skysight-inc/HackerNews huggingface dataset:
It may seem inconceivable that github would infect downloads with malware, but 20 years ago sourceforge doing it would have seemed inconceivable. They did though. You're saying that it happened before so it won't happen again, but that's silly. Anybody with sense back then would have already known that sourceforge's reputation would be ruined by it, just as everybody knows githubs reputation would be ruined. But you can't count on businesses being run on common sense.
> don't depend on _any_ other company's service without a contingency plan for if/when it disappears.

Agreed. But some companies are higher risk than others. There are apps that I use that I would never have installed or looked at twice if they were made by Google, because the risk of discontinuation is through the roof.

> I'll even suggest that I'd rather a company be willing to retire products and move around resources. (…) Holding on to every product like it's precious is how you acquire some very insidious technical debt.

Again, agreed. But if they’re so lenient with the axe, they should be more selective regarding what goes out in the first place.

> Some were definitely loved. Does killing off loved products threaten the positive sentiment of users? Of course.

And that is exactly why. Soon “everyone” stops trusting your apps and you enter a vicious cycle where nothing ever gets off the ground.

> But so does stagnation.

I never heard anyone complain of Google Reader being stagnant. Or if they did, their voices were drowned by all the ones complaining for the discontinuation. Anecdotally, I’ve felt the same thing with every moderately liked product Google has discontinued.
Swipe right to pay $3, swipe left to have your data sold to a thousand partners.
>Bots, instead, throw shit at a wall and see what sticks

And once it sticks, an insecure server has been found. A bot is just a tool someone is using.
There wasn't so I made it.
That's because there's so much cacophony emanating from internet that you have to shout to be heard today.
Yeah, this was a project of the SomethingAwful forums. There are more pieces than in the linked YTMND. My contribution had the balls teleporting Star Trek -style, but I'm not sure I kept a copy anywhere.
I was wondering what the difference between the two hemispheres is. Here's a quick map from gcmap.com: http://www.gcmap.com/mapui?R=10000km%4047.22n1.53w%0D%0A1000...

It looks like the land area that is in the land hemisphere but not the human hemisphere is a strip running from Peru down to southern Brazil; the land area that is in the human hemisphere but not the land hemisphere is unsurprisingly more oceanic but pulls in bits of Thailand, Vietnam, and Japan.
This needs a "April Fools" in the Headline so people don't waste time or energy reading it.
Judging by their posts, the person you responded to doesn't ever follow up on their commentary.
Surely the way to do this would be to embed a SHA-256 of the source file. That's something that can theoretically be hosted anywhere and easily recovered if you don't have it locally.
Steam also displays a notice on games that use Denuvo and other similar 3rd party DRM libraries. It's not super prominent, but it's better than nothing.
I think chrome is got its own thing if I remember from my internship. But almost everything in one repo sounds right.
Neat! This is a great replacement for my SSH tunnels when I need a different IP.

Somewhat related tool: pproxy, can, among many other things, "convert" different tunnel protocols into each other. Also features routing capabilities. I used it to turn an SSH SOCKS5 into an HTTP proxy. https://github.com/moreati/pproxy
The attackers will leverage any culture that helps them accomplish their goals.

If being rude and pushy doesn’t work, the next round will be kind and helpful. Don’t read too much into the cultural techniques used, because the cultural techniques will mirror the culture at the time.
Why? Do you think Jobs was a hands-off idea man who let others sweat the details?
Look how brilliantly they selected their target project:

(1) xz and the lib are widely used in the wild including linux kernel, systemd, openSSH; (2) single maintainer, low rate of maintenance; (3) the original maintainer has other problems in his life distracting them from paying closer attention to the project.

I am wondering how many other OSS projects look similar and can be targeted in similar ways?
I wrote a custom tool that “runs” tutorials and embeds the output of commands in the resulting doc. It also acts as a test as each command run is checked for non-zero exit.

It supports some neat features like webpage manipulation and screenshots. Check it out https://github.com/zombocom/rundoc
I didn't see benchmarks that suggest the 7950X is faster than M2 Ultra. I only saw performance numbers for 7995WX which has 6x the cores and 6x the cache.

