skysight-inc/HackerNews huggingface dataset:
> The London congestion charge covers a much larger area, roughly the same size as the one proposed in New York. timr is not correct, he is confidently wrong even if he makes the same claim several times in the discussion.

And you keep forgetting to say that London is 600 square miles, and Manhattan is about 20. They're also vastly different in terms of their connectivity to the outside world. The "London congestion area" is a tiny section of the middle of London. This covers almost every major ingress/egress into the island of Manhattan.
I don't think the rationale is that they are a large corporation or have lots of money. It's that they have many, many, many more users that would be affected than most companies have.
Don’t be so cynical. I was like the third person to comment on this post and both existing comments were negative. One asking about a game telling the difference between art or trash, etc.
I suppose you could argue that as long as the car is doing the driving, it is in fact full self driving, even if you have to watch it?
If you park in the Mission District, chances are someone’s gonna smash your window and grab your stuff. Calling the cops? Eh, don’t expect much. They show up late or not at all, and even if they catch someone, they're out again fast. So, what’s the point?

https://www.reddit.com/r/sanfrancisco/comments/14w5plt/serio...

Top rated answer:
>> Give criminals more hefty punishments because they are usually not put in jail for long and charges are often dropped. Usually when arrested the same offenders are smashing and grabbing again right after release.
That's a cool tip! Can you run Minipaint for free on Cloudflare or do you have to subscribe to their services to use it?

How does it compare to something like photopea.com ?
It's not pending regulatory approval, it's pending developing an actual full self driving system. Elon Musk didn't want to pay for the sensors that were needed to do it properly, so now they're competitive with similar-hardware Mobileye-based level two systems instead of Waymo's level four system.
Yes. I pull the strings on the art world and have complete control over everything but this comment thread.
Having one or two people on payroll to occasionally add commits to a project isn't exactly that expensive if it pays off. There are ~29,000,000 US government employees (federal, state and local). Other countries like China and India have tens of millions of government employees.
That's a pretty sweet marketing-speak oxymoron. If it needs to be supervised, it's not "full".
Most aren't. Majority of them get into it because of the rut they are in and wanna break into tech. Nothing wrong with that but the issue is that most of these people have never done anything on their own and lack the fundamentals and are found out in an interview because they were never taught how to submit an HTML form but surely know how to code a React Component. They are not curious and havr no actual interest in programming.

The very few that do make it out of bootcamp are usually self starters, already have done projects on their own using Google/youtube and actually enjoy and eant to learn programming.
In a lot of jobs doing too much will put you on a quick path to getting fired or sidelined for being annoying.
It was actually found less than two months after it was introduced in 5.6.0. Now, the attacker maintained the project for 2 years before that, and we don't know what else they inserted, but the known vulnerability was only in a release since February.
It's also the key lesson of the Christmas party scene in Goodfellas: https://youtu.be/60Lobcj6_jM
Whats the problem of running “autoreconf -fi” though?

Very strange argument. It’s like saying our source release only contains a prebuilt binary, otherwise the user has to run “make”.

If that’s such a big hassle for your downstream consumers, maybe one should use something better than autoconf in the first place.
I'm not sure they're actually doing NVMe yet; using Optane PMem is a bit of a cheat so that accessing storage is just plain memory reads and writes over PCIe. Implementing an NVMe device driver to set up and interact with command queues would be an extra layer of complexity that I think they left for future work.
Can an AI sot on its own board of directors?
Even according to the extremely strict standards for fraud in the US, around the time you make unequivocal statements.

In 2019:“ I think we will be feature-complete full self-driving this year, meaning the car will be able to find you in a parking lot, pick you up, take you all the way to your destination without an intervention — this year. I would say that I am certain of that. That is not a question mark." [1].

That was after 5 years of development. Now, another 5 years later (10 years total) and they have still failed to achieve even basic capabilities like understanding and obeying safety-critical Road Closed and Do Not Enter signs. They have failed to make it fully self-drive in their literal one-lane tunnel under Las Vegas. There is a gigantic gap between vision and fraud; it just so happens Tesla is the world champion shark jumper.

