skysight-inc/HackerNews huggingface dataset:
Because this whole thread is about how a specific company is using blockchain in the context of their business. The business context is relevant. This is a biosciences company and their tools are meant to be used in the context of scientific discovery.

I included a more basic answer in my last response that followed your concept of dogs with ears. Why wasn’t that abstraction simple enough to avoid this criticism?

This is about as simple as I can make this.

1. Collect source data
2. Run data analysis
3. Processed dataset is generated
4. Processed dataset is hashed
5. Hash is combined with the API wallet address and rehashed
6. That hash is stored on chain and with a transaction involving their token
7. Data from step 1 changes, repeat

Why 1000 papers? Because…I picked 1000? Sure, choose 10. Whatever. Does that really affect whether you can understand what I’m saying?

Why data analysis pipeline? Because the graphic that I sent you has its literal first step as “language modeling pipeline” and I was trying to avoid getting flamed for mentioning language modeling. https://ibb.co/5rBnTsv Substitute “analyze data” if you want to. But it’s silly that I can’t use the word “pipeline” on a technology forum.

Why underlying data? Because I need to differentiate between the raw, pre-processed data and the post-processed data, the latter of which is actually being hashed. I figure this was important since the whole point of this thread was how blockchain is being used.

Why proteins? Because it’s a biosciences company with a product called The Protein-Protein Interaction Network (PPIN) API, and that’s a common example they use when explaining what they do. From https://vectorspacebio.science/cmdb, A REST-based API which can be used to generate a multi-level graph network from a correlation matrix dataset. The graph network represents context-dependent known and hidden relationships between proteins, pathways, drug compounds and molecular sequences.

Did I have to choose proteins? I guess not. They have products to be used in financial markets as well that use the same technology. Technically this can be implemented in any domain. I just picked a particular one.

Why scientific papers and not just papers? Same response as above.

Not sure how much further we are going to get with this conversation, to be honest. But I’m trying to operate in good faith.
That is all the protocol is. From https://www.freedesktop.org/software/systemd/man/latest/sd_n...:

> These functions send a single datagram with the state string as payload to the socket referenced in the $NOTIFY_SOCKET environment variable.

The simplest implementation (pseudocode, no error handling, not guaranteed to compile), is something like:

const char *addrstr = getenv("NOTIFY_SOCKET");
if (addrstr) {
int fd = socket(AF_UNIX, SOCK_DGRAM, 0);
struct sockaddr_un addr = { .sun_family = AF_UNIX };
strncpy(addr.sun_path, sizeof(addr.sun_path), addrstr);
connect(fd, (struct sockaddr*) &addr);
write(fd, "READY=1");
close(fd);
}
One of the blog posts I keep meaning to write but never quite get around to is a post that C is not portable assembly. What is necessary is decompilation to a portable C-like assembly, but that target is not C, and I think focusing on creating valid C tends to drag you towards suboptimal decisions, even leaving aside issues like "should SLL decompile to x << y or x << (y % 32)?"

In my experience with Ghidra, I've just seen far too many times where Ghidra starts with wrong types for something and the result becomes gibberish--even just plain dropping stuff altogether. There are some cases where it's clear it's just poor analysis on Ghidra's part (e.g., it doesn't seem to understand stack slot reuse, and memcpy-via-xmm is very confusing to it). And Ghidra's type system lacks function pointer types, which is very annoying when you're doing vtable-heavy C++ code.

I do like the appeal of a recompileable target language. But that language need not be C--in fact, I'm actually sketching out the design of such a language for my own purposes in being able to read LLVM IR without going crazy (which means I need to distinguish between, e.g., add nuw and just plain add).

Analysis necessarily involves multiple levels. Given that a lot of the type analysis today tends to be crap, I'd rather prefer to have the ability to see a more solid first-level analysis that does variable recovery and works out function calling conventions so that it can inform my ability to reverse engineer structures or things like "does this C++ method return a non-trivial struct that is an implicit first parameter?"

