skysight-inc/HackerNews huggingface dataset:
False dichotomy much? It doesn't have to be a motivated state actor pulling the strings from the begging. It could also just be some guy, who decided he didn't care anymore and either wanted to burn something or got paid by someone (possibly a state actor) to do this.
The govt gave an already successful man to jump start their tech .. hmm not to big of a stretch .. he got handed a blank check to do what he built his whole life todo .
Right, yeah, systems people use eight hours a day are quite different from 'e-commerce solutions' and 'corporate blogs' and have very different UX-demands.

When you're in front of an application that much layout is more or less unimportant as long as it can easily be interpreted by someone who has been sitting there for a year or more. This typically means that a newcomer will feel an immediate discomfort at layout and program flows, there's just too much and much of it is impossible to interpret without initial assistance.

This also means that when you change something it has to be run by pretty much every user first, or the one percent users that is actually really annoyed will pull in the rest and everyone will hate your revamp of their workplace.

Typically you can add to the interface though, and that's how long-lived 'enterprise' software gets cluttered views that are incomprehensible to newcomers.

If you enter this segment of development you need to understand that the users are like Unix greybeards, it's just that their version of urxvt and zsh and vim is a graphical interface to business processes. They'll get mad when things aren't like they've been for decades, and they'll try to have you guillotined if you force 'whitespace' and 'just enough information per view for the purpose I, master developer, think it should have'.
I don’t think that is cut and dry as such, being able to solve IMO(International Mathematics Olympiad) level problems require a significant level of creativity and imagination, and folks who are good at it naturally have an aptitude(and perhaps an upper-hand as well) for problem solving in general, research or otherwise.
I suppose it's better than Apple's the-audience-sits-in-front-of-a-screen-showing-a-video "live" events, but it's still a letdown IMO.
Chromebooks
Any comments section would require moderation, and internet moderation is a huge pain in the butt. It's not an unsolvable problem, as the examples you give demonstrate, but it does require a lot of effort, and I think you'd be pretty hard-pressed to find academics willing to expend that effort.
I find the wheel is most typically reinvented in pursuit of venture capital.
How GitHub replaced SourceForge as the dominant code hosting platform
Yup still have my welcome email from the beta:

"First off, welcome. And thanks for agreeing to help us test Gmail. By now you probably know the key ways in which Gmail differs from traditional webmail services. Searching instead of filing. A free gigabyte of storage. Messages displayed in context as conversations."

I remember the marketing around the gigabyte was that you'd never have to delete another email, and I guess that was true!
The assumption that the NSA catches (and discloses) most flaws in major open source software requires a high suspension of disbelief.
Maybe one can get the code from here. New commits being added it seems.

https://git.tukaani.org/
Right now they’re worried that somewhere in those 700 commits added by the malicious maintainer there may be some subtle memory safety bug. So great is the difficulty of finding these bugs that they’re planning to discard all work since the commiter became involved, including work by others.

Introducing such hidden bugs that are basically impossible to find is much harder in a memory safe, statically linked language.
The Kasm docker containers are very cool. It's all on GitHub, too.

Just curiously, what's the name "Kasm" come from?
Hey i worked there for several years during the wendy drama. glad to see people are interested in this sb treasure
"pron" sounds funnier. I still think "My toothbrush started to shit the bed" is out of place (https://news.ycombinator.com/item?id=36284643).
Maybe stop treating X like a day care and allow people to post stuff that are “NSFW” is what people want
Still unapologetically using rocketmail address as my burner email.

