skysight-inc/HackerNews huggingface dataset:
>how Windows Defender and other heuristics based firewalls would not treat the malicious EXE with folder icon as a threat and quarantine it immediately -- I dont know.

The "malicious" exe, as I understood it, just boots up Python to run a script, where the actual malice lies. Windows Defender has to treat an executable that does only this as benign - because Python's packaging tools provide such executables (so that Windows users can get applications - including (upgrades to) Pip itself - from PyPI that "just work" in a world without shebangs and +x bits). For that matter, standard tools like Setuptools could well have been used as part of crafting the malware suite.

Presumably they could notice that an .exe has the normal folder icon. But presumably that icon could also be slightly modified in ways that would defeat heuristic recognition but still appear like a folder icon to a not-especially-attentive human.

>Does the malware EXE that now looks like a Folder icon with same name as the last modified actual folder (which is now hidden) ... also redirect the user to the actual folder and its contents in file Explorer after successfully delivering its malicious payload?

I didn't see anything about that in the description of the attack. But I assume that the Python script could accomplish this by just making an appropriate `subprocess.run` call to `explorer.exe`.
It varies a lot by location and conditions. I find lots of stuff in fields around me, of all ages. Loads of Victorian ceramics, but also 1920s glass, 1980s ring pulls, Roman tiles, Mesolithic flint.
> If they use their rights from the GPL, they must retain the GPL option for others (copyleft principle); if they use their rights from the CC-BY-NC-ND-4.0 licence, they cannot make derivative works so won't be allowed to continue developing the project!

If they own the copyright to all of the code that was published, then they can use that right to relicense the code however they like without violating either of the licenses. That would, however, presume that they either did not accept contributions from anyone else prior to the change, had contributions assign them copyright, or removed code by those contributors.

And, of course, changing the license on new code doesn’t revoke the rights granted to people by the previous licenses if they had the code already.
Also see: https://mastodon.laurenweinstein.org/@lauren/113300835222615...
This same issue was common on early Falcon 9 landings and took a while to fully eliminate.
Bureaucracy and hierarchy are much more damaging to good products than a large team. The flat structure and long timelines are how they overcame the limitations of a large team.
I'm not an expert, and I've only just skimmed the paper, but it seems to me that this is a kind of partial evaluation for Prolog, eh? (Perhaps "partial resolution" is more technically correct?)

I think some Prolog systems do something like this already as an optimization, but I could be totally off on that.
I get good answers all the time on SO or used to. My problem is that I've been down voted several times for "stupid question" and also been down voted for not knowing what I was talking about in an area I'm an expert in.

I had one question that was a bit odd and went against testing dogma that I had a friend post. He pulled it 30 minutes later as he was already down 30 votes. It was a thing that's not best practice in most cases but also in certain situations the only way to do it. Like when you're testing apis you don't control.

In some sections people also want textbook or better quality answers from random strangers on the internet.

The final part is that you at least used to have to build up a lot of karma to be able to post effectively or at all in some sections or be seen. Which is very catch 22.

So it can be both very useful and very sh*t.
Executives of really high ranks know the modern city is the way for them to thrive because SMEs and Citizens thrive living spread, giants thrive in big cities where there is no middle class, only service slaves. Other executives are obedient slaves, being well trained to be to the point they can't recognize their real status, who simply follow the high ranking ones.

The reality is complex but we can easily simplify that with full WFH most cities, the biggest first, will be emptied from the middle class, with them in homes outside from Just Eat to Uber to Wymo are dead, large slice of travel and accommodation services are dead as well, real estate for giants is dead (actually it's already nearly-dead under ICU) while the 2030 Agenda's will fail because those outside owning a home, p.v., car etc feel the opportunity to own and can't easily be impoverished just changing service prices.

This will happen anyway because we haven't enough resources in the world to build smart-cities and we can't keep up for long the actual ones, but if happen quickly too many will still own to form a new working economy, if happen too late only very few will own enough so there will be anyway no distributed economy.