(Also, since I'm largely looking at C++ code in practice, I'd absolutely love to be able to import C++ header files to fill in known structure types.)
> It is more efficient to turn gasoline into electricity and then drive the car with that than to directly connect the engine to the wheels

I thought so too, but my research suggested that the efficiency is pretty much the same if not worse and power delivery is worse. Do you have some links? I‘d like to be wrong on this one.
Sounds good, but it's not like it has been passed. It's just a bill

>While the bill is still a draft and has not yet passed the German Parliament, there is reason to celebrate: For once politicians want to strengthen encryption, not undermine it.

Again, it's just a bill. Is there even any realistic support from German MPs for this bill to get passed? Isn't the German parliament composed of two chambers? Can it pass in both chambers?

Also, even if it does get passed, is there some catch? I looked at the bill[1], but I don't understand German, hoping that someone who does can answer that

[1]https://cdn.netzpolitik.org/wp-upload/2024/02/2024-02-07_BMD...
Unforetold: Witchstone is an RPG sandbox with a deep, reactive influence system
They have low compression though, which really hurts the thermal efficiency.
New Documents Detail Live Nation/Ticketmaster Malfeasance
Homebrew reverted to 5.4.6 once the maintainers became aware. The current understanding is that macOS is not affected, but that's not certain.

[1]: https://github.com/Homebrew/homebrew-core/pull/167512
I went the 4090 route myself recently, and I feel like all should be warned - memory is a major bottleneck. For a lot of tasks, folks may get more mileage out of multiple 3090s if they can get them set up to run parallel.

Still waiting on being able to afford the next 4090 + egpu case et al. There are a lot of things this rig struggles with running OOM, even on inference with some of the more recent SD models.
The terrifying part is that this was primarily found because the backdoor was poorly made and causing performance problems.

Makes you wonder what more competent actors can do.
VoiceCraft: Open-source high quality voice cloning / voice editing
The model weights have been uploaded to Huggingface : https://huggingface.co/pyp1/VoiceCraft

This seems to be really high quality judging by the demo's. Not had time to try it for myself

Demos : https://jasonppy.github.io/VoiceCraft_web/
Yeah, I was really disappointed about this.

> I think the current intent is to fold podcasts into YouTube or something

The last email I got about it told me to head over to YouTube music so I don't lose my subscriptions or something. Yeah... not happening.
>Several years ago, 80 bison were reintroduced two centuries after their disappearance from these territories...

I had no idea there were bison in Europe.

The provided hyperlink leads to an article about bison being reintroduced in Mexico. Here is an appropriate article about bison being rewilded in the Southern Carpathians:

https://rewildingeurope.com/blog/free-roaming-bison-populati....
What does that mean for proprietary drivers for Linux? They aren't shipped with Linux/a Linux distribution, Nvidia doesn't ship any Linux, but they can only be used with Linux.
Bears are common in western US mountain towns. The solution is being careful with garbage, including use of bear-proof containers.

I'm not sure this is a sign of "too many" so much as that the bear population is healthy, meaning it's up against the carrying capacity, as a healthy population should be.
If you installed xz on macOS using brew, then you have

xz (XZ Utils) 5.6.1
liblzma 5.6.1

which are within the release target for the vuln. As elsewhere in these comments, people say macOS effect is uncertain. If concerned you can revert to 5.4.6 with

brew upgrade xz
I have one, and I can corroborate your experience that its Bluetooth connection was atrocious. However, after a number of (nail-biting, fritzy) firmware updates, it's pretty good now.

It helps that the default behavior is pretty much what you expect, and so it's not necessary to go into the app except when I want to "force" a reheat of a room-temperature beverage.

I expected to hate it, would never have bought one, but having received this as a gift from my partner -- it's actually grown on me, and I like it now.

One other side note, the pogo pins on the charging pad are a wear item and will eventually fail. You can get them from DigiKey (952-3127-1-ND) and they're easy to replace with a little basic soldering.
culture war aside, there are many other more accurate ways to say "details omitted for brevity" than "obviously" and "it is easy to see that"

this is also something that makes me want a more interactive publishing format, though i understand the good reasons to stick to the static quo. if it's easy to see, it shouldn't be too hard to write out in a collapsible sidebar for those interested
I upgraded Arch Linux on my server a few hours ago. Arch Linux does not fetch one of the compromised tarballs but builds from source and sshd does not link against liblzma on Arch.

