skysight-inc/HackerNews huggingface dataset:
Just to be clear, nothing from Royal Mail here suggests they suspect reuse.

And the fact it did not tick the reuse box suggests it does not.
Yes, it will be perceived as a stupid career move.

No, people won't really understand.

Is it a bad move? There are no bad moves, only bad reasons?

I was not CTO, but I was basically doing that job without the title. My company was slowly failing (although no-one would admit that at the time, it did go bankrupt 9 months after I quit). We'd moved to NYC for the company, on a company-sponsored visa. My partner and I had just had our first child. Like your "friend", I was pretty tired of management, politics, the constant scramble, and trying to fit some actual building stuff in between.

So I quit, moved back to my home country, took a few contracting gigs for a while, and then went full-time as a software engineer at a medium-sized company.

It was absolutely a backwards step, career-wise. Less pay, disconnected from the startup scene, outside the networks I'd spent years building. It easily put me back 5 years, probably more like 10, in terms of career.

OTOH, I was working from home, with heaps of flexibility, which was perfect when my kid was little. For a while, we both worked 4 days, one weekday off each at home just hanging out with the kid. Work was fine, but I kicked the obsession that it had just about become.

10 years later, I haven't tried to climb back. I do 5 days full-time now, but I'm just a senior engineer. I miss the challenges, but not enough to want to go back. I get paid less, but I'll probably live longer, and certainly better, this way.

Everyone's different. Some people leave tech, and make furniture in the woods. Some people just pull back a bit. You can pause and then have another tilt at it once you've recovered a bit. There's no rule book, really. Do what feels right and good.
It is cancel culture 101.

I'm not for or against cancel culture, btw. I understand pros, but also cons.

A poster of a woman, would depend on what that entails. If it is a poster with a function, with the face of a woman, it'd be OK. No matter the source. The source ought to be OK with it (with regards to copyright) but other than that, I don't find it relevant. Because people don't see the source; they see the derivative.

As an analogy, would you run code by a convicted murderer? As in, would you be opposed to run code programmed by Hans Reiser? Ie. would you use Btrfs? Would you run code by a company who are morally bankrupt?
I understand jailed individuals should have some restrictions to ensure they do not get access to contraband or spend excessive time in visitation instead of serving their sentence, and visitors should comply with those.

But why are free people being punished and restricted so much when they choose to interact with people in jail? It isn't like people in jail make enough money to pay for these phone calls, it is friends and family that have to pay the bills.

This is even worse when the interactions are with people who have yet to be convicted, and are supposedly presumed innocent in the eyes of the law, it certainly doesn't seem that way.
>She still doesn't say that the photo is a big deal

Well, she participated in a documentary, knowing that its premise is that the photo is a big deal.

>Do you think she wasn't paid some consultancy fee for dealing with that Wired journo? Do we have to figure out now who paid more?

I agree that it would be interesting to know how much she was paid in both cases, as how much someone is paid before offering their opinions is always relevant in interpreting what they are saying. My feeling here is that the Wired reporter was also fishing for offence, but found such a stark absence of it that she did the noble thing and reported Lena's near-indifference accurately. If that's what happened, then Lena overcame whatever temptation might have been created by the consultancy fee, so there's no reason to be interested in how much it was. But I suppose you could make the case that the Wired reporter was actually fishing for indifference, in which case the amount becomes relevant again. Is that the case you wish to make? Because if so: It's curious how far the Wired reporter went to try to elicit offence from Lena, don't you think?

>I suppose the interesting question is why you're so hung up on having that photo in new scientific publications.

