skysight-inc/HackerNews huggingface dataset:
The FreeBSD OCI Compatible Container System
The xc project, while not yet production-ready, is open to community input, indicating a willingness to evolve and improve based on feedback from the FreeBSD community.

I am personally looking forward to setting up an old HP ML350 G6 with FreeBSD running xc containers. :)
There is a second “instead of” in the last part of the sentence that gives the proper context, in my reading
And with it: middle management.
Your rite.
How to MIG weld.
I think the idea this was HUMINT operation by a state sponsored intelligence service is more likely.

The twitter thread here was interesting.

https://x.com/thegrugq/status/1774392858101039419

Raging about these being inconsiderate people, when they were likely fictional personalities that were part of a long con seems to be a bit foolish to me.
Do music frequencies deeply affect the brain?
> security through obscurity

This is not obscurity, as someone said on HN earlier, good security is good armor, good port knocking is camouflage. They are both important.
Very interesting thread! As computer people, I suspect "string" would make sense to encompass both "sequence of letters" and (valid) "word". But that wouldn't work for most people. Maybe just "sequence"... Or maybe just stick with "word" but add this caveat to the tutorial, like you were thinking :)
Don’t install additional root certificates.

That’s what Facebook enticed users to do here. Without that root cert they wouldn’t have been able to see as much as they did.
That’s a neutral fact, not a negative spin.
You can use a smart plug that turns on when the battery drops below 20%. I’m going to use this kind of automation for a tablet with HomeAssistant in kiosk mode.
> Sounds to me like more time on hand to prolong those movie nights.

Unfortunately that's not how things work under capitalism. To the extent that coding assistants make a difference in productivity (in my experience quite limited gains), that will just mean that you get more work done for the same time and salary.
How the US could reduce the workweek
How to Pack a Computer for Moving
I'm trying to stick with Brave browser after moving away from Chrome, and the fingerprinting protection is already driving me up the wall; I can only imagine how much trouble being on a VPN IP is. I get why sites use IP reputation, but it's not a great experience.
The only place I've found a use for AI art is in powerpoints, where the general vibe of an image is often sufficient. Anything requiring specificity is.. out.
These type of blocks are meant to try and counter abusive bots that hide behind VPNs, Proxies and Tor.

In general, Tor exit nodes are quite well known and blocked to a greater degree than VPNs.
Your assumption is resting on your guess of 2%. I say it's high. If it's .01% instead, the math looks a bit more grim.
You should look up provable security. And also, while security proofs typically rely on unproven assumptions, correctness proofs in cryptography are "regular" proofs for all intents and purposes. You can't even do RSA etc. without understanding prime numbers which is impossible if you limit yourself to propositional calculus ("SAT").

> Again, you miss the point, there will be a paradigm shift. Yes, symbolic maths still exists, but nobody is looking up a special function to solve an equation. They just plug the numbers (and the state machine approximation of the numerical operations) in the computer and numerically, the result comes out.

This is false.
Saying that it's a microcosm for "open source" is a bit hyperbolic. What would be more accurate is saying that it's a microcosm of "there is a certain set of users to be ignored" when writing open source software. One has to learn to develop a thick skin and guilt free ignoring of those who don't contribute anything to a project such as constructive suggestions, bug reports, or actual code.
I find out interesting that the discussion on HN is narrowly focused on the technical/messaging accesss angle, rather than on the anticompetitive collusion. The collusion is the "big picture" root cause of so many downstream evils.
> Canada is a big country, but the reality is that all the space is already being used

There are vast suburbs where developers planted a single tree on the front lawn and moved on. Allow any landowner in the country to get as many trees as they want for free along with instructions on how to maximize the likelihood of success. Allow every farmer to install windbreaks of free trees. Plant trees up and down the rural roads to prevent blowing snow whiteout conditions, etc etc etc. Nearly every farm in the country could stand to lose a perimeter of 20 ft for trees.
It seems futile to filter Amazon products by name, but it's interesting that it seems to be able to filter YouTube shorts.

