skysight-inc/HackerNews huggingface dataset:
That would be an improvement for sure... but this is not fundamentally a technical problem.

Reading the timeline, the root cause is pure social engineering. The technical details could be swapped out with anything. Sure there are aspects unique to xz that were exploited such as the test directory full of binaries, but that's just because they happened to be the easiest target to implement their changes in an obfuscated way, that misses the point - once an attacker has gained maintainer-ship you are basically screwed - because they will find a way to insert something, somehow, eventually, no matter how many easy targets for obfuscation are removed.

Is the real problem here in handing over substantial trust to an anonymous contributor? If a person has more to lose than maintainership then would this have happened?

That someone can weave their way into a project under a pseudonym and eventually gain maintainership without ever risking their real reputation seems to set up quite a risk free target for attackers.
Not the original poster, but also Canadian. IIUC TN visas don't really require sponsorship, just a job offer in one of the covered fields.
Well, the article also says that the plane isn't even owned by the company but by the CEOs family holding.

So even if it's "a drop in the bucket", it's also not really a company expense, just an outrageous compensation.
This is fantastic! You've definitely got a knack for making games like this.
I've been making some similar games with a similar tech stack, but with react-spring. Most recently I created clones of all the NYT Games puzzles.

Check out my github https://github.com/matttt. I also made a puzzle called https://slidecross.io

I may contribute to your project if I see something that could be improved!
Yes, if you create something incredibly dangerous to current society, you should not be misleading the public about the negative externalities. Oil companies who knew that pollution caused global warming and buried it should have every single C-suite and boardmember put against the wall and shot dead.
That’s more of a LEO concern. Maybe attackers got sloppy and leaked info in email headers?
State of the Art public robot arms include Boston Dynamics' Stretch[1]. It's not for sale to the public, the price isn't public, it's got 18 suckers on a flat tray and runs on a wheeled base and looks like the size of an armchair. Boston Dynamics' Spot the walking dog robot was launched in 2020 for $75k and was explicitly not safe for use in the home or around children.

Do you genuinely think they will improve to the point of having finger style grippers, dexterity and adaptability to grind coffee, mix drinks and pick towels, and be on sale to the public, safe for use in the home, for $250 (or $2500) by Jan 1st 2030? I would be very surprised.

(Can you get a robot arm today, for any price, to help a quadraplegic open their mail, bring a drink with a straw in it to their mouth, lift them into a sitting position, hold a book in front of them and turn the pages, or ... do anything helpful? I'm not aware of any, but haven't been looking specifically).

Yes you could probably build a robot today which hands you a towel from a pile, reliably and swiftly, or selects the bottles of alcohol and opens them and pours and mixes a drink - in a carefully controlled and lit environment where none of the lids or corks are stuck and the glasses are all a similar shape and size and nobody is allowed to be near it - I don't say it's impossible with today's tech, but it would cost a lot more than $250. A hundred or a hundred thousand times more, while being far far more limited than a human.

[1] https://arstechnica.com/gadgets/2022/04/boston-dynamics-stre...
What is the problem with this?

https://m.wikidata.org/wiki/Wikidata:Database_download
Anyone have a sense of whether the launch-and-abandon behavior actually works for Google, or is it more like a trust-funder whose checks keep coming no matter how much partying they do?
By my logic, to make bank from a startup, you need to be a master negotiator constantly watching your back, parsing poker faces in meetings, reading fine print in agreements, and trying to bust other people's schemes, while scheming on your own. You won't have any time left for the technical side.

A CTO, in theory, is supposed to be shielded from all the political screwery, and focus on delivering the product. In practice, it makes the CTO's equity one of the easiest targets for those willing to play games.

So, unless the CEO/CTO relationship is decades long and is worth to both sides more than a short-term gain, CTO gets screwed.
>As a hiring manager in the data science/ml world in healthcare, I generally think of degree programs in "data science", "machine learning", "artificial intelligence", "deep learning", etc as being less valuable than degree programs in the corresponding fields

What if the data science degree is essentially equivalent to a computer science degree? The program I was admitted to permits students to enroll in graduate-level computer science courses, such as algorithms, networking, and systems, which contribute to the degree requirements.

