skysight-inc/HackerNews huggingface dataset:
I agree, this looks extremely sketchy. Especially because the code is just writing a fully controlled byte in the buffer and incrementing its index.

This would give you a controlled relative write primitive if you can repeatedly call this function in a loop and going OOB.
Same old arguments debunked many times already.

1. Old systems it replaced were difficult to use and maintain.

2. It is in fact modular and the code is actually easy to understand. When I ran into a bug, I managed to find and fix it.

3. Systemd itself replaces the init and service management (initscripts etc), that's quite in the scope. Other bits and pieces like timers and resource management, are also in the scope. Other things like network management, are separate things that are only developed under the umbrella of the systemd project.

4. Systemd was not pushed suddenly, it was many years in brewing, and it became gradually adopted when it was actually ready for production use.
White House wants Moon to have its own time zone, Coordinated Lunar Time (CLT)
Yes, as the article points out in paragraph 2:

> There is a chasm between Europe and America’s kitchen cultures. The fundamental difference is that Americans use volume, not weight, to make measurements in their kitchens. Cooking with cups is volume-based and relies heavily on visual cues – everyone knows what a cup of granulated sugar looks like; less so 200g or 7.1oz – while the metric system is weight-based.
Running that command is simple, sure. The development workflows when that doesn't work is full stop horrible.

Also the basic workflows for the alternative build systems have maybe ten more characters to type. It's not bad.
The purpose of the book as stated in the preface is to be used for a course in proof writing ie it is a sort of bridge to higher maths which the author defines as "defining axiomatic systems and proving statements within them" vs "elementary maths" which he defines as "solving problems".

So I think the idea behind the title is get students to see this as the gateway to the good stuff as opposed to a lot of proof texts which might be seen as irrelevant.
Most of the time they don't need infiltrators. Governments can just pressure companies with export controls or warrantless surveillance to get backdoors into commercial systems. OSS projects require different methods because the more direct method would be discarded by the community and forked.
The free trade agreements came after the environmental movements. Claiming environmental movements caused this is too strong a claim. But it is not entirely a coincidence that one followed the other.
I feel ignorant, I thought with card counting you were still pretty much playing the simple strategy but altering bet sizes as your expectations of winning increased?
The point that the person you replied to is trying to make is how do you know when the repo is clean? How can you ever be sure that someone hasn't introduced a backdoor at some point? It's bigger than just what has been discovered.
I remember being hyped running my first game on a 3.5inch disc on an Atari STE.

I was like, I've arrived. This is the f'ing future!

Even hearing "Iomeda Zip Drive" brings back incredible nostalgia!
If the bug report needs to be of a certain quality to work, they've just invented issue-oriented programming.
Just for fun, here are my numbers rounding things up for fun with current prices... Milk 5$ for 2 litres, decent coffee usually around 20$ for 350 grams, water filters 100$ a year, machine 5k good for at least 20000 shots (based on my last one that lasted more than a decade).

The price of my cappuccino comes to around 2$ cad.

This is of course based on low volume and little over head. Of course if I would add utilities and space it would be higher such a businesses do - but it's a decent reference based on more than 20 years of doing it.
In the original blog post:

"I don't want my rice-cooker sending all my rice-cooking habits back to the manufacturer - so even more yes."

It is safe to assume that people who don't want their rice cooker to send their cooking habits to the manufacturers would not be willing to send it to Amazon.

I hope you ask people you invite home for permission to record and send your conversation with them to a third party before letting them in. Most people don't.
> Coordinated Lunar Time (LTC)

Ah yes. It appears that the French have already seized control of the appellation process. Except that French media are reporting it as "le temps lunaire coordonné" (TLC?). So the White House seems to be (somewhat blindly?) reproducing the oddity of how "UTC" (with the letters in that order) isn't quite "Universal Coordinated Time".
Commercial recipes in the US are pretty commonly by weight. You wouldn't want for example to vary your recipe for pasta sauce by half a pound of onions from batch to batch because of the varying sizes of onions.

