skysight-inc/HackerNews huggingface dataset:
Regardless of legalities the model does seem quite unfair.

Small players do the legwork and big tech makes the profit. That doesn’t feel intuitively fair even if technically allowed and in line with the spirit of open licenses
> I think it's important to add that they both have the biggest number of packaged software and the most up-to-date software of all distributions even though they have far fewer maintainers than Debian.

Only because of https://www.reddit.com/r/NixOS/comments/zp95a2/comment/j5ko9...

I also had plenty of issues with either packages not being available or not building, last I tried. At least with the AUR, it's generally only the latter you have to worry about ;)
Google agrees to destroy browsing data collected in Incognito mode
No, it doesn't. And there are probably true positive cases of some hostile attack (and it's unsurprising if we will not be the first to get details on the exact nature of those, and how many, and where and when), but in general the "Havana Syndrome" is likely not that.

(2022 CIA: Foreign involvement was ruled out in 976 cases of the 1,000 reviewed, and ... In March 2024, the National Institutes of Health published two medical studies evaluating people reporting Havana syndrome symptoms, and found no evidence of brain injury, irregular blood biomarkers, or vocational impairment)
The discussion needs to be split in two: the why of AGPL/SSPL, and the hate against them (and from who).

Re:why - SSPL is intended to be an improvement of AGPL, because according to some, it's possible by a cloud provider to work it around.

Re:hate by big companies - Google has an explicit policy, which says:

The license places restrictions on software used over a network which are extremely difficult for Google to comply with. Using AGPL software requires that anything it links to must also be licensed under the AGPL. Even if you think you aren’t linking to anything important, it still presents a huge risk to Google because of how integrated much of our code is. The risks heavily outweigh the benefits.

I think that there's no way for a license to be formally exact on preventing cloud services to appropriate a code base. AGPL was an attempt (presumably failed), and SSPL failed for the exactness reason (which is the reason why it was rejected).
Dtto for video cables - once you get into 1440p/4k and high frequency rates or VBR, that HDMI 2.1 or DP 1.4 certifications start to actually matter.

What is worse is that the hardware tries hard to make it work even with noncompliant cable resulting in things like random flashes of black, or multiple random reconnections after plugging in the laptop.
The Linux Foundation looks like an industry body for cloud companies at this point. Has it always been like this?
noble-post-quantum: auditable & minimal JS implementation of post-quantum crypto
Seems like a good reason to double check your auto-subtitles. That's a massive difference and the appraisal was meant to be a big reveal at the end so this isn't just a minor detail.
You wouldn’t want it in the CI pipeline, because any model clever enough to find real issues is also going to find plenty of false positives. That seems like too much friction for most open source projects.

I’m not one of the downvoters, but you’ve linked to a list of forty or fifty different projects, many of which don’t seem relevant to this use-case. It’s not too surprising people have nothing to say besides “ugh, more AI hype.”
Distros downloading directly from GitHub deserve what they get.
Cronus is a web app that helps you track ho much time you spend on your projects with an intuitive dashboard and a minimalist design. 100% free.
Fedora: Switch the default desktop experience for Workstation to KDE Plasma
That's an interesting view!
Guy. Look at your replies. You're talking down to people while at the same time adding next to nothing of substance to the conversation at hand. It's borderline not even worth responding to.
No, but it had been lying around unused in a machine room, powered up, for a few years. RMS published the GNU manifesto in 83 or 84.
I read this as a good news: more pressure towards free software !
growth can also mean efficiency increase, not only "expansion". I rember that Japan is the most efficient society in its use of inputs at around 20%. there is enormous space for growth
theres a very easy way to find out: take your money back
vanilla upstream OpenSSH DOESN'T depend on xz

that's what i believed as well, but i didn't take time to verify. and i didn't know about the details. thanks. as you describe it ssh still doesn't depend on xz (and why would it?) so part of the problem here is software architecture.

how is it possible that a seemingly unrelated dependency somewhere within systemd can affect and be exploited through ssh directly?

shouldn't it be possible to keep that separate?

doesn't openssh itself already implement some form of privilege separation?

how does software architecture here and in general need to change to prevent things like this?

i am sure somewhere these questions are already being discussed. i'd appreciate any pointers.
Certainly investors have seen returns from companies on Crowdcube [0] in the UK - or am I missing something about AngelList? (not having looked at it)

Disclaimer: I work for one of the companies currently raising money on Crowdcube.