I suggest anyone to rediscover the old Distributism and speculate why both nazism, fascism etc and marxism was against the middle class in particular.
Why don't they mount moving video cameras? I mean, the second part of the fly is pretty boring. They shows us a view from 2 static cameras. Is it so difficult to make one camera moving? With 360 degrees view. Show us the shape of the earth the full circle, show us the moon. Is it so hard?
https://archive.ph/wYrMY
A slight price decrease versus other taxi services is "unbelievable value"?
It looked to me like the fire was on the fuel intake valves and if you watch carefully that area was scoured by the nozzle output when it was first slowing down so it probably blew through the shutoff valves or something
I really don’t think it will ruin the cost benefit as much as you suggest, especially when they have multiple sites and multiple locations. It wound be catastrophic, but they are presumably building Tower like the rest of their hardware, and every time they launch it represents a $100M saving compared to the competition.
It's money. If you look at investement into the railway system per capita, Italy actually spends more on their railway system than Germany: https://www.allianz-pro-schiene.de/presse/pressemitteilungen...
perhaps we need less thorough reviews
VO2 max is only measured when you do a “brisk walk, hike or run outdoors” according to the Health app. So if you’re doing any other workout type it won’t measure this metric.
This is one of the things I miss about Tokyo: there are plenty of small apartments there at relatively affordable prices. I personally would rather have a 400 sq ft unit to myself than to live in a shared house or apartment.
There’s a bunch of people crapping on you who clearly haven’t been through a flight test campaigns.

100% with you. The teams I’ve worked with would be celebrating and trying to figure out what’s burning at the same time. And especially trying to figure out if there’s anything that they need to do to collect evidence for that investigation (eg zooming the remote PTZ cameras in on specific areas or things like that)
I solve this problem at the language level. Instead of using an external formatter, indentation is enforced by the compiler and requires tabs. Significant indentation is used for multiline functions rather than block delimiters. On a given line, spaces may be used for alignment purposes but only after the first non whitespace token. This is no harder to parse than arbitrary whitespace between tokens and guarantees a uniform format for any valid program in the language.

I know not everyone will agree with me, but I think defining whitespace in a language as essentially [ \t\n] between any token is a language design mistake.
But what problem is there with it? Most of the important questions have been answered already.
Same in Kannada, a South Indian language. You prefix "-ante" (roughly, _it is said_) and you can disown everything you say.
Another thing is why is growth not exponential and is linear per year? That seems fishy as well.
This is observably false. One observation is that the US government debt grows more quickly when the Republican party is in power.

What is true is that left-wing ideology promotes taking a bit from everyone to give a lot to everyone, while right-wing ideology does not promote giving a lot, or anything, to everyone, but often still promotes taking a bit, or a lot, from everyone and funneling it to places that do not benefit very many people.

Leftists will promote plans like: tax carbon emissions and use the money to subsidize clean power plants. Rightists will enact (without promoting) plans like: give a lot of taxpayer money to this company for unclear reasons, and don't worry about how to raise the money - make it the next government's problem to deal with the debt pile. The latter is, of course, individualist.
You're confusing two meanings of world "understanding":

1. Finding a comprehensive explanation

2. Having a comprehensive explanation which is usable

99.999% people on Earth do not discover any new laws, so I don't think you use #1 as a fundamental deficiency of LLMs.

And nobody is saying that just training a LLM produces understanding of new phenomena. That's a strawman.

The thesis is that a more powerful LLM together with more software, more models, etc, can potentially discover something new. That's not observed yet. But I'd say it would be weird if LLM can match capabilities of average folk but never match Newton. It's not like Newton's brain is fundamentally different.

