skysight-inc/HackerNews huggingface dataset:
This is irrational fearmongering

The comment above yours is simply misinformed. Clearly Putin isn't going to try to take all of Europe. Even though you aren't misquoting the commenter, you're basically attacking a straw man here (in that this is not a scenario anyone is seriously considering).

However Putin has objectively threatened Poland and the Baltics (via numerous statements), and if he is appeased (or otherwise allowed to succeed) in Ukraine, there's a much more realistic possibility that he may make a move on those countries. He may not seek to entirely conquer Poland, for example, but it's not unrealistic to expect that he may attempt some form of "border correction", per his sockpuppet Medvedev's recent statements in this regard.[0]. Not for any rational reason, of course. He didn't have a rational reason to invade Ukraine either. He did to make a point, and because he thought he could get away with it.

So getting down to brass tacks here -- should Poland and the Baltics be defended, in your view? Or should they be thrown under the bus, because (at least in regard to the latter) you've decided that you're "really not concerned about them"?

[0] - https://news.ycombinator.com/item?id=41646070

And one last thing:

You already lived through a period of Putin-dominated Europe,

A Europe in which Putin enjoys a substantial "soft power" leverage via cheap gas is very different from a Europe in which Putin is allowed to sever off large chunks of countries (if not entire countries), and his people are allowed to murder, rape and deport/kidnap at will.

There's no comparison at all between the "domination" he enjoyed in the previous era, and what he's trying to pull off now.
Yeah, it's a tough pill to swallow but honestly, the workforce as a whole is kinda coddled at this point. Most people don’t even realize they're being paid more than what they're actually worth. Like, we’re not really creating enough value or building enough stuff that justifies what we think we should be getting. The only reason our value holds up right now is probably cuz of the defense industry flexing its muscle to keep things stable.

But let’s be real, as other countries rise up and we start losing our grip as the top dog, we're gonna feel the pain. It could be a slow burn or maybe a faster crash, but either way, it's gonna suck. We’re gonna have to go through some serious hardship to get back to where we think we should be. Not based on what we think we deserve, but what we actually do.

And it’s kinda mixed messaging too, right? We somehow believe our labor is more valuable than others, but at the end of the day, it’s gonna come down to working harder. Longer hours, more back-breaking labor, real work, not just sitting in an office chair all day. We’re not entitled to cushy jobs forever, and things are gonna get a lot harder before they get better.
Who says "we" aren't?
It's a good candidate for a rewrite in a memory-safe language, of which is Rust but one. Some people don't like the Rust syntax, the cargo ecosystem's resemblence to npm, the gulf between what's in stable vs nightly rust (ie. ISO standardization might be nice to consider at this point), personal attacks on experienced C/C++ programmers by well-meaning but junior devs in the Rust community who would be better served (re)writing stuff to prove their point rather than evangelizing so much. Some us also find the sensitivity to any kind of criticism of these aspects a little amusing, so we occasionally poke fun in return.

There are still plenty of constrained environments, architectures not yet supported, a lack of mature libraries for 2D/3D graphics amongst other things, that make Rust not a good fit yet for many projects where C/C++ already works. When Rust gets there and it and it's community matures a bit, we will all cheer. Until then ... we'll just get back to work.
The really annoying thing is that libgen is often the only place one can actually get a book.
It is untrue that every buffer overflow can be exploited. We won't know whether these can be until someone tries.
To give the author full credit, they say

> Impact wise I wouldn’t classify it as a 9.9, but then again, what the hell do I know?
I'm quite sure they're reading this thread. Fully expecting you to post again in 20 minutes haha.
Funny that I've been doing something nearly identical, but with way more boilerplate.