Am not a professional cook (far from it), but borrowed a couple of cookbooks from someone who was to learn a little about how professional cooks work and approach their trade.
> There are many places in the world, or people in situations where this amount of money really makes a compelling case.

It’s especially easy to imagine that using the classic intelligence agency playbook: monitor high-impact maintainers and look for leverage before making the approach (“hey, saw your post about the divorce settlement and that $%#@ cleaning you out. My affiliate marketing pays in bitcoin…”) just as they’ve done for ages.
I thought this would be a throwback to Cory Doctorow's open-source cola (drink) recipe.

https://en.wikipedia.org/wiki/OpenCola_(drink)
Will Spotify Open Source Its Microservices Framework?
None of those things prove identity. A well funded or just patient attacker can spoof all of those. Sure, it raises the bar a tiny bit, but it's no proof of identity.
Meson is way better than autotools, but if you're too level to depend on python, you're probably needing to customize your build scripts in the ways you mention. I don't see meson being a silver bullet there.

Also, meson's build dependencies (muon, python) are a lot for some of these projects.
Yes, there was an effort to turn all the dependencies into on demand loads, where possible.
It started in 2020 with libpcre2:
https://github.com/systemd/systemd/pull/16260

But many others followed, like libselinux:
https://github.com/systemd/systemd/pull/19997

libqrencode:
https://github.com/systemd/systemd/pull/16145

p11kit:
https://github.com/systemd/systemd/pull/25771

tpm2-util:
https://github.com/systemd/systemd/pull/28333

libiptc:
https://github.com/systemd/systemd/pull/29836

libkmod:
https://github.com/systemd/systemd/pull/31131

Exactly during the development of the libkmod PR, someone noted that libxz could be lazily loaded too:
https://github.com/systemd/systemd/pull/31131#issuecomment-1...

And so I proposed myself to to the job, nothing less, nothing more.

If you look at the code of the other PRs, you see that they are very very similar, there are also macros to easy this task, like DLSYM_FUNCTION()
English is being weird by having three terms then?

Inteiros - (...-2, -1, 0, 1, 2...)

Naturais - (1, 2, 3...)
If EVs are more expensive at this time, of course it will drive demand for ICE vehicles. People will then just drive their ICE cars for longer. In this limit, it becomes like Cuba. Great work, gov.
> despite never satisfactorily explaining why they require a manned spacecraft to do the job rather than sending a robotic drone ship. Seems to me that adding humans to the mix greatly increased the complexity and risk of the mission.

As a software engineer, this statement baffles my mind. like how could anyone in right mind trust software to make right choices in prod on first try?
>Tony Aquila purchased 9 million shares of Canoo (GOEV) as part of a common stock subscription agreement.

https://finviz.com/insidertrading.ashx?oc=1399053&tc=7 shows him putting in $236m or so
Man if it was ever appropriate to tell someone to touch grass this would be it.

The think of the children part is a nice touch as well. 10/10 copypasta would repost.
How do you know anything has not been compromised? You go and look at the commits and the code. It's hard work with no easy answers despite what many think.
> Cup is a universal measure of volume. It works for flour, sugar, liquids.

Until a recipe asks for 1-cup of butter. Tf am I meant to be, melt it down? Or 1-cup of broccoli, how does that even work?!

Grams works for everything. All the time, no exceptions.
German state Schleswig Holstein is rolling out their Open Source strategy
> If you try to, then others will notice that the hashes mismatch and that their HEAD diffs uncleanly.

So it relies on a human noticing and acting upon it. People not noticing backdoors being merged into the project is kinda the source of this problem.
> Sharon Kisluk is the lead product manager at Apono

All that you need to know about this post.
Yeah, it's not enforced (and certainly not with linked-in and facebook) but it's really not uncommon to require use of real names for contributions.

Linux doesn't allow anonymous contributions:

https://www.kernel.org/doc/html/latest/process/submitting-pa...

and this guide has been adopted by a lot of GPL-licensed projects (at least openwrt, glibc and gcc).
The more disturbing part is, it would be less expensive if they all died.
Hah, can it all be traced back to Kievan Rus ? Or even the Mongols ?
Sort of. Inductive loads tend to have a much more distinct "signature" in terms of how they draw current— both the obvious business of causing idealized current lag [1] but also the choppiness of how the magnets energize and de-energize as it spins.

