skysight-inc/HackerNews huggingface dataset:
When a recipe asks for a cup of butter, they're not actually asking for a cup of butter. American butter comes in one pound blocks so it's likely the recipe developer actually used a half pound of butter rather than a cup. If you actually measure a cup of butter into your recipe you've likely put slightly more butter in than the recipe developer did.

But at least you'll be close. Unlike 1 cup of broccoli.
There are various solution for email signature management. In our latest article we discover the difference between the two major forms of the tool of that kind. Find out how different options operate and which one is more secure.
It's when we met. I was doing my PhD at the time. At the computer lab we had tea breaks when people in different research groups would meet and chat. He was a very interesting person to talk to as you can imagine even by the standards of that tea room.
Complexity is one of the root causes of the problem. The script was added via messy autoconf scripts inscrutable to most people. That is decades old tech which has alternatives.
Creator count probably hasn't gone up per capita. It's just that that one band I liked from my high school can put all their music on SoundCloud, have an Instagram page and a TikTok and be discoverable to people worldwide instead of selling cds they burned and applied inkjet labels to and selling them to other kids at the same school.

I suspect it's more a matter of everyone being more visible, a helping of Dunning-Kruger, and a dusting of narcissism to choose to be visible to everyone because everyone cares.
Open Source doesn't have to come from a startup with a business model based that one open source project.
You can't makes broad, sweeping generalizations like "UK/US type self checkout." It varies so much.

I live in the US and the only place I ever go to where they weigh the items you scanned is Costco. Everywhere else I go (my local Walmart, Target, Aldi, two local grocery stores, and CVS) the self checkout is mostly based on trust with maybe one employee somewhat monitoring some machines. No random sampling.

The only issue I ever run into with the self checkouts is double scanning the product. You do need employee to void items.
>Chip made here is a matter of national security.

Chips made in Taiwan is a matter of national security, or the lack thereof.

Chips made literally anywhere else, including China, are fine; China might blow up Taiwan, but Taiwan can't reciprocate and the west will not fight China.[1]

I say that as someone who likes Intel, wants to see Made in USA come back, and abhors Chinese geopolitical ambitions.

The bottom line that shall not be stated is nobody wants to deal with Taiwan and everyone is happy dealing with China.

[1]: https://www.tomshardware.com/pc-components/cpus/intel-staves...

------

>THE US's military might is the same as Romes

The US military can't do a single thing about a bunch of misguided cavemen lobbing missiles into and stealing freighters from the neighbouring shipping lanes. For that matter, the US military hasn't won a war since WW2.

The numbers might look impressive, but in practice it's vapid. Obama even went on record that the US is retiring from policing the world.

Note: I say this as an American.
> innovation tokens / weirdness budget

I find it amusing that you called it "weirdness budget", but then again that pretty accurately describes the feeling I get when I see someone using a fairly niche DB instead of something like PostgreSQL, or something like NixOS instead of a regular Ubuntu LTS or RHEL-like. Not that it's a bad thing, there's plenty of specific use cases out there for sure.
I agree that grams are inconvenient to use for flours and liquids, so litre/desilitre/millilitre just seems the logical option.

It works for fluids but it is complete mess for any compressible solid (flour), and even non-compressible one that comes in different grain size(salt).

On side note it would be nice to have tabletops with builtin scale...
> It truly is insurance policies all the way down.

The way it has always played out in my lifetime, it is just a few levels of insurance, and then future taxpayers. See Katrina, Sandy, 2008 financial crisis, 2020 pandemic, etc.
Value init can also bite you when there is a big performance difference between "zero all the PODs" and "set a valid flag to false". Also when zero is not a desirable or valid initial value. I tend to like an explicit default c'tor visible at the struct scope or inline init better for a case like the described one than using curly braces at the instance generation.
What impress me the most is not that there is a Wikipedia article. But it's translated in 19 languages already !
3. More maintainers

Days of 100+ notifications aren't easy. Things will slip through
> If a system has been infiltrated, you can't trust any part of it. So it's better to discard any part that has been reached or possibly affected.

systemd! let's discard systemd!
I've never been concerned about spies infiltrating open source projects compared to legitimate maintainers being hacked, even now after this whole xz incident.

