skysight-inc/HackerNews huggingface dataset:
Well, sshd doesn't depend on liblzma in the first place, but Debian and RedHat thought it would be a good idea to tie it into libsystemd for logging purposes, and patched in support. It's still pretty bad to have systemd compromised, even if ssh weren't, though. Maybe the army of pitchforks should be marching on the systemd camp. It's definitely not OpenBSD's choice of architecture, here.
As he points out, India already has 300,000 chip designers. But that isn't the point - he is concerned that the policy is ill-thought and flawed.

> "As the IT minister acknowledges, we already have 300,000 chip designers without doing any chip manufacturing. Nvidia and Qualcomm don’t make chips, neither does Apple. They design them and get them made in Taiwan. Dutch firm ASML makes machines to make chips, without having major chip manufacturers in the Netherlands. This is why I worry that chip subsidies indicate government policies that have not been carefully thought through".

What he isn't saying out loud is that it could be part of the larger 'electoral bond' corruption scam of Modi:

> "The reality is that the chip subsidies are capital subsidies, which are meant to be paid up front, not based on production (unlike production-linked incentives). If the government’s claims that India will be making chips soon is credible, the capital subsidy will have to be paid very soon ...

A large part of the corruption scheme cooked up by our dear Prime Minister was based on his government transferring large amount of public money to corporates in the form of subsidies or waiver and they would share a part of it with him through the anonymous electoral bonds scheme his government created. Modi government has promised nearly $10 billion in subsidy for chip manufacturing, but instead of creating a policy based on production-linked incentives, where subsidy would be disbursed only after a certain level of production has been done, Modi has created a policy where he'll be giving corporates money upfront to setup the chip plants. Obviously, corruption opportunities are higher with such a scheme and there is a danger that the company may wrap up operation in the future, anytime it struggles. Many other countries are also investing in chip plants and the competition is only bound to increase.
Nice :) Today it's possible to do a lot of it with vanilla Python (sortof):

something(lambda x: [
x2 := x + 10, # define variables

[ print(f"Number: {i})
for i in range(x) ], # loop

[ 0 for i in range(x)
if print(f"Number: {i}") or True
if print(f"Second line: {i}") ], # loop if you prefer "normal code order"

0 if x > 0 else {}[f'{n} should be positive'], # conditions and asserts (throws KeyError, but includes the error message)

x2 * 2 # return
][-1])

note: I'm not responsible for coworkers injuring you after committing this
Did you happen to transfer that phone number from a land-line to a mobile? Sort of like geo-ip systems, the SMS providers like twilio track blocks of numbers and label them as land-line or not, and refuse to send SMS to landlines. Unfortunately they're quite stale and don't account for the possibility that users could switch their number. They have ways for the user to reach out individually and fix their number, which is... Dumb.
That is a great feat, of course, however, the bigger issue will be war experience. No matter how many drills they do, there is something to be said for actual combat experience.

If I were magically given a fantastic guitar, I would likely still be outplayed by an experienced musician on a basic instrument
You're missing the fact the engines were left in different configurations because of a subtle timing difference between the ECUs. That left the plane in an unstable state. The pilots actions were not an error per se - the video even emphasises that it is not banned in Europe and pilots on that one model alone do it once a month.
A Palisade is a Hyundai for anyone else who didn’t know.

https://en.m.wikipedia.org/wiki/Hyundai_Palisade
> I am well aware that if my employee is failing me, then in some way I am failing them.

I have had to fire people over the years, of course, but whenever it gets that far I feel terrible that it got to that point, that how this person was managed is a failure for the company and the departing employee. I hope it’s obvious that none of this is expressed to the person being fired — they are miserable enough about their situation and don’t care about the company any more, if they ever did.

Always there is a post mortem: did we hire the wrong person — if so what could we have done better? As for the management — again, what could we have done better?

