skysight-inc/HackerNews huggingface dataset:
I don't get it, Vercel offers a great developer/devops experience making it painless for you to host your site, and they charge a premium for it.

A single DevOps engineer likely costs more than $100k/yr and wouldn't be able to manage everything as well as Vercel, or maybe they would, but are you willing to risk and find out.
I wonder who the target was!
"Civilizations smart and advanced enough to collapse entire dimensions but too dumb to move past the need to compete for planets by parking themselves off to the side of a black hole and harvesting energy from its relativistic jets" is so stupid.

Every time a seemingly intelligent person takes the dark forest hypothesis seriously I am dismayed. The only answer to the dark forest is: FTL is impossible and we are presently incapable of detecting ourselves at a distance of 4 LY so there is a 0.0% chance of detecting anything beyond that.
That name jumped out at me, Hans Jansen is the name Dominic Monaghan used when posing as a German interviewer with Elijah Woods. Not that it can't be a real person

https://youtu.be/IfhMILe8C84
Google Podcasts service shuts down in the US next week
Interesting, I used https://ossinsight.io/analyze/JiaT75 to identify contributions from the account used by author of the backdoor. It looks like the account made other potentially problematic contributions to other projects.

The disabling of ifunc in this PR against Google's oss-fuzz project maybe one way they tried to prevent this particular backdoor being flagged by that tool? https://github.com/google/oss-fuzz/pull/10667
> Porter notes that mathematicians have had success using sophisticated mathematical techniques to quantify gerrymandering, the deliberate skewing of legislative districts.

If only politics followed science, and not partisan loyalties!
What if the “history of legitimacy” is largely just an illusion that was created by the fact aligned institutional bias, rather than any actual virtue compared to things that it is often contrasted to?
Thank you for all your efforts at finding where my posts reference topics with previous (and often interesting) discussions on HN, but in this case, I think this link belongs on my previous post.
I like mine. I prefer to drink coffee out of an open top cup rather than a travel mug little opening. Don't know why, just do. I also like to savor it over 30 to 40 minutes. The Ember mug keeps it at the ideal temperature over the amount of time I prefer to drink it.

It might be a bad option for other use cases. But for my two criteria, I love the little thing.

Oh, but I turn the heating off when it gets to the final 10-15% of the liquid left or I get a sort of burnt taste.
https://en.wikipedia.org/wiki/Adjacency_matrix

What would a graph look like when edges are represented with less than 1-bit?
Did a bit more testing. Autosave feature exists, but it is turned off by default. Another good thing is that NotepadNext is rendering Japanese characters correctly, as compared to Geany, which renders Chinese instead. One strange thing, is that Linux version is using Qt5 instead of more recent Qt6.
OpenAI built a voice cloning tool, but you can't use it yet
Can the link be edited to be https://?
The GPL does not allow derivative works to be relicensed under a more permissive license. If redis were GPL'd then the developer/owner would not have been able to fork the project and do anything moving forward. The project would be stuck as a GPL project because that is the point of the GPL. https://www.gnu.org/philosophy/pragmatic.html . Maybe I am mistaken? If there is some version of licensing that exists that does not allow the developer of the software to fork the software with a new license, then what I'm saying is that is what should be used.
Interactive Emails! AMP4Email and interactive html emails are finally starting to gain traction but developing the emails is still a total pain so I'm building a company (https://zaymo.com) that makes interactive email easy. We have pre-built interactive widgets for e-commerce and a drag-and-drop builder to add them to any existing template. Seeing conversion boost of 40-90%
> We must stop using upstream configure and other "binary" scripts. Delete them all and run "autoreconf -fi" to recreate them.

I would go further than that: all files which are in a distributed tarball, but not on the corresponding git repository, should be treated as suspect.

Distributing these generated autotools files is a relic of times when it could not be expected that the target machine would have all the necessary development environment pieces. Nowadays, we should be able to assume that whoever wants to compile the code can also run autoconf/automake/etc to generate the build scripts from their sources.

And other than the autotools output, and perhaps a couple of other tarball build artifacts (like cargo simplifying the Cargo.toml file), there should be no difference between what is distributed and what is on the repository. I recall reading about some project to find the corresponding commit for all Rust crates and compare it with the published crate, though I can't find it right now; I don't know whether there's something similar being done for other ecosystems.
I agree we should look at the account and its contributions, I make a distinction between the account and the person.

Sometimes the distinction is not meaningful, but better safe than sorry.
> Certainly it is thinkable that SAT is somehow ridiculously simple to calculate, just in the same way that achieving simple and near free fusion energy is thinkable. It just isn't going to happen and speculating on it is pure science fiction.

These are, as I'm sure you know, utterly different. Nuclear fusion is real, 'simple' and 'near free' are engineering problems. If human civilization lasts long enough, and continues to progress technologically, we'll have that, for some value of 'simple' and 'near free'.

