skysight-inc/HackerNews huggingface dataset:
I think so too on everything but why is our universe stretching. If our universe started at a point, wouldnt that corelate of formation of blackhole - also at a point? Wouldnt stretching our universe mean the blackhole is actually growing? A lot of matter feeding a blackhole shortly after it forms would explain our rapid inflation.

But at the same time, once our universe stretches so fast that each photon is receding from all other photons faster than speed of light (completely isolate it from the rest of the universe), it fits into my analogy of escaping our universe and it being emited (trough hawking radiation) from the black hole. In that case growing our universe to infinity (and asymptotically reaching zero density) would fit into blackhole evaporating, so I just dont know.
EU: Romania and Bulgaria join Schengen area by air and sea
I think some people get confused because they do log second growth redwoods on state park land (eg Jackson State Forest) here in CA but the old growth forest was destroyed by logging company clear-cutting so even if the trees are 100 years old they aren't old growth.

There are places where old growth trees are being logged even today. It's a patchwork: some old growth is federally protected, some state protected, some locally protected. And some is private land where oversight varies.
I suppose I think verbose-ness will help people see the other side of things. I think I was also trying to convince myself that you aren’t just into conspiracy theories, but given that you’re now accusing me of being suspicious… :shrug: it did come full circle where in my first comment I said you would start accusing me. I guess neither of us have anything more to say to each other because we are both too locked into our own beliefs.

As for motivation… https://xkcd.com/386/ enough said :)
I agree that CRDT spreadsheets like Google Sheets have similar features, but we only got those recently as well.
One good person with experience can beat a several who aren’t so good.

My old boss would give one of the newer/cheaper people a task and they would flounder for months on it. After about 3 months he’d ask me; I’d have it done and back to him in a couple hours. This happened countless times. While I get paid more than them, 2 hours of my time is cheaper than 3 months of their time… not to mention the value of faster turn around.

There are also many problems I can see coming and avoid, because of experience, where a younger person has a good chance of hitting the issue head on.

You’re also talking about hiring. I have a job and can keep it, assuming my mind and fingers still work. I’m not planning on interviewing much. That said, I did have a FAANG reach out to me just last week. I wouldn’t call myself old and gray yet, but I have aged into the protected class.

As a hedge, I save my money and keep my expenses low.
Read the article. El Salvador's gangs are not narcotics traffickers like in Mexico or Colombia. They mainly extorted.
MIPS stands for Microprocessor without Interlocked Pipeline Stages. It is a RISC (Reduced Instruction Set Computing) architecture developed by MIPS Technologies. MIPS processors are known for their simplicity, efficiency, and the wide use in embedded systems, consumer electronics, and as microcontrollers.
My config is kind of cluttered so this is a simplified version without dependencies. Glogr is for range history, GLogf for file history and <leader>gc for showing a commit based on hash:

nnoremap <leader>gc :Gshow <C-R><C-W><cr>
command! -nargs=1 Gshow enew | set ft=diff buftype=nofile | 0r!git log -p -n 1 "<args>"
command! -nargs=0 Glogf tabnew | set ft=diff buftype=nofile | 0r!git -C "#:h" log -p --follow "#:t"
command! -nargs=0 -range Glogr tabnew | set ft=diff buftype=nofile | 0r!git -C "#:h" log -L "<line1>,<line2>:#:t"
The problem might be your approval process? $18 compared to fully loaded monthly cost is nothing. Unless you are using 100 tools like this maybe. Or based in LCOL location.

The pricing isn’t ridiculous, it is by design. For better of worse SaaS pricing is about finding features (regardless of their actual cost) that act as signals for “is a customer who can afford more”. The $6 tier was you paying their
marketing and market research cost by you trying them out :-). They probably don’t need the $6 they need the data that you were willing to pay something!
The duvet cover is, in effect, the second sheet of which you speak ;)
What is the purpose of the word "copy" in the title sentence? Shouldn't it just be "Nvidia is Simulating the Earth"?
Just stand in the cover and drag the inner to the corners. It's so easy
Not really, I just took a couple of undergraduate courses in neuroscience, but I didn't major in it or anything. For a time I thought about doing research in this area, but I got sick of how the lab animals were treated. Take a look at this

https://en.wikipedia.org/wiki/Remote_control_animal
For those outside US where content is currently not available at your location:

https://www.youtube.com/watch?v=451xJqNGFqU
You're right we could. In fact, it was a single server until about 2 TB. We considered a larger server and in fact at that point we could have just added a few more disks. But we still decided to shard.

