skysight-inc/HackerNews huggingface dataset:
Best website I've seen is this: https://eclipse2024.org/eclipse_cities/statemap.php

Click a location, then open the simulator for that location.
Is this kit using the nextjs14 src directory?
I like that it reveals itself as the parent of the orphans before it tries to kill them
Presumably they put a sheet or something washable between themselves and the blanket though?
Too blue, not too bright
The solution outlined (give employed software devs $50/year (or month) to spend on any open source software) will have a problem in that the software devs know about and want to give to itself has dependencies the devs may not know about and therefore not give to. There's a bit of distance between the open source software we know we use and the open source software we don't even know we use
Practically speaking, trying to compress a file is a nice way of measuring... something.
I was more talking about the theoretical notion of complexity.
No. OpenSSH doesn't use Landlock, and even if it did, this patch wouldn't affect it.
And now for my next trick: smuggling a backdoor into iptables.
It seems like there should be a way to catch these types of “bugs” - some form of dynamic analysis tool that extracts the feature detection code snippets and tries to compile them; if they fail for something like a syntax error, flag it as a broken check.

Expanding macros on different OSes could complicate things though, and determining what flags to build the feature check code with — so perhaps filtering based on the type of error would be best done as part of the build system functionality for doing the feature checking.
Simon - hope you don't mind me commenting on you in third person in relation to the above. Simon is a great explainer, but I wish he would credit the underlying technology or library (like tesseract.js) a bit more upfront, like you.

It matters in this case because for tesseract, the exact model is incredibly important. For example, v4 is pretty bad (but what is available on most linux distros when ran serverside) whereas v5 is decent. So I would have had a more accurate interest in this post if it was a bit more upfront that "Tesseract.js lets you run OCR against PDFs fairly quickly now, largely because of better processors we as devs have, not because of any real software change in the last 2-3 years".

I felt this before for his NLP content too - but clearly it works because he's such a great explainer and one for teasing content later that you do read it! I must say I've never been left confused by Simons work.
Argentinians travel to see East High School in Salt Lake City where High School Musical was filmed.
Even without the holes, you can just do the same thing by inverting the corners and grabbing the duvet through that.
Typical garbage argument based on the notion that open source developers are only doing it for the chance of employment. If you think this way, please stay far away from open source and even further from trying to regulate it.

Companies exploit open source no differently than the way they exploit math, science, and engineering research they didn’t pay for.

You know who else does this? Individuals, governments, academic institutions, non-profits, etc. It’s the entire damn point.

If you don’t want to use open source, don’t. But fuck off if you’re trying to ban people from using it without “paying their fair share”.
ooh I like this one. I'd propose: backdoordassh

But I wonder if they'd run into trademark issues
What‘s more amazing is the chronic anti-Apple stance of many Android/Windows fanboys and fangirls. It‘s like the Steve Ballmer iPhone-release-interview all over again.

Apple and Microsoft are just two very different companies as they always have been. One is a software company that regularly fails with its hardware products and has now turned towards using its users to harvest data at a nightmarish privacy scale, massively investing in a „fuck copyrights“-AI company.

The other is a company that has perfected a hardware-software ecosystem and is more and more creating huge turnovers with services that complement said ecosystem. What you‘ve missed to mention is Apple‘s SoC that still leave the competition in panic mode because of power and power efficiency. MS has tried to establish ARM as a hardware basis more than once and is failing miserably again and again, while Apple has eased everyone into a promising ARM future. This is also the reason for the MS-Intel-Copilot partnership. Two failing companies (in certain areas, for MS) don‘t make a success.

Why can‘t both companies be successful in very different ways?
He specifically said bankruptcy, so that's the criteria. I'm dead serious BTW, I see it as easy money. I don't usually tell shit talkers to put their money where their mouth is, but the parent is so outlandish a tangible reality check is warranted.

Nationalization... I doubt it. America's preference for regulated private development has worked really well so far. Private selloff, so long as the work continues that gave the company value in the first place I don't see that impacting their trajectory. Nonetheless I don't see them doing it for the foreseeable future, they're on track to become the most valuable company in the world (or in the solar system if they succeed) and stewardship by an incumbent conglomerate that couldn't have in their wildest dreams accomplished what spacex has would really hurt their prestige. Musk melting down is not something I'd expect to negatively impact the spacex project either, depending who you ask it's already happened and his companies seem to be doing fine hyperbole aside. Those are all more likely than bankruptcy and not likely to lead to failure of the company or it's goals so I wouldn't want to bet on those one way or another.
Caravaggio was an epic troll. His Crucifixion of Saint Peter has a pair of beautifully lit buttocks in the left foreground, which (it is thought) are not accidentally oriented towards the Carracci painting over the altar (Caravaggio's commission being for the less prestigious and remunerative side aisle).

