skysight-inc/HackerNews huggingface dataset:
Sure, it’s dance music so it can’t be too wild. But Duke Ellington, Benny Goodman, Count Basie. These guys had varied songs that included (limited but real) improvisation, differing tempos, etc.

But really the OP article is about lyrics and I think it’s safe to say that the songs sung by Ella Fitzgerald, Nina Simone, Billie Holiday, Frank Sinatra, and Nat King Cole were more complex than top 40 pop today mostly is.
Yes but if that’s the sentiment how is this not as problematic as the npm ecosystem.
The cannabis black market in Canada is actually _more_ convenient than the legalized stores. Not far from where I live, there are _tons_ of illegal/unregulated dispensaries. In many cases, the only tipoff you get that these aren't regulated is the low prices.

They outperform legal dispensaries in every way: no purchase limits, lower prices, you can buy your cigs + vape pens + cannabis all in one place, they basically never ID people, etc.

People who use cannabis are strongly incentivised to buy the illegal stuff, because the regulated market is too draconian and expensive.
Right now, nothing. The issue didn’t reach mainstream builds except nightly Red Hat and Fedora 41. The xz version affected has already been pulled and won’t be included in any future software versions.
Well, if it's an emergency door, you want people to be able to use the mechanism when out of their mind with fear and a stampede behind them.
The late author of ZeroMQ, Pieter Hintjens, advocated for a practice called Optimistic Merging[1], where contributions would be merged immediately, without reviewing the code or waiting for CI results. So your approach of having lax merging guidelines is not far off.

While I can see the merits this has in building a community of contributors who are happy to work on a project, I always felt that it opens the project to grow without a clear vision or direction, and ultimately places too much burden on maintainers to fix contributions of others in order to bring them up to some common standard (which I surely expect any project to have, otherwise the mishmash of styles and testing practices would make working on the project decidedly not fun). It also delays the actual code review, which Pieter claimed does happen, to some unknown point in the future, when it may or may not be exhaustive, and when it's not clear who is actually responsible of conducting it or fixing any issues. It all sounds like a recipe for chaos where there is no control over what eventually gets shipped to users. But then again, I never worked on ZeroMQ or another project that adopted these practices, so perhaps you or someone else here can comment on what the experience is like.

And then there's this issue of malicious code being shipped. This is actually brought up by a comment on that blog post[2], and Pieter describes exactly what happened in the xz case:

> Let's assume Mallory is patient and deceitful and acts like a valid contributor long enough to get control over a project, and then slowly builds in his/her backdoors. Then careful code review won't help you. Mallory simply has to gain enough trust to become a maintainer, which is a matter of how, not if.

And concludes that "the best defense [...] is size and diversity of the community".

Where I think he's wrong is that a careful code review _can_ indeed reduce the chances of this happening. If all contributions are reviewed thoroughly, regardless if they're authored by a trusted or external contributor, then strange behavior and commits that claim to do one thing but actually do something else, are more likely to be spotted earlier than later. While OM might lead to a greater community size and diversity, which I think is debatable considering how many projects exist with a thriving community of contributors while also having strict contribution guidelines, it doesn't address how or when a malicious patch would be caught. If nobody is in charge of reviewing code, there are no testing standards, and maintainers have additional work keeping some type of control over the project's direction, how does this actually protect against this situation?

The problem with xz wasn't a small community; it was *no* community. A single malicious actor got control of the project, and there was little oversight from anyone else. The project's contribution guidelines weren't a factor in its community size, and this would've happened whether it used OM or not.

[1]: http://hintjens.com/blog:106

[2]: http://hintjens.com/blog:106/comments/show#post-2409627
Another good reason to use a firewall with an IP address allowlist for SSH.
This is crazy. Simply having some road congestion perverts the meaning of the phrase "state of emergency".
What is more depressing is how we can acknowledge that reality and continue to do absolutely nothing to mitigate it but punish it, in many cases.

