skysight-inc/HackerNews huggingface dataset:
Microsoft: 70 percent of all security bugs are memory safety issues: https://www.zdnet.com/article/microsoft-70-percent-of-all-se...

Rust's Memory Safety Model: An Evaluation of Its Effectiveness in Preventing Common Vulnerabilities: https://www.sciencedirect.com/science/article/pii/S187705092...

"...can Rust achieve the memory-safety promise? This paper studies the question by surveying 186 real-world bug reports collected from several origins which contain all existing Rust CVEs (common vulnerability and exposures) of memory-safety issues by 2020-12-31. We manually analyze each bug and extract their culprit patterns. Our analysis result shows that Rust can keep its promise that all memory-safety bugs require unsafe code..."

You can't change the environment codecs are expected to run in, or the data they are used to process, but you can use effective tools to limit the sorts of bugs you are likely to run into, and isolate them to the relatively small area between unsafe declarations. Exploitable C style memory errors simply aren't possible in memory safe languages like Python, for instance, but Python leaves performance on the table which is valuable for codecs. Rust provides a high degree of memory safety while performing as well as C or C++.
How's that exactly?
Of course the whole point would be in adding an acoustic side channel imperceptible to humans but affecting the listening AI in interesting ways.
Are you surprised that jpg compression algorithms can reproduce input data that bears striking resemblance to the uncompressed input image across a variety of compression levels?
https://burnernote.com - company is looking for some specific features added.
Mastodon is 8 years old and as a whole has 800K MAU. Note that MAU is an optimistic metric still, it says very little about meaningful activity.
Slippery slope is a fallacy for a reason...
Jellyfish under attack: Study uncovers parasitic spillover of burrowing anemone
Exit node applies only to traffic that goes into a clearnet. You could to illegal stuff, but only tor users have protection and website owners are liable to raids should they allow illegal stuff to happen on their platforms.

With Tor Hidden Service there's no exit node as such since traffic terminates inside the Tor network. The networking route is doubly anonymized so both the server and the client can't track each other down.
Aerodynamics is also a factor. Windows used to be less sloped and more vertical.
Tor relay operators are, as a rule, entirely willing to give law enforcement all the information they have about connections that have gone through their relays. They simply don't have any. And there's no legal requirement for them to have any.

... or at least there never was in the past. The new wave of stupid and extremely broad "duty of care" laws that try to apply to the design of any and every communication service may change that. But it hasn't been litigated anywhere.
I guess I am in my grouchy old person phase but all I could think of what the Gilfoyle quote from Silicon Valley when presented with a talking refrigerator.

> "Bad enough it has to talk, does it need fake vocal tics...?" - Gilfoyle

Found it: https://youtu.be/APlmfdbjmUY?si=b4-rgkxeXigU_un_&t=179
"Those satellite photographs -- the landsat photographs -- are so darn good that when they re fully enhanced by computer, we can actually tell how high the waves are out in the middle of the Pacific; we can tell what the temperature of the ocean is 20 feet below.." - Grace Hopper in 1982 NSA lecture. YT link: https://www.youtube.com/watch?v=si9iqF5uTFk&t=1612s

I bet current spy satellite will be doing a lot things we can hardly imagine, may be we will know in 40-50 years down the line.
There are significant differences between trie-hard and a Bloom filter. Bloom filters are probabilistic, and use hashing. They're great for when rare false positives are acceptable in exchange for no false negatives, which isn't uncommon, but isn't what's needed here: this is exact, and hashing is the step to beat.

Rather, this is a refinement/variation on Liang's algorithm, used in TeX for storing a hyphenation dictionary. The thesis mentions Bloom's algorithm, which it calls "superimposed coding", and very much hearkens back to a time when memory was often the most precious commodity. I think you'll like it. ^_^

https://tug.org/docs/liang/liang-thesis.pdf
Optical media is neat, but has a number of drawbacks when it comes to large scale operations.

