skysight-inc/HackerNews huggingface dataset:
Exactly. The whole thing reads like some propaganda. It pits interesting topics ahead then to move on and push some agenda that sounds super political to me.

Yes, some languages are underrepresented and there are some thresholds. But exactly, it is well known that putting the threshold just slightly above or below will probably not materially affect the model.
I liked that too, what was the prompt?
The debate this article addresses might be the best televised debate of all time. The best I've ever seen, at least. Most debates miss out obvious arguments on both sides.

I've got an issue with the article.

> "So the only way it could possibly be a lab leak is if the lab leaked sometime in late November, infected exactly one lab worker, that worker went straight to the wet market, infected a vendor, then went home, quarantined, recovered, and all other cases were downstream of that first infected wet market vendor. This is unparsimonious."

I don't think that's true, as there's a lot of overdispersion in the spread of this disease. Yeah, I don't think a strict quarantine is likely, but it's not suspicious at all if someone infects 0 or only 1 person.
Not sure if this is just my imagination but I think I might have experienced the same phenomena, on Instagram, I can look at an image of a person and very often guess that it's AI generated, even though it's a very realistic looking image.
Wildcard search of External links on Wikipedia
> And why is that.

You tell us, you were just caught lying on both of your claims. Perhaps it was to give mindless Anti-EU crusaders a new talking point?
Rather unlikely. The bad actor never had access to git.tukaani.org, and the sshd version running on that host is:

SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u3

That is, a stable Debian release. Definitely not one with liblzma5:5.6.x
Wood isn't cheap in Europe though, we definitely do buy wood from overseas.
Can confirm, distance is no barrier for the LOTR franchise. There’s still plenty of tourism in nz because of those movies.
Since the blackouts last year and the recent IPO, it feels like astroturfing and spam have increased on Reddit, while quality contributions have decreased. All usage metrics are up according to Reddit's IPO filings, but it feels like engagement is actually down, or at least lower quality. Many niche subs feel like ghost towns now.

Is this just my subjective impression or do you feel the same?
Wiztree is a good alternative to Tree size, it's almost instantaneous
When I say fixing I primarily mean government fixing. But thanks for insulting my ability to read because I used the wrong synonym (fixing/control).

Therefore I will ignore price gouging laws because that's a form of the above but also if reasonable they won't apply to a person selling their own single allocation.

> In this scenario, eventually no amount of money can buy food. You could be the richest person on earth, willing to spend every last cent you have, but you're still not eating if you happen to come late to the party.

If you come after everyone eats for the day then that's not a shortage by my reckoning. Price works just fine as long as you're not insisting on being served between meals.

It's not like you can expect to buy a house in less than a day no matter your budget.

So I still don't see a big difference here between 90 meals and 90 houses for 100 people. There's always a price that will get you one.
This is just spectacular. Evil, of course, but spectacular nevertheless.

+ #include <sys/prctl.h>
+. <<<<<<<<<<<<<<<<<<<<<<<< THIS IS IT
+ void my_sandbox(void)
+ {
+
Re-reading that, a 15 yo travel back in time to have sex with his grandmother so she can give birth to a son the will have a son and this son will be old enough in 2024 to travel back in time in 2009 and impregnate his grandmother ? He biologically couldn't originally come from 2024, his father hasn't had time to develop the ability to reproduce.

Or anyone is time travelling and your explanation is basically just magic.

Definitely Alabama vibe though :].
The steam deck is a step in this direction.

Apple could easily do this with the iPhone and have it switch to macOS when docked, but obliviously won’t because they want to sell you two devices.
At some point, Prog pop/rock was relatively popular and influential. Some pretty complex pieces became hits. Nowadays the big labels are selling extremely simplistic music - it's much cheaper to produce and perform than something averagely complex (not to mention something like prog rock), and it makes them mindboggling amounts of money.
We can do rebase and squash on our side while also developing with silly commits but not pushing them.
I don't think making movie out of a book tells anything either... Ofc, they will pick such works just because they can put pretentious marketing blurbs everywhere...

