skysight-inc/HackerNews huggingface dataset:
Well, there’s ups and downs. In theory, we should be able to automatically generate tests for all of our software. There are methods that include path-based, combinatorial, symbolic, model-driven, etc. While some options are generic (eg range test on primitive types), most tests need a good understanding of what is correct vs incorrect behavior.

That brings us to the other problem: software specification. We can’t even know if software is correct if we don’t precisely define what correct means. Same with “secure.” So, we need specifications of each property we want to check. Then, we can use a variety of methods, including testing, to check those. Developers usually don’t specify the correctness conditions. The tools for doing so aren’t great for developers either.

Enter fuzzing. It can do something similar to path-based and combinatorial testing with no user guidance. Many failures cause crashes or other obviously bad behavior. That gets value on software without specifications.

Even if we specify things, we might not get all the conditions right or every module covered. Maybe a developer updates code without updating the specification. While model-based testing is good due to human effort, fuzzing will catch what they missed by not depending on human efforts.

So, there’s better methods to test software from both an efficiency and accuracy standpoint. Yet, the labor involved plus room for human error makes fuzzing a valuable tool in the toolbox. There’s no shame in using it.
Potentially the purpose is that if someone goes to the effort to get those details together, they are more likely to send the same report to other trusted individuals. Maybe it was originally there to add legitimacy, then they got a report sent in, and removed it to slow the spread of awareness
CurlFtpFS – A FTP filesystem based on cURL and FUSE
There are national park-like things that existed before, but they were often technically owned by the King or somesuch.
psa that dude pretty much invented his life story out of whole cloth.
California's spending per pupil is so high right now? 24,000$? It's so bad that at this point it's more of a jobs program for unions
People like to eat.
If libarchive is also backdoored, would that allow specifically crafted http gzip encoded responses to do bad things?
How many people read autoconf scripts, though? I think those filters are symptom of the larger problem that many popular C/C++ codebases have these gigantic build files which even experts try to avoid dealing with. I know why we have them but it does seem like something which might be worth reconsidering now that the tool chain is considerably more stable than it was in the 80s and 90s.
https://archive.is/hJBD3
Does anyone know if this works on vanilla deep networks? These quantization articles always seem to target LLM's which leads me to wonder if there's something special about the LLM architecture vs a vanilla deep architecture.
From the abstract:

“Although previous research has shown that homework improves students’ academic achievement, the majority of these studies use data on students’ homework time from retrospective questionnaires, which may be less accurate than time-diary data. We use data from the combined Child Development Supplement (CDS) and the Transition to Adulthood Survey (TA) of the Panel Study of Income Dynamics to explore the effects of time spent on homework while attending high school on two measures of academic achievement: high school GPA and college attendance by age 20. We find that homework time has no effect on these measures of academic achievement.”

Rønning, M. (2008). Who benefits from homework assignments? (Discussion Papers No. 566). Oslo, Norway: Statistics Norway, Research Department. Retrieved from https://eric.ed.gov/?id=EJ908287 Full text available http://www.ssb.no/a/publikasjoner/pdf/DP/dp566.pdf
"this hurt in particular because our data was very much relational."

Umm... why would you not choose a relational engine to start with? This isn't said with the benefit of hindsight. I worked with Lotus 123 back in the early 90s. I get that there's value in document databases, but even then, there were limitations, and the need for the ability to have structured/related data in an engine that easily allowed for ad-hoc queries out of the box was apparent.

I watched the entire nosql/mongo movement arise and evolve over time, and it rarely made sense to me. Even when mongo made sense for a problem... it only makes sense for that problem, and not as the primary basis for your entire application. Relational/SQL, with nosql/mongo/etc as secondary/ancillary data store has always made the most sense (imo).

