skysight-inc/HackerNews huggingface dataset:
Your declaration of websites not needing to be SPA may or may not be accurate. However, there are so many sites that are made from template providers like Wix/SquareSpace/Shopify/whatEvs that allow people with 0 knowledge of how a website is made. These sites will not render without JS.

These are companies that have allowed so many people to have a website that essentially is a SPA because that's an easy way for them to deploy template based sites. These are much easier to maintain than WordPress sites. Yes, I agree that most of these sites are simply static sites, and I think it would be amazing if these template JS library sites would allow you to render it flat static site once you hit publish or the equivalent. However, they would probably balk at the notion of not protecting their IP with obfuscated code and delivering readable HTML/CSS. I seriously doubt it takes 2MB of JS to operate these sites, and I'm guessing probably 90% of that code isn't used but is just bundled so the same thing is used everywhere.

However, to prove your point, there are many occasions where I've taken as a weekend project to find a template from Wix or similar that I like, and then recreate it in HTML/CSS by hand. It very much is a smaller site. But that's not something anyone here is disputing. The dispute is that you're wanting a fantasy world, and that's not the one we live in.
That's a pretty strong claim. Do you have a source for that?
Things like CertManager and ExternalDNS take away so much operational time dealing with those two things alone. There’s a lot of good infra automation. That being said, I’m a lot bigger on the Fly Machine, Compute-at-Edge trend. If only they had a good IaC solution (after abandoning Terraform and the lack of features in fly.toml).
I've seen a lot of discussion on the topic but have yet to see someone just specify which versions of xz are likely affected so that I can verify whether I'm running them or not ..
How authentic are those carbon offsets though? Are you willing to buy carbon offsets the next time a forest fire runs through your land, which may exceed the total amount of offsets you sold?
But the 70s don’t have a monopoly on complexity. Swing bands, Tin Pan Alley, Broadway show tunes, etc. were the pre-rock popular music genres with notable complexity.
Our agency has been asked to explore AI projects for a half dozen clients over the past 18 months. None of them have actually rolled out to real users. We keep finding the same things: the “AI” backed tool is worse than the people it’s supposed to replace, and too costly to implement and maintain at any real scale. Mix in concerns about PHI (we primarily work with healthcare-related businesses) and it all amounts to the same story: that’s cool, but…
I always thought that shear waves don't propagate in liquid/gases and so to the extent that I thought about it, I would have said that sound can't travel as shear wave but I suppose it can in a solid.

https://www.earthobservatory.sg/earth-science-education/eart...
Mind boggling. How do you even decide what to do with privileges on a billion computers?
> A non-TLS-terminating proxy is a great thing to host on a service like Hetzner. If you set up CAA correctly, then you are trusting the provider for latency and availability only, and you might as well avoid hilariously expensive services like CloudFront or an EC2-based proxy.

Are you really getting any latency or availability improvements in that case? What does a non-TLS-terminating proxy give you?
Or shooting someone isn't a crime, since you only pulled the trigger. After all it was the bullet that killed them
The weak link of a sound system is typically the speakers/headphones. Speaking for myself the weak link for computing was monitors until about a decade ago, about the time everything was getting smaller.

I should switch to just a phone because the lack of multitasking (not in the cpu sense but the ordinary sense), the small screen, and the onscreen keyboard with no easy way to edit would make me use a computer about 95% less.

You can have my dual 27 inch 4k monitors, and my real keyboard with tons of customized shortcuts, my virtual desktops, and my EMACS 29 with lots of modes when you pry them from my cold dead hands.
> But at some point there is a limit.

But we are nowhere close to that point. Ozempic is going off patent in 2031. It is a new drug, and it happens to be a miracle drug. Why should the company that brought the drug to market not monetize on it?
Ah yes but thanks to C being cursed due to includes and macros this is harder to do
I’m very confused by this focus of Hamas supposedly outlawing opposition press. By far the largest threat to free press in Gaza has come from the Israeli military, that targets Journalists both in Gaza and the West Bank, does not allow free press access, etc. Even before Oct 7, the Israeli military destroyed the office of AP in 2021[1]. I’m still waiting for any credible excuse for why they did that (other then to limit press freedom in Gaza). And a year later they targeted and murdered journalist Shireen Abu Akleh.

