skysight-inc/HackerNews huggingface dataset:
Only a few. Polestar is technically Chinese (Geely owned, they bought out partner Volvo recently) but they wouldn't have a huge market share. There are probably a few others. BYD is building factories in Mexico, so there may be some imports from there in the next few years. Otherwise, the US has 25% import tariff on foreign cars and incentives for domestically produced cars. So, that's a huge price advantage for what are otherwise not very competitive American vehicles at this point. The export market for those is shrinking rapidly. There's a bit of a niche market for pointlessly large trucks in Europe. But it's tiny and they just aren't very practical or economical there. Things like F-150s, Rivian, Rams, etc. are extremely uncommon over here. Rivian might grow internationally with their new, smaller models. But otherwise, it's mostly Tesla, not a whole lot of Ford (their market share has vanished rapidly in the last years), and not much else succeeding abroad.

By the time Chinese manufacturers open (or more likely take over) factories in the US, they will already have a huge market share elsewhere. There's going to be no shortage of struggling US manufacturers looking for an acquisition in a few years. That's what happened to Chrysler after they went bankrupt. It's also a bit of a repeat of what happened with Japanese cars in the eighties.
Would love to try a “Guess my HSL” spinoff.
After re-reasing the comment I think you're right. I had a hard time grokking it it seems. But since the issue was apparently a VPN app installed on the phone, I don't know whether this was the ISP or maybe their IT service provider that did content filtering on behalf of the company (like an outsourced IT department?)
I first saw this meme as a spray decal in Half-Life Counter-Strike beta 0.7.

Tempus fugit
I need full filesystem access, VIM, ls, cd, grep, awk, df, du at the very least. Sometimes perl, find, ncdu, and other utilities are necessary as well. Are you suggesting that each tool have its own SSH process wrapping it?

Maybe write a shell to coordinate between them? It should support piping and output redirection, please.
Doesn't Ctrl+Shift+v already paste without formatting?
In best case, the terms "export, borrow from, or touch it" don't make any sense.

In worst case (which I believe it is) they're rethorical terms that translate to development/licensing concepts; in this case, they're false:

- "export/borrow" can refer to the act of distributing; SSPL allows developers to redistribute and use; what SSPL prevents is for cloud companies to use it as backend for their services

- "touch" means to modify the code; this is absolutely possible, as it is for GPL

There are a few articles around that explain the motivation behind SSPL. It isn't far from AGPL in intent, but it's just too fuzzy to be accepted as FOSS.
Microsoft and OpenAI plan to build a $100B supercomputer to power AI
Fun! After a few game, my best was 100% on the 4th guess.

It looks like it's using Euclidean RGB difference, so one potential approach if you don't want to eyeball it is to just try to try to find the match for each channel one by one.

Edit: Okay, my new best score was 100% on the 1st guess, thanks to the browser inspector. :-)
> borg (vorta)

So that's like an assimilated Weyoun or what?
Always have to install Quicklook on my windows machines, too used to it on Mac

https://github.com/QL-Win/QuickLook
https://archive.ph/jNM8q
Forgot to mention — it's fully open source at https://github.com/TruncateGame/Truncate for anyone who likes poking their digital nose around :)
When I was a wee lad I used to draw/scribble this everywhere
1. Identify particularly unproductive employees. The people who relly muck things up.

2. Make them contribute to a competing open source project.

3. Profit!
I approve of this one.
40 years after his death: 30 cassettes of new music by Marvin Gaye discovered
Five games, number of tries to "Splendid!": 9, 4, 11, 19, 8

(Burnt orange, bright yellow, light blue, shock pink, dark blue)
we understand. Hands just suck to draw. They are a non-trivial shape that have multiple appendages with independent degrees of movement and angles (which makes them really hard to light. Lighitng is the biggest weakness of 2D gen AI right now), multiple types of material to consider (including nails and palm), slight deformaton, and ultimately need to be proportionate to the rest of a larger body.

