skysight-inc/HackerNews huggingface dataset:
I wanted to try this with Chat GPT

I buy 102 mandarins on Monday and then on Tuesday I buy another 48. On Wednesday I buy 98 apples. I didn't like the last 3 mandarins I bought. How many mandarins do I have?

You bought 102 mandarins on Monday and 48 more on Tuesday, which gives a total of:

102 + 48 = 150 mandarins.

Since you didn't like the last 3 mandarins, you subtract them:

150 - 3 = 147 mandarins.

So, you have 147 mandarins.
If their customers forgive that, they have really lured a demographic set.
> eg. having some samples (not all) checked by another lab,

I don't think that is useful at all in case of rare diseases. You would just get two reports saying that the random sample is free of HIV.

Much better would be to send some known control samples. Making sure that some of the samples is known HIV+, and then check if the supplier can tell which ones are those.
They “sell” stuff to closely held entities and then lease them back. The principals take a vig from everything.

It’s not always an objective for the target company to go bankrupt, but if they do, the management has already pulled their money out. A company I worked for was a cash cow used to borrow and buy 3 other companies. The combined entity grew due to some growth hack stuff and one-shots, then got acquired. The PE boys made a lot of money, and the company itself was pretty much toast after the second acquisition.
I can’t find the actual number because Automattic’s tweet[1] announcing it has been deleted, but it’s the one mentioned in the ACF 6.3.8 release notes[2]. The authors of ACF can’t upload that version to wordpress.org themselves because Matt banned them from there before making the announcement.

ETA: Matt says[3] it’s a different vulnerability. Anybody willing to break out the almighty diff?

[1] Discussed at the time: https://news.ycombinator.com/item?id=41752289

[2] https://www.advancedcustomfields.com/blog/acf-6-3-8-security...

[3] https://news.ycombinator.com/item?id=41821829
Yes. Good point. I do mean that. The average American white person is less happy.
Or that the situation was different, advertisers hadn’t mastered the 24/7 cycle of selling easy junk food in both home form and fast food form. Every generation thinks they’re superior to the new generation and says “why don’t they just…. “ when a new generational problem comes up. People screaming out against ozempic and friends are just angry that maybe it does work well enough and that people don’t have to struggle for once. Our brains weren’t built for our modern life style. It used to be that people virtually had lots of experience eating Whole Foods, TV was relatively new, parental guidance on “that’s junk food, you can have a little not a lot”, our jobs weren’t built around screens and pecking on keyboards, bombarded by emails and phone calls even after we go home via 1 hour commute each way. It’s easy to say “you’re all a bunch of lazy bums” but it’s also lazy and not true.
At the moment of landing burn ignition the booster will already target the beach near the tower.
Dreamtroit, a Low-Cost Bohemia for Artists, Revs Up in Motor City
Much better title, thanks
MDN rejects library, author goes berserk
Definitely processed, but not so different from whey powder or flour.
For those lacking a NYT subscription: https://archive.is/cyhJY
So, wordpress is being burnt to the ground by Matt. Just great. :/
Read the repro steps again:

> Create an Apple account with support@company.com email and request a verification code, Apple sends verification code from appleid@id.apple.com to support@company.com and Zendesk automatically creates a ticket

It's a clever attack.
Just yesterday I saw an entire parking lot terrorized by a self-driving model Y that was auto-summoned.
"End of day" shenanigans?
“Who are our customers?”

After the first 2 days on the project this should be clear, shouldn’t it? And all the other proposed questions are answered in the first 10 minutes on the first contact with the PO. 10 months later on the project the only thing that matters is what is needed and when.
https://github.com/bullenweg/bullenweg.github.io
scorched earth is always so successful
You're right though -- all the parents I know desperately want alone time.
The byproducts of this rocket’s combustion are CO2 and H2O
Depends on your definition. The 8271 wasn't programmable by anyone but Intel (at least, they never made that a market option), and the second core was more of a bit-oriented coprocessor, sorta like saying the 80486 is a 2-core processor because of the FPU.
"The system" has no interest in curing your depression. They want you to keep making therapy appointments, and they want you to keep refilling prescriptions.

