skysight-inc/HackerNews huggingface dataset:
Re 1., we know because we are developers but managers and other less technical folks involved in software development want to know whether it's safe to use things, even if SSH is not involved.

Re 2., I honestly agree, but I think it's fair to refer to "the XZ backdoor" as the one we know about vs. the potential ones that we don't know about yet.

I also kind of think "we are not vulnerable" might inspire unwarranted confidence. The real answer also needs "(but honestly, we totally would've been if it targeted us)" but this creates a lot of fear that isn't going to help much. (Hopefully though, the existing fear and paranoia created by this attempt will help us push assurances a bit further. I feel the OpenSSL exploits definitely helped push some things forward, too, even if the world is clearly not perfect after all of that.)
We didn't see much evolution of Homo Sapiens in the last 1000s of years.

We had a lot of shaping by selection of existing traits but not that much long term evolution. We're essentially "running on the same hardware" as these pre-house Homo Sapiens.

What allowed prehistorical Homo Sapiens to live for 50 years now lets us do so for 80.
> the use of technology and AI to minimize civilian casualties in guerrilla warfare

The article makes it quite clear this is not what’s happening and not why the systems are in use. They’re being used to generate a target list faster than could be done by traditional methods, and are being used despite agreeing with traditional methods only 90% of the time. They’re being used to accelerate the war, not make it more accurate.
It annoys me to no end that the community has cargo-culted around tokio. Async should also have probably defaulted to single-threaded. Does work-stealing offer that much of a performance advantage over simpler thread per core?
I'm trying to think of a single actually useful thing I ever worked on..
That's kind of a paradox. If people instaflag it, then the chance I will see it is very low unless I'm the submitter.
Statement about the Maintenance of Lzip
Ain’t got time for dat …
I still use plastic bags, the ones I got over the years and they are completely worn out (as in, faded). Use them mostly for return of bottles/cans since they are not moisture absorbant.
The names of the systems are “The Gospel” and “Lavender”! How is it that a Jewish army is using Christian references for their AI killing systems? I don’t think that is unintentional.
Plastic bags here in Norway cost around 5 NOK (0.5$) and a reuse bag costs 10 but you get 1 back every time you use it.

You kind of have to explain yourself to the cashier if you want a plastic one.
I believe the laws of war as commonly understood authorise civilian casualties insofar as they are "proportionate". 1:20 is technically a proportion, but...
Yea, the whole “Amazon takes forever to deliver” thing is something I literally _only_ see mentioned on HN, where for some reason it gets repeated a lot.

In real life, I can’t even remember the last time it took longer than 2 days to deliver something to me, and I’ve never heard of any of my friends, coworkers, or acquaintances complain about it. Everyone I know still loves Amazon because of how fast it is. There’s a weird disconnect here for some reason.
I haven't at an airport, but I have at freestanding ones. Having fuel delivered to a tank with a pump isn't really that involved as infrastructure goes. You're just buying the fuel wholesale instead of retail. You don't need the same size underground tank as a gas station, but you can hold more than enough to fill up whatever you need to from a fleet of cars. As for why they don't let customers use it? This is obvious. They'd rather overcharge you. And they know nobody's going to do something dumb at the pump if it's only their own team doing it.

Plus, often when I rent a car, it isn't full. I'm sure they still charge the person "to fill the tank," but they don't actually fill it, so the total they'd have to store on-site is even less than if they were actually filling the cars.

I also assumed they had somewhere to store siphoned fuel, because every car I've ever driven has at least a gallon before the needle moves off of "F," but rental cars drop below F immediately. I've always assumed they were siphoning out a gallon or more any time someone did return the car all the way full.
There are actually a bunch of external tools that offer declarative schema management flow. Personally I agree that that the overall flow should be external to the DB, but it would be useful if databases could offer more built-in functionality in this area to make these tools easier to write.