[1] https://www.businessinsider.com/elon-musk-doubles-down-on-cl...
It is not going to make a difference. If you run malicious code, you will get hacked. Compiling the code yourself does not prevent the code from being malicious.

The one it might help is it might make it easier to find the back door once you know there is one.
Because then for autoconf codebases you have to commit `./configure` or you have to require that users have autoconf installed and run `autoreconf -fi` first.

Maybe autoconf-using projects should really just require that users have autoconf installed.

Not that that would prevent backdoors, mind you.
By that definition any car with cruise control is “full self driving”.
I don’t think that comment was negative, it starts by saying they are interesting. I’ve seen a lot of art that purposefully juxtaposes itself with trash.
No, you can't argue that. No reasonable person would see "full self-driving" and assume it means they have to watch it like a hawk instead of taking a nap or watching a movie.

Well, at least no reasonable person before Musk had normalized this garbage.

My (non-Tesla) car has adaptive cruise and lane-keeping, and it works quite well. The car is certainly "doing the driving" to some extent, but "full self-driving? No, definitely not.
Fission Mailed
I'm not saying rotaries are great, but two stroke piston engines can have variable port timing (typically called a "power valve"). I don't see why the same method couldn't be applied to a rotary.
Not sure what system you've used, but I've never seen automounting fail to work on ext4 volumes.

That being said, basically every file system ever is vulnerable to the malicious image. Kernel drivers assume that the metadata is sane enough and mistakes are from simple bugs, not deliberate attacks.
I know these are the times of big machine learning models, but my favourite kind of AI are the classics like CSAT solvers, minimax with alpha beta pruning, markov chains, and good old search trees. These algorithms have superhuman powers solving so many challenging games and problems just by converting the problem space into a search tree. Love it.
Show HN: Marketing Tool for Hackers
One of the greatest challenges that we as founders face is getting people to use what we build.

Most of us completely ignore marketing. We think if we build a good enough product people will come.

This leaves us with a graveyard of side-projects that nobody uses.

You might have the best UI/UX, cutting-edge features, and fast load times…

But if nobody uses it, it’s all a waste.

While researching strategies I found a software that implements everything in one place and most importantly helps get new users.

The software is called GoHighLevel and it has been around for years, used by thousands of businesses.

It costs 97$ per month.

We decided to Whitelabel it and offer it to developers and founders like us for 15$ per month.

This way people can learn how to implement marketing strategies and get more clients for their SaaS at low cost.

Arkhitect is built on the GoHighlevel engine and we plan to add features relevant to small SaaS teams and 1 man armies.

We have also built a bubble plugin that allows you to send data between your bubble app and our platform.

We want to help our first users reach their goals and we will be taking a more hands-on approach.

We will be doing 1-on-1 sessions to strategize and set up the software for you. Along with weekly QnA sessions.

Since we are a small team and we can only make this available for the first 30 users that start the free trial.

Click the link below to learn more about the software.
https://www.arkitecht.dev/v2
> Most of the ways to get to Queens, Brooklyn or Staten Island by car won’t be affected — same for the Bronx obviously.

That's incorrect. All of the bridges and tunnels other than GW and Randall's Island (RFK) enter or exit from this new zone. With this new plan, literally all of the ways to get to Manhattan by vehicle will now have a toll. Some will have two.

I suppose if you're willing to take the tiny bridges from the Bronx into Harlem you can still get around tolls, but good luck with that.
Terrifying Vistas of Reality
Interesting that vimeo says that video is from 9 years ago! I can't wait to see a Guac demo today!
When will the eclipse happen? A multimillennium tale of computation
> No enumerations.

Of course it has enumerations. It has had them from the get-go. After all, enums are a workaround to help deal with the shortcomings of a basic type system. You're bound to find them anywhere you find a basic type system, which certainly describes Go.

