skysight-inc/HackerNews huggingface dataset:
As dictated by Italys legislators, not the EU
I read this idea many years ago (on this site) that really piqued my curiosity. The idea was that the universe is the inside of a black hole backwards in time, that is, that the big bang is the final evaporation and the heat death is the birth of it, and that our experiences inside it are what one would expect to experience inside a black hole but backwards in time. I forget the details, I wish I could still find it.
To my knowledge they've never been "blocked". Google simply didn't release them in the EU for a while.
Not yet. I was working on the standardization for C23, but this was postponed to C26, and has not much support. MSVC and SDCC liked it, CLANG and GC not so much.

Here is my bad variant of the feature, via confusables: https://github.com/rurban/gcc/tree/homoglyph-pr103027

The better variant would be to use my libu8ident, following UTR 39. I only did that for binutils.
I understand the frustration, but there is nothing preventing Google from adding a link to Google maps and other competitors in the search results.

I will personally love to see a link to openstreetmaps that tends to be more detail in my area.

This feels more like being evil, than trying to provide a good experience to the user and being nice. (Maybe they are working on that already)
So, companies can just not pay their employees? And employees can do whatever they want with no recourse by their employer?
We actually do know quite a bit beyond the labels. We measure excitation in neurons. We can tell from DNA sequence what kind of color blindness (if any) one has.
multiplies it by 2, not increases
I used to code with sublime and compile from time to time to check with compiler. Sometimes I’d go for an hour without running cargo and somehow it worked fine.

I have been doing rust since about 2016, in and out, and never questioned the approach but the tooling had improved dramatically in recent years.

I have switched to VSCode with rust-analyser and a few other extensions, which not only display errors but also types of variables which seems like a killer feature for me because it makes it so much easier.

I wonder what’s the motivation behind bacon given that it looks a bit outdated to program in rust this way in 2024.
Working for about a year in an environment that was exposed to high volume of malevolent IT actors (and some pretty scary ones) I’d say: discovery chances very always pretty high.

Keeping veil of secrecy requires unimaginable amount of energy. Same goes with truth consistency. One little slip and everything goes to nothing. Sometimes single sentence can start a chain of reaction and uncover meticulous crafted plan.

That’s how crime if fought every day. Whereas police work has limited resources, software is analyzed daily by hobbyists as a hobby, professionals who still do it for a hobby, and professionals for professional reasons.

Discovery was bound to happen eventually.

XZ attack was very well executed. It’s a master piece. I wouldn’t be surprised if some state agencies would be involved. But it also was incredibly lucky. I know for sure for myself, but also many of my colleagues would go into long journey if found any of issues that are flagged right now.

One takeaway is that chance of finding such issue would be impossible if xz/liblzma wouldn’t be open source (and yes I am also aware it enabled it in the first place) but imagine this existing in Windows or MacOS.
thank you for this inspiring story
My understanding is that that's correct. I'm on fully upgraded stable (Debian 12) and my xz is 5.4.2 and liblzma as well.
In Sweden all covers used to have holes in the upper corners.

Really easy, just stick your hands in and pull the duvet out.

Rumor has it thay IKEA stopped selling covers with holes at the top because lots of people came back and said they were broken. And now others are doing the same.

Using duvet covers is very common in Sweden.
ChatGPT is available in the EU. The only country it was blocked in was Italy due to Italian law, not EU.

Gemini is available in the EU. The EU launch was delayed by a month to implement the required regulatory controls.
This seems odd:

> Had somebody been able to foresee the popularity and success of ‘Star Wars,’ it would have been crazy not to save the grove where Endor was made and use it as a tourist venue.

This was not the first Star Wars movie. This was the followup to the most successful sequel ever made at that point, which was itself a sequel to the highest grossing film ever. So successful it was famously given a pseudonymous title to acoid attention from fans.

How could you not expect it to be remembered?
https://support.google.com/gemini/answer/14579026?hl=en
How about making ssh as secure as (or more secure than) the VPN you'd put it behind? Considering the amount of vulnerabilities in corporate VPNs, I'd even put my money on OpenSSH today.

It's not like this is SSH's fault anyway, a supply chain attack could just as well backdoor some Fortinet appliance.
But they only had two films to base it on; they would have had to make that decision a few months after the RotJ scene filming ended but before it released.
And presumably since the forest was privately-owned, somebody would have had to pay $$$ to acquire it then make it a park (and that somebody would have to be the state of CA, not Del Norte + Humboldt Counties).