Just looking at art market and how it works with artist should tell everything about these markets in general. All marketing and manipulation.
I believe the canonical response to this would be the "today's lucky 10,000" xkcd.

When the blooming of the perennials no longer moves you, perhaps it's time to take a walk outside the garden ;-)
> no/low-alloc code has it's place

... Which is pretty large in the embedded firwmare field. However that's not systems programming but system (singular) programming.
Eastern Europe - 25th? Not 24th?
If an individual had somehow done this, I expect that the Computer Fraud and Abuse Act would be used against them. With Meta, we'll see.
Finance is one of such use cases, but there's a lot more, and that's the use case for people not using GC, thus why I find this article (and the comment saying 500us is a solved problem) pedantic.

I wrote code profilers for instance, which also need perfectly predictable latency. I worked on L2 and L3 networking applications (bridging, routing, forwarding) that need line rate support. People working on audio sampling, or codecs have the same constraints, etc.

There's a whole world of applications where 500us is ridiculously slow. The article takes the OS as example, but if my OS has 500us random latency spikes, I would be horrified.
> The SaaS/cloud/etc. companies themselves should fund the projects they depend on.

There is a bit of a free rider problem it seems.
PokeLLMon: A Human-Parity Agent for Pokemon Battles with LLMs
All Your SSH Are Belong To Us
The quote is introduced with "but", and the first part is the other way around ("...distance instead of dramatizing...").
AFAIK, these tight regulations are only applicable for those big enough to be considered “gatekeepers.” Can’t remember the specific criteria but should be easy to research.

So it’s kind of “fear-mongering” to say that it also applies to startups.
By delaying something introducing stupid regulations, they block it.
Yes and No.

for TLS traffic you need to also install onavo.

But the app does scan your contact list every couple minutes and send diffs to their servers. Even if you have never opened the app. And on previous android versions all your recently open apps list too.

But again, if you install whatsapp you must give them the contact list permission anyway otherwise the app is intentionally broken and annoying.
Crypto has been largely unregulated. People who gamble with crypto should know that.

In fact, the same crypto bros argue that they should NOT be regulated.
So the first step of this huge mess was: a social engineering attack. Attacking a tired, burnt-out open source project developer and peer pressuring him into giving more control of the repo to the attacker.
What do you think Cloudflare is doing with its SSL termination/offloading?
Where can you buy SpaceX stock?
So was the plan to just yolo this out into the wild?

because the document says here that it was going to be given to trial participants as part of yougov(and others) survey. Which implies that they would have been informed/paid.

If its the former, then obviously thats unauthorised wiretapping. If its the latter so long as informed consent is given, that a shittonne better that the advertising tech we have now.
So how can we be sure now that todays VPNs are not tomorrows Onavos. :(
Can we please see prison time for this. DCMA should apply and it have criminal penalties including prison.
Thanks, I think you're right. It seems weird to have a parallel structure where the roles are swapped - but Toni Morrison would know better than me! Maybe it works better in the original context.

To see the context, I think I'd have to visit the "Random House archives at Columbia University’s Rare Book & Manuscript Library", though they do have a website: https://library.columbia.edu/libraries/rbml.html
A gentle reminder to actually TEST your restore workflow.

WBD: since 2011! https://hn.algolia.com/?q=worldbackupday
Well there's a reason why every flagship phone has Samsung display
So probably Suojelupoliisi, Finnish Security and Intelligence Service is behind all this
Thanks for the reply, I was just curious because `RSA_public_decrypt` threw me off.
My questioning of Patrick White began with hearing that he wanted Ken Russell to direct a film based on Voss ...

