skysight-inc/HackerNews huggingface dataset:
NANOG 93: Interplanetary Internet: Where no DNS query has gone before [video]
Slides: https://storage.googleapis.com/site-media-prod/meetings/NANO...
GitHub flooded with malware repos spoofing real projects–no response from GitHub
GitHub is being overrun with repositories impersonating legitimate open-source projects to spread malware. One of them is spoofing my own app. I reported it through GitHub’s official channels days ago, reached out on social media, and even contacted individual GitHub employees. No response.

This isn’t just one or two cases; it looks like a massive campaign. The repos often copy a real project’s README and structure, though reworded through an LLM, but contain malicious code distributed through releases or sometimes attachments. Here’s one example: https://github.com/ojas1103/CircleProgressKit

Take care not to actually download this unless you know what you’re doing. This is malware.

Some of these have a high number of stars on occasion, though they are sometimes difficult to find because the Threat Actor appears to be constantly force pushing code to force GitHub to re-index it, so they have to be discovered through external indexes.

The malware seems to predominantly contain Redline infostealers. It appears that they may even include some of the recent more advanced 2FA credential stealers.

The worst part? These aren’t getting taken down despite multiple reports. GitHub appears to be a black hole. If someone downloads a spoofed repo thinking it’s safe, they could be running malware. I don’t know how many people have been affected, but it seems to be escalating.

At this point, I’m out of ideas. Has anyone else dealt with this? How do we get GitHub to take this seriously?
Sure, you can clarify why you think someone walking up to and then getting inside an MRI would only experience a specific orientation?

It’s obviously false, but I’m curious why you assume it would be the case.

As to your example, that’s well known even with only 1 in 20 people experiencing it, thus demonstrating my point.
I don’t think you could fairly say Windows 95 is an exokernel to DOS. Windows 95 is a whole OS, which happened to go through DOS during the boot process, and keep bits of DOS around for certain pieces of functionality (device drivers?)

Maybe Quake II on DOS will run with less system memory than the Windows version.
That's neither a new concept, nor unique to Apple. GCC and LLVM are both regularly updated by AMD and Intel who also optimize and patch their own microcode as well. When you compile the Linux kernel, and moreover Linux software, you will be doing it with the optimizations of your chosen architecture. For x86 that means OEMs provide optimizations for stuff like AVX and SSE, whereas Apple works in their equivalent proprietary frameworks like Accelerate. You can credit Apple (or more accurately, Lattner) with starting the trend, but Linux can be compiled using the same LLVM backend MacOS uses with whatever optimizations your OEM supports.

> I remember a tweet from a couple years ago where the hardware-accelerated IPC calls for a system-wide performance gain

Most kernels aren't bottlenecked by IPC throughput like XNU is. A modern Linux system might need IPC for dbus, a few journaling systems and systemd. Apple's entire kernel relies on the throughput of a message queue, so feasibly speeding that up matters quite a lot.
Is this response AI generated or are you lost?
> No idea how that is White supremacist

Because it's a quote by David Lane, and used proudly by neo-Nazis. Please just own the fact that you are Nazi, rather than trying to sanewash your beliefs.

Honestly though, fuck you and your Nazi beliefs. Maybe dang will ban me for saying that, but someone literally sanewashing and defending the 14 Words on Hacker News is insane bullshit. Fuck off.
Visit https://www.reddit.com/r/LinkedInLunatics/ to improve your mood :)
Correct. It is a fascist coup by neo-nazis.
I used to play a MMO on my phone, and I stopped because my opponents were playing 16 hours a day. They would run it at work of course.

I swear to you that one of my teammates said hold on I have to walk into a meeting but once I settle in I can resume with us
Yes as I said "And some of them depend on whether you are comparing to C or C++: compared to C, Rust has many disadvantages, but C++ has many of the same disadvantages, and often is worse."

C++ compile times can be as bad as Rust's or worse. It does depend on how you structure things and how much you use templates. You don't need to have 10 layers of "zero cost abstraction" around everything. But that is the "proper" way to use it and what is now taught, so there is a lot of it out there and the standard library does it pervasively.

