skysight-inc/HackerNews huggingface dataset:
I would be interested in a comprehensive guide on "doing it right", or a link to a guide that suggests the right thing.
Well before that: letting a central lib and project to be maintained by a single tires burned out project dev (see xkcd2347)
The argument is that the company could have preserved their forest because it would’ve been more profitable to keep it.

That old growth or near old growth forest of red woods shouldn’t be harvested at all is a separate issue, has little to do with Star Wars, except that Star Wars vi was shot in such a forest.
Ask HN: Degoogling in 2024
After my play store account being deleted for "inactivity" despite having used it recently and having an app with over 1000 installs removed I've decided it's a sign to finally degoogle - any tips my main challenge is email!
Made in Europe: from mine to electric vehicle [video]
> This is definitely the first time I’ve read this. Do you have more info on that?

This would be a particularly unique explanation for the bursting of property bubbles all over the world (like, does this also explain the Irish property bubble crashing?).
In my story one can assume that "bumping uglies with gamgam" and "registered a gmail account in 2003" occurred on separate time-trips. If we want to make a book out of it we could do the whole "I didn't know she was gamgam!" meets "Wish I was one of the first!" Time travel trope collision.
Considering how kind(naive) our open source projects maintainers are, backdoors are probably already everywhere.
The tiredness or other problems of the developer seems an easy narrative, but did anything actually happen that wouldn't in any understaffed open source project? A contributor shows up and does work for 2 years, I feel most projects would have given the person full project developer status by then.
why people pay for 3rd party VPNs? It's far more secure to create your own wireguard/openvpn/whatever with a cheap VPS
Yep. yt-dlp and youtube-dl

https://github.com/yt-dlp/yt-dlp

https://github.com/ytdl-org/youtube-dl

Will also start to feel the impact. My theory is that we will see a bunch of new video hosting sites as youtube itself attempts to lock down its ecosystem. They haven't paid attention in any adversarial way as far as I can tell.

When they do, it wont be great.
There are those who run sshd on a non-standard port and log all attempts to connect to the standard port though.
> special case where all memory can be easily handled in arenas
That seems to be an unfair bar to set. If _most_ objects are easily allocated by an arena, then that still removes most of the need for GC.

I like Jai's thesis that there's four types of memory allocations, from most common to least common:

1. Extremely short lived. Can be allocated on the function stack.

2. Short lived + well-defined lifetime (per frame/request). Can be allocated in a memory arena.

3. Long lived + well-defined owner. Can be managed by a subsystem-specific pool.

4. Long lived + unclear owner. Needs a dynamic memory management approach.

If you want to make the claim that tracing GCs surpass manual memory management in general, you should compare to a system written with this in mind, not one that calls malloc/free all over the place. I guess it might be more fair if you compare tracing GC with modern c++/rust practices.

I agree that for most systems, it's probably much more _practical_ to rely on tracing GC, but that's a very different statement.
Better still, git-absorb figures out in which recent commit your fixups should go on its own (based on which file it touches)
I wonder if the fact they "had" to use a dependency and jump through a number of hoops suggest they're not involved in the conspiracy? As if they had this sort of access and effort surely systemd itself would be an easier target?

But that's not saying this is the only conspiracy, maybe there's hundreds of other similar things in published code right now, and one was noticed soon after introduction merely due to luck.
> perverts

I do this during hot nights - easier to micro-regulate your body temperature with a extra thin layer. Easier to wash is a bonus. Plus they tend to be finer quality.
The Reddits (P Graham)
For E-Mail there are plenty of hosted alternatives. Fastmail is usually what I recommend, but there are others: https://github.com/tycrek/degoogle?tab=readme-ov-file#gmail-...
Sometimes a crash course on how not to do things is a most effective form of education...
Doesn't this create a paradox, since infinite scroll is infinite?
Data is usually amenable to regular boolean logic, whereas code (because it loses information/gains abstraction as it runs) must be handled with intuitionistic logic; to me this sugggests that the more we can express in data instead of code, the easier it will be to prove our programs behave well.
"Keep, ancient lands, your storied pomp!" cries she
With silent lips. "Give me your tired, your poor,
Your huddled masses yearning to breathe free,
The wretched refuse of your teeming shore.
Send these, the homeless, tempest-tost to me,
I lift my lamp beside the golden door!"
Clustering. Without which indexes would be less efficient.
I think we’re mostly in agreement here?

