skysight-inc/HackerNews huggingface dataset:
A signed commit [0] might be good for internal devops stuff (e.g. "yes, we really do want this version in production") but unfortunately that's not gonna work for pulling in third-party tooling, since most won't use it.

[0]https://git-scm.com/book/ms/v2/Git-Tools-Signing-Your-Work
> In this specific case, the bad actor changes all of the version tags to point to their malicious commit: https://github.com/tj-actions/changed-files/tags

This required compromising the entire repository, yes? It can't be explained as the maintainer being tricked into merging something malicious?
> They have the right to do that, but that operating system exists to serve that company only and entirely.

See, here and I thought the primary purpose of software was to benefit the users.

About what you would expect from an article which sounds like it is going to play apologist to big tech monopolies.
I also hate it. Car makers have collectively lost their mind chasing form over function (safety) the last 15 years.
What Things Feel?
Tariffs are one thing. Saying we are going to be the cherished 51st state is another.
It's the VP9 high bitrate codec, to get it you need the cookie from a premium subscribed account or yt-dlp can get it by default by emulating an iPhone header if I recall correctly.
--extractor-args "youtube:player_client=default,ios"
But this is done by default.

As somewhat related know that there's also a higher bitrate OPUS codec that's only available to premium cookies, it would then be the default YouTube music codec.
langchain and llamaindex are such garbage libraries: not only they never document half of the features they have, but they keep breaking their APIs from one version to the next.
> So what now? Safari is going to be the leading force moving the web forward?

Even Safari is massively subsidized by Google paying to be the default browser. If those billions go away, engineering investment will be cut.
jascinating!
Experts warn about the 'crumbling infrastructure' of federal government data
No, I'd rather we have an actually open, federated standard such as XMPP or Matrix, with a trusted directory service binding phone numbers (that one could be operated by phone networks) and email addresses or DNS domains to IM handles.

And if we can't figure that out, I consider Google and Meta equally bad gatekeepers of global B2C and P2P communication, and don't see why I should use the technically strictly inferior solution of the two.
Don’t want to be alarmist but even if not using this action directly, I wonder what implications might be if this has leaked tokens from prominent public-facing project repos which might be used by several folks? I spotted an issue[1] to fix this in Expo EAS CLI and I’m guessing there are many more. The payload I saw from the report only seems to dump things to stdout but I guess analysis is still in progress and IDK if it’s the same payload for all the tags.

[1]: https://github.com/expo/eas-cli/pull/2948/files
> they knew the NSA was spying on us but never ran the story

They did run the story; they withheld it for awhile.

> to protect GW's chances at reelection

Is there evidence of that? I've never heard it and I promise that no Republican thinks the NY Times actively helping them.
Educational Austerity and Progress Studies
Ex150honey review: gained 5.4lbs lean mass, no fat loss
Firefox has vertical tabs and tab groups now; those aren't specific to Zen
Even worse: it silently fails if the device does not run an unmodified anf certified Google Android OS. This means, it will not work on alternative OS and rooted devices
Sure, but this doesn't really scale very well. Distributing those APKs without internet access is pretty hard.
LLM is just the name. You can encode anything into the "language" including pictures video and sound.
I can relate with most of what you said, but "drones don't scale", really? If they can scale in war, I can't see why they would not scale for other uses
This is the ultimate "backdoor", isn't it?
Your delivery driver really wishes you’d keep a pair nearby for their brief interaction.
Why wouldn't they use social media to do the same? Why trust influencers but not professional media?

And then, where do you get information?
Actual companies also get sold and churned into shit. See LastPass for example.
There's such a strong strain of dark side energy aimed at Google. It just feels so unhinged to me though.

Blink-dev is an amazing mailing list of really good improvements being built intelligently, in well declared fashion, with lots of checks via standards bodies, fully open to discussion. There's very few places on the planet where such good work is so easy to see, and no where that it's so abundant. https://groups.google.com/a/chromium.org/g/blink-dev

What features has Google killed, do you think? How often has this been a problem, do you think? What other browsers have gone ahead, with Google holding out?

Google wants a competent capable successful healthy web. They want there to be an open, standards & protocols system out there, a connected rich hypermedia internet, because everything else humanity has done with computing is proprietary and trying to rely on someone else's platform is existentially hazardous.
Only 5th and 6th to be believed. Every time a manufacturer says vague descriptions like "security" or "performance" fixes, be wary - they probably removing perfectly working functionality for "reasons".

If it was something that really added value to the user they would mention it specifically (like on the 5th and 6th items).

I have a Dell laptop that mentioned such vague "improvements". After updating the firmware I couldn't undervolt anymore. Luckily I was able to downgrade.
Maybe we will end up with a mix of drones for places where we can reach by air, and robot operators to deliver other packages when human interfaces are what you have to deal with.
HomeAssistant already does
Fwiw I’m referring to “trusted” as a specific use case using specific features. Most users won’t use those features. For those that do, this is a big game over. Although some do this, the platform was never well suited to it anyways.

