skysight-inc/HackerNews huggingface dataset:
The JFrog Security Research team has recently discovered and reported a leaked access token with administrator access to Python’s, PyPI’s and Python Software Foundation’s GitHub repositories, which was leaked in a public Docker container hosted on Docker Hub.

As a community service, the JFrog Security Research team continuously scans public repositories such as Docker Hub, NPM, and PyPI to identify malicious packages and leaked secrets. The team reports any findings to the relevant maintainers before attackers can take advantage of them. Although we encounter many secrets that are leaked in the same manner, this case was exceptional because it is difficult to overestimate the potential consequences if it had fallen into the wrong hands – one could supposedly inject malicious code into PyPI packages (imagine replacing all Python packages with malicious ones), and even to the Python language itself!

The JFrog Security Research team identified the leaked secret and immediately reported it to PyPI’s security team, who revoked the token within a mere 17 minutes!

This post will explain how we found a GitHub PAT that provided access to the entire Python infrastructure and prevented a supply chain disaster. Using this case, we will discuss the importance of (also) shifting right in secrets detection – searching for secrets in binaries and production artifacts, not just on source code.
perhaps to give publicity to smaller yet high-quality websites?
RAGAgent Now Has Fabric
As of this week, there are new updates including the latest system and user messages from fabric, an updated architecture guide, and new slash commands. Two things make RAGAgent unique: It's an all local solution, and it's made to be completely customizable. All the functions are documented in the API, and the Architecture Guide suggests where customizations can be made.
Maybe my confusion was you wrote VR/AR instead of just AR.

Though even then, while visually the Vision Pro does better then the Quest 3 at AR, the interactions leave a lot to be desired. AR (and VR) make me want to reach out and touch things. But when I tried, instead of letting me interact by touching it required me to "stare and hold eyes perfectly still and then tap fingers somewhere not on the thing I actually wanted to interact with"

Like if an app window is close enough to touch then I just want to touch it like a giant floating touch screen. Not "stare and tap pants".
"Someone brought a youth to a wise man, and said, 'See, this is one who is being corrupted by women!'

The wise man shook his head and smiled.

'It is men,' he called out, 'who corrupt women; and everything that women lack should be atoned for and improved in men - for man creates for himself the ideal of woman, and woman moulds herself according to this ideal.'

'You are too tenderhearted towards women,' said one of the bystanders, 'you do not know them.'

The wise man answered: 'Man's attribute is will, woman's attribute is willingness - such is the law of the sexes, verily! A hard law for woman! All human beings are innocent of their existence, women, however, are doubly innocent; who could have enough salve and gentleness for them!'

'What about salve! What about gentleness!' called out another person in the crowd, 'we must educate women better!'

'We must educate men better,' said the wise man, and made a sign to the youth to follow him.

The youth, however, did not follow him."

- Fredrich Nietzsche, "The Gay Science", 68. Will and Willingness
IME, Starbucks is one of the last coffee shops to come in during a gentrification wave, not the first.
There are many homeless people who are not living on the streets: those living in shelters, or cars, or who are frequently moving between temporary living situations with friends or family. And they may even be holding down a job, and/or relying on local support systems for, say, child care, which could make ‘move where it’s cheaper’ an untenable or very risky option.
'Frog saunas' could save species from deadly fungal disease, study finds
Don't work outside a lot, but do travel with it. If you mean travel while wearing it no, because the fact that it's a video camera makes me uneasy about it possibly shutting off at any moment and rendering me blind + the low battery life. I have worked out in my office gym wearing it and that was nice
Bowling pins are much more uniform and rigid, and therefore easier to grip. Food is mushy and messy.
What are some good places for a technical / programming hangouts on IRC? Can you point me at some materials please?
Obviously one family or small group camping on their property cannot stand up to a seige by the government. But has there ever been a revolution without guns since they became common? You can hardly dream of any kind of resistance against real tyranny without guns. It is foolish to think that tyranny is a thing of the past, and that guns might not defend you or at least aid your escape from such a government. People are fighting tyranny around the world right now with guns.
Thanks! I've been using gemma 2 9B and Llamma3 8B interchangeably. They're both really good models.
> If the point is to pay for services that people use, the rich are far exceeding the cost of services they use

