skysight-inc/HackerNews huggingface dataset:
> The people who wrote this code might be sitting in Virginia or Maryland already.

Sure, that’s possible. They will as a result probably avoid traveling to unfriendly jurisdictions without a diplomatic passport.
> and the people standing up the proxy didn't know at the time how ACME worked

yikes
Is QGIS too bulky?
It’s just BS, they offer prepaid service without any credit checks. Thus the upfront payment.

https://www.att.com/prepaid/plans/

IMO that 300$ upfront for a year plan is really compelling if you’re not constantly watching videos on your phone.
They made a product that people want to pay lots of money for.

I don’t see why they should not be allowed to price this product to meet the insanely high demand.

How much it costs to make is irrelevant to the discussion. This drug wouldn’t have existed without Novo Nordisk, they deserve to profit so they can continue making new drugs.

What is next, should we limit the amount of money JK Rowling can make off her books because it is essentially free to produce?
Since a liblzma backdoor could be used to modify compiler packages that are installed on some distributions, it gets right back to a trusting trust attack.

Although initial detection via eg strace would be possible, if the backdoor was later removed or went quiescentit would be full trusting trust territory.
The jobs being replaced by AI – an analysis of 5M freelancing jobs
You know what else is cheap and helps with weight loss?

Bicycles.
At least for some comic relief I'd like to imagine Jia's boss slapping him and saying something like "you idiot, we worked on this for so many years and you couldn't have checked for any perf issues?"

But seriously, we could have found ourselves with this in all stable repos: RHEL, Debian, Ubuntu, IoT devices 5 years from now and it would have been a much larger shit show.
The great rewiring: is social media behind an epidemic of mental illness?
A little surprised have not seen any complaints about "the new Gmail". (Perhaps I have missed them.) No more basic HTML version. The "update" gives new meaning to the phrase "phone home". The telemetry and data collection is way more than just knowing which emails the user reads. Just waiting for Google to demand that the user turn on camera and microphone in order to read mail. It's like computer users cannot say "no" anymore and the so-called "tech" companies know it. Anything goes.

I have some workarounds but TBH it seems like using POP3 to download all mail and store it on own media might be best solution.
Long ago, I tree planted for a few weeks one summer as a teenager where everyone was was paid by the tree. I worked very hard to planting trees properly using correct techniques to help maximize the probability of their survival. There were a couple of "ultra high performing" teams that we eventually learned were simply burying trees. I thought eventually they would be caught and fired but in the end the management company was also in on the scam - ultimately declaring bankruptcy and no one got paid. It was an interesting lesson for me both in terms of doing truly hard work / living in nature as well as corruption in government contracts.

Given Justin Trudeau's abysmal corruption and competency records, I expect that money will be buried in Katimavik Bitcoin wallets - no need to bury actual trees.
Can someone explain succinctly what the backdoor does? Do we even know yet? The backdoor itself is not a payload, right? Does it need a malicious archive to exploit it? Or does it hook into the sshd process to listen for malicious packets from a remote attacker?

The OP makes it sound like an attacker can send a malicious payload in the pre-auth phase of an SSH session - but why does he say that an exploit might never be available? Surely if we can reverse the code we can write a PoC?

Basically, how does an attacker control a machine with this backdoor on it?
Oh man, VB6 was the pinnacle of writing desktop software. The language itself wasn't great, but the overall experience was stellar.
I see many people get confused by this due to the widely spread (and false) "stochastic parrot" theme. But these models are much more than mere senzence-repeaters. In a way, the model is not learning that after A comes B. I mean, it could. With a lack of additional training data it probably would, too. But with enough data, this kind of sentence completion based purely on existing sentences no longer works because it would saturate parameters. So to retain and improve accuracy during training, it will have to come up with a compression that essentially forms a model of the real world. Or at least the world that the training corpus describes [1]. In that sense, it no longer "knows" that B comes after A (except for the input context), but it would have learned that there is a special relation between A and B. In can then also apply this kind of learned logic to new concepts that appear first in the context during inference. With all that happening internally, it only has to morph this state back into a natural language output. But with billions of parameters and countless layers, there is more than enough computational room for this to happen. In fact, recent models have shown that even small models can get pretty good at logic if you only get the training data right.

[1] https://arxiv.org/abs/2210.13382
I want Pharma to be incredibly profitable. I want kids to sign up for chemistry majors hoping they can work for pharmacy companies rather than sign up for computer science hoping they can work for companies serving ads.

I want there to be full employment for experts in drug design and testing.

I don’t want Pharma to be a limited profitability industry that slowly loses money and talent to other industries such as tech or entertainment.

I want kids to dream of becoming the next billionaire by develops drug that cures cancer rather than becoming a billionaire by inventing a more addictive social media app.