Would you still hold a bias against those individuals? The data science program I was admitted to is essentially a computer science degree augmented with some statistics and AI courses.

I believe it would be misguided to categorize all data science degrees under a single label and to discriminate against hiring from these programs based on false assumptions.
Even paid developers are vulnerable to a nation state bribing or blackmailing them into accomplishing their objectives.
I don't know anything about r/technology, but I do know that Musk has alienated his core customer base, and is continually making massive noise about politics, unlike most other CEOs. And even more stupidly, he is aligning with an anti-EV, anti-solar, anti-energy storage political faction in his attempt to alienate early adopters. Makes him seem extremely weak and self-hating.

And that's before all the bad decisions in the direction of the product over the past six years. Musk's made a great product far worse by being so involved and making boldly bad decisions left and right.
Natural history collections may still be interested in such. They merge the concept of needing small footprint size labels (e.g. 4 point Times) that go under the physical specimen. The label must not take a lot of space, so for 2mm long insects you have maybe 4-5 lines of ~30 characters. We've long used QR or 128 codes to encode a small barcode of the catalog number for that specimen. The hotness now is the "digital twin" or "digital exentended specimen" for these physical specimens. Perhaps encoding cheaply some key attributes on another label would let the physical part of the twin track the evolution of the digital twin. The key here is that these collection's goal is protection of the specimen over time, we've been doing it since Linneaus (over 250 years), so archival considerations (acid free paper and ink), and persistence of data beyond the initial layer are important.
I’ve had this app for a while. I can’t say it’s particularly compelling. In that sense it seems perfect that it was bought by yahoo.

It’s basically like Apple news or Google news except a bit less good and with more blockchain news for whatever reason
This doesn’t change the point, which is to put your resources into wise areas. Additionally, I would say that 15-30 people for $1.7M is more out of touch than 1-3, if we’re talking about employees with potential to turn the business around.
Hasura debuts supergraph features to simplify complex API data integrations
There was an article from 2019 [0] that someone on HN linked recently about how "web of trust is dead", but it seems to concern scalability problems with the keyserver, which resulted in DoS attacks, which made them disable the feature by default. The concept should presumably still be good, assuming the issues specific to the GPG keyserver can be avoided.

[0] https://inversegravity.net/2019/web-of-trust-dead/
Datadog | Software Engineers | ONSITE (Boston, Lisbon, Madrid, NYC, Paris, Tel Aviv) | Full-time

Datadog is a monitoring, tracing, logs system, and more, for your infrastructure and services. We build our own tsdb, event store [1][2], distributed tracing tools, cutting edge visualizations, and more. We love shipping great experiences for customers just like us and are growing fast! We write a lot of Go, Java, Python, Typescript (with React), and a bit of other languages. We run on k8s, and are multi-region and multi-cloud.

We're looking for people who can build systems at scale as we process trillions of events per day. Let us know if that's you!

https://dtdg.co/hnwhoshiring

[1] https://www.datadoghq.com/blog/engineering/introducing-husky

[2] https://www.datadoghq.com/blog/engineering/husky-deep-dive
OpenSSH is developed by the OpenBSD project and I have a lot more confidence in them than in any random "enterprise".

The issue in this case is that Linux distros took it upon themselves to alter its code base by linking in libsystemd (thus also liblzma) for the dubious benefit of better systemd integration, which comes with a generous helping of attack surface.
Several years ago we crossed the point where everyone is on Discord because everyone is on Discord. Also it's free, of course.

And there's a bunch of neat features that are somewhat unique, like using roles to sign up for specific types of announcements. It can be a chat room, or a forum, or voice/video chat, or a substitute for email notifications, or all of the above. I think that versatility is important too.
AFAIK RT-2 doesn’t quite work outside of Googles micro-kitchen, where they collected about a 1000 hours of data.
Extra emphasis on fibre. And if the fibre isn't enough, magnesium citrate + water will help.