I did say most failed democracies turn into other forms of government, which I think is broadly true. Consider Weimar Germany, Russia, and Zimbabwe as examples of this tendency. And while this is somewhat unfalsifiable, you could argue that any failed democracy that is still democratic is bound to eventually turn into another form of government eventually, or just to collapse into a completely failed state and de facto anarchy or civil war, like Haiti or Lebanon.

I definitely agree that many countries aren’t really capable of being successful democracies. Lee Kwan Yew famously thought this was true of Singapore, and judging from what he did with the place I wouldn’t argue with him. You should also consider failed attempts to establish democracies, such as Afghanistan.
> Human societies are in a constant game of evolution against each other, since time immemorial.

I don't know if you are aware, but you've almost directly stated the core thesis of Mein Kampf.

Here is a Yale professor of history explaining just that:

https://www.nybooks.com/articles/2015/09/24/hitlers-world/
If you're referring to the sharp drop at the end of the graph, no. It's an artifact of the api change making it much harder to capture comments. We can verify this by how the comments/day rank didn't budge, because it happened on literally every sub simultaneously. If you're referring to the gradual dip from its peak, I have no idea.
> Advice for founders afraid of repercussions if startup fails?

Don't fail ;)
Hmmh, brings up the question, if no exploit actually occurred, was a crime committed? Can't the authors claim that they were testing how quickly the community of a thousand eyes would react, you know, for science?
My grandma and mom are doing it like this, for generations as far as I know.
The -fno-extended-identifiers option seems to do something in this area, but I don't know if it is sufficient. But it may block some characters which are used in standard English (for some values of standard).
I discovered this method in the early 80s as a kid on French TV.

There was a program with Jacques Martin about "incredible" stuff. I remember a hairdresser who used a flame and J Martin almost agreed to try, another one about the world record in going back and forth through a door.

That one was the world record in how many duvets you can handle in a given time IIRC.

Note that this was 80, 81 or around that. This was the only source for such stuff in France so it was a big show (for children at least)
Not sure that I understand.

What's hard about `restic -r /media/ehecatl42/t14g3-backup/t14g3-restic-repo restore latest --target /home/ehecatl42/Desktop/nvim-restore/ --include /home/ehecatl42/.config/nvim/`* and just `cp`ing your missing files from that.

* From my recent .bash_history
> login process

RCE doesn't really follow a login process design. As soon as you got RCE you can be considered pwned.

If not now, then at the time the next locally exploitable vulnerability comes up. There are plenty.
I've never seen anyone using a sheet and blanket to be honest. In Europe at least, duvet is the obly thing people have.
Scenario 3: It fails spectacularly for reasons that you didn’t anticipate at a time that you didn’t anticipate.

You’ll still be in your 20s, so kick back and smoke weed or do whatever it is you enjoy doing for fun
This isn't really like that. Making state of the art printheads is more similar to things like camera sensor chips. Only a handful of companies have the tech to make them, its not a simple matter of buying some machines and putting them in a factory. It's a true marvel, not a middle of the road marvel.
To me it would make more sense to add more eyeballs looking at what gets committed. For example, in this case who would you pay? The new (co-)maintainer was compromised and it would not help to pay him. Thus, in order for payments to help one would need to have some assurance that the person getting paid is not compromised. The easiest way to have some level of such assurance seems to be to pay ones own employees. This is of course not bulletproof, but certainly adds another layer to pulling something like this off.

