skysight-inc/HackerNews huggingface dataset:
Fun fact: if you repeat nonsense in multiple threads, people will stop listening to you. It’s kinda like a messaging broker ignoring malicious clients spewing garbage, in case you only understand programming analogies.
Your comments here are interesting so just curious what do you think the solution to Geo political conflict is? How does it play out in your mind?
CloudFlare has some TCP proxying features, but most of what you actually get from adopting CF (or any CDN) requires decrypting traffic because most of the features depend on understanding the HTTP requests.
On the contrary.

This was detected before it reached major distributors. The only major one hit by this was homebrew, but they have never understood security anyway.
The tarballs mismatching from the git tree is a feature, not a bug. Projects that use submodules may want to include these and projects using autoconf may want to generate and include the configure script.
Kolmogorov Complexity and Compression Distance (2023)
Hmm I code a lot in vim without any plugins (I just have syntax highlighting). It has never really been a problem for me (say in C++, Rust or Kotlin): I guess I'm training my memory a bit more?

I'll admit, once in a while I write something like `let a: Int = <the_var_which_type_I_dont_know>` and compile, such that the compiler says something like "expected an Int, got a HashMap<String, Int>". But pretty rarely.

So yeah, I kind of like type inference.
SOX compliance is not about data security though. It's about making sure financial fraud isn't happening.

There isn't really a cybersecurity law or framework with the teeth of SOX or as widely and thoroughly implemented. Maybe if there was they'd be more valuable.
An excellent bit of trivia!

As if spacecraft particulary Rocketships weren’t phallic enough already
Hiding bins / meters / smallish "undesirable" stuff outside the house if you've got a fancy setting could make a fair bit of sense, yea. It'd help keep things picturesque from a distance.

Or put a painted board up in front of it, which will probably look better in most cases, and less like a digital privacy blur.
I want to work hard, but i am not even able to do the bare minimum work that is needed. Second, i want to work in such a way that i derive enough value (money) and not still be at the mercy of inflation and the various financial "Traps". So, two obstacles i do not know how to cross.
It helps if you're the kind of person who only ever opens links in new tabs. Firefox is way better for me than Chrome when I do that. Eg if I'm browsing Youtube's front page and I middle-click three videos in a row, I don't want all of them to start playing at the same time.
Books are those things you load on your kindle right? I mean, ya, they aren’t obsolete, but it’s not the main way I absorb information anymore.
A case of "worse is better"
No, I am suggesting to check the record of one against another. Hamas is a terrorist group that used to harm Palestines for their own purposes. Apples vs. oranges. Not forget that they violated women while feminist groups around the world have a big blind spot. This situation makes you think about the state of the humankind. Seems like many others who have not skin in the game also follow their own agendas posing as human rights defenders.
Maybe, a lot of optical trickery like this isn't universal, but tuned to our eyes. I wonder what this looks like with a polarization filter.
that's what I thought haha
> This FAQ says customers can set up free fraud alerts from credit bureaus Equifax, Experian, and TransUnion

I once subscribed to one of these and then was surprised by monthly charges a year or so later when the “free” bit ran out.
Your argument doesn't match reality. We don't need hypotheticals here:

McDonalds workers in EU countries earn significantly more than their US counterparts, yet a Big Mac costs the same of just a few pennies more.
I think you're getting hung up on the "bunch of activists being offended" bit of the story here. I'm just trying to respect the original models wishes, I don't care about the activists.
read between the lines -- management giving orders that happen right away, is worth money to management -- full stop.
I prefer JPEGView on Windows. What do you think is the best alternative for Linux?
It is very much present tense at least to me. It’s among the first programs on all new Windows machines that I set up.

Plus, there are Windows Store and portable versions which help to use it on otherwise locked-down company computers.
> This might be the best executed supply chain attack we've seen described in the open, and it's a nightmare scenario: malicious, competent, authorized upstream in a widely used library.

> Looks like this got caught by chance. Wonder how long it would have taken otherwise.

