skysight-inc/HackerNews huggingface dataset:
I don't know. While looking around to see if I could find my school's charter online I discovered that Harvard never had a royal charter, though at various times they sought one. On the other hand College of William and Mary got one (from the eponymous co-rulers) in 1693.

As my parallel comment noted, there are some notable omissions in that list, quite unsurprising given its thousand year scope.
Forward and backward reaching inverse kinematics: http://www.andreasaristidou.com/FABRIK.html
Nothing stopping you. I don’t recommend it. Tests need to be fast or they don’t get written.

Adding property tests into integration tests will make things slower and flakier.
Yes I think it's useful to let go of the idea of the prototype altogether, and think of the app as a set of "n" modular apps/services that will be swapped out/improved later over time.

I thoroughly hated our video player but an MVP of it had to be built for the rest of the app (AI video editor) to even make sense.

And that hated video player ended up being part of the product for 18+ months (I was hoping for <6) because there were much more valuable parts of the app to improve.
trust is earned.

and those are just metrics to measure your progress. pick a different number, but co-founders should share what they are working on, just as much as developers in a team do. like in daily standups.

when i was working with a co-founder i got regular feedback on the progress they made with regards to finding funding, etc. while i shared my progress on the development.
> Xerox Sigma IX Time Sharing computer

The thing appears to have 128KB RAM and it can do time sharing... Impressive!
Turns out their growth isn't going to remain exponential, like so many here told us it would.

This is a hard business.
Oh, I see. It wasn't a suggestion for a replacement, hence 'org' in there since they were talking about 'organizers'. They could have called themselves the April Tools. Just a dumb joke/unmissable opportunity to call some perfectly nice-seeming internet strangers a bunch of tools.
The note about HR in #2 is telling. IME there is significant turnover in HR, and every new person wants to put their own stamp on the "company culture". You are constantly re-selling to your customers in this space. Having a significant network to start with is a pretty big boon nowadays, given how crowded the market is.
This is interesting, but do you think this would have aroused enough suspicion to find the backdoor (after every Ubuntu user was owned by it)? I don't see why this is the case. It wasn't a secret that ifuncs were being used in XZ.

And if that's the case, it was sloppy of "Jia" to disable it in OSS-Fuzz and not do this:

```
__attribute__((__used__,__no_sanitize_address__))
```

to the XZ source code to fix the false positive and turn off the compilation warning, no attention would have been drawn to this at all since no one would have to change their build script.

With or without this PR, it's very unlikely OSS-Fuzz would have found the bug. OSS-Fuzz also happens to be on Ubuntu 20. I'm not very familiar with Ubuntu release cycles, but I think it would have been a very long time before backdoored packages made their way into Ubuntu 20.
Uneducated in hardware, mostly a software guy for perspective, so I could be way off.

Would using something like a stepper motor geared way down with a cycloidal gear box work for a situation like this? (in my mind) It would give you a very controllable and repeatable way to position, with the backlash handled by the gearbox mainly.

Would love to know if I'm wrong though, like I said mostly a software guy trying to venture into hardware!
That's kind of what I was thinking - and directly contradicts other claims in these comments that want to attribute it only to the weight loss.

Personally I've cycled through keto a few times. I will say that while it did not line up with my goals sufficiently (you cannot powerlift/bodybuild long term on keto - your body _needs_ exogenous glucose for that) I was way more clear-headed and alert despite being tired all the time (presumably that's more because of the workouts).
How about they just put a checkbox in the settings (checked by default of course) to install the malware. If you have a problem with it you can navigate to the settings and uncheck the install malware box. Now of course you may need to check from time to time if the box has reverted back to its natural checked state because of some backend update.
One thing that is amazing about industrial robots is how rigid they are when at standstill. Breaking systems start to be a challenge too at high speeds and loads.

And once you manage to get the hardware working, getting a kinematic solver to really work is a massive challenge. Tons of edge cases, real-time feedback to handle and the need to balance usability with reliability. That's where robot companies charge a lot, and rightfully so.