[root@archlinux ~]# pacman -Qi xz | head -n2
Name : xz
Version : 5.6.1-2
[root@archlinux ~]# pacman -Qi openssh | head -n2
Name : openssh
Version : 9.7p1-1
[root@archlinux ~]# ldd $(which sshd) | grep liblzma
[root@archlinux ~]#

It seems that Arch Linux is not affected.
Thats basically the whole point actually... A company pays for insurance for the business. The insurance company says sure we will insure you, but you need to go through audits A B and C, and you need certifications X and Y to be insured by us. Those audits are often industry dependent, mostly for topics like HIPAA, PCI, SOC, etc.

Insurance company hears about supply chain attacks. Declares that insured must have supply chain validation. Company goes and gets a shiny cert.

Now when things go wrong, the company can point to the cert and go "it wasnt us, see we have the cert you told us to get and its up to date". And the company gets to wash their hands of liability (most of the time).
Very annoying - the apparent author of the backdoor was in communication with me over several weeks trying to get xz 5.6.x added to Fedora 40 & 41 because of it's "great new features". We even worked with him to fix the valgrind issue (which it turns out now was caused by the backdoor he had added). We had to race last night to fix the problem after an inadvertent break of the embargo.

He has been part of the xz project for 2 years, adding all sorts of binary test files, and to be honest with this level of sophistication I would be suspicious of even older versions of xz until proven otherwise.
Gotcha! you should try webflow then - no piece of code, just UI
Eleven's advantage is being able to have consistent outputs through high quality training data.
Can LLMs Separate Instructions from Data? and What Do We Even Mean by That?
> they'll come down and steal from your garbage in town

You mean their home? Bears were there before humans settled and built towns.

IMHO can't really complain about bears wehen you're the on encroaching on their turf, not the other way around.
The unique sound is a key selling point for rotary enthusiasts. Kind of raspy, almost like a 2-stroke.
> even playing video games is when I listen to podcasts.

This is where you lost me. The only way I could possibly play video games and listen to a podcast is if I'm playing a video game that I've played enough that I've reduced the game down to going through the motions.

If I'm playing a game I've never played before while a podcast is on, I can only really pay attention to one at a time. If I'm listening to the podcast, I can't properly follow plot points/dialogue/etc. If I'm following plot points/dialog/etc. in the game then whatever is happening in the podcast is going in one ear and out the other without being processed.

For me, it's almost like trying to read a book while listening to a different audio book.
One of the objections that many people do not understand, is that systemd adds complexity. Unnecessary complexity. Boats full, loads full, mountains full of complexity.

Yes, there are things delivered with that complexity. However, as an example, sysvinit is maybe, oh, 20k lines of code including binaries, heck including all core init scripts.

What's systemd? 2M lines? It was >1M lines 4+ years ago.

For an init system, a thing that is to be the core of stability, security, and most importantly glacial, stable change -- that is absurdly complex. It's exceedingly over engineered.

And so you get cases like this. And cases like that, and that over there, and that case over there too. All which could not exist, if systemd didn't try to overengineer, over complicate everything.

Ah well. I'm still waiting for someone to basically fork systemd, remove all the fluff (udev, ntp, dns, timers, restart code, specialized logging, on and on and on), and just end up with systemd compatible service files.

But not yet. So... well, oh well.
That's fine, but you can't survive only on Sycamore figs - and that's the problem.
Yes, we agreed amongst ourselves (Redict) that the right approach was to focus on long-term maintenance and reliability.
Easier horizontal scaling and organizational inertia would be the main reasons to use mongo over a jsonb column. I wouldn’t introduce it to a psql shop if they are already great at running psql.
The ability to disable the mask in nn.MultiHeadSelfAttention, then having nn.DecoderBlock and a nn.EncoderBlock.
> bare with me

I would prefer to keep my clothes on, thanks.