At the same time, this attempt nicely illustrated that the chain is only as strong as the weakest link since, as I understand it, no part of the backdoor was committed to the git repository in cleartext. Instead, the part of the backdoor that was at least somewhat identifiable was only included in the tarballs that would be downloaded and used by Debian/Fedora when building the packages for these distributions, thus giving a very nice trade-off between the chance of someone detecting what was going on and the potential impact of the backdoor.
I was just looking at headscale. Last release mid 2023.

I had immediately asked myself: is this even maintained anymore?

I think this is a very valid question to ask.
A proper dictator will immediately remove all potential power from army generals, police chiefs, political party leaders and so on. He will not even remotely allow any potential challengers that are capable of consolidating enough resources to even think of causing any trouble.

On the other hand, he will allow his establishment to feed off the system, so they become dependent on him and remain interested in maintaining status quo and stay within the line. Of course, this is reinforced with brutal crackdowns on any form of dissent. He makes everyone worthless and replaceable, and makes it seem that it is very easy to lose everything if you show any disloyalty or try to push for your interests in a wrong way.

In the country where I'm from, military chief commanders were just some planted nobodies that were rotated every year or so. All political establishment was fully loyal and were too weak to even have fantasies on grabbing power.
“Community desires more”

At which point if “the community” consists of one guy doing everything and a couple whiners making demands, fuck it.
I was expecting to read something like: https://en.m.wikipedia.org/wiki/Pentium_FDIV_bug
The Jigar Kumar account should be treated with extreme suspicion. It seems like it was part of a social engineering attack.
Yes, they usually are. They're usually from the same factory that supplies Samsung, apple, etc. Samsung gets the best screens, the ones with a few dead pixels go to the no-name manufacturers. There are YouTube videos about this. There is also a whole market of used "shucked" smartphone components.
I mean the forest in the article that was turned into decking.

> The trees being harvested commercially today are only a few decades old.

The province of British Columbia publishes figures on old growth logging. They're cutting down ~40,000 hectares per year. https://www.cbc.ca/news/canada/british-columbia/old-growth-l...
> where no auditor ever looks

Well, software supply chains are a thing.

"where no auditor ever is paid to look" would be more correct.
Is the gatekeeper function is diminished a bit by electronic publishing ?
No. But if the maintainer is burning out and doesn't have free time available for it, paying them so they can take time off to actually work on the thing is a nice way of fixing issues.
theyre much harder to add if people use a buildsystem from the last, idk, 20 years
Show HN: 2FAGuard – TOTP Authenticator for Windows
A modern and secure Windows app for managing your 2FA authentication codes with multiple import and export options. The data is encrypted using AEGIS-256 and Argon2id and the app supports Windows Hello. A portable version is available.
The founding ideology and the one held by the secular-to-traditional mainstream is secular nationalism, not theocracy.
I hear this from time time and it is usually said by people who do not frequently visit forests. They are not at all same, not in the slightest. Nature has so much variation due to landscape such as hills, species competition, water distribution. It is like saying one city on earth is the same as the rest of them. See one suburb in Korea and it is exactly the same in Minnesota. This is just nonsense.
No, maintaining such software should be a paid job. Not that that guarantees all, but it could be a step.
It's also iffy tbh. that the compilation check functionality:

- doesn't force users to differentiate between syntax errors and other errors (e.g. symbols not found). Partially you can't even make it work properly if you want due to C macros.

- it seems sensible, tbh. if "does compile" checks for compatibility seems sensible then there is so much wrong with the ecosystem in so many ways
That "check_c_source_compiles" function should first test if the provided code snipped is "valid C code in general" and only then check if it compiles in given system.
If less children and mothers dying and less people in famine doesn't give you hope I don't think anything will. Good luck.
That’s just not true. The violent crime rate in Russia is many times that of any Western European country, and their intentional homicide rate is slightly higher than America’s. In terms of murder rate Belarus sits much closer to Western Europe than America, but it still sits above Western Europe.
Because most people are not techies.

