skysight-inc/HackerNews huggingface dataset:
I was mostly being provocative. Reality is that OP seems to be quite narrow minded and has made some enormous assumptions about people who smoke cannabis.

In very general terms, the world would be infinitely better off if people did not cast such wide nets on their assumptions.
It is not the comparison of human evolution and technology that I was making, but rather a comparison between societal evolution and technology.
Arch Linux uses systemd, but does not patch sshd, so its not vulnerable to the known backdoor either.

However, to my knowledge nobody has fully analyzed the malware binary yet. So we don't know whether it only contains a single mechanism to attack sshd or whether it also has other harmful components.
I much prefer the explicit get/set methods. MobX I think used the magic approach as did svelte and I believe svelte have realized it's a mistake. It makes it harder to reason about the code, better to be explicit.
What difference would a phone call have made? How would it have added any confidence as to the intentions of the person whatsoever?
> And it’s not rocket science that well reasoned patches, with tests, splitting out separate commits, explaining the reason for the change would be better received than a typo laden one-liner, “I needz it”.

I said makes an effort.

You can implement a novel feature (and well) and get it rejected.
Yes, SIMs can be swapped and SMS can be eavesdropped. But SMS 2FA has some qualities hard to replicate by other solutions:

Reliability. It's extremely hard to accidentally break a SIM card. If you drop or drown your phone it may easily become inoperable, but the SIM will be still OK and ready to work in other device.

Availability. If you somehow destroy your SIM it is reasonably easy to get a replacement. Properely and securely backing up an app-based authenticator is difficult. Enrolling multiple authenticators is cumbersome and sometimes not possible at all. Migrating to new device is as easy as it gets.

Attack discovery. If you are being sim-swapped, you will notice immediately as your phone stops working. If someone is eavesdroppoing your SMS OTP you will notice as you will receive unsolicited authentication attempts.

Attack scope. The attack must be targeted as it is much more costly to do it in larger scale.

Attack mitigation. You can take back your stolen SIM as opposed to leaked keys.

I'm not saying SMS is best solution, but it is good enough in many aspects. Other solutions are best in one aspect and much worse in others. SMS strikes the right balance IMO and can be rasonably secure when used as second factor. (Not first and only!)
Hey there are dozens of us out here still using rebirth. ;)
Those aren't example of Google deciding they don't like a specific customer and booting them off the system.
I've always assumed that this is how a lot of "anonymous tips to the police" work. Illegal dragnet wiretaps plus the OK of a drone functionary boss, and hey presto! the coppers are clued in.
> If you need a space, you sign whatever they give you.

Exactly. And then you ignore the bullshit.
The consequence of not offering classes on IQ and human intelligence
Yeah, cannabis is addicting, changes the body and relationships. Its not as visible as other drugs so the word "addiction" is not used.
Clearly the apogee was ICQ in the early 2000s
Canabis doesn't cause hallucionations. It is often a misconception. They were doing something else most probably.
They're on Twitter, breaking Google's image generation service.
AMDGPU enables the whole hardware sans the video encoders. 3D is standard OpenGL, provided by Mesa.

It's fully accelerated, incl. video decoding & HDCP. Full stack sans the card firmware is open source.

The video decoder block is completely independent from HDCP block on the silicon to be able to provide open access to these parts too.

I don't know why they can't/don't open source video encoder parts. Probably some 3rd party royalties, but I'm not sure.

If you want another 3D API, you can directly build it on top of the driver. Nothing prevents that. Plus, ROCm packages are landing to "free/main" part of Debian for quite some time.
I'm assuming GP runs Windows and you run Linux. NVidia's proprietary drivers are known to be a lot more stable than AMD's. But on the other hand the open source driver and software stack for AMD (partially shared with Intel) is much more stable than NVidia's on Linux.
The finished product:

https://www.moregems.com/collections/morganite/products/294c...

So curious what the raw material cost!
Or just keep options open for the time being.
> Maybe he has a better reason for believing it, I can't guess.