That seemed like an, ahhhhhh, interesting choice of auteur.
The point of squash is that the "history" is nonsense like "fix" etc. There are two types of commit: versions and checkpoints. The latter are just to help you develop and can include stuff like "end of day" that should never end up on master. Squashing is a way to turn those into versions. Blindly squashing every branch down into one commit is stupid, though.
KC(x) is always finite for any finite x. What we can say instead is that KC is unbounded. I.e. there is no finite bound on the value of KC(x).
I believe it’s not because Germany actively blocked it, but rather Google did not make it available yet.
But my argument isn't that freedom of speech could be used as an excuse for something that would otherwise be illegal -- my argument is that publishing and discussing exploit code is a constitutionally-protected activity. The CFAA statutes can be violated by gaining unauthorized access to a protected computer system, but that did not happen in the process of authoring and publishing the exploit code. The attacker was authorized to release new versions of the software, and they did. Their choice of what to make their software actually do is not regulated by the government, any more than a musician's choice of which lyrics to include in their song.

If an attacker then actually uses the backdoor created by someone else's decision to deploy the new release into their own environment, to gain unauthorized access to a protected computer system, then obviously there's a CFAA violation there. The public facts don't contain documented examples of this having happened (yet), though it will be unsurprising if that changes.

So it is still not obvious, at least to me, that any crime under US law has occurred so far. I am not a lawyer, though I'm aware of how badly the government has lost the previous court cases that attempted to restrict what humans can put in source code.
I’m tall but got super king sheets. I much prefer roll method which is just less faffing around.
Certificate pinning and validation in apps for one. Onavo's VPN was really clear it collected market research data. It was as informed consent as a click-through could be.
Well, in C the visual indentation and the meaning of the code (given by {}) can diverge. That's even worse, and happens in practice. Many style guidelines for C have evolved specifically to address that problem with 'the language itself'.
I cite a source, you don't.
It was just that it hooks to `RSA_public_decrypt` which threw me off, I didn't really understand this backdoor much. I only have one Debian sid machine which was vulnerable and accessible via a public IPv4 ssh, I'm not sure if I should just wipe it.
Shaking is far more exhausting, dusty and not foolproof. Roll method is no brainer, esp on large sheets.
> My biggest fear is it’s going to come the moment I do end up buying after saving so much.

Honestly, I figured this was gonna happen after Covid, when we finally bought (in a good area, but a small house for far too much money).

However, here we are almost three years later, and prices have again increased such that I'm looking at a nominal gain of like 10% (now obviously inflation played a role, and we've put a bunch of money into the house).

The irish housing market just defies all understanding. We have whole areas of the capital city where the median price of housing is 650k euro, when the top 10% household incomes start at about 100k, and you can only borrow 4 times (for the last year or so) of your total household income.

It. Makes. Absolutely. No. Sense.

And this insanity cost me a bunch of money as I didn't purchase in 2019 because prices seemed too high.

Something something markets irrationality, me solvent.
https://www.youtube.com/watch?v=oxo92I-akL0

This speech? You think that makes Bukele a "globalist neoliberal"? That would indeed be hilarious, if you did. I do like your sense of humor!

But no I wasn't claiming any particular person is or is not "with" the western ruling class. Obviously this order welcomes many horrible dictators (and "authoritarian demagogues") among its ranks, famously in the Middle East but really anywhere it furthers their power. I was just commenting on the parent's post about people supporting them, and it's in contrast to their cookie cutter ones. The Justin Trudeau, United Nations types.

Not saying any particular politician or policy is better or worse, just that people feel like they've been failed.
It's weird now that "it's right there in the open",

Listed among the most recent commits there is "update two test files" https://git.tukaani.org/?p=xz.git;a=commitdiff;h=6e636819e8f...

And it's kind of smart to attack a compression library - you have plausible deniability for these opaque binary blobs - they are supposedly test cases, but in reality encode parts of the backdoor.
Huh? So anyone who asks/says something in OSS, should just throw money into the ring to have an opinion?
...maybe list the distros or macOS point releases/paths that you found it on macOS. ;P
I used to and it's actually how I got a large part of my computer skills, but unfortunately I got medicated for ADHD and became normal and can't do it anymore.