BTW I’m sorry you had to deal with that horrible experience. At least it was only two months.
Why are there many people dying the last few days? I am reading hacker news every day, but it feels like there’s at least a death note or two a day currently
Signal doesn't have also too many users.
Every car/SUV they make is highly rated. Reliable, well priced, good looks, premium interiors and, yes, fun.
This is true but players understood the goal - play better football.

With math it's what exactly?

If someone worked backwards from code on DAY 1 of high school math, I'd have been engaged... Instead it was mindless repetitive drills. Later as an advanced thing they'd ask you a real-world question: "Let's say you wanted to circumnavigate the Earth and you started here and had to blah blah". I think they should start and not end with that type of thing.
Why do people rely on automatic gearboxes to keep cars in place? Trusting the "park" position is like leaving a manual gearbox car in gear: it can do the job, but it's not the right tool for the purpose. The handbrake is there for a reason.
1) Almost no one is building FB or Gmail, yet act like it. The precise reason why still escapes me.

2) For other use cases, it’s not that hard to manually update some elements in the DOM. You very quickly learn how not shot yourself in the foot. Certainly a lot easier (and faster) than dealing with the mess that is the React ecosystem.
Not really my point though.

I just want to get the people who scream on HN about how software should never ever break backcompat under any circumstance, in a room with the people on this issue who are stunned by how convoluted this situation is, and get them to fight it out. Bonus points for when those people are the same person on different days.
AIUI the RP2040 has -- as a deliberate design choice -- no security features: no secure boot, and no debug protection. That means it is incapable of offering any firmware integrity, or keeping any data secret at runtime.
I was pondering using Chicago as default font, but it is pretty 'typecast' (no pun intended, this time ;-)) -- Charcoal (that was used in System 8.x onward) is a lot less 'known' and also, I think, a significant improvement...

But it is actually pretty easy to switch to Chicago in the library -- apart from the clone you mention, there is also a 'plain' TTF version of the original Chicago floating around...
To summarize, agents are (essentially) LLMs in a loop: take actions, think, plan, etc, then repeat.

Currently, from what I've seen, current LLMs "diverge" when put into a loop. They seem to reason acceptably in small chunks, but when you string the chunks together, they go off the rails and don't recover.

Can you slap another layer of LLM on top to explicitly recover? People have tried this, it seems like nobody has figured out the error correction needed to get it to converge well.

My personal opinion is that this is the measure of whether we have AGI or not. When LLM-in-a-loop converges, self-corrects, etc, then we're there.

It's likely all current agent code out there is just fine, and when you plug in a smart enough LLM it'll just work.
2 years ago|162 comments - https://news.ycombinator.com/item?id=31897530
The Christian Afterlife of Pontius Pilate
Rust just hasn't expanded enough yet :)
I don't even think it is true for small vessels. Catamarans and outriggers are absolutely not self righting.
Post-operative cognitive dysfunction is exacerbated by high-fat diet
You broke the site guidelines extremely badly and many times in this thread. We ban accounts that do that.

I'm not going to ban you right now because the other account was also being aggressive, but if you keep breaking the rules, we're going to have to.

If you'd please review https://news.ycombinator.com/newsguidelines.html and stick to them from now on, we'd appreciate it.
If only their perception matters, then they should put it in the job ad. But no, they prefer to lie: we are a team, we want the best, we are a meritocracy. That's the problem. They should look in the mirror more often because no IC can bankrupt a company, but a couple managers will.
I mean this in all sincerity, but just type slower.
That's also my guess; however this would probably also mean it's too delicate to actually be deployed in a normal environment.
i'm drawn to FOSS by my values, and David really is out there living his values. we have a number of people in this space who strive for that same ideal -- and i appreciate them all -- but it really is too easy to get bogged down in the low level stuff. David is so important to this space because ironically enough, he escapes the last 'S' in that acronym: he shows us a world in which FOSS can be so much more than "just" software.
I would buy a Kia or Hyundai because I get the same level of reliability as an American car, but with more creature comforts and at a lower price point.
You also broke the site guidelines badly and repeatedly in this thread—not as badly as the other account, but bad enough to make this flamewar considerably worse. That's not cool.

