skysight-inc/HackerNews huggingface dataset:
The two systems have very different tradeoffs.

A few things in particular:

* Separate compilation vs whole-program compilation. OCaml uses separate compilation and therefore has a very constrained heap object model which makes it possible to get polymorphism across separately compiled modules. In contrast, MaPLe uses whole-program compilation and therefore is able to monomorphize and optimize much more aggressively. Whole-program compilation can be slow for large projects.

* The multicore OCaml effort was driven by backwards compatibility, especially in terms of performance -- they wanted to ensure that the performance of existing sequential OCaml code would be completely unaffected by the new run-time system. In contrast, MaPLe focuses on efficiency and scalability for parallel code.

* Multicore OCaml will let you implement your own scheduler, as a library, on top of coarse-grained threads. In contrast, MaPLe comes with a built-in scheduler, and it's not easy to change it.

We did a comparison with multicore OCaml in https://dl.acm.org/doi/10.1145/3591284, and found that MaPLe can be significantly faster, but that comes with all of the tradeoffs above. And, it's a cross-language comparison, so take it with a grain of salt. Our comparison in particular emphasized similar source code, but typically, fast code in OCaml just looks different from fast code in MaPLe. For example, in OCaml, you often need to manually unbox certain data structures to get better memory efficiency (but MaPLe will often do this for you, automatically).

By the way, there's a recent effort---led by the compiler team at Jane Street---to make it possible to get automatic data unboxing in OCaml! Some more info here: https://www.janestreet.com/tech-talks/unboxed-types-for-ocam...
I know. A few years later, I was helping my mom set up a new laptop and during the same OOBE, I made pretty much the same comment, and she seemed to think it was just fine or at least not weird-sounding.

Come to think of it, I wonder if it's for the same thing that gets people to refer to Google Assistant/Siri/et c. as 'she'. I've noticed that a lot also.
Funnily enough, the code responsible for hiding shorts in that is just under 20 lines long :P

https://github.com/lawrencehook/remove-youtube-suggestions/b...
In other news, it has recently been discovered that water is wet.
> Are these really all "popular" songs?

I'm not totally sure why what plays on the radio plays on the radio, but I feel like there's a mix of what's actually popular and what was selected to become popular by industry insiders.
So exactly what do you propose? Should they pay everyone who makes a post or comment on Reddit?

Do you feel the same way about HN? You are posting here for free and providing value.

> This has never been my problem. It is a problem that they should have had the foresight to solve before they launched.

Do you feel the same way about all of the companies that YC funds?

If so, why are you commenting here “adding value”?
It means I can ignore loud but non-paying users.

I also don't take outside contributions.
> give us the lifestyle we want

Actually, they do. Companies and their employees all over the world are giving us the products and services we want. In exchange we're freely giving them our money and/or some "data".

When offered the choice, it seems most people would rather pay with their data. We've been told for years now this is not good for us, but I am still waiting to see the downsides - all I get are some personalised ads.
Thank you all for the advice and suggestions.
Author compared various whisper implementation

"We found that WhisperX is the best framework for transcribing long audio files efficiently and accurately. It’s much better than using the standard openai-whisper library."

https://github.com/m-bain/whisperX
Do you have any recommendations for learning resources for marketing/advertisement/SEO ? I want to get into that, but it's a very noisy domain with lots of "experts" selling their knowledge, so difficult to know what is good or bad.
You've been breaking the site guidelines so frequently with this account that I think we have to ban it. Can you please not create accounts to break HN's rules with? We're trying for something a bit different here than internet default, and would appreciate your help.

https://news.ycombinator.com/newsguidelines.html
Everyone is stuck on their word choice and the associated mental imagery.

How about:

Two-dimensional silicon latices found affective at neutralizing virus particles
If you didn’t get any value from Reddit why did you comment and provide content? Why are you commenting here?
Chinese Carrier Aviation in 2024 – The Year So Far
Why some vehicles are set to lose access to carpool lanes in California
For the first time since 1999, carpool lanes in California will likely soon be reserved for carpools only.
I'm not sure why my point is not getting across...

I'm not saying that these manual and automated checks make a project impervious to malicious actors. Successful attacks are always a possibility even in the strictest of environments.

What they do provide is a _chance reduction_ of these attacks being successful.

