skysight-inc/HackerNews huggingface dataset:
I don't believe this warranted all the fearmongering even if the intention was to get more attention to it and a faster resolution process, it's not far from cry wolf. Initial CVE scores are very arbitrary. CUPS is a well-known liability when exposed to unsafe networks. CVSS scores seem far from perfect. The WebP zero-day, a zero-click vulnerability that was being exploited in the wild and affecting nearly every user device made in the past decade, most of which will never be properly patched from it, received an initial 10.0, and decreased to a meager 8.8 (CVSS:3.1, and would be higher using 4.0).
To be honest, I would take a private space agency 7 days out of the week with that kind of capital. We have no fundamental proof that LLMs will scale to the intelligence levels that we imagine in our heads. The industry application for LLMs is even weaker than computer vision, and the public sentiment is almost completely against it. Sam's product is hype; eventually people are going to realize that Q* and Strawberry were marketing moves intended to extend OpenAI's news cycle relevancy and not serious steps towards superintelligence. We were promised tools, and they're shipping toys.

I could tell you in very plain terms how a competitor to Boeing and SpaceX would benefit the American economy. I have not even the faintest fucking clue what "AGI" even is, or how it's profitable if it resembles the LLMs that OpenAI is selling today.
yeah obviously libgen is way better, it’s what i use. but i was just answering the question
> The culprit here isn’t the Jones Act, but another protectionist shipbuilding law that requires Naval and Coast Guard ships to be built in U.S. shipyards.

Now this is a surprise! As soon as I read the headline, I thought "Jones Act."

When I describe the Jones Act to people, the usual response is "That can't be right," or even "I don't believe you," but these days there's usually another person around that can say "Yes, that's actually right!" to back me up.

It's a good example of protectionism, like tariffs, that is completely ineffective. The industrial policy of the IRA and CHIPS acts are in contrast quite effective.
They're being sued because they deliberately made the cars easier to steal in the US than they are elsewhere.
Java is too slow, and the language is not powerful.
Why should they? They are also on tor.
This is a high read, low write application. And SSDs offer very fast random I/O performance. SQLite is more than sufficient and the entire database may well fit into the page cache anyway.
I agree with you, but I read this as:
> No process and tools
> No / limited documentation
> No RACI or alignment (yay, kumbaya)
> No plan or managed dependencies

I'm not saying this is the outcome of an Agile approach, but sure seems common on the Scrum projects I work on.
GAT solves typing problems (by making a subset of HKT possible)
The omission of the "Childless Cat Ladies" comment is arguably pretty newsworthy since it has a bunch of implications, most notably being its the attack line that likely drew blood so to speak (the other a potential campaign blind-spot for how to communicate with female voters, a demographic the Trump campaign has struggled with)
I think a difference there is that Postgres doesn't have a for-profit semi-attached to it.

There are certainly companies that do work on Postgres, but Postgres wasn't founded by people looking to make a business and its development isn't driven by one primary company (to my knowledge). Postgres started as an academic research project by Turing Award winner Michael Stonebraker. Berkeley released it under a BSD/MIT-like license. It just has a long history of being independent of any company that's the primary driver of its evolution.

That's not to say there aren't companies like EnterpriseDB, Neon, Citus, and others that haven't driven certain aspects of it, but they just don't get the same kind of control over the project.

Crucially, no one can really feel like someone else is making money off a project that's primarily their work. I think companies in the Postgres ecosystem all understand that even if they're a big fish in the Postgres ecosystem, they aren't coming anywhere close to having built 25% of the value in Postgres. It's hard to "get your undies in a twist" if you acknowledge that you've probably gotten more from the historical contributions than you've contributed - even if you're a stellar contributor today.
All that proves is that shitty businesses that already have scale take a long while to crumble. (See also: Xitter)
Their rules are fairly clear about hack-and-leak content. A lot of other social media platforms don't allow it either.
Where is that from?
This may vary by the particular store, but Walmart doesn't seem to be any worse than other grocery stores in terms of selling unhealthy food. There's little or no evidence that "organic" food is actually healthier.
> Put another way, are we spending all this time and money to fail at simply building a ship that is functionally identical to one of these ~$300m Finnish ice breakers, or are we claiming we need something more sophisticated?

