skysight-inc/HackerNews huggingface dataset:
> maybe in the tech nerd crowd that's true

I live in Wyoming. I know two people who passed on buying a Tesla because they didn’t want to be the jackass driving around town making that sort of a political statement.
Yeah.

I haven’t used it for some time but autoconf always seemed like a horrible hack that was impossible to debug if it didn’t work properly.

That was bad enough back in the days where one was mostly concerned with accidents, but in more modern times things that are impossible to debug are such tempting targets for mischief.
I think the issue is that build systems are often build on a completely different language - python with some weird build framework is likely as inscrutable as bash and autotools to someone who doesn't use python.

You can write pretty straightforward readable bash, just as I'm sure you can write pretty gnarly python. Especially if you're intentionally trying to obfuscate.
There are plenty of other native berries in North America. White pines are rather majestic trees, particularly the old growth ones. [0]

I’m happy with white pines and raspberries/blueberries, Europe can keep their blackcurrants.

[0] https://www.fs.usda.gov/recarea/chippewa/recarea/?recid=2667...
Looking into it, those references look miscategorized. It's some Zambian national report that's talking about 0.18um processes (aka, 180nm) in the same paragraph, which wouldn't have come out until the very late 90s.
Code security configurations let orgs roll out GitHub security products at scale
Yes, I think it's probably the simplest symplectic method, which would be quite the improvement already.
It's rather easy to monkeypatch Python into doing spooky things. For something like this you really want a language that can't be monkeypatched, like I think Starlark.
Then effectively your non-browser container is a browser subset just for your application.

You could run a browser and record all the page faults, then remove all the code you didn't run.

https://fgiesen.wordpress.com/2012/04/08/metaprogramming-for...
I've never experienced one reliable enough for this to be true (for me).
Or just rendering it mixed with some splats, we don’t know because they didn’t release their source code. I’m highly skeptical of their claims, their dataset, and the fact that it’s trivial to export it into some other viewer to fake it.
How the XZ Backdoor Works
Now we’re getting into the depths! This is a great question/point.

> so your production website loads whatever latest asset version from a floro api endpoint and my repo state is not a snapshot anymore of what what the page will look like on production?

Yes! But it’s your choice to decide which plugins to do this with. You can break your build environment without breaking your production environment, which is really important because you want CI to catch something like a missing icon or a bad invocation of a pluralized string but you also don’t want to block being able to update safe production changes like correcting a minor-typo. Breaking a build because an assets was deleted is easy to resolve for engineers.

> in that case why do the repo connection at all? isnt floro then much more a cms / custom database with versioning for translations/ assets/ colors than an extension of the repo side?

I think it would be very intellectually dishonest to say otherwise (with some minor caveats) but you could say the same about code too. Isn’t github just a CMS for code?

The thing about the snapshot that the code imports at compile time is it allows you to determine the structure of how the application consumes assets in static analysis. This is what allows you to determine what is safe to update live and what isn’t. Could you do this by snapshotting a database and performing static analysis on your imports? Yes, you certainly could but that’s not what CMSs do at all ...and SQL is really not good for merging things. Headless CMSs are built for really redundant data-structures because that’s what marketers need and they nearly all suffer from the same CI/CD issues for that reason. Why do we mostly check i18n string into git and not use CMSs for string content?

Ignoring all the other parts of version control we’re taking for granted here, branching, peer reviews, merging, etc. The big benefit of it all working offline is that you can let the non-engineers, who either lack access control to git or could not technically manage setting up the code base, test out content changes locally on your production site or app. CMSs can do with this with iframes but again, it’s really for blogging content/static content and not i18n. The other area where offline testing shines for people who aren’t engineers is being able to test out content changes on mobile devices over the local-network. That’s not really a thing CMS systems can do at all.
Unless you weren't actually that successful but need to publish a "successful" result
Cachelines and Striped Locks (2023)
It would be intetesting if Lasse Collin published his off-list interactions with 'Jia Tan' and any of the other pseudonyms, to get an even better angle on the social engineering parts. Apparently a large part of the campaign was via private channels to Lasse.
Yep. After xz we don't need a bot mindlessly fixing all suggestions from malicious actors
Yep this is my experience here in Australia, the manned checkouts are understaffed the stores want to deliberately funnel you into the self checkout.
Alternative title: AI can generate an imagined picture from a prompt plus real photo.
Reality disagrees.

Software isn't tooth brushes. The simpler and more specialized it is the cheaper it is to maintain. The more complex it is the harder it is to maintain.
If I understand correctly, or at least if I map it to my own similar complaint: the problem is not that they have you study simple or simplified cases, it's that the ignored complexity is unacknowledged and sometimes even denied. Which makes a lot of sense in primary school, where even mentioning it might cause some kids to ignore everything because "it's not really how it works" or whatever. But by the time you've made it past the basics, sweeping complexity under the rug is harmful. You still want to be studying the simplified scenarios, but it would be much better if you had some sense of the range of things that meaningfully differ from realistic scenarios. Not so you can take them into account in your solutions, but so you have the appropriate level of humility about what your solutions mean and the limits of their applicability.

