skysight-inc/HackerNews huggingface dataset:
the part where they told him he couldn't use his own name any more, and had to use the perpetrator's name instead was just wild. i can barely believe that judges are so incredibly reckless and incompetent!
I feel like food advice has always been a lie. It's just meeting us where we are now, on social media.

Sugary cereal has always been advertised as "part of a balanced breakfast", but if we had time to prepare the other parts of that balanced breakfast, no one would eat cereal.

Orange juice was advertised as a healthy drink, when it's got as much sugar as a can of soda.

The original food pyramid was introduced in 1992 by the US Government, heavy on breads and rice and pasta. Obesity increased even more dramatically afterwards.
Just because a drug doesn't kill you physically, doesn't mean it doesn't harm you in other deeply profound ways. Related: Nuggets[1]

1. https://www.youtube.com/watch?v=HUngLgGRJpo
More drugs? Why is that bad?
In Arch it's packaged in libjxl as /usr/bin/{c,d}jpegli . See https://archlinux.org/packages/extra/x86_64/libjxl/ , section "Package Contents" at the bottom.
You can use backup tools like restic/borg/kopia to encrypt/compress before uploading to Backplaze or any other cloud service.
Figure from the research paper:
https://www.nature.com/articles/s43247-024-01294-x/figures/3

There was essentially no detected sulfyryl fluoride outside of California. They don't really guess why that is, but the authors do seem surprised by it

A caveat was that they don't have good detection networks in Florida, but determined that it must be significantly less than California due to the ability to detect emissions traveling away in South Carolina.
> To make sure this doesn't happen again, OWASP said it disabled directory browsing and checked the web server for additional configuration and security issues, and removed all of the resumes from the site.

> Additionally, the foundation purged the CloudFlare caches, and requested that the accessed data be removed from the web archive.

If the attacker didn't break in but rather accessed public internet facing traffic is it really a breach? What was breached? The webserver? on port 80? [0]

[0] https://owasp.org/blog/2024/03/29/OWASP-data-breach-notifica...
Fredrik Knudsen did a really nice video covering Henry in his Down The Rabbit Hole series [1]. Would recommend

[1] https://www.youtube.com/watch?v=vjCS_u3Sgpg
Backblaze supports encryption, as does the excellent Arq, which is a better solution than rolling your own rsync+ssh.
https://archive.ph/CeMH7
Oregon legalized it and then skipped doing any of the other stuff that was advertised as coming with it, like free addiction treatment, social programs, etc. It's a 'we've done nothing and we're all out of ideas' approach consistent with the state's approach to homelessness at various levels, where agencies won't even spend the money they already have because they don't even know roughly how many homeless people there are per county.
> So no, not they way they did it.

I am advocating legalisation, not decriminalisation.
So compete with eco-friendly dredging, and show them a better way?
Does Windows still make that file? I built a new PC a few years ago and don't recall disabling it (Win10).
> Cigarettes are already legal despite killing 7x as many in the US as all opioids combined

Is that true? I am not denying it, but the opiate overdose rate is staggering.
Yeah, it's just a coincidence (†), but I started working on Wuffs' LZMA and XZ decoders last December. It works well enough to decode the Linux source code tarball correctly (producing the same output as /usr/bin/xz).

$ git clone --quiet --depth=1 https://github.com/google/wuffs.git
$ gcc -O3 wuffs/example/mzcat/mzcat.c -o my-mzcat
$ ./my-mzcat < linux-6.8.2.tar.xz | sha256sum
d53c712611ea6cb5acaf6627a84d5226692ae90ce41ee599fcc3203e7f8aa359 -
$ /usr/bin/xz -d < linux-6.8.2.tar.xz | sha256sum
d53c712611ea6cb5acaf6627a84d5226692ae90ce41ee599fcc3203e7f8aa359 -

(†) Also, I'm not "Jia Tan"! You're just going to have to trust me on both of those claims. :-/
I totally understand why George is upset. Troubleshooting crashes within a vendor's closed source product is one of the most painful things I've had to do professionally. In my case, it took months of patience and collecting pcaps to finally get it resolved. George doesn't have months.

