skysight-inc/HackerNews huggingface dataset:
40% may not be a majority, but it's still close to half of all Chrome exploits in the wild, and they could be avoided with a memory-safe toolchain. (Doesn't have to be Rust.)

As for the other 60%, they point to logic errors as the root cause, but that's true of all memory corruption bugs: they wouldn't exist if there weren't logic errors behind them. The actual difference here is that the vulnerabilities are either in the machine code generated by the JIT (e.g. type confusion), rather than V8's own code; or they're in code they insist must be memory-unsafe for performance reasons.

So the takeaway there should be that JS engines for hostile code should either not use a JIT at all, nor memory-unsafe code paths, or use stronger tools to verify the correctness of the JIT and those code paths. But hey, retaining the capability to speed up bloated web apps ever so slightly is more important that
I am in the market for a new vehicle and am strongly considering purchasing an EV. Tesla’s lineup seems stale to me. The Model 3 is relatively modern. However, the Model Y is due for a refresh but project Juniper has been delayed. The Model X, and S are also stale. Competition offers fresh models with more better build quality and design. Tesla seems to be falling behind.
If you read the article, the second paragraph tells about someone whose costs were $700 (significantly more than $400), and even explains why they were so high: the need to travel to California to appear in person.
> Tesla had momentum and they used it to the max

They had momentum and fumbled it with the Cybertruck. They retain a massive sourcing and production expertise advantage, as well as a built-in marketing advantage in their existing customers (and Superchargers).

In the time they fumbled they lost the low-end market to China. They’re currently bleeding the aspirational market to higher-end, more-differentiated brands.

I’m not a car guy. It isn’t clear where they go from here. But they both didn’t use their momentum “to the max,” nor are they out of steam.
A hierarchy of folders
Inside are pdfs, markdown files, images, schematics, mind maps

I frequently review them, shift things around

I have a set of spaced repetition folders which topics I am currently memorising go up and down depending on how easily and quickly I recall them when I test myself

I let the categories form naturally I don’t try and “big design up front”

The folder is regularly encrypted and synced to an always on android phone I have as a wearable computer (it has other functions too - personal llm output, on the mesh net to my personal cluster etc, connected to Bluetooth bone conduction headphones so I can hear while getting audio messages)

Works well, accessible on phone, laptop, any machines, it all resides on my NAS
> As I understand it: Spectre/Meltdown allow reading from the address space of the same process only.

Sorry, this does not make much sense. Why would you need a timing attack to read memory from your own address space? Just a regular code execution exploit should do it.

Here, I found the relevant info (that I was too lazy to find before I posted my first comment, apparently):

https://meltdownattack.com/

> While programs are typically not permitted to read data from other programs, a malicious program can exploit Meltdown and Spectre to get hold of secrets stored in the memory of other running programs.
And yet "Tesla Y has taken the top spot on the sales chart, outselling the Corolla in 2023 as the world's most popular passenger car."

According to https://www.drive.com.au/news/tesla-model-y-worlds-best-sell...

I think the car advice journalism is hopelessly polarised and political, like everything else. Sad.
> The ideal, of course, is no cars:

Of course? While I can get behind mixed development attitudes that integrate walking and biking systems with publix transit, cars will always be necessary. It's foolish to think cars are a scam on the earth - not every errand or trip can be walkable or covered by public transit or even affordable for a family.
I love that one guy who made the Catalan article. Pure dedication.
Yeah and I believe the reason given is because Ladybird wanted to use third party code and SerenityOS has a no third party code policy which made targeting Serenity kind of hard.
That's InstantMesh, not MeshAnything.

The MeshAnything demo is at

https://huggingface.co/spaces/Yiwen-ntu/MeshAnything
Awesome. Something similar for backend development would be great.
> Electric sales were up 14 percent as a whole, which is a promising number. Yet, when you take Tesla out of the equation, those numbers skyrocket: Non-Tesla EV sales grew a full 69 percent over the same period. Nice

This is such dodgy reframing that I feel compelled to fix it: "EV sales are up 14%. Manufacturers other than Tesla made up the bulk of that".
Given the rest was reasonable I was willing to grant that as "aims for high quality".

