skysight-inc/HackerNews huggingface dataset:
This is one reason why, really, nobody should use a shell that was optimized for commandline use, for scripting.

On the commandline, all your inputs are usually known and trusted, so the shell language will take a few shortcuts to make everything more convenient for the user. But of course, when scripting, these assumptions don't hold and you need a language with more notational rigor.

Bash et al. are dangerous scripting languages, and they become even more dangerous when users (who typically don't want to understand the subtleties) start using LLMs to generate code for them.
The moon is huge compared to a single thing we can currently send there. Comparatively, we are “littering” our own atmosphere a ton more during liftoff.
I try to generally keep up with the overall trends, but I’m an engineer at a resource-constrained startup, not a research scientist. I want to see real-world application, at least mid-term value, minimum lock-in, and strong supportability. Until then, I just don’t have time to think about it.
Technical progress would be fantastic if the benefits didn't go mainly to the top. I am pretty sure in the not too far future we will have enough technology that you can live off the land somewhere with the help of some robots. Or have them do all your housework. In principle, this is great, but our society is not set up for a lot of people not working while the technology is progressed by a relatively small number of highly qualified people.

I am not sure where this is going but there will be some large changes to society needed if technology keeps progressing at current speed.
Neither of those are equivalent to variable binding, which is what most SQL libraries provide, specifically because they don't actually solve the problem since they're still doing string substitution. Putting a double quotes in $1 in your "good" execute example will allow you break out of what's expected and then you're Bobby Tables.

Your python example at the bottom is correct, in that each separate element is more correct in that it allows each arg to be passed as an element, so there's no option to break out through quoting characters. SQL binds are like that in most ljbraries, even if they don't look like it. The parser knows a single item below there so if it passes it along as such. You cannot escape it in the same way.
No love for Python's shlex.quote[1] or their equivalents in other languages to quote arguments for shell? In his case, which is interpolating a variable inside a shell double-quoted string, I would probably use environment variables, or else use shell `printf` with `shlex.quote`. But generally I interpolate directly into the command line using `shlex.quote`, when I can't avoid executing using the shell.

I was happy to learn about Python's template string proposal (i.e., t-strings) from https://peps.python.org/pep-0750/, although it probably won't become common for a while.

[1] https://docs.python.org/3/library/shlex.html#shlex.quote
Very cool project! I was curious if this was possible with util-linux (provider of the unshare command that provides namespace management, the underlying feature behind containers), and it is indeed possible:

setpriv --landlock-access 'fs:remove-file,remove-dir,write-file,make-reg' touch /tmp/foo # Permission denied

setpriv --landlock-access 'fs:remove-file,remove-dir,write-file,make-reg' --landlock-rule "path-beneath:make-reg:/tmp" touch /tmp/foo # Allowed

Very verbose unlike unshare and really deals with internal details, so I'd find it hard to use setpriv in practice.
When I said recent history I meant the last roughly 20 years, when the trend has been for gains to go to a smaller and smaller number of people.

Of course historically this does seem to be a cycle. Usually it goes gilded age, revolution, broad-based growth, emergence of a new elite, repeat cycle. Unfortunately the revolution period is often very chaotic and destructive.
You know how office workers are more productive because of computers? This didn't just happen because various companies did R&D investments in building (better) computers, but also because companies actually spent money buying computers for their office workers and because those office workers spent time learning how to use computers.
(Author of go-Landlock here)

Awesome! I'm happy to hear that you and others are interested in the configuration language. We should probably coordinate that on the Landlock mailing list when the time comes, so that we don't duplicate that work. We are open to outside contributions :)
If we wouldn’t do that for Russia, which I suggested years ago and was massively dragged for it on HN, then why would we do it for Italy? I don’t agree with poisoning DNS, but there are way worse things happening on the internet that we don’t disconnect whole nations for.
HScope: Transform your compact Oscilloscope into a powerful instrument
I thought this would be of interest to the community:

This might only applies to PLUS users, but if you get the dreaded “You Have Sent Too Many Messages to the Model” message, just copy & paste your text — you’ll have to do it twice — and you’ll be able to continue the conversation (in some case, you might have to leave the chat and re-enter). This also applies to situations where you’ve sent a message and, bizarrely, don’t get a response. Copy and paste until the AI is “activated” again. It might take up to three tries, but it works!
Serious question: how is DoH supposed to help when the resolver itself is being asked to return bad results? DoH makes sense if something is MITM-ing your DNS requests, but it sounds in this case that Google is being asked to just straight-up return bad results?
Just a cool demo, but it's maybe the first time that I caught myself thinking "that thing is more agile than me"- which is a lot for a robot. Yes I know, robots have been doing flips since years, but it always felt like a gimmick. Now the whole movement feels very organic. The last balance recovery (after the end title) is genuinely super-human.
People come out to physically counter protest Nazi groups.

Idk why that energy doesn’t come out during elections.
Armchair mapping will always result in bad maps. I usually try to use mapwithme and leave photo notes describing issues when I travel, I take photos of fences and play grounds, other people take scenic pictures.

So it might very well be automatic mapping, just saying that I know my armchair mapping can be pretty bad when I gonand check it OTG.
Virulent Newcastle disease Is only a threat to the egg industry who are responsible for the price gouging in the first place
> unlikely to manifest

Over what time period? 5 years? 100 years?
What if someone in your family has done a crime, and the result of your DNA being online is (1) you are the first suspect and (2) the criminal might well learn/suspect that they have been compromised through you?
Worked on something similar a few months ago (albeit for smaller scale geographic data): https://github.com/uav4geo/GeoDeep
A personal library of retro VMs
Failure modes are also interesting to show what is happening or not really happening. Like the test of asking GenAI to create clocks at specific times, or people drawing with the left hand. All you get are clocks, at 10 min past two, or people drawing with the right hand, since it's 99% of what is in the training data.

Like Sabine says, if the LLM models, already read all the Math books in the world but are not yet able to do basic math, without calling upon a calculator, how much reasoning is really emerging?

"The Path to AGI is Coming Into View": https://youtu.be/mfbRHhOCgzs?t=219
I used to run into dead loops until I changed the way I prompt cursor. Asking it to focus on 1 error at a time massively improves the success rate. Had an old project in node 10 project that hadn’t been touched since ~2017 and after several attempts with cursor. Asked if to fix 1 issue at a time until it moved from node 10>12>14…>22 and after about 15 minutes it succeeded. That included updating all the dependencies and removing deprecated/dead/dropped packages and getting them to latest and updating Vue from 1 to 3.5
>And you think that not having sent your dna to 23andme would be a good protection from that? Like, since you are among the smart ones who didn't send the dna, you can keep quietly minding your business while the government "rounds up" people on a racial basis?

I'm going to assume that you're debating in good faith and will accept a powerful but unsympathetic example. The Golden State Killer was caught because his family members used commercial genetic tests, allowing investigators to triangulate him through DNA left at the scene, despite him never linking his DNA to his identity: https://en.wikipedia.org/wiki/Joseph_James_DeAngelo#Arrest,_...

Obviously this was a terrible man, and I certainly don't regret him being in jail. However, it demonstrates that your relatives can expose you to privacy violations without your knowledge or consent, and likely without their knowledge. It's like when an app asks for the list of your phone contacts, it's not just your privacy you're surrendering.

If we ignore that the man in particular was a horrific serial killer, which I know is hard to do, this shows how people can suffer consequences from other people taking these DNA tests, and surely you can see how that kind of sucks? Like, this shows the technical possibility, which is unaffected by the actual reason for doing so.
You need to have documentation of I believe a grandparent having citizenship.

I can’t claim French citizenship since some of my ancestors are from Louisiana.

Likewise, you can’t get tribal benefits from a 23 and Me test. I guess the only good use for this would be in a medical setting. I don’t think the science is there yet, but hypothetically, let’s just say you could run a test and determine you’re genetically incompatible with certain medicines. That would need to be done under HIPAA protection and the results should be immediately destroyed once your doctor’s able to evaluate it.

