skysight-inc/HackerNews huggingface dataset:
imho:

A false positive CVE list is an issue elsewhere as well, and it's important to understand that there's not much a Docker Postgres maintainer can do if the problem lies in the Debian or Ubuntu package and isn't getting fixed for some reason.

https://github.com/docker-library/faq#why-does-my-security-s...

It's also advisable not to use the default settings:

https://pythonspeed.com/articles/docker-security-scanner/ "trivy --ignore-unfixed <image>"

Of course, it is advisable for the image maintainer to rebuild the Docker image weekly or bi-weekly to ensure all recent patches are included.

However, for those who prioritize security, it is best to build the image themselves to guarantee up-to-date packages.
Pip in its default configuration uses a global wheel/sdist cache. This might be a problem on your end.
Wow, that's great to hear! Excited to see what comes of it.
What's wrong with CPAN?
That which is asserted without evidence can be dismissed without evidence. Please provide justification for your points of view. People making value judgments without providing reasoning makes for boring reading. And boring reading is a high crime on HN.
Why the past tense? Every US iPhone user can install a third-party messenger on their phone today if they wanted to!

The reality is just that people only install new apps if the preinstalled ones don't do the trick, or at least only if most of their friends already have too.

So in my view, the entire problem is that apparently no regulator has been considering it a problem for the better part of a decade that Apple is effectively running half of the country's communication infrastructure without being regulated anywhere close to the way landline or mobile carriers are from a competitive and interoperability point of view.

But this seems to already be changing; Apple definitely didn't implement RCS out of their strong desire for openness and interoperability. I just wish they'd picked a better protocol/system.
So all your binaries are statically linked on your system? 100%?
> The issue is that the Nuvia arch license had extra terms that the Qualcomm one didn't.

> Qualcomm bought a company because they had a license arm wouldn’t sell them.

These statements aren't different. You're disagreeing by slightly rewording what I wrote.
I never cared for these contests, but lots of people like them and have fun with them. It is too bad the guy is locked out.

So, the reason for this is to compete, you can only compete you must only publicly eat Nathan's Brand Hot Dogs ?

Seems a bit odd, but whatever.
Looking at some of the links to other finds, it looks like only one of the players' pieces has the "eyes". I wonder if that is an insignia to differentiate the players since I don't see a color difference.
According to their privacy policy [1], they share your email with third party advertisers. You have to opt out if you don't want that.

[1] https://www.plivo.com/legal/privacy/#how-does-plivo-share-yo...
> You’re competing on...

Purchase decisions for products like these are almost always at the C-level. Very rarely do they actually understand the details of each product's feature set, especially the deepest 20%. You're competing on your ability to convince that decision maker to commit to a new product, as opposed to "nobody ever get fired for buying IBM (Salesforce in this case)" syndrome.
3 Days in Space Were Enough to Change 4 Astronauts' Bodies and Minds
I never asked for a guarantee, that's not feasible, I was looking to see if in-house analysts or engineers can review the data they're using or lower confidence results as a second set of eyes.
I laughed at this line: "Today Alexa has sold 500M+ devices, which is a mind-boggling user data moat." Yes, recordings of 500 million people saying "set a timer for ten minutes," and "order more paper towels" over and over again, truly a treasure-trove.
nsnotifyd-2.1 released
YouTube is currently experimenting with server-side ad injection
Conda is a lot more than a Python package manager specifically, it's more like an entire userspace (akin to Homebrew or Pkgsrc), that happens to be focused on Python because that's where it originated.
I remember talking to Alexa about eight years ago. I was a bit skeptical and asked, "what color is a red car?". I was seriously impressed that it knew that a red car is red.
I don't think this is a healthy level of suspicion to levy against an otherwise correct summary. If you think their comment would be improved with a citation then simply adding it would be good - cited comments are relatively common here but not mandatory and generally not how people communicate.
Small price to pay for a massive regional economic engine!
I am vaguely surprised that phone messaging apps are not a two level architecture. level 1 the ui would manage your contacts and display and dispatch messages. then you have a well defined interface and level 2, I guess you would call them plugins, knows how to authenticate you to to a service and deliver and receive messages. The messaging vendor would supply the plugin and the os vendor would supply the ui.

Only vaguely surprised because, while this could be better for the end user and interoperation, it reduces lock in and who wants that? /s
pip has a global cache, you're probably using unpinned dependencies and getting a different patch version every other day.
Why are you making the assumption that Musk is thinking about this in rational business terms?