And always. Wear. Sunscreen.
It's a shell company used to dodge taxes, presumably? Or something similarly nefarious; avoiding liabilities or whatever. Not really a company but a legal instrument.
The $1.7m is being paid to the family holdings of the CEO to rent the jet already belonging to the CEO for the CEO. Plus an additional $1.7m to the same holdings for "support services."
Is it bad for the human brain to receive that much radiation?

(I have no idea if magnetic field == radiation, I was just told from my ENT that doing too many CT scans can be risky)
Smart move calling what is effectively an entirely new standard "DECT" to get free use of DECT's old frequency bands that are barely used by their original use for cordless phones anymore...
This closes with an interesting quote that I agree with:

"But if you’re a Google Podcasts user, should you use YouTube Music for podcasts? No, you shouldn’t. Because Google has made it clear over and over and over again that it can and will be distracted by shiny new things. The stuff you love will get worse, and it’ll die. Get out of the Google Cycle wherever you can."
I think that makes it worse, tbh.

Like the guy already has a jet, which presumably he can afford to run.

Taking money out of an unprofitable company to pay for (somewhat) unreasonable personal expenses kinda feels off to me.

But then, maybe I'd feel differently if I had a private jet ;)
Public sentiment is that Apple is a litigious monopolistic bully that is coasting of their former glory. There you have the memo now.
From their recent 10K filing:

"Our management has performed an analysis of our ability to continue as a going concern and has identified substantial doubt about our ability to continue as a going concern. If we are unable to obtain sufficient additional funding or do not have access to additional capital, we will be unable to execute our business plans and could be required to terminate or significantly curtail our operations."
Fusion reactors: Not what they're cracked up to be
> The program and data required all of the Kim-1's memory ... 1K. How things have changed in the past quarter century.

What hasn't changed is software taking up all the available memory!
It's better that it isn't breaking research.
Babies determine close relationships based on saliva
>Edit: thread flagged by said cult.

Thread isn't flagged.
That's fair, it's so reporters can copy paste it. But given the seriousness here it would seem the CEO could have written something more personal. Though of course it covers their ass legally as it doesn't admit or imply guilt, even hits it's a contractor's fault, and nobody can accuse them of not "responding" any longer.
It says in the top "presents his new open source joke", but I actually think this sounds genuinely useful. So many other media formats become unsupported by modern operating systems. Cloud services get shut down left and right. Tapes and floppies and spinning rust gets demagnetized. Optical media has a lifespan too. We have paper from hundreds of years ago that is in decent condition.
That's in Zero to One. Competition is for losers. Small guys try to scare away competition with threats. Big guys lie that there's lots of competition. But no one wants competition.
True. Just walking outside and using the crosswalk is a “gamble”. But the odds are very much in my favor.

Never know though. Maybe a drunk asshole barreling over a blind hill in an EV on “BeAsT MoDe” side swipes me
CT scans irradiate you, MRIs don't really. Just don't have any metal in you.
Building a scrobbler using Plex webhooks, edge functions and blob storage
It's the very fact that it's unmoderated that it can be unfiltered.

If you happen to get footage of a "happening" and post it on 4chan, people will notice (and call you various slurs).

If you post it anywhere else it's liable to be deleted, or worse, ignored.
Is this an unauthenticated mesh? Ie. might my neighbours device be forwarding data for my device and vice versa?
Must be nice to not be over 40 when the world implodes
Exactly. And then the board votes on who gets extra shares to compensate for the dilution, and the CTO is suddenly not on the list. Because the CEO spent months playing political chess with the board members, negotiating who gets what, and before that spent years playing political chess with investors to see who gets into the board. CTO is usually not involved in these games, and has no pull beyond the CEO's goodwill.
https://m.wikidata.org/wiki/Wikidata:Database_download ? The entire thing is dumped regularly. If you need up to the minute updates you can use https://wikitech.wikimedia.org/wiki/Event_Platform/EventStre... to get an event every time something is changed.
This. Degrees (other than top tier) stopped mattering a while ago but somehow many paying students haven’t noticed yet.