Individual doctors may or may not have this view. I'm talking about "the system." Just consider the incentives. That tells you all you need to know.
The woman who revolutionized the fantasy genre is finally getting her due
Thanks for the long reply. How did you go about getting into freelance work? Freelancing seems like the path I’d enjoy, but it gives the feeling of a starving artist, do you feel that way? Also, are you in the USA, I’m curious on how you handle medical insurance.

Truthfully, my expenses are rent (HCOL) and food. I have no debt. I live a modest life in a very expensive city due to my partners job.
Yeah probably, but what information did H1 relay to them? Did they read the email, or did they get H1's interpretation of the bug? Because the SPF/DKIM/DMARC stuff really doesn't make sense with context.
One simple shift is that the Astrological calendar
Was based on the sun’s position between the constellation’s.

Imagine the crisis of faith when the monuments started to mislead society.
That's indeed short for some actual uses such as summarization, but AFAIK many/most? evals involve generating less than 200.
Doesn't seem like a very good article... a good journalist puts statements in the appropriate context and that seems to be lacking here.

For instance, it mentions "high levels of potentially toxic chemicals like Zinc and hexavalent Chromium", but doesn't say what that means. What is "high"?

E.g. the quoted Prof says he "wouldn't recommend drinking it", but would he recommend drinking regular rainwater discharge from this (industrial) area (or even regular city rainwater?) and would he say its worse than that? How many grams/tons of these materials are in the discharge? What is the likely concentration by the time it gets to any animals, how much would actually get inside them and how does that compare with the known levels that would be damaging to health? How does it compare with the concentrations from rain runoff?

A good journalist should find an appropriate expert and ask these sorts of questions so they can include them in the article and give the reader context, otherwise the reader will often come away feeling informed when in fact they know nothing of substance because there is nothing to anchor these unquantified facts to.
This release fixes a separate security vulnerability from the original update.
The diff contains two (identical) changes that aren't just ripping out upgrade notices for the pro version: Two functions that stop callbacks from accessing $_POST now also stop them from accessing $_REQUEST, which also contains everything in $_POST. Also confirmed by WP Engine's update notice[1].

I honestly don't see why anyone would treat this as a security issue. Everything involved is PHP code that can do whatever it wants, not in any kind of sandbox.

Edit: And even if it were this update doesn't fix the problem. POST variables can still be accessed:

filter_input(INPUT_POST, 'name');

[1]: https://www.advancedcustomfields.com/blog/acf-6-3-8-security...
That's what I thought as well. On the medication I was on afterwards it only inhibited serotonin reuptake and the dose was lower. I imagine a really high dose would do the same thing as well.
Forking it is whatever, but to take over their namespace and thus break trust across the ecosystem is a dealbreaker. All devs will have to move.
1. It's not clear the California Costal Commission actually have veto over federal land. Federal land ultimately is not within the power of the state to regulate. So they might be powerless.

2. The federal land is aimed at launches for national defense. It's not clear how commercial Starlink missions to mostly server commercial interests fits into this mandate

3. They actually okay'd 36 just not the full 50 - still an increase.

4. There's a fit a proper test to run a company - at some point Musk is gonna get called on this at the current rate.
There's a similar quasi-mood in colloquial Finnish, humorously called "aggressive": https://en.wikipedia.org/wiki/Aggressive_mood
I tried leaving a stack of programming books beside my pc while I'm working and putting my phone in another room. It does work. But I keep forgetting to do it.

I was considering trying a month of no I internet browsing unless it is required for my job or learning.
You launch in the eye of the hurricane:

"Marooned" m.imdb.com/title/tt0064639/
It actually is an excellent website, and the repo is here: https://github.com/bullenweg/bullenweg.github.io
In case it's not clear these are the two separate vulnerabilities:

1. Zendesk allows you to add a CC to any existing support ticket by sending a (spoofed) reply from the original requestor's email address to that ticket's Reply-To address and including a CC in the email.

