skysight-inc/HackerNews huggingface dataset:
What's wrong with San Bernardino? They've got museums, a university and their own baseball team with their own stadium and a nice downtown. It's just a bit high crime, like all cities. It can't be worse than poop town SF.
It’s pedantic, but I do agree.

Ahh, HN - never change. Sorry I mean, Hacker News - never change. :)
Mountain View underwent a dramatic political change within the last decade - housing/rental prices got so bad that the entire city council was replaced.

Prior to that the situation was much like it was in most places in the US: current homeowners interested in raising home prices ran the politics, and everything listed was effectively banned.
Nothing I do requires that level of hardware; 100% of what I do could be done on a Raspberry Pi, it would just take a lot longer and be a lot more frustrating. A $300 beater (or even a $3000 reliable used car) and an $80k BMW will both get you from A to B.

I provide security, software/architecture design, and product consulting to small businesses; I have been making and breaking web and web-adjacent applications for 20 years.

It’s super nice not waiting (as much) on one’s computer. The additional RAM is the most important part.
People love to cite this reason, but practically speaking, it's FUD. Renaming in production -- whether entire tables or just a column -- is operationally complex no matter what.

Assuming any non-trivial software deployment (multiple servers), it's impossible to execute the rename DDL at the exact same time as new application code goes live. So either you end up with user-facing errors in the interim, or you can try to write application logic that can interact with both old and new names simultaneously. That's overly complex, typically not supported by ORMS or DAOs, and very risky in terms of bug potential anyway.

I'm a database expert, and among 100% of the companies I've worked at or consulted for, renames were either banned entirely or treated as a very rare special-occasion event requiring extra manual work. Either way, lack of rename support in diff-based schema management isn't really a problem, as long as the tooling has these two properties:

1. Catches unsafe/destructive changes in general and require special confirmation for them (preventing accidental rename-as-drop in the rare case where a rename truly is desired)

2. Offers a way to "pull" from the db side, so that if a rename is actually needed, it can be done "out of band" / manually, and the schema repo can still be updated anyway
This makes me smile!
Ideally you should check every Kong note. In reality behavior would probably be similar how bills are verified now; businesses regularly check $100 and $50 notes under backlights and with special pens but don't worry about lower denominations.

A dedicated "Kong scanner" could do this very quickly.
Be careful - a lot of these "quick, solve the housing crisis" invite in sketchy developer practices that cut the most ridiculous corners when building.

Prewiring new homes for solar or electric cars probably costs $100 when building a house. Romex is that cheap and pulling the wires before the walls have drywall is trivial.

Doing it after the house is built is several orders of magnitude more expensive, and a great barrier to homeowners.
Accepting bribes is illegal.
How these phone systems work is that Huawei has access to them to send updates and can remote in. Same with American or European telecom manufactures. In case of a war or conflict the Chinese government can order Huawei to shut down systems they have installed in foreign countries anytime. So while it might be an economic objective to sell more Huawei systems there is a security angle to that for every Huawei phone system running that it can be shut down remotely or sent a bad update that shuts it down. Which would be magic if a country aligns with the United States against China in some sort of conflict even if that country never goes into battle it will still be punished by China in a way that will take millions of dollars and probably months to recover from.
I'm not sure what this means. They released an update for a previous version intentionally to allow them to resolve security upgrades. That does not sound like hindering users.

The UI is clear. The notification is clear. Catalina only will install if you specifically ask it to install. Notifications for Catalina are distinct from Software Upgrades (they are two different notifications).

I do not understand people who assume the worst without even seeing it for themselves. Some people just want a bit of drama in their life.
Well, I got another year and a half (and counting) out of it after the year in which I bought it, and eBay says it’s still worth at least 50% of what I paid for it, so I think the final ROI is TBD.
Just tried it. Simple to use and seems to work reliably but the UI is a bit ugly. I like the fact that this extension doesn't ask any permission.
As someone currently contemplating pursuing a PhD and working in the Public Health space, I don’t like this author’s take.

Sure, many PhD students report a high burden of stress, but comparing this to the general population is a poor assumption.

The prerequisites for getting into a PhD program (the least of which is an undergrad degree) already says something about the difference in the population.

I think you could very easily reverse the causation. High stress people tend to seek PhDs rather than PhDs produce high stress people.

