directly with a regular C compiler though. It's more convenient than running it through a program, which is a bit of a headache sometimes.

For complicated annotations, instead of

void foo(int* x) ~ [ free(x); ];

They could do:

#include <xr0.h>
void foo(int* x) XR0( free(x); );

Then this will compile in a standard C compiler (assuming the XR0 macro is defined properly in xr0.h)
Seems a little different. Based on a quick read, he gained unauthorized access to systems.

In this case, backdoor code was offered to and accepted by xz maintainers.
The app has a button to open the drivers door. Yes, still stupid not to have normal handles or a way to open the passenger doors, but not as bad as the TikTok videos make out.
Everybody here In jumping into the pure malice bandwagon, I have a better hypothesis.

Abandonment and inaction, the actual developers of these tools are elsewhere, oblivious to this drama, trying to make living because most of the time you are not compensated nor any corporation cares about making things sustainable at all. This is the default status of everything your fancy cloud depends on underneath.

An attacker took over of the project slowly and stayed dormant until recently.
What I find really annoying is that doctors still won't sign off on a colonoscopy until you're 45. They will, but they do it in a way that apparently makes it not covered by insurance, despite the fact that a family member was diagnosed with colon cancer ~8 years ago. The current guidance says I shouldn't get one for another 13 years.

Everyone I have talked to about this has told me to just lie and say I have symptoms I don't have so I can get the "right" colonoscopy ordered that insurance will cover. It seems really stupid.
Nice! I rewrote it in z3 and was able to avoid the if-elses by tracking the occupancy of each cell as an integer, and constraining it to exactly 1: https://gist.github.com/rjeli/a1612da0e3c8b99ec4514e689ebdfa...
Yeah, it's greed. Greed by advertising networks, greed by the companies placing the ads, greed by the reader wanting unlimited content for free.
Thanks, we really appreciate it! This is something we've been thinking about too. One of the things that we've noticed is that video reviews have a lot more effect on us than almost all text reviews, which are harder to fake (for now). We're thinking that letting people upload their own video reviews will help solve this problem as long as we can detect video deepfakes, but that's definitely not a complete solution (like you said though, not sure anything is).
I could be OK with that, except that YouTube Music is an awful podcast player. It doesn't have a way to queue up episodes. Also listening to podcasts severely degrades the music experience, the interface intermixes the music and podcasts too much.
You're wrong about that anyways.

It appears to be a documentation miss in the REST API doc.

https://learn.microsoft.com/en-us/powershell/module/az.autom...

The AZ module is using the REST API QED - it supports the password.

In this case probably what you need to do to sniff out how it is working with the REST API is to run it in powershell with -verbose -debug and see what it is doing (or configure powershell for the fiddler proxy).

My point - just to remind you (I can almost hear you typing) - is that it's more likely to be the fault of Terraform. Undocumented Portal API's from what I have personally seen are all "read" not "write".

Yes, the docs suck.
Not sure what you mean, why wouldn't there be a gradient? There is a problem that small changes to weights may have no effect (eg ((0 + 0.3) + 0.3) + 0.4 = 0 if you have to round the result to 0 or 1 after every step), but to fix this I believe everyone maintains high precision weights for the backwards pass, from which the quantized weights are derived.
I actually just did that: https://news.ycombinator.com/item?id=39868106

Answer - Texas and Illinois are higher per capita, but Texas has no income tax. Might be hard to directly compare.

You can compare dollars per student, however.

According to https://worldpopulationreview.com/state-rankings/per-pupil-s...

CA: $13,642
TX: $9,871
NY: $24,881

By this, CA and NY should have the best schools, and Texas's should be absolute ass.
Met the man in person, had a really long chat with him.
Made me realize how he truly was one of the smartest people alive at the time.

Really sad news...
It is naive to assume increased tax revenue doesn’t equate to increased power for those who control how that money is spent.