The more people practically need to drive, the more people will drunk drive and kill people, yet in so many cases we just sort of stop there and be like "welp, guess that's just nature" instead of building viable alternatives. However the other theoretical possibly is that if people didn't need to drive, they might end up drinking more.
Free YouTube and pdf summarizer on blackbox.ai
don't care about about the whole ai wars as long as i get free stuff. ngl the yt summarizer rocks
>The US became absurdly wealthy during the 20th century.

Yes, but it was bootstrapped by the biggest land takeover in history, along with all of its natural resources. It also benefitted from all the western big players of the 19th/early 20th century being exhausted after 2 wars that never touched continental US soil. Neither is easily replicated without a rich in natural resources continent full of easy targets, or massive remote wars.
A couple of issues

We have determinism from this Newtonian framework. Given even he knew he cannot solve the issue (yes you are God you know every parameter and assumed he is right and that is God’s model but how can we know it is … a frequentist or Einstein kind may be ok even without God but any experimentalist will … ), how can any human believed in determinism. (Especially God in the genesis did not know. Or offer freedom of choice and hence at least one parameter is … )

The more problem is the novel deep psychological worldview.

If china in trouble the humanity is. If china no hope, one can destroy the world … imagine Soviet Union lost hope and release all the atomic bomb. What kind of thinking is involved.

Whilst the author tried to avoid, the interpretation of his novels can be very dark. There is no friend. Strangely, later in the novel you can sense there are diversity in the 3b race and so are humans. Hence as has been tested (his book is in the gao Hugo u entrance exam attempted by millions), he failed as he cannot grasp the various themes in the novel. But the dark theme just be used. Dark forest etc. That is bad author with good material.

Also, if has to say the 3b race is more like the chinese evolution… very unstable and nothing stay put. You compared the history of Buddha Ian in Tibet and japan, you can sense the issue. It is an endless repeat of up then collapse. Move out is the better option, but conquer the world?

I think the book can be good and the tv series (at least Netflix, but worry about the producers from GoT; burnt to hell once not another hell) is good, especially when none of the characters in the book you can relate to, there are some you can think of - like the brain sent off.

Let us see.
I like the video. But I just can’t imagine “The Rich” hoarding lots of cash to lend out? Look at Donald Trump unable to get cash at hand for example to pay a fine that is a fraction of his worth.

I think the rich will be heterogenous in their assets but most will have non cash assets and borrow when they need cash. Having money out of asset markets so they can time the market based on interest rates doesn’t seem likely. Better off holding SPX or investing in the businesses they probably own that out perform any investment on the open market (for example a company I worked at 100x value in shares over 12 or so years).
Sure, that's part of it. The stats are the stats - the rest is anecdotes. But, with experience in a place you realize the crime is concentrated to certain places and groups of people.
Like you said it has firmware which is flashable. Secure enclaves are never 100% secure but if only, for example, Apple can upload to them, it dramatically reduces some random open source project being git pulled. Apple may still pull open source but they would be on the hook to avoid this.

Open sources days of declaring “use at your risk” have become a liability in this hyper networked society. It’s now becoming part of the problem it was imagined up to solve.
Expect fast food companies to just pass this onto consumers or leave California. California legislators should be required to read an economics book or at least consult with business leaders. Oppressed vs oppressor mentality, and buying of dem votes.
Hmm...In this new era of mostly WFH, the boundaries between work and life are blurring, at least for me. My work day starts at 8AM and goes all the way to around 12PM, with my other daily life chores/activities interleaved throughout the day.

Even during weekends, I put aside hours replying to lower priority emails and completing other work commitments that may have piled up from the week before.

If anything, this WFH movement has led to more hours worked/higher productivity for me (and my immediate colleagues).
This is a good take. But even in a forest, sometimes when tragedy strikes people do postmortems, question regulations and push for change.

