skysight-inc/HackerNews huggingface dataset:
Now we are running in circles. As you see in the git commit, the compile check was added because the existance of linux/landlock.h alone was not enough to check that the feature can be used.

This header defines the data types for the Linux kernel interface, but not how the syscall landlock_create_ruleset(2) will be issued. That is provided by libc either as a separate wrapper function (does not exist in glibc) or the implementation needs to use syscall(SYS_landlock_create_ruleset, ...), with the constant also being provided by libc. That is how it works for all syscalls and you won't be able to change this.
> Isn't this the same for every product made in China vs made in the West?

Yes it is.

> Why no big tariffs on those to protect our local electronics/clothing manufacturing industries?

I don't know :)
> this command shouldn't be hard to understand

I understand the command, I'm just questioning the example if they want to do some positive marketing for the tool. Something simple like the following gives the same information but is much more understandable than unnecessarily convoluted directory names.

restic -r /backups/restic restore latest --target /home/dewey --include /home/dewey/myfile.txt
> It baffles me how such an important package that so many Linux servers use every day is unmaintained by the original author due to insufficient funds.

Is it actually insufficient funds or is it burnout?
> Yes, this almost succeeded... but can you imagine how many scenarios where someone such as Andres Freund would have found irregularities, but then.. what? Just had to report it to some webpage's contact page? Without being able to even dig further?

You should check the thread posted yesterday, the Lastpass guy who raised a PR for a go binding for xz but was otherwise unrelated to this fiasco already faced a bit of questioning regarding their motivations from their employer based on a user reporting them from a contact form.

Moreover, many companies already have information from background checks, and in certain countries, they also have the tax identification number of the employee which can pretty much identify who put in the backdoor.
Absolutely. Especially when, in the US, the whole point of mentioning a company's country of origin is as political capital in a conversation about manufacturing jobs.

When taking into account that Toyota and Honda manufacture their cars here, it becomes clear the argument is not for the benefit of the working class but for the owning class (c-suite and shareholders).
Humans can always be compromised. This specific case can only be solved by improved tooling, workflows, visibility, runtime environments and so on.
This is very much about personal backups but while we're here - what open source backup tools do people recommend for very simple filesystem backups to a remote server?
Many maintainers want to please their users, and be helpful (which is admirable, and more power to them), which means #2 applies. Sure, the maintainer is entitled to say "fuck you, I want to sit on my project and you can fork it if you want", but he was, presumably, trying to be helpful and succumbed to pressure.

I don't think the maintainer is at fault to any degree here. Sure, this could have been avoided if the maintainer refused to be pressured and kept sitting on the project and letting it die, but it's not his fault that he didn't do that, and I wouldn't want that to be the default for maintainers either.
History is about stories of people in the real world. Learning dates of battles or treaties was and is also hated, but otherwise it is just stories, one can more or less relate to.

Plain math is abstract. No humans involved, just numbers and formulas. Nothing to connect to, unless the teacher brings in the real world. Because math is awesome at describing and predicting real world events. But that is usually applied math, like physics. And I loved physics (and history) in school. But math? My brain refused as it saw no benefit except for the needed grades.
> You're not talking about forests, you're talking about tree farms.

I think this is the main issue here. They redefined "tree farms" as "forests" a long time ago, so they can put an equal sign between them.

A forest is an ecosystem. A tree farm is not.

You cannot regrow a forest.
Thanks! Great notes
But Public Domain license already prevented that? At least in the most countries. But local laws goes above licenses anyway.
The maintainer did mention mental health issues. It can be hard to say no in the best of times, let alone when your own mind is trying to screw with you.
> At issue is whether high school students can apply to UC if they have taken a data science course in place of Algebra 2, the traditional third year of high school math that used to be required of all applicants.

> The expansion to data science was seen as an equity move for Black and Latino students who have excellent academic records but were being kept from four-year colleges by not having taken Algebra 2.

