skysight-inc/HackerNews huggingface dataset:
this way you can still see your existing recommendations, but you dont influence them unless you want to

i often start watching a video, enjoying but there's no great flow to then bring it back into your recommendations once youre in a private tab

with the extension you could just toggle mid video if you decide its a good one
I could be wrong but I'm guessing nearly every European would agree that their own national parks are also worth more than their crown jewels.
True, and this does do the more precise thing of no results instead of trying to guess what you wanted.
And ironically, both were stolen from the people who owned them.
There are lots of xwayland-specific bits needed to handle it running under a compositor but still acting as a privileged client compared to regular Wayland clients.
NeuraLink is using a specialized robot to surgically insert very thin electrodes into the brain.

This device here uses good old wet or dry EEG electrodes that are touching the outside of the head (e.g. on an EEG cap).
systemd getting its tentacles everywhere they can squeeze is a feature, not a bug
Not just commits, but all tarballs released with his key.
My previous workplace used Guacamole, it was pretty good. We used it for both SSH (Linux) and RDP (Windows).

My biggest annoyance was trying to break my habit of using ^W to backspace words in bash because it would close the tab in Firefox.
Btw, this is not the only project providing a source tarball different from the git repo, for example libusb also does this (and probably others):

- https://github.com/libusb/libusb/issues/1468#issuecomment-19...

- https://github.com/orgs/community/discussions/6003
Is there even a reason for an emergency exit to not be treated as a regular, auxiliary exit? I.e. not labeled as regular, but also not an issue if people use it.
Seems the backdoor relied on Debian and others patching their copies of openssh to support systemd notifications, and this would obviously not be the case on OpenBSD.

To be sure the current ports version of xz is 5.4.5: https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/ports/a...

Although the maintainer was working on updating to 5.6.1, but this news broke before the diff was landed: https://marc.info/?l=openbsd-ports&m=171174441521894&w=2
Searching for my real name on Google doesn't return anything either, I don't think this means anything.
Debian stable has 5.4.1, the backdoored versions are 5.6.0-5.6.1

https://packages.debian.org/bookworm/xz-utils

https://packages.debian.org/bookworm/liblzma5
Supaglue Is Joining Stripe
Fully agree. Cloud can be an easy way to get started since you don't have to pay as much up front, and even you need extremely elastic scaling you'll save a fortune in the long term by investing in at least some on-prem hardware to handle the off-peak workloads. If you have predictable stable loading, you can save even more!
It's easy. When I look at resumes that come in, a sea of people listing experience with k8s and rarely a mention of nomad.

When your team has familiarity with something, it's a bit harder to suggest an alternative unless it's quite a lot better
You're telling me what I think, which I didn't say, you're telling me how I'd respond, which I didn't. You're giving opinions on those responses you made up, and speculating how the discussion would further go. It's clear that you're completely out there, disconnected from what I said. I'm not required to speak, as you can have imaginary dialog running in your head that goes in the direction you prefer that paints you as morally and intellectually superior.

I'm done here.
Depending on the plane and engine. Big jetliners have high-bypass turbines where they do intentionally produce a lot of torque, to spin a large compressor fan, but most of the fan air does not go through the combustion step, it's just used to react off of.
None of this is evidence. If the FBI had a good reason to show up, then now we're back to 0. We would need a prior identifiable pattern of behavior to make such an assumption.

As for the burden of proof, it's true that the FBI is responsible for justifying their actions, but that's not applicable here. This isn't a court case, the lady isn't going to sue, and the article didn't even try to get a statement from the FBI.

Also, I forgot another case 3. the FBI made a one time simple mistake. Without more information, I don't particularly care to give this woman any sympathy.
This makes me feel worse about LLMs…
For the purposes of security discussions, I would say yes. You often don't know their real identity let alone their motivations and tribulations.

However if we were critiquing characters in a book-- especially ones where narrative voice tells us exactly their true motivations--then maybe not, and they get framed as a "dupe" or "manipulated" etc.
For some groups they certainly are.