Sometimes, it does seem like the internet incentivizes or makes everyone else accessible to a higher ratio of people who seem to harm than normal.
dont you think that something as simple as a CLA (contributor legal agreement) would prevent this type of thing? of course creates noise in the open source contribution funnel, but let's be honest: if you are dedicating yourself to something like contributing to oss, signing a CLA should not be something unrealistic.
humans are weird creatures sometimes. there was this bad thing that happened that won't happen again now, but now I can't use the thing forever because Reasons.
All of those examples are exactly equivalent and convertable but where you are confusing yourself is that you're thinking of the differing states of a given n-ary system as having explicit symbols. It's best to think of it as simply numeric. Binary 010 is 2 if i were to write in decimal. Ternary 020 is the number 6 if i were to write it in decimal. Etc.

Any actual symbol mapping to the numbers from an n-ary system to actual symbols like you are showing here is actually arbitrary and part of the calculation of space when measuring an algorithms Kolmogov complexity. The program size in kolmogorov complexity includes the dictionary of numerical to symbolic lookup which is what you are getting at here.
Difference is that software backdoors can effect billions of people. That driver on the road can't effect too many without being caught.

In this case, had they been a bit more careful with performance, they could have effected millions of machines without being caught. There aren't many cases where a lone wolf can do so much damage outside of software.
Exactly. The attack came in by hitching a ride on to systemd.

sshd is not the problem. the ldd/monolith architecture surrounding systemd is.

What if I duplicated this attack but instead targeted dbus or any other thing that systemd is managing?
YC-Safe Is Tricky for Founders
@MFN_SAFE
·
1m
I have a free document on pre-seed funding at the above link which goes over the following issue. Plus fundraising strategies.
If your first SAFE was $4.9M PRE + $100K invest == $5M POST & then raise $900K (even at a $1B val), the 1st SAFE pre-money valuation decreases by $900K to $4M!!!
> Historically nothing sets up a country better for future success than lots of immigrants - if it's paired with government policy that doesn't discourage growth...

Define "success?" Mass immigration to America from continental Europe eventually culminated in the 20th century in the dismantling of the American constitution and the republic the founders created. The resulting country is also completely ungovernable.

Generations of cheap immigrant labor ultimately created a materially rich society (for some people), but whether it has been a "success" is quite debatable.
Similar/related theory I have is that humans have just gotten much better at optimization in the past 5 decades, and as a consequence we've lost a lot of variety present in decades past due to the fact that it's easier to recognize and attain the "optimal" configuration.

I see this not just in music, but in tons of different artistic areas. I think interior design most notably for me - SNL recently did a great send up of this with their "AirBnB Designers" skit, https://youtu.be/H5E5DkBXyfw

Back on the music front, I see this with annoyingly repetitive Spotify recommendations that I find nearly infuriating. My music tastes may be "pop-basic and bland", and at first I liked how I could just start with one song and then Spotify would create a playlist of related songs that I would (usually) like. Except it was always like the same 30-60 related songs. After a while I started hating using Spotify recommendations, they were always so incredibly annoyingly repetitive. Perhaps I'm just dumb and missed something, but I wish there was a way to tell Spotify "Please, for the love of God, just scramble your algorithm a bit and give me new recommended songs in the same genre!"
Agreed. the information in the article appears to be new to someone who has literally never heard about black holes... a 5 year old perhaps.
Many of the systems I have seen that need to be deterministic and fast but still need to allocate will use pool allocators or slab allocators. The edge cases mean that malloc/free is not in the conversation. I suppose that pre-allocating objects and deferring deallocation would also work, but that seems roughly equivalent to pool allocation.

The null allocator is the fastest allocator, though!
>I think democracy needs a “Deep State” to succeed

That's the very thing that kills a democracy (both the system of government, and a country that develops one).
any one of us if we sat on the OSSH team would flip the middle finger. What code is the project supposed to write when nothing on main dyn loaded liblzma. It was brought in from a patch they don't have realistic control over.

