skysight-inc/HackerNews huggingface dataset:
Three problems:

1. Regulatory capture is not something I want to see happen to IT. The big companies love making rules knowing smaller organizations can't fulfill them.

2. Just because you make some new legally binding principles, doesn't mean that almost any source code in existence will magically meet it, or can ever meet it. That code is not getting rewritten overnight, or possibly, ever. This would make regulatory capture worse than normal, because sloppy code that's impossible to rewrite would be grandfathered in, and only the newer, more innovative, smaller companies would be held to the standard.

Just take Google - they have over 2 billion lines of code. Just attempting to touch it is more dangerous than leaving sleeping dogs lie. Sucks if you're a competitor - writing your own 2 billion lines is going to be almost impossibly harder.

3. In which case, you've raised the ladder while doing very little to prevent a reoccurrence. Countries that are not the US will gain the edge in innovation, research, and development.

Also, edit:

4. The only reason everyone used Cloudstrike is because everyone's trying to do a CYA (Cover Your Ass) move; which is much easier to outsource to someone else. To regulate would further increase this tendency, which is the opposite of what we need right now.
There are numerous Bitcoin forks and airdrops that have gained varying degrees of traction, with the most successful being Bitcoin Cash. However, many other novelty forks, such as Bitcoin Gold and Bitcoin Diamond, have struggled to maintain their value and relevance.

The ease of creating a Bitcoin fork has led to a proliferation of lesser-known projects, often overshadowed by the more established cryptocurrencies. This article aims to explore this diverse and sometimes overlooked landscape of Bitcoin offshoots.
How do they make money? What's their revenue stream? Who's paying $ when most content is for free, and when people really want to pay they go to OF. I know the phrase that when the product is free, then I'm the product, but even then, how do they make money from customers' mostly-incognito data?
Not that I agree with the parent comment but this is pretty much the only thing that laws do. If you start with the assumption that something is legal and only think differently when there's a law that says it's not, then you're not too far off from the practical reality.
I'm someone who's been in the music industry for many, many years. This reminds me a bit of a platform called mixtape (I think) that was in this vein. Here are a few thoughts and hopefully helpful feedback:

- your net is too broad. genre is meaningless in 2024 but what's the heuristic for inclusion here? You're up against some very powerful recommendation algos. We can complain about those algos all day but functionally and practically, the Spotify algo is pretty good or good enough. So what's the leg up here?

- I'm having a hard time understanding what's different about this site from any other previous incarnation of music blog - which applied a level of curation that was reliable. What if instead of just dumping tracks on the front page, you used curators to present new music, and those curators were expressed as personalities with tastes?

- It looks like the heuristic here isn't curation or subjectivity, it's just whoever can send the most fans to the page to upvote new music. I don't see how that gains users. At best, it turns into one of those sites you see on Facebook where people ask for votes for contests.

- There isn't a lot of differentiation in your information presentation from Spotify. It'd be great to see more about the band and the song when clicking on it. Spotify has been moving into this direction for a while but their issue is scaling metadata; not a problem at your scale right now. Why not ask for more info, or something exclusive to your site? At this point you're really just rehashing spotify links.

Small technical feedback - the play button on the track listings should turn into a pause button. I have to hit play, but in order to pause it, I have to find and then move to a separate button. Shouldn't it be the same button?
Ok? Walmart has a 48 hour big bucket of camp/dried food.
We're being paid to migrate our hardware boxes programmatically to Windows 10 IoT LTSC so that new boxes ship with 10+ years of security. We're still supporting some XP devices (not connected to the internet.) So to anyone depending on us: You're welcome.

But let me tell you something: Long-Term Support software mostly doesn't pay well, and it's not fun either. Meanwhile some Google clown is being paid 200k to fuck up Fitbit or rewrite Wallet for the 5th time in the newest language.

So yeah. I'd love to have stable, reliable dependencies while I'm mucking around with the newest language de jour. But you see how that doesn't work, right?
> growing industry of people whose job it is to write content to train LMs against

Do you have an example of this?

How do they differentiate content written by a person v/s written by LLM, I'd expect there is going to be people trying to "cheat" by using LLMs to generate content.
> They can no longer rely on US for help

Maybe you shall check some news. /s
You say Unicode, but you mean UTF-8. Now for 16 bit Unicode the story is different :)
Saying "Just bankrupt yourself to comply" isn't really an option. It's much like laws restricting abortion that are unsecretly trying to make it de facto illegal.
I feel like these type of failures are by design more than ignorant negligence.

How else do you wield control and influence?

The next one will be we-cant-withdraw-money-from-atm-or-teller level of failure

If you are paid 7 digits a year to ignore and not do your job isn't that essentially being bought?
I work supporting software that processes millions of small files a day, with a lot of these scripting languages. The speed difference in total iops where AV is installed vs not installed is huge. 30-50% loss is no joke.
This is cool because I've heard the recording before but didn't know the story behind it.