Not if their wealth is being subsidized by everyone else and not via their own labor, as in that case, they are using the services of others and underpaying for it. And this goes for anyone, regardless of their amount of wealth.
I tried to read the book and it sucked. They did him a favour really.
It isnt that radical and is how taxes worked for broad swaths of history. Income taxes in the US essentially didnt exist before the 1920's. Many taxes are still collected on a use basis today.

Simple examples are toll roads, gas taxes, permit fees, ect. SSI is closer to a use tax, but has some redistribution built in. Many cities fund infrastructure using parcel taxes, which approach per capita use taxes as well given that hey are paid by home owners, or often passed on to renters.
I don’t see what’s wrong with celebrating beautiful things. Or people. How you manage yourself in a world where others have some advantages or are better in some way, is a personal problem. We don’t need to pretend that what people prefer is “unrealistic” as a way to salvage ego, or worse, use charged labels like “objectification”.

That said, this contest is cringey and just a PR stunt.
The whole point of their system isn't to eliminate the possibility entirely it's to make it impractical to get around for the vast majority of concert-goers, and it clearly succeeds at this.

Recording the ticket with a video is everyone's first thought at defeating their restriction, and is no doubt the first thing they thought of when designing it. Hence, the codes expiring too quickly that you'll need a new video before you get through the line at the entrance of the venue. And messing with videos in a pressured line of people in front of a bouncer, is, as others have said, simply not practical for the vast majority of cases.

So it's kind of irrelevant - practically speaking - that it is possible.
It ain't really a big change; fly.io looked cool, but it ain't like I'm already a customer. And lukas_b doesn't seem to be all that brand-new of an account, either.

As for "why", it's because I've been burned by this sort of thing before.
It will probably be confusing until the delta of monetary damage to drones outpaces the value of campaign contributions. Until then, we have articles to look forward to highlighting how "unreasonable" this behavior is so the window of manufactured consent can move to justify the new reality.

This is not a conspiracy, just the alignment of capital incentives that externalize current notions that could be argued as believed to be within the realm of "the public good."

No one is paid to advocate for common sense, privacy, or the right to shoot the free targets that avail themselves over your property.

See also: https://www.bbc.com/news/magazine-26073797

https://www.promarket.org/2019/02/13/social-media-clickwraps...
There is a new policy: the IRS was funded to allow investigating and collecting that. For years it was starved, just so it wouldn't be able to. The ROI in investing in the IRS is amazing.
Also partly because it is hardware related. HN's hardware discussion has always been far worse than other tech site.

And also why people should use the downvote button more often on post that shouldn't be sitting at the top.
Yes, there is a whole subsection of the internet that seems to think that vegetables are a net negative. They site doctors that suggest that fiber causes irritation in individuals with compromised intestines (leaky gut syndrome, etc.). It's exhausting having conversations with them as a vegetarian as they seem to think the only healthy way to eat is bone broth, butter, mct oil, and meat.
If people value living in an area, the price goes up until supply and demand are similar. Those with less to spend have many other options. Nobody is owed a specific home. To say otherwise would ignore the huge benefit of immigration.
The "vortex model" that went viral something like 10 years ago was more or less immediately debunked by scientific news outlets. It is beautifully made and intriguing but unfortunately not correct.

See more: https://www.universetoday.com/107322/is-the-solar-system-rea...
Rust Jobs Report: June 2024
Thanks. I think I figured out how to do this for new posts. The main differences between RAGAGENT and openwebui is that chat history is vector searched for context assemble and fabric is used for system and user messages. It's not just a frontend for the default REPLs. It's a real agent. Moreover, my documentation is designed to allow you to add whatever features you want. It's designed to be an engineer's best friend.
> Or maybe we could collectively get back to the concept of individual responsibility and personal success?

