skysight-inc/HackerNews huggingface dataset:
First thing first, the X11 protocol is not aware of DPI. Period. And that has implications. You can apply all sorts of hackish solutions on top of it but (1) the solutions will most likely be out-of-band (not pure X11) and involve DBus/envvars/Xft.dpi, and (2) per-output.

Out-of-band solutions are effectively bandaids and they unnecessarily increase development difficulty of GUI programs on Linux, since developers now have to be aware of the various side channels (fragmentation!) that communicate the DPI scale.

This is why SDL2 for the longest period did not support HiDPI on X11, but does on Wayland, MacOS, and Windows. A COSMIC dev just recently made a complaint about XSettings too! [0] You can't just ignore those problems, "Linux is hard to develop for, blah blah fragmentation blah blah" I am sure you have heard of.

Another thing. Per-output HiDPI is fine when all your programs support high DPI, but it's unworkable if you want to mix LoDPI and HiDPI applications in a single screen, i.e. if an application has better user experience if it is upscaled and blurry (!), you are SOL unless you want to apply scaling to your entire desktop.

You also lose the opportunity to implement some neat features like temporarily scaling up a window if it is being magnified or screenshot. (The idea's been floating about in the KDE community)

Finally, we can argue for days, but the HiDPI page on Arch wiki already says a lot when a good 90% of the article is about acheiving good DPI scaling on X11 [1]. Even the Wayland sections have an XWayland subsection in them...

[0]: https://tech.lgbt/@drakulix/113029499719670970

[1]: https://wiki.archlinux.org/title/HiDPI#Xorg
I see. This sounds like a problem for people using public wifi...
Block access to a Website on iPhone or iPad – without an App
I use it for "expect" because it just works.
Why are my ZFS disks so noisy?
Maybe he meant he doesn’t care about it so he wastes it on super expensive things. Simple definitional misunderstanding
I'm not certain HITS could capture what appears to be the temporal component of the network the author incorporates.
No, persistent print queues can be implemented without cups running as super-user.
Ah, I missed that, good catch.
My mother — daughter of a literal NASA rocket engineer — lost her father around c~2000. She said to me c~2012 "I sure wish my father had lived long enough to see the iPhone's invention: watching scifis he'd tell me I'd live long enough to see telecommunicators even more capable than these movie-props."

This mother died six months before ChatGPT's debut, and I thought "sure wish Mom had lived long enough to see LLMs." It wasn't until her first anniversary, flipping through some of our letters, that I realized she had tasted GPT-2 while we played around with ThisWordDoesNotExist.com (made-up words & their "definitions").

Maybe I'll live long enough to see telecommunicators even more capable than these pretrained-transformers.
That points to https://www.wsj.com/tech/ai/openai-chief-technology-officer-..., which was the submitted URL (thanks!), but we've changed to the Reuters article now, which seems to still have the most reporting on this story.
(Anectodal) Rent around here in europe literally doubled. Groceries shopping are way higher too. That's the consequence of globally printing our problems away and waging random wars.

The drop in standards was to be expected given the terrible situation Argentina was.
Hopefully it gets better in a few years.

My fear was that Milei would turn out to be another puppet giving hope to people and not doing anything, but it seems he's been doing some proper haircuts, which were long overdue.

Argentina was one of the wealthies countries in the world before decades of drifting into socialism.
I think frontend tooling is valuable, but there’s so much good free out there that it’s hard to monetize.

Gatsby always seemed wildly overengineered to me. It’s like all the bad parts of react, with all the bad parts of complicated js tooling, and none of the upsides.

Never made sense.
The funniest outcome to this little internecine WP fight would be an IRS investigation into the intermingling of Wordpress.org, Foundation, Automattic, Matt, etc.
Do you think those two are somehow unrelated?
Ugh! I manage a large number of sites on WPE for clients, and keeping them updated and secure via manual method is going to be a pain. I might as well spin up my servers and migrate away instead of waiting for things to settle.
The people who are crashing their 600HP Linux systems are, unfortunately, not the ones who are reading CVE listings in their spare time. Canonical and other distros are probably going to have to patch that default setting.
Yeah, I guess you're right, for CUPS it might be 9.9. My other added points about it being a vastly overblown exploit still stand.
That's just a function of the HN community having a range of opinions on every topic. "Manufacture consent" is too sledgehammer a phrase for the normal process of people discussing things.
>Anybody using it for something else and can speak to why you’d use it today? Genuinely curious; I don’t hate the language but can never bring myself to enjoy it either.

