skysight-inc/HackerNews huggingface dataset:
I would reject anything that isn't self-hosted out of hand because: (a) you never know if that kind of company is going to go out of business or get bought and get shut down or change for the worse and (b) your relationship with your customer is the most important thing.

There is no problem moving a self-hosted auth system into the cloud as you can move it there the same way you move the rest of your application.

Circa 2001 I built a "user management" library in PHP which was inspired by this

https://philip.greenspun.com/doc/index

that depended on an "auth module" that was maybe 50-100 lines of code in most programming languages so there were some screens for logging in, email verification, changing your passwords, etc. and also an administrative interface and system for sending both transactional emails and marketing blasts, it all worked pretty well for 350,000+ users. The rest of the application could be written in Perl, Java, ColdFusion, ASP, WiTango or any other system that supports cookies and mysql database access. The vision was that one could build a "portal" by modifying best-of-breed blog, forum, and other software to use my auth module.

I used it for quite a few sites but never got any uptake on the open source project, I think people just didn't agree with the vision.

I didn't see anything similar come along until 2013 a bunch of "me too" companies came out with user management systems that worked as a SaaS which struck me as absolutely insane because of what I said the in the first paragraph but these had a huge amount of uptake for reasons that baffle me completely. I guess some people don't find business interesting enough unless it has an element of Russian Roulette.
Ask HN: What if the NSA is Satoshi Nakamoto (anagram of I AM A HOST TO NSA OK)?
They, and more broadly the US defense/intelligence orgs at the time were working on things to enable covert communications and commerce. Such as encrypted messaging apps, and TOR. These tools can be useful for supporting agents.

The NSA had the capability, and the motivation. How plausible is this theory?

There's also the anagram

I AM A HOST TO NSA OK

And this paper from 1996: How to make a mint: The Cryptography of Anonymous Electronic Cash,
Laurie Law, Susan Sabett, Jerry Solinas,
NSA Office of Information Security Research and Technology,
Cryptology Division, https://groups.csail.mit.edu/mac/classes/6.805/articles/money/nsamint/nsamint.htm
Servo + Cycloidal or Harmonic gears are usually the way to go, but to get them backlash-free is hard (or expensive, if you're buying). Once you got that down challenges include:

* How rigid are the links between my joints? Plastic will wobble, metal is better

* How heavy is my arm and how does that limit its movement? If you go for stiff metal castings, you add weight you need to move. The lever arm relative to the base can get really long

* Motors are heavy! Ideally you can mount them towards the base, but then you need drive shafts or belts, which again add flex. (See KUKA arms which have motors 4, 5 and 6 on the elbow often)

* How much payload do you need to move? 5kg is already challenging in ~1m arms and if you need to move it fast the problem gets even bigger.

* Where do you run your cables? Internal is tricky to build, external can get you tangled.

And so on. When approaching this you get a totally new appreciation for biological arms which arae insane in most aspects except for repeatability. And on the software side you can enjoy inverse kinematics :)
Improving Code Reviews with Storytelling
Check out ROY4L's sites: https://ytmnd.com/users/ROY4L/sites

My favorite creator on YTMND
I've run / worked on two 7-8 figure early stage products on a handful of Heroku dynos, a medium sized Postgres, and RabbitMQ + workers for background stuff. Also cron jobs, ElasticSearch, and a few other things. You can get pretty far with basic infra if you don't have demanding computational needs. I really feel like making devops complicated and using complex setups on AWS/GCP is unnecessary for many startups.

I'm currently running a few small projects on Render and migrating one from Heroku to Render to save a few bucks.
> and the other IC's I do talk to (who don't know I've been in other non-IC roles before) act like I asked the biggest boat rocking question ever and I'm putting a target on myself.