What you're talking about already sort of exists, albeit media hadn't reached "cheap" yet, because the manufacturing scale wasn't there. People weren't interested enough in it. Archival Disc was a standard that Sony and Panasonic produced, https://en.wikipedia.org/wiki/Archival_Disc. Before the standard was retired you could by gen3 ones with 5.5TB of capacity, https://pro.sony/ue_US/products/optical-disc-archive-cartrid...

LTO tape was already at 15TB by the time their 300GB Discs came out, and reached 45TB capacity 3 years ago. Tape is still leaps and bounds ahead of anything achievable in optical media and isn't write-once. (https://en.wikipedia.org/wiki/Linear_Tape-Open)

Part of the problem is you can't just store and forget, you have to carry out fixity checks on a regular basis (https://blogs.loc.gov/thesignal/2014/02/check-yourself-how-a...). Same thing as with your backups, backups that don't have restores tested aren't really backups, they're just bitrot. You want to know that when you go to get something archived, it's actually there. That means you're having to load and validate every bit of media on a very regular basis, because you have to catch degradation before it's an issue. That's probably fine when you're talking a handful of discs, but it doesn't scale that well at all.

The amount of space that it takes for the drives to read the optical disc, the machinery to handle the physical automation of shuffling discs around etc. combined with the costs of it, just make no sense compared to the pre-existing solutions in the space.
You don't get the effective data density (GB/sq meter) you'd need to make it make sense, nor do the drives come at any kind of a price point that could possibly overcome those costs.

To top it all off, the storage environment conditions of optical media isn't really any different from Tape, except maybe slightly less sensitive to magnetic interference.
> avoiding to pay any corporate taxes in Italy

This us a fairly common strategy not limited to tech.

For instance, Starbucks in the UK:

> Starbucks Coffee Company (UK) made a £149m “gross profit” in the year to October 2023, up from £129m the year before. But after “administrative expenses” of £127m, its pre-tax profits were reduced to £16.9m, on which it paid £7.2m tax...

In 2012, it was revealed that Starbucks had paid just £8.6m in taxes on £3bn in UK sales since 1998,

https://www.theguardian.com/business/2024/apr/05/starbucks-p...
Only Sony or Fuji actually make tapes. The rest are rebranded.
Hard drives are known to suffer "sticktion" where the heads get stuck to the platter and either the drive won't spin up or it spins up and the heads damage the platters. I imagine hard drives could also have bad capacitors but I haven't heard of that happening.
Last I checked my desktop doesn't slam into pedestrians/bicyclists trying to use what public infrastructure we have in the US. If unbounded vehicle bloat is systematically contributing to the deaths of citizens then yes, we have a collective responsibility to regulate it.
> In a Jupyter notebook...
> Often, Jupiter notebooks...

Everytime I search my Slack, I have to run two searches because DS can't agree on how to spell the damn thing.
<you didn't glance at the ad screen for two whole minutes. Your seat heating credits streak was lost. Do you want double or nothing on your steering wheel heating credits?>
I'm not convinced new legislation is even needed to fix this. All of these agencies are controlled by the executive branch of the government.
> driver seats are so bad pedestrians and small cars are largely invisible

This is the thing. The sightlines and pillars are so big it's literally difficult to see other cars on the road with you.

That alone should warrant some safety regulation.
I haven't seen Cheney being lauded for anything other than maintaining his stand against somebody he has been calling a criminal, coward, and worse for years. I haven't seen a single democrat show excitement over policies supported by Cheney, except when he says that the law should apply to Trump as well as the rest of us. So, again, what you're calling weird is largely a result of loyalty to a person instead of actual policies.

And, yes, the world remembers Bernie's about-face on policy -- there's been quite a lot (e.g., [1]) written on the topic. But it's pretty normal for politicians and even political parties to change their minds in issues over a span of time as long as Bernie's career. This should be expected of politicians: they should be willing to change their minds and adapt their policies to new facts gained over time. Moreover, they exist to represent We The People, so when we change our collective minds, politicians who fail to keep up are replaced! Bernie is still around despite his change of heart precisely because it followed that of his constituency.