SO...if their disadvantaged school district can't manage to get them through a decent Algebra 2 course, then exactly how is it going to get them through a decent Data Science course?

Unless "Data Science" is PC-speak for "Advance Web Clicking with Buzzwords".
H4ck1ng.google
I don't think anyone is questioning the impact and future of ML/AI products and services.

But as things are right now, the only AI companies with any serious impact are the very companies that train and release the huge and extremely expensive models.

Everyone else seem to be layers on top of those products.

I'm getting immediate flashbacks to the era of "Google killed my startup/product", where google could simply either acquire companies, or implement their own solutions which essentially killed small competition.
Golden-Section Search
I think this might take away a bit from the "strategy" of the game. Or not so much strategy but the mental fog that plays a role in blunders and the like - the same as how it's harder to get a grasp on your opponent's words at a glance because they're flipped. Just my 2c
:)

From what I understand even that version if xz will not cause issues on the *BSD because it needs a patched sshd linked to a systemd library.
Thank you, this made me realize I assigned a wrong (too little) number for uids. It did not fix my issue however. I still see

(dev) $ podman info
ERRO[0000] running `/usr/bin/newuidmap 3427 0 1000 1 1 100000 65536`: newuidmap: open of uid_map failed: Permission denied
Error: cannot set up namespace using "/usr/bin/newuidmap": exit status 1

I tried a solution I found on Red Hat's Customer Portal:

(root) # setcap cap_setuid+ep /usr/bin/newuidmap
(root) # setcap cap_setgid+ep /usr/bin/newgidmap

Also did not work. I can run

(root) # podman info

just fine as root. This leads me to believe there are some other problems with my non-root user permissions.

EDIT: It probably makes little sense, to run rootless on top of an already unprivileged LXC. I just wanted to give vscode server it's own non-root user in there. Oh well...
In exchange, each binary can be audited as a final product on its own merits, rather than leaving the final symbols-in-memory open to all kinds of dubious manipulation.
Yes, Orbital, which is better.

https://doc.redox-os.org/book/ch04-09-graphics-windowing.htm...
Do you have any examples? I’ve never heard of anything remotely like that happening.

> Sexual content are less likely to be cancelled when more male is involved, contrary to superficial reasoning.

It’s true that many men don’t mind sexualizing women, but that’s restating the problem that this creates a hostile atmosphere for everyone else.
Meh, itineraries. So unromantic. But I'm retired, so can stay at a place for an extra week, or cut my stay short, if I feel like it.
I'm not sure. I know from working on OSS projects personally that insufficient funds can easily lead to burnout as well. You gotta find other sources of revenue while STILL maintaining your OSS project.
Mimestream looks so incredibly polished. But just like all third party clients that use the Gmail API, it doesn't support muting:

https://portal.productboard.com/mimestream/1-mimestream-road...

Does anyone remember how long ago the API came out? It definitely wasn't at the original product launch, but I imagine it too has a lot of years at this point.
Thanks for your reply. In your meaning, a 'word' is just a contiguous string of letters in one direction... So in this way a 'word' can be invalid or valid.

But (pedantic note) it is a little more specific than that. It includes ALL letters until the edge of the board or space on the board. Right?

Do most people consider an invalid word to be a kind of word? I don't think I do, and I think this was the source of my confusion. But I'm not a word-game person per se nor Scrabble expert... this might be obvious to other people.
As the article explains this is purely about about compatible calling conversations between rust and C. I guess your question is also directed C compiler implementations that even overwrite LLVM defaults to achieve this alignment.
Apple TV's Fantastic "Silo" Plays Out Like Great Sci-Fi Literature (2023)
Bear in mind that they don’t applied this to everyone, which would be practically impossible.

They hired Snapchat users (via a testing services provider ) to let meta observe their usage of Snapchat.

Something akin to paying someone to let a meta researcher sit by your side and observe while you use the app.

This happens all the time (hiring the testing services to recruit users to use your own app and analyze the patterns with screen recordings and such).