Two points here, I guess:

1) The nice thing about compounding growth is that it just doesn't care about individual or personal anything. People who start with more get more, and they get it faster without them even doing anything.

2) Executives are standing on the backs of the people doing the actual labor. Children of rich families are born on top of mountains of money. Let's not pretend like their success is entirely personal. Unless maybe you want to eliminate inheritance and trusts? If we can entirely eliminate inheritance and trusts, that would probably go a very long way.

> raising the wage limit needed to hit the highest tax bracket

Feel free to put another bracket to differentiate 10% and 1% if you want. That's entirely orthogonal.
America's space wars are our space wars
https://libera.chat/

A channel listing will give you _many_ results.
> unrealistic beauty standards

Hollywood does that for men, too. 6 foot, ripped abs, improbably large muscles, chiseled features, hair. A shirtless scene is inevitable, and the lead actors need to deliver.

To compare, watch an old Paul Newman movie with a shirtless scene. How standards have changed!

Brad Pitt was once excoriated for showing off doing pushups between takes. What he was actually doing was getting his muscles pumped for the next shot.

For the volleyball scene for both Top Gun movies, the men spent months in the gym.
That's cool. You can switch the model to whatever you like. type /help and find the command to switch models.
Mine too! Saw it about 100 times via the magic of HBO in the 1980’s. I loved to sing I will gladly pay you Tuesday for a hamburger today to my kids when they were young. They are teens now. Still break it out once in a while to their great embarrassment!
Im not going to debate LVT over the internet today. If we arent talking about dollar subsidies, then anything can be claimed.

I think this just collapses into the first case where the purpose of taxes being equality. Unpaid labor/service value is just the rationale.
New Patent Guidance on AI Could Quash Innovation
As a ~7 year vegan, I eat a fair number of substitutes. As others have said, I don't do it for my health or because I don't like the taste of meat.

That said, in line with the article, when I was in college, I had the Maddox "For every animal you don't eat, I'm going to eat three" image blown up as a poster on my dorm door. I had a "PETA: People Eating Tasty Animals" t-shirt that I wore around. My aim was to upset the vegetarians, and I made fun of them whenever I saw a window. I can't speak for others' motivations, but the fact that there was a group of people living a lifestyle that I thought was borderline impossible cast inherent doubt and judgment on my own choices. Having to confront the fact that they might be right led to a lot of unresolved cognitive dissonance and anger.

If you'd have told me that ~20 years later I'd be vegan, married to another vegan, and raising a child on an entirely plant-based diet, I'd have laughed in your face.
XStreaming: Open-source mobile client for xCloud and Xbox home streaming
XStreaming is an open-source mobile client for xCloud and Xbox home streaming, great inspired by Greenlight.The application runs on Android 10+.

Features:
1. Stream video and audio from the Xbox One and Xbox Series S/X
2. Support for 1080P resolution
3. Support for virtual\OTG\bluetooth gamepad controls
4. Support gamepad vibration
AuraFlow v0.1: a open source alternative to Stable Diffusion 3
these are great. geometry is culture. there are some mythical proportions measured in cubits, handbreadths and other units of measurement (pillars of the first temple at jerusalem, etc) that put reading the old testament in perspective, where they were writing about physical objects we can use those measurements to reason about today.

I hope there are more editions of these rules and related ones in the future.
Arm announces an open-source graphics upscaler for mobile phones
> I've seen that won't offer the correct resolution for a particular monitor (typically locked to 1024x768 on a widescreen monitor).