Just like following all the best security practices doesn't produce 100% secure software, neither does following best development practices prevent malicious code from being merged in. But this doesn't mean that it's OK to ignore these practices altogether, as they do have tangible benefits. I argue that projects that have them are better prepared against this type of attack than those that do not.
Unless you want to read a long form novel of low to moderate quality, you are probably better off reading https://en.wikipedia.org/wiki/Black_hole . Even the pictures there are better.
Beijing allegedly relocated 1.5M in 2008.
Weird that neither his name (Michel Talagrand) nor his nationality (French) are mentioned in the title. His nationality is not even mentioned in the article. I'd be pissed if I were him, doing something that important, and not even getting your name in the title.
You raise an excellent point, and it's true that everyone's circumstances are unique. In my case, my family is in another country, and my pursuit of the American dream led me to work so intensely that I overlooked the simple act of living. While I understand that not everyone has the flexibility to make drastic changes due to their responsibilities, I believe we all have our own paths to feeling unstuck. My writing is a personal tool to help me navigate my path and make sense of my experiences. Thank you for sharing your perspective—it's a vital reminder of the diverse lives we all lead.
VASAviation: Numerous Reports of Mysterious Lights [video]
I think we're only worried about our data in the hands of governments. So maybe we should make that illegal - but of course governments would never pass a law like that, against their own interest...
A rather bold (yet oh so common) metaphysical & cognitive claim.

I think it's fun to imagine that pandemics are some sort of supernatural punishment for human hubris in Western nations.
This is the only post in my recent memory that talks well of Git. Most others I've seen, gave Git some heat and hatred.

To me, Git is like vim: you've to "get it" to love it. I say that as long-time Vimmer and ex-Git hater.
Maybe, but Throne at least does a better job of obscuring it.

A quick look at Throne shows no link to sex workers (their entire Twitter following is Twitch streamers), while OP's service follows exclusively "brats", "dominatrixes", "findoms", etc.

Not attacking OP's service though.
Forwarding of crypto payments via Apirone payment gateway

Service of instant transfer of coins from a customer to a merchant through a temporary address.
The point is, and always was: someone wants a box to experiment in. Nix is not that box. It was never the box. It will never be the box. That is the point I am making and reflects the point the author was making.

And just in case there is a language barrier: box does not refer to a specific technical implementation of a box, it's just a term to denote a border between the user's system (which they don't want to break) and "something else".

Edit: and just in case the word 'someone' trips over a language barrier, I'm not referring to 'anyone' but to the persona (the 'someone') who might want to try something out because they saw something and thought it was cool. Not someone with package manager experience, not a software engineer, not a sysadmin.

We're also not 'building a learning environment'. Learning environment is a proxy for disposable environment, which as a relatively simple concept is already a step too far for the average "how do I become a cool hacker like on TV" case (which is where the unreasonable effectiveness from the title comes in) where someone might take their first steps and wanting to try something out without breaking their current environment.
It's time to stop using SMS (2021)
Based on the flower size and the images, I'd estimate the stalks of flowers in the image are about 4-5 cm in length. That's pretty small.
The goal is to figure out if the optional features work at all. For that a system you control is required.

That the sabotage worked at all relied on the fact that nobody was testing those features.

How secure is a sandbox that may not even exist? Apparently its good enough for most.
code repository are not necessarily git based. Plus you would need to put the effort in monitoring the activity of the repository for changes.

Until last month, would you refuse a tar package from the official maintainer, I wouldn't, especially when there was a mention of a bugfix that might have been tripping our build system

For example nginx is using mercurial (with admittedly a github mirror for convenience), and a lot of OSS are still using subversion and CVS, and my guess is that there are some project which might run with less free source control software ( most likely for historical purpose, or use case that might be the strong point of that software).

Other than that, why wouldn't the user be the one to build their own software package.
While Firefox doesn't surface them anymore, I checked the page source and there are indeed per-channel feeds. They don't have direct video URLs, but yt-dlp claims to support Nebula, so you may be able to automate it.
Modern Active Desktop
This article has a horrible title.

Many chip fabs have a defect rate far, far above 50%.

The text of the article says the packaging kills 50% of the chips, which is uncommon.

Given the stories about the bad old days in the Soviet Union, where mamy defective parts were shipped, I am unsure whether the blame is with the packaging or insufficient testing before shipping chips to be packaged.
FWIW, there's `git bisect run` and `git bisect replay`.
Tardigrade proteins could slow aging in humans, small cell study finds
Daylight Saving Time is a perfect test for UI designer
> When you write a program in any modern programming language

Think about it this way. Say you have 1 bit of memory. Can you store any of the three numbers -1, 0, 1 with that a bit?? No. The only thing a bit can store is 0 or 1.

There have been trinary computers built. They don't use bits, they use trits. A Trit can store -1,0, or 1.

A bit cannot. Saying that a turing machine, whose symbol set is {0,1} can print "A" on its tape, is like saying you can store "-1" >>>in a single bit<<<< on a binary computer.
I would also add https://tildes.net
Don't get your comment.
mplayer/mpv has a lot of binary files in their test suite. They are slimmed-down copies of movie formats created by other tools, specifically to ensure compatibility with substandard encoders. If you were to generate those files at test time, you'd have to have access (and a distribution license!) to all those different encoders.

