skysight-inc/HackerNews huggingface dataset:
New malware campaign in GitHub, accounts spreading malware using MediaFire
Hello everyone,

There is a new malware campaign in GitHub where normal looking accounts are posting messages looking like this:

Download
www.mediafire.com/file/DONOTCLICKMEORCOPY
password: changeme
In the installer menu, select "gcc."

I personally received 3 of these on the same issue but luckily GitHub takes action immediately and deletes the accounts when you report them.
please elaborate on the waste you saw. i studied in germany and austria and i didn't notice waste. on the contrary, requiring payment would have excluded many of the good students. (entry is limited to qualified students however, so there is some selection. does that make all the difference? i doubt it.)
Since you wrote "using something other than Python" and not necessarily only Ruby, definitely look into Livebook and Elixir, and the whole ecosystem around it, including:

- https://github.com/elixir-nx/axon Nx-powered Neural Networks

- https://github.com/elixir-nx/nx Multi-dimensional arrays (tensors) and numerical definitions for Elixir

- https://github.com/elixir-nx/scholar Traditional machine learning on top of Nx

- https://github.com/elixir-nx/bumblebee Pre-trained Neural Network models in Axon (+ Models integration)

- https://github.com/elixir-explorer/explorer Series (one-dimensional) and dataframes (two-dimensional) for fast and elegant data exploration in Elixir

- https://fly.io/blog/rethinking-serverless-with-flame/ (for offloading large work to remote containers)

- https://www.youtube.com/watch?v=RABXu7zqnT0 InstructorEx

And of course Livebook (https://livebook.dev)

Old but interesting video https://www.youtube.com/watch?v=g3oyh3g1AtQ (Bumblebee: GPT2, Stable Diffusion, and more in Elixir)

A talk on the upcoming Elixir conference (https://2024.elixirconf.com/schedule/#schedules) is actually titled "Livebook in the cloud: GPUs and clustered workflows in seconds".
Nah, if you don't need list management you're definitely better off going with something a little bit closer to the metal. We actually keep a price guide for comparing MTAs here (https://buttondown.com/comparison-guides/esps). I do happily recommend Postmark; they're a little bit more expensive than their peers but are worth it, IMHO.
Very cynical, but wrong in this case. The point of the sovereign tech fund[0] is to throw some (relatively small in the scheme of things) money at open source infrastructure that everyone relies on, no matter if that infrastructure itself is German, or even European. Basically, as their graphics on their homepage allude to, aiming to improve https://xkcd.com/2347/

IMO this is exactly the common-sense investments that every country should be making in their own self interest, and is one of the things that Germany is actually doing right.

[0]: https://www.sovereigntechfund.de/mission
Oh so nice those fancy tlds and domain names. I have been too "clever" about 2 domains in my life already:

First is my private email which has only 4 letters and our national .nl tld. I always have to spell out the domain because it is not really a word, and it sometimes confuses Americans (non-techies) that there is no .com.

The second domain is my business domain which has .bio as tld, and now I often see people waiting for more when I say my address, like: "Hi, my address is blabla.bio", "... and?" "No, that is it, .bio is the end."

So I guess "normal" .com is just the way to go ¯\_(ツ)_/¯ (although in both cases that was just too expensive for me and I like short domains a lot myself, I once met someone who had (pattern) xx@yy.dk, apparently the whole company did, I kneeled.)
Neat. I hadn't heard of the Pantheon dataset before, seems useful. In particular it appears to have used some AI to decide someone's main profession based on the biographies in wikipedia. Which is useful as although e.g. Hitler and Trump have written books and so show up on a naive search for authors in Wikidata, you may want a list of people famous for writing, rather than famous people who have written books, which is subtly different.

Though on glancing at it to look up the most famous female authors I spotted several misclassified men including Walter Scott.

Since the article's analysis looks at gender those errors might propogate through.

The data correction form lets you update them about birth dates and places and profession but not gender.
Zuckerberg says Biden administration pressured Meta to censor Covid-19 content
https://archive.md/RTvI8
I laughed so hard reading this paper. Thank you share. No pun intended, but I am surprised that Microsoft allowed him to publish it!
The fact that OP felt the need to add a disclaimer suggest that they expect people who write such abominations to search for detectors :)

Who knows, though. Maybe there is a marketing dude who once thought "maybe that's too much?". Naah.
Isn't that more like switching to a different character set,
with supporting fonts having to be already present? Or what are you referring to?