I'll put it this way. Let's say a bad guy had a decent budget to spend on paying agents/criminals to break into maintainer's homes on their behalf with a rubber ducky, etc. I'd expect a pretty high success rate compromising their hardware...
A lot of people who don't like musl just prefer not to have the slowest memory allocator on the planet, especially when multiple threads are involved which they usually are in modern code.

I've watched release-optimized builds with musl run orders of magnitude slower than unoptimized builds with mimalloc, and this was on only 20 cores, it wasn't exactly pushing the envelope of big iron scaling.

Even after waiting years for its mallocng, which is better, it is still the slowest. It's no longer just that it wasn't a priority, it's inherent fallout from musl's practice of reinventing everything without learning nearly enough about why other implementations were built that way in the first place.

With memory allocators there were several legendary implementations to learn from. My pick would be mimalloc because it's not just fast, it's also hardened, which seems relevant in a thread about security.

At least once you know this, you can substitute the allocator for your program even if you otherwise use musl. That's common practice when producing static binaries from Rust code.

The problem remains that far too many people just use musl without actually benchmarking their program under a real workload to see just how much they've sacrificed in return for, well, what exactly, because it also wasn't hardening.
Publisher Reinforces Paywall with Sci-Hub Blockade in Germany
Not fallout but increased vigilance is the expected most significant outcome.
Some 5+ years ago or so I listened to a Debian guy his talk about reproducible builds and security, he was stressing the audience to be aware of just happened in a very detailed manner. One of the details he mentioned was glowies having moved their focal point to individual developers and their tooling & build systems.
At least some people who matter have been working on these threats for many years already, maybe more people will start to listen to them; in such case this entire debacle could have a net positive effect on the long run.
"cups of butter" is the wildest measurement I come across regularly in US recipes.

Just... how?

Edit: A friend of mine has just related running across a US scone recipe asking for "5 tablespoons of cold butter". I don't even want to think about packing cold butter onto a tablespoon to get that measurement right!
Cups are only practical for small amounts anyway, such as 2 cups or 1/2 cup.

A commercial sized recipe calling for 10lb or flour or 2lb of chopped onions would be highly inconvenient to measure by cups, even if you did have the necessary set of cups in big sizes (10 cups, 50 cups, etc). Much easier to measure large amounts by weight.
Agreed, but especially in light of recent events it’d be important to know who they are, and that’s not always easy.
That's in Node using Apollo
The way you put it, it would seem odd to me to mention someone's ethnicity unless it was somehow relevant to the conversation.

Without context though my generous assumption is that when they say "Asian driving a Tesla" they mean "Asian-American driving a Tesla" and are lazy rather than racist.
User Research with Humans vs. AI
On a Toyota?
This is not trolling but a legit and sincere questions:

- How many times does Google have to get caught doing such things before people realize that it's time to switch to safer alternatives (to Google)?

- How many products does Google have to sunset before people stop commiting to new Google products?

- When are we going to stop calling Google a tech company, and call it what it is: a surveillance and data collection company? Where products are routinely dropped that don't met that end?
I am wondering if the person who sent the patch to disable systemd reliance on lzma shortly after the release of the backdoored xz knew about the plan. Maybe an agent of a competing entity?
If you want to release your project for the first time as SSPL, go right ahead. You may have difficulty getting adoption however.

It's the "build your userbase on open source, then lock them in" that bothers people.
A Christian revival is under way in Britain
Oh, I thought you meant the taxpayers (ok, they won't be held liable, but are still the most likely to pay for it in the end)
I'm pretty sure I read that it was originally planned to be but they couldn't get GW to sign off on it.
Motive, opportunity, means - and consequences: it is primarily the absence of a motive, and secondarily the likelihood of consequences, that keeps the prevalence of street stabbings way lower that if means and opportunity were the only factors.