I’m not super informed about journalism and news access in Gaza (reading about it here[2]), but I was under the impression that Gazans get news from all over the world, not just Al-Aqsa TV, including PBC from the West Bank (meanwhile I’m not sure al-Aqsa TV is available except via satellite in the West Bank). I can be wrong about this, but from what I’m reading it appears that the most widely circulated newspaper in Palestine is al-Quds (based in Jerusalem obviously) which is also circulated in Gaza.

In any case, the Gazans I follow on social media seem to have no problem getting news from non-Hamas sources. So whatever press restrictions Hamas is enforcing, it doesn’t seem to affect the news Gazans are actually receiving much, and if you compare that to the restrictions the Israeli military imposes and the destruction they cause, Hamas is a very minor player in limiting press freedom in Gaza.

1: https://apnews.com/article/israel-middle-east-business-israe...

2: https://www.bbc.com/news/world-middle-east-14631745
apparently he did that after leaving the company, which is pretty sus.
That also matches my experience

I know people who cynically assumed legal weed would be overpriced & low quality. Figured they'd stick with their dealer. Now they just buy legal

Say what you want about cost of regulation. Running illegal operations has its costs & inefficiencies too
Page 11 of the complaint makes it clear these are vested shares that had as part of the requirement for receiving them that he maintain confidentiality. So they are claiming breach of contract and want the money back.

https://www.documentcloud.org/documents/24522887-apple-v-and...
dpkg-deb is linked with liblzma
An exceptional video recently landed deep diving into how structual formations like this were used to miniaturize RF notch filters[0], really incredible engineering.

The acronym naming the input and output terminals, IDT, means interdigitated tranducer. The features are created with semiconductor lithography onto a piezoelectric substrate.

This type of filter is known as a SAW, surface acoustic wave filter. The reflectors on the end make this configuration considered a SAW resonator.

Another form of this filter has the input on the top while the output is on the bottom which can offer much higher frequency filters, these are known as BAW filters, bulk acoustic wave.

Like many other verticals, shrinking the spacing in the IDTs is critical for raising its frequency, and so some advancements have been and are constrained by lithography capabilities. BAWs, and later FBARs, were actually one method used to circumvent this limitation, it then becomes limited by deposition thickness.

The complexity between SAW and BAW filter also vary wildly, while a SAW can be made with 1-3 masks, BAW filters require 9-13.

[0] https://www.youtube.com/watch?v=L8jmHtfVmPY
libselinux is the userspace tooling for selinux, it is irrelevant to this specific discussion as the backdoor does not target selinux in any way, and sshd does not have the capabilities required to make use of the libselinux tooling anyway

libselinux is just an unwitting vector to link liblzma with openssh
I feel like I'm missing smth here?

Voice cloning has a good benefit to drawback ratio compared to many technologies. Threat actors with enough resources could always clone your voice. Everyone can hire voice actors. Costs more time and money sure, but it was always possible.

Beneficial use cases:

* Accessibility: Give people that lost their voice their voice back.

* Personalized Digital Assistants: More humane voice.

* Voiceovers: Sick content creator can let the AI do the voice, filmmakers can fix mistakes in post and so on and so forth.

* Language Learning: Learn an accent by mimicking how the AI voices yourself in the target accent.

* Audiobook Narration: Make a good audiobook out of a textbook.

* Preservation of Cultural Heritage: Preserve an accent that's about to die out.

* Corporate Training: Believe it or not, a robotic voice sucks to listen to after a while.

* Interactive Gaming: Entire virtual DND campaign based on a prompt with AI generated world, story, and characters drawn and voiced by AI with quality control by AI.

