skysight-inc/HackerNews huggingface dataset:
Exactly. I treat anyone suggesting Russia should be treated with kid gloves with suspicion. The sentiment that they are being bullied is flatly offensive. Russia made its bed in the 90s and complains about lying in it.
That’s not been true since Site Isolation IIRC

e: Not sure it’s Site Isolation specifically, but it’s definitely still not true anymore: https://news.ycombinator.com/item?id=24745748

e2: listen to the commenter below, its Cache Partitioning: https://developer.chrome.com/blog/http-cache-partitioning
I was expecting Bad Apple on flipdiscs.
To be fair to telegram; similar things happened to many big names: facebook, google, apple etc
> What's the difference between anti-competitive bundling, and developing seamless integrated experiences?

The availability of APIs for third-party developers to create a similar competing experience.
While this may be, the regression to the mean is strong. These kids who are so far ahead tend not to make a blip once out of college...
It is UB for any C compiler and for any architecture because the language defines it as such.

However, because it is UB, the compiler doesn't need to do anything special if there's no trap on null dereference, since "reading something" is a perfectly valid subset of UB. The only thing that it needs to ensure is that no global, local, or heap-allocated C object can end up at address 0, which is easily done by "wasting" a single word at that address (or using it for some internal purposes).

It may still be that there is something useful at address 0 that some code may want to access. For example, in real-mode x86, the interrupt vector table starts at that address, so if you want to change what gets called to handle INT 0h, you'd need to write into it. But at this point you're already deep into architecture-specific stuff, and so it's not unreasonable to expect you to use some special facilities that a compiler for this architecture might provide to enable it, instead of the usual pointer dereference.
Emulating Humans with NSFW Chatbots
This is not just disinterest. It feels like active contempt.
So what did the malware actually do?
Because of modern cache partitioning, HTTP/2+ multiplexing, and sites themselves being served off CDNs, external CDNs are now also worse for performance.

If you use them, though, use subresource integrity.
Article title: Ignyt Learning Platform

Article h1: Learn Your Way, with the Power of AI

(Please use the original title) https://news.ycombinator.com/newsguidelines.html
Thank you. This is what makes i18n hard when you're not a native of the country you're designing for and you're not reading design blogs for other cultures. That property has never shown up on any of the sites I read.
This isn't true for every product. I bought a laser printer recently from Brother. It can only be refunded if it's unopened, or if it is not working.
Thanks for the feedback. I've updated the article.
Just say you're autistic.
I thought I was going crazy. Glad to know I wasn't the only one going through the same annoying thing
Do you mean something like the mobile app had multiple user accounts added to it, and it displayed messages for one account in the other account? Otherwise it seems more like a server bug than a client bug?
Warcraft 2 definitely used IPX for multiplayer. I remember struggling to get an IPX driver installed on our family computers so we could play.
Please don't mischaracterize my post, either. Just because I pushed back on your argument doesn't make my rebuttal hostile.

> It doesn’t matter where you are, journalism does not include hacking into or otherwise intentionally and actively stealing information

We see things very differently, the difference is that you are gatekeeping journalism and hacktivism, while I'm not.

I don't feel like devolving into a meta-argument, so I'll leave you to think on it.
Updated to make this more clear! Sorry for the confusion.
If that's true, this is a wild microcosm example of how the web breaks in ways we don't expect.
That is wrong move personally would start from localllm/llama folks who crave more memory and build up from there.
I would argue it's easier to socialize amongst the journalism community liberal use of the Wayback Machine. Story published? Archive it.

https://web.archive.org/save
EDIT: the first article from the parent comment was https://www.vox.com/world/2017/1/6/14179240/wikileaks-russia...

Those aren't quotes from the article and there is no reasonable way to read those contradictions from what's being said.

You seem to be really badly misunderstanding this specific passage:

>"Shamir was also a longtime friend of Julian Assange, who tasked him with helping to disseminate WikiLeaks documents in his native Russia in early 2010.