Talent goes where the money is. If the money gets removed, the innovation will slowly go away. And like with Boeing, it may take decades for the results to be fully realized.

Covid-19 demonstrated how important Pharma was to society. With the vaccines, Pharma yielded a consumer surplus of literally trillions of dollars (just from being able to re-open the economies).

Yes there was academia that had the basic research, but you needed companies and scientists that had years and years of experience designing, testing, productionizing, and distributing medicines and vaccines.
Wouldn't be better for people to simply eat better? Obesity levels are much lower in Norway than they are in the UK and US. As far as I can tell this is because in Norway we simply eat less fast and ultraprocessed food.
https://youtube.com/@FoldableFlight

Paper airplanes! Very low effort, high reward, especially if there are kids in your life.
The stronger result here is that any sort of conversion you can explicitly specify can be turned into a program.

Since Kolmogorov Complexity is specified in terms of lengths of programs, that means the KC between two different pairs of encodings can differ at most by a constant amount (the size of the program that converts back and forth).

The above is a bit handwavey, there are details you can tighten up (Is it the program size or something smaller? The program length in which encoding?), but heuristically that's why theorists can talk about "the" Kolmogorov complexity without getting bogged down in with pesky encoding details.

It's also why we usually don't worry too much about the fine details of Turing Machines (alphabet, etc.), since you can generally emulate one sort of Turing Machine pretty easily with a short program written on another.
Exactly, living in Europe, I've literally encountered the sheet+blanket combination for the first time a week ago, in a hotel. Duvets with covers ARE the norm.
My duvet covers have ties you can use against any duvet.

My parents used to use safety pins.
Specifically if using SQL then use prepared statements or equivalent and ensure that the SQL user account uses for queries is restricted to doing just that.
Digging a Secret Tunnel - https://youtu.be/YOelRv7fMxY?si=mSfduDjj7SrmUCsk
thanks for objectively confirming subjective prejudices
CFAA covers this. Its a crime to

> knowingly [cause] the transmission of a program, information, code, or command, and as a result of such conduct, intentionally causes damage without authorization, to a protected computer;

Where one of the definitions of “protected computer” is one that is used in interstate commerce, which covers effectively all of them.
It's very speculative, but I'd say a decrease because people couldn't get things done that require driving or are easier to do that way.
Would it really have caught it?
It's fun to say ¯\_(ツ)_/¯
That's very cool lol
God damnit. Now I’m bound to someday call it “girlfriend zip” out loud at work and it’s gonna be a whole thing.
Kinda off topic but what is the name of the background on this blog? i.e. those patterns do they have a name? My mom used to have the same patterns on some sheets as a kid but no clue what they're called?
What is constantly overlooked here on HN is that in legal terms, one of the most important things is intent. Commenters on HN always approach legal issues from a technical perspective but that is simply not how the judicial system works. Whether something is “technically X” or not is irrelevant, laws are usually written with the purpose of catching people based on their intent (malicious hacking), not merely on the technicalities (pentesters distributing examples).
the Cray supercomputer was designed while Seymour dug a tunnel: Another favorite pastime was digging a tunnel under his home; he attributed the secret of his success to "visits by elves" while he worked in the tunnel: "While I'm digging in the tunnel, the elves will often come to me with solutions to my problem."

https://en.wikipedia.org/wiki/Seymour_Cray
To be fair, it didn't help the provider's docs were inconsistent about whether dns-01 or http-01 was to be used.
I also learned it from my grandparents, but I've been the one introducing it to a number of people in my life. Some of them have described it as black magic — so it's not very well-known.
Because the antidepressant and drugs newer Americans take in handfuls weren't so prevalent then.
Pfizer's world wide net income was $2.12bn USD in 2023.

I guarantee you 100% of that came from the united states.
Then it is like changing your shirt every two months? You do sweat when sleeping.
Greetings from Ukraine, country at war with Russians, who thought they are genuine descendants of USSR.

Long before Ukrainian war, I've many times talked with Russians about bombs used on Japan.

And now I must say you very important thing - Russians are so crazy anti-humanists, that this really could be reason for fears of Japanese about USSR invasion.

