skysight-inc/HackerNews huggingface dataset:
Ask HN: Chatbox (GPT desktop front end) malware / supply chain attack risk?
Hey HN, supply chain evaluation question:

There is this awesome desktop app called chatbox: https://chatboxai.app/ <- which I've been using for about 3 months now; essentially, it's a desktop front-end for chatgpt API with very good local search across all previous conversations.
Two red flags:

* 1, https://github.com/Bin-Huang the author is Chinese, from China, working at Tencent.

* 2, As many other desktop apps, this also auto-updates; however:

* https://github.com/Bin-Huang/chatbox/issues/803 he had, essentially, started distributing binary-only updates, and the source code on github no longer reflects the actual app that is automatically downloaded to my computer

This is sus. How sus is it. Specifically: the attack vector I'm querying for is supply-chain attack via the auto-update mechanism. This thing has 20K stars on github, and around ~250K visits on their website (15% of this from the US = ~36K US visits per month;) probably predominantly devs. This is a very juicy target.

(Alternatively, and instant-upvote: looking for a desktop frontend for chatgpt API which has built-in full-text search for 2mb of plaintext, and integration for the full suite of LLMs currently available on the market, from a reliable source, for windows please.)
> so i found myself caching files to disk for export/import

Could use a named pipe.

I’m reminded of what I often do at the shell with psub in fish. psub -f creates and returns the path to a fifo/named pipe in $TMPDIR and writes stdin to that; you’ve got a path but aren’t writing to the filesystem.

e.g. you want to feed some output to something that takes file paths as arguments. We want to compare cmd1 | grep foo and cmd2 | grep foo. We pipe each to psub in command substitutions:

diff -u $(cmd1 | grep foo | psub -f) $(cmd2 | grep foo | psub -f)

which expands to something like

diff -u /tmp/fish0K5fd.psub /tmp/fish0hE1c.psub

As long as the tool doesn’t seek around the file. (caveats are numerous enough that without -f, psub uses regular files.)
> Besides, as far as I know, Objective-C only ever gained traction within the very narrow realm of MacOS and iOS application development, and has since been mostly supplanted by Swift in both of those use cases.

I would take a step further and point out that Objective-C was forced upon developers by Apple as the official tech stack to develop software targeting macOS and iOS. If that was not the case, I seriously doubt it would have gained any traction at all.
Actionview-Svelte-handler: Create Svelte views seamlessly in Rails applications
Couriers have existed since the beginning of civilization. With many famous examples, like Pheidippides in keeping with the Olympic spirit.

It was obviously valuable and workable from the smallest scale possible: a verbal message carried by a runner.
It’s the opposite. Currently governments subsidize housing, food, internet access, etc for the poor through various programs. There’s no free market interaction when government bureaucrats are deciding where to build affordable housing etc.

UBI toss those programs away saying hand people money and let the free market allocate resources. Hypothetically you hand money to everyone, but as far as the middle class is concerned there is zero difference to lower tax brackets for the first 10,000$/year of income vs 1 tax bracket + a lump sum. So estimates of how expensive UBI would be really come down to how many subsidies you remove.

Further if you believe in free markets then UBI should actually be cheaper for the same social benefit.
Power != force, and Western governments certainly don't have a monopoly on power.
Programs that truly are needs based don't really fit into the Marxist approach. UBI is much closer to, or just is, Marxism because its universal. You get the money simply because the government decided that is the amount of money everyone needs and deserves.
Unix philosophy still applies

sqlite3 logs.db "select log from logs" | grep whatever
This side project started from my personal interest in the effects of compound interest.

My goal was to create a simple, user-friendly tool that hides all the complexity—something people could use regularly. No registration required, free forever for everyone.
Why does this site list CUDA as a programming language? I also don't see why we need to include versioning tools or APIs and many other things. I suppose this evolved beyond the PLDB naming. The interface is nice and simple though.
Depends on where you lived. In the early days there were lots of LUGs in some areas, usually in college areas, but some would be hosted at a few Companies.