After gmail, proton, fastmail nothing beats the nostalgia and the let down I felt when yahoo bought and destroyed it.
I am curious, why don't this clever hacker create multiple accounts instead of only this "JiaT75"
No, more about having one's ability to work in any engineering field (a broad definition which includes anything physical including environmental) revoked, similar to how lawyers can be disbarred, or how medical practitioners can lose their license to practise.
But they didn't active the "Under Attack" mode in Cloudflare, so surely they must be doing it all by themselves.
I think Denis addressed this in his post: "Overall, as an engineer, you will never regret taking part in the development of a sharding solution. It’s a complex engineering problem with many non-trivial tasks to solve". In other words, it might be not invented here syndrome (with all due respect to Figma team). Or there might be more nuances we are unaware about.
Just seems trivially obviously not the case to me, but seems like a popular meme regardless.
I wrote 'was possible' and 'enabled', not 'created'. By paying more attention to what others write you'll avoid superficial dismissals that prevent you from improving your understanding of complex issues.

The creation of this backdoor did not take place in a vacuum. Can you imagine the same person trying to introduce build changes and binary test cases into openssh? This backdoor was crafted in this particular way _specifically_ to exploit the fact that sshd in distributions such as Debian is being indirectly linked with lzma.
Sweden aim to classify industrial hemp as narcotic
It's easy to hide things in the Python build process as well. Things like using `getattr` instead of . (dot) etc
Adding a backdoor to closed source software if you are the government is (almost) free so I do not think that the argument he is making about cost is a valid one.
Oh nice, this is the one "SQL replacement" I'd actually look into
This content was very useful to me, as I am running a small service for a few clients that I worry might be taken down by a DDoS. The main takeaway seems to be "use a CDN", but if you are running a more complex service, why can't the attackers hit endpoints that aren't CDN-cached? Is the strategy in this case simply to refuse the request very early in the process, to ensure the service doesn't waste much time processing it?
https://www.micski.dk/2021/04/10/how-to-mount-exfat-formatte...

makes no mention of distribution issues. can you elaborate?
>Pinta is a fork of an older version of Paint.NET and (as far as I know) doesn't aim to be a clone.

There was a Paint.net fork (called Paint mono), but it is not Pinta. Pinta is a clone. From the original Pinta author: https://jpobst.blogspot.com/2010/02/over-holiday-break-i-stu...

"Pinta is a clone of Paint.NET."
Im not sure there is a direct correlation but US urban areas were mostly planned for cars and in the EU urban enviroments inherited their layout from the times before cars so they are more sucseptable to urban planning that is more humane
I'm sure you had the choice not to provide that documentation, right?
People build sets all the time, that's not odd. What's likely is that my son would like to build some set, where we've never bought it but already have the pieces.
That was Splinter Cell for me, 2 years before Far Cry. Always saw Far Cry as more... toonish whereas SC was all about realism
That strikes me as very naive. Reddit bots are never marked as bots, that's the whole point of astroturfing. Youtubers aren't diligent about disclosing sponsorships either, regardless of what their ToS say.

Slightly outdated (2018), but they found that only 10% of Youtube videos disclosed sponsorship: https://www.engadget.com/2018-03-28-youtube-influencers-spon...

A recent report by the European Commission found that only 20% of overall "influencer" posts disclosed sponsorships: https://ec.europa.eu/commission/presscorner/detail/en/ip_24_...
I know. I was being a bit mean, but they seem to be implying that more parameters even with worse performance is preferable. That seems backward to me. There is no reason for parameter size to be intrinsically valuable, and I think people are a bit infatuated with it.
Others here have already made good suggestions for books that focus more specifically on communication...which is what you were asking about. I wanted to share a book suggestion I found helpful regarding emotional intelligence (or emotional maturity) in general. The School of Life
Lawyers essentially have a guild. They set up systems like the Bar to prevent outsiders from plying their trade.

It has similar functions as a union but predates it by several centuries.
And if Spain is too far for some American southerners, there are a couple of Serra pieces in the Chattanooga, TN sculpture park. I was surprised to run into them while I lived there.
He came on IRC, he seemed ok. He did some cleanup of access and signed off for easter.
The reason for this is because X already wants to censor/moderate less and you can already easily come across a ton of NSFW content, so having a exclusive place(inside communities) to post it is better. I suspect many that are downvoting it may not have used Communities before
Problem 6 has a similar resolution too: you have the circle of radius sqrt(3) and the rect a+b=n^2.

