skysight-inc/HackerNews huggingface dataset:
Sure! I love to talk about this stuff ;) My email is in my profile. Let me know what you're trying to accomplish and we can discuss it.

For context: I'm building a "satellite bus/payload computer" OS based on Yocto Linux for space applications addressing the typical problems people encounter when trying to use Linux for space:

- I've set up my robot/OBC/gadget by copying files into a /home/user and it's running. How do I deploy this and keep track of how the image was built? Some people make an image of the SD card. Other people make a script that customizes the rootfs and creates an image (better!). But we want to have control of the whole stack, since we want to implement secure boot and a few other things.

- I want to update my robot/satellite. Ideally using as little bandwidth as possible. How? Some options: have an A/B system and download a new (delta-)image to the other partition. Or I just upload the changed files. To solve this we use OSTree which lets us have a versioned filesystem with extremely small bsdiff delta updates. It's very satisfying.

> we've not sorted out how to make an actually deployable artifact from (for one example) our workspace making use of pymoveit

Heh, this is the big question for ROS and meta-ros. How do you deploy a workspace? So far we've settled on building the workspace in Yocto and installing it straight into the ROS prefix (typically /opt/ros/ROS_DISTRO).

You can see an example of a recipe that compiles a ROS2 workspace here: https://gitlab.com/raccoon-os/raccoon-os/-/blob/master/meta-...

It's a bit complicated due to the fact that we're also using ROS2 Rust and this recipe should be converted into a .bbclass, but we haven't gotten that far yet.
Not the user you replied to from my experience usually it's not worth it due to several reasons:

- desoldering the chips takes time and is a manual process ($), with risk of tearing off a pad or bending leads. In case of BGA ICs reballing is needed to reuse them.
- components are usually not rated for a lot of reflow (heat/cool) cycles, and some are moisture-sensitive and may crack if they have managed to absorb moisture
- you usually end up with some solder and flux left on the IC, which can cause issues
- ICs come on tape for feeding into automated pick-and-place machines, so you would need to feed and mount them manually ($)

And if you only realize you have damaged the IC after mounting it on the new board you end up having to rework it again ($).

Sure, it might be worth it if the chip is really expensive or hard to get, or you're soldering everything by hand anyway, but usually the math just doesn't work out.
They're not saying it's coincidence, they're saying it's herd behavior and groupthink.
Roland Moreno
No I mean strace. There’s no need to learn D just to see syscalls.
Even if you do generate legacy input events, it is worth noting that the kernel still knows that they're not real input events. It seems to keep track of the current event on a per-thread basis (maybe it's stuffed into the TIB or something, but it could also just not be visible, I didn't search too deeply.) The knock-on effect of this is that sometimes DefWindowProc won't do the expected thing if you feed it a synthetic event, which could lead to strange behavior. You can of course use CreateSyntheticPointerDevice[1], and try to emulate it like that, but obviously then it knows that the events are coming from a synthetic pointer device (which is also system-wide and not just per-application!) So it feels like any way you go, behavior will be slightly different than expected.

Will this matter? I'm not quite sure.

I think Microsoft's WebView2 component enables Mouse-in-Pointer mode using the undocumented syscall for doing it per-HWND, but apparently Raw Input is per-entire-process, so if you aren't generating "legacy" events, will a WebView2 component in your process function as expected? Maybe if you go the synthetic pointer route, but again, that's a pretty big can of worms in and of itself.

Windows input is indeed very tricky. Seems like there's only one way to figure out some of these answers. Perhaps I should add RawInput to my test application and find out what the interaction is.

[1]: https://learn.microsoft.com/en-us/windows/win32/api/winuser/...
>They’re a right wing organization,

They usually define themselves as a libertarian organization which seems a much more accurate way of describing them.

>...they clearly support conservative causes,

"Liberals" don't support ending qualified immunity? Reforming laws that prevent convicts from being able to get a job is a "conservative" cause? etc. It wouldn't surprise me that some people who consider themselves conservative would disagree with and other cases that some people who consider themselves liberal would disagree with.

