skysight-inc/HackerNews huggingface dataset:
As usual, I read the comments here first. I'm glad I read the article though because the comments here have pretty much nothing to do with the vulnerability. Here's a summary because the article actually jumps over explaining the vulnerability in the gap between two paragraphs:

This service is a kind of "app store" for JS applications installed on desktop machines. Their service hosts download assets, with a small installer/updater application running on the users' desktop that pulls from the download assets.

The vulnerability worked like this: the way application publishers interact with the service is to hand it a typical JS application source code repo, which the service builds, in a container in typical CI fashion. Therefore the app publisher has complete control over the build environment.

Meanwhile, the service performs security-critical operations inside that same container, using credentials from the container image. Furthermore, the key material used to perform these operations is valid for all applications, not just the one being built.

These two properties of the system: 1. build system trusts the application publisher (typical, not too surprising) and 2. build environment holds secrets that allow compromise of the entire system (not typical, very surprising), over all publishers not just the current one, allow a malicious app publisher to subvert other publishers' applications.
Yes it clearly does. A comment that is 100% noise and adds no value whatsoever to the codebase demonstrates a lack of expertise. I would expect undergrads and very junior engineers to write comments like this and then very quickly stop when told why these sorts of comments are a straightforwardly bad thing.

Comments are good. I am a huge proponent of more comments over fewer comments. I have written functions where 80% of the lines are comments. But this is a bad comment for very simple to understand reasons.
The ad blocking might work however

1) Their customers (i.e. advertisers) don't necessarily know that, and they only care about aggregate

2) They still have your data which can be sold off to others who have other ways of pushing ads to you
Wouldn't it be 1536-bit for 2 256-bit FMA/cycle, with FMA taking 3 inputs? (applies equally to both so doesn't change anything materially; And even goes back to Haswell, which too is capable of 2 256-bit FMA/cycle)
Likewise. It’s effectively like a wealth tax with better incentives.
OP is an adult who published his writing and posted it here himself for feedback. It's not all going to be positive.

> I get the sense that you’re frustrated that something you’ve invested a lot of time and energy into learning is being automated. Maybe you’re scared because the technology has moved so quickly and your understanding of how to use it hasn’t kept up

Wrong on all counts. I use LLMs to write code all the time, and I know how they work, which is why I find processing 5MB of JS through one to be an obscene waste of energy.

I do not use LLMs to publicly claim abilities I don't already have myself. Reading this article does not worry me one bit about my job security.
Run a dns server like bind first to serve locally only defined and host zone if a domain home.lab
In the zone define it's dns server and a and mx records with mail.home.lab which can be same server
Install SMTP server like postman
Configure to serve emails as local for home.lab and you are set
Not from our memories.
In addition Trump Tower was opened in 1983.
I intentionally linked to variations on that wording to show there's a pattern. If you're looking for those exact words, you can find plenty more examples online.
Debt: The First Five Thousand Years (David Graeber, 2010)
Boeing right now is in a terrible place. They have cost+ contracts for Orion and SLS - key components of the Artemis program. Cost+ means the government pays all of their costs and then gives them a fat chunk of profit on top. The problem for them is that when/if they ever deliver on those contracts, that's pretty much the end of them. They simply lack the technical capability to compete with SpaceX.

This means that so long as they keep working on the SLS and Orion, the money keeps rolling in. But if they ever succeed then their Golden Goose, of taxpayer money, dies. There was a recentish WSJ report suggesting that they are looking into spinning off/selling their space division, and it's probably related to this. Great legacy, but they seriously need a complete reboot in the present.

SpaceX by contrast is, more or less, in their prime. They're going to complete the project, not because of Artemis, but because they want to get people to the Moon as well as to Mars. It's just a part of their operational goals which they have been directly and working towards, with steady progress, for many years now.
Probably. By the time I check this it's already gone.
The account has been privated now.
Can someone explain what Trump means by that there’s a ”world war 3 in the pot”?
What is your preferred alternative to fund basic common services required for a modern society?