For sqlite in particular, check out https://david.rothlis.net/declarative-schema-migration-for-s... and https://sqlite-utils.datasette.io/en/stable/python-api.html#...
Agreed — people choose you because you’re shiny, and to the rest of the world it looks like a family, but watch what happens if you try to give up being shiny.
More of a slaughter than a war at this point.
4.8 Magnitude Earthquake Rattles New York City and Beyond
I felt it in Central NJ, and my wife in NYC felt it as well.

The submitted reports show it stretched from Fairfield County, Connecticut to New Castle County, Delaware.

https://earthquake.usgs.gov/earthquakes/eventpage/at00sbh3yv...
> But as the blocks age and become inadequate in terms of energy efficiency, there's the question of what to do with them – demolish or retrofit?

Huh? Once you fit in new windows and insulation in the form of a thick layer of styrofoam, commie blocks are already very efficient.

I grew up in one and we would maintain 22-24°C during the winter because the combination of insulation and district heating allowed for that at a low price.
Really clear. Recommended.
I have a "human presense sensor" which is a 5GHz radar. It works behind structures, detection is weird sometimes but much better than a passive infrared sensor for this use case.
> Given these two points, I really believe we should not be posting "hey we are not vulnerable" blog posts here because at best they are useless noise (nobody aside of debian or redhat and their downstreams is vulnerable) and at worst false assurances.

Nobody has said this. The post says specifically that nothing on RubyGems is known to use the known backdoor; nobody has made (or could reasonably make) claims about unknown future backdoors. It’s incumbent on you to understand that this kind of announcement doesn’t imply the absence of potential future ones.
Thanks for checking it out, trying to put a new spin on browsing products :)
AI has provided the IDF with a huge list of potential enemy combatants. Then the IDF applies their own thinking re acceptability of related civilian casualties, far higher than "the norm" (ugh). Together, mass slaughter made easy. So no, I don't believe that AI is "minimising civilian casualties".
>>> There have been double-blind tests that show that Stradivarius violins are acoustically nothing special: experts cannot pick them out by sound alone, or may actually prefer other violins.

This is widely acknowledged among violinists. In fact there is a growing concern that the Strads are deteriorating. The vast majority of working musicians have never handled a Strad.
Three "bad" missiles over a five minute period. The hit on the WCK convoy killed the latest 7 out of over 200 aid workers who have been killed in Gaza since this latest war began.
When Xfiniti was the only broadband option in my neighborhood, I was paying a lot for crappy service. Then AT&T decided to compete with them, ran fiber to my house for no charge, and now I have a symmetric gigabit for less money.

Policies designed to encourage this kind of competition should be preferred to some sort of public utility. This can include municipally-owned fiber, with the bandwidth rented out to providers, it can include subsidizing rural broadband, and it can include requiring that providers who are a monopoly in a given area meet certain standards in terms of quality and price.

What I don't want is to backslide into a situation where I have only one option, and if it sucks, well then I'm welcome to not use the Internet. That option being publicly owned is at least as likely to make the result worse as it is better.
ffmpeg is such a joy to use, once you make it over the very steep learning curve.

I'm making some youtube videos where I play through Demon's Souls flipping a coin to decide to equip items or not, and I wanted to have an onscreen coin flip animation and sound effect. With some effort, I created a transparent set of frames for the animation. Then with ffmpeg's filter_complex I was able to add the image sequence as a video stream, overlay it over the original video, and add a sound effect. That's on top of the existing subtitles, audio channel merging, and video resizing/compression. All in a single (long!) ffmpeg cli command.

ffmpeg is one of the true wonders of FOSS.
Sparkling outlets, frequent tripped circuit breakers, electrical fires, power outages, exposed wires, and any other situation involving electrocution risk is known as an electrical emergency. When DIYers attempt to fix electrical issues without proper training, knowledge, and experience, they not only cause further damage to the system but also put themselves and others at risk of electrocution or fire. An ordinary person can't detect and resolve electrical problems with precision and accuracy. When you call a licensed electrician, they provide you peace of mind by fixing the issue efficiently and promptly. Adherence to safety protocols is one of the most important factors that raise the need to hire qualified emergency electricians in Dartford.
You think your wife is going to leave you if you're not learning about the latest tech?
And now you are rightfully wondering about how Chase is using your financial data...
> The US loves throwing poorly determined amounts of money at projects.

