skysight-inc/HackerNews huggingface dataset:
> I wouldn't be surprised if the state actor interfered with Lasse somehow

People could also just get tired after years of active maintainership or become busier with life. Being the sole maintainer of an active open source project on top of work and perhaps family takes either a lot of enthusiasm or a lot of commitment. It's not really a given that people want to (or can) keep doing that forever at the same pace.

Someone then spots the opportunity.

I have no idea what the story is here but it might be something rather mundane.
Why can't/shouldn't we encourage Apple to invest in on-device runtime security instead of a fallible App Store review process that might not even be relevant anyways? If any software has uninhibited access to hardware APIs, that seems like a software security issue that needs to be solved, not an ironclad justification for the App Store.
You factist!
> maybe some people like you prefer chatGPT

not sure when I said that... that's news to me

> I don't see openai competing in the future.

I think you can see it in one of the branches of the possible future.
>Romania has more than 2 persons killed each year and many more injured.

Statistics can be misleading without context. Especially when you see dumbfucks in Romania film themselves pulling over and get out of their cars so they can get close to bears to feed them biscuits and pet them as if they're stray cats/dogs. How can you blame the bears then? At that point such deaths are just natural selection at work.

At least in the past when we were cavemen, some member of the tribe would get mauled by a wild animal and the rest of the tribe would take note not to fuck around with those animals and pass that knowledge to their offspring, but somewhere along the way, we seem to have lost commons sense and personal responsibility and if some idiot engages with a wild animal and gets killed it's now the animal's fault for being "dangerous" and not his fault for being a dumbass who's now been thankfully erased from the gene pool.
Different book

https://www.goodreads.com/book/show/138841.The_Art_of_the_St...
Apparently they really don't scale well. I found this reddit post explaining it better:

> Gas turbines scale extremely poorly. They rely on small clearance between the rotating blades and the housings for efficiency. The smaller the turbine, the greater the relative clearance and the more energy is lost. Gas turbines, at least with established technology, make very little sense below 300ish HP. As a real life comparison: A Robinson R44 piston helicopter and an R66 turbine Helicopter have almost identical design, dimensions, and weights. Power is around 250 / 300hp. The former burns between 50-60L of gas per hour at cruise, the latter around 90-110L of Jet fuel.

1 - https://old.reddit.com/r/cars/comments/s8vkv8/are_wankel_eng...
That's not an argument, nor is it productive. Nobody even mentioned Alpine. Go away.
Only if you consider what Americans tend to consider corruption. If you, instead, get a little creative and include things like segregation (essentially a massive state-sponsored in-group grift that cost the country an untold fortune in the lost proceeds of misallocated capital, primary among that being the very concept of the modern suburb and the automobile-based infrastructure required to head off its ever-imminent lack of sustainability) and a great deal of our foreign policy (meant to direct funds into the coffers of the MIC and the politicians directly invested in it, at the cost of untold blood and treasure)... well, we've been pretty damn corrupt.
Ok well have a nice day I guess.
> and “not planning to pay AWS at the end of October for August usage ($7M).”

This gave me a flashback to a long time ago, when we couldn’t pay an AWS bill for a couple grand.

Makes me wonder what the largest unpaid AWS bill looks like, and whose it was.
This would be the smarter attack vector, but I've noticed over time that these people are just assholes. They aren't patient. They are in for the smash/grab.

I would not be surprised if there was a group using this approach, but I doubt most of them are/would. If they were that dedicated, they'd just have a fucking job, instead of being dicks on the internet for a living.
Going with this theme, the idea of a battery car with longer range is appealing to me. However a smaller battery but quick charging would mostly remove the need.

I’m not sure I want to drive around with a capacitor in the boot, but a huge battery isn’t ideal either.
The joke just wooshed past you :)
Tukaani website states "jiatan" as the nickname of the malicious code committer on Libera Chat.