And making the comparison to STDs as a health burden is naive. In the populations I’ve studied, the burden of STDs as a health issue falls almost exclusively on those with less education and lower opportunity.

A PhD is a choice made by educated persons, STDs arise out of something that isn’t a choice made by educated persons.

The stresses of grad school exist because the environment is deathly competitive. More people want to think for a living than there are positions to do so.

I’m resolved to the fact that I would never pursue a PhD for the sole fact of getting a tenure track position, but rather because I want to challenge myself. If I do pursue a PhD, I’ll probably be another member of the population reporting elevated stress, but not because I didn’t choose that path. At the same time, I wonder if I won’t be just as stressed to pass on the opportunity.
> At best it's a financial version of Minecraft - building a pointless but showy thing just to prove you can

Well, except that with real money you get real power, and having real power is far from a pointless endeavour. See for example those nerds who after earning real money they went off to build electric cars, buy NBA teams, and even build spaceships.
Security risk is an artifact of specialization. If you build a complex business or system, the greater the degree of specialization in its constituent parts, the more security risk you need to manage between them. It's that simple.

The made up nonsense names for invented problems are basically meaningless woo at this point. We could autogenerate security risk names and descriptions with fridge magnet words with a reasonable degree of accuracy, because the underlying cause is the externalization of risk from the gaps created by the internal incentives of integrating specialized functions.

It's not that all security is necessarily bullshit, but threats and risks that don't acknowledge this inevitable reality are. It's functional integration risk. This is funny, but when a world salad ML script can generate plausible products, the field needs to pause and reflect on what it actually does.
I was trying to talk about the value the engineer produces from the perspective of their employer, which is separate from what that employer is willing to pay the engineer. In economics terms, I'm talking about the consumer surplus (the employer is the consumer of the labor the engineer produces, and has a surplus because they get more value than they are paying).

I called it a tired argument not because it definitely isn't true but because I'm tired of people shutting down unrelated conversations with it to look smart.

A simple scenario that shows these are separate concepts:

Suppose we have an extremely dumb firm that pays the engineer a trillion dollars to create an product that can make whoever owns it a billion dollars.

Suppose we have an extremely dumb engineer that charges a different firm $1 to produce the same product.

Suppose both firms are trying to sell the automation to a third firm. Their expenses are a sunk cost; this firm isn't going to pay the dumb firm that overspent any more. The value of the product is (generally) separate from your cost of making the product.
I think it is underappreciated that what you can do with it is contingent on both the license and the values and motives of the devs and maintainers. There are lots of things you can do with linux that you can't do elsewhere because it would break someone's business model.

When I use linux it is mainly because of commodity. Since it's redistributable, I can install _all_ the software I want non-interactivly, without sitting around clicking on eulas and license keys and that kind of crap.

This decouples your software environment from your hardware. You can pull the disk and put it in another machine if you feel like it. You can untar a backup into ~/ in a new installation, install all the software you use with a one-liner, and you're good to go in a few minutes like nothing ever happened.

I buy laptops two at time. If this one gets stolen today, I'll get the other one out of the closet, and I'll be back to where I started in the time it takes to drink a couple of coffees.

I can't stand the idea of my productivity depending on a specific piece of hardware, cloud-login credentials, license keys or whatever.
Lawsuit Claims Sat and Act Are Illegal in California Admissions
I'll just point you here:

https://wingsoverscotland.com/reference/

https://wingsoverscotland.com/weebluebook/

https://wingsoverscotland.com/the-wee-black-book/

Fully sourced and referenced.

Stu Campbell isn't everyone's cuppa, but his writings on the shite, filth and corruption that went on during the Scottish Indyref in 2014 are reasonably bulletproof.

I'll happily admit that the one thing the SNP messed up on was the currency question and that they should have had the balls to say they'd launch their own currency and central bank, or create a Scottish Pound tied to the UK pound (at least for the first few years - and is not unusual, there are many dollar currencies tied to the value of the US$).