That tells you much about the culture of the place. The other ICs know that you can't ask questions like that - they know that not only is the place dysfunctional as far as the sprint cycle, but it's vengefully dysfunctional - management will get you if you point out their dysfunction.
How much of this is due to economies of scale as opposed to slave labor/cut corners though? Is it just because of cheaper lithium?
The big worry for carmakers: what if the EV slowdown is not a blip?
Wolf: Large Language Model Framework for CXR Understanding
Thanks to the author's previous post, I instantly recognised the `eyJ` prefix as the start of a JSON object!
base10 can be awkward to work with for large data, one can also consider:

base8 in numeric mode: 8 input bits -> 3 digits -> 10 output bits, 25% overhead

base32 in alphanumeric mode: 5 input bits -> 1 character -> 5.5 output bits, 10% overhead

I would prefer base32 out of these too, but it's interesting that even base8 beats base64 here.
BYD hands back top EV seller title to Tesla after sales decline
A popular project with release-only distribution is Lua. I don't know whether they have proper source control, but even if they do, AFAIK it isn't publicly available.
The agile-industrial complex came from Scrum and its certified trainers, and its imitators such as SaFE, not Kent Beck and XP. Kent disappeared for a while to raise goats in Oregon, then worked for Facebook and other companies (as an employee). He’s the last person you should be blaming for what Agile’s become.
Not surprising, unfortunately. You'd think malicious actors would be nice to people they're trying to deceive. But after watching a few Kitboga videos, I learned that they more often yell, abuse, and swear at their victims instead.
>Original Pirate Material

>You're listening to The Streets, lock down your aerial

https://www.youtube.com/watch?v=22U2LLVRwtk

Radio version, censored lyrics - likely safe for work.
Many elimination diets will help you lose weight. The main difference is sustainability over the long-term.
Well, they even have the right abbreviation :-)
I watched a few open source projects I was a part of move from Slack to Discord. Slack wasn't a great fit IMO, but Discord has always felt much worse to me.

I'm not a gamer so I only used Discord for those open source projects, maybe it'd be different otherwise. It always seemed that most of Discord's efforts went into new features rather than keeping things stable. The constant churn and restructuring of the UI is a huge pain in the butt, and with a larger server we spent way too much time moving around channels and managing automations and rules.
please add the tech stack, not just "software engineer", as there are literally hundreds of different job types in that exact field
Refix proposes an intriguing approach to achieving fast, debuggable, and reproducible builds - a triad often considered difficult to attain simultaneously. Its methodology, emphasizing minimal binary manipulation to preserve debuggability while ensuring reproducibility, introduces a potentially game-changing technique in software development practices. However, the practicality of implementing Refix in diverse development environments, especially those with complex dependency graphs and varying build processes, raises some concerns. Additionally, while the focus on C/C++ is understandable given the language's compilation model, the broader applicability to other programming paradigms remains to be seen. The proposition of modifying binaries post-compilation might also introduce unforeseen complexities in continuous integration workflows. Refix's novel idea undoubtedly sparks interest, but its adaptation to the multifaceted landscape of build systems calls for a thorough examination of its implications and integrations.
They do, but cheap is ~10.000€ currently for a general-purpose bot with 1.2m reach. You get a high quality machine and software for that. Note that a robot without really good kinematics software is borderline unusable. Also, besides the arm you need the control box which reliably delivers power and commands in real-time. That adds quite a bit of cost too.
Measuring a piece of paper (2017) [video]
An athlete isn't going to lose 10% of their body weight through a dietary change - they're already eating pretty well.

I suppose they could lose 10% through caloric restriction, but that wasn't part of this study.
>The ketogenic diet has been proven to be effective for treatment-resistant epileptic seizures by reducing the excitability of neurons in the brain

>There is increasing evidence that psychiatric diseases such as schizophrenia and bipolar disorder stem from metabolic deficits in the brain, which affect the excitability of neurons, Sethi said. The researchers hypothesize that just as a ketogenic diet improves the rest of the body’s metabolism, it also improves the brain’s metabolism.