Yet despite all that we are really good at identifying such subtleties in hands, even when casually viewing. So it's a high standard for a very complex piece of anatomy.
I love this type of hindsight to 20-10 comment. "If I saw...". That is a BIG if. Plenty of smart people on that mailing also missed it. I missed it myself when I opened the HN lead link. Very subtle.
> The most consequential (rightly or wrongly) technologists of our time are failing to properly think about trust.

It is implicit in your statement that you know some "proper" way to think about trust. If it is the case, please do share with us your thoughts on trust.
Export the Glyphs to SVG, Convert font format
Analyze all Unicode and glyphs of the font file, and copy the selected glyphs in the form of svg strings through shortcut keys. All selected glyphs can be exported with one click.
Only took me 18 guesses. Should've thought about ROYBGIV a bit before guessing.
I also hope that any ethically minded engineers inside Meta take a stand against this BS. The only way stuff like this happens is because engineers working on these projects decide that they can set aside whatever morals they may have had for the price of a big fat FAANG pay cheque. It's about time our profession adopted a code of ethics, like that of the ACM[1]. To the engineers who _have_ walked away despite the obvious pressures, I salute you.

1. https://www.acm.org/code-of-ethics
My screen reader cant read that site.
So I see software as a form of literacy. And we treat some literacy as “fun” (most books) yet privilege some literacy (law, a DMV policy manual).

Laws are highly regulated. The DMV policy manual is, like most government day to day policy, run through “managers” who report to a elected official (ie it can be very well written and considered or made up on the good after a bad newspaper headline)

Anyway I think I am saying there is likely to be a consolidation of FOSS - where we spend a fortune trying to bring it under some “approved and controlled” process.

We can call that trust.

I am not sure.
Awesome it's AGPL3 licensed
Sounds like you dodged a bullet. If you didn't like the vibe of the rejection feedback, can you imagine how miserable you might have felt hearing similar feedback at an annual perf/compensation review?

I think we do ourselves a disservice with terms like "hard skills" (which I'm assuming you elided to just "skills" in your post; please forgive me if I'm mistaken).

I've been at the receiving end of culture fit rejections too. It's so rough to hear what basically amounts to "seems like you might be capable of doing the job, but we're not convinced we want to work with you."

I didn't crack that mindset until I started making hiring decisions. Teams are what deliver in the long run, so it's important to stack a balanced team that gels. Having the skills to do the job is certainly important, but equally important was knowing stuff like...

Will this person feel challenged and happy here? Do they have room to grow? Are they coachable; how do they handle feedback (defensive or receptive)?

It takes anywhere from 2-6 months to get a software engineer fully ramped and operational, depending on seniority. It also takes 6-12 months (on top of that) to ethically handle someone that's not working out due to a bad culture fit. Ideally, the company has an environment that will work for the person, but that's often not the case.

Almost every time I've had to fire someone, it wasn't about skills (skills can be taught) - it was because I looked past a clear culture mismatch.

After I personally had to fire someone I shouldn't have hired in the first place, I gained new perspective about all the times I was rejected for "culture fit."

Anyway, I hope some of this helps take the sting away. There's a better job for you out there, and I'm rooting for you to find it.
In Germany car sharing services are going away from EV. Expensive and inconvenient experiment that isn't ready to be rolled out yet
You dont need to wonder. Any long term maintainer of even semi popular open source projects will tell you that engaging with the peanut gallery is completely counter productive.

Engage with people that have earned it in your eyes, whether by contributing to your project via code, assets, bug triage, writing a good and effortful bug report, whatever. Just ignore what the larger internet has to say about you and your creations.
Chinese cars are widely available in Europe and BYD in particular is becoming ubiquitous.
I didn't read it that way. I read it as in "actually giving it thought" as opposed to just barely acknowledging it or even at all.

So, not so much a judgement of the quality of the thought but rather of its existence in the first place.
Lest Mac users miss out on the nostalgia trip the Windows users are enjoying in this thread: Remember GraphicConverter? It's still around and actively developed. 32 years old!

https://www.lemkesoft.de/en/products/graphicconverter/
You don’t need to go to that extent even - simply properly segregating test resources from dist resources would have prevented this, and that’s something Java has been doing for 20 years.