Now compare that to guns, tanks, flamethrowers, chemical weapons, atomic bombs, hydrogen bombs, killer drones and bombers. Yeah uh... death. Made to kill people.
Yeah, but timestamp is only one of the keys you might like to sort on. To sort on anything else you'd have to augment the UUID anyways....why is a timestamp so important that it is put in every UUID, whether the user needs it or not?
I started as a hedge fund manager at 23 doing global macro at Pictet & quit when my son was diagnosed with autism to build an NLP team to analyse clinical trial & other data and undertook pathway analysis of neurotransmitters focusing on GABA/Glutamate balance to repurpose medicine to help him filter, after which he went to mainstream school.

One of the things I am focused on now is bringing that research with the new medical LMs so for autism, cancer, MS, Alzheimer’s & more everyone has comprehensive, authoritative and up to date knowledge at their fingertips on these and also a guide so they never feel alone and helps them on their journey if they or a loved one gets this diagnosis.

It will be open and transparent, took a while to build to here but looking forward to next steps.

There is more to life than power and money.
> we may not have the same luck next time

If the prior is 1 was out there (this one), the chances that there is 1+ still undetected seems fairly high to me.

To behaviourally detect this requires many independent actors to be looking in independent ways(e.g. security researchers, internal teams). Edit: I mean with private code & tests (not open source, nor purchasable antivirus). It's not easy to donate to Google Zero. Some of the best funded and most skilled teams seem to be antivirus vendors (and high value person protection). I hate the antivirus industry yet I've been helped by it (the anti-tragedy of the commons).

Commonly public detection code (e.g. open source) is likely to be defeated by attackers with a lot of resources.

Hard to protect ourselves against countries where the individuals are safe from prosecution. Even nefarious means like assasination likely only work against individuals and not teams.
“The thing that controls scope is the count of certain nonprinting characters, which happen to come in multiple widths” is reasonably insane, yes
Yes. Nothing leaves your browser.
So you acknowledge that “they will simply refuse to do business with you” is false.

Anyway, I’m actually them for home internet service and didn’t give them a SSN. No idea who you where you got the idea from.
“Fitted sheet” (sheet with elastic on the corners, a little smaller than a same-nominal-size sheet) that covers the mattress, regular sheet, optional light blanket, comforter, optional quilt or something like that if it’s very cold. That’s standard bedding around here (US Midwest). This duvet-only (not counting mattress cover) stuff is wild to me. May have to try it.
Folks who run Debian SID or Fedora testing may disagree.
I refuse to buy any duvets that don't have the holes. It's too much of a convenience.
Yes mixing tabs and spaces is a big no no and rightfully throws an error now
The person who added the malicious blobs and signed the compromized archives was literally a maintainer of the project.
Ask HN: I'm an engineer, where to find designers?
I'm looking to get back into consulting/contracting on development work. In the past, I've started working with designers that I've partnered with. I was lucky to have met them from the start. Now that I'm getting started from scratch again, I need to find a designer. Any place online that's designed for engineers/product/designers to meet / match?

Also, what are some ways an engineer can find contract work that does not involve having to have a designer as a dependency.
Lmao it’s a state actor bro
Can you share a bit more about how the rest of us can go about doing the same (purchasing and conserving land)?
Memory Access Patterns and Performance
[dupe]

More discussion: https://news.ycombinator.com/item?id=39862404
No I hadn't heard of that one!
These sensors aren’t used for autonomy, this one for example you can tell it is capable however https://www.cbsnews.com/news/robot-dogs-to-patrol-southern-b.... OP pic sensors are fpv cams and collision avoidance, so of you drive it to a wall, it will stop before hitting it.

> photos are from an AP News photographer. One of the things I learned in journalism class is to always try to get a person in your photo, as it helps humanize the story

Interesting, I didn’t know that, thanks for sharing it!
This entire channel is great; the water conservation stuff is really incredible and a problem overlooked by people with the means of building rockets and atomic space clocks.
He is an author of several Common Lisp packages, so I think that angle is covered.
Nathanael Huffman (Oxide Computer) Talks FPGA – Microarch Club
Xz: A microcosm of the interactions in open source projects
This could also be an interesting Topology lesson.
And even that is suspect, considering that the Japanese text is nonsense and the clothing is of course not produced in either Britain or Japan[1]. Kudos to them for actually specifying their factories though!