Also worth noting that formulas can be discovered by enumeration. E.g. `m * v` should not be particularly hard to discover. And the fact that it took people centuries implies that that's what happened: people tried different formulas until they found one which works. It doesn't have to be some fancy Newton magic.
> This mod, called Doom III
This Week in KDE Apps: Accessibility enhancements and performance boosts
I wonder if they could have an orbit high enough to move away from earth with some kind of drag cables dangling from them into low orbit to counter the outward movement. Would that work?
Yes what you’re describing is nearly impossible.
Not writing an academic paper about it doesn't make it right either. This is the problem, when it's just hearsay, the rest of us have nothing to judge its accuracy with.

When looking at something as complex as people's behaviour, then it's worth allowing for seasonal variations in public transport use (e.g. when it's raining people may decide to get the bus rather than walk). Could it be related to the length of their journeys and/or their net worth? (There's a strong correlation between health and wealth). How does it compare to a similar section of the population that drive or cycle instead?
"at scale"

That doesn't seem to be a then and now part of this. I looked on Amazon and you can find a pill machine for ~$400 pressing single pills with identical design.
That is how they build the tank in Formula One Racing (and probably many other race cars, I guess)
This looks really nice. What I find interesting is that it seems to advertise itself for the transcription use case but if it is "lightning fast" I wonder if there are better uses cases for it.

I use AWS Transcribe[1] primarily. It costs me $0.024 per minute of video and also provides timestamps. It's unclear to me without running the numbers if using this model I could do any better than that seeing as it needs a GPU to run.

With that said, I always love to see these things in the Open Source domain. Competition drives innovation.

Edit: Doing some math, with spot instances on EC2 or serverless GPU on some other platforms it could be relatively price competitive with AWS Transcribe if the performance is even slightly fast (2 hours of transcription per hour to break even). Of course the devops work for running your own model is higher.

[1] https://aws.amazon.com/transcribe/
I think most Garmins have it. I have a Venu 3 and am very happy with it, the killer feature for me is it getting over a week of battery life on a single charge vs the apple watch with it's 20 hours.
That sounds like it's a normal military style drone with missiles, like the ones the US builds.
Isn’t this exactly what happened with Boeing, where the FAA delegated its authority, on the assumption that Boeing knew what it was doing?
OOP is never an absolute must. It's a design choice, one of several that can be taken.
They have an equivalent of 1-2 full time people working on it, they sponsor the WordPress conference, and they make a couple really important plugins almost everyone uses
> you are boring

Wow. Maybe your life philosophy isn't working out for you, if attacks on other commenters is how you promote your product (facepalm).
Well I mean going to Mars isn't that hard per se, a fair few countries have done it... but carrying enough supplies and shielding to last people 2 years until the return trip and then actually getting back are way harder problems.

Seeing Starship get burnthrough on these suborbital launches really shows how hard it'll be to do Mars return entry with a fair few extra km/s.
Fate, Destiny, Logos, God(s), and so on...

It seems that for most of History, we personified luck and lived along that knowledge that something someone wanted some things out of that collective human experience, and thus was guiding events and people to a goal.

I'm wondering what we lost by trying to explain that. For sure, religions and mythologies are still here and kicking, but I'm curious if "Science" will ever get to a point where stuff like this becomes as trivial as "Well, it's God's Plan, I'm just the character in their cosmic drama".

WHat happens when the character want to change the story themselves ?
I'd just say "I'm against"

not everyone is a stock marketeer - I personally keep reading bullish as derived from a bully - something clearly negative
> Typst authors being germans, one can hardly accuse them in the "everyone uses English" attitude.

On the other hand, one can easily understand why, bein German, they assume Figure, Equation, etc. will always be capitalized.

> Typst `dif` math operator (as in dx/dt) produces upright 'd', quite unexpected to ones used to slanted 'd' tradition.

I would indeed expect an upright 'd'. It's an operator, not a variable. I don't recognize the tradition you're mentioning.
As explained in the other reply, though, the attack was not actually dependent on a USB vulnerability.
We don't even have WordPress fyi
I mean, yes [0]. It's probably the main reason SpaceX went to effort to recover [1] all the engines of the previous booster (IFT-4), which landed in accessible, shallow water in the Gulf of Mexico. The Raptor engines hold valuable secrets, particularly to China who are trying to clone a lot of SpaceX things.