In some circumstances the Reply-To address is based on an auto-incrementing integer so it can be guessed. (Although this may not alway be the case: my email archives show some emails from Zendesk using the integer and other emails using a random alphanumeric string. It seems to vary by company so it might be some sort of configuration setting?)

2. Slack allows third-party domain-wide logins via Sign in with Apple without additional verification that the email belongs to a real person. Here the author of the article pretends to be support@company.com to Slack and Slack lets them into the company.com channel, despite the fact that support@company.com does not actually represent a real user and is only intended to be a receiving email address that forwards into Zendesk. (This sounds more like a configuration problem than anything else though.)
What’s typical pay like in the UK and how is your life over there?
some mornings its just not worth it chewing through the leather straps logging out now.
No tolerance, and yes the dosage was accurate.

I picked “great fun” as a description as a shorthand because, while I could write more about it, it had little to no net positive or negative impacts on my mental health. For the purposes of this discussion, “Great fun” is kind of meant to communicate that the story is neither a warning or a recommendation regarding depression or any other mental health condition.
>The unfortunate thing about bug bounties is that you will be hammered with crawlers

you mean your product will be hammered by people testing to find holes, thus garner the bounty? or some other reason?
Montana is still legal apparently but I'm sure cops could write you a ticket for the infractions you commit while on your phone, just not for the phone itself.
Profile CoreML models directly from Python
ProcessWire CMS (https://processwire.com/) is a neat alternative if one requires quite complex set of custom fields on a website.
https://worldhappiness.report/ed/2019/the-sad-state-of-happi...
Its all because someone’s ego was hurt that their security was breached by 15 year old kid. Sometimes the simplest explanation is the right one.
150ns is actually surprisingly high! I didn't realize it was so bad. That's about 2-3x as much latency as fetching from DRAM based on what I see in peoples AIDA64 results.
Blackwell being sold out for 12 months sounds like market opportunity for AMD. A chip is better than none.
Pea protein starts with pea flour, but there are several additional processing steps afterwards. Presumably rice protein follows the same rough steps.

As for whey protein isolate, isn't it also considered an ultra-processed substance as well?
The title and the content are two different things.
Yes, Qt is LGPL except for a few plugins that are GPL.
Not a surprised that in the land of the obese (mostly by choice), weight loss poison is deemed a miracle drug
We have taken on stewardship of this code going forward, and will dedicate engineers to it. Probably more than Silver Lake does.
The honest answer is they have a lot of ICBMs. And besides, what would it do? We’ve got no more sanctions left. Short of invading (which nobody is going to do because of those ICBMs) there’s nothing left to do. We shot our wad on Ukraine sanctions.

At this point unless we somehow convince the big nations that still trade with them (like China) to stop, we’ve got no levers to pull, and we don’t care enough to give China whatever massive ask they’d have for that.
> It really can't be underestimated either for children or adults how much we are dependent on ease of access.

nit: If you mean to say these groups are so dependent on ease of access it's impossible to estimate correctly to what degree, you mean it can't be overestimated, not underestimated.
What you say is grammatically correct. But if you want to find out whether it implies gossip or past conditional, you need to look at the context.
Haven't british tabloids been "announcing" aliens for decades?

How this bullshit is gathering so much attention is really the big mystery to me. Maybe the dailymail should announce that?
I often think about huge, fancy cloud setups literally costing silly money to run, being replaced by a single beast of a machine powered by a modern, high core count CPU (say 48+), lots of RAM and lots of high performance enterprise-grade SSD storage.
Yeah, the difference in France if you try vs. don't try can be dramatic. My first school trip to France with my French class, one of the girls in my class tried asking for something in a small shop in Paris in English. The entire shop went quiet, until she tried again in French whereon they immediately spoke English to her.

Conversely, I went into a small shop, tried my broken French, and asked the shopkeeper if he spoke English after a failed attempt at making him understand me. He didn't, but dragged me into the street and started stopping random people until he found someone who could help translate.