Variadic templates don't fix much compared to just writing straight line code or doing a tiny bit more work at runtime using stdarg.h.
Not sure why my comment was flagged, but marcan is Asahi Lina. There is demonstrable proof in threads all over this comment section.
amazing work... thanks to sharing it. all the best from oleron island france :)
Ditto, for me is that I can take the damn geekforgeeks and facebook to "lower". Raise the python official docs since that is most of the time what I want.
No, and it is highly ironic that sanctimonious Dimon is complaining about others’ work ethic when he is where he is only because his employer is deemed too big to fail.

Let’s see him do his “difficult” job without a blank check from US taxpayers.
I was always driven but when I was younger I channeled it into video games and sports.

During the past year it has intensified. I think part of it comes from reading about people with a lot of drive, such as Elon Musk, Kobe Bryant, and Bill Gates. When I read that they are putting in 80+ hour work weeks I ask myself, why can't I do that?
And realistically how many times is Jamie Dimon meeting with the entry level Zoomers? Here and there but the CEO spends his time meeting with exec and mid level management.
No one let's you own ebooks. They all just license it to you for only as long as they feel like.

You have to get a physical copy, to get ownership rights.
Rooftop solar with storage and a grid disconnect is fine. The problem comes about when people expect the grid to be there during the 5% event but otherwise be free (or even worse, that the utility be required to pay them for low-value power that overloads puny distribution systems during undesirable generation hours. It's a matter of economics - centralized generation, transmission, and distribution is expensive. Someone's got to pay for it if we want it to exist. A lot of people crow about their great solar setup and don't talk much about the power that they pull from the boring old grid.

If we're ok with everyone being an island or building a system capable of massively distributed generation, great. It will be massively more complex, less efficient, and more expensive to maintain. Let's just be honest about the nature of the problem.
General Motors and Standard Oil, through Ethyl Gasoline Corp. shared critical leaded gasoline / anti engine-knock technology with Germany, in order to enable their blitzkrieg. "In 1935 Ethyl Gasoline Corporation transferred its know-how to Germany for use in the Nazi rearmament program. This transfer was undertaken over the protests of the U.S. Government."
You might think so. I strongly disagree. I think Rust's supposed memory safety advantages are a distraction. If people really cared about that above all else they would use a memory-safe language, which Rust is not, such as Java or Python or Haskell or something. There are tons.

Governments aren't "bugging" anyone about memory safety and if they were, they wouldn't want you to use Rust. Rust isn't memory-safe.
There is joy to be found. There can be peace, in this life, even walking through the worst of times. It's found in Jesus, and the life-on-life community known as the Church.

We've invented ways to turn down the volume knob on emotions. Anti-depressants, from what I've heard, achieve this (SSRIs?). My understanding, from people who've been on them, is that it turns everything into a muted greyscale. Nothing is very bad, nothing is very good, meh. But what is the human experience except the dynamic range of emotion, rightly felt? We have a perpetual recentering, and without sorrow, without grief, there can be no true joy, because they are in the contrast. Endless joy would just become normal.
Great example of why Tor should not be forbidden: helps anonymity a lot, yet with enough "proof of work," law enforcement can still track down severe crimes. Kudos to law enforcement on this one.
Apart from anything else, I see most people at in person meetings in conferences on their laptops and such working away, that’s not a problem, but doing similar remotely is?

Seems more like neither of them really actually needed to be there. If you didn’t actually miss or note their lack of contribution, then they were perhaps less necessary. I’m perfectly engaged with the meetings that meet those criteria.
Is there any kind of technical write up of how this was accomplished? Looking at the Git history of the branch that introduced the plugin[1] was a bit rough, but I did find an interesting commit[2]. That commit looks like it patches some other code (apparently some pspnet_apctl.prx module)[3] but maybe all the discussion was in Discord and it's not been written up elsewhere?