I’m generally against regulation, but I’m amazed this was legal in the first place.

It’s cheaper and easier to buy a lordship in Scotland.
https://www.scotlandtitles.com

100$ and it carries the same weight, without giving a for-profit company your genetic information.
After working with audio professionally I've developed a strong antipathy towards a lot of the audiophile industry. BJC has good prices and seem very legit in my eyes. The pricing seems to reflect actual production costs and not mumbo jumbo alignment in the copper fields...
>Did you actually read that Medium post? It's idle FUD and speculation that the author of the original 2012 Forbes article lied about the Target incident, without anything to substantiate that claim. It's also evidently written by someone working in data science at Meta, who would naturally have incentive to deny the reality of their industry.

Did you? From the article:

>[...]The Forbes writer who rehashes the anecdote even describes it as “so good that it sounds made up.” Indeed.

>But this is an easy criticism and beside the point, so for the remainder of this article, let’s suppose that the anecdote is true.

The bulk of the objections in the article are that a single instance of Target correctly predicting a pregnancy isn't enough evidence to conclude they have some sort of a galaxy-brained AI that can predict pregnancies before the mothers even know. It's far more plausible it randomly guessed someone was pregnant, and got lucky.

The comment you quoted has the same issue. It gets way too hung up on the first part, ignores everything else the author wrote, and then tries to move the goalposts to "the conversation is [...] more about such models being in place". That's a huge cope. It's fairly obvious how concerned we should be about such models is proportional to how accurate they are, and the author is trying to harness that with the Target anecdote. Nobody would care if the story was "24 year old man got sent ads for Zyn, without telling Target that he smoked".
Pocketbase is amazing! Going through Manifest's docs, I kept thinking, "but I'd rather use PocketBase"

pocketbase has helped me get a few boutique websites and systems out so far with incredible speed and a joy that I rarely feel near web these days.

Though I should remain open-minded. An even simpler backend would be nicer (maybe). Also the AI-friendly approach looks promising.
There's a big gap between "powerless" and "sovereign".

When the literal Nazis took over Belgium and the Netherlands, the actions taken by the resistance in each included attempting to destroy official records of who all the Jewish people were: https://en.wikipedia.org/wiki/1943_Amsterdam_civil_registry_... and https://en.wikipedia.org/wiki/Jewish_resistance_in_German-oc...

Much harder to do that these days, when backups are cheap.
TSPU is just the consequence of a failed attempt to bring it under control, which happened much much earlier (no point in getting into detail here). And yes you're right, I actually have no objections to proportional response and keeping trust where it's possible, you can't get things done without it. Just keep in mind that "it cannot happen here" attitude is dangerous and you're always one step from what you've thought is impossible. Opposing to E2EE strikes me as similar to unified IDs in some European countries that are proud of safety and convenience it brings, dismissing the reality that they are now one regime change from the total control. (not even the unlikely change, considering that certain EU countries historically lean "right", for simplicity).
When you say "reciprocal mistrust", what parties do you have in mind? Websites not trusting visitors and visitors ot trusting websites?

because the latter was already the case, and AI made it much worse. Any unfamiliar websife could be AI generated and therefore void of original cobtent and full of unverified facts.
Error detection is present in S/PDIF PCM (including when transported on hdmi) and is also an inherent byproduct of most audio codecs when a digital bitstream is being used, which is normally the case today.

FEC and other types of error correction or recovery is ubiquitous in wireless audio and communications applications including phone calls, Bluetooth, VoIP, wireless microphones, and digital radio. Responsibility for the error correction is sometimes part of the underlying transport mechanism and sometimes incorporated directly into the codec. Encryption & privacy requirements for audio also mean that we solved these problems long ago. IIRC that the WWII SIGSALY encrypted telephone between the US and UK required and implemented error correction.
> This decision follows a similar case against Internet backbone firm Cloudflare. In January, the Court of Milan found that Cloudflare's CDN, DNS server, and WARP VPN were facilitating piracy. The court threatened Cloudflare with fines of up to 10,000 euros per day if it did not begin blocking the sites.