Because it wasn't about how good of a programmer they are, it was about their intentions and principles. "I try" vs "I don't try" already makes the significant relative difference regardless what the absolute values are.
But that isn’t the story. Tesla’s contribution to the 14%, the growth, was negative. We’re looking at the difference in differences, not absolute values.
The robots are here, helping man 10x their oppression productivity.
It’s curiosity because I’m involved in software security for the company I work for and I’m a software developer that primarily works with managed languages. I unfortunately lack the technical expertise to make an assessment on interpreters and virtual machines. I am, however, aware that many of the CVEs that I review involve reading/writing memory outside the intended bounds. Many of these while processing user generated content.

I appreciate that the author birthed the project as a way to direct his energies towards more productive means. I don’t think it’s relevant to the question though.
>Still, let's just call it what it is: stupid.

Or maybe it's stupid to refrain from enjoying your sex life when the technology exists to enjoy it safely. All a question of perspective.

One thing's clear: there's nothing in your comment that's actually actionable. Sourpusses have been droning on about personal responsibility for centuries – and everyone else has been happily ignoring them. Making PrEP and other such treatments available will actually make a positive difference to people's health.
It may be hard for you to believe but there are projects not run by "business people".
This is complete nonsense (and borderline gibberish - Interpol can't 'enact' any laws in the US).

Extradition generally requires that the thing you're being extradited for would also a crime in the jurisdiction you're in.

For speech offences, this makes many foreign judgments unenforceable in the US due to the First Amendment, not to mention additional formal protections like the SPEECH Act.
Because rust is a cargo cult. We're nearing 10 years since 1.0 and there's still not a single serious, widely used, large software project to prove its viability. Maybe make one instead of trying to passive aggressively convince others to do it for you?
The best practical technique is generate random problems, and compare your solver with another (or two), and hope you didn't both have the same bugs :)

You can also often make progress by "shuffling" problems (reordering constraints / variables), or solving sub-problems + super-problems.
Around Firefox 4 it became a shitshow of questionable UI redesign every version. And performances where not up to Chrome.

Also Chromium is open-source, and Firefox is mainly funded by Google so it not like Firefox has a real proposition value or independence.
CP-SAT Solver
Looks hella cool!
Ladybird is an experimental engineering project; consider it "basic engineering" (a la basic research). Thinking in terms of "value proposition" is very limiting. Its goal is to develop an independent web stack (not a "hobby project" at all); its intent, one of several really, is to peek into and implement the internals of the modern web stack.

By doing so openly and incrementally without attachments to deadlines or an employer with specific priorities, the dev can take the time to identify inefficiencies, pain points, subtleties across the stack etc. which are then recorded in the development of the browser.

Thus, the project is not aimed to "achieve" something at some point in time; its "value proposition", if you must use this annoying term, is the development process itself.
Thanks, i did not knew him.
I am ready to agree with you if you’re not being hypocritical here. Surely you’re doing only the best work for your employer, and spending your own unpaid leisure and sleep time on honing your non-marketable but company-demanded skills, undergoing psychotherapy to get along better with your manager, and thinking of all the opportunities to save your employer more money.

It would be a shame though if you demanded unpaid work from others, but didn’t live by the same rule yourself.
At present we are a long way from proving general constraint solvers are correct, as they are built from some many little algorithms that interact in weird ways.

It's an interesting area, and I hope we'll get there in the future.
> However, if P = NP, there is no process that works here - there's nothing that is hard to do but easy to demonstrate, and therefore no zero knowledge proofs exist.

IIRC technically, there are zero-knowledge proofs for all statements in P: the proof is "prove it yourself", which the verifier can do because it's in P.
It's fascinating that your defense of someone being tired of the CA-centric attitude here is to then turn around and hide behind the NYC-centric attitude.

