skysight-inc/HackerNews huggingface dataset:
Trumps "promised" tariffs are always worse than Biden's extant ones.

> During his first presidency Trump instituted a limited number of extra tariffs, chiefly against China. Upon taking office, President Joe Biden kept them in place and even extended them. But what's different about these new proposals is that they are rising across the board by up to 20 percent, or so it has been said on the campaign trail.

and also: https://www.nytimes.com/2024/05/10/us/politics/us-biden-chin...
When did it do that? yt-dlp uses .onion addresses for some of the sites.
VirusTotal said it is ok?

https://www.virustotal.com/gui/file/3f6ab524d899f39ef46004a9...
Just from the headline, this reminds me of Microsoft Windows in the 1990s that came with it's on interpretation of JavaScript (aka "we have implemented some JavaScript like stuff that seems to work like Netscape but in fact doesn't")

In general this sounds pretty cool: GJS is built on the SpiderMonkey JavaScript engine. It utilizes GObject Introspection to provide access to the GNOME APIs using ECMAScript 2021 JavaScript.

Just don't compare it with Node.js; it's something else. No, your code might not run in that environment; APIs are most likely not compatible.
> We know that our model would be useless without your source. So we will take the useful part of your source and obfuscate the rest so that we can charge our users for utility provided by you without having to pay you anything.

Isn't this basically the entirety of the latest AI craze? They basically took a public good - the information available on the Internet - and hid behind some thin veneer of "we are not stealing, we just trained an AI on the information" and then they sell it. Note, I'm intentionally not writing "free information available on the Internet", because information is not free. Someone has to pay (in time or money) to generate it and host it. They might have provided it gratis to the public, but nobody asked them if an AI can come along, harvest it all and regurgitate it without a hint of reference to the original source.

Much of that information is not even free in the monetary sense, it is supported by ads. The AI will not only not click through the \ds, it won't even generate repeat traffic as once the information is harvested, there's no need to access the source anymore.

If you really think about it, it's a brilliant business model. It's a perfect theft, where the affected group is too diffuse and uncoordinated, it's extremely difficult to prove anything anyway, and the "thieves" are flush with investment capital so they sleep well at night.

LLMs have undoubtedly great utility as a research tool and I'm not at all against them. I think they (or a model similar in objectives) are the next step in accessing the knowledge humanity has amassed. However, there's a distinct danger that they will simply suck they sources dry and leave the internet itself even more of a wasteland than it has already become. I have no illusions that AI companies will simply regress to the lowest cost solution of simply not giving anything back to whoever created the information in the first place. The fact that they are cutting off the branch that they are sitting on is irrelevant for them, because the current crop of owners will be long gone with their billions by the time the branch snaps.
Oh god, yes, I remember we’ve got D-Info (German/“D”eutsches phone book) which had that feature. And because the phone books were copyrighted by the phone company’s publisher, the creators of that app hired cheap workers to manually read the phone books and type everything into a database. Similar to clean room design in software development.
Google Maps has a pair of buttons for you to confirm or deny that a hazard like a stopped vehicle is still there. But they're right next to each other. Two buttons that do the opposite from each other, irreversibly, and they're millimetres apart. Pressed while you're navigating a hazard.
Regardless of the naive algorithm, wouldn't this also match empty cells?
The only thing VirusTotal would tell you about, is already known patterns of virus/malware. If there is a novel/different way of doing something, and/or it hasn't been noticed by the AVs they're collaborating with, you'll end up with everything green.

PoC Rust program that takes the contents of .npmrc and uploads it to a random IP (DONT RUN THIS! It'll steal your npm authentication token): https://gist.github.com/victorb/adf0ac8b7ada8d5a4982462e24e8...

"No security vendors flagged this file as malicious" = https://www.virustotal.com/gui/file/b99b86a5ce3aa24b39ec53dd...

But clearly, it is malicious :)
We’ve already got several of his longer works,[1] but none of his shorter pieces, so I’ve started work on producing a public domain compilation. Hopefully will be up in a couple of weeks; all in it comes in at under 70k words.

