skysight-inc/HackerNews huggingface dataset:
There is a problem on simple TcpForwarding: audition. Some SSH Bastion allows all input and output to be logged for later inspection and forensic while DIY solutions often just ignored it's importance.

Notice that I said "forensic"? Yeah, assuming some very unfortunate situation has occurred, police are called and there will be a full incident report on it, a DIY'ed apparatus without detailed logging records will make the deployer of that apparatus look really bad. This is especially true if you're a contractor, since your hirer might not fully trust you.

Also, at very least, you'll probably want to be mentioned as "the proficient and diligent from one of our employee/partner allowed us to collect detailed information on what the attacker has done on our systems" than "the lack of consideration on the use of remote access tool made it impossible for us to know what else the attacker has done". It's good for your resume.
Thanks! I didn't know about this site to share feedback. I'll give it a try.

Also another reader mentioned to enter Feedback Assistant in Spotlight. It's the first time I see that app.
Oh, this is great!
Nothing wrong with "encryption? check" if the encryption part works as intended.

None of the typical criticism against Telegram is directed at whether this is the case or not; usually people start by assuming Telegram is something it doesn't claim to be (a super-secure encrypted-exclusive communications app), and then proceed to attack the scarecrow by pointing out that it's not encrypted-exclusive. Whereas Telegram just says it provides the ability to encrypt your chats if you want to, but otherwise it's more of a multiplatform social platform. It specifically does not state that its sole purpose and raison d'etre is that you, either as a private person or as a terrorist or whatnot, should feel safe and secure using this tool at all times and expect to be untraceable.

The point I'm making here is, if a box needed to be checked and they checked it (properly), then people ranting "ermagerd what about all the other checkboxes that you don't need but other system with different priorities and mission statements have" isn't really useful criticism against the project. Let alone suggesting Signal etc as an alternative, which is like suggesting a raspberry pi to someone wanting a macbook experience.
Quite frankly why haven't we gotten to the point I can tap my phone against my computer to finish up a payment, or slap my EMV chip-enabled card into a reader and securely pay online that way?

Why did we just... basically skip what parts of the world rolled out? I would have loved a JP Suica/IC-card style payment system in the US where I could hook a reader into my PC and just tap-to-pay. I thought it was amazing to see Japanese people using it for Amazon purchases and on the Nintendo eShop by just tapping against the game console!
Golang was conceived to address the rough edges people found using C, so I guess working as intended?
+1 For fixing the world one step at a time.
Dichloropropene?
The law isn’t permanent, if you notice that it doesn’t make sense in 5 years, you can still change it.
I would rather something not be packaged at all than packaged badly; this whole experience reads like a lesson in what not to do.

What the author left out in his blog post is that I specifically explained why this was going to be an issue and what was going to happen when he and I first talked about Debian packaging; and why for a package that needs to work correctly for the system to boot (fsck, mount helper, encryption unlock), playing these kinds of games with swapping dependencies out was not a good idea.

But with Debian and Fedora people alike it's been like talking to a brick wall. "No, your concerns don't matter, this is our policy and we're going to do what we want with your code". They've made it very clear that I have no voice or say in how they package it.

So then he breaks the build by switching to the packaged version of bindgen, an old unsupported version.

And he makes no attempt to debug, doesn't even send me the build error until months later.

As a result, Debian users were stuck on a broken version of -tools that wasn't passing mount options correctly, which meant that when a drive died and they needed to mount in degraded mode, they weren't able to. This happened to multiple people - that bothered to report it. This was quickly fixed upstream, but as far as I know it's still broken in Debian; and Jonathan Carter wasn't fielding any of those bug reports, I was.

I'm tired, frustrated and demoralized by this drama and tired of constantly having to respond to it. This has taken up an enormous amount of my time.

