skysight-inc/HackerNews huggingface dataset:
oh interesting. It looks like a website where you would buy weird stuff though. Not literally wasting your money haha
Or they have just one or a small number of targets, but don’t want the target(s) to know that they were the only target(s), so they backdoor a large number of victims to “hide in the crowd”.

I agree that this is likely a state actor, or at least a very large & wealthy private actor who can play the long game…
Felicitas is one of those devs, every repository on her profile is a gem to learn from, and well documented!
My law professor told me to never sign a contract I didn't modify in some way, so I usually change these to be something I like better before hitting accept.
> And i tell pretty much anyone who wants to listen that they should just implement the proto on their own if thats rhe only reason for a libsystemd dep otherwise.

That's what I think too. Do the relevant docs point this out too? Ages ago they didn't. I think we should try to avoid that people just google "implement systemd notify daemon" and end up on a page that says "link to libsystemd and call sd_notify()".
I don't think there's a much difference in behavior between the species, probably Romania just has more bears living close to humans, which makes them less afraid and conflicts more likely. For the record, my home country (Finland) has about 2000 brown bears, and they have killed only a single person during past 100 years. Most of the time they try their best to avoid humans, and the majority of people living in the countryside have never even seen one.
The project has made an official post on the subject

https://archlinux.org/news/the-xz-package-has-been-backdoore...
Do you just not understand what a tax is?
This is my two cents:

Maybe entanglement is a much more 'immediately physical' phenomenon than 'spooky action at a distance'. Just guessing as a layman here: maybe entangled particles are just physically connected {along some higher dimension / some unknown process}.

Spinning together (effectively switching spaces constantly) such that they are always the same state. So the undetermined measurement stems from being unable to tell which particle specifically you have at the time of measurement.

The idea of a particle's spin being 1/2 feels tied to this idea - (that a 720 rotation happens: if a particle P1 spins 360 in space A, spins 360 in space B before returning to space A, maybe entanglement is P1 and P2 filling space A and B to 'full'?)

In other words - detector A may receive particle B or A depending on the particle's current orientation at measurement.

Weird thoughts. Take with a lot of salt.
Time for another OS wipe. Glad I keep bleeding edge versions VMd
This seems to be an orthogonal issue. Rust could build the same dynamic library with cargo which could then be distributed. The diference is that there would be a single way to build things.
There is also the beer
https://zubr.cz/cs
Spotify does music and podcasts in one app. Why should Google have two different apps for music and podcasts?
The Limits of Data
That's funny, I used to keep a similar blog on my experience on Microsoft's Cloud. On Thumblr instead of Mastodon. Precously submitted to HN: https://news.ycombinator.com/item?id=12788098
What if my data contains a new line? People focus on the comma then forget the newline is just as significant. That still needs to be escaped and we're right back where we started.

Meanwhile, RFC4180 takes less time to read than this entire article.
I didn't want to critisize you, just to get the numbers straight. I'm actually living in one of the regions with many bears (the northern end of the lower tatras) in Slovakia.
I will also add, as an academic who works closely with hundreds of physicists, that although they are indeed typically smarter in one dimension, they are also considerably dumber than your average person in others. It turns out life is all about tradeoffs!
Honestly, the Gentoo-style global blacklist (package.mask) to force a downgrade is probably a better approach for cases like this. Epochs only make sense if your upstream is insane and does not follow a consistent numbering system.
The times I've run into people who've written a library to handle something built into Postgres... everyone likes to reinvent timestamp and range handling for some reason.
... and higher energy so that they have a higher interaction cross section

https://arxiv.org/pdf/1305.7513.pdf
0x1d and 0x1e in the ascii standard exist for exactly this reason and don’t need more than one byte unlike this goofy thing.
What do you mean “cost them money” I legitimately can’t think of situation where releasing a product behind deadline would cost a business money? Obviously they just allocated resources more efficiently because they have fewer people. Likely they made more money because of increased demand.
I agree with this but if you knowingly send your sick kid to school everyone should be united in being pissed off at you.
except it isn't reinventing the tarball, because the git hash forces verification that every single file in the repo matches that in the release.

And git even has support for "compressed git repo in a file" or "shallow git repo in a file" or even "diffs from the last release, compressed in a file". They're called "git bundle"'s.

They're literally perfect for software distribution and archiving.
Read a book or watch some Youtube videos about negotiating (in general)?
You can pay for things online with V Bucks as regularly as you like that doesn't make it a real currency.
World Bank complains, "How do you expect these countries to make their payments on-time when their women are raising their own children instead of working in our sweatshops?"
There are many podcasts that exist on Google podcasts but aren’t listed on YouTube music. Maybe around 20% of my podcast collection doesn’t exist on YouTube music; and they aren’t fringe podcasts either. Many are very mainstream. This makes YouTube music an inadequate replacement
What line of work is full of former programmers?
In my experience, this kind of thing might not even register with most companies

There's a meta-game that most sociopaths/narcs are playing like their lives depend on it to get their supply and climb the internal ladder, that's taking up so much energy/time/resources of the company, falling upwards

That there's nothing left to care about this sort of thing
Probably wood working, seems to be where all the burnt out programmers end up.
A SourceGraph search like this shows https://sourcegraph.com/search?q=context:global+JiaT75&patte...

