skysight-inc/HackerNews huggingface dataset:
It's the same disease that people got from unpowered 5G towers. If you go around asking people do you have headaches since the new tower is there, you will find people who do.

Amplifying this by the seriousness of 3 letter US agencies and whatnot and you get people medically retired. (And this is ongoing long enough that probably even some Russian agency has sent there someone to check, and then it got picked up by intelligence leaks. Or they leaked it to fuck with them.)

(And of course psychosomatic things need treatment too, and the investigations are warranted, it's not like US chanceries are the safest places in the world.)
Customize Microsoft List with SharePoint Framework
Great news!!! You can fully customise Micorosoft List Experiences with SharePoint Framework even lists that are stored in the My Site of the users.
The US might only feel 2% inflation, but that doesn't mean other countries (ie. developing ones) are going to get off as easily. Food spending makes up more of their budget there, so the impact will be much higher, not to mention they're poorer to start with and are already feeling the effects from the inflation caused by the pandemic/Ukraine war .
Machine shops make parts for machine shops, with a lot of human labor and control.

So... Just start with machines that can mine and refine metals.
Animal cells do not have any thick, durable cell walls (like the cells of plants or of fungi). Their thin membranes would be easily ripped by such silicon spikes.

The durable materials, if any, can be only extracellular, like in bone tissues or cartilage tissues, where they fill spaces between and around the cells.

As another poster has said, the durable, protective part of the skin is made by dead cells, which are shed and renewed. Being already dead, they would not be affected by scratches.

On the other hand, eating some particles covered with such a surface with silicon spikes might be a bad idea, though the damaged cells from intestinal walls should also be eventually replaced, like those of the external skin.
I have really soured on you after reading this comment. It added zero value
It might be worth it to analyze a bit more.

Like, what would be different if the software would be closed source and developers payed by companies? I think it would be at least as hard to notice such an exploit and sometimes it might be easier (if the company is located in your jurisdiction).

Maybe the current mindset of assembling programs could be improved. There is a trend in some architecture to separate everything in their own container and while I don't think it can be directly applied everywhere that model gives more separation for cases like this. Engineering is an art of trade-offs and maybe now we can afford making different trade-offs than 30 years ago (when some things where decided)
I think mail-archive.com just shows time stamps in UTC-0700 or UTC-0800 regardless of where you are. That's how time stamps appear on all of the few mailing lists I checked out there, regardless of the sender of the message.
Here is the a distribution of commit times and days of week (hopefully I didn't mess up time zones and plot everything in UTC): https://imgur.com/a/1js5T8L

~~It has surprisingly many commits on Sundays.~~

UPD. Weekday 0 is actually Monday, not Sunday.
Switching between code variants using comments
If you look at the Nintendo Gigaleaks, you'll discover that most of Nintendo hardware had one single CVS (later SVN) repository that held everything. Same with BroadOn, even up into 2010, when the cvs backup was taken.

It's fairly well known that Google maintained a Stinky monorepo for a long time and one of the risks is someone just going and slurping the whole thing up onto a big enough drive and walking out the door.
Don't know if this is /s or not, but for me it seems fast, but not extremely so.

My PC from '92, a 386 with 4Mb RAM was a bit slower, but not much. Boot took about a minute, including RAM test. Once in windows 3.1, bigger programs took long to start, but I presume that's mostly RAM limited.

This machine was very powerfull. 16Mb was huge and pentiums were rare.

My biggest slowdown was win95 on I think a cyrix 6x86 with 16Mb. But win95 was such a leap forward that we tolerated it.

SSD's brought us vack to this era of startup speed, and we're quickly regressing again.
* eBPF: it's something that should be in the pocket of every security professional

* Elixir: I am intrigued by Erlang since a decade, anyway the steep learning curve always rejected me.

* Mandarin
Hi friends, this is my new side projects, I'm just tired of typing long time to ChatGPT for writing email, we can do something further.
Yep. It seems to be from stolen accounts, maybe gathered from leaked account/password lists.