Whenever you can avoid building a robot arm and replace it with simpler kinematics, you should. Hats off to you if you build that thing!
Microsoft released a version of gfwl that uses Xbox servers.
Obviously, and what I meant is that it's intentional on the part of the state, even if individual companies wouldn't do that on their own.
Producers vs Consumers.
I seem to remember that these pictures were identified as AI-generated shitpics some weeks ago. Why would Woz still work in a garage seven years after Apple was founded? The garage of Jobs‘ home also looked quite different to the one in TFA…
I'd like to understand why, this doesn't sound obvious to me? Unhealthy overweight people, I can picture it, but otherwise? An athlete at 240 lbs might not see any benefit whatsoever for instance. In other cases I can also picture people gaining weight feeling much better under the right circumstances.

All in one weight in itself doesn't mean much in isolation. That's why you have people with a high BMI that are healthier than people with a "normal" one.
Wi-SUN: A Protocol Built for Smart Cities (2021)
It’s close but it’s still not a great interface. And VW/audi is in the middle of two recalls for fires - battery and charging cord.
At its core, with separate repositories it's generally fine to pretend that any commit effects all code within that repo. So for example you might run all unit tests for every new commit in a PR, or run all deploy scripts when something is committed to master. Dependencies are usually set up one-way, so code pulls it its dependencies (by referencing specific git commits or released packages). So a change in one repository might mean that it pulls in new or updated dependencies, but software depending on you should only see changes once a change is made to its repository.

For a monorepo those assumption don't hold, any given commit likely only affects a tiny fraction of the content of the monorepo. But a change in a library might also immediately radiate outward to anything in that repo that uses the library, so you can't do a naive check based on the directory tree. So you end up with a build system like bazel that can evaluate the entire dependency graph to know what to run. And you have to do that for pretty much all tooling you want to be triggered by code changes.

Add on top of that the scaling issues you have with git as your repository grows
I meant more along the lines of: consider an LLM called AlignedLLM — can one instance of AlignedLLM dislike some other instance of AlignedLLM?

Also there is also a question of how safe it would be if it dislikes humans which have different ethics than those it was trained on… I'm alternating between this being good and this being bad.
Most of these robots will use servo motors - that gives you dexterity but means that holding any position requires constant holding torque - which means limited payload and a lot of wasted power.

For a heavy fan (don't forget the reaction force from moving air too), you'd be better off mounting it on a some sort of bearing and just using a motor to turn it. That way the motor isn't trying to fight gravity all the time. The robot arm linked here using Dynamixel servos - you could just use one of them to spin a fan on a lazy susan. Much cheaper and less complicated!
There are a number of good options here. The different axes are cost of GPUs, performance, and ease of use / developer experience. You might consider beam.cloud (I'm one of the founders), which is oriented strongly on the performance and developer experience angle.
Well, see, HN is more than one person. And different people have different perspectives.

Some people here think FAANG overpays. Some people here think tech (including FAANG?) underpays. Some think that FAANG overpays and the rest of tech underpays. Some think the market in jobs is more or less efficient.

Don't take comments here - even a number of them - as reflecting a consensus of "HN folks". There is rarely a consensus here.

And that's fine, because thoughtful, well-reasoned comments from people I disagree with are one of the best things about HN.
FOMO can do wonders.
The problem isn't the ideas. It's the fact that these ideas people want you to validate the idea for them by building out the product. Well then, their idea is basically worthless.
LLMs rely on Rotary Position Embeddings (RoPE) to understand the relative position of words within a sequence. Each word in the sequence is assigned a unique embedding based on its position. This embedding is calculated using a combination of sine and cosine functions, incorporating its distance from the beginning and end of the sequence. However, standard RoPE struggles with longer sequences than those encountered during training.
Guess we will see more about this at WWDC in June soon.
We're also working on some new patterns (e.g. embedded banners and "cards") as we enable teams to offer more native ways to engage users, without interrupting or disrupting their product UX. Our ultimate goal is more personalized web-applications and more control for PMs and PMMs to run in-app campaigns without needing engineers to work on low-lift and low-complexity items!
That is basically what I told him and we parted ways. I don't know what he's doing now but at some point he was shilling some "put your business card on a website!" nonsense.
> but anyone who has been pulling from your repo will notice the conflict.

