skysight-inc/HackerNews huggingface dataset:
"Sandboxing" is an understandable kneejerk reaction to the threat of untrustworthy software, but I think it's the wrong one - the classic "technical solution to a political problem". Software must compose. After all, how would sandboxing have helped here? You cannot sandbox sshd!

In fact we already have a very good solution, and it's simply the infrastructure of a typical Linux distro (replicated by package managers on other systems, such as F-Droid). It's quite an impressive feat really - a diaspora of independently trusted organizations, each with their own governance structures and PGP-enforced webs-of-trust, crafting public repositories of known-good software built from publicly published source code using publicly published build scripts, delivered to the user over strong encryption. On the whole this does an incredible job of keeping malicious or subversive software out, and we've all got so comfortable with just being able to "apt-get install <foo>" without worrying about malware that we've forgotten what a dangerous business running software from the internet used to be.

Which is why this xz attack is so unusual and surprising - it's like the police stopping an attempted murder in the nick of time in a sleepy crime-free town. As shocking as it is, we must ignore the cries of "something must be done" and resist the temptation to put up barbed wire fences all over our nice town.
I can't tell if this is sarcasm or not.

Most things we want to do are necessarily complex, so dogmatically adhering to "one simple thing" necessarily drives you towards a towering heap of composed dependencies.

If you want to get rid of the supply chain, you want everything specifically to be non-composable, so that everything has to be reinvented from scratch for that specific solution.
>AI is not as blitheringly useless as crypto

Really? You can't think of one single practical use for a non-centrally controlled system for sending -basically money- to others without gatekeepers being able to effortlessly interfere or debase? You completely dismiss the very real cases (all bubble hype uses and scams aside) of people using crypto to escape the worst parts of certain countries horrible inept, corrupt banking and financial systems?

If you flatly deny that any of these uses cases do exist and could become larger, I'd argue that you're speaking from ideological blindness against crypto instead of from a reasoned, thoughtful notion of its problems.
Well, the sky at that level is very roughly 10¹⁷m² large and there are roughly 10⁴ satellites, so that's simple: The odds of hitting one is 1 to 10¹³ if the average satellite is 1m² as seen from below. Many are bigger but I understand that there's a large number of microsatellites now. Say 10¹² if you think the average is bigger.
Czechia also has this clause in the copyright law. It sucks, because you can be sued for modifying FLOSS to do something that does not sit well with the original author(s).

Last time I've seen it used was for an architect to prevent us from using garbage bags of a different color. I am not kidding you. Their interior design was very specific (and good) and this was an attempt to save costs and it looked weird, but still
> turing-complete piece of thinking sludge

Don't let the new-born AI sentience hear this, them's fighting words.

But it does illustrate the kind of power that JavaScript gives. The language and especially its ecosystem is a jungle of abstractions and complications, hard to control and easy to break. That includes React and Next.js, speaking as someone who is still deep in that world.

> put HTMX on the small computers, they can talk to the big computer and ask for bits of stuff whenever they want. And my nice big computer can do all the thinking

That's a nice way to describe it. HTMX is re-thinking the problem space from the ground up, starting with HTML. That's a lot simpler to reason about, directly working with the user interface as it is rendered in the browser. How that HTML is dynamically generated is left up to the server, the actual "thinking" part.

> "type script"? Ah yes just what a language..made out of warm toffee needs, homotopy type theory

TypeScript is brilliant though, it's the best thing that could have happened to JavaScript. For what it had to work with as a starting point, it builds on that foundation a language that's more sane and reliable. With a type system that's at least better than before - implicit/invisible types or none at all. And the language server that enables intellisense, it's an ingenious way to empower the code editor - I use it heavily and can't imagine programming without it now.

> make your server-side endpoints either return the full template or a partial component depending on the whether the HX-Request HTTP header is present

Good to know! I'm still learning how to use HTMX, especially on the server side. It's a different way of thinking than an API with JSON.
You're not missing anything. The artist didn't understand the difference between fenceposts and fence, boundary and interior.

When presented with beautiful evidence of his mistake, he failed to see what it was showing him.

The art is good in that it's a puzzle to interpret the mistake and resolve the paradox, even if (especially if!) the artist doesn't understand what they created.
Sorry, if I missed this... Is the user asked: Do you want to run the JavaScript in this PDF?
spiped is solid. Wireguard is another good option that is included in the Linux kernel.
The main problem the news industry faces is they're trying to run for-profit businesses when they should see themselves as a public service that seeks to break even or produce sustainable losses.