While purely anecdotal, those extremes seem fairly common even today, and frankly I get it - it'd annoy me to if people don't even make a perfunctory attempt. Of course the stereotype of certain types of tourists doesn't help.

Apart from that, I think people in general are far more likely to feel ok about trying to express themselves in your language if you've made a fool of yourself in their language first...
This means you missed https://www.youtube.com/watch?v=NOCsdhzo6Jg which is hillarious
This happens in Gaza on a massive scale, killing people with drones with mounted guns, or missiles.
Not being standards compliant does not surprise me at all.

I've never looked at the cost, but I was told switching to teams is being done to save money. So perhaps not as much money as hoped...
Yes that’s how analogies work, they’re not exact equivalents.

The point was to illustrate that the actual value creating job of every employee from the bottom up to the CEO is fundamentally delivering products or services. An organization that takes its eye off that ball and hires people specialized in “people management” is well on its way to the remarkably common decline and fall of large corporations. If you hire people whose specialty is interpersonal drama then guess what you’re liable to get.
Yeah... No
Nothing has broken. Perhaps WP Engine should have consider that before suing us.
This is blatantly false. I've been on a few. Some didn't help, some made me worse. The one I'm on now is extremely helpful, and saved me.

None of them had any suppressant effects on my emotions at all.
> Sherlocked

The verb you're looking for is stole

Sherloking is when a Walmart is built next to a cornershop. Here the dude tore open the corner shop while claiming to be a victim.
> If I can't run FreeBSD on my machine, I won't runt it on my servers.

How does offering a laptop or desktop OS experience relate to being a great server OS?

Anyway, the last time I was using FreeBSD on a client was in the late 90s. I am still running FreeBSD servers. It never bothered me that running that particular OS on a laptop maybe could be a challenge. The FreeBSD project has limited resources in terms of money and developers and I'm quite content seeing that going towards building a great server OS.

Diverting people and money towards a better laptop support just means competing with Linux and I don't see FreeBSD bringing something really compelling to the table. At best it'll just do everything Linux already does.
If they can get a little fitter, they can do 15 minute medium intensity exercises.

The point is, make a start.
Huh, as a South African, now I'm quite intrigued to visit it.
Aren't you too smart to read the Mail?
Rules are for thee, not for me
Wikipedia states that they use the "normal" (not inferential/gossip) mood, because otherwise it could be taken as a value judgement in some contexts.

https://en.wikipedia.org/wiki/Inferential_mood
How long ago?

Every general anesthesia I've had was basically "OK you'll start to get sleepy now" and then "ok we're finished" and zero awareness of any elapsed time.
We have a policy to never acknowledge unsolicited emails like that unless they follow the simple instructions set-out in our /.well-known/security.txt file (see https://en.wikipedia.org/wiki/Security.txt) - honestly all they have to do is put “I put a banana in my fridge” as the message subject (or use PGP/GPG/SMIME) and it’ll be instantly prioritised.

The logic being that any actual security-researcher with even minimal levels of competency will know to check the security.txt file and can follow basic instructions; while if any of our actual (paying) users find a security issue then they’ll go through our internal ticket site and not public e-mail anyway - so all that’s left are low-effort vuln-scanner reports - and it’s always the same non-issues like clickjacking (but only when using IE9 for some reason, even though it’s 2024 now…) or people who think their browser’s Web Inspector is a “hacking tool” that allows anyone to edit any data in our system…

And FWIW, I’ve never received a genuine security issue report with an admission of kitchen refrigeration of fruit in the 18 months we’ve had a security.txt file - it’s almost as-if qualified competent professionals don’t operate like an embarrassingly pathetic shakedown.
The public isn't aware of all the aid that the west has given Ukraine. Whatever's been given, it's been pretty effective as evidenced by Ukraine still existing.

Limits are put on military aid to leave the threat of escalation as a deterant.
It is complete bullshit, but calling ACF high quality is also pretty out there.