[1] https://standardebooks.org/ebooks/e-m-forster
These critiques are disheartening. "We can't do this. Bad things will happen..." oblivious to the fact that the status quo isn't working to the point that such things get proposed.

At some point the cycle needs to be broken. I'm not advocating such proposals (as Trump's). I am championing the idea that the current status quo is sociopolitically unsustainable and that critics need to do better than "no" as the answer to any change. We can't keep doing insanity.
On a more deep level "bad" ideas are driven by consumerism/capitalism in general. It's a mere reaction to management demands.
Well I was thinking about a single person, and it would be hard to stage 50000 of anything without being noticed.

Part of what makes drones so scary is how you have no effective way to defend against them, and part of that is not being able to see them coming.

You can see 50000 coming. You can defend against 50000 by getting inside a structure.
The Artificial State
Clearly that first intuition doesn't work. The Hamiltonian cycle for decimal numbers is perhaps an equivalent of grey code? And if it exists, is there a connection with the Rubik's cube cycle?
Did you open an issues on their GitHub page?
Look at other tabs https://www.virustotal.com/gui/file/3f6ab524d899f39ef46004a9... at the bottom you can see the commands that looks like the program trying to delete down syslogs.
Look also in the relations tab that shows some tor nodes.
TLDW Summary: Its not about Palworld. Its a Sony vs Nintendo spat. A proxy war if you will.'t
https://archive.ph/gXqOf
I Built a Summarizer Tool in 6 Hours Using Cursor Without Coding Experience
I don't understand, the op claims the alert came from Virustotal.
Could you please recommend a guide for how to set up something like a Slack/Discord replacement with Matrix? Do I understand correctly that this will be self-hosted?

I find it very difficult to get good solid information on actually using Matrix in the ways I use Discord.
A MITM attack requires some kind of access to the target or the server. You can't just intercept connections of whoever you want on the Internet.
Show HN: A site to get traffic and do-follow backlink for your SaaS
What you get:

High-quality do-follow backlink to enhance your SEO.

Featured listing on the directory for increased visibility.

Exposure to thousands of potential customers and early adopters.

Periodic shoutouts from the founder's Twitter account and newsletter.

Requirements:

Your service/application must be functional and deliver what it promises

It's 100% FREE to submit your startup (optional $29 to fast-track listing)
Wouldn't it make more sense to create an issue on their GitHub repo about this?
Remove Xiaomi bloatwares using adb on Linux
Related thread about a year ago https://news.ycombinator.com/item?id=38590156
Also look into ASP for the real mind blowing one. Specially clingo/clasp.
Much more powerful than Datalog, can even solve optimization problems without being turing complete.
Worth trying something akin to a kickstarter?
Is the Q source the origin of the Gospels?
While I don’t disagree that in the end, the only meaningful measurement is business value, I’m not sure it’s fair to put the value of John’s implemented features against the value of mine. Neither me, nor John had very much say in which feature we get to implement (assuming we are both, say frontend developers. Might make more sense if John is in devops)

Those decisions are usually decided from higher up than developers.

Maybe John got the job of fixing the advertising embed code in the html template, because he’s a junior and its basically just copy paste from the documentation and since all revenue come from ads, he is now responsible for the most valuable feature.
Ah, the number of days in 400 years is 400 * 365 + 97 = (57*7+1) * (52*7+1) + (14*7-1) = 0 mod 7, so indeed it doesn't work out.
You forgot the targetted ads, with the subscription tier to reduce it from 100 ads per page to just 10.
Intel may have incompetent leadership but they nonetheless have valuable capabilities which, presently, need to be preserved for strategic reasons. Letting those capabilities go isn't an option. If that means protecting Intel from their own incompetent leadership, so be it.

This is little different than the time Boeing got caught doing illegal corporate espionage against Lockheed, but possessed a launch capability that the American government needed. Boeing wasn't allowed to fail as some here probably think they should have; instead their launch business was merged into Lockheed's, forming ULA, to ensure that both could continue.
I feel that is too complicated. The most simplest explanation is usually the right one. I think we live on an earth with actual history. Note that this does not necessarily mean that we are not living in a simulation, as history itself can be simulated.