I think DEC had one or two. And you could find someone who would meet you somewhere to help you out, it was an exciting time. Also there were lots of install fests for Linux.

Most activity took place on USENET, so getting help was rather easy.

For example, I had asked how I could connect 2 monitors to my 386SX, one controlled by a VGA card, the other via a mono-card, each monitor with a couple of VTs. That was doable with Coherent on install. A day later I got a patch.

Things moved very quickly back then :)
Current-generation blockchain networks also don’t seek to do what “traditional finance” does. The usual list of things that crypto enthusiasts point to tends to be mostly comprised of things that consumers actually want. The entire premise is different. Apples and oranges.
Why wouldn't they work on improving NTFS performance instead?
OpenTTY – A Terminal Emulator for J2ME Phones
From the post...

> the key insight that the Noah Smiths of the world seem to be missing is that, in today’s world, we artificially elevate labor demand to keep people employed.

To me one learning of COVID and lockdowns is that we're fully capable of meeting all our basic needs with less than 20% of the workforce (which sadly tends also tends to be the lowest paid). In short we don't need everyone to be working for food, shelter, healthcare etc.

Unfortunately, if we take the climate as an example for how we handle a complex and challenging topic like this, we're going to completely fumble UBI and the role work plays in our future culture and society.

It's an incredibly complex problem, simply considering individual vs. national perspectives. And our collective response to the topic is far too reactive and prejudiced to even begin studying it in a sensible way.

We live in a world where businesses have already realised incredible value from the Linux operating system, which was begun by a student living in his mums house, being subsidised by Finnish social security. He then went on to create git, leading to GitHub, which now manages the code for 90% of Fortune 100 companies.

The opportunity is clear but I can't see us being able to untangle this effectively.
Oh interesting - I'm familiar with the combination shoal keel/centerboard from daysailers like the Montgomery 17 but wasn't aware of it at the scale of something like the Wellington. I can imagine that being very popular out in the Bahamas (in common with most of the planet it's somewhere I haven't sailed, which is probably why I'd never come across that.)

Point taken on the auxiliary rudder/autopilot hydrovane though damage to that isn't going to sink the boat.

And yes, totally agree with your thoughts on those rowers!

Glad we could get something out of the low alpha end of the thread. Thanks for the knowledge there.
No need to be this charitable. Apple knows perfectly they could converge the top of the tablet range and the Macbook. They do it more and more to cut cost on the bill of material. They don’t do it because they know it would lower their overall sales and the lack of competition doesn’t push them to do so.

Why ship something better when you can keep selling both a tablet and a laptop?
Curly bracket blocks, much of the statement syntax, the operator hierarchy, many of the standard functions.
As someone that isn’t working in payment processing, it’s no surprise that you don’t get all of it.

Every single thing about these lists always reeks of ‘this has been put together reactively, over time, based on experience’. But it’s so cool and trendy and complain about this stuff on HN and similar, everyone just elects to forego critical thinking for a little bit.
Reminds of this story where they found paper planes in the school house ceiling dating before 1910 - https://youtu.be/A555LYvAPp0?t=16m08s
If you don't like how the government subsidized certain markets today, I'm not quite sure why a good solution would be to subsidize the entire economy.

Such a program is way too complex to model out and reliably predict what the impact will be. We simply don't know how much UBI is the "right" amount for specific outcomes, and we definitely don't know what the impact will be on any subset of the economy.

According to the OP author, we can't even test UBI programs before a full rollout. If we can't reliably model or predict the outcome, and we can test it, how are we supposed to actually implement it?
There's a recursive CTE joke in here somewhere
> Turns out there was zero difference, or negligible (Windows won), between compilation times.

I think there was something seriously flawed in your test. If you Google for a minute, you find multiple posts on how moving the same builds to Linux led to performance improvements in the range of 40% drops in build times.

Some anecdotes even compare doing the same builds in Ubunto with NTFS to see double-digit gains.

