skysight-inc/HackerNews huggingface dataset:
"Hope is not a strategy" is exactly meant to disarm this type of blithe thinking.

Global warming is unaddressed and China is actively building a military to confront the US promising WW3. We have at least 2 major active genocides, one of which might succeed.

If you were to graph corruption, it is clearly increasing. Income inequality is increasing. Congress members are still trading stock. Supreme court justices are still taking bribes... Wages (measured in ability to purchase goods) are decreasing.

I'll happily engage in the thought exercise of thinking about some systemic graphs with a slope that inspires hope.

If America or the world had a dashboard, what graphs would you show me to make me think the world was "fine" or that I should feel positively about the future?
RepRapMicron Is an Attempt to Bring True Precision to 3D Printing
A turing machine is defined as a set of symbols which it can read/write to the tape, and a state machine which maps the current symbol read to the next state and some actions.

The symbols of the Turing machine are atomic. They are not composed of any simpler parts. If one of the Turing machine's symbol is the letter "A", it's the letter "A". It is not, say, the ascii code (1000001)

1000001 could be the Goedel number for "A", but its not the symbol "A". The two strings "A" and "1000001" are two different strings.

Its a map-vs-territory kind of thing. If you are really good at programming--which is to say, you are really good at Goedel mapping your problem to integers--you might, by years of long familiarity, just start thinking of them as one and the same, but they are not.

It might make it vivid to consider a turing machine whose symbols were {1, 0, A}. Clearly, the string "1000001" and the string "A" are two different outputs for this turing machine. The lengths of the strings "1000001" and "A" are different. They are composed of different symbols. They are absolutely, positively, not the same string, so they are not the same thing.
This place was listed on Zillow for less than a few hours. We made an offer that same day after hiking the quitclaim. Ours was not the highest, but our conservation record is proven.
That’s a huge leap. I never claimed that anyone was safe. I just think your assertions have no basis or citations and you’re posting them from a throwaway. This is the equivalent of writing something on a bathroom stall.
That is an interesting solution. If China, US, Russia, EU, etc all sign off and say "yep this is secure" we should trust it. Since if they think they found an exploit, they might assume the other people found an exploit. This is a little bit like the idea of a fair cut for a cake. If you have two people that want the last slice of cake, you have one cut and the other choose the first slice, since the chooser will choose the biggest slice, so the slicer knowing they will get the smaller will make it as equal as possible. In this case the NSA makes the cut (the code), and Russia / China chooses if its allowed in.
Ask HN: Has Anyone Switched from ChatGPT Plus to Gemini Advanced?
I have been a ChatGPT plus subscriber since it was first offered. I have no issue with the quality of results but the service has become incredibly glitchy over the past ~6 weeks or so that I barely use it anymore.

I'm wondering if others have similar experiences and have switched to Gemini advanced?
Laws don’t fix technical issues any more than they fix physical ones. Clearly this was possible, so it could be done by a foreign intelligence agency or well-hidden criminal organization.

I think this is probably illegal. But, I think we should not punish this sort of thing too harshly. Tech is an ecosystem. Organizations need to evolve to protect themselves. Instead, we should make companies liable for the damage that happens when they are hit by one of these attacks.

Before anyone calls it out: yes, this will be blaming the victim. But, companies aren’t people, and so we don’t really need to worry about the psychological damage that victim blaming would do, in their case. They are systems, that respond to incentives, and we should provide the incentives to make them tough.
I'm a little out of touch, but for over a decade I'd say half the boxes I touched either didn't have enough entropy or were trying to do rDNS for (internal) ranges to servers that didn't host it and is nearly always hand waved away by the team running it as NFN.

That is to say, a half-second pause during the ssh login is absolutely the _least_ suspicious place place for it to happen and I'm somewhat amazed anyone thought to go picking at it as quickly as they did.
I built something like this a couple years ago. very cool!
What if the developer passed away? It is also easy to blame the developer with mental issues otherwise.
It matters.
Starship is mostly funded by Starlink and uses iterative development. Your comment is a bit ignorant and unnecessarily hostile.
That's not the issue here. The xz backdoor author could have used the same technique to hijack any application that linked to xz, not just sshd.
>Do you have any more info about how you did that or how you found it or how much something like that costs?

Was listed on Zillow for less than a few hours. Our bid wasn't the highest, but we have conservation plans for majority of the land.

>where we live in Gary, IN and around there, and restores them into preserves.

What an awesome effort in quite tumultuous histories.
It's not using RSA. It's hooking RSA. And the attacker's signature is Ed448, not RSA.
The two definitions say different things. What von Mises said is closer to cryptographic definitions of pseudorandomness, and in particular to next-bit unpredictability.
What benefit could come to China by starting WWII? Absolutely none, even if they won(which they wouldn't).