It is OK to make an argument against taking power from one group by force and giving to another.
That's how I understand it. A build script that's in the releases tarballs but not the git repo, checks to see if it's being run as part of the debian/build or rpm build processes, and then injects content from one of the "test" files.
> If you are experiencing rage or severe anger, Safe Horizon is one hotline to keep on hand. Safe Horizon can connect you with anger management counseling and other services with a stated mission of providing support, preventing violence, and promoting justice. Safe Horizon's 24-hour hotline is reachable by calling 1-800-621-HOPE (4673). Consider saving this number in your contacts if you need it.

https://www.betterhelp.com/advice/anger/the-anger-management...
That's awesome! It comes down to mindset by the people running the company
I should start a food recipe site that’s full of absurd parodies of these stories.

All the recipes would be lifted from food packages.

I could alter them slightly so they wouldn’t work right unless you read randos’ corrections in the comments. I would never fix the recipe itself.

The authentic Web recipe experience!

[edit] on reflection, I think I just accidentally described the exact process for creating a “serious” recipe ad-impression-farming website.
> It is awkward

This is why I don't discuss my salary, nor do I want to know what my coworkers make. It's not information that is terribly useful, but can make for very awkward situations.

I do want to know whether or not I'm making a salary that is in line with the norms in my area, but I can easily find that information without knowing what any individual is making.
Would they also do the opposite now that the tech labor market is going sour? "

We got 1000 qualified applicants and a bunch accepted our low ball offers, your salary is reduced by 25% "
https://github.com/explainers-by-googlers/Web-Environment-In...
Wasn't that what was said for the LHC?
I guess it depends what you consider winning. The west won both WWI and WWII, but only the latter resulted in a long term peace with Germany.
This sounds ... quite "woo" as in the standard stuff that is a miracle product to save everyone from everything.
I've had Google Translate translate the draft bill PDF into English:

https://f001.backblazeb2.com/file/spiffytech-public/german_e...
Oops, you're absolutely correct. Deleted (via edit) my comment above. Thanks.
It seems like it would be great for any kind of voiceover work or any recorded training or presentation. If you want to correct a mis-speak or add some information, instead of re-recording the entire segment, you could seamlessly update a few words or sentences.
Kate does support it. There is a checkbox somewhere in the settings to enable exactly this behavior. I use it together with sessions.
Why 'me'?
The US used to have many competitors to the bison. Many different kind of larger bison. Different types of horses. Giant sloths and so on.

The European Northern plane just turned more into forest rather then remaining more open.
Not a stupid question at all.

Early quantization approaches just quantized a high-bit-precision pre-trained model - no need to calculate gradients on the quantized weights. BitNet[1] changed the game by training a low-precision model from scratch. It achieves this by keeping high precision in the gradients, optimizer state, and in "latent weights" which are then quantized on the fly. I don't really understand the finer details of how this works, so check out the paper if you're interested.

This article's approach is interesting. They start by quantizing a pre-trained high-precision model, and then they fine-tune the quantized model using LoRA (which dramatically improves the performance of the quantized model). They don't talk about the bit depth of the values in the LoRA matrices, so it may be that those are higher bit-depth.

[1] https://arxiv.org/pdf/2310.11453.pdf
As a 1Password user, I just got rather nervous.
AntennaPod is what I moved to. I miss having the built-in sync between devices that I had with Google Podcasts, but AntennaPod is otherwise great.
I guess it seems like the operational parts are a bit poorly done. Valgrind issues, adding a new version with symbols removed, the aforementioned performance issues. Like i would assume the type of person who would do this sort of thing, over a 2 year period no less, would test extensively and be sure all their i's are dotted. Its all kind of surprising given how audacious the attack is.
Truth Social slips into the red as Trump Media stock hits turbulence
thank you! i completely agree -- i often go to reddit when looking for tv show recommendations because of its honest advice from the community (maybe it's because of its anonymity?)

