skysight-inc/HackerNews huggingface dataset:
> plastics and electronics

Ah - computer fans! They are everywhere in Taiwan, I've seen them on food carts for ventilation ;)
> Do you think we’re nearing a proof of the Collatz conjecture? Or is the theory we have just totally inadequate?

Well, Terrence Tao made a recent advance towards it. It's hard no doubt, but I don't think recent theory is inadequate, except maybe that no one has found any structural link to a body of more advanced math like it was done with Fermat's last theorem, which is why some people think we need new theory to solve it.

Also, I definitely didn't mean to imply we are reaching a plateau of mathematical understanding: there's still a long way to go in proof theory, K-theory, Langlands (a better understanding of orbital integerals, how to compute them symbolically...), nonabelian cohomology even (lots of stuff there seems ad-hoc like definitions of higher nonabelian cohomoogy groups).

What I do mean to imply is that it is getting to the point where none of the discovers at that level really lead BACK to anything that the vast majority of scientists or even math graduate students have much interest in. That's different in cases like evolutionary biology: even the advanced discoveries can still be tied back to things that are interesting for the "every day scientist".

Math has lost that link. It's not running out of problems, but it's running out of interesting problems IMO.
It's just as hard, indeed. But you don't need to replicate as early with server+DB because your DB is focused on data transactions only. You can have a replica ready for a potential outage and that's all you need to care about for a long time.

When you run everything in your DB, replication issues will hit you much earlier.

Of course this all depends on what kind of app are you building. If it's an internal tool or something like that, you probably don't need to worry.
>in some states [lighting laws] are not enforced at all.

This is how it is in the American South, where every 90's pickup truck has been "retrofitted" with xenon bulbs, without actually having replaced the headlamp reflector housing == blinding oncoming drivers.

Don't even get me started on people driving around with their actual highbeams on because "it allows me to see better" [an actual response].

My state does not even inspect vehicles in any capacity — would love to see police actually cite offending vehicles, but they're too busy busting kids for marihuana.
Because of the exploit, so, why should we use configurations in production that were not covered by these tests?
where a repo is forked but the new maintainers don't change the repo's did

A DID is a public key. If you don't know the corresponding private key you won't be able to make any updates. All you'll be able to do is mirror it.

instead just get more nodes to follow them than the original

This is like saying "but I can fork Verisign's Root CA certificate and get more nodes to follow me than Verisign!". No, you don't have the private key that goes with that root certificate. So everybody will ignore you.

Cryptography is not a popularity contest.
A trip down memory lane :) The patch for Far Cry to become 64bit:

https://www.anandtech.com/show/1677

They were technically beat by Chronicles of Riddick who shipped something on disk

Looking back, this did little for performance. I suspect the memory limitations and introduction of SMP around that time to be a lot of warts we recall
Every piece of software doesn't need to be for everyone. Designing interfaces for the lowest common denominator throws away a lot of ideas that may make some people more productive to benefit people who won't be.
That would cost you $200-$400 per day when hosting at Netlify or Vercel, which can quickly impact the bottom line of a startup or small business.
Google says running AI models on phones is a RAM hog
It was a massive tax dodge. Because of German arts funding laws investors could make money even if the film flopped.

https://www.cinemablend.com/features/Uwe-Boll-Money-Nothing-...

They closed the loophole he was using in 2006.
My current hypothesis is that the attacker(s) deliberately chose a Chinese-sounding name to make people jump to conclusions. A sophisticated state actor would be no stranger to making their actions look like somebody else's.

Or maybe they actually are Chinese, and want me to believe the sentence above. :)
Moondust: Theme for those who haven't found syntax highlighting useful
“Personalize” content should’t apply to this kind of page.

> We harvest all of the data that we can from your use of this landing page to whoever we want so that they/we can in aggregate profile you and sell you stuff more effectively.