In fairness, there does seem to be some confusion floating around about the difference between enums and sum types, with some mistakenly calling sum types enums. Indeed, Go does not have sum types. This is what languages with more advanced type systems are bound to provide instead. Enums are pointless when you have a more expressive type system.

> Error handling requires lots of boilerplate.

What patterns are you seeing in other languages when it comes to error handling without the boilerplate?

Certainly there are other languages that provide shortcuts when not handling errors, but that's something else entirely.
Serra's work is just one of those things that completely changed my world. I don't know how old I was, but walking through his pieces made me realize that art could be larger than life. Truly a giant of the 20th century.
Nice, I haven't come across this library before.

One minor suggestion: You could remove all of the corner and border special cases for overlap testing by making the grid 2 columns wider and 2 rows taller, offsetting all coordinates by 1, and pretending that the outer "border" on all sides of this slightly larger grid is covered with black cells.
I'm sure they actually had new features…
"you have no right to swim in our sewage, mate"
> Incorrect, unless you choose not to record your seeds anywhere else, which is not a 2fa problem.

You know google authenticator app introduced a backup feature less than 1 year ago right?

You know phones break all the time right?
the ext4 driver doesn't (in fact, cannot) upgrade file systems missing features. If you mount an ext2 file system from the 1990s with the ext4 driver, it'll stay at the old feature set, for better and worse.

You can use tune2fs to upgrade file systems, downgrading is not (usually) possible without a full backup and restore.
Strongly disagree. I used to have this opinion until I got genuinely very fit. Exercise is fun when you’re actually fit, in my experience. I never got the “runners high” until I was able to really push myself to (relatively) high levels of performance. YMMV
The problem is people believed that, including journalists :DDD
According to these reports, the effectiveness of fuzzing decreased over that time period.

The majority of bugs reported are explained as poorly designed code, which could then be tested without fuzzing.

For example: A primary class of bugs is unbound inputs, which could easily be found with static analysis. There's no reason to toss random strings at it until it breaks, you can know it will break simply because that input is unbound.

The lack of adequate traditional testing for each utility is specifically mentioned as a limitation of the studies. All fuzzing proves here, is the value of traditional testing. Of course fuzzing is going to find bugs where there are inadequate tests, but there really should be tests.
BrowserBox uses a lightweight Node async event loop backend and runs across Debian/Ubuntu/RHEL/CentOS/Kali/MacOS and even Windows Server is supported via our PSGallery link.

Rather than being an RDP or VNC clone, it just virtualizes the remote browser.

BrowserBox is source-available, free for non-commercial (including government/non-profit) use and comes with audio, mobile first, file uploads/downloads and so on out of the box!

Try a free demo right now (sorry signups are not open yet!):

https://browse.cloudtabs.net/signupless_session
Chances you have any online notes on that?
I had trouble booting the Windows 10 installer from an exFAT formatted usb drive. That was thee years ago. So back then I had to recompress a cab file to make it smaller than 4GB using Linux. It worked but I was scratching my head that this was an issue.
Banks loathe anything relating, or adjacent, to good SWE principles.
>How are the two related? Why does being paid less cause you to take longer to find a new job?

Being paid less didn't actually make me take longer to find another job. But I looked for other jobs to get more money. My point is, simply knowing you are paid less/unfairly is not a silver bullet. Most companies will refuse to give raises on demand, on principle. You most likely can't just get a new job right off either or you would have just done it. So you'll be stuck for months or even years knowing how much less you make than your coworkers. Nobody thinks they'll mind knowing the truth, because they underestimate their own ego and how difficult it is to get more money.

Most businesses would rather pay someone new and unproven significantly more than you're asking rather than give you, say, a random 10% raise. It kinda makes sense, because there's no limit to what you can ask for. Most non-tech people seem to resent how much more we make as well. So for various reasons, they don't want to pay you more and/or don't believe you are worth more, and you have to prove it to them by leaving.
Easily solved with Docker.

