skysight-inc/HackerNews huggingface dataset:
> In recent weeks several vulnerabilities have rocked the Rust community, causing many to question the safety of the borrow checker, or of Rust in general. In this post, we will examine two such vulnerabilities: the first is CVE-2024-3094, which involves some malicious files in the xz library, and the second is CVE-2024-24576, which involves command-injection vulnerabilities in Windows.

What a weird thing to say. Neither of these are memory safety vulns. The borrow checker is irrelavent. Hell they aren't even rust specific vulns.

Rust isn't magic. It is still going to have bugs & security issues from time to time.
The sibling comment pretty much sums it up. But if you want more detail, read on:

Generally, there are three publishing options that each make sense depending on scenario:

JIT + host runtime: by definition portable, includes slim launcher executable for convenience, the platform for which can be specified with e.g. -r osx-arm64[0].

JIT + self-contained runtime: this includes IL assemblies and runtime together, either within a single file or otherwise (so it looks like AOT, just one bin/exe). This requires specifying RID, like in the previous option, for cross-compilation.

AOT: statically linked native binary, cross-OS compilation is not supported officially[1] because macOS is painful in general, and Windows<->Linux/FreeBSD is a configuration nightmare - IL AOT Compiler depends on Clang or MSVC and a native linker so it is subject to restrictions of those as a start. But it can be done and there are alternate, more focused toolchains, that offer it, like Bflat[1].

If you just want a hello world AOT application, then the shortest path to that is `dotnet new console --aot && dotnet publish -o {folder}`. Otherwise, the options above are selected based on the needs either via build properties or CLI arguments. I don't know which use case you have - let me know if you have something specific in mind ("Just like in Go" may or may not be optimal choice depending on scenario).

[0] https://learn.microsoft.com/en-us/dotnet/core/rid-catalog

[1] https://github.com/bflattened/bflat (can also build UEFI binaries, lol)
Rust ecosystem is still high with hype. Let them be, they’ll learn.

I have no beef with Rust and I commend what they have achieved, but some of the ecosystem still believes in Silver Bullets, and this harms them more than it moves them forward.
Which country has "secret ballot" then ? Cause what you described as imperfect is the system that is present in all countries I've ever been in, and I've been in the majority of western europe...
Ash. The hidden champion of low-code tools
Amazon.com First Quarter Results
I think that's fair. It's a hard problem.

We could have called the company a completely new name and everyone would have been confused, or just called us "pydantic".

I think Pydantic being the company name, and a standalone entity, and there being other products is fairly common. I think if Logfire is successful, it will end up just being known as "Logfire".
If you're just betting among your friends, why do you need an app? And what's the app's cut of the prize money?
The autogenerated class with no source code was not a hypothetical example. This was something I saw cause a problem in production, where the source code in the stack trace didn't exist.
> All modern desktop motherboards have very limited expansion IO available compared to a similar class motherboard from a decade ago.

On what do you base this? The only thing I can think of is that a lot of unpopulated x1 PCIe slots got replaced with the much more useful m.2 slot.
Not the parent commenter. Windows has a lot of rubbish user-level interaction which belie how good an OS NT really is. Anyone who blindly disses it because 'Windoze' and 'M$ bad' is not really worthy of any attention whatsoever.
With AI hitting Art, and the Engineering Job Market right now, is it a toss which is the worse choice?
Ownership of a work and monopoly are not the same thing. Monopoly implies control of an industry or a class of goods. Owning the rights to one book doesn't mean I own all books (which would be a monopoly on books), any more than owning a house gives me a monopoly on housing.
It's the basic function what journalctl -f does by default: follow the global log all jobs write into. -u etc are for filtering that.
Aka the 'backdoor removal of social security'
Don't Lie in Interviews
SQLite Professional Support and Extension Products
Texture makes a bid to become the platform of the energy transition
Complexity also comes from the number of papers that work out how different elements of network work and how to intuitively change them.

Why do we use conv operators, why do we use attention operators, when do we use one over the other? What augmentations do you use, how big of a dataset do you need, how do you collect the dataset, etc etc etc
To me it sounded like part of the problem is that people on ECMO cannot leave the ICU because at any moment they might have a complication that requires immediate emergency care.

So it's not enough to make them smaller and cheaper, they also have to be made much less prone to these complications. I am sure that will happen in time, but I am also sure we'll be able to grow people new lungs in time
This is highly repetitive code where the options are pretty much either me copy-pasting a piece of code and changing a bit here and there or having an AI do it.

The latter won't make stupid small mistakes, I will (and have)

And I'm checking like 10 lines at a time, related to code in the context I've got in my head.