The news here is paying for someone to “test” a competitors’ app.

I hope that the testers knew they had Snapchat analyzed and not that they were told they were testing only Onavo.
> Ours isn’t much better. Each commit message has a mandatory ticket number you have to enter. So for details you need to jump to the ticket.

In my perfect world people would write self-contained commit messages. Links to non-essential elaborations is fine.

But what we have is often (ticket + some bare-bones explanation of what the code change does without explaining why). Okay, so that’s annoying that I have to click through to a slow issue tracker instance for every commit.

But maybe people just want an easily changeable (unlike immutable commits) place to write down what this is about. Is the issue tracker that? Ideally (or second-to-ideally; see first paragraph) the title and description explain what the problem is. If this was a long back and forth issue then hopefully someone has updated the description to point to exactly what the PR/commits are supposed to do. More likely though is that the issue is a stream of consciousness:

- Naive title

- Naive description

- Back and forth troubleshooting in the comments

- The tech lead shoots in with “so, i guess <discard everything> and do X”

And that’s the average good case. I’ve been complaining recently (maybe on two occasions) that I as a secondary (to the tech lead) PR reviewer can’t even easily figure out what the PR is supposed to do based on the issue.

So there is no curation or editing. Even though the issue tracker is elevated to be the source of code change truth by mandating that commits need to have the issue id in the title but almost nothing else is demanded of the commit message.

Now compare all of that to—no matter what is in the issue tracker, no matter if it has good or bad information—taking five minutes in order to write a commit message (or just a PR description which you can use in the merge commit) on a change which took in total three hours to work on with all the back and forth and testing and debugging. Now the snapshot of your understanding of the issue at the time of writing the commit/PR stays there forever, without any need for hyperlinks or external tools.
Yes, I also like the historic playback feature. It shows the effect the US had overtime on various countries.
Doing 128bit atomics with CMPXCHG16B requires 16 byte alignment, and AFAIK that is one of the more common uses of 128bit types in practice since it's used in certain concurrency primitives to avoid the ABA problem.
Thanks for the examples, I'll note them. We did intentionally scale back from the classic wordgame dictionaries (looking at you, Scrabble) due to an overabundance of archaic words that the NPC can play against you — but it does push us into the unfortunate role of dictionary moderators!

I'd like to add a button to the dictionary to report words that should be included. For now, we erred on the side of a smaller dictionary since it's less jarring to add words than remove them :)

(stere / steres is especially regrettable, sorry!)
A mirror is here[1] for someone who wants to read the commit messages, though as I understand it is insufficient for reproducing the backdoor at compile time because it is missing the m4/ files required for this purpose.

If someone has the additional details to reproduce the backdoor, please let me know and I'll add these files in the repository.

[1] https://github.com/supriyo-biswas/xz-mirror
Geely also make the London cabs via their London Electric Vehicle Company (LEVC) subsidiary.
The more money we give, the more viable it becomes for maintenance to become their day job. It's very likely that more money here would've mitigated the burnout. Aside from just being able to quit their actual job and focus on their passion project, it's acknowledgement that the world finds this work valuable. In many cases, burnout comes from a lack of recognition, or the sense that you've done all this work and nobody really cares.
Nah, I've met enough amoral people over the course of my career to know that's not the case. However, the overwhelming majority of people I've worked with are people who do have morals and do care about the outcomes they're creating, and that gives me great hope.
I usually keep all my work in a stash until I'm ready to create the PR. I used to preface my intermediate commits with "WIP -" and then reset the branch and re-commit everything when I was ready to create the PR, but that was just too much effort
“It seems foolish to change”

Rejecting evidence in favor of retaining preconceptions is certainly popular.
Thank you compiler developers (this time) for giving resources that people use and find useful

(Still weird why would LLVM not align it to 16 bytes though)
It is hard, but I think corporate open source users and entrepreneurial software developers have a moral responsibility to do more than I see being done in the areas that I listed. To be crystal clear, in this case where I don't think Lasse is at all culpable, the responsibility would be with the companies that profit from the work done on xz-utils.
SoylentNews: A Hotbed of Crime?
Thank you for this comment, you've done a fair better job criticising cultural bias in LLMs than most.