Interesting insinuation. Another explanation might be that I'm not very interested in whether the photo is used in publications or not, but that I'm quite interested in why some people are so hung up on it not being so used. If that reason turns out to be solely that the woman in question asked for it to be removed from circulation, I'm also interested in exploring whether that appears to be a position she has consistently and vociferously held over the years, or whether it might be a recent change of heart. And if turns out to be a recent change of heart, I'm interested in exploring what might have prompted it.
It's reasonably hidden, lots of redevelopment work going on around that sculpture at the moment. Hopefully the setting improved a bit.
>If it provides enough leverage to today to make one person 20x more productive,

But this is not reality. Is this happening for your work? Or you read this somewhere ?
Everything which is not engaging in licking Big Tech balls (open source or not) on HN is served with severe downvoting, that most of the time (probably real trash human beings or AI trolls with headless blink/geeko|webkit).
It's rarely a few hundred per second. Request density is nor uniform over time. It can regularly reach 20x the average.
yes, like this one:
https://github.com/facebook/folly/pull/2153
This snowboard is made from paper — and it shreds like a dream
Literally laughed when they're talking about language choices for a billion requests per month.

I've got nodejs lambda code that is doing 388B/month and only at this point have we even considered changing the language for performance because the cost savings have a net positive ROI.

It took 5 years to get to this point.
I'm offended that you're offended. And I think we can all agree that no one should ever be offended.

Hint: this path or yours? It doesn't work. Feeling offended and asking others not to offend you has to be reasonable within society's moral values. They've changed, obviously. But there is a large group of conservatives (as in: the type who wants traditional values) who loathe that change. The group is significant enough that they can push back changes like these. Case in point: Trump got elected and ensured SCOTUS is now 6-3 conservative-progressive.
I thought CO just steals one more oxygen / whatever wherever it can find to become stable which is what makes it toxic? CO hemoglobin?
to add to this, i think 404media is also where Joseph Cox went (edit: i just checked, he is a part of 404)

most people here will be familiar with his writing for motherboard.
Chapter 5: > (Animals painted like pieces of furniture with four legs.)

That insubstantiality articulates what I dislike about the Cowboy Carter album cover: https://ichef.bbci.co.uk/news/1536/cpsprodpb/98B5/production...

I suppose they must have been going for Baroque?

(that said, at least it's a horse; usually these days people use automobiles for the same sort of flex, eg:

https://media.cnn.com/api/v1/images/stellar/prod/16041808452...

Note that when Jesus rides a donkey into Jerusalem, most modern commentary claims it is an act of humility. However, people rode donkeys long before they rode horses, so in that time, as an allusion to the past, it could also have been taken as pretension to royalty; compare the english royal use of horsedrawn carriages instead of fancy cars for state events).
Ken Thompson: Reflections on Trusting Trust (Turing Award Lecture, 1984) [pdf]
> And I don't see how MFA stops phishing - it can get you to enter a token like it can get you to enter a password.

That's why I qualified it with "certificate-based". The private key never leaves the device, ideally a yubikey-type device.
Funny you should say that, given they definitely have exploit code in `vcpkg`
NetBSD/Pkgsrc on Xz Library
> While VNC is in the name, KasmVNC differs from other VNC variants such as TigerVNC, RealVNC, and TurboVNC. KasmVNC has broken from the RFB specification which defines VNC, in order to support modern technologies and increase security.

I understand the reason why you'd want to break away from the spec, but why call it VNC then?
But typically this take would be assumed by a FAANG company to require over a
thousand developers? Like how can claim it’s self congratulatory when huge companies regularly can’t do this?
Good question. I've changed the welcome prompt to say that chats are stored anonymously for analysis improve the service. Not affiliated with Agent host, just using them to store the bot
Markets don't reward greed. They reward behavior that grows the market.

In the long run growing the market comes down to capital (as in factories, roads, and stuff), technology, skills, culture, and people.
We definitely know for sure this was inserted intentionally.

What we don't know for sure is whether Jia Tan (whoever that might be, if it is even a single person) did it on purpose, or if they had their account compromised.
Among sports fans old Deadspin, specifically the previous iteration with columnists like Drew Magary, is pretty beloved.

