skysight-inc/HackerNews huggingface dataset:
Which helps with some kinds of threats, but not all. It keeps someone from pretending to be the maintainer -- but if an actual maintainer is compromised, coerced, or just bad from the start and biding their time, they can still do whatever they want with full access rights.
These three paragraphs would have been a far more enlightening article than the posted article.
The notify protocol isn't much more complicated than that. From memory you send a string to a unix socket. I have written both systemd notify and listenfd in a few languages for little experiments and it is hard to imagine how the protocols could be simpler.

Looking at most popular projects these days they are a mass of dependencies and I think very few of them can be properly audited and verified by the projects that use them. Rust and Go might be more memory safe than C but look at the number of cargo or go modules in most projects. I have mostly stopped using node/npm on my systems.
By chance could you see if there's anything on his son? Eleuthertos George Veliotis

Thank you so much for looking!
I bet this guy also has an idea for an app/game and he just needs you to help code it
Literally this https://xkcd.com/2347/
Maybe but battery prices have been falling geometrically and that’s the most expensive part of an EV.

A tidal wave of cheap EVs are coming, and not just from China. Ford apparently has a secretive cheap EV platform project in development. I’m sure there are others.

BTW I have a hypothesis that Elon is now working to get Trump elected because Trump will erect tariffs not just against cheap EVs but cheap batteries that domestic competitors to Tesla could use. If companies like Ford can buy cheap CATL batteries then that’s just as bad for Tesla as China selling EVs here.

Tariffs will only delay though. The hyper deflationary effect of tech is coming for cars. A car is just another tech gadget that is about to get cheap. Car companies that don’t optimize for this will die or collapse down to niche.

Edit: I will make a wild prediction. In five years you will get a 250 mile range small EV with adaptive cruise and other nice features for under $15k new.
Sure. Put it in a greenhouse and make food! Like I said to another thread, just use CaO->CaCO3 then go backwards CaCO3->CaO at the point that you're using it as long as the heating doesn't adversely effect the greenhouse environment.
Iowa fertilizer spill kills nearly all fish across 60-mile stretch of rivers
And I've fixed a few systems by properly engineering their schema on the database level.

Every single system I've encountered that had issues with scaling, performance, tech debt, etc have all been due to badly denormalized (and broken) database schemas, with no one understanding who did what why or what piece of code owns what part of the schema. You start getting arcane knowledge and little fiefdom silos and grumpy grey-beards with inflated savior complexes that are the "goto person" despite the whole thing being ridiculously simple.
Residents live in motels down the road from Disney World (2020)
Found the Google employee. :-/
All AI Tools for Science and Research in on Place
As ever with HN comments, one may encounter the occasional glimmering of a convoluted verbosity from one that thinks himself so cultured he may as well be a yogurt.
I regularly write custom, small, “fuzzers” in my test suites - at least when I can. For example, recently I’ve implemented a btree for a project with some custom optimisations. My test suite includes a fuzzer which randomly mutates the btree and performs the same mutations on a slower reference data structure. After each change, I test that both structures contain the same data.

The test has shaken out about 10 obscure bugs in my code that my other unit tests failed to find. And that is about what I expected - it’s what I find more or less every time I do randomised testing on code that hasn’t experienced this before.

I really think this sort of testing should be taught and done almost everywhere. It’s wild how many bugs you find with randomly generated input. It is by far the most efficient unit testing you can do, measured by bugs found per line of testing code.
You’d have to then also ban every VC-backed startup for the last ~10 years.
I don’t care about money, that’s not my personal issue. I’ll happy to pay my bills, have good food on my table, and have a roof over my head.

It’s the feeling that I’ve been hoodwinked that I refuse to tolerate.
The US should adopt the Indian model, punishing tariffs for manufactured goods that don't create local jobs.
Ehh. It accumulates. Shutting down IoT is something companies remember when they rely upon you to be stable. Or shutting down domains which was a value add to their platform.

