skysight-inc/HackerNews huggingface dataset:
If the RCE is Russian, it could be used a communication kill-switch on the morning of an attack outside Ukraine, similar to the Viasat hack https://en.m.wikipedia.org/wiki/Viasat_hack
You are quoting Jia Tan [1]. The malicious actor wrote that comment when deliberately breaking the check in the first place.

Fixing headers or extra tests would not have prevented this, as there is no indication the headers were broken in the first place, and extra tests could have been compromised (or ignored for release tarball) some other way.

[1] https://git.tukaani.org/?p=xz.git;a=commit;h=328c52da8a2bbb8...
oh ok then me dont have sex anymore
Data lakes are still the standard in the industry.

And that won't change so long as object stores like S3 are so much cheaper.

And what exactly is wrong with GraphQL ? It is better than REST for a number of use cases.
Carelessness could arguably a part of operation: testing/probing how thoroughly the community scrutinizes communication from untrusted individuals.
> You know your password and so does the system authenticating you.

Nitpick, but no it shouldn’t.

The HASH of your password is recorded. You never submit your password, you submit that hash and they compare it.

The difference is that there is no two passwords that collide; but there are hashes that may.

And that two equal passwords from two equal users are not necessarily accessible to someone with the hash list because they are modified at rest with salts.
> Several fast-food executives have suggested prices would go up 2.5% to 3.5% to offset higher wages; Jack in the Box, Starbucks, McDonald's and Chipotle have all warned of upcoming price hikes.

So I guess a frapuccino would go from $4 to $4.12.
How does the author know that Midjourney was partially trained on LAION-5B?
This is a very fair point! If we had infinite compute then it's undeniable that transformers (i.e. full attention) would be better (exactly as you characterise it)

But that's the efficiency-effectiveness tradeoff that we have to make: given that compute is limited, would we prefer attention over shorter sequences or SSMs over longer sequences? The answer is probably "well, it depends on your use case" - I can definitely see reasons for both!

A fairly compelling thought for me is hybrid architectures (Jamba is a recent one). Here you can imagine having perfect recall over recent tokens and lossy recall over distant tokens. E.g. if the AI is generating a feature-length film, you "could imagine having Attention look at the most recent frames for short-term fluidity and an SSM for long-term narrative consistency" (quote from the OP)
You could in theory behave in exactly the same way without inner subjective experience. The argument goes like your brain gets exactly the same signals and processes them in exactly the same way, and initiates exactly the same actions, except you are not experiencing anything. Imagine a robot that gets sensory inputs from the world and processes them in some giant neural network brain and behaves very similarly to a human, and even claims that it is feeling things. Is it really feeling anything? So far we have absolutely no way of answering that question.
I noticed that at the time.

As an aside, I'm quite shocked by what has happened to the property market in Australia since (particularly Sydney). It stands in stark contrast to NZ. I'm pretty confident that it won't continue this way for too much longer. A recent new report suggested the majority of recent sales in Sydney were to cash buyers. How long can that last? The higher rates will eventually have an effect.
>> I feel hopeless when problems are not being addressed.

So, start addressing them. Stop waiting around for everyone else.
Marry someone else who makes good money as well. Get a condo or starter type home, build equity then try and get the forever home.
> sysadmins are cheap(er?) than clouds, use them

This is just another lazy take.

There are many reasons why companies move to the cloud. Cost is not the only consideration.
In canada's case. This was not the thing at all.

It became a trend in china's rich circles to invest in canadian housing market as way to hide money from ccp and to flex your wealth.

Chinese new money are prone to trends, and at scale it can have terrible results for city like Vancouver - quick google - "Chinese homebuyers accounted for nearly one-third of Vancouver's real estate market during 2015"
Advertisers could remove some of this heat by being more approachable, less imperious.

For a while last year, I was getting a lot of ads in email newsletters for some Qanon-adjacent clothing, can't remember the company. I tried to figure out who to ask to get my ad preferences reset, I'm NOT going to buy copyright violation The Punisher logo clothing, and maybe they should send me a variety of ads from multiple companies, rather than one ad from one company so many times.

