skysight-inc/HackerNews huggingface dataset:
The easiest answer: they should have a build and test and packaging system like Cargo built-in. The best you have is a tedious anarchy of third-party systems, of which CMake seems to have come out the winner. I use CMake, but it's no Cargo (as an understatement).

Borrowing and ownership is great for building safe code, whether it's single- or multi-threaded. In C, you have a nest of pointers, and a pointer communicates nothing about the ownership of its memory. Stuff can go, and leak, and dangle, everywhere. C++ mitigated this a little with references. Then it bolted on smart pointers, mitigating it further. Without learning Rust, though, I don't think I'd be as good of a C/C++ programmer because, unlike Rust, those languages don't force you to think about where memory lives and where it's going.

The module system is also way better.

Then I could take cheap shots: `u8` is way better than `uint8_t`. Rust had slices from the beginning, to be able to refer to parts of strings in a cheap way with easy syntax, whereas only C++17 introduced the comparatively awkward `std::string_view`.

There are ways I think Rust is worse though! The easiest is that it still doesn't have a standard and will probably not see the uniquely deep and broad support of C/C++ in my lifetime. :p
> apparently GCP cannot reliably “stop” a VM in a timely manner.

In OCI we made a decision years ago that after 15 minutes from sending an ACPI shutdown signal, the instance should be hard powered off. We do the same for VM or BM. If you really want to, we take an optional parameter on the shutdown and reboot commands to bypass this and do an immediate hard power off.

So worst case scenario here, 15 minutes to get it shut down and be able to detach the boot volume to attach to another instance.
I'll agree that this appears to have been preventable. Whatever goes through CI should have a hash, deployment should validate that hash, and the deployment system itself should be rigorously tested to insure it breaks properly if the hash mismatches at some point in the process
That was me scrambling to allocate more resources to the container and redeploy it, after my alerting ticked me off about issues and I figured out what's going on. While the container itself was down, the reverse proxy returned an error.
I believe that Golang, as a green-threaded runtime, is allocating a separate carrier thread for running syscalls on, so that a blocking syscall won’t block the green-threads. These syscall carrier threads are allocated with a distinct initial stack size + stack size limit than green-thread-scheduler carrier threads are, because it’s expected that syscalls will always just enter kernel code (which has its own stack.)

But vDSOs don’t enter the kernel. They just run as userland code; and so they depend on the userland allocated stack to be arbitrarily deep in a way that kernel calls don’t.

As shown in the article, Golang seems to have code specifically for dealing with vDSO-type pseudo-syscalls — but this is likely a specialization of the pre-existing syscall-carrier-thread allocation code, and so started off with a bad assumption about how much stack should be allocated for the created threads.

(I should also point out that the OS stack size specified in the ELF executable headers, only guarantees the stack size of the initial thread of a process created by exec(2). All further threads get their stacks allocated explicitly in userland code by libpthreads or the like calling malloc(2). Normally these abstractions just reuse the same config params from the executable (unless you override them, using e.g. pthreads_attr_setstacksize). But, as the article says, Golang implements its own support for things like this, and so can implement special thread-allocation strategies per carrier thread type.)
bach wasn't exactly subculture either. i mean back then you played some shingles in a pub or you were in cahoots with the royals who paid you for making music. but i get your point. i've no competent position really, anyway.
Or, just choose not to consume online pornography if you don't want to share your identity documents with a verification service.

It really is that simple.
> It seems to me that folks who say they want those things don't actually want them that much.

On the contrary, we do. There's just not enough of us.
I think you can rent it out as an event space if you wanted to have your wedding there!
Where is the line? Who people support and who a company supports all becomes relevant in a civil war.

Quite how this gets resolved is beyond me - the west has been quite happy to enjoy products from sweat shops, so is probably complicit.
Amazon defeats US consumers' class action over Whole Foods delivery fees
Googler opinions are all over the map. Not all immigrants are Muslim, you'll find Jewish ones also, and it isn't surprising their opinions would differ.
Worst. 2 years only with awful track record even for the security updates.

And the price is around 1400 eur.
I am talking about removing the ability to install kernel extensions.

As for full disk access, go try and remove Photo Booth from you Mac.
I don't understand, how the signature even worked?
Please please tell me those drivers are signed... Right? ...
These customers wouldn't be able to do that in time frames measured in anything but decades and/or they would risk going bankrupt attempting to switch.

Microsoft has far more leverage than they choose to exert, for various reasons.
The new tech stuff the government has been putting out is legitimately fantastic. login.gov is probably my favorite sign-in experience, maybe slightly behind Google's (and considerably ahead of Apple or Microsoft's).
> especially in tech circles, which historically stood for liberal (progressive/inclusive) values.