What's funny to me is, looking at that invention design, how crazy this guy must have appeared to his peers, like, "look it writes the sound into the ashes!!!". "Sure Eddy, buddy, let's get you a nice cup of tea and calm down.."

Yet he was on to something amazing that would change how we live.

I suppose there was a "crazy inventor" culture at the time though, with so much new understanding of mechanical physics and engineering developing at a such a rapid pace, so maybe it wasn't so out of place, what a time that must have been to be alive..
You seem to have missed the message. I am saying that we should impose rules on ourselves so that we don't have rules imposed on us from above.

Rules from above and rules by us should be in different galaxies as far as how well they work.
Attestation is pure evil and is the only reason that passkeys aren't great. It's only useful for things like blocking authenticators that refuse to DRM the user, exactly as Okta is threatening to do to KeePassXC.

To be clear, the only thing KeePassXC is "out of spec" about is that where the spec says "you must not let the user do X, Y, and Z with their own data", KeePassXC will let you do those things, after a warning.
I don't see anything there about punishment. It's simply a moral judgement of people who want others they don't like (for one reason or another), killed.

Personally, I find it ridiculous to differentiate between murdering a person for e.g. money, and murdering a person for vengeance, and absent an imminent threat for which deadly force is generally authorized, I don't support the use of it.
It is a state sponsored cyber attack. It doesn't just look like one
Please explain this comment. How is the Crowdstrike incident related to the Key Bridge collision?
This is a solved issue already. Vote kicks or server admin intervention. Aimbotting was never an issue for the old primitive fps games I would play because admins could spectate and see you are aimbotting.

A modern game need only telemetry that captures what a spectating admin picks up, rather than active surveillance.

Hackers are only a problem when servers are left unmoderated and players can’t vote kick.
when something is changed, we usually re-test. that's the whole point of testing anyway. :)
That is not remotely what was meant..
There are loads of things that require age verification to prevent children accessing them. Why is porn apparently so special? Bit suspicious tbh.
I want to know who wrote the part that appears to be crashing on a file full of NULs. Cloudstrike's code or Microsoft's?
"From each according to his ability to pay, to each according to his greed."

-The Capitalist Manifesto
>be brutal about dropping anything that's not absolutely necessary

Yep. KISS and YAGNI.
Maybe they just had Crowdstrike installed at some of their Internet exchange control machines? :-\
so, the translated visual basic thing is a thing i remember hearing about vba in the 90s, without any personal experience. but if memory serves (and i'm not just confabulating the whole thing) it was built-in, not an add-on

i think it's reasonable to describe graphical notations such as drakon as having a grammar. you have some finite set of atomic features (often things like shapes or arrows, but sometimes other characteristics such as size, orientation, and color) which are combined in some finite set of ways to produce an infinite set of possible 'sentences'. the only non-grammatical aspect of this is that some of these features are used in an analog way, for example with a length proportional to a time lapse or an orientation that indicates a cardinal direction, while verbal features are strictly digital and arbitrary—but we often use similar paralinguistic features in speech and especially in sign language

more later
> We'll never figure out how to do it because it's unethical to experiment on humans.

I don't think jails have to go through an IRB before they make changes.
probably the system used to pull and record medication uses in a hospital. It's been awhile, but "Pyxis" used to be the standard where I shadowed.

Nurses hated it.
Youre right. The the UX is comparing apples to oranges. But if I can't can't even do a basic secure thing like lock my screen, is it though...

Apples can still be compared to oranges.
On a more serious note, most of my side projects that do get finished fall into one of two categories:

1. I wrote the whole thing in a single frenzied sprint, and it worked.

2. I developed it in such a way that I could easily abandon it for months at a time, and seamlessly continue where I left off.

For me, the latter involves writing clean, well-documented code, with tests. Maybe even some amount of CI building+testing. (This is all relative, most of my code is neither clean nor well-documented, by any absolute measure)

You also have to ask yourself why you're doing this. Do you actually care about the finished product, or are you just enjoying the process? Or maybe just the problem-solving? (A lot of my projects end at the point where I can say "I know it's possible now", even if I don't have functional code)
It’s hard to address this submission as it is so hyperbolic that it’s difficult to pick it apart. It has a strong second amendment vibe, where the choice is between self-regulation or a future armed stand-off with the government. This is a false dichotomy.

There are already other, non-regulatory, systems in place to deal with issues like this. Market forces and law suits spring to mind immediately.
Security software needs kernel level access.. if something breaks, you get boot loops and crashes.