The ad server was LiveIntent. They provide a web form for comments, there is literally no other way to inform them of hideous mistakes like getting one ad 5 times in one newsletter. No phone number, no postal mail.

So I dutifully filled out the form, once per newsletter with Qanon clothing ads. Not once per ad, of which there were 3-5 per newsletter.

After a few weeks, LiveIntent's form quit accepting gmail.com addresses. I got no communication from them. So I switched to using a mail.ru account I set up years ago to perpetuate a joke. A few weeks of one complaint per newsletter and LiveIntent banned mail.ru addresses.

Now I'm working on blocking LiveIntent completely. I've DNS blackholed sli.washingtonpost.com, and sli.thedailybeast.com. I am still getting a few liveintent ads in the Gmail app, gotta figure that out.

The point here is that LiveIntent earned my dislike forever by not responding at all, just shutting down the one wimpy comm channel available. Targeted ads, my ass. Death from above and you'll enjoy it, is more like it. LiveIntent is just a pack of psychopaths like early Usenet spammers. They want to externalize the cost of ads and they don't want any complaints.
It may be hard for him to re-establish trust. Maintaining xz for more than a decade then doing this would be quite a "long con" but if HN threads are any indication, many will still be suspicious.

His commits on these links look legit to me. It's a sad situation for him if he wasn't involved.
We'll also see more performance pressure from managers of the affected workers, and more wage theft, e.g. pressure to put in time "off the clock".
And given that the compute is O(n^2) with context window, it's a very real tradeoff, at least in the short term
Rising prices will usually indicate a supply shortage, but for property there's also the element of speculation.

In contrast, rents are a more reliable indicator of a shortage, no speculation there.
That's true. And VW needs to allow other brands to use this technology. It will make life easier both for drivers and the animals.
First Neuralink patient plays chess with his mind (video)
Does autotools compile only, or try to link? There's no main().
I like it too!
Ask HN: Wa-SQLite vs. Dexie, 2024
The word on the street is that https://github.com/rhashimoto/wa-sqlite is nearly production ready, closing in on the neat 1.0.0 release, with its IDBBatchAtomic engine highly recommended at https://www.powersync.com/blog/sqlite-persistence-on-the-web. You can try out the benchmark https://rhashimoto.github.io/wa-sqlite/demo/benchmarks.html.

And the other contestant is Dexie, stable https://dexie.org/.

If you were to branch into a new venture today, which one would you pick? And why?
The point was the profit margin on both the blindness drug and AMD CPUs are significantly higher than for ozempic.

So why target ozempic for too high a profit margin?

Caveated with its the health insurance industry is paying that profit margin - not the people who _should_ be taking it.
He does seem to have a pretty good take on the bigger picture.

What it means for me, is to pay close attention to anything that looks like another round of QE. I'm sure it will happen, just a matter of when and how much.
I absolutely did include explicit problems with systemd in my post. And I wasn't hyperbolic, what systemd is not explainable by any rational thought. If you want to tell me why your init system should also be an fstab and a DNS provider go ahead.

I criticize systemd because for months my full time job was dealing with it. I suspect the minority of systemd haters are actually people like me, who actually had to do non-trivial things with it and realized how bad it is, if you actually have to do things with it.

Hating systemd is sort of a joke in certain Linux circles, where "Unix philosophy" and "minimalism" are tossed around. I don't really care about that discussion. Systemd is awful by any philosophy which aims to provide good software, for almost anything you can fill the word "good" with.
Tumbleweed has a package: liblzma5-5.6.1.revertto5.4-3.2.x86_64 FYI
Fidelity cuts value of X stake, 73% decline in Twitter since Elon Musk takeover
Yup -- the Valley has been around long enough to get infected by MBAs. Even executives who have an engineering background get their brains eaten by this b-school mindset, where every worker is a cog who falls into performance buckets. Once you internalize that outlook, of course the answer to every problem is more process, more structure, etc.