It sounds like it is the former.

> If and when the ships are completed (currently 2029 for the first vessel at the earliest), they are expected to cost $1.7-1.9 billion apiece[0], roughly four to five times what a comparable ship would cost to build[1] elsewhere.

0: https://www.cbo.gov/system/files/2024-08/60170-Polar-Securit...

1: https://sixtydegreesnorth.substack.com/p/the-silicon-valley-...
I've been using duckdb to import data into postgres (especially CSVs and JSON) and it has been really effective.

Duckdb can run SQL across the different data formats and insert or update directly into postgres. I run duckdb with python and Prefect for batch jobs, but you can use whatever language or scheduler you perfer.

I can't recommend this setup enough. The only weird things I've run into is a really complex join across multiple postgres tables and parquet files had a bug reading a postgres column type. I simplified the query (which was a good idea anyways) and it hums away
> Funny how their definition of changing the world amounts to: Fuck you, got mine.

It's sad, but at this point I pretty much assume anyone out of SV who claims they're trying to change the world are either liars, incompetents, or both. That whole culture has just been on a tear of goodwill-burning.
X (Twitter) policy on sharing private information: https://help.x.com/en/rules-and-policies/personal-informatio...

Among others it prohibits sharing:

>home address or physical location information, such as street addresses, GPS coordinates, or other identifying information related to locations that are considered private
It's the Big Lie time and time again: cry wolf about your opponents doing something you want to do in the near future. Keep talking about it, and get louder when you start doing it yourself, and your loyalists will keep looking the other way.
Why I Stopped Using LLMs
The link you've provided (August 2024) pre-dates TfL's announcement of an indefinite delay to Oval Phase 1 [1] which was originally scheduled to happen by the end of 2022.

The switch on did not happen on September 22nd, 2024 - and the previous date in March was also missed.

[1] https://x.com/c2c_rail/status/1834254076151832814
It's not that the banning itself is wrong. It highlights the hypocrisy of Musk's claims about free speech.
Maybe my expectations were too high but they seem to have run out of juice. Every major announcement since the original ChatGPT release has been kind of a dud - I know there have been improvements, but it's mostly the same hallucinatory experience as it was on release day. A lot of the interesting work is now happening elsewhere. It seems like for a lot of products, the LLM part is just an API layer you can swap out if you think e.g Claude does a better job.
TS/JS would be one character less to type than (T|J)S while more intelligible. Found it really funny, sorry
Not an expert, but I guess that simply enabling the firewall should avoid most problems related to this vulnerability. In Ubuntu, this can be accomplished with:

sudo ufw enable
Given the extensive security requirements for nuclear and the cost of this reactor itself, I struggle to see how it can be cost effective compared to renewables or even a diesel generator. Discussions on hacker News, which is very pro nuclear always tend to emphasise the technical advantages and neglect economic considerations.
Few dispute that, though it's fair to point out the hypocrisy of its owner who loudly champions free speech on social media platforms when it suits him to do so.
So much free speech!
only one of the vp candidates has a dossier like this
What PDF reader would you trust to open and run a document reportedly produced by Iranian intelligence?
Multi character constants is one of the many things in C that would be nice to use if the language would just choose some well-defined behaviour for it. It doesn't really matter which.
And we can say what we want about that.
Cheese dating back 3,600 years found in Chinese tomb, researchers say
It's a bit circular when people say "This court decision is wrong" to argue "But this is the decision that was made."
New California law will force companies to admit you don't own digital content
Documents obtained via hacks don't qualify under "free speech" and should be blocked, just like you'd block a list of people's social security numbers obtained via hacking, or secretly-recorded nude/pornographic material (without the subject's knowledge or consent).
> Is it that the US ship builders aren't competent

Yes, they are woefully uncompetitive. They produce single-digit numbers of commercial oceangoing ships annually, at 2-4x the cost of elsewhere. It’s an industry on life support.
TFA didn't mention what private information was contained in the dossier. Is it his street address? SSN?
I dont think stopping companies from polluting rivers is playing nanny. It is against the law, destroys others property, and the government should act.