Actually implementing methods from recent papers will give a real education and at the very least a really damn impressive portfolio, if not some notoriety on its own.
I assume that RSS was killed because the company that deals with ad-space doesn’t like when you don’t visit the places they show ads on.
The jobs are disabled. Is your post just spam?
Yes, it hinders competition for cloud hosting in certain ways.

Someone could set up a separate hosting service for it as long as they made their supporting code FOSS too.

It also lets you self host, including on a cloud platform.

The rules for hosting SSPL software, are not very different from those for distributing GPL software. It certainly seems to be in the same spirit as someone offering software under GPL with a proprietary alternative.

What I do think is unfair is when there is an element of bait and switch.

> Alternatively, had I chosen MySQL or Postgres, well established DBMS not built by startups with a single product

That was how MySQL started, IIRC?
My mom retired at age 55 with 1 million euros after selling the mom and pop shop. She is 78 now. Still living off of that original mil.
The money would probably be nice but I suspect a lot of people here would hate the amount of travel and the degree of scheduling morning, noon, and night that the CEO of any size of company has.
C++ coroutines do not spark joy. (2021)
That’s the actual story. It’s a bit boring though.

The rest is bs clickbait.
Almost certainly not. She's just posturing.
It is not only about marketing. Initially, I was optimistic about Cloudflare's offerings. However, I encountered significant issues with compatibility, especially with website generators such as Next.js and Astro. Some features didn't work at all, while others were only partially supported. Faced with the prospect of dedicating valuable development time to troubleshooting these issues, I found it more efficient to use alternative platforms. Services like Vercel, Netlify, and Deno Deploy offer a smoother experience for our team's needs, minimizing the overhead and enabling us to focus on development rather than infrastructure challenges.
Have you looked at Tesla stock recently? The stock is down 5% today to 166. It was 250 at beginning of year, so dropped 30%. The peak was 400 in 2021, and dropped to 113 in 2023.

I think it is still overpriced and can drop further, but it has lost its shine. They will make less money from offering, and it would probably tank the stock. And there is no sign they need the money.
Ironically, not taking any prescription pills is also on the list of taking crazy pills, as I think the last stat I saw was that something like 70% of Americans are on at least one prescription drug

Psychological drugs specifically? I imagine the bulk of these are people managing their cholesterol or something.
Does this mean that there will be no first-party podcast app on Android? I’m deep into the Apple ecosystem, so it doesn’t really impact me, but I would guess that most people who listen to podcasts use the default podcast app on their platform¹ so this would potentially be a killer blow to podcasters similar to how the closing of Google Reader decimated the blog ecosystem.

⸻

1. HN readers would be outliers in this respect. I haven’t used Apple Podcasts for around a decade or so, using Overcast except for one podcast whose delivery method (dump a whole week’s daily meditations at once) and Overcast don’t play well together so I listen to that one on Downcast. What I’ve heard about the newest revisions to Apple Podcasts, though, make me curious about what it’s current state is.
Almost any startup will have periods where there will be "substantial doubt about our ability to continue as a going concern" if they are "unable to obtain sufficient additional funding". This is meaningless when looking at a startup without also looking at whether their burn rate is abnormal relative to how much they raised, and whether or not they're meeting their targets.
This just got posted: https://twitter.com/EmmanuelMacron/status/177512497292033270...
Yep, I wanted to get something out there and iterate based on feedback. Would love to hear suggestions!
"Family Foundation"

I wonder when the public wakes up and understands that rich people don't own anything "personally" so you can increase VAT and income tax just as much as you like to tax the rich.
ALL blogs are marketing.
Then again low carb vs high carb are worthless labels if you are drastically changing your protein consumption between the two diets yet fixating on another macronutrient.

