skysight-inc/HackerNews huggingface dataset:
What I've seen work is for the team to have a private channel, and whoever isn't in the middle of something can answer, and the whole team will see that answer sooner or later.
Well I suppose I’ll just head into your home, help myself then. Like I said, I enjoy free stuff.

As a radical truth seeker on a forum devoted to them (or so some have claimed anyway)…

Marisa Mayer is one of billions? What evidence can she put forward her status is not coupled to conservative politics heavily repeated by media?

Perhaps it’s all just dopamine and oxytocin addiction due to intentional propagation of conservative socio economic and political memes of the past, enjoyment, Schadenfreude, of worker deference?

As a radical truth seeker, I’m not content to accept such lazy and old social memes (it’s not 2006 anymore) as sacrosanct truth. Thats pseudoscience, living in a biological state the past we know is essential. It smells of religious conviction, banal stubbornness, laziness, and entitlement.

Will reality unzip if “this isn't the way”?

Goodhart’s law: Is “they enjoy it” a good enough measure to burn up resources on startup role-play? Is startup culture and hand wavy billionaires based upon conservation of dated (it’s not 1900s anymore) political rhetoric good enough?

As a Xennial it’s been interesting watching Boomers and GenX lose their energy for the future and replace it with demands of fealty to their past via social media.

Us radical truth seekers are not so content conserving past propaganda and success. “Commit it [conservation of past society] then to the flames…”
Yeah you can’t know whether something has been measured or not. You measure it, you get a value. You don’t know if it has been measured/collapsed on the other end.
Can you elaborate on how other countries are free riders?

It's not like the board at Novo has a board meeting where they decide "we hate the US so lets charge them more for our products"

The simple fact is that the US has higher drug prices because it has created a healthcare system that allows pharmaceutical companies to charge much more for their products

The way to lower drug prices is to change the system to prevent that
Redis did not build Redis.
You'll make a ton of microplastic washing a fleece blanket often.
Feels almost like tampering with evidence at a crime scene
Also in Africa:

https://education.nationalgeographic.org/resource/great-gree...
Rental markets rooted where I am. Fails to provide for society the purpose it exists for. So yeah if your saying big pharma is the same sure I'm on board.

Profit enough to survive. But don't take more than your worth. Tbh profiting off medicine is about as low as profiting off weapons manufacturing. You literally make money out of the misery of others.

Thank f#@k I live in a country that has free healthcare. The concept of privatizing the health of your citizens and letting a select few profit from that is absolutely batshit insane.
Sure they do. Getting the perpetrator into your jurisdiction is the tough part.

Putin is, for example, unlikely to go anywhere willing to execute an ICC arrest warrant.
Do you have a link for Ditto? Searching for "Ditto app" and "Ditto software" returns several possible results for me (e.g. clipboard, music app, managing "copy", content sharing).
Why does xz need new features at this point?
AI #57: All the AI News That's Fit to Print
Fellow Finn here, I'm flabbergasted how the rest of the world hasn't figured this out apart from us in the nordics :D
health insurance profit is forgone health.

every other country only allows them to exist as not-for-profits.

whereas expensive medicines just make health insurance less profitable.

This is the basic principle behind why the US spends the most in the world on healthcare to achieve among the worst outcomes (e.g. same life expectancy as most undeveloped 3rd world countries)
I donet believe they control the Vercel endpoint "B"
Association of Sexual Intercourse with Sudden Cardiac Death in UK Young
The questions this backdoor raises:

- what other ones exist by this same team or similar teams?

- how many such teams are operating?

- how many such dependencies are vulnerable to such infiltration attacks? what is our industry’s attack surface for such covert operations?

I think making a graph of all major network services (apache httpd, postgres, mysql, nginx, openssh, dropbear ssh, haproxy, varnish, caddy, squid, postfix, etc) and all of their dependencies and all of the committers to all of those dependencies might be the first step in seeing which parts are the most high value and have attracted the least scrutiny.

