skysight-inc/HackerNews huggingface dataset:
No, you're not putting it bluntly, you're just doing more straw men.

Who are discriminating in this context? No one. You've just made that up.
Noticing and Writing
I am just heading back from the UK to SoCal. I was in the west country for a week and did plenty of backroads driving in heavy rain at night.

I can't say I noticed many blinding LED headlights but general headlight alignment and high beam discipline is infinitely better than in the US.
Dive into the secrets of subconscious reprogramming in this empowering video. Learn practical steps to harness the untapped power of your mind, reshape your beliefs, and unlock a path to success. Start transforming your life today with our easy-to-follow guide
8BitDo's $100 wireless mechanical keyboard is a tribute to Commodore 64
The article (the point of which is: 'just ignore this', which is sort-of the opposite of the conclusion you seem to have gotten to) specifically mentions that their egress is free via Cloudflare.

But, sure, if you have public-facing services on AWS that have the ability to send large amounts of data on demand, absolutely make sure that you limit access to those! (E.g. using a unique download token that is only available from a separate rate-limited and valid-source-checking service).
> can be likely handled by a single well configured server.

A single core, actually, after JVM JIT kicked in.
Taiwan was really smart either. People don't live in a vacuum. Except in very rare cases.
I think they have a licensing server which handles device authorization and auto updates.
I sympathize with your plight, and I see blogspam as theft.

> These people can’t put together complete sentences but were dominating Google for a decade.

But it is a mistake to confuse poor English with lack of intelligence or ability.
Combine that with Postgraphile or PostgREST and you don't need to do any server code.

The hard thing is how to horizontally scale.
I don't know why the OP disables it, but chrome used to block my desktop from sleeping because 'WebRTC has active peer connections'.

I don't appreciate web pages or applications or whatever blocking my system from sleeping so i just turn off WebRTC since then.

Edit: I was not doing anything related to video, audio, p2p or anything else implying long running connections explicitly. Some "experts" were doing it behind my back on their pages. Don't know and don't care why.
The people who hate systemd are effectively a loud minority, and for some reason always seem incapable of discussing the supposed issues with it without resorting to hyperbolic statements like “legitimately insane”.
> We are clueless of our ignorance, and of how much there is still to discover in all domains of science.

Perhaps, but I do not believe we SHOULD discover that knowledge. So far, we have not had a great track record of developing wisdom along side that.

> IMHO I think we are accelerating discovery and we do not know yet what to do with all the things we invent and discover.

IMHO you are right and the knowledge is simply too powerful for us.
Biological life itself embodies some knowledge. It uses trial-and-error evolution instead of thinking, but it arrives at solutions. Sometimes it arrives at the same solutions from different directions. This is different from randomness and the arbitrary results of random processes.
Ask HN: Going from CTO to Developer?
Let's say you work as a CTO at a failing startup, and you are tired of all the responsibilities, management, etc, and you just want to go back to being a productive developer and write code again. Will this be perceived as a stupid career move or will people understand? Is it a bad move? Asking for a friend.
I’m rooting for the guy you replied to, sorry. Turning around a condition of obesity and required medication into cardiovascular fitness at the age of 40 is radical. The self-worship is a bit unnecessary, sure, but it’s not like his positive self-image comes at your expense by telling you that you have no discipline—in fact the whole comment ends with a motivational note. The interpretation of malice, especially by quoting the part on attracting women, is what reeks of insecurity, really.
I wish CryEngine was more of a thing. I think we need more engines from companies that actually make games with them
And even if you do want to track people, there are ways to ask a lot nicer than the vast majority of cookie banners.

This guy does it well I think: https://www.dkriesel.com/

The request to allow cookies is reasonable, genuine (I believe) and unintrusive. It does use a bit of a dark pattern by making the refuse button more faded, but I can empathize.
The format is fine, except for https://www.nongnu.org/lzip/xz_inadequate.html
Complexity is the criminal in any scenario. However, if we simply focus on a vanilla installation of docker, then the namespace isolation alone can be viewed as a step up from running directly on the os. Of course complexity means a vulnerability in the docker stack exposes you to additional risk, whereas a systemd svc running as a service account is likely to contain any 0day better.
schizophrenic delusions of grandeur
Debian-stable users, once again, remain unaffected by $currentDumpsterFire.

(Experts: how do you weigh the risks of the two choices against each other? Running bleeding-edge upgrades brings in these fresh security holes before anyone's noticed them. But, running "stable" software can mean running vulnerable software that upstream has already patched. Not every vulnerability is recognized as a vulnerability, and patched as a security update; many "ordinary" bugs have security consequences which aren't obvious to recognize. Which choice is less worse?)
> [Oil painting] began with facts, the facts of his life. The paintings embellished the interior in which he actually lived.