If we are indeed in a simulation, I feel there are too many details to be "designed" by a being. There are too many facts that are connected and unless they fix the "bugs" as they appear and reboot the simulation constantly, I don't think it is designed. Otherwise we would have noticed the glitches by now.

If we are in a simulation, it has probably been generated by a computer following a set of rules. Maybe it ran a simplified version to evolve millions of possible earths, and then we are living in the version they selected for the final simulation? In that case all the facts would align and it could potentially be harder to noticed the glitches.

I don't think we are living in a simulation because bugs are hard to avoid, even with close to "infinite" computing power. With great power comes great possibilities for bugs

Perhaps we are in fact living in one of the simplified simulations and will be turned off at any second after I have finished this senten
Location: New Jersey, USA

Remote: Yes

Willing to relocate: No

Technologies: JavaScript, TypeScript, React, React Native, Redux, Next.js, Prisma, Apollo, GraphQL, Node, Python, PostgreSQL, Supabase, UI/UX, WordPress, CSS, SCSS, CSS-in-JS

Résumé/CV: https://drive.google.com/file/d/1zGRzevWfXu2MLdpPpVcf_Cn3pkH...

Website: https://tyrpien.com

Linkedin: https://www.linkedin.com/in/bartlomiej-tyrpien-a1708968

Github: https://github.com/bartlomein

Email: bartlomiej.tyrpien@gmail.com

Introduction: Full Stack Software Engineer with 7+ years of experience building scalable, high-performance software solutions across fintech and digital platforms. Skilled in front-end and back-end development, API design, and team leadership, with a focus on creating user-centric applications and driving performance improvements.
It's literally the stated goal of multiple right now to achieve AGI.

GP clearly stated the intent to create, implying future, and not what exists today.
> even when removing features is more efficient

Efficient in what sense ?

> Our conclusion is that people systematically overlook subtraction; it’s not that subtraction is always better

My personal experience agrees with these findings, but I think they missed something more important. People try to change things because they want to see something new in the real world. But from ideas to real world impact there is always at least one level of 'approving' you will have to go through. And adding things will generally have less risk associated.

Besides that, I think our education system doesn't train us to remove things. Everything we learn is incrementally built upon what was already there. So our default mode of thought is to add things.

Now imagine we have 2 developers, one how always solves problems by adding something new and another one that always refactor things to keep things efficient.

My guess is that by only adding things you will end up delivering more features with less bugs. Sure your code will be slower and at some point it will become impossibly complex to manage, but it takes quite a long to time to get to this point.

After writing this message I've realized that 'making things easy to delete' is a pretty important feature.
To you first point: that’s one reason why I believe the "there was ancient super civilization before but got completely eradicated" theories don’t make a lot of sense.
Can you produce some evidence, even a screenshot? It would be helpful.
Unfortunately most people seem comfortable with the idea of a Ministry of Truth, at least here in Brazil and from what I read on the web, in many parts of the world also.
This is my opinion as well, but unfortunately isn’t always held by others. I once interviewed and by dint of knowing Python’s itertools module, absolutely destroyed the interviewer’s questions that they clearly thought would take some time to do.

I was told later that while I “obviously knew Python quite well, it didn’t give a good signal for my capabilities.”
> So these robots are $2000+ is that normal?

In the field of robotics there are a lot of things that are expensive to do well, but you can do them badly at a much lower cost.

For example, for many industrial robot arm applications you need an arm that doesn't wobble - so you need stiff links and low-backlash actuators. You need to be able to precisely follow straight lines, so your position control feedback loops need to run fast. Six-axis control of the end effector is standard, gotta be able to move and rotate in X, Y and Z to accomplish arbitrary assembly tasks. And of course it can't be slow - on a production line, throughput is money! Don't forget the need for reliability, a design for 24/7 operation, and availability of maintenance and spare parts for 15 years. $20,000 please.

