skysight-inc/HackerNews huggingface dataset:
You can still spend the money. But you don't need to show off in front of the people you are stealing the money from.

There are a bunch of accounting firms, law firms, and consulting agencies that don't allow their employees to wear super expensive clothing, jewelry or drive luxury cars in front of their clients. And they aren't even doing anything illegal.
Yes, this point is made in the footnote to the exact section you’ve quoted.
Are you disagreeing with me ? I think you're 100% right
Can you point to where you saw that racist joke?

I don't see anything at https://sourcegraph.com/search?q=context:global+author:jiat0...
Zstd belongs to the class of speed-optimized compressors providing “tolerable” compression ratios. Their intended use case is wrapping some easily compressible data with negligible (in the grand scale) performance impact. So when you have a server which sends gigabits of text per second, or caches gigabytes of text, or processes a queue with millions of text protocol messages, you can add compression on one side and decompression on the other to shrink them without worrying too much about CPU usage.

Xz is an implant of 7zip's LZMA(2) compression into traditional Unix archiver skeleton. It trades long compression times and giant dictionaries (that need lots of memory) for better (“much-better-than-deflate”) compression ratios. Therefore, zstd, no matter how fashionable that name might be in some circles, is not a replacement for xz.

It should also be noted that those LZMA-based archive formats might not be considered state-of-the-art today. If you worry about data density, there are options for both faster compression at the same size, and better compression in the same amount of time (provided that data is generally compressible). 7zip and xz are widespread and well tested, though, and allow decompression to be fast, which might be important in some cases. Alternatives often decompress much slowly. This is also a trade-off between total time spent on X nodes compressing data, and Y nodes decompressing data. When X is 1, and Y is in the millions (say, software distribution), you can spend A LOT of time compressing even for relatively minuscule gains without affecting the scales.

It should also be noted that many (or most) decoders of top compressing archivers are implemented as virtual machines executing chains of transform and unpack operations defined in archive file over pieces of data also saved there. Or, looking from a different angle, complex state machines initializing their state using complex data in the archive. Compressor tries to find most suitable combination of basic steps based on input data, and stores the result in the archive. (This is logically completed in neural network compression tools which learn what to do with data from data itself.) As some people may know, implementing all that byte juggling safely and effectively is a herculean task, and compression tools had exploits in the past because of that. Switching to a better solution might introduce a lot more potentially exploited bugs.
What if this contributor was a member of a state actor/persistent threat group and, like some totally legit software dev houses, they encourage their people to contribute to OSS projects for the whole personal pursuit/enjoyment/fulfillment angle?

With the added bonus that sometimes they get to pull off a longcon like this.
Yes, and in fact, it's quite a huge pain even in the packaging side.

Everytime I have to deal with autotools in nixpkgs, I end up having to rewrite the derivation to build from actual freaking source instead of a pre-mangled non-release tarball.

In fact, this makes me want to RFC *banning* release tarball usage.
That's a good question. I'm not sure it could support true global search but I don't know... my guess is there'd probably be some probabilistic guarantee but not much beyond that?
A lot of software (including https://gitlab.com/openconnect/openconnect of which I'm a maintainer) uses libxml2, which in turn transitively links to libzma, using it to load and store compressed XML.

I'm not *too* worried about OpenConnect given that we use `libxml2` only to read and parse uncompressed XML…

But I am wondering if there has been any statement from libxml2 devs (they're under the GNOME umbrella) about potential risks to libxml2 and its users.
Well for one, the Powershell script I just wrote to build all the 3rd-party library dependencies for a video game.

tar.exe was added to Windows this January, sourced from libarchive: https://learn.microsoft.com/en-us/virtualization/community/t...