The argument against nation-states being involved has some problems: a state can avoid becoming victim to its own work, while its own restraint would not prevent developments elsewhere.
Wow. So for the xz package it looks like they changed the upstream to this (edit: the original maintainer’s personal repo, Lasse Collins) git repo that still contains Jia Tan’s commits: https://git.tukaani.org/?p=xz.git

tl;dr they re-enabled the sandboxing previously disabled by Jia Tan.
I’m sure it matters for baking (which I’ve never tried). But for normal cooking, don’t people just throw in random amounts of everything that are vaguely close to the quantity stated in the recipe? That’s what I do at least and it’s never caused me to ruin a meal. The tolerances really are not that tight. Also, most recipes I see include stuff like “one large onion” that is even less precise than a volumetric measurement.

It’s hard for me to imagine getting out a scale just to be sure I really put in 100g instead of 120g of something. Do Europeans (outside of baking) really do this?
Space is the new 'Wild West.' The EU is dying to step in and regulate
Europe loves a good serving of regulation!
I was gifted a Rice Cooker on my birthday, didn't expect it to that useful in my life
I wouldn't post anything on Facebook (or on social media generally) that could be professionally embarrassing but I also don't generally accept invites from people who are solely professional acquaintances or use it in a purely professional context at all.
I'd be interested in seeing benchmark data. The speed seemed pretty good in those examples.
2. An electric car is very good at knowing at knowing what level your battery will be at when you reach your destination. Range anxiety is not a lack of knowledge.

The EV cannot predict the future like unexpected detours, sudden change of plans, traffic jams on a hot/cold day where you need to keep the AC/heater running for long periods, and so on. A whole state is a big place and many areas have very sparse charger coverage - it took a hundred years to build up all the gas stations we have now. And its not enough to just build charging stations because the electric generation capacity in many area will also eventually need to be increased (not cheap or easy) as thousands and then millions more EV tap into them for power. This is a very big infrastructure issue and it is a bad idea to increase the EV population faster than the its supporting infrastructure can handle.
It may not be quite that simple. Moving an army is no small feat, the logistics required is complicated and could be miserable to try to manage in the Amazon.

If they did manage to get a large enough military force in to catch most of the illegal miners, how much damage would be done to the Amazon just by the army getting in there?
Thoughtworks Technology Radar Vol. 30 is now available
Ye then maybe thanks to them finally we'll have The year of the air gapped Linux desktop.

I dunno what to do if e.g. Debian gets compromized, as in, I can't trust the collective of maintainers.

I assume any Windows machine is backdoored. Trivially proven by forced auto updates.

Maybe air gapping some home computer for sensitive data might be a good idea.
It can also involve deviations in strategy based on the count, particularly with borderline hands.
I think what we need is to legalize abandonware. Abandonware is now something that happens in practice and works because nobody is interested about going after these games and other types of software.

What if a game would become legally abandonware after:
- its company went bankrupt
- it got pulled from (online) stores
- required servers were turned off

After this, the abandonware would become freely distributable but commercially unavailable. Online games and services should also publish server binaries.
Show HN: I made a Notion-inspired HTML email builder with AI autocompletion
That’s Scandinavia though.
The question wasn’t about whether the CIA were the ‘good guys’, nor did I claim anything like that. As an organisation they done horrible things and seldom been held accountable.

The question is whether the phrase ‘US military’ includes the CIA and, secondarily, whether a small CIA office in the WTC towers would’ve made them a legitimate target in international law.

For both of those the answer is ‘no’.

First, the CIA is a civilian intelligence agency and so not considered part of the military. It doesn’t fall under the military hierarchy, and it does not report to either the Joint Chiefs or the Secretary of Defence. In the same way the Russian SVR and FSB are not military institutions either, for what it’s worth.