- Jia Tan <jiat75@gmail.com>

- jiat75 <jiat0218@gmail.com>

```
amap = generate_author_map("xz")

test_author = amap.get_author_by_name("Jia Cheong Tan")

self.assertEqual(
test_author.names, {"Jia Cheong Tan", "Jia Tan", "jiat75"}

)

self.assertEqual(

test_author.mail_addresses,

{"jiat0218@gmail.com", "jiat75@gmail.com"}

)

```
Not long ago there was also a post about "Unicode Separated Value"
https://github.com/sixarm/usv
https://news.ycombinator.com/item?id=39679378
> Fuchsia to start providing a stable driver application binary interface (ABI) for at least six months for downstream products that use drivers compiled through the SDK. This confirms the platform's commitment to delivering reliable and long-lasting driver support.

6 months counts as "long-lasting" these days?
Covid really pulled the veil back on "BS corporate bureaucracy".

So many bureaucratic sacred cows went out the window.
The goal isn't to supplant Linux as a commodity kernel, but instead as a microkernel for integrated mobile devices. E.g., as a platform OS, not a general one.

So the short answer is "no, unless you use one of Google's hypothetical future post-Android devices".
> I've long since said that if you want to hide something nefarious you'd do that in the GNU autoconf soup (and not in "curl | sh" scripts).

Yeah, I've been banging on that same drum for ages too... for example on this very site a decade ago: https://news.ycombinator.com/item?id=7213563

I'm honestly surprised that this autoconf vector hasn't happened more often... or more often that we know of.
Native Nim libs are definitely nicer, but being able to output C/C++/JS/LLVM-IR with nice FFI means you can access those ecosystems natively too.
It's one reason the language has been so great for me, as I can write shared Nim code that uses both C and JS libs (even Node) in the same project.
> A higher than expected number of advertisements may cause a user to view the page as cluttered.[7] The number of adverts and annoyances on a webpage contribute to this perception of clutter.[6] As users can concentrate on only one stimulus at a time, having too many objects in their field of vision causes them to lose focus.[8] This contributes to behaviors such as ad avoidance or banner blindness.

I have done a pretty good job filtering out advertisements and other annoying web crap, and if anything ever sneaks through I notice it immediately. Whatever the opposite of banner blindness is, that's what I exhibit. Banner hypersensitivity?
I'm generally harsh on podcasters, but Dwarkesh has had some of the best LLM content by far. He dives right into the details of the models and where the industry is headed. Whereas most AI podcast content is too high level, and borderline click bait/useless.
Looks like it's not available in my country.
What does child-bearing have to do with any of this? There are plenty of humans in the world, and plenty of children (including orphans).

If you really care that much about passing on knowledge, write a book or get into teaching. You'll reach a much wider audience that way, and if your knowledge is indeed valuable then your impact will exceed many human lifespans. Literature can survive for a thousand years at least.

Creating entire new humans simply to use them as personal data storage devices seems cruel and bizarre. Maybe consider a NAS instead?
It does feel like people don't give Google enough credit that, even in it's current state, they still do a pretty good job in the face of basically every bad actor on the internet.
Historically there were much less humans, and more wilderness for animals. Applying the historical solutions in modern day would mean extinction of species in many places.
I always admired micro ORMs like Dapper. The hard (or at least time wasting or error prone) tasks are:

- mapping results to app entities or projections

- input sanitization

- dynamic query building

- connection pooling and transaction management

- supporting multiple SQL dialects with one code base

After many years of experience with Hibernate, NHibernate, Entity Framework, and a plethora of other full ORMs, I absolutely do not want lazy/eager loading, opaque query DSLs and criteria APIs, and dealing with leaky abstractions for queryables (looking at you, LINQ and JPA), and I’m pretty wary anymore over cascading persistence. These things all look great in tutorials and are nearly magical in your PoC or simple projects, but in my experience, performance problems, unexpected and sometimes hard to diagnose bugs, and lots of ugly yak shaving are inevitable for moderate complexity apps over time.

Of all of them, I enjoyed JOOQ’s SQL builder with or without codegen the most if I need to support multiple dialects or complex dynamic queries.