For a long time it was the only way to get a decent IRC bot going, because eggdrop[0] was a Tcl wrapper around a small C core, but the only place I've seen it in the wild other than IRC bots was in the Xilinx toolchain and once when I was in undergrad some TA was using it to get telemetry from Tektronix oscilloscopes in the robotics lab.

[0] https://www.eggheads.org/
yes good point. ofc Unity/Unreal Engine today also makes great money.

i think those frontends you mention made money because they had defacto monopoly on a certain platform or kind of experience that was unavailable anywhere else. xcode is a piece of absolute crap but i still have to pay $100 a year or whatever for it.

perhaps the emergence of web standards - both JS and browser standards - killed frontend. when everyone can build their own tools that run everywhere, and the browser api's are often pretty good, then why buy instead of build, or pick the next one that is free and good enough.
haha touche. That's a fair thing to say
Twitter (I still refuse to call it X) doesn't have "Common Carrier" status, no website or platform does. Section 230 of the Communications Decency Act of 1996 protects platforms from liability for user content even if they display bias towards that content.
Tcl is widely used in EDA automation in general - it's not just an Intel thing. Xilinx, Synopsys, Cadence, and Mentor all use Tcl extensively, for example.
Trickle-down effects
> most things you’d need

Say you wanted to write a CAD app like https://www.onshape.com. There’s no way you could do it Tcl/Tk, is there?
> If you aren't designing computer chips, you have no reason to use it. It's a horrible language.

What an unfair statement to make; by no means is it an horrible language. Just because it doesn't fit your tastes doesn't make it "horrible".

That's like me saying having to start a line of Python with three spaces is annoying design which makes it an horrible language. Take your statement elsewhere.
I doubt the world would have stuck with TCL if that had happened. JavaScript was good enough for people to put up with. TCL definitely isn't. More likely we would have ended up with TCL + something else, with TCL deprecated.
It's possible Tim Berners-Lee gave up hundreds of billions.

Regardless, you've missed the point. Some people value their integrity over $trillions, and refuse to sell humanity out. Others would sell you out for $50.

Or to put it another way: Some people have enough, and some never will.
To be fair, 10 years ago the programmer said "I'll need a research team and five years".
Lets see how this ages. But for now its filed with the running out of missiles memos from 2022.
I'm not entirely sure what happened but in any case it made the frontpage in a different incarnation, as usually happens with major stories:

OpenAI to Become For-Profit Company - https://news.ycombinator.com/item?id=41655954
> That a lot is expected and taken for granted from the security researchers by triagers that behave like you have to “prove to be worth listening to” while in reality they barely care to process and understand what you are saying

The unfortunate reality is that for every well-researched report like this one, you get 57 low-effort spam reports that hope to extract a bug bounty reward, or get a CVE discovery listed on their resume. Especially with the rise of LLMs that kind of spam can easily trick you. It's a sad situation, but I don't entirely blame developers for being skeptic.
Earlier this month, WordPress explicitly said that their trademark didn't cover "WP"

https://web.archive.org/web/20240901224354/https://wordpress...

The abbreviation “WP” is not covered by the WordPress trademarks and you are free to use it in any way you see fit.

They changed the wording as of this dispute with WP Engine:

The abbreviation “WP” is not covered by the WordPress trademarks, but please don’t use it in a way that confuses people. For example, many people think WP Engine is “WordPress Engine” and officially associated with WordPress, which it’s not. They have never once even donated to the WordPress Foundation, despite making billions of revenue on top of WordPress.

https://wordpressfoundation.org/trademark-policy/

Trademarks need to be defended to be valid. If I started a website "YC Hacker News", Y Combinator would need to defend their trademark (if they think they have one over "YC Hacker News") or the fact that I'm using "YC Hacker News" means they don't have a trademark over that. WP Engine has been around for over a decade. Automattic and the WordPress foundation didn't have an issue with it for such a long time. If you think someone is infringing on your trademark, you can't just let them use it and come back a decade later and change your mind.