I've been using linux for over 20 years, Xorg for most of that time, and I've never had any issues with screen resolution.
Your calculus analogy has me thinking that I may just haven't encountered some pain points where being able to apply certain things that will improve my quality of work. Especially in regards of being a better communicator to be more effective team member, and employee. I also tend to work in silo'd situations.

I mean, I always encounter problems at work, just not the right ones to get me to where I want to be today.

And where I'm in a situation where I'm free to do side projects, it doesn't feel better. I can't effectively come up with new problem scenarios unless they resemble something I encountered in the past.
Your first bloke defined two parameters - one really: length. A boat needs rather more parameters and it is not following "geometrically".

Your harpsichord maker is also a fantastic beast.
Another being injuries - ran into that myself. After 2 years of working out, 1.5 years with a personal trainer, I have had:

- a knee injury when he put bands on my knees to do a "reverse wall sit", and I slingshotted out of it, knocked down a barbell, and the barbell hit my right knee

- had arthritis in my right shoulder; power lifting aggravated it to the point I had to stop doing most upper body stuff. It's better now, but still can't do anything heavy with it

- grabbed a slam ball from the floor, hoisted it up to my chest, my right pinkie hit my left hand and broke/jammed/sprained my pinkie pretty bad. Still hurts sometimes months later.

- developed tennis elbow mostly in my right elbow, some in my left. Had to cut out weights again, stick with bands for a couple of months, still bothering me

So if you do start a training program, please go slow, especially if you have never trained in your life like me. Your muscles will develop much faster than your skeletal support system and it's pretty easy to hurt something that may take a long time to heal.

If I had it to do over again, I'd probably stick with just body weight stuff and very light weights for at least a year before moving on to heavier weights, even if the trainer says I can handle it. I could, for a while, but it caught up with me.

I have to add, I am still in better shape for having exercised than I was before, even considering the injuries. I had a pretty serious illness, lost 40 lbs (I was 170, 6'1, got down to 131), and nearly died. Training saved my life and got me back up to 165.
It works. lcd monitors will have the native resolution.

Of course if you use debian 3 in 2024 the fault might be your own…
Another is that 401(k) accounts are protected from creditors by federal law, where IRAs vary by state.
We have a framework at <job> to do memoization as well as distributed compute - in fact the memoization was mostly a happy side effect of the need to transfer serialized function arguments to other machines.

Your addition of code/runtime dependencies intrigues me. I will probably take a look at your code to try to understand this better.

I somehow doubt there's enough overlap for us to open source our work and try to merge with yours, but it's really cool to see other people working on similar concepts. I predict we'll see a lot more frameworks like these that lean on mathematical principles like functional purity in the future.
My feeling is, if most of Apple's employees are almost all not using the thing then it's a failure. I suspect 98% of all Apple employees use a iPhone, a Mac, and probably an iPad, and an Apple TV. I bet < 2% use a Vision Pro. If their own employees don't use it, why would anyone else?

To take that further, one dream of AR (and maybe VR too) is it's supposed to make you more productive. Maybe it's having 2, 3, 6 screens instead of one. Maybe it's 3d manipulation instead of mouse, touch. Maybe it's 2 hands instead of a finger. Maybe it's no computer needed because virtual displays.

If a device actually made you more productive then Apple would buy every employee that device. It would be stupid not too. Clearly the Vision Pro is not that device.

I'm pretty confident Meta has the same issue. They pushed using Quest for meetings, for productivity, and now their new commercials are pushing it for better instruction. But, I'm pretty confident, none of their employees use it for those purposes and if they don't, why would anyone else?

The Quest at least as a bunch of games, some of which are worth the experience I know several of their employees that play those games so that's the one thing they are actually using the device for themselves.
Where "a certain age" is no later than 30. Peaking physically at 25 is no exaggeration.
Yeah, I meant "webmail" in the broadest possible sense. And it's even broader than that: anything that allows making anything public really: from forum comments to Instagram to WordPress sites to Wikipedia.