Whilst I do agree there was an element (a sizeable element: Caravaggio was an asshole) of "fuck you" in his choice of models, there's also a coherent philosophy or theology (and maybe even politics) at work. Consistently in his religious paintings he shows holiness breaking into the ordinary world, through ordinary and even reviled people.

You see it in The Calling of Saint Matthew, where Matthew greets Jesus (who bears the merest hint of a missable halo) with a baffled expression and a "who me?" gesture.

You see it in (the first version of) Saint Matthew and the Angel where the saint holds the book and the pen like an illiterate, and seems astonished at what the angel is guiding him to write.

You see it in the Madonna of Loretto, where Mary and the Christ child are adored by a pair of instantly-recognizable pilgrims. (Pilgrims at the time, in Rome, were looked down upon and treated horribly, so depicting them in that scene was an implicit comment on their treatment.) This painting was also a magnificently petty troll, in that the pilgrims' bare, and very dirty, feet were directly visible above the officiant's head - it was originally an altar-piece - as he celebrated mass. It got moved to a side chapel soon after its unveiling.

You see it in the Penitent Magdalen, which dispenses with supernatural trappings, and places the emphasis on Mary's interior state. (Some have noted the broken necklace as a possible reference to, and comment on, the violence that prostitutes often faced.)

Coincidently (or not), the model for that painting, Anna Bianchini, was also the model (or the body, as it were) for the Death of the Virgin that you mention. Your gloss is excellent (and Caravaggio was certainly being provocative, and indeed perhaps validictory) but I think you miss one thing: the drapery. The top third of the canvas is taken up by a gorgeously-painted red cloth, the same colour as Mary's dress, which is an odd inclusion into this otherwise very realistic scene. It spreads across above the body, and then at the left is caught upwards, out of the frame, as though pulled by an invisible hand, or pushed by Mary's escaping soul. No one in the picture seems to notice, but it is in my opinion a vision of the Holy, as Caravaggio saw it, almost invisibly in operation just above, behind, and around the natural world.
You realise that the second your password manager has it, then it's no longer MFA but it's just 1 factor authentication with extra steps right?

Password manager turns something you know into something you own. If also the something you own is in the password manager itself… it's the same as requiring extra long passwords.
CamSimulate: Python app to stream Videos from files to video devices on computer
That's one alternative. Another alternative is cleaning that up in a rebase into a series of (hopefully) easy to follow individual commits that do one thing, and then a merge commit pulling in the branch with a description of the change as a whole (and a reference to the pr and any relevant tickets). There are other alternatives as well that make various tradeoffs between effort for the author, effort for the reviewer, ease of reading the git history, applicability of various tools, etc.
It makes it sound like Nvidia is doing something futuristic and exciting.

Whereas if they said "Nvidia is creating a highly detailed climate simulation", very few people would read it.
I thought that type of thinking was specifically an American thing, where we are told individuals must take responsibility for and solve the problems created by huge government/business decisions.

Almost every human has an appetite for some sort of mind alteration, but all the harms you describe here are from fucked up legal situations that have been imposed on us to control the profit and political power that trade would shift.
You may have a point, it isn't my fight because it's not my field and it doesn't personally offend me. I would probably feel different if it was porting Doom to every platform ever that was under scrutiny. And if that comes up, I would be more defensive and philosophical about it. I both know about and care about it more. So I'm going to ponder on that for a bit.
This can be easily solved by having 2 holes at the top corners, it makes life so much easier when adjusting and inserting the duvet. No need for any convoluted methods like roll-invert-unroll.
We basically need to analyse dependencies used in critical code paths (e.g. network attached services like sshd) and then start a process to add more rigorous controls around them. Some kind of enhanced scrutiny, certification and governance instead of relying on repos with individual maintainers and no meaningful code reviews, branch protection, etc.

And by we I mean at international/governmental level. Free software needs to stop being $free.

Society needs to start paying for the critical foundations upon which we all stand.
There aren’t a billion computers running ssh servers and the ones that do should not be exposed to the general internet. This is a stark reminder of why defense in depth matters.
Bird brains, maybe. I'm not sure what your expectations of GPT5 are but I meet GPT4's limits every day.
Is it time to deprecate the ability for code to implement linker symbols in other libraries? Shouldn't there be a strict namespace separation between binaries/libraries? liblzma being to implement openssh symbols seems like a symptom of a much larger problem.
As mentioned many times in other places now, this account had control over xz code for 2 years. The discovered CVE might be just a tip of an iceberg.
Without so much as glancing at that I'm guessing there's a few things missing from whatever "look at this bulging GPD" horseshit is actually there:

- Arable acreage globally

- Topsoil depth/health in agricultural areas globally

- Biodiversity as a simple count of distinct species on the planet

- PFAS contamination (by either sheer area or PPM)

- Atmospheric CO2 and methane PPM

- Geopolitical stability (this one's trending down FAST)

- Healthcare outcomes in the US compared to any other industrialized nation on the planet

- Likelyhood that a nuclear weapon will be used in anger in our lifetime

- Percentage of GDP that makes it into the pockets of people that actually work for a living

I could keep going but why bother.
It was a few added characters in a header file to make it possible to deliver the actual payload: 80+ kilobytes of machine code. There's no way to actually tell, but I'd estimate the malware source code to be O(10000) lines in C.