This can’t be the first time someone attempted this - this is just the first unsuccessful time. (Yes, I know about the attempted/discovered backdoor in the linux kernel - this is remote and is a horse of a different color).
I don't understand the question. The current most important internal rupture in Israeli civil society is that the most theocratic cohort of Israeli citizens has exempted itself from military service altogether.
It's really scary, if you think about it.

Cumulus Linux (originally by Cumulus Networks, which is now part of Nvidia) is a Debian-based Linux distribution used the data plane in datacenters: Dell, HPE, Mellanox, Lenovo and others let customers use Cumulus Linux. That means major datacenters running a potentially-compromised Linux distribution because of the xz attack.

McAfee Linux used to be (it EOL'ed recently) a CentOS-based distribution (which in turn comes from Fedora) used for security appliances by McAfee. Back when the xz attack was initiated (Oct'21), McAfee Linux was in full support. Even more enterprise-grade appliances to be easily compromised.

As a former Debian developer, I wonder if the "must use upstream tarball" approach Debian has (or at least, when I was a DD, just a handful of years ago) makes sense. It seems if built from the git repository, this xz attack would not have succeeded.
I'm the same. Especially when the banners are animating in full-colour next to static text I'm trying to focus on.
Arch Linux uses a native/unpatched version of OpenSSH without dependency on libsystemd and thus without dependency on xz-utils, resulting in no exploitable code path. This means that at least the currently talked about vulnerability/exploit via SSH did presumably not work on Arch. Disclaimer: This is my understanding of the currently circulating facts. Additional fallout might be possible, as the reverse engineering of the backdoor is ongoing.
A hydrogen-oxygen flame (this is what happens naturally since you're burning hydrogen in open atmosphere) burns closer to 2800C, and also has the fun property of causing embrittlement (which is especially worsened at higher temperatures where metal expands and becomes more porous.) Your steel pots and pans are essentially toast under a hydrogen flame.

People think "Fire is fire" and no, no it is not.
I'm with you. To me IrfanView always felt incredibly archaic and chaotic, and I never wanted to wade through its 5 billion settings to "fix" it for me. But I guess some people just care more about UX while others just want as many features as possible, and I'm glad it's there for the latter camp.
I'm sorry, I didn't realize every single subsection of every comment on HN were all meant to be strictly mutually exclusive, I'll do better in the future.
I mean, getting an actual government agency with an appropriate mission specified by law _would_ help. Both from a recruiting point of view (you get sufficiently ideologically motivated people), but also from an accountability point of view. These agencies are ultimately responsible to someone. And the law has that nice property of knowing who and how to hurt those people. So yeah. Getting a (or the) government to maintain OSS infrastructure definitely would help. And probably also prevent this kind of thing as far, far too risky to attempt
I ran these numbers at some point, on average.

Average monthly car payment for a new car in California is $738 ($532 used). A record share of Americans are payment $1000 or more on monthly car payments. [1]

Average monthly parking in SF is $340 according to SpotHero, if you have your own place and spot, that added $80-100,000 to the price of your home, so you can decide how you'd like to value that. Today 7.5% APR mortgage, that would add $7500 per year in interest, $625/month. Less if your mortgage is lower-interest.

Bankrate says the average annual insurance cost in SF is $2692 ($224 per month).

AAA says the average price of routine maintenance is 10c/mile. Average distance traveled is 14000mi/yr, so that's $1400/yr ($116 per month).

Add in gas, tolls, fines, registration, collision damage, etc.

Should be $800-1000 per month on top of your car payment.

Which is incidentally what AAA found. US average is $894 per month on top of the purchase price, or just shy of $11,000 per year. And one has to imagine it's a lot more than that in San Francisco. [2]

The GGP's $1K per month estimate is actually probably about half of what people pay all-in amortized over the ownership period of a car. 6.6% return is below the S&P average. I dunno man, the numbers check out, and may even be quite conservative.

[1] https://www.cbsnews.com/news/auto-loan-average-payments-2023...