On the other hand, a robot arm for educating kids? Doesn't matter if it wobbles, or if it's slow, or if the position control isn't great, or if there are some rotations it can't accomplish, and it easily breaks. It'll still be cool and teach the kids plenty of stuff. $200.

$2000 is a typical price for a university group project that'll land somewhere between the two.
I think he might be talking about the "relations" tab. You can see the "Contacted IP addresses" section that claims to be "contacted IPs by the file uploaded to virus total". If you click the IP some will have detections and flagged as bad or criminal.

https://www.virustotal.com/gui/file/dcca6afb6ac9770d4d3425c3...

Says it contacted 45.66.35.11 and you can see its a tor relay https://metrics.torproject.org/rs.html#details/7EA6EAD6FD830...

Though haven't looked at how yt-dlp works, I'd guess yt-dlp might attempt to use tor network in case some IP or network is blocked and can't reach a server.
Easy dive/snorkel on some of these ruins. Most features are at ~15ft. Highly recommend if in Naples area. See: https://www.subaia.com/underwater-archaeological-park-of-bai...
What does this mean for `pip` wheel? I only see source files in the wheel.
It seems like stock markets, a lot of bubbles pop, and it's easy to miss the trend .. every 5 years some progress is made.
that's for stickiness, this is for conductivity
(This green-account poster and post were auto-flagged as spam, but I've spent a [vouch] on them. Be aware that the reply comments they are writing in this thread are also hidden by default).
This is not "shutting down" rsyslog. The kill command sends a SIGHUP to rsyslog, which causes it to reopen its log files - what you are seeing is a normal logrotation, not an attempt to terminate the process.

I suspect virustotal did the check in a container with a logrotation job still running, and it happened to run right in the moment when yt-dlp was being tested.
Just stop coming up with hot takes.
SEEKING WORK | REMOTE (Part Time/Contract) FULL STACK DEVELOPER Time Zone: US time zones Technologies: React, Vue,Typescript, Express/Node, Mongo, Mysql, AWS(Serverless), Laravel/PHP, Jest, Cypress
Email: me+hn @ segoviacristian dot com

Based in: Latam

Have 5+ years of experience working at US based startups and small companies. Looking for full stack roles with a bit of AWS(or more), though open to frontend or backend roles as well. Grew up in the states, so native level English.
Using both feet is a potential solution here, though I've heard some newer cars respond poorly to that.
I don't see anything trying to delete syslogs. There's a line for reloading new configuration (kill -HUP ...) - is that what you meant?
I’ve still got two MR3040. TP-Link hasn’t released any update for them in years. You can run an older version of OpenWrt on them, but there’s no real point. These things don’t even support 5GHz WiFi.
I use this daily, and let it use browser cookies. So I hope it's not.
It is unfortunate that after all this time the basic reasons why systemd was introduced and has been so successful are pervasively misunderstood.

> The majority of Linux users are uninterested in the pros and cons of systemd. A small number are violently opposed to it, and a small number are violently opposed to those who are opposed to it.

Starting out by framing systemd in terms of opposition deliberately steers attention away from the issues that drive its adoption. The tone is moderate, but this is not good faith argumentation.

> I think there’s little argument that the main target for systemd is a general-purpose computer, with a modern, integrated graphical desktop

That is one of the targets. The main target is servers that run the web of services typically required to back up modern applications. What if an application depends on a resource server which itself depends on a remote filesystem being mounted and an event service running. Theoretically that can work with System V init, but how tricky is that to put in place and make robust? Administrators for systems vending complex interdependent services are the main target and always have been.

> Unfortunately, what makes systemd good for general-purpose desktop applications

Get it wrong and then run with it. Failing to understand what is driving adoption of systemd leads to arguments about it that don't really go anywhere.

> The more fundamental problem is that the people who most like systemd are distribution managers. Sure, there are administrators who like it, and defend it vigorously; but most end users and administrators don’t really care.