Drunk driving is illegal too, for good reasons.

Im not against laws.

What I am against is the state taking things that are explicitly legal, and making your life hard and penalizing you if you do them.

The role of the government should be enforcing law. Enforcing social judgement and incentives on legal behavior should be left to non-governmental society.

Sin taxes are a classic example of this.
I've been using Go with Goqu [1] for SQL for a lot of things lately. But, the language shouldn't matter much. The functions are just building the appropriate SQL clauses.

For some of the operations, the method I was using required marshaling the inputs to JSON before sending them over the wire. And that's nicer in a non SQL programming language. But both db's ultimately do have json_build_array/json_build_object for PostgreSQL or json_array/json_object for SQLite3.

[1] https://github.com/doug-martin/goqu
The journalist here is not being entirely truthful. While much of the information that the campaign used to vet JD Vance was public, not all of it was, and the internal comments are definitely not public information.

It's a bit like saying hacked internal emails are public if they are discussing public topics.

The reason the media generally doesn't publish hacked documents is so they don't create an incentive for people to hack documents. It's the same reason why many media companies won't publish pictures and sometimes names of mass shooters and child suicides.

You're free to do it. But many media companies don't do it for legitimate practical, ethical, and moral reasons.
My impression is that IAM is in and of itself a good system, but that it has grown a lot over the years and now has a ton of legacy scenarios that it has to support.

Add in that it seems to be up to the specific service to implement the newer stuff, and you arrive at having three or more different ways to permission resources, none of which are supported everywhere.

In other words - it's old enough to be crufty.
Don't forget that RFPs for this sort of thing get massively stuffed with pork so they're doomed to be bloated even regardless of the quality of the contractor who does the implementation.

They love including requirements that all but mandates a specific vendor's product because that vendor is a key employer in the district of some rep's who's vote they need or has a good lobbyist or whatever.
I used Firefox.
> C, Basic, Pascal, etc. are all missing inheritance and generics, are they similarly unorthodox and difficult?

yes, they are unorthodox for this specific niche: enterprise devs, most languages have OOP and most devs know it.

> Java, C#, and arguably C++ have taken a kitchen-sink and grafted any and all constructs found in other languages so long as they look remotely useful.

I disagree with you, Java approach was very conservative, and original goal was to have simplified OOP. If you have specific examples: we can discuss.
History has shown that limited liability is a massive advantage for our economy in encouraging both domestic and foreign investment. Seems unlikely we would put ourselves at a global disadvantage by doing this.
microsoft doesn’t have a trademark on “ms” either. like i said, if wpengine is hoping to go into court and explain that wp is not related to wordpress, while selling wordpress services… i dont think its going to go well for them.

this is going to be just as flimsy of a defense as “mikerowesoft”
https://github.com/OpenPrinting/cups-browsed/issues/36#issue... makes it sounds like most of them don't, and even if they do, it's sandboxed.
Yes, his current home address is listed on one of the first pages.
If maximizing value is not the goal, then why should Marxism redefine value in a counter-intuitive way?

Btw, "Labor" cannot be in charge, outside the UK at least, because Labor is an abstract concept. In Marxist societies people are in charge that pretend to have the laborers best interest in their hearts. But as they "Some are more equal than others."
Are you saying Harris's team didn't vet Walz, or that the Iranians didn't acquire and distribute the findings?
It's unfortunate that people who dont "get" Tcl feel forced to use it because they are in EDA.