(It's spelled "bear with me")
Prior HN discussion
https://news.ycombinator.com/item?id=39836495
What if I want to listen to my notes in my own voice

Or my favorite books in my own voice.

Or my lecture notes in my professor's voice.
Really? I thought it was Terry Roosevelt. Do you have a source?
> Here's 1 neat trick to help the whole situation a LOT:MANDATORY 1 year parental leave for the mother and father. it must be mandatory for both genders, or women will be pressured to take less and men will be pressured (or tempted) to take less or none (whereas women are of course physically forced to take at least some).

You do not need to make it mandatory for it to become effective. Look at countries like sweden who have rolled such systems out. Both parents get paid parental leave (around 9 months per parent, per kid I think). The 9 months cannot be shared between the parents. So if the father does not take the months he loses them. From my experience working in Sweden people take those. Men take those months off and it is socially accepted and expected that you take them.
My 0-bit model can predict if you have cancer with 99.5% accuracy. It doesn't even need input data! Don't ask about the false negative rate though.
> "Given the activity over several weeks, the committer is either directly
involved or there was some quite severe compromise of their
system. Unfortunately the latter looks like the less likely explanation, given
they communicated on various lists about the "fixes" mentioned above."

Crazy indeed.
The discussion to upload it to Debian is interesting on its own
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067708
Quite ironic: The most recent commit in the git repo is "Simplify SECURITY.md", committed by the same Github account which added the backdoor.

https://github.com/tukaani-project/xz/commit/af071ef7702debe...
The more the better, but there's already a "European Yellowstone" in the form of Belovezhskaya Pushcha National Park in Belarus, of similar size, home to many of the remaining European buffalo.
I bet wankle development is also excellent for internal education of their engineers.
Counterpoint: I've only been to two therapists (via word of mouth) and they were both far more helpful than HTWF&IP and NVC, even despite how highly awesome those books are, and everyone should read them repeatedly.

They asked me intelligent questions designed to help me come to my own conclusions through reasoning, and they provided me with actionable activities for growth.
Aside from your suggestion violating the laws of physics, that's actually not how the Volt worked.

The original concept for the volt was that the engine would only generated electricity, but in production models, the engine was connected to the drivetrain.
There are ways to do it respectfully, that's what ecotourism is usually about.

As long as you concentrate the tourists mostly in one area so that the majority of the park is left alone by people, I don't see the problem.
That seems unlikely. A mechanical coupling should be close to near perfect efficiency where as using the engine to drive electric motors requires several conversion steps.
Follow-up:

A Note About Vultr's Terms of Service - https://news.ycombinator.com/item?id=39865941
I've long since said that if you want to hide something nefarious you'd do that in the GNU autoconf soup (and not in "curl | sh" scripts).

Would be interesting to see what's going on here; the person who did the releases has done previous releases too (are they affected?) And has commits going back to 2022 – relatively recent, but not that recent. Many are real commits with real changes, and they have commits on some related projects like libarchive. Seems like a lot of effort just to insert a backdoor.

Edit: anyone with access can add files to existing releases and it won't show that someone else added it (I just tested). However, the timestamp of the file will be to when you uploaded it, not that of the release. On xz all the timestamps of the files match with the timestamp of the release (usually the .tar.gz is a few minutes earlier, which makes sense). So looks like they were done by the same person who did the release. I suspected someone else might have added/altered the files briefly after the release before anyone noticed, but that doesn't seem to be the case.
WhisperX does diarization, but I don’t see any mention of it fulfilling my ask which makes me think I didn’t communicate it well.

Here’s an example for clarity:

1. AI is trained on the voice of a podcast host. As a side effect it now (presumably) has all the information it needs to replicate the voice

2. All the past podcasts can be processed with the AI comparing the detected voice against the known voice which leads to highly-accurate labelling of that person

3. Probably a nice side bonus: if two people with different registers are speaking over each other the AI could separate them out. “That’s clearly person A and the other one is clearly person C”
For those panicking, here are some key things to look for, based on the writeup:

- A very recent version of liblzma5 - 5.6.0 or 5.6.1. This was added in the last month or so. If you're not on a rolling release distro, your version is probably older.