JSON columns in major databases now tend to provide a pragmatic balance of "good balance for many use cases". Justifying something other than that as a starting point is possible, but I've rarely seen cases where it makes sense to avoid a decent SQL engine as the core data store for your business apps.
The article didn't seem to mention anything even slightly along these lines, and not at all in the intro. The closest it gets is "it tastes best around 135F" - insulated mugs can do that too, they just won't keep it exactly there for hours.

If you're using an AI summarizer, maybe check the output more closely?
I think there has not or not much. However, we seem to consume the meat differently like processing it heavily, cooking it at very high temperature. These actually produces lots of carcinogens that add up over time. Sugary food can cause lots of body inflammation which can fasten the process.
...God needs ev'ry number
To enumerate!
So I take it you endorse the Amazon-backed fork? Amazon too strives to be self-sufficient, and has moved on from Redis because the factors are no longer conducive to its goals.
I just bought one a few weeks ago, and as one who has gone through two of those eyewateringly expensive Ember mugs (still have one), I want to like this mug. I thought this would be a good replacement for the Ember without all of the fiddly electronics.

One thing the Joeveo does do is bring the temperature down from "are those blisters on my tongue?" to a reasonable temp relatively quickly. What it doesn't do, apparently, is keep drinks hot for very long. I've only used it a few times so far, but one Saturday I took a mug of Joe on the drive to a club run and drank about half of it on the way. Came back two hours later, and the coffee was lukewarm. It's a double-walled mug, any other double-walled mug I've used for this exact use case results in reasonably warm coffee when I get back. The only difference is that the Joeveo has the PCM layered in there. (And the $200 Ember travel mug would still have 145F coffee even after several hours.)

I had high hopes, and I'll keep experimenting, but so far the Joeveo mug has been a disappointment. Thankfully it was "only" $50.
Domestic work is still work. Shouldn't that be acknowledged, credited, and compensated?

Instead of excluding this necessary labor and forcing homemakers and carers into dependence, document it, if that's the issue. The same is true when children care for elderly parents and grandparents, or the disabled, or any of the hundred other scenarios that occur that we don't see.

Otherwise, what, every spouse and partner should register themself as a business and invoice their household? How perfectly transactional would that be.

"I love that what we share, to the limit that our long term interests intersect with sound fiscal and economic practice, my love. Please don't forget to bill me at the after hours rate for asking you to move my laundry over."
If a GPL-ed project requires copyright transfers and then spins a proprietary version, it makes sense for people to be upset.

But Redis was BSD or BSD-like, no? Proprietary forks can happen with or without CLA, so it is moot.

I would say rather the opposite. If a developer contributes to a BSD (or similar) licensed program (under that same license of course), then at that point they are letting anyone anywhere do whatever they want with the code, as long as copyright notices are preserved. Then, if someone forks a proprietary version of the program (in a way that complies with that developer's license for those files) and that developer gets upset and tries to revoke the copyright license, that developer is the bad actor, not the forkster.

In the context of BSD-like permissive licenses, requirments for CLA, I think, would only be a form of legal safeguard against such situations, where people change their mind.
shorter version: Cochrane Review on efficacy of masking vs. respiratory disease
The top men will have harems and many children. They will probably share power and wealth with their sons and daughters (or in-laws), and if it's not enough for the sons to have their own harems, they'll have a wife or series of wives. And in a few generations the huge amount of children from the elite will have diluted their wealth and power significantly.

So the result is that most women and a few men will have offspring, the rest of the men are exterminated from the genome. A future generation of people having a lot of cousins, with all the genetical diseases it brings.

Every new significant invention means massive genetical extermination of males and a new cycle of power struggles. A stable society with monogamy and equality among people is a rare breather.
City limits are irrelevant, what matters is urban density. If you work 8 blocks from where you live, you're going to have a short commute regardless of whether people living 20 miles away are considered to be in the same administrative region.

