skysight-inc/HackerNews huggingface dataset:
I'm not from EU but EU people from EU countries are usually eager to tell me that the government works for powerful commercial interests. I wouldn't be surprised if Apple refused to play by their rules while Google accepted it.

Otherwise it's hard to see why they create a law that basically specifically discriminates against Apple
One of the fake names "Jigar Kumar" is Indian (Hindi/Urdu)
I'd wager that if you have that kind of money in stocks you arrange the sale via a broker. Probably in writing.
There are different shades of AGI, but we don’t know if they will happen all at once or not.

For example, if an AI can replace the average white collar worker and therefore cause massive economic disruption, that would be a shade of AGI.

Another shade of AGI would be an AI that can effectively do research level mathematics and theoretical physics and is therefore capable of very high-level logical reasoning.

We don’t know if shades A and B will happen at the same time, or if there will be a delay between developing one and other.

AGI doesn’t imply simulation of a human mind or possessing all of human capabilities. It simply refers to an entity that possesses General Intelligence on par with a human. If it can prove the Riemann hypothesis but it can’t play the cello, it’s still an AGI.

One notable shade of AGI is the singularity: an AI that can create new AIs better than humans can create new AIs. When we reach shades A and B then a singularity AGI is probably quite close, if not before. Note that a singularity AGI doesn’t require simulation of the human mind either. It’s entirely possible that a cello-playing AI is chronologically after a self-improving AI.
So just to clarify, how would one go about auto-generating a stub handler for these route definitions?
It's currently down but someone archived the page 1 hour ago https://archive.is/cBwU1
So if I tell a user a workaround for a software issue, and they turn round and accuse me of telling them they are using the software wrong I have to agree with them?
RMS Lifestyle
Interesting idea, having someone check in regularly to review your progress is definitely great for people who have issues with self-motivation or time management. But the effectiveness would depend on the compatibility of the manager with the individual, if two people don't like each other, thing will not work out.
>they don't have to add anything that wasn't already expressed in the paper, limiting the need for creativity

But how could we know they add nothing or missed something important like a not?

>they can give a more neutral overview of the research since they aren't an involved entity with emotional stake

Biased input = biased output.

AI can't help with that.
Delving into "Delve"
So name broken links in the uses this.com interview
Thanks, that makes sense for that use case.

My question is probably a more general one around the use case for writing an API spec (in a format like OpenAPI or TypeSpec), and then translating and writing the server implementation to match that. As opposed to being able to create the API spec automatically based on server implementation (and being able to easily refresh it).

Understand that writing the spec and then the server implementation seems to have some benefits. I'm curious to hear about the common use cases for it, as in my mind I could quickly stub a server implementation (and automatically generate a spec) rather than try to create the spec by hand and then write the server implementation again. But I'm sure there's some other things I'm missing.
This guy gets it!

I like your videos btw! :)
> they will force all their projects simultaneously onto all their users for absolutely no reason.

That's just not true. Just because a system uses systemd the init system doesn't mean the it is forced to use the other components.
was it cash gifts?
If that's the case, then we should ask ourselves why something that was disclosed three years ago, about an incident that happened in 2014, began to be aggressively disseminated only now.
It has quite a few differences, namely it's not one swarm, each file (or collection) is its own torrent. This allows for easy updates (clients can get new files without having to re-download everything), it has protection against some attacks, etc.
They better not f*ck over dart/flutter!

I chose them to learn over all the various web frameworks for app development. I like dart. I was worried about Google pulling the plug, but took the risk based on dart/flutter being used internally.

Google: don't make the time I've invested a waste please.
If I had a dollar for every "friendly" dog that jumped or lunged at me or my wife while running or cycling even when leashed where the owner was shocked (shocked!) at pooch's behavior, I'd have a decent sum. Nowhere near enough to live in Park City though. :-) So hard to tell from this he said/she said account who is in the wrong. Definitely a slow news day.
It's a sign of the times that pop stars and the appetites of mob consumerism may be construed as "elites" with a "sacred project" of destroying wholesome country music values.