In those counties the state already had RNSP (Redwood National and State Parks), a complex of one national park and three California state parks (139,000 acres; 560 km2). [0]

This makes me curious about the economics of when are the rare occasions it makes economic sense to use public money to buy and preserve popular movie locations on private property/land (as opposed to paying a premium for sentimental or tourist value). For example the famous 'Friends' apartment exterior in NYC is still private property. 'Shawshank Redemption' on its initial release bombed at the box office.
Scranton, PA has a self-guided tourist trail [1] for the US version of 'The Office'. Only rare places like Punxsutawney, PA [2][3] (the town 'Groundhog Day' is set in, although the film was entirely shot in Woodstock IL [4]) make $. For the hardcore tourists there's Tataouine, Tunisia.

[0]: https://en.wikipedia.org/wiki/Redwood_National_and_State_Par...

[1]: https://www.visitnepa.org/things-to-do/self-guided-tours/the...

[2]: "Groundhog Day: Punxsutawney’s Million Dollar Holiday" https://nation.time.com/2014/02/01/groundhog-day-punxsutawne...

[3]: Punxsutawney Phil’s town misses Groundhog Day boost (2021) https://apnews.com/general-news-d4a183fdd599322fb9b23a5cb214...

[4]: "Groundhog Days in Woodstock, IL" https://woodstockgroundhog.org/
This connects to a broader and very interesting trend in customer service, particularly around low value transactions.

We usually think of customer service as "the customer has an issue, the company understands, processes and corrects the issue."

However customer service is expensive, and a lot of the CS for low-end transactions has already transition to the model where "the customer has an issue, the company apologizes and rewards a consolation prize."

The issue may or may not get fixed, frequently fixing it will be too expensive. The important thing is that you get the free guac and are mollified.

This has happened to me as well and the customer service agent is often a sort of Frankenstein of a low wage worker plus a lot of canned text messages and a flowchart they are following.

Anyway if the model for customer service is that the company doesn't fix the problem, it just provides a consolation prize, maybe a pretty simple AI can do that. It just becomes another software system where they A/B test what model does the best job of reducing the company's costs while managing to achieve passable customer feedback, build in some fraud prevention heuristics etc. For better or for worse it's the end of customer service as we know it.
I’m curious, did it give you chips for free after telling you they were out of chips, or did it give you some kind of voucher for your next order?
> P.S. I actually run systemd-nspawn in production, but I am probably the only person on earth to do so.

Mind sharing some good practical introduction article or set of articles for using VEs (virtual environments) with it? I'm tied to LXD at this moment which manages to provide both ease of operational and ease of configuration fine tunings be needed. I.e. I understand and tested for the projects I do taking care about on how to have network bridges, resources limiting, snapshot/rollback/create new image for VEs, storage profiles (say some I want to put on BTRFS some on ZFS some ...), simple `lxc ls` and `lxc shell <VE-name>` interfaces - may be systemd has all this kind of stuff as well. Or may be it shines in different area?
Are American Ikea products not scandinavian pine?
So you're just here to troll, got it. Google delayed the EU release, it wasn't "blocked" by the EU at any point.
I don't see this method working very well for me since I always use duvets that are wider than the bed, which I thought was the norm. Same width as the bed makes for tug-of-war with the sleeping partner.

120 cm wide bed -> 150 cm duvet,
140-160 cm bed -> 240 cm duvet
Well, yes I'm here to point out the greenwash, and attempt to get people to think critically.

The problem with these "tree-planting" programmes is they're rooted in simple economic thinking. Mostly along the lines of "Area X is being cleared because my generous donors need to build a factory which will be good for jobs and growth" ... followed by ... "Well, let's plant trees in Area Y, which will offset the damage and give everyone the green warm fuzzies. Win/Win!" This is how they think.

Critical thinking means asking questions. What's the survival rate? What range of species? What are you doing to halt land clearing? etc. Because for every linear inch you think they give, they are taking a square mile and making money from it. Asking those questions is not paralysis, it's direct action, it's the start of actual accountability.

And the solution for any paralysis is simple: go plant a seedling (or fund some specific person who will).

Aside: I asked the marginalia guy if he could add something to his search engine, and he did (which was amazing!). I don't have a lot of money and I really wanted to do something for him, so I planted a seedling. I think it was $1. It's out there on my place, growing. It's Summer right now and I've spent quite a few hot days lugging heavy watering-cans long distances to keep it, and other seedlings planted at the same time, alive. In 10 years it'll be a tree (or dead, these things happen).
It has been ten days since the last commit was pushed to Redis
Many contributors are moving to the FOSS fork.

Is the original project dying?
You can smell the BS in such claims from miles away. 20 million jobs, really? Did they really take the trouble to analyse 20 million jobs, or did they just take a big number to make a mouthful? In reality, the authors did not even have 100 samples of some options. And that was based entirely on voluntary responses. What about controlling for other variables such as economic development or the effect of Section 174? Nope. What did the authors do about selection bias? Nothing. How about drilling down to a single example to see where AI has really replaced a coder? I doubt it.

