skysight-inc/HackerNews huggingface dataset:
Onto the list[0] it goes.

I always have the feeling that WebRTC had so much more potential than has been realized. I wonder how things might have turned out differently if it had better server and browser support ~5 years ago. I remember trying to use it for a game at the time and had trouble finding a good server implementation, and had all sorts of issues with Safari.

In the near future I'm not sure there will be much reason to use it over WebTransport, unless you're doing p2p. I actually prefer WebRTC's data channel API, since you can get separate datagram streams, whereas with WebTransport you have to multiplex them yourself[1].

[0]: https://github.com/anderspitman/awesome-tunneling

[1]: https://datatracker.ietf.org/doc/html/rfc9221#name-multiplex...
I've just talked to a guy who started a recruiting agency in Moscow last November just b/c the industry is thriving. The salaries are high. According to his assessments this market will be high during the next 2+ years.

Also he's been interviewing some Russian-speaking candidates willing to relocate from the US, Israel and Germany. Among the candidates are Russians who have been living there for 15 years. Their reasons to leave: bad attitude towards Russians at all levels, unwillingness to pay taxes that are used for war against Russia, lack of actual freedom of speech, and LGBT propaganda starting from 1st grade elementary.

Regarding quality of life here, for instance, even a PHP mid can get around 280-320k RUB/month net. Head of arch can get 1200k. And 300-400k RUB/month even in Moscow has greater purchasing power than 5-7k EUR/month net in, say, Munich. Plus, long-term prospects, stable economy, healthy food, high-quality affordable internet, good and cheap public transit, instant person to person money transfers, great digital government services, strong combat-proven army with best in the world air defense etc and beautiful women…
All are welcome. It’s just weird to get upset that it’s US focused.
Self-driving cars can't even manage 2 degrees of freedom with billions of driver-miles of data. What do you think can be done in 3d space, with more instruments and many orders of magnitude of less data?
Competing offer. Go interview.
> The above author seems to be primary contact for xz?

They made themselves the primary contact for xz for Google oss-fuzz about one year ago: https://github.com/google/oss-fuzz/commit/6403e93344476972e9...
The backdoor is in an .m4 file that gets parsed by autoconf to generate the configure script. Running autoconf yourself won't save you.
A Monocycle Robot With Two Legs
Just a documentation change, fortunately:

https://github.com/bytecodealliance/wasmtime/commits?author=...

They've submitted little documentation tweaks to other projects, too; for example:

https://learn.microsoft.com/en-us/cpp/overview/whats-new-cpp...

I don't know whether this is a formerly-legitimate open source contributor who went rogue, or a deep-cover persona spreading innocuous-looking documentation changes around to other projects as a smokescreen.
Deleted, thanks.
No exploring for me though :(
> all the science fields we study today, like physics and biology, grew from philosophical questions

No, they grew from experimental evidence. I'm not aware of any scientific knowledge that came from pure thought experiment without experimental validation. Pretty much the only thing you can use that for is maths.

You can say "but lots of discoveries came from medieval philosophers", but that's just because they didn't have a separate word for scientists. I'm using the modern definition of the word, which really makes my argument almost tautologically true. By the modern definition if any philosopher actually provided and answer to a question then people would call it science.
Anyone keeping current with OpenSUSE Tumbleweed got a update...downgrade. Prior to `zypper dup --no-allow-vendor-change` I had 5.6.0, now I'm at 5.4.6.
I wanted to know when pencil leads stopped by made of lead, and was surprised to learn that they never had been:

Going back to an earlier point, when the graphite was discovered the English thought they had unearthed a lead deposit, a misunderstanding caused because lead and graphite look uncannily similar in their natural form. It is because of this prevailing thought that the pencil was known as the lead pencil, a name that has endured until today.
We have precedence in restricting sales of certain substances to minors. A physical hand off has to take place in a physical place where a government issued ID can be checked for age verification. If you get caught breaking this law, you can lose your license to sell these things (and likely go bankrupt cause these things make a ton of money), because the government controls that, too.