I don't think treating those binary files in the repo as red flags is in any way useful.
Windows XP HTML
To be clear, I am advocating for using disposable, blank slate VMs in tutorials, so a student can walk through the exact steps they would need to get the thing built, installed, and running, with a high chance of success. Nothing more, nothing less.
> Marriage solves the problem of sex. Especially for male phd students. This is a huge factor at that age, and for the species types that are found in phd programs.

In my observation among the students who do well in PhD programs, you can find a lot more asexual people than in the general population. In this sense, you are probably right in the argument

> Takes the edge away, saves time and energy, etc.

but for a nearly opposite reason.
I'd love to see some thoughts and ideas about how to pay content producers while still maintaining control and privacy. The current solutions like invidious don't offer that.

Youtube's value is much more as a payment vehicle than anything else.

Is there a different type of front-end that could be built which still maintains ads or allows you to login to Youtube Premium, but which still gives you control over all the other stuff?
I had to look up what FFI meant - https://doc.rust-lang.org/nomicon/ffi.html#foreign-function-...
How can you take any old valid cert though? I presume they have some sort of private key you don't have access to and it would still trigger an expired cert warning?
Mariano Pascual
Ok? Do we need a topic anytime some site decides to make changes? :(
Much of the foundational science we learn about in the history books was done by bored rich people. Becoming a bored rich person is still a great strategy if you want to do foundational research. The risks you need to take in order to do that kind of work are too onerous for someone who needs a job to put food on the table.
Maybe credit him in the title would be a good thing to start. In the title, there is neither its name nor the price he won. His nationality is not even mentioned in the article.
Hoo boy, now I'm feeling equal parts inspiration and intimidation :P
I think a lot of it is probably historical. When debian or red hat infrastructure came up there was no git; projects were still often in source control during development but tarballs were still the major distribution mechanism to normal people. Though before git they'd sometimes have packages that would be based on an SVN or cvs snapshot back in the day, in absence of releases.

I believe what happens in debian is that they host their own mirror of source tarballs, since going to some random website or git repo means it could be taken down from under them. So I guess if the package is built straight from a repo they'd probably make a tarball of it anyway.
From my experience looking at rust builds, Pareto applies here: most checks are trivial and used by a lot, and a handful are super complex and niche.
NailIt – a literate programming tool for Nim
GreenStash: Simple FOSS Android app to plan and manage your savings goals easily
You may as well just slap a "no commercial use" restriction on it. It takes months to go through procurement at the average big company, and still would if the package cost $1. Developers at these companies will find something else without the friction.
Maybe.

But maybe there is not many (critical) ones out there. Otherwise, I believe we would encounter more often those kind of situations.
Hey, you have to patch nothing. Nix support was merged to karafka two months ago.
> Let's just QUIT using Reddit.

This suggests that you need others to join you in quitting. Why not simply quit yourself?
Thank you for your insight. I completely agree—my journey and the lessons I’ve learned are deeply personal and not one-size-fits-all solutions. Embracing imperfect action has been a significant step for me, far better than letting procrastination have control. Sharing my experiences and receiving feedback is how I hope to grow and refine my understanding over time. And truly, when I write, I'm mainly holding a mirror to myself, navigating my thoughts and discoveries. Your feedback is invaluable in this process.
I swear that there should be a tag called #PeopleWhoDontKnowAboutNix

Every single developer on my team has exactly the same environment thanks to a single flake.nix file that I wrote. (And it wasn't that hard. Certainly easier than wasting time troubleshooting individual dev's configuration differences. And certainly less frustrating than Docker.)
Article is 2021

I was confused by the immediacy in some of the commentary in the story. But the article was (almost) three years ago.
Bacon is fantastic. I always have it running when I'm writing Rust. It's very fast/performant.
To be fair neither does sshd. But I'm sure someone somewhere has a good reason for gcc to write status via journald or something like that? There's however no reason to limit yourself to gcc for a supply chain attack like this.

In any non trivial build system, there's going to be lots of third party things involved. Especially when you include tests in the build. Is Python invoked somewhere along the build chain? That's like a dozen libraries loaded already.

Nothing is gained from protecting against an exact replica of this attack, but from this family of attacks.
Nix for developer environment and building containers.

I’m wondering if it’s worth it to introduce to the rest of the company. We’re pretty comfortable building/“maintaining” ~400 container images, and it’s relatively fast (~3-5 min build time if no packages are changed), but there a lot of shared dependencies between all these container images, and using nix to get actual reproducible AND minimal container images with a shared cache of Linux and language-specific packages (dotnet, node, python and R) would bring in a ton of efficiency, as well as a very consistent development environment, but I won’t force all the developers to learn nix, so the complexity should optimally be absorbed into some higher level of abstraction, like an internal CLI tool.

