skysight-inc/HackerNews huggingface dataset:
If you're the idea/money guy and I'm the technical cofounder, your skills must be equal to my skills. If a cofounder could be eliminated without the business ending, they have no place in the business.
Trevrox@gmail.com
The example image linked in that thread is 404ing, and I think I found a working equivalent: https://i.extremetech.com/imagery/content-types/00mAYSZIZNhu...

(it comes from this article https://www.extremetech.com/extreme/134427-a-paper-based-bac... )
This seems very difficult to defend against. What is a project with a single burnt-out committer to do?
Same here, though through eating meat.

The complex people have around weight I find really strange.

I'd be surprised if most of the mental health effects don't simply follow from the realisation that you are in control of your own weight.

Feeling powerless is pretty shit.
I founded Goaler, the first AI-driven platform uniquely blending the science of goal-setting with the art of understanding human emotions. The world is changing fast, and I noticed that most goal-setting tools didn't really help people in a way that felt personal or understood their changing lives. They lacked the personal touch and failed to keep up with the dynamic changes in people's lives.

The main issue with traditional goal-setting platforms was their one-size-fits-all approach. They didn't offer the flexibility or depth to genuinely support users through life's ups and downs. This often left users feeling detached from their goals, particularly in tough times, leading to lost motivation and progress.

Goaler is unique because it uses AI to engage users in conversations, asking them deep, insightful questions to unearth their true goals. This ensures that the goals users set are tailored to their current life situations and adaptable as things change.

The foundation of LLM training is based on a flow of questions for goal setting, taking into account the user's custom responses, their limitations, and life circumstances, as well as support in achieving the goal, also based on the limitations and responses.
I expect there's more data science conda etc. users than users to whom 'Jetbrains survey' even registers.

Not to be negative about hypothesis though, I like it, tried to help increase adoption at my previous job after a colleague introduced me, but that was shortly after Pycon UK 2018/19 and I haven't used it since. Not that I don't think we'd benefit from it, just probably lower hanging fruit atm.
Awesome work! I've been playing around with Unikraft for a while now, support it natively on most of my C++ projects (at https://github.com/sourcemeta) and already deploying a bunch of serious things to KraftCloud. The whole experience is stunning. Very easy to use and VERY fast.
No distribution I know of uses "unsigned" tarballs. Most of them hardcode the hash of the expected tarball anyway.
It's a shame, I think they were shocked with how far everyone caught up to them. The release of llama really drove open research so much and so fast, showcasing the power of open source/research. Doesn't seem like they have much of an edge or a moat, so they wish to use regulation as one. Quite a shame.
And millions in bots and fake reviews.
A company shilling AI powered AI detection tools might not be the most trustworthy source for this kind of information...
"unauthenticated remote code execution" is a fairly standard term for this kind of access.

(https://www.google.com/search?q=%22unauthenticated+remote+co...)
Added you to the list. I will send out email invites on April 5th-6th.
Sacrifice speed and add a gearbox?
> sees themselves as the ideas person

More importantly, most businesses don't need an "ideas person". They need someone who knows how to run a business. You need a total of one decent idea to start and run a business. You need tens of thousands of little hard choices, emails, and sales calls to keep the business successful, and that means getting your hands dirty. Ideas are not valuable.
Because it's often easier, and because they're not "questionable tarballs".

People seem to have forgotten that all of this has been working well without all that many incidents for 35 years. And these archives are published by the same people you trust to run code on your system. It's not like you can't hide this kind of stuff in the autotools soup committed to git. I doubt this would have been caught it – the "sneak it in the .tar.gz only" was just a bonus defence against detection.

I'm not saying using git isn't better, but we also need to retain some perspective on all of this.

This ibus thing for example seems entirely innocent.

The core of the issue is "who do we trust to write code for us?" Maintainers protect us from randos submitting malicious code, but who maintains the maintainers?
I get that there is a reason not to trust those Patches, but I would guess they don't contain anything malicious. This early part of the attack seems to only focus on installing Jia Tan as the maintainer, and they probably didn't want anything there that could tip Lasse Collin off that this "Jia" might be up to something.
To whom are you talking? It looks at first glance like this post is "playing to the crowd", rather than honestly directed towards the person you're responding to.
> You want to open a picture and then move from one picture to the next in the same folder with arrow keys or mouse scroll, again fast and without loading or menus fonctions or whatever ?

And moving to an adjacent folder is not much slower, because it includes a custom folder browser that allows quick navigation up and down the directory hierarchy using the arrow keys.
Regarding the AbuseIPDB link: some of the SSH payloads mentioned in the instances of 'attack' contain the username jiat75.

Doesn't necessarily validate anything though. Could be progressof planting misdirection given that the IP address only started being detected basically today (and the VPS was likely only just setup today as well, if the hostname is to be trusted).