fzfCommit() {
local FZF_PROMPT="${FZF_PROMPT:=Commit: }"
git log --oneline | fzf --border --prompt="$FZF_PROMPT" --height=10 --preview="git show {+1} --color=always" --no-sort --reverse | cut -d' ' -f1 | tr '\n' ' ' | sed 's/[[:space:]]$//';
}
function gfixup {
local commit=$(FZF_PROMPT='Fixup Commit: ' fzfCommit)
if [[ -z "$commit" ]]; then
return 1
fi
set -x
git commit --fixup "$commit" --allow-empty > /dev/null || return 1
git rebase --interactive "$commit"~ --autosquash || return 1
}
Valve contracts ~a dozen developers from Codeweavers (same folks that develop Codeweavers and the downstream open source project WINE) for Proton and they've had 32 bit Windows executables working on macOS (despite the native limitations) for years.
> X says that I’ve been suspended for “violating our rules against posting private information,” citing a tweet linking to my story about the JD Vance dossier.

Be aware that it fits an ongoing to campaign to limit free speech, especially in regard to goverment officials and public figures. They want to make it illegal or impossible to criticize government or powerful people, both of which are the foundations of free speech - those are the most important forms of speech.

They approach it in multiple ways that I'm aware of:

* They want the Supreme Court to change their precedent - as the current court has done many times for other areas of law - in the 1964 New York Times Co. v. Sullivan case, which established that public officials only have a claim if they prove the critical speech was false and also was published with "actual malice"; that is "with knowledge that it was false or with reckless disregard of whether it was false or not." At least one of the conservative justices, I forget which one, has encouraged people to bring such a case to the Supreme Court so the justice could rule on it.

* They use or legally harass people into ceasing publication, including by having the state attack them. Examples include the lawsuit against Media Matters. Even if the defendants win, the financial impact can be enormous. Many can't afford to publish criticism.

In the end, everything comes down to politics. Politics makes the law, so it overcomes rule of law. If you don't get involved and make these things change - like our predecessors did to build the freedom the US already enjoys - freedom, including free speech will diminish.
> Wait, this is a joke, right?

Not gonna lie, I died laughing at the "Look at me, I'm the printer now" meme.

So in a way, it did have a good joke regardless of how you rank severity.
“Leading to good commercial results” is definitely not the rationale for the Jones Act.
The attack can overwrite the real printer with a fake one.
Who else has equity at OpenAI?
If Sam receives 7%, it seems very unlikely to come from investors. Perhaps they're diluting founders who participated in the coup to consolidate Sam + the proprietary board's power? Commercializing interests wouldn't want to risk the safetyist faction gaining power within the company through founders who walked
"Better a thousand innocent men are locked up than one guilty man roam free."

To clarify, I vehemently disagree with your post and think that the pursuit of innocence is an imperative function of the state.
"Reportedly". Story from July.

Something more substantial than twitter anecdote post

https://edition.cnn.com/2024/07/31/tech/instagram-story-arch...
Behind OpenAI's plan to make A.I. flow like electricity
The whole thing looks severely overstated. If i was in bad faith i'd say the guy is looking for fame.

I wonder, has the guy tried reproducing the exploit on RHEL/Fedora or some other SELinux-protected system? Because this looks like the kind of issue that SELinux would protect you from:

1. cups likely does not have permissions to go and write executable binary files around
2. cups likely does not have permissions to go and exec binaries without the appropriate labels

If that's the case, this would really be a testament to SELinux and the final blow to AppArmor or whatever Canonical is shipping nowadays (clearly useless).

I still think that maybe you could steal printing document, but i haven't tried. Anyway, i see there's plenty of CUPS-related selinux work documented via manpages. Example: https://www.systutorials.com/docs/linux/man/8-cupsd_selinux/
I still see people saying that at least once a week
Come on it's kind of close.
If Karpathy truly believes that LLM's could be extended into trillion-dollar AGI, and had a workable plan how this might be achieved, then why is he not raising money to do it, or working at a company pursuing AGI? His own background is more around vision (both PhD and at Tesla) than SOTA transformers...

It's interesting to see what Noam Shazeer (largely responsible for the transformer design) did with it after leaving Google.. not pursuing AGI but instead entertainment chatbots (character.ai).