Not will but can notice a conflict. Repos edit history all the time for a variety of reasons. Well written but nefarious changes to history won't immediately be recognized as nefarious.

Besides once there's multiple copies of a repo available with different histories, who is to say which is the canonical repo for a project?
Yes, he was also haranguing and leaning on and verbally abusing Apple employees to get the most productivity out of them.
I think there is a fundamental difference between how corporations used to work and how open source typically works.

In a traditional corporation, people would come to an office. It would be known where they live. If you would require something like (code) review, it becomes a lot harder to plant something. Obviously not impossible, but hard for all but the most dedicated attackers.

In contrast, with open source and poorly funded projects. People don't always have money to travel. So the people working on an open source project may only know each other by some online handles. Nerds typically don't like video conferencing. So it is quite possible to keep almost everything about an identity secret.

And that makes it a lot more attractive to just try something. If something goes wrong, the perpetrator is likely in a safe jurisdiction.
https://zat.is uses uppercase base32 for URL checksums, as alphanumeric QR codes can contain 0–9, A–Z (upper-case only), space, $, %, *, +, -, ., /, :. Overhead is only 10% (5.5 bits / 5 bits). All links fit in a 33⨯33px image, margins included, so little point in improving on that for URLs so short. The tradeoff is that the checksum to URL mapping is stored in a backend and networking is required to learn anything about the real URL.
I’d say it is close. A purer example would be gittup[1], which has its (very few) upstreams as submodules. But ultimately, Git submodules are just URLs and commit hashes stored in .gitmodules in the repository root, which doesn’t seem all that different from the URLs and hashes of contents passed to fetchgit et al. in Nixpkgs. The capability of being able to patch an arbitrary package locally and have every transitive dependency rebuilt automatically is also the same.

On the other hand, Debian and Fedora maintain full collections of sources used in their releases, while, AFAIU, if you need an old version of something from Nixpkgs, it has fallen out of the official binary cache, and the upstream is gone, you’re on your own. (There have been some efforts to fix that[2], but the first attempt was very limited in scope, and there doesn’t seem to have been a second one.)

[1] https://gittup.org/gittup/

[2] https://www.tweag.io/blog/2020-06-18-software-heritage/
> It is true that working for free is bonkers. Priority number 1 is always rent, at minimum cover that so that business is priority 1.

You can work "for free" if investments cover all your basics ... so only bonkers under the assumption that you haven't taken care of your basics already.
That's not sufficient though, IME they rarely accept numbers until they've at least started giving options. E.g. I know the option I want because I'm calling back after it dropped or the next day or whatever; have to listen to the options again even though I know my answer.
That is true. So you need to continually audit those dependencies as well and upgrade them when security requires it.
Given this disaster, one or other "foundation" will now embrace the `xz` project, start paying a maintainer or two so that they don't accidentally end up dying from burnout.

Rinse, repeat for all critical-path open source software. A bit like the OpenSSL "Heartbleed" disaster[1]. OpenSSL is now part of Linux Foundation's (they do a lot of great work) "Core Infrastructure Initiative".

Many fat companies build their applications on these crucial low-level libraries, and leave the drudgery to a lone maintainer in Nebraska, chugging away in his basement[2].

[1] https://en.wikipedia.org/wiki/Heartbleed

[2] https://xkcd.com/2347/
Python Workers
There's a bit thing atm around human creative work being replaced by AI; even if a voice isn't cloned but just generated by AI it gets people frothing as if human hands in factories haven't been replaced by robots, or a human rider on horseback wasn't replaced by an engine.
I don't think the attacker saw the systemd change at all personally.