19.63 km is the average commute distance in manhattan, one of America's densest cities and a place where most people don't even use cars. The average for america in general is 67.2 km. And those are averages for a daily use. People need cars that can handle the longest distances they would need to travel. People don't drive 500+km every day, but trips of that length are not unusual either. I'm going to be driving 650 km one way tomorrow.
They had a bike/pedestrian day after completing the second span about 15-20 years ago. I wish they did that more often, or hosted some kind of marathon. Seems like a fun idea.
I read a book about particle physics and understood a very small amount of it. My understanding is that you cannot have faster than light anything because nothing can travel faster than light. For instance, the gravitational field of this coffee cup in my hand spans the entire universe. The cup is gravitationally attracting me, the Earth, the Sun, and every other atom in the universe (albeit at a remarkably low level of power). Even this gravitational field is not FTL though, because some particle exists that does the work of attracting. My cup is emitting gravitons or something like that, and those gravitons travel at the speed of light. A graviton leaves my cup, travels at the speed of light to Mars, and when it hits Mars, it attracts it.

What I am saying is that, in my understanding, there is no action that can occur without a particle that acts, and since no particle can travel FTL, nothing can happen FTL.

In the case of Quantum entanglement, mustn't some particle travel from the first quantum thing to the entangled quantum thing in order to have an effect?

I believe that my understanding is flawed! I don't know how to get a clearer view though. Any advice?
The scale is going to keep getting worse though there has been SEO crap, blogspam etc etc since the internet started. This is just the latest. There's an opportunity to build a search mechanism that is immune to the broadening underbelly of the internet, just like there was in the early days.
I have had an ember mug for a couple years now. Never have used the app. Works fine without, unless you want to tweak the temp from default.
AI Products Need Evals
My above post shows the primary domain for xz moving from tukaani.org to xz.tukaani.org. While it's hosted on github:

$ host xz.tukaani.org

host xz.tukaani.org is an alias for tukaani-project.github.io.

And originally it was not:

$ host tukaani.org

tukaani.org has address 5.44.245.25
(seemingly in Finland)

It was moved there in Jan of this year, as per the commit listed in my prior post. By this same person/account. This means that instead of Lasse Collin's more restrictive webpage, an account directly under the control of the untrusted account, is now able to edit the webpage without anyone else's involvement.

For example, to make subtle changes in where to report security issues to, and so on.

So far I don't see anything nefarious, but at the same time, isn't this the domain/page hosting bad tarballs too?
Yes exactly this. How do people think state actors have all those 0 day exploits. Excellent research? No! They are adding them themselves!
Is Fine-Tuning Still Valuable?
Sure today it is, what about in a year or two years? And yes AI models are way more patient than humans for the exact reason you mention, the logistics of that don't matter, the result does
I think it is the same misguided discussion as strongly, staticall typed vs weakly typed languages.

(Mind I mean the discussion is misguided, not you)

The problem is that relational model is a one solution to certain problem of when you want to pay the price of enforcing the model of your data. Relational database is when you pay all the cost upfront.

With MongoDB I have other options.

It does not mean they are necessarily better options. But some of them are better in some situations, for example when rapid prototyping. Or when you need to preserve data in different formats as the application evolves.

Personally, if you can, you probably should model your data upfront. But it is good to have other options, sometimes.
Good work! I just want to point out that WebRTC requires servers for STUN and TURN.

If I may, we also developed an open source solution for WebRTC videoconferencing, livestreaming and even peer-to-peer broadcasting to unlimited numbers of people! Feel free to use it:

https://community.qbix.com/t/teleconferencing-and-live-broad...
Facebook Intercepts Your Web Traffic [YouTube]
Suppose all existing voice actors, and, to be maximally generous, everyone who had spent >1 year training to be a voice actor, was given a pension for some years, paying them the greater of their current income or some average voice actor income. And then there would be no limits on using AI voices to substitute for voice actors.

Would you be happy with that outcome, or do you have another objection?
It makes me a little sad, because we're in this frustrating position of knowing how "effectively unlimited" the universe is, but also knowing how impossible it is to realistically explore it, at least not without a fundamental change to our understanding of physics.