... and that progressof's account is about an hour old.
> Also other linux distros, Fedora, arch, etc. they have the money and should make their software safe don’t you think?

Nope. With open source the user is responsible. It's been this way from day one. Come to think of it, almost every piece of software I've ever used that is commercial has a no warranties and not suited for purpose clause in the EULA... because all the components the vendor used have that clause in the license to the vendor.
I was curious and did a google search, looks like you’re right and this can happen; some anecdotes are terrifying:

> My manager let me know that due to my answers in the culture survey, they didn't think I was a good fit for the company anymore and were letting me go.

> said that my responses to the survey showed that I had a negative attitude about the company and that they wanted to part ways.

source: https://old.reddit.com/r/legaladvice/comments/67j04o/i_was_f...
Better road design. Speed humps, trees on the sides of the road, narrower roads, all of which will make drivers slow down simply because of the design of the road itself. No one's speeding on narrow roads, they'd be too likely to hit something.
It isn't just about the simplicity of Panpsychism, friend, it's about the big things we have to explain if we rule it out that we are so far from being able to explain as to make us look foolish despite all our supposed knowledge. We don't even have a clue how to explain them, despite building atom bombs and space flight and getting close to artificial intelligence. That to me speaks volumes.

Please explain to me how emergence could create new "dimensions" that didn't exist before. Every emergent system we've ever observed creates unexpected complexity __WITHIN THE CONFINES AND STRUCTURE OF THE SYSTEM__. What you're describing is like if a flock of seagulls moved in unity then teleported to the other side of the earth they were so united - it makes zero sense within the framework, and only by ejecting from the framework can you salvage the notion.

I don't perfectly understand all the steps from zero to smartphone, but I have had enough education to have a decent overview, and I can gain that knowledge if I seek it. What will you study to understand consciousness?

The "emergence" you're describing from LLM behavior is a jump in capabilities that occurs due to complexity, but the LLM is just getting better at what it does, it isn't magically developing the ability to levitate researchers due to emergence, which is what "dumb" matter becoming conscious would be like.

The whole "god in the universe" angle is overblown, the root of panpsychism really is this: We and the rest of the stuff in the universe can perceive, feels, has free will, and makes decisions.

I understand it's hard to let go of your humancentric fallacies. The history of science has been brave men having to fight the power to point out the ways in which humans aren't unique or the center of the universe. Particularly if you're Christian, the idea that everything the bible said about man being god's chosen is bullshit must be a bitter pill to swallow.
> because others know that you have it.

Except that cyber weapons like these are

1. One time use
2. Expire upon detection (mostly)

I think this is simply just a tool for offensive action only.
It is kind of cool to be able to program an 8088 with C++14. :-D

I have no idea what to use it for, but hey.
It is likely that the `xpdf` project is developed under source control, but they don’t make the repository public. SQLite makes their repository public, but they do not accept contributions.
I also recommend an APM tool.

An answer people will probably dislike and this may sound careless, but for the large majority of SaaS web applications out there scaling horizontally in the middle/web tier behind load balancers and having a beefy DB server with replication to a stand-by is going to be the answer like 99% of the time.

From a business perspective. when you are operating in the cloud, the cost of having engineers spend a lot of time trying to tune something to run optimally can be more costly than just adding more cloud servers or increasing the size of existing or both. This is time lost that those engineers could be building new features of a product in order to bring in more revenue. Time-box that analysis to like 1 developer day (e.g. equivalent to 8 devs in a 1 hr meeting) and move on with business work. Or just increase resources til the problem goes away, assuming you've solved obvious things like N+1's, etc.
A few years ago when I had to call the Canada Revenue Agency, I got a human immediately. No machine. Just a hello/bonjour and then asking for my info and solving my problem. It was quite shocking given the stereotype that tax agencies suuuuuuuck.
Case in point: https://www.reddit.com/r/lua/comments/1bn6b9k/need_coderdeve...

> Looking to make a Garry’s mod day z server called gmodz would need someone experienced in coding I have the ideas just need someone to make them come to life wouldn’t be able pay right now but once servers are up and get players donating we can figure a split so you can get money and i can as well
As computers became more capable, it must have been a fine line between making a better 'game' and making a more powerful chess engine.
Apple Watch could save swimmers from drowning
Getting the exercises in Programming Flutter working in 2024
You can't distribute the old versions with copyright violation. The problem doesn't go away just because you released a new version.
It’ll be optional so you won’t miss out.
Unikraft has been around for a while I think.
It is very clearly a joke recognizing that the service doesn't actually provide any value that isn't easily found elsewhere for free. But it's also functional, in that those that are paying for it are likely to see that if they want to keep it going they will need to pay more, but if they don't really need it, they can let it die. It puts the choice in the hands of the users without trying to bullshit them that the service is actually worth the cost.
Are you counting jobs posted or total comments?