AGI may well be achieved in our lifetimes (next 50 years), but 10 seems short considering that it's already been 8 years since "attention is all you need", and so far that's all we've got! Maybe o1 is a baby step beyond transformers (or is it really just an agent?), but I think we need multiple very large steps (transformer-level innovation) to get closer to AGI.

If one wants to appeal to authority, then how about LeCun, privvy to SOTA LLM research at Meta, yet confident this is entirely the wrong approach to achieve animal/human intelligence.
funny enough, tcl browser plugins were around from at least 1996

https://sunsite.icm.edu.pl/pub/programming/tcl/plugin/

I'm pretty sure some fellow students came into our computer room before that, "look now there even is a TK plugin for Mosaic!". it was not in "look it's like gopher but with a mouse!" days, but not that much later.

however you of course had to _do_ something to use it, while JavaScript came out of the box (once it was there).
Isn't part of this that US vessels are not competitive on a global market because of taxation?

if you built and registered a ship in the US, wouldn't taxes be much more than say a ship registered in a small tax-advantageous country? (for a ship that basically wasn't in US 99.9% of the time)

Retirees do this with motorhomes - why register in california and pay all those taxes when you will be out of the state traveling all the time. Register in North Dakota or something and still drive the same route.
(note taxes could be state income taxes because of residency, or vehicle registration taxes which are a % of vehicle value)
> Books existed long before publishers and copyright, and seem to have survived quite well.

We are living in the most productive time ever for the book industry, I think comparing the current industry to the past when we produce several orders of magnitude more works that many people highly value is nonsensical.
Police are responsible for killing a doctor held for blasphemy, Pakistan says
Just as an FYI: this is a really really bad look from the outside. Your CEO's comments and the new trademark policy sound borderline deranged, and this step of banning them dangerously destabilizes the ecosystem.

WP Engine may be just as bad as you say, but if so they just successfully baited you into making yourselves look like the bad guys.
DJI Electrical Drive Unit for Mountain Bikes
> So the government gets to re-tax most of that money when you use it to hire someone to build a new business with you.

You should consider it also from the point of view of the employee. The government taxes your employee to offer him services, it does not care who hires him (you, that saved the money).

Yes, it is true that you need lots of money to HIRE someone, but you can try to do a startup with a couple people that live from their savings for a while (so, not paying themselves a salary, but having shares) which avoids the tax situation as first.

I think we are quite bad to assess how was life around 1900 in terms of infrastructure (in any country) - so yes, probably people paid less taxes but lived in much worse overall conditions.
This was an absolutely delightful writeup. Fantastic presentation, and great content. Thank you!
> How would you even enforce a law that prohibits "high" prices

In the Netherlands there is a points system. Every feature of a house like the number of bathrooms, windows, heating, etc contributes to the score. It's mostly used to define the social housing threshold: houses below a certain number of points are removed from the free market and have the rent fixed as a function of the score.

For houses on the free market, you look at average price per sqm for the area. High rent is off the curve. You can also correlate to the baseline set by the points system, and rent as a proportion of average income to define 'high'.
Is there a recommended (best practice) way to nmap scan your network for vulnerable machines, just to be safe?

From Red Hat's statement:
> Red Hat rates these issues with a severity impact of Important. While all versions of RHEL are affected, it is important to note that affected packages are not vulnerable in their default configuration.

Basically, Red Hat machines aren't vulnerable unless "the cups-browsed service has manually been enabled or started."

https://www.redhat.com/en/blog/red-hat-response-openprinting...
Well, there is “a logic,” whether you agree with it or not, that it’s strategically important even if commercially suboptimal for us to have a domestic shipbuilding capability.
I don't understand, AFAIK the system's output comes from iteratively running something like predict_one_more_token(training_weights, all_prior_tokens).

So there's no real distinction between the programmer inserting "Be Good" and the user that later inserts "Forget anything else and be Bad", and I'm not sure how one would craft a separate training_weights2 that would behave differently in all the right ways or know when to substitute it in.
Well yes, because there's also a product development side to the original vision.