What we are currently seeing is a poker game with huge stake. As Musk himself said, you have to spend billions every year, just to stay at the table. With such a massive investment but no certain outcome, hype and BS is spewed everywhere.
Agreed, but I think that Google is also trying to create outrage against the DMA (or is it DSA in this case?) by complying in the most annoying way possible - “here is a map, but you cannot click it because EU”.

Similar to the browser choice screen in iOS, they could also direct you to a page where you select your map provider, which would then be remembered for future map clicks. This doesn’t disadvantage Google Maps competitors and does not introduce this annoyance.

(The right answer now should not be to bash the EU, but to move to another search engine that cares about their users more than making their lives more miserable out of spite.)
French tourists are always asking about the "blue house" in San Francisco, to the bemusement of the locals. Cf. https://en.wikipedia.org/wiki/Maxime_Le_Forestier
What led to continuous investigation wasn't just the 500ms pause, but large spikes in CPU activity when sshd was invoked, even without a login attempt.
A favorite more recent fact about this of mine: You might have heard about reddit's several early influxes from other websites as metaphorical eternal septembers, but did you know they had a literal eternal september just over a year after the release of the official mobile app? Check out the inflection point: https://subredditstats.com/r/teenagers
He wants to expose himself to the arena but doesn’t want to spend any time. Unfortunately, experience can’t be poured through a funnel.
How out of touch are you? no offense, but if you don't see the game that Google is playing with these childish shenanigans, I don't know what to say - it's politics.

And of course the regulation of AI is also extremely important. The US government is doing the same thing, but 10 years later (see the recent antitrust case against Apple).
Lucky the XZ license switched from "Public Domain" to 0BSD in February (just before these 5.6.0 and 5.6.1 releases)!

0BSD has no clauses, but it does have this:

> IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
Maybe you should learn from her. Updating your position on something when you get more knowledge is laudable. Instead of digging your heels in.

I wonder why you mean she's incapable of making her own decisions? I hope it has nothing to do with her sex, but I do feel it's weird how you and others in this thread are very quick to dismiss both her and the women scientists not wanting to use the picture. It paints a picture..
Yes and its the same author this time published on the Gradient (the link before was to the personal blog). The Gradient by the way are amazing curators of AI news in general and have one of the better podcasts I am aware of interviewing developers in the trenches.

Adding: this resurgence in Mamba in general is also due to some actual sota progress with SSM like the new AI21 lab released this week [1] and likely to see others merging different architecture layers (this is a 52B MoE with 12B params active during inference blending both Mamba and transformers)

>As the first production-grade model based on Mamba architecture, Jamba achieves an unprecedented 3X throughput and fits 140K context on a single GPU.

[1] https://www.ai21.com/jamba
>Did Google even know they were going to be an ad company back then?

Yes it was even listed on their IPO prospectus. They knew very early on it will be Ads. The only thing no one knew at the time was how big is the online ads market.

>and I don't think anybody actually realized just how well you would be able to target advertising by systematizing all the world's information

There were plenty ( including myself ). But no one gives a damn about it. Google's privacy issues were later reported in 2006 / 2007, and Steve Jobs went on to put more fuel into it, or I would even argue kick started the whole privacy angle in Silicon Valley.
Repent ye sinners kind of thing? But I agree anyway.
You don’t need vouching for anyone. mDL is going to be a mechanism to have a government authority vouch your identity. Of course a state actor like this can forge the identity, but that forgery at least will give a starting point for the investigation to try to figure out who this individual is. There’s other technical questions about how you verify that the identity really is tied in some real way to the user at the other end (eg not a stolen identity) but there are things coming down that will help with that (ie authenticated chains of trust for hw that can attest the identity was signed on the given key in person and you require that attestation).

As for people accusing you of an intentional RCE, that may be a hypothetical scenario but I doubt it’s very real. Most people have a very long history of good contributions and therefore have built up a reputation that would be compared against the reality on the ground. No one is accusing Lasse Collin of participating in this even though arguably it could have been him all along for what anyone knows.

It doesn’t need to be perfect but directionally it probably helps more than it hurts.

All that being said, this clearly seems like a state actor which changes the calculus for any attempts like this since the funding and power is completely different than what most people have access to and likely we don’t have any really good countermeasures here beyond making it harder for obfuscated code to make it into repositories.
> Help in maintainship how?

Pay.
Maybe I am projecting German labor law onto this, sure. But I suspected that, if anything, German labor law would be more accommodating to employees. If you are correct than I think that I'd wrong though and the law actually favors employers quite heavily, who actually have demands of you that you have to contractually agree to.

>If there are employers out there that do this. Their priorities are not on delivering a usable product but using other people to make themselves feel better (surrounding themselves with yes people, lol)

This isn't something an employer or employee decides. My contract is essentially a single page stating my salary, days of and saying that labor laws apply. There is no actual alternative I have.
Seccomp can't really do this... at least not without serious hacks. I've tried. There are at least two big issues:

* Seccomp intercepts syscalls, and paths are passed to syscalls as pointers. So your code that has to decide "is this syscall allowed?" doesn't get the path, it gets a pointer to a path in another process's address space. That means you have to then pretty much debug that process to find the string. However IIRC there are potential races between when you read the string and when the kernel does.