Seems pretty clear that maybe history wasn’t what we thought, seems more like tech has historically stood for self-interest, which happened to align with liberal values.
Try Soundslice (https://www.soundslice.com/), which has an speed training feature (https://www.soundslice.com/help/en/player/basic/286/speed-tr...).

It's not gamified like Rocksmith, but it's got an excellent learning and practice interface — for _any_ music you throw at it. You can import tabs you find online in various formats, and we recently added a PDF scanning feature as well. There's also a built-in tab editor.

Also, it works for sheet music (i.e., not just tabs), so you can use it with any instrument or voice that uses common western music notation.

(I help make the site — happy to answer questions)
Reimagic.ai – Transform your photos into portraits
It would be trivial to create a fake photo id site to generate files to upload.
This work looks very promising. "HTML for email" is indeed hard to design and hard to implement. Especially editing on mobile, tablet devices, or asian (two+ bytes japanese, chinese) languages input nightmare.

I do lot of email templating for B2B CRM use cases and decided to opt out for a bit different approach based on slatejs/platejs editor

https://docs.slatejs.org/

https://github.com/ianstormtaylor/slate

https://github.com/udecode/plate

The internal representation of email template with variables in slatejs/platejs json format can look like:

{
"type": "h1",
"children": [
{
"text": " Blocks {{template_value}} {{$timenow}}}"
}
],
"id": "1"
}

Can be easily stored in Postgres jsonb. Very easy to add Reacjs base widgets like mentioning, media, diagrams, etc inside of slatejs/platejs editor.

The drawback is that you can't design the exactly the same pixel perfect template.

The better abstraction is probably MJML - https://mjml.io/ ... and yet with slatejs/platejs json format you can copy&paste your editings across various assets in CRM, knowledge base, etc

Storing data in MJML is not a great choise for me

<mj-text align="left" color="#55575d" font-family="Arial, sans-serif" font-size="13px" line-height="22px" padding-bottom="0px" padding-top="0px" padding="10px 25px"> ...

Was thinking about using something similar to /SendWithSES/Drag-and-Drop-Email-Designer as the last final step ... but couldn't settle it my brain and most end-users dont care anyway.

Any thoughts on data representations and "Postgres <> Editor > Email HTML > Send button" dataflow is greatly appreciated. Very few people have serious thoughts on the subject.
So I'm in Texas and Pornhub already did the same thing here. What I don't get is all of the studio and professional aggregator sites that have existed for 30 years, well before user-generated video platforms were a thing, still operate in Texas. They use exactly the same age verification they've always used. Click yes on a splash screen before you can see free preview content, and submit a credit card to see paid content. If no one complains, we'll assume that was actually your credit card and you're thus 18.

Why is that good enough for every porn site in the world except Pornhub? I have still never seen a website ask for an actual ID except remote test proctoring stuff that popped up for IT certification exams after Covid closed the testing centers.
not anymore ... LMAO
> Most of our nodes are boot looping with blue screens which in the cloud is not something you can just hit F8 and remove the driver.

It took a bit to figure out with some customers, but we provide optional VNC access to instances at OCI, and with VNC the trick seems to be to hit esc and then F8, at the right stage in the boot process. Timing seems to be the devil in the details there, though. Getting that timing right is frustrating. People seem to be developing a knack for it though.
I agree that it is willfully ignoring maintenance, but I completely disagree with the analogy that it is the same as ignoring a fluid change in a car. A car will break down and may stop working without fluid changes. The same is almost assuredly not usually true if a windows, or other, update is ignored. If you disagree, then I'd be happy to review any evidence you have that these updates really are always as critical as you think.
Apache is stable for wrapping mixed services, but needs a few firewall rules to keep it functional (slow loris + mod_qos etc.) =)

Ubuntu LTS kernels are actually pretty stable, but containers are still recommended. ;)
Non-AI content will probably become a marketing angle for certain websites and apps.
I thought windows required all kernel modules to be signed..? If there are multiple corrupt copies, rather than just some test escape, how could they have passed the signature verification and been loaded by the kernel?
Right, MS just paid $75e9 for a company whose main products are competitive multiplayer games. They are never going to be incentivized to compromise that sector by limiting what anti-cheat they can do.
Yeah well, obviously they don't need AI for that.

"We have unit tests coverage of 99%".

Let's be honest. :)
/* Acceptance criteria #1: do not allow machine to boot if invalid data signatures are present, this could indicate a compromised system. Booting
could cause presidents diary to transmit to rival 'Country' of the week */

if(dataFileIsNotValid) {
throw FatalKernelException("All your base are compromised");
}

EDIT+ Explanation:

With hindsight not booting may be exactly the right thing to do since a bad datafile would indicate a compromised distribution/ network.

The machines should not fully boot until file with valid signature is downloaded.*
“There's an old saying in Tennessee — I know it's in Texas, probably in Tennessee — that says, fool me once, shame on — shame on you. Fool me — you can't get fooled again.”