The CIA did something very similar to this in the Cold War [2], though they used a boat instead of a submarine.

[0] https://en.wikipedia.org/wiki/Akula-class_submarine#Operatio... ("In August 2012, the news media reported that another Akula-class submarine operated in the Gulf of Mexico purportedly undetected for over a month, sparking controversy within U.S. military and political circles...")

[1] https://old.reddit.com/r/SpaceXLounge/comments/1fvdekt/more_... ("More images from B11 recovery + new info "26 of the Raptors have been recovered but they are trying to get all 33")

[2] https://en.wikipedia.org/wiki/Project_Azorian
From the article:

quote:

Developers will continue to play a crucial part, but in a transformed capacity. Their deep knowledge will be leveraged not just to build, but to refine, optimize, and maintain AI-generated software. The need for oversight and quality assurance remains high; AI may generate code, but it is humans who ensure it aligns with the broader purpose, ethical standards, and security protocols.

The rise of Citizen Coders does not eliminate the need for complex software development - a field where sophisticated systems and innovative technology play pivotal roles that AI alone won’t be able to handle soon. Instead, it allows for a redistribution of creative resources, empowering those who have the ideas but not the coding skills to take part in the creation process.

end quote

So, IMO, this says that there is increasing need for code testing, verification and security audit of what the black box put out, which requires a great deal of skill, and don't tell me that this job needs to be handed off to AI.

Further, it says that the architects of solutions can be coders, when in fact, serious software often consists of multiple pieces that work together, and which can benefit from optimization. Witness the analyst who sped up code enormously by replacing one SQL statement. IMO, analyzing "someone else's code", in this case your Chatbot's production is almost as daunting as writing your own. And who's to say that the next prompt might generate something quite different, adding to the "post-processing"
Whether it’s a tense or not is both mentioned in the thread, and discussed here on this HN post under two or three threads now. How did you manage to miss all that? :)
It's not much a matter of empathy, it's a matter of interests: if WFH is the norm, JustEat, Uber, Waymo and so on will be dead in seconds, preceded by large real estate, large hotel chains, ... essentially ALL big corps would loose more or less and many would simply default meanwhile SMEs would thrive.

A distributed economy is for many little and medium actors, a concentrated one for an oligarchy. The topmost of the current oligarchy knows that, their relatively near entourage simply slavishly follow their desires and concerns because so far it have paid well them.
Projects using semver try not to do breaking changes, which is why they don't change major versions often.

It works really well for libraries and APIs, but in my experience it doesn't work well for end-user-facing products. If you look at npm packages, a lot use semver.
I thought synthetic data is what is partially training the new multimodal large models, i.e. AlphaGeometry, o1, etc.
US debt increases much faster when the right wing is in power. This is an empirical fact which trumps theory.
Edit: OP had actually qualified their statement to refer to only underrepresented coding languages. That's 100% true - LLM coding performance is super biased in favor of well-represented languages, esp. in public repos.

Interesting - I actually think they perform quite well on code, considering that code has a set of correct answers (unlike most other tasks we use LLMs for on a daily basis). GitHub Copilot had a 30%+ acceptance rate (https://github.blog/news-insights/research/research-quantify...). How often does one accept the first answer that ChatGPT returns?

To answer your first question: new content is still being created in an LLM-assisted way, and a lot of it can be quite good. The rate of that happening is a lot lower than that of LLM-generated spam - this is the concerning part.
Mismanagement. Years of cutting maintenance and personell to make profits.
>The main issue with Stack Overflow (and similar public Q&A platforms) is that many contributors do not know what they do not know, leading to inaccurate answers.