Naturally the MBAs themselves are indispensable, irreplaceable, special snowflakes.
...and then we start simulating human interactions to get a better understanding of the impact of campaigns, the effectiveness of advertisements, etc.
https://web.archive.org/web/20240330165204/https://www.newyo...
> None of those (hallucination maybe) are relevant, if it's good at automating misinformation, surely it can do useful work as well.

Filtering out the truth is the hard part. If you just want data and don't care about quality there's always /dev/urandom.
How good is your vectorized execution engine at dealing with a handful of storage nodes going down for an hour or two? Or figuring out when bit flips have randomly happened? Or at sharing resources with latency-sensitive serving jobs?

"Custom user defined operators" did a lot of heavy lifting at Google over decades.

The set of appropriate use cases is getting smaller, mostly due to sql-ish systems scaling up towards what could actually (and frequently, only) be done with MapReduce/Flume.
I recently found out that git rebase has a --exec option that allows you to execute a shell command for each commit. If the command fails, the rebase pauses and allows you to make changes to make the command pass. I use this to make sure that there is no commit that leaves my project in an unbuildable state.
Regulation has hit insulin pricing.
https://www.whitehouse.gov/briefing-room/statements-releases...
The price is not set to solely recoup the development cost. It's set to produce a profit. Secondly, Novo has probably made sales for around 80-100 billion dollars for Wegovy and Ozempic at this point. Given that 20%-25% of that are from sales in the EU, that's somewhere along the lines of 16-25 billion dollars, more than enough to recapture the cost of development already

The price in the US is higher because the US has created a system, that prioritise corporate interests above that of the individual. The price of these drugs are low in Europe because the population fought for affordable healthcare (among other things)

I definitely think that the price of healthcare in the US is excessive, not just the price of Ozempic. The reason for that is not that other countries are free-riding, but because the US voters continuously have voted for politicians that put corporate interests above those of their constituents

Healthcare providers in the US are free to band together to improve their bargaining power when purchasing drugs, just like most countries in the EU does

That'll however require that the US starts electing officials who actually work in the interest of the public
The past also screwed up a lot. At best their effort is a wash, still leaving little reason to deify them through intentional conservation of their legacy.

I’d qualify your default less literally; solving their problems with recursion and memoization

There are billions of people preventing implosion, none of us are an island unto ourselves. But since you bring it up…

If it goes bad for me, so what? Been there already; had to be zapped back to life. It all just goes dark. Quite peaceful relative to daily life, really.

On the upside, along with stem degrees, I spent my youth in farmland slaughtering and growing my own food, fixing heavy machinery. IMO one of the elders biggest mistakes is helping so many avoid the real work required to survive. I’m no Dick Proennekke, but neither are all the office workers who can’t even bake a potato let alone grow one (first hand experience with that; that was a very short romantic relationship).

Makes this economy that much harder to adjust and will probably just collapse given the lack of elasticity due to so many with so narrow a skill set.

Adam Smith is claimed to have written (paraphrasing) extreme division of labor will lead to humans as dumb as the lowest animal. I think this economic experiment has proven his 200 year old quote.
You'll be suing Forbes for libel then, right?
I recall it being horrifically slow, and uninstalled shortly after.
I'm running it locally on my M1. The reference voices sound great, trying to clone my own voice it doesn't sound remotely like me.
Your SSH public keys used on GitHub are very publicly exposed.

This information could be used by SSH servers you are connecting to. You might think you are connecting anonymously, while in fact your SSH client is sending your public key which could then be resolved to your GitHub account.
I really like how the author enumerates and links to his most important sources right in the introduction.
I can also simulate earth it all depends on the detail.
I don’t understand. All work is completed for the day (or even the next couple of days…).

What’s the point of staying logged into a computer staring at nothing?
> ...if it's paired with government policy that doesn't discourage growth...

