skysight-inc/HackerNews huggingface dataset:
Surprised I haven't seen on HN. Maybe I missed it. Anywho it's amazing.
It was caught out of luck due to performance degradation. So nobody reads the code - not even once- prior to merging into upstream supply chain?
https://archive.is/yS2wX
As a personal anectote, I find anything that moves in my periferal vision to be distracting. Therefore, if there are any animations that occur without me initiating them on a second monitor, I find those distracting.

That includes animated gifs, videos, ads, etc. on pages I have open as reference material.

They need a way of pausing, stopping, or hiding the animation if it lasts more than 5 seconds to comply with accessibility guidelines [1].

[1] https://www.w3.org/WAI/WCAG21/Understanding/pause-stop-hide....
It's the default for Debian,

- "The default file system selected in most cases is ext4; for /boot partitions ext2 will be selected by default when guided partitioning is used."

https://www.debian.org/releases/bookworm/amd64/ch06s03.en.ht... ("Debian GNU/Linux Installation Guide (Bookworm/amd64)")
If those were the only benefits nobody would think it was remotely sane. The extra work supporting `main` and dealing with the confusion far outweighs that.

It would be like renaming `creat` to `create`. Yeah it should have been `create` in the first place but it would be completely insane to change it now.
In this specific case this is true, but generally speaking Github can remove repositories for any reason (and for no reason). They provide free bandwidth so it gets used for that, it's just not trustworthy.

One option for distros that compile from source (such as Gentoo, NixOS without the package cache, of Arch Linux's AUR) is to make the package system to either download from Github, or download from a distro-provided mirror if Github is down. Distros could pool together to offer a source code mirror that is common for all their users. That would be a good thing.
it's 2.3/second not 380
For Python, you could make a proper deployment binary using Nuitka (in standalone mode – avoid onefile mode for this). I'm not pretending it's as easy as building a Go executable: you may have to do some manual hacking for more unusual packages, and I don't think you can cross compile. I think a key element you're getting at is that Go executables have very few dependencies on OS packages, but with Python you only need the packages used for manylinux [2], which is not too onerous (although good luck finding that list if someone doesn't link it for you in a HN comment...).

[1] https://nuitka.net/

[2] https://peps.python.org/pep-0599/#the-manylinux2014-policy
No doubt about it, but the article is talking about a hypersuccessful megacompany (that manufactures 60% the world's microchips) compared to other megacompanies in tech. I'd also point out that we are talking about hardware which is always, always harder than software. Show me a famous purely hardware company founded by a 19 year old college drop out.
Invisible Unicode and Compound Emoji
There was a really awesome deep history of TSMC on the Acquired podcast

https://www.acquired.fm/episodes/tsmc
Even if you account for intermittence? As far as I know solar/wind alone are not a replacement e.g. I'm not aware of steel factories running on batteries given the order of magnitude of energy consumption.
really? it was captured like quoted: https://web.archive.org/web/20240305043015/https://www.vultr...
My common sense says that if a woman doesn’t want a photograph of herself used in a particular way, then continuing to use it is clearly wrong.
Check out the IKEA light bulbs, they are cheap and great.
I think its around 1TB a day, but indeed still very small.
White space killed an enterprise app (2019)
> because FC runs on any hardware evenwithout dedicated GPUs

Twenty years of memes disagrees wholeheartedly
Some notes on Firefox’s media autoplay settings in practice as of Firefox 124
As a kde neon user, the plasma 6 update broke all my global automaton shortcuts (like for example press win+u to automatically write a random uuid where the text cursor is). The script uses xdotool for this, and "it just works" every time.

On Wayland three is no xdotool, but there is ydotool (and a couple others). However for some reason they are not reliable (with and without xdotoold) and most of the times the pasted uuid is missing letters. I managed to get around this by using the clipboard to copy the text, and then I can manually paste it, but it's a extra step. Plus I have other scripts that deal with emojis and other Unicode characters, and it's either been a pain to work around or "It just doesn't work". I switched back to X11, and I'll probably stick with it a few years more.

But I'm still confusing, linux is the best platform for customization, and allowing you to automate things. However wayland seems like a block. I understand that it's a more modern project, probably more optimized and everything, but unless I'm missing a key toggle or tool to allow me to automate things, I'll try to avoid it.
I think OP means that the 6 million requests might not be evenly spread. They might only occur during 5 minutes of each day, for example. I don't know enough to know whether that's feasible.
assuming they're smeared equally across the whole month, that is. Eg if the majority of those requests kick off a job at midnight on the first of the month, it's a bit more to deal with.
Yeah, but that kind of workload isn't really X, OpenGL and Vulkan are designed in a way that X isn't necessarily part of the story, and CUDA, SYSCL even less.
Yep, I'm wondering the same thing. It seems easy to brag about using only one binary if you don't need to use another service e.g. a database.
It just means that there is one big binary that does everything, instead of a bunch of microservices communicating over a fabric of some kind.