And what are the pros/cons and outcomes of your preferred alternative?
We used to have half-decent media-reach ownership rules, but those have been greatly relaxed this century, and desperately need to be strengthened and extended to the Web.
Show HN: I built a fast, single-file TUI Finnish-English dictionary in Go
I built this mostly to scratch my own itch. It turns out I've gotten quite positive feedback from other places I've put this, so now I'm putting it here in case anyone wants to take a gander. Critique is welcome, as this is HN of course.
Same. Consider putting the demo in a separate page.
Librewolf 135.0.1 is working as expected (FreeBSD, Windows and Linux)
I don't have a great sense as to how this works across the world, but where I'm at (Seattle) your property tax is a factor of both the improved and unimproved aspects of your parcel. The improved ones being the value of the buildings and the unimproved being the value of the land itself.

If you had a massive plot in an urban area, undeveloped, presumably the unimproved portion of your property tax would be quite high! But, the issue is that restrictive zoning means that typically the unimproved value of your tax assessment are pretty low.

For example, if you live on 2 acres, but zoning says that you can only put 1 dwelling unit per 5 acres, then you can't really do much with the remaining acres. As a result, the remaining land has little value, and the tax on it is low. This is especially true in areas of little industry, where the same zoning regulations might also prohibit industrial or agriculture uses on that same plot of land!

This is all to say that the structure you're looking for may already exist, but the issue is still in zoning.
Now the debate begins on whether downloading Twitter DMs is an official government duty.
Also superior since I can see the replies.
my wife had experimental spinal intervertebral disc replacement surgery 20y ago. Nothing was "fixed" they just replaced the soft tissue with something that resembles a polyurethane o-ring. Turns out the USPHS didn't believe in this procedure, so they just stopped doing it.
I think the problem is the layer model. ARP and TLS and all those routing protocols don't really need to exist. Insecure connections don't need to be there. It all seems to be full of legacy stuff.

Which is probably a good thing because standardization and compatibility are really nice, but I think we could do way better today.

I don't know why it can't just be something like:

* Get the address from DNS. The address has the key hash in it.

* Use the routing prefix on the address, or LAN discovery, to find the server

* Do a handshake and make sure the public key hash matches the address

No certificates, no NAT, everything just works, LAN connections are secure, devices are identifiable between networks, if they don't want to be they can use new keys.

Routing prefixes could have a fixed layout so it's easy to identify individual subscribers for rate limit purposes.

Alternate P2P routing mechanisms could be automatic and transparent.
Europe will never be the same but that was the end of something else
> They also do not, of themselves approach AGI without the addition of numerous other ingredients, particularly training data, alignment, and prompt engineering.

That's also not true. A base LLM like GPT-3, without any (specialized) training data, alignment, or prompt engineering, embodied quite a bit of agency (able to answer questions, simulate coding, or take actions in a while-loop), and in principle, can be AGI if scaled up. Consider Gato for an example: no alignment, no prompt engineering, just a GPT on data. This is unlike a stone soup which is completely un-nutritious without the villagers donating all the edible ingredients to make an actual soup, where the stone itself does nothing (a LLM definitely does something); the two scenarios are different qualitatively, not just quantitatively. Gopnik's analogy and goal for her analogy are both irretrievably flawed.

> All analogies melt if you push them loudly enough.

This analogy didn't melt after being pushed too far. It caught on fire spontaneously in the garage while no one was looking before half the parts arrived or had been unpacked.
> People broadly like ... american culture

I don't think so. Admire its riches, and unwaveringly aggressive pursuit of commercial success perhaps, but like its culture, beyond the Hollywood blockbusters? That's not so common.
> No magic.

