skysight-inc/HackerNews huggingface dataset:
As a cynical idealist, I once tried to find 1 country of decent size that could escape the poverty/mis-governance trap while being a democracy.

I found zero success stories.

Every 20th century economic success story was a defacto autocratic nation. They only transitioned to democracy after they'd reached a certain level of development. (I excluded preexisting high HDI nations and ones that accidentally hit mineral gold)

It's similar to how commitees have never built successful startups. At the early phases, you need a decisive and singular leader.

I continue to be on team democracy for poor nations. But I'm well aware that data is not on my side.
you're missing the point I think. if the first pill wear charged a billion dollars, the ones after could go for $5 each. same argument for Adobe.
Nothing works that way. Any politician could dodge criticism by saying "I don't myself depicted in that particular way".
If the audience grows that is precisely what this hypothesis would predict.
If unreachable objects point at each other, that's only a problem for refcounting, not for tracing (their pointers aren't followed).
Society isn't to blame. It's more like society is a multi-cellular organism. The reason it exists in the first place, is because individuals find that working together is typically better than not, but at times, it's possible for cancer to happen. Functionally, cancerous cells are those which take more from the society/organism than they give back to support it. If it gets too bad, there's not enough resources going to those who support the society/organism, and so those that support it die off, along with the cancer/society.
Does anyone understand the rationale for only applying this to fast food workers?
Just for reference this is an exception, not the norm.

1pm is when my meetings end (to the extent that I can control) and I can get to work on my real work for the day. This includes meeting with fellow independent and competent developers to ship features. Our software is also in high demand
Employers almost always pay you for working an average amount each week, anything else is extremely rare. Alternatives are usually common for self employed, but then there is no employer.

If he self reports weekly hours or they are just assumed he is commiting fraud. If he correctly reports his worked hours his wages will obviously get cut to represent the hours worked and lead to swift termination as he is violating the contract he signed.
This is a good point. Wasting lots of people’s time is quite a bit worse than completing all your work to your employer’s satisfaction but not twiddling your thumbs for a few extra hours, so we shouldn’t use the same terms for the two things.
I could be wrong, buy my understanding is that it isn't even a door. It simply allows anyone that has a certain private key, to send a payload that the server will execute. This won't produce any audit of someone logging in, you won't see any session etc.

Any Linux with this installed would basically become a bot that can be taken over. Perhaps they could send a payload to make it DDoS another host, or payload to open a shell or payload that would install another backdoor with more functionality, and to draw attention away from this one.
> And what exactly is wrong with GraphQL ? It is better than REST for a number of use cases.

When a response is a representation of a single resource, that response has a definitive caching lifetime. When a response represents a synthesis of a bunch of random crap the user asked for, the response has no clear caching lifetime, and so is uncacheable.

Most of the scalability the web has achieved, rides on the back of response caching at one level or another. Even low-level business-backend vendor APIs can—and are often designed under the assumption and requirement of—being cached. GraphQL throws that property away.
Look at the current Commercial Real Estate collapse, e.g. Canadian pension fund sold its stake in a NY office building for $1 recently, and that's just the start. That's the why for public policies of forced RTO.
In terms of cultural knowledge, it does seem like certain things were taken for granted by previous generations and not handed down in ways that younger generations can manage.
Fun fact: the main reason it was legalized in New Zealand was heavy US pressure and lobbying over trade agreements and there’s been substantial pressure to get rid of it since then.
I think every "era" had a new piece of technology which the previous generation wasn't born with but a subset was both young enough to have and old enough to start creating something.

So if now it's ubiquitous computing ans GPS (as the OP mentioned), in the past it could have been having a PC or even a computing machine at all. And next it could be having personalised LLM for every little thing imaginable.
Yes. No trillion dollar company can tell me to work for them. If they want to employee me I have all of the bargaining power I could possibly have.
> No. It is factually true. You refuse to meet your contractual obligations towards your employer, but represent to him that you have met them. That absolutely is "fraud".

I wonder if you're referring to jobs outside of the U.S.?

Salaried software developers in the U.S. typically don't have actual contracts.
I have a decent time if I use in painting with enough hand drawn scaffolding. I think the best uses of these technologies is adding complexity to a drawing you’ve already created. Anything else doesn’t impose enough constraint to get control if you have a specific idea in mind.
It is. But I'd argue it's a net win in that alcohol is far worse for you.

I'm doing quite well in this regard. I have low-level chronic pain and it did wonders there too. Took it for years and only recently have stopped to do a reset/reevaluation. Tapering/quitting was rapid with the only impact of sleep issues for a week. It was definitely worth it.
This is cool! I built something similar but it's CLI based. https://github.com/lifeiswilde/textract-ai
Found it early?..

