skysight-inc/HackerNews huggingface dataset:
I happen to use a few of their cameras, and they generally work as advertised (satisfied Kickstarter backer for OAK D and OAK D lite, probably going to buy the OAK D pro at some point). But, while I did indeed pay less than 250 for them individually, their current active depth offerings are $350(and while my oak d is fine for my lit, varied environment, I do often wish it was a little more accurate). I thought the Lite was also around $200 but it's actually $150 as you said. It's a pretty good little platform for the price. Be sure to check out the experimental repo too : https://github.com/luxonis/depthai-experiments/tree/master/
So I bought pocket cast in 2015 according to my Gmail history. Do you know how to activate a legacy app? Thanks!
Note that none of these steps require the attacker to have any code in the kernel. The kernel patchset is completely orthogonal to the possibility of this attack, and seems to be benign.
> as a technical cofounder, I would highly recommend getting a business cofounder to handle fundraising, sales, and partnerships.

But your business cofounder would need to show the ability to be a pretty good sales leader and a sales person with a very impressive rolodex. Effectively you're looking at/for a CRO (chief rev officier). These kinds of people are basically working at enterprise software firms because sales people don't care about the product and can effectively sell anything.
Yes, our kraft CLI tool (https://github.com/unikraft/kraftkit/) definitely has a clash with KRaft .
Talk to YC. The application process is a core business function there.

info@ycombinator.com

Good luck.
I think in a centralized environment (workplace), it could be argued that immediately triggering all the build failures and having good hygiene in cleaning them up is actually not a bad thing. It really depends on how that's set up.

And how is sparse checkout worse for discoverability? With multiple repos it's even harder to find what you want sometimes if you are talking about 100's of random repos that aren't organized well.
I won't say it's the worst one (assuming the attacker's private key is not public), just one of the most interesting ones in regards to the social engineering, pressure applied, code hidden in the test files etc.

I would say it's definitely the most interesting one we know about so far :)
Hi, Alex here from Unikraft, that's right!

You can find more information about Unikraft here:

- https://unikraft.io -- The Unikraft Company

- https://unikraft.org -- The open-source project

- https://kraft.cloud -- The Millisecond Cloud Platform based on Unikraft
I rather take a subscription over ads
I use Apple Podcasts. If I were on Android, my choice would be AntennaPod.
Rust developers at Google twice as productive as C++ developers
Yes, Overcast is iOS-only, though the developer does allow the iPad version to run on macOS and visionOS and will fix bugs. An Android version (or anything outside the Apple ecosystem, really) is explicitly not planned. He has mentioned that multiple times publicly.
GitHub – josh-project/josh: Just One Single History
This. Over and over.

Founders also underestimate the degree to which good technologists who’ve worked at several startups also understand the business.

I’ve watched friends who are CTOs get in to the same conflicts over and over with founders and product owners.

The founders and product owners throw out 10 different ideas and push small dev teams to execute on all of them. There’s no focus or strategy, it’s just throwing ideas against the wall.

Expensive-to-maintain ideas with no uptake are held on too for way too long.

Expensive-to-create but sexy ideas are prioritised over cheap-to-create ideas with obvious potential for customer retention or up-sell.

CTOs are often the ones taking about disciplined experimentation to find product/market fit against head-in-the-clouds founders with a vague, uncommunicated vision.

I repeatedly see founders ignoring solid advice until, if they’re lucky, experienced boards say the same things as the ignored CTO.

So often founders seem to think they’re a fictionalised version Steve Jobs, not understanding that Apple’s success was as much down to gritty, detailed engineering as a single visionary. And of course not understanding that they themselves are usually not visionary geniuses.

These impressions are from a small sample of maybe 10 CTOs, but some of them had the same experience at consecutive startups before learning how to screen companies better.

We need more founders who care about the unglamorous nuts and bolts. Or at least value the people who do.
Overcast has the best audio quality. Volume normalization so all voices are the same volume and smart speed to shorten silences but still sounding natural is amazing.

Antennapod and pocket casts implementations of those features aren't good enough.
> ...non-profit... no one can really stop you from skipping, but it would look bad on you

No it won't. Unless you have obligations.

> Along the same token, you obviously shouldn't steal from the non-profit, or say randomly beat up the customers/clients.

That's unrelated, to say the least. You obviously shouldn't steal from anyone nor beat up anyone, that's not related to this specific case at all.

> Just because you are doing things for free does not mean you don't have social responsibility for your actions.