I'm always curious about jurisdiction on this stuff.

If Cloudflare had no physical machines, employees, and property within Italy's borders, under what law could Italy levy a fine?
How Do You Measure AI?
And then people wonder why we can't have serial killers anymore.
So America is actually Russia?
Going Nova
> The goal is aimed at preventing illegal football streams

It's impressive how much internet censorship in Europe is currently being caused by this one group of extremely greedy people. It's one of the rare cases where the sheer size and international influence of companies like Google and Cloudflare can actually do some good for the world by fighting back against such laws.
If the encapsulation is implemented in a way that a) it is not possible to instantiate invalid objects of the type and b) all modifications via the type's methods only create valid invariants by enforcing the type's rules (either by mutating it in place or by returning a new instance for every modification), then it is ensured at compile time that this type cannot be misused ("make invalid states unrepresentable"). If that particular logic lives somewhere else, that's not possible.
Then do it for Russia too. I also don't care if I get "dragged" for suggesting it. Capitulating to poor leadership is enabling poor leadership and the world is in a bad state because of it.

Literally the only reason it doesn't happen is because there's too much money to be made for people who are not you and me.

Frankly if it did happen, someone would bridge it and I'm sure that rogue bridge ain't gonna be poisoning anything. They'd be a hero and a broker.
DOH over proxy to pretend you’re elsewhere?
The EU companies make payments to Cloudflare, and these could be confiscated. Also any staff in Italy is in danger.
I hear the tried and true approach is to make an account and poison their well with fake but somewhat realistic data and don't close it.
this is explicitly "misbehaving bots" - it's for performance, not against scraping in general. A bot which is slower than average user is likely well-behaving, and therefore is out of scope.
You cannot predict technology though.
> The "worst case scenarios", e.g. getting health insurance denied because you have some gene, still seem implausible to me.

We're halfway there, data mining by insurances already is the norm in car insurance. We should have fought back hard back in the day this was proposed.

> I haven't murdered anyone, so I'm not worried about getting caught up in a DNA dragnet. Sure, there can be false positives, but to get on in life you pretty much have to ignore events with low statistical probability

Even if you haven't murdered anyone or intend to to so - your genetic data is useful in the pig dragnet. Your genetic data may be what provides the pigs with a link to your nephew who moonlights as a graffiti sprayer... and yes, the German pigs are doing DNA checks on graffiti sprayers, they have been doing so for over two decades [1].

[1] https://www.welt.de/print-welt/article398332/Graffiti-Erstma...
I am afraid your “human in the loop” isn't [0].

You acknowledge the problem of AI slop up-front, but seem to have chosen to plow forward anyway. Please do consider your actions and their effects carefully [1]. You are in a position of potential influence; try not to squander it.

All the best,

-HG

[0]: https://pluralistic.net/2024/10/30/a-neck-in-a-noose/

[1]: https://web.cs.ucdavis.edu/~rogaway/papers/radical.pdf
More Drowning Children
Isn't it better for society as a whole if criminals are apprehended?

Even moreso if they're one that would be a physical threat like you're suggesting?
As far as I know the ABI for pledge and unveil really haven’t changed since release? What is stopping linux from creating NEW security primitives which are easy to use? We have wireguard in the linux kernel as a recent addition. Wireguard shows that new simple primitives can be added to the kernel, it requires someone with “good taste” to do the implementation without sacrificing usability.
The point is that high ambient temperature reduces the amount of heat you can produce before you need heroic efforts at cooling.