On their web site they say "Our mission is to end widespread abuses of government power and secure the constitutional rights that allow all Americans to pursue their dreams."

https://ij.org/about-us/
I have a strong view. But I won't let that keep me from enjoying a good technical discussion. Like stuxnet, this will strongly influence opsec in the coming decade.
Yeah. My reaction to the leadership for this kind of mandate would be: you first. Release your badge-in metrics for the C-Suite, then progress down the chain from there. They can all afford houses right next to the office, as well as nannies and private schools and a house on the coast. So when the highest paid employees show they’re in office 5 days a week for a single quarter, then let’s talk.

I doubt this would be the case. The L10s get to wfh from there vacation homes while the L5s get commutes.
Nah, if you give people more free hours in a day, they will be less conscious of how they spend those.
Even if you don't "prefer" remote, the sheer cost savings of gaining an hour or two a day (or the cost savings of lower cost of living) is pretty hard to deny.
Both employer and employee want the employee succeed in helping the employer provide value to the customer. I fundamentally disagree with the first paragraph, and don't see how it can be justified without an appeal to emotion. They are not perfectly aligned, of course, but no alliance is.
Pagers are immune to a number of threats that two-way communications devices enable.
Hopefully JSX can be more mainstream, that is, I can use it directly in js/html/css projects without all the extra tools pre-installed and pre-configured, making jsx part of the 'vanilla' development will be really nice(no react, no vuejs etc).
When Google first came on the scene, I often mistyped its domain name as googol.com. At some point since 1999, Google bought googol.com and redirected it to their site.
With thousands of them going bang, that's unsurprising.

As the page says, "after her father’s pager exploded while he was next to her".
Haaretz reports that the devices were purchased only recently - and heated up before detonating. [1]

So, that sounds like indicators for both, either a supply-chain attack or malware targeting the battery.

[1] https://www.haaretz.com/israel-news/2024-09-17/ty-article-li...
You still have the metadata of sender and receiver. Your whole network is exposed.

Also your message limits are 200 characters and likely highly susceptible to correlation attacks.
In my experience these documents were actually never good. I’ve never seen anyone ask for estimates either. Surely it’s better than some other companies but if it were good they wouldn’t need this absolutely horrific oncall
Definitely looks more high explosive-y than all the lithium battery fires I've ever seen.
Totally agree. We have a term for it "Dev confidence". Devs really don't want to touch something that's been working for a long time, especially in a codebase they're not familiar with. The more removed the dev from the code they're working on + the length it's been running, the lower their confidence. We built in mechanisms to do a number of checks on our fixes to try to our best ability to make sure something doesn't break.

On false positives, we introduced false positive detection using AI & static analysis because of the exact issue you're highlighting.
Looking for ML/backend/fullstack junior-ish positions. If I can use my experience in computer vision working on detection and talking head synthesis (lip syncing) that would be great but I’m happy and motivated to work on anything right now.
Dave: Discord's New End-to-End Encryption for Audio and Video
This was exactly my experience. We used DDS for our non-ROS parts but ROS2 was experimental at the time so we ended up needing to build bridges for everything that was ROS. Brining in even a single ROS package to not have to reinvent things was a huge pain point and ROS had issues where it couldn't be used across everything.
Everyone cares about collateral damage. The thorny part is how much to care... what is the calculus for how much is acceptable? Israel, rightly or wrongly, seems to be comfortable with around a 100:1 ratio.
Stuxnet had a much lower body count.
I have to be very disciplined about switching my layout back to US English before launching games because they seem insistent on using the mapping for WASD versus the keys for WASD. But, worse (IMHO): some games use the keys and thus I can't predict whether the game was coded correctly or not and thus I just gave up and made it part of my launch process

I have secret desires to convert one of my old MacBook Pro devices into a Steam-via-Proton setup to get out from under the tyranny of Windows but since gaming is designed to be a break from "work" ... that's why it's not already done
The Parasites of Malibu
AirBnBird.
Enhancing the GitHub Copilot ecosystem with Copilot Extensions, public beta
I remember a few years ago a very good engineer in our company shared a very similar article about hexagonal architecture in golang, and a lot of people started using it, including myself for some time.

