skysight-inc/HackerNews huggingface dataset:
Tell me you’ve never seen a MKBHD video without saying you’ve never seen a MKBHD video. He’s probably the best tech reviewer on YouTube. I definitely trust him more than other reviewers who do it for the clicks/lols.
U.S. to require automatic emergency braking on new vehicles in 5 years
Its a year from now, 2025, you open Hacker News and see on the front page another article or lecture about XZ. Maybe 2 years from now who knows :_)
You are right that conceptually this is okay. But it is a UI problem that commands the author tried didn't manage to show the difference between the merge commit against any of its parents.
zerogpt.com is 100% sure the first paragraph is GPT written.
No, it was not "strictly speaking it wasn't the military" - it was not the military at all. It was the civil legal system in the UK.

If it was suicide at all:
https://en.wikipedia.org/wiki/Alan_Turing#Death
Well, if it's an Indian startup targeting an international market: it's an international company in the making.

While you can name half a dozen of them, there are thousands that are nothing like that.
Right but that doesn't help if you've done your own work on top of their changes.
Does anyone know what's going on with those U.2 NVMe hard disk drives? (see https://blog.seagate.com/enterprises/seagate-unveils-worlds-...)

I'm asking coz the OP mentioned the need for a PCIe-to-SATA bridge chip to have more than a couple of SATA ports. I'd assume that if HDD were also NVMe devices, it will be simpler to just wire each PCIe lane to a drive, without requiring any bridges. A PCIe 2.0 x1 lane is 500MB/s, on par with SATA III 6Gbps.
> > Right now all pro-Palestinian demonstrations are (intentionally or not) pro Hamas.
>
> I disagree. If you think that Israel is conducting war crimes in Gaza against Palestine civilians in its retaliation against Hamas, as it has been accused of, then the protest is a request for Israel to do it without doing such war crimes.

If that was the case you would have Israeli flags too. But Israelis who are for a two state solution were barred entry. Also the claims of war-crimes are problematic since the facts are so distorted with lies. A lot of the claims made by sources on the ground prove to be false after scrutiny.

> I don't think you can say with any certainty how such protests affect any decision made by Hamas.

It's a fact that they keep rejecting deals they said they would accept. Also he can: https://www.msn.com/en-us/news/world/message-from-a-gazan-to...
I think people lack patience. I worked my way up from an entry level admin position to a principal engineer. It probably took around 8-10 promotions. Some promotions took longer than I would have liked due to various economic conditions, and I took initiative to go above and beyond the job I was in at the time, but that’s generally what it takes. I didn’t mind it, as I found that work more interesting and enjoyable.

I will agree that companies can and should do more to retain people if they want people to stick around. For instance, when I started there was a pension, which no longer exists. They also made it clear during the hiring process that they like people who stick around, though I don’t get that vibe anymore.

At the same time, new hires need to be realistic. Some of them hired in and claimed to be experts, knowing everything there is to know about the job they were doing, in about 6 months, and started asked about promotions. First, promotions are reviewed annually, so expecting one after 6 months wasn’t realistic. Second, thinking they knew everything showed just how little they knew. They were still constantly asking for help and had large gaps, but instead of worrying about getting better to earn the promotion, they felt entitled to it after a very short period. I did the job they were doing, at some level, for about 6 years and there was still a ton of stuff I didn’t know (and still don’t)… and I wrote 90% of the documentation, procedures, and training material. I’ve only seen 1 or 2 people be reasonably self-sufficient in less than a year, and those people were never arrogant about it the way many others were, they still recognized there is always more to learn.

While I might have been able to make more early in my career if I job hopped, I think I would have capped out at a lower level, as my biggest and most frequent promotions came during a period where my knowledge of the internals of the company were of a lot of value. That isn’t something that can be hired; it takes time.
Imagine if you're seven years old and your dad took mushrooms and then suddenly wasn't your dad anymore, but some other guy.
Copilot is a decent autocomplete saving you half a line here and there, that's about it.
It's a tractor beam.
> It's not a crime to inform patrons of the existence of shadow libraries.