I wouldn't be so quick to look for the most reductive/simple answer. Drastic dietary changes can have a huge impact on the microbiome, which can in turn lead to substantial changes in all kind of signaling between the gut and brain (in terms of hormones, immune molecules, neurotransmitter precursors, and much more). There may also be implications for cellular metabolism.

As the quote above touches upon, many mental health disorders may have a component of disruptions to metabolism and energy balancing on the cellular level. Possibly including ADHD, autism, treatment resistant depression, and OCD, in addition to schizophrenia and treatment resistant epilepsy.
My company was on the receiving end of $500k syndicate from AngelList in 2015-16.

Part of the problem re: updates is companies aren’t required to provide them. We’ve had individual syndicate investors reach out to us demanding to see our financials (even though they individually invested only $5-10k). Before they reached out directly to us I’m sure they went to the syndicate lead first.

TLDR: I don’t think it’s a scam. But it’s 100% frustrating that companies don’t always provide satisfying updates because (simply) no one is making them.
Which is impossible at this stage ?
You either die a hero, or live long enough to serve clickbait ads
Something to add to the timeline: when did this avenue of attack become available?

It only happened in the last 10 years apparently.

Why do sshd and xz-utils share an address space?

When was the sshd -> systemd dependency introduced?

When was the systemd -> xz-utils dependency introduced?

---

To me this ARCHITECTURE issue is actually bigger than the social engineering, the details of the shell script, and the details of the payload.

I believe that for most of the life of xz-utils, it was a "harmless" command line tool.

In the last 10 years, a dependency was silently introduced on some distros, like Debian and Fedora.

Now maintainer Lasse Collin becomes a target of Jia Tan.

If the dependency didn't exist, then I don't think anyone would be bothering Collin.

---

I asked this same question here, and got some good answers:

https://lobste.rs/s/uihyvs/backdoor_upstream_xz_liblzma_lead...

Probably around 2015?

So it took ~9 years for attackers to find this avenue, develop an exploit, and create accounts for social engieering?

If so, we should be proactively removing and locking down other dependencies, because it will likely be an effective and simple mitigation.
I had an idea to embed a webpage in a dataurl and convert that to a QR code; the website would only exist on if you snapped the QR Code. I was dreaming of code-golf, demoscene, nft and weird business card applications, but the web-browsers ruined my fun because they won't display dataURL unless you manually copy/paste it into the URL bar.

https://issues.chromium.org/issues/40502904
I believe there is some Crisper work going on to remove retroviruses from DNA. I think there was a promising trial recently with trying to strip HIV from someone's immune cells?

AFAIK it's not mRNA-related technology.
I wonder if you might have a microbiome problem, i.e. you lack the microorganisms necessary to break down certain foods such as fibres. There are now treatments which have been demonstrated to have success in restoring the missing microorganisms that lead to food intolerances, the most successful being FMT.
I probably would be! I tried it seriously with AAA games around 10 years ago. I keep a copy of Steam/proton on my Linux laptop, it does seem pretty good, but it is a thin-and-light so I’ve only been playing simple games on it. I assumed the AAA stuff was pickier
Wow, so with state of the art text compression and error correction, that could conceivably reach 400 megabytes. That'd all my paper books!

Now if I print my text with the smallest readable font I could fit around 500 kilobytes of human readable text on an A4, with shorthand compression more. The same as with paperback uncompressed. The has the advantage of not needing the software, power, a camera or a computer. Just a magnifying glass, good eyes, functioning cognition and light.
Any idea to what extent the problems can or can't be solved by money vs. a limit on maximum quality of radar before needing to break the laws of physics to improve further?

E.g. are the US military saying "yep those are the issues we face too" or "haha our tech has more than enough energy to get around all these problems"?
The flipside of that is companies not bothering to remove it and ceasing the payments to denuvo effectively making the game not exist anymore until someone is able to crack it, and very few people seem to be able to do so. Not that much of a stretch when you look at the amount of abandonware we have.
I have never had a product manager solve a problem for me. Even something like “which file formats does our customers prefer”. I ask 5 times they have meetings with me, eventually I just have to pick.
Exactly, the Japanese initial N.SA haha :)
Remote code execution already implies unauthorized. There is no such thing as authorized remote code execution.
From the post, invested in 100, paid out on 6, some will still be in flight and some have died.