This is the difficulty with our modern identity and sense of opposition. We can't really tell who the them is whoever they are. Anyone not on the same page will do.
> First, getting rid of setuid (I guess you'd have to get rid of the whole thing, not just the permission bit) is not the same as making systemd an integral part of the OS.

It absolutely is. sudo allows you to execute code as another user. If you want to do that without giving sudo itself administrative privileges, this has to be done through the service manager, which creates a completely new, elevated process and handles communication with that. This is how it should be done (and BTW, this is pretty much how also the new sudo for Windows works). Now Lennart for some reason prefers systemd as this service manager - you might disagree with that choice, but then come up with a better one.
If it's slow for very large folders you can pre-filter out small folders before it hits the TF-IDF:

--lower 3 --folder-size=+200M

Likewise you can set upperbounds:

--upper 3000 --folder-size=-2GB

upper and lower constrain folders with fewer than or more than X number of files
Me: 478700000000+99000000+580000+7000?

GPT4: 478799650000

Me: Well?

GPT4: Apologies for the confusion. The sum of 478700000000, 99000000, 580000 and 7000 is 478799058000.

I will be patient.

The answer is 478799587000 by the way. You just put the digits side by side.
Yeah, I did enjoy the books, but the characters are not great and the prose pretty basic, the romances fall flat etc. But the more you go on the more interesting science fiction are brought up.

Overall I thought that these were some great and thought-provoking science function ideas wrapped up in an average to poor literary package.
The <> version searches the library path (usually /usr/include/* but can be modified with flags) whereas the "" searches the current working directory.
You're not making a very good point here. A lot of packages have a transitive dependency on liblzma - for example everything that depends on libxml since that depends on liblzma https://packages.debian.org/sid/libxml2. LZMA is a pretty widely used compression algorithm, I'm absolutely certain there's other juicy targets that depend on liblzma.

The reason why "only" sshd on debian/ubuntu was affected is that the attacker chose to tailor their exploit to those systems. Systemd was the vehicle, debian patching opensshd was what made this specific incarnation of the attack possible, but essentially, both trusted a widely used library.
The iPad App Store is perhaps an even more dysfunctional place than the iPhone in how much it holds hardware and use cases hostage to the manufacturer's vision. Just imagine how much more versatile the iPad Pro would be if only you could run Linux VMs on it in the moments you want to do anything remotely tinkery on an iPad.

Apple's hardware since the 2021 iPad Pro (with M1) has had the ability to do this. The iPads have the RAM (16gb on higher storage models), appropriate keyboard and trackpads, the works. Great hardware being held back by Apple's vision people weren't allowed to deviate from.

A straightforward reading of the DMA suggests that Apple is not allowed to restrict apps from using hardware features. Let's hope that means Parallels/VMware style VMs are possible without too much of a fight.
Maldev academy is slightly related. I always like to give a shout out to opensecuritytraining as well.

In my experience, open source material like this is too Linux focused. But even with paid courses (doing one of them right now actually) bypassing exploit mitigations and protections is a topic that's hard to find materials on.

Egg hunting, module stomping topics like that with process mitigations turned on and modern edr/ngav running now that I'd pay good money for. In reality, I am trying to drink from the firehose and stumbling around github, customizing poc code and learning that way.

It's really hard to stand a chance at memory exploitation with good edrs and mitigations flipped on.

Another topic that's very important to me is arm exploitation. Azeria labs has good material on it, I haven't finished it to comment on it but there isn't as much material on arm as there is on x86.

You'll also notice most introductory material skips x64 but I'd be interested in x64 intensive material as well. For example, I've learned SEH exploitation multiple times now but it doesn't apply to x64, is it worth the time spent on it? How frequently do you see seh enabled x86 apps these days (genuine question)?
Thats fine, and lord knows we probably need a replacement to sudo.