There's plenty of magic. I think that Electron Forge does too many things, like trying to be the bundler. Is it possible to set up a custom build system / bundling with it or are you forced to use Vite? I guess that even if you can, you pull all those dependencies when you install it and naturally you can't opt out from that. Those dev dependencies involved in the build process are higher impact than some production dependencies that run in a sandboxed tab process (because a tiny malicious dependency could insert any code into the app's fully privileged process). I have not shipped my app yet, but I am betting on ESBuild (because it's just one Go binary) and Electron Builder (electron.build)
I hope someone uses ai to port this to a solid upgrade I can play on my Mac or iPad
It's a skill issue if your code looks like AI code, regardless of whether you used AI or not.
The final nail – mapping animal exploitation in the United States
I believe it is a misapplication of entheogens to try solving "IQ problems" with them. I've found them to be incredibly valuable for personal development and solving "EQ problems" - the kind that my sober mind didn't ordinarily process much at all by default, being on the autism spectrum. Psychedelics for me allowed me to become intensely aware and attuned to the emotional and psychological state of others and allows me to imagine myself in their shoes and empathize with their struggles in life (even if entirely unrelated to anything I've ever personally experienced). This altered state of mind introduced me to an entirely new way of thinking that had led to me being a kinder, more compassionate, more considerate, more socially capable person in a persistent, lasting way that has long outlived the psychoactive effects of the psychedelics.

Psychedelic culture has this notion of "reintegration", where in the week(s) after a trip it can take some time to fully internalize the epiphanies and lessons from the trip. During my first reintegration, I realized that I kinda used to interact with everyone in the world in a manner roughly analogous to really advanced NPCs in a role playing game I was forced into called life, and had no realization that I was doing this and lacked full appreciation for the depth of other people as human beings for the first quarter century and change of my life.

Accordingly, I see psychedelics as a profound tool of interpersonal growth and development, but never the kind of thing I'd take to try solving a vexing technical problem - that's a different job that takes a different tool.

PS to anyone else reading: this should not be taken as an endorsement or recommendation for anyone to attempt to procure and use psychedelics. There are serious mental health risks involved for vulnerable populations, risks of contaminated or laced products if procured from untrustworthy or disreputable sources, and more. If you are unsure of whether you're a part of certain vulnerable populations, I'd urge you to consult with a qualified, licensed therapist or mental healthcare provider to get a less-biased second opinion on whether or not you're at elevated risk, just to be sure, but remember this is just one of several risks.
Tired of struggling with stubborn fat? KeySlim Drops is your ultimate solution! This fast-acting, all-natural fat burner boosts metabolism, suppresses appetite, and increases energy to help you shed pounds quickly. Thousands of happy customers are already seeing incredible results – and you can too! Don’t wait to feel confident and energized in your own skin.

Click “Order Now” to claim your discounted bottle and start your weight loss journey today!

Your dream body is just a few drops away – act now!
Of course DNs server to act also as resolver to forward for other DNS requests and also set the dns server as default for all servers in the lan, can be distributed by DHCP as well
No, those are not the same thing.
I'm not asking how to go about requesting his code, I'm asking whether the policy you cite allows him to decide what is public domain himself or if one has to work through processes and procedures to release and obtain that code.
I wish I could downvote all these political topics to get them off the front page; they're so toxic. I feel like the submission system has been taken over by political operatives, which is disappointing.
This may or may not be breaking the law, but who is checking? Where are the controls? Forget checks and controls, there is no willingness on anyone in power to even ask the question.

Ironically, fear of losing power has paralyzed everyone that objectively have no power in Washington as they just exist to please the two presidents.
> ASML having a quasi-monopoly in lithography machines are nonsense

They absolutely do, and it's becuase the US chose to give it to ASML Holdings instead of Nikon due to antitrust concerns in the 2000s-early 2010s.

> Could you define "all"?