Now he's not here anymore, and posts in his linkedin about simplicity and how people overcomplicate things in software so much. This shows me that you should be careful when taking advice from other engineers, they learn and move on from what was previously a "best practice", while you might get stuck thinking it's worthy it because "that one very good engineer said it was how it should be done".
Isn't that true of any supply chain that involves foreign states? Usually it's just surveillance, not destructive stuff, but expecting state actors to stay out of things is... naive?
As I understand it, people are saying that the most likely way that this was carried out was that a shipment of pagers where intercepted and modified. My concern is that part or all of the shipment might not go to Hezbollah. Perhaps the shipment gets rerouted to somewhere else due to supply chain issues. Perhaps only half of the shipment was intended for Hezbollah. Perhaps a postal worker steals a few and sells them on the black market. Perhaps Hezbollah decides they have more than they needs and does something with the rest. Perhaps part or all of the shipment gets delayed and is sitting in a post office when it goes off.

Basically: warfare via mail bomb seems like it might be irresponsible.
I feel like that's a big part of it.

I love the idea of spending tax money on R&D, but what would we accomplish on the moon at this point? Seems better to spend on telescopes and space stations until we have firm plans for what to do on the moon.
FAA Proposes $633,009 in Civil Penalties Against SpaceX
If the footage on Twitter is legit, then there was a small detonation, with a bang, not a burning battery with a 'whoosh' and flames. Which indicates that the internals of the pager had been replaced with something rather more explosive than a lithium battery.
Don't forget the the, uh, pink widows? _Rosencrantz_ ("they're pinkish and make you dead, like him and Gildunstern"). Venemous ambush predators, low density (mostly made of this aeogel with hydrogen bladders). About an inch across and 8 inches long, like pink hovering snakes. They float, hiding in the exhalation contrails, waiting for prey to blunder into them.
SieveSync: High-quality, zero-shot lipsync built with MuseTalk and LivePortrait
A spreadsheet it just a view broken up in to rectangle cells and that compares favorably to the JavaScript smalltalk variants I’ve seen online such as this one https://amber-lang.net/

The output when it’s not an error message can redirected in to another function and so on and so forth until it’s not entirely programming and not entirely a prebuilt interface. A smalltalk VM is like an operating system as a repl as long as you’re skilled enough to not keep hitting error messages.
This is pretty important with the Brazil block of X.
Which is also why all those company market caps you see quoted everywhere are totally ridiculous. A company is not worth the latest price of a small share transaction multiplied by all the outstanding shares.
But it is load bearing. I mean, I personally can't stop being amazed at how with each year that passes, things that were unimaginable with all the world's technology a decade ago are becoming straightforward to run on a reasonably priced laptop. And at this stage, I wouldn't bet even $100 against any particular computational problem being solved in some FAANG datacenter by the end of the decade.
Wrongly, yes. How well do you like it when some total stranger pipes up to insist on their own view of who and what and how you should be? Why should anyone else like it better when you do it to them?

Certainly I can't say such arrogant condescension ever did a thing for me, to help me figure out how I actually work with regard to gender. It complicated that process pretty significantly, in fact. I did figure it out in the end, but none of the credit for that accrues to those who insisted they knew better. They were not helping.

I get that you think that you are, and you think that makes it different. You're wrong. What you're judged on, just like anyone, is how you act, which here could have been considerably improved. Your problem what you do about that, or if. Good luck.
https://en.m.wikipedia.org/wiki/AMIA_bombing
Back when I started programming, building programs with GUI was a breeze. Whether it was using Delphi, VB and WinForms, later .NET, or whatever - it was so easy that even complete beginners could get the hang of it.