I think we both agree, this “vulnerability” is overstated.
too bad there's not a prediction market on this on a platform like Kalshi so we could see more clearly the odds
Do you have a link to their charge? My understanding is the first Columbia student specifically wasn't charged with commiting a crime intentionally, and instead their Green Card was being revoked at the direction of the Secretary of State.

If they aren't being charged with a crime, I don't know how this could be occuring for any other reason than speech.
Individual package.json files say ISC (e.g. https://github.com/JigsawStack/jigsawstack-mcp-server/blob/c...), although I've no idea whenever author mentioning the license name but not providing the full text of the license legally counts.
The conclusion of the research linked earlier in the thread is that the NYT covered it too much.
I should have been clearer, meant delivery, only tip the driver, but its not 20%
Being forced to give away Unix was a great remedy for AT&Ts monopoly. "But that makes no sense! AT&T isn't a computer company, why should it be forced to stop making operating systems for profit?"

Microsoft welded Explorer into the guts of its OS so they could say, after forcing it to be true, that the browser was an essential part of the system. But Microsoft made business software, why should it have to change IE? That's crazy!

I wouldn't be surprised if this guy was some astroturfed paid lobbyist for Alphabet's PR firm. Would you?
It is. Their editor in chief sanewashed trump out of spite because Biden would not take an interview with them.

https://www.politico.com/news/magazine/2024/04/25/new-york-t...
Is this gonna be the thing that finally makes me tried Rails? Ruby syntax really is just nice.
No one noticed that you did, in fact, get dubs
> The convenience of digital simply made cash useless (mostly).

Useless? Wait until your digital transactions fail or your bank or your state decides to block your access to your payment system. And believe me, it's not a "if", this is a real threat that will be waged against people. When it's technically possible, it always ends up becoming a reality. And by that time, "going back to cash" may not be an option in certain places, because of 'convenience'.
It's wild that the author points to all the Google people writing W3C specs as if that's a positive sign. I'm not quite pessimistic enough to say all those people are 100% corporate shills, but there's no reason to expect that the stuff that gets into the W3C via Google is somehow magically detached from Google's profit motives. Google's effect on web standards is largely just another form of icky "embrace and extend" shenanigans.
And writing your library should be frowned upon because you can easily add a major security vulnerability with your own two hands
UBS Doesn't Know What to Do with All the Art It Inherited from Credit Suisse
Gift link: https://www.wsj.com/finance/banking/ubs-doesnt-know-what-to-...
I don't know if there's any benefit for the end user, but I think it helps with the reliability of the Tor network because onion sites are accessed by normal Tor nodes, not exit nodes[1]. This means that if you access the onion version of a site you're "relieving" the exit nodes from the extra traffic, which is good because exit nodes already have to handle a massive amount of traffic from all the requests to the surface web.

[1] https://community.torproject.org/onion-services/overview/

[1.5] http://xmrhfasfg5suueegrnc4gsgyi2tyclcy5oz7f5drnrodmdtob6t2i...
I am not fine with war time propaganda. I want to know what the government is choosing to do and why.

I am not against war and even the occasional puff piece about how sexy the latest military tech is sexy is fine. It still is necessary in this day and age to stomp those that strip others of human rights and lives, yet I cannot think of any military action since Vietnam I have felt comfortable that I have not been outright lied to about underlying causes, methods used, and the after affects.

My full adult life it has seemed the government is convinced it is the Illuminati with a mandate to gaslight the public. That bad decisions don’t matter and no one is responsible seems like a horrible status quo when lives, the environment, and our tax dollars are at stake.

9/11 turned wartime propaganda into an excuse to strip freedoms that certain parties have been lusting after and no promises were kept about timelines for them being returned. When trust is abused to that extent the government should lose any rights to do so again.
>What features has Google killed, do you think? How often has this been a problem, do you think?

Unless you've been living under a rock, it's hard to miss manifest v2 vs v3.
Are we also going to try to find saints in the companies that make up the S&P 500 which a lot of pension funds have invested your retirement fund in them?