I've been fascinated by his live streams where he has been digging into the bug himself: https://www.youtube.com/@geohotarchive/videos

As crappy as the situation is, I must say it's been great to see George's passion to solve these types of technical puzzles reignited! It seems like he's tried his hardest to work with AMD in an nonabrasive manor but he has become very frustrated by the lack of progress.

AMD would be wise to just pair one of their best, whom has access to the source, with George for just a couple days.
Does Israel care about international law? Because I’m seeing a lot of dead and wounded toddlers.
Oregon legalized it and then never funded ANY of the treatment programs it was supposed to.

Um, yeah, that's not gonna work ...

It also doesn't help that many of these drugs are still illegal at the federal level. Consequently, you cannot create a legal manufacturer who can sell drugs of a known quality since the Feds can kick their door in at any point in time.
It always seemed to me that most of these differences and macros could be defined in a static header file that has a million #ifdefs for different OS and compiler versions. That seems simpler and more reliable, and usable for cross compiling, than running dynamic checks with autoconf.
Why not make trafficking the big F an offense punishable with lethal injection? Seems just.
Something does not compute... problem:

> Have you ever had a build fail because of a network error on some third-party server? Commit your dependencies and that will never happen.

author's "ideal" solution:

> First, the user clones a random GenAI repo. This is near instantaneous as files are not prefetched. The user then invokes the build script. As files are accessed they're downloaded. The very first build may download a few hundred megabytes of data.

Seems like contradiction to me? Do you want your builds to be offline or online?

I have a feeling that the real problem is that (1) author never worked with build systems which supply their own compiler, like buildroot or hermetic bazel and (2) author only downloaded dependencies from third-party servers.

You can solve all the problems in the blog post by (1) changing build system to download compilers and libraries and (2) adopting some sort of "binary storage" (something as simple as private ftp server + small text file checked into repo with path and checksum + few scripts to upload and download). And it would not require any new major code investment, nor new tooling, nor new VCS.

The key idea is that all dependencies should always come from your local binary server, never from the third-party server. This is a bit of PITA as many modern tools default to downloading stuff from third-party servers, and it could be hard to convince them to look at your local server instead. But once you do it, you get reliability + reproducibility + sustainability, without having to reinvent the world.
I think you're overthinking it. Here are probably the people who need to worry about recursion depth: embedded developers working with limited memory, and developers working on data systems that process huge data sets (and even this is debatable as stack growth is log n with these tree data structures).

My process for deciding when to use iteration or recursion is simple: if each step needs to keep context then use recursion, otherwise use iteration (unless recursion with TCO is the native idiom of course).

I've never had an issue that wasn't an obvious bug that iteration would have somehow solved. If any bug that terminated a thread was fatal to the whole process then I suggest the thread termination handler should handle this more gracefully.

Increased space usage is a non-issue IMO. Translating a stack frame to a data structure you manage as an explicit stack requires the same space within a small constant factor.

And an oft-ignored factor is the cleanup advantages of allocating on the stack, which offsets any space and time disadvantages you might see with recursion.
Is that on a SD card? My expectation is that SD cards are garbage and any number of IO access patterns break down vs a SSD.
I do not know the details of Apple's file system, but I wouldn't be surprised if it needs to allocate space for the log (journal) and can't do so.

That isn't reasonable in the sense of "this is what the filesystem should do in this situation" but if the log and user data are allocated from the same pool it is quite possible to exhaust both.
not an exaggeration, but relativity is everything here
"Clean Up By" arranges files by the selected attribute, compared to "Sort By" which keeps files arranged by the selected attribute. If I were Apple I would have either gone with `Arrange/Sort By` and `Keep Arranged/Sorted By` or a single menu `Sort By` with a toggle-able option to keep it sorted by the selected item.