News should be subsidized by people who want to inform the public whether out of public-spirited motives or out of a self interested desire to influence the public debate and, indirectly, the government. That means allowing people who want to support the news outlet to donate or to purchase a print version of the outlet's reporting. If I was a millionaire, I'd probably start or purchase my own media outlet to influence public opinion. Controlling the media is probably a better ROI than directly buying politicians so I'm surprised rich people mostly seem to opt for the latter. Even those who buy media outlets, such as Bezos buying WaPo, often don't noticeably change their editorial line or move away from the "we have to be a profitable business" paradigm.

It also doesn't help that journalists are, on average, well to the left of public opinion or that colleges offer degrees in journalism which was traditionally a blue collar profession that anybody could do. Journalism schools mean journalists are unnecessarily stuck with debts they probably can't ever repay and unable to pivot out of their profession if there's a lack of people willing to pay for it.
There's an interesting story inside this interesting story. In the counterfactual, the company continues to manufacture and sell the product as a cordless telephone for a few years before the rest of the vendors catch up with it in terms of quality. That's not what happened. Why not?
I sent 30 applications to London schools offering to teach programming and didn't get a single reply. I have experience teaching in adult education and over 20 years as a professional programmer.
I had a 200LX in college. I managed to get Linux set up on my main computer so that it would provide a login terminal on the serial port, where the LX was plugged in.

This meant my girlfriend could check her mail while I used the big computer, or vice-versa.

Later I got a PCMCIA modem so I could dial in and use my shell account when visiting my parents, even if their sole computer were tied up.
I live at the end of a long driveway off a fairly busy road. I've had very good luck leaving a chair or old lawn equipment at the end of the driveway with a free sign. Gone within a few hours.
I get that this sort of MITM often breaks CI pipes, but working with this shouldn't be anything more than a chunk of work involving stuff you ought to be doing already, including:

1. put all assets into infrastructure you control, allow pulling only from that infrastructure, no exceptions.

2. understand your containers enough to be able to modify and manage their trusted CA / TLS chains.

You really ought to be in a position to manage your supply chain and you really ought to be in a position to manage what your containers trust. Certainly more work and inconvenient, and maybe not practical everywhere, but worth doing even independently of a middleware box, at least once you get to some level of "in production for reals"
I'm saying they're the same and that it is more honest, relatively speaking.
There's a case where a Japanese venue commissioned an art piece, wrapped it, artists sued the venue, and the court ordered the art be restored to the original state on the ground of copyright. I think it was a couple feet tall cat statue or something.

It's somewhat of a case by case basis matter and it's rarely brought to the court, but just because you own a piece doesn't always make it all to your discretion to modify it.
The triangle is right. It's the nuts are nuts.
>aerospace

https://www.bloomberg.com/news/articles/2019-06-28/boeing-s-...
I think support is different. If you buy a game that requires a particular machine spec and OS, and then come back 10 years later with a different OS, that's not the developer failing to meet their "contract", it's you failing to run the game on a system of the required spec.

Now I do think there should be a carve out in the law to explicitly allow emulation, i.e. developers should not be allowed to prevent you using emulation, so that you have a reasonable path to continue using your content in the future.
I agree; moreover, I don't even understand why there's any controversy. A set of weights for a network trained using a particular document is a derivative work.
Not exactly, but I'm an American citizen who has lived in Estonia for the past ~5 years (and often read Estonian language media).

One of the more unfortunate political outcomes I've noticed from the Bush era is a tendency for people to take the tragedies of US foreign policy in the Middle East and project them onto every conflict involving the US since then (this is not targeted at you).

So you end up with well-intentioned individuals who strive for peace and opposed the Iraq War (or eg Vietnam), who find themselves siding with the autocracy invading its sovereign neighbors, for the simple fact that it positions itself as a force against American hegemony and must therefore inherently be "the good guys".

Either way, I sympathize with your point more generally, and also wouldn't like to see my tax dollars spent on drone striking weddings.
> Key management for end-to-end encryption

Hopefully this is sign that Android will support E2EE RCS that is interoperable with iOS.
> "When in doubt, use brute force" —KLT

widely published; this is even more true now than whenever Thompson said it
You didn't miss it. You were focusing on the lattice edges, and PP was focusing on the lattice points. You're both right (except for PP's "No!" which should be "Yes!").
For a number of reasons (some of them actually fairly substantial), spreadsheets are the only end-user programming tool that caught on and endured, so users will often choose them. It’s not even that they won’t need to find/hire/allocate programmers, it’s that using them doesn’t seem like a big deal at all.

Of course, just because you told yourself you aren’t doing a software project doesn’t mean you’re not prone to the standard problems of managing those, but the incubation period for many of them is long enough to catch a lot of non-practicioners unaware. I don’t think telling people to leave it to the professionals is the answer, for what it’s worth,—I just don’t see how we get from here to a world where one could interpolate between systems and end-user software more gracefully.
> But all these things are precious historical documents of the development of technology and of course ourselves. They are vitally important to keep.