Either way, I think these comparisons are moot since an M2 Ultra comes with 2x M2 Max GPUs and an NPU and up to 192GB of unified memory running at 800GB/s. In other words, you wouldn't want to run your LLM on the CPU if you have an M2 Ultra.

The point of OP is to increase LLM performance when you don't have a capable GPU.
From Postgres to ScyllaDB NoSQL, with a 349x Speed Boost
Modular Video Game Physics
Definitely unfair to post this on the second of April without a disclaimer.
Trusting Trust: Ken Thompson on supply chain security (1984)
My problem with stronger identity is it violates open source licenses.

Source code is provided without warranty and this statement is clear in the license.

Putting an verified identity behind the source code publish is basically starting to twist said said no-warranty. Fuck that.
never heard "purple-prosed", what's that mean? like rose-tinted?
That feels like buying more lotto tickets with the winnings from previous lotto tickets :)
DECT NR+: A technical dive into non-cellular 5G
The funny thing is this comment could have just as well been made on the grandparent and would read just as well.
All things considered I'm not sure that'd be such a good thing

How many security issues spring from outdated packages vs packages updated too hastily?
Green light on continuous fusion plasma operations technology
Some people may see more images per second than others
I sent documents around at work for many years. It's awful in general compared to collaborative document editing and I would absolutely hate to go back to using LibreOffice (or Microsoft) presentation or word documents for most purposes. Perhaps I did more of it than you have but collaborative document editing is a huge upgrade.
Lots of good changes here, Bun shell + windows support solves a real problem.

Is `remix run dev` fully working now with the additional node API support?
Some people think top-down (general to specific); some people think bottom up (specific to general). You cannot specialize your teaching for one group or the other - not unless you know that you only have one kind of people that you're teaching.
If you think Facebook is providing you private communications, you might want to rethink your operational security.
Sorta but flawed relevant xkcd: https://xkcd.com/2347/

I don't see how this is any strongly different than some unappreciated skill worker in a corporation. Its interesting the double standard we have for FOSS. Meanwhile in the commercial world, supply chain attacks are commonplace and barely solicit headlines.

Yes, FOSS needs to be able to address these kinds of attacks, but the world runs on the efforts of the low-level few, generally. The percent of people who work to build and maintain core infrastructure has always been small in any economic system. The world is held up by the unsung labor of the anonymous working class. Think of all the people working right now to make sure you have clean water, electricity, sanitation, etc. Its a tiny fraction of the people in your city.

Conversely, why aren't all these corporations who depend on this contributing themselves? Or reaching out? There's a real parasitic aspect here that gets swept under the rug too.

I'd even argue this isn't really a hobby for many, especially for higher profile projects. For many its done for social capital reasons to build up one's reputation which has all sorts of benefits, including corporate advancement, creating connections for startups, etc. Its career adjacent. And that's ignoring all the companies that contribute to FOSS explicitly with on-the-clock staff.

So there are motivators more than just "I'm bored and need a hobby." Its a little dismissive to call FOSS development just a hobby. Is what Linus does a hobby? I don't think most people would think so. Things like this have important social and economic motivators. The hypothetical guy in the comic isn't some weirdo doing something irrationally, but has rational motivators.

I'd also argue that its pretty harmful to FOSS adoption if the community takes on a "well, its a hobby don't expect quality, security, or professionalism." This is a great way to chase people away from FOSS. We can't just say "Oh FOSS is better than much closed software" when things are good, then immaturely reply "its just a dumb hobby, you're dumb for trusting me," when things go south. I think its pretty obvious there's a lot of defensiveness right now and people being protective over their social capital and projects, but I think this path is just the wrong way to go.

Comms, PR, and image management in FOSS is usually bad (see Linus's rage, high profile flame wars, dramatic forkings, ideological battles, etc), so optics here aren't great, because optics is something FOSS struggles with. The community is at best, herding cats, with all manner of big personalities and egos, and its usually a bit of a controlled car crash on the best of days.
You missed an opportunity to cheat the machine by waving your hand between it and the sun. ;)
But also, do your research; the world doesn't need yet another todo or note taking app with cloud storage as payment model.