First, the data size is growing and we didn't really know the growth rate in advance. Sharding gives you some flexibility in the infrastructure sizing. And yes, you don't want to wait until the last minute.

Second, it helps us to spread the disk I/O. Possible on a single machine if you're a little bit careful with disk types and sizes. But again, the overall load still grows.

Third, all the bulk operations take a long time on a single server. Each of the distributed servers takes about an hour to back up and 2-3 hours to restore. I'd feel uneasy if it was much longer.
Meta's Onavo VPN removed SSL encryption of competitor's analytics traffic
Documents and testimony show that this “man-in-the-middle” approach—which relied on technology known as a server-side SSL bump performed on Facebook’s Onavo servers—was in fact implemented, at scale, between June 2016 and early 2019.

Facebook’s SSL bump technology was deployed against Snapchat starting in 2016, then against YouTube in 2017-2018, and eventually against Amazon in 2018.

The goal of Facebook’s SSL bump technology was the company’s acquisition, decryption, transfer, and use in competitive decision making of private, encrypted in-app analytics from the Snapchat, YouTube, and Amazon apps, which were supposed to be transmitted over a secure connection between those respective apps and secure servers (sc-analytics.appspot.com for Snapchat, s.youtube.com and youtubei.googleapis.com for YouTube, and *.amazon.com for Amazon).

This code, which included a client-side “kit” that installed a “root” certificate on Snapchat users’ (and later, YouTube and Amazon users’) mobile devices, see PX 414 at 6, PX 26 (PALM-011683732)(“we install a root CA on the device and MITM all SSL traffic”), also included custom server-side code based on “squid” (an open-source web proxy) through which Facebook’s servers created fake digital certificates to impersonate trusted Snapchat, YouTube, and Amazon analytics servers to redirect and decrypt secure traffic from those apps for Facebook’s strategic analysis, see PX 26 at 3-4 (Sep. 12, 2018: “Today we are using the Onavo vpn-proxy stack to deploy squid with ssl bump the stack runs in edge on our own hosts (onavopp and onavolb) with a really old version of squid (3.1).”); see generally http://wiki.squid-cache.org/Features/SslBump

Malware Bytes Article: https://www.malwarebytes.com/blog/news/2024/03/facebook-spie...
There is a dead comment pointing this out, but El Salvador gangs are not primarily drug gangs. The article goes into it further, but the short version is: the gangs there are/were focused more on extortion, with a consequence being that they are dramatically less wealthy than drug organizations in Colombia and Mexico.
Social housing, tax incentives,
rent controls and ownership restrictions can cause the two to diverge.
This is one of the biggest issues I face at work. I always see "added X", which git can already tell me.

> Also, if you have mandatory squash and merge, congrats, you’re destroying history all the time that can help you debug things.

Well the alternative is 100s of commits like this:

fix bug

added file

fix typo

fix typo

update test

test

test

test

fix typo

added file
Hashes of existing child porn are created and disseminated for automated detection already, a CP detector model isn't too far from that.
Traveling in Central America. For example, a lot of people go to Guatemala or to Honduran beaches but skip El Salvador out of apprehension
The Einstein-Podolsky-Rosen Argument in Quantum Theory (2017)
You are absolutely right! I haven't ever defended FSD or this finger cutting issue. But I do think media is overly critical of Tesla compared to legacy auto.
Hire somebody to do it for you. Profit.
it's the content/ad banner ratio
Time for an industry standard subdomain.

www for the website

app, signin, login, entr, for the sign in page.
What’s the game?
Thanks I had no idea what it was about reading the website - just a massive chancelog. They really gotta add an intro or something for new players.
My first instinct reading that question was a StackOverflow like "why would you do that ? do Y instead" type answer.