Yes, it sucks to add yet another wrapper but that’s what you get for choosing non backwards compatible tools in the first place. In combination with projects that don’t keep up to date on supporting later versions.
Could you create another wormhole to come back?
Had to do a double take, this is truly terrible news. We lost one of our best. :(
Some more discussion earlier this year:

https://news.ycombinator.com/item?id=34334780
Exactly. The Volt uses the same planetary gear set style transmission that the Prius does.

Everyone bemoaning the death of the Volt can now just buy a Prius Prime (the PHEV variant). It's the same thing just newer/better. It even looks sporty-ish now.
I had this similar problem, but I hit it when I was somewhere in elementary school and the expectations of me were unreasonably high, making me sadder and sadder.

My solution was simple at the time but has been a blessing: I want to be happy. My goal became "be happy", which is way easier than "be rich", "be a genius" or something along those lines, from my perspective.

I'm very happy (and have been for many years), even though I'm average.

My suggestion for you is just that:
Change your perspective, aim for happiness and work toward that instead.
Imagine if governments used toxic darts to neutralise threat actors.
While I also share in your love of Wankel engines I think you are grossly skipping over their unreliability (mostly around the seals).

There's an extremely good reason "rural" applications are reliant on diesels. It's not uncommon for a diesel engine to hit 300k+ miles and still operate reliably. And not to mention simply. They are relatively easier to maintain than a standard gasoline engine.

Diesels also greatly benefit from being on a fixed power band. It's why they work so dang well on large ships.

Where as rotary engines(rx-7's at least) need a rebuild every 80-100k miles. So I think without really knowing what you're doing mechanically or having access to a mechanic that can repair those kinds of engines you aren't going to be super reliable with a rotary.

Green hydrogen approaches via rotary engines does seem quite interesting. I think if the reliability of the rotary could be improved that could have some serious merit. Or at least making small enough generators that you can easily ship them out to be replaced/repaired could have serious merit.
Is there any actual evidence that Putin is actively corrupt on the level of say Jared Kushner or Hunter Biden (and their father figures), or is it just kinda an a priori thing so we can pat ourselves on the back?
Some USB keys have a LCD screen on it to prevent that. You can comprise the computer that the key was inserted to, but you cannot comprise the key. If you see the things messages shows up on your computer screen differs from the messages on the key, you reject the auth request.
Æpyornis Island
> Is the Malta-based company vehemently against giving archivists access to the newspaper's archives? I can't imagine they would have any good use for it.

Holding it for ransom is one "good" use for it.
> Not even OpenSSH maintainers noticed this, which points to a failure in their processes as well, to a lesser degree.

The OpenSSH project has nothing to do with xz.
The transitive dependency on liblzma was introduced by a patch written by a third party. [1] You can't hold OpenSSH project members accountable for something like this.

[1]: https://bugs.debian.org/778913
I'm a tall brown man and people have asked me that too. In general, im quite social and extroverted and have gotten every job I've interviewed for. Even managed to get a job as a strategy consultant at bain and company despite realistically having no credentials. Sweet talking is a skill that crosses boundaries of melanin.

Some white people have this weird habit of assuming that good things happen because of their magical skin color. It's insufferable honestly. No one cares if you're a white guy who thinks he's so attractive / devilishly charming that people fawn over him. Lots of people have that experience. Goodness the self-aggrandizement knows no bounds
Yes and you can modify the Model 3 to increase cornering ability, but like in the case of the Miata it means increased tire wear, worse comfort, and worse mileage. Not to mention money.

My point was simply that even if you know vehicle A is twice as heavy as vehicle B, you don’t know for sure which one is faster in the turns.
True, it works some. But think of what could be done if they could get beyond their, albeit understandable, web aversion.