WHOWAS jiatan provided me the following information:

jiatan ~jiatan 185.128.24.163 * :Jia Tan
jiatan 185.128.24.163 :actually using host
jiatan jiatan :was logged in as
jiatan tungsten.libera.chat :Fri Mar 14:47:40 2024

WHOIS yields nothing, the user is not present on the network at the moment.

Given that 185.128.24.163 is covered with a range-block on the English Wikipedia, it appears this is a proxy.
You don't need a PR campaign to oust Sundar. I think 7 out of 10 Googlers would agree that Sundar is uninspiring and has allowed the erosion of most of what was good about Google's culture.

I left partially because I hated the feeling that "this year will be average - meaning worse than last year but better than next year". Slow downward drift, culture erosion, lack of leadership, lack of clarity, etc.

Management isn't leadership, and Sundar is more of a manager than a leader.
Google I/O 2024
I've had three RX-7s. A first generation and two second generations. I drove the first until the wheels literally fell off (I was a young, stupid kid that ignored the crunching sounds of the rear wheel bearings falling apart. The rear wheel(s) seized while I was driving down a bridge causing the axel to snap in half. That was an interesting "drive" down the rest of the bridge). The second was a base model second gen that I gave up when I suddenly had two cars because of getting married, then divorced. The third was my favorite. A late model second gen fully loaded. That one eventually caught on fire due to negligence at a tire place. I loved that car.

The third generation never got cheap enough for me to consider one, but oh, I wanted one badly. The RX-8 never really caught me. Plus they had some early issues. That Iconic concept definitely has my attention, though.
Unlike the other commenters, I do agree that IS different. The black bears here are not on the same level as a grizzly or kodiak or other brown bear. The ones here ARE becoming a bit more aggressive for unknown reasons, though.
Hope you find comfort in fact that smart guys in China don't have such reservations and smart guys in North Korea don't have any options.
That doesn't make build.rs any less of a juicy target for a supply chain attack.

Arbitrary code downloaded from the internet and run at build time? That's a nightmare scenario for auditing, much worse than anything Autotools or CMake can offer.
You started the thread by saying you trust the intentions of a coin project based on them saying they're not in it for the money.

I just meant to point out that this was no special characteristic, as they all have done this. "Crypto" has been professing "use cases" since the beginning.

>Then this whole discussion is pointless.

Yes it certainly was, since you wanted to argue that you believe him, yet got caught up in trying to refute for some reason the point that they all say it. You say trust actions instead. Great, as long as we agree words are irrelevant particularly when they all say the same thing.
It is a long and old tradition in math to explain your findings as obscure as possible to make sure that your competitors cannot follow you.

"He is like the fox, who effaces his tracks in the sand with his tail" (Abel about Gauss)
https://hsm.stackexchange.com/questions/3610/what-is-the-ori...
are we sure the US hasn't also become a corrupt oligarchy?

Guess how we can tell you've never actually lived in a corrupt oligarchy, and only read about it on the internet.
So you put a nice restrictive license on the lemonade, and sure it makes your kid's customers unhappy, but at least it stops- oh wait, actually the other kid just made their own lemonade that's drop-in compatible and they still sell more.
Yeah, that seems true and it's basically the value proposition I bring to my work.
It would be theoretically possible to have a small battery ("just a 60 mile/100km range, or even smaller) combined with a generator, but I don't know if markets would appreciate that.
Well, catholics, like most christians, consider it worse to have sex for pleasure (or otherwise satisfy desire and gain intense pleasure) than bring more sinners into the world. Celibacy is still the ideal and roman catholics have a long list of rules regarding who can have sex and under what conditions.

You might have noticed that christians have a long history of negative attitudes towards men who have sex with men, i.e. performing sexual acts for pleasure alone, as it is understood. Women don't feel pleasure from sex so lesbians have gathered less christian attention, and it's the penis that does the insertion of the homunculus and so on, hence it's the actually sexual thing involved.