In this case, WordPress has even less argument. If Y Combinator said "you can use 'YC' and 'Hacker News' in any way you see fit," they couldn't later come back and say "nooooo, YC sounds like Y Combinator and people get confused!" The WordPress Foundation explicitly allowed everyone to use "WP" in any way they saw fit and disclaimed all trademark over "WP".

Yes, lots of companies/foundations wouldn't have allowed the generic use of "WP" for anyone to use. In this case, they explicitly allowed it and also didn't have a problem with WP Engine's use for well over a decade.

They waited so long to "enforce their trademark" because they don't have a trademark on "WP". They explicitly said so. Now they're trying to create a trademark on a term that's already been in generic use for a while - and explicitly blessed by the WordPress Foundation.

I certainly understand Automattic not liking the fact that they're doing (and paying for) the development work on WordPress while many WordPress users pay WP Engine instead of Automattic/WordPress.com. However, the ship has sailed on claiming that people aren't allowed to use "WP". From where I'm sitting, this feels similar to Elastic, Mongo and other open-source companies disliking it when third parties make money off their open-source code. Of course, WordPress (and Automattic's WordPress.com) wouldn't be the success it is without its open-source nature (just ask Movable Type).
Hard disagree, in this case.

AlphaFold is a game changer for medical R&D. Everyone should be hyped for that.

They also are leveraging these same ML techniques for detecting kelp forest off the coast of Australia for preservation.

Alphabet isn’t a great company, but that does not mean the good they do should be ignored.

Much more deserving than chatgpt. Productifyed LLMs are just an attempt to make a new consumer product category.
I only know about this from the two hn threads I've read, but it seems like he could have at least announced this publicly a week in advance or so and given them a bit of time to self-host all this stuff before cutting off their access. Right now seems like he's trying to harm WPEngine by harming their customers and that doesn't make him look good.
> What's the economic incentive for WP Engine to give back? They have a moral duty, sure, but as a business where is the profit?

Avoiding this exact situation which kills their business
I thought everyone was going to work hardcore to offset that. Oh well.
Universities are full of people with Linux desktops with public IPs and that are printing all the time: papers, their own and other's.
It affected a lot more people actually, including one of my old account’s main video posts, so not just stories. It wasn’t popular but still sucked because I was featuring penmanship in motion but now many of them are just static screenshots. But that’s the implicit risk when hosting on someone else’s platform so c'est la vie I guess.

[1] https://www.instagram.com/sri.letterstudy
> flawed commits that were merged into master, but never had a chance to be the HEAD of master

Yeah exactly.
Doing this would more directly involve Starlink in the war, which isn't great for several reasons.

If they're willing to be involved, I have a better idea: algorithmically determine when a receiver is being used on an airframe that takes off from Russian-controlled territory. Display their location on a map and provide that to the Ukrainian military. Give them the ability to shut down the data stream at will.

Better yet, degrade service to those devices in a randomized and targeted way that leads Russia to believe that the Ukrainian miltiary has developed a new EW system that interferes with Starlink, and are beginning to deploy it. Then selectively degrade service near specific areas of no strategic importance. Place decoy infrastructure in those areas - ammo dumps, air defense units, radar installations, etc.

You could even go so far as to design a fake antenna that won't actually do anything, manufacture them, and put them on a cheap chassis. Put those in areas where you're degrading service to lead them to believe they're the source of the interference.