However at this point: every developed nation has a professional offensive security group that have varying degrees of potency. All are more resourced than 99.9% of organizations defending and enjoy legal autonomy in their country and allied countries for their work.

If you're getting salaried comfortably, and you have near infinite resources, a two year timeline is trivial. As an American, I always like to point to things we know our own services have done first[0].

Each actor group have their own motivations and tactics[1]. As someone who spent a lot of time dealing with a few state actors, you learn your adversaries tricks of the trade and they are patient for the long-con because they can afford to be.

[0] - https://www.npr.org/2020/03/05/812499752/uncovering-the-cias...
[1] - https://learn.microsoft.com/en-us/microsoft-365/security/def...
I'm presuming "rent stabilization ordinance", which is specific to Los Angeles, best I can tell:

<https://codelibrary.amlegal.com/codes/los_angeles/latest/lam...>
"Most cats were considered working animals, and were expected to rid houses and barns of mice and rats"

Cats don't generally hunt rats[0]. Before modern pest control the working animal to kill rats was a dog: https://en.wikipedia.org/wiki/Rat_Terrier

[0] https://www.frontiersin.org/articles/10.3389/fevo.2018.00146...
Yo, can I take a picture (of my skin) and you can suggest some solutions? Multi modal plz!
From: krygorin4545 <krygorin4545@proton.me>
To: "1067708@bugs.debian.org" <1067708@bugs.debian.org>
Cc: "sebastian@breakpoint.cc" <sebastian@breakpoint.cc>, "bage@debian.org" <bage@debian.org>
Subject: Re: RFS: xz-utils/5.6.1-0.1 [NMU] -- XZ-format compression utilities
Date: Tue, 26 Mar 2024 19:27:47 +0000

Also seeing this bug. Extra valgrind output causes some failed tests for me. Looks like the new version will resolve it. Would like this new version so I can continue work.

--

Wow.

(Edited for clarity.)
>instead, get a little creative and include things like segregation

There is a persistent myth that Communist Russia was an egalitarian paradise. I believe that his is primarily due to propagandistic efforts to pull third world countries into their sphere of influence through token displays of friendship.

During the Cold War, ethnic minorities in the Soviet Union were treated just as bad as US minorities.

Today the situation is even worse. The Ukraine war is being used as, among other things, an excuse to ethnically cleanse the Russian Federation of ethnic minorities.

https://www.themoscowtimes.com/2024/02/24/2-years-into-ukrai...
Fairly deep bugs for a Bazaar.
Dogs are also predators. Quite a lot of large dog breeds should not be kept with cats, because they have enough prey drive that the cat will be in very grave danger. Dogs were historically bred for ratting and gophering.

I'm thinking the reason dogs don't go for birds is that the birds are too small and fast; dogs are predators, but they aren't ambush predators like cats.
> Getting punched in the face is actually a necessary human condition for a healthy civilization.

Aside from signed commits, we need to bring back GPG key parties and web of trust. When using a project you would know how many punches away from the committers you are.
If you mean buying an actual server I order on menu regularly. If you mean a dedicated server in a DC then there are plenty of providers who can auto provision a bare metal instance for you. That was possible before AWS even opened up to public sales.
That same cable works for lots of different radios, so it's not too annoying. You can make one yourself: https://www.miklor.com/COM/UV_Technical.php#progcable
Works where archive.ph is blocked:

https://web.archive.org/web/20240327173011if_/https://www.ny...
I empathize with this as I've been in the same boat, but all entities are not equal when performing triage.
Why not run Pg in a container if that's what's in prod?
Over time affiliate programs like the Amazon one have become a lot less generous. On the other hand though from running an ecommerce site I'd be happy to work with an affiliate like this that isn't just a coupon website that basically adds no value.
this is super cool. what's next on the roadmap?
> During the Cold War, ethnic minorities in the Soviet Union were treated just as bad as US minorities.

This part is simply not true.

> Today the situation is even worse.

This part is.

The USSR was never institutionally racist. Russian chauvanism was still a thing in the USSR and that was relic of the Tsarist era that keeps on giving.