Napoleon and David would like to have a word: https://en.wikipedia.org/wiki/Napoleon_Crossing_the_Alps#:~:...

> image generation ... accelerates the production of those "Alternative ways of life"

My hope is that image generation —because people often do not value that which is too cheap to meter— may actually doom publicity glamour, because when anyone can create it, instead of appearing like fae gold (as it does within a faerie circle) it could instead be perceived as the dried leaves it is (canonically discovered only after one returns to the world).

Lagniappe (having both cultural reference and a product placement): a mashup of both the "cinderella" and "home improvement" pitches, https://www.youtube.com/watch?v=XQYNUwYHV1c
What is awareness then? Do you see my point? Either you end up with a circle of references or an infinite regress of definitions to describe the ineffable.

It’s the problem of qualia [1]. They can’t really be defined, only pointed at. My experience of seeing the colour red is non-universalizable. Thus the word red can only point at it, it can’t describe or define it.

[1] https://en.wikipedia.org/wiki/Qualia
My comment is about the conditions that made TFA possible.

The business model explained in the article (do compute-intensive stuff and give it away for free) largely worked for Google, Facebook, and the big platform companies. Stability tried to do the same thing - building amazing tech as a loss leader - without a moat that gets people paying.

Combine that with a supplier that has huge market power (Nvidia) and you have a recipe for an entirely predictable bankruptcy.
Facebook would fund a Facebook engineer and would therefore have vetted the person in question. Same for other actors, there are ways to support these projects with eg a non-profit organization bankrolled by EU taxes or similar. Imagine if instead of Some Guy being the sole maintainer of critical infrastructure piece X, there was shared responsibility and accountability and less personal attachment.

We can argue about the specific implementation, but to suggest that it’s impossible seems incorrect to me.
You can also pay a small subscription fee to avoid ads.
Yes, this thing runs purely on extrinsing motivation – rewards mainly. As soon as you stop getting rewards for these (or competitive programming), you drop out of it pretty quickly.

Intrinsic motivation ("I'm doing something because I enjoy the process"), though, dwells on autonomy ("I'm doing something because it aligns with my values and beliefs"). And for that, you need to have your own mental model of why these things are important for the world, or you, or people you care about.
The architecture of the app didn't seem related to the "DDoS" attack they're describing. If it's only their setup file being downloaded, I imagine their backend isn't even touched, doubly so if they're using cloudflare for caching.
Best would be to disable anything in sshd that can perform compression or decompression. There is no value in that capability, and way too much risk.
> Extensive experiments using both human and automatic evaluation metrics demonstrate that TnT-LLM generates more accurate and relevant label taxonomies when compared against state-of-the-art baselines, and achieves a favorable balance between accuracy and efficiency for classification at scale.

It sounds like it could be used very effectively to create even more detailed databases of surveillance on us, by taking every type of unstructured thing we write online and making a massive database out of it. Then the information will be put into models and used to predict our future behaviour. Excellent for insurance companies and law enforcement to further subjugate and restrict human behaviour.

Definitely not worth it.
We need more keyboards like these. I keep saying Raspberry Pi should honor the BBC Micro and make a keyboard with a beige bottom, black top and red function keys, with "" instead of "F".

I'd love one of these with a VIC-20 theme, with Microgramma font instead of the C64 one.
but it's encumbered by patents of microsoft. BSDs or Reactos or minix are not allowed to implement it and distribute it freely.

only linux got a free pass from microsoft as they use it.

F** Microsoft and EXFat as long it's not freely implementable and distributable with free or open software.
> Presumably xz was chosen to begin with because of its high level of compression, migrating to zstd would make every single package considerably larger.

Absolutely false because Zstandard didn't exist when xz was initially chosen. And the actual ratio difference is not that huge, generally less than 10% for most use cases, while the fastest level of xz is slower than most levels of zstd. (In fact, `dpkg-deb` uses `xz -6` by default because `-9` would be really expensive.) Given that zstd is also faster to decompress than xz as well, the ~10% increase is justifiable.

> Lzip uses the same compression algorithm as xz, but is otherwise a simpler and better-designed format, without any of xz's bizarre countainer-inside-container design decisions.

Lzip is not a better-designed format, it is just needlessly minimal for its use cases, much like xz's needless extensibility. I have detailed my own criticisms in the other comment [1].

[1] https://news.ycombinator.com/item?id=39873122
If you're interested in this I would also recommend you check out Logica[0], which is a datalog-like language that is explicitly made to compile to SQL queries.

0: https://logica.dev/
Brilliant!

But user hostile on phone with Android Chrome. By default the canvas is heavily cropped, hiding the centre. Zooming out to avoid crop leaves the text too small to read.

