Andy from Lightning here. Yeah, the PyPi credentials were stolen through the compromised pl-ghost bot account. The attacker used this account to create a new actions workflow, which was ran and parsed out secrets for PyPi. After releasing the package, the attacker then used that account to troll us a bit with those comments.
HN user
andymcsherry
andy@andymcsherry.com andy@lightning.ai
https://lightning.ai
Andy from Lightning here. The malicious file that gets installed has this signature:
router_runtime.js
SHA256 5f5852b5f604369945118937b058e49064612ac69826e0adadca39a357dfb5b1
SHA1 f1b3e7b3eec3294c4d6b5f87854a52471f03997f
MD5 40d0f21b64ec8fb3a7a1959897252e09Andy from Lightning here. The malicious packages were published today at 12:45 PM UTC to PyPi. Before that, there were no affected distributions, and we were unaware of any leak. The original release on Github did not contain the issue, but we have taken it down to prevent any confusion.
Andy from Lightning here. The malicious code was not submitted to the main repo at Github. It appears our PyPi credentials were leaked and compromised packages were published directly there for versions 2.6.2 and 2.6.3
Andy from Lightning here. Thanks for pointing that out, we are updating the CVE. Only the versions from PyPi were affected. The malicious code was not checked into the GitHub repository
Hey ipsum, sorry I could have mentioned that. We spend a ton of effort on open source and sharing our ML knowledge with the community. If you don't want to use our platform, the entire source code and a tutorial is there to run it on your own.
Here's an open-source serving implementation: https://lightning.ai/bhimrajyadav/studios/build-a-production...
Also, a deployable model: https://lightning.ai/bhimrajyadav/ai-hub/temp_01jwr0adpqf055...
Australia has a slowish rail network because it is sparsely populated. It is an extreme version of America, the distances between population centers are quite large and there's not much in-between. There's also not much reason for anyone from Sydney to visit Canberra, and if you do, you certainly need a car to get around.
That’s the software platform used to deploy it
LitServe is a flexible serving engine for AI models built on FastAPI. Features like batching, streaming, and GPU autoscaling eliminate the need to rebuild a FastAPI server per model.
The examples featured on the litserve page include a range of applications such as large language models (LLMs), natural language processing (NLP), multimodal tasks, audio processing, vision models, speech synthesis, classical machine learning (ML) algorithms, and a media conversion API, demonstrating the versatility of litserve in deploying various machine learning models and services.
I get the sentiment, but one of their models, albeit the worst one, is licensed under Apache without usage restrictions. The source to run the models is also open source.
Yeah, disagree. College sports generate a significant amount of revenue for the university, which funds scholarships for a huge number of students that otherwise couldn't afford to go there. They have the added benefit of being fun and add entertainment to the college experience.
You may deposit or withdraw funds from your Account into or from Apple Cash. Transfers must be at least $1.00 and can be no more than $10,000. You may transfer no more than $20,000 per rolling 7-day period. We may place additional limits on the amount and frequency of transfers for the security of your Account
Seems to be just transfers to an Apple Cash account, which is primarily used for free Venmo-like peer to peer payments. Venmo has a similar $20k limit. I think if you're trying to transfer this much money, there are plenty of other transfer methods available.
https://www.goldmansachs.com/terms-and-conditions/Deposits-A...
These comparisons come up all the time, and the issue is the Mercator projection makes Europe looks much larger than other countries on most maps. Much of Europe lies at a more extreme latitude than to the rest of the world. Basically nothing is at the same latitude in the Southern hemisphere and the only comparisons in the Northern hemisphere are Russia, Canada and Greenland. Other than Greenland, those countries don't generally get compared because they are gigantic in their own right, despite being much smaller than the appear on normal map projections.
Car insurance liability limits will be insufficient if you kill someone, and you’ll be on the hook for the remainder. Umbrella will cover you in both scenarios.
People don’t make a bunch pies in fall and then store them for winter. They’ll store rawer ingredients, like flour, live animals or dried and pickled veggies and meats that don’t perish as easily.
If you read the article, you can tell they are talking about people who have applied, but not yet received their green card. Citizens of some countries have a decade or longer wait to get processed.
Two instances isn't worth consolidating because it's hard to know whether the similarities are real or coincidental. Check out the rule of three: https://en.wikipedia.org/wiki/Rule_of_three_(computer_progra...
This is a business, it's not passive income. It requires maintenance, support, etc. If he were to just let it ride, income might increase for a while but ultimately wither out and die.
If you use the USPS API, it gives you a specific message if it's a multi-unit address:
Default address: The address you entered was found but more information is needed (such as an apartment, suite, or box number) to match to a specific address.
Verify API, page 11
https://www.usps.com/business/web-tools-apis/general-api-dev...
Had a similar issue, tried to use VIXEN and DIMES, but VINES and MIXED was the "correct" answer.
Yea: 18, Nay: 15: Not Voting: 6
The measure fails despite more Yea than Nay votes. The California State Senate has 40 seats and always require 21 votes to pass. Vacancies (currently 1), absences and abstentions don't appear to affect the denominator of the 51% threshold. As a result, Not Voting is essentially a disguised no vote.
Wyoming and Montana are definitely not in the Midwest, and I’d even argue that the Western South Dakota where the Badlands are should be considered the Mountain West as well. The majority of the Midwest is far more populated than this region
Insurance companies can run a sort of mini credit score with just a name and address. It doesn’t show up as a credit inquiry and has a more limited set of details about each item.
You can buy futures on basically any commodity to hedge against price fluctuations.
There are other things your insurance covers, like an uninsured driver hitting your car, theft, a tree falling on your car, etc. These things will still happen to self driving cars.
I’m sure these things can be tracked by analyzing the currency exchange patterns between HK and the mainland
It’s a bit disingenuous to call it that. 140 characters on one line that most people would format very differently.
Airline seat pitch and recline is pretty well documented, and you can do research before you book your flight: https://www.seatguru.com/charts/generalcharts.php
If I'm going to be on a plane for a long time, I do research to find the right balance between comfort and price. Part of deciding on that comfort is whether or not I can recline the seat and whether the seat in front of me reclines. Part of my purchase is the ability to recline the seat for my comfort. If I'm going to be a long flight, I certainly don't want to sit upright the entire time because the person behind me didn't research whether or not that seat would be comfortable for them.
Some airlines use these, such as ANA. They're much less comfortable than the traditional seats when you're trying to sleep though. On long-haul where everyone wants to sleep, it's preferable to have all the seats recline. You lose less knee space by someone reclining in front of you then sliding your seat forward.