I've used MS Project more than a decade ago for one or two project and just gave up to do what the sister comments are describing: manage the project elsewhere, with JIRA tickets, one or two gantt charts and some more excel sheets as needed.

I never had data loss or straight bugs, it just didn't feel more useful than any of the other tools it's supposed to replace.

Project status was always more complex than what could be fed into it, so I had to keep track of it elsewhere anyway.

Task status needed deeper integration with github and other tools, we're writing tickets and epics etc. anyway so JIRA projects were better suited.

Then it lacked enough simplicity and flexibility to be used as an adhoc gantt tool.

The whole concept just feels doomed in my eyes when it comes to software projects.
Ok, I think it’s fair to say it’s not an absolute rule. But there’s a big difference between publishing a picture of a politician against their wishes and a model’s glamour shot. There’s often a legitimate public interest in documenting the activities of politicians, sometimes even their private lives.
But there are black holes in our universe. Can black holes be inside black holes?
Layout of Rust's u128 and i128 changed
I wish it would all be disabled. On iOS it is absolute hell to load any page due to it jumping around, and then you scroll and some video starts playing. Do you want me to read the page? Or get distracted? Either PIP with a too small x, or inline, making me think it's part of the story, but it's just another story about Mary eating 36 pastries and winning the eating contest.

For the longest time Ars Technica did this too, with the same video over and over. I can't imagine the bandwidth wasted there.
i remember watching images download and how relevant progressive rendering was. blurry shapes!
All you have to do is go on Rotten Tomatoes and compare the professional critic's rating with the audience rating.

If your preferences generally align with professional critics, you are in the minority as far as I can tell - at least for movies.

I wouldn't be surprised if the same is true for books, vindicating OP, but I don't know of an appropriate data source that could settle this.
Maccy on MacOS is perfect: https://maccy.app/
I too have been worrying about SD card failures in my raspberries but haven’t had a single failure ever! My cards are read/write all Debian and have been running since 2016. I hope this post won’t jinx it but my entire data centre has been running with zero storage failures despite running in the most humid and dusty basement you can imagine, though I did have other hw failures such as power supplies, rams, and ups.
Depending on log level, isn't there going to be lines up to receiving the payload?
Just don‘t go there. Country‘s been a mess for a long time anyway.
I agree! I like the idea that it becomes a standard part of the “why work here” drivel, er.. I mean pitch.

For example that includes things like a photo of 100 smiling people on a Bahamas beach and that well stocked fridge (or awesome WFH setup). A closer comparison would be carbon neutral status to boast about. Or companies that have one, two or three paid local volunteering days.

Make it one of those cheap things companies do to boast to perspective employees (and maybe customers if the customers are techies).
You can trivially convert any such Turing machine to another simply by adding n new states to it, that map a letter of the previous alphabet to the new’s.

With all due respect, you are misunderstanding something/bring something up with no relevance to complexity.
If you ever find yourself interested in living in a NetBSD system, check out the SDF: sdf.org

the SuperDimensionalFortress has been around since the 80s and is now one of the largest installations of NetBSD in the US/world. Membership gets you such perks as: email address, a private (invite-only) Mastodon instance, a hosted Matrix instance, and more.

While you aren't an administrator on the SDF instance, you can definitely get a sense of what it's like. Different membership tiers get you access to different tools: Free users don't get IRC outbound, MetaARPA members are granted access to the big disk store and hosted websites and even development tools.
This was an issue in Python 2, where for some dumb reason it allowed mixing tabs and spaces and equated tab to 8 spaces (I think). Python 3 doesn't have that issue.
Explaining the internals of async-task from the ground up
The problem in Oakland isn’t a lack of knowing who committed a crime, it’s that the DA isn’t charging anybody with crimes, and letting everybody walk.