My understanding of Sense is that it measures the top-level current consumption somewhat blindly and then uses the inductive monitoring and other inference to attribute that consumption to different known devices— like oh here's 4kW of resistive heating going on, I can tell whether that's your dryer or your hot tub based on whether I see the drum or circulation pump running. Whereas if it can't find an inductor then it will basically just assume it's your kettle, toaster, or a fanless space heater, with more emphasis on the device doing unique things as it starts up, see [2].

[1]: https://eng.libretexts.org/Bookshelves/Electrical_Engineerin...

[2]: https://blog.sense.com/articles/how-does-sense-detect-my-dev...
How do you wash it then? Seems like quite a chore to wash something like that every week?
To be fair, while our jukebox couldn't really cause an issue, that wasn't where we stopped. We also figured out a test code that opened a long distance line on any phone. Since we had to pay for long distance calls back then, that was likely much more damaging to the school when we spread that around.
According to the article a "cup" of flour is anywhere between 120g and 150g. A 5% error in measurement is enough to screw up baking, let alone a 20% error.
I was obviously referring to the profits of the shipping company, made by cheaping out on maintenance, safety, etc...
Why would any startup ever get idealistic again and release their product under open license when big boys can just fork it and destroy their business? I think the dual AGPL/commerical licensing will be the choice of anyone with still some idealism left.
finally something that does the job of getting who actually contributed
I've got some glass and transparent plastic cups with marks at deciliters up to 500 cc. They are commonly sold at stores here in Italy. I guess its the same all around the world. Or I just fill a glass with water and weight it, empty and full. 1 liter of water at usual temperatures and pressures is 1000 grams, a convenient choice. We don't need much more precision than that to cook. Even milk can be approximated with 1 l to 1000 g.
Making old orchards new again
There is no doubt in my mind that measuring weight in well defined units is superior to measuring volume in some not so well defined units. In baking - precision is critical. There are many other instances when measuring weight just makes sense - when I make a pudding, it is pointless to add “10 tablespoons of chia”, I just pour chia seeds in the container on the scale until it reaches 120g for example. Same for blended foods. Pretty much only advantage of volumes is that they are much easier visualized and can be approximately measured without any gear at all or with a very cheap and accessible container (cup, spoon etc), and quickly.
WipEout: The first rave-inspired video game
If you don't want to be leeched, don't contribute to BSD licensed projects.
Do you recognize that this means you were lucky, and not that no low-wage jobs are abusive?
Is the original git repository still available somewhere?
The objective measurement for "skill" is how much training/experience/talent is required to carry out a particular job. Sure, there might be some fuzziness/ambiguity to this, and there's various degrees of freedom to how you compute a "skill score" or whatever (eg. what's more skilled an accountant or an auditor?), but it's hard to argue that a burger flipper is more skilled than an accountant. You can make the argument that the value of a burger flipper vs an accountant is subjective, but that's irrespective of the skill required.

Whether someone is getting "underpaid" or a "fair wage" on the other hand is entirely subjective, and you can come to whatever conclusion you want depending on your politics. On one side of the spectrum you could argue any sort of situation where the employer is capturing surplus value from the employee is inherently exploitative[1] and therefore "underpaid" and a "unfair wage". On the other end of the spectrum you argue that supply and demand curves are the ultimate arbiter of what's "fair", and any wage that is determined by the free market can't by "underpaid" or "unfair" by definition.

[1] https://en.wikipedia.org/wiki/Labor_theory_of_value
Are you sure you got these the right way round? It seems logical that something that integrates over time should veer off towards infinity eventually, but something that differentiates should be stable.
Real time sophisticated astro turfing system in place to stifle any criticism - Check.