Did you even read what you responded to? He absolutely has "better reasons" for believing it.
Personal preference does come into it. I rather like the smell of certain kinds of smoke, but cannabis has this very strange sweetness which I find unpleasant. Smells certainly don't correlate with safety though; I like the scent of white spirit!

When outdoors, wind comes into it. They really ought to have two smoking areas on each railway platform, one on either end, and make it compulsory for smokers to use whichever one would carry the smoke away from other users on a given day. Or, have a smoking shelter with a tall chimney to take it away more effectively vertically.
I don't mean ownership of the server. I mean managing it, administrating it, creating granular roles, managing bans, etc.
https://github.com/trusteddomainproject/OpenARC/issues/163

https://github.com/trusteddomainproject/OpenDKIM/issues/186

OpenARC/OpenDKIM don't parse email headers to spec. Help wanted.
Welcome to Developer Week 2024 – Cloudflare
This addresses the crux of the issue as I see it. We will never have nice things if this cycle is allowed to repeat endlessly. I hope that people will eventually wisen up to these tactics but realistically I think regulation would be required if we wanted to stop it. I see parallels to classic price dumping but I don't know how applicable those laws are in the digital world.
>and chat clients can only get worse with time

Not just chat clients, but pretty much any stable piece of SW from a major corporation that reaches peak perfection, is forced to get worse and user hostile over time, because those VPs, execs and managers in charge of it want a promotion or need to justify their bonuses on a yearly basis, so they force needless changes to have something to present to the board every year till they jump ship or retire early with their masive stock piles.

And then the next people who take over, have something to tear down and rebuild, so they can be the ones making their careers on "fixing" that product and the cycle of shittiness repeats.

They are not products anymore that need to serve the best interest of the customers, but fiefdoms and vehicles designed to propel and fuel someone's ego and career advancements at all costs.

It's an effect of perverse incentives in corporate promotions. You'll never make a career at these companies by doing QA or saying "well, the product we have was perfect already, so I did absolutely nothing to it, added no new features, just fixed some bugs and kicked back".
I think 'Jia Tan' is one person who's committing the changes, based on the language used in the commits. Whether those changes came from a group will never be known.
Often for this kind of problem writing a closed form solution is simply intractable. However, it's often still possible to express the cost function of at least a big portion of what goes into a human-optimal solution. From here you can sample your space, do gradient descent or whatever to find some acceptable solution that has a more human-intuitive property.
I do exactly this, here's my script. each text file is just a list of URLs.

get () {
FILENAME="%(uploader)s/%(title)s/%(title)s (%(upload_date)s).%(ext)s"

yt-dlp \
--restrict-filenames \
--no-check-certificate \
--verbose \
--download-archive "/volume1/Media/youtube/archive.log" \
-i \
--write-thumbnail \
--convert-thumbnails jpg \
--force-ipv4 \
--add-metadata \
--write-auto-sub \
--sub-lang en \
--write-sub \
-f "best[height<=1080]" \
--merge-output-format mkv \
-o "/volume1/Media/$1/$FILENAME" \
-v \
--batch-file "/volume1/Media/youtube/$2"

}

get "youtube/_Singles" "unique.txt"
get "youtube/_politics" "politics.txt"
get "youtube/_music_videos" "music.txt"
get "youtube/channels" "channels.txt"
get "youtube/channels" "playlists.txt"

exit 0
Yes. That's why it has a CVE with a score of 10.
No it won't. Proof myself
Maybe you should check if your employer offers therapist sessions if your work equipment causes that kind of reaction. Doesn't sound healthy, long term.
Meh. The author confuses DFT with STFT. They refer to the STFT as "DFT", but then introduce the usual IDFT as the inverse transform, which is not the inverse of the STFT (the inverse STFT can be computed with the overlap-add method).
This. I've had my buggy shit accepted into at least three open source projects so far with little to no verification.
Hah, bias. Did you somehow miss the comments above?