Second, for the WTC towers to have been a legitimate target they would’ve had to have met the standards of “nature, location, purpose or use make an effective contribution to military action and whose total or partial destruction, capture or neutralization, in the circumstances ruling at the time, offers a definite military advantage”, be justified by immediate military necessity, and be proportional in terms of the harm caused to civilians or civilian property. None of that was true in the case of the WTC towers, even with a small CIA office inside one of them.

I genuinely don’t understand why this is a controversial point.
This was one of my first use cases for ChatGPT - converting recipes into grams. Major quality of life improvement.
How is that disturbing? It takes far fewer hours of labor to deal with a death than to provide lifelong healthcare.
Ok, I was mistaken then. I thought Redis Labs folks created Redis initially.
Technology Radar Vol.30 [pdf]
I'm not familiar with betting in general but is there even a bookie this days? Or is that a company (one of the thousands flooding social media with ads lately)?

It seems, like in other industries, being large helps to weather out such rare events.
You're commenting under a link where commits to the xz-decoder are discussed. Some level of paranoia is warranted.

The binary files look like a sideshow in comparison. Maybe we're lucky the attacker was tempted to hide something in there.
What were the MS analysis projects? The fuzzing was google-sponsored.
Most ports use harbour pilots, so you couldn't just drive a ship into a bridge or other structure and claim it's an accident, but it seems like an easy accident to create (oops, steering broke).

If the ship simply refuses to let the pilot board though, so the port authorities know something is wrong, once it's in port and on route, what do you do? Even if you get the military to blow it up you've got a massive sunk hulk blocking your port.
I'll bite. Wales is a country only in a "traditional" sense, since it does not currently hold the type of sovereignty we require of "countries" in the usual sense. As Voltaire said, "This body which called itself and which still calls itself the Holy Roman Empire was in no way holy, nor Roman, nor an empire.".

Wales, when independent, could reasonably be described as a nation state, being roughly associated with the Welsh people and their culture, language, history etc. But most countries are not nation states! The USA, Russia, and China for instance are explicitly plurinational.

If you think "nation" and "state" are synonyms (along with "country") then it's redundant to use both. If you think that "state" alone might lead someone to think of Alabama or Minas Gerais then say "nation". If you think "nation" will make people think of Cherokee, then say "country" or "sovereign state".

"Nation state" has a specific and well-established meaning, misusing it is like misusing any other jargon and just comes across as a failed attempt to seem part of the ingroup and hence authoritative.

(yes, apparently I will die on this hill)
Yes, I realize I worded this poorly. I emphasized this point because this is what makes it non-free/not meet the Open Source Definition; you cannot retain exclusive right to commercialization. But I realize that was not actually something the parent commenter was asking about.
WebGL2 is faster to use today for GPU performance. WebGPU, however, is in many ways simpler and more flexable. I hope we eventually see good performance benchmarks for WebGPU on GPUs across different devices / architectures.
Yes: https://git.rootprojects.org/root/xz
More racism from western journalism. The headline intentionally makes them sound like 'just another' backwards non-western country when no one is actually threatening such a thing. This and the NK headline the other day sum up the attitude of the west versus the rest of the world, but their world is now in decline and we see them for what they are.
> I wouldn't limit that to OSS projects. How many of them managed to get hired and are working for Microsoft, Apple, Google, Oracle or Amazon?

They don't have to sneak into those companies tho, they just hand over something like a national security letter and do whatever they want while making it clear to the heads of the company that anyone who talks or pushes back will rot in gitmo. Why wouldn't there be at least an equivalent to Room 641A (https://en.wikipedia.org/wiki/Room_641A) in every major US corporation that deals with massive amounts of people's sensitive data and communication?
I tried poetry for the first time last night and it was honestly a breeze to get set up and felt much more full featured than pipping about with a requirements.txt
Leigh Day Solicitors
Great comment. Made me pause to think
Older British cookbooks - some of which were passed down to me in the family - also use cups. Sometimes volume measurements are easier and cups are fairly handy. Quite a lot of standard issue mugs in the UK are cup-sized, or roughly.