I think it'd be cool to set up colonies on other planets, or hell, other solar systems, but the inability to communicate seems like a pretty hard blocker. I mean, even sticking to the solar system, will start taking six hours for the light to even reach earth from Pluto, assuming it can even have a direct path.

I don't know anything about physics, so I was hoping that the entanglement hypothesis might allow us to fix that, but clearly that wasn't the case. This makes me sad.
PostgreSQL really is eating the database world.

Although in this case, the authors originally chose an architecture that was poorly suited to their data model. They had relational data and put it in a non-relational store. This was obviously always going to cause problems.
Open Source solutions for peer to peer videoconferencing and livestreaming
That could be as well, but we haven't had lots of evidence yet(maybe due to the blocking of plastic industry).

By the time we totally understand the plastic impact on our health, it may be too late.
EDIT: Ahh, I was wrong and missed the addition of "strerror"

The PR is pretty devious.

JiaT75 claims is "Added the error text when printing out warning and errors in bsdtar when untaring. Previously, there were cryptic error messages" and cites this as fixing a previous issue.

https://github.com/libarchive/libarchive/pull/1609

However it doesn't actually do that!

The PR literally removes a new line between 2 arguments on the first `safe_fprintf()` call, and converts the `safe_fprintf()` to unsafe direct calls to `fprintf()`. In all cases, the arguments to these functions are exactly the same! So it doesn't actually make the error messages any different, it doesn't actually solve the issue it references. And the maintainer accepted it with no comments!
>Now when I visit medium-sized cities there I am amazed to find latte-slinging coffee shops and craft beer-pouring gastropubs that would look right at home in Brooklyn.

True, but that's not an accurate measurement of the quality of life or income of the average Romanian. They're are just businesses serving an afluent urban clientele (mostly corporate/IT workers and other high income people) that's like what 10% of the național population or something but overly represented in much higher proportions in the big cities.

Go to the smaller cities or villages and you'll see a different picture: lots of people with precarious education, unemployed or making minimum wage in dead-end jobs and living paycheck to paycheck unable to afford to fix broken teeth, hospitals and schools falling apart, etc.

The country's still much better to live in (especially in the 5 big cities) than what the average of the planet has to deal with, but there's a reason why statistically it's at the bottom of the EU charts. Tech workers sipping gourmet coffee in the big cities are the exception but don't represent the norm.
AAA game engines are really challenging, nowadays you are expected to process everything on GPU. You need to do realtime illumination and collisions in a very performant way. If you can do that, then you might have a chance to compete against industry beasts like Unreal.

Otherwise your best chance is creating a "game maker". A framework with editor that allows people to make simple to medium complexity games easily but won't require high performance. There are a lot of low skilled gamedevs that would love it.

The decent money could come from services you offer around the engine.
Sure but we aren't far off from a GPT-5, this year we will see much more capable models
Like everything in mathematics, "obvious" is a term of art. Broadly speaking, it refers to a fact, proof, consequence, which is necessary for the proof to advance, but which is already established elsewhere, so it does not in itself aid in understanding the proof being presented.

A proof is either providing a new result, or is proving an established result in a new way. Almost always, a proof will need other results, in a way that isn't "interesting" (another term of art). The point of introducing these results as "obvious" is basically to say "here is something which isn't proven by the proof I'm presenting, we need it, but there's no need to derive it to follow this proof", ideally, with a footnote. As language, it is a bit sly: if something is obvious in the normal sense, it will be left out.