I really wish this guy hadn't packaged -tools for Debian in the first place. I never asked for it. I have enough on my plate to do without a bunch of distro drama to deal with as well.
It's a colloquialism not a legal statement. Steam sells more games than all other PC distribution channels combined, and has done for many years now.
> So many hopes dreams flushed down the toilet, but people assume that I'm just lazy and stupid.

Reminds me of:

> The culprit behind “the germ of laziness,” as the South’s affliction was sometimes called, was Necator americanus —the American murderer. Better known today as the hookworm, millions of those bloodsucking parasites lived, fed, multiplied, and died within the guts of up to 40% of populations stretching from southeastern Texas to West Virginia. Hookworms stymied development throughout the region and bred stereotypes about lazy, moronic Southerners.

* https://www.pbs.org/wgbh/nova/article/how-a-worm-gave-the-so...
> HR can use later as collateral against anti-discrimination lawsuits

This is a myth. There's almost no reality to job candidates filing frivolous lawsuits. Hardly anyone looking for a job has the time or money for this, not to mention the likely prospect of getting blacklisted entirely from the industry for filing a lawsuit.
If the crows who live in the area didn't do this for every other day, but only on that ocassion - and stopped when the issue was solved, I don't think we need to establish anything, it's kind of established already.
I simply cannot take seriously anyone who exclaims that monster death animations are a minor part of Doom. It's literally a game about slaying demons. Gameplay consists almost entirely of explosions and gore, killing monsters IS THE GAME, if you can't even get that correct then what nonsense are we even looking at.
I always continue to fail several times because after failing once the last press of my last attempt gets registered as the first press of the next attempt so if I’m going fast my next attempt will fail too, until I stop and enter it like my grandmother would.
I have the exact same confusion as you.
> is very much different from serving some kind of metadata to visitors that their browsers interpret.

Absolutely, but I wasn't positing some kind of metadata.

> Also the approval process existing does matter.

It can matter, but it often does not. I don't expect it to matter here because the big web players will not be denied their preferences.
did you just have covid once before developing these symptoms? If so, when did you get it?
Neuroscientist Jane Wu lost her lab, then she lost her life
These are all compile time dependencies in this case. You're not going to encounter a variety of versions - that's exactly what the strict version bounds are doing. The app will be built with the tested version and everyone gets the same results.
Wasn't the old "38" ( https://en.wikipedia.org/wiki/IBM_System/38 ) already built upon this concept?
yeah, I volunteer at a UK raptor conservancy. For handling most of the birds a falconer's glove is okay but for the bald eagle we have a long leather guard for the whole arm - it's actually a boot that someone cut the foot off. A couple of the handlers describe being seriously gripped by a bird - you just have to keep still and grin and bear it until the bird decides to let go.

I got a scratch on the side of my head once from a black kite that 'clonked' me with its talons as it flew past but this was just messing about, not a serious attack.

One other thing is how I would feed the birds. Some of them (e.g. a hooded vulture) I would pass food to their beak with my bare hand but with other birds this would be a good way to lose a finger.

Also, their Egyptian vulture likes playing with shoe laces (undoing them by pulling) and also tugging on leg hair if you are wearing shorts. The Yellow-billed kites like grabbing people's hats if they are wearing them.
> learn to show yourself before the marriage even if that’s no use afterwards

It's not a marriage. Both the employer and the employee can terminate employment at the drop of a hat.
You should check out the sci fi book Blindsight by Peter Watts:

https://en.wikipedia.org/wiki/Blindsight_(Watts_novel)

It's a first contact story about an alien species that doesn't have consciousness.
I had a similar experience when I was a kid shooting a .22 and was like “no way I can hit this bird” and totally did. I instantly felt like a huge prick as I stood there watching this bird die. I went back to get my gun to humanely finish it off but didn’t manage to find it again when I walked back. First and last time I’ve ever thoughtlessly harmed an animal
Well it may also be the difference between needing to express uniqueness as a mechanism to display it to others. If I'm secure that I'm a unique individual, I may not need to express it or demonstrate it.
PFAS have exceptional properties that make them difficult to degrade, especially when it has been ingested. As a result, exposure to them will lead to bioaccumulation. Wastewater is treated to remove things like metformin, and anything that eludes that can be metabolized normally.
Learning new things is my biggest motivator. A day during which I learn something new is usually a good day.