> But how do you create the terabytes of Hindi language content required to make ChatGPT understand Hindi as well as it understands English?

It's wrong to assume that every language needs as much training data as English to match the English performance, since knowledge that isn't language- or culture-specific can transfer, in theory and (what used to be considered amazing) to a large extent in practice, once it understands the language very well. Of course a very large proportion, maybe the majority, of what the largest LLMs learn is cultural, but the actual language learning is only a small fraction: A transformer with only tens of millions of parameters can translate between two languages.

Are you saying ChatGPT (is that GPT 3.5?) is much worse in Hindi when given the same prompt in English and Hindi? I'm disappointed to hear that, I had thought OpenAI had done better at multi-lingual performance than many others.
If you're on Windows try https://table2xl.com (disclosure: I'm the founder), it's more accurate than Excel's camera import. No API though.
Imo, Midjourney’s images have crossed the boundary to being hard to tell from stock photos
it turns out that there is shuffle album mode (I vaguely remembered it but wasn't certain)
This is IP based blocking. You can get around it by creating a Reddit account, or logging in. I Just did that on my remote browser app, the demo of which is here:

https://puter.com/app/cloudtabs-browserbox

If you read past the "Woah, there pardner." You'll see a paragraph that says, Try logging in or creating an account here to get back to browsing.

This works. You can use reddit if you just create an account or sign in.

I guess this is IP-based blocking to counter bots.

edit: Oh boy, these tiny servers are not meant for this kind of hug. They may suffer!
Sure, but your solution supposes some kind of linking cop program overseeing the linking process, and who is going to keep the linking cop honest?
I'm assuming this is a reference to Silicon Valley (2014): https://www.youtube.com/watch?v=vIci3C4JkL0
I'm sure there will be plenty of advice for testing the backups themselves, but for online backups (either to server or to a service), one thing which is easy to forget to do is to check you can still get access from "scratch" - ie if you have lost all local data. Make sure you don't need eg passwords or keys for the online backup service which you have no other copy of (doesn't help if they are in the backup itself!) or indeed for email/cloud accounts which you might need to regain access to to get to your backups.
In a police state, it’s good to be a cop.
It is also a cultural thing, being from Southern Europe took me some time to get used to the Northern Europe approach to be direct without any yes and buts.
Making.
You think it might make life too easy? But it's similar in some Sid Meier games where you can see the outcome of a battle (or the odds) before committing. Besides which, the dictionary is patchy and unpredictable, so I use it on most moves anyway, to strategize around its arbitrary subset of English.
The general pattern is probably that automated customer service has improved. But, if that automated service can't solve the problem, it's almost impossible in many cases to reach a knowledgeable human who is empowered to depart from a script.
Eh. That's the religion. You have to grow and fight for first mover advantage or something.

Does nvidia pay dividends, or they're also keeping those (indirect) VC money for "growth" ?
Or there isn't anything else to be found.

It's more or less impossible to prove the absence of these type of bugs, so you can always say "we only know about the ones found" because that will always be true.

Either way, you're going to have to do better than "this could perhaps possibly maybe be a more common problem" if you want such a huge sweeping change as maintainers of open source projects to "be identifiable". What does that even mean in practical terms? They upload their passports? To who? Who and how do they verify this? How do we prevent edited passports? What about privacy? etc. etc. etc.

All for something we don't even know is a problem.
Ask HN: What are your favourite hardware Dev Kits for AI development?
Combining AI with hardware features like video cameras and lidar is all the rage right now, and it would be very fun to hack something together.

What is your favourite hardware dev kit? (e.g. Nvidia Jetson Nano was all the rage a few years ago).