How nice, UI landing page.
My own extension StopTheMadness Pro: https://apps.apple.com/app/stopthemadness-pro/id6471380298
Headlight alignment is at least part of the yearly vehicle check for vehicles older then 3 years. Aftermarket lights that are illegally bright will (or rather, should) also fail that check. But I would assume if you're knowingly putting some eBay NightVision-b-Gone supernova in your car that has "not legal for road use" on the box, you're going to swap it out beforehand and put it back afterwards.
"almost" and "comparable", but xz (lzma) still compresses at a higher ratio, which is still a highly desirable feature.

If the decision was being made today, a good faith debate could be had over whether the distro packaging use case benefits more from faster decompression or smaller file size, but I suspect that, globally, the average PC can decompress xz faster than the average broadband connection can download it.
Isn't that true of approximately every voice cloning model released lately? I've seen as few as 3-5 seconds as a matter of fact...
The closest program I've found for Mac is Pixelmator Pro, but it's not free, and the UI/workflow is more complex in my opinion. Paint.NET is still one of my favorite pieces of software on Windows.
What I do not understand is they say "we explored CockroachDB, TiDB, Spanner, and Vitess". Those are not compatible with PostgreSQL beyond the protocol and migration would require massive rewrites and tests to get the same behavior. YugabyteDB is using PostgreSQL for the SQL processing, to provide same features and behavior and distributes with a Spanner-like architecture.
I'm not saying that there's no risk and no efforts, but they are limited. And testing is easy as you don't have to change the application code.
I don't understand why they didn't spend a few days on a proof of concept with YugabyteDB and explored only the solutions where application cannot work as-is.
I liked the description, but do we really need blockchain bs for that?

Git by itself is decentralized, and peer-to-peer technologies existed long before too.
I like the app as well but to me it also sounds like 'ChatGPT, create an unusal marketing post', it all doesn't make sense, even less for people who have experience with real ddos attacks.
Would a 'memory safe' language really have stopped any of this? From what I've briefly read, this incident the whole attack process (PR, fake test data, social engineering) from start to finish by a state-actor (most likely), could have been in any language.
It’s sarcasm.
> It is required by EU law,

Keyword “cookies”. Keyword “tracking”. Why does this kind of page need to use cookies or tracking of any kind?

(Please don’t follow up with oh this is clearly the default banner popup of the UI framework that they are using, they probably just didn’t disable it… probably harmless)
Much faster: yes.

While matching LZMA2 compression ratio: no.
Some people will be okay with the ads.

Others will prefer to go the subscription fee route to get rid of them.

Some others will look at the ads and just decide to use software without anything like that in the first place, something truly free.

I think it's nice that we get the choice and that there's enough software out there for that to be the case. At the same time, if developers are successfully monetizing web based software, I wonder why that's not the case for desktop software.

I remember using a program called RaiDrive (https://www.raidrive.com/) to mount ext4 volumes through SFTP on a Windows machine and it worked pretty well, however they had an ad banner at the top of the window which seemed oddly fitting for a free version of software with lots of functionality, but maybe that's just due to me being used to ads everywhere nowadays (albeit uBlock Origin and Pi-hole exist).
They're just saying anything to bump up their value.
The Promise, and Limitations, of Network Gossip Protocols (2007) [pdf]
If you are this deep into it, it doesn't matter.
They were responding to:

> It is naive to think that US intelligence agencies will act in the best interest of US citizens or companies.

With an example of them doing exactly that.
yes, I have plans to try adding some query helpers eventually.