Tho I disagree that Safari is so defunkt as you make out. They have a bunch of new features. Check out: https://webkit.org/blog/15243/release-notes-for-safari-techn...
https://en.m.wikipedia.org/wiki/Room_641A

These things are a requirement for operation
As mentioned elsewhere in this thread, the Volt is not actually a series hybrid despite being marketed as such. There is a planetary gear set (ala. Toyota hybrids) connecting the engine to the wheels at most speeds.
On your point about tech not solving social problems: I fully agree. Moreover, I think that tech _aggravates_ some of these problems. Case in point: why do some people think they can run around and interrupt others at any time for any reason? I think it could be related to having tech in our pockets constantly interrupting us throughout the day, which makes us operate in a new normal, where attention span a shorter, and where it's ok to just quickly check the notifications or just send a quick message while in a personal live conversation with someone.

A Faraday cage may become an important component to taking time for relaxing.
It's worrisome for sure.. the original maintainer mentions longterm mental health issues, "but also due to some other things"

My worry would be "other things" they didn't mention can include deliberate acts of sabotage by said unknown agency. Devs can have health issues or other problems come up with themself or family in their personal lives, but also intelligence agents can tamper with people covertly in different ways such as deliberately causing various kind of accidents or contaminations/poisonings.

In any case; they could only have to disrupt the developer's life for a few months to persuade them that they need to step down to put one of their confederates at the head of the project, I begin to worry for All developers' safety now if you are the sole maintainer of a key project critical system daemons may link against.
At the end, it suggests this is a counterintelligence problem. I don't know what the author wants intelligence agencies to do, maybe they could catch some of the more obvious stuff? I worry about an even longer con, where the attacker fully takes over the project and becomes the sole expert on it, making detection by cursory inspection not work, even though it did in this case.
I didn't mean to imply I supported what he did. I just wonder if having a "clear leader" reduces or eliminates second-guessing.
Oh, also, I forgot! Home taping (the piracy of the era) killed Music, which is why nobody makes music anymore and we all just have to listen to silence 24-7!
This is something I ran into as well, mainly bc of your title and description. I tried it before reading your whole post, so I didn't know it's only skincare for now.

> Launch HN: Lumona (YC W24) – Product search based on Reddit and YouTube reviews

> Hey HN! We are Lumona (https://lumona.ai), a product search engine
Are You Affected by the Backdoor in XZ Utils?
Selling an expensive product or service is very different from committing fraud or stealing. There are plenty of practices within banking that are a lot more immoral than charging high fees.
This isn't really a public/private thing. Public orgs can also do bad stuff and also try to cut costs to meet budgets. This is a failure of regulation.
> [...] a single firm holding keys [...]

You know that OpenAI are far from the only company training large neural networks? Eg Google and Facebook and Amazon, and countless others, are also hard at work on the matter.

If you want to point a finger at a single company pulling lots of strings, pick Nvidia perhaps? They also have competitors, of course, but Nvidia is far more central than OpenAI.
> While I'm not comfortable with the wealth concentration in the US, at least people aren't getting rounded up and "disappeared" when they talk about it.

All that reveals is that "talking about it" doesn't threaten the system, which isn't something to be proud of. Instead of destroying dissent, it is hushed, polarized, deflected, diluted. I guess polite totalitarianism is better than impolite totalitarianism? It's certainly more durable.
TMRC – Stanford / MIT Jargon File
Disorganized thoughts on xz backdoor and supply chain attacks
Malicious SSH backdoor sneaks into xz, Linux data compression library
I mean, my children had fever 3 weeks this year and we have been responsible and avoided sending them in school when they have very bad cough and runny nose (3 and 5). We are already at 15 days of absence this year because of that. Children are always sick.
Proposal for C2y: Allow zero length operations on null pointers
An early work of Serra’s involved him literally tossing molten lead at a wall where it would harden into a pile of waste on the floor. Art or trash indeed. https://www.artforum.com/features/due-process-richard-serras...
Or, in text form: http://www.catb.org/jargon/oldversions/jarg262.txt
Nice article, I also wondered why they omitted citus. Is there any plan from rds to offer it?

Obviously it could interfere with demand for aurora limitless