I was thinking along the lines of online (or inline) fonts, similar to web fonts in CSS, which would allow for arbitrary custom glyphs.
Correct, but one can make a point those were an impetus measures that allow those to kick off and operate at competitive level

In case of Boeing their business pivoted in order to extract the funds themselves, not to use funds to make products. Thats the problem, corruption and profit chasing over product creation.
So, how is PHP + queue library different than Dokku(or PAAS as you call it) + queue plugin? Other than the fact that you write it all in yaml/json/gui instead of code?

> "I'd recommend reading more thoroughly about Dokku (or PaaS in general) since it is somewhat clear you don't understand the value prop."

My cynical and uncharitable translation of this and the rest of your post for the GP: We've invented platform or PAAS or devops so that we can carve-away work from devs that used to traditionally do this kind of stuff in partnership with infrastructure, and you're just not understanding it because you're coming from a dev perspective.

It's all just evangelism/marketing-push to gather the online webosphere mindshare and capture the development process so that all that's left for the downstream individuals (developers) is nothing but config/yaml/plugin-ecosystem and even that stuff only the ordained priests of DevOps understand (or are allowed to touch), again leaving developers with even less, making them glorified code-monkeys that need to spit out CRUD screens. It's either that, or put "DevOps" on your resume or title, almost like a mafia-style shake-down.

It works, sure, provides immense value sometimes and gets you to market quickly sometimes, sure, etc. But damn is it toxic and detrimental for our community in the long run. In an alternate universe or timeline we could have gone some other direction, but this is what we have for now, so we have to live with it. DevOps and UX will many years from now be known as two very bad paths that we allowed our industry to be dragged down into.
I downvoted because you didn't qualify your statement.
> Fast big cores should just stick to fixed size instrs for faster decode.

How much faster, though? RISC-V decode is not crazy like x86, you only need to look at the first byte to know how long the instruction is (the first two bits if you limit yourself to 16 and 32-bit instructions, 5 bits if you support 48-bits instructions, 6 bits if you support 64-bits instructions). Which means, the serial part of the decoder is very very small.

The bigger complain about variable length instruction is potentially misaligned instructions, which does not play well with cache lines (a single instruction may start in a cache line and end at the next, making hardware a bit more hairy).

And there’s an advantage to compressed instructions even on big cores: less pressure on the instruction cache, and correspondingly fewer cache misses.

Thus, it’s not clear to me that fixed size instructions is the obvious way to go for big cores.
Jupyter notebooks have been around for almost a decade now. The interesting piece here is adding Ruby as a language that can be used instead of the original Python. (There have been many other languages integrated with Jupyter as well.)
For Visual Studio on Windows Google provides a search extension that indexes Chromium locally and gives instant results for search. I was always puzzled why such functionality is not available in most IDE by default.
In the hunt for alien life, is man 'the measure of all things?
This is hackernews. If you don't have anything of value to add you skip it.
In this particular context, they're trying to run code compiled for x86_64 on RISCV5. The need from "we just need a few more instructions to get feature parity" comes from trying to run code that is already compiled for an architecture with all those extra instructions.

In theory, if you compiled the original _source_ code for RISC, you'd get an entirely binary and wouldn't need those specific instructions.

In practice, I doubt anyone is going to actually compile these games for RISCV5.
For this whole conversation, you refused the claim I brought, and I never said it was the single reason, as wrong because there are other factors in.
The loss of heavy industry did play a role yes, but not investing in building plants for almost 2 decades also play a major role.

Every of your response are like this, I say something and you claim that I says it's the single reason.

From the beginning of this conversation you have been manipulative (like your 5th paragraph) in this discussion.

Your manipulation even present logic flaw, you blame that i reject everything on anti nuclear and covid, and 2 paragraph later, "You were totally unable to even conceive that some problems were not the result of some sort of anti-nuclear propaganda."

> Then explain me then.

The things I claim are a part of the whole problem, and I never said that something was the whole cause.

From the beginning when I pointed at A cause you said the cause was the symptom, or alternatively, you said another problem was THE cause.

I'm not the one saying most of the problems are due to the directions of EDF
Is this the 86Box? I found it fun reliving the time I got my Amstrad PC1512, I added two hard cards of 500MB and a 128k memory expansion to 640KB which made things a lot more fun. Back then I only had two 360KB floppies and added a 32MB hard card a few years later. I had Borland TurboPascal and Zortech C too. Fun times.
That’s orthogonal; you can use Ansible with Dokku.
Very interesting! Makes me happy to see JS projects not using build tools and low/no dependencies
PDD's $55B Stock Crash Sends Warning on China Economy
RIP. I always wondered what was going on with edX. They were great back in the day. I was introduced to the Stanford CS curriculum through them. At least MIT OCW lives on! Don't see that going anywhere ... unless somehow they sell to some shitty private company and invest the profit into nothing.
Three countries, but your point stands.
Oh wow, I am glad they paid millions in order to reveals this unexpected conclusion
Coursera got enshittified like crazy. The first couple of years had legit college courses on it. Then it became all about micro degrees and courses with twenty minute lectures.
It's certainly possible, but the provider would need to add support for the kernel. That is, I'm pretty sure you can't install a new kernel in these environments yourself.
I use both. The main point was having windows centered and switching them in place, without having them in any fixed arrangement.
Feels like LLMs could be used to scalably grade more complicated assignments than multiple choice tests.
https://tinygrad.org/#tinybox