NTFS is notoriously awful in scenarios involving reading/writing many small projects. This is the bottleneck in Windows builds. There is a myriad of benchmarks documenting this problem.

Nowadays there are plenty of cross-platform projects to serve as benchmarks. Checking this can be as easy as checking out a project, start a full rebuild, and check how long it takes.
Are you talking about the "Chat Control" that keeps on getting shut down?
Go orcas!
Paddle is the other big one I'm aware of.
I've been doing this for years. I keep SQLite log databases at varying grains depending on the solution. One for global logs, one per user/session/workflow, etc. I've also done things like in-memory SQLite trace databases that only get written to disk if an exception occurs.
Internet pro tip, for ultimate space efficiency don’t keep any images on your server. Instead, have StableDiffusion generate images from alt text on each page load and serve as data URIs. Checkmate, high storage costs!
It turns out if you run SQLiteFS on SQLiteFS, performance increases exponentially, and as the number of SQLiteFS layers increases, seek and read times asymptotically approach zero. In other words, this is the world’s first O(0) file system.

At this rate, with only a few performance tweaks, SQLiteFS should be able to retrieve files before you even ask for them.
I like the post, and I would upvote it if the title was more descriptive of the actual content instead of a clickbait-y "hook" that hints nothing about the topic.

I thought I'd be reading about an interesting neuroscience case (or whatever), but it's a review/short synopsis of a mathematician's biography. The wedding anecdote is just the last paragraph.
Decoding Strategies in Large Language Models
Because likely they aren’t a. allowed to, and/or b. have no file system code experience or understanding.
See also perhaps:

* https://en.wikipedia.org/wiki/Random_wire_antenna

There are also commercially available products that are fairly portable and probably give you a better SWR; e.g.:

* https://www.buddipole.com

* https://www.youtube.com/results?search_query=Buddipole

From one of the photos, seems like the author is using an Elecraft KX-2, which is really a clever bit of kit that packs a big bunch in small package:

* https://elecraft.com/products/kx2-ssb-cw-data-80-10-m-transc...
17% funner than the leading competing "fun-time experience"
I also would have thought that it would be covered in a CS curriculum, as I said. it'snot just some random proof, but an important foundational one. (I don't think I "forgot a possibilty", I just thought it usually would).

You are saying you took classes that covered logic, number theory, group theory, algorithmic complexity, discrete math, and calculus, and you are certain none of them covered this? Too bad, that is unfortunate! I'm glad you found it on your own! it's really neat!
Bad ruling that will be overturned on appeal.

The government has a 100% absolute right and responsibility to control what's coming across the border. That's been the common law since King Narmer.

In law school, it's common to skip these cases for time and have the professor summarize the caselaw as "you have no rights at border."
Something, something, time-dilation neurocatheter
But the network effect of mass messaging —- is what the article means by unpilotable.
how do computer scientists prove negatives all the time?
Note that The Atlantic, which is our root source of info on the retired astronaut, does not say that anyone has "admitted" to anything.

Here's The Atlantic's one use of "admit", very clearly speculative:

> Maybe officials worry that admitting outright that a return journey is currently too risky would fuel more sensationalist coverage. Or perhaps NASA leaders want to protect Boeing.
Thanks - once I knew it was there it was easy to spot.
People with access to change systems have access to crash systems. This is fairly true across all tech, and all you did was prove it for Redshift. I think what you are missing is that for it to be a vulnerability, it would need to be something that extends that ability to do damage beyond your current scope. If you can crash someone else's cluster, that is a vulnerability. But not if you can only crash your own.
Oh wow, that is cool as heck.
Lost me instantly because I don’t know what a “dbt” is
Subsidizing the economy is a meaningless idea, it reallocates resources.

As to being impossible to model, there’s a great number of countries in the world eventually one will likely try the experiment on its entire economy without impacting 99.9% of the global population.