She’s also facing a recall, but these cameras solve a problem that doesn’t exist.
That's not autotools.
This is only correct if the sshd backdoor is the only malicious code introduced into the library.
The use of head/tail for deobfuscation also isn’t visible as plain text in the repository or release tarball, which makes searching for its use in other repositories more difficult (unless a less obfuscated version was tested elsewhere).
Hashes just detect old unmodified content, not new stuff, or even AI generated stuff.
Well since you seemingly want to paint Microsoft and other such companies in a bad light, let me point out to you that it's actually Microsoft who brought awareness to this very problem: Andres Freund works at Microsoft.[1][2]

It is probably prudent for you (and other like-minded individuals) to be more careful who you think your enemies really are. Infighting against friends and allies, or even neutral parties, is exactly what your real enemies would want you to do.

[1]: https://www.linkedin.com/in/andres-freund

[2]: https://twitter.com/AndresFreundTec
AC_COMPILE_IFELSE indeed only compiles, so there's no need for main().

There's AC_LINK_IFELSE if you want to test linking too.
The Harry Potter movies are not directed by an American. They have different directors, 2 out of 8 movies are directed by an American, the others British and one Mexican
Nothing here is something that could not be done in other languages. For example in Rust auditing this kind of supply chain attack is even more nightmarish if the project uses crates, as crates often are very small causing the "npm effect".

Another good example is docker images. The way people often build docker images is not that they are build all the way from the bottom. The bottom layer(s) is/are often some arbitrary image from arbitrary source which causes a huge supply chain attack risk.
The world needs more recognition of good mathematics and mathematicians. Really love the work quantum magazine does on covering mathematics. So many implications for the rest of the world.
Paying for Cloud Storage is Stupid [video]
A lot of it has to do with centralizing administration. If you have more than one server and more than one user, certificates reduce a NxM problem into N+M instead.

Certificates can be revoked, they can have short expiry dates and due to centralized administration, renewing them is not terribly inconvenient.

On top of that they are a lot more difficult to read over the shoulder, to some degree that can be considered the second factor in a MFA scheme. Same reasons why passkeys are preferred over passwords lately. Not as secure as a HW-key, still miles better than “hunter2”.
Here's a dashboard: https://ourworldindata.org/

Pick almost anything to see a positive trend.
Jia Tan tried to get his backdoored XZ into Ubuntu 24.04 just before the freeze, so that makes sense. Now is about the right time to get it into Fedora if he wants to backdoor RHEL 10, too.

But I don't think valuable government targets are in any hurry to upgrade. I wouldn't expect widespread adoption of 24.04, even in the private sector, until well after the U.S. election.

By the next election, though, everyone will be running it.

Edit: According to another comment [1], there would only have been a short window of vulnerability during which this attack would have worked, due to changes in systemd. This might have increased pressure on the attacker to act quickly.

[1] https://news.ycombinator.com/item?id=39881465
Directory Opus is a little faster:

CTRL-P pastes anything (image, text; not sure what else) in clipboard to a file in current directory
I don't think the reason they were less wealthy was because they were primarily in extortion and not drugs, it was because they hadn't created a funnel for money from wealthier countries to enter their pockets.

I believe some Russian and North Korean gangs have figured out how to do this via extortion (cyber-crime), but the drug trade seems to be another popular way to do it.
> If your application links against the runtime, be it dynamically or statically, then it is a derivative work and thus must be distributed under the GPL

Flatpak apps aren't linked against a runtime, they just run in a bwrap sandbox with that runtime. Again, think of it as a Docker container.

In Fact, Flatpak apps aren't even supposed to know they're running in Flatpak. They can know that, because the user agent string says so, but nothing in the app code specifically should be adapted to run in Flatpak
Here's a thought. The fact that the two candidates for the most important role in the world are so bad tells you that the role is in fact, not very important.

That's a good thing.
If planting two billion trees has so many challenges in a sparsely populated country (considering Canada's land area) - how is the One Trillion trees project supported by the likes of Marc Benioff (Salesforce) even possible ? For the record : I'm all for more greenery and forests.
This backdoor does not care about any of the authorisation configuration set by the user.

It is executed before that step. So just make sure you are not affected.
Since no one else has asked, what did you not like about it? I found the magic realism look towards, specifically, racially segregated chattel slavery and the generations who lived in the shadow of it was a very interesting mix of ideas. I remember her stories being beautiful and horrifying, her prose being precise while being fantastical, and her style and story material being quite unique.