If it's not SF or NYC, it barely matters to most HNers, which is rather annoying to see. It very much obviously causes a heavy bias and arrogance since there's no realy balance to the areas outside those two metros.
Being so strongly associated with Elon Musk and therefore his political opinions really shrank the customer base.

EVs aren’t very popular with the average right wingers.
Is there any work demonstrating this? For example, how do statistical models capture adjunct/argument asymmetries in extraction?
AI the Product vs. AI the Feature [video]
This type of comment is one of the two reasons I'm still opening comments on HN. Thank you for the laugh.
How exactly is this different from existing subreddits? Like r/ideas or r/startup_ideas.
That’s a pretty cynical view. It’s more like asking why a car manufacturer is developing a car without modern safety mechanisms despite knowing those mechanisms save lives.

If this is a work of art whose code is to be admired and only viewed as a creative work, fine I’m sorry I asked the question and that it was criticism of one’s vision.

However, if this is something that is intended to be “driven” by other users in the future I think it’s a perfectly acceptable question to ask why more modern safety mechanisms are not being employed. Maybe there is a rationale I’m unaware of or a reason why those mechanisms are not employed.
I think it's a complicated comparison to make though, you could well be more of a target as a tourist in Tajikistan than as one of the masses in NYC, so the incidence is low but your chances of being involved in a given incident, etc.
Servo had so much potential as the flagship Rust project, a fast and memory safe browser engine.

Such a loss to see it jettisoned and abandoned. Myopic decisions like these are filling the cloud of pessimism that now shrouds Mozilla.
The problem with targeting a subset is there's a ratchet effect with web APIs, once support reaches critical mass in the major browsers sites will start unconditionally relying on those features and there's no going back from there, any new browser has to also support those features or be considered broken.

I suppose anything that's gated behind a permission prompt in Chrome/Firefox/Safari could be culled without too much trouble at least.
"Potential Ozone Depletion From Satellite Demise During Atmospheric Reentry in the Era of Mega-Constellations"

https://agupubs.onlinelibrary.wiley.com/doi/10.1029/2024GL10...
HiPPOs, Mambas, and Other Creatures
Although I dont like quite a few Firefox decisions. Like the floating tabs which no easy way to revert. I still think Firefox as a browser is fairly decent. And I also think that ladybird is going to have all the problems that Opera Presto had (and now Firefox has) which is going to be ignored by any small developers, and targeted to generate errors by the big companies (google/microsoft...)

I definitely would have preferred the momentum to go to SerinityOS, and perhaps, importing firefox/librewolf into Serinity OS.
From the article: Please note: it’s not designed for real-time interactive scenarios like chatting, more suitable for data processing and other offline asynchronous scenarios.
Repo: https://github.com/lyogavin/Anima/tree/main/air_llm
I guess…

But it was approved a while ago, except for some reason Delaware went against precedent and disallowed it so they moved to Texas where it was re-approved.
That still holds true in rich countries...
Programming languages shape the way their users think (2015)
https://www.autonews.com/sales/april-us-ev-registrations-ris...

Clicking through to the source—or at least the part that’s not paywalled—it’s not clear how great that 69% increase is. It’s described as the result of heavy incentives to clear excess inventory.
it's dodgy reframing, but you can't conclude that non-Telsa manufacturers made up the bulk of it, at least from that isolated quote

Suppose Tesla had 99% market share at the start of the period. Sales of the entire market growing by 14% could be explained by 13.44% growth for Telsa's share and 69% growth for the other 1% market share.

without knowing the absolute values, the headline is fairly meaningless
Admirable level of honesty. Great signalling for culture.
Some of us prefer black text on white background over white text on black background.
There's certainly exaggerated faith in the capabilities of a single technology - Transformers - and evidence is appearing about its limitations on planning and reasoning. See the work of prof. Subbarao:

https://x.com/rao2z/status/1795595801177260311

https://www.youtube.com/watch?v=hGXhFa3gzBs

This Nikhil Suresh article can also be very enlightening:

https://ludic.mataroa.blog/blog/i-will-fucking-piledrive-you...
>Just give out all the profit as bonuses to execs and done, zero profit.