Even if the other 94 are dead, 6% is not horrible.
Yeah, as I note elsewhere in this thread, the OpenSSL "Heartbleed" saga should've taught some lessons, but alas, it's "classic" human nature to repeat our mistakes.
I’ve given semi-popular projects that I no longer had the bandwidth to maintain to random people who bothered to email, no pressuring needed. While those projects are probably four to five magnitudes less important than xz, still thousands of people would be affected if the random dude who emailed was malicious. What should I have done? Let the projects languish? Guess I’ll still take the chance in the future.
This is what I clicked on this link for - a masterpiece shame later albums all got a bit poo
I imagine AI is out there defending it's right to exist where we don't pick up on it's pose.
> like WhatsApp and Messenger which enjoy end-to-end encryption

They aren't open source. For all we know they have backdoors.
This is really informative, helps to put Frank in context, thanks!
No-Console ESLint Rule
Hail KraftCloud!!!!
This brings us more closer to the future of Cloud Computing- Unikernels. Thanks for such amazing supportive open source community-Unikraft. I've been an active member of Unikraft Project on Discord server since last 5-6 months, participating in hackathons and also an applicant of GSoC 2024 Program.
Would love to play with the KraftCloud while working on my toy project and provide my feedback.
I suspect its because health is complicated, but eating less calories correlates with many more healthy outcomes.

>An athlete at 240 lbs

As a contrived example, somebody this big (athlete or not), is probably at an increased risk of sleep apnea. I know of some competitive athletes (with visible abs, no less) that were surprised to learn they have sleep apnea. After a CPAP they felt better. Alternatively, they could probably have lost weight (but no longer be as competitive in their chosen sport.) Some of the risk factors (gender, neck circumference) aren't the typical proxies we use to subjectively assess health as a layperson.

>That's why you have people with a high BMI that are healthier than people with a "normal" one.

This can be true, but it is not generalizable. Last I heard, something like 1% of people with a high BMI would fall into this camp.
In an ideal world, the QR standard would include a specific URL encoding scheme that exactly matches the URL-safe character set. But I suppose there's no real practical way to make big changes to the QR spec now, what with all the thousands of implementations in the wild.
I'm definitely interested in hearing more! I've submitted an application for Research Engineer.
I worked for a startup developing robot arms for a while. What we found was that giving someone a robot arm - even one with reasonable APIs and no cost to them - didn't really help because the hard part is making useful automations. Mostly people spent a few hours playing with the arm and then put it on a shelf.

Every use case is completely different and is a lot of work. Even when you get something working, accidentally shake the desk or crash the arm into something and all your coordinates are broken and you have to start again.

Not to mention the actual mechanics are really complicated - to have a meaningful payload at 50cm reach you end up with really high torque at the base joints (which also need to have super-high accuracy), which requires expensive gears and motors. None of that is cheap.

Then you get to safety - an arm that has a useful payload is also quite heavy, and having that amount of mass flailing around requires safety systems - which don't come cheap.

It's a bit like hardware no-code - you can't make an easy to use robotic arm because programming it is inherently hard. I think the only thing that will change that is really good AI.
If I have to be murdered by Skynet, I want it to be an open source version.
Oregon governor signs law recriminalizing drug possession
Certainly a better way to make money for covert ops than cocaine.
Bottleneck just moved from the panels themselves to deployment. That can happen in any system.
I don't know but losing weight and feeling much more agile it just improves your life altogether, waking up is easier, moving around is easier, everything in general just feels "better" plus your mind feels more focused.
The quality of this tweet and discussion is extremely disappointing. If you read the actual paper, you'll realize that Apple is not claiming to have discovered a magical breakthrough allowing their 80M model to somehow be competitive with 1T+ GPT4 on general tasks.