To be honest, I think bombs was enough to intimidate Japanese, but I think, even without bombs, Russians behavior at war, with US Land-lease technical/economical support would be enough to convince Japanese to surrender, may be later, sought.
Better yet, there are electromagnetic covers that allow you to drop the "leaf" while you're being pulled over for plausible deniability.
It was depressing in 2008, now it's just pathetic. It's no wonder they feel so emboldened to continue fucking people raw for their medications, they have hordes of defenders in government and otherwise ready to offer page upon page of apologia for their rampant profiteering.
How much do you know about this? Novo Nordisk sponsors many universities around Denmark, they pay a lot of money for those graduates.
Irfanview is so fast that I don't need to convert image sequences to video format. I can just press and hold right arrow key. I do wish there was a way to limit the speed though.
I learned about it from the Superdry brand which is a Japanese brand.
Is this implementing a file system using shader code? Thats insane

are shaders turing complete ? ;)
It is indeed and sometimes it can go either way depending on the time point. A good example is what eventually became the PW GTF, the PW8000, discussed here:

https://cornponepapers.blogspot.com/2006/04/short-life-and-u...

Just a little bit to early but when they came back to the idea they ended up with a technology that they use on all their new (big) commercial engines.

For anyone that doesn't know the name Kelly Johnson I recommend "Kelly: More Than My Share of It All". A rare person who combined technical genius with an ability to get large scale things done.
In India, it's fairly common for minority passengers/drivers on Uber/OLA, mostly Muslims and lower caste people, to be refused service/patronage from some bigoted upper caste customers. While the numbers are very small, they make headlines.

Now Zomato basically crafted this policy for God knows what reasons. Nobody gives a shit on how their food reaches them, as long as it reaches fresh and intact. No one except the same aforementioned group of bigots. There are some members of the upper caste community which tend to be very fanatical about their food preferences and seek to impose vegetarianism by proxy, including by demanding their food only be delivered by vegetarians. There already are restaurants which are staffed by upper caste members only, and this policy would be an extension of it.

I don't know what's Zomato's motivation behind it, except for a.) fanning a flame onto a non-issue to get a leg-up against the competition (it's an election year and some folks are going to be stoked about these kinds of policies), b.) currying favor with the upper caste majority, c.) currying favor with the current ruling party which likes these types of policies (fwiw the same party banned Halal meat in one state which they govern) d.) the CEO is just displaying his inner bigotry, e.) other not specified.

A Pure-veg mode is actually a good policy that helps the customer - ironically, I know a lot of Muslims who use such filters to stick to veg when travelling in places without Halal food. But having a Pure Veg Fleet is a purely bigoted policy that reeks of some kind of "vegetarian apartheid".
Despite being a co-author of the DeepSMILES paper, my interest has been to apply generative methods to fuzz test SMILES parsers, so never really got into the whole SELFIES v. (Deep)SMILES debate.

Instead, I came here for a bit of sniping. It's a bit of fun to date when the research started by looking at it's data sets. The paper uses "ChEBML (version 28)"; ChEMBL 28 came out 2021, and hasn't been 'latest' for nearly three years.
Paisley
As a kid we didn't have duvets. It was all sheets and blankets. Duvets were a bit new-fangled so it's not surprising the knowledge wasn't passed down.
I didn’t raise it.
I use the rolling method for the joy it brings each time :)
> If you cared about fairness, paying for what you use is about as fair as it gets.

Only in a libertarian fantasy where you only deserve, as a human being, what you personally pay for - even access to public roads! Should the wealthy have privileged access to everything? What about those wealthy people who pay no taxes?

We all are subsidized very heavily by our ancestors - consider the difference between a barren country devoid of all development and what you were born into. And more importantly, what humans have a right to, what is moral, etc. does not depend on money. Fairness isn't generally or primarily dependent on how much people spend.

Roads are public goods, built by everyone for everyone.
If you want something with GUI out of the box, consider GhostBSD. IMHO OpenBSD also has an advantage when being used as a laptop or desktop because its developers seem more inclined to daily drive it than free/net.
Duvets are really warm, good in winter for cold houses without good insulation. Often they're as warm as three or four or even five woolen blankets, but much lighter. Four blankets on top of you is heavy.

I find them annoying in hotels though, where the rooms are usually pretty warm. They use relatively thin inners but they're still usually way too hot for the conditions.
Turns out many many of the drug companies have been abusing the systems. The feds created a process for handling drug patents, and companies keep filing extenuating patents on existing stuff, and they also have been submitting not just drugs but devices to the registry illegally too, to hold monopoly. No one has guarded the registry.

FTC is finally taking some charge, after all the other agencies (patent office, FDA) have failed to do any enforcement.

Really good recent write up by the usual king of company & capitalism watching, https://www.thebignewsletter.com/p/monopoly-round-up-how-ftc...
I read the statute and I'm confused why it applies. It talks about integrity of elections and not forcing people to vote a certain way..

130.028. Prohibitions against certain discrimination or intimidation relating to elections — contributions by employees, payroll deduction, when...
Does the Go SDK even have any third-party dependencies? How could something like the XZ backdoor happen?