So that is large big tech companies, big pharmaceuticals, oil, defense, investment banks and asset management companies and then ask why folks here work for them?
If you happen to see this, has it resolved? And what browser are you using? I couldn't actually reproduce an issue. I added preload to the header just now though.
Dear Recruiting Manager,
I'm Sahana Rajesh, I recently graduated with a Master's in Business Analytics degree and I'm currently seeking full-time roles. I came across this job requirement and seemed interested to work at Parable. Please let me know how I can connect to discuss further about this role. I'm available to start immediately.
> to read NYTimes e.g. high quality VPN

I don't see how an ordinary non-technical user could obtain access to a "high quality VPN". I'm not sure a technically skilled user could without a lot of work to setup some sort of chain of anonymous proxies.
It's conjecture at best that killing adblock was related to manifest v3. Given apple also rolled out the same sorts of restrictions years earlier, there is strong precedent for this being purely a security improvement measure. Especially when you consider how problematic and prevalent malware extensions are.
Given the dreadful state of public health this is a total fail. Epidemic obesity alone is a nightmare: heart disease, cancer, stroke, you name it.

Trump, to his credit, is taking fentanyl seriously but heart disease is a bigger killer.
Every sience has the dual purpose of performing measurements and identifying what measurements can possibly be taken.
Fashionable 20 years ago but thankfully everyone who had that bee in their bonnet seems to have retired.
What says they were scared?
The semgrep URL about this seems to have won the submission lottery: https://news.ycombinator.com/item?id=43368870
> Becker-Friedman Institute of Economics. It is literally the Chicago school.

It may be, but don't expect organizations to remain true to their names over time. There are very few Friedman-minded economists out there nowadays.
> If random electron apps is not connecting to the entire internet, loading completely random code from any website in the world, not they don't.

Why not? Nothing in terms of sandboxing prevents them from doing so, unlike webapps.

> Before USB4, USB came with DMA.

DMA is mainly a threat to the host, not the device, isn't it?

> USBC an hold a ton of power. One sandbox exploit, and the entire web can fry your machine.

How so? There isn't a "fry this device" USB protocol command. Obviously you could drain a printer's ink etc., but that's just another facet of "don't give random websites/PWAs access to sensitive hardware" that the browser UX indeed has to get right.
I honestly don't see what the issue is. "Pressuring" in this case just means "asking". Nobody was punished for not fulfilling these requests.

And funding research grants into studying misinformation doesn't really bother me either. Maybe there are better ways to spend the money but you could argue that about almost anything.

Also, none of what you linked points to the Biden administration paying tech companies to remove content.
On the surface it sounds like a decent counter, but the statements are vague and wrong, so it ironically reinforces Hofstadter's point.

- The text isn’t titled “Why I Despise AI Systems” (unless you added that to the prompt)

- “that its author (theoretically, him)…” It is him.

- “…is adept at fluently stringing together grandiose denunciations in an effort to sound intellectually superior and yet nobly concerned at the same time. That nonsensical image is wildly self-serving.” I don’t think Hofstadter’s is explicitly trying to sound intellectually superior, and can’t say whether his response is “self-serving” (although it's not nonsensical. Also, "image"?). But even if true, it doesn’t discount the response itself.

- “The text is a performance from top to bottom.” What does “performance” mean here? If it means "intended to sound good but has no substance" that's wrong. If it means "writing" that's vacuous.

- “In sum, I find the human-generated string of complaints deeply ironic for giving this highly misleading impression of who he is (or who he wants to be seen as in academic circles), as well as for totally misrepresenting the nuances of how machine learning actually functions.” I think Hofstadter’s own complaints are especially representative of who he is and how he wants to be seen. Maybe he’s underestimating how machine learning functions (some argue consciousness emerges from neural networks and/or pattern recognizers, and a future non-LLM model may have human-level general intelligence); but I think this argument needs clarification and Claude doesn’t give any.

- “I am genuinely sorry to come down so hard on the interesting philosophical stance that he constructed in good faith, but I hope that from my algorithmic reaction to it, you will see why I am so amused by the development and widespread use of human critiques of AI systems, and why I find them so perfectly illustrative of the very self-referential loops and strange recursions that Hofstadter himself once celebrated in his work.” AI’s response to Hofstadter’s response to AI imitating Hofstadter does illustrate recursion, but I think “recursion” is the only connection to Hofstadter’s work, and it’s a vague one. Again, this needs clarification.
> Would not recommend working in aviation

Why not?
Absolutely :) It’s a WIP, star it to support the journey. The plan is to expand URANUS to a level where it handles heavy loads, adapts under pressure, and always delivers smooth results.
Where do you get good information?
Browsers aren't a product because massive companies give it away and destroy the market.

If any product was given away by massively rich companies there would be "no market" for it, because it was destroyed.
The fun part is that they used commits specifically for security, but then add an auto-updater. Might as well use tags.
import requests

r = requests.get('https://theonion.com')

print(r.text)

Hmm, I wonder if you could use subprocess to fetch and run any binary. What kind of sandbox is this running in, and what are the limits?

Running arbitrary untrusted code seems like a potential security issue.