This model does reference resolution. Given a query like "call the number" and a list of numbered on-screen elements, it'll tell you which elements the user may be referring to. It doesn't understand anything beyond just outputting number(s) referring to elements as such.

You could consider "better than GPT4" to be true in this specific context, but this is the worst kind of truth. Then I've also trained many models that are "better than GPT4", only because GPT4 is not an AGI that is capable of everything in any modality. Windows 95 also shipped with an executable called "calc.exe" that's even better than GPT4
I meant overweight/unhealthy people losing weight would feel better. Totally agree that a heavier athlete wouldn't necessarily feel better with weight loss.
Archiving an entire git repo is serious overkill, and untenable realistically. Debian has 30k packages, if not more, and some of them are the linux kernel.

My responses in these threads has been to the "why not build from git" logic championed here.

You want to build from a reliable, repeatable source. And as I mentioned, that can be git clone -> tarball, sure.
A friend went on carnivore diet (a ketogenic diet) and went from a person who always had lots of anxiety for several years to being much calmer. While that was the most stark transformation, I know 3 others who have made the same dietary change and are experiencing similar, although less pronounced results. They did not start out being obviously anxious, but it is clearly having an impact.

Seeing these results, I made the same dietary change (although I am in decent shape and not overweight). I am seeing similar benefits.
I see that the project appears to depend on Mongo and Redis, both non-open source. However, both have substantially compatible alternatives that a user should use in their place. Even if they did not, having the source code available under an open source license means that users can fork it and swap these databases out for something better. Users can learn from and modify the source code for their own uses. Users can review the source code for quality and security. All of these things are possible when the code is open source. So yeah, it would be nice if it used open source dependencies or at least officially supported alternative open source dependencies, making the application open source as is is still a win over keeping it proprietary.
GPT comment
Also my thoughts. With something like Qwik you get tiny chunks that you only download when needed and are highly cacheable. All automated!
Concur with OP. Either way, you're a gifted technical writer (and you know so much!).

> Not sure about the unrestricted voice, it might get me in trouble

None of your recent tweets (on teams/managers, on tests, on tooling etc) have got you in to any lasting trouble... have they? ;)
Are you talking about the green party in germany or other green party in the USA (i'm not aware of?) or are you talking about 'green people'?

Because if you mean the green party, it wasn't them it was the CDU/CSU shutting down nuclear power plants.

And with germany, Tschernobyl was a generational experience and at least for my mother frightning. I also did a presentation about it and watched Tagesschau from that time: People didn't know how to handle hidden rays and it was very unclear what it meant.

And still today, for certain regions of woods, you need to test your meat for radio activity because we still have issues with this.

Nonetheless, while i'm not particularly against it, the last big projects have failed, the amount of global unifed investment and knowledge needed is apparently not able to form.

With fusion, lets see. If PV and batteries are getting even cheaper and easier to use, you will potentially prefer to put PV onto everything instead of paying for fusion energy but we are way to far awai to tell
Agreed here - Stopping general access is going to not have any impact on well-funded criminals and bad-acting governments.
Same could be said for Ilya once upon a time ?
Hmmm good catch.

But on the other hand, it would be already fantastic to have at least a subset of TypeScript...
Artificial reef designed by MIT engineers could protect marine life
I've got this stuck in my head a bit now and I'm wondering if you have any thoughts on my idea.

I feel instead of trying to encode data directly in individual dots it would be better to encode data as small squares (or overlapping circle) of varying intensities. So a slower symbol rate but with more symbols. Using color you could have a 4D (C M Y K) space to distribute symbols into and probably hit some pretty high densities.

This way your less reliant on how precisely your printer/scanner can place and read a dot (which is not what they're meant to do) and more relying on how well they can produce an image (which they are meant to do)