That said, you can turn individual safety nets into UBI lockstep with changing the tax code and see what happens. The fear is people would spend ‘food’ money on drugs, or people in subsidized housing would move, or all the things which created these programs instead of handing out cash. That’s a political question not an economic one, are we trying to act as a parent or do we want people to have freedom to make their own choices.
Well, yes and no. The amount of RAM consumed by the filesystem driver is negligible compared to the truckloads of filesystem data shoveled through it. If we assume that errors are comparatively rare, the code itself is unlikely to be affected. Even if you're unlucky enough to get RAM corruption in the 0.01% occupied by the ZFS driver, the chance that a bit will flip in just such a way as to make a checksum succeed when it should have failed due to a second bit flip is virtually nonexistent. Much more likely that it simply crashes in some way. As such ZFS is much more resilient to on-disk filesystem corruption from bad RAM than systems which don't do any checksumming at all.
Courier services have existed for a very, very long time. Heck, Ben Franklin was running one to help connect the 13 colonies.

Presumably the government could have actuslly piloted the USPS if they wanted to, only supporting the northeast for example. They just didn't need to, the leap from private courier systems to a government run courier service didn't have many unknowns to test out first.
Turnover is high for _entry positions_.

Managing multiple teams mean I also hire their managers and the people here in charge of the whole things. I don’t feel more emotional then than then. Hiring is a skill conducted in a professional environment with all that implies. That was the main point of my comment (I’m highlighting because you obviously missed it).

Why be so uncharitable in your reading? It doesn’t make you look smart.
Leap minutes are not, realistically, going to happen. The proposed bound on DUTC is something like 100s, and that bound is not fixed. The reason for keeping a bound is to appease those who don’t want to give up on it, but in practice once leap seconds have been abolished the bound will be extended not enforced.
The network effect of mass messaging was tested at smaller scales many times. Victorian era pneumatic tubes come to mind or unlimited local calls later, but there must be countless other examples that did not require changing the economy as a whole.
How much more performance could you get by bypassing the filesystem and writing directly to the block device? Of course, you'd need to effectively implement your own filesystem, but you'd be able to optimise it more for the specific workload.
Looks like it's due to this: https://github.com/tailscale/tailscale/issues/6999#issuecomm...
> ...I don't really feel responsible for every human on the planet, or even a significant percentage.

That's fair and totally 1000% reasonable. However:

What if (whether through sudden injury or the accumulated injuries of aging) you become utterly unable to work, you've burned through your savings, all your family is dead, and you're an unlikable cunt [0] so those around you are supremely disinclined to provide assistance? Should you be cast out into the wilderness to starve?

What if you were born permanently unable to work and utterly unsympathetic? Should your fate be to die of exposure?

[0] I cannot stress hard enough that if you think I'm making comment about your character, please do remember that I absolutely am not. I don't know shit about you, so I cannot comment on your character. However, injury, illness, and prolonged bad periods can absolutely turn someone into an unlikable cunt... driving away a predicated-on-tolerability material-and-emotional support network just when one needs it most.
If you pull the fuse for this in my Chevrolet, it disables the "Cybersecurity system" and the car dashboard will not function. You must call OnStar and request it to be disabled on the vehicle.
It seems possible that their pipeline just had large files, or something like that.
When have you last updated your filesystem?
> Honestly, I don't. First, perhaps it's small minded but I don't really feel responsible for every human on the planet, or even a significant percentage.

A government that governs a nation is arguably responsible for every human in it.
I was just thinking the same thing.. Im supposed to be on holidays but damn it I need to test this.
What would a non-system actor look like? Can you give some examples?
The point is that since 2008 US was able to keep up with rapidly expanding China whereas EU stood still. We are discussing future of EU here.
Thanks. They avoid saying Meta should have a free option without personalized ads; they only say Meta should consider it. I wonder what other options Meta has, though, apart from leaving the market.