This is a Linux problem, and the problem is systemd, which is who brought the lib into memory and init'd it.
Is there any other kind of byte?
Warning: you absolutely have to only allow certain countries to apply for jobs. The site works if you block India especially for most things.
I'm not sure that an IDE will catch a syntax error in C code quoted inside a cmake script trying to test if things compile.
CLA is not an ID check. It is to handover the rights for the code over to the project owners rather than doing any identity check.
That's a real blast from the past. We're now in the post-open-source era where people don't even look at licenses (as long as they're OSI approved).
Even more evil would have been to replace this line

(void)SYS_landlock_create_ruleset;

with this:

(void)SYS_landloсk_create_ruleset;
> living in a falling-down house full of dirty clothes and garbage.

This is my life, and I just accept it now. I've tried so hard to change. I've tried to balance it all. I don't/can't care anymore. My place is always a wreck and so be it. I only have two days to myself and I value other things in life more.
Whilst we are in 3bp mode, what happen if a state actor want to harm open source … not to destroy it but to pollute it … as said you can check and test all. Legal … they do not care.

I wonder.

… We are all good vs even Buddha has evil nature mental model.
Pass-rs: simple password manager, written in Rust
Do you want important things happening on a Friday afternoon? If a change creates a problem then something is broken all weekend or you're working Saturday. If everyone is tired by Friday then any work done won't be as good of quality as work done earlier in the week.

Fridays should be used for sync up meetings, planning for the following week, and retrospectives on the last however many weeks of work. Any of those meetings should be earlier in the day. The only communication out of any of that should be latency tolerant (questions won't be answered until Monday at the earliest).

This allows people to check out earlier on Fridays if they need/want. Forcing butts in seats until the quitting bell rings is a waste of everyone's time.
Wait, does America suddenly have a record number of bees?
https://archive.is/T9TgD
I believe this was one of Machiavelli's big arguments in The Prince – that sometimes a country in crisis needs a single strong leader/monarch/dictator, using cruelty if necessary to keep control and bring stability.
The practical experience of 20th century Latin America countries, and their history, both regarding domestic politics and dynamics and external influence and meddling?
I think if I were living in the third world those would give me hope that if I had a child they would have a better life than I had, not very compelling for a privileged white American.

I think for the world at large, more people, means more consumption, means more pollution and fewer resources per person. Those improvements are likely largely found in pre-industrial societies, and industrialization is environmentally expensive too.

I am willing to believe that while the velocity of global warming is positive, the acceleration of it might be negative. That would be hope inducing, but that's generally not the sense I've gotten.

When someone says the world is on fire, I think they are literally referring to the world being on fire, global warming, or the general rise of authoritarianism/strongmen across the world and the conflict they require to stay in power.
There appears to be a string encoded in the binary payload:

https://gist.github.com/q3k/af3d93b6a1f399de28fe194add452d01...

Which functions as a killswitch:

https://piaille.fr/@zeno/112185928685603910

If that is indeed the case, one mitigation might be

```

echo "yolAbejyiejuvnup=Evjtgvsh5okmkAvj" | sudo tee -a /etc/environment

```
Opening bad-3-corrupt_lzma2.xz in an editor reveals it indeed has the string ####Hello####. I don't know enough about lzma compression streams to explain how this appears in the "compressed" version of the payload, but it does.
In the US, most employees do not really have "contracts." You'll generally get an offer letter that you return to accept the job, but it's not a legally binding contract. You're an at-will employee.
OP here: We have data source powered research papers in the making, that reports on experiments executed with codegen - really hopeful that the papers can be informative at a minimum.