It’s not sufficient against a determined attacker, but it does demonstrate just how unserious the C world is about their build engineering.

I literally can’t think of a single time in 15 years of work that I’ve ever seen a reason for a dist build to need test resources. That’s at best a bug - if it’s a dist resource it goes in the dist resources, not test. And if the tooling doesn’t do a good job of making that mistake difficult… it’s bad tooling.
The VPN (much like Meta's) is doing some root cert trickery to filter content that is deemed inappropriate or potentially inappropriate. This appeared to be controlled by a Company A in another country that undoubtedly contracted to Y religion to be their central point of content filtering globally.

So, member of the church? you get this VPN on your phone, (not sure whether phone was supplied by the church, but certainly this VPN was on it)
VPN is effectively content filtering and blocking content.

I had our app whitelisted by that central company (literally raised a ticket with them, next day magically fixed).
Cool, the latter was added to fix CVE-2021-42574: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103026
Some 15 years ago I wanted to contribute/fix bugs and asked the author if the sources are available. He answered yes, for $10000. Screw that guy, I wrote my own image viewer )
May or may not be related:
https://www.linkedin.com › crazytan
Jia Tan - Snowflake | LinkedIn
> 2007 wasn't that long ago

It was almost 20 years ago, and no, I generally agree with the person you're responding to that OSS has changed significantly in these regards since the early-to-middle 2000s.

I'm not even disagreeing with the rest of your take, just poking at this idea that time hasn't passed and changed things. Some days I look around our industry and feel like it's nowhere near the one I was working in before.
Well consumer hardware can run something in the order of ~50B quantized at a "reasonable" price today, we'd need about 5 or 6 doublings to run something that would be GPT 4 tier at 1T+. So, it would need to continue for roughly a decade at least?

Current models are horrendously inefficient though, so with architectural improvements we'll have something of that capability far sooner on weaker hardware.
You're right of course, but there are cultural norms and expectations at play here, which I feel need to be modified somewhat.

And that doesn't really change that things really are that simple, kind of. How do you stop smoking? By not lighting up any cigarettes. Of course it's not that simple, but ... it also kind of is.
Interception of encrypted communications is beyond the expectation of what most people would consider "collecting market research data"
> For statically linked binaries: not so much, each individual binary would have to be relinked, good luck with that.

Is essentially what all distros with sane build systems does.
I would actually say that he is completely wrong in this case. Open source created this problem.
Probably because it's in Dutch.

Here's a link to the Google Translate version of the page:

https://www-vrt-be.translate.goog/vrtnws/nl/2024/03/30/marvi...
If anyone is looking for a cloud option (e.g. don't have the hardware, just want to pay someone else to handle the compute while still writing about generally uncensored things like a violent RPG adventure or something explicit in the adult sense), then I guess NovelAI could fit the bill: https://novelai.net/

I guess most people focus on their image generation which is pretty cool for anime characters and things like placeholder art (say, in gamedev), but their text generation options are also pretty nice and can be used either through their web UI, or something like SillyTavern: https://github.com/SillyTavern/SillyTavern

If you do want to run something locally and have the hardware, I think people discuss models in a variety of places, like https://old.reddit.com/r/LocalLLaMA/comments/16425mk/best_ns... (quick search, was curious, NSFW discussion) and it seems like there's plenty of models on HuggingFace, though I haven't particularly looked into them.

I will absolutely say that even when I was trying to run a general purpose chatbot LLM, it was kind of impressive how quickly things are moving ahead in regards to LLMs: all of these GGML, GGUF and other formats, being able to use even consumer GPUs (though I couldn't get ROCm working with my RX580) and experimental attempts like using Vulkan.
As a maintainer of a security-oriented open source library, the paranoia of "is this person trying to help or to exploit?" weighs down on me every time I have to read a PR (EDIT: even though the libraries are by no means as widely used), regardless of whether it's from a long-time contributor or someone new. I think accepting a slower pace of development is the only viable solution (as I'm not interested in making these libraries my full-time job), but that comes with the same feelings reflected in the article listed.