That is indeed a crime: "promotion and incentivisation of crime", one of the major ways of starting an organised crime in fact. Do you want IA to be declared a criminal organisation?
Well there is _one_ way but you're probably not going to like it
You are using a mobile phone based on a RISC CPU (presumably) and the Internet. Those are the conveniences I was speaking of.
Lol, no. An important reason for me to not use Safari is that it doesn't support uBlock Origin, 'tech illiterate people' rarely care about ad-blocking.
It's literally an article promoting the health benefits of being outdoors. It happens to provide a caveat about sun exposure at the end given that it's from the CDC website's section about skin cancer. I'd hardly call that Kafkaesque.
Tesla China rival BYD sees profits and sales fall
A Chinese name is consistent with the timezone - alternatively Australia, Russia etc.

Here is my speculation.

I would look at the test framework - the attacker needs the complexity of it to hide away the attack and it is first thing he publishes - probably has been planned from the very beginning.

This is a homemade thing based on something called "Seatest".

How common is Seatest? Not that common as far as I can tell - maybe someone can correct me?
Of course they do, but in this example there's no way to compare cherries to bananas.

Grapefruit is of course the best fruit.
I cannot imagine how one could _truly_ destroy git history. You could destroy it locally, sure no problem. You _might_ be able to destroy it on your remote, but if you're using something like Github/Gitlab/Bitbucket I'm sure they'll have a cache that isn't trivial to remove from. But even if you remove it locally and from remote, there's no way you're removing it from other peoples clones. And other people could have pushed to other remotes.

Stuff "leaks" so much in git, that it's really hard to lose work. The only way I could see someone losing work is if they never commit or if they never push. But even if you don't push and just rebase, you're not losing work. You would have to go out of your way to delete git history locally.
The German and French industries have bought their respective countries a significant amount of wealth. Specifically the German industry always had a far better relationship to their labor compared to many other places.

Since WW2 those industries have practically guaranteed piece of mind and an enjoyable life for the populations at large, even paying for the social safety nets available to all.

The EU has done many things to make those industries less competitive, some of those I don't even disagree with (e.g. data protection, some repairability stuff, etc.), but they absolutely do need to be careful not to overstep it. And this care is not something I have ever seen from the EU.
Could you please elaborate on your comment? Do you mean you tested this tool and it's not accessible, do you mean you are concerned about the tool not being accessible, or is there a problem with the website linked? The reason I'm asking is because it is possible to make a 3D website accessible and I'm curious if you have any more info on this particular tool.
> CFI

They're referring to Control Flow Integrity [1]

[1] https://en.m.wikipedia.org/wiki/Control-flow_integrity
> - Linux packagers decide to patch sshd to use libsystemd for a notification, that could have been trivially done without this library.

Why was that? Would that "trivial" approach have broken the next time systemd made one of their incompatible interface changes, perhaps? Was using libsystemd the kind of thing the systemd maintainers recommended?

> And therefore, systemd is insecure?

Systems with systemd had a vulnerability that systems without systemd did not. So it certainly seems like systemd-the-system (not necessarily systemd-the-unix-process) is bad for security.
> you don't have the power to set rules, or lock people in boxes, or (in some places) kill people

Quite the opposite - companies literally set rules all the time. How the work should be done, who should do what, who the boss is, when are you allowed to leave, etc.

Being obliged to be in an office is tantamount to being locked in a box for a considerable amount of your time - and you don't get to choose which part, so you end up spending the vast majority of your precious time locked in a box working for someone, because otherwise, and here we come to the last part:

Companies have the power to ruin livelihoods, cause homelessness and death, etc.

The government of capitalist countries creates that system, and has done so historically, so that the system above is upheld. And the government works mostly in favour of businesses and business owners as a whole, because it is made of said people. You are obliged to go to work for someone else or face starvation, exactly because this is a choice that was made and continues to be made by governments in favour of businesses. You are obliged to pay exorbitant amount of money to afford basic necessities. etc. etc.

