skysight-inc/HackerNews huggingface dataset:
You are literally defrauding your employer. The fact that you should be available, but aren't, alone is enough to make sure of that.
That's for 2 reasons:

1. It might not be there in the place where you're looking. It exists in the m4 in the release tarballs, not in the git repo.

2. It's highly obfuscated.
I see your point, but suggesting adding an additional library dependency while we're discussing a supply chain attack is quite ironic.
Smaller boundaries are likelier to need less maintenance, but nothing stands still. The reason you can run an ancient simple binary on newer systems is that someone has deliberately made that possible. People worked to make sure the environment around its boundary would stay the same instead of drifting randomly away with time—usually so doggedly (and thanklessly) that we can argue whether that stability was really a result of maintenance or just a fact of nature.
> Use LLMs to spell/grammar check and perhaps even auto-complete missing pieces?

I would really want human review. Remember that copier that changed digits because it was being clever with compression?
Some discussion: [0](52 points, 3 days ago, 14 comments), also [1][2]

[0]: https://news.ycombinator.com/item?id=39840977
[1]: https://news.ycombinator.com/item?id=39840421
[2]: https://news.ycombinator.com/item?id=39841146
Puter Self-hosted – Open-sourced 100k lines of code to self-host Puter
> I would point to Sweden and their current problems, also to the change of mind of the pro-unchecked immigration politicians. Who now are openly and publicly stating they were wrong.

Context for others: Sweden has no language, income, employment, or skills requirement <https://www.migrationsverket.se/English/Private-individuals/...> for obtaining citizenship.

In completely unrelated news, Arabic is now the second most spoken language in Sweden <https://digitaledition.chicagotribune.com/tribune/article_po...>.
Couldn't you make a bigger image that has all of these?
Because the other ways

1. Are logistically harder.

2. Don't have an existing community.

If you want to create an OSS project with greatest adoption, you're best bet is GitHub.
It works for self-motivated people.
Dynamic linking was a mistake and should be eliminated
Then that's what they will have to learn then isn't it?
It wouldn't matter in this case, since the exploit could simply rewrite the function that calls out to the unprivileged process. If you already have malicious code in your privileged parent process there's no way to recover from that.
It's the same situation as described in my comment.

You have a robustly growing market so it attracts investors and then speculators, especially if money is cheap. This drives increase in supply but that lead to a bubble. For instance, new builds can be snatched by speculators even if they remain empty because market value increases 10% year on year so who cares... until something happens and the bubble pops. Again, this is a common pattern in growing markets.

People might also try to sell to avoid repossession if rate hikes make mortgages no longer affordable.
It's been great. No more hangovers. No more having to worry about getting a sober ride home.

I love the taste of beer and now there are so many good NA beers I can still enjoy one and not have to worry about effects of alcohol. Guinness, Blue Moon, Sierra Nevada, Athletic, Stella Artois, etc.
I don't understand how this format keeps coming back. On mobile (which doesn't have reading mode) it is literally unreadable over such a noisy animated text-filled background.
You’re not paid for 9-5 hours. You’re paid to get the job done. Sometimes that takes two hours. Sometimes it’s ten hours plus a weekend. It’s very easy to identify (and fire) workers that don’t honor this system.
I backpacked through El Salvador in 2007. I don’t remember people saying it was particularly dangerous.

Honduras was the place I was told to skip, unless you wanted to scuba in Roatan

There were other backpackers in the hostels.

Even Colombia at that time was fine.
That's social media you're talking about. Not smartphones.

Smartphones can be a vehicle for social media. As can laptops. But they don't have to be.
Yeah it's a little forced. I guess that native Chinese products meeting/exceeding Western performance metrics is now equivalent to "sidestepping sanctions"

But really, "Made In China 2025" has been the ten-year plan for 9 years now.
“Wow when we get rid of all this on premise stuff and IT and outsource it all to cloud we are going to save so much money…”

LOL

Companies are now paying tens of thousands a month for compute that could run on a 10 year old physical server. They also have no control and don’t even own their data anymore in some cases.

They’re starting to realize it, but now that they’ve divested themselves of in house IT they no longer have the in house expertise to do differently so they are kinda locked in.

I saw this train coming miles away…
Haha yeah I knew it as a doona before I knew it as a duvet.
> Yes it has a bunch of other features, but they are irrelevant because the basics aren't there at a price that is doable.

The basics don't cost $18/user/month though. The whole package does. I hear what you're saying, and maybe you just accidentally worded it this way, but the obvious rebuttal to it is: How much would it cost you to set up a solution where only ACL'd users can SSH into your infrastructure/servers? You're looking at services that cost money like Userify for that. For many of the other features Tailscale offers, you're probably either paying another service to handle that responsibility, not doing it at all, or you're spending your time recreating it, and I bet your time isn't cheap to the company either.