Remember that for about ten years there was a person who consistently and frequently inserting images of ceiling fans in random articles.
The article doesn't even mentioned M4. Dont know why you are bringing this up.

Apple has lost some or many of their chip design talent. Not All or Most.

They did't lost it all at the same time either.

Many of them have been working on M2 and M3, some later ones may be on M4 before they left.

Apple has a node advantage, which is in itself a separate discussion. This article is straightly about IPC.

We didn't even go into Die Size and cost analysis.
That was my first thought, too, but that's not totally ignored. It all hinges on this part: "...when compared to census tracts that were scheduled to receive a Starbucks but did not do so..."

So the sampled population is the neighborhoods that were scheduled to receive a Starbucks, and lack prior other coffeeshops. Which means we're basically only looking a newly gentrifying neighborhoods (that Starbucks has calculated are worth opening something in, but that's probably mostly redundant with "newly gentrifying"). This severely limits the scope of applicability, but is fine in terms of the statistics.

The big question is: why did some locations not receive the Starbucks they were "scheduled" to receive? Because that is a potentially huge confounding factor. If it's because Starbucks corporate said "hey, we only want to open up 2000 new locations this year, let's roll dice to see which ones get it", then it's all good. If (as seems more likely) it's more like "let's start the process for all candidates, but drop the ones that are slowest to get through the permitting process or hardest to get a loan/insurance/workers/supplies/building materials for", well then -- might those affect the ability to start up a company just a wee little bit?

I'm torn. It's an interesting enough result that I'd almost like to go to the extreme measure of doing the "actually read the paper" thing that I've heard rumored some people do. And yet, my cynicism says my doubts are probably correct, so I don't want to bother with the effort to find out if they aren't.
You were supposed to enter a bunch of numbers in your BIOS to add a new disk… and let's not forget to set the jumpers properly.
This is a tangent and I'm not trying to win an argument, but I read the manuals for databases I use, along with many other bits of documentation like language specs. If anyone reading this is thinking of doing so then I highly recommend it.

My approach is to firstly skim the index and look at anything interesting, secondly just use the docs as a reference while I learn the technology, and thirdly come back and read them cover-to-cover (skimming over the boring/irrelevant bits).
Ubuntu is a mess, there you go I fixed your title, joke but no joke, is real.
Albeit 1.6PB/day may be somewhat exaggerated, comparing Binance to Ethereum needs much more consideration including:

- Ethereum's transaction throughput is normally 12~20tx/sec so there cannot be a "high-frequency trades" on Ethereum smart contracts with naive contract interaction(it will cost enormous fees). There are scaling concept like "layer-2" or "layer-3", but they still cannot beat highly optimized centralized server applications. Decentralized exchanges have different schemes to centralized ones to reduce txs to discover the price(keyword: AMM, "automated market maker")

- The transactions per sec metrics are just recording "confirmed" txs by the blockchain, and many "retail-squeezing" trading txs (called MEV, maximal value extraction) are competing behind the blockchain and only one tx is chosen by the blockchain, which will rebate most profits to the blockchain validator(which is analogous to the HFTs on the centralized exchanges).

- The blog post's argument would count all logs of intermediate hops, like L7/L4 proxy and matching engine and so on, and Ethereum's full node storage is only a single component which is almost like a non-parallelized matching engine. Maybe we should also count logs of public RPC nodes of Ethereum? (Also many txs are not gossiped to the public mempool so these are hard to count)
Elon Musk calls for "criminal prosecution" of X ad boycott perpetrators
I bought this book, I believe I pre-ordered it based on this post. I was in a position where I was vaguely familiar with some of the concepts from uni but had forgotten a lot of the details, and had never grasped the bigger picture. Well worth a read!
I thought people stopped going to Starbucks
In the late 90s modems would come with a manual about the special AT commands for that model.

In the 2000s you had to email the manufacturer to get that on a pdf.
How do we know that the judges in that contest weren't generated using AI?