Another angle is to build software for a non-software industry you happen to be involved in, or that family or friends are at. Unfortunately for a lot of developers, IT is their corner already so there's a lot of startups that make tools for developers, which is a heavily competitive space.

Other industries have a set of software they already use; CRM, inventory management, point-of-sale, websites / webshops, customer support, etc.

One interesting niche that isn't actually a niche was telecom, the soft- and hardware running the mobile network. Very invisible to a lot of developers, but I think it's ripe for disruption as it's currently dominated by old companies like Nokia, Ericcson and Oracle. The company I worked for had an idea, but were IMO still too old-fashioned and not eager enough - happy with slow and steady growth, etc. That said, they were using mid- to late 2000's tech for their front-end and C for back-end, surely there's ways to improve on that. I made an attempt but I didn't get enough support / people from the company itself, so after 2.5 years of trying to build a new configuration system which was the USP of their business on my own I called it quits. The size and complexity of that was more than I've ever worked on, and that was usually in teams of 6-10 people, if not multiple teams.
I was expecting a story about frolicking about in the sun. I'll settle for a hardware troubleshooting adventure.
We have a similar problem at work right now, but due to different constraints we've settled on Base85. Slightly denser than Base64, but still just plain old printable ASCII characters and the following characters are still "free" so one can use them as field delimiters in a CSV-style format:

"',/[]\

Incidentally, this also makes them JSON-Safe.

Base94 uses all printable characters, and Base122 uses both printable characters and whitespace.

UUIDs encoded in various alphabets:

len algo value
24 Base64 padded wScmB8cVS/K05Wk+nORR8Q==
22 Base64 unpadded osnQ3DUDTDuUQBc9mBRYFw
20 Base85 rHoLuTk%W0fgpY+`c>xc
20 Base94 d(+H"Q/hP}i}d9<KeAt)%
18 Base122 @#FoALt`92vSt@
What clickbait. I don't see anything actually "questionable" here, other than someone trying to ride on the xz hype train.
also: https://wcedmisten.fyi/post/visualizing-hospital-accessibili...

(cartogram by population might be interesting?)
SEEKING WORK

Location: Liverpool, England

Remote: Yes (Remote only)

Willing to relocate: No

Technologies: C#, .NET Core, ASP.NET, SQL Server/MySQL/MongoDB/EventStoreDB/Redis, RabbitMQ/Kafka, CQRS/Event Sourcing, Azure/AWS.

Résumé/CV: https://cv.craigtp.co.uk

Email: craig [at] craigtp.co.uk

Hi. I'm Craig. I'm an experienced Senior Software Engineer, Systems Architect and Microsoft Certified Professional with a passion for software development.

I work primarily, but not exclusively, with Microsoft technologies and the .NET / .NET Core frameworks, leading complex and challenging enterprise software development projects to successfully deliver robust, secure, scalable and efficient software solutions, encompassing over 20 years of experience in the field.

I'm passionate about distributed systems design, CQRS and event sourcing and a proponent of domain-driven design to ensure that solutions are laser-focused on solving real business problems. I'm an open source enthusiast and advocate using the best and most appropriate tools available, providing for an effective and pragmatic solution that delivers genuine and quantifiable business value.

Throughout my career I've helped numerous businesses of varying sizes in varying industries get their technology investment right and I can do the same for you.

Recent projects include:

+ Successfully lead a multi-team effort to re-engineer the core domain of a legacy monolithic application to a suite of well-designed, modern microservices utilising Domain-Driven Design, CQRS & Event Sourcing where appropriate for one of Africa's leading FinTech companies allowing them to scale their transaction processing from over 1 million active customers to over 10 million whilst simultaneously reducing their cloud spend by over 30%.