I guess I didn't do that much physics, because for me it comes up more in other fields. In statistics, for example, it is critically important to understand the limitations of your results. For example, you might assume that error is normally distributed. You don't want to forget about that assumption, because it is very commonly violated, and it can make a large difference in your conclusions. Yet in school, it was almost always handwaved aside with "Law of Large Numbers mumble mumble mumble". Even when the law didn't apply, or the definition of "Large" happened to be "way bigger than your pathetic number of data points".

It's also why there's often such a gulf between academia and industry. Academic results walk a tightrope of assumptions and preconditions, and trying to put them into practice always finds places where those don't hold. Sometimes they even start out holding, but then everybody takes advantage of it until competition drives everyone into optimizing the residuals. If there's a space where things make sense, competition will always drive you to the edge of that space. Or beyond; competitive pressure does not care about keeping your equations simple and pure. Back to the point, you might study a field for years and then land a job in exactly that field, only to discover that everybody is looking at it completely differently because they've exhausted the simplified space and are deep in the land of heuristics, guesswork, and approximation. The market for spherical steaks was saturated years before.
For NeRF this problems exists.
However, in the past it was already solved for gaussian splatting. Usually you define a normal field over the (2D) splat, This allows you to have phong shading at least.

It is not too difficult to go to a 2D normal field over the 3D gaussians..
I'm working on a somewhat similar project: https://github.com/plandex-ai/plandex

While the overall goal is to build arbitrarily large, complex features and projects that are too much for ChatGPT or IDE-based tools, another aspect that I've put a lot of focus on is how to handle mistakes and corrections when the model starts going off the rails. Changes are accumulated in a protected sandbox separate from your project files, a diff review TUI is included that allows for bad changes to be rejected, all actions are version-controlled so you can easily go backwards and try a different approach, and branches are also included for trying out multiple approaches.

I think nailing this developer-AI feedback loop is the key to getting authentic productivity gains. We shouldn't just ask how well a coding tool can pass benchmarks, but what the failure case looks like when things go wrong.
They have the same at my local Wegman's but there's really no incentive to use it. I'm not any faster than the cashier so there's no time savings.

And it has several problems as well with respect to loss (e.g. adding more items to the bag). To deal with that, you'd have to weigh it or count again to verify.
This is another thing Japan has implemented in certain areas. There's a supermarket near us called Trial that has this method of checkout: https://www.trial-net.co.jp/prepaid/regi-cart/
Where are you going to hide your monkey patching though? As long as your code is public, stuff like this is always going to stand out, because no one writes weird magic one liners in python.
> am I misunderstanding it?

The optional `context` parameter is a tc39 proposal. The feature compatibility matrix on the bottom of the MDN page is really confusing because it's showing only when `JSON.parse` was added, not whether the optional `context` parameter is supported.

I've confirmed it's available in:

- V8 11.4.31
- Node 20.12.0 (with `--harmony`)
- Node 21.7.1 (without requiring `--harmony`)
- Chrome 123.0.6312.107

But not available in:

Firefox 124.0.2 (ironically)
Safari 17.3.1

The original blog post linked to the proposal:

https://tc39.es/proposal-json-parse-with-source/

https://github.com/tc39/proposal-json-parse-with-source

This issue links to the various browser engine tracking bugs:

https://github.com/tc39/proposal-json-parse-with-source/issu...

Which are:

• Chrome/V8: https://bugs.chromium.org/p/v8/issues/detail?id=12955

• Firefox/SpiderMonkey: https://bugzilla.mozilla.org/show_bug.cgi?id=1658310

• Safari/JavaScriptCore: https://bugs.webkit.org/show_bug.cgi?id=248031
Half a million California fast food workers will now earn $20 per hour
Stop buying killable games. This feels like an age old problem by now; people keep doing it...
I think changing oil is the least annoying thing about owning a gas vehicle. I think the 100% top problem is Smog checks and catalytic converter replacements.
Can you cache data internally?
I spent 3 years combating bamboo in a similar fashion and it certainly didn't work for me. I've never experienced a more frustratingly invasive plant in my life. Even wild blackberries are easier to deal with.
Was going to say, this process sounds a lot more complicated than just putting stuff in my bag and letting a cashier deal with it. If they want to automate the cashier away, fine, but I'm not doing their job for them.
It’s been discussed before on HN:

https://news.ycombinator.com/item?id=38715111

Unlikely to work for groceries given the costs of RFID tags, I imagine.
Bitcoin tumbles $5000 in 24 hours as interest rates jump
Regular grocery stores have really gone downhill as well. Whenever I shop, there’s at most 1 cashier doing checkout and usually 0 (only self-checkout being open). I consider myself pretty proficient about knowing what sets off the machine but still set it off 60% of the time (about some weight imbalance etc) that requires an attendant to come fix manually. I’ve gotten to dread the grocery store trips as they require so much overhead time. I really wish the “just walk out” could’ve been popularized and caught on at more stores.
DECT-NR competition is 802.11ah and BLE Long Range. They all provide moderate bandwidth and moderate range, up to 1-2km. I bet they aren't low enough for battery-powered sensors, but probably good for battery-powered devices like Wifi or LTE.