From the Wikipedia page about After Virtue I get the impression that MacIntyre mainly engaged with Nietzsche through secondary sources. For one I have trouble reading the geneaology as promoting greek morals rather than using them for contrast, and I'll have to agree with Nietzsche that the labour movement, the main egalitarian movement of his time, is unlikely to birth a new kind of person that rises from the carcass of the old morality and initiates a new. If such a person comes it is likely that they will be perceived as elitist or aristocratic.

As for complaining about Nietzsche being non-egalitarian, that's rich coming from a christian thinker, who believes this world exists merely to separate the good from the bad so that the good can have some bad ones to gloat at for eternity.

And yes, historically, to a religion it's philosophy that is the main threat, since philosophers don't create martyrs, they create dissidents, unlike nasty emperors and the like. Things have changed since then, however. Under the nihilism of modernity the main problem for a christian theologian has changed from the non-believer to the non-person, to paraphrase Rick Roderick (who got it from a colleague in theology, I think).

I might have to read After Virtue to figure out whether MacIntyre addresses this, since if it's in there the wikipedians didn't mention it. I kind of doubt it though, if he did he wouldn't have put so much faith in projecting his ideals regarding purpose onto other people since he would have realised that this practice was already in service of capital accumulation.
I could imagine another similar attack done against an image processing library, include some "test data" of corrupted images that should "clean up" (and have it actually work!) but the corruption data itself is code to be run elsewhere.
Super-niche use-case: our game studio prototyped a multiplayer horror game where we played with cloning player voices to be able to secretly relay messages to certain players as if it came from one of their team-mates (e.g. "go check out below deck" to split a pair of players up, or "I think Bob is trying to sabotage us" to sew inter-player distrust, etc).

Less-niche use-case: if you use TTS for voice-overs and/or NPC dialogue, there can still be a lot of variance in speech patterns / tone / inflections / etc when using a model where you've just customized parameters for each NPC -- using a voice-clone approach, upon first tests, seems like it might provide more long-term consistency.

Bonus: in a lot of voiced-over (non-J)RPGs, the main character is text-only (intentionally not voiced) because they're often intended to be a self-insert of the player (compared to JRPGs which typically have the player "embody" a more fleshed-out player with their own voice). If you really want to lean into self-insert patterns, you could have a player provide a short sample of their voice at the beginning of the game and use that for generating voice-overs for their player character's dialogue throughout the game.
New 3D immersive map solution guides for devs – Google Maps Platform
Exactly. That's the truth of modern Internet - including social media: content is not the product, it's bait.
It fixes the terrible efficiency by having an entirely different power source?

As others have pointed out, the article doesn’t do a great job of explaining how the rotary helps.
Yeah, could be Venezuela. Though I'm not trying to make random statements to create uncertainty and doubt, so take this with a gigantic grain of salt.
> never really felt like Google as a whole really cared about it

I mean, their track record for products they initially cared about isn't great... so ya, it doesn't bode well for this one.
Show HN: YouTube private mode Chrome extension
I got tired of having to use private mode when checking out new videos on to not potentially ruin my recommendations

So I put together a "private mode" chrome extension, which simply conditionally blocks certain requests to Youtube.

I "found out" which requests by simply looking at all the requests that get fired, and figuring out which one's might be related to recommendations.

I tested this after building by using one a Youtube account and watching a video that's completely out of it's current world of recommendations with and then without private mode enabled to confirm it does what it should.

Current limitation is that it only blocks videos from impacting your recommendations, not searches.

From what I see searches only influences recommendations slightly, but it still does.
You have the right to do it, but your coworkers might become bitter and envious if you make more than them. You have to judge how mature your coworkers are and whether it would cause trouble for you if they made a complaint to your manager. For example, if you are on a team of like 5 people, it could be impossible for them to maintain your anonymity as they say "Why am I making less than others?" You might also imagine that if your coworkers don't get the raise, they will not be as motivated to work, and may cause problems for you that way.