>“Shamir has a years-long friendship with Assange, and was privy to the contents of tens of thousands of US diplomatic cables months before WikiLeaks made public the full cache,” James Ball, a former WikiLeaks staffer, wrote at the Guardian the next year. “Shamir aroused the suspicion of several WikiLeaks staffers — myself included — when he asked for access to all cable material concerning ‘the Jews,’ a request which was refused.”

>The first thing Shamir did with the documents was hand some off to Russian Reporter magazine, a Kremlin-friendly newsweekly."

I.e. Shamir, a Wikileaks employee, had access to some leaked US diplomatic cables. He was refused additional access. No contradiction.

This is also the only time that Assange's early relationship with Shamir was ever mentioned (read the article for yourself, find where I'm wrong) and note how it mentions leaking US documents in Russia.

There is no mention anywhere in the article of Shamir "leaking Russian documents in Russia", or what Assange "first contacted" Shamir for. There is also NOWHERE in the article that claims that Assange "never leaked Russian documents".

You're free to disagree with the article, but you're absolutely incorrect and completely misleading about its contents.
Can it be used for medical products such as syringes and vials? Is research being done there?

I had a close relative admitted in hospital for 2 weeks and I saw them use and throw so much plastic like I have never seen before; think 100 gallon bucket of plastic. I am not discounting the benefits plastics have brought to medicine such as hygiene, but I am concerned its environmental impact.

I also understand that industrial plastic waste is probably an order of magnitude greater than that in medicine.

But I am curious what sort of test a biodegradable/sustainable plastic would need to stand for it to replace traditional plastics.
Sure, like cautiously removing key words from Huckleberry Finn because words matter and its more important that people consume less Xanax than accurately reflect on the contemporary nature of historical setting in its linguistic context.

Really though, its sanitizing. Even sanitize is too nice a word. Why not just call it what it is: selective censorship. Its pulling a Tipper Gore so that you can pretend to be a carefully concerned liberal in full hyper conservative hypocrisy[1][2].

[1] https://en.wikipedia.org/wiki/Parents_Music_Resource_Center

[2] https://en.wikipedia.org/wiki/Warning:_Parental_Advisory
> When groups whose primary motivation seems to indoctrinate innocents into a cult are pissed

Sounds to me you are worried that these "groups" won't let you indoctrinate innocents into your own cult.
This is a parody and not labelled as such. I also suspect it was written by AI too, since the author's profile portrait doesn't escape suspicion either. You wanted AI blogspam, here's your exemplary specimen.
I would demand the donations back - closing it and selling off the collection is NOT what the donors wanted.
They're always permitted to ask, but there's nothing they can do to stop you.

Maybe it's a bit rude, but their choice not to reward foreigners under their bug bounty is also kind of rude. Neither party has much of a high ground, in my opinion.

The blog post was published half a year after KakaoTalk said they fixed the problem, that's twice as long as most people would give them.
Every time a new unit is added I find a use for it almost immediately to clean up my designs and clean up my CSS. I've practically rid myself entirely of media selectors for viewport sizes.
Yeah that was my first thought seeing the title - what ‘remembering,’ I’m on a LAN right now, it’s nothing special.
My friend wrote Micropython so I’ve passed this along to him! Very cool.
It shouldn't be! Forcing big companies to unbundle product pricing would give new entrants to the market a fighting change at success.
On NTFS (under Windows) it's handled rather straightforwardly. When a file is originally created it's given a date created timestamp. If the file is copied naively the date created timestamp changes to that of the copy time, while the date modified remains intact.

However it's easy to preserve the date created timestamp during a copy using the native Robocopy utility, among many other methods. It's simply treated as date modified is: modifiable and arbitrary.

This makes restoring from backups sensible. Have a drive that has died? Can do a file-based restore without the need for images and preserve such metadata. Individual file unexpectedly deleted? Restore it and regain the timestamps. The benefit is one has a transferable reference for when files were originally made, even if they lack internal metadata that stores this (such as eg: EXIF for images).