My guess is that winner will be whoever get cheap devices out, and leverages their ecosystem.
MongoDB -- NYC or fully remote (North America) | Staff Engineer, Query Optimization | Full-Time | Base + RSU's | Looking for a Staff/Principal Engineer to help us build a world-class distributed open-source query optimizer. You'd help lead the initiative of a complete rewrite of our query optimizer. We started on Cascades, but have paused and are looking for this engineer to help us set the future direction while we work on cardinality estimation and costing. You'd partner with and report directly to the the Director of Query (O). Interested? Apply directly at: https://grnh.se/0fc67f0d1us
As long as the information is publicly available, it makes no difference.

Once upon a time, if you shorted publicly traded Corp Z, and then wrote an article negative about Corp Z encouraging others to do so as well, most people were fine with that as long as two things:

1) what you wrote was factual or was an analysis of public acquired information.

2) you declared your financial position on the stock as well.

Post crypto people have done neither.

But if say this new journalistic venture gets the data from public sources, and their honest about it and the hedge fund's position, it's probably fine?

The interesting problem is that reporters will get material non public information and then make it public. But now the hedge fund gets first crack at the information before it's published to the world.

That normally would be insider trading but hiring journalists somehow makes it legal? I'm not sure.
That's not the Internet Archive (archive.org). The paywall circumvention links are at archive.is
Garmin wearable devices display a proprietary stress metric from their Firstbeat Analytics subsidiary. This is basically just heart rate variability (HRV) normalized to the user's baseline.

https://www.firstbeatanalytics.com/en/features/all-day-stres...

As for accuracy, compared to what? Any definition of "stress" is inherently somewhat arbitrary and subjective. There seems to be a decent correlation to how I'm feeling. But the metric isn't really actionable for most people.
Cool. Now can I pay with cash? Because I'm not going to let anyone build a profile on whether I like warming lube or just regular lube, how much sugar and alcohol I consume, what kind of romance novels I read, how often I floss, and whether I feel I can afford organic fruit.
We don't know that for sure though. All it takes is a single seed in an ideal condition. And that condition could've probably happened in a way that the pear wouldn't have the advantage that's caused some to name it "invasive".

But also, left alone, nature tends to rebalance on its own. Any species with a dominant advantage will eventually lose that advantage, given a few generations. Well, except for humans, who continually fight the natural rebalancing, and are only succeeding in increasingly destroying that which sustains life on this planet.
And pension systems are the grandest Ponzi schemes of all.
The problem is that obfuscated bash is considered normal. If unreadable bash was not allowed to be committed, it would be much harder to hide stuff like this. But unreadable bash code is not suspicious, because it is kind of expected. That’s the main problem in my opinion.
Usually only .log files, although sometimes the log files might not have an extension and just be in a logs/ folder and the file name might be something like a date+name of service that writes the log
You need to make yourself a business analyst agent to provide the feedback! To make it real, perhaps a team of them with conflicting personalities.
San Francisco crowned America's healthiest city in 2024
But it would be interesting to see if we could simulate a universe and observe if it in any way resembled ours. Even if the simulated universe was much "smaller". (It would of course have to be.)
Any interesting ones you couldn't publish?
Unnaturally created and maintained.
More people = more brain capacity to innovate. Capitalism has a way of fabricating necessity from thin air where none exists anyway, that's where those pork jobs come from.
> 1. there is essentially no market for pick-up trucks outside the US

You’ve obviously never been to a war-torn country. The mid-sized Toyota/Nissan pickup with a machine gun mounted in the bed is the most popular vehicle by far.
So Much Produce Comes in Plastic. Is There a Better Way?
When the article got to the part where the trees were thought to be sterile, did anyone else hear Jeff Goldblum saying “Life finds a way”?
3DGS is absolutely not good with non Lambertian materials..

After testing it, if fails in very basic cases. And it is normal that it fails, non Lambertian materials are not reconstructed correctly with SfM methods.
> Uniqlo (in Japan and at least in SF) has a cool checkout method.