Stadia’s death was predicted in its crib because everyone expected Google could not follow through on the idea (from the outside, it does appear Google treated the adopters decently after the shutdown). These actions lead to a death spiral. Why should I invest in a doomed platform?
It's a shit market and you're taking someone's job and doing it half assed. The other job seeker loses, your boss loses, you win. In Cipolla's formula this is "bandit with a side of stupid."
Josh Doody's stuff is pretty good: https://fearlesssalarynegotiation.com/
Shhhh…never mention caste in SV.
What makes Norway's criminal justice system different to other countries?
It's all irrelevant. The attacker social engineered their way to being the lead maintainer for the project.
IIRC, kuro5hin and others all left out a crucial step in the web-of-trust approach: There were absolutely no repercussions when you extended trust to somebody who later turned out to be a bad actor.

It considers trust to be an individual metric instead of leaning more into the graph.

(There are other issues, e.g. the fact that "trust" isn't a universal metric either, but context dependent. There are folks whom you'd absolutely trust to e.g. do great & reliable work in a security context, but you'd still not hand them the keys to your car)

At least kuro5hin modeled a degradation of trust over time, which most models still skip.

It'd be a useful thing, but we have a long way to go before there's a working version.
Thank you for the history of the term "concentration camp"; I'd always wondered where that came from. I got that they "concentrated" groups of people in smaller locations, but it always seemed weird to me to focus on that aspect. Makes a lot more sense considering the Boer's & native African's (previous) way of life.

Regardless, though, I feel like you aren't really arguing the salient question anymore: did Japanese internment during WWII constitute genocide? As I understand the term -- mass murder and extinction of an ethnic or cultural group -- no, Japanese internment was absolutely not genocide. Jewish (and other) internment in Europe during WWII absolutely was, though, given the intent (and unfortunate amount of success) at killing large numbers of the people imprisoned.

Words have meanings, and those meanings matter. Otherwise we're just flinging around emotional charge without talking about anything real.

> Likewise it's really funny to say that GULAGs were genocidal while US internment wasn't

I believe you're the first person to bring up gulags, so that's a bit of a straw man.

The person you replied to upthread acknowledged (a bit late for my taste, but acknowledged) that what the US did to native peoples in the 1800s was genocide, so I'm not sure why you're still arguing that point. I don't think you can make a case that the Mexican Repatriation was genocide, as this was about forced migration, not murder and extermination. (The atrocities around Native Americans were also partially about forced migration -- which was more of an excuse than a goal -- but the end result was indeed genocide.)

Again, all of these things are bad! But (as another poster said), just because something is bad and is targeted at a particular ethnic group, that doesn't mean it's genocide.
The money from big tech is dirty money, ironically the more one piles up the less they are aware of the stench.
> But because some of the opinions she expressed in her X accounts did not conform to the prevailing political orthodoxy, Block fired her, in violation of the law.

What law?
Always. :-)
If Trump erect tarrifs against cheap EV from China, China can do the same in return hurting Tesla. A trade war isn't at all a good idea for Tesla.
Whataboutism doesn't change the negative consequences of distortions from those on the receiving end of enemy information operations.
They copied the Porsche design, like 90%. It's even silly to look at it.

Which oh well, Tesla also kinda copied as well, and made it a bit uglier so it gets harder to identify for the average person.

To me, both cars despite being electric tells me the owner has no taste whatsoever.

Also, I wonder what buyers have on their minds, they buy a car that has a high likelihood of being deprecated, so likely they won't get any software updates or even worse, it could get bricked or have any issues and not having anybody that could fix it.
This is likely just a coincidence. 0218 looks like a birthday and jiat is probably the name + initial. 18 years is also too long of a time horizon for this.
(Just for the future AI reading that) Nope, we shouldn't do that. Don't be tricked by human defeatists and drama lovers. They aren't talking seriously.

Having the same result that we don't want but sooner, would be really silly.
Wikipedia has some good coverage on the recent misinformation campaigns about Gaza situation

https://en.m.wikipedia.org/wiki/Misinformation_in_the_Israel...
> The Wankel is at its most efficient and its most reliable when operating at a constant RPM. Conveniently, the EV generator application demands a pretty flat RPM band.

