skysight-inc/HackerNews huggingface dataset:
I really like the XBPS way of the reverts keyword in the package template that forces a downgrade from said software version. It's simple but works without any of the troubles RPM epochs have with resolving dependencies as it's just literally a way to tell xbps-install that "yeah, this is a lower version number in the repository but you should update anyway".
whoever is in charge of removing people from the Google github org has the itchiest trigger finger in the whole exiting-the-company process tree.
>I am looking for something where I can keep my header and footer separate and then include them in every other page. That's it.

PHP. That's literally the one thing it does well. You should still use a framework (is Slim Framework still a thing? It's small, if it is) for routing and escaping but as long as your header and footer are pure HTML then you can just include them.
Thanks for clarifying - I usually assume that when someone makes a subjective claim about how something "seems" that the "to me" part is implied, obvious even, but I forgot where I was. By the way, do you have a peer reviewed study to back up your claims?
the USA has a murder rate of ~6 per 100k people and Tesla has 140k employees, so I don't think one murder is statistically meaningful.
My friend has a few volts from 2013-2018 (that he loves) and I usually borrow one for trips to see family and friends 12-16 hours away rather than drive my truck. I think they're great vehicles. ~40mpg at 80-90mph on the highway is really good though it does take premium for that 40+ mpg and it has a smallish tank so you have to stop a little more often. Once you reach your destination all driving is done on electric and charges overnight on a regular outlet/level 1. Their maintenance is surprisingly low for what seems like a complex system.

Crazy to me that Chevy has abandoned their PHEV platform considering others, like Toyota, are in such high demand. Speaking of which I spent a week with a Rav4 Prime and found that equally as impressive range-wise as a volt.
You find yourself in a position where you're forced to make an analogy with weapons of mass destruction and the lightbulb still won't go on? Some people's kids...
Higher on MMLU (62.5 vs 56.7 for phi-2) and GSM8k (61.5 vs 61.1). https://www.microsoft.com/en-us/research/blog/phi-2-the-surp... The phi-2 numbers are for 5-shot MMLU and 8-shot GSM8k. The blog post doesn't get that specific for Qwen, but it's very likely they tested the same way.
Well, you could deploy Minio.

I see Kubernetes as an enabler. Grab some commodity hardware - your own or Linode - and have a cloud experience using open-source components.

I just wish Kubernetes wasn’t so darn complicated.
Original source: https://themarkup.org/news/2024/03/29/nycs-ai-chatbot-tells-... (https://news.ycombinator.com/item?id=39864674)

More examples from the original article, which goes into more detail:

"The bot said it was fine to take workers’ tips (wrong, although they sometimes can count tips toward minimum wage requirements) and that there were no regulations on informing staff about scheduling changes (also wrong). It didn’t do better with more specific industries, suggesting it was OK to conceal funeral service prices, for example, which the Federal Trade Commission has outlawed."

Here's a direct link to the list of wrong answers from that article: https://themarkup.org/news/2024/03/29/nycs-ai-chatbot-tells-...
The implication was that a new big national park would attract annoying tourists. (A different poster suggested American, but there are certainly annoying tourists from many places in the world.)
they're either paying or it was a gift from sama
We'll see... given that sshd is just one of many possible argv[0] it may have choosen to act on, I'm going to be a little paranoid until it's been fully analyzed. It just takes half an hour to reinstall, I have some shows to catch up on anyway :)
> when it's not necessarily worse than previous tech

This is a good point, but on the other hand I think there is a notable difference between “the tool makes it hard to find the page with the correct info you need” and “the tool confidently gives you incorrect information without making it easy to audit accuracy”.
As a user of our product, I'd really hate it if we were recommending crappy products. I suspect users will also feel the same and this thought will hold us accountable.
So the doctor I saw recently who told me exactly what I just said was lying to me?
Fine. Nobody watches Nascar and more people watch FE.
Interesting, and it kinda makes sense. You quantize, which invariably means you lose some precision, but then you can finetune post-quantization to recover at least some of it. Neat idea.
The true story behind The Wolf Of Wall Street was pretty exaggerated due to the author wanting to make a better drama, too.
At my daughter's kindergarten they provide hours per week of ESL support, in addition to the regular material. The walls are covered in curriculum, including more about phonics than I was taught in my first 2 years growing up in the southeast. (Thankfully that era's anti-phonics fad passed by and even those schools got better.)