The use of Throwing here seems to focus ire on the existence of funding. Poorly Determined then amplifies the effect. Together, they would invite a conclusion that funding shouldn't be.

The remainder hints that may not have been your intent, tho.
Your source is Tehran Times. Have you considered that Iran is the one financing this war and wanting this war and you are quoting it as a reputable source? Also I don’t wanna see any child harmed in any way, and you have to consider the Hamas terrorists are using them as meat shields. The way I see it, the longer the terrorists have power, the more children they are going to harm, Palestinian and Israeli children alike.
shrug most people on HN are professional engineers of some type or another. If you want to make this about "creds", you're free to look up mine.
Every other operating system does exactly the same in regardless to abstracting syscalls, regardless of being UNIX clone or not, GNU/Linux is the exception, not the rule.

If you mean a C based OS ABI, there are many other alternatives, like on managed OSes, IBM and Unisys surviving mainframe and micro computers, OS IPC like COM/XPC/AIDL/FIDL/D-BUS.
If you add the dot to Rust it doesnt break?
Tremor Shakes NYC
Is it possible that a larger aftershock or swarm is coming? How do these things work usually?

Last time something like this happened was 25 years ago…

https://www.usgs.gov/observatories/yvo/news/aftershocks-swar...
Why would backups and restores never work though? The only thing you need to do is save your volumes/mounts essentially? The rest is a bunch of yaml in some docker-compose file for example. How is that "will never ever work"?
Just to clarify: Folks buy them in the US as well, much like you are likely to be able to rent an entire house with a yard. You'd miss this if you, say, lived in small-to-medium sized housing in the US simply because there isn't a lack of land in cities surrounded by farmland. But if you go to Indianapolis and especially Chicago, you can own an apartment. Of course, they might not call it an apartment, row house, or whatever - it might be called a condo instead.
> (Comcast recently quoted me approximately $27/foot to extend aerial fiber along an existing Comcast attachment, on a route with no complications whatsoever, so they can provide me (expensive) improved service. If they’re charging rates like this, then it doesn’t matter where the Federal assistance comes from: one way or another, everyone is massively overpaying.)

I rarely pull up my Xfinity account but I did the other day when I moved and was shocked at how bad the experience was. I counted that it took ~3 minutes of loading + redirects to get me from the login screen to my account screen, and that's on a gigabit internet connection from Xfinity!

I was pissed but then I relized, they have a virtual monopoly in my region and besides paying for Starlink, there are no other options. These guys have zero incentive to make thier website better, because what are you going to do?
It's now 7 km NNE of Whitehouse Station, New Jersey, according to the linked page
The Newest Home-Buying Puzzle: What to Pay Your Real-Estate Agent
Are you asking me if locked down devices are more secure when someone who doesn’t know how to use said device is using it? Really?
I was wondering how there were no family members, old friends etc that could prove his word but that explains it. Quite sad, but also maybe a mental hospital is better than being homeless
>plan to reintroduce xattrs in FFS2?

With unveil(2) and maybe pledge(2), I do not think there is a need for Extended Attributes. To me, all it does is add complexities not really needed in OpenBSD.
My very first full-time job was to adapt a COTS ATM protocol stack to run on embedded devices to power a truck & satellite network. The deadline was 1 year to get the stack running on the hardware, and would be the first of 4 annual milestones related to the project. After about 6 months, I was mostly done the work when I found out that the project was moving to a single release at the 4 year mark.