I've been on both ends of this, usually the lower end, and I can say first hand it is hard to not take getting paid less as a personal affront to your dignity. And every time I was underpaid I not only didn't get a big raise, but I took much longer than expected to find another job. If you are underpaid, your best option is to leave in most cases. Don't underestimate how long you have to tolerate the low pay while you try to leave.
5.4.1 doesn't even have the `m4/build-to-host.m4` script that pulls the backdoor's tarball.

https://salsa.debian.org/debian/xz-utils/-/tree/v5.4.1/m4
My own perception of OpenAI vs Google seems at odds with many things I read. I don't really see Google as being behind at all.

1. Google pretty much invented the technology (https://arxiv.org/abs/1706.03762)

2. In order to create the models one needs lots of compute and access to a lot of text. Google scores higher than OpenAI on both counts.

3. New models are released on a weekly basis by all sorts of companies. So OpenAI has no monopoly on LLM models. In fact their competition is staggering (NVIDIA, Meta, Google, DataBricks, Amazon (numerous other startups)) It will not be long before there are even more.

It seems to me that Altman saw this all as a timing thing. Reveal your cards now and force others to do the same in the hopes of obtaining a strategic position over competitors. Googles cashflow seems to be doing just fine and I haven't had to fight off any urges to use Bing.
WebTorrent[0] is also good WebRTC P2P project.

[0] https://en.wikipedia.org/wiki/WebTorrent
Waiting for the new YouTube videos on this. "Woah! Linux has a back door dudes!". My distribution, Ubuntu (now Kubuntu) 2022 isn't affected.
Based on your history. I'm not totally sure you aren't just an anti-science bot spreading disinformation.

In case you are real, and have a problem with this particular Greta tweet delete.

Here is some research.

https://www.factcheck.org/2023/06/viral-posts-distort-greta-...

On Climate

The science behind CO2 being a green house gas is over 100 years old now. I'm not sure why you think it is false.
I have some Romanian colleagues and they're all quite patriotic and often talk about how great Romania is.
For those wondering why companies do this, I wrote a post on this awhile back https://bloomberry.com/why-new-hires-often-get-paid-more-tha...
Focusing on sshd is the wrong approach. The backdoor was in liblzma5. It was discovered to attack sshd, but it very likely had other targets as well. The payload hasn't been analyzed yet, but _almost everything_ links to libzma5. Firefox and Chromium do. Keepassxc does. And it might have made arbitrary changes to your system, so installing the security update might not remove the backdoor.
details please? I do not see any such contributions to https://github.com/facebook/zstd
In this particular case, there is a strong reason to expect exploitation in the wild to already be occurring (because it's an intentional backdoor) and this would change the risk calculus around disclosure timelines.

But in the general case, it's normal for 90 days to be given for the coordinated patching of even very severe vulnerabilities -- you are giving time not just to the project maintainers, but to the users of the software to finish updating their systems to a new fixed release, before enough detail to easily weaponize the vulnerability is shared. Google Project Zero is an example of a team with many critical impact findings using a 90-day timeline.
+1 for copy files to container, serve with nginx
Someone said commits lined up with Beijing time, but I've not verified that.

But that wouldn't count for much, someone employed by anyone could work any hours.
What’s your issue with dynamic SQL in this case?

I’ve written aiosql functions that use dynamic SQL (via plpgsql) just fine.
Camembert and brie 'on the verge of extinction,' French scientists warn
As long as you don't show blatantly horrible products, your reputation will be fine.
I'm in this boat, no confusion at all
> Print tickets such that, if one wins, the other is more likely to win, which you can do by having the number of winning spots per ticket be random and correlated.

In order to refute this you need to get into the CHSH experiment's design, which doesn't use the raw detection rate but compares detections that should not have similar results. Imagine that both tickets have a prize on the right side, and both participants have agreed to always choose the left side. CHSH predicts that some of the time the prize will change sides: but, crucially, only from the losing side to the winning side, and only if the other ticket lost, and even if the tickets are revealed close enough in time that a signal could not propagate between them.

The conclusion of CHSH is that detections are correlated to the angle between the sensors, and not the angle between the sensors and the source.