- A debian or RPM based distro of Linux on x86_64. In an apparent attempt to make reverse engineering harder, it does not seem to apply when built outside of deb or rpm packaging. It is also specific to Linux.

- Running OpenSSH sshd from systemd. OpenSSH as patched by some distros only pulls in libsystemd for logging functionality, which pulls in the compromised liblzma5.

Debian testing already has a version called '5.6.1+really5.4.5-1' that is really an older version 5.4, repackaged with a newer version to convince apt that it is in fact an upgrade.

It is possible there are other flaws or backdoors in liblzma5, though.
International Seabed Authority (ISA): DeepData
This is my main take-away from this. We must stop using upstream configure and other "binary" scripts. Delete them all and run "autoreconf -fi" to recreate them. (Debian already does something like this I think.)
I’ve been a classroom volunteer teacher for a computer science / programming course at a local high school. I can attest that this is accurate - I’d estimate 20-25% of the class is absent on any given day that I’m there. And of the students that are present, there’s a good number of them who are checked out mentally and really don’t participate.

It’s surprising to me. Back when I was in school, I was extremely anxious missing any days. Elective classes are one thing, but I just don’t understand how students are missing multiple days of history or math or science and able to keep up.
The latest commit from the user who committed those patches is weirdly a simplification of the security reporting process, to not request as much detail:

https://github.com/tukaani-project/xz/commit/af071ef7702debe...

Not sure what to make of this.
Vehicles with range extenders are the exception, even if they seem a good option, they didn’t gain market share.
The app sucks, but there's a Home Assistant integration that works much better: https://github.com/sopelj/hass-ember-mug-component

FWIW, my fiancée loves hers. She apparently drinks her coffee much more slowly than I do; having her coffee stay warm all morning is a big improvement over a standard ceramic mug.
I know Golang has their own implementation of sd_notify().

For Slurm, I looked at what a PITA pulling libsystemd into our autoconf tooling would be, stumbled on the Golang implementation, and realized it's trivial to implement directly.
I agree on Instagram and Telegram, but how on earth would you introduce E2EE to Gmail?

Encrypt emails on ingress into Google? That would still not be end-to-end, though.
So it turns out they've had these clauses in their ToS for a while now. The user who initially posted this on reddit was unable to access their account until they accepted the new ToS, which they probably didn't because they assumed this provision gave Vultr access to their data in a way they thought they hadn't already.

I'd love to know what did in that ToS though.

I think cloud providers (maybe all services really) should be required to provide some amount of notice of changes which the user will lose access to their data without accepting. Also would be really nice when providing said notice if they also included a diff from the last version the user had already accepted.
This is a very late comment, but in case anyone else is looking at this thread in the future:

A quick google search [0][1] seems to prove #5 false, specifically the bit about roads bringing in more in taxes than they cost to maintain. The first article is from 2011 and is about the US.

[0] - https://pirg.org/edfund/resources/do-roads-pay-for-themselve...
[1] - https://www.urban.org/policy-centers/cross-center-initiative...
The relevant one to this is: "Cloud host Vultr rips user data ownership clause from ToS after web outrage" [0](79 points, 19 hours ago, 20 comments)

[0]: https://news.ycombinator.com/item?id=39855365
As others have said - cardiovascular exercise, trips/commutes...
Saw a study the other day that linked certain colon cancers with the prevalence of a particular strain of bacteria that is usually exclusively found in the mouth. Correlation != causation and all that, but that does kind of correspond with what seem to be generational shifts in certain sexual practices.

https://www.nature.com/articles/s41586-024-07182-w
What you're sort of proposing is cloud SaaSaaS. AWS would build out hooks for providers to manage the DBs they sell so they look like part of AWS. The main problem is AWS already has most of the services most of their customers want, so there isn't a big market opportunity.