However, sudo needs to be user friendly and fail safe with decent information as to why its failed. Something that service files historically didn't do.

But, the way it's supported also needs to change, it almost certainly needs to be decoupled from systemd's release cycle.

I hope that we have all learnt from early systemd, and that we all won't take a "lets piss on each other's chips" approach. I'm too old you you lot to start flame warring over stuff you'll never actually fucking use.
Has that abomination of a title also been generated by one?
Xcode is free but a developer account isn't (nor is an Xbox Dev account either for that matter)
> But how could we know they add nothing or missed something important like a not?

Probably by reading it.
The iPad was heavily marketed as a computer replacement so definitely is supposed to be "general purpose" device. Many people I know don't use a laptop or desktop at all, and just use their iPad.
Essentially distributed consistency and co-ordination. NTP isn't accurate/consistent enough because of light speed being limited. This matters for applications like network management and large scale control.
I vaguely remember this being discussed in a semiconductor course at uni (back in 1996 or so) - it was already an issue at the time in the smallest processes, and IIRC the prevailing approach then was to make sure that current flows both ways in the specific connections that were prone to electromigration - thus replenishing the supply.
That’s a nice trick, I don’t recall seeing that one before!

It still seems like an awful lot of boilerplate just to reproduce the C approach, albeit with the addition of method call syntax and scoped destructors.

I feel like there must be an easier way to do it. Hmm, maybe I’m at risk of becoming a Go fan...!
systemd has been a net positive for the linux ecosystem. remember when you had to write bash scripts to start, stop, restart services and handle any other signals you want to send it? nowadays it's a unit file (basically just an ini file) away with relatively straightforward API. and you can actually declare startup dependencies and other useful relationships past just "prepend a number signifying when it should run globally to the front of the filename". it's provided an extensible platform with which higher level orchestration frameworks like ansible / ignition can easily templatize services or other system configuration.

since the beginning of systemd people have moaned about how complex it is and how we're reinventing the wheel. yet time and time again the people actually working on the project show that the solution they've come up with is the result of the problem they're facing on a daily basis. it's quite annoying that the armchair linux experts complain about how "lol systemd is so stupid for reinventing the wheel, give me my shell scripts back", maybe think about whether or not you have a legitimate issue not being addressed by the solution proposed or if you are just getting rage baited by a headline.
I have yet to meet a non-dev who wants to write or modify software themselves. Quite a few people still don't know that it's the software that makes appliances and devices do things and that it is written. They just don't know what software is so how would they know where to begin writing or modifying code?
Why is this stupid? It’s just an option for how to configure a system that uses systemd to allow commands to be run in a privileged execution context without a suid binary. What’s wrong with having options?

Why don’t you propose a better solution? How would your non-systemd solution actually work?
The solution, obviously, is to train an LLM to recognize the character set.
It was mentioned in the post but from what I could gather from the schematic I drew up of the existing circuit it's load switches for each power rail with slow starters, made with only discrete components. Instead of recreating all that I looked for an integrated chip with all that functionality built-in and went with NCP45521-L.

That's why mine has such a low number of components.
It's a greatly diluted version of article relative to IoT from the European Cybersecurity Act (Regulation (E.U.) 2019/881 of April 17 2019), 4 years after everyone.

https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELE...

Nothing new or interesting. If the products were already on the market in the European Union, they had already been subject to stricter requirements for 4 years.

The only change is that seller now have to display this information in the UK, whereas before they were not obliged to do so.
This is not new functionality:

"There’s a new tool in systemd, called “run0”. Or actually, it’s not a new tool, it’s actually the long-existing tool “systemd-run”, but when invoked under the “run0” name (via a symlink)".

systemd-run is very useful to run tasks with specific cgroups settings, or at a specific time. It asks for password whenever needed.
My guess is their way is to buy a dev account, which allows you to install apps for up to 1 year.

https://forums.developer.apple.com/forums/thread/91519
Google Chrome's new post-quantum cryptography may break TLS connections
This seems like another example of protocol ossification[1] (servers making assumptions about a protocol based on how it's used in practice, which breaks things when how it's used changes), in this case due to servers assuming the client hello is below a certain size.