The IT world is lost in the fantasy that automation is the Way - there are no alternatives, nothing else exists - to scale everything including content moderation, customer service (e.g., from Google, etc.), code review, etc. If it can't be automated, they say 'it can't be done' as if there is no alternative.

It can be done, but it's more expensive and we'll need to pay people. Automation isn't the Way for everything. Our security, code review, etc. are awful.
> I have no experience making a live always-running Nim application, so I can't speak to that. But in the context I use it, it's incredible.

I have done this several ways quite successfully. Firstly, instead of "%cpu" I tend to measure "10s..100s of parts per billion" CPU from a like ~100 lines of code "cron library" that I use instead of system cron demons: https://github.com/c-blake/cron -- seeing 40 ppb on one box and 73 ppb on another at the moment.

Another example might be https://github.com/c-blake/bu/blob/main/doc/dirq.md which is a kind of ad hoc demon to monitor however many directories on Linux with inotify and then launch user-commands against dropped in files. This can be a sort of Plan 9 "plumb" style thing. E.g., one of the directories I monitor is a browser download directory. So, one click to save and them boom - a potential cascade of activity. (EDTI: This is clocking in at about 9572177ns/(48*3600s) =~ 55 parts per billion for me right now.)

As a final example, I got annoyed with the unwanted complexity of modern syslog junk. So, I whipped up https://github.com/c-blake/kslog which just looking it up for this post, according to /proc/PID/schedstat has only accumulated about 27357590/(24*3600+24*60) =~ 311 parts per billion of 1 CPU on a 4-core system since boot about 24h:24m ago. This in about 25% of the lines of Nim code that busybox spends on less useful C code (to your point of "almost all the code is the actual logic, not other junk").

Also, while it is not as full-featured as stdlib `string`, there is a zero-copy `cligen/mslice.MSlice` type (https://github.com/c-blake/cligen/blob/master/cligen/mslice....) that does have basic features like splitting and number parsing. There are probably others out in the Nimbleverse. If view types ever migrate from experimental status to relied-upon that might become less interesting.

Since you do a lot of statistics, you might also appreciate the fmtUncertain* subsystem of https://github.com/c-blake/cligen/blob/master/cligen/strUt.n... which allows you to retain only meaningful number of digits and also https://github.com/c-blake/adix/blob/master/adix/mvstat.nim which has efficient moving quantiles via a Fenwick Tree logarithmic histogram.
It's pretty common for post-paid cell phone plans (especially with 'subsidized' phones) to credit check.
Oh I'm not saying it's not getting worse, I just think the image of gloom and doom is exaggerated. Maybe I'm biased working on the industry.

And it's not just about having to insert a CD - you had DRM system called SecuROM which was just as bad as Denuvo today.
They don't work if hidden side is brighter than the public side. So not at night.
Look into FHA loans.
Man I wish I could somehow convince developers to learn the difference between "dynamically typed", "statically typed", and "gradually typed" languages. An "untyped" language nearly doesn't make any sense semantically: when you have more than one type of value, you have types.

In Python's case, there are probably thousands of types in the standard library alone.
Do you have any sources or links where you or others expand on these ideas? I daydream about something like this every so often.
It’s 100% truth my friend. Denying or flagging my comment doesn’t help anyone.
If you hired an average developer they can pick up most frameworks in a short amount of time.

What I never understood was new developers have no business context and everyone accepts that will take time. When it comes to languages if someone hasn't worked with specific framework/version all is lost and no one will hire you without x amount of specific experience. Picking up a new framework is easier than picking up your specific industry terms and practices but employers get stuck with these false ideas.
Interview with Al Jazeera
A Visual Guide to Mamba and State Space Models
> Is it ok to speak in code, like a numbers station?

Good question. Probably yes but don't pin me on it.

> What about speaking in Navajo, like the Americans did in ww2?

Definitely 100% ok as long as you transmit your callsign in NATO english or send it in morse code. A language is not encryption. The ham community is super international. It's not a US English only thing.