That said, this does seem mildly absurd.
Raspberry Pi: rpi-image-gen
DoH some other resolver, there's an internet outside Google, you know.
Wholly agreed with this. There are key phrases that can act as, as you said, 'conversational signals' for where to steer things. The amount of intense post-training that these models undergo to make them "helpful assistants" means these words/phrases have high 'steering ratio'. Double-win that you sharpen your own politeness habit when dealing with humans too.
they were constantly referred too in the text :/ impossible to skip
There's no emotion we ought to think harder about than anger
Better equipped, as in with a government that wanted the gangs eradicated?
Prototypal inheritance can be pretty awkward and complicated. It’s evident in that few young JS devs ever use it, and many don’t even know about it!
It only took a couple of decades of grinding down the public’s perception of privacy.

2000s — PATRIOT Act (and other heinous domestic surveillance acts with no due process) — “wE aRe pUrSuInG tERrOrIsM”

Then the invention of the portable digital camera and subsequent social media between the mid 2000s and 2010s — “selfies” and other aspects of social media made it so much easier for private and public entities to spy on people

Then the introduction of godawful companies like “23andme”. Fortunately never bit the hook and “FOMO’d” into it but rather kept this data between my doctor and myself (and the genetics testing company). Much more expensive, but at least I am covered by HIPAA.

Then last but not least, the introduction of big data companies and broker companies which build profiles on everyone that uses “free” products such as Google search, Facebook, tik tok, and many others that preceded it.

We can’t even escape ads and profiling when we _pay_ for the fucking thing.

I want to say 9/11 changed the game, but in reality I think the erosion of privacy was happening way before that (ie, to serve advertisers)
How do you suggest we enforce anti-littering laws?
Instead of just saying its not. Explain what’s so much different here.
Ask HN: User reporting and feedback loops for regulatory compliance
For eg: For EU's Digital Services Act, platforms need to provide tools for users to flag illegal content (e.g., hate speech, terrorism, fraud). Have to review and make decisions about this content. Also have to allow users to appeal decisions.

There's more requirements for larger organizations, and other similar regulations like UK's OSA.

Are folks actually building these? Why/why not? As I understand fines are large, plus important for brand impression and user base.

[Context] There are so many companies with hockey stick growth, 50M+ ARR, global user base, etc. But I don't see them support these user reporting requirements. Got me curious about why that's the case.
Sure, and Russia is actually Iran which is actually Tanzania.
Pillars of Hercules name itself is ambiguous, one of the theories is that Plato referred to a pair of Greek islands, not Gibraltar. That would place Atlantis somewhere in the Mediterrain Sea.
> All keep saying 'one day', 'soon' etc.

The parallels with crypto are amazing.

> And basically all I saw so far was a snake oil from people trying to push it or benefit from it, even here. Trust me bro...

Cue some dude chiming in on how they are 1000% more productive now and wrote 100 apps in a weekend with Claude, etc.

It is very tiresome indeed.
Nice! This will make a good companion to Arfken & Weber
+1

A rough description of upcoming network restriction features in Landlock and how they map to the BSD socket API is in the talk at https://youtu.be/K2onopkMhuM?start=2025 starting around 33:45

I really hope we can get back to these features soon :) I think these would be very useful.
...for allowing speculators and oil sheiks to buy up the residences?

https://archive.ph/R1mJi
> Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.

> Comments should get more thoughtful and substantive, not less, as a topic gets more divisive.

Hacker News Guidelines: https://news.ycombinator.com/newsguidelines.html
So, do his voters take this as funny lying to own the libs, or just senility? Like, is there any limit here?
Syd[0] uses landlock (among many other mechanisms) to containerize applications and provides an OCI-compatible interface.

[0]: https://gitlab.exherbo.org/sydbox/sydbox
First kilowatt-scale elastocaloric green cooling device developed
I think it's insightful to some extent. The problems encountered in C++ templates apply to Zig's comptime as well. And their solution seem to be along same lines, i.e. add constraints.

Edit: on re-reading the author doesn't understand why negative traits in Rust are a problem (not is basic boolean operation). I think they are abstracting too much and saying cows should be roughly spherical and water should roughly be a superconductor.
I see. Yeah I could look at that but it needs to be re-implemented in pytorch to provide the backwards pass anyway. But the implementation might be a useful resource.