Main factors for consideration are processing power - it should be able to be used at a somewhat professional level, as well as ease of use - easy to moderate level of complexity are ideal.
These have to be distributed in the operating system by default. Ubuntu ships some, but they sandbox limited set of applications.

I installed some of these anpparmo profiles in Ubuntu, and had to spend a lot of time profiling and fixing permissions. This was an ever changing process, also required security knowledge. Eventually, I removed them.
Interesting! This might be our Scrabble bias showing through. Yes, when we say "word" I suppose we're meaning "something that a player has claimed to be a word" by placing contiguous tiles. I'll look at somewhere to clarify language in the tutorial.
Because history, biology, or foreign languages have easier to understand practical uses.

Many math teachers do not know math, and cannot answer the question "what will I need it for?"
You can grow a forest, you just do that in a different way than you grow a tree farm. And there isn't a lack of insects and other things to move in once you laid down the foundation for that ecosystem, they are still everywhere in Europe.
Well step one is to just stop doing it? I guess someone will need to start publishing a static-only linux distro
Did they overharvest it to build beyond what's needed and then scramble to replenish the resource because of in irresponsibility and hauter?
<bug report>

I got the first one in 10 guesses, then I tapped New Game but the background didn't change and my next guess said NaN%

(Android Chrome)
We're currently working on Azure, but it's not stable enough to be listed here.

> > AWS, Google Cloud, DigitalOcean, VMWare Vsphere, OneLogin, and Slack
> kind of a weird mix of control planes

:D agreed. Two of these things are not like the others. There are also Github, Posthog and Scarf plugins.

To explain, Fix Inventory doesn't care about Cloud resources per se. It can create an inventory of whatever kind of resources. fixcore maintains a large graph of resources and makes them searchable. fixworker runs collector plugins and ships their results to the core. In theory you could build a plugin that monitors the sensors of your farm's greenhouses and run automations and reporting on them.

Slack for instance is there because when you want to notify a user on Slack it makes it convenient to lookup their internal Slack ID based on e.g. their Email address.
So you might do lookups like: AWS resource tag -> OneLogin User -> Email -> Slack UID.
This time there’s a gold rush in both gold AND shovels. It really feels like there’s no break between the bubbles anymore.
I have never seen a code of conduct that would prevent a polite rejection of whatever new suggestion or help to a project.
The issue, as I see it, is that roughly 50% of the population is incapable of learning algebra at a proficient level. I suspect that being able to learn algebra well greatly depends on one’s early childhood education. People living in bad school districts are at a severe disadvantage as a result. As a result people of color, statistically, are the ones who fail algebra in college the most and thus some people think college algebra is racist.

Such is my opinion and experience. I’ve been teaching college math for 30 years. I don’t have studies to back my opinion up.
I mean dynamic loader is part of the base system and you generally trust the compiler and linker you build the program with. If any of those are malicious, you've already lost the game.
You need to look no further than what was happening on the xz commit threads post disclosure; there were multiple people preaching as to how to do "real" software development.
Seems indistinguishable from meaningless machine-generated blog spam to me.

But sure, go shit your turgid toxic waste in the river we all drink from along with all the other people mindlessly chanting "AI ... AI ... AI ..." with dollar-signs in their eyes.
You don't need to reset the branch. Using rebase -i, you can squash all your WIP commits that way.

You can also use it to split and individually pick changes if you want to clean up your commits.

You can automatically fix up commits after review commits using git absorb [1].

[1] https://github.com/tummychow/git-absorb
SSE instructions are not all that uncommon with bignums (including 128-bit types), but generally avoiding your structs crossing cache lines is very useful for performance. There are also instructions like CMPXCHG16B that need 16 bytes and are a lot worse if they cross cache lines.

IMO it's actually a pretty big performance bug for 128-bit ints to not be 16-byte aligned.
2 games, one was correct at the 27th try, the second one at the 14th.
Taws – The Amiga Workbench