Unlike the GNU tar I'm used to, it's actually a "full fat" command line archiving tool, compressing & decompressing zip, xz, bz2 on the command-line - really handy :-O
Is it 2007? I remember seeing it much earlier - like 2001-2002 or so. Maybe SwingSet2 was the follow-up to some SwingSet1 that came earlier, and which contained a lot of the same stuff?
the point we got, when even exploits have to rely on user agent string sniffing.

reminds me of the gnu hack discovered because one of the savannah build hosts was some odd architecture the exploit wasn't expecting
Lots of software links both liblzma and libcrypto. As I read Andres Freund's report, there is still a lot of uncertainty:

"There's lots of stuff I have not analyzed and most of what I observed is purely from observation rather than exhaustively analyzing the backdoor code."

"There are other checks I have not fully traced."
For the consumer, yes, but for those running the storage nodes, there is some blockchain stuff.

- storage nodes getting audits and the results being stored in a smart contract.

- calculation of payouts.

- payouts to storage nodes with their token.
It seems you have to do that here too though. In the end you have to deal with the headline the media can write about it.

If Netflix and Spotify went through the vetting process for the purposes of enabling an in-app email client the media could write pretty much the same headline.
not sure why you're being downvoted. this is exactly what is going to happen.
Nowadays i achieve this with linkedin[1] connections. Less nerd cred, but achieves roughly the same purpose (most of the people I care about in my niche are at most a 3rd degree connection - a friend of a friend of a friend).

[1] formerly also twitter, at least partially.
I suppose two case studies worth exploring are:

Consumer Reports (subscription magazine recurring revenue)
NY times Wirecutter (a potential add on service to boost apparent value for subscribers)
There was one for Windows, Mac and others, why not Wayland?

And wasn't the X11 compatibility layer one of the first things developed for Wayland, since a lot of DEs/apps didn't directly support it yet?
It very well could be. Legal precedent would be against Oregon. Consider the California CARB (Air Resources Board). There is a specific carve-out in federal law allowing California to have mandates on cars sold in California.
It's because to extract all the energy from the exhaust, you need huuuuuge turbine blades to extract the last little bit of energy from very slow moving air.

So instead you extract most of the energy, and then use the last little bit as extra thrust in a plane/helicopter.
GitHub has suspended @JiaT75's account.

EDIT: Lasse Collin's account @Larhzu has also been suspended.

EDIT: Github has disabled all Tukaani repositories, including downloads from the releases page.

--

EDIT: Just did a bit of poking. xz-embedded was touched by Jia as well and it appears to be used in the linux kernel. I did quick look and it doesn't appear Jia touched anything of interest in there. I also checked the previous mirror at the tukaani project website, and nothing was out of place other than lagging a few commits behind:

https://gist.github.com/Qix-/f1a1b9a933e8847f56103bc14783ab7...

--

Here's a mailing list message from them ca. 2022.

https://listor.tp-sv.se/pipermail/tp-sv_listor.tp-sv.se/2022...

--

MinGW w64 on AUR was last published by Jia on Feb 29:
https://aur.archlinux.org/cgit/aur.git/log/?h=mingw-w64-xz (found by searching their public key: 22D465F2B4C173803B20C6DE59FCF207FEA7F445)

--

pacman-static on AUR still lists their public key as a contributor, xz was last updated to 5.4.5 on 17-11-2023: https://aur.archlinux.org/cgit/aur.git/?h=pacman-static

EDIT: I've emailed the maintainer to have the key removed.

--

Alpine was patched as of 6 hours ago.

https://git.alpinelinux.org/aports/commit/?id=982d2c6bcbbb57...

--

OpenSUSE is still listing Jia's public key: https://sources.suse.com/SUSE:SLE-15-SP6:GA/xz/576e550c49a36... (cross-ref with https://web.archive.org/web/20240329235153/https://tukaani.o...)

EDIT: Spoke with some folks in the package channel on libera, seems to be a non-issue. It is not used as attestation nor an ACL.

--

Arch appears to still list Jia as an approved publisher, if I'm understanding this page correctly.

https://gitlab.archlinux.org/archlinux/packaging/packages/xz...

EDIT: Just sent an email to the last committer to bring it to their attention.

EDIT: It's been removed.

--

jiatan's Libera info indicates they registered on Dec 12 13:43:12 2022 with no timezone information.