One could imagine representing queries as compound terms, like:
q(user(id=Id, name=like("Bob%"), email=Email))

which would query, from user table and bind Id and Email for all matches.
I plan to experiment with something like that.
Ah, thank you for the reminder!
> it isn't clear that's what this is

Because that's not what this is - this is for when you write e.g. `language plpgsql` in defining some function; instead of that (with this installed) you could write `language plprolog` and use prolog.
Problem 5 has a simpler geometric solution, it's enough to plot circle of radius sqrt(2) on the Oab plane and a few lines b=-a, b=-a+1, b=-a+2, b=-a-1, b=-a-2 to observe the intersections. The rest of the lines are too far from this circle to intersect with it.
I too think we're growing hypersensitive, but that's not the only argument for switching to a different picture: the the model has requested the image not be used, long ago IIRC.
Apple needs China as it embarks on legal battles in the U.S. and EU
My translator friend speaks no Japanese. She used to work with English, German and Portuguese. The fact that translators are still not Professional-level (yet?) is no consolation for the thousands of other professionals like her. She retired already.

> It can't replace a human.

If it provides enough leverage to today to make one person 20x more productive, then it is effectively replacing 19 humans. When it is effective to make one employee 200x more efficient, it will replace 199 humans.

And if you have enough hubris to think you are always going to be the lucky one out of the chopping block, it's not for lack of warning.
Happy to see the future looks brighter. Work laptop needs to be supported by some software packages, so Ubuntu LTS of at least 1 year old is the minimal requirement. See you in 2025, wayland.

I've gone back and forth on wayland a few times now. It has both good and bad sides. Major functionality holes are finally getting plugged.

But the quality and stability of the compositors just isn't there yet compared to X11, and when leaving QT and GTK widget sets, almost nothing is fully baked. Presumably, things will get better in a few years.
> I don't think phishing is such an obscure scenario.

For a typical person, maybe, but for a tech-minded individual who understands security, data entropy and what /dev/random is?

And I don't see how MFA stops phishing - it can get you to enter a token like it can get you to enter a password.

I'm also looking at this from the perspective of an individual, not a service provider, so the activities of the greater percentage of users is of little interest to me.
Cambell's "Start with NO" is a great book to read.
Certainly what it seems like. They have a model they can't release without backlash, but still want the credit and don't want to wait to receive accolades until they can figure out how to prevent abuse (which I assume is just impossible).
This is actually why I switched all my Pis to Alpine Linux since they use a RAM disk by default for RaspPis Haven't lost an SD card since, meanwhile my Octoprint RasPi has failed 4 times (mostly because of random power disconnects)
I don't think the situation is very typical, so I don't why the response should be.

There's two maintainers, one is on an "internet hiatus", the other is either suspected of being the bad actor, or is otherwise so thoroughly compromised to destroy any short-term trust.

I assume if homebrew had such an egregious issue, they'd have someone able to respond to it.
Not sure what angle you're going with. If you want to say there that there is more than one rotten problem at the core of society, go for it. I'd be the first to agree with you.

This is not black and white reasoning. Each problem can be on a continuous plane, from "slightly bothersome" to "there is an absolutely horrible evil lurking here".
Fair. But it doesn't really explain why they wanted to stay on RDS. This is their reasoning:

> over the past few years, we’ve developed a lot of expertise on how to reliably and performantly run RDS Postgres in-house. While migrating, we would have had to rebuild our domain expertise from scratch.

So they had in house expertise to run performantly on RDS but that same experience couldn't be translated to switching over to it running on EC2 + Citus? Rather they used another non-experience concept of building their own sharding? That left me scratching my head.
Is spec dead?
I cannot find any releated discussions... usecase in real applications... please share with your experiences _if exists_!!
I can see both sides here but I think media matters is mostly in the wrong. All platforms can be smeared like this if you set up perfect conditions. How many times has this happened with Facebook?
i wonder how neon would perform with a database of this size. Several terabytes per table is pretty big.
Learning French with ChatGPT
The stored procedures and views and triggers get replicated too.

I think you’re imagining that moving business logic into stored procedures will overload the database server sooner than having that in application code. I have never seen that. Instead you get fewer simultaneous connections and less data passed back and forth. Querying a compiled view or stored proc will often use fewer resources than parsing, planning, and optimizing SQL sent from application code. And the RDBMS can make better use of caching with business logic in the database.