On the other hand, the conjecture that SAT is algorithmically feasible may be disproven, and in my opinion, will be. That would be "just isn't going to happen".
Why do you exclude the possibility that this person was forced to add this at gunpoint?
Don't forget Michael

https://arxiv.org/abs/1511.00363 < 2015
> it's not the same GitHub account as upstream

This is valuable information, and a sign that this may be the tip of an iceberg.
Is the 1 really important here? I would have rounded down the headline.
But it is equally silly to make a blanket statement like yours about people that don’t have degrees.

Why not treat a degree as one signal, as one datapoint among others? It can be a stronger signal in certain circumstances of course, but still just one signal.
Keep RSO but get rid of Prop13 on any non-owner occupied buildings. Multi unit buildings that are not individual condos should automatically be voided out of Prop 13 anyways.
https://github.com/tukaani-project/tukaani-project.github.io...

> Note: GitHub automatically includes two archives Source code (zip) and Source code (tar.gz) in the releases. These archives cannot be disabled and should be ignored.

The author was thinking ahead! Latest commit hash for this repo: 8a3b5f28d00ebc2c1619c87a8c8975718f12e271
https://www.oxfordbibliographies.com/display/document/obo-97...

> "No senior Wall Street executives were imprisoned for actions that contributed to the global financial crisis."
Unfortunately, Romanian bears are brown bears (Ursus arctos), not black (Ursus americanus). They are not easily scared by people and encounters with them can be very dangerous.
They should not use CLA then.
> resort to raw SQL

I'm the opposite, I would rather write SQL than "resorting to" ORM queries, which is why my favourite libraries are aiosql[1] in Python, Hugsql[2] in Clojure and similar: write the queries as SQL in .sql files, which then get exposed as functions to your code.

[1] https://nackjicholson.github.io/aiosql/

[2] https://www.hugsql.org/
Enjoy: https://www.youtube.com/watch?v=aWcOTN7orEg
Technically, you can write a compiler in any programming language. So yeah, you can do it in Java, too. But why if Lisp already has a compiler built in that you can use for the advantage. That's pretty much the idea.

I also happen to know Java (almost 20 years of experience with it).

The point of rewriting it to Java wasn't just the Common Lisp. Compiling and injecting code into high throughput, live, mission critical application proved to be too much of a challenge for developers we tried to hire. Even if I rewrote this for Java (which I absolutely had no intention of doing) the problem would still persist. Most Java devs have even worse understanding of the low level operations than Common Lisp.
I don't think the Carpathians look much like Appalachia - I'll have to check the film out and see.
> great tippers

This covers a multitude of sins, because the most likely person to be annoyed by tourists are the workers who interact with them.
Because I don't think its much of a characterization. You don't? Well that's great. It never occurred to you that I might think so? Have you read any actual commentary on this law? Its by far its biggest issue
Doesn't allow it yet, but on the readme, they write "This will be changed to a license that allows Free Commercial usage in the near future". So someone will soon be able to sell it to you.
I did notice that my debian-based system got noticeably slower and unresponsive at times the last two weeks, without obvious reasons. Could it be related?

I read through the report, but what wasn't directly clear to me was: what does the exploit actually do?

My normal internet connection has such an appalling upload that I don't think anything relevant could be uploaded. But I will change my ssh keys asap.
That wouldn't help find this particular resource leakage since the memory is still referenced somewhere by the app - so LSan wouldn't regard the memory as leaked.
I use MySQL mostly, but I would love to have a few features from the Postgres world; namely, the better full-text search, key value store, queue and vector search. A lot of projects I have never reach the scale where I need these to be separate data products so the perfectly fine Postgres versions would suffice.
As ever with the London Review, one may apprehend the occasional glimmering of a possible point among the masses of discursive digression, but may never accrue enough evidence to be confident of its actual presence.
This. I just said humans should not complain about bear issues when they settle in bear territory. Don't know why others need to get their knickers in a twist.
Why quantum entanglement doesn't allow faster-than-light communication (2023)
> And here they are, shitting on someone who tried an innovative way to repeal it, in the service of the very students she covered, because of some meaningless drama. Because their emotions were insufficiently validated

Once you accept that humans are emotional creatures first, and then capable of reasoning, it will make sense. People don't care too much about facts, they care about what they feel more.
I made a voice cloning site. https://voiceshift.ai
No login, nothing required. Its a bit limited but I can add any of the RVC models. Working on a feature to just upload your own model.

I can definitely make it a local app.
I got my honda partially because it has the closest thing to nissan's e-power (in many ways the same, but with a couple twists).