This is in no way the same thing as policing "creating algorithms". We don't/can't go after Labatt for "creating beer" (it was tried...). I agree, writing laws is challenging, but even professional law makers can't get it right, not in the sense that they aren't skillful enough to get it right, but in the sense that it is not possible. We're seeing this with Porn Hub in certain US states. Local laws are just not effective in enforcing a multinational Internet service. To get back to the original point, this is why you might want to try something other than "having the government pass laws about restricting social media for youth under a certain age".
They were Sun's "the network is the computer" well before Sun had that idea.
Where's yours then?
Note that "Linux Foundation" is run by a bunch of Big Tech corporate interest[1] and not some kind of altruistic FOSS group.

[1]: https://www.linuxfoundation.org/about/leadership
Can someone who understands economics better than me explain how the workforce can "shrink" in 2024? The number of people isn't going to dramatically decrease, are just a ton of people retiring?

Or does this imply that there's going to be a reduction in the number of available jobs?
Similarly if you're using MacPorts, make sure to sync and upgrade xz if you have it installed.

5.6.1 was available for a few days and just rolled back ~20 minutes ago: https://github.com/macports/macports-ports/commit/a1388aee09...
Less creepy would be to just have a RFID chip in a vendor card, like a loyalty card, that is scanned upon admission by RFID readers
This is one of the reasons I loved Netflix. Each year they would say "to get new people in the door with your level experience, we had to offer them $XXX. Therefore we are raising you to $XXX."

Some years I got 25%+ raises. Netflix understood this like no one else.
Except ORMs are just worse? Unless you mean they are the symptom of longing for other languages where there are none.

I would also love to see a new language for writing declarative queries. I also feel people don't like sql not for the language itself, but the lack of tooling.
For anyone else feeling some deja vu about ifunc / Valgrind errors, this Red Hat issue [1] was previously linked from HN 12 days ago [2].

[1]: https://bugzilla.redhat.com/show_bug.cgi?id=2267598

[2]: https://news.ycombinator.com/item?id=39733185
Not every bay is a harbor, but every harbor is a bay.
> As someone who lost a little bit through this whole debacle I think it is because we willingly gave our money to FTX.

That's not the whole picture though. If I invest in some risky stock (or even what I thought was not a risky one) and it tanks, sure I feel bad but it's part of the deal so it's ok.

But if I invest in something risky and I lose the money not through investment risk but simply because the fund manager outright stole my money, I'd be very angry.
There are around 40 million people in California. What's hard is that a fair solution to Prop 13 is difficult. You can't just shut it off suddenly or even gradually over a decade because people will lose their homes en masse and property values and current mortgage rates combined make it very difficult to move, and just about impossible for the seniors who Prop 13 was supposed to help. You have to carve a solution very carefully not to screw over a large segment of voters.

Or all the renters can get together and decide to screw over the owners; fuck 'em 'cause they're old anyway. That's certainly a possibility. However, expect your children to treat you the same way.
The students were nonconsenting lab rats for a bizarre media experiment. They have every right to feel used or betrayed because they were.
Makes sense. New hire gets paid a lot, everyone updates on what they should be getting paid, top performers have the best chance of getting jobs elsewhere and they now know they should be getting paid more.

Seems like this consideration makes hiring new people much more expensive. Either you pay everyone (or just top performers) more or pay the new hires less and likely attract a lower tier of new hire which has its own cost.

Employees should do more to share their pay so everyone knows how much everyone else is getting paid. I mostly think there should be a law mandating this - every employer with more than 100 employees must publish summary statistics on wages at every job category.

I recall reading that CEO pay skyrocketed after a law intended to reduce CEO pay required that CEO compensation had to be disclosed. It had the opposite effect and CEOs started to make much more. Seems like we should apply that same thing to the average worker.
Note that the malicious binary is fairly long and complex.