No argument there. On the other hand, we cannot preserve every last item. Seeming as these were described as publications, there would have been multiple copies produced. Hopefully the VCF did their research prior to disposal to ensure multiple copies still exist (that are accessible to people, in better condition, and in their original form).

Jason Scott certainly has the right to be upset about what happened. It takes time to put together and maintain a collection. He entrusted that collection in the VCF's care. There is probably very good reason why he ought to be upset. Chances are that someone else entrusted those publications to his care. If that is the case, the VCF managed to violate the trust that someone else placed in Jason Scott, and not just Jason Scott's trust in the VCF.

That being said, humanity creates mountains of stuff. We cannot afford to keep every last example, or even every last example that collectors manage to get their hands on. For all of this talk about the current generation not valuing old things and older generations preserving things for generations, well, that never really happened. At least not in the way people are suggesting. In most cases, those old things were "preserved" because they were significantly cheaper to maintain than to replace. Even in the case of publications, one would find that most libraries ended up disposing of publications and only a handful specialized in archiving materials.

In the end, what we should be doing is looking towards the future while keeping an eye on the past. By only looking forward, we miss the richness of our past and any lessons it may have to offer. By only looking to the past, we embracing stagnation and placing improvements in the human condition at risk. While the latter may sound extreme, we only have so many resources (even in our age of plenty).
Murder involves culpability, that is, intent, and to what degree he is culpable depends on the state of his mental faculties. I don't know the details of his case, but if he was flying a plane, then he seems to have been sane enough to have at least a general contact with reality, which means, yes, it was very much an act of mass murder, and act of horrific hatred toward self and others, and being itself.

> They don’t have to feel the value of others, just observe that the others seem to value theirs. This is bulshit reasoning.

It's not a question of what others value, but what is valuable. Subjective dispositions and attitudes are a weak ground for moral reasoning. I could always counter "But why should we care that others value their own lives?" A subjectivist view has no answer that has intersubjective significance.

Now, I agree that a person who experiences some lingering feelings of self-hatred can still generally recognize that murder is wrong, and on that basis alone, refrain from such actions. But when we say "love your neighbor as yourself", or "do unto others as you would have them done unto you", you can argue that, in life, we first love for our own sake first (think of infants), that our understanding of love of others develops from a recognition of and reflection on the fact of such love, and that failing to will the objective good of others is to fail to will one's own objective good. ("Love" here means willing and acting for the objective good, not some kind of conceit or indulgence, of self or other.) If someone hates himself, it tells me there is a lack of love of neighbor (or, according to traditional parlance, a lack of charity). If he sees life as categorically meaningless, then what value could the lives of others have? Or is the problem a pathological and disordered love of self, a sense of entitlement, and is this kind of suicide then an act of envious ressentiment, an instance of "if I can't have something, neither can you"?

So the cause of suicidal tendencies matters. Is it a mental illness that cripples the faculties of reason? Or is it a wicked vice that corrupts the intellect and the will? A mix of both?
No, the attack was not hidden in code that is autogenerated by autotools. If that was the case, rerunning autoconf (which most distros do) would have disabled the attack.

Instead it was hidden in plain sight in the source that is processed by autoconf.

> it's expected to have the generated executable of the build system "helpfully" packaged in the tarball as a packaging step.

While this is true, most distros as I mentioned above rerun autoconf to ensure consistency in the tests and possibly to include autoconf bug fixes.
NPR stopped being government funded years ago. they're closer to a donation and syndication based NYT than they are to the BBC. https://www.npr.org/about-npr/178660742/public-radio-finance...
Exactly, it often just
gives the right clue. For native speakers connotation is often trivial, but for us it's difficult and a source that almost grotesquely exaggerates is perfect for picking up that.
Yes, and that is where self-controlled tools change things. Instead of hoping some third-party for-profit tool who continouously demonstrated they will not take care of oppressed populations, we have the possibility to make what we want, not accept the status quo, secure ourselves. And now people want us to blindly connect to those who are funneling hate in the name of "connectivity". It only shows how individualistic and privileged those people are: as long as something doesn't affect them they don't even see that there is a problem. Not totally new coming from SV white males, but still always the same.
Yes, but that doesn't mean it's "illegal" to create a derivative work. It just means that the original author has rights they can exert over what you make.
I used to think it was bit much until I started paying and for the price you get all youtube, music, podcasts and more across devices and so on with no ads. For the price - it's actually somewhat reasonable considering I don't need any other subs for this content...
What else is a country supposed to spend money on‽ Transportation, utilities, healthcare, bureaucracy, government: a country is its infrastructure.
And to extend off this comment, there are methods being worked on for building qubits that are intrinsically noise-free and don’t need the exponential number of error correcting operations. When those are available, you’ll see a step function increase in capabilities.
need a pricing page
These guys must be the best engineers in the world then!
> Still not sure if I’m talking to a LLM.

