skysight-inc/HackerNews huggingface dataset:
Using RCU as the example to motivate GC is interesting. It is essentially transferring the responsibility of freeing from the writer to the last reader, who cannot be determined when compiling. It makes a lot of sense.

But this makes me thinking that, if I want more performance, should I further transfer the freeing from the reader to a dedicated batch process? The readers only update a mark / write into a queue or something. Every once in a while, a batch process collects all garbages and compacts. This way the readers don't have random additional overheads.

> Lies people believe about memory management

> The programmer knows the best times to pause for memory management.

In my experience, there are many programs in which the programmer does know the best times to pause for memory management. For example, in games and crypto trading programs, I want to classify all computations into two priorities. I need to do an update / render a frame / compute a trading action in every time period. If it finishes before the deadline, I have nothing to do now and would like to collect some garbages. If the high-priority thing is using all the available time, for example, when the market is very active, I don't care too much about collecting garbages and would like to defer everything that is not strictly necessary to as late as possible.
So this is called the house of cards backdoor now?
FWIW, lower latency is not guaranteed when going direct vs through a relay. There are way too many variables in routing. You've got to try it all ways and see.

Ideally, you should try to measure the one way delay on each path and choose the 'best' path in each direction, but WebRTC tries to converge on the 'same' path for both directions (either relay both ways or direct both ways).
Do not have access to the article but my guess would be the loneliness epidemic.
Those Python snippets are both clean options :)

Bitwise is highly context dependent. There are simple usages like shifts to divide/multiply by 2. Idiomatic patterns that are clean when wrapped in good reusable and restricted macros, like for common registers manipulation in microcontrollers. And other uses that are anything from involuntary obfuscation to competition grade obfuscation.
CSS Snakes and Ladders
It’s insane to consider the actual discovery of this to be anything other than a lightning strike. What’s more interesting here is that we can say with near certainty that there are other backdoors like this out there.
Only if you consider "this person" to be equal to "this identity".
AI does do useful work.

It's also being treated as magic, with all the same unrealistic expectations.

To treat it as more than it is, is as much a mistake as to treat it as less than it is.

I'm glad it's "only" at the level of an intern (sometimes you're willing to hire them, sometimes you're not); but conversely I think this means I can't risk changing career.
Where can we trade on Canadian maple syrup futures??
I guess at base, what is keeping these people in jobs where collaboration is required, along with a standard of base professionalism and courtesy?

In other words, why haven't these people been counseled to change their act? And if no progress has been made, have them seek employment elsewhere?

Just because you're in a remote environment doesn't give you free reign to be an asshole.
The last part is correct; layouts are not GC'd objects. They are views over byte arrays (or mmap'd memory, or unsafe regions like the execution stack). The first part is partially incorrect; layouts are not "boxed"--they are represented underneath as a pair of a (potentially null) GC object and a pointer-sized offset into that object. So with that representation you can have a reference to an off-heap layout as well.

Layouts are a little underpowered right now, owing mostly to the conservatism in that they could always be aliased by a byte array or any other alias, thus their bytes are chaos-bits that cannot be trusted. Adding the ability to have pointers between layouts is another level; for that, I am envisioning reads of pointers requiring a second capability which is the expected region into which the pointers lie.

But all of the layout stuff is fundamentally not about performance, it's about interfacing with external software and hardware. In Virgil the expectation that you should use the good, type- and memory-safe constructs like classes, arrays, tuples, ADTs, etc. These are plenty efficient and getting new annotations to control their representation in a more fine-grained way.
I'm honestly not sure if you're trolling here - you seem to purposefully be missing the point and I'm honestly not sure what you're trying to achieve here

If a country's largest company based on market cap is bigger than the next 50 companies combined, is the most popular stock among the countries retail investors, and is the current sole driver of economic growth in said country, that's a significant risk

Making a comparison between the value generated in a country compared to the total price of a company is a way to illustrate how massive the company actually is - same as when making a comparison to how many years I'd need to work to have earned as much as Jeff Bezos net worth
> Decrepit lots ... restores them into preserves

I despair. The only thing left for “nature” is the land we've run into the ground, poisoned and shit on.

Turning them into preserves is laudable, except they'll never, ever be as good as whatever was there before the land was cleared. The biodiversity will be gone. The complex interactions of thousands of species will be gone. Restoring the land also inevitably requires fossil-fuel inputs.
We've had multiple covers, and the one that we've liked the most has holes in the top corner, along with ties.