I found the backdoor on five of my Vultr servers as well as my MacBook Pro this evening. I certainly didn’t catch it early.

So if that’s the state of it, it could very well be too late for many many companies. Not to mention folks who rely on TOR for their safety - there could be entire chains of backdoored entry, middle and exit nodes exposing vast numbers of TOR users over the past month or so (spies included!).
The lowest common denominator is always to blame the “others” who are not “us”.

I’m a white immigrant and on multiple occasions to my face people have said horrifically derogatory things about immigrants. When I mention I am one, they very quickly say “oh, not like YOU”

Uh huh.
I have to go to the office in my town to work remotely with my teams in New York and India. I sit at a desk and code all day. Everyone around me works in some other department/team and I never engage with them except maybe in the break room. What is the point of this requirement? I don’t know but it’s making me search for a new job
An effects pedal for your mouse and keyboard [video]
> when the transition has largely already happened

No it hasn't. Run `git init; git status` and see what the branch name is.
What about #1b: you have an overly-complex "system", but most of that "system" is serverless (i.e. managed architecture that's Somebody Else's Problem), with your own business-logic only being exposed to a rather simple API?

I'm thinking here of engineering teams who, due to worries about scaling their query IOPS, turn not to running a Hadoop cluster, but rather to using something like Google's BigTable.
Pretty sure this is part of uBlocks standard features.

Honestly it's getting a bit too noticeable how a full-featured adblocker is converging on just a way to let the user take back control over the user agent.
> Utter trash. She was spewing out garbage 6 years ago that we would be taking point-to-point rocket transport within a decade. SpaceX has blitzed 2/3 of their public cash to the latest launch which failed 60% of the mission but everyone cheered. Time is ticking to bankruptcy and with it, the wholesale write-off of space missions to the tax payer when support has been increasing.

I think you will find that it was Elon who made that outlandish claim, she merely towed the line in public, as a COO would, knowing full well that such a time-line (often regarded as Elon-time) was entirely absurd and made it clear if you follow her work.

In short, if you think these claims came out of her mouth, you're both uninformed and entirely ignorant to how SpaceX actually operates--Elon may hold the CEO title, and granted himself 'chief engineer' (haha, cosplaying at it's best) but the reality is that it was Gwynne's leadership and key connections and experience within aerospace and auto industry (the two often overlap) that has made SpaceX what it is today.

Bankruptcy? You do realize the war happening in Russia makes Souyuz a no-go forever, along with constant aborts [0], and makes SpaceX the only resupply/crew vehicle, right? Not to mention Starlink, and the Artemis mission(s).

Also, non-IPO SpceX stock go at insane premiums if ever sold by employees (a major part of TC) and company's who hold this stock also trade a high premium just because of this fact.

> If you are shit talking, have some balls, and do so from your real account instead of creating one to hide your arguments behind.

Talk about being entirely out of touch here, to the point the it's really embarrassing.

0: https://apnews.com/article/russia-launch-space-station-abort...
It’s not entirely clear from the article, but the part about rcu_defer() is not just a ”what if?” segue into GC, it’s how RCU is typically used.
Gang crime seem to be a common weakness of democracies. There's a notable list of countries that had to resort to elect a quasi-dictator to get rid of gangs. As my hometown is coming to grip with a bubbling gang war, I wonder if there is a better way.
Was it a good class overall?

I.e., was it an educational win to have him as a teacher despite his Fridays policy?
Ssh is shell, whereas wireguard is a vpn.

You will still be vulnerable as you can connect to an ssh server through your wireguard tunnel.
State actors get to invent people. Literally.
Goofy question, but what stops any restaurant in CA from just running out and buying a $200 bread machine?
IME neither inside out nor the method you describe work well and both are tedious. Inside out does not work well, because the cover doesn't obey gravity and refuses to fall down to cover the duvet completely. It is a secret power of bed sheet covers. That, or it has to do with other things like friction.
That works but it is hard to use that technique on king size duvet. I essentially use the technique described in the article by starting with the cover turned inside out on top of duvet, tying all corners and then reaching through the cover opening for the far side and pulling it in instead of rolling and unrolling.
I think main issue was that it was embedded in the file itself like that. Would have preferred to have it in a separate valid C file with syntax highlighting etc and being parsed from that file.
Same. If I'm listening to music with something other than Winamp (and the default Classic skin), I feel weird.
No, as far as I understand the binary files must be pointed at here: '$gl_am_configmake' ... But I don't see how.