Saw this in the Honolulu location and was similarly impressed. It's got to be pretty close to a theoretical minimum in check out speed, while requiring no labor and no accounts.
https://discord.com/nitro doesn’t make any reference to an ad-free feature as a paid perk.
This may be a bit pedantic, the nbody problem is not chaotic, it is harder, having riddled basins.

> A riddled basin implies a kind of unpredictability, since exact initial data are required in order to determine whether the state of a system lies in such a basin, and hence to determine the system’s qualitative behavior as time increases without bound. (Note this is different from “chaos,” where very precise initial data are required to determine finite-time behavior.) What is more, any computation that determines the long-term behavior of a system with riddled basins must use the complete exact initial data, which generally cannot be finitely expressed. Hence such computations are intuitively impossible, even if the data are somehow available.

http://philsci-archive.pitt.edu/13175/1/parker2003.pdf

The above post is a good 'example' of sensitivity to initial conditions, and riddled basins do have a positive Lyapunov exponent which is often the only criteria in popular mathematics related to chaos. But while a positive Lyapunov exponent is required for a system to be chaotic, it is not sufficient to prove a system is chaotic.

If you look at the topologically transitive requirement, where you work with the non-empty open sets U,V ⊂ X....riddled basins have no open sets...only closed sets.

With riddled basins, no matter how small your ε, it will always contain the boundary set.

If you have 3 exit basins you can run into the Wada property, which is also dependent on initial conditions but may have a zero or even negative Lyapunov exponent and is where 3 or more basins share the same boundary set...which is hard to visualize, non-chaotic, and nondeterministic.

Add in strange non-chaotic attractors, which may be easier or harder than strange chaotic attractors, and the story gets more complicated.

Sensitivity to initial conditions is simply not sufficient to show a system is chaotic in the formal meaning.

But the 3 body problem's issues do directly relate to decidability and thus computability.
Every time someone explains to me autotools, the individual pieces sort of make sense, yet the result is always this inscrutable unreadable mess.

I don't know why.
> But I don't know who you are and don't want to think about you after this comment or take any other action

Well, while i don't agree with the original comment, both of you are missing the critical part of this in your argumentation.

It's missing the part where the potentially killed subject is actively harmful to others/humans in its habitat. That makes all the difference.
If transparency were taken seriously, that wouldn't be an easy task. And, if it were multi-state, either via multiple states having such an organization or via a collaboration of states and organizations who don't all agree about protecting backdoors for the FBI/CIA/whatever.
Because the trust level is under zero. In France you have to put items one by one and the weight of your shopping bag has to add up before you can scan the next article. It's the prison feeling with the speed of an 90 year old in any other country's self checkout. 0/10 would not recommend.
Not the original poster but:

>> It’s an organization created by a national government.
> Why? What about this requires the power of "government?"

Budget mostly. I don't think the power of government is strictly required. There are some private organizations which try to take care of the commons (Hiya, Mozilla!), but it's still by and far had to fund. Why not use public funding for this?

> Contributor agreements are about to get way more parsimonious and annoying.

Why? I don't think the project necessarily needs to be owned by the organization, right? In which case, nothing changes to the contribution model.

> Nation states use software and knowledge of zero days to commit espionage against each other. He can't be serious with this.

That's true, but it's not as if there was no tension there. Significant backdoors could have impacts on the economy of some nations which are therefore incentivized to keep things running smoothly. You can play offense and defense at the same time.
> That distinction is actually very important to set the customers expectation.

At one point you did buy destiny 2 just like you did the first one. While they changed their business model for the base game at one point the example is still a valid one. You could argue that their "free to play" part is largely a demo to get you to buy the expansion. FFXIV does the same thing. Same with WoW.

You buy those expansions for both games and in both situations when the servers shut down you loose access to something that you spent money on.

Regarding The Crew. Part of the problem here, and one of my biggest issues with this particular campaign, is it seems like we are arguing about 2 very different things and the main page paints one picture of what they want and the FAQ is something else.

To be clear, I have not played this game so I am trying to get information about what the actual reality of this game is and is not and that makes this a very hard conversation.

We have online DRM for single player games. Which I 100% agree with shouldn't ever be a thing. It makes no sense.

But then we have online games. Where being online is a fundamental part of the game and the server side component is required.

This petition seems to want to treat both of these equally where they are fundamentally different problems and the second one is far more complex.

I cannot find a concrete information on where The Crew actually falls for this. It has a single player component but is this actually all local content or was it engineered in a way to rely on something server side. I honestly don't know and we can speculate on whether it should have been or is and is not, but that is an important part of this conversation.

I don't think this distinction about traditional goods is as important as you think it is. As far as a consumer goes, when more games were physical. I could go and buy WoW, FF11, Destiny, whatever the same as I would any single player game. And I did, I used to physically buy all of the Wow expansions and it was up to the consumer to understand that it is an online game that may shut down one day. That isn't a hard thing to know.