Not distribution managers, but system administrators. They are the ones with the complex needs that systemd serves. As such they advocate for it and because of the lack of working alternatives distribution managers switch to it in order to please the largest number of clients. Thinking of systemd in terms of desktop systems and distribution managers means misunderstanding why it is there in the first place.
That method might work but glambase is a lot faster if you actually wanna monetize
OpenPaX Announced as "Open-Source Alternative to GrSecurity" with Kernel Patch
PropelAuth (YC W22) is hiring Fullstack and Rust engineers
What's [vouch]?
Yes exactly, at some point I asked to maintain it and kinda redid it. Now I kinda consider it "done", as in "maybe some more work would be put into it, but by end large I don't think it's going to change in the future".
Do you have any resources on that topic? I’d be interested.
There is nothing about stopping/killing rsyslog in thst virustotal output. `kill -s HUP` sends SIGHUP to a process (read rsyslogd(8) to know how it interprets HUP).

It seems like virustotal also records unrelated processes running on that host, logrotation is a normal thing.
I love it! It would be amazing if you could allow users to customize the prompt for each style and to add allow adding custom styles (as categories).
Fortunately, I did learn early on that stressing about sleep, especially as I lie awake in bed, was making things worse.
You mean this `systemctl kill -s HUP rsyslog.service` ? This just tells syslog to reload itself
I join from the official matrix.org server.
It also federates to Gnome server and maybe some others, but they never synced properly so I never used it.
A high-performance, general-purpose graph library for Python, written in Rust
Is it using Tor to download content?

(The second part of your comment was just normal log rotation as it turns out)
Increasingly more and more often the bureaucrats at gov offices tell me "no, that's not possible, the computer doesn't allow it" - to requests that are not only possible but even required by law. Unfortunately it practically always devolved to a screaming match (even though I never raised my voice)...
agreed , not sure why they think that ycombinator cares more than their official github repo page
Missed name opportunity: Dinnder
See https://news.ycombinator.com/newsfaq.html

> If you see a [dead] post that shouldn't be dead, you can vouch for it. Click on its timestamp to go to its page, then click 'vouch' at the top. When enough users do this, the post is restored. There's a small karma threshold before vouch links appear.
> The "idea" I'm talking about is privilege dropping.

OK. But privilege dropping alone does not a sandbox make.

> seccomp-bpf and pledge are both tools used to implement sandboxes in browsers.[1][2] Maybe you don't like this terminology, but it is quite well established at this point.

A browser sandbox is quite a different thing from an OS level sandbox, which is the context we are discussing sandboxes in.
Exactly, because I don't care about the plumbing in my house unless it's really bad. Systemd is opinionated and quirky but it does the job just fine for 99.999% of people and it provides a standardized approach to things just by virtue of how it works, and there is a lot of value in that.
Dice.
As others already have pointed out, people can change and trusting them during installation doesn't mean you want to have to trust those same people for as long as you use the software.

But also, SSL certificates don't certify the people you are connecting to but instead certify control over a domain which can change hands for various reasons.
It's very noble of you to work for free. Oh what's that, you don't? Interesting.
My oven doesn't have a touchscreen but it does have touch controls and it works perfectly, it's never disturbed by the steam from the oven even when it quite visibly condenses on the surface.

My point is that it isn't always a design failure to use touch controls, sometimes it is an implementation failure that makes them unusable.
I had always know him as a visual artist so I was recently very surprised to learn that not only does Robert Crumb play music but he's actually been in a few different bands.

It's a bit too early in the morning for me to find the specific albums that I found enjoyable so I'll provide the links to the bands and perhaps others who know more about the musical performer side of Crumb can expand on this.

https://en.m.wikipedia.org/wiki/R._Crumb_%26_His_Cheap_Suit_...

https://en.m.wikipedia.org/wiki/Eden_and_John%27s_East_River...
There are many, many libraries that have sections that have an almost military-level protection (protected atmosphere, security, and so on) I think humanity has done a good job in general on this front
Golang Aha Moments: OOP
$2.50??