However, in contradiction to least one remark about the universality of cups, they are not. British cups are, like US cups, half a pint, but British pints are larger. A British cup is 10 fluid ounces while a US cup is 8 (or thereabouts, I am not sure how standardised it is).

So I have to remember to adjust by a factor of 20% when working from a US recipe in the UK, or just convert to weight.

Where I live now a "cup" is typically 200ml unless I am measuring rice into a rice cooker.
There's no law in the U.S. that you must use imperial units, and I'm not aware of any serious professional that does.

It's also such a silly argument coming from the brits who swap their units almost randomly: https://ibb.co/0cB4tgd
> imho it depends on the vuln. I've given a vendor over a year, because it was a very low risk vuln.

But why? A year is a ridiculous time for fixing a vulnerability even a minor one. If a vendor is taking that long its because they don't prioritize security at all and are just dragging their feet.
Yes, it's an ideological type of thing. Meanwhile, most of the same people don't mind using closed standards like HDMI or kinda proprietary software like Android.
The odds did tighten up after Leicester won the Premier League though. You couldn't get 5000-1 on say Watford winning in 2016-17, the best odds IIRC were more like 500-1.

It seemed like bookies really did adjust their expectations or their risk appetite for long-tail events in this market. And they were probably correct to do so.
The captain can be fired, sure. Pay anything? Extremely unlikely. The liability for accidents stops at the company, unless there was a clear intent from the captain to cause the disaster but now we're in criminal court.
The caption to the first video is misleading. That building is in Hualien, not in Taipei.

https://maps.app.goo.gl/8cErBHJXBa5ynyVy9
When I was a kid some of my neighbor's trees occasionally had papers around them too. Might even have been the same kind of paper.
Because it creates a potential financial incentive to make sure they die.
But there are a million times more “sedan” cars than boats, traveling a million more miles.

An 18 and a 78 year old just killed two different sets of four people a couple weeks ago in SF and near Seattle. The 18 year old totaled his 3rd car in less than a year driving far above the speed limit.

https://www.cbsnews.com/sanfrancisco/news/san-francisco-medi...

https://komonews.com/news/local/renton-deadly-multi-vehicle-...

Edit: to respond to below, it depends what you count as damage. Do you count all the deaths and injuries of all auto vehicles? There are 40k+ deaths and many more injuries per year in the US. How about the effect of car centric designs on kids not being able to roam around neighborhoods? Of course, it all gets abstract very quickly, since you also have to start comparing benefits, but there are very large systemic effects (and just the same with huge container ships of course).
One thing we're desperate to do in our team is to somehow feed all of our Slack history into an LLM and ask it questions.

There are many decisions, reasons for those decisions, and business logic lost in Slack channels. Slack search isn't nearly good enough to surface them.

I can't count how many times I know the answer is in Slack somewhere 5 months ago but I can't find those messages anymore.

I see this as an inference problem that is solvable by more efficient LLM software and better/more AI hardware.
Location: London
Remote: Both
Willing to relocate: Yes
Technologies: Figma, Maze, Confluence, Adobe, Jira
Résumé/CV: https://www.figma.com/file/ELLpcn2P2hbTVhnrJGnYHb/Vianney-le...
Email: vlemasne@gmail.com

I am a Senior Product Designer with 10 years experience working on large scale projects, with a passion for complex AI projects and startups. If you would like to know more about me, please email me at vlemasne@gmail.com I've worked for Amazon, UPS, Unilever, Codec AI and more.
> LangChain is trying to evolve and keep up with the fast pace of change, it
has become harder and harder to navigate those changes of concepts and patterns as a developer.
We’ve also found the API design to be inconsistent and verbose. As such, it often obscures what
is actually going on under the hood, making it hard for developers to understand and control how
LLMs and the various patterns around them actually work. We’re moving LangChain to the Hold ring
to reflect this.
The Solution of the Zodiac Killer's 340-Character Cipher
Very fascinating read.
Running xz in a sandbox would not prevent an attack that causes it to modify source code in a .tar.xz that is being streamed through it.