Ok, not so bad, except that the scope of my task remained the same. The project and my role was funded by the customer for the 4 years, but my deliverable remained the same. My job was to literally do nothing while being available to debug things if needed.
How? Those of us that still remember the days of monopoly telephone, it was glorious. High uptime targets, excellent quality of service, and low cost for new installation because it was the monopolist. Nowadays, try getting Comcast 100 meters outside city limits.
Yes, we really should not mention that AI is being used in genocide as we speak.
Didn’t even feel at all? Was in Queens, NY, strangely a couple of people around me felt it though
A microcosm of US mentality is the number of people who blast RATM's Killing In the Name Of purely for the refrain, "Fuck you, I won't do what you tell me!" and have absolutely no idea what the rest of the song is about. Including the subset of people who fail to realize that the song is specifically about them.
Unfortunate not. My experience using wire toners was mostly in the mid-90s when I was doing cable plant installations.
But that is useful. You use it everyday, that counts.
I am in the same boat as you.

LLMs cannot even solve math problems, and we expect them to do tasks far more complex e.g. software engineering.

Attempts to make them good at math have shown its not easy, and often times sacrifices language quality. How do we expect something that cannot solve y=mx+b reliably for any input >100 to write more than a todo list app?

A lot of companies/investors are just assuming its a training data problem, but we can already produce massive amounts of robust math training data, and LLMs still aren't good at math.

At least this is my understanding, I was doing some research into Kahnmigo and its math tutoring capabilities and went down a rabbit hole about LLM math.
In a previous career as a hardware engineer, I spent two and a half years leading three different projects that ended up being cancelled because marketing realized that they couldn't sell them. These were line cards for an early (2002) racked IP-based DSLAM.

Memory is hazy, and I may get some of this wrong because I left the industry a while back.

One was a multi-port T1/E1 interface card that provided -48V line power to downstream repeaters or CPE. Think PoE but over T1/E1 interfaces at telco voltages and ruggedized to sit in an outdoor metal cabinet with no fans. All components were rated -40C to +85C. I am glad it was cancelled. It was going to be a safety and regulatory certification nightmare.

Another was a multi-port DS3 interface card that did circuit emulation over Ethernet. There were no off-the-shelf ICs that could do everything they wanted. So, we ended up with 4 very expensive FPGAs on the board. This one went into second prototype stage before being cancelled. I'd guess, $200k spent just on prototype hardware.

I can't remember the third project. At that stage I was jokingly known as some sort of project killer.
They used to show the profile picture, not sure what's the current status but there's still a few characters of the email address visible usually.
Like any of the myriad of delusions that have swept through market economies, that's a self-limiting risk.
It's less the airfare than the fact that they would stand out. Fort Meade is a defence installation, people don't just "pass by". Most people in the area would have military connections and be wary of even-slightly-foreign-accented individuals suddenly popping up near critical areas or where heavily-protected personnel actually live.
> Adjustments to make the pipeline automation even more resilient in complete unlikely scenarios.

Hmmm. I don't know the details here but I have seen some junior devs say "that's never going to happen" as a way of justifying fragile code. And sure, maybe that thing is never going to happen. But if you carry on like that you'll end up with 1000 things that are "never going to happen", and then you'll realise that this guy was actually right.

> So why am I being allocated to work on in such waste of time like it?

Maybe ask your boss instead of us...
I use the realtime editing features all the time with my coworkers.
Fleas' 'Feet' Unleash That Spectacular Leap (2011)
I'm so happy he realized this behaviour is not good. I understand that svelte templates are not HTML (but a superset as he says), so I'd like to assume that whatever is wrong HTML should also be wrong Svelte-template-language.

I really don't understand how people can defend using the self-closing div's etc, when this just contributes to the same set of problems they are criticising in the same sentence :smh:

Glad Rich is seeing it the same way and moves forward with fixing this!
Cybercriminal Adoption of Browser Fingerprinting
I felt it in Mass -- I was working on the second floor. My wife was on the ground floor and didn't feel it. From our internal slack channel, this seems fairly common -- people on the ground floor don't feel it here in MA, but higher floors, they do feel it.
Wearable tech: how the human body can help power the future of smart textiles
https://www.nytimes.com/2011/02/15/science/15flea.html?ugrp=...
More sardonic or grimly ironic than sarcastic, but yes.
>Because the discussion is about the ruling on this case by the court. Discrediting the court because of dogma is utterly pointless.