Anyway, that's somewhat of a hypothetical rebuttal. I actually assume you did the due diligence and weighed the cost with the portion of the feature set that you actually would make use of. I could see the price being more fair if they offered a lower cost tier that only provided the VPN and ACLs for unlimited users, but I'm not a savvy businessman so I'm not sure if it makes sense for a multi-tool company to sell a minority of users a screwdriver.
The biggest thing about the whole commute is the delayed negative impact to health in general.

This is of course worse in Asian cities with super congested traffic. When you spend 2-3 hours/day commuting, it becomes very hard to maintain a regular workout schedule.

A commute time of perhaps 20 minutes one way is manageable. Anything beyond that simply eats into your quality of life, really.
Git Bisect has saved me multiple times. It's such a simple concept, but being able to hone into the commit where something is broken is almost always useful.

I've never tried automating it. That'll be fun to try next time I'm in trouble.
I thought Earth 2 was a crypto scam thing.

https://earth2.io/
For comparison, patio11 post(ed) a lot of great stuff for free with tips and ideas, and then sold his courses and consulting services https://www.kalzumeus.com/greatest-hits/

A few years ago, he went from consulting to a normal job, so most post are old, but IIUC he now is in consulting again. I still make comments with links to his old post because I think his advice is good.
I can personally vouch for this.

In Morocco cats were everywhere. Cafes, high rises, farms, University, everywhere I went.

Even the airport! As we queued up to the ticket counter (this was decades ago) i saw cats wandering independently. I mused to my companion, "i wonder if they get into the secure area of the airport?"

Sure enough, after going through security and waiting at the gate, there goes a feline walking by wholly unbothered.

I wondered if cats ever got onto planes unwittingly. Didn't see any on our plane ... still wonder.
What if we could add giant engines to control the rotation speed and fix this leap day/second nonsense once and for all?
The immigration “issue” is actually because ain’t nobody having kids, and capitalism demands constant growth.
“Defrauding my employer” — a bit dramatic, buddy. You must be a micromanager.

You know what’s also “fraudulent”? Wasting my time.

Time I will never get back. Time that you can never buy. Time that I will never spend with family/friends. I will never get back the hours lost to commuting to a stupid office.

Who’s “defrauding” who at this point?
One could publish a standard. Reception would depend on how much weight you can throw around but it could be interesting regardless. Even people always arguing nothing is possible could point out possible improvements. Whichever one wants to spend their time on?
> Rather, the best case against Bukele is that he has created severe systemic political risk in El Salvador by converting the government from a democracy to a de facto dictatorship

then hes in a good place to introduce some kind of monarchy, or personal transfer of power, someday. people want him to be dictator for life and he seems to be loved enough to receive it. democracy doesn't deal with gangs well enough to make a country like this functional. hes a wise person whose made good investments for his country.
That is a rather broad question IMO. I do not own a home due a perfect storm of things (tragedies, health issues, etc), despite making north of 200k/year for many years.

My rent in my single family home has only ever gone up when we had a large property tax increase in the area. I actually looked the increase up for our place and the landlord ate most of the cost. They have NOT raised rent outside of that. They are super responsive to repairs and stuff as well.

Broadly, I'm sure rent prices are on the rise, but there are many reasons for that, with rent comparison/adjustment software being a big part of that.

I have alluded to this on social media platforms, but really, the only permanent solution to stopping explosive price increases on renting or buying. We did this for health insurance and it really did a lot (more than most people realize), if property sales and rent were limited to say, inflation, or even inflation + 5% I suspect things would change quickly.
Earth 2 was a sci-fi TV series in the 90s
I'd rather retire early.

Personally, I find it hard to be productive with a 4-day workweek.

I think we should push to lower the retirement age instead of shortening the workweek.
Ran like a champ on my iPad Mini.
> As with everywhere else in the developing world, there are also a bunch of cheap Chinese imports […]

Note: the images below this text actually show Korean writing, not Chinese.
There’s no mention of the terms of his employment, how are you so certain?
Well, actually I’m offended because I feel excluded as I was personally hoping for option c. someone else. /s
The whole point of Kolmogorov complexity is that there exists some language for minimal description length of an arbitrary program and you compare optimal descriptions across languages. In other words, the point is to explicitly consider the choice of language as part of the encoding scheme that needs describing. That choice is included as part of the description whose length is being measured.
How one programmer broke the internet by deleting a tiny piece of code (2016)
She's capable of making her own decisions now, but not when, for many years, she thought it was harmless?

It's weird that papers are banned based on which sample images they pick, rather than technical merits.

When will the HeLa cell line papers be cancelled? To this day scientific experiments are being carried out on cells take from a black woman without her consent.
I was using paid open ai for the gpt4.

I ended my sub some time ago.