Though those labels were always suspicious to begin with, especially since the carb in the “low carb” meme seems to only
cash out into refined grains, not beans or broccoli.
it was a very toxic environment. The DS team existed for years within the clinical org, and then the CTO decided they needed to do more ML so created an MLE team. Originally it was pitched as an engineering team to create the pipelines to enable more ML by whomever (including DS), but the team members were more interested in solving organizational problems... but generally weren't equipped (connections, time, skills, whatever) to actually do that.

So, some of the "working on the same problems" was intentional-- it would require effort from both teams. But the dividing line was nebulous. The DS team would have preferred to do all of the stakeholder work through building a model, and then hand a pickled model to the ML team to implement in production. The ML team would have preferred to have the DS team scope the problem and hand off to them to do anything involving any form of modeling. It was a total mess.

But I have never worked at an organization where this has gone well, so I don't think it was an issue specific to that org. If you're involved in data things, you want to do interesting work and there's only so much interesting work to go around. And, ultimately, the vast majority of organizations don't have a need for tons of people to be doing the really technical aspects of ML/AI/etc. SO much of the work is scoping problems, cleaning data, worrying about pipelines, etc... and so if OP or whomever is thinking they're going to waltz into a job and make the next version of ChatGPT, that's really unlikely with anything less than a PhD. Personally, I've found a pretty good home being able to interact with leadership to define nebulous problems and solve those problems with whatever tool is appropriate-- and my success has way more to do with communication/project management/scoping skills than with technical skills (although both are necessary)... and I think those skills are better fostered through the more traditional programs.
I don't know if it's the tax credit you're referring to, but in that video (15:35), they claim with tax credits the model 3 is available for under $30,000

https://youtu.be/WLMalLy_3JU?t=935
A Grand Don't Come For Free always felt more forced to me.

OPR felt like he was singing about a time and a life he knew. I figure the label wanted a second album and he gave it a go.

"A Grand Don’t Come for Free was an ambitious rap opera that wrapped a tale of romance and remorse around the disappearance of £1,000 belonging to the protagonist. To write it, he attended a workshop with the Hollywood screenwriting guru Robert McKee, who taught the likes of Kirk Douglas, Paul Haggis, Joan Rivers and even David Bowie."
Who wants this job, that is capable of actually doing it properly?
I don't think number 1 is a differentiator anymore (there are so many boilerplate bootstrap templates that include OAuth).

2 is certainly a differentiator, but not mentioned anywhere in your post.
as I wrote in a different thread, some projects don't have any source control.

From the big ones - 7z, ncurses are both tarballs only.
I haven't seen Thomas Roccia's infographic mentioned here yet: https://twitter.com/fr0gger_/status/1774342248437813525
Did they really abandon it? First Google Music was rolled under the YT umbrella, now the podcasts app was rolled into the music app. Makes sense to me; why have them in different places? This is exactly how Spotify and iTunes work. I have some small quibbles with the UI but overall it's great.

You could blame them for launching separate apps in the first place but hindsight is 20/20. I can also agree that the migration should have been smoother. Not migrating listening history is definitely an annoyance.
I couldn’t believe that these were named after the Bohemian bacteriologist Hans-Otto Snottite.
i used to work in git analytics and saw the most unimaginable repos. 500gb repos with one commit. repos where the source was in the commit message. repos with millions of commits consisting of bogus utf8, and so on. repos where they dont use branches, only remotes, etc etc. every usecase annihilated some old startup mvp code somewhere it felt like

we wrote our own in memory client but even before that, stock git client would always finish, it was just a matter of how long you were willing to wait. maybe we were lucky overall
until you have to integrate with the rest of the world sure
I mean, it seems pretty bizarre to me for a CEO of a company that doesn't have any revenue to have a private jet paid for by that company. Is that... common?

(Honestly, even if they had revenue in the hundreds of millions, it'd still be rather absurd.)