Do you remember when Theodore Roosevelt ran on the Progressive Party ticket? That party, founded by a lesbian, was eventually folded back into the mainstream Republican party back when Democrats were conservatives. There's nothing weird about parties and politicians changing their minds on stuff.

[1] https://www.vox.com/policy-and-politics/2020/2/25/21143931/b...
I’m a conservative (though not “republican”/neocon/neolib/uniparty) and I don’t even know what “project 2025” is. Nor do I know any supporters. As far as I can tell it’s just a smear device along the lines of “when did you stop beating your wife”, or fake “dossier”, or “Russian collusion”.
this post makes me think I could work at cloudflare, and also that I shouldn't
Injecting syscall faults in Python and Ruby
Courts, and even law enforcement, are actually smart enough to know that they have to enforce the laws as written and that they can't just act on their feels. At least most of the time. In many places.
Possibly in DVDR.
>it's a clear-cut case that the exit node operator facilitated illegal activity.

If someone leveraged your employment services to commit crime, would you consider yourself having facilitated illegal activity?
Families here in the EU buy station wagons or minivans with 7 seats though.
Nocodb is indeed a worthy competitor! If you're interested in how Visual DB is differentiated from Airtable-like products see here: https://visualdb.com/spreadsheet/#airtable
I've realized that the way I explained the "patterns" is very different from what I was doing when I noticed them. which makes sense as I was not trying to explain that little "game". it's not a game it's just counting and writing primes in some base, and a dash instead for every composite. as the gaps get bigger I draw a triangle instead of 3 dashes; and then any glyph with as many strokes as dashes.

doing it in different bases helps to think about the numbers without their decimal representation. which I guess is the point, and might be helping me imagine patterns that may or may not be there. if I learned anything from doing this is that there is no pattern, it just seems as if there is one but it's never really there.

I like to think that the "patterns" expire, they have only so many uses in them. often just one use which breaks the point of being a 'pattern', but that's primes; is all am saying.
JXL is supported in Safari, and Mozilla just put out a post saying they'll add support if someone will write a Rust decoder, and (bizarrely) Google has agreed to supply one.

So there is a small chance Google will reverse the removal from Chrome.
Has that ever happened to a Tor node operator? If it hasn't, what's the closest incident to a Tor node operator you're aware of where it has?
Greed is a more powerful motivator than consumer sentiment, unfortunately.
You can try to be Rust and refuse such access rules. Yes, I know it sometimes makes sense. Rust rejects perfectly fine codes too. People are really into such things.
I think it when software company tries to do hardware and vice-versa

In DJI drones, camera functionality and drone functionality works well together Even in their FPV drones.

Can't say the same for GoPro. They make good action cameras, but those don't require constant user interaction with them while in use.

I have this klipsch in-ear phones that sound nice, they fit me well, but holyshit the app is pure trash. I think at its root is the same problem.
Thank you for exemplifying my point.

There's nothing particularly radical about wanting more fair healthcare, labor rights, education, housing etc.

As I pointed out, the majority of Americans want those things. It's pretty basic human decency, empathy, efficiency, etc.

And yet, when you raise these _majority_ viewpoints, someone pops up from behind a Bush to call you 'tankie'/'commie'/'literally Stalin'. That's not an accident. There are some people who like things the way thay are, and about 6 of those people own 90% of all media.

We spent over 8 trillion dollars (!) in the Middle East, murdering millions, all based on lies; and now our Democrat candidate is overjoyed to get endorsements from the architects of those wars... At every stage, from plotting to image rehabilitation, from Afghanistan to Iraq to Syria to Lebanon to Yemen, etc, to Gaza, the NYT was with those warmongers all the way.

They're not left. Never were.
I'm Tired of Node Builtin APIs
I struggled badly on a pair programming position.

It's not like I don't like reviews or cannot work alongside another person. It's I cannot learn while someone is talking to me or trying to make me place the cursor somewhere.

I'm all in for code review, even in pairs. In fact, I do that with a junior dev I have assigned and it's working well for us. I leave him thinking and come back to evaluate his solution.

I find reviewing him paired, is time saving for me. I make him lead me to the right code spots, rather than finding out on my own. I fire 3 quick questions and we're aligned on the spot.