It barely works on any complex programming questions. I’m faster at writing code than it is at generating the response. Not a brag just saying. I have a brain and I like to use it.

Even for coming up with letters or something the output is so damn cringe and corny.

Don’t get me started on the image generator. It’s like someone took a scattershot of schizo and lsd. “Come up with a minimalist logo” it’s far from that lol.

Honestly of the opinion that this is the current hype cycle like crypto that will die out in a few years and then someone in 2060 will restart it again based on papers from 2030.

Cash out wisely.
To be perfectly honest I don't actually know... I usually find things work About Like You'd Expect and the thing you're trying to do is in fact possible, but that's not really an answer.

I guess that's a great example of how things can be amazing for one use case and horrid for others.

I usually interpret having trouble reasoning about something as meaning whatever I'm doing is Not Best Practice for the tool I'm using.

A lot of the time, I find there is a best practices solution I could do instead. When there isn't... yeah, that is in fact annoying and obnoxious.
Doesn't everything?
Yes and its better. Not because of the glitches, Gemini Advanced was better on its first day.
is this a good amount of not overwhelming the system? e.g. they recommend 60 days? https://letsencrypt.org/2015/11/09/why-90-days - and folks say the bot process won't let you do it unless it's within 30 days of expiring? (but this might not be limited by the server-side API, because --force-renewal exists)
Anecdotally, after lunch on Friday has always been low productivity.

No deploys allowed also really reduces any urgency among devs.
Boston University Suggests Replacing Striking Grad Students with AI
Fatigue and stress in the modern workplace certainly doesn’t get wiped out to zero by Sunday night. Personally I’m looking for early retirement
As there's more sources exposed to the public all around (not just a few radios and a few tv shows) and tastes diverge, that would be the natural outcome.

Also people can seek their better targeted, more appealing music elsewhere so pop doesn't need to fill these shoes.
I get this logic, but in software development there is effectively an infinite and continually growing list of tasks to do. A lot of large and popular software projects on Github are not closing issues at a faster rate than they accrue.
You can find GitHub events from the repo as a csv here https://github.com/emirkmo/xz-backdoor-github

If you are interested in the source code that is easy to find. This code and git repo are linked all over the world, in many git repos, and the source is bundled many times
in releases as well.
seems very unlikely. ease of access proliferates use especially of addictive behaviors and vices, not the prohibitive-ness
info@ycombinator.com
See also xkcd #2347: https://xkcd.com/2347/
Personally I’m just more efficient and happen to have people around me be very independent and competent. Having decent project management helps as well.

Team is well aware of the product and confident. Very very rare to have knowledge colocated within a specific member of the team.

All or most knowledge is well documented as well.

On the very rare instance I am actually needed to put out a fire. We have “on-call” rotations (pager duty).
> My only gripe with it is that cropping is unnecessarily convoluted…

What are you talking about? Make a rectangular selection on the image (click and drag across the image), then CTRL+Y. Couldn't be easier.
When do people log on?

I know after going fully remote I started working earlier in the day.
Billboard publishes dozens and dozens of charts every week each with various formats and criteria.
I can't speak to Ireland, but at least in Canada, between 1990 and 2020, rent increased by about 1.6x whereas house price increased by about 6x. I personally believe that declining interest rates are responsible for this decoupling. This also coincided with an increase in investor ownership, just as you suggest. Interest rates have started rising recently, and we are now seeing a rapid growth in rent costs while housing prices have basically flatlined or fallen slightly. This makes sense if you relate the two in terms of the price a rational investor would pay in order to own an asset providing a certain stream of rental income.
My assessment of Midjourney, Stable Diffusion and DallE are that they are good if you don’t have anything specific in mind and your subject isn’t something which has specific components. (Try creating an accurate chess board. I have never been successful.)

So for many situations where we want something that is consistently good, graphic design skills are still necessary imo.
You’re allowed to leave your house. I go to the store, the gym, go for a walk, whatever I feel like during the day. As long as I don’t miss any “important” calls
Reflecting on the idea of introducing a validation structure for software contributions, akin to what RPKI does for BGP routing, I see significant potential to enhance security and accountability in software development.

Such a system could theoretically bring greater transparency and responsibility, particularly in an ecosystem where contributions come from all corners.

Implementing verifiable identity proofs for contributors might be challenging, but it also presents an opportunity to bolster security without compromising privacy and the freedom to contribute under pseudonyms.

The accountability of those accepting pull requests would also become clearer, potentially reducing the risk of malicious code being incorporated.

Of course, establishing a robust validation chain for software would require the commitment of everyone in the development ecosystem, including platforms like GitHub. However, I view this not as a barrier but as an essential step towards evolving our approach to security and collaboration in software development.
A generative AI-driven CLI for testing
Jarvis is a powerful CLI tool that leverages advanced generative AI technologies (such as Google's Gemini Pro LLM and Gemini Vision Pro) to streamline and enhance various software testing activities. It aims to revolutionize how we approach test case generation and scenario creation.
the natives just immigrated 20,000 years earlier is all...
Honestly cities are great, cars kind of suck though
LLMs for writing also suck. It might just be that the people using them don't value writing thst much.