[0] http://crowdcube.com/
I assume in the early days it was backed by IBM more so than the hyperscalers no?
> Shareholders too.

A proportionate share of jail-time days, rounded down. So retail investors would be fine.
A rather late reply, but in case anyone is reading this.... Django is basically designed to have sqlite deadlocks, and there's a trivial fix (that the dev team refused to include) that allows fixes the problem and allows you to run up to moderate loads.

https://centraltrunks.blogspot.com/2022/07/django-sqlite-dat...

https://code.djangoproject.com/ticket/29280

(I authored the rant in the first link)
Scientists Discover Heightened Toxicity Risk for Children with Autism, ADHD
I think realistically that's what's playing out here.. it's just a matter of time before the OSI approves an SSPL-like variant that brings copy left into the cloud era
Location: India, Delhi NCR, Remote: Yes (timezones:- US, EUR, AUS, INDIA - Provide overlap) Willing to relocate: No
Technologies: ReactJS, JavaScript, Go, NodeJs, C#, gRPC, Full-stack

Resume:- https://docs.google.com/document/d/16aBuErrGzQ__j8H7UxdqDWfW...

Email: singh{.}mahesh@gmail.com

Linkedin: https://www.linkedin.com/in/maheshsingh/

Experienced Engineering Manager

Hands-on experience in full-stack development, architecture design and managing teams.
Looking for the role which requires getting involved in hands-on development, scaling challenges, technical decision making, leading and heading the team to collaborate between technology, business and people.
Open to work on multiple languages and platforms.
We Don't Talk about Semicolons (2022)
> People should have the right to choose what to do with their bodies, and the legal system should have to ability to disincentivize antisocial behavior in ways that are productive i.e. that actually reduce it.

And this middle ground does that. You still can smoke weed if you want to and obtain it. But the government does not have any responsibility to facilitate you getting it.

Making the production, trafficking and sale illegal disincentivizes consumption without actually prosecuting the consumer.
So all binaries built with a Microsoft compiler must be considered compromised?
Oh, absolutely. I wasn't questioning whether it would be sold for the price discussed here. I was wondering why the appraisal was that low (turns out: because the appraisal on the website is an unrelated sample and the appraisal in the video was mistranscribed by missing out several digits so the subtitles were off by orders of magnitude).

There are a lot of areas where the label price is based on some underlying much lower value with somewhat standardized factors being applied so I was wondering if there's some implicit "everyone knows this" translation from the "appraisal" to the sale price I wasn't aware of. Hence me pointing out that that would be quite the markup so there is probably more to it than just profit.
I mean... what you're communicating right now is "I have built a strawman in my head which I thoroughly hate, can anyone please come defend it before me"? I guess I'll try anyway.

What's your opinion on the orthogonality thesis, ie intelligence not being fundamentally correlated with altruism? The concept of mesa-optimization, that a process that tries to teach a system to optimize for X might instead instead make it optimize for thing-that-leads-to-X (eg evolution made us want sex because it leads to reproduction, but now we have a lot of sex with birth control). The concept of instrumental convergence, that any optimization process powerful enough will eventually optimize for "develop agency, survive longer, accumulate more power"?