-NickServ- Information on jiatan (account jiatan):
-NickServ- Registered : Dec 12 13:43:12 2022 +0000 (1y 15w 3d ago)
-NickServ- Last seen : (less than two weeks ago)
-NickServ- User seen : (less than two weeks ago)
-NickServ- Flags : HideMail, Private
-NickServ- jiatan has enabled nick protection
-NickServ- *** End of Info ***

/whowas expired not too long ago, unfortunately. If anyone has it I'd love to know.

They are not registered on freenode.

EDIT: Libera has stated they have not received any requests for information from any agencies as of yet (30th Saturday March 2024 00:39:31 UTC).

EDIT: Jia Tan was using a VPN to connect; that's all I'll be sharing here.
It's particularly strange, given NixOS is recommended in the alternate (no systemd) list. NixOS does indeed use systemd.
Autopilot makes sense when that door is usually open, usually available, but today for some reason its closed, and that's unusual. This door was closed and alarmed year-round, for decades, until the building was renovated and that particular exit was removed entirely.

If its a new student, I get it, and I was rarely salty about people making that mistake early in a semester (It happened so frequently in September that my boss would occasionally leave the alarm off until the end of his workday for the whole month). If this was still happening in April (and it did), when that student has realistically been going past that door and through the locker room since at least January, and more likely since August, its not "autopilot".
It was 9% in richer districts and 13% in poorer districts - I’d definitely be interested in further analysis to see an intra-district breakdown.
yeah it is really tough out there for bootcamp devs
Ah, should have guessed this was already being discussed:
https://news.ycombinator.com/item?id=39865810
Now you tell me… awesome explanation- thanks
It is true that Rust considers memory leaks safe. But Rust's type system still helps compared to C. The two toy examples in the article wouldn't have happened in idiomatic Rust. Though the same can be said about C++, or any other language preferring RAII over explicit free calls.
Their original action may have been a mistake. This poor response isn't. They don't take full responsibility for the error. Instead they blame a reasonable interpretation of their words as an incorrect and highlight a positive contradictory portion. It's a bad look for Vultr.
While I agree with you on principle, Google has earned just that reputation and I would never use Google Cloud for anything critical.
Totally. Brazil is having great economic benefits from cutting down its rain-forests and farming cattle. Just like Europeans and Americans did.
\1 What we as humans experience is subjective to humans.

\2 Who's to say animals don't experience beauty, primates, dolphins, octopus, etc are all pretty high on the IQ scale and likely have EQ.

\3 Lastly, what makes human experience such an important factor for the environment in any case? Modern humans have been about at most 2 million years while life on earth has been about for magnitudes more time.
Microsoft and OpenAI planning $100B data center project
It said in the article that this was a problem for schools that reopened quickly too (although didn’t give numbers).
Interesting commit in January where the actual OpenPGP key was changed: https://github.com/tukaani-project/tukaani-project.github.io...
it's shocking how many packages on distros are just one random tarball from the internet with lipstick
smart contracts on public blockchains can handle all those custodial aspects

the smart contracts can be permissioned and have multiple signers and beneficiaries and payable on death conditions, the oracles and admins can be multi signer accounts too

I’m just trying to figure out what false dilemmas you are operating under, the examples already exist

You’re the advocate, in your world, but seemingly stuck in their myriad of concerns that are based on incomplete information

reminds me of how the substitute meat is repulsive to omnivores and vegans alike. hyperledger vibes
Another tired parade of punching bag topics without a single - not one - acknowledgement of the contribution these “elites” and their companies have made.

The idea that the media’s fawning is the reason tech “got away with it” is stunning in its lack of truth or evidence. Every one of the harms raised were covered at the time they occurred extensively and have been raised ad nauseam forever after.

What I did appreciate was the observation that DEI is not some panacea for the harms these companies cause. The harms of tech are often the harms of society at large.

The Baffler proudly stands on today’s purity test that criticizing tech is the only way to be a credible journalist, while serving as one more glaring example that there’s not much credibility left to the craft. No new insight. No sources. No education on where tech and these complex issues collide.