Let Russia capture one or two that are built specifically to be plausible as a new type of EW military vehicle - but don't actually do anything. Then Russia will spend time, money, and hours trying to reverse-engineer something that never worked in the first place.
That would be a nice thing they could do.
What could possibly in there that would be more damaging than what you can get for free by waiting for Vance to open his mouth in public?
Damn this is cool!
I fully agree on the sql project type, it's amazing, another great side benefit is intellisense on your db schema (find all references, etc), git blame on the schema is also great. Doesn't redgate offer kinda the same tool commercially with support for more than mssql? Never tried it but IIRC it looked similar...
There are also buffer overflows exploitable without any user action. The foomatic vector which requires print job was just one easiest to scan and exploit.
https://security.stackexchange.com/questions/213796/state-fo...
Publicly, perhaps but we've been trying to resolve these issues with WP Engine for at least 18 months now.
Why can't we just have a technology transfer agreement? Purchase the ships from Finland but make them at a US shipyard? Other countries do that with US defense manufacturers all the time. Purchase items, but with the condition that it will be manufactured in that country.
The greatest and most lasting art in human history was created by artists who were sponsored by the wealthy as their only source of income.
It does look a bit like an owl
He didn’t build it.
1. Amusing title
2. Yea it sounds like a smug and shitty company
But
3. If I get some parking ticket or some small wrong doing I am totally going to consult with GPT before I go ahead and hire a lawyer.
A well trained AI could definitely do the work of most lawyers better than they could.
Lawyers and judges usually just recite rules, previous cases and known loopholes. They are a human search engine and they cost quite a bit.
He’s also using the foundations copyright to target the primary competitor to his for-profit business, demanding that they invest in the profits of the for-profit company, at the expense of the WordPress open-source community. None of this looks altruistic or for the good of wordpress.org.
You don't need to be a Musk supporter to be critical of OpenAI.

In fact you would hope that wanting ethical behaviour would be universal.
I hope it's some developer implementing Elmo's order of "Block this exact url" with malicious compliance, knowing about the possible workarounds.

(Could you replace e.g. an "a" with %61 and keep the URL working?)
The latest Zstandard exposes several parameters which are useful for reducing time to first byte latency in web compression. They make Zstandard cut the compressed data into smaller blocks, e.g. 4 KB, with the goal to fit a compressed block within a small number of packets, so the browswer can start to decompress without waiting for a full 128 KB block to be sent.

These parameters are described in the v1.5.6 release notes [0]. ZSTD_c_targetCBlockSize is the most notable, but ZSTD_c_maxBlockSize can also be used for a lower CPU cost but larger compressed size.

Are you using these features at Cloudflare? If you need any help using these, or have any questions, please open an issue on Zstandard's GitHub!

[0] https://github.com/facebook/zstd/releases/tag/v1.5.6
If it were to close, who is well-positioned to acquire OpenAI's patents?
If you're vulnerable to attacks from the LAN, you're vulnerable to your wi-fi router (or your coffee shop/workplace's router) being compromised, which is quite common; see e.g. https://www.bleepingcomputer.com/news/security/mirai-botnet-... and https://blog.lumen.com/the-pumpkin-eclipse/

Assuming that most routers are silently compromised, with their command-and-control operators just waiting for an exploit like this one, is almost par for the course these days!
Why does it need to run as `root` user and not `cups`?
I bounced off learning Haskell a few times (infinite regress to downloading category theory textbooks), but almost the moment I saw its type inference, I immediately wanted that in lisp.

Roc is looking pretty nice (especially once your editor can paste in the inferred type like they want to do), but I still think there’s an empty space for an imperative language where type inference makes it feel as untyped (or at least as unceremonious) as (pre-annotation) Python
Was it publicly posted what "acceptable usage" of the api is? Was the same standard applied to other users of the api?
So you're saying that if A->B, then it's not necessarily the case that B->A? /s
Resuming:

1 - cups-browsed is able to install printers automatically (without the requirement of user confirmation) by listening to UDP packets on port 631.
2 - Attacker uses this "feature" to install a fake printer with a custom driver (which is also installed without user confirmation and can be downloaded from an arbitrary host) which specifies the "command to run" when a print job is sent.
3 - User prints something in the fake printer and the "command to run" is executed.
A Friendly Introduction to Assembly for High-Level Programmers – Conditionals
I don't think the narrative makes sense. It was clear from way back in 2016 that training would take a ton of resources. Researchers were already been sucked into FAANG labs because they had the data, the compute, and the money. There was never a viable way for a true non-profit to make world-changing, deep learning-based AI models.