If you'd please review https://news.ycombinator.com/newsguidelines.htmland stick to the rules from now on, we'd appreciate it. Among other things, that means not getting aggressive with other users, no matter how wrong they are or you feel they are.
Show HN: Note Number Generator for Sortable, Searchable, Linkable Notes
I made a super simple app, a web page with a bit of JavaScript really, to number my handwritten notes, which makes them sortable, searchable, and linkable.

I’ve only been using this method for a short time, but I wanted to share it, get feedback, and see if others might find it useful. I also love good conversation about notes and note taking systems and I hope this post might strike up some of those.

How do you organize your notes?
I do in fact have a dedicated clock in the kitchen. It sings African bird calls on the hour. But it is less visible from the cooking area, hence my reliance on the appliance clocks.
Could malware authors add a clickthrough EULA and be off the hook?
This looks really nice as a hobbyist project. That being said - I can't see this being usable in an enterprise space. There's no TPM requirement so someone able to get access to the HSM could dump the keys from memory.

The worst part of using HSMs in enterprise env's is when you're forced to use something certified for FIPS 140 Level 2 or 3 requirements.. Then you're paying for what amounts to a shiny foil "anti-counterfeit / tamper-evident" sticker. This could probably easily meet level 1 via a certified openssl module, but alas, with most enterprise HSMs you're not paying for the _HSM features_.
My fave UI was a single large rotary knob showing a physical colored 'ribbon' that starts at zero and goes up/fills-in on turning. The first 5 mins had higher resolution then less beyond 5 mins. You could also rotate it while on to increase/decrease. It's hard to beat combined input/display using a single continuous mechanism like level faders on an audio mixing board.
My problem is with the steps in between running "npm i svelte-zoomable-circles" and having code that works in my browser and displays a working UI element.
So you want to use Reddit, but you don't want to be a user of Reddit?

who knows what their reason for blocking some commercial VPNs is, but they have their reasons good/bad. You can still 'access' Reddit.
Don't new cars have automatic parking brakes?

I drive a manual, and even if you park it in gear, with some bad luck and a slighly "worn down" engine, it'll roll, so most of the people just pull the hand brake.
Discussion a couple of days ago [0] (48 points, 46 comments), and more in the past [1](99 points, 3 months ago, 139 comments) [2](265 points, 6 months ago, 225 comments)

[0]: https://news.ycombinator.com/item?id=39866748
[1]: https://news.ycombinator.com/item?id=38697218
[2]: https://news.ycombinator.com/item?id=37659482
I think it’s much quieter but perhaps it is just needing a few new HNers to discover the intoxicating subtlety? http://www.corewars.org/
Producing hydrogen from rocks gains steam as scientists advance new methods
I use both in a manual. Cheap insurance. Handbrake, and in gear in case the handbrake fails.

But I’ve never seen the driver of an automatic set the parking brake. Never. That gear is “park” so they use it when they park.

Only driving manuals, I have to really remind myself not to in somebody else’s car because it is probably going to stick as a result of never being used.
Please tell me which sections of the paper you feel suggest that LLMs + extensions cannot achieve AGI. I have read the paper 3 times in the last year, but I'm not seeing it.

There's basically no reason you wouldn't be able to implement LeCunn's entire JEPA architecture using LLM analogues. Associative memory is just one of many huge improvements we could discuss

And before you object that LeCunn's methods do online learning with energy methods, let me point to RAG systems that also do online learning - and better than anything Lecunn has published.

I own a company where I build new computational geometry codes. And I'm increasingly using LLMs to research, plan, implement, test, and debug my codes.