I used to have the opposite problem. My employer would not allow me to write anything mission-critical in Tcl because they thought other people would not be able to maintain it. But now that I'm retired I can write as much Tcl as I like, which is quite a lot :-)
We tolerated worse gas mileage (computer controlled fuel injection, transmission, etc.), safety (anti-lock brakes), etc. We added computers because we wanted to lessen the effects of climate change and keep more people alive.
Yet more definitions of free speech that some agree with and some disagree with.

That’s fine, block whatever you want. Just don’t whine that others have a different view on what “free speech” means.
Making them stick out visibly from the sides of people's heads was absolutely a design choice so that people could be "seen" with the product.

Apple is very big on being a status symbol which is why they put a giant shiny (at one point glowing) logo on their laptops and why they spent a lot of money trying to convince iphone users to not use a case which would hide the logo.
Ridiculous. He's a VP candidate so these things are definitely in the public's interest and reporters report on ill-gotten documents all the damn time.

https://www.kenklippenstein.com/p/read-the-jd-vance-dossier
Middle Tech: Software Work and the Culture of Good Enough
Of course you write this post to have the discourse - but it is Elon's website and he can do what he wants with it I suppose. I don't think any era of Twitter has had very consistent moderation decisions and I don't think it matters much in any era - either now or when conservatives were making hay about it around covid. It seems clear that the prevailing political views of the owner are influential, but not dictatorial, and that's about as good as it gets in our world.

That said I am all for yelling at elon to try to get him to change the policies, which works a lot of the time, and seems like a pretty reasonable way to manage the margins of these things.
The Key to Protecting Customer Privacy While Embracing AI-Powered Experiences
"Elmo"? Why the nickname?
That would do it. I was mistakenly thinking v7 was done for months/years at this point.
Feel stressed about time
any system of record has a requirement to be bitemporal, it just isn't discovered until too late IME. I don't know if there's a system anywhere which conciously decided to not be bitemporal during initial design.
> ... allowing the Coast Guard to buy icebreakers from Finland would likely save over a billion dollars per ship, as well as years of construction time

How about we let Finland build the icebreakers, and we build something we're good at, like fighter planes? Then everyone gets the best and most efficiently built icebreakers and fighter planes, and all for much less money.

There is no [edit: economic] logic to economic nationalism, other than as wealth transfer from taxpayers to a few wealthy people.
Up until this dispute the WordPress trademark policy contained this:

> The abbreviation “WP” is not covered by the WordPress trademarks and you are free to use it in any way you see fit.

Now it's been updated to say this:

> The abbreviation “WP” is not covered by the WordPress trademarks, but please don’t use it in a way that confuses people. For example, many people think WP Engine is “WordPress Engine” and officially associated with WordPress, which it’s not. They have never once even donated to the WordPress Foundation, despite making billions of revenue on top of WordPress.

It's pretty clear that WP Engine has been in compliance with the old trademark policy and that the new one is acknowledging that they don't have legal standing to demand anything about the WP abbreviation (not least because they waited so long to complain about the usage) so they're instead inserting a petulant and childish slight.

http://web.archive.org/web/20240101165105/https://wordpressf...
FoundationDB endlessly interests me and even though the record layer is nice, my dream would be a proper SQL layer. I've been experimenting with making Postgres run on top of FoundationDB, effectively making Postgres a stateless layer itself, and it actually works surprisingly well as a POC.
A Chinese billionaire's Silicon Valley splurge caught the eye of the FBI
What games do you play in VR? I know you say the outlier frame times were a huge problem for you but it really seems like such a small performance bump to get such a huge perceptual benefit.
Angela White's college thesis [pdf]
The reporter has now posted details at https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems...

Red Hat has also made a statement at https://www.redhat.com/en/blog/red-hat-response-openprinting...
Silly me. I thought the reason why the media did not publish hacked documents it's because it is difficult to verify their provenance.
> Keyless fob ignition car ends up in a very strange state where, even though I have the fob in my hand and the car is running, it won't respond because the doors were locked from the inside by the dog? Happened.