The way the exploit was setup, they could have pivoted to targeting basically any application server because there's so many interdependencies. python, php and ruby could be targeted because liblzma is loaded via libxml2 as an example.

Gaining trust for linux kernel commits would have just let them continue maximizing profit on their time investment.

>particularly if the attacker intended to target embedded systems (such as military transport vehicles [6])

Said vehicles aren't networked on the public internet and from experience in this particular sector, probably haven't been nor will be updated for decades. "Don't break what isn't broken" applies as well as "military doesn't have a budget to pay defense contractors $1 million to run apt-get update per vehicle".
I was being a little tongue-in-cheek there, but I think there's truth there too--while excellent tech workers absolutely capture too little of their value, that's, uh, not a universal thing in my experience.

But, yeah, walking away from a very solid $150K+ job--especially outside of the Bay Area, I make way less than a Bay Area principal but simply do not think about money!--to play the lottery is not an economically rational decision, and so if you want somebody to do that, yes, you absolutely do need to come correct.
> the worse is 0 years of experience starting a company

I think that's a crucial point of 4. I'm not sure if actual founding experience is necessary (as long as the company structure/cap table looks good if going the VC route). However a managing director position or something similar would definitely be something I'd look for nowadays as a lot of people seem to underestimate what that role entails and/or don't cope well with having the final responsibility in a organization structure.
The point to a nitpick is to point out something is correct, but misleading. In 1988, no one alive was calling this an "x86" compiler. It was specifically targeting the (then quite new -- about 1.5 years old) 80386 chip, which at the time was the only implementation of the architecture that we understand today as "x86".
Hex is worse, see here [1] for UUIDs

[1] https://news.ycombinator.com/item?id=39094251
The Sequoia puff piece on SBF remains a reminder that this is true for all of them. https://web.archive.org/web/20221109230422/https://www.sequo...
AllSpice | https://allspice.io/ | Boston, MA / SF | Full time | Remote/Hybrid | Sr. - Principal| golang, Vuejs, rust

At AllSpice, we're building the future of hardware development and collaboration, applying modern software design principles to the hardware industry with revision control, design review, and automated test (think GitHub/Bitbucket for hardware). AllSpice is unlocking the next generation of smart vehicles, IOT devices, rockets, medical devices, robotics, and much more.

https://techcrunch.com/2023/12/05/git-allspice-enterprise-6m...

We have a highly-capable, tight-knit, remote-first team with a flex office in Somerville, MA and competitive benefits. We strongly value continuous communication and personal development. See more on our careers page [https://allspice.notion.site/AllSpice-Careers-3173d0cd518b42...]

We’re hiring primarily for:

Principle / Lead Fullstack SW Engineer - Take a pivotal role on our incredible engineering team by helping coordinate our application architecture and implement new product features. You'll work on optimizing 2d graphics rendering, scaling application code, and testing/planning architecture to support new feature development of our git hosting platform. More info here: https://allspice.notion.site/Principle-Lead-Fullstack-Engine...

Mid / Sr. Frontend Software Engineer - You'll be the subject matter expert for our front-end testing (Vue, JS, Golang, Playwright, jest), and working with open-source projects to extend our testing capability. https://allspice.notion.site/Mid-Sr-Front-End-Software-Engin...

Director of Sales - We're also hiring for a director of sales with expertise in enterprise B2B software. It's a phenomenal opportunity to streamline our sales process & coach our capable and growing sales team.
https://allspice.notion.site/Director-of-Sales-48528b4a68344...

Tech Stack: Docker, Terraform, GoLang, Rust, Python, Vue

See our careers page: https://allspice.notion.site/AllSpice-Careers-3173d0cd518b42...

Apply by emailing us at jobs@allspice[dot]io with [HN] in the title and a link to your GitHub/GitLab profile and/or resume.
There's a tipping point though, right? I think the right question is, how do we find the correct threshold?