Just kidding, I think the defense given holds up.
Codeberg was chosen over other candidates because it has a workflow similar to GitHub, to ease the transition for the existing community. In my opinion, we're going through a big shake-up anyway and there's no better time than now to consider changes like this. We did discuss moving it to GitHub or another platform entirely, but as a community we decided to stay on Codeberg.

Changing the license was an absolutely essential requirement, and this is a crucial time to evaluate and commit to that change. As far as we're concerned, not being copyleft was a bug that was exploited by Redis Ltd, and a fork which doesn't fix that bug isn't addressing the underlying problem.
I am contradicting this:

> People need cars that can handle the longest distances they would need to travel

You should not buy a car for the rare, most demanding use case.
> Tesla is facing new competition from legacy automakers in western countries as well, most of which are introducing new EV models as they move forward with plans to shift from traditional internal combustion engine vehicles to electrics.

Reading between the lines a bit: The market for EVs is not expanding, at least not at a rate to consume supply. Unfortunately, this feels like a strong signal to short Mother Nature.
Also don’t forget that not everyone expects perfection and a canny attacker can exploit that. It’s really easy to focus on how you’d avoid trojans, keyloggers, etc. but I’d also ask how likely it is that if someone sent a message from your email address claiming you’d lost your token in a minor accident, etc. that they’d believe it - or simply accept it if commits started showing up with a new key (maybe with an upgraded crypto system) since 99% of Git users never check those.
Legendre transform, better explained (2017)
WebAssembly is the new Rust, I think

Hey, no one proposed to rewrite xz in Rust yet! I'm sure that would automatically protect any project from social engineering attacks!
"Certainly Here's the revised copyright notice:"
Dead company.
Here in Canada it's so much worse. You can literally find recipes that use both for the same type of ingredient. In my kitchen, you must have both cup measuring and a kitchen scale.

Canada uses both metric and standard.

We drive at km/h

But we are 6'1" 222 lbs. Our drivers license is in cm, but nobody knows their height in cm.

Buying a house, it'll be meters of road frontage, but sq ft inside.

In the summer we use Fahrenheit and during the winter it's Celsius.
So big payouts become an organic marketing expense. Clever!
Accuracy counts.
"... a moon-centric time reference system that accounts for its differing gravitational forces. In a memo on Tuesday, OSTP chief Arati Prabhakar noted that Earth-based clocks would appear to lose 58.7 microseconds per Earth-day as a result of these factors."
Looking forward to reviewing!
> In actual practice you really just cannot offer Redis as a service unless you are Redis Ltd

Isn’t this exactly what the person you’re replying to was saying?
Some of the EMTEC USB3 flash drives ended up being very slow because they were just not as decent as an average USB2 drive.

They just had the blue plastic insert and were packaged as USB3 since they were actually plug-compatible.

A real joke that was not funny at all.

The BIOS recognition problem goes back quite a bit further, USB drives are pre-partitioned and pre-formatted, but not like you would accomplish personally by having an OS respond to the data-structures it detects in the blank USB drive on an individual basis.

Starting with a blank drive the result is that only a small bit of very key data needs to be written to sector 0, and a handful of other sectors according to the hardware structure, and voila a complete partition layout and filesystem storage cabinet are then in place. Ready & waiting for user files & folders.

After that, to prepare additional blank drives, you really don't need to have an OS do the deed if you wanted to have identical drives be partitioned & formatted identically. All you would need to do is copy the previously prepared partitioned & formatted drive to the new raw hardware during production. And this can be almost instantaneous because it's only a few key sectors when the filesystem doesn't have any user files yet. Basically a few kilobytes from a hardware-specific Layout Data File are sprinkled into a few designated blank sectors of the raw hardware, and that makes them all identically partitioned & formatted instantly. And out the door.

The breakdown comes when the circuit board or memory chips change through time, and the factory continues using the proven Layout Data File to prepare non-identical raw hardware for sale. If the drive is close enough to the same size, and the original formatting structure was really robust (not as many as there should be), most of the time a decent OS will still work with it fine, but even then lots of times the bios alone can not access the disk when the dis-similar hardware misleads the motherboard into thinking that a partition starts at a different sector than it did in the original hardware.