- GWB
CrowdStrike's mess up is CrowdStrike's fault, not Microsoft's. We might not like the way Windows works, but it usually works fine and more restrictive systems also have downsides. In any case, it was CrowdStrike who dropped the ball and created this mess.

I don't like what Microsoft is doing with Windows and only use it for gaming (I'm glad Linux is becoming a good option for that), so I'm far from being a "Microsoft fan", but Windows is very good at installing the software needed. Plug a GPU, mouse, etc, from any well known brand and it should work without you doing much.

I didn't have to install anything on my Windows PC (or my MBP) last time I bought a new printer (Epson). The option to let Windows install the drivers needed is enabled though... some people disable that.
that reddit post certainly aged well ...
Loss of a job can be permanently damaging in some cases.
yw, thanks for making a great product. The API for getting granular user usage / costs is super helpful.

Also, the responsiveness on feedback and turnaround time gives confidence

https://github.com/langfuse/langfuse/pull/2651 (REQUEST unit for costing so we can account for function calls and similar)
You don’t print the images an MRI produced, you transmit them to the people who can interpret them, and they are almost never in the same room as the big machine, and sometimes they need to be called up in a different office altogether.
If you feel that some pornography site would be invading your privacy by asking for age verification, then just don't use it. It really is that easy.

No-one's forcing you to watch porn. It's not a necessary consumption.

And if you consider the abuse that is rife within the pornography industry, then really it is better to not increase demand for this material by consuming it.
Indeed, '\0' is the sentinel character for uncounted strings in C, and even if your own counted string implementation is “null-byte clean”, aspects of the underlying system may not be (Windows and Unix filesystems forbid embedded null characters, for example).
Hey woah.
Take that reality elsewhere, sir.

We’re doomering in this here thread.

/s
Thread stacks in Linux are demand-paged: if you touch the next page then it magically exists, up to a limit. But the machine is not concerned with the convenient properties of this virtual memory area. To the CPU the register RSP is just an operand, expressed or implied, to some instructions.
According to Planned Parenthood pulling out is 88% effective. Which is actually not too bad in my opinion :)

https://www.plannedparenthood.org/learn/birth-control/withdr...
To some extent though- the games do need information about players that are behind walls.
In CSGO/CS2, even if you can’t see the player you can hear their footsteps or them reloading, etc. the sound is very positional. Plus, you can shoot through some thin walls at these players. Even if they can’t be seen.

I don’t believe server side anti cheat can truly be effective against some cheats. But also Vanguard is trash and makes my computer bluescreen. I’ve stopped playing league entirely because of it.
Eventually the only purpose of AI as is the only purpose of computers is to enhance human creativity and productivity.

Isn't an LLM just a form of compressing and retrieving vast amounts of information? Is there anything more to it than that?

Don't think LLM itself will ever be able to out compete competent human + LLM. What you will see is that most humans are bad at writing books so they will use LLM and you will get mediocre books. Then there will expert humans that use LLM and are experts to create really good books. Pretty much what we see now. Difference is future you will a lot more mediocre everything. Even worse than it is now. I.e, if you look at Netflix there movies all mediocre. Good movies are the 1% that get released. With AI we'll just have 10 Netflix.
I have some bad news for you - the nightmare is already here: https://news.ycombinator.com/item?id=40310228
I think the same question can be asked for why lots of equipment seemingly requires an OS. My take is that these products went through a phase of trying to differentiate themselves from competitors and so added convenience features that were easier to implement with a general purpose computer and some VB script rather than focusing on the simplest most reliable way to implement their required state machines. It's essentially convenience to the implementors at the expense of reliability of the end result.
Getting the eyeballs correct will correlate with other very useful improvements.

They won’t train a better model just for that reason. It will just happen along the way as they seek to broadly improve performance and usefulness.
> The american people are mostly against israel and sending billions to israel. And yet nearly all of congress, presidential candidates, etc are in favor of it. Something is awry with representative government when nearly 100% of the politicians are not representative of the american people.

Conservatives are becoming more isolationist, and would just prefer Arabs and the Middle East descend into a huge war without American involvement. Some liberals take Palestinian sides, but most Americans are actually fairly negative on it right now, with the belief that Hamas is intentionally using its own people as human shields. Politically speaking, there is more sympathy by Americans for Israel than Gaza, but there is a lot of cynicism since it seems like real solutions are not going to happen in our lifetime.
Probably more out of caution around workplace-mandated anti-virus/spyware. I don't know if they're sophisticated enough to catch rhymes but it makes sense for general apprehension to surface.
You may have players complain that when they walk around a corner, the enemy who they should be able to see immediately is briefly invisible.
Humans can communicate through software, what is your point? People can be rude in person, over the phone, in writing via pen or computer.
As a sibling comment points out, there's nothing in what you quoted that logically implies that blocking I/O is the only reason for a virtual thread to be suspended.