At low speeds (< 45 mph) it's either off the battery the whole time, or the motor runs and directs power to the traction motor or the battery.
One wrinkle is that the motor assembly has a clutch that can engage the engine direct to the wheels, but like in city driving, the engine isn't going to be connected to the wheels. But I def would say that at least Honda's hybrid doesn't feel as simple as e-power.

Now this probably isn't really accurate, but architecturally I think I like it because the only thing keeping it from being a BEV is the battery size (only a couple kWh); the electric motor is strong enough to be usable on its own.

I think Toyota has increased the power on the normal prius, and definitely on the prime, but it used to be as part of the power split system, the electric drive motor wasn't sized to be enough on its own.
Singapore has 6 million and an order of magnitude less crime. Their murder rate is 30-40x lower.
San Francisco's 'Twitter Menace' or True Believer? He Might Be Both
Ah, but are we talking about how far in advance someone plans for their own benefit, or is it how far in advance they think of the needs of customers and stakeholders? Those two values are frequently different.

I think we're on something like year 7 of Musk promising perfect self-driving cars in one more year.
Can Demis Hassabis save Google?
The author's definition of a leak is somewhat unusual. If a memory is allocated and eventually freed it's not really a leak in the strict sense. That's why the author is having so much trouble with typical tools like Valgrind or leak sanitizer: the definition of the leak is different!

I would approach this problem by using regular profiling. Collect a few memory profiles and see whether there's any suspiciously large chunk of memory not yet freed.
1. systemd (at least the PID 1 part) does not talk to the network, so a remotely-accessible backdoor would need to be more complex (and thus more likely to be detected) than a backdoor that can be loaded into a listening daemon like openssh.

2. You can run Debian systems without systemd as PID 1, but you're still stuck with libsystemd because so many daemons now link with it.
jemalloc as well has some handy leak / memory profiling abilities: https://github.com/jemalloc/jemalloc/wiki/Use-Case%3A-Heap-P...
it is weighing the cows more often to get them bigger. The over indexing on measuring via standardized tests is costing us so much. Teachers, more and more, teach a mile wide and an inch deep and teach to the test, only to have that information thrown out of everyone's brains to get ready for the next regurgitation of the previous couple of weeks.
The way things are going we'll have -1 bit before long :)
Deleted per below
Yeah I saw that - I wouldn't bet on them being in the US but who knows. Maybe they just really love CRC32 ;) And introducing backdoors (if it that was them not an account takeover).
That looks like a repo that would sound alarms if you look at it from a security standpoint.
The article gives a link to a simple shell script that detects the signature of the compromised function.

> Running OpenSSH sshd from systemd

I think this is irrelevant.

From the article: "Initially starting sshd outside of systemd did not show the slowdown, despite the backdoor briefly getting invoked." If I understand correctly the whole section, the behavior of OpenSSH may have differed when launched from systemd, but the backdoor was there in both cases.

Maybe some distributions that don't use systemd strip the libxz code from the upstream OpenSSH release, but I wouldn't bet on it if a fix is available.
Further discussion of this topic from earlier today (from a different article/author):
https://news.ycombinator.com/item?id=39847943
Fahrenheit. Great.
Thermal carafes are fantastic, I really don't get why they aren't the default. I got one in college because it seemed like the obvious choice, and it was SO much better than I expected. I'll never buy a glass one again.

They're not fragile, the coffee stays just as hot for at least 4 hours if not much longer, and because "effective insulation" means "doesn't exchange much air" it also keeps it from oxidizing as quickly.
The Unintended Consequences of Academic Leniency [pdf]
> the entire ballot initiative process is actually a mistake

It is also arguably un-American. I thought the whole idea of having a representative government was so the common citizen didn't have to deal with the tedium of actually governing, so we elect people to govern in our stead. The fact the us Californians were expected to have opinions on props related to dialysis clinics in 2018[1], 2020[2], and 2022[3] should be a prime example of this. I have no idea what those props were supposed to do. All I know is the only reason I am being asked to weigh in on them is because someone with money was finding it too hard to pass whatever law they wanted through the legislature, so they tried to circumvent the normal legislative process by coming to us directly.

[1] - https://en.wikipedia.org/wiki/2018_California_Proposition_8

[2] - https://en.wikipedia.org/wiki/2020_California_Proposition_23

[3] - https://en.wikipedia.org/wiki/2022_California_Proposition_29
you are inventing and projecting an argument. the op's comment is effectively "the root problem with crime is evil in the heart of man", which presents only emotional lament and no actionable content . it's handwaving grandstanding that serves only a social signaling purpose.
Netflix adaptation of sci-fi novel The Three-Body Problem sparks anger in China
There are _many_ manufacturers that have premium products, including your "boring" manufacturers like HP, Dell, and Lenovo.
The increase in pharyngeal cancers may come from oral HPV infections specifically, not "libertine sexual habits" per se. It's only gonna be a few more years to find out, if HPV is related to the increase in colon cancers in young people, since the broad vaccination of teenagers is going for some time by now.