Don't delve into things you'd rather not turn up
"I'm not sure why it is that Windows 3.1 is the go-to when people name a Windows OS of this era."

It's because business was the primary market for PCs and Windows 3.11 added a network stack and changed everything. Networking was no longer an arcane science that required 3rd party software. Office networks became almost trivial to set up. The impact of this on the world is impossible to overstate. Everybody who used Windows in this era used Win 3.1(1).
Yes. Writing a thin layer is a minor task, compared to say, introducing a client-side store and trying to manage all of the complexity of state synchronization.

If I need to add one boolean variable to a page, in React/Vue land I need to update 7 files and create a mutator and a fetcher and an actor and a dispatcher.

In HTMX land that one added variable requires editing, one file…
I know abt that. I'm replying to a post about insulation which is not innovation-ripe for industrialized optimization anytime soon
I've been running a company in India for the last 8 years. At some point in the future, I'll incorporate a C-Corp in the US and I'll need to visit the US for a few days. Is it possible for me (as director of the C-Corp) to invite myself (director of the company in India)? It sounds weird even asking.
So when does RCS get a public API? I like google messages and all but I'd kill to see support open up to any of the other messaging apps that exist.

And as it is, the API restriction that's locking RCS support in is entirely an arbitrary one.
Enacting antitrust protections for a select group of companies to pursue collective action against a single player seems a tad unconstitutional and anticompetitive.

Wouldn’t publishers stand to gain more by locking down their content from third parties and creating their own shared distribution platforms (e.g. search engines, aggregators)? As it stands today, Alphabet and Meta make far more money selling actionable data to advertisers than anything else.
Any minute I'm out of offices is great for me. They've now become this lost soul area with unassigned desks, ridiculous spaces and security measures.
Came here exactly to say "Wasn't Desqview quite well known?" I never even used it myself (except indirectly as a bbs user) yet even I a non-user knew about it.

Maybe it doesn't fall into the same category and works more like an actual os with a kernel? Like I said, never used it so idk.
I assume it's because .NET developers go home after their work day and do other stuff instead of posting about computers online.
I want the world to move to a system of very large and spacious and cool aircraft for major hub-to-hub travel, and then nice and comfortable high speed rail from hub to destination.

I’m tired of cramming into a narrowbody with no service. Let me fly on an engineering marvel like the A380 or 747 and then relax or work in a comfortable train seat.
And, most importantly of all, Compaq to give Alpha to Intel, effectively killing it.

Alpha was the strongest rival to all other microprocessors: quicker than Arm, x86, POWER, SPARC, MIPS, everything. So it had to die. :'(
Do you know why social media marketing is important?

In a saturated digital space, we need to find increasingly unique and creative ways to express ourselves.

Whether you're a business or a personal brand, you need to truly stand out in order for your message to reach the masses.

Social media marketing is a key strategy for brands to attract attention and build community in this fast-paced digital world.

Here's a collection of prompts to help you boost your brand's social media presence and add a touch of originality.
At the moment i don’t want share it. Perhaps commenters above are right I just need to rest from it
Don't forget about Swiss Micros calculators if you haven't heard of them. I don't have any originals to compare to, but I'm happy with my collection of them.

https://www.swissmicros.com/
In salaried (I don't recall the proper Polish term) jobs in Poland, I understand that employees must take at least two consecutive weeks off per year. This intel is about ten years out of date though, so don't know what the situation is now.
It's a helpful collection of information on this topic. But Kaspersky... really? No one with any sense has that voluntary backdoor in their network.
"But when the Mueller report found no credible evidence of collusion, NPR’s coverage was notably sparse. Russiagate quietly faded from our programming."

That's no slap fight, those were serious allegations and the fact that they were false is equally important.

NPR happily participated in spreading those left wing falsehoods, but was unwilling to spread the truth with equal vigor.

I agree it's a shame that Uri had to turn outside NPR to discuss this. But you know as well as I do that NPR would not have published this.

And while COVID-19 was certainly a controversial topic, it was no "slap fight" either. It was the most important issue in the nation for two years or more.

You're dismissing important issues as "slap fights" and dismissing serious discussion because you suspect someone has a different point of view. Does that tell us all we need to know about you?
Maybe later I will share it, thank you