Lithography machines are complex and filled with several parts. The primary part that allows you to do light based lithography is the Light Source - a very advanced form of Laser. This is what Cymer manufactures and developed in conjunction with Lawrence Livermore National Labs. But technology in isolation is useless - it needs to be capitalized in order to be built and utilized. This is why LLNL brought ASML in as a private sector partner for Cymer.

> That makes the China vs Taiwan debacle even less important to the US

The "Taiwan Chips" aspect was always nonsense that was literally lobbied by Intel in 2019 to force TSMC to burn $20B building a factory in Arizona while giving Intel some breathing room to build a Foundary IDM.

Also, the intermediate parts for fabrication are largely manufactured in Japan and South Korea. There are a number of vendors in Taiwan now, but there is an ecosystem in the other two as well.

> less important to the US, since there's nothing to worry about.

Wrong. Taiwan is part of the first island chain. Without Taiwan, much of the US's Pacific seaboard becomes very difficult to defend, and leaves us open to a Pearl Harbor 2.0.

Even in 20th century, the only time the US ever lost land was to the Japanese when they invaded American Phillipines, portions of Alaska, and planned to invade Hawaii.

This is why you see horrible unseriousness about Ukraine by US admins. Ukraine is bad, but Taiwan is existential for the US, and why just about every US admin is much more worried about China compared to Russia.

No European nation other than France has the capacity to help us in the Pacific, so they may as well help load balance/burden share in Europe and MENA. It will make both North America and our European allies stronger.
I agree that we need to break up large conglomerates and corporations, but I don’t think this is what caused the decline in media trust. The media breathlessly reporting fake stories and denying true ones did.
Yup, it was a gish gallop with a dollop of DARVO.
> Rocket equation applies to more than just chemical fuel

But it doesn’t apply when you’re collecting energy in situ. The article proposes solar panels. Rocket/wagon equation doesn’t apply.
Or just setup Redirector* to automatically redirect you to xcancel (and old.reddit.com, and away from whatever other hostile websites there are these days...)

* https://github.com/einaregilsson/Redirector
A big leap was when the then-independent big three TV networks sold themselves to conglomerates. I think all three sold in the 1980s.
Oh good, they are just arbitrarily risking it being ineffective. My bad. I read a similar article to the one you link that I think didn't have the numbers, just talked about cutting the staff of the two locations.
GP mentions that this is a textbook unnecessary comment and I would beware any textbook and professed expert that disagrees.

Whether a LLM coding model demonstrates understanding of unnecessary comments might be interesting, as would any differentiation in quality if my prompt asked for more or fewer lines of comments.
There is an argument that the loss of dynamic range and other factors in the compression required in mp3 or CD recordings make the latter inferior to vinyl. This was a prolonged debate forty years ago
For the most part, google drives me to documentation rather than Stack Overflow. Much faster than chatgpt can produce the answer, I might add.

Sure, not all questions can be answered with documentation, but once you know your domain and tech stack well most of these resources fall off a cliff in terms of value. Curiously at that point it's much easier to use ChatGPT because you can babysit it with one eye while thinking ahead with the other.
I don't like Trump at all, but I'm not blind to history. He likes building things, particularly with his name on it. Even with Gaza his inclination is to build something in that completely devastated area.

He's also very sensitive to public opinion of him, and he knows public opinion is against military conflict. People are sick of it.

So war is the complete antithesis of everything he's ever demonstrably cared about. That's a pretty solid piece of evidence that lets you distinguish what seems reasonable, but that gets conveniently ignored by people that let their feelings about him influence their judgment.
> This is moving goalposts as it has little to do with my original premise.

Your original comment was (replying to one) about “decompilation” of binaries. You seem to be talking about some fantasy perfect decompilation that gets variable names too, but no such decompilation tool or human-employable method does this, and I would argue that variable names aren’t information so much as they’re implicit context - proper code implies certain variable names (stylistic differences notwithstanding) and vice versa.
> What are you going to do about all these bigoted people in your community who view other people as subhuman?