No. No one forced the society to use the work that somebody was doing for free. And if society decided that it's fine to use it, it's on the society to take the associated risks. Everything else is a good will of the maintainer.
Nobody should bring just ideas. Ideally a non-technical founder would bring whatever skills are required to guide the evolution of the idea. Engineers like to assume product-led growth guided by data, where the external human factors that determine success or failure can be explored in a BI tool, but there are a lot of B2B domains where engaging with customers to understand their business and understand their buying process, understand who buys the software and what their incentives are, is how you learn what to build.
> I wonder whether one could quantify/measure [where ideas originated and entered the mainstream] somehow.

You could probably use something like genetic tracing, if you could come up with a way of fingerprinting free text semi-reliably.

My expectation is there are probably "tell words" (i.e. not used elsewhere or for that purpose) in novel ideas, and you could likely observe these spreading over time, as the ideas carrying them did.

One of the first things groups tend to do is specialize and redefine language / create jargon.
Professional software developers have a lot to do just to get their job done on time and within budget. Having to duplicate all their code just so that people who contribute nothing to the end product can have an easy time understanding it is just never going to be a priority worth addressing.

The problem here is not really the code, it's the reader.
And now for “A Walk in the Black Forest ...”

(Deep cut)
Back in 2010 or so I had a series of meetings with someone about being a technical cofounder for them. I wasn't super passionate about the domain (don't even remember what it was at this point) but it was interesting enough and I had just enough technical experience at the time to think I could pull it off. We had everything figured out in broad strokes until we realized that of the 80/20 equity split, we both thought we were getting the 80. His exact words were "I just gave you this great idea why would I only get 20%?"

Anyone who sees themselves as an "ideas person" as if that is a defining or valuable characteristic is a cancer.
This backdoor resided in git for a year without anyone noticing.

It wasn't until it was activated via the tarball that someone found out. One could easily argue that signed tarballs are more vetted than git commits.
You're talking about games that were online-only where the servers have been shutdown. This is not at all what the comment I'm responding to is about, which is games that rely on a DRM that connects to the internet to validate your installation, meaning that even full solo, fully offline games would stop working.
On Android I switched to AntennaPod. It's FOSS, works great, and I can plug in my Patreon RSS feeds.

https://github.com/AntennaPod/AntennaPod
Hi sounds interesting, but I'm not into using external services for RSS. Yes, I do give up on sync this way, but I usually don't need syncing anyway.

Good luck with your service!
I was initially thinking that one of the core non-tech causes of the was the single-person maintenance mode of the xz project.

But you have a point. As an agency you can seed two jiatan's to serve diligently for a couple of years following the strict 2-person code reviews and then still poison the project. On the other hand, if the xz build process was automated and transparent and release artifacts were reproducible and verifiable even in this poor condition of xz-utils as a project it would have been much harder to squeeze in a rogue m4/build-to-host.m4
prctl, not prcntl
With all the GPU mining, they can have heating !
So, we actually have "Enable auto save (for local files only)" section, and two options:

- an "Auto save document when the active document is losing focus"

- Auto save interval

So I guess we are already covered :-)
No justification for defining it as cryptocurrency.

> Trump Media is instead a cryptocurrency. As with bitcoin, people buy Trump Media not for future cash flows but because: 1) they expect its price to rise, and 2) they feel an affiliation for the asset.

1) stock

2) meme
Most people arguing one way or the other are in such a small code base that they don't face the problems the argument is really about in the first place. If you only have a a million lines of code then by all means use a monorepo as you probably aren't facing the downsides that make people reach for a multi-repo solution anyway.
Honestly I don't even believe you need a decent idea. There are thousands of boring businesses, including in software, that make a ton of money.

Pick something that already makes money and do it slightly better. Idea not needed (other than "do it slightly better" which IMO is much more in the "how to run a business" camp than the "ideas person" camp). Forgive the ideological soapbox/tangent but this is really what capitalism is all about. You find a way to do something slightly better, faster cheaper - maybe all three - and you can have a successful business.
I'm showing my age here, but making version control public is a relatively recent thing; I can't think of a project before OpenBSD that did it, and it wasn't until SourceForge that the idea of projects just having source repos out there and visible became a popular idea, and that was like '99 or 2000. Most projects would just release tarballs and have a CVS repo that was limited to "approved" developers. And that was well after all the big distro build systems developed.
Kaia Health | Analytics Engineer | Remote (Europe, US) | Full-time

Kaia Health is a digital therapeutics startup that helps patients combat chronic musculoskeletal pain and improve musculoskeletal health.

We're looking for an analytics engineer to help revitalize our data setup. We want to improve how we work with data to make it easier for non-technical internal stakeholders to get clear and accurate insights into the impact and business performance of our products.