Scaling and replication may present complications with any architecture, but those aren’t good reasons in my opinion to not put business logic into the RDBMS. Real enterprise-scale databases tend to do that and they actually have scaling and replication issues, not just “may happen someday” issues.
It is like computer viruses.

DDoS attacks do benefit some specific corps, for instance cloudflare.

What's very important is to build DDoS resistant infrastructure without them, to rid of the incentive to shadow-hire hackers to DDoS and force some infrastructures to move there and pay them.

There is too much suspicion in the digital world nowdays. Like current crypto is not mainly for shaddy ops and mafia? Really?
https://archive.ph/TsmZI
https://news.ycombinator.com/item?id=39865810 (over 1300 comments)
Yes, I think if a project has backdoors and its old maintainers are unable to review them, I am more critical than with normal projects. As said, compression is used everywhere and in embedded systems, it touches a lot of critical stuff. And the project went straight for that since the beginning.

And this is in part because I can not even tell for sure that he even exists. If I had met him a few times in a bar, I would be more inclined to believe he is not involved.
Anakin – Automatically Kill Orphans
More like founded by Taiwanese government when Morris Chang was 55 years old
You're right, but maybe because there's nothing to see : https://github.com/tukaani-project/xz
Minimal 64x4: The Oddball in Home Computer Development [video]
This story is an incredible testament to how open-source software can self-regulate against threats, and more broadly, it reminds us that we all stand on the shoulders of contributors like you. Thank you!
I’m ok with disappointing you. I don’t know you or care what you think. You posted here for advice, I didn’t.

For the record I count 14 paragraphs in your original post and comments. I’m not diagnosing you, I’m not qualified to do that. I formed an impression and suggested you may want to get a professional opinion.
That’s so dang cool
That critique adresses security aspects.
> They’re advocating deploying a binary as preferable to using docker, fair enough, but what about the host running the binary? One of the reasons for using containers is to wrap your security hardening into your deployment so that anytime you do need to scale out you have confidence your security settings are identical across nodes.

There are tools that make "bare metal" configuration reproducible (to varying degrees), e.g. NixOS, Ansible, building Amazon AMI images.
1
Author here. I did my fair share of competitive math in highschool, but never got to the National phase (although two times I was very close, like 2 points close). The amount of grind for that was too high for me, and I also had other interests. All in all, the regional phase was also quite hard (most of the problems are from the regional phase). We were not told why we solve the problems, we considered the problems to be more like teasers and puzzles.

Years later, I've realized they helped me to get some sort of mathematical intuition of things that was enough for me to finish an Engineering degree without having to struggle too much with math. All my colleagues who participated in the contests felt the same.

To this day I believe those puzzles educate the Engineer in you, or if you want to finish with a Math degree they can be complementary.
> If they can't clear the intersection they have no business entering it.

In heavy urban traffic, it is impossible to know if you can clear the intersection before entering it. You can often predict it with some degree of accuracy, but only if you are already familiar with this particular intersection; forget about out of towners being able to make that judgment.
iPod Shuffle Ad (2005)
There's a fun conversation to be had about that bygone era where Apple ads tried to convey the qualitative experience of using a product, rather than features.

But there's also the fact that this ad is timeless.
It would help if you told us some of that wisdom in your post. We are all listening. Maybe do an AMA. I’ll start. What was your most unique life experience and what did you learn from it?
If the 200MB files they are referring to are the TablePlus client side app downloads (183MB for windows) at https://tableplus.com/download

The files are indeed cached by CF:

# curl -v https://files.tableplus.com/windows/5.9.2/TablePlusSetup.exec > /dev/null
...
< cache-control: max-age=691200
< cf-cache-status: HIT
< age: 2980
> I don't think it is important that he went to MIT or work for a specific company such as TI.

I don't see how the alternative could realistically work. The options are limited. You need very specific type of connections, network, and background for this.

Maybe it didn't have to be this combination specifically but there are very few alternatives that position you for this opportunity. TSMC isn't something you can bootstrap or hack together as an entrepreneur.