Given that after two years there are only about 30 templates, I'm guessing it's too difficult to actually accomplish something useful given the tools provided. That's not a knock on the creator -- off the top of my head I don't know how I'd provide an easy way to customize/filter/modify web content -- I'm just saying I understand the shutdown given the apparent lack of traction.
Even that isn't going to hold forever, as Nvidia's current valuation assumes that demand for their chips will only keep growing at the same rate or more.
Graphics programming and the required math prerequisites.
so, Office Space?
I inherited an AWS DB costing $60k/mo and I'm learning how to make it cheaper.
So many questions:
Do the spikes get broken or rubbed off if touched by or hands (for example of used on a doorknob as they mentioned)

So they kill viruses if they land on it in a droplet
Hardcore Math Tweet
1. How to administer a secure network for a property with multiple vacation rentals. I bought a bunch of Microtik components so I’ll be learning RouterOS and how to setup VLANs.

2. Ray tracing in a weekend but in Rust.

3. How to return to the job market after 4 years of off and on freelance and being a caregiver for sick parent.
Or have you considered not having towns work that way? Seems like a confusing caveat to me, unless there is a good reason for it.
Rust, CUDA and JAX - I'm guessing one or more of these will be in increasing demand with a relatively high barrier of entry compared to other software tech
Yorkshire Surprise Major
Reddit is dead to me.
Agreed, which is why IMO ssh in production is a terrible idea that reveals even worse problems.

A server with ssh generally implies there is a shell, and cli tools, and an administration model that involves humans connecting to servers to manually update them in place like pets.

Having a full workstation-optimized distro like ubuntu or debian with hundreds of packages constantly shifting and updating as a critical production server is wildly high risk in terms of both reliability and security.

I understand this is how most sysadmins were taught but it is a 70s unix mainframe mindset from a time before security was a thing and everyone on the internet was a good actor.

Only a workstation or dev server should have tools for humans like ssh installed.

Production servers should be hardened immutable appliance kernels with read only root filesystems that verify and run signed containers, or run a tiny shim init system in a couple hundred lines that spawns a single application specific binary you trust.

No production systems I launch today even have xz installed, or a package manager, or a shell.
As long as that money is held in escrow. Otherwise vaporware would make a killing.
I don’t know who that is. But I am a Nebula subscriber and I do wish there were a way to hide a few channels in the app.
I don’t understand what’s going on here.
Does anyone know an equivalent react based version?
Neat way to build your own version of Amelia’s code repo visualization:

https://githubnext.com/projects/repo-visualization/
This is harsh but tree, but it's not simple. People are different. Some shrug off things naturally, others try to be empathetic almost to a fault. I've learned to be the former, but when I was younger was much more the latter. I try not to act like it's easy because it took me a while to have that skill. And it is a skill and not built in to me, I still feel the urge but built up the skill of saying "no"
It's been a while that VPNs were blocked on the main website. But I have noticed this since a week that old.reddit.com subdomain has been included.

The next step for Reddit would be a complete Login wall like Instagram and co. I would be happy if they do, because it will save my time more (like twitter).
I do think the net result is less gate keeping.

You can have more cases like Andy Weir, that proves himself publishing digitally in his own site before being traditionally published. He didn’t need to impress or be friends with an editor. He had, to use a startup world, “traction” to prove he would sell books.

Similar with “50 shades of gray”, which started digitally as fanfic.

There is still some gate keeping and there are still benefits of being traditionally published, but it feels very safe to answer ”definitely yes” to que question ”did digital publishing led to less gate keeping?”.
I'm not sure what you mean by "disruption" here. Offering video content at scale costs a lot of money, it's gotta come from somewhere. And the options are users directly (YouTube Premium), users indirectly (ads), product investment by a large company (old YouTube), or financial investment by VC. Pick your poison?
Forests do a lot more than hold carbon. And many of these other uses require more than young, fast growing monocultures.