This: 'gl_am_configmake=`grep -aErls "#{4}[[:alnum:]]{5}#{4}$" $srcdir/`' seem to match the '####Hello####', but, as far as I can see, that's supposed to be the already converted script?! I presumed the binary files not to contain human readable strings, maybe that's the whole confusion.
You pick an obvious encoding (such as binary) yourself, in the same way your computer is not outputting some platonic ideal "A" but a series of electrical impulses that your monitor plus your eyes and brain interprets as "A".

Sure, you can object that the encoding is "outside" the TM, but for the purposes of discussing complexity these objections are pretty trivial, again for the same reasons (whatever encoding you pick the conversion process is a program you can write down, and once you write it down it means the Kolmogorov Complexity is the same between different TMs up to the length of whatever encoding/decoding program you come up with).

Put another way, a TM with alphabet is {0, 1} is technically not the same as the TM with alphabet {A, B}. But it's obvious to us that the TMs are equivalent.
That’s how you make unusable/uncompilable software. It might be a good rule for something security critical like ssh but not as a general rule.
Maybe they know something we don’t about Ed25519? [Queue X-Files theme tune]
It doesn't work.

The reason for this are systemd transactions. And how they intersect with units. A daemon reload recreates the transaction, this allows e.g. new unit files to be correctly integrated into the dependency tree. As it turns out recreating the transaction from inside the transaction is not something systemd can do.

I don't even have a technical judgement on this. It doesn't seem like that severe of a limitation, but my point is that it is extremely complicated and that systemd does not work the way people think it does.

The real problem with systemd is that it often isn't the tool you should be using and that is what people are actually objecting too. Having a tool be extended to do things other tools are already doing for no conceivable reason. Why is the init system also the fstab, I don't think anyone would be able to actually explain coherently the thought process behind that.
I've read that leaving phones constantly in the charger is a fire hazard. It's at leat worth checking it out before trying this at home.
At least some of their software has unique user agents ("Software Heritage*"). I wish a popular FOSS host like Codeberg would block them.
You can find the GitHub events here, I compiled them into CSVs.

https://github.com/emirkmo/xz-backdoor-github

I literally run a git hook that fixes my commit times so I don’t look like a freak to my coworkers making commits at 3am, I think an actor of this caliber would too, so I would bet the git commit times are highly choreographed.
This is absolutely not my experience or the experience of many people I know that have traveled in the region. Latin America is great but the safety concerns are real.
Then dissolve your contract.
I didn't even know duvets were used in hotels. But the OP post did make me think of this: https://www.youtube.com/watch?v=LYJz8tVN7fg
This is about to improve across the board from a product perspective. To get a feel for this, try Krea or ControlNet or ComfyUI. You can precisely control the scene layout.
How can you be an employee without having a contract?
> but in the back of my mind I'm thinking, man, anyone could just code up some real nasty backdoor and the project would be screwed

That's true of course, but it's not a problem specific to software. In fact, I'm not even sure it's a "problem" in a meaningful sense at all.

When you're taking a walk on a forest road, any car that comes your way could just run you over. Chances are the driver would never get caught. There is nothing you can do to protect yourself against it. Police aren't around to help you. This horror scenario, much worse than a software backdoor, is actually the minimum viable danger that you need to accept in order to be able to do anything at all. And yes, sometimes it does really happen.

But at the end of the day, the vast majority of people just don't seek to actively harm others. Everything humans do relies on that assumption, and always has. The fantasy that if code review was just a little tighter, if more linters, CI mechanisms, and pattern matching were employed, if code signing was more widespread, if we verified people's identities etc., if all these things were implemented, then such scenarios could be prevented, that fantasy is the real problem. It's symptomatic of the insane Silicon Valley vision that the world can and should be managed and controlled at every level of detail. Which is a "cure" that would be much worse than any disease it could possibly prevent.
Interesting, you should publish your results.

And it does makes sense, in a way it would be similar to letting children (developing persons) make their own decisions.

The interesting question would be what is then, the best form of government for developing nations. Or even better, what are the required skill-set for leaders to bring development?
Panera was never going to be exempt, their dough is trucked in every day.

They hire from the same pool of labor as fast food franchises anyways. Actual, proper bakeries are a bit different and more incestuous IME, I think it’s the odd working hours.
Is there currently an analogue to FETs in photonics?
I paid for a license because Irfanview is an excellent program I use every day. I also happen to use it at work, too.
What I’d like to understand is it’s proven intentional?