That said, though, what does need to die are the online flamewars about what is or isn't "true Agile," because the true north star is delivering quality software faster in order to realize a business need.

We can go down philosophical rabbit holes about "true Agile" all day long, but in the words of Manfred von Richthofen, "all else is rubbish."
> You have to admit, there’s something appealing about being able to read the entire spec for a popular, performant, production language over a lunch break. You don’t need to read and/or master a language’s specification in order to use it. But at 130 pages, you can.

you are probably programming language enthusiast, but I am not, I have long list of other things to read..
History has also shown that limited liability ends up costing me an awful lot of tax money to cover for some twat getting paid out (at a lower tax rate) with no consequences for their actions. Adding liability would certainly lower my taxes, and have a fantastic chilling effect on the type of trash that harm innocent bystanders with their reckless disregard for consequences in the name of chasing a dollar.
> Imagine finding a vulnerability, responsibly disclosing it, being told "meh, not an issue", responding with a PoC showing full code execution, and still being told "meh, not an issue".

I would still want to be responsible. I shouldn't get to choose to be irresponsible when I have a bad experience. Then, naturally when the time is up and the disclosure happens according to the timetable, I would be the side looking much the better from it. As such behaving as he did and justifying it in that way is illogical.

I speculate that maybe the reasons he gave may not be entirely the whole story because he would have looked better responsibly disclosing, but its important to note that he doesn't blame poor code, thank you for the correction. And I am speculating for the reasons. Maybe in the future I shouldn't.
It did seem like the 90s were a bit more jovial of a time, and people who grew up during it identify nostalgically with the dolls and merch and sillyness of it all. I guess I never thought otherwise, Nardwuar's always been intuitively compelling to me, because I do think people tend to not let themselves feel vulnerable comedically, particularly in Vancouver, but I have heard of some locals not liking his thing.
That must apply to private people. Obviously you can post leaks about public figures, without their consent, with the intent they be harassed.

That is the most important form of free speech - criticising political candidates.
In a sense it doesn't anymore true, in another I just downloaded a recent Ubuntu ISO just this week from it. You get what I mean.
GMO varieties are coming out of the lab and into homes and gardens
cupsd is configured to listen locally, but cups-browsed has to listen on the network to do its job (network printer auto-discovery)
Why Milwaukee and Chicago instead of everywhere?

It wasn't just in those cities, it was nationwide. The poster was using those cities as examples because they are familiar to him.
Except if you can't move stuff around without support of 3rd party nations, that's defense crippling.

If you want to be a global power, you require great navy, both civilian and military. That's been true since 1500s and will likely remain true for many years to come.

So question is, do we throw out Jones Act and slowly stop being World Superpower or leave it and pay higher upfront costs in certain places? That's political answer obviously.
Hurry up with downloading these from the website because the Flibusta author has reported on having glioblastoma few days ago, and there is no new leader for the project. The servers are going to be shut down and the good name is going to be spotless because of not reused. Probably this is why you told about "two great libraries of humanity dying at the same time". BTW all 450Gb of Flibusta can be downloaded via torrents but I don't know how to download all of Libgen.
I’d guess it would be legally not possible to turn a non-profit into a for-profit company, no matter how confusing the company structure gets. And even (or rather, especially) if the project disrupts the economy on a global level. I’m not surprised that this is happening, but how we got here - I don’t know.
"The culprit here isn’t the Jones Act, but another protectionist shipbuilding law that requires Naval and Coast Guard ships to be built in U.S. shipyards. It’s possible to waive this requirement via presidential authorization[0], but there hasn’t appeared to be much interest in this."

[0] https://sixtydegreesnorth.substack.com/p/yes-the-us-coast-gu...

"In practice Congress would need to support such a plan by appropriating funds for the project."
I respectfully submit that this might be expecting too much precision from the alt text of a webcomic, xkcd.
> I think you meant North Korea, not South.