Considering the fact that n is natural is easy to find the solutions: n=0 and n=1
So the question is what formed this person in this way, private schooling, right teachers at a public school, parents?
> National ID

How are you going to verify a national ID? By taking a photo of it? What if the photo is edited? By somehow going to the maintainer in person and looking for anti-counterfeiting features in the paper? What if the ID is old enough that it predates these anti-counterfeiting features? Not all countries are Germany.

> or verification by an employer.

What if the maintainer is unemployed? What if the reason the maintainer has enough free time to maintain the package is because they're already retired, and living off their pension or investment returns?

> Both are ubiquitous

From what I've heard in the Internet, some large countries still don't have a national ID.
If so it can also contract to become zero?
I have an (equally aging) 2070 Super. It runs the game just fine at 1440p and perhaps not maxed out. Your 3080 will of course run it even better. No need to upgrade unless you want 60fps path traced or 4K.

Can highly recommend the game.
There is a clear difference between the dangers incurred by an artist (e.g. an artist using toxic pigments) and an artist endangering their employees (models, assistants, etc).

Similarly, there is a difference between the dangers incurred by an artist and the dangers incurred by anyone deeper into the supply-line (e.g. in the mining of toxic compounds to be used in paint/pigment).

The artist who taught me sculpture died as a direct result of employing asbestos in his work. He was an art student when he did so, and the information that could have saved his life was not then public knowledge.

One of the hallmarks of Serra's work is precisely danger. Stand in person inside of his work and tell me otherwise. This was a knowing gamble on his behalf.
For tools like compression programs, you’d generally prefer performance over everything (except data corruption, of course).
Two paths to the relaxed lifestyle: 1) only work about as much as needed and keep a low-key, relaxed lifestyle; 2) work crazy hard for 15-20 years and then if everything works out perfectly, slow down and keep a low-key, relaxed lifestyle. All of my life experience suggests that option two is often a trap that keeps one away from relaxation.

Also, sounds like you could benefit from an existential psychotherapist, if you could find one.

Kind of random movie suggestion, but this all makes me think of the lovely movie I Heart Huckabees.
Tell HN: Shop Pay transmits your info to commerce sites if you're logged in
This is very annoying. If you use Shop Pay (https://shop.app/shop-pay) and you're logged in and browsing sites, Shop Pay transmits at least your name, email address, and possibly more to these sites.

In my mind, visiting a new commerce website, adding something to my cart, and the immediately being added to the site's email distro and receiving constant "did you forget something in your cart" checkout spam is a huge dark pattern on the site's owners. But Shop Pay shouldn't be transmitting any of my info to the site unless and until I actually check out or choose to sign up for their email distro (which I never do).

The first time this happened (visit new site, add something to my cart, immediately receive spam), I thought it was user error. The second time it became clear it was Shop Pay giving my details to websites.
This was _the_ one thing that kept me switching from Windows to Linux.

Bit the bullet and now I full time use Krita and Linux Mint. But it doesn't stop me from pulling it open anytime I need to do work on a Windows PC. Great for Cg (with its builtin .dds support!) and texture work (.vtf and other plugins)

The community has been good to me. Good piece of software.
In Sweden we have the proprietary BankID system, which is linked to one’s ‘personnummer’. (The personnummer is similar to SSN and compulsory for all citizens.)

https://www.bankid.com/en/foretag/secure-digital-identificat...

I think India has something similar?