I need to review 100x bigger PRs done by humans of varying skill regularly - related to other parts of the project I'm not intimately familiar.
> Then why does Czechia, Romania, Poland

And yet nobody would move there to find a job, not even from Italy, Greece or Portugal.

Their salaries are simply too low and the ROI in terms of quality of life it's not remotely comparable.

There's over one million Romanians in Italy, making them the largest foreign community in Italy.
This happens to almost every post that’s somewhat negative about Tesla. They mysteriously disappear from the front page within minutes even after getting a lot of engagement.

I’m pretty sure some nefarious flagging is happening and I hope dang takes a look at it.
True, I was thinking a simple environment variable or systemd configurable would be fine but I guess an alias is a good idea.
I remember using one of those dongles with a SIM card that you could talk to with an API and use that to send flash SMS. Full screen warnings to friends. Only option was 'OK' and the text was gone afterwards.
Or just `journalctl -f` to follow all logs.
The last time we did it was on a Wednesday afternoon last summer, and it was $250. We live next to a major metropolitan area and it was a big regal cineplex. Smaller towns might be cheaper. We just had to bring in the Blu-ray, they said DVD doesn't show as well. For that price, we have the entire theater to ourselves, and we could invite up to 30 friends for free. We had our own concierge she would bring us food. For a special event, absolutely worth it.
An interesting example of market forces holding back innovation. Enshittification in the physical world if you will.
Ah, good to know. I figured it might be the case that I just needed to RTFM.
ACP was was just a way to comcast and friends to get a share of some taxpayer money unfortunately through their local monopoloes.

True change will come about when we address that root issue.
sudo machinectl shell "${username}"@

sudo /usr/bin/systemd-run --machine="${username}"@ --quiet --user --collect --pipe --wait "${command}"
All Cars Sold in the US Will Soon Have to Be Able to Automatically Avoid a Crash
Thermals is why. Closest we get is Mac Mini and NUC.
Art has been a poor career choice for a long time before the current state of AI
You'll be able to get a doctor rx super easily, think like all these viagra and adderall rx mills.
More like code that runs code, not code that generates code. Assuming the latter means that it's generating native code and attempting to execute it natively, that's not allowed.
Steve Jobs said Silicon Valley needs serendipity, but is it even possible?(2020)
This is why I have Copilot write unit tests too :D

Actually it does the boring bit of generating the test data and the basic cases, I'll do a once over and add more if it's a something that warrants it.
You seem to believe that a move from Schedule I (totally illegal to sell) to Schedule III (legal to sell under some circumstances) is going to hit the reset button on state laws around cannabis. That seems unlikely, the states are already ignoring the feds on this, this is just a step the feds are taking to bring the federal legal landscape closer to the state landscape. The major changes will simply be, as others have stated, to make it possible to travel with cannabis (with an Rx) and for dispensaries and others to use FDIC insured banking and transfer mechanisms.

Other than that, nothing is likely to change unless states walk back the laws they've already passed.

Remember, it's already illegal on the federal level for these businesses to exist, and that isn't stopping them.
Arts intention is whatever the artist makes it out to be. If an artist wants their work to be loved, not hated... Well then this doesn't really apply does it
> Except this is exactly the same power every popular domestic company has, including every other social media platform.

Yeah, but that's sort of the point. With domestic companies, the US government has more levers they can pull and more influence they can wield back. That's why the "TikTok Ban" isn't an outright ban, it's forcing the sale to a non-Chinese entity, which would be acceptable to them.

I'm not trying to paint the US government as some sort of saints here, and to be clear it is ultimately about power and influence. That said, even without really agreeing with it, I can sort of see the logic behind this move.
Tech is also full of delusional hacks. You find them everywhere. Delusional hack artists are more fun.
If the lesson of xz was "reduce supply chain attack surface" then the freedesktop people clearly haven't received it yet.
> I wonder how many are like me

I believe there are many, on "both sides."

I deeply appreciate your reply. This is extremely important.

The wording is what it's all about. When we put it into terms like "pro-life"/"pro-choice" - it does nothing to address the hard realities which need to be addressed when writing law.

We all keep getting played by yes/no, right/left, binary word game slogans. The realities are so much more complex.
You're right, I forgot "use". And I would change "I" to "I'd" if I could still edit.
> In areas with decriminalized hard drugs, drug usage dramatically increased. It has a direct impact on the lives of the users, and also secondary impacts on the lives of everyone around them and/or has to deal with them.

Absolutely. I'm no stranger to the impact of drug abuse, as I've had family and close friends become addicts.

Even so, the drug war is way worse. It adds violence and danger to drug use, making it more dangerous for users and those in their proximity. It increases policing and police militarization and violence. Punishments for possession destroy families and career prospects.

Every ounce of prevention bought by the drug war costs a pound of pain.