No, the post you replied to was about the 5th Circuit in general.

>What's not fine is criticizing the courts solely because you don't like how they ruled. You didn't even read their ruling. You're just trying to discredit an entire foundational institution because they didn't act in your favor. That is nonsense and an affront to rule of law and a functioning society.

Once again, not what anyone was doing. It is what you are doing about other people's criticism.

>If we're going to discuss the ruling of a court, it is a requirement that we read the ruling and consider the points made. That is not happening here, and I am going to call that bullshit out.

We were discussing the 5th Circuit's rulings in general. I'm not going to belabor this, you can make up whatever you want to justify your posts, that's your choice.
Which fault caused it?
ChatGPT / LLMs really are great with ffmpeg. Not too long ago I wrote a blog post outlining an ffmpeg command I needed (mostly for my own future reference). It almost feels quaint now, given that you can get the same kind of explanation from GPT. I bet if I pasted the command in my article into ChatGPT I would get an explainer that's basically identical to what I wrote.

https://epiccoleman.com/posts/2023-03-19-ffmpeg-mp4-webm
If he was homeless it's almost assured that he had a public defender. An LA public defender is so overloaded that[1]:

L.A. public defenders are carrying workloads that require 4,160 hours of work or more to effectively represent their clients. That is more than double the amount of work hours available in a year, assuming no vacation or sick time is taken.

If I had to work 80 hours per week I'd make a lot of mistakes too. Some attorneys I've talked don't even meet their clients until the day of court. Our public defense system is horribly broken.

1: https://www.aclusocal.org/en/press-releases/los-angeles-lags...
That was eerie! I felt my apartment building start to rock and sway as the walls were creaking. Not something I’m used to as a NY native, and not something I loved to experience 20+ floors above the ground.
I know I'm setting the bar low, but compared to other pieces in that genre I found it well written, entertaining and insightful.
It's common practice for the ultra paranoid to use two firewalls, from different vendors, back to back, for this reason.
>My argument is AI not bad, AI help minimize civilian casualties even in such difficult grounds.

That could be an interesting discussion!

However, your argument actually appears to be "USA did shitty things". And you are presenting it in a way that looks almost designed to incite a flame-war, between this comment and your other one.
The Costco Shoppers putting $2000 gold bars in their carts
Sorry, I grabbed the first link for it from google, because I read this story before and I didn't have the original article, here's where I read it first:

https://www.theguardian.com/world/2024/apr/02/gaza-palestini...

I'll replace the tehran times link now.
Sorry guys, that was me doing a git rebase
It isn't a person.

It also isn't a computer as we were used to.

It's a new thing. Being able to query the latent space of a large subset of human knowledge using natural language is the closest to 'intelligent computer' as we've ever come to.

Yes it is lossy compression, it confabulates the bits that it lost, but it's still useful.
Not to me, and I've been involved in online english communities since the late 90s.

I have heard otaku though.
That’s because HN readers are geographically diverse.

I live about two hours from a major AMZN distribution hub, people I know who live an hour away work there. AMZN is always 5 days.

My hunch is that the criterion for fast shipping is close to “do you have a Cheesecake Factory in your town?”. If you’re in a large city with competitive shopping, AMZN wants to compete, if you live in a place which gets less attention from major retailers, AMZN goes with the herd.

It is no wonder why AMZN has premium service to NYC (Wouldn’t want Jim Cramer to say that AMZN is the slowest shipper) and Washington DC (If your congressman gets fast shipping he thinks his constituents do too) and Los Angeles (otherwise slow shipping from AMZN would be a running gag on all the sitcoms)
NASA picks 3 teams to design the next generation of moon buggy
Or you can just wait it out.

If they are serious, they will follow it up - and you will eventually have to show up in court.
Uh? Colonizing a country and land that isn't theirs inherently violates multiple international laws. A treaty isn't somehow worth more than territorial integrity
The MPEG-4 Visual space was kind of a mess.
Groundbreaking study cracks one of pot's greatest mysteries