The result is that outgoing hotmail/outlook smtp servers are added to blacklists until they start content filtering their own users.
This is a complicated topic. To me the ability to hold a coherent (not necessarily still for reasons I won't elaborate on fully to keep this message somewhat short but essentially there is a large kinesthetic component that I suspect a very large percentage of people, myself included, rely on to visualize) 'image' in the minds eye is the measure of hyperphantasia. But 'image' is the wrong word because the 'image' we see in our mind is probably more of a rational reconstruction in our mind spurred by some sort of impression that first formed the memory that the image is reconstructed from. Aristotle wrote about this and more in "On Memory and Reminiscence", I am not correctly conveying the idea.

If you could accurately form an image of a realistic face in your mind then barring some sort of motor issue you would I argue by definition be able to draw it on paper by using the image in your mind as a reference (obviously the technical skill of using a pencil to dutifully create lines which entirely match what is attempted might be lacking and it might be a poor picture in a technical sense but I think it would still be recognizable as a realistic face). The difficulty in drawing a realistic face is that you don't actually know what one looks like, or, more accurately, you have the ability to recognize what a realistic face in general should look like (perhaps due to some inbuilt neural circuitry) but you don't have the ability to recall it in all of its detail. Because you can't recall it you can't form that image in your mind. Anyone who can't draw a realistic face doesn't actually know what a realistic face actually looks like, they can only recognize it. I don't think this would be a controversial view among talented artists for instance because many well regarded treatises on the subject of drawing essentially put forward this idea.

I guess what I am trying to say is that your ability to visualize a face is probably not much better or worse than your ability to visualize any other object of similar complexity except that you would be much better at recognizing that the face you visualize isn't very accurate. If you weren't able to recognize that it wasn't accurate you wouldn't have critiqued it and if you did you wouldn't have remembered the critique anyways.

To close by detracting from everything I have just written: You can also draw a very convincing face by memorizing a complex set of rules that doesn't rely at all on visualizing anything so who is to say that isn't the thing that happens when someone draws a realistic face which puts this whole business of visualization into some doubt
If you face south in both hemisphere's it comes up on the same side - it's only if you face the equator that it's different
That means it's an accurate emulator! There's a reason Speccy had a word-per-key input mode for programming
> rather than developing state of the art vaccines and embarking on a program of convincing the population to get vaccinated and take other precautions, China was handling COVID through draconian lockdowns months, and even years, after other countries found other ways to contain COVID spread and treat the illnesses it caused

This is wrong in several ways.

First, China did, in fact, develop multiple effective vaccines, and it had a massive campaign to vaccinate as much of the population as possible. China ended up reaching a vaccination rate of about 90%, which is much higher than what the US and most of Europe achieved. The problem that China (and a number of East Asian countries with similar cultures) faced was that old people are less willing to get vaccinated. That goes back to traditional medical beliefs, and is very difficult to deal with.

Moreover, for much of the pandemic, China was the major supplier of vaccines to the rest of the world. The US and EU were hoarding the supply of mRNA vaccines, but China was exporting about 50% of its vaccine production. One of the more shameful manifestations of nationalistic group-think during the pandemic was the campaign in Western media against Chinese vaccines. Sure, they weren't as effective as mRNA vaccines, but they were as effective as the J&J vaccine, and they were actually available to the rest of the world.

As for China's epidemic management policy, it was far more successful than anything in the West for most of the pandemic. China competely eliminated the virus by around April 2020, and normal life more or less returned. From April 2020 until April 2022, China was a bubble of relative normality. Lockdowns were rare, and were highly localized, because the virus was not spreading in the country at large. Epidemics were caused by specific introductions of the virus from the outside world. The main hassle was that entering China was extremely difficult. You had to go through 2-3 weeks of quarantine in a specialized hotel, with multiple tests before departure and daily testing during quarantine.