Currently Defector is trying hard to occupy the gap left by it.
Surely the real target of this was Tor (which links liblzma) not random SSH servers.
Orbital Reef and commercial low Earth orbit destinations research opportunities
No, I didn‘t intend to make an argument, I was asking a genuine question because I‘m trying to understand the perspective on the world of people who consider LLM a kind of „source“.
To me OP reads like “according to my Ouija board” and I’m frightened by the idea that people on HN are using the output of LLM as “quotable facts” (and not as a tool to start further research outside of it, which would be fine IMO.)
I’d like to know if the poster had any doubts using ChatGPT as a source of fact to base their calculations on, when they obviously had access to the internet with all necessary sources to properlt calculate an answer for this basic question.
That is rather naive thinking. Making up a misleading identity is probably one of the first things someone with such a long term plan would do.
psykose was a prolific contributor to Alpine's aports, with thousands of
commits over the past few years[0]. So, I doubt They're involved.

[0]: https://git.alpinelinux.org/aports/stats/?period=y&ofs=10
I will assume that the average effective broadband connection is about 20 MB/s, and both xz and zstd decompressions are faster than the download under this assumption. But there are lesser known compression algorithms that are more efficient in terms of compression ratio for this target decompression speed, like zpaq [1], which are rarely considered as alternatives. So multiple factors exist here and I believe zstd excels at pretty much every other factor compared to xz, making it a very likely choice.

[1] https://mattmahoney.net/dc/zpaq.html
Nobody said this was the result of libertarianism, nor that libertarianism is bad. The poster you replied to cannot downvote you, but others here watching your behavior can. Dial back the accusations, you're being unnecessarily aggressive defending a point which didn't need defense because it wasn't being attacked.
helpful to know, thank you.
It'd be a fair campaign for everyone to return their stamps by sending them affixed to complaint cards to their local councilperson or postmaster.
Are you implying Redhat is not reliable in their security disclosures?
One month into selling physical art online
We know that we build a house out of cards:

https://xkcd.com/2347/
This is the second time Devin changes to ssh have led to vulnerabilities.
> He could study and work in less known places but could had the knowledge, drive and was in the right place to start a business.

I don't think your take is grounded in reality. The man lived through the tech sector age, and was right there at the exec table of a company that represented the semiconductor industry. For that to happen, he had to build up his academic background.

This isn't something a clueless tech bro is able to get right by winging it on the fly and delivering TEDx talks. You need to know what you are doing, and what you need to have in place.
Don’t a lot of companies exhibit symptoms of ASPD?
Ahem!

* https://jdebp.uk/Softwares/nosh/guide/converting-systemd-uni...
We face dozens of material problems that could be solved if the advertising industry had even a sprinkle of shame. Imagine the world we'd live in if list buying and backlink buying were taboo.
You are right, but C/C++ was vulnerable to this particular MO because of its complicated build process.
Good point. We just don’t know.
Can you provide articles I can read to update myself?
While it is not a 1:1 comparison there has been a driver for windows that allows the creation of a ram drive from vram for NVIDIA cards.

>GpuRamDrive

>Create a virtual drive backed by GPU RAM.

https://github.com/prsyahmi/GpuRamDrive

Fork with AMD support:

https://github.com/brzz/GpuRamDrive/

Fork that has fixes and support for other cards and additional features:

https://github.com/Ado77/GpuRamDrive
Because it's the company with a thousand developers (Cloudflare) who's dealing with this.
We live in a time of populous, wealthy dictatorships that have computer-science expertise are openly hostile to the US and Canada.

North America is only about 5% of the world's population. [1] (We can assume that malicious actors are in North America, too, but this helps to adjust our perspective.)

The percentage of maliciousness on the Internet is much higher.

[1] _ See continental subregions. https://en.wikipedia.org/wiki/List_of_continents_and_contine...
> EDIT: Github has disabled all Tukaani repositories, including downloads from the releases page.

Why? Isn't it better to freeze them and let as many people as possible analyze the code?
>At some point, higher individual compensation doesn't matter much if everyone else in your community is overworked and underpaid.

I think that totally depends on the individual and their circumstances.

>I think many Dutch or French software developers are living better lives than developers in California, all things considered.