As someone who thinks microservices actually simplify a lot of things, especially in complex domains, the idea that a monolith is a choice makes me cringe a bit.

I mean they start out simple, but ...
While I don't think it's practical to expect every paper author to write in the most consise and elegant style possible, one thing I do wonder is the lack of a "comment section" for papers: why isn't there a centralized place for academics to just leave comments or their understanding of the paper, like most of the web forums? I don't expect the author to respond or even be active in every comment section but there should certainly be such a place. Every other form of Internet-based discussion, including Reddit, any random Internet forum, mail lists, Discord, etc. are all interactive and everyone is expected to participate in a centralized and public discussion.

This way, even if the paper itself is hard to read, for the good ones I do expect someone else to leave a comment with a sketch of the most interesting parts of the paper that would get upvoted to the top, and the author could click a "promote" button or something to make it official. This way the author doesn't have to write very well as long as the paper is valuable enough for someone else to be interested.
At the time I installed Windows on a free partition on my desktop PC for the sole purpose of playing FarCry. It was great fun. The graphics blew me away.

I watched the movie a few years later, it was ... not as good as the game. But movie adaptations of video games almost never are, Postal being a notable exception.
Ingenious doesn't mean what I think you think it means.
> bit ingenious

I think the word you're after is "disingenuous"
You are mixing it up with Crysis?
"We" doesn't have to be the U.S. This is a false dichotomy that I see people in this thread keep pushing. I suspect in bad faith, by the people that want to insert backdoors. As a baseline, we could keep the contributors to NATO and friends. If a programmer is caught backdooring, they can be charged and extradited to and from whatever country.
https://x.com/bl4sty/status/1773780531143925959?s=20

So nobody reads releases notes either.

But I’m sure this was a one off and were safe now
One pitfall of this is that the decompressed contents of your initramfs must fit within half of your physical RAM since Linux decompresses it into a tmpfs.

Or if you set rootfstype=ramfs, then you can take up to all of physical RAM, but ramfs isn't swappable.
Not back then, no.
on the other hand, maybe stories like this can get a 55 year old CEO or CTO to break off and do something cool.
Reminds me of Nietchze’s Genealogy of Morals quote: I’m strong enough to allow that.
because for the driver behind the wheel it's certainly awesome

I disagree --- I have been in a newer car with bright LED headlights, and while visibility in the bright area is certainly great, it makes it much harder to see anything beyond that, because the eyes are adapted to that brightness. The effect of having things "pop" into view as they cross that threshold was actually quite disconcerting.
If the game or your training crashes though, it matters a lot. What sort of bugs give you wrong values without crashing, especially driver bugs?.. something is strange here
You can build native and self-contained binaries in C# too.
perhaps enough food. But it's very poorly distributed
A mirror of the offending repository created by someone else is available at [1]. GitHub should be keeping the evidence in the open (even if just renamed or archived in a safer format) instead of deleting it/hiding it away.

The offending tarball for v5.6.1 is easier to find, an example being.[2]

m4/.gitignore was updated 2 weeks ago to hide build-to-host.m4 that is only present in the release tarball and is used to inject the backdoor at build time.[3]

[1] https://git.phial.org/d6/xz-analysis-mirror

[2] https://mirrors.xtom.ee/gentoo/distfiles/9f/xz-5.6.1.tar.gz

[3] https://git.phial.org/d6/xz-analysis-mirror/commit/4323bc3e0...
I see, that makes sense. And automatic provisioning can be costly in instances like ddosing.
I hope you've hired a PR person for all the interviews :)
Any compressed format is okay as long as you have a working compressor and decompressor, where the compressor can reliably compress an input and the decompressor can reliably decompress the compressed input. Everything else is not as relevant, including the exact file format (because you have the known-good decompressor).
Note that if this particular "theory" pans out to be true, any response will require a round-trip, thus making it more like 16 minutes to even matter. Any prayer during an emergency had best take that delay into account.
One cannot guess with post-modernism. Classicism has fixed standards of beauty, you can measure them looking at a piece of an art and grade them. The follow ups like Renaissance art tried different standards of beauty, but the idea was the same: you measure level of art looking at the art. But post-modernism had shown then you can make a pile of trash and it might work like an art installation. The really interesting question is if any pile of trash can serve as an art installation? Or maybe you need a pile with some special characteristics? If so then what are those characteristics?
Public boasting as a mitigation strategy, that's got to be a new one.

Not entirely sure it's a wise approach given the deeply asymmetric infrastructure costs of DDoS attacks, especially if the attacker has access to a botnet.

