skysight-inc/HackerNews huggingface dataset:
From the article

> As noted by Matt Asay, who formerly ran open source strategy and marketing at AWS, most developers are "largely immune to Redis' license change."

This is intended by the SSPL; there's no fiasco. The vast majority of the users don't need to do anything, and if they change [to any upcoming fork], it's for ideological, not licensing (concrete), reasons.

> But it feels like there had to be another way this could have worked out.

No, there isn't. FOSS licenses makes devs complain because "cloud companies appropriate open source products"; SSPL license (or similar) makes devs complain because it's not FOSS (even if it doesn't affect them).
If you're any good at kotlin - create and sell some courses, books to share your valuable skills with others.

While you're looking for a decent job offer.
This was not GitHub’s fault, but Git itself combined with cache pruning. Specifically, GitHub updating to Git 2.38 which changed the algorithm. Non-cached tarballs were regenerated on demand, and all hell broke loose: https://github.blog/2023-02-21-update-on-the-future-stabilit...
No. Like the marketing folks, it talks pretty, but it lies.
We have a ceasefire resolution passed, but no one Is going to enforce it. Even when their own people are murdered. What is the mandate that the powers that be, entrusted with an apartheid regime, that no matter what, they will continue to sell weapons and support the genocidal regime?
Please don't. Nix UX sucks big time. I don't know about Guix, but I'm pretty darn sure that anything else must be better than Nix cuz Nix is the rock bottom.
Dig a little deeper and you should come across some backstory that details how the company purged itself of most of it's senior engineering, machining, and inspection staff. Pretty much anyone with the experience to spot a problem and the balls to say something got the chop. Boeing senior management decided to take a page from the private equity playbook and tried to run one of the most complex manufacturing concerns on the planet like a fast food restaurant, with predictable results.
"I do think their north star is in the countries' best interest."

And by the way, do you also think that Nazi's north star was in the Germany's best interest? It didn't work out well, but their heart was in the right place, wasn't it?
I think this might be an anglophone thing. In at least a number of other cultures, you wouldn't use nicknames for figures of authority, and one-syllable names are uncommon in general.
For info, that's here: https://mindgard.ai/careers
Yes and haven't Canonical and RedHat and others already reacted and their users are fine?

I see no problem.
I struggle to understand the upside of avoiding monorepos. A lot of people think it means you can't decouple releases, modularize builds and similar with a monorepo, but that's simply not true. The efficiency at which you can refactor and upgrade your codebase cannot be understated.
Why are you so negative towards this? It's just an Open source project... who cares how good it is. It's a great way to learn, and play, and experiment.
Computers have to run software that has to come from somewhere.

I’ve been expecting a supply chain apocalypse for some time now given that the Internet has become a dark forest.
Proprietary Unix vendors used to develop all the system libraries and utilities. It's very much doable, especially if the responsibility is split across Linux vendors. Vendors need to take a critical look at what they're using, who develops it etc.
Peertube uses Peer to Peer connections between users to share bandwidth and use less managed infrastructure.
But it's not centralized, so capitalists are not happy with it
> I think it's a bit short-sighted to assume that the future development of AI models will only come from large corporations or research institutions.

If this was a "forever" solution, I would agree.

I believe the goal is more along the lines of trying to make some progress with the foundation of what "safety" even means in this concept.

> Just because a government heavily regulates AI and possibly bans open weights doesn't mean that people on the fringes of legality will abide by it.

Nor nation states.

However, we do have international treaties — flawed though they are — on things from nuclear proliferation to CFCs.

As a smaller-scale example: we can't totally prevent gun crime, yet the UK manages to be so much safer in this regard than the USA that even the police in the UK say that they do not want to be armed in the course of their duties.

I don't know how realistic the concerns are for any given model; unfortunately, part of the problem is that nobody else really knows either — if we knew how to tell in advance which models were and were not safe, nobody would need to ask for a pause in development.