[1] https://en.wikipedia.org/wiki/Protocol_ossification, https://blog.cloudflare.com/why-tls-1-3-isnt-in-browsers-yet
> There aren't a lot of places in nature where you have tons of trees and easy to get ice.

I take issue with this - there are vast swathes of canada, sibera, and northern europe where this is the case. I would say however finding all three year-round near liquid water may be harder, although not exactly an insurmountable challenge compared to say, moving quarried rock 5 miles to build a house
CISA (https://cisa.gov) are investigating. They got the emails between me and "Jia Tan" and other information we have. They can subpoena Google to get IP addresses behind the emails, but it depends on whether and where a VPN was used if they'll get any further than that. If we will ever see a fully public report is anyone's guess.
I've been an adult for almost 40 years and never disparage other people's preferences if they don't hurt anything. I call it childish.
This is blatantly false, along with the idea that there’s only very little python.
> my golden handcuffs

I never got this frame of mind. You chose to wear them. You like your golden bracelets. You can take them off any time you want. You are making the choice of staying. At the very least assume the responsibility.
Consoles are (still and mostly) singe purpose devices. While I do approve force opening every Turing complete device to side loading - game consoles are way down in the worst offenders list.
Ruwiki (Wikipedia Fork)
It will probably happen at some point. In 1990, the EU was easy to do business in and represented 25% of world GDP. Now it’s exceeding difficult to do business in and represents just 14% of world GDP. If those two trends continue, there will be a point where it’s just not worth it for large companies to be threatened with fines on their “global turnover”.
I think the third one has no effect on startups but it could have a big effect on for e.g. the Google's of this world who buy small companies then kill their product line or end support after a couple of years.
Maybe some designer/typographer nerd should make syntax highlighting rules that only subtly emphasize different syntax categories. I am thinking something with italics, slightly different font weights, and very limited use of colours. A possible starting point would be to just use italics for comments and normal text for the rest of the code.
It's very telling of the cultural shifts that have occurred over the past century.
Fixed, thank you for the report. It won't be visible on the site until the next time it's rebuilt.
How were the active parts "buried deep inside the semiconductor crystal" of BJTs?

Surely doping is a surface phenomenon?
Or perhaps we refuse to accept what was normal-all the horrible shit mentioned here, unremedied, unmentioned in the editorial. Fuck off WaPo.
Darwin at work?
Only issue I can immediately see is that the salary is about a quarter of the FANG rate.
Been there, done that, gave up because it’s not a justifiable expense for individual use. Wrote a couple of Android apps instead but can't really use them daily.
I love systemd.
> I bet it will happen that some apps i now use, which are in the regualar app store, will be pulled in favor of a own app store which has more tracking and maybe even cost money.

Did not happen for Andorid so there is no reason to think that it will happen in this case. Also, how would an app installed from another store be able to track you more if you are using the same OS. That just sounds like bad OS design from Apple.
I would start with projects where the maintainer(s) suddenly got a very helpful contributor. I am sure there's a typical pattern. Then if a maintainer seems suspect investigate a little bit more. Here some balance is needed because probably many maintainers are not Mallory.
I'm always happy to be challenged in my views. As I say above, there was no challenge from yourself, only dismissal.

Your comments have now become personal and derogatory and I am not willing to have a conversation like this at all, so I will do as you say and go away, or "shut the f up" as the other commenter said.