Also, given that Go binaries are statically linked, if you can't rebuild from source, you're screwed. You need to get good at building from source.
I just purchased a very small part of a forest, an inholding within 8000 acres of protected land trust and 40,000+ of national forest surrounding.

Having no clue of the actual number, I suspect I now own thousands of trees. Last week, I owned zero trees.

Thankfully this US state offers multiple forms of conservation easement, which will allow me to keep trees on 99% of the land (building two tiny homes on dozens of acres). Perhaps I might even generate some authentic carbon offsets?
I recommend just skipping blame and going to git log -L to see the full evolution of a range of lines, I set up a little keybind in vim which does this for the current visual selection and it works much better than blame.
> colleagues of mine could not successfully host headscale themselves

it’d be interesting to know why, I use it frequently at work and it’s worked pretty well so far.
Citations for all of this please.
> Virginia or Maryland

Eastern Europe, suggest the timestamp / holiday analysts. https://rheaeve.substack.com/p/xz-backdoor-times-damned-time...
Congrats on the eighteens major release.
The restaurant industry is an extremely competitive industry, yet I don't see their employees at the large enjoying any sort of prosperity.

Competition helps customers. Unionization helps workers. Both should happen in tandem, not exclusively.
"It's not just good, it's way faster than the bloated alternatives."

Another shining endorsement of "modern" software development (no, check that... software "engineering")

Before I gave up Windows permanently, and that was over 20 years ago, I used this program.

The more things "change" the more they stay the same.
You are correct, this is the one I meant. It claims to handle windows clipboard "shortcomings" by remember previous entries and allowing you to access it easily (allowing for multi copy paste situation), and it does just that and do it well.
I think that depends on what I'm trying to illustrate

There's a lot of pensions and savings tied up in Novo stock, so a potential downturn would have a catastrophic impact on the danish citizens

The danish economy is, to a large extend, dependent on the stock price of Novo, not its revenue
I did my own research. If you look at the git repository commit log and some mailing list messages, you will see that the author ("Jia Tan", fake name) speaks impeccable English (already lessens the chance of being a Chinese operative), however he commits in the +0800 time zone (Beijing). He works during Chinese holidays and doesn't work during Western holidays.

However, the times don't make sense: It looks like he works mostly at 2am: https://files.catbox.moe/6mdtez.png (hours in the +0800 timezone). I understand this to be indicative of using a different timezone on the computer than where he actually worked, possibly knowing that git commits include the timezone.

If you shift the timezone to US East Coast -0400, it suddenly looks like a very comfortable full-time job, including a fall in commit rate right where the lunch break should be: https://files.catbox.moe/dtvjzr.png

To me, considering that this appears to be a nation-state tier attack, heavily indicates that it was the Americans. Obviously not conclusive proof, but I think it is useful evidence.
Bernie Sanders: "These are difficult times for our country." [video]
Grew up in the Midwest. Unusual in my family and circles. I’ve known what they are since some time in my teens (there’s… a chance the film Fight Club’s actually the first time I both encountered the word and put together some idea of what it specifically meant, though I’d heard it before and thought it was just a fancy word for “comforter”) but we never had any, I’ve never put a cover on one, and I’ve never seen someone putting a cover on one.
That thread has become an online event and obviously lost its original constructive purpose the moment the malicious intent became public. The commenters are not trying to alter history, it's leaving their mark in an historic moment. I mean the "lgtm" aged like milk and the emoji reactions are pretty funny commentary.
Eli Lilly was the first commercial producer of insulin at any significant scale.

Genentech developed biosynthetic human insulin using engineered ecoli.

Eli Lilly produced the first of the modern synthetic insulin analogs.

Literally every major breakthrough except the initial bovine extracts were done in the US.
Actually, the new architectures are a big source of concerns. As a maintainer of a large open source project, I often received pull requests for CPU architectures that I never had a chance to touch. Therefore I cannot build the code, cannot run the tests, and do not understand most of the code. C/C++ themselves are portable, but libs like xz needs to beat the other competitors on performance, which means you may need to use model specific SIMD instructions, query CPU cache size and topology, work at very low level. These code are not portable. When people add these code, they often need to add some tests, or disable some existing tests conditionally, or tweak the build scripts. So they are all risks.

No matter how smart you are, you cannot forecast the future. Now many CPUs have a heterogeneous configuration, which means they have big cores and little cores. But do all the cores have the same capabilities? Is possible that a CPU instruction only available on some of the CPU cores? What does it mean for a multithreaded application? Would it be possible that 64-bit CPUs may drop the support for 32-bit at hardware level? Tens years ago you cannot predict what's going to happen today.

Windows has a large compatibility layer, which allows you running old code on the latest hardware and latest Windows. It needs quite a lot efforts. Many applications would crash without the compatibility patches.