[EDIT]:

in other words, there is a non-zero probability that the attacker, piqued by the boasting, might be able at the flick of a switch to increase the intensity of the attack by a factor 1M.
Does e-archiving use bzip2? I think xz was mostly advertised (and successfully adopted) as a substitute for bzip2, because bzip2 was even slower than xz.
It's a well established term. Example, this article of James Lewis and Martin Fowler from 10 years ago https://martinfowler.com/articles/microservices.html

"To start explaining the microservice style it's useful to compare it to the monolithic style: a monolithic application built as a single unit. Enterprise Applications are often built in three main parts: a client-side user interface (consisting of HTML pages and javascript running in a browser on the user's machine) a database (consisting of many tables inserted into a common, and usually relational, database management system), and a server-side application. The server-side application will handle HTTP requests, execute domain logic, retrieve and update data from the database, and select and populate HTML views to be sent to the browser. This server-side application is a monolith - a single logical executable[2]. Any changes to the system involve building and deploying a new version of the server-side application."
The volt is not a serial hybrid. The motor is physically connected to the wheels (in an interesting way btw), so it can drive on gasoline alone.
I enjoy kolourpaint. Its quite similar to the old windows paint before it started adding layers and whatever else in 7+.
How are you arriving at that number?

60 seconds per minute
60 minutes per hour
24 hours per day
30 days per month
~2.59 million seconds per month

One billion requests into 2.59 million seconds is 386 requests per second.
Yes, you can rent a few dollar VPS from e.g. Hetzner (since Germany is mentioned in the blog post), and run a few wget commands in parallel in a loop on their 200MB setup file to easily reach 1TB a day.

For a company, this should definitely not be something to worry about. However, if I were able to single out individual IPs that are attacking me, then I would simply block them, report them (use the abuse form from the hoster of the attacking IP), and call it a day. This way, you can at least hope that the hoster will do something about it, either by kicking the hacker off its platform or, if it is some kind of service reflection attack, inform the victim to close the security loophole on their server and remove themselves from the botnet. If your attacks originate from a vast amount of different IPs from Russia and China, consider geoblocking.
Why do you need batteries on trains ? Just electrify the railway. It's a solved problem like a century ago!

PD: Yes, you could use a not electrified railway, but simply makes more sense to electrificate all railways
Digital Textures
Show HN: Turtle graphics with only 6 commands: C, F, R, S, [, ]
My guess would be that they needed instant updates. Rick had said that MSStore took days to publish updates, IIRC.
3D DOM viewer: visualise the DOM topographically
Fun fact, both films were made by one of the worst directors of all time: Uwe Boll
Okay, so instead of one random Gmail account taking over a critical project, we need two or three?
Given that the vast majority of the web are Wordpress sites (or Drupal if you're a larger Org) that are on $5-20 per month multi-tenant hosts, have not installed caches, and speak directly to the database... the vast majority of sites on the internet can be knocked offline by merely doing 4 requests per second.

That sounds crazy, right? But yet that's where we are.

Context: I used to manage the DDoS protection at Cloudflare, and also the WAF, Firewall and some customer facing security projects, and we frequently either saw that web scraping took customers offline, or trivial and very low volume HTTP request rates took customers offline. In the early days we considered anything to be a DoS when it threatened our infra, but the threshold for customers is barely higher than a few concurrent and active users.

The big numbers always make headlines, but it's the small numbers which most people feel.
> I don't think there's a good reason to keep pushing down deadend reliability paths. [..] Not every novel and viable solution ends up being an enhancement.

That's a strange take.. It took decades to get reciprocating engines to be reliable, even deployed at scale. It also took decades to get jet engines reliable enough to comply with ETOPS requirements, to the point that it was long considered a pipe dream.

If it hadn't been for continuous investments over long periods of time and incremental adoptions of improved technologies, we wouldn't be enjoying any of their benefits today.
I never really understood the point of this article. The way to have reliable long term storage isn't to use compression formats which are resilient against bit flips; none of them really are. The way to have reliable long term storage is to protect against bit flips using checksums and redundancy.

These are alright criticisms of the xz format, but nothing which would make me wary of using xz for long term archival.
There's good discussion of the timeline here: https://boehs.org/node/everything-i-know-about-the-xz-backdo...
There have been issues with git's master->main transition as well, once automated systems came into play that expected to find a master branch. This is also my main complaint about that particular episode: Too much "somebody needs to do something" mandates, and too little "how to do it properly" (which would provide benefits for other situations as well.) When the two parts of the activity are split between two different groups, there's no incentive, either: The mandate group checks a box and walks away happily, having reached their OKR. The implementation group doesn't get the devops time to implement proper aliasing and what-have-you, so they just wing it until everything works again.