Maybe they’re thinking of Meta making Facebook paid for everybody, but giving users the option of getting paid for getting personalized ads? Apart from the wording, I don’t see how that’s different from “It’s free, but if you don’t want personalized have to pay”, though.

It would be different in that it makes it more explicit that users are selling something, though, so maybe it would be enough in the eyes of the EU?
It’s somewhat more complex than “NTFS is slow”. Here’s a good explanation: https://github.com/Microsoft/WSL/issues/873#issuecomment-425...

I’ve benchmarked deleting files (around ~65,000 small node_modules sort of files) and it takes 40 seconds through Explorer, 20 seconds with rd, and roughly a second inside WSL2 (cloned to the VM’s ext4 virtual hard drive).
Is this article saying anything different than nowadays theories?
https://en.wikipedia.org/wiki/Quantum_vacuum_state
https://en.wikipedia.org/wiki/Zero-point_energy
https://en.wikipedia.org/wiki/Uncertainty_principle#Energy.E...
Do you also need to account for rubber seconds in the pre-1972 version of UTC?
It's a creeping expansion of social benefits...society will adapt around it

I think this will never happen (in the US). The modern political environment in the US won't allow it.

If it appears that there will be an expansion of social benefits, the wealthy class will work to sabotage it (a la ACA; not that there weren't benefits, but net-net the shareholders and executives of insurance companies won). There's nothing stopping them.

What's more likely to happen, IMO, is that as the cost of existing increases, the birth rates will continue to decline. Rather than address this population crisis, the wealthy class will continue to advance automation. LLMs, AI, robots, autonomous driving, etc. With their left hand, they'll import cheap labor. With their right, they'll pit the rest of us against this cheap labor to distract from reality. The corporations want this cheap, imported labor -- they just don't want to pay the taxes to support social services for anyone.

The wealth gap will continue to widen without a voting base willing to increase taxation. And to suppress this, the wealthy will use a narrative that is driven by the media consolidated and owned by these mega-rich. There are increasingly few politicians on either side that feel like they are genuine about solving this issue. The flood of money in politics feels like it's broken the system.
Jokes aside, if I understand correctly it's still assumed the performance increase from the sqlLite is down to the reduced number of OPEN and CLOSE calls. So if that's the case, then it will be as slow as however many sqllites you're running? Meaning it should in theory lose performance?!
https://www.firstpost.com/india/karnataka-congress-governmen...

heh. go away and take your UBI and 38 hour work week. they are implementing a law to enforce this. so you will work for twice a 38 hour work week and still be paid less because why not.
Objective-C is a great language that introduced automatic reference counting among other things. Unfortunately it is tied to C, and modern safety measures prevent developers from using C in application code. That's why Apple forced developers to use Swift, which has little new to offer other than being tied to Apple frameworks.
Literally any economic decision is reallocated resources, that term is much too broad to be meaningful. Are you arguing that a UBI is wealth redistribution specifically?

Someone will try it, totally agree there. I don't see any problem with that either, countries should be able to do what they want as long as it doesn't harm anyone else. I wouldn't tell France they shouldn't try it, but I am absolutely saying I don't want to try it here in the US.
I see what you mean here, sorry.

I guess I'd argue if you have 20 items whose full hash collides then something is pretty seriously wrong with the hashing algorithm - raise an error/exception/panic/(whatever is appropriate for the situation) and surface it.
Yeah sorry, I left out a lot of details for a quick anecdote. It was Java compilation, so the different JDK's may've made a difference (almost certainly). But I figured the better file system handling etc etc would've gone in favour of Linux, versus Windows.

In any case it wasn't much of a fun codebase. But I think a good lesson was, always test it, always measure. Not casting shade on either OS.
Sucking it's a reflex; the rest it's pseudoscience. Your personal anecdothes don't count.
Even on MacOS. I was playing with XCode recently (I don't normally do Mac development as such even though I use Macs as my primary computers) and was disappointed to see that they've gotten rid of Interface Builder as far as I can tell, as that was one of the greatest things modern MacOS inherited from NextStep.