This attack can be stopped by disallowing any binary testdata or other non-source code to be on the build machines during a build.

You could imagine a simple process which checks out the code, then runs some kind of entropy checker over the code to check it is all unminified and uncompressed source code, before finally kicking off the build process.

autogenerated files would also not be allowed to be in the source repo - they're too long and could easily hide bad stuff. Instead the build process should generate the file during the build.
Lots of envy here... I never even saw one in person. Would love to play with it.
>Then you check again

You only get to check once, I think. The rest doesn't matter, supposedly.
If Greece is anti-death penalty and there would be a chance of that, they would not extradite.
Sorry for your loss.

Given that you are selling it rather than rent it out, it seems to have the intended effect. Just as when I renovated a vacant RSO duplex, I sold it rather than enter rent control again.

Incentives do work, but we accidentally incentivised and subsidized a whole bunch of mom and pop landlords with prop 13.
The Casimir Effect Explained
Offer to step back into that position because taking the promotion will reduce your pay to under the going rate for the position you’re leaving.
Unfortunately this is the answer.

The bean counters do not give a shit about your experience or value. They just need warm bodies. They know the friction of leaving a company is high so they'll intentionally make you feel like a sucker until you finally quit, getting more years and months out of you for a lower rate than you deserve. When you finally do leave, they'll pat themselves on the back for retaining you for so long at a depressed wage.
Well no shit. If I'm currently a top performer and we hire new workers at a higher pay rate than me, if I have to wait to get a raise because of BS corporate bureaucracy then the company should know from the second they say no I have my foot halfway out the door.

Funnily enough at many companies the second you actually threaten to leave, that corporate BS suddenly isn't an issue. But trust has already been lost.

Exactly as mentioned in the article but what should be basic common-sense. Why would I continue to work as hard as I do being a known top performer just for somebody who is new and has no history to get paid more than me.

But of course some of this may actually be exactly what some companies want in this backwards world, get rid of top performers who expect a pay raise in favor of those who don't expect one anytime soon like new employees. Set the expectation to new employees to not expect raises, etc.
Copied my comment from dupe thread - but note that "Linux Foundation" is run by a bunch of Big Tech corporate interest[1] and not some sort of altruistic FOSS organization.

[1]: https://www.linuxfoundation.org/about/leadership
The computer abuse and fraud act? Seems like a pretty easy question to answer.
I have a hunch that we're going to see this on next year's Advent of Code...
@NanoRaptor's fakes are always awesome.
They might have been forced to give a signal after this rose on HN today:

https://research.myshell.ai/open-voice

https://news.ycombinator.com/item?id=39861578
That came up in the case of psychologist Robert Moore. It was reported that he shot his wife and then himself, but gunpowder residue was found on her hands, not his.

https://en.wikipedia.org/wiki/Robert_L._Moore_(psychologist)
Actually the "jiat0218" user part in his email address jiat0218@gmail.com has a bunch of matches on Taiwanese sites:

https://char.tw/blog/post/24397301

https://forum.babyhome.com.tw/topic/167439

https://bmwcct.com.tw/forums/thread1828.html
I meant the equivalent of boring a very deep and long tunnel (: I should have been more specific.
Not at all. I’m saying it should be supported to meet any employee’s bias with thorough skepticism.
100% fair -- we don't know if their account was compromised or if they meant to do this intentionally.

If it were me I'd be doing damage control to clear my name if my account was hacked and abused in this manner.

Otherwise if I was doing this knowing full well what would happen then full, complete defederation of me and my ability to contribute to anything ever again should commence -- the open source world is too open to such attacks where things are developed by people who assume good faith actors.
This depends on what level you consider HA and horizontal scaling to be required. I could make the same argument, based on my personal experience, that postgis ought to be included out of the box. Of course, I'll assume most people don't need it :)
Except for the ones who tell readers they're "news media," but tell judges that no reasonable person would believe they're telling the truth.
Do you compile your own open source client for your phone? Or do you install it from an app store? Most people are going to install it from the app store, so I believe my point still stands. What correlation is there between what's in the app store vs what is published in the open source repo? e.g. how do you validate that the app store client was compiled from a specific commit in the open source repo?
That is false, it changes every time you check along another axis. If you make the same check it doesn't change, but if you change what you check then you can update the particle as my example shows.

