skysight-inc/HackerNews huggingface dataset:
I think it goes beyond just this particular attempt. I bet they were looking for other targets, targets that are widely-used but maintained by resource-deficient projects. They wanted to do maximum damage with the fewest possible supply chain attacks.

The fact that many projects are now searching deep and wide through their commit histories, looking at just who they're taking code from, beginning to develop frameworks for attack mitigation and remediation... an entire type of previously very-promising attack is completely burned. This has been a massive defeat. And it happened all by chance.
I've bought lots of modified second-hand books (highlights, cross-outs, corrections). Are you saying that's illegal?
I'm surprised no one's posted Spread API yet: https://spreadapi.roombelt.com/

It's a free Google Sheets / Apps Script you just paste to your sheet, and it turns the sheet into a full CRUD. It's kind of rate limited though but completely free!

Edit: I've thought about creating a company around Sheets before, and the problem is that once you get to the "willing to pay" stage, you also kind of outgrow Sheets. I'd rather migrate to Turso, Cloudflare D1, or Pocketbase instead of staying with Sheets or SpreadAPI, because of the limitations.
This is the secret to end all secrets: anything is scalable if you fucking keep it simple.

No magic. No configuration. No cleverness. No DRY. Will it be beautiful? Not at all. Look at LLMs. We can make things that talk like people using ugly fucking matrix math and recursion so long as we keep it simple. We can scale it to infinity if we keep it simple.

It doesn’t matter what it is. QBASIC, JavaScript, Rust, jet engines, pneumatic circuits, CPU cores, manufacturing facilities… the list goes on.

Keep it so that it can be reasoned through by a single person and you can scale it forever.
There’s more than one slang dictionary, it seems… here’s one I found in person at UCSD’s library: https://photos.app.goo.gl/J3rCLtbJMEn4SkKq8
Seems kinda "no duh" to me. An non-employer owner is essentially employing themselves, right, having to do the work of an employee, just with the added work and benefits of being the owner. An employer-owner does not have to do the work of an employee, and is likely able to employee people to deal with the added work of ownership, leaving only the benefits.

The median for non-employer owner being 24k while the median for employee is 62k is surprising, I would expect the owner to be above or comparable. I guess there's a lot of unsuccessful one-person businesses. Looking at the full report, the median household income for NEO is 100k, and 110k for employee, and wealth for NEO is 5k higher. So there's something else going on there.
Right, the UA spoofing browsers perform is historically done to bypass sites not wanting to serve them content.
For reading sheets, it's better to use the "share as CSV" option since that gets cached pretty well w/o limits
Update, I checked with the case company, toploong, they say that board is a 5mm too big or so for the case.
Update for 2024:

Step 0. Don't bother with obsolete Cat 6 or lower cable because it's just not worth the effort over Wi-Fi. If you're going to do it, buy a 1000' spool of CMP Cat 8 UPoE-rated premise wire (~$1000-$1500 USD), punch down tool, J boxes, punch down receptacles, semi-flexible plenum large conduit that doesn't have ridges, cable fish tape, wall-mounted quarter 19" rack, 90 degree drill and hole saw with various lengths of extensions (usually from about 1' to 10' or longer for tall walls), and a punch down patch panel.

Step 1. Run conduit and J boxes first to a central closet or to a garage in most instances. This is the labor-intensive, hard part but it makes running multiple cables through it much easier. Larger homes may need a second closet or second conduit hub area and more conduit to a main patch panel.

Step 2. Easily slide wire in using a fish tape, 1 to 4 cables per box depending on the location. It's so much easier with semi-flexible conduit.

Step 3. Test each cable using iperf3 with an RPi and laptop, or borrow a commercial 10GbE cable tester like a DSX2-8000.

Step 4. Drop in a 10 GbE U/POE++ switch that doesn't sound like a jet engine.

Option: Instead of, or in addition to, Cat 8 wiring, run fiber.
I didn't mean to, this is just the way I gratefully accept interesting critique :-)
Tldr; Konami Code is embedded in Beethoven's 5 /s
There's also "equipment" on Cyprus. I know a fiber-optic specialist who spent some time there working on a Five Eyes project for the UK.