Recently, I've been working with two former colleagues to build a search engine that indexes the entire web's HTML—a fascinating technical challenge on its own. Equally intriguing is figuring out how to attract our first customers.
Yes, fzf is a Go program.
The problem is your location is basically /always/ stored by the carrier, so not carrying your phone would then just become a clear signal that something's up when all of the other data shows your person 'disassociated' from the cellphone's location.

I'd paid a bit of attention during the murder trial of Brian Kohberger, because his phone's GPS location records were historically used to set up the patterns of his crime; the "8458" phone was powered down for two hours during the crime but the actions were still linkable throughout.

https://klewtv.com/news/local/8458-phone-retracing-the-cellu...
https://www.fox5atlanta.com/news/bryan-kohbergers-phone-ping...
Private equity is a type of private ownership, even if it doesn't apply to Steam. In the broader context of business dysfunction, public-vs-private ownership is not telling the full story. Corporate raiding is also just part of the picture; MBA-driven corporate mismanagement, ZIRP and LIRP, principal-agent mismatch, short-term profit maximalism, and a number of other issues are involved too.
And that's because the users of Debian are not fine with vendoring.
Let's see:

1 - EXECUTIVE:

Lula is in the literal workers' party.

Fernando Haddad, Minister of Finance, did his own Master's dissertation defending socio-economics of the USSR, before the USSR collapsed and was an embarrassment for cocktail communists everywhere. The guy who calls economic shots is literally a communist fanboy.

Carlos Lupi, also Minister, is literally one of the vice presidents of the Socialist International . The word socialist is literally in the name, and he is VP of it worldwide!

2 - CONGRESS:

The opposition is in clear minority in in both chambers[1]. The opposition has almost a 2:1 deficit vs the Government inside the Chamber of Deputies

3 - MACRO:

The president's own party is in an alliance with the communist party[2]

[1] https://en.wikipedia.org/wiki/National_Congress_of_Brazil
[2]
It's 100% culture: this happens across all languages.
I can tell you are bad faith because you either a. haven't done the most basic research to figure out the answer to that question or b. have and don't like the answer so you go around Just Asking Questions.
Discuss HN: Will 100M token LLMs replace most programmers?
I recently had a conversation with a friend who's a Delphi developer on a large ERP project. He's been relying heavily on ChatGPT for SQL queries and specific functions, and now he's talking about fine-tuning it on their entire codebase.
His claims about the future of our profession have left me unsettled, especially in light of recent developments. Magic, an AI company, just announced some significant breakthroughs:

Developed LLMs with 100M token context windows (~10M lines of code or 750 novels)
Their LTM-2-mini model shows strong performance on a new, more rigorous evaluation method called HashHop
Claim their algorithm is 1000x cheaper than Llama 3.1 405B's attention mechanism for 100M token context
Partnered with Google Cloud to build AI supercomputers using NVIDIA's latest GPUs
Raised $465M in funding, including $320M from new investors

My friend argues that with capabilities like these, AI could replace most programmers soon, leaving only a few to oversee the AI's work. He even suggested many intellectual jobs could be replaced very soon due to rapid AI progress.
As someone studying to re-enter the field (Angular, JS, HTML, CSS), I find this both intriguing and concerning.
What do you think? Is this a realistic assessment of where we're headed? How do you see the role of programmers evolving with these increasingly capable AI assistants? Could tools like this make programming more accessible, or will they reduce the need for human programmers?
For others confused by the references, ME CFS is https://en.m.wikipedia.org/wiki/Myalgic_encephalomyelitis/ch...
Well, maybe not a static document, but as soon as you have some basic HTML forms doing a good enough job, I would not be surprised to it gets attacked by big tech shadow-paid hackers (or idiotic ones) to push forward their massive and complex javascripted web engines which they have control over.