> Drug usage is not the so-called "victimless" crime some position it as. It has a lot of effects on society as a whole.

Responsible drug use is pretty victimless. Drug abuse has victims. But that's no different than alcohol, and banning that also caused way more harm than it prevented.
From the billiard-ball-smooth brains that brought us "wiping your buttcrack is gay", here's 2024's version "showering daily is woke" :P
I kind of agree with you, and (as a hobbyist linguist) I believe a diversity of languages is a beautiful thing, but it creates unnecessary friction for business and about everything. Europe really needs a unified language -- it could be English, French, German, or even Interlingua or Esperanto.

Lingua franca really matters. China, for example, didn't have a unified spoken language until about 100 years ago. However, Mandarin is today universally understood and spoken in the country. And the result? You only to know one language, and you can have access to one of the largest markets in the world. Alas, the same could not be said for Europe.

(In fact, Europe needs a unified language if people are serious about getting rid of English and the Anglo-American hegemony, because each smaller language really cannot fight English now.)
Reddit co-founder Alexis Ohanian invests in a Portland bar dubbed The Sports Bra
Reminds me of the classic: "Sorry I missed your comment of many months ago. I no longer build software; I now make furniture out of wood. The hours are long, the pay sucks, and there's always the opportunity to remove my finger with a table saw, but nobody asks me if I can add an RSS feed to a DBMS, so there's that :-)"

https://github.com/docker/cli/issues/267#issuecomment-695149...
No it doesn’t. The Global South is poor because they keep electing stupid leaders to run their economies.

But I guess it’s more convenient for us to blame external parties instead of admit we keep voting for fools.
The user's choice of color schemes.
If the async methods return quickly, then yes, there is some overhead. But the point of asynchonous methods is that they can perform slow operations while yielding the calling thread back to the thread pool. For example Alpha might be reading a gigabyte file, Beta is sending it over the network and Gamma waiting for a timer tomorrow. Async/await is a syntactic sugar to run this in a pleasant way.
YC startup idea:

AI generated-articles designed to give computer programmers dopamine hits when they get to correct a small error/issue/discrepancy.

Like Zyns but distracting.

Maybe it’s like a reward. Fix a tough bug and your manager sends you an article where you get to point out that the author is incorrectly using “strawman fallacy.”
I'll note that the bandwidth doubled from PCIe 4.0 to PCIe 5.0 (it's now 30GHz).

Dealing with that speed increase is causing a whole lot of problems for all the designers in the ecosystem. It's a bit of a nightmare, but people are for sure using it (in your laptops, in the data center).

We ended up adding some specific features/strategies to the autorouter we're building for to handle those speed. It was pretty hard to get right.
My brother supervises at a dispensary. They are not attractive robbery targets at all. They have a lot of security. Like a bank, they expect the amount of cash would bring trouble if they were not prepared. Unlike a bank, they don't dispense much cash (just petty change) so they don't even have to leave much in the drawers, which are emptied frequently and dropped into a safe nobody there can access.

They have cash-handling processes similar to a casino, but again, they have much less than a casino or bank to take.

Employee theft is a much bigger problem than robbery, because you can imagine who works at them, but even then, it's hard to get away with.

You'd be much better off robbing a busy gas station or the like.
My own poor wording.. I'm talking about avoiding the App Store not avoiding the license.
> Bill's like this are going to allow China and other adversarial nations to leapfrog the west in the long run.

I'm not saying you're off base here, and I have never worked in tech in China ... but doesn't the state apparatus have its fingers even deeper in AI development over there? Why is state interference on the part of China not perceived as harmful to progress in the same way that the specter CA regulation is?
access management is usually delegated to other systems that supervise UNIX, like AWS
And make EU more like USA? let them be influenced by corrupted wall street, loose EPA regulations for pesticides, favor the rich in the name of capitalism? In spite of the flaws and messy bureaucracy, I still like EU for their policies towards environment, food, socialism, etc. And above all, EU is the single beacon of hope to keep a check on mega corps like Apple, Google, Meta, MS, etc.
I don't understand why investors would induce people to buy life insurance policies that they sell to investors (who pay the premium and eventually get the death benefit) unless life insurance is underpriced. Why would insurance companies underprice their policies?
Visit the research computing environment sometime, for instance. The libzma SSH compromise was considered very worrying, after all.
Does it show how much of all that is space junk? I don't think it's fair to single out star link, when there's a lot of other companies over the past 50 years things in the space.
Might as well just mine Bitcoin.
It makes sense that the bad decision wasn't made by someone that's IT savvy. It would be good for the nation if paying corporate blackmail and ransom was illegal.
Printing Music with CSS Grid
Why isn't the usual "regulatory framework" around powerful new technology and products – common-law liability for harms, prohibitions against fraud & various kinds of trespass & damage to established rights, plus the checks of reputational risks and vibrant competition – enough?