Would love to know what you didn't like. Perhaps I have a rose-tinted view of reading those books long ago
Guess my RGB
> Even Americans usually don't drink that hard; the French earned my respect that day.

Is drinking hard something so deserving of respect? Is working while impaired?

To me this reads as "I like to fuck off and be irresponsible and man did these French guys show me how it's done!"
I think I see how you’re interpreting the sentence.

Imagine instead the word “and” in place of the comma before “developing”.

The letter writers wants the author to be “dramatising (their events) AND developing scenes in which the reader…”
I am trying to figure out if auditctl is expressive enough to catch unexpected execve() from sshd: basically anything other than /usr/bin/sshd (for privsep) executed with auid=-1 should be suspicious.
The same phenomenon exists in teaching. When I student is failing, a teacher constantly has to challenge themselves whether or not the failure lies with their approach. I think students are set up to fail all the time.

But with 60+ students, this self-examination can be exhausting.

And if you begin to micro-manage/criticize students, you risk them making them feel stupid. I have found that you have to do the opposite: you have to give them more freedom, more personal responsibility, and you have to challenge them to succeed. They have to own it. They have to have the agency to figure things out and ask questions. It's the only solution. You can't coddle someone to success.

Of course if this fails, I look like a shitty teacher. Teaching is hard. Managing is hard too, I am sure.

I teach middle-school students to be clear. At certain ages, yes students need a lot of structure and they can't figure things out themselves.
For MacOS, I wonder if it's faster than XNView MP. This was the fastest image viewer I could find for Apple Silicon. Also are you running it through Wine on MacOS or how do you get it working?
The AI shift from prompt engineering to flow engineering
Could that commit also be made by a bad actor?
Yup, this way and you're done in a minute or two.
I wonder what had happened in Eastern Europe ~2 years ago...
You new to this planet or something? Literally -nothing- is fine. Pretending otherwise serves no end and makes you look uninformed or delusional.
Presumably because they're one of the two maintainers: https://web.archive.org/web/20240329182607/https://xz.tukaan...
I have often seen the secret component of an asymmetric key pair referred as secret key as well. See libsodium for example. Maybe it's because curve/ed 25519 secrets are 32 random bytes unlike RSA keys which have specific structure which makes them distinct from generic secrets.
No need to dunk, just explain what you've learned that they have not.
The press release calls it an "Earth climate digital twin" and project is named Earth-2.
What do others use then?
It will still work if the connecting client offers a RSA key.

The only real way to be sure it's not on your system is if your liblzma version is strictly less than 5.6.0 (first infected version):

ls -al $(ldd $(which sshd) | grep lzma | awk '{ print $3 }')
I meant more in relation to other Latin American gangs, which are wealthy because of drugs. The El Salvador gangs are extorting low income people in El Salvador, so cyber crime is not really a lucrative thing.
There are ink cartridges which include the print head, like HP 54/78. I think they were designed before the DRM enshittification trend took hold, so I don't think there is any way to "lock out" independent uses.
Is a deck considered sequestered carbon?
I shipped in a shipping container. I documented the whole process here http://theroadchoseme.com/shipping-across-the-darien-gap-pt-...
The fact GitHub suspended his account too suggests that they might have info saying he is involved.
Very common in Europe
Really?

Voice actors?
Concept artists?

The technology is the start of knowledge economy industrialisation
CM3588 NAS Kit – FriendlyELEC WiKi
"Verify" in which way?

What would be the simplest example of "using this company’s services"? Maybe an API call like this?

GET /animals/dogs/ears/count

And that returns "2"?

Now you know that the company claims that dogs have 2 ears.

How does the fact that they published a hash on a blockchain allow you to "verify" that statement?

At best, you can say "The company claims that dogs have 2 ears and they did so 3 months ago already", right?

But the hash does not help you verify the claim on how many ears a dog has.
You have it precisely backwards. "Developing scenes in which the reader discovers what kind of people they are" is synonymous with "show" and "being told" is literally a form of "tell."