The USSR's repressions were not a cut and dry wealth transfer between ethnicities unlike the US policies.

At their worst in terms of American morality, institutionally targeted programs were to enforce political control and break nationalistic tendencies of ethnic groups.

The vast majority of the repressions in the USSR were a result of the explosive growth of productive forces. It's very hard to make the case for the USSR that the benefits of those productive forces inherently benefitted Russians over everyone else.

It's very easy to make the case in the US for white supremacy.
Power/Weight is extremely high. A tiny wankel will do the job, and weight is everything on cars.

It does prefer a narrow RPM band, which is fine.

Reliability is the biggest concern TBH, but maybe that's not a huge bummer if its more of a backup/assistant engine.
I thought about it early in my career (5ish years), and I realised it's not so much "can work X hours" as much as "has to work X hours, often starting at 5am", especially early in the trade career.

Your tech career counts for nothing
in the trades, you start from zero.
True, but I would say governance rather than license.

Not being Oracle is a huge advantage ;)
Is the rotary better or worst with pollution ?
The notes about power/utilisation seemed pretty significant. I don’t really know how to weigh them agonist the accounting claims, or why those appeared first.
> I have asked why you can't use the correlations to facilitate communication

But how could they?

Charlie prepares a pair of entangled electrons and sends one each to Alice and Bob. Alice performs a spin measurement along some angle and, entirely randomly, gets either up or down as a result.

Alice and Bob decide on their measurement settings and measure a bunch of electrons using the same angle for each measurement. They can even agree in advance so they both know which angle the other will use.

After the run, Alice will have a bunch of measurement results which are roughly 50% up and 50% down. Bob too will have a bunch of measurement results which are roughly 50% up and 50% down. Assuming ideal detectors and such, there will be no discernible pattern to the ups and downs for either.

Only if the afterwards come together and compare their results pair for pair will they see the quantum correlations between the value in each pair. For some angles, they're more likely to be anti-correlated, and for some angles there doesn't seem to be any correlation.

That is, if they both used the same angle, the they'll find that each time Alice measured up then Bob measured down, and every time Alice measured down then Bob measured up. And if they used a similar but not equal angle, then it's more likely that when Alice measured up then Bob measured down, and vice versa.

And since they by now know that this experiment has been done before and the predictions of quantum mechanics hold, they can even predict this result. However what good does it do for Alice? After all, regardless of measurement settings Bob will measure a uniform 50/50 distribution of ups and downs.
I've been looking for an alternative that doesn't need a Java back-end, mostly because I've found that the proxy tends to balloon up with multiple simultaneous connections. In fact, there seems to be a lack of modern web-based RDP client alternatives in general.
I just miss Picasa.
Debian Stable seems to be in the clear.

https://lists.debian.org/debian-security-announce/2024/msg00...
looks great . Going to try this out
Dogs are also pack animals (as wolves) and so they can be trained easier by abusing the pack instincts, even unintentionally.

Cats are solitary and so even if you get them to not do something in front of you, once you're out of sight they'll quickly revert to doing whatever it is they want to do.
All these antitrust cases and no politician raising this issue.
How to be a (good) podcast guest
But it is by the US, which is the discussion point here
> do we have evidence of 2?

https://theintercept.com/2023/10/13/palestinians-muslims-fbi...

https://www.theguardian.com/us-news/2017/mar/22/fbi-muslim-e...

https://www.theatlantic.com/politics/archive/2017/02/the-fbi...
Don't forget that the NSA bribed RSA (the company) to insert a backdoor into their RNG. Being in western jurisdiction doesn't mean you won't insert backdoors into code. It just changes whom you will target with these backdoors. But they all equally make our technology less trustworthy so they are all equally despicable.
The penalty for being wrong was none, and the story was quite entertaining. Why not hold it as true?
I think it would not be so hard for people to figure out how to do something similar again, particularly when we have much better A.I. that can “understand” text enough to classify people in terms of politics, psychology, lifestyle and other categories based on what they write.
Dogs are pack predators. They know that to succeed they must be part of a cooperating team, so they instinctively work towards group harmony.