[2] https://www.bankrate.com/insurance/car/cost-of-car-ownership...
Try taking strong antibiotics for 2+ weeks. The list of serious downsides will be quite long
Then you are of very low value to your employer and a union acts as a social benefits organization. Essentially you are payed by the people whose skills are more valuable than yours.
Sorry failed to call out I wasn’t delineating along typical party lines. Politicians, judges, gen pop; those empowered by past political and socioeconomic choices they ram down the futures throat are conservative quacks, full stop.

Preferring political/economic norms in the face of evidence it’s actively harmful is conservative quackery.
1. Choice of language only matters up to an additive constant (e.g. you could just write a simulator so language A can run language B).

2. If you want something with less physical grounding, you could use lambda calculus instead of Turing machines.

3. Kolmogorov Complexity and Shannon Entropy are compared with one another because they both are talking about the same thing: optimal compression. Kolmogorov Complexity talks about the compressibility of individual objects and Shannon Entropy talks about compressibility of streams of i.i.d. random variables.
The following article sheds some light on the corporate lobbying that's been taking place within the NDP (provincial and federal) since Layton's era:

https://breachmedia.ca/ndp-lobbyists/

Seems like it's just neoliberalism all the way down, regardless of the party.
I was doing that, but it's much better to have it automated. Now, I see there are side effects for other sites, but now I can fine tune it.
My preferred technique is to grab a corner, crawl inside the duvet and pin it to the corresponding corner. Then I crawl out and repeat with the opposite corner. From there, I just pull the front two corners over the comforter then button/zip it up then furl it out. I'm not saying this is the best method but it works fine for me. My wife has no techniques that work for her, lol.
It seem that, they want it to be sortable, like the title says. Due to that, it is helpful to include a timestamp. (If you do want a random identifier instead, then you can use that instead, I suppose.)
Also we call them doonas.
News quotes followed by a link to an audio file that discloses its length and probable (larger) time to download.
Thanks for explaining. I had tried using seccomp in some previous incarnation, before it allowed passing in ebpf filters, and it was just too restrictive so had to abandon that effort.
thank you for providing such a illustrative example of exactly the sentiment i was pointing out as unbelievable.
How does this compare against recent efforts in OCaml to support multicore parallelism?
No, I said that he has argued (to justify the project decisions and work) based on his view.

I never said "I believe on what he has promised". I said "all he has done and delivered has been consistent with his professed views". It's completely different, and I honestly do not see how you could interpret what I said in such a twisted way.
People often have a flat sheet between them and the duvet that gets washed more frequently.
Oh, that one is interesting, because it only breaks it in cmake.
that is what overhead is
Nah, the CIA assassinates people in MLAT zones all the time. The laws that apply to you and I don’t apply to the privileged operators of the state’s prerogatives.

We don’t even know that this specific backdoor wasn’t the NSA or CIA. Assuming it was a foreign intelligence service because the fake name was asian-sounding is a bit silly. The people who wrote this code might be sitting in Virginia or Maryland already.
Holy crap!

I've been wrestling with duvet covers the wrong way my whole life!

The Rachael Ray video @sandesh247 posted shows how simple this is.

https://www.youtube.com/watch?v=EFOhjljieqs
Sounds a lot like this bit from Kill Process by William Hertling:

"The little computers run a secure variant of Linux, with a single open port, protected with heavy encryption. Part of the computer board contains a sensitive accelerometer, which means I can detect when the computer is moved.

When I travel, I find coffee shops and homes with wi-fi signals and flat roofs, and I toss one of these onto the roof.

If you were to find one, pick it up, and look at it, you might not be sure what it was. If you plug a headphone into the jack, it plays pirate music stations.

Of course, that’s what it does only if it’s been moved or if the battery level drops too low. Because when the accelerometer detects motion, the code I wrote replaces my extensive software with a simple dummy music app and erases the remaining storage a hundred times over.

If it hasn’t been moved, and the battery level has never dropped too low, then it does what it’s supposed to do: operate as part of my private onion routing network with hundreds of nodes to disguise my digital trail so others can’t trace my location.”
It is called Temporal logic or tense logic[1][2]. Linear time temporal logic is used in formal verification.