Looks like good value, but I wonder if it would get CPU/RAM bottlenecked, especially if you want to train something with a lot of preprocessing in the pipeline. Something comparable I've found with 7x4090 which comes to about $50k, but with much better CPU/RAM (3x CPU, 4x RAM, 5x SSD):

https://www.overclockers.co.uk/8pack-supernova-mk3-amd-ryzen...
One word: euthanasia.
If eradicating pubic lice is excessive hubris, then refusing to eradicate pubic lice for fear of some unknown consequence is cowardice.
Let's do a study on whether it's generally painful to touch a hot stove with an unprotected hand. I know it sounds obvious but that's the spirit of science! No, I haven't suffered a head injury, I think this is a good idea!
Good call and I agree, I personally don't like using the www subdomain but I would definitely redirect it to the main one, especially on important money-making domains!

There is a lot of discussion about it online, like [0]. But whatever arguments there are, there is a whole generation that thinks that urls should start with www.

[0] https://stackoverflow.com/questions/486621/when-should-one-u...
Honestly, though, removing standardized testing usually just obfuscates the problem. There are many ways to game the system. The ubiquitous college cramming is usually about temporarily learning for the test the night before a big exam.

It's better to work on improving transparent standards for credentials than to have tens of thousands of different standards that no one pays attention to and hoping that they're adequate, despite having no clue if that's actually the case.
Missouri AG's legal war against Media Matters shot down by federal judge
I've done a bunch of Clojure development professionally and don't find that code extremely hard to read.

One thing to add to what others have said, when you're met with code like this in the wild and you need to modify/add/remove something but don't have a 100% understanding yet, the common workflow is that you explore this code with your "evaluator" (basically a REPL connected to your editor).

So if you come across snippets of code you don't understand very well, you place your cursor at the various forms and execute them. So you'll start at the inner forms, and slowly work your way outwards, and after that you've verified assumptions both about the function's internal workings and how you'll use it from the outside.
The ranking is quite close at the mid-high ranks. There's 4 points of difference between rank 27 and 100 - high fluctuation without manipulation is entirely expected.
How?

The limitation is not for the API, it is only for the UI and how does that even nerfs the Zed or Cursor?
"People prefer native apps to web apps" is talking about literally using an app on your desktop, in the dock, with keyboard shortcuts, rather than having a website in your browser. This is sort of shown by the amount of Electron apps people use — you could use slack, spotify, or vscode in the browser, but most people prefer to use the app.

"Java has UI curse" is referring to how when Java tries to imitate native UI (note the difference to "native app", which is in contrast to a web app), it fails and hits the uncanny valley. No-one likes it.

Given that, it's not a contradiction to have a native app, that does not try to use the native GUI toolkit of the host platform, using Skia directly to draw UI elements.
> It was never a visual manifestation of a recognisable shape, it was just a sense that there was another consciousness in the room with me. I never saw machine elves or anything, I just felt strongly that there was a benevolent female presence in the corner of the room. Why I felt it was female I can't say but in the moment I was absolutely certain.

I've had trips like that but then I also had trips where I saw things like Pikachu, bees, jesters, machine elves (people-like things). But then the more I did it they got more defined and were just hallucinations of people (some were fictional characters). There was also progression from "feels like you're getting a message" -> "hearing something that's unintelligible" -> "hearing full sentences in English". I'm skeptical of the metaphysical or meaningful interpretations just because the more I did it the more nonsensical it seemed.
> There is one OEM/protocol I suspect actually uses diversified batch keys as their root provisioning secret, and really it's the way to go if you do business globally now.

seems like apple, since it’s actually an important factor to them and not just to third parties?
Life out there is everything but mere numbers and statistics. Having kids is not about just propagating genes, but raising another generation that will take care of this planet and mankind's future, or fuck it up further with stupid selfish approach.

You can have a say in this, a largely thankless say, but with kids we imprint ourselves and our values in mankind's future. Smart folks giving up on kids are removing smart genes from future gene pool, who then gets more diluted by illiterate farmers having 10-15 kids. Of course smart & broken ain't the same value proposition as smart & functional.