I can also answer questions on the balance of media exposure between pro-Union parties and the Yes parties (SNP and the Scottish Greens). Professor John Robertson (an academic who's work was to analyse media bias all around the world) of the West of Scotland University performed an analysis of this and when he presented his findings there were calls for him to be fired from his job - by BBC executives.

https://www.thedrum.com/opinion/2014/06/30/i-was-bullied-bbc...

https://newsnet.scot/tag/prof-john-robertson/

http://www.parliament.scot/S4_EducationandCultureCommittee/B...
Spammers gonna hate this Firefox extension
You might need a sarcasm detector.
Any forums relevant to the subject matter?
For lack of an epistemological framework, we can call Kong a 4th generation wallet. If you'll bear with me:

Paper Wallet were 1st gen - one couldn't guarantee the person giving you a paper wallet didn't have two copies or kept a copy of the private key for themselves. Probably ok for personal use assuming you trust your printer firmware.

Hardware Wallets were 2nd gen - seed phrases made recovering from device loss nice but again, seed phrases were designed to be exported and cant be used as cash. They are very useful for other applications.

Java smart cards were 3rd gen - meant to be used as pre-paid gift cards but again these were designed for banks who wanted to handle the key material in software and have dangerous APIs for doing such[1].

Kong - uses a specific kind of secure element which allows for key generation but not extraction. On chain contracts convert the R1 keys used by the chip to K1 used by most cryptocurrencies today.

The paper goes in depth on this in section 2.3 [2]

[1] https://docs.oracle.com/javacard/3.0.5/api/javacard/security...

[2] https://ipfs.io/ipfs/QmRNRCocj4PwKMXrd1jeUGw7ASQSuEk7BDJu5Ks...
There really is no perfect build tool, but in my experience, nothing touches invoke http://www.pyinvoke.org for building and automation.

Any project will eventually have build and deployment scripts with non-trivial amounts of logic in them.

The question then becomes whether you want all that complex logic in shell scripts, makefiles, or Python.

For me, it's a no-brainer. I'll take the latter every time.
Personally, I learned most programming topics through individual effort. Pair programming can be great if the participants have a similar skill level while having nonoverlapping areas of expertise.

But pair programming with one experienced developer and someone who knows nothing is essentially tutoring.
Relying on people who are actively using phones, to find time to make carefully consideted and measured judgements in the name of justice is ridiculous. Full stop.
I'm pretty sure the cost of even manufacturing (let alone just operating) these screens pales in comparison to the cost of, you know, igniting hydrocarbons to make a giant airplane fly in the air at hundreds of miles an hour.
I guess if you can’t get a degree before rhe age of 10, it’s better to have no degree at all?
This trick would hit tens of millions of subscribers every hour?

The number of subscribers and frequency of their calls required to achieve this in the 90s seems difficult.
Thank you notepad++ for taking a stand instead of conveniently brushing the issue aside.

It's at times like these when the 2/3rd generation diaspora should be undermining the governments actions loudly.

On another side note, I don't know if it's just me, but on Facebook I keep getting videos like "cool amazing Chinese inventions" and it's just a bunch of people doing farm work with interesting tools or just people working (like putting tires on a truck [in reverse]). I am somewhat to blame as I generally like watching those videos. But I have a feeling it is being heavily pushed by China as some sort of psy-ops PR.

Anyways. Life is political nowadays. Thank you again notepad ++.
Is there a good vector graphic version of this that folks might recommend? I'm thinking in particular of when you need to do some quick work on (data-related) graphs.
As a person who has traveled extensively in the former USSR, owned a business for 6 years intricately linked to Russia, observed and studied the politics and social structure of this region . . .

Putin is directly responsible for the lost lives of Russian soldiers and over 10,000 Ukrainian soldiers, not to mention the outright theft of Crimea.

Putin made the Sochi Olympics a key part of his agenda, obviously the doping contributed to Russia's overall win, but recently many medals awarded to Russia have been retracted by the Olympic committee, in fact, Russia leads the historical list of medals retracted by the Olympics committee.
https://en.wikipedia.org/wiki/List_of_stripped_Olympic_medal...

Russia's recent loss of medals due to doping findings at the Sochi Olympics has now reduced Russia to 4th place and propelled the USA to 1st place.
https://olympics.nbcsports.com/2017/11/27/sochi-olympic-meda...
That seems tethical.
You haven’t been to Germany lately? Most places only accept cash, your debit card is plastic trash.
Oh, I thought that was what you meant (until resolution).. didn't realize they block disclosure forever
>The bills are intended to be spent hand-to-hand in meatspace with cryptographic validation.

Then what problem is it solving?