I suspect the latter at least might not be done because then the menu items for the attributes you sort by would remain selected or reset automatically depending on the state of the `Keep Sorted` toggle, which would be weirdly inconsistent. But then again the `Clean up By` menu enables and disabled depending on the state of the `Sort By` menu, which is arguably even more inconsistent and confusing.
Legalizing opiates is silly. It only takes a handful of times to get hooked and people currently use alcohol for months on end to get through hard times. Anyone with even a slight propensity for substance abuse would be an addict within a year. Contrary to the popular narrative it’s not super simple to get opiates and honestly it’s not on most people’s radars to even seek it out.
Demanding? Seems like the person submitting the ticket wanted to talk to someone quickly. Without context the person submitting the issue m ight be noting that it's high priority on their side, so they're feeling pressure, in case that might convince someone to talk to them sooner to figure out the appropriate action to take.

Not everyone at MS is going to be a developer with enough knowledge to take tha appropriate action. To me this sort of reads like some hapless newbie at MS caught between their managers and the OSS developers, neither of which are getting the full context, and so are having wildly different expectations of what's appropriate.

That said, I don' think it's inappropriate to offer some money. There's many situations where that can make sense to all parties involved. For example, it could be that MS was choosing whether to sick their own resources on it and submit a patch or ask the developer in case they would appreciate the chance at some money for what would undoubtedly be easier for them to do than for some developer at MS that's unfamiliar with ffmpeg. That doesn't mean it makes sense for MS to immediately go to a support contract though, when honestly setting that up and negotiating it and getting it approved by management may itself far outstrip the time they have to get the problem fixed. That doesn't also preclude them opting for a support contract after the fact once the problem is fixed and they reassess their exposure by using ffmpeg in the way they do (why are they pushing out included libs that aren't tested?).

Calling them out publicly is probably a good way to get them to decide not to give that support contract though, since you've proven you're unprofessional enough to immediately publish once side of a grievance very publicly, and who wants to deal with worrying about that in the future?
So you mean the country is being flooded with a fatal product intending to cause harm?
In the linked article the only check the IDF was still using on the target list provided by the AI was discarding any and all targets it selected who were women, as they don't believe Hamas would use them as fighters.
Oh! What I would do is take the disk out, mount it on another machine and delete files then put it back........ /s

I think the whole stack of operating systems and tools that assume that this is possible get in trouble when it's not possible. I don't want my computer to become a locked down sandbox but it seems like this is where we are headed.
I'd take a step back. How is the water heating in the first place ?

They are saying heat exchangers do the magic. OK. Lets consider first the use cases.

- Cool Water: I'm really confused as to how cool water is helping anything. Its not like this water is helping a nuclear reactor or some really hot tropical city. We are talking CAN here.

- Hot Water: I can see the usefulness. But I dont get how they get the energy. There's some electricity warming up the water so it can be useful, but how is that is more effective than other types of heating ? Sounds like a gimmick - Am I crazy to think that ?
Why would they want to? Really.

Look, if you are young I suspect you cannot imagine a world without social media. If have never left your apartment or still live in moms basement I suspect you cannot imagine a world outside your computer.

Social media has only one purpose: advertising revenue. That ball of wax is not something the adults in the room want to waste their time with.
Opiates, and many classes of illegal drugs, do very little harm.

Addiction is the main feature, and if the substance has no artificial scarcity, addiction is easy to manage.

There is no basis on harm reduction for the drug policies being pursued in most of the world
Cigarettes are a slow poison and mild stimulant at worst. It really doesn’t modify a person’s day to day behavior in any significant way.
>File is too big for E-mail,

Back in the old days, we would have used PKZIP or RAR to split the file into smaller pieces.

>ftp is too big a technical hurdle for the guy

Back in the old days, even a secretary could figure out how to use the MS-DOS command line well enough to get her job done. I'm not sure what happened between then and now, but these days people just say "I'm non-technical" and refuse to learn anything that doesn't involve a GUI. FTP isn't hard, it's just a few commands, and it's much easier to tell someone how to send FTP than to use any GUI, since you can type out the exact commands to use:

1. ftp [ip address]
2. type username
3. type password
4. cd dir-to-drop-files
5. put filename
6. quit

These days, we'd use sftp anyway, but you could also use scp in a single command line which they could simply copy-and-paste from an email, after you have their temporary account set up.
You're right that Wuffs' memory-safety isn't relevant for this attack.