It's probably unreasonable to ask for such details without delving into how PSP software images are structured and learning that ecosystem. Also maybe it's obvious for someone with a more low level understanding of the WPA 1 vs. 2 differences. But here I am unreasonably curious. :)

[1] https://github.com/PSP-Archive/ARK-4/commits/rev160/

[2] https://github.com/PSP-Archive/ARK-4/commit/edcc6f01618e3e45...

[3] https://www.reddit.com/r/PSP/comments/1igh5c9/wpa2_support/m...
> if it’s shorter than the ceiling then the arms and back form this U.

I'm having a hard time understanding what you mean here.
> But America or at least the electoral college picked trump instead.

Democrats could have picked a better candidate to fight Trump but they didn't.
Look harder Simba, there is no crawling involved
Work is a means to an end of living an enjoyable life, and most tech/finance jobs in the US are overpaid, unimportant nonsense.
I wonder if it's possible to reverse engineer that, rip it out, and put it on Linux. Would love to have that feature without having to use Apple hardware
Is there a better source for this story? This is very tabloid.
He's deeply autistic. It's a thing they tend to do.
Neat idea. I think I’d like it to maintain a global history and local, with some UI affordance to remind me both exist and perhaps what are the last few entries.

A lot of my commands would work in any directory, but sometimes the directory matters and I run it in the wrong place.
I'm hoping to see some smaller MoE models released this year, trained with more recent recipes (higher quality data, much longer pretraining). Mixtral 8x7B was impressive when it came out, but the exact same architecture could be a lot more powerful today, and would run quite fast on Apple Silicon.
It wasn't until 2009 - which is also when my family got WiFi (and switched from dial-up) - that I got mine: a Nintendo DSi.

Objectively, that browser was terrible, even at the time. But the ability to just read text on my own (and not have to ask to use the family computer - and to stay up all night reading under the covers, which was much harder with books) was amazing then! Of course, it would seem so quaint to kids today.
I issued an ultimatum to staff in 2023 that they either return to the office or would be let go, and we saw a dramatic increase in productivity
easier said than done!
I can, and so can many others. I guess it comes down to preference and personality.

I spent so many years in offices, in open plan offices where whole teams would sit with their headphones on loud, trying to ignore the presence of all other humans, that actually working in my own space has been a relief.

In my 40s now though, I work on stuff I’m interested in, and have a work ethic that doesn’t require oversight. 20 years ago I may not have been so good at it.
> At this point, I’m out of ideas. Has anyone else dealt with this? How do we get GitHub to take this seriously?

Not read any thriller / conspiracy novels? :-) The way is to do exactly what you're doing here: take the news public. Very public. The more the merrier. Post to HN, LinkedIn, Facebook, Slashdot, Twitter, TikTok, Reddit, etc. Send email to every news/media outlet you can find contact info for. @mention people who work for CNN, MSNBC, ABC News, Fox News, CBS News, Reuters, Associated Press, etc. on Twitter, or find them on LinkedIn and message them. Write up a press release and submit using PRNewsWire and such-like. Record a video and post on Youtube. Contact the Attorneys General for all 50 US states. And so on.
I mean, it's a PS2, but portable, so more difficult to make and more usable...
Haha maybe not.

https://tldw.tube/?v=A4kpVO56OBU
It’s not active misdirection but it has less than zero value to speculate.

If had a dollar as a paramedic for every time I’d heard “it’s good, I’m not suicidal any more” or “he would never have done that to us so it must be foul play” that then turned out to be, well, suicide, I’d have a lot of dollars. Sadly.
Ask HN: Whats the rational behind flooding mail-servers with random deliveries
hello,

in the last few years i'm observing some recurring pattern on my mail-server system (SMTP):

every now & then, its gets "flooded" by lots and lots of invalid delivery-attempts for at least multiple days up to multiple weeks at a time with the following characteristics:

# low number of delivery-attempts - only one about every 10 seconds

# with a lot of recipients for each single delivery - hitting the max recipient limit of the system

# originating from random ipv4-addresses

# the delivery uses random but "valid"-looking source-addresses

# targeting valid domains on the mail-system itself

# but using random / invalid (!) recipient-addresses - eg. the "local" part

don't get me wrong, i'm not looking for "technical advice", i'm more than capable to handle such lets call it "minor annoyances" all by myself.