Do you think that because personal computers & the internet took a while to develop, states like California missed an opportunity to helpfully regulate them by forcing their makers to attest to their safety before product development (much less public release) gets underway? Should we add that sort of regulation, now?

A new website could be harmful – used for "serious crimes", "bill pay", "litigation", "even war"! Should every new website require filing paperwork guaranteeing its safety with a Calfornia Department of Technology division before going live? (There were oppressive regimes that tried to control presses, printers/fax-machines, & websites like this, using "safety" rationales!)

The mere fact a new technology is a "powerful tool for humanity" is not something that must "naturally require" a novel state-bureaucracy-run "regulatory framework around it to ensure its proper use and application".

The state in general, and the State of California in particular, is not our wise cloud-father with the foresight & disinterest to do what's best for us. It's instead a clumsy and often-corrupted tool for solving some common-coordination problems.

States usually do best when addressing a well-understood common history of specific problems & market-failures – rather than improvising new filing requirements against theoretical fears, as here.

Any new "very powerful tool for humanity" deserves the same freedom from prior restraint, & forebearance from premature budens that mostly benefit incumbents and large players, that prior technological innovations enjoyed.
Supposed evidence of the harmfulness of cannabis compared to alcohol shows that cannabis absolutely deserves to be OTC and available for recreational use. Popular sentiment is popular precisely because the supposed harm has never materialized to the point of justifying the paternalistic and authoritarian control of social groups who tend to use cannabis.
Or 9 voters

Or, if someone gets his way, just 1
I've said this before. We need to prosecute scammers, and anyone who lies during a business deal is a scammer.

Scammers beyond the range if our law enforcement are not beyond the range of our Air Force.

Finally, any communications company who forwards a phone call and can not trace where it came from needs to be liable for the illegal content of the call. This should not apply to asynchronous communication; only to synchronous communication.
It's three things:

* here is a feature which we are defaulting to on

* there's no persistent config for it

* we know better than you do about your preferences
I've recently become a fan of the `-x` flag to journalctl, which adds additional context to log entries and even suggests remediations at times. I've identified and fixed several issues on my Linux systems that way. Kind of hard to get that with tail -f!
Here's a java implementation of rete that I worked on about 20 years ago https://github.com/sgt101/zeus/tree/master/src/zeus/rete

It might work!
> Certainly more than aviation per passenger * mile (assuming altitude being the traveled distance)

But then it's much less of passenger * mile with the given definition.
Regardless of AI, isn’t it equally hard to start a business (no matter how small)? OP made it (it seems), but chances are against one. I think this applies now, 10 years ago and will apply 10 years from now.

We only see posts of the successful ones, though.
It's fine.

Not every software needs to be infinitely configurable and open source just in case the configurations don't cover the needs of all.

We need opinionated software, if you don't want to make any choice for me, you can't even give me an assembly editor for fear of forcing your CPU arch of choice.
Graylog and Grafana.
Developer Company Blog Posts
Or Kubernetes. Thats where a standard way of authentication/authorization should be there.
Eh, any way you do it could leave it in an unfinished state if interrupted, I'm not too bothered about that. (But it does sound like you think I was speaking in favour of doing it in a procedural python script sort of way? I was not.)

Packer and Terraform do different jobs (they're both by Hashicorp!) - you can bake an immutable image all you like, you still need to get a server, put the image on it, give it that S3 bucket it needs, IAM, etc.
And one of the best Twitter accounts:
https://twitter.com/WorldBollard
idk, just using attention and massive web crawls gets you pretty far. a lot of the rest is more product-style decisions about what personality you want your LM to take.

I fundamentally don't think this technology is that complex.
The Silver Platter doctrine prevents your financial institutions from handing over that data unbidden, but they can do so by request from law enforcement.
Every 24 hours, advance the DoW through 360°/7 increments. At the same time, every 24 hours advance the DoM through 28, 29, 30, 31 increments. How do you now keep DoW and DoM in proper sync when DoM needs to be updated ~every other month?
The point is that you get to buy dinner tomorrow.
I don't think anyone here is saying we shouldn't have the word "transpiler" at all, just that "transpiler" is a subcategory of "compiler" and there's no reason for OP to try to correct the title of this story.

It reminds me of how my 5-year-old son always corrects me when I tell him to get in the car—"you mean the van!". I have tried to explain to him that a minivan is a kind of car, and he's just about getting it, but it's been a challenge for him to grasp.
To be fair, the Chattahoochee is only navigable up to Columbus (and, for blue water vessels, probably not even that far)