This is exactly the problem with this hopeless viewpoint. just like those wearing rose colored glasses, your shit colored glasses are preventing you from accurately understanding what is going on in the world.
Music creation is always closely tied to technological progress though. At any point in a music's history you can find plenty of works that would have been impossible to create even a decade or two earlier.

This is true even of relatively conservative genres like what we now call classical. It has often taken advantage of at-the-time state of the art developments in metalworking and acoustics to create new sounds.

The tools being digital does change the dynamics of this process, but that sort of change is still a familiar part of the musical tradition.
FWIW, I think inaccuracy - what people call hallucination - will probably be limiting in some applications, like public facing broad based chat applications with stringent requirements on factuality.

There are lots of other applications - in particular I'm thinking about turning unstructured data into structured data for aggregation and analysis, where you can tolerate some level of error and LLMs can work quite well to automate it.

Beyond that, obviously copilot or assistant type stuff is already something people use. It doesn't have to be flawless for that, the main use case for chatGPT is not making high stakes decisions blindly based on the answers it gives out. It makes mistakes and does dumb stuff sometimes but it's also helpful, the flaws aren't a dealbreaker even if people would like them to be.

At the same time, I don't expect it to get much better, it's going to be about getting useful work out of what we have.
The malicious author caused the transmission of the release tarball to GitHub and the official project site. This act was intentional and as a direct result other computers were damaged (when their administrators unknowingly installed the backdoored library).

You’ve got to be joking if you’re saying that this wouldn’t be an open and shut case to prosecute. It’s directly on point. Law isn’t code, any jury would have zero trouble convicting on these facts.
I guess anyone who has used windows would have come across irfanview one way or another
https://web.archive.org/web/20240330180810/https://www.nytim...
https://github.com/tukaani-project/.github/issues/2
I'd say this MR is a bad approach in general. The headers say what interfaces are known, not what features are available. You should be able to compile with landlock support on a system which doesn't enable it. Same situation as seccomp and others. Your build machine doesn't have to match the capabilities of the target runner.

But yeah, to test it, you can have a mock version of landlock which responds with the error/success as you want, regardless of what the system would normally do. It relies on the test not being sabotaged too though...
Yea, it’s not impossible to do, just not standardized. If you use a library and it provides useful version information, then definitely use it. It’s just that the language or the tooling doesn’t force libraries to have that kind of metadata. Compare that with Rust, where every library you use must come with a standardized manifest that includes a version number, and where they tell library authors up front that they are expected to follow the semver convention.

The fact is that things have good easier over the last 10 or 20 years. It used to be the case that any program targeting Unix had to either spend a lot of time and energy tracking the precise differences between dozens of different commercial Unices, or use autoconf. Autoconf was the project that combined all of that lore into a single place, so that most people didn’t have to know every single detail. But these days most of the Unices are dead and buried, and 99% of all new projects just target Linux. Kinda sucks if you prefer one of the BSDs, or OpenSolaris/Illumos/SmartOS, but it does mean that new Linux developers never have to jump through those hoops and simply never learn about autoconf. And while on the one hand that represents a loss of knowledge and competency for the community (making this type of supply–chain attack much easier), on the other hand autoconf is in practice an abomination. It is (or at least was) extremely useful, but it was implemented in M4 and reading the source code will literally damage your brain.
I think instead of building your own client for displaying the posts, if you linked it with substack/twitter and others it would be a useful tool.
It works for me on an Intel MPB (2020) but it's probably a lot slower.

On this page:
https://en.wikipedia.org/wiki/Typeface
it takes almost ~10 seconds for the text in the first image to become selectable after page load.

With local images / PDFs in Preview it's really quick though
Why not play with one in a VM?
Global Investment Returns Yearbook 2024 [pdf]
The article references https://www.sciencedirect.com/science/article/pii/S074183292....
I don't understand yet where the "unreplayable" part comes from, but this isn't it.
People predicting the Canadian housing bubble would burst probably didn't think the government would resort to such absurdly high levels of immigration.

https://globalnews.ca/news/10386750/canada-41-million-popula...
Proponents of what is called the "real estate cycle" say it is about 18 years long (plus or minus, and discounting its disruption due to wars), from peak to peak. They say the next peak is due in late '26 or early '27 (October or March, if the month matters).

There are some that say they can predict the movements of land speculation based economies. I'm familiar with old blog posts from back as far as maybe 2005 that predicted the crash in 2008 accurately.
Probably not for fully Chinese hardware. Although this backdoor is only x86 so it still wouldn't work there.
It's not cigarettes expensive, but it doesn't seem that cheap to me.
doordassh :)
Well, a couple of points: its not obvious that Chinese doesn't have a context-free grammar: see the talk by David Branner: "The Grammar of Classical Chinese is Very Close to Being a Context-Free Grammar".