It's one of those giants in WP that is stuck in the past, arguably much like a lot of core.
Zendesk paid me $500 4 years after I submitted a vulnerability to their bounty program on hackerone. It was a shock. There were default settings indexing internal docs/knowledgebase info to search engines.
> the "ultimate" mathematician is a poet.

Approximately, but not actually, a member of the set of poets.
Statistical Mechanics of Neural Networks [pdf]
I think the advertising of pharmaceutical is big loss of faith. Not to mention the opioid crisis.

If medicine was an honorable industry in the USA the might be more faith.
Unlikely to convert anyone, but they are not wrong either.

I don't use BSD, but as a long time user of Linux (started with Yggdrasil) I can't help but think Linux is slowly but surely getting sabotaged. Systemd, Wayland, Pulseaudio, it is all needlessly complicated and introduces dependencies in other software that shouldn't be there.

Maybe I _should_ take a good look at the BSD's after all.
It is a tense. It’s literally taught as “learned past tense” in Turkish schools. It’s similar to present perfect tense of English.
I wonder what will happen to old websites I built with ACF and did not touch for years? Are they vulnerable now, as owners cannot get updates for ACF?
QR Code Beautifier
When "the system" subsidizes your therapy and your prescription drugs (as in most civilized societies), and indeed pays for your medical leave and loses value in the form of lost workdays, it definitely doesn't have much of an incentive to keep you in therapy or on drugs.
The anonymous, anything-goes forum at the heart of the Pelicot rape case
How much uncreditted code do you use?
Be honest. At least in game development, it's normally a huge amount.
What percentage of the population is on GLP-1 drugs right now?

Well "According to KFF polling from May 2024, 6% of all adults report that they currently are taking a GLP-1 drug, and 12% report that they've ever taken a GLP-1 drug".

Is 6% enough to affect crop prices? Presumably some ag economist can weigh in. Note it would only be a reduction per person, not a full 6% reduction in consumption.
SpaceX Plans to Catch a Rocket from Space [video]
ACF isn’t a premium plugin (linked post only concerns those).

The linked post also might not reflect the current policies. This update was a security update and was done due to the unique circumstances around the original publisher.
This gets better by the day.

I'm so rooting for WPE and I hope the judge will lay it heavy.
I have been unable to convince Jason Bahl to share the ~threats~ ~coercion~ terms you used to convince him to join Automattic. Your contribution via GitHub of the terms that you used to ~coerce~ persuade him into defecting would be appreciated.
followers, clicks? anyone who spends a few minutes browsing his repo will know he is a fraud. Here is an example:

https://github.com/kyegomez/AlphaFold3

most issues are people not able to run his code. These issues are closed. The repo has 700 stars.
My lengthy comment was not about value extracted in this video, it was addressing your doubts about the information in it. I personally got value from the subject of the video itself. Which we did not discuss.

It really appears to me that you weren't trying to address any value. What you describe as critical thinking was merely searching for ways to object without thinking too hard about whether it was a fair objection. As an example I point to your failure to follow the trivial mathematical argument saying that LQG models either have to accept that there is no lower bound on quantized area, or that they violate Lorentz invariance. You kept trying to insist that this sounded like she was contradicting herself (she wasn't), and this argument should be resolved by some sort of experiment.

If this is truly the critical thinking that you take to research papers, you're probably not doing nearly as good a job of reading them as you imagine. Meanwhile, back in the real world, I make a habit of attempting to figure out how trustworthy and well-informed each source is. And how objectively they report on what they think that they know. I'm extremely pleased with Sabine. She's very careful to only report as fact things which are true. She's willing to express opinions with no regard to who will agree or disagree. And she's clear on the difference between her knowledge, opinion, and speculation.

Because of this, I've learned to trust her claims on things that I can't independently verify. Her personal reports on the behavior within LQG is of interest to me. The independent confirmation from John Baez, who I've known for years, trust, and has a completely different point of view, makes her description extremely trustworthy. Her claims on that topic are not something that I can independently verify other than to decide which primary sources I trust. And I've learned to trust both Sabine and John.
Indie game developers often don't even credit freelancers who worked directly on a game.