LLMs for translation, on the other hand, are incredible. They are a game changer in immigration, where immigrants constantly need to read and write credible messages in a language they don't speak. They can't do certified translations for bureaucratic matters, but they are great for everything else, and much faster than hiring a translator.
> It used to be the case that any program targeting Unix had to either spend a lot of time and energy tracking the precise differences between dozens of different commercial Unices, or use autoconf. Autoconf was the project that combined all of that lore into a single place, so that most people didn’t have to know every single detail.

As a data point, the place I worked for in the mid-90s had a single codebase with something over 600 permutations of supported OS and compiler when you included the different versions. One thing we take for granted now is how easy it is to get and install updates – back then you might find that, say, a common API was simply broken on one particular operating system version but your customers would have to wait for a patch to be released, sometimes purchased, put onto floppy disks or CD-ROM, and then manually installed in a way which had enough risk involved that people often put it off as long as they could. Some vendors also did individual patches which could be combined by the sysadmin so you had to test for that specific feature rather than just saying “is it greater than 1.2.3?”, and it wasn’t uncommon to find cases where they’d compiled a common library with some weird patches so you had to test whether the specific features you needed functioned.

Part of why Linux annihilated them was cost but much of it was having package managers designed by grownups - I remember as late as the mid-2000s bricking brand new Sun servers by running the new Solaris updater, which left them in an unbootable state.
>a bit dramatic, buddy.

No. It is factually true. You refuse to meet your contractual obligations towards your employer, but represent to him that you have met them. That absolutely is "fraud".

>You know what’s also “fraudulent”? Wasting my time.

No it isn't. It is not fraud to waste your time.

>Who’s “defrauding” who at this point?

You are defrauding your employer. Lying to your employer about the time you work is fraud. Your employer wasting your time does not under any circumstances count as fraud. In fact you signed a contract which explicitly allows your employer to tell you what to do with your time, including telling you to waste it e.g. by sitting in front of a PC waiting for someone to talk to you about something. If you don't like what he tells you to do you have options, but refusing to work and representing to him that you have worked is not an option you have, without commiting fraud.

There is no world in which you are not committing fraud. And there is no world in which your employer is defrauding you.
They all still are fine. I drove the entire pan American highway from Alaska to Argentina from 2009 to 2011. I have dozens of Friends that have done it, and I moderate a Facebook group where thousands are doing it right now.

As the marketing for tourism Colombia goes “the only danger is you’ll never want to leave”
That was me. I'm part of ArchiveTeam and Software Heritage and I'm one of the Debian sysadmins, the latter got some advanced notice. I figured archives of xz related stuff would be important once the news broke, so I saved the xz website and the GitHub repos. I regret that I didn't think to join the upstream IRC channel and archive the rest of the tukaani.org domain, nor archive the git.tukaani.org repos. Been archiving links from these threads ever since the news broke.
Why are projects like xz and sshd still active? Just freeze it, it works fine. Only changes should be fixes for vulnerabilities. None of this complicated new functionality. If you want something like that make a new project. If it is truly better people will use it.
Absolutely not. Getting a job at any critical infrastructure software dev company is easier than contributing to the Linux kernel.
I find people tiring to deal with constantly so enjoy being isolated by doing WFH permanently. I guess the years of dealing with noisy, overcrowded offices sucks the life from you. I don't like drama at all in the work environment. I am there to perform utility not to play politics, which I find so boring.
The second compiler can be subverted, as long as it's not subverted the same way.

In particular, it could be one you wrote yourself. It doesn't need to support everything, just enough to compile the compiler under test.

It could also be a compiler from a different group/organization.

You could use many compilers and test with all them.
>> When you are speaking, each time you emit a word, you are not attending to every previous word in your sentence

I was exactly doing this until late in my youth. until I learnt people do it sequentially. But it is doable to create connections and pick the sensible case. Not the most relaxing thing.
The challenge is software development is planning out software development years in advance. Moving up the deadline years in doesn’t really help anyone because marketing and sales won’t have planned around your new date (see: the surprise release of the Sega Saturn). What matters is being able to stay on track and get back on track.
Time to start looking at similar cases for sure.
Could the backdoor have targeted Wireguard instead of ssh?
> that issue with root feels overblown in the era of single-user systems and servers as cattle.

Uh. No.
Re: >coke Pepsi making beer.

They have that in other countries, malt drinks but no booze. Kids drink them after sports.

Or now I saw, carbonated water soaked in hops a la le croix but instead of hints of lime it’s hops. Pricey too!