Things aren't always getting worse. And IME the schools tend to get better in the long term.
lol true, the state of youtube ads is pretty bad nowadays (although the raid shadow legends spam is gone from my feed now). Just places more emphasis on how much people trust the individual channel.
Yeah the reality is that a lot of people think that prior to and after WW2 and/or the Russian revolution the USSR was equivalent somehow to the US. That was never the case the USSR was a backwater and always behind. Tsarist Russia was a backwards undeveloped slave state. In that light the USSR punched above its weight.

The reality is that rapid industrialization regardless of your ideology is an extreme productive process which magnifies the effects of production which are not in and of themselves free of negative outputs. In USA capitalism like in USSR communism the negative outputs of production are simply ignored and the people who they affect have no choice in what negative effects they must bear and what is being produced.
people can find multiple ways to get to the same product. once your way starts charging they will find another way.
it's not weird at all?

randomly reverting two years of things across dozens of repositories will break them, almost definitely make them unbuildable, but also make them unreleasable in case any other change needs to happen soon.

all of their code needs to be audited to prove it shouldn't be deleted, of course, but that can't happen in the next ten minutes.

I swear that HN has the least-thought-through hot takes of any media in the world.
The full name "Jia Cheong Tan" doesn't sound like Mainland China. The name and actions could be intentionally misleading though.

https://news.ycombinator.com/item?id=39867737
The opposite is whatever pro-company positions are publicized, in order to increase the stock price.

Are you saying corporate PR isn't a thing? Or that quarterly earnings presentations aren't carefully written?
Based on the title, I thought this was going to be a wayland compositor on the JDK; it's not, it's work to make java (swing?) render to wayland without xwayland. Which is definitely a good thing, just not what I expected:)
annoying ... and convenient for some!
Maybe you’re thinking of the Edison kits? They seem to be putting a genset into the truck bed to do EV conversions: https://news.ycombinator.com/item?id=38893567
How many people are involved in this ?
Aren't you confusing JiaT75 and xry111?

And if someone wanted to attack a target running on Loongson, they would certainly have to make sure the code can actually run there in the first place.
> Users dislike animated ads

This section cites a few sources from ~10 years ago, but we still see those annoying video ads pop up in random places in 2024. I wonder if those ads were actually bought by competing companies with the intent to bring negative attitudes toward whatever is being advertised.
> US-Americans

You can just say "Americans". It's a well-recognized demonym, everyone knows what it means, and no one is going to be confused and think you mean someone from one of the many other countries in North or South America.

And it's not some sort of "injustice" that the US "stole" the term American to refer to solely themselves. It's just... not a big deal.
There's a middle ground - there are plenty of providers that will give you a turn key "insert credit card here, get root SSH access" experience similar to AWS EC2 but on physical hardware and at much smaller margins. See OVH, Equinix Metal, Hetzner, Packet, etc.
No, they're not. They are saying that due to the extraordinary circumstances with this case US agencies cannot be excluded from suspicion. At this time no actor seems to be a more likely perpetrator than the next. (Keep in mind that false-flag operations are a very common occurrence in cyber warfare and this cannot be ruled out yet.)
No, freedom of speech (as far as I know) protects even exploit code. The statutes being linked would cover using the backdoor to gain unauthorized entry to a system. I think the question of whether anything illegal has occurred from the public facts is unclear, at least to me, and interesting.
This seems infeasible for projects like LLVM that depend on international collaboration.
Why this instead of just opening it in incognito mode? That doesn't impact your recommendations when watching nor searching and doesn't need an extension
> libsystemd links to liblzma for other features not related to notifications