Under Linux, even with its now kernel-based NTFS support, it just adds NTFS-specific data like date creation timestamps as peripheral extended attributes, which Linux file managers broadly don't expose or handle well. While native filesystems like EXT4 which support creation time are impractically limited to unmodifiable date creation timestamps based on their first creation on that particular instance of the filesystem, without hacky and fragile workarounds.

That is despite `touch` being ubiquitous on Linux for modifying date modified timestamps (showing that in practical terms, it's considered similarly arbitrary metadata) which from what I've seen Linux users appear to have no disagreements with about its utility.

As a Windows user who would like to migrate to Linux this aspect makes it frustratingly a non-starter, as even if one uses SMB to access the files (adding its own layer for such compatible metadata, regardless of the underlying filesystem) Linux file managers still don't handle well extended attributes so management for such files under Linux isn't at parity.
While it’s still a drop in the bucket compared to human driven taxis, it’s remarkable that Waymo will like reach 50 million passenger only miles this year. And will surpass 100 million passenger only miles sometime in 2025.

With that much data the safety case should become very clear.
Tic, Toc: How We Ended Up Living Life on the Clock (2018)
There is a very good counter argument to the liquidity issue: property taxes.

Most Americans have a large portion, if not all of their net worth tied up in their house. This is a very illiquid asset. Yet we have no problem taxing them at around 2%. If regular people can do it, I am sure billionaires will figure out a way to pay too.
LOL. AI vs Microsoft :)
Paper bags are available in a range of thicknesses, just as approximately every other paper product is.
> KakaoTalk is huge -- the equivalent of WhatsApp for EU people or LINE in Japan

I feel that doesn't really describe it well, one should look into the respective product listings for these companies to get a proper idea of the scope of potential damages that could occur.

https://www.kakaocorp.com/page/service/service

https://line.me/en/#allProduct

WhatsApp is only just getting into the complete ecosystem side of things with Meta Pay. Google as a company is probably more representative of scale

https://about.google/products/#all-products
Game theory at work? Someone needs to maintain legacy code for free that hosts thousands of sites and gets nothing but trouble (pride?) in return. Meanwhile the forces of the world present riches and power in return to turn to the dark side (or maybe just letting your domain lapse and doing something else).

If security means every maintainer of every OSS package you use has to be scrupulous, tireless, and not screw up for life, not sure what to say when this kind of thing happens other than "isn't that the only possible outcome given the system and incentives on a long enough timeline?"

Kind of like the "why is my favorite company monetizing now and using dark patterns?" Well, on an infinite timeline did you think service would remain high quality, free, well supported, and run by tireless, unselfish, unambitious benevolent dictators for the rest of your life? Or was it a foregone question that was only a matter of "when" not "if"?
Amazing work, I've long dreamed of building some sort of magical chyron or ticker using flip discs.
The people responsible are the kind of people who end up running a large broadcaster (ITV) or being appointed Commander of the Order of the British Empire (CBE). The law does not apply to that class.
SRI generally won't work here because the served polyfill JS (and therefore the SRI hash) depends on the user agent/headers sent by the user's browser. If the browser says it's ancient, the resulting polyfill will fill in a bunch of missing JS modules and be a lot of JS. If the browser identifies as modern, it should return nothing at all.

Edit: In summary, SRI won't work with a dynamic polyfill which is part of the point of polyfill.io. You could serve a static polyfill but that defeats some of the advantages of this service. With that said, this whole thread is about what can happen with untrusted third parties so...
Or you could write the query in a language that is easy to write by hand, like https://rcl-lang.org/, so you don't need ChatGPT to translate for you.
Not to get off on a tangent, but this reminds me of my middle school jazz band. There'd definitely be structured rehearsals, but the days that our director threw that all out the window and emphasized improvisation were the best.

We'd get to class, he'd tell us what song to pull out, and he'd just start us off like normal. Plod along, get to the usual solo section and the person slated to perform the solo does their own thing, but the director doesn't allow us out of those looped bars. Nope, without telling us, he points to the next person and has them solo. Then the next. Then the next.

Suddenly, we've reached the end of class and he finally lets us move on and finish the song after tons of people got a chance to work on their improv.