Look at whom the crime is a benefit in the end.
Nice. It would be cool if there was a visual resizer, that could drag corner handles and see it in relation to the size of the original image. Add crop, stretch and resize capabilities.
Actually that's a great point. The best software is no software. If there was a car like this, I would undoubtedly prefer it.
The manufacturers would not disclose it to us beyond it was "not-PFOA", but they did agree to disclose it to the FDA upon request.

The application requires a small, inert molecule, which PFOA was, in spades. They simply made a slightly different small molecule that was almost as inert.

Small is a problem because it becomes mobile. Inert is a problem because it doesn't easily break down. Now, instead of having one "forever chemical" we have a host of them in the environment.

Not sure what the right answer is and whether we are actually better off as a result of all that work.
San Francisco's Algebra for None Policy and How Virginia Avoided a Similar Fate
Meta: dang here is incorrect.

Each post could be the first time someone is encountering a Wolfram post. If they haven't built up defenses to this kind of self aggrandizement they might believe his words. This, and every piece from him deserves a community note.

Just because you've seen a lot of misinformation from a source in the past is no excuse to stop labeling it as such.
You'd want to encrypt your communication in either case.
Nonsense. If these were written in C, and depended on exact versions of getopt, log4c, libuuid, etc and refused to vendor them do you think that would be any easier to package?

This is a result of every Linux distros' self-centred requirement for the entire world to be packaged by them, and a refusal to accept vendoring.

Python has exactly the same problem. You can't even `pip install` on Debian any more because they insist on copying a random selection of Python packages into Apt and they can conflict.
Thanks for taking the time to comment here!

> So then he breaks the build by switching to the packaged version of bindgen, an old unsupported version.

Could bcachefs-tools solve this problem upstream of distros by releasing a source tarball with the bindings already generated, so that you can use whatever version of bindgen you want, and bindgen is not needed at all when building from this release tarball?

This would be similar in nature to traditional autotools approach where some amount of pre-compilation is done to produce a release tarball from what actually lives in the source repository.

It's also what I do for some of my ffi crates. I have a script in the root of the repo which regenerates the bindings, but when published to crates.io, the bindings are already generated and bindgen is not part of the build downstream of my crate.
no way just discovered this lmao i now only need a similar thing for fahrenheit to c/viceversa, i'm sure it exists. however, i'm so lazy i will not search for that information now
The same bcachefs that Linus just ripped apart for inconsiderate and irresponsible PRs?

Sensing a pattern and it's not both Debian and the kernel. I mean can you even point at 2 more proven solid large and long term projects that have proven how to do it right?
Casio FX115ES Plus, its only $15. Looks great, feels great, just works.
I think so. I don't work at one, but I've interviewed at a couple of them in the past (both contacted me through the yc.com/jobs portal) and both were remote opportunities in India.
Using an iPhone with rounded display corners, a few pixels of the last line of the “hamburger” are even off screen. I would never have seen it without the discussion in this thread.
judging by my wife's experience, a woman could go to the ER with a gunshot wound and leave with a prescription for an antidepressant.
Yes, but here it's about avoiding multiplication (and division).