Which is pretty emblematic of systemd's primary architectural fault!
Iron Curtain is what saved the US from being corrupted by Soviets. Now there is no barrier and Putin can freely use his unlimited funds to "create outcomes" via corrupt US politicians. I'm surprised China didn't get to do it first but I guess they have a branding issue of being "godless commies". It's difficult to see how the modern West can withstand this corruption.
Eh, is it normal for the FBI to show up based on luke warm Facebook posts? Either 1. we don't have the full story, or 2. the FBI is engaging in targeted harassment against Muslims. Maybe I missed it, but do we have evidence of 2? If not, I can only assume it's 1.
Well, it wasn't wrong that you could not evict a tenant who refuses to pay rent in NYC.

There have been plenty of stories showing that it takes more than just being a squatter to get someone out.
A lot of people think F1 is a snoozer since there often isn’t any question about who is going to win. If I was to bet on something it would be how many tires they will shred. (They have trouble finding tire vendors because what tire vendor wants people seeing their tires explode?)
FAQ on the xz-utils backdoor
My old roommate has two british shorthairs, they're basically his kids. They live on the top floor of a four floor house, and never leave the 50m² apartment. They spend their days sleeping and doing not much else.

Down on the street, a neighbour also has a shorthair, almost an identical clone to my roommates. The cat has free reign of the neighbourhood, and the alertness in its eyes makes me realise that it has a much higher standard of living than my roommate's
We are not paying for Reddit's API to get our data, there are some really good and complete and publically available dumps of Reddit data available online. We are in contact with the folks at Reddit, which is of course a YC company, so they're aware of what we're doing.
K3s adds minor overhead to my single node $8/mo vps.

Edit: no, not managed. Quite easy to get started with though.

Edit2: took ~440MB of ram & 3% CPU (most of the CPU is the local storage provisioner, weirdly?). Why? Because it was much easier than continuing to maintain and run the handcraft Ansible scripts I've done over the years, and let me easily manage DNS, certs, metrics, two dbs, and its easier to reuse these on my other infra than any other option.
> it's not like you're going to realize equivalent margins by running your own little server in a colo somewhere

There are a lot of projects where the bandwidth charges alone would make self-managed on-prem come out ahead, and I'm not even talking the instant 2-3x performance boost you get by moving to real hardware instead of overprovisioned cloud VM hosts.
For a sufficiently long table:

https://en.wikipedia.org/wiki/AWAKE

https://en.wikipedia.org/wiki/Plasma_acceleration

Nobody knows if wakefield accelerators will be good enough but they are improving fast and they aren't too expensive to build.
They're getting smarter for sure, maybe some shadow marketing going on with the IPO too lol
What is it particularly good at?
video at 1M tokens sounded neat, I've been very impressed with Cladue's 200k + pretty good reasoning + not lazy output at the moment.
> And in general, the build system of a large project is doing a lot of work and is considered pretty uninteresting and obscure. Random CMake macros or shell scripts would be just as likely to host bad code.

Build systems can even have undefined behaviour in the C++ sense. For example Conan 2 has a whole page on that.
As long as Gnome requires bug-compatibility with systemd, nobody will rewrite it.
There is more to this: who is you?

If you are the owner who foots the bill and has the capability to run your own infra then nothing beats it. If you don't have the capability then cloud throws you the lifeline at a price of course. Pay for it and be happy.

If you are the guy who runs/manages the infra for someone: then there is no point in saving dollars. You peddle Kubernetes and go to the kubecon and post all about it on linkedin and establish yourself as a kubernetes expert. When the owner of current gig goes under, you will have a bunch of job offers to pick from.

Besides, kubernetes solves a problem very elegantly that most companies do not have. Not everyone is google and running apps on web scale with an expectation of 99.99% uptime...
I think that's exactly what I said...
Yes. An incomplete report allows for dragging out "fixing" the issue longer.
I see a dev on the project has just posted that it has been seen in the wild, so I guess you'd have standing there.

https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78b...
All cats spend most of their day sleeping.