The total number of comments should rise in a few days or so after as people comment on their experiences applying to a company.
To be clear, I wasn't advocating for flexible decimal points. There is no "dp" parameter in the solution I was proposing. It's just documented in the API that "price" is denominated in cents (or satoshis or whatever you want)
unless they're already at a healthy weight or the diet is crap.
Also what is the particular use case here? Why use it over one of the other kernels out there? I see a lot of 'safe' and 'modern' but nothing showing how it is better/worse than the competition. What are the trade offs here? What do you get with this kernel and what is missing?
Git repos only vanish if they have no clones. For the purpose of accountability, the "official" repo is not more privileged than any other clone that retains the same history, and can be verifiably recreated from any clone if it is ever lost or tampered with. (Assuming SHA-1 isn't too broken, that is.)

For archival purposes, nothing prevents people from creating a tarball that contains the .git directory as well, which would preserve not only the current state of the project but its entire history.
Sure, but the title has you thinking "Why would this external weather event effect my in-home wifi?" when the answer is "because I have a weird thing outside of my house that makes the wifi work". I feel used.
> he can simply get a loan

I'll go out on a limb to say that loans (famous for needing to be paid back) are not the way to fund an idea which is not likely to be successful. Funding a startup requires you to find money that doesn't require you to be liable if things don't work out. That's why it's more complicated than finding money "just there on the street waiting to be picked up." You actually need to convince people you have an idea that might succeed, so they're willing to risk their cash.
PostEra | Lead Software Engineer, Platform | Remote (US) | Full-time | 180k-200k + equity

My team at PostEra is looking for a Lead Software Engineer, Platform, to help us scale ML-powered drug discovery! We're a team of scientists, ML researchers, and engineers who apply ML models and techniques to find new, more effective therapies for patients. We're looking for a hands-on engineering lead to foster and grow our engineering culture, while also building and scaling our platform and microservices. We expect this role's responsibilities to straddle ML, engineering, and infrastructure. We're 100% remote and meet up ~3 times a year for face-to-face work.

Stack: Python, (a bit of) Rust, TypeScript (React), Terraform, AWS

More details available in the job posting: https://jobs.lever.co/postera/1cd3b746-75e5-47a1-a1a1-311664...
I am an anti-seed oil nutjob - I use olive oil.
> However, what they call trusted publishing is just a configuration where PyPI tells github that publishing from a particular workflow name on a particular repository is ok, without further tokens. So PyPI "trusts" github actions and the maintainer is out of the loop.

That isn’t quite how trusted publishing works: it’s morally equivalent to trusting GitHub with your manually configured API token, except GitHub mints the token using its own publicly verifiable key material.

In other words: it’s no more trusting of GitHub than manually configuring a secret would be, but is significantly more misuse and compromise resistant (since the minted API token is auto-expiring and minimally scoped to whatever project the repo is linked to).

You’re right that this does not itself involve reproducibility or maintainer signoff. But signoff is something you can configure for yourself on GitHub releases (which PyPI cannot meaningfully enforce), and reproducibility is a distant ecosystem-sized goal at this point. Lashing trusting publishers to either would have meant making the perfect the enemy of the good.

(It’s also something we’re working on, by exposing cryptographic publish attestations tied to the trusted publisher. That is still being designed, but I hope to have more to share publicly soon.)

Source: I implemented PyPI’s trusted publishing.
The stuff in Google's monorepo is mostly their own code, not snapshots from upstream.
4chan is the America of the internet, the only reason it has outsized influence is because ideas were allowed to incubate.

Most memes and ideas went no where but some had a chance to multiply without getting stamped out by the censors.
I think it is unauthenticated from the point of view of SSH’s own authentication. The backdoor has its own credential, but the RCE is accessible if you don’t have an account on the system.
There could still be a link between the nervous system and IBD, too.

When I was diagnosed with UC, the inflammation perfectly correlated with a portion of the colon that was connected to a particular nerve (I can remember which - it was a few years ago by now).

I dismissed it as BS at the time, but a physiologist once asked me where I feel the physical sensation when I am stressed or anxious, and I said my gut. He thought that was very interesting (since I had recently been diagnosed with UC). I thought nothing of it, but maybe there is a link. (My wife, in contrast, feels anxiety and stress as a feeling in her chest.)

More and more, scientific research is pointing towards how all the systems in the body are connected one way or another, so I wouldn't be at all surprised if there is also a link between IBD and the nervous system.
I was a world class yo-yo dieter (having lost and regained > 100 pounds four times) and I agree with you. After 50+ of years of trying many many diets I finally tried very low carb carnivore and that was the first thing that stopped the yo-yo. For 3.5 years now. I wish I had tried it earlier and life, but I was never a particular meat eater before, and an anti-meat vegetarian and vegan for years. It took extreme desperation to make me try it, and the benefits were almost immediate.