[1] https://plato.stanford.edu/entries/logic-temporal/

[2] https://en.wikipedia.org/wiki/Temporal_logic
The argument that the US is paying for everyone else’s drugs is often made in defence of big pharma, but their profits make it hard to swallow. In recent times the US hasn’t really shown any other other signs of chasing socialist policy where it subsidises the rest of the world.
Ldd(1) and Untrusted Binaries (2023)
Ldd can execute code in some cases; this came up as a side note during the xz investigations, and hadn't gotten alot of traction in the past. I figured some more attention could be good while everyone goes digging into unknown binaries
Log Shipping with Vector [video]
Statistically, the smartest person in a cohort of five million has an IQ of roughly 180. Above-average 45 year olds are not competing with 20 year olds with IQ's of 180. They may cooperate, but they tend to work in different problem spaces, much like how a streetball player isn't in direct competition with LeBron James even though they're both basketball players.
No, plenty of tech debt is caused by over-engineering or pre-maturely optimizing for the wrong thing.

I'm not sure if the second outcome is meant to blame Postgres specifically on under-engineering in general, but neither seems to me like it should be a concern for an early-stage startup.
In France pigeons are protected and you have to let them nest (more precisely you can't move the nest once it's there and you cannot harm the eggs)
Is this what it's come to? Since AI has taken over tech, we're now discussing duvet cover removal/replacement methods?
My absolute favorite items in this world are my down comforters and duvets. I have a thick one for winter and a thin one for summer. Sometimes I have them both on the bed and use one as a snuggle blanket. Every night when I crawl in bed it is a form of catharsis like a cat making biscuits.
Isn't it good to know how underpaid you actually are relative to your coworkers? If your colleagues are being paid less than you are for the same work, shouldn't they direct their ire at the company rather than you?

I am 99% convinced that pay secrecy primarily benefits employers and management at the expense of most employees. It creates an asymmetric information environment that makes it difficult for employees to negotiate raises or even to be paid market wages.

The 1% uncertainty is that government jobs (which have pay transparency) tend to be underpaid, and the rare (?) private workplaces with pay transparency don't seem to have done much better than their pay-secret counterparts, with the exception of law firms, where the associate/partner model seems to have caught on. Union negotiated rates seem to have up and down sides.

Of course, you should really consider how much money the company is making, where it is coming from, and how it is being spent. In my experience, (non-founder) technical staff members are often paid very poorly compared to the money that they bring into the company, even after considering large amounts of overhead, expenses, benefits, taxes, etc.
It works on Intel Safari as well.
Most of the discussion: [0](46 points, 26 comments)

[0]: https://news.ycombinator.com/item?id=39876579
git blame shows only who made the last change. Maybe that person only changed the name of a variable, applied a codestyle change, moved a function declaration to another file or many other things that the change was almost irrelevant to the code behavior.

There are a few options that help you out with this:

-M Detect moved or copied lines within a file

-C In addition to -M, detect lines moved or copied from other files that were modified in the same commit.

--ignore-rev <rev> Ignore changes made by the revision when assigning blame, as if the change never happened

--ignore-revs-file <file> Ignore revisions listed in file

https://git-scm.com/docs/git-blame
I have few basic applications : agenda, tasks, deck, music, mail. Not too many.
> It's been brought to my attention that you're not paying attention to the way you space the cans. —Mr. Humphries

> The generic must move amongst the brands as a fish swims in the sea —not 毛泽东
BMW Security Vehicle Trainings: Customised security from a single source
Nope. Duvet changes every couple of months perhaps. Sleep straight under the duvet. Thought this was normal. Never heard of a sheet under the duvet
I can think of two reasons on how we got here:

1. Expensive drugs are expensive to compete again. Any new entrant will have an uphill climb. They will need a new way to solve the problem, so it doesn’t infringe on the incumbents patents.

2. Drug manufacturing is still a niche business. In many other advanced industries, the tooling has become commoditized leading to a lower bar for entry and increase in competition. Repairing phone displays and soldering memory modules is now possible at home. Pharma is still waiting for that 3D printer/indie moment.