All we have is the age-old split of neophilia and neophobia, of trying things and of being scared of change.

We get this right, it's supper happy fun post-scarcity fully automated luxury space communism for all. We get it wrong, and there's more potential dystopias than have yet been written.
Managers are coming with a better compensation exactly because they are taking responsibility. If not then they have to be paid at the same level as workers.
> This tax optimisation has resulted in lawsuits...

The tax battles are ongoing, but the fact that big tech still uses offshore structures indicates they're still getting from value out of them.

> Hence "Track all GPUs sold.

It keeps going with the second hand GPU market or IaaS providers.

As a reference point, Western sanctions have largely failed to prevent Russia and Iran from acquiring semiconductors for drones.

> rogue datacenter by airstrike

In the tax battles, the biggest obstacles were generally internal to the G20.

Delaware didn't want to give out ownership information about companies, divided congresses refused to pass min tax laws for years at a time, the Brits didn't want to force Cayman etc to have public registries of trusts, and Ireland undermined any collective effort by Europe.
Ask HN: What's it like to work in Boeing?
Given the recent disasters and the headlines describing the workplace as more toxic in recent years, what is it like to work in Boeing today?

Ref: https://www.msn.com/en-us/money/companies/the-disarray-inside-boeing-s-737-factory-before-the-door-plug-blowout/ar-BB1kUFFP
It's Thompson's "Trusting Trust"[1], right? To the extent XZ is part of the standard build chain you could have a source-invisible replicating vulnerability that infects everything. And if it gets into the image used for, say, a popular mobile device or IoT gadget...

1: https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...
The software we use is not safe at all. If we don't have an idea what goes on in an open source projects, how could we even begin to know what goes on in a proprietary binary, or a service? People's dealings operate on trust, that's how, and trust can and will be abused, simple as that.

>Most of businesses use Linux for their servers mainly Ubuntu/Debian

Businesses should calculate with the risks, and also, use Long Term Support versions of software, not unstable bleeding edge fresh from the oven ones. Which they do. And so they were not vulnerable at all.
> Yes and people are paying top money to Canonical and RedHat to maintain these software don’t you think? They have huge enterprise contracts

Money alone makes poor filler material to patch such holes. Microsoft famously doesn't make their stuff for free, and yet somehow Windows systems have gained this reputation of having holes such that a train can go through.

People build trust, take shortcuts, cut corners all the time. It's how we are wired. Doing otherwise is an energy sink for our bodies. We don't make ourselves overspend energy when we can.
The only democracy in the galaxy, is after all a random power hungry group of people with no constitution and no conscience.
I don't really see how paying the maintainers helps against insider threats. The users still has to ensure that the software is safe.

Paying the maintainers is nice, but I think the megacorps and governments has to fund an organization that does security audits of all the sensitive packages, instead of heaping yet another job on the shoulders of the maintainers. It's especially important to not saddle the developers of open source with red tape, most of them would think that getting paid is poor compensation for the lost freedom.
Never allow yourself to be bullied or pressured into action. As a maintainer, the more a contributor or user nags, the less likely I am to oblige.
And Kraft (Kafka without Zookeeper).
One major reason for the pressure was the ebb and (still ongoing flow) of of demand for jet airplanes.

During the pandemic air traffic was hit hard and the entire industry (which is much larger than Airbus and Boeing) started to prepare for a slowing down, including firing staff, retiring products and such.

That slow down never really happened, instead there was a massive upswing in demand. Both Airbus and Boeing are currently racing to build as many planes as they can, as their customers are begging them to give them planes as soon as possible and as many as they can.

This is exactly the kind of situation in which mistakes happen. Boeing and their suppliers needed to rehire staff and train them while having a huge pressure to get planes out of their factories. Somewhat funnily both Airbus and their suppliers have a much harder time firing staff, due to stricter EU employment regulations, meaning that they unintentionally were better off when demand started up again, nevertheless Airbus and suppliers are currently hiring massively as well.
Not a very good point, though.