but i ask myself the following questions for several years now:

what is the "rational" behind this!?

whats the "object" for people doing this!?

eg. whats the "gain" or the "business-proposal" in doing this!?

any ideas!?

cheers!! :))

ps. sure ... the first idea would be: DDOS, but the frequency of the delivery-attempts is not even close to achieve anything like that ... even if my server-system would be based on some older raspberry pis it wouldn't have much impact ;))
Nope suppose they do need to be there and they arent listening because they're sending text messages and then when they are asked for their opinion they are lost because they weren't listening. This is the norm for zoom meetings.
Too bad it needlessly hijacks the history.
> Soldiers have complained about IVAS being too heavy and making them sick.

That was feedback on an earlier test and iirc those bugs were/are addressed with later versions. Of course there are going to be bugs as the product is developed.
Or, for a lazier approach:

$ head -10000 *
==> package.json <==
{
"name": ...
...
==> tsconfig.json <==
{
"extends": ...
...

$ head -10000 * | llm -s "generate a patch to switch this project to esm"
Damn it's been 20 years since the PSP.... loved that thing growing up.... So much Monster Hunter Freedom Unite... grabbed mine off the shelf after all this time just to feel it again and the battery is almost 1 inch thick.... Guess it's time to go through some of the old electronics and recycle the batteries before they either off gas, or catch something on fire...
What realmode in DOS offered was a boon for beginner programmers, i wonder has anyone done something similar in linux framebuffer without using X server. Perhaps a game in /dev/fb0 ?
> It's found in Jesus, and the life-on-life community known as the Church.

Do you realize how incredibly dismissive it is for people to talk about the pain they feel, and to have someone respond "nah, you just haven't found Jesus yet"?

I was raised in a deeply religious household. I found no peace in Jesus. I'm happy that Christianity works for you, but this is not globally applicable advice. It's also an example of spiritual bypassing.
Counter-perspective, but largely in agreement: I did grow up with a mobile phone and instant messaging and whatnot, and so using Slack (and to some extent, Zoom, as much as I dislike video compared to text) feels very natural to me.

To me, as someone who has deep and meaningful friendships with certain people mediated almost entirely through Discord messaging, which is basically non-work Slack, asynchronous mentorship and collaboration don't seem strange at all. I do recognize not everyone's a fan, and that there is a certain learning curve involved if you're not used to it (gamers, for example, seem to fall into virtual work naturally), but it's absolutely doable and these C-levels who say it's not are behind the curve.
Isn’t the US GDP relative to debt all that matters? The USA is nowhere near broke or collapse (from a fiscal perspective). The GOP seems to create a boogeyman, repeat it, then use it to advance their agenda.
Vivek quit DOGE voluntarily when he realized that Musk was completely off his rocker and wanted no part of it.
A bit of a meta-comment. Something about this piece hits exactly the sweet spot of length and complexity for engaging but still accessible prose, which I feel like has become rarer over time, replaced by the modern writing of instant gratification. (Whether less is being produced, or it's less prominent, or whether the other kinds have become more prominent, I can't say for sure.) I really appreciated it, independent of the subject matter.
This is exactly it, _many_ such simulations and evolutions have been done already, all with incomplete/inaccurate world models, leading to predictions that _might_ be meaningful. I recall a coworker used reinforcement learning to teach a robot to walk — but instead it learned to abuse an error in the physics simulation and shuffle around in a ridiculous manner.
A long time ago I saw Eric do a presentation at An Event Apart in Seattle on something like Designing for People in Crisis. He used his trip with his daughter Rebecca to the emergency room as the example of why it's crucial to have a section of your hospital webpage for people in crisis that is very easy to read and very easy to use in case of shock, trauma and emergency. Things like phone numbers and emergency room drop directions/maps.