Cats are solitary predators. Any other predator is just a competitor for the same resources.
Great point. While reddit may be astroturfed, all it takes is one good comment.
I suppose they're getting at why was it important that Redis was open source to you? Under the assumption someone else would be responsible for free updates?
I would put money on government hackers. They're the sort of people that have the time to pull something like this off. Frankly I'm really surprised it isn't more common, though maybe it is and these guys were just super blatant. I would have expected more plausible deniability.
>>> This seems a bit absurd on a number of fronts. It doesn't shape architecture that much, in my view; it runs your stuff.

I mean, let's be candid.

There are plenty of times where "containers" are bags of shit software that were pushing into production and throwing hardware at them to keep things going. There are containers out there with out of date libraries that aren't getting updated cause the "work" and no one gives a shit.

If you can get away with that, what is the incentive to do highly integrated engineering that produces diagonal scalability? Why be WhatsApp when you can just throw money at bad software?
Minimizing on-call burnout through alerts observability
Nomad isn't FOSS anymore, for one
Yep I've seen it on his YouTube. The "EcoJet" https://www.youtube.com/watch?v=10q9_pB6unU

He said that they had to put really big brakes on it. I guess for some reason you can't just have a clutch. Personally if I was going for eco I'd want something more clever than "bigger brakes" but maybe building something like a Hybrid Synergy Drive is harder than building a turbine.
When times are tough our fantasies become more vivid. They are a tool to help us analyse our difficulties from a novel perspective and thus to overcome them.
>> An animal shelter in Chicago has released 1,000 feral cats throughout the city to combat a rat crisis.

...

>> While the deployed felines will sometimes kill rats, the mere presence of these repurposed alley cats is usually enough to scare off pests.

-- https://www.theguardian.com/us-news/2021/may/14/chicago-fera...

To a rat, a house with a cat that probably won't kill it is less attractive than a house with no cat.
I've built dozens of things on it, some of which (like API servers) were surprisingly load-bearing. Upgrading some of those to aiohttp was trivial (but didn't help much performance-wise, since bottle was already so lightweight).
> but it seems like anyone can publish an exploit on the internet without being a crime

Of course. The mere publishing of the exploit is not the criminal part. Its the manner & intent in which it was published that is the problem.

> At this point, we have no confirmed access via compromise.

While i don't know the specifics for this particular law, generally it doesn't matter what you actually did. What is relavent is what you tried to do. Lack of success doesn't make you innocent.

> Who would have standing to bring this case?

The state obviously. This is a criminal matter not a civil one. You don't even need the victim's consent to bring a case.

[IANAL]
All Tibbles had to do was eat the last one (or the second to last).
Thank the gods I didn't plan on having a life this weekend
It's an in-joke in the British gaming industry.

Hassabis started out working for Pete 'Project Milo' Molyneux and learned how to hype himself very obviously from him (see the Edge article linked above). It's working out well for him but you can see the same breathless self-promotion from him now that we saw 20 years ago.

Fair play, it's made him rich, but we're screwed if we think people like him are the solution to anything.
Google has been failing continuously in user experience under his leadership:

1. Search has become an ad-riddled, clickbait SEO infested mess

2. All those naming kerfuffles (how's Allo and GSuite doing?)

3. Cloud still significantly behind AWS and Azure

4. AI stuff behind at least OpenAI and Anthropic. Applied ML stuff well behind specialized startups.

5. Pixel still not selling very well. Android still feeling like it's trying to catch up to Apple, still fragmented.

6. Layoffs everyone believed wouldn't happen until the very last second they were announced.

7. Customer support story, including toward large cloud customers, still abysmal.

Etc etc.

Yes, ad revenue increased and with it the share price, but ad revenue comes from having had a good product 5 years ago. To sustain it you need good products and good engineers to build them.