This is a good reason to have your car connected to the internet, you can use your app to turn it off and unlock it.
>What matters is that they wanted the public (and likely, their talent) to _think_ that they weren't even interested in making a profit as this would be a philosophical threat to the notion of any sort of impartial or even hopefully benevolent originator of AGI (a goal which is laid plainly in their mission statement)

And now they want to cast off any pretense of that former altruistic yolk now that they have a new, better raison d'etre to attract talent: making absolutely unparalleled stacks of cash.
The KU band is already used by satellites, A tweet discussing what this actually means would be more useful than this fcc.gov page
Paywall buster: https://archive.ph/KUXy1
> The problem I have with this is simple and has to do with the lack of separation of entities.
> Automattic is a competitor with WPEngine. Wordpress.com is a competitor with WPEngine. Wordpress.org and the Wordpress Foundation IS NOT a competitor with WPEngine.

> There is a dispute between Automattic and WPEngine. The resources of Wordpress.org and the Wordpress Foundation should not be leverage in this dispute.

> The fact that those boundaries are crossed means that anyone who is in competition with Automattic might have any and all ecosystems that Matt has any control over leveraged against them if they upset Matt or Automattic in any way.

Can an action like this put the WordPress Foundation's 501c(3) at risk?

And if so, how likely is it to actually become a legal problem?
Interesting. I would conjecture that we have the same cultural issues at this point preventing us from building effective passenger rail systems.
This is survivorship bias: art owned and protected by wealthy sponsors has a much higher chance of making it through the years. Most art is folk art, and has been lost to the centuries.
This is a strange argument to make against "octopuses". Break from our history; use the English standard; we are not speaking Latin ... therefore it should be octopi!? What? How about this: it's OK to use the traditional form if it's still commonly understood, but otherwise let's try to use a "standard English" form. Those are your choices: traditional for the word, or standard. Since "octopodes" is awkward and not really ever used, we say "octopuses". Why would you convert to a false-traditional version?
Yes - fixed now. But please send these requests to hn@ycombinator.com because @dang is a no op that I run across only randomly!
From the (little) I've seen of that world, I'm not sure the EDA vendors understand Tcl very well either; I wouldn't want to work with scripts for Cadence's schematic capture tool, and that's not because of Tcl, it's because their scripting interface is a disaster. (Exposing C++ iterators at the script level, for example.)
Slackers quit is good not bad
I don't think they are exposed through any public API, the extensions generally just track it themselves (which of course means only dislikes from those that have the extension installed are counted: apparently they extrapolate their returned count, which does likely mean the result is biased)
IIRC the Laserjet 4 had a much better warm-up time (and lower power consumption) by switching to a thin ceramic heating element rather than heating half the printer. But yeah anything after that is downhill.
The Italian company that bought WeTransfer [video]
Private space agency and LLMs both seem like big industries going nowhere driven by sci-fi hopes and dreams.
Unless you are exposing CUPS to other people on purpose so that you act as a print server then block inbound access using a local firewall. Your local print jobs should be able to use the loopback just fine. Your print spooler would then be talking to the IP on your printer and that should also be confined to your local network and may have optional features to further secure access.

On a very loosely related note, some enterprise printers have optional features to lock down remote access to people that are authenticated. Authentication capabilities vary by vendor. This is somewhat unrelated to CUPS but probably a good time for people to research what their printers can do as printers are a great way to steal company secrets.

[Edit] What smokel said. They beat me to it before I refreshed the page.
Tcl's magic is mainly from uplevel and upvar as they allow you to do crazy stuff with the callstack to enable all kinds of metaprogramming. It's not a lot of magic, but it's very powerful.
no advertising $
Because Elon likes nicknames. Remember "pedo guy"?
OP claimed Russia has a Potenkin force, because it is not shiny enough. My point is their nukes and subs, are quite modern compared to US force.
> If i ever get falsely accused of a crime that would send me to jail for life i would beg for the death penalty.

That's your life and your choice, which I think should be respected.