I was familiar with Eric's work at the time, but the vulnerability he showed in using his own tragedy as an example of why websites should be, essentially, accessible for people in various states of trauma and crisis was incredibly moving and made the case for accessible design in a personal, powerful way.
Have I? Haven't I? Are you really saying that all these scientists - anyone doing human subject research at least in advanced democracies - are mostly liars trying to defraud people?
And was the whiskey for the sofa or the people?
Thanks, I just find it wild that Microsoft appears wholly uninterested in policing what seems like a huge legal liability to their business. I’ll start reaching out to as many journalists as I can with what I’ve got. They seem a little overwhelmed from the two I’ve already reached out to.

Edited to add: I’ve also been hoping that I could avoid giving the attackers too much of a heads up, but at this point the risk is higher that nothing gets done about it at all.
Why update what isn’t broken?
In the amount of time you spent writing this comment you could have just done cursory google search and got literally right to the leaked audio recordings everywhere:
https://www.barrons.com/articles/jamie-dimon-leaked-audio-jp...
does it? i get pushed so many shorts and 15 minute video essays
Or maybe they do have to be there, but they aren't paying attention? It isn't a given that people will pay attention if they need to, that is the whole point.

There are lots of reasons someone might be in a meeting. They might be there to receive certain information. They might be there because they're going to be assigned work as a result of it. They might be there because hearing the actual conversation with the client is useful for being able to understand the context of the work. Getting that third hand from someone that didn't talk to the client is nowhere near as good. That is what leads to wasting time and money doing work nobody wanted.

Sometimes people just don't pay attention when they should. That is real. It is not sensible to immediately assume they're justified in not paying attention. Even if you aren't needed and you aren't interested, it is your job. You are paid good money to be there. Your contract requires you to follow lawful instructions from your employer. Do the job properly and look at your phone at lunchtime. You don't have the right to switch off and start playing with your phone because you are a bit bored and have the attention span of a teenager brought up on Tiktok.
> _most_ of the federal budget goes to SS and medicare / medicaid

Okay but social security isn’t the government’s money, it’s ours. The program is profitable afaik (gets more than it pays out). Govt is just holding/managing the money and needs to track it as debt when they use that money for anything other than giving to people.
Bingo. Remote work requires/rewards good communication, and amplifies the ill effects of poor communication. You have to put in the effort, but a lot of people don't know how or don't think they need to!
> This is just a trope.

Do you have citations to back up this assertion? The GAO seems to say otherwise[1].

[1] https://www.gao.gov/products/gao-24-106112
> I also tend to believe that wealth is now a more salient determinant of social outcome than race, and using race as a proxy for class is a missed opportunity.

People make all kinds of arguments and we can chase our tails forever, which is why they are pointless without evidence. There are mountains of evidence of discrimination based on race. And now the current US administration and many in the GOP openly embrace many white nationalists and their claims, including replacement theory, etc.

> DEI discrimination isn’t commutative. It explicitly discriminates against the majority group

There is far more discrimination in favor of the majority group. The point of DEI was to address that, but there are other strategies. Do you want discrimination or not?
I think the search term you want is "svgalib" - https://en.wikipedia.org/wiki/SVGALib

It looks like at least some versions of Allegro and SDL supported it as a backend.
I, too, was born yesterday.
I just find their karate abilities quite remarkable
You're free to share a more general answer, should you have one.

And I'm free to share the answer I've found, even as I'm working through the challenges of life.

I've no idea what "spiritual bypassing" even means.
It could be pulling these resources over http ;)

Edit: Whoops sorry, morning fog
I’m a big proponent of optional and required on meeting invites.

Required: tech lead and VP.

Optional: everyone else.

I have nothing against people showing up just because they want to snoop on what’s being said and spending half the time on their phone — but I reply maybe to anything optional sent to me.

I find people sort themselves out if you have enough floating optional invites you can’t attend all of them.
Standard Oil Fuels World War II
this is fixed for in person meetings is it?
The real fix is to have a new web feature which is to have the 'page dom' and the 'display dom',.

By default there would be a 1:1 mapping, but things like browser extensions could write code to define how a particular bit of page dom would display to the user.
Remember when there was a bipartisan bill to fix immigration that had a good deal of compromise in it, and it was all set to pass until Trump told the republicans to tank it so that Biden wouldn’t get credit for it?