I’m aware that the caching of dependencies can be improved, as well as creating more minimal container images, but it’s tricky with R and Python in particular, and then I figured why not just to balls-deep on nix that actually solved these issues, albeit at a cost of complexity.
"(B)urn (A)ll (S)atanic (H)elper-scripts" ? get the kindling?
I don't, it feels like another Google Glass or Tesla Cyber Truck where you spent a lot of money to be ridiculed for being a sucker.
This is quite a misleading comment IMO. You don't "pay" donations, you make them. There is no exchange and no debts are settled. And wikipedia isn't a "product" in the usual sense of a commercial product.
Quantitatively, yes(2^224 security target vs 2^128 security target respectively wrt. discrete log calculation).

Qualitatively, 2^128 is already computationally infeasible(barring some advance in quantum computing), so the meaningful difference in security is debatable, assuming no weaknesses in the underlying curve.
For interactive blaming from command line, I can recommend `tig blame`: use the `,` binding for blaming the parent that introduced a change, and `<` to "go back".
Privacy is a spectrum. The “they already have all my information” seems like avoidance of a complex topic. Just because some people hand over all of their information to social media apps doesn’t mean we should tolerate even more intrusions into our privacy.
Emulator can get you HACKED [video]
Do your microservices talk to the same database?
>rigid gender roles

I don't mean to say they're absolute. However I think the point I'm trying to get at is that they're a fact of life one has to deal with, even if they're not ideal.

I have observed that when I was most doggedly and earnestly pursuing my passion, women, even those who outwardly expressed their disdain for traditional gender roles, dismissed me romantically and sexually. Sometimes they even made jokes at my expense that belittled my stature as a man.

But when I put my passion on the back burner, had a job where I had some prestige & status as 'in charge of others', and was working out regularly enough for results visible through my clothing, those very same women treated me better and many expressed attraction. More than a couple made romantic/sexual advances. I liked being fit, but I hated that job.

I'm not saying we should teach young men to like this or that this is ideal. But it is the way things are, even in circles that are very socially progressive. Again, there are exceptions, but they are few enough to prove the rule.

>If...one day you get into a freak accident...you're going to get dropped like a hot potato

Totally. But that's about more than basic attraction, it's higher values like loyalty that come into play after a relationship starts. And if you try to date by filtering for that quality up front, you're going to have a very, very difficult time.

Like I said, we should encourage becoming a whole person, beyond gender roles. But young people should know that someone who values your self-actualization is a rare ideal, not a practical commonality. To only seek relationships with that kind of person is to be alone most, if not all, of your life. I am speaking from experience.
I believe there are European-based low-cost ETFs that closely mirror the US ones. Both from Vanguard (VWCE, VWRA come to mind) and BlackRock (IWDA).
In fact Britain buys wood from US eastern forests just to burn it for fuel.

https://theconversation.com/british-power-stations-are-burni...
I'd love an invite, people keep talking about it i'd like to check it out at least...

{name} {g mail}
Aw sweet, nanotechnology horrors beyond my imagination
Or we could arrest the hackers that do this stuff when we can arrest them.

And launch airstrikes at the ones we can not arrest.

The US' largest and oldest electronic infrastructure (the public switched telephone network) is no longer usable because of criminal scammers. A few hundred or a few thousand sorties by the USAF could fix this.
Running the tests does not modify the binary. The build script was modified to create a malicious .o file which was linked into the final binary by the linker as normal. Tests were only involved in that the malicious .o was hidden inside binary test files.
Europe's misguided hostility towards Pay or Okay
> Then what benefits does the MIT license give in that case?

It allows development of commercial products where software runs locally, where users don't have to share their data with the corporation.

There are always some tradeoffs when choosing a license.
I ignore their letters, because they're rude. I was looking forward to denying them entry, but the last time one of their goons came around, they said they didn't want to come in because of COVID.
Everything in your comment is false.

https://www.forest2market.com/blog/pacific-northwest-log-mar...
If you use MIT/Apache code that doesn't enforce a CLA, the contributor keeps the copyright on their contributions. So no, that's not immoral, that's part of the license the contributor chose for their contribution (the contributor could make a PR and license their contribution with e.g. GPL: that would be their right).

What is considered immoral is to take the copyright from the contributors without giving any compensation.
Severance was fantastic. Silo was fun, but yeah kind of cliché. And some of the acting was pretty subpar
It makes sense that this could have been an easy mistake to make in the past. Responsive people seem more interested and engaged. But I wonder if it would be best seen as imprudent now? If highly responsive maintainers are susceptible to burnout, then maybe people should consider those other algorithms.

Especially considering the responsiveness here is responsiveness to the peanut gallery.

It would probably be good for the maintainers too. If being responsive is seen as a way to have a bigger impact, people might be inclined to become more responsive and burn out.