Have you not been paying attention to the things he's been saying and doing for the past few years?
Thank you. It's a bit surprising to see Hegel here, I was thinking more on the lines of the analytic philosophy. Of course many early 20th c. mathematicians who were interested in philosophy such as Weyl or Gian-Carlo Rota would not have thought much of such a distinction.
Perhaps tax dollars should not be used to engineer economic outcomes.

If you get too big to fail, why avoid failure? It’s about incentives.

How useful or efficient or competitive do you think taxpayer-funded Sprint would be today? What makes you think they would suddenly start being good with an influx of tax money when they weren’t good before free money injections?
IMO voice assistants keep underwhelming because customers don't want to learn their language--we want them to understand our language. It's frustrating to have to know the exact magic spell wording to get an assistant to do something. They need to be like "Computer" in Star Trek TNG or they're dead in the water. 80% of the way there still isn't good enough--I'd rather just use a mouse and keyboard than endure an awkward trial-and-error with an "assistant" that is supposed to be smart.
I get the feeling that you weren't intending to say so many kind things about the access control practices for Alexa data. Sounds like good work.
I wonder if they have "two-word sentences", sequences of calls that mean something particular in context. Like "Bob, eat!" or "Mom, help!".
I don't see that in Kotlin for instance.
> I assume he was also exposed to many images, photos and videos (realistic or animated) of cats and dogs in children books and toys he handled.

No images or photos (no books).

TV, certainly, but I consider it unlikely that animals in the animation style of pepper pig helps the classifier.

Besides which, we're still talking under a dozen cats/dogs seen till that point.

Forget about cats/dogs. Here's another example: he only had to see a burger patty once to determine that it was an altogether new type of food, different from (for example) a sausage.

Anyone who has kids will have dozens of examples where the classifier worked without a false positive off a single novel item.
To build something 1:1 with iMessage, there'd need to be a market the Pixel has a large share of. For something like FB, they tried with G+. And WhatsApp had first mover advantage.

They had other messaging apps that were maybe ok, but I've never known anyone who used them, and whoever did was thrown off when they made 999 other apps.
So Intel is literally too big to fail now?

Maybe they can share offices with Boeing.
The unit itself if 280 feet long, but by the time it is mounted on wheels and has a truck in front of it, how long is it then? An additional 80' seems long for just the truck, but this doesn't seem like it'll be a normal cab over tractor type truck
I'm from alabama lmao
Yes, its very much a part of my work setup. It transformed working so that for the first time I have a good working setup everywhere.

Its also my preferred place to consume cinema. I have a short throw projector and sound system. I prefer the AVP. The image is so crisp and the 3D is so good, that its better than a decent home movie theater.

Its my preferred place to watch F1.

Environments genuinely soothe me.

Breathe works on this platform, it annoys me on the watch.

I would watch every sport and documentary in spatial if the was a thing. The tastes have me excited for the future.
> Going from L5-L7 is _not_ trivial

It is trivial compared to growing a company successfully from $10M valuation to $100M valuation + an exit.
What features were you missing? Currently Im part of a team making a CRM based on more niche kind of customer and were trying to retrieve more information about what other CRMs lack
Most other packaging systems don't even attempt to solve the problems that e.g. wheels solve.
Sub-types can be represented with algebraic types so I’m not sure that’s necessarily true, for example an abstract class with subclasses can be represented as a sum type
"Please note that Logical network numbers are only loosely correlated with physical infrastructure like cell towers."
UV isn't "improved" yet, at least not until it reaches some semblance of feature parity. However it's a great experiment and I expect that it will end up being a net benefit to the Python ecosystem.
The downloaded packages themselves are shared in pip's cache. Once installed though they cannot be shared, for a number of reasons:

- Compiled python code is (can be) generated and stored alongside the installed source files, sharing that installed package between envs with different python versions would lead to weird bugs

- Installed packages are free to modify their own files (especially when they embed data files)

- Virtualenv are essentially non relocatable and installed package manifests use absolute paths

Really that shouldn't be a problem though. Downloaded packages are cached by pip, as well as locally built wheels of source packages, meaning once you've installed a bunch of packages already, installing new ones in new environments is a mere file extraction.

The real issue IMHO causing install slowness is that package maintainers have not taken the habit to be mindful of the size of their packages. If you install multiple data science packages for instances, you can quickly get to multi GB virtualenvs, for the sole reason that package maintainers didn't bother to remove (or separate as "extra") their test datasets, language translation files, static assets, etc.
Scott Manley has a great video explaining much of this same story: https://youtube.com/watch?v=YDs8rz7pRLQ
In a better language this mistake can't happen anyway. One of the things which too often gets missed when explaining why C++ is unsafe is that it's full of these unnecessary footguns, there is no need to be able to get this wrong.