Quite a lot of rainfall over land originates as transpiration from forests, for example; they're a key part of the water cycle, holding and releasing water which would otherwise just run into the sea.

Likewise, a lot of species depend on healthy first habitat. Clear cut all the trees, and you lose all the species that depends on them. And all the species in adjacent ecosystems which rely on the forests.

This isn't to say that tree planting and harvesting can't be a part of carbon management strategies, but that it must be done judiciously. Clear cutting everything and burying it all is as short-sighted as, say, spending a century dumping leaded CO2 fumes into the atmosphere.
Oh god why not just stay at home partner?
It applies to Macs, yes, and more than you'd think. OS X adopted more CUA stuff than Classic had... whereas the design of CUA inherited a large amount from Classic MacOS and modified it both to add more key controls, and to avoid a look-and-feel lawsuit like the one that crippled PC GEM.

Command is Super. Came key, same scancode, etc. Just a different name.

Very broadly, if one remaps the bottom left keyboard key on a Mac to Cmd, and the Super key to Ctrl, then CUA control keys all Just Work™ on Mac OS X.

This is in fact how I normally use Macs when using a PC keyboard on them.

So, no, I disagree on all points. (I don't really care about the phones. I don't own them or use them.) I've spent considerable time over decades studying this and I disagree with every point here.
Writing computer programs in your native language
Just stumbled upon something incredibly cool and had to share it with you all!

Introducing Kin: Write Computer Programs in your native language!

Ever wished coding could be more inclusive and fun? Well, Kin is here to make that happen! It's a programming language specially crafted for people to code in their native language. How awesome is that?

What's Inside?

Dive into our GitHub repository to see how Kin works.
Explore some neat examples and get a feel for the language.
And hey, if you're feeling inspired, why not contribute? We're all about collaboration and making Kin even better together!

Join the Fun!
Whether you're a seasoned coder or just curious about programming, there's a place for you in the Kin community. Let's learn, laugh, and code together! Oh, and don't forget to give us a star if you dig what we're doing.

Spread the word and let's make coding more inclusive, one line at a time!
Wow Hippocratic AI. You can tell it's safe, because they named it as safe.
> This project is making the commercial web more bearable, but I'd rather spend my energy on making the non-commercial web more attractive. I want to support communities and applications that respect their users and value what we have to say. These websites don't need letsblock.it rules, because they don't shove low-quality content and anti-features down our throats.

Does this sound "bored"?
The problem is, there will be almost zero packages that (very few) "corporations want so bad". The only exception might be cloud providers, that want to host your mildly-popular open-source message queue, but, again, if you are Amazon, you'll soon just re-implement that message queue, drop the "original" one, and after a couple of years your mildly-popular project will become not popular at all.
You don't have to have an immutable system.

You can limit the exposure of the system from RCE in sshd with SELinux without preventing legitimate users from administering the system.

Granted that SELinux is overly complicated and has some questionable design decisions from a usability standpoint but it's not as limited or inflexible as many seem to think.

It really can stop a system service running as "root" from doing things a real administrator doesn't want it to do. You can couple it with other mechanisms to achieve defense in depth. While any system is only as strong as its weakest link, you can use SELinux to harden sshd so even with exploits in the wild it's not the weakest link vis-a-vis an attacker getting full unconfined root access. This may or may not be worth your time depending on what that box is doing and how connected to the rest of your infrastructure it is.

There seems to be a pervasive misunderstanding of the difference between standard UNIX/Linux discretionary access control and SELinux-style mandatory access control. The latter cannot be fooled into acting as a confused deputy anywhere near as easily as the former. The quality of the SELinux policy on a particular system plays a big part in how effective it is in practice but a good policy will be far harder to circumvent than anything the conventional permissions model is capable of.