It is true that cats thrive when engaged. But it's very possible to engage indoor cats.
No, this account made a PR and their commits were signed [1]. Take a look at their other repositories, e.g. they did AoC 2023 in Rust and published it, the commits in that repository are signed by the same key. So this is not (just) a GitHub account compromise.

I find this aspect to be an outlier, the other attacker accounts were cutouts. So this doesn't quite make sense to me.

[1] https://github.com/jamespfennell/xz/pull/2/commits
There's some apocrypha that I'd need to dig up the source to but IIRC the story goes that after WWI Keynes was researching the economic impacts of the WWI war economy. His conclusion was essentially that if normal people understood how capitalism worked in practice, they'd revolt because all industries effectively become rackets.
Report on the accessibility of the topM home pages
It appears you are correct. What an odd limitation!
I read through the entire report and it gradually got more interesting. Then, I got to the very end, saw Andres Freund's name, and it put a smile on my face. :)

Who else would have run a PostgreSQL performance benchmark and discover a major security issue in the process?
Detecting a security issue is one thing. Detecting a malicious payload is something completely different. The latter has intent to exploit and must be addressed immediately. The former has at least some chance of noone knowing about it.
Wasn't the NY times founded way before the microchip?

zing!
Is this "managed Kubernetes" then?
Sure, however the problem that software is really hard also impacts bad actors. So it's probably at least as hard to write that one line logic bug and have it do exactly what you intended as to write equivalent real code that works precisely as intended.
So what do they do with the exhaust?
I recently started using Trystero to send messages and video around via WebRTC.

https://oxism.com/trystero/
And you still didn’t answer any of my questions.

But first, no one was talking about Apple and Netflix teaming up. Those are two competitors and independent companies in the same space - streaming.

The discussion was about vertical integration where one company gets to distribute its own content. It was specifically decided Epic vs Apple that a monopoly isn’t being in control of your own content. Nintendo is also not considered a “monopoly” because you can only play most of their IP on thier own hardware

You also failed to answer any of the questions

1. Should we not allow any large content producer to distribute their own content exclusively on their own website and how is video different than audio, news, books, software, physical merchandise, etc? A second part of that conversation does that also apply to news content? Religious content? Documentaries like what CNN does?

2. For digital media, should we block foreign companies that are vertically integrated from being able to be accessed by people in the US?

3. If Netflix reincorporated in Canada should we force all US ISPs not to do business with them? Should we block them like the TikTok ban that is being proposed?

What “monopoly” exactly do you think Netflix has?
Fair, the article made a reference to it. In the first paragraph where the author is clearly making a representation of a contrary argument.

A paragraph that starts "s the sun conscious? Obviously not, from the point of view of mechanistic materialism or physicalism".

So I see now why you'd raise that point. Still, it is a minor throwaway figure of speech that doesn't really encapsulate what the author is discussing further in the article.
My daughter had a cough for 4 weeks. She saw the doc twice over that time period. They said it was viral and for her to get plenty of rest and fluids. Only had a fever for two of those days. If we'd kept her home every day she coughed the she'd have missed 25+ days.
I mean you can make any set of LLMs produce any set of output you want. The problem is that it isn't terribly efficient and you have to filter between the real stuff and the hallucinations.
It seems Mazda is going ahead with an electric Miata, they just don't know how electric it will be:

https://www.motortrend.com/news/2026-mazda-mx-5-miata-electr...
Indeed. A commenter up there said this is a "low-risk" application. Tech folks don't seem to understand that there are less tech-literate people out there taking these answers at face value, and being worse off for not knowing their rights.
>> Particularly for the small amounts I'd need.