> but that doesn't mean money is power. Money is money.

Exactly the opposite - money is pure power. Money is literally congealed social relationships. With little money you can't do much. With a lot of money, you go golfing with senators and lawmakers like I go for Friday beers with my mates. With a little money you're forced to continue working that deadend job to make ends meet. With a lot of money you can have a yacht bigger than the house of the person in the previous sentence (oh, wait, that person doesn't actually own the house)
sudo and su made sense when it was a multiuser time sharing system. You needed clear boundaries between each users of the system, and permission bits.

If I’m running on my workstation or desktop just let me run the damn thing. I don’t need an unprivileged user. On TempleOS you can modify the running system in ways you can’t on Linux.
I’m personally fine with it.
Ah.

That article is about voice calls. Totally different topic. Nothing to do with UTF-8.
How about actually vetting them, even if post factum? Bellingcat, The Insider et al uncovered fake identities and actual biographies of agents with a tiny fraction of resources Western security agencies have. It's actually why these agencies get tax money.
Mark my words, you won't be able to see the kernel anywhere in there soon!
Yes, in order to be decodable it must be an injective mapping.
> Asrock Rack C246 WSI Mini ITX

Who do I have to kill to get one :)
If your runway is a mile long you can tolerate a lot more crosswind component (or, more precisely, aren't so desperate for every know of apparent headwind).
Software often doesn't do the thing you want to do.

It almost does it.

Or it can just-just do it with contortions and a lot of repetitive toil on your side.

I think writing little plugins and drivers to do the thing you want with an LLM is something that could be built into a lot of software.

I don't think LLM can architect and build whole systems yet, but this niche is something that can be done.
Useful idea, but needs a lot more work IMO e.g.

- Looks like there's just 7 abstracts right now.

- Most of the abstracts are written by the author of the paper, so might not be as unbiased as an actual "community-written" abstract.

- There's no stated guidelines for the "community-written" abstract e.g. should it be less biased than the original abstract, should be shorter than the original, should it be more accessible to a less AI crowd or all of the above.

- There's no way to upvote/downvote some abstracts e.g. the "attention is all you need" paper has two abstracts and one of them is clearly worse than the other.
Imagine every linux distribution under the sun not classifying as GNU/linux because they changed the about section in their GTK dialogs.

This is basically what Apple did to avoid compliance requirements. The whole toolchain, the core libraries, even the compiler suites, are identical.

iPadOS and tvOS have less than 10 ifdefs in the Safari codebase last time I checked.
I already use Android devices as well, thanks.
It's impossible to answer. "at least one child" could mean much more than one.

Also there could be more sisters.
A rebase can be undone, because the old commits keep hanging around in the repo. Rebase doesn't delete or rewrite anything, it just creates new commits and adjusts branch pointers, so the old stuff is still there just hard to get at because nothing points at it anymore.

You just need to find an old commit ID somewhere, normally the reflog.

The old stuff will go away on its own eventually due to git's self-maintenance procedures removing unreachable commits, or it can be done forcefully by adjusting the gc parameters to get rid of it.
EU seems like it’s just going to keep daring Apple to exit their market. I’m looking forward to their regulations requiring Apple to write open source drivers for the alternative operating system installs they’ll be required to allow.
Not up, but most of the times it is a lot easier to build something from scratch. Signal is notoriously hard extend and use - they have a lot of custom tech. I gave up looking through their documentation.
Now, the reason is that they actually have end-to-end encryption and most do not implement it in a secure and nice way. They basically had to build everything from scratch themselves.

TLDR it is often harder to reuse
Could someone clarify what's the use case of a tool like this please.

Is this something that helps if you, say, are building a new API and will need to create both the server implementation as well as the client implementations in multiple languages? And so, it can automatically do all of that for you based on an API spec? Or is it something different.

