News for hackers. Stuff that matters.

un_ess

Re:Switching Pip to Uv in a Dockerized Flask / Django App on Tuesday June 24, 2025 @07:45AM (#44365092)
a)"Thanks to backwards compatibility, a package offered only as a source distribution and with the legacy setup.py file for configuration and metadata specification will run the code in setup.py as part of the installation." https://blog.phylum.io/python-package-installation-attacks/

b) pip now has an option _not_ to run arbitrary code by disallowing source distributions, by passing --only-binary :all:

"By default, pip does not perform any checks to protect against remote tampering and involves running arbitrary code from distributions. It is, however, possible to use pip in a manner that changes these behaviours, to provide a more secure installation mechanism." https://pip.pypa.io/en/stable/topics/secure-installs/

Re:Ask HN: Who is hiring? (June 2025) on Tuesday June 03, 2025 @02:34AM (#44167030)
UN - Graph database data engineer | Full-time | Valencia(ES) or Remote(EU timezone) or Bangkok(TH)

Looking for a data engineer to help us scale our Graph db. We use JanusGraph. You are expected to have prod experience with a graph DB, working knowledge of Gremlin (or at least Cypher). Python would be good.

Please apply through https://www.linkedin.com/jobs/view/4233355677

Re:Building a personal, private AI computer on a budget on Tuesday February 11, 2025 @10:55AM (#43014307)
Per the screenshot, this is a DeepSeek running on a 192GB M2 Studio https://nitter.poast.org/ggerganov/status/188461277009384272...

The same on Nvidia (various models) https://github.com/ggerganov/llama.cpp/issues/11474

[1] this is a the model: https://huggingface.co/unsloth/DeepSeek-R1-GGUF/tree/main/De...

Re:Mourning Google on Friday January 19, 2024 @11:06AM (#39057035)
The book "The Idea Factory: Bell Labs and the Great Age of American Innovation" - https://en.wikipedia.org/wiki/The_Idea_Factory describes how the Labs was working. The last chapter tries to figure out why it was working and one of the conclusion is that the Labs was always guided by the long term idea that it might help the telephone company (and that the breakup removed a) the long-term funding b) some kind of direction )
Re:We Are Not Supporting OpenTF on Thursday August 31, 2023 @05:43AM (#37334654)
>Compare it to VirtualBox, which is clearly not F/OSS,

https://www.virtualbox.org/wiki/Downloads says

"The binaries are released under the terms of the GPL version 3" and the sources are here - https://www.virtualbox.org/browser/vbox/trunk

(up to V6.1, it was licensed under GPL v2 - https://www.virtualbox.org/wiki/GPL )

And VirtualBox is available in Debian: https://wiki.debian.org/VirtualBox notes that "A proprietary extra package enhances the base experience, adding things like RDP access to the Guest. "

Same logic as with Machine Learning model: the code can be GPL, the weights can be with any other license. (cf LLaMa)
Re:OpenOrca: open source dataset and instruct-tuned LLMs on Thursday June 29, 2023 @08:14AM (#36519397)
would https://course.fast.ai/ be of assistance ?
Re:Bill Gates: "I'm literally losing sleep over Java" on Thursday January 05, 2023 @03:18AM (#34257301)
jscript was JavaScript engine: https://en.wikipedia.org/wiki/JScript

J++ was a 'clone' of Java https://en.wikipedia.org/wiki/Visual_J%2B%2B . Sun sued Microsoft, https://www.cnet.com/tech/tech-industry/sun-microsoft-settle...

and that's how .Net was born ( with https://en.wikipedia.org/wiki/Visual_J_Sharp to ensure transition)

> What's that red-orange XML button for btw

it's the very old logo for RSS feed

https://libraryguides.missouri.edu/c.php?g=28298&p=174225 has a few generations of RSS logos

Re:Amazon: Not OK – Why we had to change Elastic licensing on Tuesday January 19, 2021 @10:36AM (#25834446)
https://opensource.org/trademark-guidelines lists OSI's policy for trademark usage.

3. Usage that Require Prior Written Approval 3.1. Distributing software under a license approved by OSI ("OSI Approved License")

https://web.archive.org/web/20130222182812/https://daedtech.... can help

Posted on September 30, 2012 by Erik Dietrich

Re:Ask HN: Who is hiring? (April 2020) on Wednesday April 01, 2020 @12:17PM (#22750353)
United Nations | Software Engineers | Full-time | Onsite | Brindisi (Italy), Valencia (Spain), Bangkok (Thailand), Entebbe (Uganda) or NY (US)

Do you want to work with people who help other people? Do you want to participate in projects to prevent conflicts between nations? Do you want to help countries achieve the Sustainable Development Goals, for a better future of younger generations? Do you want to help us make a better world with your talents?

Join the United Nations Office of Information and Communications Technology (OICT) to develop software solutions using mobile, blockchain, VR/AR, machine learning, data science and other technologies. We use JavaScript, TypeScript, Java, Swift,C#, Python, Linux, Windows, Azure, AWS

To apply https://careers.un.org/lbw/jobdetail.aspx?id=134190&Lang=en-...