There's a lot of literature written about AI safety, a lot of it from very skeptical people, but it's not like there's any single insight that can be reliably transmitted to a guy at a table with a "you're all idiots, change my mind" sign.
I used to listen to Radio Caroline one upon a time, in the Ross Revenge era.
Yes "What I don't understand is making the future of open source in the hands of what OSI says it's correct and wrong. Read the terms of the license, and understand if you are fine with them." Is well put
in github, you can mark a file a generated [1], which hides it in the PR view by default

[1] https://docs.github.com/en/repositories/working-with-files/m...
It's much nicer to have everything you could ever need in one place, instead of having to know what is in what repo. Especially when you have versions that need to correspond in the different repos...
What are some good examples of successful growth/revenue oriented
companies with a non-technical founder who never found their technical founder and instead outsourced their development to a technical freelancer?
In this specific case, nix uses fetchFromGitHub to download the source archive, which are generated by GitHub for the specified revision[1]. Arch seems to just download the tarball from the releases page[2].

[1]: https://github.com/NixOS/nixpkgs/blob/3c2fdd0a4e6396fc310a6e...

[2]: https://gitlab.archlinux.org/archlinux/packaging/packages/ib...
The Linux Foundation is a 501(c)(6) non-profit trade organization. As such it's normal to look like an industry body of large Linux (and related software) using companies - and in the current tech ecosystem, those are predominantly cloud companies.
You're assuming malice, when really it's just impractical in most cases that object to this wording. What if my software build includes a Windows client, which needs some DLL from an install of Visual Studio?

The licence wording as I understand it doesn't differentiate well enough between "large cloud company trying to use my work" and "everyone else".
I think the period on the line above void my_sandbox.
Those are not my points; they're from the article. The article agrees with the idea that air fryers are not exactly convection ovens; they're smaller, faster convection ovens.

Except for the "not frying" part. That's not in the article; it is my opinion. Frying refers to cooking in a pan, on top of a layer of oil or fat. Air does not fry.

I don't really see the hoax as much as air fryers being misleadingly named. The idea that air fryers bring about a new cooking method, or at least a useful variation in the method of baking, is more plausible than that they bring about the old method known as frying.
I’ve withdrawn money from AngelList after distributions, the platform is legit.
"Derivative works" is a dodgy legal concept in the first place, because every work can be construed to be derivative.

In practice it just gives lawyers and judges a lot of leeway to pretend that they're being consistent when they aren't.
Or he could promise to never hand it over to anyone else again. Who cares about features.
There's a single dot in a line between #include <sys/prcntl.h> and void my_sandbox(void). It is easy to miss, but makes the compile to fail, thus resulting in HAVE_LINUX_LANDLOCK to be never enabled.
If your project becomes complex enough eventually you need tests for the configure step. Even without malicious actors its easy to miss that a compiler or system change broke some check.
Not really - "arguing over where to draw the line" would be a discussion about how a hypothetical new law should treat model weights; however, assertions about whether they are a derivative work (or even "work" as such, in the sense of copyright law - noncreative transformations aren't copyrightable works, no matter how much "sweat of brow" or money they took) is a discussion about where the old copyright laws have drawn the line, and the "should's" don't matter there, it's about how the courts will interpret the precedent, and at the moment they haven't said that they are derived works, and while they could declare that, there are all kinds of arguments why they also might declare the opposite.
Sam Altman has been removed as the owner of the OpenAI Startup Fund
Yes and no. OpenBSD uses four primary repositories: ports, src, www, and xenocara. CVS change announcements are merged for all but ports and go out on two mailing lists: source-changes@ and ports-changes@. Patches are discussed on tech@ and ports@ (sometimes also on bugs@). Also, some key software such as OpenSSH, OpenSMTPD, etc. is developed out-of-tree and lifted into the main train when appropriate. I am not a developer, but I do follow development somewhat closely.
I'm not the person you asked, but say you have 10 TB of logs.

Assuming 3 GB/s SSD, 10 SSDs, and a compression as you suggested of 10x, a query for finding a string in the text would take 10000 / 3 / 10 / 10 = 33 seconds.

With an index, you can easily get it 100x faster, and that factor gets larger as your data grows.

In general it's just that O(log(n)) wins over O(n) when n gets large.