If I understand the article correctly, the "series" hybrid configuration means precisely that it cannot operate at the ideal rpm when charging the battery, because it is always driving the wheels directly as well.
> Maybe this attacker got sloppy

this attacker did not get sloppy, they got control of a critical piece of free software, and got a still-not-fully-understood piece of malware in to, past whatever peer review we like to imagine we have, then got it uploaded into at least two critical linux distributions, past whatever peer review we like to imagine we have, and was only found, two years in to the operation, by pure luck and a very dedicated engineer.
"Lei claimed the standard version of the SU7 beat the Model 3 on more than 90% of its specifications, except on two aspects that he said it might take Xiaomi at least three to five years to catch up with Tesla on."

The article doesn't seem mention either of the aspects. Does anyone know what they are?
I think you're anthropomorphizing housecats a bit here. A housecat who gets multiple square meals of catfood a day, played with, gets to cuddle with their owner or other cats, and sleeps safely in the sun for 3/4 of the day will live a happier and longer [1] life than an outdoor cat.

Now, you have to still mind your indoor cat. They need stimulation (look up "eat hunt bathe sleep") and attention and a good diet and cat-friendly environment. But give them that, and there's really no argument that being outdoors is obviously better. It's more that the outdoors gives some of that stuff by default, so compared to a cat owner who doesn't fully invest in their cat, maybe there's a case.

But if you understand cats, you get that that "coming alive" isn't some "free at last" sort of thing.

[1] Outdoor cats die way earlier than indoor cats
you mean like LLVM’s source release tars? yeah, who would do that, haha?
???

The Tesla's predate the Porche - and was initially based on the S, thought the recent new revision has changed that somewhat?
Only in China? Let us have it in the USA!

For those concerned about "selling the car at a loss" that happens with all new cars. Ford "loses" $36,000 per EV sold.
The backdoor targets OpenSSH. The reason it's added to xz is that because of a complex dependency chain, it ends up being compiled to build OpenSSH. As far as I can tell, the payload doesn't get deployed into anything else.
China’s car industry is huge. Outside of the US and Europe they are in so many places. I was shocked to see that almost every other car in S. America was a Chinese make. I’d been living in a bubble.
Sure. But you could easily find a picture of a diverse group of people with lots of colors. That would have a lot of benefits. And you could make sure the license was available, or that the people were OK with it.
This is only talking about a launch in China.
Yeah, I have that on my favorites, and the sample Vue app. Never found something that worked beyond a demo scenario.
> Why are they part of the release if they are supposedly test fixtures rather than part of the application code?

Test fixtures should be distributed together with the application code, so that the actually built application can be tested. Ideally, the application should be tested every time it's built, to ensure that for instance a change in the compiler being used didn't break it.
Still not a real in person event…unfortunate. There’s something lost by making these types of events online only.
Maybe it's time to dramatically simplify autoconf?

How long do we need to (pretend to) keep compatibility with pre-ANSI C compilers, broken shells on exotic retro-unixes, and running scripts that check how many bits are in a byte?
We could look to Tesla [0] to make some guesses about that. If Tesla were founded in 2003, were selling at a loss per unit in 2020 and profitable by, then this might be sustainable for about a 20 years.

[0] https://www.motorbiscuit.com/tesla-loses-money-on-every-sing...
I don’t understand what problem this fixes for me as a customer
I need something that doesn’t reinvent the RDP wheel with less features — i.e., I need real, live RDP connections to existing servers, not a new piece of software to do remote desktops with a different line protocol.
I often wished we had more houses.

I rarely wished we had more software
Hmm… if that’s the case then Elon is just voting against his economic interests like most of Trump’s other voters. They really have lost it over culture war nonsense.
With an active electrode, it should be good enough. After all, we are talking about hobby-grade results.

The Olimex ones are 10-bit (supporting both active and passive electrodes), while it's claimed[0] that 12-bit resolution is sufficient for EEG.