+ Successfully delivered large section of an ambitious project to re-engineer a number of monolithic applications to cloud-native, event-driven distributed services for a leading hospitality software provider as part of a company-wide effort to modernise entire software estate including training and mentoring staff on event-driven architecture and distributed system design.

+ Successfully designed & delivered large, global SaaS product to manage and automate music royalty collection and payment for one of the UK's largest and most demanding independent music publishers including full cloud geo-distribution & redundancy to ensure high availability & reliability for the worldwide client base.
That’s legitimately one valid way to test docs. The hard part is finding the target audience. 10 years ago HN was alite with tips like “offer people a $25 gift card to test your X” instead of the current LLM craze. Good design needs feedback.

Also I linked in another thread, it’s possible to run and test some types of documentation. It won’t guarantee it is good for the end user but it will at least guarantee it’s doesn’t error.
Dennis Meadows on the 50th anniversary of The Limits to Growth (2022)
If this was done by a state actor then this policy wouldn't help at all. States have no shortage of identities to fake.
I think what you're looking for is a "book."
Global glut turns solar panels into garden fencing option
https://archive.ph/AAIKe
>but you don't need to know TeX to use Lyx, anymore than you need to know how to use Microsoft Word

Did you know it takes 6 clicks with a dropdown menu and a window involved to set a piece of text selection bold in Lyx?

Tells a lot, and not in a good way, that some people totally think and believe that this is comparable to Docs, Word, LibreOffice etc.
imo it's neither car size or speed but the people operating the vehicle.
The statement that "if you process the following list of numbers like this, you'll get that result" is human-created speech.

It's generally really easy to mix one category of information with another. The DeCSS song is a great example of somebody using a little bit of cleverness to inextricably combine functional code with core protected political expression. Even if you thought "pure" code was not speech, removing the code from the song would destroy the message of the parts that clearly are speech, and there's no obvious alternative way to send that message. https://www.youtube.com/watch?v=PmLpLdGzNpo

... but you're right that it's not a slam dunk in real court. What is almost certain is that the argument's strong enough for any regulations to end up stayed while the issue worked its way through a very long legal process. Probably long enough to make the whole question moot.

Basically it's a waste of time for any US Government agency to try this.
> I'm not sure that qrencode CLI tool will automatically do this for you.

If I'm looking at the correct repository, it does [1].

[1] https://github.com/fukuchi/libqrencode/blob/master/split.c
Different shows with very different tones. Stewart’s Apple show could be considered more “gotcha journalism” than comedy. He is running the risk of embarrassing and really pissing powerful people off.

Oliver uses a lot of hyperbole and comedy which seems to soften the landing of whatever difficult truth he is discussing.
The long decline of one of America's most influential brands
Incident Adventures: Role-playing to teach responders
It's not 1 great idea, it's thousands of good ideas, more or less on demand.

“Mr. [Founder] is new to the business of having ideas, and so when he has one, he becomes proud of himself for having it. He has not yet had enough ideas to unflinchingly discard those that are beautiful in some aspects and impractical in others; he has not yet acquired confidence in his own ability to think of better ideas as he requires them. What we are seeing here is not Mr. [Founder]'s best idea, I fear, but rather his only idea.” --https://hpmor.com/chapter/78
Man. Google Music and Google Podcast were fine simple apps. I think Music was better than fine actually.

Youtube Music is filled with dark patterns. I use it only because of the music I had already uploaded before and I'm lazy to switch, but it would be a cold day in hell if I used it for podcasts. I switched to antennapod.
> the author of the project controls what is put in the Git repository itself

The author doesn't control the Git repository. The Git repository is a shared data structure, not just bits on a server. Neither the author nor anybody else can just change the Git repository arbitrarily. They can only change it in ways allowed by Git or the alarm bells will be going off. A tarball has no such restrictions.
Tesla Vehicle Production and Financial Results for First Quarter 2024
If anyone wants to follow along with EPYC optimizations, please subscribe to: https://github.com/ggerganov/llama.cpp/pull/6412#issuecommen...
It's amazing isn't it? No tech in the history of tech has ever got cheaper as sales volumes increase. And this word 'stalled'?? How can a market be stalled when adoption of its products keeps reaching new heights each year? Junk reporting, and an even worse clickbait headline. Depressing!
Cool, how are you controlling it, VR (Quest) type setup or something else?
Tesla deliveries drop 8.5% from a year ago
That's exactly the point. To put it in more HN terms, the best-engineered software has no economic value until it is put into use/sold. Created value != economic value. So what is the economic value if its never realized? Nothing. The entire distinction is that there is a difference between types of value; my post focuses on economic value because that is what's related to someone's pay.