It's actually pretty sophisticated. You don't accidentally write a in-memory ELF program header parser.
> Other expert voices say we should be doing this fortnightly, or even weekly.

Even as a bachelor I wouldn’t wait two weeks to change the duvet covers, I hope most people change the covers when the change sheets?
IFUNC and landlock could be debugged pretty easily at runtime, just by adding some instrumentation.
> Sales don't happen in a vacuum.

Sure, but your examples don't make any sense. Matthews isn't bidding $999,999 on every house. Nor will sellers agree to $2 just because there aren't other buyers.

Property taxes are actually quite low in Toronto compared to other cities. $6k per year on a $1M house is pretty low carrying costs that will prevent you from taking a $999,998 loss.

> To stick with the hypothetical for the sake of illustration, let's say Matthews was making such offers but now is enthralled by some AI startup in Montreal instead

But the overlap between home buyers in Toronto and tech investors who do seed rounds in Silicon Valley is very small, especially for entry level homes.
Which Distro did you use on the affected devices?
It's exactly the same for me. I've been using MacOS for 15 years, and just pressing the spacebar to see an image is a huge relief. I never had to install a simple image viewer on macOS. And if I did, xnView would also work, which I had installed on Windows before.
Thank you! They are a great target group, and yes we have. I've made dashboards for the sole purpose of CSM's copy & pasting numbers into a deck. I think you're absolutely right that we could save them a lot of time.
Looks like he only introduced that "bug" in CMake. Was there migration in progress from autoconf to cmake?
Yes, I'm sure there are just two EEPROMs. Someone on Twitter found the datasheet for the module (DPE8M628), which has details: https://www.datasheetarchive.com/datasheet?id=a3c8d65ff60242...
Not only were they a co-maintainer, but if you're relying on code review to ensure correctness and security, you've already lost the battle.

Code reviews are more about education and de-siloing.
Yeah there is no need to have it hanging down, shaking it like a whip has the same effect.
The US represents a certain mythology around the Enlightenment principles that were most popular at its founding: one of the big ones was Bentham/Smith utilitarian market thinking, resulting in a conflation between "pursuit of happiness" and "pursuit of property" that the founders were not exactly encouraging of, but which many contemporary authors, inspired by John Locke's writings on property, were considering.

I believe that's at the heart of the Civil War discussion, because downstream of that mythology, alongside the "life and liberty" parts, are the compromises of slave vs free states. What took place from the founding into the 19th century was the experiment in following the myth and seeing where it led, which favored industrialization. The South had the wealth when the nation was agrarian, but the founding principles gave a political edge to industrialists, enabling the development of roads, canals, and eventually rails, while also using cheaper immigrant labor to build those things; using slaves to do these projects creates a less favorable balance sheet for the owner, because bodies that you own and are mandated to take responsibility for cannot simply be fired and replaced with new ones if they are too weak to work.

This tension of old vs new wealth also propelled western expansion, since it led to the "1 free state per slave state" dynamic to maintain political consensus, only for it to hit an abrupt ending in the 1850's when expansion reached the West Coast.
I think you're getting the causation backwards here. Successful countries can maintain democracies, but when a democracy runs into a crisis it can't handle, it usually ceases to be a democracy. You're just not counting the failures because most failed democracies turn into some other form of government.
Wouldn't that just be our view of another universe? And some universe out there sees our universe as a black hole?

It's hard to imagine a fixed limit on how far deep this pattern can go. The multiverse theory suggests that all possibilities exist at the same time in an infinite number of universes.

Can universes have circular references to other universes? A is a black hole in B, B is a black hole in C, and C is a black hole in A?

I have no idea about any of this but it's fun to think about.
> simply SSH'd over to my on-prem development machine

I use mosh and gnu screen for flaky connections. Works wonders even if you disconnect every 10 seconds.
If the only thing you're bringing to the table is the notion that, in the midst of several interrelated threats to global civilization, more people globally experience what a pakistani brickmaker might consider prosperity, you should consider spending a bit more effort towards staying informed of current events.
Skipping El Zonte (aka bitcoin beach) but covering btc use seemed like an odd choice. I was told it was mostly used by bitcoin tourists and foreign idealists. It was funny being told by a shop they don't accept credit, but only bitcoin or cash lol.

Skimmed it, interesting thoughts overall.
>Lately I've been wondering... is this a problem, or a strength?