Changing a particle like this by making repeated measurements is a standard example in undergrad quantum mechanics.

Edit:
There is always a part of the particles state that you can't know, you know Heisenberg's indeterminacy principle, so if you measure position you now makes velocity undetermined, and then if you measure velocity now you make position undetermined, and then if you go back and try to measure position the particle will be in a new random spot.
Expressivity and naturalness are still not good enough. It's getting there, but today you'd never have a voice conversation with an AI and come away thinking "boy, what an engaging, charismatic personality that AI had!" This is partly due to latency, partly due to imperfect speech-to-text which is too slow and doesn't understand conversational dynamics or nonverbal signals, but yes partly due to text-to-speech.

When it comes to naturalness for dialog, OpenAI actually has the best voices I've heard—significantly better than Azure or 11 Labs which are second and third best. But at least the voices they expose through ChatGPT are fairly muted and inexpressive.
In the industrialized world, the fertility rate is almost universally below replacement rate, and has been for a long time. So, as boomers are retiring, there are not as many people replacing them.
> That’s strange. If I invest my money into any form of securities it’s pretty clear to me that the value of that capital might go to zero overnight.

What is strange about it? Losing money through investment risk is part of the deal when you invest, losing money because the fund manager decides to steal it is not part of the deal.
From 2016, only 10 companies control almost every large food and beverage brand in the world.

https://www.businessinsider.com/10-companies-control-the-foo...
The backdoor is not in the C source directly, but a build script uses data from files in the test dir to only create the backdoor in the release tars. Did I summarize that correctly?
> Not sure why you'd want answers, that's the domain of religion

Ha perhaps I should have been more specific - I want correct answers!

And I want answers because a) I'm interested, and b) answers to scientific questions tend to let us make new cool things!
Like that US woman who killed a kid in the UK would be extradited?
I guess lucky her hubby was in Intel and the UK cops were bamboozled.
Call me pessimist but (emphasis mine):

> We can only buy from private property, but not from municipalities or landowners’ associations, so our strategy is to acquire what we can and donate it to the state *only if it creates a national park*

So foreign "donors" are buying land that they gonna keep if local government doesn't do what they want.
There is a related issue for LLVM/clang by this person:

https://github.com/llvm/llvm-project/issues/63957
FYI, this "regression" was likely actually a symptom of a purposely-inserted backdoor. See [1] and my comment there [2].

[1]: https://news.ycombinator.com/item?id=39865810

[2]: https://news.ycombinator.com/item?id=39867301
Not what I said. I was talking about the death being murder being the rumor.
> Can someone who understands economics better than me explain how the workforce can "shrink" in 2024?

There is a generational demographic bulge in an age range where both death and retirement of those who have not yet done so are things that are not unlikely.

On the other end, there is the opposite of a bulge at the age people enter (for statisticsl purpose) the workforce.
> systemd... does not talk to the network...

Socket activation and the NFS automounter appear to.

If I run "netstat -ap" I see pid 1 listening on enabled units.

Edit: tinysshd is specifically launched this way.

Edit2: there is also substantial criticism of xz on technical grounds.

https://www.nongnu.org/lzip/xz_inadequate.html
You should really tell us who you are and your support ticket numbers, you are on the hacker news frontpage complaining about a digital service provider (support) failure, which means you are eligible for free premium support. At least this works for cloudflare, where it goes like „hi this is the cloudflare CTO, I will personally take care of this, this shouldn‘t have happened OwO“.

> The transaction failed.

Why? What would have been different half a month later?

