skysight-inc/HackerNews huggingface dataset:
This is maybe an underappreciated point, an employee-owned company with in a monopoly (or near monopoly) market position will act just as aggressively to screw over their captured consumer base as any other private ownership model. The employees may be better off, but the rest of us will suffer the same.
It has to do with marijuana.

According to the Missouri health department, marijuana products without added Vitamin E were failing the safety test because they contained naturally occurring Vitamin E.

So specifically for marijuana products they increased the allowable amount.

I don't really understand why they decided this though. Their reasoning suggests that they think natural occurring poison is less harmful than added poison ?
> retail customer experience and return policy is unmatched ... make it suck like Europe.

Maybe it's great in the US, I don't know, but it far from sucks in Europe. Amongst other things for returns policies you have a guaranteed 14 day return period for online orders even if there's no issues. Plus there's a minimum 2 years warranty, and a few years more if there's a reasonable expectation for the item in question to last longer. I'm not seeing the issue.
Deno was doing its own thing though.

Bun came out swinging with strong Node.JS compatibility promises. I have simply replaced node with bun for most of my own work without much effort. The mental effort required is to use `bun` instead of `node` in command line for most of the trivial things.
Yeah, I thought of that actually, but the interviewer said “very little memory” at one point which gave me the impression that perhaps I only had some registers available to work with. Was this an algorithm for an embedded system?

The whole problem was kind of miscommunicated, because the interviewer showed up 10 minutes late, picked a problem from a list, and the requirements for the problem were only revealed when I started going a direction the interviewer wasn’t looking for (“Oh, the file is actually read-only.” “Oh, each number in the file is an integer, not a float.”)
You can also do this for free with uBlackList: https://github.com/iorate/ublacklist

This has greatly enhanced my Google experience - easy to ban content farms, AI-generator websites from appearing in Google Images etc.
Because they primarily wanted shoutcast (ironic since they sold that off last year & got played in the process of doing all of that) which meant taking winamp with it. It's all a mess now but most care not for that and just see that "winamp is back".

-dro
You'd get by just fine. It's not uncommon to speak three languages fluently in CH (given it has 4 official languages), and usually English is in the mix. I lived there for a couple of years and while not speaking French or Italian, I got by quite easily in the respective regions.
That's true, but what's stopping a company from documenting a security issue as a known (mis)behaviour/bug? [*]

Companies can join/setup a bug bounty program, and just use it as a fig leaf for pretending to care about their own product/service's security.

Of course bug bounties can and are abused daily by people who report trivial non-issues in the hope of compensation

But in the same way, companies can also be bad actors in the way that they engage with bounties. I would usually expect big names (like Google, Apple, Github, etc.) to be trustworthy...

[*] Of course what stops companies is precisely them not being seen as trustworthy actors in the bug bounty system anymore... And for now, that's a decision that individuals have to make themselves
I like to poke the security bears at my company by suggesting that the security team is actually a double agent team whose real employer is our competitor. They never find it funny for some reason.
SMTP evolved as replacement for older approaches which, at one point, involved using FTP to mangle mailboxes remotely. Not so much a special mode for FTP as essentially an "use of" FTP. Similar to how non-trivial amounts of Electronic Data Interchange in business happens over FTP(S) to this day.
Yes however it goes both ways. TPB was excellent in telling the US lawyers to f-off: https://web.archive.org/web/20110623123349/http://thepirateb...
It's not nuclear winter in strangelove, but a dirty 'cobalt bomb' which contaminates the atmosphere with a huge amount of radionuclides.
TL; DR If there is a large local banking lobby, Amex won’t work.
Not only does it not support Firefox, but all Chromium variants are broken.. it only supports the Chrome spyware browser
How these shady registry handle abuse is why i never use their dirt cheap tld for email. Most corporate firewall either outright reject them or blackhole into oblivion. Best case scenario is auto route to spam folder.

Might be useable as cheap domain used for hobby site, as personal dynamic dns domain but for email, nope.