European developers generally earn much less than Americans, especially after taxes you can get to a 2x difference with comparable cost of living depending on area.
In generally wages in Europe are much more even, here in Germany you have a heavily bracketed income tax system, even significant increases in wage usually become much smaller if you consider the additional taxes.
I'm a fan of Alpine too, but I want to point out that to the best of my knowledge at least, running root from RAM is trivial and is not something you need to change distros for, you simply have to add the "toram" kernel boot parameter. For example, if your entire read-only root is contained in "filesystem.squashfs", then adding "toram=filesystem.squashfs" would read all of this into RAM on boot.

I can't vouch for every single distribution out there, but I've done this successfully on Debian at least.
And later on crypto/tls, etc.
Exactly. Especially in something like customer service where they're often helping fix and issue. If they don't know the name is incorrect then they will have a lot harder time figuring out why a downstream system is sending the wrong mail to the customer.

In their example, the change is also much harder to read for me. It takes up just as much space but logical categorical groupings are no longer visible at a glance. Previously you could see all the people from the same zip code, city or state. Now you can't because they're all mixed together at different horizontal offsets. You could also pull out the different information at a glance by using the horizontal offset which you now can't.
You seem to be rather determined in continuing to badmouth Lasse, ignoring me and others questioning your motives.

Here are recent examples:

1. https://news.ycombinator.com/item?id=39872919

2. https://news.ycombinator.com/item?id=39873552

3. https://news.ycombinator.com/item?id=39873133

4. https://news.ycombinator.com/item?id=39872770
Assuming those requests are evenly distributed over time, yes.
But in the event of an attack you would see a sudden surge in requests followed by a flatline, and still end up at 1B/month over 30 days.
And decades before she was always fine/amused/proud with it being used. Probably she is just being tired being always asked about the issue.

https://media.wired.com/photos/5c5354d391d0df22c1dee493/mast...
It's a crime scene. It effectively has the "police" yellow tape around it.
I don’t really understand the connection between liblzma and sshd, it had something do with systemd, or…?
Sorry, but that's not a serious risk analysis. The average person would be hurt a lot more by a godaddy breach by a state actor than by a breach of your service by a state actor.
In before, “Hey you, in the shirt!”

One thing which struck me at the time was the fierce competition between ATI and NVIDIA … Squinting at side by side aliasing comparisons in Far Cry and Doom 3. Now it doesn’t feel so competitive.

Feels bad for NVIDIA to have this same kind of ridiculous clause in the AI EULA, “ 9.12 Customer may not use the AI Products for the purpose of developing competing products or technologies or assisting a third party in such activities.” as OpenAI shamefully writes, and Anthropic. And Microsoft. And Inflection. And Google. If you can’t enforce a noncompete on your own employees, then it makes no sense to try to pull that stuff on customers. “Not for resale” is one thing, but “no competitive work based on this” is appallingly beyond. Literally only Mistral AI fixed the issue so far!

Name one great athlete who would have been equally skilled in a world with no competitors.
You're misunderstanding. No-one mentioned transactions, that's not what we're talking about.

We're talking about concurrent writes. We're talking about batching inserts. Because SQLite can't handle a high throughput, so you batch a bunch of inserts together.

If the only way to get performance is to batch inserts, then you've got to write a whole load of manual queue code to queue up X number of inserts to insert them all at once.

Worse still, if your server crashes, bug, etc. you've just lost all those inserts. But you've already responded with 201s! So if you want any sort of guarantee, you've got to write even more code to cache them on disk or redis or something.

You're basically re-implementing features of postgre, badly, to make up for SQLite's deficiencies,

It really doesn't matter HOW you do it, it's the fact you have to do it at all. It's not simpler, it's more complicated. Installing/using a fully fledged DB is trivial these days.
The worst thing is those websites that have some type of 2160p type of video autoplay as a background image, making it unbrowsable on cheaper hardware devices.