I don’t know if it’s even possible - we’re talking about chemicals and amino acids here. Every drug will need a different set of ingredients (not that different from cooking food).
Can someone make a diagram or video for us visually minded folk

edit: nvm found it in a sister comment
Unless you have a single monotonic clock, these will be partially ordered. It's risky to design around sorting that won't always work.
Right. It might be more interesting to consider the count of Ts and Hs instead of considering exact sequences.
The most famous is the clipboard one (https://ditto-cp.sourceforge.io/). I'd be surprised if they were referring to another "Ditto" software.
I feel like a conversion from binary strings to Unicode/Chinese characters would be in PTIME, so adding a conversion machine would be a nonfactor for languages in most complexity classes.
Virtually public network
If you can find a way to cut the overhead of researching new (safe) pharmaceuticals, please do immediately start a company!

We could have all kinds of interesting discussions around the parallels between research funding and tech VCs, sprawling regulations and delayed approval procedures etc., but even in a libertarian utopia without an FDA I think you'll find that all researches like getting paid at the end of the month consistently, and not just the few that do eventually hit the jackpot.
I find it a bit jarring that first reaction from the American public to foreign companies finding success in the USA is think about nationalising them. You see this in this thread, but also with TikTok. It's especially strange given the usual total economic dominance of the USA over the rest of the world. Did big tech get so rich by charging low prices ? Is the rest of the world 'subsidising' the Silicon Valley ?
Because almost nobody actually pays those prices

> One key limitation of this study is that most of our analyses used manufacturer gross prices,
not manufacturer net prices after rebates and other discounts are applied.16 Given the generally
competitive insulin market, rebates in the United States are substantial (Mulcahy, Schwam, et al.,
2021; Dickson et al., 2023). After applying a 76 percent manufacturer gross-to-net reduction,
U.S. prices were roughly twice as high as those in other countries (compared with nearly ten
times as high without the discount). We caution that these results likely underestimate the
magnitude of the price differential because we were unable to estimate similar gross-to-net
discounts in other countries. If manufacturer net prices in at least some non-U.S. OECD
countries are lower than their manufacturer gross prices, the ratio of U.S. to other-country prices
would be higher. In addition, because of data limitations, we applied a single U.S. gross-to-net
reduction across all insulins. Actual product-specific gross-to-net discounts likely vary along
product characteristics (for example, prescription versus over the counter and timing category).
As a result, our estimated ratios of U.S. to other countries’ prices for specific insulin categories
likely reflect measurement error.

As far as I can tell they also aren't attempting an apples to apples comparison, they're lumping all "long lasting" insulin drugs together. There is no such drug as "insulin", or even "long-lasting insulin". There are dozens of insulin analogs being sold at an incredible range of prices, easily over 10x from the most expensive to the cheapest.

https://www.goodrx.com/healthcare-access/research/how-much-d...

My default take on this kind of analysis is that people in the US are wealthier and are therefore paying for the newer, more effective, more expensive insulin drugs than people in other countries. I'm happy to be proven wrong on this but I haven't ever seen that analysis, they always conspicuously avoid direct comparisons of the same drugs.
Exactly, if a medium-sized company is struggling with Postgres, either they have very niche requirements or the scalability problems are in their own code.
The duvet is like a parachute, you don’t need to shake it in from the top you can shake it in like a magician doing the table clearing trick.
I actually thought his Turing award was for this attack. Turns out it was "just" his acceptance speech!
Good. It’s high time someone does something about the rampant crime in the area. Now if only we could also fix the justice system to ensure criminals face severe consequences.
For actual location of downloadable IRONSIDES package:

https://www.adacore.com/academia/projects/ironsides-secure-d...
That point is a bit different than comparing to Apple and Google.
I think it's regional. Growing up in the western USA, I never saw a duvet with a removable cover. Living in Japan/Korea, I've never seen people use the sheets+blanket arrangement in the home.

BTW, I first heard the word "duvet" as a teenager watching British comedy on PBS. I had to look it up in the dictionary.