See, e.g.:
https://en.wikipedia.org/wiki/Akrotiri_and_Dhekelia
> Oh wow. Your wife is going to have to prove she hasn't abandoned her residency, which is normally automatic with a 2+ year absence (or even 1+ year without a re-entry permit).

Practically, it depends on how picky the CBP officer is. I personally know of a guy who re-entered the US on his Green Card after a 7 year absence. From what he told me, he didn't even get sent to secondary inspection and was just welcomed back home. He flew into JFK.

I don't see them yoinking the GC of someone who has a US citizen spouse because of >2y absence, even though the law tells them to.
More or less.

For a language designed for fresh-out-of-college engineer to pick up in a few weeks and be effective, it is very easy to squeeze out a lot of performance.

* built-in profiler.
* built-in escape analysis tool.
* It's easy to pass pointers instead of copying data.
* []byte is sub-slice-able, with a backing array. This does throw people off occasionally, but the trade off is performance.
* Go lets you have real arrays of structs, optimizing cpu caches.
* Built-in memory pools

And more.

And if you look at "non-idiomatic" performance code, they are surprisingly legible by the said fresh engineer. It's as if the designers didn't want to give up all the usual C performance tricks while making a Java/Python kind of friendly language, and this shows.

Of course Go can go only so far, due to the built-in runtime and GC. But it gets very far. Much farther than at first glance, or second glances that language snobs would give credit for.
Range tanks when you’re having fun, and batteries last longer with longer range cars.

I’m hoping for a small sub 30k car with decent handling and 320+ miles of EPA range fairly soon. But I suspect that would seriously hurt Model 3 sales so I doubt Tesla’s going down that route anytime soon.
>microtransactions that amount to power boosts.

Tell me you know nothing about FGO without saying you know nothing about FGO.

Microtransactions in FGO are for purchasing new characters from the gacha. "Power boosting" only comes from just playing the game like everyone else.

Source: Been playing FGO Japan since 2016, and yes I'm a whale and yes I'm happy.
What is your standard for affordable? My apartment in Japan is very cheap and in an urban area.
Is there such thing?:)
The OP says the machine was 'slow' -- however, getting the 2x clock upgrade, the machine's dhrystone performance is 1.5 VAX MIPS. That's not 'terrible'. It's like having a VAX-11/785 in your pocket that runs on 2 AA batteries. Mine runs the 16 bit MS C compiler, MASM, all manner of DOS programs (it's DOS 5.0), and the built-in apps are really quite good; 123 is particularly well done, and the calc app is, as expected, superb (has about half a dozen different 'modes' for Sci, Eng, TVM, etc). Auto-backed up every night, to an SRAM card in the PCMCIA slot. Full RS-232 Serial Port - this is one of the main ways one connected it to modems (although PCMCIA modem cards existed). And it had the very first IrDA port; 115,200 bps.

I have mine right underneath my computer monitor, and use it many times per day. It's just more useful with a keyboard than these screens with virtual keyboards for the engineering stuff I do. If it would have, say, bluetooth to the smart phone that I could use as an internet gateway, and if it had a backlight -- getting close to perfection as a portable productivity device.
Is this related to classroom.io ?
It's really easy to improve the performance of Go implementation as compared to python or Java. There are lots of built-in tools to help you (like the profiler), and the resulting code is really very legible even to fresh college grads.

This is based on my first hand experience, but YMMV.
Is there a reason she couldn't return that much?
Was it already spent or locked in offshore accounts?
Or given to other accomplices?
Perhaps the policy changed.

Storing stuff takes space and effort. Cataloging even more so. Making it available to others is a jump in magnitude.

Eventually, it can become untenable.

Organizations like this tend to not lack donors. What they lack is the capacity to cope with donations. Time, labor, space, money are all finite, regardless of their mission.

Even the Salvation Army will refuse things like furniture. It’s not carte blanche. That said, I’ll donate even ratty clothing to the SA because I know they’re at the tail end of consumer product life, they inspect and sort all the incoming clothing, and their discards end up bundled for recycle or other purposes.