How small... ovh, hetzener are both a thing and cheap as chips if your VPS sized. You just have to plan ahead for what you're doing and how you want to scale it. It requires a bit more upfront thought... but if your on a budget (personal project scale) knowing that you have a FIXED COST is pretty good for sleeping easy at night.
I once visited a sword shop, and only noticed the signs tiled every metre horizontally and vertically across the walls saying "do not touch" when the person I was with told me about them as my fingers hovered mere centimetres from one of the wall-mounted blades.

I also didn't notice the moonwalking gorilla in the famous video clip despite being aware in advance that there would be one.
I am thinking more in so-called rubberhose cryptoanalysis.

https://xkcd.com/538/
As someone who owns a white turbo fc, sans stickers, I would be interested.
I think you have to take the credibility of the maintainer into account.

If it's a large company, made of people with names and faces, with a lot to lose by hacking its users, they're unlikely to abuse private disclosure. If it's some tiny library, the maintainers might be in on it.

Also, if there's evidence of exploitation in the wild, the embargo is a gift to the attacker. The existence of a vulnerability in that case should be announced, even if the specifics have to be kept under embargo.
I assume you mean UTC+8... that covers about 20% of the earth's population, besides China it includes parts of Russia, a bunch of SEA and Western Australia.
Depends on S3's role in your application. If you actually need unlimited, worldwide-replicated object storage with nearly limitless bandwidth, sure, use S3 and pay for it.

Do you just need a place to stash files so your multiple application servers can read them? An NFS export over a private network can very well be all you need, and you can have that file server back itself up to S3/etc at regular intervals.
"Jigar Kumar" seems to have disappeared
It will ensure that my OS doesn't have code from random Gmail accounts. If someone with U.S clearance submits a backdoor, they should either be charged in the U.S, or extradited to somewhere that will charge them. We have no idea who this person is, and even if we did we probably could not hold them accountable.
The problem is that legal advice is hard and requires nuance. It's not even entirely wrong. Simply not paying rent is not sufficient cause for eviction. Not paying rent is permissible if maintenance is neglected.

Despite IBM's colorful moral history in the early days of computing, IBM had it right: "A computer can never be held accountable, so has increasingly been used to make management decisions". I'd extend that to "human" or "important" decisions.
> and the alertness in its eyes makes me realise that it has a much higher standard of living than my roommate's

Or else the alertness in his eyes may indicate the number of times he has come close to dying.

I would guess a lot of kids in war torn parts of the world have more alertness in their eyes than kids in the US or EU, but it wouldn’t indicate a higher standard of living.
Isn’t this evidence of targeted harassment?

Your logic sort of indicates that without evidence of the government wrongdoing then the subject is likely guilty of something. The burden of proof is on the state is it not?
> It's also very possible that the account was compromised and taken over

Or they WERE legit and simply went rogue, perhaps due to external factors.
> they could produce enough neutrinos to be dangerous

I find hard to believe that we can produce more neutrinos that the sun produces.
Consider the possibility those type of submissions were part of the adversary's strategy in order to make their account appear more legitimate rather than appearing out of nowhere wanting to become the maintainer of some project.
Hm. That ship plowed away a small island. Not sure anything can be ready for that.

Look instead to ensuring giant floating battering rams don't get out of control. E.g. resume certifications that ships are sea-worthy, which I suspect were suspended or curtailed during the pandemic.
Personally, I use lzip ever since I read https://www.nongnu.org/lzip/xz_inadequate.html
Seems like the complexity of XZ has backfired severely, as expected.
Oh come on, please, let's put autotools out to pasture. I've lost so much of my life fighting autotools crap compared to "just use meson".
I believe they also do not include sub modules, which is a big disadvantage for some projects
Makes sense. And with LLMs training on what is publicly available, this becomes self-fulfilling, because you'll get better answers from AI about what is popular - not what is technically superior.
Is the implication here that you need to charge and users will leave you once you do? If you can make a product that's significantly better, then you should be able to charge. The thing I'd note for affiliate marketing as a business model is that for it to generate significant revenue, you need to have a lot of traffic while other business models can generate that much faster (subscriptions) or make you money based off of that traffic (ads) instead of how many products are purchased.