We're looking for someone who values solid software engineering practices (e.g. testing in data transformations) and also is happy to collaborate with non-engineers to understand their needs and to educate.

Some experience is required, senior is preferred.

You can apply here: https://boards.greenhouse.io/kaiahealthsoftwaregmbh/jobs/439...

I'm the hiring manager. Feel free to mention that you're coming from HN anywhere on your application.

Stack: dbt, Airflow, Snowflake, PostgreSQL, AWS
If you're using a 64 bit integers because you've got some super high precision math you need to do over an enormous space of addressable numbers, like maybe you're firing unguided kinetic energy weapons at enemies on other planets... sure, use big numbers. I'm sure you've got some clever libraries able to do such things reliably, and I won't question why you're using json as your serialization format.

If you're using 64 bit numbers as a high cardinality identity that can be randomly generated without concern for collision (like a MAC address with more noise) -- well, that's an identity and doesn't need to have math applied to it. For example: "What's the mean IP address that's connected to cloudflare in the last 10 minutes" or "what's the sum of every mac address in this subnet?" are both nonsense properties because these "numbers" are identities not numbers, and using a data type that treats them as numbers invites surprising, sometimes unpleasantly so, results.

Of course, because these are computers, all strings are ultimately numbers but their numberness is without real meaning.
That's because a toy engineering project is still an engineering project and will be way more work than you think it is, no matter how much work you think it is. It's hard to maintain that energy for long when it's not your day job (sometimes even when it is, tbh).
Thank the lord Lasse wasn’t maintaining the nuclear codes.

In another thought, I hope the nukes aren’t on a rolling Debian distro.
Arduinos are like $3 if you buy Chinese replicas with the old bootloader ;)
Software development, as we understand it today, is going away. Absolutely. Note, I didn't say software is going away, but the methodologies currently used to create software are. Look at every engineering and manufacturing discipline over the past 100 years - they are significantly different today than they were back then, so much so that yesteryear's practitioners would not recognize today's methodologies and processes.

We're at a major inflection point, and those currently in the pipeline learning the old ways are going to be ill-served.
This is the visualization of my employer's Kubernetes deployment.

How did they got access to it? Concerning..
Earth's Mantle Confirmed to Hold an Ocean's Worth of Water
According to this seemingly exhaustive list (https://privycouncil.independent.gov.uk/wp-content/uploads/2...), no royal charters were granted in 1640.
Google's monorepo includes snapshots of everything upstream that Google's proprietary code depends on - starting from the kernel and glibc and core language toolchains, and all the way up to various open-source libraries and modules in c/python/java/whatever.
Missing the whole Fedora timeline. I was emailed by "Jia Tan" between Feb 27 and Mar 27, in a partially successful attempt to get the new xz into Fedora 40 & 41. Edit: I emailed Russ with the details.
Your hiring page is so cool! Love it!
>it has little economic value until it has an application

That's a bit like saying that employees create very little value until a product is sold. Realized value != created value.

It is precisely the lack of competition on this front (research) for decades and the abstract nature of the value created that has led it to be so badly undervalued.
Try logging in (or doing a password reset) with your old Gmail account
98% of product people give the decent 2% a really bad name.
> ketosis was the primary metabolic status for our ancestors for millions of years

Due to food scarcity, not due to abundance of protein sources. The current keto diet is light on fasting and heavy on chicken and steak, which I think is the “fad” portion of OP’s comment. There are tons of negative things about jacking of animal protein intake that do not exist in a fasting focused keto diet.
A "good" side effect of this for OSS maintainers going on, is that now any time an entitled user starts being too pushy or too... well, entitled, they can be given a canned response:

Are you trying to pull an xz attack on me?
The iss jettisoned 2.6 tons without a reentry vector?

That seems crazy to me. There was no way to give it a Pacific ocean reentry delta v? Yes I know reaction mass is precious in space, but, come on.
If you've worked on building any simple little object you know King Murphy sabotages all steps. The problem with Mr. Murphy is that he doesn't tell you when he's going to strike. Having a Murphy Larper would at least give you an insight to the processes that are supposed to thwart Herr Murphy.

I'm not sure what a Process Inspector does. Do they work nights and weekends? Are they protected from reporting failures in process? Who holds responsibility for every process failure?
it did send do not track headers thought...
It does help on the social/psychological side. If you, as an open source project maintainer, have a policy that such rudeness is not acceptable, you are much less likely to become a successful victim of a social attack like this.
Instant availability is potentially viable but working for free is a definite no-go for probably most people.
> 've been hearing that my entire life, and I'm about ready to retire.