Also please consider adding description to button label. E.g. F -> F (forward).

Thanks.
The Nicest Place on the Internet
I think there is a reasonable likelihood* that the compromise originates from Five Eyes. Would you really want to report IOCs to CISA?

*Given the patience and sophistication of the attack, and my speculation that the NSA likely would’ve caught it and alerted it if it was China or Russia.
Bruh maybe he’s handsome
Here is a yak-shaving challenge I posed for your amusement:
https://www.reddit.com/r/commandline/comments/1bnehga/find_c...
I take it you haven’t looked into the details of this, there is no proof but there is strong evidence in name choice, language use and the MO.
> Musk previously sued Media Matters over the article, claiming the group "manipulated the algorithms governing the user experience on X to bypass safeguards and create images of X's largest advertisers' paid posts adjacent to racist, incendiary content."

So Is this saying X has "racist, incendiary content"? I never knew.
Bullshit. Improving transport only reduces birthrates. Because with better transport, even more people will flock in from the countryside where the birthrates are higher, to the suburbs of Seoul to commute to the city - just because they will be able to. A completely opposite result will be achieved: countryside will be even more depopulated and even more people will live in conditions precluding them from procreation.

Some measures that prevents people from moving in and forces them to live more sparsely could help, such as taxation of businesses based on population density of localities where their offices are. The denser the population, the higher are the taxes.

Of course, that will harm economic development, because centralisation improves collaboration, exchange of ideas, and overall efficiency, but economic development and birthrates are a tradeoff, nothing can be done about it, it's just how the world works.
First, the "bug" jumps through several well-crafted hurdles in order to hide itself from co-maintainers, package maintainers, and anyone else who might be looking. Hiding code in binary objects, hidden within in testcases and injected into the build under just-so conditions, would be incredibly difficult to justify with any other intent.

Next, the affected codepath skips itself if it's not executed under just-so conditions. Specifically testing to see if it's being run interactively to avoid diagnosis, and testing to see if the executed binary is sshd.

Lastly, what good reason could a compression library possibly have, for overriding encryption routines in sshd?

It's a fair question, but it doesn't survive inspection at all. This is like finding someone in a ninja suit, wearing night vision equipment, creeping around a museum in the middle of the night, with the crown jewels in a bag slung over their shoulder - and asking yourself if they're perhaps a lost tourist.
Unless there were more vectors than the one already described, Arch package was never affected (and if there were more, it's still affected).
Pickle Pi Cyberdeck
I'm with you. Not sure what they're taking about, I'm not conscious and I've never seen any evidence others are conscious.
There’s nothing wrong with it. Enterprise environments often do it so business rules and logic live in one place, so application code (in multiple languages) doesn’t have multiple implementations.

I think a few things came together to make programmers crap on stored procedures and putting business logic in the database:

- OOP, which typically treats relational databases as dumb backing store for objects.

- No enterprise experience, and weak RDBMS/SQL skills.

- Popular open source relational databases with weak and clunky languages and tools, such as MySQL. Compared to Oracle and SQL Server the low-end RDBMSs most programmers learn look hobbled.

- Unless you use Oracle or SQL Server or DB/2 you may have trouble debugging procedural code running in the database.

If this style works for you don’t worry what other programmers say or what you read online. No matter how you choose to build your application you will get people telling you that you made bad choices.
Yeah, that title is click bait. The format is perfectly fine for long term archival.

In fact, I'd wager that all the focus that article has put on the minor problems with the format has taken much needed attention away from the fact that the maintainership makes xz-utils inadequate for long-term archival...
People did indeed move to LibreSSL and s2n-tls after that one incident
Delusions as described in the post are a form of fantasy. I'm not talking about the much more narrow sense of stories involving orcs and elves.
Thanks to microservices we need 45 kubernetes nodes to handle our 1000 requests a second!
I wonder how the training dataset was built
FWIW, "4 - 2" is explained earlier in the file:

// The "-2" is included because the for-loop will
// always increment by 2. In this case, we want to
// skip an extra 2 bytes since we used 4 bytes
// of input.
i += 4 - 2;
Nice scenery could be all we're lacking. Isn't an aircraft pilot just a bus driver with nicer scenery? A tenured professor a teacher with nicer scenery? A corner office an office garden with nicer scenery? What makes a house expensive, the scenery.

In the end we're all dwelling in the same way, if I could do that with mountain-ocean view, that'd be great.
Garbage collection for systems programmers (2023)
A Denial of Service attack could be mere KBs per a hour. If they trigger a heavy API endpoint on the target service, that may be enough to take the service down. The Distributed part just means multiple machines are attacking at the same time.