It's clear that superhuman citation depth & breadth is already imminent. Hopefully we can push hallucinations to near-zero with the next generation of models.
update: we made it :)

https://imgur.com/a/6qAbFgk
or perhaps, free scientists to focus on genuine insight, ending publish or perish forever
It’s similarly problematic but on a somewhat smaller scale and with fewer levels of nested dependencies.
Can’t speak to the original comment, but I think part of a “deep state” is institutional inertia/tradition.

A state without that deep-rooted sense of continuity is much more fragile. Having a civil service without political allegiance seems to be critical to preservation of a democratic system.
It's kinda weird?

> We use cookies and other tracking technologies to improve your browsing experience on our website, to show you personalized content and targeted ads, to analyze our website traffic, and to understand where our visitors are coming from.

Like … I'm on what appears to be a person's blog. Who's "We"? What personalized content could one possibly receive from someone else's blog? (And of course, oh boy targeted ads.)

Like … maybe some sort of out of the box thing gone amok, but the about page seems to indicate it's a pretty homegrown blog…?
Human language is also way more ambiguous. One of the reasons I love coding is a massively reduced vocabulary and a way more strict grammer.
Immigration in the US has always been about filing firms. Then more forms. Then wait 10-15 years
Why don’t you learn in your free time and save money, then switch jobs when you have done some hands-on learning? I do not recommend leaving a job right now, in this hiring climate.
The law[0] stipulates in §1474(c)(2) that '"fast food restaurant" shall not include an establishment that on September 15, 2023, operates a bakery that produces for sale on the establishment’s premises bread [...]'.

So in order to get the exemption you would need to get a time machine in addition to the $200 bread machine.

[0]: https://legiscan.com/CA/text/AB1228/id/2843232
That is not quite what I was thinking. More like the industry is selecting for the optimum combination of common factors. For an overly simple example:

- person A likes musical features W,X,Y,Z

- person B likes musical features I,J,K,Z

- person C likes musical features A,B,K,Z

Z is a common feature they all like, so it's very popular. K is the next most common feature, but not quite as popular as Z. Making a song that only has features K+Z is bound to be more popular than one that is solely made of Q+D (which no one likes). Mind you, features could be anything from rhythm, time, timbre, melodies, as well as other emergent stuff.

But having song with features K+Z is not Person C's favorite music, and rather a song which has features A+B+K+Z would be Person C's preferred music, but the industry doesn't select for that since A+B aren't common features everyone likes. And a song consisting solely of K+Z is simpler than one which has A+B+K+Z.

However, making a song of solely of feature Z is too simple, and hence doesn't work. As if there's a minimum complexity requirement to meet in order to be a song. Hence K+Z works but a song solely of Z doesn't. And K+Z isn't necessarily anyone's ideal/preferred music, even though it's popular.

Also, making a song of A+Z would probably stand to be somewhat popular, but not as much as K+Z. And so, a lot of popular songs seem repetitive, because they all use common features, such as feature Z in this example.
We should probably look into other fundamental dependencies like xz as well to see if similar practices are happening.
It's kinda weird?

> We use cookies and other tracking technologies to improve your browsing experience on our website, to show you personalized content and targeted ads, to analyze our website traffic, and to understand where our visitors are coming from.

Like … I'm on what appears to be a person's blog. Who's "We"? What personalized content could one possibly receive from someone else's blog? (And of course, oh boy targeted ads.)

Like … maybe some sort of out of the box thing gone amok, but the about page seems to indicate it's a pretty homegrown blog…?

The web is becoming downright tiresome.
The are indeed many clipboard managers across all platforms, but none have the perfect UI of ditto. Its ditto's UI that needs to be copied everywhere else.
Archive.org have a copy of the original link: https://web.archive.org/web/20080509185243/http://www.databa...
nah but physics were. I remember a level in a hospital with one of those privacy curtains between two beds that you could walk through and that thing would move so beautifully
Reminds me of the scene in Fight Club where the unreliable narrator is discussing car defects to a fellow airline passenger.

Quoting from flawed memory:

Passenger: Which company?

Narrator: A large one.