Compared to the rest of the world, the number of people who even know what a VPS is is microscopically small.

And even those that do, the number of them with the time, desire, or skill, to do as you suggest, is even smaller.

I myself was into this sort of thing just 10 years ago. Now, as I start looking at hitting the big 6-0 in just a few years time, I’m already working on divesting myself of all this complexity,
Now I'd like to have a link to that patch in code used by Apple that also appeared as a typo. Anybody remembers?
That's awesome! I'll definitely give it a try if there's a suitable scenario.
That's like asking if someone that went into a crowded place with a full-automatic and started shooting at people but "purposefully missing" is just testing how fast law enforcement reacts, you know, for science.

After something like 2 years of planning this out and targeted changes this isn't something "just done for science".
Here in scotland, uk, in winter, the interior temp of my house will drop to 16 or 17°C overnight, from its regular temp of 20/21°C during the day when the heating is on.

Outside temperature range round here is maybe -6°C to 24°C

I don't know what standards the RoW uses, but we have a TOG rating here for our duvets ... we have a 4 for summer, and 13 for winter.

https://en.wikipedia.org/wiki/Tog_(unit)

https://en.wikipedia.org/wiki/Climate_of_Scotland#Temperatur...
This is probably better phrased as a popular emerging theory, rather than the matter of fact tone used here.
You could use the EPA dollar to life conversion ratio.

Though anything actually potentially lethal shouldn't really have a standard Internet connection. E.g. nuclear power plants, trains, planes controls, heavy industrial equipment, nuclear weapons...
> A utf character from a language that has zero chance of being mapped to your programmer's keyboard in the middle of a code line, that would be obvious intentional tampering or at the very least raise some eyebrows.

I accidentally get Cyrillic "с" in my code few times a year. It's on the same key as Latin "c", so if I switch keyboard layout, I don't notice until the compiler warns me. Easy to do if I switch between chats and coding. Now my habit is to always type a few characters in addition to "c" to check what layout I'm _really_ using.

Granted, it's easier with a one-letter variable called "c", but with longer names I can easily see myself not typing "c" the first time (e.g. not pressing hard enough), starting build, chatting in some windows, getting back, facepalming, "fixing" the error by adding "c" or "с" depending on my keyboard layout.
Not everyone is savvy enough to do it, even though the process has been simplified with many hosting providers providing preconfigured VPN servers.

And it doesn't anonymize you that well. When you post a message that draws the attention of law enforcement, the IP will lead them to a VPN provider that hopefully doesn't keep any logs.

But if it leads them to a specific server, the hosting provider will disclose your account and payment data, since it is linked to your private server. Unless they accept fully pseudonymous accounts and let you pay for your VPS in cash, Monero or tumbled Bitcoins, finding you is much easier now.
> while so much time goes into code reviews to verify internal changes at most companies

Very easy claim to make. Difficult to verify.
> it enabled it in the first place

it took roughly two years including social engineering.

I'd say the same approach is much easier in a big software company.
LLM are not “AI”.
The thing you scoff at in your racist quip lots of mothers would kill to give their children, still today. Real peoples lives are improving at a great pace, the fact you have so much more doesn't make less deaths at birth any less positive. When I was younger to hear someone speak like this of reducing world hunger would get you labeled with whatever the most evil label would be.
The iPhone is clearly capable of doing this. I also wish for your smartphone to become your main (and potentially only) electronic device. Just dock it to a monitor to use it as a desktop pc, dock it to the television to watch movies or play games. When travelling anywhere all you would need is your phone.

But like you say, Apple has no incentive to do this as it wants to sell iPads and Macbooks. Hopefully in the future this happens.
Oftentimes, it's not about security but about circumventing censorship. A cheap VPS comes with a fixed IP located in one fixed part of the world. Many VPN providers allow switching.
After the concept of such attacks had blow up idk. 1?2?3? years ago a lot of places now warn at least when mixing "languages"/ranges or sometimes on any usage of non us-ascii printable characters.