Well, exactly. Bringing in large amounts of immigration to support an economy that that largely revolves around property transactions will contribute to an increase in property prices but will drag down GDP per capita and drive up infrastructure costs. This is NZ.
Okay, riddle me this: I have a systemd unit which creates systemd mounts. Will these mount points be mounted if they are enabled and started?

Does it matter if there is a systemd daemon reload in the unit file after creating the mount units?

Other init systems are just shell scripts calling shell scripts in some order, it is very easy to reason about that. Obviously it would work.
First time hearing magnetic have waves
This is why I moved to the city instead of buying a piece of shit sfh out in the burbs.

walk to my fav pub, and fuck around. Or even better take a walk around the city parks and enjoy the views in the middle of the day. Maybe even get more exercise in for the day or walk the dog.
(By destroying it using tons of hydrocarbons to do so)
Definitely, yes!

John Regehr has a nice tutorial, https://blog.regehr.org/archives/896
They are still sold on eBay, with the same photo.

https://www.ebay.com.au/itm/264733347144
I'd really like to see something like this and have thought that an online publishing engine which would produce HTML, ePub, PDF, or other output formats or endpoints on demand might be useful.

There are sites already which provide some form of this, notably sites using MediaWiki (which notably powers Wikipedia and Wikisource) offer multiple download options, though I don't think it's quite as flexible as I'd prefer.

Client support would be the other factor, with current Web browsers not being particularly multi-format. Though to be fair, Firefox, Safari, and Chrome all now natively support PDF documents.

I suspect that a render-to-ePub would be a much better alternative to standard HTML for mobile devices. ePub is inherently fluid, and tends to offer a subset of full HTML capabilities. (ePub is of course an archive of HTML, stylesheet, and other elements, though usually it's more strongly textually oriented than the modern Web is.)

For sufficiently large tablets, PDFs are actually a quite good document format.
2-3% x 2 billion = 40-60 million

Canada's immigration rate is high, but not as high as 40-60 million newcomers in 5 years.
Yep, funny enough I have a Macbook for work (company laptop) and I also stumbled upon Maccy. You're right in that it's not Ditto but it's quite good and I'm overall happy using it.
Two days isn’t even a break, it’s just necessary time to catch up on the work of maintaining a household so you at least start the work week not living in a falling-down house full of dirty clothes and garbage.

Especially with kids.

WFH helps a ton with that, though. Can make dinners during the week instead of prepping on the weekend as much (do most of your mise during a meeting or something), don’t lose time to a commute so there’s more time to get stuff done during the week, get a couple loads of laundry run when it’s time to stand up and stretch and look away from the screen for a few minutes anyway, et c. It saves the weekend for actual relaxation, or at least more of it for that.
It is code, but it runs on human wetware which can decode input about actual events into output about intent, and reach consensus about this output via proper court procedures.
Rents go down under pretty much one circumstance: demand drops. People leave an area, or local economics suffer so people double up in housing, or people die.

If there are any examples of times/places where rents have fallen in nominal or real terms, they will almost all coincide with this kind of demand drop.

Supply-related rent drops are theoretical and almost never happen in real life. Supply is important anyway, because otherwise rent growth accelerates faster, but the market will almost never supply housing to the point where rent change is negative.
Well that might be the case but I am not sure why that would preclude designing your society for human flourishing rather than siphoning resources to an unelected few.
Or even ... life hacks.

</ducks>
The distro-provided Python packages are usually still build from the source on PyPi as uploaded by the maintainer, not what's in git.
Nope and nope (unless you're generalizing MapReduce to "stuff that splits up work and combines the results) ;)

Scaled, distributed joining has a small army of techniques working hard these days.
Event Horizon Telescope reveals magnetic fields around Sagittarius A*
like a more (ostensibly) malicious “goto fail”
In my experience its's less about caring what people specifically think of you, and more about how you are treated in whatever team you're on.