> Republicans seek to weaken laws against child labor

> Republicans continue crusade against childhood innocence

There's a lot of bias there. And if those claims were true (spoiler: they aren't, for counterexample, according to the article, Republican legislatures in Texas and Montana have strengthened laws, the Democrat legislature in New Jersey weakened them, and the Virginia state legislature unanimously approved increasing penalties), they'd imply Democrats don't want these unaccompanied minors to work.

Even though this is not, in fact, a partisan issue, one thing is clear. There are many leftists in this discussion who don't want these unaccompanied minors to work. So how do you all expect them to survive?
I don’t know how the future will look like, but for now LLMs just help me to do the job quicker and become unstuck in case of some issues like “how do I write that regex”.
I believe developers performance will increase with these tools, but we will still be needed to properly get all the nuances of requirements and implementation.
I guess the blame is on the people who decide to depend on a very small (by team size at least) project: https://xkcd.com/2347/ . While having plenty of safer alternatives.

Lets suppose I create a personal and hobby project. Suddenly RedHat, Debian, Amazon, Google... you name it, decide to put my project as a fundamental dependency of their toolchain, without giving me at least some support in the form of trustable developers. The more cautious I would be is to shut down the project entirely or abandon it, but more probably I would have fallen to Jia Tan tricks.

Also, the phone call and even a face to face meeting wouldn't give you extra security. In what scenario a phone conversation with Jia would expose him, or would make you suspicious enough to not delegate?
The answer is yes, I'm a crappy wood worker compared to a master craftsman, I still love it.

I love growing tomatoes, even though I'm not a pro and people are better at it than me.

I surf even though there are people 50x better at it than me. I know that.

You don't do something to be the best, you do it because it's enjoyable.
> This tiny detail makes the difference why employer-mandated drug tests are not a thing in Germany like it is in the US.

I assume that Germany does drug testing for safety-related roles? Crane operators, pilots, nuclear plant operators?

It would be wild if they don't.
Also README driven development seems similar, with a different target audience.
Show HN: License Approval GitHub Action
quantify enough
It reminds me of Musk announcing that the Cybertruck would be able to traverse calm water as a small boat.

A former employee tweeted [1] shortly after that "Having worked at Tesla, I can say with some confidence that the design engineers are hearing about this requirement for the first time here".

[1] https://twitter.com/Superfast/status/1575591147828744192
Wait, are you saying you can’t write negative things about the GOP?
In the Q&A from the video, there's a question very similar to yours.

As an answer, Lars specifies that these are regular engineers who were asked to learn Rust, and not early adopters who like shiny things.
Lots of things are bad about teams. Here's one that annoyed me the other day: In a channel, I opened a power point presentation. It opened within Teams. I wanted to message someone about one slide. To do that, I had to leave the presentation, navigate to the chat section and search for the person I wanted to message. When typing out the message I realised I wanted to copy paste a phrase from the slide... but now the presentation is closed. So I go back to the channel, open the presentation, go to the slide, copy paste and then close the presentation and go back to the chat - infuriating!

tldr: everything opening within teams is a poor ux
> forbid MS from bundling these two at all, so that you have to pay separately for Teams, and that price is no different than if you subscribe to Office or not

Agreed. As it stands, Teams will still be much cheaper than Slack so it's unlikely any enterprises will make the switch, given how entrenched Teams has become.
You break it, you run away and hope somebody else fixes it
> The problem with the ‘world we like’ is it might not make sense economically - and will fail.

I'm fine with discord failing if the alternative is discord enshittifying itself while keeping user data hostage. Same applies to other platforms or products.

I guess what you're saying is that not just discord would fail but the whole network of advertisers and products that rely on them. I hope this wouldn't be as dramatic, I hope we'd find better ways to reach consumer audiences than creepy ads.
One time I wanted to learn about transmitter antenna design, just because I’m curious. ChatGPT 4 refused to give me basic information because you could use that to break some FCC regulations (I’m not even living in the US currently)
I can imagine a SF story where the act is applied to an abandoned, but still bird infested, space colony.
Who should attend these classes? Everyone? Students of what age? Educators? Doctors? Conflating opinions with facts is bad, sure, but some of the opinions about IQ testing reflect societal problems as much as problems with the test and its interpretation.