Not sure if open source developers would be so keen on introducing requirements like that into the development process. Some developers want to keep a low profile and not reveal to much about their AFK identity. And nearly all tech for doing stuff like this is proprietary.
So, there are serving virtually zero bits from their servers.
Not really, malicious actor committed to xz project for 2 years, over 700 commits, there could be security issues in stable xz as well.
What can one do after having this installed? What's the consequences for a machine with this installed but not connected to the WAN?
Apparently there's a wayback machine for git repos and it "just coincidentally" archived this repo the day before the news broke:

https://archive.softwareheritage.org/browse/origin/visits/?o...
And yet it seems like every new car is.
Show HN: A practical example of using async Rust runtimes in C and C++
In this particular case, the Tokio based implementation of streaming files up and down AWS S3 from crate rust-s3 is bound to a C++ Boost::ASIO app (find this in directory test/asio). The app can be tested with AWS S3 directly or with emulators like Localstack.
I managed to somehow disable the button that appears on the video without totally disabling the feature. I find it a lot more ergonomic to hit ctrl+shift+] to toggle it.

I pretty much only use it for videos yt-dlp + mpv can't open though.
You are very likely right. I can't find sources for this. Sad to see.
But why wouldn't using one of many CPU cores be sufficient?
There's even a terribly named term for it - the anthropic principle:
https://en.wikipedia.org/wiki/Anthropic_principle
I can't read swedish, but it has the phrase "delta-9-THC".

Outside of California, Marijuana is still technically illegal, but substantially similar intoxicants from hemp have been legal since 2018, and you can go have the whole dispensary experience in red states that didn't legalize it.

https://fivethirtyeight.com/features/how-mitch-mcconnell-acc... is maybe a good primer.
The malicious developer did not add bugs to xz, they used xz as an attack vector. They added malicious shell code to the xz build scripts, so that when you build and install xz it attempts to inject a backdoor into sshd. The malicious shell scripts were carefully hidden. They were compressed and added to the repository under the guise of "test files". Furthermore, the backdoor is only enabled in the release tarballs: the malicious actor has run the autoconf and then manually enabled the backdoor in the generated build scripts. If you clone the upstreaf repo and regenerate the buildscriots from scratch,the backdoor is not enabled.
> Well, consider this, to "contribute" to a proprietary project you need to get hired by a company, go through their he.

Or work for a third-party company that gets access to critical systems without any checks. See for example the incident from 2022 here: https://en.wikipedia.org/wiki/Okta,_Inc.

Or a third-party that rents critical infrastructure to the company (Cloud, SaaS solutions).
To be fair - old Twitter was already about to launch a competing product. It got canned at the last minute due to their inability to moderate which is really important for adult content

https://www.theverge.com/23327809/twitter-onlyfans-child-sex...
I was more pointing out the fact that people reinvent existing stuff in a new language, then a few years go by, the 'existing stuff' is still 'existing', the 'new language reinvention' is dead, and someone new then reinvents the 'existing stuff' in some new language :)

eg: https://news.ycombinator.com/item?id=19276751

https://github.com/remacs/remacs

last commit, 3 years ago.
Oh thanks, I was always looking in about:preferences but found nothing except toggling the video controls for the picture-in-picture!
Nope, you still don't need that huge banner. See e.g. https://european-union.europa.eu/index_en
It is not as simple as you put because the decision was not technical, it was political/ideological. To discuss its technical relevance is meaningless; everybody knows the image is bad and should not be used in 2024. The fact that it is still used is a testament to the deplorable situation of academia itself, but has nothing to do with this ban. They banned it because (a few, very loud) women felt uncomfortable about it and decided to turn it into a crusade. And IEEE (as with most other organizations nowadays) are rightfully scared to make a fuss over something so small and petty. It's a small, almost meaningless loss for the IEEE, and a big meaningful win for those who actually care about something like this. And so it goes, little by little, they win.
in problem 2, what does star in R^*_+ mean?
> But typically this take would be assumed by a FAANG company to require over a thousand developers?

Using a CDN has been common practice for many years at companies big and small. Many big CDNs even have free tiers.

> Like how can claim it’s self congratulatory when huge companies regularly can’t do this?