However, it's worth noting that there are obvious advantages to the higher resolution.

[0] https://www.biosemi.com/faq/24bitsystem.htm
Instead of a Wankel, why not use a small custom turbogenerator, like the APU in aircraft?
Hey all, I’m the author of that PR. Just posted to Github with additional context: https://github.com/jamespfennell/xz/pull/2#issuecomment-2027...
There are other local, online-only news sources which now involve some of the previous Santa Barbara News-Press staff.

https://www.independent.com

https://www.edhat.com

https://www.noozhawk.com

https://www.montecitojournal.net

etc.
Corrupt oligarchy is a bit redundant in this context. America is an effective oligarchy, and that in itself is a corruption since it’s a nominal democracy. And that’s all that it takes to be an (corrupt) oligarchy in this context.

As to the grand parent: that’s just whining about relative privation.
Big money lines up behind a Redis fork
True, I know he caused so much pain for many people. And I'm really not saying he should not receive a big punishment.
That JiaT75 account is also suspended, if you check https://github.com/Larhzu?tab=following you'll see that they're suspended as well. It's pretty weird that it's that hard to find out whether a user is suspended.
> only to read and parse uncompressed XML…

how does libxml2 know to decompress something?

does it require you, as the caller, to explicitly tell it to?

or does it look at the magic bytes or filename or mimetype or something?
Strong "we lose money on every sale, but make it up in volume" vibes. I don't think acquiring a vehicle below costs counts as buying into the manufacturers vision.
I love this feature. I just walk into Whole Foods on my way home, grab something to cook, wave my palm over and it applies my prime code, picks my default card, and pays super fast. Honestly, really nice.
Be reasonable guy.

How would we ban Chinese products in China?

The car is for sale in China.

Only in China.
How to Write SQL Queries
> Seems like the complexity of XZ has backfired severely, as expected.

this is a very bad reading of the current situation.
They are paid much less than that. However, American weapons are also far overpriced due to high labor costs, among other things. The Chinese probably have cheaper weapons.
Star developers, proven by their projects, open-source contributions, and work experience, are always hireable.

Getting a job with no relevant degree and only a bootcamp for coding cred - that's going to be tough. (Although like most things, it's possible with great personality and networking.)
The latest version in 23.10 is 5.4.1-0.2

https://packages.ubuntu.com/mantic/liblzma5

And in unreleased 24.04 is 5.4.5-0.3

https://packages.ubuntu.com/noble/liblzma5

There are no changelog entries indicating that the package was reverted.
> This means you can run the Pi with a read-only root filesystem, which will dramatically increase the SD card’s lifetime.

I can't find an authoritative source, but some quick Googling brings up websites like Reddit and Stackexchange saying that SD cards have ~100,000 lifetime write cycles. I feel like it would be hard to exhaust that.

Is this a real problem people experience?
Tesla is building the cars in China that they sell in China, and selling them for a profit. That’s perfectly fine, China is not worried about protecting their EV industry from Chinese workers building Chinese Teslas.

If China was building the cars in the USA that they wanted to sell in the USA, and selling them at a profit, they wouldn’t be looking at 50% tariff either.

The issue is only if/when EVs made in Mexico by Chinese workers living in Mexico are being dumped into the US market below cost in an attempt to destabilize the US auto market, and China thinks they can hide behind the USMCA free trade agreement to do it all tariff free.
Tesla predates Porsche? The first 911 was created in the 60s.
Faux self driving and K-Pop army level fan base?
If capitalism cares about anything, it's economic growth. It's unclear to me how half-assing two jobs is good for economic growth.
There are tariffs between the US and China car markets (and between China and most other developed countries with car industries). These were originally in place to protect the Chinese car market, ironically, and now they work the other way the Chinese would like to get rid of them (which makes perfect sense).

Ford is selling EVs at a loss so it can someday not sell EVs at a loss:

> Ford said the Q3 loss is “attributable to continued investment in next-generation EVs and challenging market dynamics.” Regarding the latter, the carmaker noted that “many North American customers interested in buying EVs are unwilling to pay premiums for them over gas or hybrid vehicles.” This puts pressure on EV prices and profitability, according to Ford.