So stuff like that is increasingly more reliable caught.

Including by 3rd parties doing any ad-hoc scanning.

Through adding `compiles check` fail with syntax errors definitely should be added tot he list of auto scan checks, at least in C/C++ (it's not something you would do in most languages tbh. even in C it seems to be an antipatters).
> Historically nothing sets up a country better for future success than lots of immigrants

That might be mixing up cause and effect…
It also allows "pk" and "sk" as overly short variable names, an argument developpers are sometimes tempted by!
This could be something that agent that infiltrated into companies could use to execute stuff on internal hosts that they have SSH connectivity to but no access.

You could get into bastion hosts and then to PROD and leave no log traces.
The article doesn't say anything about acceptable pause times. GC can be completely pause-free.
One of my professors once told me that we have too much CO2 in the atmosphere, and that the best thing we could do to the planet was to cut down trees, bury them, plant more trees, cut those down, and bury those.

If they become decks, paper, or other useful products in between, reducing usage of plastics things which emit carbon, so much the better.

Convince me otherwise.
Zip entry size unset now honors user requested compression level
How do you know that the AI got it right?
That's funny, hotels are the only places where I see sheets and blanked being used.
> Also, this is why Swedish duvet covers have holes in the upper corners, just reach through them and grab the liner and pull it in, shake a bit, and you’re done.

Just as an FYI, this is going away. At least IKEA stopped doing this. From what I heard, people complained thinking the holes were made in error. Stupidity wins again.
This future world with all these solar panels might also have lots of intercontinental HVDC cables to spread that power around the world:

https://ieeexplore.ieee.org/document/9241117

Nevertheless, if we install enough panels, it will be so cheap that the cost is negligible for most applications.
I don't think this kind of backdoor is that widespread. But intentional vulnerabilities for sure are.
Okay, first, please don't follow me around HN, this isn't Reddit. Second, anti-trust enforcement is an essential element of a functioning capitalist economy while privacy & AI safety regulations are essential to proper functioning of our society.

You seem to be naively basing your entire world view on the self-serving opinions of Big Tech CEOs. (Linked in another comment). Perhaps reconsider how you arrive at your opinions?

Personally I don't want to be drinking polluted water, eat unsanitary food, live in a place where all housing is owned by a handful of entities that engage in price-fixing, work 80 hours a week in an environment when response to mass worker suicides is to install suicide nets, have my privacy violated by private corporations (foreign or domestic) or have my insurance rates tripled by some opaque discriminatory AI, but you do you in whatever dystopian future you dream of.
I don't think I fully understand your argument. Could you expand on it a bit more?
I thought it was considered "well known" that the Rotten Tomatoes audience rating is not trustworthy because of ballot stuffing by the film studios.
I kinda miss the curiosity show.

It was a bit more science leaning but got kids to awe just the same way.
If I get this right, it's not extending the background tiles from 256 to 1024 but making them bigger. So you'd end up with 256 16x16 tiles rather than 8x8 one. It's super interesting but not as flexible as 1024 8x8 tiles. Hopefully you can make it someday!
You could just run tests for the feature detection on a known system or a dozen(VMs are cheap). The big problem is that most code is not tested at all or test errors are flat out ignored.
> The european countries don't really have distinctive minorities from their neighbors

Well… I wonder how that happened since it certainly wasn’t the case until the period between the mid/late 19th century and the 1940. I guess we’ll never know.
The thing is, naive democracies believe that the IMF is giving them advice in their best interest, but in reality most countries that sent from developing to developed status had to break most of the IMF rules. I'm talking about countries like Japan.
That is insane and I would be inclined to not believe it if someone had told me this. This is such an immense breach of trust that even for me, who has a very low opinion of Meta, it is unexpected. I hope this will blow up as much as it should