Speaking of JOOQ, anyone have recommendations for something similar on nodejs? I haven’t been particularly excited by prisma, typeorm, or sequelize.
Too much typing ‘if err..’ everywhere
OpenAI TTS is very competitively priced: $15/1M chars.
They did mention a couple other series hybrids, however, neither of which has a Wankel.
Agreed! I also was like "... that's not what I meant but that does kind of work, when I read your comment." :)
Not if you need to run a mainstream web browser.
Late 30s here and can confirm. Went until I was 16 with zero technology besides Yahoo chat, MSN Messenger and Newgrounds.com. Then got a flip phone which I used mainly for my pizza delivery job. Other than that, hung out with friends and did the dumbest stuff imaginable, not a phone in sight.

I saw a doc not long ago where a guy was in prison for 7 or 8 years - while cell phones and social media was in the middle of really amping up. He said the biggest surprise for him when he got out was seeing 3 out of 4 people looking at their phones everywhere he went.

That being said, I'll leave one of my favorite short movies of the sad state that we've come to as a society:
https://www.youtube.com/watch?v=QugooaNRnsk
Yup! We were encouraged to take interviews at other companies for multiple reasons. One was to report back the offer as data for the HR team. They used that both in level setting new offers as well as making sure you got an appropriate raise.

It was also because Netflix understood that if you found a better job, it was better for both you and Netflix to leave and take that job, because it meant that you weren't truly happy at Netflix and may not be doing your best work.

It was truly an enlightened way to think about talent, and I've never seen anything as good since.
> I didn’t care about the money, I care about being taken for a fool.

Truly one of the worst feelings there is... But I sure would have cared a lot about the 200kUSD/year too.
It's not just utility on my end; I think it would be selfish.

In the last twelve years I have had sixteen jobs. That number being so high wasn't really by choice; I've been fired and laid off a bunch of times. We can wax philosophical to the reasons why, but one thing that has become clear to me is that I'm not a terribly stable person. I am often pretty mean, short-sighted, and impulsive. When you don't have kids, those attributes are kind of considered "eccentric", but if you do that to a kid you're (correctly) considered "abusive".

It's one thing to be the primary breadwinner and have your income cut off twice a year when I only live with adults, but it's another when there's a tiny human who is 100% your responsibility depending on it. If I had a kid, it would be a purely greedy move on my end. They would be a prop, like a puppy, there to make me feel better more than any kind of altruism.

It's one thing to use a pet as a means of self-comfort, it's another to use another person.

Occasionally I will get the urge to "pass my knowledge on", which is why I will occasionally do adjunct lecturing at a nearby university. The students don't just accept everything I say implicitly like a child would, but that's alright and I don't think I would want someone to automatically believe all the shit I say.

I think even when I'm old and alone, I'll find ways to keep myself entertained.

To be clear, I'm not one of those toxic r/childfree assholes. I don't have a problem with people having kids. I was very happy when my sister told us she was pregnant. I like kids, I try pretty hard to be a decent uncle to my nieces and nephew. I just don't want to be responsible for their development.
I think my mind bend is more over 3 actors. Note that my understanding, also, is that it has been shown that changing a detector changes what is detected at the other detector.

A is sending entangled stuff to B and C.
B measures and gets a set of angles that tells them what C would be measuring
C changes what they are measuring.

The question is, how rapidly does the "spooky" distance change happen? I get that it would not be communication between A and B or C. I similarly get that you could not coordinate between B and C. But, from all of the framings I've seen so far, I don't understand why the change between B and C is not faster than speed of light.

(And just to rapidly get it out there, I fully expect that I'm merely misunderstanding something here.)

Edit: Also, to add, my understanding is that they are not "getting angles" per se, but would be seeing distributions. Which is why you would need more than 1 particle, as it were. So, you would say of the X I have recorded, 30% have been blue, 70% have been green. I suppose the concern is that you have no way of knowing when the "100%" mark is done until after classical communication, such that it is impossible to know what the final distribution you are measuring is? Effectively?
What's the point of your implementation? systemd is totally modular, you can use just the init system without networkd, timesyncd, resolved, nspawn, whatever else I forgot about.

If you want you can just use systemd as PID1 for service management and enjoy a sane way to define and manage services – and do everything in archaic ways like 20 years ago.
Maybe https://www.law.cornell.edu/uscode/text/18/1030#a_5 ?

> knowingly causes the transmission of a program, information, code, or command, and as a result of such conduct, intentionally causes damage without authorization, to a protected computer;
Not just Hondas but many other Japanese cars mid 2000’s to mid 2010’s Mazdas are notorious for having their underside rot out from rust.
Lol. Yes I suppose.
Here is the incident report: https://aviation-safety.net/wikibase/372326
Not all people, though I admit that it’s a lot more than makes sense to me.
>Woha, is this legit or some sort of scam on Google in some way?:

I work on OSS-Fuzz.

As far as I can tell, the author's PRs do not compromise OSS-Fuzz in any way.