My understanding is it was a few added characters in a header file. I can’t tell you the number of times I was tired and clicked an extra key before committing, or my cat walked across the keyboard while I was out of the room.
I understand that we may never see the secret knock but shouldn't we have the door and what's behind it now? Doesn't this mean that the code is quite literally too hard to figure out for a human being? It's not like he can send a full new executable binary that he simply executes, then we'd see that the door is e.g the exec() call. Honestly this attempt makes me think that the entire c/c++ language stack and ecosystem is the problem. All these software shenanigans should not be needed in a piece of software like openssh but it's possible because it's written in c/c++.
> Do we even need "mutual authentication of DTLS certificates", though? I would think it should be sufficient for either the server's certificate to be CA-signed

I mean, we're talking about something where the core use-case is for equal peers to be connecting to one-another, where who is dialing whom is entirely arbitrary. While your app on top of WebRTC might have nodes that do server-like things and other nodes that don't, on the WebRTC level, there is no "server"; for any given WebRTC session, either one of the peers might end up doing the dialing or the listening, perhaps with this even changing for the same pair of peers on a connection-by-connection basis.

In such a context, mutual auth is the only kind of auth that makes sense to me. Both sides establish a stable identity (beyond their relatively-unstable current IP address), so that each side's User Agent has at least one piece of reliable information it can use to whitelist or blacklist other nodes' connection attempts by.

Consider: we're struggling right now to get the phone network to adopt protocols that allow each side of a phone call to non-repudiatably identify the entity on the other end of the call (i.e. for it to be impossible for each side to fake its phone number.)

So why would we want to introduce a new protocol in the year 2024, supposedly for p2p connectivity, where at least one side of the connection is allowed to be the equivalent of the phone network's "Unknown Caller"?

Or, to put that another way: do you really want to enable your browser to be DDoSed? By other browsers, who've landed on some malicious webpage that runs in a background tab, opening never-ending WebRTC connections to target hosts according to the websocket-delivered instructions of some booter service?

Mutual auth at least ensures that connection attempts like those will be dropped at DTLS establishment time. To talk to a WebRTC session established by a page from origin X running in your browser, those tabs in those other people's browsers will need access to DTLS certs that are signed by a party trusted by the code in your browser (i.e. the code written by origin X.) And those DTLS certs would in turn presumably only be made available to... pages from origin X. (Or its logistical data partners.)
> That said, if you're not using it, it defeats the purpose.

Not if this was injected by a state actor. My experience with other examples of state actor interference in critical infrastructure, is that the exploit is not used. It’s there as a capability to be leveraged only in the context of military action.
It is not an intractable problem as you believe it is.

E.g., make the machine print out pixel values for a large screen. The screen can display Chinese characters in canonical ways.
Immigration is not a problem. The number is. 1m+ per year is way too much. The devil is in the details.
Step 3: Profit

Sell "preservation credits"
Should've said function call not library call. My bad. Basically if you already have the linux/landlock.h, that should provide everything you need to do without explicit references to SYS...
This doesn't look like a research.

This looks like state sponsored attack. Imagine having a backdoor that you can just go to any Linux server and with your key you can make it execute any code you wish without any audit trail. And no one without the key can do it, so even if your citizens use such vulnerable system other states won't be able to use your backdoor.
The interesting one to watch out for is how often democracies form with the support of an existing democracy - I only have a loose understanding of the history but France seemed to have an outsized role in the US becoming what it is today. The failures (USSR, Republic of China for example) where democracy doesn't take on a wide scale are probably also interesting studies.

The key problem in setting up a democracy is that people are, on average, pretty dense. Doing things by vote doesn't cause stupid people to make good decisions. There is a real cultural element where the people involved have to be strongly against solving domestic problems with force, for evolution over revolution and also big believers in general liberty (otherwise you just get two factions fighting to use the big stick of government against the other).
You need a monarch to breed an aristocracy that takes care of its home by virtue of having skin in the game. A fake democracy immediately dissolves into an oligarchy which is self interested and will take whatever it can for itself up until the point a strong king rises up and smashes it. In this case Bukele.
I use sumatra for how lightweight and fast it is. 7zip is just uncontested. I wish Ditto had copycats on linux and macos. It's just sublime.

I've never used irfanview though, I'm too quick to judge from the UI of an app xD

I see all those buttons on IrfanView and how it opens as an explorer of pictures rather than just a simple Photo Viewer with arrows to go back and forth and closed it. qView is my fav right now. It does exactly what I need from a viewer. It views. I rarely need editing.

Nowadays if I need editing I just open Photopea.

If I need batch editing/converting I open XnConvert.

tl;dr IfranView is probably amazing, but just like all those buttons on np++ I pre-judge and find simpler things
I would think of the Third Polish Republic.
You have an explicit contract. Employment which defines job requirements and pay. You sign it with your offer letter. It is usually very light in nature.

As an exempt salaried employee you can simply check your email and (legally, backed by case law) call it a day of work. In an at-will state an employer can let you go for any reason. The contract is favorable to both parties at the same time