C++ gets this wrong for maximum drop-in compatibility with C, the classic "New Jersey Style" programming language where simplicity of implementation is prized over simplicity of use or correctness.
>How it happened and there was not a clause in the licensing agreement to explicitly cover these cases?

There were license clauses, the two companies disagree about what they meant, they're currently suing each other over them. This article is about that lawsuit and recent developments.
Seems like this is an ongoing problem with this particular eating contest. Which isn't surprising when you learn it was created by, and people eat, a particular brand's hotdogs.

There seems to be enough money in this for whatever reason, to maybe establish an independent event with normal sponsors paying for it.

PS - I don't really follow nor endorse eating contests; but if they're going to exist having a private company with vested interests running them seems unsustainable.
Another big advantage: Super easy to backup
Trust me, it sucks, especially when the next performance review rolls around. In large organizations where this is possible, often you won't even be able to work on anything because it requires approvals from a managerial chain you are not a part of, or repository access that is given by team, etc.
Ah this answers my question in another comment.

Thanks!
Obsidian is my command center. So many advantages compared to almost everything out there: https://notes.dsebastien.net/30+Areas/33+Permanent+notes/33....
It is not that somebody suddenly stumbled upon this castle. It was mentioned in an inventory book from 1454 and in another book form 1596. Also local field names indicated a castle. It is quite common in such cases that there are a couple of canidates for the location of a castle mentioned in a source. It required a thorough excavation to substantiate such a hypothesis.

Here is a description of the site together with a photo: https://www.unsere-burgen.de/de/Burgen-im-LK-Reutlingen/Burg... Judging from the photo, there is no immediately obvious indication that this free standing rock was the site of a castle.
That's not worrying - the tariffs can be increased. What's more worrying, IMHO, is that EU should have stimulus and means to improve their own competitiveness.
Proof these competitions are just three members of a corporate marketing team in a trench coat.
OCaml and F# do the same!
https://grep.app/ is similar and seems to return results, but I have not compared it to native GitHub search.
Sure acid rain is terrible, but warming oceans seem far worse. If the oceans warm enough, the methane trapped at the bottom releases, and goodbye habitable planet.

https://theconversation.com/frozen-methane-under-the-seabed-...
Oh man that looks cool - BUT - $199/month for the "starter" version and $1k/month for a team prices me wayyyyyyy out on this. I am but a humble solopreneur trying to use SQL to build some nice dashboards (and not go broke while doing it).
An insurance company spreads losses, it does not make them disappear. From a country’s economic point of view, the destruction of an economically productive thing is just as much of a loss, regardless of whether a single business and group of investors/shareholders experiences it, or if it is spread amongst various insurers, and hence their insureds via increased premiums in the future.
Part of the problem with the oil industry is we use the hydrocarbons in the most wasteful/dumbest of ways: Burn them.

I'd be happy to never see hydrocarbons burnt again in my lifetime. However, they still have important applications: everything from textiles to medicine to structural components to the insulation your the ethernet cables that transferred the data you're reading this post on.

My opinion is we need to get rid of the "burning things" industry but keep the capacity to extract this useful natural resource in a way that doesn't add C02 to the air, doesn't harm the environment, and benefits us and leaves something for future generations.
accident involving one in the news recently. impatient/distracted driver crashed into the transport truck.

https://www.tdtnews.com/news/business/article_c49e80c8-124b-....
I’m a very bad person, yes. And your comment speaks to innocuous parent post that dietary restrictions are leading to less people hosting dinner parties. See how that works?
Plus as a developer, I can extend it in any way I want
I recently created a plugin to let me quickly publish posts on social media platforms: https://github.com/dsebastien/obsidian-typefully
> choose to buy a 3 year old phone, you know that it will be officially supported for 3 less years, and should factor that into your (price)/(lifetime) calculation. I

You don't know that since neither the period is known nor is its starting date. Also that's your own expectation, I don't buy that later customers should suffer more

> I'm not sure how you interpreted the "iOS obsolescence program" then

I interpret it as force-obsoleting well functioning devices via software limits. This interpretation does not depend on what Huawei is doing (by the way, another mistake in your comparison is that Apple sells premium devices and also has full control of both the software and hardware, which make it relatively easier to do better)

you don't need any legislation to stop justifying it with faulty comparisons
I don't want to use a third-party messenger app because I don't want to deal with separate apps, and none of them are very good anyway. FB Messenger is close, but it doesn't work well with non-"friends".