But I still think reading boring logs is a great way to understand a system. Turning on all the intermediates for a compiler (llvm ghc etc) is very educational too.
First, all VPNs spy on you, just don't believe these claims because they are forced by law to do it. Second, don't use a VPN that clearly states that they're analyzing your traffic data.
> I suppose the key difference is

Not really the difference in context of IrfanView which is also just an image viewer.

I tried JpegView, but it’s lacking several features I use in IV, and stuff I commonly do in IV is harder to do, so for me IV is a clear and easy winner. Performance is a little better, but not in a way I’d actually care about (mainly superfast skipping through images is slightly faster)
You are simply ignorant of how large duvets can get (taller than 99th percentile).
"Far too many companies (and DevOps teams) think the www site is "not important" or "not their core job" and outsource it to either a less qualified team, or out of the company altogether"

It's impossible to know because they won't admit it publicly. You are guessing based on some anecdotal experience.

But then again... here's mine! I worked at a very successful SaaS that had (really not kidding) the most incompetent, lazy dope running the www site. He live-edited a "staging" version of the site on the fly (no, it wasn't private, you could access this thing from the internet, and he didn't know or care about that). When he was happy with his changes he'd destroy the live instances behind the load balancer and clone his staging instance without taking it down or running any extra checks. This staging instance was around for years and I don't think he ever bothered doing a system update. Since he didn't use git, I I'll bet that at least once he cloned a live instance back to staging to undo a bunch of bork.

I lost count of the incidents. He never detected them himself, was never available to troubleshoot them and was generally a big "durrrr" when you'd finally get him on the call. Example: one time we had a "slow, intermittent errors" customer support ticket surfaced to us, not because it was our job, but because dopey was being an absolute ass to the helpdesk guys. He ran his crap in another AWS account we didn't have access to. About a day later the www site went down completely, so we got hold of the AWS account and dug in. All 5 of the instances behind the load balance were "unhealthy" for various reasons. Certs expired, disks full, apache stopped. We bounced them, restarted them and sshed in. They all had different versions of the site. It was a complete mess. Turns out dopey wasn't very good at killing the old instances and cloning staging. He was probably live-editing the instances for smaller changes if that seemed easier than a bunch of AWS console work.

Unbelievably he wasn't fired and continued to mismanage the site, and we could do nothing because the head of marketing didn't listen to the head of engineering. They hated each other. The way Marketing saw it "your SRE guys couldn't fix it, they had to wait for <dopey> to get on the call". I'm not even kidding.

Just more anecdotal evidence from me. You might be right.
How to back up your data and keep it safe
I hope you are not sleeping with same duvet since you were 18…
Maybe I should name my child 'tim emachine'
Enabled by customers who don’t pay or donate.
You would have to agree that it was possible for the government to break the law. And what the repercussions are when that happens.
Really what they're proposing here is a non-modifiable system, where the root is read-only and no user can modify anything important.

Which is nice and all, but that implies a "parent" system that creates and deploys those systems. Which people likely want remote access to.. Probably by sshd...
You've handed off your argument to two opinions; those of Sanja Kon and of Piero Cingari.
FWIW RSA_public_decrypt is an 90s way of saying RSA_signature_validate
Which works in long time scales as long as the players agree that they will play by the rules of democracy, aka respect the institutions.

So democracy suffers from 2 main issues: 1) timeliness: some problems need to be solved now, not in 10 years. Example, need to decide your stance against Russia. 2) fragility from the inside: A malicious player can manipulate democratic institutions and convert it to an autocracy. See Russia, Turkey and Jan 6 USA.

Not sure how one can design a system robust to these two threats.
This is not part of autotools output. This is part of the backdoor. Not arguing about autotools drawbacks though.
The oldest extant meme I'm currently aware of is "follow me" sandals:

https://sarahemilybond.com/2014/10/06/follow-me-courtesan-sa...

https://www.etsy.com/listing/80717468/follow-me-bring-wine-f...
>Your "mindset" is basically allowing bad code into the Kernel and hoping that it gets caught.