Otherwise, there will be an asymmetry in which the "brains and capital" will get all the benefits of taxes with little to no skin in the game. That implies society serves the economy and not the other way around.
> Startups are very hard to do in the EU for some of those reasons

The biggest obstacle is not employment laws or environmental or other compliance crap. The biggest obstacle is getting funding, Europe doesn't have the sheer amounts of "dumb money" that the US has due to their pension/401k system.
Best printer 2024, best printer for home use, office use, printing labels, print
Still, if the NSA wants to target a "rogue state" with malware through GitHub, they are much much more likely than not to comply. Even if it were ever discovered that they did so, and if it were ever widely publicized, it would not affect the majority of GitHub paying customers (which are US or EU companies, which by and large don't care if their geopolitical rivals are served malware).
I've seen contractors work, but agencies?

Can you quote a single successful (has PMF, fast growth, 8-figure plus revenue or exit) SaaS built by/with an agency?
Associated Press vs. Meltwater (2013)
That's a good idea, I'd certainty like to incorporate population into this, since it would help contextualize the population density.
In the general case, the prefix "pyo-" means of, or pertaining to, pus.
That's just the nature of free software- you have to either trust the maintainer or do it yourself. There is not really a way around it.

- Corporate maintainers are great until they enshittify things in the pursuit of profit (see Oracle)

- Nonprofits are probably the best but can go the same route as corps (see Mozilla)

- Hobbyists are great until they burnout (see xz)
"Last" to own a Machine independent of the National Democratic party.
The QR standard does not have a specific encoding mode [0] for hexademical, it would have to use alphanumeric. Since you'd only be using 16 out of 35 possible characters, it would be much less efficient.

0: https://en.wikipedia.org/wiki/QR_code#Information_capacity
I've spent a bunch of time playing this over the last couple of days. Overall I love it and I keep coming back to it.

There's one thing I find really frustrating, though - the dictionary is incredibly idiosyncratic, including stacks of 'words' that normally I wouldn't expect to be accepted while still excluding some that I'd think are way more usual in this kind of game. (I'd guess this is where some of the confusion on 'why did my attack fail' comes from?) I basically have to look up every word every time.

Could we either have the dictionary visible all the time for easier access, or (better option IMO) add a highlight that shows which adjacent letter groups are in the dictionary? Not sure how this would work on mobile without mouseover, though, it might need a separate 'commit' tap after placing and seeing the results.
It’s a decent vehicle but the look is subjective. I’m not a fan of the mustang SUV look. Unfortunately the trunk is just too small for my needs and we need something with the cargo space of a midsize SUV (but not as big as the EV9/R1S). Electric vehicles that come close: Q8 E-tron/ID4, Prologue/Blazer, Lyriq. And those still don’t match the cheaper RAV4, CR-V, Sportage, Tucson, Rogue in terms of cargo space while being similarly sized vehicles.

The first EV midsize SUV comparable to the RAV4 in size and functionality with decent range will sell like hot cakes. Assuming the manufacturer puts a little effort behind it and doesn’t do what GM did with the Bolt/Volt.

And no Honda, I don’t want a hydrogen powered CR-V.
Indeed, storage! I think it grew for each person you invited, too, or some scheme like that...
The main problem is that as a software developer most of us worked at software product companies all our life and I noticed that often we know more about software product design and product strategy than some of the 'idea people'.
People who never worked as developer OR product manager OR designer and have no knowledge in any of these fields and have no money to afford a payed developer are rarely the good co-founders.
I absolutely agree with the OP that most of these people need simple CRUD apps, and the reason they need a 'cofounder' is that they need a mediocre programmer but have no money to pay them.
I don't even like the term 'technical' vs. 'non-technical'. Ideally a smart person in the tech business should be somewhat 'technical'. If absolutely and categorically non-technical then they should be really-really exceptionally good in something that is absolutely needed for the business. (For example having a large following.)
No, rather a larger version of robotic vacuum.