You don’t need a FAANG company with thousands of developers to use a CDN. You can sign up for Cloudflare today and have your files distributed by CDN with some simple changes. You could have it done by end of day.
The emojis reduce (but not eliminate) the number of "me too!"s PRs will get, which IMO is a good thing.
Redditer compares book and movie versions of Dune according to their times
Developers the world over earn much less than Americans. It's why I've always told American developers to be careful what they wish for when it comes to remote work.

But it might just be possible that there's more to life than money.
Many single radio phones can either receive sms/calls, or transmit data.
My relative owns such a device and cannot use internet during calls or receive/make calls during streaming like YT video playback.
I simply can't call Twitter by the name "X" as it suggests acceptance of what Musk stands for. But he's just a terrible human being with a head full of garbage.
I think we’re losing the plot here - which is that you can reinvent yourself later in life.
We used the notation for Real numbers strictly greater than 0.
is this sev0?
Some countries have national IDs with public-key encryption. You can use the ID card itself to sign things.
To be blunt, male don't feel threatened by a poster of a manly topless macho. It won't incite inferiority complex, at least not by much. Else The Terminator would offend and upset a shit ton of men, and it would been a very unpopular movie. So why should it be suddenly problematic the subject of a poster had assumed certain gender that isn't men? If it's biological, why can't it be said? Is arachnophobia and ophidiophobia shameful to admit too?
To be fair that was only one of the files they mentioned - the rest could be going to their server on every hit.
What amazes me when thinking about Gmail is how today's thunderbird (or evolution or whatever) are still miles away from the ease of use the old GMail UI had.

Local search is as slow and as bad as it was 20 years ago.

I am probably not doing it right though.
Is this sev0?
London's tallest skyscraper validates Einstein's theory
I bet after Gutenberg revolution people expected that society will elevate itself reading all the classics and instead it settled on cheap thrills. That means that if you want change you need to implement it inside your family / company and not rely on larger constructs such as government to solve this. Which is sad.
"All cannabis becomes narcotics, except for fibers and seeds, and all handling becomes subject to a permit, regardless of variety and delta-9-THC content."

Which means all existing types of hemp.

The current law allows for 0,3% THC, which I believe was because it was too difficult creating a strand with less and too expensive to extract it.
> Early voting is specifically called out as a problem by people who claim that their political enemies are voting multiple times

I don't understand: what's the difference between early voting and non-early voting in that regard? The last vote made by one voter is the one that counts. If someone votes multiple times under multiple naames they could do so regardless of whether there is early voting.

Are these people suggesting that singlee-day voting and long waiting times help integrity because... it's physically impossible or at least extremely inconvenient to vote multiple times if you have a 3h wait to vote, and even if you try you can only fit so many 3h queue periods into an election day? They seriously fear that if people are given the opportunity of "voting in 5 minutes at the mall" they'd invent 100 different personas and vote 100 times?
Yeah idk this is literally what happened on Tumblr before they purged porn. Accounts had to hit a switch if they were posting porn and it ultimately blocked their blog from public view and removed their posts from tags. This was prior to the deletion.

People seem to be perceiving this as formally legitimizing “NSFW” but in practice it’s just putting the bell on the cat.
Isn't this part of what the traditional (?) target of "make distclean" does? (Remove everything that ./configure generated.)
This is exactly it! I’m not even that smart and I know that these LLM can never get to the point of being 100% accurate, it’s inherent to how they work. So if I know that, certainly all of the experts working on these systems know that. So many mendacious f*cks.
I wonder if super bright reflectors might be a solution to this. Entirely passive, and makes your problem with their lights their problem.
You mean we'll have hardware accelerated ternary instructions? https://www.intel.com/content/www/us/en/docs/intrinsics-guid...

(Okay probably those are not ready to be used as NN weights if the activations are not binary too, but... the gap to what CPUs already can do is getting smaller.)
And in this case Facebook did author a replacement--zstd. It just didn't get popular enough. And even when it does get popular, it won't replace all usages of xz, only some of them.
JiaT75 was also a prolific contributor to xz over the past few years, so your assumptions are generally invalid at this point.