Yeah, we were in middle school and weren't top notch musicians or anything, but those still remain some of my favorite musical experiences.
I took Lion King to mean not to take your family for granted, and I'm fine with it. The other Disney prince/princess movies don't really have messages other than "you can have your cake and eat it too."

Like, whenever it's supposed to be about beauty being on the inside, the couple that ends up together is good-looking on the outside anyway. The writers for Shrek must've noticed this and done things differently.
It's true that if no one archives it, it's gone. But there are people willing to archive things like this, and copyright makes it illegal to do so.

Edit: it's not the archiving that's illegal (probably)--it's the sharing of the archive that is. And sure they can share it after the copyright term runs out, but that's so far in the future the odds of an unmirrored archive surviving are slim.
Red Alert 2 in retrospect feels like an absolute "perfect storm" of bad luck that still produced a fantastic game

RA2 runs on the same engine as Tiberian Sun (with minor modifications)

Tiberian Sun was Westwood's first engine in C++

It was also two years behind schedule and pushed out barely functional after EA bought Westwood out in the late 1990's

While Westwood was busy putting itself back together under EA they spun off "Westwood Pacific" and tasked them to make Red Alert 2 using this same engine

Red Alert 2's engine is the most cantankerous, buggy piece of junk that ran what I would strongly argue was the pinnacle of the RTS genre. Getting it running on modern systems is an exercise in "what directdraw wrapper actually works?" and hoping that the UDP patch doesn't cause random game desyncs, even on a modern LAN
I mean without storing the freq table, which the last example you linked doesn't. Having to store a frequency table limits the encoder to do no better than the 0-th order entropy. Arithmetic coding can do arbitrarily complex prediction per symbol, see e.g. http://mattmahoney.net/dc/text.html#1072 which reaches the world record by training a neural network to predict the next symbol while it's encoding a file.

Not to say a 0-th order entropy coder could not be useful for certain applications if it was e.g. faster than, say, a range coder while maintaining similar ratios. But I doubt that is possible with this method.
Ah, 2 seems like a sensible explanation. I’ve seen 1 mentioned in the press but never seen any details on whether Fujitsu employees ever did this, and why they might have.
> in a BDSM relationship

I guess people with this knowledge are probably part of that subculture, not sure why would they be pothered by that fact. For others, like me it looks like random necklet.
Most of those things probably had a top speed of around 10-15 MPH on level ground and unusually good roads for the time period. You don’t need much in the way of safety equipment at those speeds, though hills would be more risky.

https://en.wikipedia.org/wiki/Ford_Model_TT
Of course it would. And it could be shortened to 4 x n-word, 4 x n-word.
I want an option to manage all env in a single file using a TOML like format like this.

[local]
API_KEY=local-key
API_SECRET=local-secret
DB=postgresql://username:password@localhost:5432/database_name
[production]
API_KEY=prod-key
API_SECRET=prod-secret
DB=postgresql://username:password@prod-db:5432/database_name
[staging]
API_KEY=stg-key
API_SECRET=stg-secret
DB=$(production.DB)

It makes it easier to update all env at once, compare, and share.
It's not much help, but it helps me avoid a few annoyances.

On an unrelated note, I always find it a real headache to keep the naming convention
of the environments throughout the project.
It always ends up like a mixed bag:

* Juggling production/prod, staging/stg, and develop/dev,
* Inconsistent placement of env, e.g. prod-myproject or myproject-stg,
* Skipping env name sometimes, e.g. myproject-bucket for dev S3 bucket but prod-myproject-bucket for prod (though it's okay to emit env name for user facing places like URL),
* Inconsistent resource sharing between envs, e.g. same S3 bucket for local and dev but different DB, or same Kubernetes cluster with different labels for dev/stg but different cluster without a label for prod.

These inconsistencies often result from quick decisions without much thought or out of necessities,
and everyone is too scared to fix them anyway.
But it bothers me a lot and sometimes causes serious bugs in production.