If there was a simple way of advertising the need for help to a community of experts that I/we could trust, I'd take that any day.
An article about interesting applications of AI by new and established companies: Nice.com's customer experience software, John Hemming and Samuel Collingwood Smith's work - Hemming's anti-aging product and Smith's AI tutorials, and AI generated music.
Same here and tickets most of the time come from bugs so the title and discussion (if any) there are about the problem. The commit message should be about the cause and the solution. Instead people just copy and paste bug title into the message.
Probably with microphones and cameras that send everything happening inside the vehicle to China.

Strong nope for me.
He had nothing to do with this, no one is going to prosecute him.
The problem is if they become used in disposable or short-lifetime materials, most of that carbon will go right back to being CO2 once the thing is thrown away and it decomposes.

Ideally all that stuff would be sent to a facility where it can be properly sequestered long term, but most of it probably won't.
Zoner is a Finnish web hosting company, which has a history of providing hosting for Finnish open source projects, and the original maintainer (and most of the original crew) is Finnish as well. Nothing weird here.
> It made it to production, for a long time

Did it? At least in Debian, where it was found in the first place, it only existed in sid/unstable and I think perhaps in testing. It never made it into stable which is the only thing you should be running on a production system.

I think in Fedora it was also only in a testing or RC of the next stable version but I'm not sure. Also unsure about others. I have seen several distros putting out advisories (Gentoo, Arch, OpenSuse and more) but I didn't go into the specifics.
Coding Machines – A short story about the Ken Thompson Hack
Work is exhausting for everyone.
When technicals go electric we'll know the EV revolution has arrived in force.

https://en.wikipedia.org/wiki/Technical_(vehicle)
I don't know specifics either, but Debian stable has years-old packages, so I'm not sure if it's a good indicator of how widespread this got. If it's in the latest Ubuntu release, I'd say it's pretty successful.
Yes BYDs and Chinese made Tesla's etc. aren't really in the USA. I live in the USA but am in Australia right now where Chinese made electric cars (including the Chinese built Teslas) are the only electric cars you can buy. BYD is becoming a common brand and Tesla is 100% Chinese made here.

I think people in the US and the Euro nations are in for a shock once they realize China has completely stolen the market and effectively their brands in third party nations.
He also coauthored one of the classic textbooks on general relativity, [Gravitation][1].

[1]: https://en.wikipedia.org/wiki/Gravitation_(book)
Uhm... I didn't know that nature grows (or needs) homes! How curious!
In Sweden it's been doubled down but charging infrastructure is pretty ok, not sure the state in Germany but given the slowness of Germany on adopting new technology I'd guess it's dire. Pretty strange if such a densely populated place can't rollout decent and convenient charging stations.
The word that springs to mind is “campaigning”. If persons campaigning are nobodies as their contribution is concerned, whatever they are pushing for should be considered noise and put straight into the bin.
> why people pay for 3rd party VPNs? It's far more secure to create your own wireguard/openvpn/whatever with a cheap VPS

Your comment seems to infer that you're unable to empathize with people who might think/understand differently than you. It also seems to negate that you avail of other services/non-self-controlled processes without worrying about the threat models, there.

Just hand-waiving with a "Why don't people just do 'x'?" is ironic - in the sense of "Why do you do your own medical care?" or "Why don't you grow your own food and slaughter your own animals?" or "Why don't you manufacture your own phone, it's operating system - oh, and the cellular tower closest to you?".

Threat models exist, _everywhere_, and it's impossible for someone to build all of the pieces, themselves, to prevent all threat models at every possible avenue/point.

In other words, at a non-arbitrary point, doing _everything_ yourself is untenable and that's precisely why services in society exist, today (that and ease of access, use, required foreknowledge, and - most notably - cost).
How to Create a Discord Bot
Thanks friend.
I don't think it's weird or broken to think and compare on what LLM do vs what our brain do.