Most other software doesn't need that low level of access, and even if it crashes, it doesn't take the whole system with it, and a quick, automated upgrade process is possible.
I know China essentially nationalizes successful businesses, but do they impose laws on Devs yet in a way this post warns?
Kinda ironic that the article itself was updated
Linux and open source also have the potential to be far more modular than Windows is. At the moment we have airport display boards running a full windows stack including anti-virus/spyware/audit etc, just to display a table ... madness
Microsoft Copilot already does this.
> I want to finish

A personal project (and many professional ones) are never "finished".

Or are you sure that when you finish that last 30% your web page editor is PERFECT and will never need any new features?

Are you using it already[0]? Do you miss any features? If not, just stop working on it, it's good enough.

Release it, put it out there and let other people help and maybe tell you what features it might need.

[0] https://en.wikipedia.org/wiki/Eating_your_own_dog_food
Author here.

I am talking to both. Programmers should set the rules and impose them on their empoyers or the "tech industrialists" won't accept them.
It's HDI is still well below those of other "developed" countries (0.900 and above), and despite the GDP per Capita increase, average household (EDIT: individual, not household) income is still below $6,000/yr [0] so comparable to Mexico, Thailand, and Turkiye (edit: comparable to Mexico and Turkiye, not Thailand which is at $6,000 still)

In 10-15 it will become a developed country but right now it isn't.

I am a big Romania booster though so I'm not trying to put it down

[0] - https://insse.ro/cms/en/content/household-income-and-expendi...
I don't know about this particular update, but when I used to work for an AV vendor we did like 4 "data" updates a day. It is/was about being quick a lot of the time, you can't stage those over 3 days. Program updates are different, drivers of this level were very different (Microsoft had to sign those, among many things).

Not thay it exuces anything, just that this probably wasn't treated as an update at all.
Regarding the stock. I'm sure people are "buying the dip".
(FORCE) Pusheedd to Prod on FRIDAYY -- Burneeeddd by its Sins
>Most of it runs on 6 to 10 year old unpatched versions of Windows…

Well, that's a pretty big problem. I don't know how we ended up in a situation where everybody is okay with the most important software being the most insecure, but the money needed to keep critical infra totally secure is clearly less than the money (and lives!) lost when the infra crashes.
You might be interested in this story about crowdsec killing people's Linux VMs 3 months ago: https://old.reddit.com/r/debian/comments/1c8db7l/linuximage6...
How lovely of you to think of the pornographers' bank balances above all else.
Now do it for lisp and your libraries alone were last updated 5 years ago.
Economics. You have a week’s worth of food in the pantry. Over the next month buy a little extra each time you go to the grocery store. Now you have two week’s worth of food. Continue shopping weekly or whatever your routine was. Eat the oldest items. Costs a little during the month you bought extra. Or use coupons and buy specials and sale items. But it costs a lot less than freeze dried food in a bucket and is fresher and tastes better.

Also get a ten gallon container for water and rinse, clean, and refill it a couple times a year.

Put the extra long term stuff in your bunker. Use regular food for the annual power outages and extreme weather.
The OS doesn't matter, the question should be why is critical infrastructure online and allowed to receive OTA updates from third parties.
Normally things work quite well, with manual interventions by moderators explained in thread. However something seems to have gone wrong this time. Usually a new model from openai attracts more than 73 comments! I'm missing the depth of discussion and analysis that usually occurs here.
conspiracy prediction: I don't think CS will give a complete public RCA on it, but I do think the impact and crisis will be a pretext for granting new internet governance powers, maybe via EO, or a co-ordinated international response via the UN/ITU and the EU.
In the hypothetical scenario where websites block Keepass, Keepass would not be sending “bad data” to the website. Its interaction with the website would not be noncompliant in any way. Rather, the website would be punishing Keepass for a separate interaction between Keepass and the user.

A more apt analogy would be if the http server sent an 400 to all requests from browsers known to support ad blocking.
What happens if you just don't pay? For a couple thousand bucks are they really going to lawyer up and open another court case?
I didn't think I did, but cycling it a couple times and restarting did fix! Great guess!

The thing I'm tripping over now is just that I keep pressing the button more than once when I'm done speaking because it's not clear that it registered the first time. If it could even just stay "pressed" or something while it processes the text, I think that would make it clearer. Any third state for the button would do I think.

Looking forward to using this! Thanks!
WP:RECENT [0]

[0] https://en.wikipedia.org/wiki/Wikipedia:Recentism
I think the key is to just do it as badly as possible. And make as small of a project as possible, MVP.

The smaller/quicker you do it, the quicker you can test your business idea, or whatever you're trying to test.

If you have success with that MVP version, then you will feel more motivated to refactor and make the code better.