Funnily enough, I developed a Python library recently that allows you to build API clients in a way that very closely resembles the TypeSpec example. But I'm pretty sure they are very different things.
Capabilities aren't guaranteed to be present, and in a lot of high-security situations aren't available (though obviously you could say that about sudo too)
Depending on what you are going for in terms of gameplay experience, that can be a reasonable trade off. Say an RPG where you page in/out assets as needed but doesn't break the flow is probably going to be a bigger issue on gameplay styles that need more compute to achieve.
The ancient bipolar transistors (also the junction-FET transistors), where the active parts of the device were buried deep inside the semiconductor crystal, could easily achieve lifetimes of many decades, even at temperatures as high as 200 Celsius degrees (when designed for such temperatures). When the surface of a silicon crystal is properly passivated, its interior is extremely stable and impervious to external influences.

With modern MOS transistors, where the active parts are extremely small and located on the surfaces of the devices, it is very difficult to achieve long lifetimes unless they are strongly derated, so they do not have to support high thermal or electrical stresses.
This article is relating a bad experience with a push-the-envelope device on the bleeding edge, extrapolated to "Future of AI".
First, getting rid of setuid (I guess you'd have to get rid of the whole thing, not just the permission bit) is not the same as making systemd an integral part of the OS.

Second, when even the package maintainers can make such "trivial" mistakes, something is wrong. You'd expect a component such as systemd to be much more trustworthy than some random library.

I'm not arguing against systemd, just that it seems to grow and grow, and is not the correct place for security. It security is obviously broken.
Typo: A prepared statement is an object that represents the steps needed [to] accomplish the input SQL.
I think AI abstracts might work well in most cases because:

- they don't have to add anything that wasn't already expressed in the paper, limiting the need for creativity

- they can use boring and formulaic language because that's how technical writing is done, limiting the need for creativity

- they can give a more neutral overview of the research since they aren't an involved entity with emotional stake
It either has to be SUID or it has be a daemon running as root (or with enough caps to make the difference not matter). Adding a needlessly verbose configuration ecosystem doesn't change that. I imagine there's going to be some cool stuff this can do with homed and userctl, but it's not like the fundamental problem of "this program can grant root privileges" can ever go away.
Multiple people found prompts to make LLM solve the problem, and the $10k has been awarded: https://twitter.com/VictorTaelin/status/1777049193489572064
AstraZeneca Admits Rare Side Effect Risk in Its Covid19 Vaccine
Perhaps the risk of an "awakening" could be inopportune depending on where you are on the hamster wheel.
Thanks. I'll check them out. To be frank, I get more out of Flickr these days.
I find it a decent barometer for how much a topic is being searched for. This is relevant to determining the popularity of a search term, which relates to the popularity of a topic.
Pgdsat – PostgreSQL Database Security Assessment Tool for CIS Benchmarks
Encoding detection is usually applied to a larger document, at the point it's ingested into an application. If you're applying it to short strings, something's not right -- where did those strings come from?
Unphased is that feeling you have right before Lt Worf stuns you.
Barring temptation, the "feature" will hopefully not directly affect me. But since I am not an egoist, I tend to also think about other people...
Literally what PostgreSQL does.

E.g. you can do manual selects from internal tables to see the same content as `\dt` command for example.
Legal reasoning is extremely interconnected, sometimes directly via inter law references, sometimes indirectly via agreement in the field. This makes setting a sensible context difficult.

I believe that it would be possible to teach an LLM to reason about law, but simple RAG will probably not work. Even the recursive summary trick outlined in the post probably is not enough, at least I couldn't make it work.
What if that new perspective does not agree with that person's core values? That would generate a great deal of confusion and changes in personal identity. you would have to reject the new perspective which you seem to have embraced otherwise it wouldn't trouble you. Or change your core values. Both seem like they would disrupt daily functioning and overall wellbeing.
Not mentioned in the post but I also run some light server workloads on this machine and things were annoyingly slow with a USB 2.0 thumb drive.