> for more than I utilized I should add

Do you have details?
This is exciting stuff. It's amazing how Amazon s domination and lack of business interest in improving the product killed off the e-reader in the us. Go to China or Japan and these things are numerous and still being sold/developed.

I'm waiting on a meebook to be delivered.

EDIT: Just got it.. This thing is amazing and the screen is sharp.
Basically anything companies don’t want workers to be able to do is good for the workers and bad for the companies.

They don’t want us sharing pay. They don’t want to have to post comp ranges in job postings—they don’t want it to be easy for us to compare job postings.

That means it’s a safe bet that both of those tend to increase worker comp.
Everyone else is telling you to leave or try a power play, but food for thought -- you may actually be less valuable now in your new role because you aren't experienced in it. If you just moved from IC to manager, you might be a pretty new manager.

It's normal for managers to have reports that make more than them. Just because you manage them doesn't make you more valuable.

I'm not saying this is the case for you in particular, but it might be, so something to consider before playing hardball.
I think they mean that adding a bunch of uncommon columns to your user table is just gonna decrease performance of common queries. In those cases I like offloading uncommon columns to separate tables that are joined only when needed.
ha, indeed.

You're wasting everyone's time, I might as well too
Any good tools to build these prototype experiments?
> The transaction failed.

Why did it fail?

> AWS decided to bill me mid-month (for more than I utilized I should add) even though the cycle ends on the 31st.

There are specific items that are billed immediately, such as domain registrations.
You just got a promotion, so now you're in a better position to make more money by leveraging the new level/status at another company.

Leave or get a competing offer to use as leverage if you really like your company.
Also one of the fascinating parts from my own perspective. Apparently the https://en.wikipedia.org/wiki/Battle_of_the_Caribbean from a history perspective, which I never read about, and kind of looks like the "Year of Fear" from a history perspective. ~350 ships of 2 million tons in less than a year. (WP says by 17 submarines)

The histogram zoom feature being one of the cooler UI portions of this. Something that places like MarineTraffic, FlightAware, and Windy could probably implement as a neat zoom for seeing boat traffic statistics in areas and such.

Also pretty cool for divers. Maybe not the old steel, yet a lot of these are in fairly shallow water, which would be pretty neat for diving excursions. Probably semi-dangerous, yet there's probably also humans willing to take the risk or sign a disclosure.

Is there some way to change the displays? The interface looks like it should be possible ("Show only", "Show sunk by"), yet clicking on times, clicking areas of the UI, only zoom/shrink, and bring up individual ships.
You can't attack another user like this on HN, no matter how you feel about their employer.

Since you've unfortunately done this before (https://news.ycombinator.com/item?id=37430894), I've banned this account.

If you don't want to be banned, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future. They're here: https://news.ycombinator.com/newsguidelines.html.
Wouldn't a supply chain attack like this be much worse with Rust and Cargo because of the fact it's not just a single dynamic library that needs to be reinstalled system-wise, but, instead, every binary would require a new release?
Makes me happy that at least someone out there is experiencing pay fairness.
+1 to this sentiment. You'll also run into similar problems if you need to request quota increases. For companies that AWS takes seriously they'll approve the requests in a few minutes. For startups they'll literally take days reviewing the request before some random person at AWS decides whether to increase your limit or not.
Spoiler: disenfranchisement is tactical. If serving all voters was a shared goal, we'd find it extremely easy.
if you click on the word shink in the article, it takes you to another article that explains boomers are retiring and they are a larger generation than the younger ones who will replace them.
One thing that is annoying is that many open source projects have been getting "garbage commits" apparently from people looking to "build cred" for resumes or such.

Easier and easier to hide this junk in amongst them.
It seems like this was the solution for archlinux, pull directly from the github tag and run autogen: https://gitlab.archlinux.org/archlinux/packaging/packages/xz...
If the US has such awesome national parks (and I believe it) then they don’t have to fly across an ocean to get that Yellowstone experience.