Still, Wuffs doesn't use autotools, and if you're pulling the library from the https://github.com/google/wuffs-mirror-release-c repository then that repo doesn't even contain any binary-data test files.
No, that statement is a subjective assessment.

Any company, including shell companies, will have business activity on paper. In other words, there are invoices, financing or a combination.

This is why it’s difficult to define shell companies. A more realistic proxy is to look at the ratio of employed people by the particular entity to revenue or some other financial metric.

Most shell companies don’t have many employees while the financial figures might be huge. Again, this might be a bona fide structure as part of an international holding but at least you have an objective filter as a starting point.
That's my experience, yes. Just tested it on a 750kB 1080p image with detailed areas and areas with gradients. Highly unscientific, N=1 results:

- Guetzli at q=84 (the minimum allowed by Guetzli) takes 47s and produces a 403kB image.

- Jpegli at q=84 takes 73ms (MILLIseconds) and produces a mostly-indistinguishable 418kB image. "Mostly" because:

A. it's possible to find areas with subtle color gradients where Guetzli does a better job at keeping it smooth over a large area.

B. "Little specks" show a bit more "typical JPG color-mush artifacting" around the speck with Jpegli than Guetzli, which stays remarkably close to the original

Also, compared to the usual encoder I'm used to (e.g. the one in GIMP, libjpeg maybe?), Jpegli seems to degrade pretty well going into lower qualities (q=80, q=70, q=60). Qualities lower than q=84 are not even allowed by Guetzli (unless you do a custom build).

I'm immediately switching my "smallify jpg" Nautilus script from Guetzli to Jpegli. The dog-slowness of Guetzli used to be tolerable when there was no close contender, but now it feels unjustified in comparison to the instant darn excellent result of Jpegli.
> The project was already compromised, the Git repository isn't any more trustworthy than the tarball.

You are talking about this from hindsight. For other projects, we do not know yet if anything similar is happening. So for them the Git repo is definitely more trustworthy.

> tarballs should be fully reproducible from Git.

That's exactly the same as trusting Git repo more than the tarball.
What I mean is that last time there was an argument about "Net Neutrality" - you had people on this forum both arguing for "net neutrality" but on different sides of the nuanced policy. You could say that the "stupid wrong person" just doesn't understand the law - but that is my point - it's a bad name if both sides think it means what they want.
>It seems like Time Machine has been steadily declining.

Because they dont sell Time Capsule anymore. And they want you to backup everything to iCloud to grow their Services Revenue.
The Other Players Who Helped Almost Make the Biggest Backdoor Hack
> Anyone with even a slight propensity for substance abuse would be an addict within a year

There is no evidence for that.

The evidence is that drug addiction has more to do with social issues than chemistry.

The book https://chasingthescream.com/ is a good read on this issue.
The US effectively had legalized opiates during the Oxycontin era. Many people were addicted to these drugs under order of their doctor. Then their supply was cutoff and they started seeing illicit sources. Enter: Fentanyl.
Shells have some of the absolutely bonkersly dumb parsers and interpreters

Oils fixes all this, it's a from-scratch reimplementation of shell with an upgrade path from OSH (compatible) to YSH (new).

---

aliases that can override keywords and change the parsing of shell script

You can control this with shopt -u expand_aliases in bash, and YSH turns it off by default.

Oils is statically parsed: How To Parse Shell Like a Programming Language - https://www.oilshell.org/blog/2019/02/07.html

---

look up how "[" and "]" is handled in some shells--it might not be!