Google is trending downward. It needs a fresh CEO.
Fedora only includes free software in it's repos:

> If it is proprietary, it cannot be included in Fedora. (Binary firmware is the only exception to this)

https://fedoraproject.org/wiki/Forbidden_items

Proprietary software is distributed through the unofficial RPM Fusion repo
The idea of a personalized protagonist voice is interesting, but I'd worry about some kind of uncanny valley where it sounds like myself but is using the wrong word-choices or inflections.

Actually, getting it to sound "like myself" in the first place is an extra challenge! For many people even actual recordings sound "wrong", probably because your self-perception involves spoken sound being transmitted through your neck and head, with a different blend of frequencies.

After that is solved, there's still the problem of bystanders remarking: "Is that supposed to sound like you? It doesn't sound like you."
These models trains on billions of examples, having bots posting billions of posts on different social media sites every time you train a new model probably isn't a viable strategy. You would get banned real quick since most of those will be really low quality in the early stages.
We have huge amounts of hydrogen right now. At standard temperature and pressure, the amount of hydrogen made globally each year would occupy 700 cubic kilometers of volume. It's just that it's made overwhelmingly from fossil fuels, mostly natural gas (6% of global gas production goes to making hydrogen).

That this is being done instead of making green hydrogen is because CO2 from the fossil fuel process is not being taxed or otherwise forced to account for the negative externalities.

This also illustrates that producing hydrogen without CO2 release is not an optionally solvable problem. Without the ammonia made from hydrogen (which is where most of it is going) billions will starve.
For sure! We'll work on that in the next couple of updates, it's been on our minds for a while.
> about things not being like the terrible old days of init being a mass of buggy and racey shell scripts.

Zero of the major distros used System V init by default. Probably only distros like Slackware or Linux From Scratch even suggested it.

It's unfortunate that so many folks uncritically swallowed the Systemd Cabal's claims about how they were the first to do this, that, or the other.

(It's also darkly amusing to note that every service that has nontrivial pre-start or post-start configuration and/or verification requirements ends up using systemd to run at least one shell script... which is what would have often been inlined into their init script in other init systems.)
This really sounds too good to be true. I understand why the locals are sceptic at first. If they achieve their goal of creating a national park with 200.000 square hectares they have covered 3% of the Romanian forests. That is impressive.
> The release tarballs upstream publishes don't have the same code that GitHub has. This is common in C projects so that downstream consumers don't need to remember how to run autotools and autoconf.

This doesn't seem really vital to the attack, but it's a silly outdated convention. Nobody is manually downloading and compiling tarballs these days, and those who do can figure out how to use autotools.
Imagine you want to open an access to your DB to someone - Alice - you do not particularly trust. And you want to make sure Alice cannot learn anything about an individual in the database.

Maybe you will filter the queries that you assume safe, let's say aggregation queries. But to prevent GROUP BYs with singleton groups, you will enforce some more constraints. Let's says GROUPs should have a minimal size of 10 elements. But then Alice could run a first aggregation with a GROUP of 100 and the same with a GROUP of 100 minus Bob, by using both responses Alice can know things about Bob.
Then you will design more involved rules and grow a complex set of rules and eventually add human supervision and your system will not be scalable.

With DP, you add some noise to a query result so that you have a guarantee that nothing substantial can be learned about Bob.

Imagine you want to open your DB to the outside world in a scalable way, you can design a service that:
- receives SQL queries
- use Qrlew to rewrite them
- run the rewritten query on any DB and send back the result as a response
- you would also accumulate privacy loss in a privacy accountant so that you make sure the amount of private information leaked by the repeated disclosure of DP query results stays bounded.

That's what Sarus does as a company. Qrlew is the DP-SQL core we use.
Cargo containers that don't contain cargo are lost revenue. Shippers charge between US$2000 to US$5000 to send a container from China to the US.
I find it funny how MFA is treated as if it would make account takeover suddenly impossible. It's just a bit more work, isn't it? And a big loss in convenience.

I'd much rather see passwords entirely replaced by key-based authentication. That would improve security. Adding 2FA to my password is just patching a fundamentally broken system.
https://web.archive.org/web/20240329120646if_/https://www.ny...