And a properly programmed turing machine can parse languages which are way more complex than context-free languages are.
Did the artefact produced [0] for fussing even include the backdoored .so? My understanding was that the compromised build-scripts had measures to only run when producing deb/rpms.

https://github.com/google/oss-fuzz/blob/5f70676a6c9050b9cb68...
Conclusions are almost invariably stronger when presented alongside evidence or even supporting arguments.
Ouch? Are there standard tools to monitor that? Any best practice to avoid? I am considering exactly tha kind of setup...
I forgot the author walled it!
Chad NSA

It's called the ANS is Chad.
There's no "if we keep it narrow". It's a narrow point. I'm not here to defend the democratic practices of Israel, or any other country, just to say that Hamas would murder you for trying to stand up a major news outlet opposed to Hamas's control of Gaza.

That Hamas is extraordinarily bad does not make Israel good.
Probably they use libgit2 instead of git. But you can use git log -L for that.
1. Yes, eventually. Nature does that. But we're talking a long time scale here more than a human lifetime. And it'll never be as good as if you never cleared the land in the first place. Not even 10% as good.

2. Sure, always good to have more trees, but really what you need is ecosystems. For example, many trees don't reproduce without understory, which is the smaller trees and shrubs and plants that make up a forest. You don't get that with monocultures.

I can look out my window and see some beautiful Melaleuca trees in the middle of a grass paddock for cattle. If you drove by, you'd think maybe “nice to see some trees there. Lovely blossom.”

Those trees are functionally dead. They will never reproduce, because they depend on the understory to do so, which was cleared a long time ago. To say nothing of cattle nibbling on potential seedlings (but you know, food production is important).

This is one reason why the count of species that go extinct every day is so high. It's not that we exterminated them specifically, but we exterminated their food's food's food that was part of a tangled web of evolved inter-dependencies.

Monocultures, or near monocultures, don't have the complexity. Maybe best to think of them as “social housing for (a very few) varieties of animals”.

I guess, the long and short of it is, everything we're currently doing is largely palliative care, and just take a little care that whatever it is you do doesn't do as much harm as good.
That's a dark pattern
> The invisible hand of the free market will not and can not sort it out by itself

You are but one small part of the invisible hand! Other people have other preferences. Efficiency per dollar isn't the end-all, be-all of the market function. Is it so critical to stop people like your parents from using incandescent bulbs, on the basis that they are less efficient?

> They may even be misinformed and making decisions with bad information

We are all operating under imperfect information, as myself and other commenters have pointed out, because LED bulbs don't last as long as advertised. And worse, by banning incandescent bulbs outright, the government is preventing any further information from even being gathered.

> the free market does not have good technical literacy

"It is not from the benevolence of the butcher, the brewer, or the baker, that we expect our dinner, but from their regard to their own interest." Add technical literacy to "benevolence".

> the downsides to the ban are what? Rudeness?

Well, rudeness is a euphemism for the ever-encroaching regulatory suffocation of the federal government, where people can't even freely choose what kind of lightbulb to buy. It's not like we're talking about trading fissile material.
I don't know...I looked up dozens of pages and tried all of them. One monitor I have to scale down to 50% and the other one is native res, I think that's what caused me problems. I remember getting it to work but having issues with it either not displaying fonts properly because of all the weird scaling stuff or having things display off-screen and all that. I don't remember the exact reasons for seeking out Wayland but I remember having a really glitchy time on X with multiple monitors at different resolutions/scales. It was one of the very first things I tried on Sway and it really just worked instantly and intuitively exactly how I wanted.

It's possible the link you sent would solve the issue for me, but at this point I don't really have the energy to load up X and try again. I've since switched out a bunch of my workflows to adapt to Sway and the interruption would cost more to me than just living with the Wayland bugs.
> Ireland had arguably the world’s largest housing bubble and crash in the 2000s, with prices quadrupling in the decade to 2007, even while supply soared, before crashing by more than half between 2007 and 2012. (emphasis mine)

That wasn't the accepted wisdom at the time. Prices going up spelled 'supply shortage' to most. When the tide went out (i.e. credit availability) it revealed an oversupply.

We should learn from this. Demand comes in two forms. Demand for housing and demand for property investments. We should not lose site of the drivers of the second type of demand. It can make what isn't a supply shortage look like one (and feel like one for the average person).

Edit: It's worth noting that 15 years after the collapse, prices in Ireland had finally recovered and once again a shortage of available housing is a reality. I say 'available housing', because the long term rental market is dire, but if it's a short term rental you're after, well...
There I am, scanning carefully, and I see a period where one clearly should not be. "This wasn't so hard", I said to myself.
I poked my screen, and the period moved.
Curse you, monitor dust particle.
I've not noticed that, if anything I'm always delighted to find a 3-minute song these days, it feels like a bit of a lost art.
> except they'll never, ever be as good as whatever was there before the land was cleared

100 years? 500 years, 1000?
I hate to break it to you, but the same could be said pretty much every year since 1900.