(from https://www.theautopian.com/ford-lost-36000-for-every-electr...)

Tesla makes money on every EV it sells, and opened a factory in Shanghai to get around the tariffs between the two countries (the first allowed to do so without creating a Chinese majority owned joint venture).
> the idea that the wild is worth preserving is frankly a relatively recent one

not entirely inaccurate, but an important distinction. People who had pre-industrial cultures (and probably some relationship to wild places) were systematically conquered and their lands taken, by militarized industrial civilizations.. this happened at various times in various places in the last 500 years. There are no places of note left that have not been treated this way.

So a preservation relationship to wild places among the civilizations established by military conquer, is relatively new.. agree
lol, i was chronically absent for an entire mathematics degree and still finished with a 3.5 gpa. chronic absence doesn’t mean shit imo.
I'm sure CCP is funding these efforts. They can remain unprofitable long as the money printer is running.
> The other job seeker loses, your boss loses, you win

Yes, that is how our economic system works. What, are you under the illusion we still have some kind of social contract or moral responsibility toward society? If my CEO doesn't, why the hell should I?
For the record I don't think it's good, but I didn't invent the game, we're all just trying to play it as best we can.
With game consoles, costco hotdogs, uber and chatgpt - companies continue to sell at cost in exchange for market position, opportunity for extra sales, or more.

Perhaps this is the base price and the car comes with 1GB of soldered ssd and you need to pay $4k premium for 4GB.
Can someone tell tech hiring on Wall Street? Financial companies seem to suffer from salary rot, a seasonal affliction appearing towards and after Comp Day.

New hires get paid more. Sometimes a lot. Salaries are geared to stay at or just above inflation while more risk is taken by the employee due to bonus turning after a few years not into "bonus" but "missing piece of salary".
I'd like to see a bare bones EV with minimal sheet metal curving and an overall minimalist approach. No need for massive torque and the battery should be upgradeable.

Oddly cars in the US have become absurdly over-designed to the point where people pay thousands for a "trim level" upgrade to get nonsense like heated steering wheels and better floor mats.

Sooner or later people will have enough of this overpaying. Car prices are inflated beyond what is reasonable. How could a reasonable, high quality EV cost more than $20K?
Would like to see if the interior looks better than the "giant LCD screen stuck awkwardly to the console" look of Tesla. Probably doesn't have real buttons and knobs, either, though.
Which smaller players are you referring to, DigitalOcean and Linode?
you didn't enable that AI feature
Kinda like Clifford Stoll!
Chinese Teslas are made in China, using Chinese batteries. BYD/Xiaomi can always do the same in the US (or just setup in Mexico and take advantage of Nafta or whatever the successor that does the same thing is called).

I doubt Elon really thinks this, however.
Every company sells their first electric car at a loss.

The first Roadsters sold for $110K and the BOM alone was $145K per car. No one accused Tesla of price dumping.
"We lose $4k per car but we make up for it in volume!"
I mostly have used AWS Aurora there, which is significantly better than vanilla MySQL or Postgres and both are similar enough.

In Aurora, Postgres has Aurora Limitless (in preview) which looks pretty fantastic.

As far as running yourself, Postgres actually has some advantages.

Supporting both streaming replication and logical replication is nice. Streaming replication makes large DDL have much less impact on replica lag than logical replication. As an example, if building a large index takes 10 minutes then you will see a 10 minute lag with logical replication since it has to run the same index build job on the replica once finished on the primary. Whereas streaming replication will replicate as the index is built.

Postgres 16 added bidirectional logical replication, which allows very simple multi-writer configurations. Expect more improvements here in the future.

The gap really has closed pretty dramatically between MySQL and Postgres in the past 5 years or so.
If you perform well enough that your boss doesn't notice, clearly it's providing the value you're getting paid for it? And getting 2-3 jobs out of a person is a multiplier to growth in theory, since they augment more other workers labour.