I think, it's also worth considering the fallout of the AIDS scare messing with statistics here. PrEP, education on and treatment options for HIV may have caused people (including heterosexual) to use less protection in recent years, unfortunately, since other STIs are less scary and stigmatized. I doubt rates of oral and anal sex have increased that much.
Valgrind will show these as "still reachable"
Has anyone been prosecuted for adding a backdoor

Google up Randal Schwartz. Caution: clickhole.
> Does it produce more low end torque verses a traditional gasoline combustion engine? If not then why is it better suited for electrical generation? Is it more efficient with less load?

You've got it backwards.

The Prius's Atkinson engine makes low-end torque *worse*, and then relies upon the EV Motor to drive the car at low speeds (0mph to 10mph) before the ICE kicks back in.

If ICE is operating, its at higher RPMs where the generator can still be useful (low RPMs like 500 are too low for the Atkinson engine to be effective in any way, the computer instead increases the RPM to maybe 2000, and uses all the power to drive a generator instead)

------------

So you see, the name of the game is efficiency at all costs, with EV-motors assisting whatever compromise you built into the motor. In the case of Toyota, its absolutely undrivable crap for low-end torque ICE, but a powerful enough 60hp to 100hp electric-motor that can handle the low-speeds and stop-and-go traffic, smoothing out any problems.

------

IE: The engineers build a highly compromised ICE engine (the Atkinson engine) that has a far narrower band of usable RPMs than a normal vehicle. Then they smooth out those problems with electric motors.

It sounds like Mazda is doing the same trick here with their Rotary engine, but the Rotary engine doesn't have the crazy-good efficiency curves that the Toyota Atkinson engine has. Efficiency isn't the "only" name of the game however, but Mazda now needs to find out a good way to market this engine / highlight its strengths.
It do not think sci-fi authors are confused, but just willing to live with inaccuracy for the sake of the story and universe building. Its like faster than light travel - you need to find some excuse to make something work.

I very much doubt Ursula Le Guin thought we could build an ansible (FTL comms) any more than Larry Niven thinks the Teela Brown gene (heritable luck) is real.
This is interesting but isn't this somewhere between slightly and extremely misleading?

> No cloud service needed.

> The Find My Logger app reads a cache file generated by the official Find My app, which is periodically updated when the Find My app is open.

AFAIK "Find My" is 100% a feature of iCloud, the option to turn it on or off is only available when you've signed into iCloud.
This is ultimately the common factor in spam mitigation. If the costs of transmitting or submitting a message are nil, then the spammer will submit them.

It's also why reducing costs of communications can backfire in all kinds of obnoxious ways. I remember getting my first email account, nearly forty years ago now, and being able to communicate near instantaneously, and with no cost, to ... a very, very, very small handful of people.

Even in the corporate world of the early 1990s, email addresses were sufficiently rarified that for the most part you'd communicate with a few colleagues at the same firm, and perhaps some contacts at other companies, if you were in a technical position (as I was at the time).

I can distinctly recall being in a bookstore in the late 1990s the first time I heard a mother talking with her daughter about a new friend the daughter had made, and the mother asking if the daughter had shared her email address.

Other than cost imposition, the best suggestion I've had for information overload is to have a cheap, unbiased, low-cost, no-regrets information rejection capability.

Earlier mentions: <https://news.ycombinator.com/item?id=37440218> and <https://news.ycombinator.com/item?id=22208255>.

Of course, for established contacts you'd want to override that.
FWIW, it felt intimidating as hell. And I'm fairly established professionally. Not sure what I'd have done earlier in my career (although I'd probably not have found it in the first place).
Surprisingly common billionaire problem, really. Like, Musk is a particularly publicly and messily deranged billionaire, but he’s not the first.
Does this mean that I can finally buy a cup of coffee with crypto at that one crypto cafe? Does it even still exist?
> But we're growing our traffic (with @MagicSpaceSEO), so it will double or triple by the end of the year.

Is this a clever ad?
I'm a big believer in Reddit, but NOT its current CEO, Steve Huffman, who has shown some horrible leadership. (See: how he handled third party apps.) He has to go.
Llmvm – a command line agentic LLM tool
You could also deploy large offshore wind and solar parks, where those batteries get charged and then distributed towards ships.

Lot's of possibilities, but I think the biggest hurdle is, that diesel is still very cheap.
I could see them using something like they did with NuBus — something similar to the declaration ROMs could make this sort of configuration work nicely, as long as part makers played according to the specs.
Yes, there are some of them in various european countries.

https://www.eurowildlife.org/news/wisents-in-slovakia-the-po...

https://en.m.wikipedia.org/wiki/European_bison
What if people didn't virtue signal extreme cynicism, confusing it for for skepticism?