Not at all. I'm talking about running more and more rigorous security tests because you have to catch vulnerabilities, 99% of which are probably introduced accidentally by an otherwise good, reliable developer.

This can be done in multiple ways. A downstream distribution which adds its own layers of security tests and doesn't blindly accept upstream commits. An informal standard on open source projects, kinda like all those Github projects with coverage tests shown on the main repo page. A more formal standard, forcing some critical companies to only adopt projects with a standardized set of security tests and with a sufficiently high score. All these approaches focus on the content, not on the authors, since you can have a totally good-willing developer introducing critical vulnerabilities (not the case here, apparently, but it happens all the time).

On top of that, however, you should also invest in training, awareness, and other "soft" issues that are actually crucial in order to actualy improve cybersecurity. Using the most battle-tested operating systems and kernels is not enough if someone actually puts sensitive data on an open S3 bucket, or if someone only patches their systems once a decade, or if someone uses admin/admin on an Internet-facing website.
There's a lot of confusion around these stories these days, which reminds me of the "Gmail is looking at your emails" stories[1].

First, this is not wiretapping, come on. There's targeted man-in-the-middle (MITM) attacks, and then there's this. This is plainly "we are using advanced powers to analyze your traffic".

This is not even Superfish[2] type of stuff, where Lenovo had preinstalled root certs onto laptops to display ads. This is "if you opt in we will analyze your data".

Every program you install on your laptop can basically do WHATEVER it wants. This is how viruses work. When you install a program, you agree to give it ALL power. This is true on computers generally, and this is true on phones when you side-load programs. The key is that when we install something we understand the type of program we're installing, and we trust that the program doesn't do more than what it _claims to be doing_.

So the question here is not "how does Onavo manage to analyze traffic that's encrypted", it's "does Onavo abuses the trust and the contract it has with its users?"

[1]: https://variety.com/2017/digital/news/google-gmail-ads-email...

[2]: https://www.virusbulletin.com/blog/2015/02/lenovo-laptops-pr...
I would start restoring trust by reverting all this guys commits. It's the best way to be sure.
How Google fights Invidious (a privacy YouTube Front end)
As of yesterday March 30, Google has apparently made some major changes to how it authenticates devices for Youtube and thus broke thousands of Invidious instances that were happily used as a daily driver by thousands of privacy enthusiasts including me. Having Invidious (currently) broken makes me wonder where the cat and mouse wars of big tech and privacy devs are headed to
Furthering sexual the fantasies of pedophiles actually does not help children, but obviously creates predators as more people are exposed.
I believe they were talking about sideloading a binary tarball instead of building and repackaging.

Choosing a distro is nothing but choosing where you place your trust.

I can understand debian cutting corners here and there. But RH have little excuses with the money they make. Yet, even a superficial analysis, show them to be less trustworthy than the anime-avatars maintaining gentoo or arch.
Anons will just steal identities, and randos will get accused of hacking they didn't do.
> In contrast, rents are a more reliable indicator of a shortage, no speculation there.

You'd think so, wouldn't you?

However, again the Irish market disproves this to some extent.

So generally you look at rents as a 12-14 year payback window of the house price (for investment). What happened in Ireland in the last decade is that rents increased, such that investors could pay more for houses, which increased rents etc etc.

Like, there's all this purpose built accommodation in Dublin that's sitting empty because they want 3k euro for a two bed apartment. For reference, a top 5% taxpayer would clear about 6-8k euro per month, so those prices are entirely out of whack with what people can afford.

But because it's all private capital, it's mark to myth so many of these apartments are empty. I work near the Central Bank, and there's loads of gorgeous six-eight floor blocks of apartments, all of which are entirely empty while we have far too many homeless people.
> In my experience it's much less error prone to unify memory and external resource management.

Until threads and async enter the scene.
Are these customers or additional attackers who have never posted before and will never post again?
Data-Driven Programming
Sharding does exist with postgres.

What type of ha can mongo do postgres can't?