Madoff was successful in big part because there was no one that could independently verify anything. (and apparently the government botched multiple investigations after referrals from suspicious people).

That part of AngelList is about coordinating between lots of parties i.e. companies that seek funding and people providing funding.

I'm not sure how you could keep a scam going by publicly telling people that you've invested in hundreds of legit startups on your behalf without a single one of those startups saying "wait a minute, we have no idea what AngelList is and we never got any money from them".

Being skeptical is good but this isn't it.
Some of the discourse in the U.S. is so weird. It simply pretends the rest of the world doesn’t exist.

The classic Onion headline “‘No Way To Prevent This,’ Says Only Nation Where This Regularly Happens” refers to gun violence specifically but it applies to so much more in the U.S.

I’m not really sure what causes Americans to behave this way.
I speak Arabic (Syrian) natively and I think this is great! Good work!

I agree with other comments that it might be helpful to mention somewhere that this is colloquial Egyptian Arabic. I can tell the difference easily but might be difficult for those who don't speak Arabic at all. But I like Egyption Arabic and I think it's weirdly more suitable for short stories like yours!

One more thing regarding the Arabic keyboard layout, I think it's a bit strange. I'm not sure if it's something specific to a locale or a layout I'm not familiar with, but I think most common layout is "Arabic 101", something like this[1][2]. You can find more details regarding the layout on Wikipedia[3].

Another small thing, on Firefox the "Listen" button doesn't seem to work. I see "Playing" in the tab name but I hear nothing.

1] https://imgur.com/a/Hmt8GZh

2] https://kbdlayout.info/KBDA1/

3] https://en.wikipedia.org/wiki/Arabic_keyboard
I would not call this a "library", but a set of interrelated project with "shared moduls" instead. With a "library" I mean a piece of code where the publisher does know who is using it for what exact purpose. Of couse we could now fight over a proper general definition for "library", but this is how I would use the term in this context, because thee long term aspect is what really makes outsourcing such code meaningful -- in contrast to the parents observation that it does not make sense to incorporate foreign code that constantly changes.
"The xz incident became a wake-up call that the Reproducible Build movement focused on binary reproducibility, but have so far ignored tarball reproducibility."

The reproducibility must stretch over all the outputs.

A related idea is the Hermetic Build", where the sameness of all the input is ensured, even including the build tools.
If it was weed and drugs we’d probably be seeing a lot more arrests.
I was initially too, but this is also a good read
For starters, everything loads via javascript. I have JS enabled, but use uBlock Origin, and the page is just empty.
I only use Youtube through my TV interface. X is not an alternative
The author ends with

> But it feels like there had to be another way this could have worked out.

Serious question: Did Redis try to have it another way, before changing their license to SSPL?
More likely you’d have the engines flying out in front on tethers, so like a skier behind a thermonuclear ski boat. Tethers would weigh a lot less than springs.

You could also have fully electromagnetic “springs” using powerful superconducting magnets.
- their outsizes ability to be politicians. Smart middle-class
(or below, income-wise) people simply cannot afford to run for
parlament and leave their career behind for N years. But this
means politicians are overwhelmingly rich and skew the
representation in supposed democracy

Thank you for recognizing this.

It astounds me how people don't want to financially reward our politicians in honest, transparent ways.

In an ideal world, I believe we should pay our politicians like stars while simultaneously having iron-clad controls on their outside financial influences. Wildly impractical for sure, but why not e.g.:

- Pay a US Senator $500,000 a year

- Assign two full time agents to him with full access to their finances down to counting the fucking loose change in the senator's pockets whenever they feel like it.

- Agent A and Agent B get a hefty bonus for spotting violations. Double the bonus for a thing the other missed.