Yes, and over the course of your lifetime the value of your savings and your buying power has been systematically devalued. You might not be worried, but clearly the sociopolitical system is feeling the strain.

Perhaps there's not much we can do about it now, but being in denial about how we got here doesn't make any sense either.
You are missing something - a bona fide architectural practice. Architects who can't code are worse than worthless. But - putting AI tools in the hands of good architects is an absolute force multiplier that companies are starting to realize.
Why Threads is suddenly popular in Taiwan
In Cuba, the Terminal Stage of Communism Is a Mafia
The premise of the tool seems very useful: edit debug symbols and assert messages so that source code can be found by debuggers. But this description does not make it clear how this tool accomplishes the whole task:

> Why not fix the binary coming out of the build cache, so it points to the absolute path of the source files?

What is the absolute path? If you had a virtual file system that allowed you to construct a path to any file at a given commit, this would work great. But who does that other than Google? Or if you agree that every developer will check out the same source code repo at the same path, but the you have to have the right commit checked out.

Ideally you would want your binary to point back to your code repo, like SourceLink does.

https://github.com/dotnet/sourcelink
DF's claims isn't that it doesn't have any noticeable effect in performance (in fact in a recent video[0] they claim the opposite when Denuvo was introduced to Assassin's Creed Mirage after reviews were done - it can affect performance and thus because of that introducing it after the fact invalidated the CPU performance metrics reviewers had done) but - at least in the cases i remember - they cannot tell if the issues were due to Denuvo or not.

Note though that in a case where they could test both versions, they did find Denuvo to both have lesser performance and affect frame pacing[1] (though that is for a 2yo game, things might be better more recently).

[0] https://www.youtube.com/watch?v=_LB1lRC4II4

[1] https://www.youtube.com/watch?v=UXZGCwAJpbM
Reminds me of the "no soap radio" joke. Joke being euphemism for collective gas lighting, but typically a "joke" played by kids on each other.

Play is just preparing for the same game but when stakes are higher?

https://en.wikipedia.org/wiki/No_soap_radio
Your account should have the lifetime Plus plan, just log in.

https://blog.pocketcasts.com/2019/09/18/major-new-update/
I actually think AI is going to wreak economic havoc, usher in whole new levels of surveillance capability to completely crush effective political dissent and launder copyright away from small entities to large powerful ones. For your average person, it will be a net loss.

But banning open models won't prevent any of that, it will just make the effects worse and leave people even more helpless to understand or tackle them. And it will remove much of the actual utility AI can provide individuals leaving us with nothing but braindead corpospeak models that refuse to tell you how to sue a corporation and won't even let you generate anything might run afoul of a large entities copyright. Literally worse than doing nothing would be consolidating this mess all under lobotomized corporate control.
that tells me you prematurely split something. I worked at a high scale, high available system with multiple dozens of teams, each with several repos. If we had to sync changes across repos, we joined the repos because they were, well, joined. In the early days, we had shared libraries and keeping those in sync was a pita. Then we realized we should not be doing what we were doing.

The flow should be: (1) update a library and release it, preferring backwards compatible changes or a new major version; (2) code that wants/needs the new functionality updates the usage at its leisure. If you are having to keep multiple repos "in sync" with each other, yes, you picked the wrong abstraction. If the downstream repo(s) need to always be on the latest and greatest version of the library, the library code should be vendored with the calling code.
Open Source is a real tragedy of the commons.

Everyone wants to consume it. Nobody wants to participate.

People are upset when a company like Elastic or Mongo switches to a "non open" license. But at the same time, the market doesn't leave much choice. Companies won't be incentivized to contribute to projects when they can freeload. The market actually wants vendors, it doesn't want to participate in open source. But they don't want to _pay_ for vendors.

So I think its entirely appropriate that anyone / any entity that creates "open source" to change their license, set limits, say "no", and let users be damed unless they're willing to make it financially appealing. It's literally "Without Warranty" for a reason.

Letting your passion project becoming hijacked into determining your mental health is really depressing. F' the people who can't get on board with your boundaries, etc around it. They deserve the natural consequences of their lack of support.
But in this case he was getting hit by both someone willing to help and then multiple people complaining that things were taking too long. And when you yourself feel like things are taking too long then you’re probably more susceptible to all this.
'We've had enough': Protests over carbon price hike halt traffic across Canada
I'm basing this on Github's activity archive as queried through Clickhouse - which is much harder to fake than git commits: https://play.clickhouse.com/play?user=play#U0VMRUNUCiAgY3JlY...

See the writeup here: https://til.simonwillison.net/clickhouse/github-explorer