I'm not sure what gives you the right to tell me my views aren't welcome here. I've kept my comments within the site guidelines while you have not. Is this your personal echo chamber where others aren't welcome? The boys club where laughing about "females" goes ahead without comment? It must be that way since you targeted the single critical voice in a thread with at least 2 other examples of what you're ostensibly complaining about that you chose to ignore. You wouldn't even have the decency to respond to anything I said, again straight to dismissal and telling me to leave. So much for being challenged.
> But what makes me really upset is this completely unexplainable need to make everything part of one particular init system. There is absolutely no reason to tie your new sudo replacement to systemd. Absolutely none.

The systemd developers are tying it to systemd because they are systemd developers. If somebody else made something like this, it wouldn't be tied to systemd. But somebody else hasn't made something like this.

Sudo isn't going to just go away (unfortunately). You can keep using your CVE-ridden setuid binary as much as you want.
Sponsorship with the attached advertisement is very different than "used by". Don't be silly.

Are you even aware, I am referencing the issue of a Nix conference hosted at a German university, or are you in political autopilot drive-by mode?

I linked a Wikipedia article, read it, if you're genuinely interested and not debating in bad faith.
Razer forced to pay more than $1M in refunds for its 'surgical N95 respirators'
The linked discussion is for WASIX, this is WANIX.
In that statement it wasn't 1) acknowledged that this is indeed an issue and 2) the word workaround was not used.
Looks like it renders correctly at 50% zoom.
Receiving praise for one of my projects made me a lot more active about praising others. It feels fantastic to know that someone loves your work.

Meanness hits much harder, and sometimes I would have given up if it wasn’t for nice people reminding me that my work is valuable.

I have made a conscious effort to be nicer online. Above all, I just don’t bother being mean. It’s easy to forget how deflating a mean comment can be to the human on the other side. Some comments have lived with me for days, and I don’t want to inflict that upon others.

I want to build a community, both online and offline. I am trying to figure out how to enforce decent behaviour. If you have any resources, I would be grateful for it.
Assuming this would be smart to do. But xz is a very good target. It seems a lot of care went into selecting it. Consider:

* It is extremely critical. Used at multiple places in the boot process, with root or kernel mode

* Nevertheless an unnoticeable dependency. Nobody thougt about its security implications

* Stable and trustworthy for years (decades?)

* Managed mostly by 1 person

* That person was more than average vulnerable for pressure, but not in a very visible way.
Yeah, I've heard that story as well. You're right, there's usually a better alternative to firing someone. In fact, hiring a new employee can often end up costing more in the long run.
Lennart's toots suggest they are replacing a complex SUID binary with an already existing component (systemd-run) with better workflow (service manager handling the elevated context), which sounds like a sane move to me.
Show HN: Eventiveness.js wears a new look
Satoshi disappeared one day before Gavin went to the CIA for a Bitcoin presentation. He left the CAlert key and disappeared.

I learned about Bitcoin either days prior or days later. As a newbie I did not care who created Bitcoin, but now I regret not knowing and speaking with him directly.
I don't think it is? I normally turn all the power-saving stuff off, but it could have come back.

In any case, the keyboards do have buffer to hold several keypresses, so I believe what happens is that the event loop kicks in, reads those keypresses, and dispatches them into the void; the booting stuff, on the other hand, only polls the keyboard when it's going to act on it.
I find this quite clever. Yeah yeah, "systemd is bad, it's a monopoly, yadda yadda".

Well, there's also a reason they are doing it, and many aspects of it (seatd, timesyncd, resolved, run), and more neat than cobbling together bash scripts. I like it
The entire problem with LLMs is that you don't want to prompt them into solving specific problems. The reason why instruction finetuning is so popular is that it makes it easier to just write whatever you want. Text completion on the other hand requires you to conform to the style of the previously written text.

In a sense, LLMs need an affordance model so that it can estimate the difficulty of a task and plan a longer sequence of iterations automatically according to its perceived difficulty.
Russia Clones Wikipedia, Censors It, Bans Original