You don't have to care about any of this of course, that's highly individual. But raising kids well (which requires tremendous continuous effort with no guarantee of success) is extremely rewarding experience that no mere words or just brief encounters within friends/family can explain. I speak as participant of quite a few extreme mountain sports, which can be massively rewarding but there is just no comparison. To not have kids just because of chasing some career... no respect there, its a common story that brings some deep regrets later. Not to expect anything back, just doing something good, charity in a way. It requires certain character traits to appreciate, and ie selfish folks won't ever grok this part which then translates into what sort of parents they are and what sort of kids they raise, but its there.

Anyway its just smart folks discussing pros and cons of having kids while world and its population moves forward without any care of such topics. Life with no kids is like a computer game played on easy mode. Sure, some folks can't even finish nor enjoy it on higher difficulty, its just too much for them. But that higher difficulty brings much more rewarding experience, every achievement is much harder won one, and we all know challenges build & sustain good character. So there is some angle even for selfish folks (although yeah if even one recognizes oneself as selfish, having kids are probably not the brightest idea).
1.0 being the first stable release of a project is an obvious convention older than semver
I have found this long read a useful summary of deliberate practice
https://fs.blog/deliberate-practice-guide/
Very interesting, thanks for sharing! I didn't know Elixir was so invested in Machine Learning. I have a background in Erlang so I'll definitely dive in. Do you know of any individuals / companies that have had success with Elixir+ML in production?
Splatt3R: Zero-Shot Gaussian Splatting from Uncalibrated Image Pairs
Would this work on a microcontroller like an ESP32?
Of course tooling should permit 0.x.y releases but I think the author vastly overestimate their value. The point of semver is to know what has changed between releases. If your 1.0.0 API was not good, just release 2.0.0. It's not under obligation to have any compatibility whatsoever with v1.
> on the contrary, requiring payment would have excluded many of the good students

How? Surely people/families in Germany/Austria, some of the richest countries in the world, can afford to pay something towards education costs... And in fact they do through their taxes, which are needed to pay for this "free" university. [obviously poor families can benefit from bursaries so this is not a relevant argument]

The waste is students picking courses just to do something or just because they are vaguely interested in them (and then they get all the benefits afforded to students, including housing subsidies). And then they give up, or they fail, or once they graduate they realise that it gets them exactly 0 job. So huge waste of resources and time and, as mentioned, sometimes a way to hide youth unemployment.
Better spend more then. I'm in favor of 99.99% of GDP personally.
Nope, it's manipulated (or broken). Entries gaining hundreds of points, then losing them again in an instant. Just watch for a few minutes, it's a shit show.
Box64's documentation is just on installing the Wine x64 builds from winehq repos, because most arm repos aren't exactly hosting x64 software. It's even possible to run Steam with their x64 Proton running Windows games. At least on ARM, not sure about RISC-V.

Wine's own documentation says it requires an emulator: https://wiki.winehq.org/Emulation

> As Wine Is Not an Emulator, all those applications can't run on other architectures with Wine alone.

Or do you mean provide the x86_64 Windows API as a native RISC-V/ARM to the emulator layer? That would require some deeper integration for the emulator, but that's what Box64/box86 already does with some Linux libraries: intercept the api calls and replace them with native libraries. Not sure if it does it for wine
I coded my own dead link checker
defrost, I assume you meant that most mining for rare earth also produces LLW. I don't see any other connection to nuclear power/nuclear waste besides that. So I assume your argument is that nuclear waste is not bad (or equally bad), since rare earth mining is also a source of LLW?

> I'm not responsible for your inability to see a connection ...

> WRT your self annointed command and control of thread comments ...

> When did dang die and who elected you the moderator?

> Best read cephalic sans rectum.

Be kind. Don't be snarky, Edit out swipes.
He said it is not political and published it at the end of an election cycle ... Of course it is.
Show HN: PathfinderBeacon a Public Bootstrap
The Lounge is ok.

It has a pretty nasty bug that affects me on OFTC.

I set my nick in the server settings in the app. I also use a client cert for authentication.

There seems to be a race condition at some point during a connection where it fails to authenticate. When that happens, The Lounge helpfully changes my nick to `<nick><counter>`, and keeps increasing that counter until it finds something that works (I'm not sure what's the algorithm here).

So far, so good. I could just disconnect and reconnect to retry. That's not the case though, as The Lounge changes my server settings to reflect the "new" nick. So now I have to edit the connection settings to remove the counter, save it, and only then try to connect again. Most times it works but sometimes I'm back with a new counter.