Not much. What’s your point?
It "worked" for the UK, now the cost of water keeps raising and the level of service keeps going down.
I read the blog post (especially in combination with the end bit) at least in part, as an advertisement for the author's capabilities and services.

That makes the tone make a bit more sense to me.
> If you sell the information how many customers you have and how many shoes you've sold last month, are you selling your customer's personal data?

To make that analogy fair for the scope of what Mozilla's doing, the shoe store would have to be selling data about what color shirts people are wearing when they visit the shoe store.
Glad you agree!

I'm just pointing out that the most plausible reason your fellow countrymen choose to call themselves "expats" wherever they go, is because the rhetoric in your country has dehumanized or made the word immigrants/illegal "dirty".

Not hard to imagine such rhetoric can lead to nastiness all around, ending even in violence against said group. If you don't mind that and see no problem with that, then of course there's absolutely no common ground for us to have any discussion on :)
> You're essentially advocating for security through obscurity

So? The problem with security through obscurity is when it is the only security you are using. I didn't see anything in his comment that implied his only protection was the secrecy of his endpoints.

Security through obscurity can be fine when used in addition to other security measures, and has tangible benefits in a significant fraction of real world situations.
>>This is simply not acceptable for Russia, so it had to prevent that expansion, which it did. It could only be done by force, if the other side refused to drop possibilities of joining NATO

Russia can't and shouldn't have any say in what pact or alliance a sovereign country on their border wants to join. They have no right to. And well done preventing NATO expansion - where now thanks to their actions NATO did expand right to their border. Really 4-dimensional chess play guys.

>>The ones who don't resist (civilians) - aren't targeted at all

Yes I'm sure all these bombs falling on Ukrainian hospitals are just targeting errors.

And Bucha was what? An accident?
I thought it was contingent on Apple being one of their first TSMC-Arizona customers.

- https://appleinsider.com/articles/22/12/01/apple-will-take-o...

- https://www.extremetech.com/computing/340975-tsmc-reportedly...
I'm 29 and i voted for trump. I'd like to share my perspective for you to gleam alittle insight into my generation and why we voted for trump.

if Biden had invited George Soros to run wild through the government and ignore the laws, demanded a $800B reduction in the military budget and reallocated it to distribute to those in poverty,

- This sounds awesome. He's got a plan, he executed. If we didn't piss off our allies, we could probably ride on our military spending lorals from decades past. It would probably completely irradicate poverty, if he got the whole 'left' side of silicon valley to start building super cheap sky scrapers for the homeless. it'd be a pretty cool golden age. But here lies the issue... He inacted radical change towards some end, and hired some of the smartest minds in the world to help him enact his policys.

commanded schools to hire only gay people,
-..... Hmmmmm, Sounds like we'd have a complete population collapse in about a single generation. I'm a normal dude, i've had gay friends, trans friends, w/e. But do i disagree with them on that issue? Do i think this should be taught in school at all? no... so yeah, i'd be pretty pissed and i'd homeschool my kid forsure.

fire anyone who didn't declare loyalty to Biden,
Well.... Yeah, i mean, that's how a cabinet works, right? The people voted for the president, so who are you to defy the people? get in line or get out.

and had minions collecting all your data for whatever purposes,
- Well... They hopefully used the data to irradicate the military budget.

and threatened to wipe out Israel unless they gave over their country to the Palestinians, what would you have done?

at 61, i'm suprised in your inability to see the world as... real... with real violence. People seem to forget that a couple generations ago the entire world was imperialistic with a large percentage of the human population as slaves. We are those same people, our evolution didn't change in 250 years. Only with a complete monopoly on violence can you ensure peace between neighbors. This war has been going on for too long and will never end if a complete monopoly of violence is not secured. So honestly, if he came in and ended the war, i don't really care how he'd do it. Pick a side is a side as any. but like... hamas is literally a terrorist organization funded by iran so....