It shows more than not that we are also parrots
> Well, there's also the opposite: Goldman Sachs's Slang allows space as part of identifiers.

Many SQL implementations permit whitespace in identifiers, but then you need to use quoted identifiers.
Real expert mode is guessing CIE 1931 XYZ values in a windowless room with a carefully calibrated display and ambient lighting.
I just put the duvet into the cover, making sure two corners of the duvet go to the deepest corners of the cover, then stand on bed, hold those two corners and shake for a few seconds, then lay it flat on the bed and adjust as required. Takes 30 seconds, plus time for closing the fasteners.

My wife introduced me to an interesting and possibly KKK-inspired method where she would wear the duvet cover inside out, totally covering herself, and then pick up two corners of the duvet with her hands inside two corners of the cover. Then she'd reverse the cover off herself onto the duvet, from which point her method was the same as mine. I found it hilarious.

Everybody's different...
It would be interesting to hear the whole arc of social engineering behind getting access to the repo. Although, as a maintainer of a large-ish OSS project myself, I know that under a lot of burden any help will be welcomed with open arms, and I've never really talked about private stuff with any of them.
The last sentence is an overreach to me, but I have experienced much of the same bike-shedding during code reviews. 95% of them are useless. Read that twice; I am not joking, sadly. I am not against code reviews, but in my experience(!), the reviewers are not incentivized to do a thorough job. Seriously, if you deliver a new feature vs do a deep, difficult code reviews, which one benefits you more? To repeat: I don't like it; I am only pointing out the perverse incentives to rush during code reviews.

One more thing that I don't see enough people talking about here: Writing good software is as much about human relationships (trust!) as it is about the computer code itself. When you have a deeply trusted, highly competent teammate, it is normal to put less effort into the review. And to be clear, I am talking about the 99% scenarios of writing the same old CRUD corporate code that no one gets excited about here. Please don't reply to this post with something like, "Well, I work on Dragon at SpaceX and all branches have 2x code coverage and the QA team has 600 years of combined experience... Yada..."
First game: 77 % on the first try, Splendid! on the second.
Of course plenty of orgs are able to collaborate effectively remotely. But in my experience these orgs are the exception. My experience is that most companies, especially as they get larger, are unable to facilitate a strong collaborative environment while remote.
Looking forward to Nvidia announcing AI that can drive to old people's house, carry them to shower, wash them, give them food, and ensure they take their medicine.

Robotics still suck, and that's what will seriously limit impact of AI for now.
You also might need calibrated eyes. (My left and right eyes don't see the same colors.)
That's reasonably sane of SQL. In Slang, you don't need to quote. (The syntax is still unambiguous. In principle, eg Python could do something similar, because they don't have any existing syntax where you just put two identifiers next to each other with only a space in between. But C could not, because variable declaration is just two identifiers, one for the type and one for the variable name, next to each other with a space in between.)
From my understanding, FIDO isn't MFA though (the authenticator may present its own local challenge, but I don't think the remote party can mandate it).

There's also the issue of how many sites actually use it, as well as how it handles the loss of or inability to access private keys etc. I generally see stuff like 'recovery keys' being a solution, but now you're just back to a password, just with extra steps.
Even Tesla is pretty much a Chinese made car outside of Europe and the USA markets nowadays. eg. They pretty much stopped importing USA made Tesla's into Australia now that their China factory has ramped up for example.

So one of your two 'not China' examples is actually China.
That would honestly be one of the most impactful bits of public service to fall out of any agency, regardless of country. Even if this is nefarious, a couple of intentionally clumsy follow-ups designed to draw further attention would be amazing to see. Think chaos monkey for software supply chain.
I didn't blame anyone; I just made some observations on how this type of thing can be avoided, partly based on my own experience doing volunteer work for the last 20 years (as open source maintainer and as scout leader), and being subject to the same pressures at times.

I hate this trend of shouting "victim blaming!" once someone tries to explain things or analyse anything. Not everything needs to be a value judgement. "X happened, and Y could have prevented it" is not a judgement.