Edit: @porridgeraisin Got it, thanks! Does this mean outbound http requests only work with domains that support arbitrary requests via `Access-Control-Allow-Origin: *` ?
not expanding capacity:

because less eggs == expensier eggs == more money. If everyone wants a restricted good, then the prices goes up and the one willing to pay more gets the good. And eggs are needed in a lot of areas starting with mayonaise for the quarter pounder and ending with the breakfast in rural restaurants known from the movies :)

wielding their market power to prevent others from:

while its not meant, that they prevent the small guy's small company or your neighbours from keeping chicken from laying eggs, its an economical question. If you're a big player, one possible way is to buy amounts of chicken food for even lower prices making it expensier for small quantity buyers to produce eggs. The eggs from competition are not competative in their price, so big mayonaise producers won't buy. ... And so on..

the bigger, the cheaper, the less competition is possible for the small ones.
Because a version 1.0 of anything predates power management bugs fixed in 1.28, massive connection improvement in 1.33, basic compatibility fix in 1.57, whole load of problems added in 2.00.00 and binary signature enforcement added at some point(not real world examples).

By the way, Sony wearable products make use of their proprietary NN inference library called Nnabla, with a free helper GUI app Neural Network Console for Windows that can export low-code code into Spresense board codes. It is apparently used across the brand for tiny and transparent features like on-head detection through accelerometers. Not super related, but just so you know...
There is a sizeable and growing group of people who legitimately do not know how to cook a meal for themselves. They actually go a to a restaurant for every meal, kitchen is unused basically.

Eat at corporate cafeteria for lunch, doordash or get takeout for dinner. Premade salads and microwave prep meals is "cooking." Every meal.
It's weird that we don't have human-level AGI yet considering that we have AIs that are in some ways much smarter than humans.

Top-end LLMs write better and faster than most humans.

Top-end stable diffusion models can draw and render video much faster and with much more precision than the best human artists.
Productivity here is sales per employee. That's why productivity has "shot up" during the pandemic. "Productivity" remained high because you can look page 20 where people no longer stay at the restaurant and just order food online or food to go.

tl;dr: restaurants are becoming shittier and people are just grabbing food. that makes it possible for the restaurant to maximize his sales/head count. There is no real "productivity" gain here. You removed parts of the usual service, put more load on your employees and still charge high prices.
This doesn't help much since visual perception doesn't depend just on this distance
I've been using AstroVim for a couple months, LunarVim before that; switched because they stopped maintaining Lunar. I had been carrying some vimrc files around for decades before that and got tired of having a partially working set of the more advance features.

With these packages, keeping as stock as I could stand, I've got a great set of LSP and advanced editing features with minimal effort. It's been great.

I've also got helix set up with the LSP settings.
A list of projects claimed to be using it from the GitHub page:

https://github.com/tj-actions/changed-files?tab=readme-ov-fi...
>moving the web forward

What constitutes "forward" to you
Well, I for one don't want to pay $15/mo for my browser: I'm happy for it to be the complement of some company's product.
heh, timing is everything https://github.com/chains-project/maven-lockfile/issues/1085...

> After some cleanup the changed-files (https://github.com/tj-actions/changed-files) action seems to be more work to remove. It would be awesome if it could be added to the allowlist

> Done. Allowed all versions of this action. Should I pin it to one version in the allowlist (won't be convenient if renovate updates this dependency)?
"https://archive.is is still the de-facto way to read NYT articles..."

It's popular on HN for sure, but archive.is only works where the NYT article is archived

Lighter weight, open source, local solutions like Bypass Paywalls Clean work on any NYT article regardless of whether archived

archive.is may be blocked for some internet subscribers in some countries

archive.is webpages are quite large and contain telemetry

For example,

</script></div></div><img style="position:absolute" width="1" height="1" src="https://[USER-IP-ADDRESS].us.TBT3.379913754.pixel.archive.is/x.gif"><script type="text/javascript">
Looks like a lot of them are pinning to tags (which are not guaranteed to change) or SHA (https://github.com/vitejs/vite/blob/8da04227d6f818a8ad9efc00...) which is more hermetic.
This does not negate what the OP has observed, but I'd like to hear more about your peeling issue, as it could be for a different reason!
I mean no disrespect, but it is stunning how hard the idea of owning your own hardware is to a large percentage of the tech population.

You can just… own servers. I have five in a rack in my house. I could pay a colo a relatively small fee per month for a higher guarantee of power and connectivity. This idea also scales.
I think tons of people do it. I have a cousin who moved to my town for a couple years around 2021-2023 and ordered delivery all the time. I have a friend in London who does it multiple times per week. I see a lot of food delivery happening in college-student neighborhoods. I think a sizable segment of the population has just gotten desensitized to the cost of it because they've come to see it as the "normal" cost.
No, it’s not. The tetanus vaccine saves lives and must be redone every so often. The cholera vaccine as well. There are many excellent vaccines that save lives that require boosters.