Probably need to clean up the drive, repartition, and reformat from scratch.

Just in time I already posted a guideline in another comment on a good approach using Windows:

https://news.ycombinator.com/item?id=39848221
You just eliminated the whole point of insurance.

If every time the government is going to pay, then the obvious next step would be to get rid of insurance altogether ant everything would be cheaper yet.
In that case OP should not design systems were a sshd compromise can have a life-threatening impact. Just because it's easier for everything to be controlled from the cloud doesn't mean that others need to feel sympathy when that turnes out to be as bad of an idea as everyone else has said.
" Spotify is a market maker as per the spirit of the DMA (ask any artist), but they are conveniently excluded from the DMA. The requirements of the DMA are gerrymandered to leave a curious hole in the place where Spotify would be. " Could you be more precise how to be market maker? Ask any artist is not a valid explaination.

" The AI Act ended up carving out an exception for Mistral specifically, " Though I didnt ask for it please tell us more for the Mistral specific exception. And why it is bad to regulate American tech?
One must note that epicenter is in Hualien. The small city near the Taroko National Park.
Which is know to be beautiful and subject to rock falls.
I think it will be close tomorrow.

There is also a power plant there but I guess it will be fine.>

Edit: A lot of the victims are from rock falls. The others part are from falling building. It's really sad.
Problem with this: an individual betting shop pays out, the sales lift is shared among the entire industry.

Concentrated downside, distributed upside. I doubt the individual bookie is happy.
The US “statue mile” is also used in the UK (but not Canada, surprisingly to me, as I’d assumed the reverse before I’d visited).

As for cooking, US volume measurements are strictly defined, despite the history of where some of the unit names came from. So it should always be possible to convert to metric volume if you know it’s a US recipe.
My assumption is that this was state sponsored mass surveillance campaign of some kind but God knows what exactly they were looking for.

I think if backdoor was discovered 2 or 3 months later, we maybe could understand better what they wanted to do. My speculation is that they wanted to build a massive botnet and then snoop on machines' processes and traffic looking for something. It's hard to speculate because luckily they were captured soon enough.
They are eyeballing everything, then have to make a recipe out of it. The recipe didn't include all of the "fixing" of the spice/salt balance they do during cooking.
> 2 tsp of kosher salt contains the same amount of salt as 1 tsp of fine salt.

The article makes a similar point about unrefined brown sugar and caster sugar, but something doesn't sit right with me for that. Shouldn't the packing densities of sugar/salt crystals, and therefore the mass densities, be the same at different scales? So unless the volume you're measuring is within an order of magnitude of the size of the objects being measured, where edge effects become significant, shouldn't they contain about the same amount?

(Even the grains of coarse salt shouldn't be significantly more than 1/10 of the width of a teaspoon, no?)
why does the backdoor rely on symbol lookup?
is it because of the use of IFUNC ?
Those who think that A16Z—and many other VCs per se—started their own media arms or at least blogs to "help industry" probably lived under a rock. There are just 3 reasons for a VC to invest in its media arm:

1. Help to create a deal-flow by writing about a current thing or their specialization in tech;

2. Promote its portfolio and pump it in every possible way for it to increase in value;

3. Promote its agendas and narratives like regulation/untiregulation.

So, yes. A16Z's media channels are a marketing tool.
His books feel quite uncomfortable to me.

They read like endorsement of CCP authoritarian govt, with how often the themes are "Leaders are flawless, don't dare to even criticise them" (last wallfacer in Three Body Problem)
> Initially, my plan was to employ gaze tracking to identify moments when a user might be “zoned out”. Due to privacy considerations, Apple restricts access to such sensor data.

First thing I see here, again, Apple with, here is a great bit of hardware, but you can only use it in the 3 ways we thought of, nothing else is valid.
There's nothing idealistic involved. Startups want users more than they want revenue. Thus they open source it, use VC money to cover the loses and then eventually try to squeeze those users for money.

Redis Labs also did not in any way make Redis. They came in later to exploit the already open source project for their own benefit.