Fix: format
Literally everything from Microsoft is bundled in some anti competitive way. Edge and Windows. Teams and Office. Excel and Word. GitHub and VS. One Drive and Windows. All of it must be forced to split up and operate as separate companies. It is the ONLY way to not distort the market. Additionally, fines must be enacted RETROACTIVELY, along with jail time for executives. Enough is enough.
And the other 99.999% of documents that didn't allege any war crimes?

I'm glad the darker side of the US operations came to light, but it would have been better if the leaks went straight to an actual news organization that had enough ethical standards to ensure names of informants and activists at risk were properly redacted.

Snowden's leaks were far better handled.
Alternative link (easier to read): https://www.folkrebellion.com/dispatch-articles/tic-toc?form...
> Dude, it's just software. The responsibility lies with management 100%.

If you're an engineer, that's not true. The responsibility largely (though not entirely) lies with you. You're the one informing management on whether the system is sound, safe, and fit for purpose. If you don't want that kind of responsibility, don't call yourself an engineer. And definitely don't give expert testimony that your system couldn't possibly be at fault.
yes you just put integrity="sha384-whatever" and you're good to go
> this domain was caught injecting malware on mobile devices via any site that embeds cdn.polyfill.io

I've said it before, and I'll say it again: https://httptoolkit.com/blog/public-cdn-risks/

You can reduce issues like this using subresource intergrity (SRI) but there are still tradeoffs (around privacy & reliability - see article above) and there is a better solution: self-host your dependencies behind a CDN service you control (just bunny/cloudflare/akamai/whatever is fine and cheap).

In a tiny prototyping project, a public CDN is convenient to get started fast, sure, but if you're deploying major websites I would really strong recommend not using public CDNs, never ever ever ever (the World Economic Forum website is affected here, for example! Absolutely ridiculous).
Discussion (206 points, 6 hours ago) https://news.ycombinator.com/item?id=40787842
Guessing not enough money invested in it
I never got to use them. I tried to use the previous version on the web, but the setup was either unavailable or too convoluted for me to bother. Was it even available to use then on websites?
This I do agree with. While AI feels like it has been shoved in many places it doesn't fit so well, it is amazing when it comes to quickly summarizing meetings.
In general, SRI (Subresource Integrity) should protect against this. It sounds like it wasn't possible in the Polyfill case as the returned JS was dynamic based on the browser requesting it.
I'd still like to see a full pardon and record expunged.
RES-Q: A New Benchmark for Differentiating Frontier Model Capability
We've developed RES-Q, a benchmark for assessing how well large language model (LLM) systems can edit code repositories based on handcrafted natural language instructions. Our goal was to create a more nuanced evaluation tool as traditional LLM benchmarks approach saturation. Instead of the standard prompt-response format, we evaluate LLMs as part of an LLM-based repository-editing system, requiring precise instruction following, tool use, and sequential decision making.

Key findings from our study:

1. Claude 3.5 Sonnet outperformed GPT-4o by 12% on RES-Q, despite 1% performance difference on HumanEval.

2. Interesting token efficiency differences: Claude used about 50% more tokens per task than GPT-4o. We hypothesize this could indicate better error recovery for Claude, while GPT-4o might be making more correct decisions early in its process.

3. Open-source models unexpectedly performed worse when afforded their entire context window, while closed-source models improved, hinting at differences in long-context training approaches.

Paper: https://arxiv.org/abs/2406.16801

Code and dataset: https://github.com/Qurrent-AI/RES-Q

We're interested in hearing the community's thoughts on these findings, this approach to LLM evaluation, and any potential improvements or applications you see.
No. Is all liberally licensed, and there are already many Material implementations.

I think the most difficult thing would be understanding the CSS and de-Googlefying it. The SCSS is generated from Google's internal design tokens system, which makes everything more complicated than a pure open implementation would be.
Thanks!! With scenes you could add a ticker for something to this board.
Be sure the goal isn't to get every alternative there, just enough to stop the unfair advantage of bundling and to make a healthier market.
It will turn out well once the newness and novelty of messing with them wears off eventually.
Paint in W11 cannot even do AI augmentation without first phoning home to Microsoft. I'd just use a service for the use cases you mentioned, if I had need for them.