Moreover, while immutability is obviously an even stronger level of protection, it is not necessary to make the system immutable to accomplish what I've described here while still allowing legitimately and separately authenticated users to fully administer the system.
AI images seem to all have this sort of shimmer too them, that make them quite easy to identify - even without having to dig into the imperfections.
there are 11m users.

there are about double the number of Overleaf users than the Irish population. It's def not small!
We're currently supporting Kinyarwanda ..., but we would like to support more, star the repo and email us what you want to add or just leave an issue!!!!
My experience in conversion from FREE to PAID is 2% is pretty standard. 5% is very good. <1% is meh.
I've tried it. It's useless. It changes a handful of trivial keystrokes and nothing else.

It's like bolting pedals on the sides of a huge car and saying "Look -- it's a bicycle now!"

CUA compliance needs a total rewrite of the UI and the manuals and the tutorial.

Fortunately, much of it has been done, but it's still incomplete and it's hard for non-Emacs-users to get working.

But it's here:

https://ergoemacs.github.io/
That's brave on his part and honest. I would never admit that in public personally and shows his personal level of honesty, unfortunately it can make you the victim of even more predators. Just say "no" and move on with your own agenda on your own personal projects. It's none of anyone's business, but one may share at times, just realize that others may try to take advantage. That's just my take.
This seems to cry out for a separate project to try to standardize a "wordlist for word puzzle games that doesn't mostly cater to scrabble pedants" :)

One thing that might help would be for the winning word, and all the other words involved, to be shown somewhere upon a battle's resolution, along with their definition (or lack thereof).
Super annoyingly iCloud Private Relay triggers this for me too
Everything works fine via iCloud private relay. No account or other mitigations required.

So perhaps it’s not VPNs that are blocked and instead the traffic you’re sharing an IP with.
Never heard of it. Just threw some very highres jpeg2000 images at it and wow, i am blown away. It runs circles around XnView MP (and preview) on these!! Thanks :)
But at a ridiculously sparse density. At anything above 10km, it’s not even 1 data source per hundred thousand square km of area at any given time.

Countries the size of Poland go without for at least a decent chunk of the 8760 hours in a year.
Bad. And we don't know if the intended target, if any, was ever hit. They might still have gotten what they wanted.

In terms of severity and nefarious intent, it's probably the worst that's happened.
I think Meta is the last major player who's only releasing free generative AI tools, so with no incentive to kneecap their best free stuff to avoid cannibalizing their own products. AI companies will have to build actual products on top of their models to produce more value, so I want to see if Meta will release whole free products to keep the pressure on. Maybe "Segment Anything" is already a step in that direction.
> I think the idea this was HUMINT operation by a state sponsored intelligence service is more likely.

It's not an either/or proposition. I definitely think it was state sponsored, AND one method used was social engineering a burned out maintainer.
I think you misunderstood the parent post, they didn't say democracies had a common gang crime problem or that there is a correlation between gangs and democracies, they just said democracies don't do very well in dealing with gangs.
I'm not sure how feminism screams?

Laughing at the idea that feminism is the main or even a primary antagonist here, and not all the other men laughing at virgin NEETs failing their biological imperative.

Total anecdata, none of my socialist female friends who hate AI care that men are using "AI girlfriends". It's not new. Replika has been out for awhile. They much prefer the system where these weirdos message a chatbot rather than stalk Instagram.

The last and honestly funniest part is you think society doesn't judge women who end up failing their biological imperative. I guess the term "spinster" has been out of vogue for a bit, but still. "Crazy cat lady" would be the modern equivalent. I'm sure some nice young person will come up with a postmodern term involving these AI companions. The message it's giving is definitely not "empowerment"
The reason people steal them is because they are outrageously over priced.

Bic Flex4 Titanium is about as good as it gets in my opinion --- the best kept secret in razors.