The fact that Swisher’s mea culpa is proof of insincerity reveals the culture war this piece is really designed to propel - if you want to contribute to tech, let go of any hope of approval from the press.

It may surprise the writer to learn - that was the rules of the game from the beginning.
A Wankel with a turbo at redline sounds you just violently shook a big metal can full of hornets.
The EV market is so frustrating right now. Everything seems to more or less be an SUV.

I wish someone would deliver something small, light, aerodynamic, stripped down and without features of marginal utility. Sportiness sort of comes for free.

The only important features for an EV are (excluding safety issues) are change speed and range. I might add a heat pump for the cabin (and battery in cold climes). Skip the screen and just let me use my phone and give me physical controls.

If a car marker thought seriously for a moment and resisted the full techno wank that is inflicted upon us at the moment, they'd make a lot of money.

It's a car, it's not that complicated, get back to basics.
Become an Expert in (Arch)Linux
Great question. This would be a bigger issue if we were only aggregating results and summarizing them, but because we both aggregate and show (in our opinion) the highest credibility reviews from YouTubers (and other sources like blogs once we add them), our idea is that while the general mass opinion can be shifted through campaigns like that, the top end of the spectrum should hopefully still remain pure.

If on the other hand the top end of the spectrum is corrupted, then hopefully the masses can compensate for that. If both are corrupted and all of the data sources available are, then it really comes down to our ability to filter out LLM or promoted content which comes down to how well they can hide it. AI detection tools have been scaling alongside models, so it's also a question if that will continue over time. We'll think of some more advanced things if that becomes a bigger issue for us :)

At the end of the day, if a company can do a coordinated advertising campaign across the internet over months to block out any negative opinion, it's a big deal for both us and the social media/data sources we pull from that's going to be a challenge we have to deal with.
Someone named "John is good" claims they aren't a malicious actor... You're trying real hard to convince us, huh.
That’s exactly my point though; it’s incomplete but academics sell incomplete/wrong work to eat.

They’re just as much avoiding real work of keeping themselves alive as an aristocrat to noodle around something that will only ever be incomplete due to our axiomatic systems being leaky abstraction.

I’m a “Perelmanite.” The ethical and communication standards of academia serve its social influence goals, not science.

We get the gist of natures mechanics and know how to measure generally. Further specialization of the syntax rarely moves the needle, which still points at Einstein, Gödel, and other century old works, rarely the contemporary librarians of scientific texts except to say “yeah this customization still preserves the whole of relativity” or some other core body of work we infer modern research form.

Perelman figured out Riemanns at home, alone. Bailed on university as he found it mired in politics and manipulation of social agency to preserve itself.

See that recent article about institutions becoming road blocks to the progress they were created to resolve. There’s been article after article here about science depts veering into pseudo-science. When a workers salary depends on them ignoring truth… “meat suit needs to eat” wins above honesty and integrity.
Nice! I will have to check that out. Thanks!
Suspicious libarchive pull request (2021)
Gonna use a personal trick/hack? Use it often (2022)
They should also remove the emojis, there is no need to have people feel good about upvotes. I've long felt uncomfortable with emojis on Slack as well. Responding to a coding or infrastructure issue should not be a social activity, I respond because it's my job and if the issue is worth it, not because a human being should feel appreciated (either them or me).
Iowa official finds dead fish in 50 miles of fertilizer-contaminated river
> PUBLISHED: December 2, 1985 at 1:00 a.m. | UPDATED: August 9, 2021 at 10:23 a.m.

I would like to know what happened on Aug 9?
It's no myth, currently the deepest investors in actual tangible green hydrogen | ammonia are the bulk resource miners in Australia that move ~ 1.5 billion tonne per annum (total) and ship just under a billion tonne per annum in iron ore alone.

They're already building massive solar farms mine adjacent and transitioning from diesal.

Perhaps you're thinking of hydrogen distributed for tiny cars rather than the use case of hydrogen|ammonia for really big trucks, shipping, and on site power stations for use in 24/7/365 large scale mining applications.