On the large scale, I agree. We have telecom regulations for good reasons.
This is a failure of government to incentivize availability.
This was a common complaint in Alexa and one interesting bit of insider information I found out from people that either left for Google Assistant or came from there is that their tools did not have this level of pain around data security. As a result I'm guessing there's a middle ground between customer data security and making it impossible to work with - either that, or Google just didn't care.
Early Android was so bad it was impossible to believe that anyone had tried to use it before release. The first bug I filed against the Nexus S was that the camera app recorded video frames out of order. If literally anyone had tried the video function even once it would have been obvious. Total failure of dogfood testing.
I prefer being bad. Thank you.
I still use my Oculus 2 a few times a week (I try for daily, but life doesn't allow it), but just Beat Saber and FitXR. It just replaces going to the the gym though if there is some problem with doing that.

I can't imagine using an AVP though, without controllers it really isn't suited to fitness.
Another problem:

You can only use 1 core with pip install. I.e., you cannot use the equivalent of --jobs=$(nproc)

This aggravates the problem.
A Developer Cheat Sheet for GDPR
I don't want to be a naysayer, but I do have to wonder, are there any risks associated with making the walls themselves store large quantities of energy?

I'm thinking fire hazards or shorts associated with, say, hanging a framed picture on the wall (or anything else that would involve drilling in the concrete)
Not to my knowledge. But consider something like crypto, libssl ... which is linked to almost everything, or libxz, zlib, etc. If there is a bug in a shared library, one can replace it with a interm one very easily, and the whole operating system will use it. One can even replace it with a different implementation assuming ABI compatibility, without having to do "much".

Enclaves like Go, Rust, Swift (things that insist on using direct sys calls, and eschewing system libraries) would need to implement their own versions, or use FFI, and then you're SOL anyway if you really insist to use static linking... And who knows what kind of bugs might crop up there that don't match whatever anything anyone else uses.

Shrug :-)
Watched a video of a guy who owns an oil and gas company and when a nearby company started fracking their well, it produced enough pressure to 10x his own output without any effort on his part.
I’d tend to assume you are immune compromised or were dealing with some other none-of-my-business thing like that.
The Safety-Critical Rust Consortium
Sounds like it will be used to pay subscription fees on features. “Your headlights are disabled. Please subscribe for $9.99/month to use your headlight“.
I don't get what you're saying. Why would a self-hoster care about the code publication requirements of the AGPL? It's an OSS project, the end user doesn't care if the code has to be redistributed, they're not profiting from it remaining closed.
Why can’t you use plastic for the vacuum chamber?
Even more of a reason go encourage kids to explore their rented environment and take ownership of their devices.
> Alexa put a huge emphasis on protecting customer data with guardrails in place to prevent leakage and access

For what it’s worth we were working on a conversational health app and this why we picked Alexa over alternatives (if you’re big enough to get on GPT enterprise you can probably implement HIPAA safeguards, but we never got replies)
For a similar comparison, wild horses do surprisingly well in some desert regions of the Southwest US. It's a surprising treat to see a healthy herd of horses meandering through Joshua Trees. They can apparently do pretty well on sparse grasses and shrubs.

Those horse populations do well enough that the BLM regularly kills some off to limit the numbers. Ostensibly it's to protect the environment, but given the number of legal and illegal cattle that's allowed to graze on those same public lands I think the culling is mostly at the behest of ranchers.
Cleaning My Digital Slate
Hello HN! I recently realized I was fed up with how much random digital crap I have all over the internet and decided it was time to clean it up. I'd love to hear from other folks that might feel the same way. If you were able to tidy up your digital footprint, I'd be interested to know how you went about it.
I wonder whether it's possible to write custom code on the platform (to automate processes)? In Salesforce, it's called Apex, a Java like language which allows to write trigger, and is the server-side language for frontend interfaces (written in LWC, Visualforce, etc.). Speaking of, is it possible to extend also the Twenty interface with custom written code?

Salesforce has barely evolved in the last 15 years. Apex (as mentioned previously) has not changed the slightest. In 2010, there was Visualforce, it's been pretty good despite a bit slow. LWC just got slower in general while trying to look fancy with some CSS. And the rest has been the lack of competition making the success of Salesforce, or, in the defense of Salesforce, Salesforce has been way ahead of the competition 15 years ago. And maybe the competition is finally catching up?..
Nothing new in this article. While starts with, "The long-awaited day is here: Apple has announced that its Messages app will support RCS in iOS 18." no such day is here. They previously announced it was coming later this year (which meant iOS 18) and we are still waiting for that future unknown date this year. And still no details on how exactly will work. So while very excited for it, no new news here yet.
> practical = practical for routine mathematical work, which they aren't right now, which Tao says in the article itself.

I see, I guess it would have been nice to be clearer from the start.

> Never have I ever said or implied, here or anywhere else, that proof checkers are useless and bad and stupid.

Did I say you did?