This makes absolutely no sense. There is no such thing as a winning or losing side until it's been scratched, and even if the ticket were able to randomly switch from a loser to a winner, how would it ever know that the other ticket was also a loser? And if it's true that detection is correlated to the angle between detectors, it seems easy enough to build a statistical system around variable sensor angles that is able to communicate instantaneously.

I might not have interpreted everything you said, either. Internet forums aren't the best way to discuss deep problems.
>the more complexly interconnected the interactions between the components

This is a bit of a rich criticism of systemd, given the init scripts it replaced.

> Red Hat invests too much into completely replacing linux subsystems, they should take a break. Maybe fix the bugs in MATE.

MATE isn't a Red Hat project. And nobody complains about Pipewire.
I'd say 99% of companies using Kubernetes can't really explain why they chose it over Nomad.
Not just English.

The Dutch word for Alces alces (the animal called a moose in North America and an elk in Europe) is "eland".

Dutch settlers in South Africa decided to use that word for the large antelope of the genus Taurotragus, which is still called an eland in English.

Modern Dutch distinguishes the two by calling the antelope an "eland antelope", while Afrikaans calls the moose/elk an "American/European eland".
Related: https://doineedkubernetes.com/
It is a complexities of language processing and perception. Fascinated by that
For now, we're excluding Reddit posts that are clearly automated and making sure the YouTube content is not sponsored, which you are required to disclose by the YouTube ToS.

We'll have to dig deeper into not to filter out spammy reviews. I can imagine analyzing a user's post history or detecting if content was clearly GPT written, but it's hard to really tell. I know there things like Amazon review analyzers out there, but we'll have to learn more about this. I wonder if the people of HN have any suggestions on this front.

There'll probably be a lot AI generated reels that look like they're from real people online soon too. I wonder what platforms like Tiktok and YouTube will do about this. If this ends up being a huge , we can probably try to use ML methods to check if the video was filmed in the real world
I'm really curious about if the act of injecting a backdoor into OSS software is legal/illegal ?

Are they somehow in the clear unless we can show they actively exploited it?
TempMail: Simple web app to generate temporary email IDs, view emails received
We probably shouldn't use your code at all, is the real answer. You can get TS, it just costs a lot of money.
Why is this so wide? It's barely usable.
As I pointed out in another comment the HN guidelines say:

On-Topic: Anything that good hackers would find interesting.

I find it interesting that I'm paid less than my male colleagues for the same amount of work (I am). You're welcome to argue I'm not a good hacker.

>> Look, here you are, under a story about the origin of "pencil lead", going on about something entirely different, using the commenting system for private messaging.

Yep, and here you are ranting that I violated the rule that the commenting system can't be used for private messaging; a rule that you invented on the spot just so you could rant at me.

Btw, I do consider this thing we're having right now "civilised debate". One can argue robustly, speak frankly as you just did, and still be civilised. But one needs to be an adult to handle that.
They should include a blurb about Wikipedia's donation requests
We've tried to build this in the past with Looria.com, where we aggreagted and summarized reviews from the most trusted sources, e.g. Reddit: https://www.looria.com/reddit

Couple of challenges:

- Astroturfing is everywhere

- The data sources, especially social media, become more protective with their data

- Monetizing this is super hard. As an aggregator, you're always just the intermediate. The glory times of ads and affiliate marketing are over.

Vetted.ai is working on something similar and they raised $14M in 2022. For all consumers, I really hope one of you will succeed!
Cats (domestic ones, at least, and most that aren't 'big cats') aren't apex predators; those are predators with virtually no predators of their own. Cats are predators, but lots of things eat cats.

Not that my cats don't think they're top of the food chain.
I can't recommend "How to Know A Person" by David Brooks enough.

It's for us introverted nerds, by a fellow introverted nerd. A manual on how to become unblocked.

For a broad overview, though, the secret sauce is to learn to listen to people closely and make them feel heard. I think 90% of the battle is learning how to deeply listen and showing that you are indeed listening closely.

Again, everyone should get this book. Completely clear, no nonsense, actionable advice.