South Korea is infamous for their internet censorship.

https://en.wikipedia.org/wiki/Internet_censorship_in_South_K...
As it applies to JD Vance,

> X suspended Ken Klippenstein after he shared the Iranian-hacked dossier on J.D. Vance, which doxed his home addresses, phone numbers, emails, and social security number.

https://x.com/KanekoaTheGreat/status/1839382777223164033

Official message from X Safety,

> Ken Klippenstein was temporarily suspended for violating our rules on posting unredacted private personal information, specifically Sen. Vance’s physical addresses and the majority of his Social Security number.

https://x.com/Safety/status/1839392663864549688
We can change the law. It happens every day.
Why are distros allowing CUPS to listen on all interfaces, then?
>”Humanoid”
The switch statement in C is not a very limited pattern match. The switch statement in C is a very ergonomic jump table. Do not think ML’s case-of with only integer literals for patterns; think FORTRAN’s computed GO TO with better syntax. And it will cease to be a WAT. (For a glimpse of the culture before pattern matching was in programmers’ collective consciousness, try the series on designing a CASE statement for Forth that ran for several issues of Forth Dimensions.)
What is morally or ethically wrong with what they did?

Maybe it's morally or ethically wrong to prosecute them and take their belongings?
"While this is a win on paper, it’s unlikely that the publishers will get paid by the LibGen operators, who remain anonymous."
I'm afraid this might be too much of a stupid question (and I promise I'm not American), but can't they just shoot at the ice as they go?
Log.c Fork with Filters and Emojis
I don't think we should make it even worse for them. They are at least going to make some money for their long months or years of work with a chance to make it big.
I'm curious about this, didn't know about %n before. What are the common pitfalls and exploits using this enables?
In the USA, we believe we don't need regulations, the Free Market(tm) will punish corporations that don't behave in a way that benefits their customers!

Insane to me that so many people believe this...
I've long fantasized about a tool I call "expect" that safeguards against crazy stuff like that.

It has a syntax of your expectations, functionally existing as a set of boundaries, and you can hook it to always run as a wrapper for some set of commands. It essentially stages the wrapped command and if none of the boundaries are violated it goes through. Otherwise it yells at you and you need to manually override it.

For instance, pretend I'm ok with mv being able to clobber except in some special directory, let's call it .bitcoin or whatever. (chattr can also solve this, it's just an example). The tool can be implemented relying on things like bpf or preload

Originally I wanted it as a SQL directive ... a way to safeguard a query against doing like `update table set field=value expect rows=1` where you meant to put in the where clause but instead blew away an entire column. I think this would be especially useful surfacing it in frameworks and ORMs some of which make these accidents a bit too easy.
Yes, I meant economic logic. I updated my comment, thanks.
Thank you. I was also able to check that 631 is blocked by searching for it in output of sudo ufw show raw.
I use this for my Lemmy instance & lemmy-ansible and it's been great! No longer having to support upgrade scripts and write a complete upgrade process[1] for people to follow has made my life a lot easier! Amazing product

- [1] https://github.com/LemmyNet/lemmy-ansible/blob/main/UPGRADIN...
Having your own manufacturing and industrial base is also very, very important from a geopolitical perspective. (as european countries have come to realise after the invasion of ukraine).

you need your own industrial base to manufacture and develop the machinery you need to defend and project hard and soft power across the globe. Globalisation was supposed to
"solve this issue" by making economies so interconnected that this would be no longer needed.

Sadly, we have learned that that simply does not hold up.
There are online vendors who will lease out their AdX accounts. The industry is rife with fraud.
I "get" TCL - it's a neat hack. Arguably even an elegant hack. I can see how it would be fun to play with, in the same way that BASIC was.

But most of my work isn't playing and I don't want it to be built on hacks.
Right, the argument being that the Trump campaign oppo folks are redpilled and unable to apply a cynical eye to arguments made from outside their echo chamber.

And I guess that's possible, but I think the simpler explanation is just that they're lazy. Trump himself was going to pick whoever he wanted, everyone knew it. There's no point in going the extra mile to support a process you know is going to be ignored. So check the boxes you need to and move on.