I'd cough up $10 for .com .net .org and recent popular one the .me .io for best email deliverability instead of saving $5 and wondering whether my outgoing mail would arrive or not.
I'm curious about how this will work on the receiving end - is that part of the infrastructure also provided by Apple or is there a common capability by 911 dispatch software to support incoming video?
And the measure of how well you are making a great product, creating something that would otherwise not exist, or improve some other product or process is how much your customers are willing to pay you for what you are doing. If you are creating value for other people, you are making money -- money is a measuring unit that quantifies transferable value.
Right on. And if someone made a "bear" emoji as an image of a gummy bear, I wouldn't accuse them of being out of spec. I would just find it personally misleading. Things that might be appropriate to say with a bear emoji might not be appropriate to say with a gummy bear emoji. That could be confusing, and it could be frustrating. But - as the standard emoji convention is often just "use whatever is closest" (see: eggplant/peach) - I don't think there would be any real, practical problem by people using gummy bears as their "bears". So it's perfectly in spec and could easily be a practical solution.

The same is true of the gun emoji. Hard for me to picture a scenario where I would need to communicate "real gun" but not want to say the words "real gun". And given the ubiquitous (until now) change in the icon, I have empirical evidence that it was an entirely practically appropriate solution. And, again, it was no further out of spec than an M1911.
Quitting Smoking: Forget about cigarettes more easily with our app. Track your journey to nicotine freedom using a convenient day counter and find support during difficult moments.

Quitting Alcohol: Immerse yourself in a healthy lifestyle by giving up harmful habits. The sobriety tracker helps you monitor your achievements, and the customizable themes adapt to your mood.

Breaking Habits: Whether you're giving up smoking, alcohol, or any other habit, our habit tracker helps you build a new, healthy routine. Each day without harmful habits will be proudly displayed on the screen.

Day Counter: Monitor your progress with the day counter for smoking or alcohol-free days. Every day is a new victory, and you can share your success with friends using the share results feature.
> "I don't think this is truly realized, but all this information written down in word sheets, requirements, knowledge passed on in meetings, little tricks and short hacks solved in video calls, information passed in emails and instant messaging is information that is part of the project, that is put down in some kind of a language, a non-formal one like English or tables or boxes or scribbles or laughs and jokes. The more a project has of these, the harder it is to talk about and verify the actual state of the project as it is obviously impossible to evaluate a non-formal language like you would a formal programming language and thus it becomes that much harder to explore and play with, test and explore the project."

I've thought all this sloppy side information would be a good target for the currently in vogue AI techniques.
I am not sure it's fair to include Canada in the same basket. We don't use freedom degrees, we know that numbers should start with the most significant digits and I believe liability waivers have no value here as well.
It’s called Developer Tools and not User Tools for a reason
Actually, arguably Windows has some impressive security features unseen on any other mainstream OS, they're just not used by default and - realistically - would be hard to enable on general purpose / non-corporate computers.

For example, by comparison, Linux is in the stone age here.

Do you even need AV if untrusted code can't run in the first place?

* Application whitelisting - with just bare old AppLocker, Windows can be configured to only allow execution of trusted executables, DLLs and scripts by path, hash or software vendor (digital signature). Now, technically AppLocker is not a security feature, i.e. a hard security boundary.

The next level functionality, Windows Defender Application Control (WDAC) [1], however, is. I believe Microsoft was offering up to a $1M bug bounty for WDAC bypasses?

With WDAC kernel mode code integrity enabled, only trusted digitally signed kernel modules can be loaded into the OS kernel [2]. WDAC user mode code integrity provides the aforementioned protection AppLocker provides.

With AppLocker / WDAC enabled, the OS built-in script interpreters (Windows Script Host, PowerShell) either refuse to execute unsigned scripts completely or operate in restricted mode with reduced functionality.