* Symlinks mean you can't just do a lexical check on the path. Hell you can't even lexically normalise it (remove all `../foo`) because symlinks are crazy. For something like creating files/directories IIRC you have to walk up the path starting from root and read every directory from disk. Like open `/foo`, ok? now open `/foo/bar`, now `/foo/bar/baz`...

Total nightmare. Landlock is much saner for filesystem sandboxing.
must need to verify your email to use it
I do love the meta irony of people finding this and posting it as if it's news....
(a) I'm all for more widespread attempts at capability security*

(b) failing that, an alternate approach to the problem of deep and wide supply chains is vertical integration: just spitballing here, but we're programmers (and these days, it's even claimed we have AI support); is it too much to ask that most of us ought to be able to code up wheels that roll?

* free market mechanisms, at least as currently implemented, seem to me much better at figuring out how to compensate people after something bad has happened than at preventing it from happening in the first place.
> That'll be one hell of a hallucination if an LLM said it.

And it's also an hallucination when you say it, given that it's not even close to the issues raised and just a straw man.
It works fine in Italy. ChatGPT just had to comply with local privacy regulations (EU's GDPR) and for a few weeks it was off. They were interested in doing this because other countries could have made a case against them, it's just that Italy was the first to move.
How captured the consumer base is by these monopolies. Thread full of people angry at the EU for Google's malicious compliance.
Ireland taxes income and capital gains very heavily, and has some truly obscene structures like deemed disposal (taking 41% of your _unrealized_ gains in ETF's). I remember how much it stung handing over 52% of my options to the government so they could waste it on being stupid and incompetent.

They even have a history of going after people's private retirement savings after the fact - https://www.oireachtas.ie/en/debates/question/2024-02-22/119... - and I have ZERO confidence they won't simply steal people's retirement savings when convenient. How else are they going to bail out the farmers destroyed by climate change? (See the IFA's recent complaints about the "weather" that they caused)

""" It was charged on the market value of assets in pension schemes held on 30 June in each year at a rate of 0.6% (2011 to 2013), 0.75% (2014) and 0.15% (2015)."""

Not to mention that the companies handling retirement plans, etc. have gotten used to ripping off the whole country for ages because there were no better options. Want to put €100 in to a retirement plan? Well, we're going to take €5, just because, and also 1% of your investment every year, all so we can underperform a simple index fund (thankfully you can't invest in good index funds in Europe because the US ones won't file a KID form).

BUT! Your primary residence? You can sell that for 10 million more than you paid for it and not owe a cent in taxes. Too bad for all the chumps who rent and have to invest in the market!

I wonder why everyone puts their money in houses? It's an absurd ripoff of a country in every way.
Facebook is not removable from many android devices... does this mean Zuckerberg has been seeing all user traffic for years regardless of tls?
Are the comments just bots, or do they really believe that the EU said “Google can’t put a clickable link on the Google search result!” like that?

Google chose to do it this way.
As a young person I had a job at a computer repair shop. I might have been 19 years old. They did a 1 day working interview. I impressed them heavily with 10 repairs in the day, all of them solid and billable. They hired me. I was alarmed when they also hired a guy that blew up a customer's motherboard by plugging in the PSU cables incorrectly (This was the in the mid 90's).

It went downhill from there. I became the target of a lot of bullying and harassment from the alpha jackass, leader of the coked up jackasses that worked there, and eventually he gave me a degrading nickname that implied that everything I touched broke.

I was constantly stressed out, felt like the worst employee in the world (at that age I didn't know I was the victim at this point) and this self-fulfilling prophecy just made things worse. Suddenly I'd become bad at my job. I couldn't fix 5 computers a day, and they often came back with problems.

Was this issue me? No. the issue was a highly toxic workplace where I was berated for my successes ("Oh look, he fixed one, must be a F****n miracle") and expected to fail.

I'd have quit, but I needed the work. The manager, a lowlife cokehead and strip club aficionado, mercy fired me 2 months in. He saw the problem but didn't care to fix it. Of course, I was better off. They were a crooked shop to begin with and my reputation was at risk for having worked there even 2 months.

Many years later I am a well respected manager who never treats employees like this. I am well aware that if my employee is failing me, then in some way I am failing them. I work on the relationship with the employee as much as I work on the issue. I encourage their successes, help them work through any issues, and show confidence in them until they start showing confidence in themselves.

I can honestly say this approach has worked wonders, and I've seen huge HUGE turnarounds in employees who thought they could never make it. Now they're rock stars.