I can confirm that for this N=1, both clean vegetarian and carnivore diets are a large improvement over the standard American diet health wise, but the later has been much more sustainable.
It is not required when applying. But you will have to incorporate if you get accepted.
Funny how a drug for initially curing diabetes get labelled 'appetite suppressant' as it is one of its secondary effects. Anyway, I hope it will lower the price for people really concerned about.
It's been probably 2 years since I've messed with it, but I was still using the tarball download for Xen in OpenEmbedded builds.
The Boat That Rocked is a great movie inspired (I won't say "based on") by the rise of pirate radio on the North sea.

I don't care that it's not true to history, I care that it captures the rebellious spirit.
I think nicotine can also suppress UC, so smoking rates might also be a factor.
Sort of. I have about 15 containers running on my dev laptop as I type. Which versions of xz are on each of them, and how do I make sure of that?
it seems that BERT can be run on the llama.cpp platform https://github.com/ggerganov/llama.cpp/pull/5423

so presumably those models could benefit from the speed ups described in OP article when running on CPU
This looks great! Thank you for putting it up on GitHub and sharing

Have you tried it with log files? It would be great to have this kind of search when hunting things down on multiple large log files in a server
I just want you to know that even I won't be paying for your service, the marketing worked for me, too. Haters gonna hate, but those who know, know. Thanks for all that you do.
4chan is definitely old internet, it reminds me of IRC, completely unmonetizable.
Yes, exactly. I did look at many of them, and they are innocuous. This is all aimed at setting up Jia as a trusted contributor.
Thanks for this comment. I've added that LKML patch set to the timeline.
> outside of the compiler toolkit itself

Which toolchain includes, unfortunately, xz
Largest EV battery maker set to cut costs in half by mid 2024
Apparently this is their 3rd podcast related app going to the graveyard. You'd think a company that has an amazing track record of figuring out online advertising would figure out how to build in ads in a smart way for podcasters. Like make it easier/seamless for podcasters to have ads and share revenue from them like adsense.
Bang, whoosh… oh, is that the night sky and a bunch of oxygen masks? Where’s that kid’s shirt, and my phone?

Yep, looks “fine” alright.
I think we're just starting to understand the link between diet and mental state. I don't know if keto is the best answer (I have opinions on keto having cycled through the diet many, many times) but it is reassuring that this unchartered area of science is being taken seriously.
Migrating bundlers and changing test-runners is no fun. If bun can handle that with consistent performance and no goofy upgrade paths, I'm happy.
It might not often come up by name, but most people can tell when a game is stuttering badly, or when their frame rate is low enough to be making their experience worse.

Denuvo has often been the cause of these issues and less technical players will usually direct their annoyance at the game publisher (which is ultimately the right place) but they won't know to attribute it more directly to Denuvo itself.
Opening of new hyperloop track rekindles hype over futuristic trains
I end up accidentally eating a lot of DNA and consequently MNRA, every time I eat a strawberry
There is no alien overlord. The democratic body controls all that which involves human activity. Any executive committees, profiteers, or employees are merely an extension allowed by the democracy, that can be reshaped by the whims of the democracy at any point. There is a difference between those things, but only because the democracy does not find a need to have the same level of scrutiny over all things. It turns out democracy is really hard work and there is only so much time in the day. The democratic people by and large would rather do other things with their life than spend it practicing democracy. They don't want direct control over much of anything, hence the extensions that have been offered, to varying degrees of oversight depending on importance to the standing democracy.
I get it. The petrol dollar is the basis of global currency and trade and has been longer than we've been alive.

When the value of oil collapses, and it will collapse: when not if, what replaced that? Batteries?

In the near future it is likely that sodium and sulfur will be the fundamental ingredients of a battery 2x the density of todays. So there won't be nickel, cobalt or even lithium holding up EV scaling.

Solar and wind isn't a shippable substance. Perovskites solar panels will likely be manufacturable practically anywhere.

Energy/oil being intimately tied with economic and economic output made for a stable cross-cultural currency.

Likely we will simply move back to food.
I think I remember seeing calls for pieces of this on the SomethingAwful forums back in the day, it was a collaborative art piece. There was a template with specific frames where the ball enters and leaves each square and it was up to forum members to fill in the rest and then it was all stitched together.
One of the key observations from PyPI’s removal of PGP support was that virtually nobody actually verified the signatures uploaded to the index (when they were actual signatures, and not just garbage or error files), and that most of their backing keys were expired, weak, or otherwise impossible to publicly establish.

Independent signatures do mean that the author could stymie a compromise of their source host. But on net, users are worse maintainers of cryptographic key materials (and worse users of obtuse ecosystems like PGP) than big companies are. That doesn’t mean we shouldn’t enable user signing; only that we need better, more misuse-resistant tools for it.