[1]: https://corporate.superdry.com/media/mswf3cml/public-factory...
Nothing wrong with expressing an opinion, and I'm not here to defend you against downvoters, but from my perspective it's an uninformed opinion. All of the "issues" you identified are really just preferences and the dev was kind enough to let you configure the app as you'd like. It would be impossible for the dev to create a set of custom settings that every user finds perfect, so your other comment about "hostile defaults" comes across as entitled

The app is incredibly good. It does everything you could want, it's less than 10MB, blazing fast and easy to use. Super configurable. I used to have to fight with IT to have it installed or find a way to run some portable version just to have it at work.

I can't speak for others, but I think if you had spent a little bit more time trying to figure out the solution to the issues you identify, you would have found the answer, but somehow you are instead blaming the dev, which is what IMHO warrants downvotes.
That's GROSS profit. That's basically saying that the same as the article, they have insane margins, selling 5$ pills for 1000$. They have to pay for the other stuff. Net income was 5.6B. Still, a lot but yeah it's a big company.

GILD is down 10%+ YoY. SP500 is up 28% YoY. Or Cigna (health insurance, also 100B market cap) 43% up
Trees burning and then forest regrowth is carbon-neutral. (Today's fire releases the last few decade's worth of CO2 temporarily, but then starts recapturing it.)
The chief engineer is the one who makes final engineering design decisions.

What industry are you in? In deep-tech / hardware the role of chief engineer is well understood. In biotech it is sometimes called chief scientist.
Not sure you have to be tall, you can do this flat on a bed just by shaking from the bottom instead.
'Better than a real man': young Chinese women turn to AI boyfriends
To be fairer mainstream only ever mentioned Silk Road for the past 12 years consecutively and I only occasionally see another market when the Department of Justice does a press release, despite Silk Road being gone for a decade all the same

All markets were immediately bigger than Silk Road and continued growing far beyond what silk road ever was, bigger by every metric such as number of listings, breadth of types of products, volume, more advanced, more resilient to government fund and server seizure attempts…

We dont actually know if it was a “unknown darknet site” or one of the major ones, or simply a link posted on a Dread subreddit
Huh, the code with a dot is not legal C. It is CMake issue that the test breaks here.
Awesome news!

I've been running a few versions of the RCs for NetBSD 10 on a Pine RockPro64. A few reasons NetBSD 10 is a good choice for this Aarch64 device:

- Handles ARM's big.LITTLE well. You can use /usr/sbin/schedctl -A 4,5 to pin a process to the fast cores.

- Generally rock solid -- I've had uptimes in months and generally only rebooted when I upgraded. Like today!

- Can boot from an eMMC instead of an SD card.

- Supports the PCIe card. I have an SSD adapter. You can even use ZFS.

- HDMI support.
Transhab is kinda still around (or at least was until the pandemic), and even has a fully functional package hooked up to the ISS:

https://en.wikipedia.org/wiki/TransHab

https://en.wikipedia.org/wiki/Bigelow_Expandable_Activity_Mo...

Image sequence of it inflating in space:

https://commons.wikimedia.org/wiki/File:BEAM_module_expansio...
I wonder why it was useful to prevent Landlock from being enabled in xz. Perhaps a later stage was to inject malicious content into xz archives? But then why not just inject malicious activity in xz itself?
When the backdoor is loaded by sshd it could modify the gcc/clang install, or some system header file.
Thanks for sharing your story.

Big companies also just make mistakes. They can accidentally ban you and not feel like fixing it.
People are becoming less and less inclined to read I think.

I found myself watching a video on YouTube today that was just a guy telling a joke while totally unrelated but pleasant visuals were being displayed.

Half way though I thought to myself "Is this a genre?".