I'm not gonna pretend that the real reason for making this wasn't because I have fun tinkering though.
Is there anyone who have made complication on the most famous (searched by the whole world) anonymous people. No 1 must be Satoshi Nakamoto, and No 2 maybe this one? Is there any others?
Buying S&P 500 trackers is considered diversification though, since... 500 companies instead of one or two. "Sheesh".
I've noticed my Synology NAS doing lots of DNS lookups for [synology service].synology.com.fritz.box.

Because I had *.fritz.box DNS blocked on my Cloudflare Zero Trust Gateway, these were returning NXDOMAIN, causing the NAS to fail during some operations (checking for software and packages updates, backups).

I've disabled the option "Apply the domain name provided by DHCP server" (Network | DNS | Advanced) and the NAS stopped these.

Now, this is a worry because that option is checked by default so how many Synology NAS could be trying to connect to these sub-domains? What if the block is removed and the new owner can actually create some of these?

More details: https://www.geekzone.co.nz/forums.asp?forumid=66&topicid=312...
Why is the formatting so messed up? Page seems to be fixed width but not wide enough for an actual line so all lines soft wrap?…
If you are in a situation where you have a backend and you want to expose an API and then you would eventually want a client, you would need format specs as the starting point where server and clients are generated from that one source.

At the moment, OpenAPI with YAML is the only way to go but you can't easily split the spec into separate files as you would do any program with packages, modules and what not.

There are third party tools[0] which are archived and the libraries they depend upon are up for adoption.

In that space, either you can use something like cue language 1] or something like TypeSpec which is purpose built for this so yet, this seems like a great tool although I have not tried it yet myself.

[0]. https://github.com/APIDevTools/swagger-cli

[1]. https://cuelang.org/

EDIT: formating
Article makes the usual mistake when talking about money, focusing on extremes. The day to day difference is "one guy is a waiter, another guy got a PhD in a bullshit subject and takes ten flights a year". These two people are actually going to rub shoulders with each other. Billionaires are so rare and so far away from us that our envy of them is academic. The envy the waiter feels for the undeserving vacationing professor is more acute precisely because the distance is small. I've found that the "bullshit professor" types tend to think of themselves as being on the same team as the waiters, as in, they're both against the billionaires. I assume the author of this article shows the same belief because they themselves, as a journalist, are part of the bullshit professor class. But the waiters don't see it that way. They mostly just see some trumped up version of themselves who's not much smarter than them and not a harder worker than them who nevertheless gets to live a much easier lifestyle. I think the upper middle class is currently the least admirable it's been in living memory. It used to be something that society had a soft spot for. Now its members are mostly contemptible, anxiety ridden, and cringe.
> Especially because on of the major advantages of merge is that you can squash your local commit history when you submit it to your main branch.

Squashing is in no-way limited to merging and is actually done by doing an interactive rebase. Nothing is stopping you from squashing without creating a merge commit. It's entirely separate.

If you're squashing everything anyway, what does merging even give you? Is your main branch just:

* merge B

* squashed commit B

* merge A

* squashed commit A

If you didn't merge, you'd have:

* squashed commit B

* squashed commit A

> What we do is that we tie every pull request to a relatively small feature task, and because we do this, we genuinely don’t care about the individual commits developers do.

Except eventually there is a large feature task and then you end up with a giant commit that is annoying when git-bisecting.

But at the end of the day, these things only matter if you are spelunking through git history and/or using things like git bisect. If your git history is "write-only & rollback", then none of this stuff matters.
So adding more of those is the answer?
we seem to be returning to some sort of harem system, with successful males having access to and perhaps maintaining sexual relations with multiple females. The bottom 20% of each gender might self sort into conjugal pairs, leaving the 'aspirational majority' in a state of persistent dissatisfaction
Re: Why Host Emacs Packages on GitHub? (Microsoft vs Freedom)