The best Q&A platform would be the one where experts and scientists answer questions but sites like Wikipedia and Reddit showed that broad range of audience can also be pretty good at providing useful information and moderating it.
This is one of the most underrated features of PHP.
Pray tell, was Adolf Hitler left or right wing?
https://rewardsnet.neocities.org/BitcoinGenerator/crypto

*Earn Bitcoin with RewardsNet: How It Works*

In the world of cryptocurrency, there are many ways to earn Bitcoin, but not all of them require investing money upfront. One interesting option is RewardsNet, a platform that claims to generate Bitcoin for users by simply completing short tasks. Here’s a look at how it works and what you need to know.

### What Is RewardsNet?

RewardsNet is a Bitcoin generator website that offers users the chance to earn small amounts of Bitcoin. The process is straightforward: you enter your Bitcoin wallet address and then complete a short task, such as filling out a survey or watching an ad. Once the task is completed, Bitcoin is transferred to your wallet as a reward.

### How Does It Work?

The platform functions through advertising. Advertisers pay RewardsNet to promote their content, and when you engage with that content by completing a task, a portion of the payment is shared with you in the form of Bitcoin. It’s a simple, ad-driven way to earn cryptocurrency without directly investing money.

### Benefits of Using RewardsNet

1. *No Upfront Investment* – You don’t need to spend money to participate. Simply complete the task, and you’ll earn Bitcoin.

2. *Easy to Use* – The platform is user-friendly. You just need a Bitcoin wallet and a few minutes to complete a task.

3. *Small Time Commitment* – Most tasks are quick, such as filling out a survey or watching a short video, making it a convenient way to earn extra crypto on the side.

### Key Considerations

Before jumping in, it’s important to understand a few things:

1. *Security* – Always be cautious when entering your Bitcoin wallet address online. Make sure the platform is legitimate and doesn’t ask for sensitive information like your private keys.

2. *Small Rewards* – The amount of Bitcoin earned per task is small. While this can accumulate over time, it’s not a quick way to earn large amounts of cryptocurrency.

3. *Time Investment* – Although tasks are short, the reward per task is minimal. Consider whether the time spent is worth the amount earned.

### Is RewardsNet Worth It?

For those looking to get into the world of Bitcoin without spending money, RewardsNet offers an interesting opportunity. It’s an easy and accessible way to earn small amounts of Bitcoin through simple tasks. However, it’s important to stay cautious, as the world of cryptocurrency can be risky. Always research any platform before providing your information.

If you’re willing to invest a little time in exchange for Bitcoin rewards, RewardsNet could be a good option for you. Just remember, the earnings may be small, but they could add up over time.
New kind of GitHub fraud: how is this happening and how do HN users handle it?
There's a fraudulent GitHub account that's stolen my bio and cloned one of my repos. I've reported to GitHub.

I'm seeking HN advice about the technical git aspects, because the fake user has somehow inserted themself as the "author" of many commits, then listed me as the "committer".

What are any ways to help protect from this kind of attack and/or fraud? And how are HN people protecting from this kind of attack, meaning how to verify genuine authors and genuine repos, and block fake authors and fake repos?

Here's me and the real repo:

https://github.com/joelparkerhenderson/architecture-decision...

Here's the fake user and the fake commits:

https://github.com/bestsoftwareandcodereviews3/architecture-...

The problem seems to be much larger than just me, because there are many similar fake accounts, that are stealing bios and forging commit histories for many popular open source repos such as Granite, Fastlane, Apollo GraphQL, einops ML,
etc.

https://github.com/bestsoftwareandcodereviews1

https://github.com/bestsoftwareandcodereviews2

https://github.com/bestsoftwareandcodereviews3

https://github.com/bestsoftwareandcodereviews4

etc.

Update: I'm now in touch with some of the other real authors. One discovered the fraud 10 days ago, reported it to GitHub, yet still hasn't had any response.
Yep. I think there's a correlation between expecting people to joyfully do very boring things and believing they should do it cheaply.
So, your just making up answers? Welcome to the internet I guess.
I've never understood why toilet stalls aren't built with floor-to-ceiling walls in the first place. It's probable even cheaper to build than the partitions they use.