No part of a DDOS requires the throughput to be gigantic, although the big ones are typically the ones you will find in the news.

One possible aim of this attack is to either burn through the bandwidth quotum of the source servers, or to use so much bandwidth that it becomes unaffordable. This could be done very cheaply with just a single or few attacking machines. Most datacenters and hosting providers have bandwidth limits or start charging after a certain amount, and too often the company being attacked only finds out when they receive a bill they can't afford.
Scaling vertically and horizontally with relational databases got solved decades ago and continues to get better. Oracle and SQL Server run practically every huge enterprise database. Do you think those don’t scale?
This has been on HN's front page all day, with >3500 upvotes, and it answers your question: https://www.openwall.com/lists/oss-security/2024/03/29/4. The exploit is sophisticated and intentional.
I hardly ever come across information-level compression, and when I do it's regular ZIP. The OAIS-implementations my clients use require ZIP or TAR on the packages going in and out of the archiving software, in practice it tends to ZIP. Not sure whether the OAIS itself limits the options in the same way.
Is there any way to block autoplay on iOS Safari?

Those videos are especially annoying when you have a low-bandwidth mobile connection.
LoRA training should benefit from the same speed-up, because the 1-bit weights will be frozen and all you need for both the forward and backward pass is a binary matmul, then maybe cast after to get more stable gradients.
Well, yeah. The attacker, operating largely under the name Jia Tan, has successfully manipulated the original author (Lasse Collin) to become a maintainer.

The attacker indeed laid dormant for two years, pretending to just be maintaining xz.

I really don't see any way how this wasn't malice on Jia's part. But I do think your hypothesis applies to Lasse, who was just happy someone could help him maintain xz.
This is kind of what I did. I was VP of Engineering etc. at different companies and wanted to go back to coding, see: https://blog.jgc.org/2012/02/programmer.html.

Of course, I then ended up being CTO again!
Fusion Tech Finds Geothermal Energy Application
image.animation_mode = none im about:config.
Isn't that what security-updates-only is for?

This particular backdoor is not shipped inside of a security patch, right?
My memory of Far Cry was much earlier and less kind - there was a few people around the net at the time working for CryTek on several titles (I worked on Silent Space https://www.ign.com/articles/2001/02/10/crytek-to-bring-sile...)

The brothers went to E3 with a demo they were showing us all, but only some of us has the tech to fully run it (I had a GeForce256 I got for free from NVidia because of work I had done with the recently opened up Quake source code) - then things went crazy, they tried to get a bunch of us to move to Germany and put us up in hostels on very restrictive contracts (basically they'd move us then we'd be completely liable for our own costs)

Now, the X-Isle demo really did help push NVidia cards, but the company now had to ramp up quickly.

I heard that 'mafia' money was involved in making this happen (and they came calling for their interest a few years back which is why the company hasn't done so well) - it was odd that Cevat's first purchase was a Ferrari...

Anyway every other project got canned after this - a few of us went on to try set up our own studio, but that didn't pan our after a year.
> And somehow I don't feel like anything, but the absolute obvious, is any better.

I don't think it is either, speaking as someone who also started using the internet when hardly anyone was. I mean, if you think about it, human needs (even up to self-actualization) require just a modest amount of innovation. After that, it's just the trick that was invented at the turn of the 20th century with psychological manipulation and advertising: they found a way to make us think things are getting better, but not really in the sense of absolute human enjoyment. For example:

* Yes, I do love my Macbook Air M1 which has undreamt of power compared to my old 486 computer that could barely run "Tomato Blaster", but the power my current Mac is only valuable in regard to the rest of the technology that exists...but if computer development stopped at the 486 would I really be less happy? Not really, I would still enjoy using it and developing basic junk on it.

* Yes, I love my 24MP full-frame camera with my 500mm prime lens. Looking back at a photo guide to animals from the 80s, my equipment destroys the shots back then. But then again, if NO ONE had this advanced stuff, I doubt I would be less happy. In fact, I recently put an old mirror lens introduced in 1983 on my camera. The shots are way worse than the modern prime, but yet...I can get some interesting images and honestly I'd be happy "perfecting my craft" on that lens if no modern lenses were available

The truth is, the very knowledge of the existence of newer technology makes us want it, but do we really need it?

In most cases no, and because creating new tech requires more resources, I think that endless technological development (especially with regard to new computing) is an enormous mistake.
It’s been shown over and over that that “commitment” is nothing more than lip service.

https://www.vice.com/en/article/88xqnv/elon-musk-censors-twi...

https://text.npr.org/1239549276

You can search for more examples. He’s frequently suing, banning, and firing people who say things he doesn’t like.

It has become abundantly clear that he has very thin skin and all that barking about “free speech” means “speech he wants”.