As a consequence, China was the only major economy in the world to grow in 2020, and it had strong growth in 2021. Things only took a turn for the worse in April 2022, when the Shanghai outbreak occurred. Part of the problem was that the government couldn't decide whether to let the outbreak spread or to contain it. They at first let it spread, but then decided to contain it, which led to a snap lockdown.

It's worth noting that in the end, the zero-Covid countries (not just mainland China, but also New Zealand, Australia, Singapore, Taiwan and Vietnam) fared much better than the US or Europe. If China had followed the American policy, about 4x as many people would have died.
Try parse_intl_phonenum? One character longer than GP's.
Oh, Tom St Denis (of libtomcrypt) is working for AMD? That's promising.
The enshittification progresses... you hate to see it
I think the point was like "when it comes to programming assistance, auto-completion/linting/and whatever else LSP does and syntax assist from Treesitter, are enough for me".

Though it does come a little off as a comparison. How about programming assistance via asking a colleague for help, Stack Overflow, or online references, code examples, and other such things, which are closer to what the LLM would provide than LSP and treesitter?
I agree on the technical part, but:

A problem is that you can do everything technically right, and sitll land in spam, because some big players don't play by the usual rules.

For example, Microsoft apparently has an allowlist for IPv4 -- or equivalenty, blocks all IPv4 by default, until you manually de-list them at sender.office.com. At least I haven't found an IP yet for which I didn't have to do that (self-hosting email for 15 years).

(Imagine every provider did it like MS; you'd be sitting there and filling out web forms with 1000s of providers.)

So you have a technically perfect setup and MS stil rejects you.

--

That said, using some provider to send emails for you doesn't solve deliverability either. There, many customers share the same sender IP. If one of them sends marketing/spam, the entire IP gets bad reputation. In such cases, providers recommend to upgrade to "bring your own IP", which then needs to "gather reputation" [0]. Great, might as well have self-hosted in the first place, as repuation is the only thing I bought the service for.

[0]: Example: https://www.mailgun.com/blog/deliverability/dedicated-shared... -- Especially entertaining is "Use a shared IP if: Your shared IP partners have built a good reputation." As if you had any control over that.
The ins and outs of the Deno runtime. Since I want to build my first text/video course about it.

On the one side it could be a cool side project where I can help people getting their hands dirty with Deno and follow my passion on teaching interesting topics to folks. On the other side I want to push a project of myself over the finish line and maybe make a dollar or two with it.
Does any private Microsoft/Google/Apple/whatever program have any backdoors? We don’t know and we will never know.

At least with open source we are able to detect them.
I don't think that's an issue with JavaScript though. It's inherent complexity in your code's handling of concurrent operations, not incidental complexity arising from the language.
I wonder how the Chinese government will manage to sensor LLMs within China?
The arm reach factor - I can stretch a queen size duvet tight, holding corner to corner. (AU Queen = 210cm X 210cm).

For fitting, standing up I'll just feed one corner of the doona into the cover and find a corner to pinch, then the same for the other side - then open wide, and shake it out.

It so easy, which is why I was also baffled to see an article about making this easier to do.

(It's a small thing and it doesn't matter at all, but the ex seemed to notice it.)
Where did you get 250 hours from? I don't think it took him anywhere near that long based on the times mentioned in the video.

If it really did people would use CNC for this.
What would be a better way to pay the bills?
> libsystemd is linked to all systemd servies, which opens a rich attack surface of third party services to backdoor.

Many people have warned that systemd does way too much for an init system, and presents way too much attack surface. Cluck, cluck (chickens coming home to roost).
If you can do more than 10 concurrent requests you don't have enough abstraction layers :)
The link was changed after submission - previously linked to a "googelblog" April Fools joke
https://googelblog.com/products/registry/execute-your-best-i....