I'll never work again on a 100% pp position but I think I've found my sweet spot with the technique.

I agree that, if no other safeguards are in place, using pp you can avoid real bad code. But without deep thought, you'll mostly converge to an average solution, when social dynamics are very much leading.
What kind of drones are those and where do they take off?
Oh yeah, I've improved over time for sure. Right now I need those extra two hours, when I was younger I'd roll around for 4-5h at times. In high school I routinely slept through my morning classes (in class), and in university I just stopped taking classes before noon.

Now I can almost do a 9-5 if I get up at 9 to be at work for 10. It's a vast improvement!
The typo at the end is hilarious.

> Don't buy this if...
> You're looking for high-fidelity photo and video
> You want a drone with long flight times and maximum range
> You
I've been using Temporal recently for some long-running multi-step AI workflows -- helps me get around API flakiness, manage rate limits for hosted models, and manage load on local models. It's pretty cool to write workers in different languages and run them on different infra and have them all orchestrate together nicely. How does DBOS compare -- what are the core differences?

From what I can tell, the programming model seems to be pretty similar but DBOS doesn't require a centralized workflow server, just serverless functions?
Can you explain the purpose of replaying a feed is?
From the point of view of a less-than-technical law enforcement person writing a affidavit in support to get a search warrant, abusive traffic from a tor exit node is indistinguishable from a person who is physically at a specific street address/premises with a laptop or computer engaged in the activity.

They're going to assume until proven otherwise (by first confiscating all your electronics and sending them to a digital forensics lab to analyze them for 6-12 months) that some person who is physically present at that exact location is engaged in CSAM/CP or malicious/illegal activity.
Australia to place age limit on social media use for children
A hash function can't reject a string with a single test of the first byte. It just can't.

For this application, that's a leg up which a hash won't be able to touch. The rest of the art here is shaving down the constant factor of a trie far enough that the initial boost pays off in real-world performance.
True, but the rebranded tapes are frequently cheaper than Fuji or Sony.
I have mixed feelings about this given that the organisation's only explicit stance is being in defense of free speech, the freedom of the press and opposition to censorship. This tells me nothing about who's behind this, who's involved and what their motives or views are, which, sadly, is often more important than what an organisation claims to be about. The name is also effectively ungoogleable, leaving the thin info on their own website as the only source of information. The author of that post is a former member of the German Pirate Party who left for unclear reasons and ran as an independent on his own penny with no clear message beyond being a protest vote for people who don't want to protest vote for the far right.

On the other hand Germany does use flimsy excuses to crack down on services like Tor and that's bad.
Looks like an interesting abstraction. I can see the usefulness because I had to create a poor man's version of this when I built a CD. Sorry, because I don't have time to watch the 50 minute video, but how are you guaranteeing durability? Are you basically opening Postgres transactions for each step, or is there something else going on to persist state?
No sleep advice. Do you talked with a psychiatrist about ADHD? I had a similar experience before my diagnosis.
And what does the Australian government know? Could it collect who you identified with?
I would have stopped at the first step, saving almost 1% of cpu time (0.993%). Creating a new fast trie data type for the other 0.287% seems inefficient. Surely there are other parts of the code that take more than 1% of the cpu time elsewhere to be looked at first?
photos and email, sources of personalization data and AI training data are also part of the ad supply chain
That's not the sense of the metaphor that I'm applying when I say "uses language". That's closer to saying that "Alexa uses language", where "uses" here is analogous to what a calculator does.

To avoid using anthropomorphic terms, an LLM can take natural language from a human, integrate information from those expressions together with information held in its (opaque) store, and return natural language that a human can understand that reflects that information.

I am not aware of any other systems besides humans that can accomplish that task. Some animals can be trained to do some parts of this, but really until now humans are the only ones that could do the full loop.
They don't know because SpaceX hasn't gone through the procedure to show that they aren't/won't.
And Google is your sake drinker?
When I did math competitions I remember getting the advice to know the prime factorization of the current year.
Dude we are literally doing calculations of the power usage of our employees at their home office for a ISO 14001 certification. It’s beyond ridiculous
> maybe don’t penalize the sales of small trucks?