- By comparison, Linux only has fapolicyd which is only supported on Red Hat and can only rely on path-based rules because binaries are not directly signed on Linux. None? of the common interpreted languages (Python, Perl, Ruby, Bash) on Linux support digitally signed scripts and locking down interpretation.

* Authentication material protection - Windows has Credential Guard [3] for protection of authentication material - Kerberos tickets and other material are placed in a separate container protected by hardware virtualization [2] and accessed via RPC so you can't dump process memory to compromise them. Even kernel level compromise is not enough.

- By comparison, Kerberos tickets on Linux reside as files on disk, SSH user & host keys reside as files on disk and loaded into sshd/gpg-agent memory, x.509 keypairs reside as files on disk & process memory etc etc. Wouldn't it be nice to have them protected somehow? To my knowledge, nothing exists for this on Linux.

[1] WDAC - https://learn.microsoft.com/en-us/windows/security/applicati...

[2] VBS - https://learn.microsoft.com/en-us/windows-hardware/design/de...

[3] Credential Guard - https://learn.microsoft.com/en-us/windows/security/identity-...
Thank you a lot. Great work. I know it’s still experimental, but over time it will have a big impact on developer experience and will simplify the development workflow for a lot of projects.
Can't express how relieved I am that I am tentatively not inferior to a chimpanzee.
Graviton4: Amazon's New CPU Fights Cybersecurity Threats
More discussion: https://news.ycombinator.com/item?id=40955693
Somewhat ironically, Switzerland has four official languages, none of which are English, but with so many regional dialects within those, English is quickly becoming the… ahem… Lingua Franca:

https://en.wikipedia.org/wiki/Languages_of_Switzerland#Engli...
French here, and working for another french CSP. We lived the OVH incident live and saw the whole aftermath.

OVH was held liable because of the data loss, not for the service interruption. Data loss is something irremediable, permanent, definitive. Some businesses were basically ruined from this incident because they had no more data to operate. To add insult to injury, they sold offsite backups in the datacenter literally meters away. A service interruption, well, shit happens, and this is handled by SLA contracts that both parties agree to. You don't ruin a business (read: close a company) for a few days of outage.

I doubt CrowdStrike will be held liable for much; from corporations at least. They cannot repay the damage done, or they close the door. The healthcare sector is another beast, but I think it will come to more regulations for critical entities.
> CrowdStrike will be liable for damages in France

...based on the OVH precedent
Please, again, don't be so naive. You know that creating a company requires capital (not just financial, all of them), which only the richest have. By design.
> Alexa can set timers and tell me the weather, and...that's basically it. Make it a value add in my life and I wouldn't mind paying a subscription fee for it.

I wouldn't. Amazon wouldn't be able to stop them selves double-dipping like they did with prime, throwing in adverts etc.

Subscription models were fine, until they weren't enough to keep big tech growth placated.
Because it is a challenging task, you would need to define a prompt (or a set of prompts) that can precisely generate chain-of-thought prompts for the various generic problems the model encounters.

And sometimes CoT may not be the best approach. Depending on the problem other prompt engineering techniques will perform better.
I'd expect convergent evolution - both BeOS team and Spring team were very well aware of issues with Mach (which nearly single-handedly coined the idea that microkernels are slow and bad) and worked to design better IPC mechanisms.

Sharing of scheduler slice is an even older idea, AFAIK, and technically something already done whenever you call a kernel (it's not a context switch to a separate process, it's a switch to different address space but running in the same scheduler thread)
Fedora 41 Aims for Out-of-the-Box Webcam Support for Newer Intel Laptops
Escalate? They have already invaded independent country.
> why not an "I understand, continue anyway" button?

You don’t want broken screenshots shared. Also, people will click through and still open support tickets.
source available is not the same as open source nor have any terms been provided on what that'd actually be other than it's seemingly just about them getting a free dev team or looking to be doing some good from an investors view point.

-dro
Yes, with caveats.