I donate to let them have first crack at it with their expertise rather than condemn it to a landfill directly. Give that old ‘92 Comdex t-shirt one last chance.

I don’t know anything in detail about VCF. I don’t know if the IEEE has archives of everything already.

I know there’s an effort to scan several hundred Computer Shopper magazines. I know there’s someone out there who has spent a great deal of time setting up a system to scan a very large stack of DEC VAX microfiche.

I guess its a shame these magazines didn’t fall into the hands of someone with the zeal these other folks have for their projects.

I have also learned to not question the motives and projects of folks in the vintage computer scene. Not my time, not my project, who am I to judge.

It was with a bit of a heavy heart when my large collection of Dr. Dobbs magazines went into the recycling bin.

When I cleaned out my grandfather’s house, I came back with (among other things) several dozen Popular Mechanics magazines from the 40s. They were all 200+ pages. Talk about a snapshot of a different world. But after 10+ years sitting in a box in the garage, and a house move later, I kept three and the rest went into the blue bin.

Which brings me to my final point. If you have a collection, if you have any care about its disposition, you should do that yourself to other enthusiasts that may share your interests. Because your heirs, or the people task with cleaning up after your gone, will likely just put it in a large dumpster to be carted away.

But then, even if you do get it to others, it may well end up in landfill anyway.
When I was looking for a mattress recently, I wanted something affordable, but I shied away from really cheap options, because I was afraid they'd be very low quality. Similar reasoning could apply to many things.
An experienced engineer will tell you: it doesn’t matter what software. It doesn’t even matter what kind of application. Actually, it doesn’t matter what it is at all.

Keeping things simple keeps them scalable. Cleverness and magic are antithetical to that goal.
Okay, meeting monkey
I don't believe he meant one should intentionally write false statements, just that when one makes a mistake and others correct it, that it's a good opportunity to learn.
David Weber actually wrote a series once where aliens (actually humans) hollowed out the Moon (dumping the material into the sun) to use the rest as camouflage for a Moon-sized spaceship hiding from other aliens (actually aliens). It was pretty clearly him taking the p*ss on the entire topic, but it's seen multiple editions and I believe is still in print. I guess there's something about the idea that attracts some people?
Missing from the paper: "We were able to verify that none of the in-context exemplars were in OpenAI's training set."

I wonder if this paper will make it through peer review? Now that could be an interesting result.
No. I love contributing as my fursona sometimes. I don't want to dox myself to do so.

We shouldn't need to know who you are to be verify that your contribution is trustworthy. Code should stand on its own merits. Ideas like this tend to dovetail into "real name policies", which suck https://www.eff.org/deeplinks/2014/09/facebooks-real-name-po...
This is one of the best things I’ve read on HN in a while. It rings of founder pain and passion all in one.
I believe he's asking if he qualifies under the "one-time achievement" here

> You must meet at least 3 of the 10 criteria* below, or provide evidence of a one-time achievement (i.e., Pulitzer, Oscar, Olympic Medal) as well as evidence showing that you will be continuing to work in the area of your expertise. No offer of employment or labor certification is required.

I'd like to think that continuing to play chess professionally under the US flag would qualify as "continuing to work in the area of expertise", as this is a self-sponsored visa anyway.

Here's a case study from 2011 that says "yes, it qualifies". https://www.wegreened.com/blog/eb1/case-study-aao-sustained-...
https://en.wikipedia.org/wiki/Robert_MacNeil
What you just said. Some of the money left the country. Her husband was a Hong Kong businessmen. No doubt a lot of money was “lost” through there.
There might be enough Harry Potter related content in its training set that it's not really "reading" the books in its context.
How much of that character map is already in its training data and how much of it is actually read from the input prompt?

I’m always suspicious of these kinds of tests. It needs to be run with an unpublished book, not one of the most popular series in the 21st century.
I've resisted this temptation to integrate with google apis for these 2 specific reasons rate limits and api changes.
> To expand, journalists used to actually investigate which took time which means it took money so that the story released had lots of corroborating sources, scrutinized by editors, and then released as a complete story. That might have meant things like actually interviewing people, requesting documents from places, or visiting the places in question.