Example: I made a trade from a key role to a dev role in one job change. In dev role I was working with a technology I had significant experience with in my prior "key" role. In the new role, when the topic came up, I suggested we avoid certain vendors since in my prior role I was responsible for the technology vetting and I determined the chosen vendor was not forthcoming with some important limitations. My feedback (constructively and succintly presented) was completely ignored since I was "just a developer" and I ended up having to make the sub-par technology actually work.

It was frustrating and painful, not because of ego, but going into the task knowing it would suck since the wrong decision was made and now I was the guy having to make broken pieces meet some demanding requirements because "a developer" couldn't possibly know more than an "architect".
Thanks for sharing your list; I already use many of them but learnt about a few new ones that I'll try. I second Everything, the best, nifty little, Windows search utility that is blazing fast.
The reason Rust has both Arc and Rc types for reference counting is precisely because most of the time when you need reference counting, you do not need thread safety. This is something I think about all the time in C++ when I use std::shared_ptr: it gives me thread safety using atomics but I don't need it.

More languages should distinguish between thread safe reference counting and single-threaded reference counting.
Strictly speaking, rents (for long term rentals) can be an indicator of a shortage of available housing, but not necessarily a shortage in the total housing stock.
From the Declaration of Independence, which doesn't have legal authority per se but is revered as one of the country's foundational documents together with the Constitution:

>We hold these truths to be self-evident, that all men are created equal, that they are endowed by their Creator with certain unalienable Rights, that among these are Life, Liberty and the pursuit of Happiness.

Pursuit of happiness includes having the right to try running a business and making it successful.

And from the Constitution, its preamble:

>We the People of the United States, in Order to form a more perfect Union, establish Justice, insure domestic Tranquility, provide for the common defence, promote the general Welfare, and secure the Blessings of Liberty to ourselves and our Posterity, do ordain and establish this Constitution for the United States of America.

The establishment of justice, promoting the general welfare, and securing the blessings of liberty by the people for the people means the government cannot prohibit someone from running a business without following due process and citing due causes.

And as a catch-all, from the Ninth Amendment:

>The enumeration in the Constitution, of certain rights, shall not be construed to deny or disparage others retained by the people.
The spam filter is going downhill now too
Yeah nobody ever goofed off in the office. Never happened.

Honestly if this person does all their work and does it well and just works really fast, that’s great. I’d keep them. Performance matters not hours.

If they’re fucking around and underperforming they’ll eventually get laid off. Don’t see how their work location matters that much either way. Someone who sucks at home probably sucks in an office too.
Idk if this is still the case but back when I tried the built in clipboard history when it was first released, it didn’t handle formatted text well, nor did it handle multi-media particularly well, if at all.

One of the best parts about ditto is that you can choose to paste with or without formatting
> Prebuilt binary blobs [1]?

My understanding is that the binary blobs were test data. Find a bug that happens on certain input. Craft a payload that both triggers the bug and does the malicious thing you want to do. Add the binary blob to /tests/files/. Then write a legitimate test to ensure that the bug goes away.

Then do some build script bullshit to somehow get that binary into the build.
> Just waiting for Google to demand that the user turn on camera and microphone in order to read mail.

That'll be to better secure your account with your biometrics
That only works for language features though, it doesn't allow detecting OS/library features.
Might a time-sensitive high-priority goal override such reasoning? For example, the US presidential election is coming up. Making it into Ubuntu LTS could be worth the risk if valuable government targets are running that.
> The seller's feedback (below) shows a lot of complaints about fake chips. Even so, the seller's feedback is 99.2% positive, so I suspect that there are just a few fake chips mixed in with many types of real chips. It's also possible that most vintage 8086s are purchased by IC collectors who never test the chip.
Oh, very good question - tbh im not sure. Another close technique is layer offloading - if your network can't fit and has layers 1, 2, ..., 32, we offload layers 16 to 32 to RAM, then load them in to GPU memory on the fly.

I'm gonna guess the performance hit is similar - although I have not tried it myself to verify for benchmarking