This right here. If I lived almost anywhere else in the world I could get a 70 series land cruiser or Hilux or any number of others that are rated for 1+ ton capacity and 7700lb+ towing capacity, all while getting 20+mpg with a decent diesel engine. Instead, I'm stuck with some dystopian chicken tax + diesel phobic lunacy and end up burning twice as much fuel to tow or carry half as much. Idiotic.
Magnetic HDDs do suffer bit rot, yes. But perhaps more importantly the mechanisms suffer physical failure over time. You can't just pop the platters into a new drive, even if you had an identical model.

That's really the main disadvantage of hard drives: the media is permanently coupled to the drive. If your tape drive fails, you can just pop the tape into a working drive and still get your data back.
A terrible article. Im willing to believe the Chinese budget went that high, but you have to present figures and rationales.
Chicken and egg. A-pillars are bigger, yes.

But they have to be even bigger still when you have trucks weighing in at 6,000lb+, and have taller cabs (which also makes them more prone to rollover).
Unfortunately recordable optical is on it's way out. Sony recently slashed the staff at the Japan plant that makes BD-R's (BD-R XL's). Still CMC makes CDR, DVDR, BDR though.
Loading a font can cause multiple things including load time delay. For example, connecting to Google and downloading a Lato font is around 4-5 requests + js + CSS files + 500kb added download.

Processing the font itself also is at least 500ms to a second depending on the device type.

We keep the total requests under 25, which cannot be done after multiple 3rd party fonts are added.

Additionally, some fonts can introduce CLS (content layout shift) after the font is loaded. Especially H tags because they shift a lot. CLS = your SEO is dead.

For speed purposes, especially mobile, using a 3rd party font is SEO suicide.

The sites we build for our clients are below 1.2 second mobile and 0.2 second desktop load time which gives these sites an enormous SEO advantage. These load times are complete loads, not initial draws or TTFBs. (results are provided by Google page speed insights - https://pagespeed.web.dev/) These load times change when we use the client's own fonts or the ones they pick from Google fonts. We have this discussion almost every time we onboard a new client.
Perhaps I'm not understanding something. I'm imagining this scenario:

1. Bob is running a Tor exit node.

2. Charlie is a government official investigating illegal content (use your imagination)

3. Charlie downloads illegal content via Tor

4. This content is sent to Charlie from Bob's exit node.

5. Charlie observes that Bob's exit node sent him illegal content.

I understand that even if Bob is raided and his computer searched, they cannot find the website hosting the illegal content. But Charlie would know that Bob helped deliver the illegal content. Tor Hidden Service does not anonymize the exit node from the client.
Recently did a one-day rental on a late model American pickup truck for a cross-town move. I absolutely could not believe the ground clearance and (lack of) view out the front of that thing. (My frame of reference is a bicycle and, occasionally, a Honda fit from the aughts.) You literally need a sort of ladder, which comes standard, to get in. Driving it was what I, previously, imagined getting behind the wheel of a semi-truck to be. It amazes me that auto mfrs can just ramp the size of these things up without any regard to how it might affect others on the road or sidewalk.
Probably, they can and do understand it. They just have a deny/deflect culture.
Would you mind telling us all why you arecall over the place defending Google unlawful behavior?
Why I'm Switching to Polars
I'm not OP, but I'm also irritated by these kinds of questions, especially during discussions about labor disputes. This is a well-established recipe to muddy the waters for all posts touching on tech workers and labor unions (all 3 are present in the comments, here):

- 'They make enough money, why do they need collective bargaining?'

- 'Why does NYT need SO MANY tech workers? It's a newspaper after all, right?'

- 'The job market is bad, so they should be THANKFUL to even have a job' OR 'They should just get a new job that pays better, the free market will fix it' - depending on how the job market looks.
MPs are directly elected (you can literally vote for a single person in an EU election), they are not some kind of noblemen.
Any reasonably fair news coverage is considered left wing now-a-days.