Long story but we went to someone to have a cover custom made (she advertised this kind of thing, and for us it was partially to use fabric that had sentimental value for us). She ended up arguing with us about how we didn't need the holes, and demonstrated this flip move that seemed impractical for a large comforter.

I wish all duvets and covers had ties, and more importantly covers with holes. It's so much simpler and direct a solution.
OMG that's evil. The diff just shows:

+
+.
+

and the dot goes unnoticed
https://archive.is/FThP1
It depends what happens to the password. Typically it's sent as a bearer credential. But there are auth schemes (not widely used these days) where the password isn't sent over the wire.
The world is fine. Don't give in to negativity.
>”It's difficult to meet the ideal boyfriend in real life,"

Because ideal boyfriends don’t actually exist. Just like how ideal girlfriends also don’t exist.

I think some young people need lessons on expectations in relationships.
https://archive.ph/s8lZA
Discussions: [0](53 points, 6 hours ago, 33 comments) [1](59 points, 20 comments)

[0]: https://news.ycombinator.com/item?id=39876579
[1]: https://news.ycombinator.com/item?id=39876565
Every "white" light has blue emissions (blue is, after all, part of white). Blue is visible, the LED blue emissions for a 2700K bulb are no more or less than the emissions from an incandescent.
If my server doesn't have any RSA public keys in its authorized_keys, only ed25519 keys; does this backdoor just not work?
That just…doesn’t make any sense.

Everyone starts from zero and works their way up.
Absolutely no intelligence agency would look at a successful compromise where they have a highly positioned agent in an organization like this, and burn them trying to rush an under-developed exploit in that would then become not useful almost immediately (because the liblzma dependency would be dropped next distro upgrade cycle).

If you had a human-asset with decision making authority and trust in place, then as funded organization with regular working hours, you'd simply can the project and start prototyping new potential uses.
"As long as my mind and fingers still work, I can work on a computer until I’m old and gray."

This is a big assumption. Why would they hire an older guy? They can have cheaper people more willing to put up with BS by hiring under 5 yoe or offshore.
I misunderstood what you were originally saying.

I thought you were talking about how much electricity was consumed in smelting that much aluminium. Not actually using that much aluminium to transmit power
If you can show any examples of consciousness regularly/usually claiming to have omniscient knowledge of all that is, or even someone other than yourself saying that consciousness regularly/usually does so, I would be most interested - in my studies of what's written and said about it, I have never come across this view before.

A simple search should be sufficient to establish that the most common usage of 'consciousness' is as being an aspect of perception - and more specifically, the subjective aspect of it.

Furthermore, I am at a loss to figure out how this claim could have any relevance to the sentence of mine that you quoted in your first reply to me.
Would it be reasonable to expect that this MR comes along with a test that shows that it does the thing it’s claiming to do? I’m not sure how that would work in this case.. have a test that is run on a system that is known to have landlock that does something to ensure that it’s enabled? Even that could be subverted, but it seems like demanding that kind of thing before merging “features” is a good step.
Thanks! :-) It's been brewing in my head for a while and I've written out shorter snippets of similar ideas over the course of the past few years.

I've taken some liberties and likely made some mistakes, but it's aping the kind of "history of technology in its social context" that I love to read about.

I am actively taking suggestions for similar reads - one I love off the top of my head is "The Victorian Internet" by Tom Standage: https://www.smithsonianmag.com/arts-culture/review-of-the-vi...
Fun (?) fact — because of this, some hospitals have prescription beer.
Replayability means something different in this context. First, we do know the backdoor will pass the payload to system, so in general it is like an attacker has access to bash, presumably as root since it is sshd.

Replayability means, if someone were to catch a payload in action which did use the exploit, you can’t resend the attacker’s data and have it work. It might contain something like a date or other data specific only to the context it came from. This makes a recorded attack less helpful for developing a test… since you can’t replay it.
I’d like to note that it is not Hamas which is reporting the official death count, it is the Gaza Health Ministry. While the ministry is under the control of Hamas, the actual reporting is done by actual public health professionals, doctors, etc. who may be Hamas members simply as means of occupation. So Hamas is not under reporting anything.