Why was this changed? Ruins the April Fools nature of it...
Has the course been useful to you in a professional setting? I mean, have you been able to apply what you’ve learned so far?
The weirdest thing to me is that Americans observe ANZAC day in Spring. Weird.
If you want to be an amateur chemist I recommend not getting your instructions from an LLM that might be hallucinating. Chemistry can be very dangerous if you're following incorrect instructions.
I did this, mostly to start and wrap my MSCS (ML focus) and augment my data science skills. Would I have made the same decision in today’s hiring environment? Perhaps not. I was also solving for some other goals. Feel free to DM.

I’d wager that networking into a role would be best for most in your position given the market.

You might also consider trying to cut your downtime to allow for a retreat like the Recurse Center to take a focused leave while maintaining employment (still comes with risk).
… and everything old is new again.

DJB’s qmail, written in 1995, was made of 5 distinct processes, owned by different users, with no trust among them. Coincidentally, it was the MTA with the best security record for more than a decade (and also the most efficient one).

It would have likely had a similar record even if it was only a monolithic process - because DJB - but it was built as 5 processes so even if one falls, the others do not.
IANAL but hiding something doesn't make someone legally immune. Any company could sue LLM companies and they can't hide it during the case. e.g. there is already a similar case on OpenAI.
Throw the resources of an APT at the problem, how many reputationally high pseudonyms could be generated?
The position is "park" because it parks the gearbox mechanism, not the car. It's clear that many people misuse it, to the point that manufacturers overengineer the gearbox lock so it's able to serve as a parking brake.
Yes, but none of these have performance portability across GPU vendors, so it's probably seen as pointless. You would need an AMD Vulkan shader, an nvidia one, and intel one, etc. It's not like C code on CPUs.
Not against a targeted attack like the one described.

A clickfarm marking password reset emails as spam could create real harm.

Even a malicious individual doing this to 2-3 fair transactional emails could cause damage for a small business with low volume.
Eh. I suppose 3 points, all minor:

1) Best of luck in an audit explaining that there is almost a 14% chance that your project is free of backdoors given reasonable assumptions. I recommend taking a photo of the auditor's expression and reporting back.

2) There are quibbles to be had about the IID assumption here; dependencies tend aren't selected randomly and attackers aren't targeting them randomly.

3) You don't need a for loop for that, you can calculate directly with `1-(0.99*200)`.
I think a lot if the paradigm frame comes from programming being still relatively new (although that's becoming a less and less viable meme). We're still very "one true way" in how we talk about software design.

Personally, I'd love to see us talking more in terms of problems/solutions.

To give an example. State leads to complexity and bugs, and it can be minimized by preferring pure functions where possible. That's a good principle that can be learnt from without embracing everything functional and rejecting everything that involves objects.
I'd rather the product not exist in the first place if their business model is unsustainable and requires them to eventually enshitify after they've lured people into using it.
Focumon .... I read as f^©k you man .... Kind of the antithesis of productivity!
Not having a ton of debt with the sole purpose to capture a critical mass you can later milk due to network effects would be a start.
I don't necessarily agree. It requires massive computing power, but running models smaller than 70G parameters is possible on consumer hardware, albeit slowly.
Isn't it par for the course? This site is really the worst, worse than Tumblr, twitter, whatever. Because there's absolutely zero self awareness.
bishop arts.
Headline Driven Development
Revolutionize your testing process with Zapple.tech! Our Web Test Automation service streamlines your workflow, ensuring precision and efficiency. Say goodbye to manual testing hassles and embrace automated solutions for seamless results. Experience the future of testing with us today!
or the view outside the window of my home office.
llama.cpp (or rather G.Gerganov et. al.) are trying to avoid cuBLAS entirely, using ins own kernels. not sure how jart's effort relates, and whether jart intends to upstream these into llama.cpp which seems to still be the underlying tech behind the llamafile.
Modelling of longitudinally cut carrot curling
This kills the discord
I think re-imagining the "Dr. Stone" series with the main character replaced by an LLM will be a funny & interesting series if we decide to stay true to LLMs nature and make it hallucinate as well.