The fossil fuel draws in that sector are significant.
Are you kidding me? 18 and 19 year old males are like the highest risk taking, complete fuckery, "hold my beer bro", push the limits demographic by a long shit.
first commit made in one of JiaT75's other repos https://github.com/JiaT75/STest/commits/master/
Since the achilles heal of the rotary is wearing seals has anyone seriously invested in testing coating/material tech for this? It may not make sense for mass production but spending ~10k to make a bulletproof rx7 would be an incredibly good investment.
Maybe the US Government needs to put its line in the sand and mandate the end of autotools. :D
Wankels have only one advantage - they are about two times more powerful on same volume (you could consider them as very clean two stroke engines).

Unfortunately, Wankels have extremely huge mechanical problems - complex geometry (classic ICU are very close to just cylinders), need of better materials, depend on much better oil.

And also big problem is production scale, as I talked with people, they considered Wankels as toy, you will just utilize when it run out guarantee term.

For example, for standard ICU, considered big repair, sleeves, so they will continue working, sure, less heavy duty than new.
No, there are very real differences between genders. You can pretend there isn't for Internet Points, but you're just wrong.
The parallel I think of is the dark UX employed by every streaming app. If it doesn't have the show I explicitly searched for, it shows me a "you might be interested in" list that takes up the majority of the screen, instead of a simple "No results matched your query".
But what if an actual emergency occurs? People still need to be able to reliably grip and manipulate the door bar/plates/handles, you can't just make them super slippery all the time.
Likewise on YouTube, which OPs service is also pulling from, several times now I've gone looking for reviews of a specific product and one of the top results has been a TTS voice reading a probably ChatGPT-generated "review" which invariably recommends the product because the point is to get you to click the affiliate link in the description. The channels I saw were posting "reviews" so frequently and consistently, and for such random products that I suspect the entire operation is completely automated.
ActiveRecord seems great until it isn't--though I still think in SQL first and foremost. Common problems are (1) instantiation of many preloaded associated AR models that lead to memory pressure and GC time, (2) N+1 queries--yes you can preload, but there aren't easy ways of avoiding them on mutating a batch of AR models (validations and other callbacks on them don't batch).
Seems to happen whenever I don't specify a specific product?

https://www.lumona.ai/search/results?q=vegan+european+leathe...

^ That search does the forever loading boxes for me but if I add 'cream' to the end of it then it seems to work.
This was my exact thought! Multivac is finally going to happen. The first of many, hopefully.
Fair. The best solution we've seen is building the product in some way where it's somewhat defensible, either through data, features that bigger players won't build, etc. and then using a subscription based model if users are willing to pay for that and value the searches high enough or using an ads based model if you're optimizing for traffic rather than pure value on each search.
What?! Cloudflare?
We need to get these complex & bloated build-systems under control.
All these older (4.x, 5.0.x etc) releases that were suddenly uploaded a few months ago should probably also be considered suspect: https://github.com/tukaani-project/tukaani-project.github.io...
The website change reminds me a bit of lbzip2.org https://github.com/kjn/lbzip2/issues/26#issuecomment-1582645... Although, at the moment, it only seems to be spam. The last commit was 6 years ago, so I guess that's better than a maintainer change...
Adding onto this, if anyone is in and around Raleigh, check out Reader's Corner on Hillsborough St. ~44 years

https://www.wral.com/raleigh-bookstore-owner-focuses-on-ever...
It seems unhealthy for us to sort out what is and is not a healthy way for someone else to mourn, or to remember, their own grandmother.

It is healthier for us to just let others do as they wish with their time without passing judgement.
I use this tool often. I donate to support as well.
Another option in use around here require the user to break glass before being able to use the door; as with fire alarms, having to break something has been proven extremely effective in deterring misuse, accidental or unintentional use of things like fire exits.
Not in this case as the other commenter pointed out but for example Vivaldi on Arch Linux is just a repackaged upstream build.

https://gitlab.archlinux.org/archlinux/packaging/packages/vi...
Okay that is a fair point, see Blogger, Stadia, Google Reader etc.
Clearly a human is even better at it.
A Journey in Creating an Operating System Kernel