OSS-Fuzz doesn't trust user code for this very reason.
as bad as Google is becoming, does it need saving to survive?
Picovoice says they do this but it's a paid product. It supposedly runs on the device but you still need a key and have to pay per minute.
I believe the future is 1 bit models - for both training and inference.

When people make custom silicon for 1 bit models, they'll find that it is sooooo much more power and silicon-space efficient to do 1 bit math than 16 bit floating point - like 100x or more.

That extra model size will vastly overshadow any worse performance of the models.
Not even that works painlessly. You commonly run into incompatibilities so an ORM won't necessarily make your code database agnostic.
Because discovery, consumption, and metadata are completely different for both mediums. Part of the reason Apple has a separate app for classical music.
When it's your job to decide which safety equipment to install on highways or whether to install scrubbers on coal power plants, you have to think like this.
because a lot of people hate how spotify has the same app for music and podcasts
Trendpop [CA based SaaS startup] is looking for a Senior Data Infrastructure Engineer to help us reverse engineer the algorithms that power virality on social media.

Trendpop Core, our large-scale data infrastructure platform, ingests millions of social media posts and processes multiple terabytes per day to surface valuable insights for our customers.

This person will work closely with our CTO to build the next phase of Trendpop Core infrastructure.

Small but effective engineering team, offering broad autonomy. Meaningful opportunity for impact. Seeking US-based candidates, in West Coast at this time. Fully remote company.

Comp: Base salary $140,000-$160,000 + Equity + EOY bonus. Additional WFH and wellness perks!

Apply here: https://jobs.lever.co/collab/c1995aea-c74a-4ec5-8202-d8a10fb...
The smaller the team Demis has leadership on the more he can absolutely achieve but I’m worried he’ll by hamstrung with steering a goliath.
Can you stay in that org after leaving Google?
Largest GIF
> maybe entangled particles are just physically connected {along some higher dimension / some unknown process}.

I have always thought this might be a possibility - but wouldn't we be able to observe this somehow?

Is it actually possible this could happen and there's no way we could observe it?

Gravity distorts space-time - but it's observable.

For these particles to be connected still - wouldn't that be some disturbance in space-time?
Perhaps naive, but we escape with \ everywhere else, so why not here?

If you're typing in CSV manually, escape with \

If you're exporting to CSV, the program already know which part is data and which part is the next cell, so again the program can escape with \
It is fairly obvious. If it is expected that a product or set of features will drive X revenue per month, and you are late by Y months, then a decision that directly contributes to that delay just cost the company money.
In Google Universe yes.
I have a product that can bring in $10,000 in profit each week. If I launch it four weeks late, I just lost $40,000.

Or I have a product that relies on certain hardware. I've already bought/leased that hardware, so I'm now paying depreciation/lease payments for that hardware. Every week I delay the launch I'm losing money on those payments because the hardware is sitting unused.
Thank you, formatting fixed.

My TLDR is that I would regard all commits by JiaT75 as potentially compromised.

Given the ability to manipulate gitnhistory I am not sure if a simple time based revert is enough.

It would be great to compare old copies of the repo with the current state. There is no guarantee that the history wasn't tampered with.

Overall the only safe action would IMHO to establish a new upstream from an assumed good state, then fully audit it. At that point we should probably just abandon it and use zstd instead.
Maybe the collider is the basis of a neutrino transmitter.

The purpose of this study was to inspect the possibility of using neutrinos for communications for military submarines ... Because neutrinos are nearly unaffected by matter, a neutrino beam could traverse directly through the earth from the transmission site to the submarine. A directional beam would allow confidential information to be passed only to the intended recipient. Neutrino communications would also be totally jam-proof. As an additional benefit, a neutrino message could be received in the deepest of waters, leaving a submarine less vulnerable to enemy attacks. -- https://www.physics.ucla.edu/~hauser/neutrino_communication_paper/siljah_mod.htm

But the conclusion isn't optimistic about the receiver.
How long did it take for the meds to work? I have to different doses for a month each but did not see any effect, partly because i would sometimes not take the med on time.
You can write a rather simple GitHub action that would do that: look at a PR and reject / close it if you don't like it for some reason. AFAIK open-source projects have a free quota of actions.

OTOH sticking to the same email for more than one exploit might be not as wise for a malicious agent.
I can't tell for sure without actually checking the repo out but this looks to be GCM with random nonces using a command line flag string as the fixed key for the network.

If you're trying to build a modern encrypted multipoint overlay network, MLS is a good place to start.
It is. I think I lucked out because I found mine through recommended word of mouth. It's definitely a matter of personality fit, though.

My life has been pretty successful, and my mental health has generally been pretty good[1] in my adult years, but one therapist, in particular was super, super instrumental in getting me to both learn about myself and reframe things.

1. No depression or other significant disorders. Most I get these days is the blues.