It's a problem that the modern style is to elide anything obvious in this sense, rather than in the sense of "anyone who might reasonably read this paper may be expected to know this". But labeling these things as obvious isn't meant in the sense "if you don't know this, you're stupid or uninformed", or in fact "this will be instantly clear as soon as I mention it", it's meant to mean "if you were to follow the breadcrumbs and check up on the 'obvious' thing, it wouldn't help you much in following my proof, so take my word for it. Or, y'know, knock yourself out if this step is interesting to you".
Ctrl+[ - jump to matching paren./brace/bracket

Ctrl+w - scroll up one line

Ctrl+z - scroll down one line

These are the mappings I have set in Joe on my system, the Ctrl+w/z is originally from Wordstar, although I first encountered that mapping in Turbo Pascal 4.
I think the lesson here for packagers is that binary testdata should not be present while doing the build.

It is too easy to hide things in testdata.
I don't want to read too much into it, but the person (supposedly) submitting the PR seems to work at 1Password since December last year, as per his Linkedin. (And his Linkedin page has a link to the Github profile that made the PR).
> a lot of it would have been bankrolled by robber barons trying to secure their legacy and avoid taxation.

Do you have a cite for that?

BTW, donating to charity is tax deductible. For example, if I donate $100 to charity, I can deduct $100 from my taxable income.

My choices:

1. paying taxes: I pay $20
2. donating to charity and deducting it from my income: I pay $100

I'm $80 worse off financially by donating to charity rather than paying taxes. As a tax avoidance scheme, donating to charity doesn't deliver.
Reminds me of the Steve Buscemi meme: https://i.kym-cdn.com/entries/icons/original/000/018/666/fel...
indeed; it should be trivial in any language. Here's python: https://github.com/9001/copyparty/blob/a080759a03ef5c0a6b06c...
Happens to all of us ;-)
> The total taxes you pay on a regular work contract are around 41.5%, and much of that goes to pensions.

With VAT on each purchase (unless you're not living month to month, and are able to set aside some of your income) the effective taxation is closer to 60%.

I don't want to go into the topic of why I think progressive taxation is better than what we have now, but I wanted to raise this point because many stop at the tax rate on their salary.
Agreed, hearing about AI is unavoidable just by the sheer number of non-tech people who are impressed by novelties such as generative AI and ChatGPT. I have to tell them I'm not into that stuff at all.
While going through this, can't help but think about how ageism sneaks around in the Software Development world. Explains a lot, doesn't it?
It's kind of funny how willing everyone was to believe an admitted conman.

The book I read of his was "The Art of the Steal", and it wasn't really about his personal history, more about his work as an anti-fraud consultant drawing from real-world cases.

https://www.goodreads.com/book/show/138841.The_Art_of_the_St...
Sure, you could read the pattern on he other side, you could been use of as a one time pad to encrypt data you actually cared about
To repeat a comment by another user upthread: hence the relicensing.

I suppose I’m not understanding the point of your position. Software authors cannot fix a licensing mistake by changing the past, but they can use a different license moving forwards.
A lot of eyes will be dissecting this specific exploit, and investigating this specific account, but how can we find the same kind of attack in a general way if it’s being used in other projects and using other contributor names?
Or that the the "quite likely" for 2022 isn't vaporware, or that the "extremely confident" for 2021 isn't vaporware, or that the "million robotaxis" for 2020 aren't vaporware, ad nauseam.

Looking at the broader discussion, I suspect there's some confusion between " it won't be a vaporware promise if someone makes it today" versus "past vaporware promises have been retroactively fulfilled."
Yeah the GitHub account looks really really legitimate. Maybe it was compromised though?
Great link. Thanks.

I still say, sign me up.

As long as we're playing with somebody else's money it would be amazing to try and try again.
xz was masked in the Gentoo repositories earlier today with the stated reason of "Investigating serious bug". No mention of security. It's pretty likely.
Interesting.

I suspect if Apple had done this they would have had someway for the cards to auto-negotiate.

A few years after the Jonathan prototype, I remember fighting with the DIP switches on PC ISA cards and setting the the correct IRQs, and then seeing a friend drop in a NUBUS card into their Macintosh II and the hardware was magically configured. I wonder if NUBUS could have multiple masters?
> tukaani.org has address 5.44.245.25 (seemingly in Finland)

Hetzner?