It's a strength; fundamentally it's impossible to achieve the same degree of accuracy with a sub-quadratic attention mechanism: https://arxiv.org/abs/2209.04881 (unless the Strong Exponential Time Hypothesis is false, which is very unlikely, like P=NP).
Not a rhetorical question: couldn't the malicious server relay the challenge from a valid server for to you to sign, and impersonate you that way?
Yes in the same way micro services are a standard in the industry.

What's wrong with graphql is what's wrong with k8: people use it in the wrong context, and the right context is not most projects.
Ludicrous. Whole ecosystems weren't collapsing in realtime in 1901.
I am making those arguments because your response to a comment saying "You cannot destroy the ideology of Hamas through military means" was not "Yes you can, force vastly differs in this conflict and morality is an afterthought". Your response was instead about how cruel Palestinian civilians are and how much they celebrate the deaths of Israelis.

Anyone who read your original response would think you are saying "Gazans don't deserve to have their minds changed becasue they are evil in a way other enemies are not evil to each other" (you even included European reactions to the Moscow attack, cleverly forgetting Russia has not besieged and wholly blockaded any Europeans for multiple generations). So I also made that assumption
Spoiler alert: people in the FLOSS space have different opinions on copyleft vs permissive licenses.
Because you don't own the type?

Using another class, or struct adds up to memory usage, and turns out some C and C++ folks are itchy with such solutions, not to mention the added issue of passing wrapper classes/structs around.
Except they weren't irresponsible. We all drove back just fine, and we all went back to work just as competently as before like nothing happened.

It takes skill and maturity to have a good time but not so much that it would impair subsequent duties. The French demonstrated to me they have that down to a much finer degree than most of us have in America, so they have my respect.

This isn't to say Americans are immature, mind you. For every drunk driving incident you hear on the news, hundreds of thousands if not millions of Americans drive home drunk without harming anyone for their entire lives. What I will admit is Americans would still refrain from drinking so much during lunch when we still have a work day left ahead of us, that's something we can take lessons from the French on.

Life is short, so those who can have more happy hours without compromising their duties are the real winners.
Not true, it would be much harder to hook into openssl functions if the final executable was static [1], the only way is that if the openssl function this attack targeted, actually called a function from libxz.

[1] https://sourceware.org/glibc/wiki/GNU_IFUNC

Dynamic loading is relic of the past and cause of many headaches in linux ecosystem, in this case it also just obfuscates the execution path of the code more so you can't really rely on the code you are reading. Unfortunately I don't think it's possible to completely get rid of dynamic loading as some components such as GPU drivers require it, but it should be reduced to minimum.
I think struct-of-arrays was a quite delibarate wording. It stands out as a strategy that is at odds with object orientation and is sometimes more efficient.
Little over a week ago I published a programming language called plang (as in pseudo language).

It does exactly what you are describing in this post, all data is local, has identity (so no passwords), data is encrypted on local device but with ability to sync between devices securely.

Another benefit it has is that the code is verifiable, the app you create is just series of JSON files that anybody can read, do verifiable.

Yet another benefit is that the code is written in natural language, making it easy to understand what is suppose to happen. I call it intent programming. You can see more about it at plang.is
It's also super easy to change the video slightly to alter the hash.
And he was in the project for just 2 years.
I taught my mother how to fold a fitted sheet. A girlfriend taught me and I was floored at how elegant it is. Prior to that, they just made me angry and ended up in the closet in a wad.
While it ultimately doesn’t matter if it was Russia or China beyond potential political fallout. Do you have a link to the proof pointing towards EET?
Wood is cheap and the fuel to move it is expensive. No one in Europe is buying American Douglas Fir or Pine.
Oh yeah, everything's fantastic if you have nothing to compare it to.
Because countries have rulers and those rulers personally benefit handsomely from not taxing the rich more. It's that simple.

Also there is a pretty long history of opposing the rich and standing up for the "people" being a fast track to assassination
Fun Fact: some problems require literally everyone's participation to resolve.
What's an SSM?

For the uninitiated (like me), apparently it stands for State Space Models.
"Home Comforts: The Art and Science of Keeping House" is quite good:

https://www.amazon.com/Home-Comforts-Science-Keeping-House/d...
Open source hardware including silicon, board designs, and firmware coupled with deep supply chain surveillance are needed to mitigate this threat. There is no other way other than destructive and NDT of samples with verification. Also, an entire board of chips needs to be superficially verifiable over JTAG or some bus. There's nowhere to hide if a chip can be Xray matched to its design and to its RTL model.
Yes. At least until it decomposes or burns.
>IIRC when Google Code was announced to be closing

That happened in 2015. Everyone was already on GitHub by then. GitHub had surpassed in usage Sourceforge, Code, and CodePlex from 2011. Also CodePlex didn't had Git support until 2012.