we definitely want to expand this to outside product search and be more of a general recommendation/opinion search (e.g. in your case, finding out what people are saying about how to fix band issues from running), interested as to what you would think about this :)
Here in Canada, the lottery is tax free, because if it was taxable the cost would be a deduction - small if you won a $billion, but the aggregated deductions when take from taxable income would exceed the tax collected. In the USA they chose to cheat the tax payer = pay taxes, yet zero deduction. Are declared professional gamblers treated this way?? What if we all declare as pro gamblers = get the deduction of the $1-20/week of the typical gambler??
How does Las Vegas win/loss play out?
I remember video weeks at school, it was definitely a thing in the late 80s/early 90s. But then we also had study hall in Mississippi, where you spent one or two periods a day just sitting in a room doing absolutely nothing. The year I left, they wanted to make it mandatory (with the excuse that kids weren't getting enough time to do their homework, but it was really about saving money).
There are certainly other plausible explanations for what I received. If there were some way I could check those stamps were legitimate, the question would be academic anyway.

The whole process is pretty daft if you think about it, though. Many of us had perfectly good stamps before. Royal Mail decided not to honour them — itself an ethically dubious policy, given how those stamps had been marketed and sold — and effectively forced us to swap them out.

To enable that, they set up a system where you had to send them old stamps collectively worth up to (IIRC) £200 without any verifiable proof of what you’d actually sent, in an envelope clearly recognisable as containing that type of stamps. Then they’d send you back replacement stamps, also in a clearly recognisable envelope, which ironically should now be voidable in the event of a problem, but evidently without any willingness on their part to actually do so. For as long as I can remember, the public have been advised never to send cash by post, so the postal service forcing everyone to send a cash substitute in clearly identifiable packaging both ways was an… interesting… strategy.

In a surprise to seemingly no-one except Royal Mail, there are now widespread reports of the clearly identifiable, untraceable, fungible value tokens going missing on the way in or their replacements themselves being replaced by counterfeits on the way back. There also seems to be a not-at-all-dodgy secondary market now, where you can buy the aforementioned replacement tokens for less than their “face value”.

However, based on my experience, Royal Mail don’t seem to think there is any problem here. Based on reports such as the one we’re discussing today, a significant number of innocent people might already be out some extra money as a result, and that money seems to be ending up with Royal Mail. A cynic might think someone had set up a scheme openly inviting theft and counterfeiting, forced a country full of people to use that scheme or lose money, ignored the obvious problems even when they were explicitly reported, and then directly profited from the criminal activity.
So there's no return address?
I feel like this sort of research cannot be good in either direction: it seems like a waste of money and resources for society to fund this and other abstract things which can only lead to amusing mathematical models that will have zero impact on society, which is a bad thing because we have very real problems. But, if it DOES lead anywhere, the technology could be devastating and we're probably too stupid to use it. Seems pointless to me.
I already had Youtube Music and their podcast integration seems better than Google Podcasts but this probably is a pain if you don't have youtube music or can't easily export followed podcasts.
Results doesn't finish loading for me, I will try again in few hours, I am really curious to see how it compare to generalized search engines like Perplexity and You.com
There are 10's of football (soccer) fans in Saudi Arabia
But they don't. The people calling themselves managers will justify not paying existing people more once they have to pay new people more by saying that that is what they signed up for when they started. And then when people leave, they convince themselves that we are all interchangeable. No matter what happens, they have some sort of excuse or justification.
> an article about superabsorption increasing battery charge rate

"Physicists steer chemical reactions by magnetic fields and quantum interference" https://news.ycombinator.com/item?id=30647086 :

"Superabsorption in an organic microcavity: Toward a quantum battery" (2022)
https://www.science.org/doi/10.1126/sciadv.abk3160 :

> [...] Our work opens future opportunities for harnessing collective effects in light-matter coupling for nanoscale energy capture, storage, and transport technologies.
People should have more fun while doing important work. Being too serious when on the cutting edge leads to an overinflated ego.
Different businesses have different meanings to deadlines and timelines.