My programmer friends hate it when I talk like this...but if you are the only one working on a project, it often makes the process much more fun and you get feedback much quicker to do it badly/lazily OR to do it in a non-scalable way.
We would lose the long tail, but if I were a search engine, I would have a mode that only returned results on a whitelist of domains that I would have a human eyeball every few months.

If somebody had a site that we were not indexing and wanted to be, they could pay a human to review it every few months.
The fucking up of Fitbit and the rewriting of Wallet are not the engineers' fault. These kind of projects are mostly decided and planned by PMs: clueless and incompetent PMs. For payments in particular it was not even just an incompetent PM, but an incompetent director that saw the success of the NBU Paisa payment in India and thought the U.S. would be the same.

The engineers are at most just complicit. Those who aren't are laid off or they quit on their own accord.
You ask an LLM to do it. Not sarcasm, they’re quite good at ranking the quality of content already and you could certainly fine tune one to be very good at it. You also don’t need to filter out all of the machine written content, only the low quality and redundant samples. You have to do this anyways with human generated writing.
Or being online in the first place. Sounds like an unnecessary risk.
> But if governments do nothing, then let us, as an industry, take the chance to do something to avoid another disaster that would give governments the political will to enslave our software, and our minds, to their wills.

Setting aside for a moment the flagrant hyperbole:

The industry will never do something without government pressure. It's a collective action problem—building reliable software has an enormous cost to it that building unreliable software does not. No company is going to swallow that cost out of the goodness of their hearts, and unless all companies in a sector move at once they can't recoup the cost from the customer.

This is the exact kind of problem that governments exist to solve: without intervention the market is broken and safety will always be sacrificed to undercut on price. Whatever the author feels about regulation, it's inevitable in some form or another. The question isn't whether the industry will get their act together before governments start moving (they most definitely won't), it's whether governments will give the industry a window to self-regulate under direct and explicit threat of intervention or if they'll immediately start writing the regulations themselves.
Stop thinking about trying to catch wallhackers. Instead, make wallhacking impossible. Do that by fixing the server to, instead of sending all player positions to everyone, only send player positions to clients that they have an unobstructed view of.
What internet sites are required to do age verification beyond clicking a "Yes, I'm of age button"?
Don't be embarrassed. This article makes the mistake of _saying_ they're going catch the under-informed up to speed but then immediately dives all the way in to the deep end.
The House of Lords isn't that powerful, but it's still an embarrassment to have this sort of hereditary system.
Degrees as well as jobs? Are Bangladeshi universities diploma mills?
Added snooze button after many requests – do check out
Who is going to set these rules we impose on ourselves?
You would need to maintain python itself too. Imagine if you had done this same plan prior to the python 3 transition.
Binary files are full of null bytes it is one of the main criteria of binary file recognition. Also large swaths of null bytes are also common, common enough we have sparse files - files with holes in them. Those holes are all zeroes, but are not allocated in the file system. For an easy example think about a disk image.
Snarky but possibly true reply: perhaps someone had AI ~write~ hallucinate this article for them.
> Market forces and law suits spring to mind immediately.

Those things don't seem to be working.

And it isn't a future armed standoff that I am warning about. It is a future where any protest is impossible.
What sort of sane system modifies the build output after testing?

Our release process is more like: build and package, sign package, run CI tests on signed package, run manual tests on signed package, release signed package. The deployment process should check those signatures. A test process should by design be able to detect any copy errors between test and release in a safe way.
>people overwhelmingly use HTML email

If that is true, it is only true because email providers are making a choice on behalf of consumers, namely, the user writes plain-text emails (at, e.g., gmail.com) then the provider converts it to HTML.
It does absolutely not ring true for Europe.

Even for WWII, Hitler was a specifically German character, and it wasn't as if though he lacked opponents, so he didn't even represent all of Germany, and he was actually inspired by the US and by Turkey rather than by European thought.

The US has actually been the source of some very recent and significant barbarism in Europe, for example, the torture that happened at Bromma airport despite promises, and after quite extreme threats against Sweden's trade, the torture prisons in Poland, Lithuania and Romania, etc.

So I actually think it's almost the complete other way around.

But it's always nice to have allies against hostile powers like Russia, and I think that's what the Estonians appreciate.
Of course you can. You can measure telemetry like where the aimpoint is on a hitbox. Is it centered or at least more accurate than your globabl population? Hacker, ban. How about time to shoot after hitting target? Are they shooting instantly, is the delay truly random? If not then banned. You can effectively force the hacking tools to only be about as good as a human player, at which point it hardly matters whether you have hackers or not.

Of course, no one handles hacking like this because its cheaper to just ship fast and early and never maintain your servers. Not even valve cares about their games and they are the most benevolent company in the industry.
Quit your job with no money to fall back on, and make your side project your only potential source of income.

Seems to be working for me.

P.S. Pls send pizza :'(