That said, it's mostly water under the bridge right now, and it isn't applicable at all for the "reference image for computer graphics papers" situation unless somebody starts rewriting all the old papers to reference a different image:

A "somebody needs to do something" mandate would likely lead to new versions of the old papers in which the image is removed without replacement. The "do it right" solution would lead to people replicating the research with different material, which might not even be for the worst - but I see no chance that will happen at scale.
> Combustion is also not perfectly clean.

It can be if done in a sealed device which then processes the remainder.

Which is important because aerobic life is basically a combustion process.
The latin equivalent: aquila non captat muscas ("eagles don't hunt flies")

Anyone have the cuneiform expression for 80/20?
Saw it once, it was incredible. I didn’t really know what it was when I first walked into the room and kind of got sucked into it.
I'll stay on Xorg, which has worked perfectly fine for me for decades, for as long as I can.
I use openbox, and fluxbox before that. A bit of pekwm and bspwm in between.
I love the diversity of Xorg window managers, and I prefer its architecture which allows one to write a new wm in a few hundred lines of code, instead of pushing all complexity away and creating massive fragmentation and (mediocre) reinvention of wheels.

Wayland tries to solve problems I don't have, while creating actual problems for many people like myself.
It's a serious downgrade for me, so I'm staying with Xorg.

Same thing with neovim actually: a solution in search of a problem.
I don't care for treesitter (it's slow, buggy and makes my code look like a Christmas tree on steroids), I don't like Lua and I have no use for an LSP.
I'm staying with vim, on openbox, on Xorg, on Debian.
I sell these all day at work.

Aftermarket, the blame largely lies on the end user incorrectly selecting and fitted LED modules, but I still see this problem far too frequently with cars coming off the production line.

I cannot tell if it's the business incentives around the engineers designing these boards, an actual lack of understanding of optics from them, or a failure in due-diligence from companies they supply to.

As a person formerly heading down a physics career: LUX AND LUMENS ARE COMPLETELY DIFFERENT MEASUREMENTS!

I am worried far too many companies are taking Lumen readings from incandesent bulbs they are trying to replace, looking on DigiKey and selecting whatever COB from Cree with the same amount. This is not how it works physically and especially not how it works for how humans percieve light!

I wish more work would be put into the proper testing of the diffusion of light. Yes diffusers exist from proper companies like 3M and yes they are used, but it to me seems beyond something you can just dump on an otherwise busy engineering team in isolation and expect good results. You need proper user testing and more importantly need the cost of diffusing methods to come down many order of magnitude per mm^2.

And I'm not even covering other considerations like colour rendering index optically or standardisation of techniques compliance wise.

It is an emerging area, but I can't help but be aggravated by the seeming lack of process. Good LED specialists understand how to make them look correct, the rest of the world just can't seem to yet.
>They’re advocating deploying a binary as preferable to using docker, fair enough, but what about the host running the binary? One of the reasons for using containers is to wrap your security hardening into your deployment so that anytime you do need to scale out you have confidence your security settings are identical across nodes.

There is no universe in which _increasing your attack surface_ increases your security.
Why is the Long Range Zip lrzip compression format not used?
It gives better compression than xz when using the correct switches.
I recall the i3 rx only had about 2 gallons of gas.
Why is the Long Range Zip lrzip compression format not used? It gives better compression than xz when using the correct switches.
I loved the way this game allowed for very different tactics (go all guns blazing or go stealth).
a) they didn't want to move off RDS
b) this is a pretty big hand wave over migrating your persistence store on a moving product and moving engineering teams

The coordination alone usually takes months
Ahh yes, security through obscurity - if we make it so complex we can’t understand it then no one else can either, right?

The important thing is making walls indestructible, not making more walls. Interfaces decrease performance and increase complexity
What if subtle gesture controls that you can even do with hands in pockets controls the glasses HUD?
And you can create a second, small partition/filesystem if you still need to persist some things. I used to have very little data to persist and I would mount/write/unmount every time I write to deal with possible power issues.
That is what I did as well.
But you wouldn’t use a key value data store as your main store. It’s a specialized kind of store. Of course Redis and friends have their place. Just not as a main store.
Stumbled upon 'Fulcrum' yesterday near Liverpool Station in London without knowing anything about it.

Incredibly impressive piece of art that made me stop and admire it for a few minutes. Watching the relatively minuscule people shuffle by at the base of the _enormous_ sheets of twisted steel was fascinating.

Yesterday I knew nothing about the artist but the moment I saw this article title I thought, "wait that piece had to have been this guy." I'm going to have to seek out more of his work.
It is ingenious to turn a mild attack into a 100+ point HN submission!
What makes that even more ironic are the number of people involved in that spat that were probably happily wearing cheap cotton products of dubious origin at the time.

Actual modern slavery still exists and is sadly wide spread.