I didn't take your Bloom filter idea into consideration as it is not immediately obvious how a Bloom filter can support all filter operations that an index can. Also, the index gives you the exact position of the match, when the bloom filter only gives you existence, thus potentially still resulting in a large read amplication factor of a scan in the segment vs direct random access.
> It’s a nightmare to handle and use

Quite the opposite, IMHO. Juggling dozens of PRs across many repos for a simple change is the definition of a nightmare.
I've invested in over 100 startups through syndicates on AngelList in the past few years. It's not possible for a syndicate lead to steal the money. AngelList collects directly from the investor and wires directly to the company. Plus I've been paid out 6 times from exits.

But you can definitely make bad investments, just like on Robinhood. Except in angel investing, odds are you're never going to see that money again (like 1 in 20 startups makes it).

Also try to remember that you and the syndicate lead are most likely a tiny check to the company, so you aren't getting information rights. You're essentially just along for the ride. Buckle up.
SEEKING WORK | Remote | Raleigh, NC, USA

PhD (in criminal justice), and with my background mostly focus on mathematical modeling in the public sector. This includes program analysis (I did X and want to see if it made Y go down), forecasting/machine-learning (I have won several prediction competitions by NASA/NIJ), and optimal allocation (integer linear programming, GIS, and network algorithms).

Doing this work you pick up a bit of over tech along the way, so I do have competence in front end and back end. So if you wanted a javascript app that queries a backend database instead of your current Tableau dashboard, I could do that. Or help design a PHP or static website to show your groups work. Or translate SAS code to python. Or help optimizing large queries for data analytics workflows.

Most of my work is small fixed contracts, ranging from $3k to $80k in my career.

LLC Website: https://crimede-coder.com/

Personal Portfolio: https://andrewpwheeler.com/c-v/datascience-portfolio/

Contact: andrew.wheeler@crimede-coder.com
I'd be much more comfortable if they were standardizing around react or something. What is the advantage of this being a built-in feature compared to a lib for folks to actual use first hand before proposing it upstream?
Also that when dynamically linking A against B, A apparently gets free reign to overwrite B.

It sort of makes sense, since at the end of the day it could just be statically linked or implement B's behaviour itself and do whatever it wants, but it's not really what you expect is it.
In that particular case, simply distribute the DLL with the source code. Microsoft lets you: they even have "redistributable" in the name!
> merges hidden backdoor binary code well hidden inside some binary test input files. [...] Many of the files have been created by hand with a hex editor, thus there is no better "source code" than the files themselves.

So much for the folks advocating for binary (driver) blobs in OSS t support otherwise unsupported hardware.

It's either in source form and reproducable or it's not there.
Some reporting has indeed the motivation to inform people that might want to have a critical position on laws like these. When does it pose flamebait and when does it not?

Very similar question about how it can or can not be determined whether a statement is motivated by hate or not.
Do you mean worktrees? https://git-scm.com/docs/git-worktree
that is because they run in a very different environment than an RC-size car in your living room would
If I was running an airline that had just taken delivery of 737s, I'd be terrified. And very very unhappy.
I think it does matter. Open-source software can still suffer from "enshittification" when there is constant need to generate profit. Fortunately it is open source, so it can be forked when things get bad, but even then there still may be lots of tech debt to undo.
That's a giant stretch. Kraft is a surname. I assumed it was an April fools joke that Kraft the cheese company was making their own cloud (which would be hilarious).
from what I've heard, git become much friendlier with monorepos in recent years because of microsoft involvement. Windows repo, pretty sizeable, is now using git, and it supposedly works even without strange things like vfs for git.
>> Apple says its latest AI model ReALM is even "better than OpenAI's GPT4

This offers no information whatsoever. It's all corporate bullshit PR. What can they even say? "Our AI is worse than OpenAI's?". In fact to paraphrase Seinfeld, I'd appreciate Apple's PR department (or any company's) to communicate this:

"You should see our AI. It's the worst. Oh, yeah. It's the worst. It's the absolute worst there is. Whatever problem you've got, it'll be worse after you ask our AI. Yeah. It's just a... It's delirious. The AI's delirious."
Radio Caroline is definitely an interesting bit of history, they alone survived the Wilson government's attempt to bring offshore broadcasting to an end and carried on for decades on and off despite numerous challenges including a shipwreck. After their original ship went to the bottom of the North Sea they managed to acquire a much stronger ship that was out of service due to the Cod Wars and it's still around today, albeit in pretty urgent need of dry-docking (there's a fundraiser going on for that at the moment). They were eventually subject to an armed raid by the British and Dutch governments in 1989 and while they were broadcasting again shortly after this pretty much destroyed the clandestine shore-based organisation that supported the station, and after that a combined effort of harsher legislation and a grounding on the Goodwin Sands put an end to Caroline's offshore career. As the article says though they're still around today, ironically enough from the old BBC World Service medium wave site on 648 kHz relayed from the ship as well as the usual digital places. You can visit the radio ship too but it's moored out in the sticks on the River Blackwater.

It feels like there's still a bit of interest in unlicensed MW broadcasting in the era of cheap SDRs; I wish Ofcom would open it up to hobbyists more legitimately, the few remaining British MW stations are due for the chop soon and it'd be a better use than just letting the band fall silent in my opinion.
An attack would look something like:

1. A new "test" is added to the xz-utils repository, and when xz is being built by a distribution such as Debian, the backdoor from the "test" is included into the xz binary.

2. The backdoored xz is distributed widely, including to a target vendor who wishes to from a Debian development environment compile a kernel for an embedded device that is usually used in a specific industry and/or set of countries.

3. When backdoored xz is then asked to compress a file, it checks whether the file is a kernel image and checks whether the kernel image is for the intended target (e.g. includes specific set of drivers).

4. If the backdoored xz has found its target kernel image, search for and modify random number generation code to effectively make it deterministic. Or add a new module which listens on PF_CAN interfaces for a particular trigger and then sends malicious CAN messages over that interface. Or modify dm_crypt to overwrite the first 80% of any key with a hardcoded value. Plenty of nasty ideas are possible.
It's still the wrong way to go about things. Tests are there for a reason, meaning if they fail you should try to understand them to the point where you can fix the problem (broken test or actual bug) instead of just wantonly distabling tests until you get a green light.
> Adopting to a new world in which they must onboard new tools to assess climate risk is like

But what exactly are you even asking the banks to do? A green company suffers from the same climate risk as a regular company. Yes, a loan to a green company might reduce the global climate risk, but do you see how you've got a prisoner's dilemma here? A bank that gives a green loan below market rate is basically subsidizing the green transition. That's laudable, but that bank has to compete with other banks that don't make such subsidies.

It almost feels like stating a truism: subsidies should come from governments, not from for-profit corporations.

Maybe you deplore the whole "for-profit" thing, but that's a dangerous direction to go to. It has been tried before, a number of times, and it did not look that rosy in the end.

It's best to work with what you've got: people do business to make a profit. They are not hell bent to destroy the world, but they don't have a motive to save it either. Let them do business, and we as a society we'll take care of saving the world via government action, or via charitable NGOs.
These open source projects have a good reputation and high standards because the developers freely volunteering their time care about the project. Forcing these developers to give their projects to Big Corp may not be the big improvement you are imagining.

Software may have backdoors, I'm not convinced this couldn't have happened if a large company was managing the product. AFAICT, open source software has a better security track record, in general.

IMHO, if it is anyone's job to look for and prevent these kinds of backdoors, it's probably companies like RedHat and Canonical. They bundle the tools with their products and they charge money for support.
Care to enlighten how you come to such a knee-jerk reaction given a highly critivcal observation? What obvous are we missing?
I agree with you but on HN there is always someone defending the bosses. I find it less frustrating defending the bosses preemptively so I can see what people better informed than me come up with.

Thing is, bosses aren't going to lose one cent. Wanna bet?
The linked article is gently trying to shift the blame to factory floor workers.
Painting over damaged rivets is surely deep into criminal charges territory?

Mistakes happen but that’s pretty intentional