1) It can’t be enough to desirably live on. It must essentially be “survival level” so that there is still an incentive to contribute to society with your work. Unlike unemployment, this means that if you get a job you just make more money rather than trade unemployment for a paycheck.

2) You have to strictly prevent increases due to inflation or inflation will spiral further out of control than it already is, perpetually increasing the UBI to accommodate the increases in costs for everything leading to a death spiral for the currency. Otherwise, it is impossible.

3) You must reduce all other benefit programs by the amount of the UBI to help pay for it.

4) It can only be done in a way that most people will be paying it back with reasonable income levels or it will be a perpetual drain.
I agree that we should scrap the techbros out of the picture. But otherwise in practice UBI is perfectly possible.
For any use-case I can think of, which are all "small data" (under 1B rows), I'd rather use DB migrations to take care of this problem rather than forcing myself to live with my previous design decisions indefinitely.

I am attracted to clever but in practice, simple always beats clever.
Oh, double no: https://www.google.com/search?q=best+font+ever
> I was way out of my chargeback window

How many months, out of curiosity? The window for “goods and services not received” is surprisingly long (more than a year in some cases).
I tried Bun twice, months apart, it never worked for me on Windows, failing to run "bun install": https://github.com/search?q=repo%3Aoven-sh%2Fbun+bun+install...
Strange, I can't get it to work on any Chromium offshoot. I've tried 3 variants including vanilla Chromium.
Benchmarking open source LLMs on coding tasks
> People will buy something from a store, buy a fake version of that thing on AliExpress, swap the fake into the box, re-shrinkwrap the box, return the shrinkwrapped fake to the store, and sell the real one on eBay.

Why not just sell the AliExpress one on ebay?
I think there's too much focus on going whole-hog with NixOS, and not enough on just using Nix with home-manager on top of your existing distro.

As the sibling comment describes, Nix can get a bit gnarly once you're off the beaten path, and having your whole OS subject to that is a pain.

But as an alternative approach I run Fedora, and install key stuff through the OS using dnf in the normal way, but then I have a home-manager config that covers all my key config, and a lot of the extra applications.

Yes, I don't get the full "value" of a whole system under version control. But I have a very stable, well proven system with few surprises. And I also have good version control of my config and day to day apps.

Plus the extra Nix stuff - if I want to try out a program, or use it temporarily I can just launch a shell with it and it's not cluttering up my system for ever (e.g. when exa was on HN yesterday, I could just do `nix-shell -p exa` to get a shell with exa in it. At some point in the future it'll get garbage collected again).
I’ve definitely had situations where a streaming quantile algorithm would have been useful, do you have any references?
You could force the company to pay the fine in the form of a % ownership stake in the company. Then if the company raises prices to hose the government, the extra profit flows back to the government in dividends.
> I never understood the value proposition of Apple Maps.

They ship their operating systems with all the "common" apps pre-installed (e.g.: Email, Calendar, Reminders, Notes, Maps, etc). For the maps to work, they need some data source. That's what Apple Maps is.

Apple doesn't make money with the Email app directly, but its existence likely improves how users perceive iOS. This probably translates to return customers and more people recommending it.
What do you think Firefox calls it?
Does Bun always work for you? For me, none of my projects worked to run "bun install" on.
My point isn't that a company shouldn't optimize for profit. My point is that the supposed logical conclusion stating "if it doesn't optimize for profit, then it will die" needs to be backed up by strong arguments. There are myriads of examples of companies not optimizing for profit and still surviving, and there are myriads of examples of companies optimizing for profit and still going bust.
It's more nuanced than that. They have to provide the same APIs to third party security vendors that they use themselves.

They can come up with something more shielded as Apple has done, they just have to eat their own dog food and can't make an exception for defender. That's all.

Blaming the EU here is pure spin.
Complete title: CrowdStrike will be liable for damages in France, based on the OVH precedent
> No, it's O(N+M) where N is the number of strings and M is the sum of the lengths of the strings.