OSH runs POSIX [ as-is, for compatibility:

osh$ [ x = x ] && echo yes
yes

But YSH nudges you toward a "saner" style:

ysh$ [ x = x ] && echo yes
[ x = x ] && echo yes
^
[ interactive ]:2: '[' should be invoked as 'test' (simple_test_builtin)

It also gives you a more familiar syntax. It's for Python and JavaScript users who avoid shell:

ysh$ if ('x' === 'x') { echo yes }
yes

---

A Tour of YSH - https://www.oilshell.org/release/latest/doc/ysh-tour.html

Why Create a New Shell? - https://www.oilshell.org/blog/2021/01/why-a-new-shell.html

(OSH is very stable and compatible, but YSH isn't stable yet. Getting there)
For the users' health, for the user's mental health, for society that has to tolerate these less-functioning persons, for their families, friends, relatives, employees, and so on.
Should the names and addresses of all shareholders of all public corporations be public record?

What about private corporations?
I once earned a 12.5% revenue stake as a freelancer in lieu of cash for designing and building a niche adult website. It wound up being worth mid-six figures before the site shut down. Not a huge payday but not terrible for the early oughts.
Sends them out to stand in the rain several times a day....
I'd argue that a $100,000 grant from an investor like Peter Theil isn't functionally all that different than an inheritence in all the ways that matter.

Remember that recent Paul Graham article posted here advising students to get into the most selective school they could for networking reasons? Not because those schools have a better education.

If this guy went to a different university, I bet they would have never had the opportunity to demonstrate their venture to Peter Thiel. Getting into Stanford is itself is something that functions a lot like an "inheritance." The mere fact that you are there is a gigantic leg up.

To me, "self-made" would be building a profitable business completely bootstrapped with either personal funds or maybe at most a small business loan from a bank.

But then again, this whole distinction of "self-made" is a bit of an exercise on where you draw that line.
Alright, people get overzealous by painting 100% of the projects that way when only 90% of them deserve it.
Well, that was a fun read. Thanks for sharing.
Legalize it in what manner? Fentanyl is legal - it’s used by hospitals all over the country. Should you be able to buy opium at the corner store? I’m not sure that would be good for almost anyone given the dependence you build on it very quickly.

What’s the Bull case for more people having easy access to opium products ?
The Rise and Fall of Silicon Graphics
I wonder if truncate would have worked.
The fair value can be assessed independently of that, though -- and frequently, it is anomalies in values relative to fair value that lead to investigations that reveal the non-arms-length nature of a deal.
Any intro books about this ?
"Engineers have been circulating an old, famous-among-programmers web comic about how all modern digital infrastructure rests on a project maintained by some random guy in Nebraska. (In their telling, Mr. Freund is the random guy from Nebraska.)"

No, it's Lasse Collin the _maintainer_ of xz..
Some time ago, when I was a young man with right-wing persuasions, I listened to the arguments of left-wingers like John Oliver in favour of legalization. I was convinced. Let the free market sort itself out, I thought.

Boy did ever I take a sharp turn towards the political center on this in the years since. Some regulations have a very high return on investment, and controlling/banning the crap out of fentanyl is one of those.
Besides retail transactions the counterparties know who they’re doing business with, it’s just that the public is not privy to it.
The Script Lab Office add-in is now Microsoft owned and is no longer open source
btrfs used to have this issue, the problem being that the filesystem has to append metadata to do any operation including (ironically) deletion: https://serverfault.com/a/478742.

AFAIK it's fixed now, because btrfs reserves some space and reports "disk full" before it's reached. macOS probably does the same (I'd hope), but it seems in this case the boundary wasn't enforced properly and the background snapshot caused it to write beyond.
I wholeheartedly agree. I also don't see any problem with banning the straws in the first place, and I hope it is just the beginning of plastic items we ban.
This headline implies that advertising was primarily to blame for killing Schlitz when the post itself admits that the beer itself had radically changed formulas in favor of a cheaper brew and had lost favor before the ads in question ran.
Selena Gomez is supposedly worth more due to ownership in her own makeup line, though she is older.
Agreed except that not everywhere can landfill, so tightening up global trash agreements still makes sense.
What would be the terms of this software ? e.g xz for extraction tools
Tell this to the addicts who live on my sidewalk. Many of them got started on pain killers, and now they're permanently bent over in the fentanyl flop; I'd be astounded if any of them ever get better.