It might cause some grumbling in your local area but it's not illegal. Especially now that repeaters are often connected to the whole world.
The Attention of Mamba Models
EDIT: Here's some more RE work on the matter. Has some symbol remapping information that was extracted from the prefix trie the backdoor used to hide strings. Looks like it tried to hide itself even from RE/analysis, too.

https://gist.github.com/smx-smx/a6112d54777845d389bd7126d6e9...

Full list of decoded strings here:

https://gist.github.com/q3k/af3d93b6a1f399de28fe194add452d01

--

For someone unfamiliar with openssl's internals (like me): The N value, I presume, is pulled from the `n` field of `rsa_st`:

https://github.com/openssl/openssl/blob/56e63f570bd5a479439b...

Which is a `BIGNUM`:

https://github.com/openssl/openssl/blob/56e63f570bd5a479439b...

Which appears to be a variable length type.

The back door pulls this from the certificate received from a remote attacker, attempts to decrypt it with ChaCha20, and if it decrypts successfully, passed to `system()`, which is essentially a simple wrapper that executes a line of shellscript under whichever user the process is currently executing.

If I'm understanding things correctly, this is worse than a public key bypass (which myself and I think a number of others presumed it might be) - a public key bypass would, in theory, only allow you access as the user you're logging in with. Assumedly, hardened SSH configurations would disallow root access.

However, since this is an RCE in the context of e.g. an sshd process itself, this means that sshd running as root would allow the payload to itself run as root.

Wild. This is about as bad as a widespread RCE can realistically get.
Agave Font
Why are they always trying to sell these things to audiences who are not interested?
Extra fun fact: you can get a California driver's license as an undocumented immigrant without an SSN, but if you provide any documents that show you have legal presence then your SSN name must match exactly on the other documents before you can get a license.
I wish this program was either open source, or had a plugin API.
Attacking my style of prose doesn't change the facts. Amphetamines can harm the body in many ways, and lead to:

•Appetite decrease and weight loss

•Heart problems such as fast heart rate, irregular heartbeat, increased blood pressure, and heart attack

•High body temperature and skin flushing

•Memory loss, problems thinking clearly, and stroke

•Mood and emotional problems such as aggressive or violent behavior, depression, and suicide

•Ongoing hallucinations and inability to tell what is real

•Restlessness and tremors

•Skin sores

•Sleep problems

•Tooth decay (meth mouth)

•Death
I think you miss the point. I am not disputing FOL being undecidable. What I am saying is that, once we know how to solve SAT well enough, most mathematics will become obsolete (especially for applications). It will be obsoleted the similar way that symbolic solving of equations got obsoleted with numerical solving, once computers (and numerical algorithms) became prevalent enough.

Practically minded people will simply skip logical proofs and model the world directly with SAT instances. Mathematics will remain an intellectual curiosity.

In a way, I agree with the article - what makes math interesting is the human perspective and creativity. But I believe it's "worse" - taken objectively, math is actually pretty boring and there is only little depth.
XnView is great. Although I had to tweak the CSS to have a clean UX removing all the excess edges and separators and add dark background.
I wonder what's the light transmission of frosted film vs lenticular film.
It appears to be an RCE, not a public key bypass: https://news.ycombinator.com/item?id=39877312
If you install my sbts-aru project

https://github.com/hcfman/sbts-aru

It will shrink your partitions, add new ones and install one of these and set up a sub micro second system clock and an audio recorder suitable for sound localization with a single install command. Works on all versions of Pi in both raspbian and bookworm.