If you had that thinking, you'd have missed a great time.

A broken clock is bound to be right eventually.

At some point, the world will end, eventually.
Dimethyltryptamine.
Space X Does 3 Launches in 1 Day
Space X launches 3 rockets in a single day!
Harm reduction can still be a valuable first step if the substitution is indeed less harmful.

I know people who switched to cannabis and found good success with it. They've since gotten help with the underlying addiction issues, and are in a much better place.

Probably not a good idea to see substitution as a long term solution though.
Never liked hard liquor in the first place. Switching from beer to soft drink is much easier. Also it's much cheaper

Also 0 alcohol beer is totally a scam. It's just beer flavored soft drink selling at the beer price, which is absurd.

If Coca/Pepsi starts to sell beer flavored coke, it would be kinda hilarious
This is probably my geriatric grumpiness speaking, but this seems subjective so I can disagree. Today's pop stars are beautiful faces with teams of highly competent, mostly invisible, professionals working behind the scenes to prop them up with music. It's much easier to take a handsome/pretty person and use technology to manufacture formulaic music around him or her, than it is to take a talented musician and make them picturesque and sellable.

It was also the case years ago, but somehow even moreso today.

I fully agree that quality outside of the mainstream / performance artists is better than ever though!
You don’t need the government’s permission to ignore your boss after hours.
Economy of Venezuela
Its invested $2B+ into F1 but has gained multiples of that for the brand by "manufacturing history".
Yes, we've heard of it. It's been around for 25+ years.
NYC will allow companies to test autonomous vehicles on its streets
> Rewriting calls to SIMD enhanced versions at runtime?

That's something that's been done for decades. It's pretty normal. What's not normal is for that to get re-done after startup. That is, one library should not be able to get that resolution process to be re-done after it's been done once. Malicious code that knows the run-time linker-loader's data structures could still re-resolve things anyways, which means that even removing this feature altogether from the run-time linker-loader wouldn't prevent this particular aspect of this attack.

I.e., you're barking up the wrong tree with (2).
Both WPF and WinForms, additionally at least DirectWrite and Direct2D and by now a bunch of shader code for the various effects. I guess there's a lot of things that can go wrong when trying to run it via Wine.
How usable is Redox as a daily driver? Is it sorta-kinda works territory or is it possible to run a significant number of programs without hoops? Firefox? VSCode? Flatpaks?

Can I run a VM inside Redox to fill in the functionality gaps?
Substitution can be a valid part of a harm reduction approach, if it allows someone to begin a process that otherwise feels impossible. Or if it is simply less damaging to the individual and those around them than what they're using now. It can be a step, if not a solution.

But I hope no one is trying to roll their own addiction recovery program out of the HN comments today. If anyone thinks they might need it they should get competent help.
> any sort of conversion you can explicitly specify can be turned into a program.

If your Turing machine can only print out zeros and ones, there's no program which can get it to print out "ABC". So it cannot specify a conversion between a language whose symbols are {0,1} and a language whose symbols are {"A",B","C"}.

It could specify a mapping between one binary string and another binary string, but it can't even print out "ABC" so how could it possibly specify a conversion?

This is elementary guys.
> Pay $10 for a DRM file on the Amazon and still have to put up with ads.

If you purchase the discounted ad version. Pay the full price or the $20 difference whenever you feel like and you don't get any ads. You can even send them a message saying "hey, I didn't know there would be ads" and the support will remove them for you.
Question that might be outside your experience, but I own some land in the Rockies that was clear cut at some point in the last thirty years. If I did absolutely nothing with it, how long until it turned back into Forest?
Thinking about this a bit, wealth (in the US at least) confers social status, which is taken as a proxy for personal honor, character, dignity, etc.
If you are shit talking, have some balls, and do so from your real account instead of creating one to hide your arguments behind.
China will attempt to take Taiwan (they’ve even given their military a deadline for getting ready). US probably wants that not to happen and will probably try to stop it. Things will escalate rapidly and we’ll be lucky to live through it. Rand did a good study on the dangers of escalation during a conflict over Taiwan. It doesn’t look good.
Having garbage collection (GC) in your toolkit doesn't mean you're limited to choosing between GC and deterministic destruction. You can integrate GC, stack allocation, and manual memory management within the same application. It's possible to leverage GC in a manner similar to how `shared_ptr` is used, providing both automated cleanup and precise control over object lifetime. For a practical example, consider SGCL: https://github.com/pebal/sgcl