I think you are right. If you have a piece of content whether that be text or audio it makes sense to turn it into a video. You are gaining a new audience and the video platforms have large audiences that are being force fed content.
If there’s such a huge profit margin wouldn’t additional local firms have wanted to get in on the bidding?
As I understand it, refinement culture has nothing to do with quality per se, rather it's about the elaboration of tropes and other recognizable patterns. Think ornamentation rather than architecture.
Will photonics become competitive on a MIPS per watt basis in the long term?
[dupe]

Some more discussion: https://news.ycombinator.com/item?id=39424765
Does this imply that the difference will be coming out of the franchisee's pocket then? No one else is impacted?
Ask your distro. On Arch, it's 5.6.0-1 and 5.6.1-1. Most of Debian (outside sid/unstable) is unaffected, as allegedly is Red Hat.

https://archlinux.org/news/the-xz-package-has-been-backdoore...
Bridges can be designed to handle that kind of collision. This article discusses some of the ways it can be done [1].

[1] https://www.cbsnews.com/news/how-to-protect-bridges-from-shi...
I'm really surprised they did a call to system() rather than just implement a tiny bytecode interpreter.

A bytecode interpreter that can call syscalls can be just a few hundred bytes of code, and means you can avoid calling system() (whose calls might be logged), and avoid calling mprotect to make code executable (also something likely to raise security red flags).

The only downside of a bytecode interpreter is the whole of the rest of your malware needs to be compiled to your custom bytecode to get the benefits, and you will take a pretty big performance hit. Unless you're streaming the users webcam, that probably isn't an issue tho.
waiting for a new bot to scan everyone's repos to find "." and then spam every repo with false positives
Not opposed to raising minimum wage, but this law seems oddly specific, and has fairly goofy exemptions. We're going to see the usual side effect of businesses changing their behavior to become exempt.

They have a FAQ explaining the rules here: https://www.dir.ca.gov/dlse/Fast-Food-Minimum-Wage-FAQ.htm
I never test for this in this way in my C projects. I also rely on version tests only.
I'm not bitter, I'm wary of systemd in a security context. Their vulns seem to be a result of poor choices made deliberately rather than mistakes or sloppy coding (e.g. defaulting to running units as root when the UID/username couldn't be parsed). Lennart was staunchly anti-CVE, which to me seems again like making a deliberate choice that will only hinder a secure implementation.

I haven't followed systemd too closely, has their stance on CVEs at least evolved?

https://soylentnews.org/article.pl?sid=17/07/30/0251232
This seems completely unrelated to the grandparent comment’s mention of open source LLMs
I was thinking of an actual physical keyboard. I guess some people might go for the air one, that will be interesting to watch.
There are resources to track progress on promises. They have similar for the provinces. Pretty decent slow n steady progress on various promises.

https://www.polimeter.org/en/trudeau
I very much prefer FastStone image viewer
My understanding is that we know somehow already what the exploit allows the attacker to do - we just can't reproduce it because we don't have their private key.

Technically, we can modify the backdoor and embed our own public key - but there is no way to probe a random server on the internet and check if it's vulnerable (from a scanner perspective).

In a certain way it's a good thing - only the creator of the backdoor can access your vulnerable system...
Vintage Story is quite polished in my experience. It's a bit disappointing content-wise though. The tech progression doesn't go very far, and what's there is nearly identical to the TerraFirmaCraft Minecraft mod.
I didn't want to start shitting on alternatives, but cmake is in my experience clearly the worst of all options.

It seems that more often than not, cmake setups work on the developer's own machine and nothing else. And the choice of undocumented "-DSOMETHING" is about as user hostile as it gets.
In other games it's called Strategic Zoom and it's an impressive feature whenever it crops up.
Your (their) mileage may vary. I set up Headscale with external auth and it's been a dream, the kind where I don't really have to think too much about it. The only little gotcha is that sometimes getting the iOS client to read the server url from settings can be tricky. But once authed, it "just works" for me.
Spark probably powers 90% of FANG batch data pipelines. Theres still lots of hive and Hadoop clusters out there that are just being maintained for reporting until they get funding to swap to some fancy DBT setup.

Spark is pretty much ubiquitous and the default solution for batch processing right now (especially pyspark). There’s also a lot of users of AWS Glue with spark.
I think Canada has way bigger problems to worry about
Hmm. I wasn’t trying to make a point. I was asking a question. What is your point?
you are very polite, thank you very much
So you're saying Hacker News posts are simpler and more repetitive than they used to be?