I suspect on a modern processor the branches (ie "if"s) in Bresenham's algorithm are gonna be more expensive than the multiplications and divisions in the naive algorithm.
The usually unstated corollary to Rule 34 is that "if there is porn of it, someone is masturbating to it."
to be honest, how to discover these issues in an interview is really the question. i have no idea what to ask to get that that. i mean, asking if i'll get help from my team mates is surely going to be answered with yes, whether it is true or not. same if dumb questions are ok. etc. i think you'll really have to spend a day with the team to get an even just an idea.

at best in a coding interview i can find out if the interviewer is helpful when i am stuck there. or as in one interview i had, the fact that i was allowed to do the tests in a language that i was familiar with but nobody else in the company knew, at least showed that they were open minded and would accept me as an experienced programmer despite not being as experienced in the language they were using.
Linux uses at least libc
A lot of the good stuff got sucked in to walled gardens. People’s personal home pages or tacky MySpace pages were definitely more fun than the current semiprofessional content scroll. Forums like this very one were mostly subsumed in to Reddit. Nevermind the death of the bbs (not actually the internet I realise)
This makes me angry literally every morning when I wake up and turn off sleep. And the worst part is that it used to work fine until they changed it to a long press for some reason.
I’m sorry. It’s difficult to live with a sick partner, and most people can’t quite imagine the myriad of effects it has (unless they have also been there). You’re not alone if that helps.
agree, forgotten genius AND lonely madman, there is no contradiction..
In mathematics, and science, these people are not uncommon.
A lot to admire in this post about passion and long-term thinking but this is too egregious.

> Back in 1979, for example, I’d invented the idea of transformations for symbolic expressions as a foundation for computational language.

I hope at 65 to have the energy to work this hard, but I also hope at 65 I'm surrounded by people who will kindly correct me when I take credit for ideas that aren't mine, and that I will listen to them.
Hey vindarel, I don't get it:

ciel-user> (disassemble #'(lambda (x) (+ x 2)))

Error: Missing closing quotation in string (line 1):

(disassemble #'(lambda (x) (+ x 2)))

ciel-user> (disassemble (lambda (x) (+ x 2)))

; disassembly for (LAMBDA (X))

; Size: 35 bytes. Origin: #x54354A64

; (LAMBDA (X)
Linux kernel doesn't use libc. Libc provides the interface for userspace to call the kernel.
I already provide tarballs with vendored dependencies - I did this for Fedora, so that package builds wouldn't have to download anything.

I'm not going to special case the bindgen bindings because this really isn't a bindgen specific issue - this could just as easily been any other dependency.
Those are both mid-range CPUs in standard consumer configurations, and I agree ARM does very well in that segment, and it does even better in the low-power/mobile/embedded segment where x86 is practically non-existent (recent gaming handhelds notwithstanding).

However, high-end workstations, compute-focused servers, and supercomputers, which use extremely expensive and power-hungry x86 chips, are a different segment, one to which ARM currently has no direct answer (and some might argue it shouldn't have one because such wasteful things shouldn't exist). This segment once had a number of competitive RISC players, like POWER and SPARC, so I don't think it's unobtainable for ARM.
Oh, that's awesome!

Deploying FLOSS software on your own infra can also be a good way to contribute something back: there are usually some things you need to do for your setup that aren't yet covered by the project itself. Eg, I just deployed an open-source RSS reader on a private k8s cluster and didn't yet have a Helm chart. So I will make that open source for whoever wants to deploy that same RSS reader on k8s without having to reinvent the wheel.

Deploying everything on k3s running on dedicated servers has also been a great way to better understand how Kubernetes works. Coming from the AWS world, it's an interesting challenge—there's so much I have to figure out now that AWS used to handle for me (PKI, load-balancing, private DNS, etc).
Oh well, it was probably just a crash in my Internet connected software where users can just sent inputs to be processed on my machine.

RCE would have been worse than file system bugs, as it leads directly to a superset of problems including potentially losing all your files.
True story from a non-programmer.

I used perplexity.ai to help me write a simple C# program to save all my Outlook emails as .msg files.

I was able to do it in about a day, which is an amazingly fast velocity, if you consider that I had nothing in terms of background.

Not suggesting this scales to non-trivial problems, but it actually created a working solution for me.
Canon R5 Mk II In-Camera (Dumb) Upscaling versus R5's Pixel Shift (Part 2)