Not only that, but I am an autistic person who increasingly uses LLMs to overcome my social and communication difficulties. GPT is far more empathic and constructive with it's suggestions than any friend, therapist, or advisor I have worked with or have access to. So again it already is AGI for the purpose of helping me process my often complex and baffling emotions.

Nobody's saying pure LLMs will be AGI. But pure LLMs working together in novel configurations and using specific components already have that capability.

Memory, empathy, planning, agency, theory of mind, etc. You name it, I'll show you a paper where LLMs demonstrate ir. GPT4 by itself does these things better than most people. These capabilities will be packaged into off the shelf components. They will be integrated into post-llm systems that merge these capabilities into a system with the most of the capabilities of a conscious human. That'll be AGI. But what we already have is already AGI as well. You're just not giving it credit.
I prefer win 95 over the modern sh¡tfest, but what I really miss is the shiny aqua stuff that make you want to lick the screen. I couldn't even afford a Mac at the time, so I had the aqua-like themes on gnome (back when you could configure stuff and have it not break early the following week).
Or better, just make an ssh without any dependencies. Statically compile it, and get rid of the libssl and libsystemd and even libpam and libc's nsswitch. (I actually do this for some of my systems)
Not quite the same - automatic transmissions have a pawl that locks the axle in place, it’s not just the engine like in a manual transmission.
I already said the way to do it in my previous comment. Don't let arbitrary code run before page permissions are locked down.
Emergency Telecommunications Cluster
definitely any binary file checked in must be suspect after this event.

Packagers like deb and rpm (I work for Red Hat and have done some rpm packaging) should modify their build processes so that while they may run test suites ahead of time which use binary files, the post testing build phase should start from zero with all binary files fully removed from an untouched source download. There can be steps that attempt to build from a tar distro vs a GitHub source tree and compare. There's lots of ways a lot more caution can be provided around binary files, and I'm talking about downstream packagers for which there are a lot of resources to work on this (at Red Hat we're paid for this kind of work).
Agreed. How hard can it be to offer a handful of additional layouts? 8BitDo could surely afford it.
It's far easier to be always private than having the cognitive burden of trying to discover when you want privacy.

Furthermore, you can't always have your day according to plan.
Show HN: PQueuer
pqueuer.com is a website that arranges the players in a sequence without any bias, ensuring a fair and equitable order for all participants. We need to enter the names of the participants or players and use the shuffling algorithm from pqueuer to generate a order of the people.
It is not terribly difficult to make 'crafted' UI localizable, there are a few rules to follow that's all. I worked for apple back in the day and shipped software translated in countless languages, and the same 'crafted' UI worked pretty well in all cases.
Of course there are always exceptions, and 'modern' HiDPI present issues if all you do is use hard coded pixels as a unit, but it is still manageable.
I've used the standard Park for 15 years without ever having any issue
How many sites actually do that? Microsoft does it for the device compliance/SSO/push notification stuff. Heck even we (GitHub) don't push the app and require TOTP or SMS first if you want to use the app.
The number of people dying will increase two score and ten years [2] after a baby boom [1] like the United States post-war baby boom.

[1] https://en.wikipedia.org/wiki/Baby_boom

[2] https://www.biblegateway.com/passage/?search=Psalm%2090%3A10...
Those few saved seconds, I really need them.
> It works okay, but I do wish there was a better way

What's wrong with it?
That's been every Honda I ever owned (88,96,01,07). I was paying minimum $2000 a year in parts for my 07 Accord when I got rid of it. It was plagued with little gremlins.

My neighbor was a mechanic and he said Honda had transition to a modular design and you could no longer replace a piece of the suspension or electrical system that was bad, you had to purchase an assembly. Which is why even minor repairs like a bad relay were $2000 repairs.
See my post above. Those hashes are a checksum of the image as seen by the registry plus some additional magic.
that isn't even so much of a conspiracy theory if you look at what happened to qwest
Good question.

nurettin replied, sibling comment.