That's where big name schools come into play. It's not about the knowledge. It's the networking, recognition, and connections. Connections are a very scarce resource just like gold is.
FTA:

> OpenAI says they see this technology being useful for reading assistance, language translation and helping those who suffer from sudden or degenerative speech conditions.

Of course they would. They are manipulating others by appealing to accessibility. Who can argue with that? Accessibility has become the "but think of the children" appeal of the AI world. Yes, it can help those who suffer from degenetative speech conditions, but it can also deceive and push propaganda to whole new heights.

This sort of manipulation is characteristic of antisocial personality disorder. In fact, if you look up the symptoms of that disorder, technology companies like OpenAI exhibit quite a lot of them...
This is the sort of thing where artificially generated samples work well. Spawn a random set of blocks, run a physics engine for a bit to have them pile up, add random lights and render to an image. The renderer can also give you a ground truth annotation for each pixel to the corresponding block type.
Sir, I have my pompous site on linode and feel offended and hurt.
From what I understand the headset can be configured to be used without moving the head and even to use eye tracking, only, instead of the minimal finger gestures.

https://support.apple.com/en-gb/guide/apple-vision-pro/tan42...
The answer is not complete. There were 2 ways to pull sources:

bad - https://github.com/tukaani-project/xz/releases/download/...

or:

good - https://github.com/tukaani-project/xz/archive/refs/tags/...

Specifically in Gentoo, there is a note in https://github.com/gentoo/gentoo/blob/master/app-arch/xz-uti...

# Remember: we cannot leverage autotools in this ebuild in order
# to avoid circular deps with autotools

Namely, to unpack autoconf-2.72e.tar.xz from gnu.org you need xz-tools. And this is just the shortest circle. It is not very common, but xz-utils was one of few rare cases where regeneration of autohell files was considered as unnecessary complication (it backfired).
The big lesson from this is that we maybe should spend a bit more time hardening the build process instead of rewriting everything in Rust.

Also, I am a strong believer of strength by diversity, especially for anything that is safety-critical.
That happened because the code changes from ext2 to ext3, and later from ext3 to ext4, were very invasive, and filesystems is one place where stability and reliability is very important. So instead of risking introducing data-loss bugs, they forked the code. It was always the plan that the older code would be removed some time later, once the newer code had proven its stability for a while.

The on-disk format for these three is the same; the difference is that the later ones understand more of the "incompatible" additions to the on-disk format (IIRC, the main ones being the journal for ext3, and extents for ext4, but there are others). You can convert an "ext2" filesystem into an "ext4" one by just enabling the relevant filesystem format flags on the superblock, and making a few necessary adjustments (for instance, creating a journal when enabling the "has journal" flag).
Main thread here: https://news.ycombinator.com/item?id=39865810
At some point, higher individual compensation doesn't matter much if everyone else in your community is overworked and underpaid.

I think many Dutch or French software developers are living better lives than developers in California, all things considered.
Yes, it's rather in the old Paint Shop Pro category.
I think it's plausible that it can roughly clone the timbre that my exact vocal and sinus geometry produces, then apply that to its internal representation of a "baseline human voice". However, I don't believe that it can capture exactly every nuance in articulation, emotional expression, intonation. I simply can't imagine even a voice actor iterating through "the full range" in merely 15 seconds. And what about mannerisms, like pronouncing "you all" as "y'all"? Ending every sentence by affixing the "uh" sound to the last word-uh? Or how they sound a sigh or laugh?

In Dutch for instance, there's 3 ways to pronounce the R, and everyone has a certain combination of when they use which kind.
A really long con would be to first identify some component than already has a naturally occurring, so far unknown hard-to-find vulnerability, and then slowly add this kind of injected vulnerability to it. If the first vulnerability is eventually accidentally fixed by some normal refactoring, and if the second vulnerability if eventually found, everyone will revert back to the old version and now you can again use the first vulnerability.