At least for me, there's some nostalgia involved. The longing of "simple" - at least for smaller apps / software. Being able to slap together some simple app in 15 minutes.
Every time the planes pass, my eyes burn: the hidden cost of Costa Rican bananas
Python lists aren’t arrays, right? They are the closest thing in Python to an array maybe, but they do a ton of stuff under the hood, like grow when needed.

Calling them arrays would be very confusing to everybody who expects a typical array: a pointer with some empty space after it.
Which variant of JDk is common for personal use? Is it still Temurin?
Source (or source of an earlier version at least), in BASIC:

https://archive.org/details/BYTE_Vol_10-07_1985-07_Computers...

I couldn't find the Nov 1984 Pascal version, but like they say, Basic is easier for working with strings.
I need someone to sell me on Java. I might need to learn it soon for a project but it never before occurred to me that it is something I should use.

I came up in coding in the early 00's. To me Java was that slow, buggy, sometimes dangerous browser plug-in that I think most people loathed?

On Mac OS X at least Java desktop apps were always slow, ugly, and broke the platform UI conventions.

Then Java was that language Google used for Android and then ended up in a long, expensive lawsuit over it with Java's owner Oracle.

It is cross-platform as a big selling point but then people use it to write monolithic server applications where cross-platform capability isn't useful.

It seems to be kinda, sorta open source but don't fuck up with the licenses or Larry's lawyers will come for you. I'd rather just use a fully open language where the community can guide its progress.

I am sincerely not trying to start a flame war or be condenscending. I would like to expand my thinking and understand what I am missing out on.
> they've already paid for.

That is the crux, rarely is it a service being scraped that they paid for
Another "fun" thing is old joysticks and steering wheels that require calibration. This used to be done in the windows control panel such that not every game needs to implement that... However it seems the latest API in fashion that eg. Unity uses just totally ignores that native calibration totally. (Could just be an Unity side problem also). So bunch of old wheels are broken on Unity.
In my opinion, it’s worthwhile to upgrade, if just for the minor features of the Password Manager and Window Tiling.
Buy one share of their stock, then call investor relations and ask them why a hobbyist was able to fix the LED bug that their support claimed didn't exist while their whole expensive engineering team was not.
It's possible, but counter to the point of a PhD: apprenticeship for research.
It's really more complicated than this, because often commute has an inverse relationship with cost. The longer you commute, the more you save.

Sure, you could say going to office isn't too bad if you're 15 minutes away. But at 15 minutes away you're paying double for housing than if you were 90 minutes away. So even in the ideal scenario, RTO can be perceived as a huge pay cut.
"Power users" shouldn't just mean more little boxes on the screen. A 2024 client should offer in-depth background analysis, embracing the open nature of the network. Provide helpful context on people and topics within threads – be transparent about the information that's already out there. Visualizations, metrics and network detection features would make the client truly powerful, offering users transparency and letting them better understand what's happening for more control over their data. Flip the script on the centralization of insight and let people organize at a higher level.
This is the kind of slippery problem I would never think about but would make me want to break my keyboard if I encountered in real life.
thanks! did you log in on your generated app?
that's a good idea, to integrate various boilerplates
Merge tag 'printk-for-6.12' of git.kernel.org/pub/scm/Linux/kernel/Git/printk
That seems like a good reason to use more focused weapons.
https://archive.ph/pPG0f
That makes sense! This is obviously just my preference, but in both cases I would prefer this to be a config option, so I could control it e.g. by an environment variable. Local dev? Probably don't care about timestamps and probably would enjoy emojis. Production? Absolutely need timestamps and probably don't want emojis. I realize this is a significant API change, but just wanted to share my thoughts.
A list is not an array. Each item is a pointer to what could be any type. There’s an array module if that’s what is needed.
I don't think the idea that the general, informed will of Americans somehow chose cars over public transportation holds water. What was the mechanism of that choice on an individual level, free of influence from car companies, between a future with car infrastructure with all the impacts understood (including the land space costs preventing density and efficiency) and other solutions?