If you don’t need the recorder just turn it off but you have a rootfs, a swap fs, a config fs and a disk fs.
That’s not how the WASM sandbox usually works - it has a very limited API surface and can only take specified inputs.

https://docs.wasmtime.dev/security.html
> IME it's the other way around, per-object individual lifetimes is a rare special case

It depends on your application domain. But in most cases where objects have "individual lifetimes" you can still use reference counting, which has lower latency and memory overhead than tracing GC and interacts well with manual memory management. Tracing GC can then be "plugged in" for very specific cases, preferably using a high performance concurrent implementation much like https://github.com/chc4/samsara (for Rust) or https://github.com/pebal/sgcl (for C++).
It is mind boggling that Google has given up on so many potential businesses like code because they didn’t think the market was big enough.
Hehe, it has been a while since that discussion.

Many things happened since then ;-)
But what if you want to display Full HD video in the image viewer from an URL? Wouldn't you need Electron for that?

Also I was under the impression just the DLLs for all the image formats would be over 4 MB. I wonder how large is it uncompressed.
it's technically false for Haskell, but is considered mostly good practice. It would be true for Idris.
the EPA bringing reaching the same conclusion the way the court pointed out is completely fine by me

what I can't get behind is your version where the authority you like can do anything you like in any way. you're assuming this is an example of "corrupt bureaucrats with a history of enabling, covering up, and abetting in rampant environmental disasters" and this is copypasta for any topic where something was curbed.
There is a documentary, that is worth watching, called three broken cameras (or five?). It goes through the life of a video journalist. You can see that the struggle for homeland in Palestine has been in majorly peaceful ways. But the violent ones are the most reported. The peaceful protests are treated with brutal force. Unlike what you see in the protests by Israelis against Judicial reforms etc. I remember a scene in it, where the colonisers burn olive trees. It is a way to remove the agency of the people, who has been farming there for ages. It has been reported in the Nakba in 1948 as well, and apparently continues to this day.
To op's point, they do specify a website and not just 'internet'. I don't think they're necessarily saying they should include the onion link. You used to specifically hear about the Silk Road, for example.
Require in the strange new definition of the word require. I've always read a requirements as in things that are required to be done. I know that's using a word to define a word but we all know what the word requirement means but if you read this article these are more like guidelines and not requirements. Automakers can voluntarily follow them or not. If they choose not to follow them they will lose these "valuable safety points" whatever that is supposed to mean. Because in my experience people buying cars based upon safety actually investigate the cars features directly rather than relying on some arbitrary scale printed by some body that may not hold the same safety standards as you personally do.

The real reason to throw out the touch screens and go back to more physical controls and go to less computer-controlled items is not only for driver safety and tactile responses where you don't need to look at things but also for the long-term viability of the vehicle. All of these wiggity doohickeys that people want to make their sci-fi looking future cars are turning cars into throwaway items. And that's really great for saving the environment when you have your throwaway electric car.

If these automotive regulation bodies for governments really wanted to make meaningful impacts to the automotive community and driver safety and the longitivity of vehicles they would require that all manufacturers release the source code and the requisite tooling to leverage it into the community once the manufacturer stops producing OEM parts for it. In the United States their only required to produce parts for 10 years and the aftermarket is free to produce replica parts but when you lock so much behind hidden computer code you're locking out to the aftermarket parts for big chunks of the vehicle. But don't worry throw your car in the landfill or have it scrapped by some non-environmentally friendly scrap yard with the joke of the recycling symbols they publish and just buy another one. Don't worry about the actual environmental impact because you'll feel good due to the marketing that you believe you're having a positive environmental impact as long as you ignore those pesky heavy industries it takes to produce a vehicle.
Yeah, noticed this too, i wonder whats going on here
10 years ago we designed a system to approximate a chunk of maths we did not have time to do every second, too slow.

If you started from scratch you'd never even consider doing anything other than the original obvious "correct" maths. Approximation be damned.
> where click handlers for <a> elements

None of our SPAs use <a> elements for clickable navigation. In fact, most of them attach a click listener to the root element, then let the individual clicks bubble up to there. We use data parameters on the individual elements, and if the click handler sees one of those, then it activates the history state/navigation.

In terms of autoplay, a trick we have to play for iOS is, when you click on something we play a 0.25 second silent MP3 through the audio element. Once that's done, it's "active" and we can use it to play audio.