That would mean it's possible to sort N random 64-bit integers in O(N+M) which is just O(N) with a constant factor of 9 (if taking the length in bytes) or 65 (if taking the length in bits), so sort billions of random integers in linear time, is that truly right?

EDIT: I think it does make sense, M is length*N, and in scenarios where this matters this length will be in the order of log(N) anyway so it's still NlogN-sh.
There are attempts to make create more user friendly Nix bases OSes, I submitted one to hackernews a a while ago: https://snowflakeos.org/ (https://news.ycombinator.com/item?id=39831027)

But I don't know what the current state of it is as of now
Cory Doctorow has a good blog post explaining why Amazon is so bad. Amazon is now an ad business

https://doctorow.medium.com/how-monopoly-enshittified-amazon...
I did the same but opted to install NixOS as primary OS on my work laptop immediately (I came from EndeavourOS). And the experience was actually very smooth. You can install a KDE or Gnome desktop from an iso graphical installer, add your packages to configuration.nix and start being productive.

Yes this is the start of a very steep learning curve but I have been taking it very slow and it has been working for me since day 1. I think it’s pretty brilliant that the entry level is so low.

Experimentation is cheap (just use grub to boot into your previous env if you mess up, try packages with nix-shell), and I have had great help in the Jupiter Broadcasting Nixnerds Matrix channel. Some great people are in there.
> according to Widerquist, the $2-3 trillion projections are just bad math. These simplistic calculations involve multiplying the number of people in America (roughly 330 million) by the average UBI output (approximately $10-12k). While they accurately assess the amount of money that would be involved in such a system, they aren’t accounting for the fact that most of that money will be exchanged via the tax system (many people will pay into it, but they will also get that money back, effectively nullifying the need to generate “new” revenue), meaning that the total amount of new revenue that the government actually needs to generate is only about $539 billion, or roughly 3 percent of GDP.

I don't get it.
> [...]

> There are more, but thats the few off the top of my head.

And that is probably like 80% what EDR product will be doing, checking that the code that is executing is trustworthy and not doing some weird unexpected things.
I understand what you're saying, but in the example for accounting, we can also solve this problem using NoSQL. Because the most important feature we're talking about there is transaction support. Similarly, schema-on-write can be provided by a library.

To me it seems like NoSQL works better when there is less to normalize, which is the case with microservices. Those services struggle with the support for a distributed transaction when they have to make a distributed transaction. This problem will be very easily solved in SQL (assuming its not shared to completely denormalize everything for performance).

Note that this normalization problem also shows up in schema-on-write. If multiple people are contributing to a schema from different teams, then it will become hard to maintain a schema-on-write.
> You must reduce all other benefit programs by the amount of the UBI to help pay for it.

“Must” feels strong here — particularly for any country that under-taxes their wealthiest citizens and spends wildly on defense.
It doesn't matter the country. When any country is accused of hacking its always "how do you know, it can all be faked, its a flase flag". It's weird deflections and pretending hacking is a ghostly nightmare done by geniuses never seen by the light of day. The reality is so much more humble: it's a desk job done by above average workers with a couple smart ones captured by nation states. They make mistakes and thus can be tracked. But nope, each time every discussion has to rehash a sophomoric discussion on the nature of truth and knowledge.

Unless it's the US as hacker. Then no one is inpressed.
Surely that logic should not sit in persistance layer though?
> f most US entities understood that M/d/yy(yy) format is rare

The worse offender on this I suspect it's Apple. Where half of their localization stuff doesn't work or works in a weird way
Does it tho
Current Location has nothing to do with their implementation or reverse geocoding and the browser does the work.
>and decision makers are greedy

local decision makers in particular. Doesn't take that much to get some administrators in Munich to flip and to run into compatibility issues when every city does it independently.

Make it a five or ten year EU plan with some serious cash behind it, it's basically at this point an investment into security and autonomy of the continent.
Rust Is Ready with Robust Toolchain Handling for Linux 6.11