Education about IQ testing could also be put in context of eugenics, social policy across history. Intelligence testing has ugly roots.
Multi-Messenger Astrology
Well, you could have a "board," that reviews and rates software. Kind of like financial rating companies.

There could be a lot of variables to the rating, like the size of the team, the language, the testing methodology, etc.

The board would need to be supported by end-users, and big steps would need to be taken to ensure true independence.

It would have to be carefully done, though, and likely immensely unpopular with the HN crowd.
> Or… just have downstream users run autotools as part of the build?

See point 3:

> 3. A corollary of (1) and (2) is that autotools is bad and the autotools culture is bad.
uh oh

https://youtu.be/RhGHerssyk4
For that case you would have to mark the mail as spam in the groups interface, not via the forwarded mail.
There's a chance they (maybe specifically the lawyers) know something we don't. I mean, maybe they are absurdly incompetent in listening to feedback, while at the same time achieving technically great things in hardware. But after so many years and seeing all the AI money going to the competitor... That seems less and less likely every day.
What do you use for summaries? A friend recently created such a tool to summarize and collate his newsletters.
Intelli Python to Orchestrate AI Models Collaboration as Graph
>Treat an LLM as a confident smart person who isn’t an expert in anything

When you say it that way, I'm reminded that IRL I find that sort of person to be just the worst. Largely because I've mostly encountered them in mailing lists and users group meetings, confidently leading other people down a blind alley. When it's just a 1-on-1, with me asking ChatGPT, I guess I'm more willing to accept it -- because the blast radius is limited.
Alcohol has a much more detrimental effect and still is completely legal (also: any attempt of banning it had quite bad results). So yes, some people don't handle it wisely. Lets not even get started on tobacco.
Or all the other substances, which are not drugs but very bad for your health when overconsumed. Like all the sugars, unhealthy fats. Fast food.

We cannot and should not penaltize all these things just because a few cannot handle them. Rather, we should invest into helping and preventing abuse. Of all above.
As a small l libertarian, I’m totally fine with any and all drugs being legal provided there is a clause that government doesn’t need to support you if they ruin your life.
I expect two dominant themes to develop during this iteration of "The most important election of our lives"

1) The importance of government truth czars and their adjacent fact-checkers

2) Digital ID as a prerequisite to publishing online, to protect the public from "dangerous misinformation"

All that is needed to advance these already in play promotions is a disinformation Pearl Harbor event. Not to say that "disinformation" isn't emerging organically from all sides or that deceptive reporting is something new. Incentives are aligned to promote it as something novel which requires regulatory action.
"This page temporarily disabled due to excessive traffic"
It does not.

OpenSSH pulled in libsystemd to provide startup notification. Libsystemd pulled in liblzma. No code from liblzma normally ends up in OpenSSH. But because it is built as a dependency for libsystemd, it's build scripts are ran in the same environment as libsystemd, and OpenSSH.

The attack payload was hidden as an obfuscated binary blob in the liblzma tests directory, masqueraded as a compression test case. When lzma was compiled from the git sources, generating the build scripts using autotools, nothing untoward was done. But lzma was also provided as a source tarball that was used by distro packagers, that had the autotools already ran. The attacker replaced the autogenerated, unreadable script output with one that checked if liblzma was being compiled in the same environment as OpenSSH and if it was being compiled so that it was going to end up as a .deb or .rpm package, and if both were true, embed the attack payload into OpenSSH.