- The iron-clad financial influence rules extend to 10 years after they leave office and include extended family members and friends.
Please elaborate. If i have more substantial facts about it then i might be more successful in convincing my CTO that its a bad idea.
Implementation of fixed point decimals, using multiple integer representations encoded within a floating point system. Nice.
Arduinos are also $20.
Congrats on the release! I'm stoked to use variable fonts. Keep up the great work!
Interesting.

Well, xpdf I knew :) but yeah xpdf can be nuked, ncurses cannot.
People don’t complain about the license or cloud companies, they complain about losing control and features they’ve grown accustomed to.

If this were a divorce, Redis would be paying alimony.
We're surrounded by assholes. It's up to you which one you'd rather deal with, bullshit machines or assholes. I'd rather we have neither, but between the two I'd rather bullshit machines because then I don't have to deal with assholes. You are free to choose dealing with assholes and fewer bullshit machines though.
I think you're going to have a real tough time finding anyone willing to agree with you there. If line management didn't have a handle on the fact there was a problem and communicate it up the chain they failed. Likewise, if they signed off on a bullshit kludge they failed. If middle management opted to shovel blame around for their division of the company faceplanting instead of getting out in front of the issue and getting their people whatever they needed to get shit done they failed. If senior management decided to apply additional pressure downstream instead of quickly pivoting to full crisis mitigation mode when issues started piling up on the production lines, they not only failed but are likely the most culpable.
> Nowadays, the repo-tarball split is largely unnecessary

I think locking the source distribution mechanism to only git would be detrimental in the grand scheme. A source tarball is universal, independent of preferred tooling, easy to hash, sign and verify, and archive. Even git has loopholes in that a tag does not necessarily have to be a part of the master branch, and not everyone uses (or wants to use) github, or a similar online interface for git...

It's also worth considering that source generation tools are often keen to changing their API frequently, while their output is more weaponized against the passage of time. Autotools is significantly better about that these days, but many other tools aren't...
> No, there isn't. FOSS licenses makes devs complain because "cloud companies are vultures"; SSPL license (or similar) makes devs complain because it's not FOSS (even if it doesn't affect them).

Somehow this discussion never mentions AGPL, which is widely considered FOSS, and yet companies seem to hate it?
>So how do you even fix a problem like this?

Slow down production, increase oversight and focus on training. Make sure that many employees stay for a long time and that they are encouraged to share their knowledge with new hires.
Just a note: sing-box can do the same thing too. (https://sing-box.sagernet.org/configuration/outbound/wiregua...)
1. avoid teams, developers who just "hate" non-technical project managers. Either they lack experience or full of shit.

2. the most valuable thing developers appreciate in managers is the answer to question "WHY". Why are we building this? Why is this feature has such priprity? Why are we dumping this tool? Why should I care about the this type of users? etc.

3. the above implies first and foremost deep quality business domain knowledge, also care about the mission and the goal of the project, product.

4. the skill of breaking down complex ideas and goals into clear points, vision is a huge bonus

5. all the above does not require programming skills and is a full time hard work if you take it seriously
You have it backwards. The alt-right didn't come out of 4chan. It came in and displaced the existing culture. The term 'election tourist' (referring to the 2016 US Presidential elections) is still a common pejorative.
K, so what happens when the documentation says X and your line manager's boss is threatening to start sending folks home if y'all don't get the lead out? You get what you incentivize. :P
> It’s a nightmare to handle and use.

Why?
If all Your work and knowledge is confined in one repo, there still is a way to work only on that part. Or at least there should be.

But if You want/need to have access to other parts, it's much easier to use monorepo then to search trough 100 of github repos that are somehow dependent but it's not obvious in what way.
That post is in the category „all knew it was impsossible until some stupid with no idea made it“

That somebody was 4 decades failing, does not mean that at some point it won‘t be possible. In the last 4 decades the prices have lowered and the quality is much better in the RC world, if you know where to buy.
Code, Kickflips and Crunch Time
Well I mean, if your minimal unit is 1c, then a price like $22.56 should be encoded as 2256 cents.