The best info I could find was this blog post:

https://blogs.oracle.com/javamagazine/post/going-inside-java...

"Virtual threads, however, are handled differently than platform threads. None of the existing schedulers for virtual threads uses time slices to preempt virtual threads."

The next handful of paragraphs are also interesting.
For apple you just need to be an apple customer, they do a good job on crashing computers with their OSX updates like Sonoma. I remember my first macbook pro retina couldn’t go to sleep because it wouldn’t wake up till apple decided to release a fix for it. Good thing they don’t make server OSes.
This might be a case of PornHub's popularity and position actually being detrimental to them, here. The smaller sites are going to operate on a "we'll deal with it when we have to" model whereas PornHub, due to being (or partially being) the reason for the laws in the first place, do not have the luxury of seeing if they are even discovered to be in violation.
When you're a software engineer turned doctor you get sent that by all of your friends xD
It's a wonder mini Jan 6 events don't happen more often. Either people are more cowed than I'd hope, the Murphy's Law outcomes like that almost never happen, or the surveillance state is so complete it would make Eric Blair turn stone cold and piss his britches.
I definitely was not aware America was a country where i need to be permitted my actions and otherwise kept on a registry of who's allowed to do what.
Hopefully now people might wake up to the idea that these tech monopolies are not leading to safe, secure and reliable systems. They will wonder how a third party component could cause such breakage. I expect many will be calling for regulation.
I think this is unfair; m$ does provide perfectly usable generic printer drivers, as long as you only use basic universal features. The problem is that the printer producers each want to provide a host of features on top of that, each in their own proprietary way, with post print hole-punching, 5 different paper trays, user boxes, 4 different options for duplex printing.

Also, label printers, why the heck does zebra only do EPL or ZPL? Why not pcl6 or PS like the rest of the universe?

The point is that printers are bullshit. Nobody knows how they work, and assuming that microsoft should just figure it out on its own is at least in my opinion, unreasonable.
For my recommender/object sorter I have not been in a hurry to upgrade because I have other things to think about. This table should give you some idea of the time-space-accuracy trade offs

https://huggingface.co/spaces/mteb/leaderboard

In a lot of cases you will see two models with a huge difference in size but a tiny difference in accuracy. I could fit either the big or small Stella on my 4080.
>>Anyone with any decent of ethics would refrain from consuming this material.

What, like....all porn? There are plenty of amateur couples who upload incredibly tender, loving and respectful videos of their love life to PH. Why are you bundling everything together with the exploitative stuff?
Windows might be partly responsible for handling corrupted files poorly. According to this other post, the offending file was filled with NULs:

https://news.ycombinator.com/item?id=41009740

Such a file will not have the right signature and checksum to be considered a valid executable. Either these were not checked, or whatever was doing the checking responded poorly and left the system in a state that's difficult to recover.
that is very insightful and interesting. the more opportunities there are to choose a direction along your career, the more often you have to consider if you are comfortable being part of a minority in your field.

but i think we can do more with mentorship and go beyond its perceived limits. however getting there takes us to rethink education as a whole.

there are a few aspects: for one i think everyone should have a mentor at least for the first few years of their career. that should be part of our education system. for example, every university graduate should be required to mentor at least one new student. every university student as well as trade apprentice should mentor in highschool. etc... in the montessori education method older students always teach younger ones, so mentoring at a higher level is really just an extension of that.

this would obviously be easier to ask in countries where higher education is free, because then its fair to ask for something back.

from these, mentoring in highschool is probably the most important because that's when careers are chosen. i remember that time, and i remember being all alone with my choices. i really would have loved to be able to get more insights into the potential careers that i was interested in.
Problems like this tend to come back and haunt you though. Sure, you can set max threads to 1 and move on with what you're doing for a while... but a lot of people run Go so they can have a lot more than 1 thread.

I've run into some of these where it's a lot more rare to hit, and so then it's reasonable to not do the thing that hurts, but watch out for it in the future. Sometimes you get lucky and it magically fixes itself forever; sometimes the weird case that you only hit with internal traffic ends up getting hit by public tratfic a lot.

Crashes like this where a wild write breaks something at a distance are always a PITA to debug (especially here, where the wild write is harmless if there's no data race)
Please, get off your high horse.
Maybe Crowdstrike has adopted
the modern ethos
Move fast and break things
With continuous integration
we ship a thousand times a day.
fuck QA.
Being blind to most of your surroundings is very sad. Can I suggest you to start with the interesting genus Ramonda?
If only that were possible with some appliances. I can keep my TV offline, but not the Roku. Internet connected utilities which will continually patch themselves into enshitification.
They used synthetic test data in CI that doesn't consist of zeros.