It's a radio "boombox" type application, so this feature is expected by our users to keep audio playing when they navigate to different features within the player.
> I believe calling `free()` gives the memory back to the allocator, which is much better than giving it to the OS

Having to deal with memory fragmentation in long running servers is no fun at all, especially internal fragmentation of pages maintained by slab allocators.

this is not a very common problem, but it is a hard one to deal with.
Looks like it is Bitcoin-related.
I once asked my first boss - worth tens of millions - why don’t you just sell your company, and retire for good? Instead of working 10-12 hours, 6-7 days a week?

He simply told me that he’d go crazy from boredom, and that the business was his life. He loved the work, his clients, his employees, everything about it.

The man was on his second heart-attack, pending divorce, but that’s what he loved doing.

He’s now in his mid 60s, and still doing the same. Some people are just made to work.
No, I think devs just love pointlessly tinkering with new tools all the time - I’m guilty of this myself too.
I'm guessing even if they knew the tool existed they would still rather ask you to do it. Not everyone wants to understand computers or download programs
A notice that I needed to request access was all I got.
Is this a big trend lately? Buying old newspapers and then putting them back up as SEO shell farms with recognizable names?

There was another story on here just a little bit back about an East coast lady that had her article stolen by a paper she used to work for, that then returned, zombified, under the same name, yet with different bylines.

Similar to this article from Buzzfeed (2020) about pseudo-"local" news websites. https://www.buzzfeednews.com/article/craigsilverman/these-fa...
See the "The Three-Body Problem" and several following sections. The fixed geometric approximations earlier in the article can have a closed form though.
Reminds me when I had a 3-machine Hadoop cluster in my home lab and 2 nodes were turned off but I was submitting jobs to get and getting results just fine.

I remember all the people pushing erasure code based distributed file systems pointing out how crazy it is to have three copies of something but Hadoop could run in a degraded condition without degraded performance.
I agree with the idea that function return types should be explicit rather than inferred, but not the rest. In a lot of situations, inference makes it so you only have to spell the type once, instead of multiple times. That is valuable and doesn't reduce legibility.
What does "provably efficient" mean?
And that's 3 people onboarding & increasing the amount that needs to be communicated over that 1 person.
They should make every potential tesla buyer spend a few hours in a Skyhawk before buying an "autopilot" enabled car. The buyers are all more than rich enough to afford aviation.
> I do not miss having to change in32_t to int64_t at every location in my code when I changed my mind about types.

A good reason to use logical typedefs, though.
That is a pretty cool chip. Chuck Moore is a fascinating character.

You would probably get a kick out of David Ackley's T2 Tile Project.

https://t2tile.com/

https://www.youtube.com/@T2TileProject/videos

https://www.youtube.com/@DaveAckley

https://en.wikipedia.org/wiki/Ackley_function

https://www.cs.unm.edu/~ackley/

Fun fact, Tenstorrent wanted to add instructions to enqueue data between processors connected in a mesh and Arm said no (they don't do architectural licenses anymore), so Tenstorrent used RISCV.

Implementing something like a GA144 but using small RISC-V processors would be an interesting hack. https://www.youtube.com/watch?v=6QRKpd28NEE
vscode just writes the type next to the auto variable. It also prints parameter names, initializer fields and even array initializer indexes.

All this visual help makes a lot of pet arguments obsolete.
Oh my, another reason not to use github. :D So many reasons poping up just in this comment section alone.
My Git and GitHub workflow – an efficient yet messy setup
Git is a complex tool that offers a lot. Maybe to make sense of it we need a lot of tools? This is my terminal based setup.
Around 2000-2007 I used something similar to this one (Windows XP/7 times), I can't recall the name right now.

Someone remember other popular image viewers at the time?
I was like this too. I moved away from windows machines (to Linux) for good in 2019 though so now I don’t use it.

If I had to go back it would def be one the first I installed.