When seen through the rearview mirror, the whole narrative screams of self-importance and duplicity. GPT-2 was too dangerous, and only they were trust-worthy enough to possess. They were trust-worthy because this was a non-profit, so "interest aligned with humanity". This charade has continued even to barely some months ago.
If that’s true I would say blocking is credible. I’d rather err on the side of caution on exposing potential privacy information.

If there was no private info - obviously the block is b.s. But considering they’ve mentioned privacy details in the doc I’m prepared to give them the benefit of doubt for a few days or ask the initial poster to send a redacted version.
The work on the safe subset of Tcl for the web can be exploited today to run untrusted scripts in an easily managed sandbox. If you want you can strip away enough commands for the language to be non-Turing complete.
Steel-Manning the Amish: The Wisdom of Communal Discernment
Yet another friendly reminder that your data isn't yours unless you store it locally.
Yeah, I'm afraid if WordPress.org doesn't have control over their own API's then they are compromised and reduces trust in them.
Now that you mention it I can see from Prada's side they need to get out ahead of the clunky AR goggle game and make it a fashion statement and meet the technology in the middle once it's miniaturized a little more

Meta's got the RayBans colab but they're gonna need the Prada colab if they want to sell at 5 kilobucks
Sam: "I'm not in it for the money. I have principles."

World: "But what if it was like, a lot of money?"

Sam: "Oh alright you convinced me. Fuck my principles."
Not sure what npmgraph is doing exactly, but there are more dependencies than that.

React is a dependency of every next application, but I don’t see it there.

Maybe next, the singular package, has fewer dependencies than a project made with next.
The whole standard for trademark law is whether it causes confusion in commerce.

Sounds like they might have a not-great ip lawyer.

Your don't have to claim WP to claim it's being marketed as an abbreviation for your trademark, within your market.

I'm not saying it's a winning argument, but better than whatever the legal framing/ posturing of 'WP isn't our TM' is. Bad PR, if not bad legal take.
Octopuses are usually specifically fished [Cephalopods. Ecology and Fisheries, Peter Boyle, Paul Rodhouse. Chapter 16].
That's hilarious because their filters are sophisticated enough to block archive.is links to the same URL ... but can still be defeated with a query param. Seems like one of these was implemented at Twitter 1.0, and the other at Twitter 2.0.
There are also buffer overflows which they detected with fuzzer, which can be turned into RCE without requiring user interaction. But author did not have enough expertise in this area to create actual exploit for these.
Indeed, sucking implies there is a lack of vacuum somewhere pushing whatever towards a relative vacuum.
There is more underneath this than was in eg blockchain or metaverse hype. But there is zero guarantee that OpenAI will be the one to eventually come out on top. If anything, the continuous drama they seem to be generating makes it less likely that they come on top vs one of the other big AI startups.
Sure. I guess it's interesting how differently people can interpret the phrase "buy what you need".
depends how wide is your definition of "connected features". all modern vehicles in the EU are required to have the eCall feature which uses cell to send your location in case of a crash. Since the hardware is in there I have absolutely no faith in car makers/govs to not use it for other purposes (now or in the future) https://en.m.wikipedia.org/wiki/ECall
Musk would have identified the bug if only the programmer had printed their code.
Yep, I only found out about it because of this news
September Data Breach News Compilation
Apple's long-awaited 'HomeAccessory' could have square display, A18 chip for AI
>Avoiding this exact situation which kills their business

This situation is not going to kill WP Engine.
I believe it's implementing DNS-SD for network printer auto-discovery. I'm not terribly familiar with DNS-SD, but given that normal DNS is UDP based it would be unsurprising for DNS-SD to also use UDP.
This is an incredibly boring dossier. It's just a detailed aggregation of public information, and mostly things everyone already knows.
oh sorry yeah I copied the wrong column. the correct column is `0.0.0.0:631`