If you could quantify fundamental research's value to the economy (without hindsight), it ceases to be fundamental research. Again, by definition, fundamental research does not have application. If it has no application, it has no interface to the economy. I'm not saying R&D or fundamental research has no potential economic value. It has no current avenue for realized economic value. And our system is incentivized for short-term gain. You could be a magnificent fundamental researcher, but if your work doesn't add to the economy in a relatively short timeframe, you probably won't be paid very well compared to a lesser researcher who does.
Location: Liverpool, England

Remote: Yes (Remote only)

Willing to relocate: No

Technologies: C#, .NET Core, ASP.NET, SQL Server/MySQL/MongoDB/EventStoreDB/Redis, RabbitMQ/Kafka, CQRS/Event Sourcing, Azure/AWS.

Résumé/CV: https://cv.craigtp.co.uk

Email: craig [at] craigtp.co.uk

Hi. I'm Craig. I'm an experienced Senior Software Engineer, Systems Architect and Microsoft Certified Professional with a passion for software development.

I work primarily, but not exclusively, with Microsoft technologies and the .NET / .NET Core frameworks, leading complex and challenging enterprise software development projects to successfully deliver robust, secure, scalable and efficient software solutions, encompassing over 20 years of experience in the field.

An accomplished team leader, mentor and architect, I'm skilled at taking a leading role in the overall architecture of a project, in driving team developments and employing proven industry disciplines and best-practices to deliver successful software projects that frequently exceed client expectations.

I'm passionate about distributed systems design, CQRS and event sourcing and a proponent of domain-driven design to ensure that solutions are laser-focused on solving real business problems. I'm an open source enthusiast and advocate using the best and most appropriate tools available, providing for an effective and pragmatic solution that delivers genuine and quantifiable business value.

Throughout my career I've helped numerous businesses of varying sizes in varying industries get their technology investment right and I can do the same for you.

Recent projects include:

+ Architected and executed a comprehensive overhaul of a core legacy system, migrating it to a robust microservices architecture. By strategically applying Domain-Driven Design, CQRS, and Event Sourcing, we enabled a prominent African FinTech company to seamlessly scale from 1 million to 10 million active users while achieving a remarkable 30%+ reduction in cloud expenses.

+ Successfully delivered an ambitious project to re-engineer a number of monolithic applications to cloud-native, event-driven distributed services for a leading hospitality software provider as part of a company-wide effort to modernise their entire software estate including training and mentoring staff on event-driven architecture and distributed system design.

+ Designed & delivered a large, global SaaS product to manage and automate music royalty collection and payment for one of the UK's largest and most demanding independent music publishers including full cloud geo-distribution & redundancy to ensure high availability & reliability for the worldwide client base.
As both a Tesla customer and a long-time Apple customer, there’s a massive difference in the experience.

Steve Jobs never tried to make me pay $8,000 extra for a feature that doesn’t exist yet but is just around the corner and will be totally amazing. Elon Musk convinced me to hand over that money, and five years later the feature still does nothing.

Jobs fundamentally wasn’t a liar. When I bought Mac OS X 10.0, it was rough and slow, but it did what was advertised and I was excited to remain an Apple customer to see this platform evolve. Musk sold me a steaming pile of vaporware, making me feel stupid rather than excited, and I don’t want to remain a Tesla customer.
I use Overcast personally on iOS but, honestly, who cares? It's an app for listening to podcasts. If I switch apps or get a new phone, I go to a directory and repopulate with the podcasts I listen to. There's pretty much zero lock-in.