Then the attack payload started with a lot of checks, including testing whether OpenSSH was being started normally by init scripts or manually, and for the presence of usual debugging tools, and only attached the payload to the running process if it seemed like a "natural" bootup with no running debugging tools. When running, the payload hooked into private key verification, and if the correct private key attempted to login, the payload would take the rest of the incoming packet and call system with it, that is, provide remote code execution as root.
Even more wild is Singapore's law that it is illegal for citizens and permanent residents to consume illegal substances, even if that consumption occurred in another country where it is legal.[1]

So you have Singaporeans testing positive for cannabis upon arrival at the airport after a trip to Thailand, who are not in possession of cannabis, have not consumed it in Singapore (or another country where it is illegal) and they are charged with a crime.

[1] https://www.channelnewsasia.com/singapore/cannabis-drug-laws...
Show HN: A dark mode for PDFs and printed pages
We’ve suffered for far too long with the default white background and black text of PDFs and printed pages. And so I’ve solved that problem with DarkPDF.com, which transforms your “might as well stare at an eclipse” document into a “chamomile tea and cozy blanket” document.

It’s free and runs completely client-side. Maybe you can submit your tax returns in dark mode too? Maybe check with the IRS first.

Relieved to have found my first unicorn idea. Already thinking about writing a bestselling millionaire solopreneur book and/or course. So much wisdom to share now that I am about to achieve this success.

WARNING: Please confirm you have additional ink cartridges on hand prior to printing any dark mode PDF.
> While having plenty of safer alternatives

What are xz's safer alternatives? And how do you make sure of that?
Full list:

SOS - Shiny Object Syndrome
MDD - Magpie Driven Development
HDD - Hype Driven Development
JDD - Jargon Driven Development
BWDD - BuzzWords Driven Development
HNDD - Hacker News Driven Development
RDD - Resume Driven Development
CVDD - CV Driven Development
EDD - Epoch Driven Development
PDD - Promotion Driven Development
BPDD - Blog Post Driven Development
MDD - Medium.com Driven Development
HDD - Headline Driven Development
What about "new" people? If it's legal I would assume more people of new generations of people will try it
Ask HN: Does your company have public open SSH ports?
> The European Commission has been investigating Microsoft's tying of Office and Teams since a 2020 complaint by Salesforce-owned, opens new tab competing workspace messaging app Slack.

For reference, here is the complaint (2020):

https://slack.com/blog/news/slack-files-eu-competition-compl...

In a nutshell:

> The complaint details Microsoft’s illegal and anti-competitive practice of abusing its market dominance to extinguish competition in breach of European Union competition law. Microsoft has illegally tied its Teams product into its market-dominant Office productivity suite, force installing it for millions, blocking its removal, and hiding the true cost to enterprise customers.

So basically, this behavior from MS is the same with IE being bundled in Windows in the 90s and, later, probably Media Player.
Finnish, mostly. I moved to Finland a few years ago and have been making slow but consistent progress along the vectors I care about ever since. I just wish language learning didn't take so much time.

I've built some little tools for the task, which ended up teaching me enough about modern development that I could enter back into software as a career without too much hassle. There were no good Anki frequency list decks, so I made https://ankiweb.net/shared/info/1331009943 and later https://ankiweb.net/shared/info/1149950470 .

These in turn led me to devour a book on the inner workings of SQLite and web dev, because I needed some way to scrape Tatoeba without losing my data every time. Eventually I got good enough to start reading the 'clear Finnish's news, but then I realized YLE.fi didn't seem to have an easy way for me to scrape all previous news articles, so I built https://hiandrewquinn.github.io/selkouutiset-archive/ as an excuse to get a little deeper into Hugo and also learn some stuff about Git modules, systemd timers, doing things on a Raspberry Pi, doing things in GCP...

... And finally today I made the first lurching version prototype of a flashcard generator for that news archive, at https://github.com/Selkouutiset-Archive/selkokortti . I guess I just keep stringing the tools and interests I have together to make bigger and bigger things. Maybe that's all a career/vocation really is at the end of the day.

I've also been learning a lot about QEMU and virtualization. That's mostly for work. I make software that runs on trains.
Check out these models: https://replicate.com/collections/image-restoration

Most of them can be run locally, but I’d recommend testing them with replicate before investing in understanding cog/docker/hf…