It gets taxed as personal income so where is the problem? Even if the execs are located in Georgia where dividends and stock appreciation count as foreign source income and remain untaxed, the bonus is considered to have been earned in Georgia and is taxed (at a low rate).
This is the financial model the large investors have been working on. Luxury market saturation followed by commoditisation of EVs.

Go look at the Invesco QQQ ETF on Morningstar and they're the only loss in the top 10. Also why you diversify your investments and don't go all in on TSLA. Ride it, dump it.
> car advice journalism is hopelessly polarised and political

Not sure why you’re coming to such a weird conclusion from two sets of facts that are mutually compatible.

Tesla makes the best-selling EVs. We don’t have sales numbers for Q1, but they’re probably in line with 2023. The news is that while most of 2023 involved reporting on how EV sales were flagging, on review, we find EV sales are growing fine, it’s Tesla’s that are stable. That means they’ll continue to be a top seller. But less top than before.
It’s not clear if Tesla is focused on new models anymore. Seems like they think that the only way to justify their stock valuation is if they improve FSD.
This analogy has been tortured beyond usefulness.
Like you would just make your enclosure out of the zinc is what I am thinking. I know satellite dish parts are often made out die cast zinc and those are out in the elements for years. For instance here is an example part made of a zinc casting: https://www.dynacast.com/en-gb/specialty-die-casting/die-cas...

The only thing about metal enclosures is you just need either a connector passed through for your antenna or a channel that your antenna can be potted into like on some cellphones with an aluminum body. Since an antenna in a metal box is umm not going to get much if any signal.

--Edit--
Also you can find lots of old radios before plastic was wide spread in metal enclosures. Although those old devices are not exactly water tight no gaskets or sealant between parts. Unless you look at older military grade units.
IEEE BigData 2024 Cup: Predicting Chess Puzzle Difficulty
> Delaware went against precedent and disallowed it

Board competence is super precedented. Normally the courts defer to business judgement to an obnoxious degree, but if the Board isn’t independent it can no longer be assured to be serving its fiduciary duty. (To investors majority and minority.)
I wonder, how it is usually spinned? I'm asking as Russian and I see direct evidence of how people who grew up in the constant narrative "fascism is awful, that war was important, our grandparents are heroes" also, it seems, consumed it in easy/stupid form of "fascism is something that those weird germans do, they attacked us, and we won, so we can't be fascists ever".
If anyone is facing a problem like this today, check out or-tools [1]. Bin packing is one of their exemplar problems.

1. https://developers.google.com/optimization/introduction
European elections are usually used to deliver a "Denkzettel" to the currently governing party, it's the same across Europe as these elections are (wrongly) seen as consequenceless.

Federally, the AfD is around 15-18% [1], which is still way too high in my opinion, but they're far from any chance to gain relevant influence on politics. Statewide is a different beast, sadly in Eastern Germany (the equivalent of the "flyover states" in the US) they're almost at the 33% required to block major legislation [2]. I'm honestly not sure how to combat that any more, outside of a (well deserved, given e.g Höcke directly using banned NS slogans) ban on the party.

[1] https://www.wahlrecht.de/umfragen/

[2] https://dawum.de/Sachsen/
How that works battery / consumption wise?
It's fairly new, but at a couple hundred apps. Lots of indie developers, as well as a couple of larger companies.
Key point being in 2023. Meanwhile, so far in 2024, they have sold fewer cars than this time last year. This is not unexpected after a massive success in one year, except for people who like to imagine that growth continues forever.
I'd like to see the ratio of volume used up by satellites vs. volume of the earth's atmosphere between the highest and lowest flying satellite.

I wonder if it's something like the volume an ant would take up in an average American house, where nobody would care about it.