This was only desired and seen as useful and interesting when people had nothing else to do.
Wondering how that gets measured— the gig economy could skew this by a lot. In general it’s a tough road no matter the paycheck though.
Indeed. Thank you.

Nevertheless, let me mention a relevant fun fact: I even remember there was a research paper (or maybe a non-academic experiment somewhere on Reddit or so, I fail to recall for sure) which says postulating something wrong publicly is way more efficient than asking a question - much more people rush to emerge passionately addressing all the flaws of your opinion in details and with references than when you ask.
The Mayor Economy
Open Source, Supply Chains, and Bears
I’m happy to pay $99/month for this product. Been driving it last 2 weeks and don’t want to go back to AP. It makes mistakes, sure, but it is predictable. I can chill out in the car with 2.5 hr commute 3 days/week
Sure, I can respect that.
I've seen electric motorcycles for a few years now.

Not too many. Honestly, they don't sound that great, sort of like a loud R/C car.

One friend got a zero recently. He told me it goes 0-60 under 2 seconds, which I don't know if is is BS or not.

But most of these motorcycles are "off-brand", even zero had not-great tires.

Even Harley had a bike, but I don't think it sold well.

Now that the major japanese/etc brands are paying attention to electric bikes, I think the market might expand.

and I thought telsa was going to make a 4-wheeler.
There’s nothing wrong with paying for content and still seeing ads.
highlights: https://news.ycombinator.com/highlights
TI's price war with Commodore went into high gear in 1983, and TI pulled out of the market in '84. So your early experiences with the TI-99/4A were probably a bit earlier than you remember.

I had a similar story -- my grandfather grabbed one for $50 at, IIRC, JC Penney and gave it to me for my 4th birthday in 1983. Got my start with TI-BASIC as a young kid, then GW-BASIC on an XT clone a few years later. Then came Scheme, Pascal, C, C++, Java, Python, PHP, JavaScript...
....why does the process have to be so shitty?
>who apply every possible bloated inefficient awful ad/tracking/targeting/react/javascript spawn of satan into their site as possible, all written by the worst programmers in the world

They do this because Google wants them to, so that their ranking goes up.
The ID4's 0-60 is 7.something seconds. An early 2000s VW GTI ($3000?) with a mild tune is faster.
Guessing: https://www.figma.com/community/plugin/735770583268406934/go...
> A lot of old stuff has no value to anyone. That can be hard to accept, but it's true.

Sure, but this is some kind of "vintage computer fest", who are supposed to understand that old stuff has value, and who are entrusted with it, and not just given it to dispose of. The very word "vintage" in their name should mean something.

If you can't find it a home, as the donor intended, call that person to take it back.

If that person just wanted the stuff gone, they would not have organized it into bins, and would have driven to their closest paper recycling place.

These VCF people look like total dickheads here, any way you look at it.
I’d put it up on my Neopets page. Anything for internet street cred!
Copyright is the exclusive jurisdiction of the federal government, this law has nothing to do with copyright law.
I believe you are referring to the I-94 website, not the ESTA one... that (digital) form is the legal limit of her admission so she cannot be accused of overstaying if she follows that.

That said... they obviously have all sorts of classified places to put notes that you can't request, and there was clearly something in her file that made them suspicious in the first place, so staying the full three months is almost certainly not going to improve that.
I've argued in a blog post [1] that we need to delineate between "open source developer" and "supplier". If we don't do that, calling thankless unpaid volunteers and hobbyists a "supply chain" is kind of insulting [2].

I don't believe that "identity verification" for F/OSS developers is a good idea. Suppliers? Sure. That can be a contract negotiation when you decide how much you pay for it.

Also, I don't think identity verification helps when your adversary is a nation state, which can just falsify government identification if it suits them.

[1] https://scottarc.blog/2024/04/04/open-source-supply-chains-a...