It is demonstrably the correct answer, regardless what the largely un- or just as often mis-informed think, not that they were really "asked" in the first place.
Do you really think this supply chain bringing pagers to the Hezbollah actually went through Israel?! Israel has ways of intercepting packages in other ports outside of Israel.
I'm not at all convinced that's the case, unless it comes out that the targeting was extremely broad (like if Israel was just putting bombs in every pager going into Lebanon rather than targeting a specific shipment going to Hezbollah) I don't think there's really any new risk for other countries.
How much stuff is there to fuck with in a standard, untampered-with pager? Seems unlikely this was pure cyber (and some novel battery hack). And if you need supply chain interception to carry out the attack in the first place, why wouldn't you insert explosives? There's a history of these kinds of attacks.
From my understanding of the HN guidelines, a technical discussion around the technology in this story is not an issue. Where things break down is when people starting talking about Israel vs Palestine, who is at fault, who should be punished, who is the true aggressor, etc.
Fighting exclusionary zoning, corrupt uses of imminent domain, and abusive civil forfeiture are among the primary goals of the IJ. None of that undermines a safety net or public services. Historically in the US professional licensing has primarily existed to exclude immigrants and racial minorities from lucrative careers, and should be reformed as a moral imperative. This is not a right wing position.
> AMD 5700x processor

I find it to be an odd choice. I mean the CPU itself is perfectly fine (typing this myself on a 5600G, which I very much like), but AM4 socket is pretty much over - there is no upgrade path anymore once it starts getting long on the tooth. (Unlike the other parts, which can be bumped: RAM, GPU, storage...)
This would seem to be more focused than the usual.
> The article says nothing about thousands.

https://www.theguardian.com/world/live/2024/sep/17/middle-ea...

> Eight killed and 2,750 wounded in pager blasts across Lebanon – health minister
Seems much more precisely targeted than rocket attacks.
> "One shot attack"

>> This is the second time israel has done this https://en.wikipedia.org/wiki/Yahya_Ayyash
I am for some reason reminded of this classic scene from The Wire [1] where a detective sells a trove of preemptively wiretapped burner cell phones to a drug organization

[1] https://www.youtube.com/watch?v=ZDalKxcLQC8
OK. My comment-question has been downvoted and I've been told by a number of HN readers that YES — I SHOULD "have to click on a link to find out what an acronym cited in a post means."

From now on when I comment using medical acronyms like AKA and AMA I will not spell out what they stand for (as I've always done up to now as a courtesy to readers so they don't have to sidetrack themselves looking it up) but rather will provide a link.

https://www.asha.org/practice-portal/professional-issues/doc...
> Kamil Hamad disappeared and it is rumored that he received US$1 million, a fake passport and a visa to the US.

Given the chain of events detailed already sounds like it was ripped from a spy novel, I'm pretty skeptical of this claim.
I would redefine it a bit.

Reliable = deterministic

Accurate? Not at all. Studies show that ~30% of findings are false positive. We've also seen that with the companies we work with because we built a false positive detection feature in Corgea. There's another ~60% of issues that are false negative. https://personal.utdallas.edu/~lxz144130/publications/icst20...

We combine static analysis + LLMs to do better detection, triaging and auto-fixing because static analysis alone is broken in many ways.
It's not especially novel, it's just a lot of similar weapons systems (e.g. cluster bombs, anti personnel landmines) are banned these days.
Israel isn't part of the supply chain for Hezbollah pagers.
It's like these LinkedIn awards for best company to work for mean nothing anymore!!!

https://www.aboutamazon.com/news/workplace/linkedin-top-comp...
Even if they overlap, your creative engineers will naturally become less creative if you start making their workplace worse for no reason.
Not unlike how US folks react to the idea that England is the authority on English -- Brazil and the US are far more populated than the countries that originated their languages and so there are more books and movies targeting them and using their version of the language even if they are using it "wrong" as compared to the origin country.