Given the way LLMs are right now, I suspect there will be lot of failed experiments and the kingdom of science will not advance that quick.
They make a huge amount of money from Nitro.
Particle physics papers usually have more pages for the names than for the work.
A Comparison of JavaScript CRDTs
> the world owes Andres unlimited free beer. He just saved everybody’s arse in his spare time. I am not joking.

Agreed.

> and face significant amounts of online abuse from users of the software.

Much as I’d like this to change, I suspect it will not. I’ve been doing open-source work since the mid-90s, and have suffered abuse that would curl your toes, but I still do it, for reasons that would be obscure, for many folks, hereabout.

I think the onus is on the users of the software. It’s currently way too easy to make “LEGO block” software, by splicing together components, written by others, that we do not understand (which, in itself, is not necessarily bad. We’ve been working this way for centuries). I remember reading a report that listed YAML as one of the top programming languages.

If companies insist on always taking the easy way out, they continue to introduce a significant amount of risk. Since it’s currently possible to make huge buckets of money, by writing crap, we’re not incentivizing high-Quality engineering.

I don’t think there’s any easy answer, as a lot of the most effective solutions are cultural, as opposed to technical. Yesterday, someone posted a part of an old speech, by Hyman Rickover[0], that speaks to this.

[0] https://news.ycombinator.com/item?id=39889072
Also, wrapping callback APIs or containing side effects:

function sleep(ms) {
return new Promise((resolve) => setTimeout(resolve, ms));
}
await sleep(100);

There are some use cases for the Promise class still, and it’s great to have that kind of control facility at hand when you need it.
They are getting paid, quite a lot. They have a quite expensive subscription which is quite popular.
The backdoored library was linked to libsystemd, not systemd itself.
I'm learning how to build a MMORPG. Not a complete game but a project with all the architecture in place to expand on (think Asheron's Call quality).

I started programming because I wanted to work on Guild Wars 1 back in the day, but that didn't work out and I ended up as a web developer (although with some gamedev experience). I've always thought you can't make an MMO alone and so never tried.

Recently a combination of health problems that scared be quite a bit and seeing other people on YouTube tackle these kinds of projects have motivated me to fulfill my childhood dream of learning the tech behind MMO games.

My goal is still to work on a MMO game professionally one day, but if that never works out, at least I worked on a MMO. My own.
Yes, it is top down management, and comically ineffective for application development

We’ll see.
Really

I get the idea of systemd and I do think that the Unix principles were good for the 70s but maybe not so great today

Still in the true LP fashion, a lot of design decisions are not being thought with stability or longevity in mind
C# is so old by now, if it would be a good replacement for C++ at MS, it would already have replaced it.
All this tells me is that people report a wide range of levels of ability pertaining to some skill. You could find similar ranges of abilities in any skill but that doesn't necessarily mean there is anything fundamentally different about the people in that spectrum of ability except insofar as developing that skill has changed them. There could of course be a fundamental difference but I haven't seen anything to convince me of that.
Organization Costs of the XZ Backdoor
My two half-brothers have Crohn's. My step-sister's two boys have Crohn's.

I don't have Crohn's. She doesn't have Crohn's. There's research ongoing into the genetics of Crohn's.

Changing diet can help ameliorate the symptoms, but it won't cure it any better than "taking the air" in Switzerland will cure asthma. And stating so boldly that a "wrong diet" causes it? Just to reiterate, of five kids raised on the same diet, (me, my 2 half-brothers, my 2 step-siblings) two have it, three don't.

But sure, just eat some raw meat or drink some vegan juice, problem solved... ...are you actually fucking serious mate?

You obviously know nothing about Crohn's and your glib handwavey internet opinion of "Duh, just eat some meat and roots" is, well, so goddamn dumb and shallow it's actually offensive.

Wovon man nicht sprechen kann, darüber muss man schweigen. Whereof one cannot speak, thereof one must be silent.