[2] https://crankysec.com/blog/supply/
Fauxpen source is bad for business (2019)
I consider the value of owning a house is being free from having to pay rent rather than to gain on the investment. The fact a house is considered an investment (in full meaning of the term so once you own it you worry when its price falls) means it's not really affordable.
> a programming language is more scalable if it makes it easier to have large numbers of engineers all working on features of a single app concurrently without stepping on each other's work

This is optimizing for a wrong (minor) problem.

As the application grows, both accidental and essential complexity grows. More and more of engineers' time is spent analyzing existing code, and they typically spend less time writing new code. The limiting factor in large/old codebases (which is where the word "scalability" comes into play IMHO) is the inability of even experienced engineers to understand aspects of the codebase.

This is why I think e.g. Java has been so successful in the "big & complex" space. Java is annoying to write, but easy to read. I mean, some more conciseness would make it easier to read, but it's still quite OK. Very importantly, it's OK to read even if the dev writing it wasn't good / didn't observe best practices etc. I often have to deal with code written 20 years ago, and you can't change the past ...

Regarding the merge conflicts - they happen, most of the time causing only minor problems, sometimes it's a bigger deal. Some programming styles can help you avoid some minor merge conflicts, but I doubt they will be effective in avoiding the real troublesome merge conflicts (which go far beyond introducing a new field).
ML 101: Do not evaluate on the training data.

Yes of course it can, because they fit in the context window. But this is an awful test of the model's capabilities because it was certainly trained on these books and websites talking about the books and the HP universe.
IANAL but it depends on the country, there is no such thing as EU permanent residency.

For Germany the answer is yes, but you could fake it at the risk of getting your PR revoked if they ever find out.
I kind of wanted an explanation too so I looked up the law, but to be honest it’s dense and beyond me. [1]

It reads like an anti-circumvention law to me, but I’m not clear on what specifically in there would make it applicable to modified video game save data unless you can argue that modifying save data is a wrongful way to acquire to a particular game state.

[1] https://www.japaneselawtranslation.go.jp/en/laws/view/3629
Faking in demo video is now an essential evil to get virality . Because social media is about virality . All commenting on the video and this thread are now curious to try Devin, to prove it works or to prove it doesnt .

So now if it works faking helped it get virality , more users , more demand for product .

If it doesnt work good enough still it will be good enough for some of the users who discovered it because of the virality .

Only worst case is it is too hopelessly bad or doesnt work at all or tried to get to the moon and got nowhere . Hope the founders are smart enough to not be this bad
Yeah, I think the study is clouded by all the struggling 1-person businesses. As someone running a fairly successful 1-person business, I have to say that my wellbeing seems to be higher than the small employer owners that I know, due to all the hassles they have dealing with employees.
Fauxpen Source
fauxpen source: A description of software that claims to be open source, but lacks the full freedoms required by the Open Source Definition.
The fundamental question remains: considering the in-depth knowledge of low-level (a small scale disassembler), system programming and the practical application of data structures (i.e. using a trie for all string operations to avoid the use of string constants), was it a state sponsored attack, or it was a one man show who did it for personal gain? Attempting to backdoor nearly every single Linux instance of sshd goes beyond the definition of just being brazen.
When I was about 13 years old (60 years ago) I discovered a programmed instruction text that taught machine language programming. Not assembly language, machine language. It would have a page of explanation, followed by a multiple choice question. Your choice of answer would direct you to another page in the book. If your answer was correct, you'd see the next page of instruction. If you were wrong the page you landed on would give an explanation that would hopefully clear up your misunderstanding. I gave a book report on the book which cemented my nerd cred for the rest of my time in high school.

It was another 4 years before I was in college and was able to run a program on an actual computer. An Algol program on a Burroughs B5500 mainframe, complete with punched card reader and line printer. After I graduated I got a job with a defense contractor, and spent the rest of my career working for defense contractors. At one of my jobs I worked on the flight computer software for the Air Force C-130 cargo plane and I would never fly in one of those planes, but that's a story for another day.
Many newer cars have projector style lights and our eyes suffer. The headlights are almost a point light source and hard on the eyes.

I think the new DOT adaptive lighting standards should help if manufacturers move over.

https://www.nhtsa.gov/press-releases/nhtsa-allow-adaptive-dr...