If it's v6.8 of your internal software product, no, the deadline doesn't usually matter that much. Maybe you are a bit behind your competition, but the only problem with just being at the 6.7 feature set a little longer is a small percentage of customers not sticking around. Your manager probably overpromised and underestimated, but aside from a bit of abuse and panic, you're right, it doesn't really matter.

But if you're one of 120 companies building parts for the 2025 F150 and your part isn't ready and the other 119 companies are ready, whether it's your supplier or you or your customer who is behind, you'd better believe that they've got you over a barrel in the contract. Like, the contract has a line that reads "for every minute of downtime after [date] you owe $25k". Your PM hopefully underpromised with an aim to overdeliver, but missed really bad. And all the checks and balances failed. If you've got adequate financials you can survive a miss once in a great while, but two or three in a row and even big shops will go under.

It's often important to understand the consequences of missed deadlines that your coworkers, vendors, or especially customers are accustomed to, people have wildly disparate experiences in this area.
It totally makes sense though right? While we had zero tolerance, our immune systems didn't get any work out, and vaccines can only take you so far and doesn't cover many nasty RSVs anyways. Now we are back, and our immune systems are simply not in shape.
It's a pretty good default stance, yeah.

We have been trying to convince people to use our new database [1] for several years and it's an uphill battle, because Postgres really is the best choice for most people. They really have to need our unique feature (version control) to even consider it over Postgres, and I don't blame them.

[1] https://github.com/dolthub/dolt
LLMs are absolutely a challenger to Google's search. Google search is the still best option much of the time, but they're far from dominant like they were a year or two ago. There are many situations now where ChatGPT or Claude or Perplexity gives more useful results than Google search. And the LLMs are improving rapidly. Far more rapidly than Google search.

Google has tremendous engineering talent and Gemini is extremely powerful. But adapting their business to LLMs requires a level of talent and vision from the management side that we have not seen from Google's executive suite in a long time. I won't count out Google as a company, due to the potential that could be put to use by competent leadership. But I've given up on their current management. I'd be happy to be proven wrong.
I think most of them do… but they are too easy to remove.

It isn’t just quality drop resistance, it is also filtering and post processing resistance. It is kinda like antivirus signatures: those who want to abuse it just filter and tweak it till it no longer triggers the watermark detection.
It’s still wild to me that early exploration (or I suppose colonization) of earth had the same limitation, though. The latency of packet transmission by sailing ship was pretty insane.
> historically it hasn't bitten companies badly enough that they stop doing it.

Because VC money based around vague promises of selling data to advertisers have traditionally propped up even fundamentally unprofitable businesses so software quality hasn't significantly contributes to success or not. Now that we're out of ZIRP then companies might start learning that in 10 years or so after they've replaced a few generations of programmers, nobody knows how anything works, and suddenly software quality starts to actually matter to investors and consumers
to who? to you apparently, right?
> they have commits on some related projects like libarchive

Windows started using libarchive to support .rar, .7z, ...

https://arstechnica.com/gadgets/2023/05/cancel-your-winrar-t...
You and I have very different relationships with our local coffee spots.

I'm fine with "screen says X and drink is Y". That's sort've the most I'm after when I go to get a coffee.
There's a scale and bias afterwards, so its not necessarily asymmetric.
In this situation what would you do ?

Would you just spot OP some billing credits to make the account current while sorting out issues ?

While I have a host of projects dependent on AWS and Firebase, I'm always worried about being locked to a vendor. What if a vendor just decides they don't like me, what if I'm not able to migrate...
"Amazon Linux customers are not affected by this issue, and no action is required. AWS infrastructure and services do not utilize the affected software and are not impacted. Users of Bottlerocket are not affected."

https://aws.amazon.com/security/security-bulletins/AWS-2024-...