If you're doing ads and going for millicents, something like $0.01234 should be encoded as 1234 millicents.

Obviously you have to agree on what you're measuring in the API, you can't have some values be millicents and others cents.
K so if employees can self-manage and all of the documentation is in place then what, exactly, are managers paid for? Why do they exist?
I think most distributions use some sort of build sandboxing at this point to avoid this problem and increase reproducibility in general right?
Come on! They are for tinkerers!!! Same as such a robot.
Management is always to blame. It is their job to control, train and oversee production.

>Management had no information of what was going on the factory floor

Meaning that management failed at their job.
JSON is a notation. It's syntax. The semantics are left up to the implementation. The question has no answer.
Management must ensure that this is actually the case.
I'm not sure you'd really agree with what you're saying! The Pullman strike [1] wasn't a bunch of people walking off and then running around with signs. The initial strike was largely ineffectual, so the strikers started rioting and actively preventing other trains and workers from being able to operate, including with violence. In one instance within the riots a bridge was dynamited when soldiers in a train were crossing! These actions are exponentially more vile than anything Trump is being charged with, and Eugene Debs was overtly and actively at the head of these strikes/riots. He ended up serving 6 months in prison for it. Given the state of our justice system now a days, they would have tried to put him in prison for life.

[1] - https://en.wikipedia.org/wiki/Pullman_Strike
Resleeve | Intern Python Backend Engineer | REMOTE | Full-time internship | GMT +- 5h

Resleeve is a startup that seeks to transform how fashion designers develop their next fashion item and get a photoshoot from it. Instead of going through multiple drafts, creating a dummy, and hiring a photographer and model, all can now be achieved through Resleeve Studio. We were founded 18 months ago and pivoted last September.

Are you in your last year of university, or did you recently graduate? Do you
want to gain hands-on experience building backend technology interfacing with generative AI? Then this could be a great opportunity. Our backend stack is Python, Next.js and we are now on our way to add some Go too. We developed a solid onboarding experience to ensure a great experience for you to grow and become a full-time employee over time!

We are looking for one to two backend engineers. We are a fully remote company that is well adapted to async ways of working. We have team members in US, Brazil, Egypt and various places in Europe.

Please use https://jobs.resleeve.ai/29413 to apply.
Numbers 1 and 2 are the same thing though:

1) You can run a very large model on existing cheap hardware, with poor performance, but it will run. Also, "most personal devices at present" is doing all the work here. Obviously if there is now demand for devices with hundreds of GB of VRAM then sellers will soon make them and buyers will buy them. That amount of memory is not actually that expensive. And it's presenting a false dichotomy where the only alternatives are companies the size of Microsoft and the ability to run GPT-4 locally on your existing iPhone. There are thousands of medium-sized companies that can afford five to six figures in hardware, and any individual could rent big hardware on any cloud provider -- requiring them to compete with each other -- instead of locking each model behind a single monopoly service.

2) Claiming that the benefit of people being able to run the models locally is only 5% is absurd. The privacy benefit of not sending your sensitive data to a third party is worth more than that by itself, much less setting up some huge institutions to have an oligopoly over the technology and subject everyone to all the abuses inherent in uncompetitive markets. But from the perspective of those institutions they want to classify those benefits as costs, so they try to come up with some malarkey about how they need to gatekeep for "safety" because so they can control you is unsympathetic.
It's the mail from Saturday, why would you post it now as if it was new? It was already discussed to death here.
First, the problem is the reputation hit and the trust going away. Right now on Hacker News 2 maybe 3 of the posts on front page have been about this since the news broke out. Also when trust goes away, its very hard to come back.
Secondly, the main problem that I see is how many other backdoors/dependencies are vulnerable that we might not know? They might not have performance issues. Also if this went unnoticed, in the long term it might have found its way and actually compromised people. I’m glad this was taken care of and no one was compromised.