But it's not difficult to write your own for simple map types at least, like with strings as the keys. Generic maps would be harder.
My argument is that it’s not their selling point. When you go to React’s page you’re not greeted with: “React is a great way to hire devs and manage a team”.

The solution they sell is technical, like state management, reusable components, etc. Which I don’t find convincing.
There is a large difference in churning out code for a new project compared to trying to add a feature to a 20 year old codebase.
Nope, parking brakes are usually a separate (and traditionally mechanical) system on automatics. Electronic parking brakes are still rare
> I was taught in drivers education (California) to always set my parking brake because popping out of gear while parked was a common issue.

I was taught this as well, along with curbing my wheels. I have a young family member who was taught exactly the opposite -- setting the parking brake was "harmful" to the car somehow and not to do it.

> I hope Kia and Hyundai learn from this and get OTA updates working for everything.

I hope auto manufactures get away from the "we'll fix it in software" mentality.
The term welfare queen is a term that originally was used by conservatives to oppose federal social programs. The term describes a supposed well off black urban single mother living off benefits. Fact, most recipients of welfare are white rural poor.

More recently people use the term to describe the over class living a life backstopped by the government.
Bingo. It's easy to pay for influence, especially if one can spin a story for clicks.

I see a lot of cheerleading and parroted talking points against the interests of developers, particularly small and independent developers. A lot of the changes lobbied for by large developers give them an insurmountable pricing and competitive advantage over small developers and startups, yet I don't see much consideration here for that, nor the wishes of bona fide consumers.

Epic is particularly barefaced here, since they claim they are fighting for developers, when their proposals are not altruistic. Each clearly puts them at an advantage over smaller developers and consumers. Do we have such a short memory that we forget that this is the same Epic that settled with the FTC for using dark patterns and violating childrens' privacy for the purpose of tricking kids into accidental Fortnite purchases.(1) That was only 15 months ago.

While I'd expect reddit to be less informed, I'm not so charitable with HN: it's a forum where the bulk of participants claim to be developers.

(1) https://www.ftc.gov/news-events/news/press-releases/2022/12/...
According to documents published by the National Highway Traffic Safety Administration, the intermediate shaft and right front driveshaft of certain 2020-2024 Tellurides may not be fully engaged.

I was interested in reading the actual cause of this failure, but that's an unusually vague description, unless they actually mean driveshafts that weren't fully inserted into the axle/transmission.

Relatedly, I far prefer the old mechanical parking brakes over the electronically-actuated ones which are common now, since you can actually feel them engage. Likewise for the park position of the transmission.
1. effect is any function you want to invoke

2. with signals the dependency tracking mechanism knows what values need to be recalculated and as a result the system knows which functions to call again
Vagrant is very much alive. Last commit to main was two months ago!
OpenAI Preparedness Challenge: winners announced
What are you people talking about? I wasn’t saying it’s not something I would do. I was just stating what is needed for a project to thrive after the person or people who started it leave: someone has to fill the void left by the departing person or people, and that void is ‘keeper and maintainer of the vision’.
It's a dim shadow of its former self.
I admittedly had a hard time understanding what exactly it is, as the title of this topic describes it as a "Pxe Netboot Manager". However, it is not just a PXE implementation, rather it uses iPXE for that.

The core feature seems to be a collection of network-bootable installers (and tools) like a swiss pocket knife. So it's much less about the "boot manager" itself, rather than its collection of installers.
This looks like a nice piece of work but worth noting that as it uses a stock RP2040 Pico board any hardening against physical attacks will be done purely in software so cloning the HSM entirely or extracting keys may not be too complex for an attacker. Hardening against physical attackers and significant resistance against them is normally seen as a key component of an HSM.

Indeed from a very quick glance at the source, it's using the mbedtls library (from arm) and I think this is an unmasked implementation. This means key extraction, if you have physical access to the device, will be trivial.