Comfortable and long lasting for less than 1/4 the cost of Gillette.
> No reason it shouldn't be the same for critical software infrastructure.

Why do you think Meta's work is critical software infrastructure?
If anything, the drift is towards GC being only tracing as it is so dominant in the languages that are normally considered having GC. But before C++ (via boost) introduced shared pointers, and Swift ARC, I'd expect the separation to basically not exist.
Just a tip, it’s actually “break free”, not “brake free”.
> IMO the reason is simplicity, most languages don’t want to burden programmers with lifetimes and/or soft references.

I'm talking about languages that already use a GC as the primary heap management mechanism. Any kind of GC algorithm, whether tracing or refcounting, frees developers from thinking about lifetimes, but languages that primarily rely on GC and care about performance almost always pick tracing.

The only languages that choose a refcounting GC are either those that care little about performance (Python) or those that don't rely heavily on GC (Rust).

> Both largely for reasons of predictability, lower latency, lower memory use

Refcounting offers worse latency, worse predictability [1] (compared to modern low-latency tracing GCs, like ZGC), and worse throughput; it does offer a significantly lower memory footprint. The reason Rust chose refcounting is primarily because it doesn't rely on the GC heavily and so it might as well use a crude GC (and enjoy the lower effort of implementing it as well as the lower footprint), as a crude refcounting GC is usually better than a crude tracing GC.

Furthermore, an sophisticated tracing GC is not a great fit for languages like Rust or C++ because it requires a more elaborate code generation and some "magical" mutator thread behaviour, when low-level languages like the generated code to be as close to the source code as possible. This isn't so much predictability of performance, but predictability of the generated code and the behaviour of mutators (in terms of lowering the surprise of "why is my thread doing _that_ now?" when observed at a low level). For example, with ZGC, a mutator thread may find itself moving an object when accessing it; this is surprising at a low level -- which may not be a good fit for a low-level language -- even though it ends up offering better performance predictability overall. On the other hand, a mutator thread doing work freeing memory with a refcounting GC when it's dropping a reference to it may offer worse latency and worse predictability overall, but it's not as surprising at a lower level in the sense that it's easy to understand why it's doing that.

As for Swift, I think it picked a refcounting algorithm because it cares about memory footprint (most Swift applications run in memory-constrained environments) and because some unique language features allow to reduce the cost of refcounting sufficiently for a simple refcounting GC to be acceptable.

[1]: Again, not in principle (as both refcounting and tracing can converge to a similar behaviour) but as practiced by most refcounting GCs in industry use.
QA is focused on testing a product or system against how it should work. Security analysis tests against how it shouldn't. The second of those is a much larger search space. Both are important.

The argument around blame shifting is apt. The same case has been made for the usage of the term 'bug' (aka an externality). It's 2024, we don't have moths crawling into relays on our computers. We have implementation faults, invalid designs, unsound architecture, inaccurate documentation, ambiguous requirements, and a myriad of other ways to express how software may be defective.

Using those terms hurts, and may even invoke some level of concern from those outside of the engineering org - this is a great reason to embrace them.
I don't think I can take seriously in this context a quote in which certificates (a type of public document) are also designated "secrets".

Like, sure, they're probably thinking of PKCS#12 files which actually have the private key inside them, not just the certificate, but when they are this sloppy of course they're going to use the wrong words.
If a government is competent enough to detect this, they're competent enough to add it to their very own cyberweapon stockpile.

They wouldn't be able to do that for this particular exploit since it requires successfully decrypting data encrypted by the attacker's secret key. A zero day caused by an accidental bug though? There's no reason for them to eliminate the threat by disclosing it. They can patch their own systems and add yet another exploit to their hoard.
MS put money into OpenAI and OpenAI spends the money on Azure. It's basically Microsoft handing themselves cash and pretending that it's revenue.
I think there were news of an agency doing the work to favor good critics reviews among the 50 first ones on the release of smaller budget movies.