But this is more a rant for modern webdev practices I'm not sure much can be done to circumvent it from a browser perspective.
I would never make the claim that English ability = intelligence, but you definitely shouldn't be dominating the search results for English-speaking audiences.

No escriblo para papel de espanol porque my idoima esta basura!
I wish there was a way to fully disable the picture-in-picture feature so it never appears on any website again.
Almost sounds like a buggy update process of their app that they shipped.
I think people try to tap the 1mm X to close the ad and accidentally engage with it boosting the metric.

Or the videos that scroll with you appear to have 100% impressions.
Show HN: Signmeup.ai – Email Collection and Signup Pages in Seconds
Discover SignMeUp.ai: Create email signup pages in seconds. No code, just results. Perfect for fast-moving teams. Check it out at signmeup.ai.
As a fellow OpenGL enjoyer, this should really target 4.5 or 4.6. DSA is a gamechanger
...where identity is proved by utility bills instead of government issued id
Tell me about it. I look at all these random updates that get pushed to my mobile phone and they all pretty much have that kind of fluff in the description. Apple/Android should take some steps to improve this or outright ban this practice. In terms of importance to them though I imagine this is pretty low on the list.

I have dreamed about an automated LLM system that can "diff" the changes out of the binary and provide some insight. You know give back a tiny bit of power to the user. I'll keep dreaming.
>Yes, CD players existed in the 90s

Heck, CD players were released in 1982! I got my first in 1986, when they began to get cheaper.

>But why would you bother with one, when all your music is on tape?

Because the audio quality was just that much better. It was like saying in the late 1990s/early 2000s "why get a DVD player when all your movies were on VHS tape?"
That is true, but there are two replies:

(1) First, most large companies are essentially tech companies in some way, at least in that they exist to advance technology. Therefore, your observation is good reason to abolish large companies.

(2) (Direct) tech companies often exhibit one symptom that other companies don't, at least in not such a strong way. Tech companies lie more often directly to the public: car companies, drink companies, etc. don't lie about making the world a better place, they just try to appeal to basal desires. Tech companies actually are deluded enough to think they are making the world a better place, and use manipulation to convince us that this is true.
"We have had the approval from the BBC to use the AI generated voice so we won’t need Sara anymore.”

https://www.hollywoodreporter.com/business/business-news/ai-...!
How often the deployment model “copy a single binary to VPS via SSH and run it” is even used nowadays?

And with that still, you’d be much better served by using a more expressive and less painful to use language like C#. Especially if the type of use is personal.
Navy to Test Microwave Anti-Drone Weapon at Sea in 2026
You can do the same with python tho, from nuitka compiler to LinkedIn shiv or twitters pex (that follow pip 441).
Previous discussion:

Whitespace killed an enterprise app - https://news.ycombinator.com/item?id=19153616 - Feb 2019 (435 comments)
Photopea.com! It's basically a free version of Photoshop.

I haven't used paint.net in like a decade(maybe 2 decades). I didn't like the interface at all. And it seemed to heavily rely on .NET graphics APIs, which are fine, I guess. Hopefully it's improved since then. Doesn't sound like it. Closed source now? Meh.
That attack article puts forward a dubious scenario where parts of multiple copies of a file become corrupted in different locations and you need to recover the original using both of the damaged copies.

If you find that sort of thing happening to you a lot, then lzip might be the format for you. But I can’t say I’ve ever heard of that being a real recovery scenario.

A much saner approach to enabling recovery from corruption would be to keep external checksums and parity files.
> It seems more straightforward to fix your data-in-files layout than to implement a novel in-GPU filesystem, though.

You can improve file-open overhead in conventional filesystems, too. Including the FUSE one I was working on.
Apparently liblzma in the compromised tarball would search for sshd functions and replace them with their own versions. This normally doesn't happen for the reason I've described, but many distros tend to compile sshd with a plugin that makes use of libsystemd, which depends on liblzma and therefore sshd will be linked with liblzma in that case. Liblzma could have done anything else it wanted, so the limited reach of this vulnerability is actually a better scenario...