Apparently it's like colliding with one specific ant in a place much bigger than the Empire State Building. Or against one of thousands of pieces of an ant in such a building while being the size of a very tiny fraction of an ant.
Cool tech in theory. I didn't read how the study was conducted but I'll assume the results are correct. The note on the time to reporting makes me wonder about victim survival likelihood. I didn't see that in there, but I assume that 93 seconds could be the difference for someone who was shot.

I don't understand how police could show up later. This technology doesn't replace humans calling, right? I didn't have time to check out that other report, it's very long.
What you're describing is not curiosity.
It is all of that.

First of all, consumers are used to rapid changes (churn?) in automotive design, every few years there is a major reworking of nameplates like the Toyota Corolla, Chevy Silverado, and such. Tesla hasn’t been keeping up.

Sales though is about emotions as much as anything else and the way people feel about Musk makes a difference. My take is Musk was always a bit of a punk who appealed more to some people (tech bros) than other people (women) and that tendency to rub some people the wrong way was always there but he went through a phase where it intensified. It was not so important to ‘please everybody’ when they were selling just a few cars but when you become a big brand like GM or the NFL you can’t win by driving anyone away.

I don’t know what he was thinking but from the viewpoint of making and selling cars the pivot to “conservatism” was not a good idea. For one thing liberals are a lot more interested in buying EVs and recently conservatives have been polarized against them. If “coal rollers” in Texas were going to flock to Tesla because Musk was mocking “woke” people on Twitter and leaving California that would be one thing but it isn’t.

My son’s views are relatively conservative compared to mine but he’s much more negative on Tesla and Musk than I am and his reasons cover everything from an antipathy to connected cars, touchscreens and cars becoming an extension of phones like the Apple Watch to questions of character.

It doesn’t help that like all the ex-China manufacturers, Tesla is ignoring the mainstream market and instead fixating on the profitable but limited luxury market.
Please read the article. This is covered in detail.
Are all these companies still as successful in alternative universes where BVP did invest in them?

I guess in part it depends on whether BVP just gets on the cap table and stays the f out of the company direction :D
> But it’s a completely separate codebase right

Not entirely separate anymore as both make use of shared external libraries.
They have multiple politicians from different countries pushing for legislations, some can be "surveillance" and some "pro consumer" and some both. I would say likes of GDPR are pro consumer.

Also, it is better than pro-business govt, that only acts if their lobbyists like it.
The discussion was about the additional risk to the customer, not the vendor.
So if one wages some military shit all over the world, one should immediately relocate?

What about abandoning elderly fathers and mothers, etc.? Or should they relocate too?
$120 here in the USA. Which is high for the kind of service it is but if that's your only option then it's within a reasonable range.

It's not unusual for us customers to pay a higher premium for the same service that is sold at a lesser costs around the world. This is for a great many things. This can be due to companies actively using their us customers to subsidize their market share and other places but I don't imagine that's what's at play here. It could be that the government in the Netherlands is offering some sort of subsidy that is allowing the price to be less. Also could be that local competition is necessitating a lower price as well in that area.
KIA has some nice EVs the EV6 line and EV9 there's a new EV3 coming soon. I'm looking into the EV9 GT. I wish the Hyundai Sante Fe had a BEV model option it looks nicer outside than the EV9. The Hyundai KIA 800V (ish) charging is superior to Tesla vehicles.
It’s an uncomfortable truth. Also, it’s hard to admit you’re tacitly supporting a genocide (it’s happening right now).
Spanish, Catalan, Galician, Portuguese, Italian, are all in a cluster together and a bit apart from French. I can read French, but I think it's equidistant from the Iberian/Italic language cluster and English.

So the first language in that cluster after French won't exactly be "easy". Easier than without French yeah but the subsequent ones will be much easier and on the same level of difficulty from one to another as then you mostly just change the ending of the words and the most used connectives.
I'm guessing that's because there's some actual competition for home internet in the Netherlands. Unlike the US where many customers are served by (at best) one provider, who therefore has no incentive to provide good service or be good value.

If Starlink achieves reasonable service, for many customers in the US it can get away with charging a lot.
Have you looked at Firefox's market share lately?