Second, the methodology of the reporting is a lower bound. They compile a list of names who health-care workers (doctors, nurses, etc.) confirm dead. This list is very credible, as you can cross reference the names with the Israeli controlled Gaza population registry, you can find real people behind those names, with social media profiles, obituaries, etc. This methodology has been proven to be accurate in previous wars. This is still a lower bound, because there are still around 7000 people missing and presumed dead. This number is harder to estimate because this may actually include double counting, and false positives (e.g. successfully fled over the border). It may also be an under count as there are cases of entire families being bombed at the same time with nobody left to report them missing. Your parent’s 100 000 is not realistic, but around 40 000 is not an unrealistic estimate (the 100 000 is used to described the sum of dead + missing + injured, so perhaps this was a simple mistake by your parent).

And finally the statistical methodology of the article you cited earlier is—to but it bluntly—pseudostatistical crap. The your parent was correct in pointing out that the assumptions based in that article are never sufficiently justified to proof an abnormality. This is actually from the playbook of Trump election denialism, where the distribution of votes was somehow proof of tampering. Here the distribution of reported death is not proof of any abnormality. This article you cited has actually been submitted and flagged, submitted and flagged repeatedly here on HN. The HN community has weighted that article and deemed it unfitting. (https://news.ycombinator.com/item?id=39684474)
To me it seems too clumsy to be USG. They seem to prefer back doors that are undetectable or hide in plain sight.

But it might be an NSA op designed to instigate a much needed serious examination of the supply chain.
Any programmer can program better than the majority of the population. Even if you define population as the population of programmers, being in the 51st percentile is still very grim.
I’m so sorry to hear that. Yeah, stopping alcohol or benzodiazepine consumption completely after years is the equivalent of pushing the gas pedal in your brain all the way to the floor. Scary stuff. I think too there are many older “functioning” alcoholics who have drank daily for years and inadvertently set themselves on this path when they decide to just quit for one reason or the other.
Strange question? Photonics suffers from logic density issues, certainly not frequency or power usage compared to relatively inefficient transistors.
How are the binary files passed to those stage-0 commands?
> GLP-1 medications have been hypothesized to possibly result in the loss of muscle mass and bone density.

Yikes. I wonder if there could be long term cardiac or pulmonary health issues as a result of this.

I'm also interested if this creates long-term insulin or pancreatic dysfunction.
This is what I do as well basically. It's usually more confusing to me to figure out what's top and bottom versus sides than to actually put the cover on.
When you get down to it, Carbon Offsets, credits, etc is just a way on paper to let people keep polluting.

They're not authentic at all. Forest fires are irrelevant to that though.

We've planted thousands of trees. Do we get any of those credits? No. Do you know what does? The massive bluegum monoculture down the road that they are going to harvest in ten years with big fossil-fuel machines and turn into paper with a lifetime of about a week.

It's basically fraud, another “business as usual” green-wash, another way for companies to get free money from mates in government, and people being able to feel good that “we're doing something”.
RooBadge, an innovative approach to deterring kangaroos
Haha this is true! During my alcoholism I visited the ER for an unrelated purpose and was “prescribed” a single warm can of Bud Light!
Nice. Can you share your vim configuration for that?
If anyone is trying to quit, the StopDrinking subreddit is a godsend.
Which I think aligns with what I wrote, since I specifically didn't state that they are required to maximise profits for their shareholders, only that they are beholden to said shareholders

In reality those shareholders will pretty much always demand that the company maximise their ROI, so in reality I don't think it matters whether they are required to or not

If they don't they'll be eaten by a company that does and the outcome will be the same
"Backdoor in upstream xz/liblzma leading to ssh server compromise"[0] isn't bad either.

[0]https://www.openwall.com/lists/oss-security/2024/03/29/4
Probably even more than carbon neutral, because some of that carbon gets folded into the soil layer.
I'm really surprised no one commented about suno.ai.
>pop was a serious thing that attracted the best musicians and discerning listeners.

When was this ever the case? I'm not trying to be a dick, honestly. When was that statement true?
Thank you! I was immediately reminded of that story when I read the article, but would never have been able to find it!
So for each optional feature we may need three build options:

1. Force enable
2. Enable if available
3. Force disable

Like,

--enable_landlock=always
--enable_landlock
--disable_landlock
The cheapest house in our neighborhood recently went for 100k more than I bought my house for, despite my house being larger and not needing the foundation and roof replaced.
Interesting that validating the failure reason of an autotools compile check could be a security mitigation...
I did misunderstand. Sorry.
Regarding your almost query. There was a debate over Ogham space mark in unicode.
It is considered whitespace though, with the rationale that it is sometimes visible, but sometimes invisible. Depending upon whether the text has a stem-line.
That doesn't make the set of non-whitespace delimited languages empty.
Perhaps there is one with an always-visible delimiter that didn't get the whitespace justification, but does at least give one human language delimited by a printable character (which happens to be whitespace).
It would actually be sort of interesting if multiple adversarial intelligence agencies could review and sign commits. We might not trust any particular intelligence agency, but I bet the NSA and China would both be interested in not letting much through, if they knew the other guy was looking.
One of the people who helped optimise the multi core implementation for OCaml said it was the way to go, but that was in 2020. Don’t know where things are now. https://news.ycombinator.com/item?id=23776609
This video about a project in Scotland might be helpful.

https://www.youtube.com/watch?v=BiDBAU2d7oE
Just as the article [0] have described it, the web is already split. You can either choose Times Square or the scenic retreat, the consumer magazine or a nice book. I choose to minimize my time on the "normal" web which breaks if I block ads and tracking scripts. And instead spend it here and in my RSS reader.

[0]: https://ploum.net/2023-08-01-splitting-the-web.html
Which they can do because the US has created a system that incentivizes companies to lobby for their own interests over that of the US population
It’s always going to be a bunch of different things, this was one of the more interesting ones:

One proposal for combating alcohol misuse among older people is to raise the federal tax on alcohol, for the first time in decades. “Alcohol consumption is price-sensitive, and it’s pretty cheap right now relative to income,” Dr. Humphreys said.
I'm glad that research papers don't start with "we've analyzed linux kernel 2.6.18 sources (because this is what we had on our lab machines) and determined that ext3 is the best filesystem for our research purpose and now present you with a novel idea of using high-tech device on that". The paper acknowledges modern features, takes design from other filesystems (mentioned BTRFS and tree structures). Overall the idea is interesting and promising.
Have the entire healthcare system gov run. Need funds for it? Write em up out of thin air. Keep wages pegged above avg labor market because having a healthy society is more productive than an unhealthy one. To the extent where all other industries come 2nd as they are basically useless without healthcare keeping their workforce alive. Can't run a company if all your workers can't get well once they get sick. Literal unnecessary waste of human resources all because we want to prop up a few folks profits? The jobs and demand for the work will still be there if it's gov run, you just don't have a swathe of investors profiting off it. Zero loss. Go invest elsewhere.

One of the arguments against this is inflation from creating money out of thin air to fund it. Its a lie. The service is required and you don't get inflation from paying folks a wage to do a job. You do get it by propping up profits of private companies which essentually through the fattening of their bank accounts devalues money. Remember if you have a large number of folks competing for a good or service and they are all on similar playing fields (e.g wages near market avg), competition is high, the value of each dollar earned remains high.

If you have a handful of companies with buying power that far outweighs that of others allowing them to capture more than their share of a service or good because they can literally just throw more money at it than the majority of us can. This drives Inflation. It devalues money creating a new norm of your dollars being worth less.

Tldr: The benefit from entirely gov funded healthcare far outweighs that of a privatized system.
" I would suggest that they learn COBOL and get paid $150K "

The high paying COBOL jobs almost exclusively hire ex-employees who know the system. I knew COBOL from school and even making a couple small changes when I first started working. The people hiring specifically for COBOL want people with 25+ years of experience, familiarity with the specific system, and familiarity with the JCL or other aspects of the system.
I'm in the US and we use a flat sheet between us and the duvet cover. We wash the duvet cover but the flat sheet gets washed more often and is less expensive to replace, and is replaced more often (nothing gets replaced that often, but relatively speaking).

I don't think there's really any right way of doing things though. Sometimes I wonder if we should just have a linen blanket or something on top in the summer but we never seem to get too hot somehow, and I've never managed to find a top blanket that is the right size and that we like.

(I'm also not really sure I want to store our duvet just for the summer either but that's solvable.)
Because a deliberate vulnerability is much easier to hide than actual malicious content.

One could probably sneak a buffer overflow or use-after-free into a C project they maintain without being noticed. Actually shipping a trojan is much harder, as observed with the xz-to-sshd backdoor.
It is a PDF file. You can save a link and open the file in PDF viewer, instead.
This is what PrivSep was supposed to do. sshd could fork an unprivileged and restricted process to do the signature validation, I suppose.
Swing bands as complexity? I played a shit load of swing music on scholarship during college. It's super SUPER repetitive. It's good. Don't get me wrong. But it's very repetitive.
People repeat this mantra a lot. The whole reasoning behind the idea is wrong