>Physical cash is still the dominant form of payment. The advancement here is figuring out how to issue physical cash without needing a central entity.

It has to be physically manufactured. You're now the entity.
I'm curious how they attract people to work for them, if it's common knowledge they are terrible to work for? Is that there just aren't enough other, better warehouse jobs? The few folks I have known who worked in warehouses (non-AMZN ones) generally didn't like the work, but I didn't hear outright horror stories like these.
Also from that section "we do not want to claim that the evidence is representative of the world"
Did you price used electic cars recently?

Electric vehicle sales in california are growing rapidly each year.

https://en.wikipedia.org/wiki/Plug-in_electric_vehicles_in_C...

Also, once people switch to an EV, they don't generally want to switch back (quiet, clean, cheap, minimal maintenance)
Can you comment on the history of the name, printed as 港 on the bills? For those unaware, the character means "harbour"; it's the Kong in Hong Kong – is there any relationship to the HKD?
But I was led to believe that whenever you get questioned, a Scottish person will appear out of nowhere to declare it's legal tender [0]

[0] https://www.youtube.com/watch?v=gx-a5rYIAOM
Adam Smith.
> Every person to person transaction of the instrument leaves no digital record or footprint

That's true of cash as well, but that doesn't mean it's totally untraceable, as bills still have serial numbers. I think what GP is getting at is, Kong notes must completely lack any sort of persistent unique identifier in order to be an improvement over cash in anonymity. Can Kong make this claim?
They should atleast store the data forever and release it in the public domain after people die and some finite time has passed.
Trace buster Buster BUSTER!

https://www.youtube.com/watch?v=Iw3G80bplTg
It would be cool if somebody created some provably fair ransomware that used Bitcoin script or zero knowledge proofs or something. You pay the coins and are guaranteed the (correct) decryption key.
Vaporcash
Eh, maybe I was primed, but it got me too for a second. I scanned for the usernames wondering what might be the issue, and then I noticed there was two users with similar names, k_12 and k_8 - that must be the confusion!

.. nope, I'm just dumb too. Hah :)
It's a "mailto" link, so it just opens up your default email app.
I think the argument is to say that to yourself before you’re taking a car’s / laptop’s / phone’s worth of money out of an ATM, get insurance, and give people with a knife what they want before they stab you.
So they're taking screenshots via the VM console? Why not just directly interact with the VM console, then?
That makes sense, thanks for resolving it for me.
Yeah… :(

Very unfortunate timing there. We had a cache server wedge, and the failover mechanism didn't detect it quickly enough. We've diverted traffic manually and are working on bringing the bad region back into the mix after it went down.

Things should be working again now, at least.
The current approach is fundamentally not going to work in the long term. 100Gbps at line rate means single digits[1] of nanoseconds between frames. At that frequency, a cache miss is pretty bad.

This is all not to mention locks, or that there are competing functions running in most distros (turn off irqbalance completely and watch your forwarding rate increase).

The low hanging fruit seems to have been picked as well - NAPI polling, interrupt coalescing, RSS + multique NICs + SMP, etc, are already out there, and we're still struggling to do 10G line rate in the Kernel...and data centers are moving quickly to 25/100G.

[1] Edited for terrible math - 10Gbps at line rate is 67ns per packet, 100Gbps is 6.7ns
Put yourself in a safe car while teaching a teenager to drive! :)
Ask HN: How do you handle vulnerabilities in internal systems?
I work for a decent size company (~2k employees) and a constant source of debate between teams is how to handle vulnerabilities in internal systems. Specifically, vulnerabilities in linux packages (like gcc, libcurl, openssl, libpng, etc.) inside Docker containers. Many times these packages are not used by the application and they just come with the OS, while other times the packages are used extensively. How do you handle fixing these vulnerabilities in systems that aren't accessible from the public internet? These images are things like databases, caches, internal-only apps, etc. If you need a specific example as a talking point, say a high severity vulnerability identified in the nfs-utils package on a database container. External resources for best practices welcome
Handling Avro Files in Python
> OK it's not surprising that rogue insiders – whether it's a regular ads employee, manager, or a site-reliability engineer – can attempt this kind of tampering.

In this case, it was a "contractor". Next time, it will be an "intern" etc etc.
Confirmed. Thanks!
True, but there’s balance in the other states.
Personally I don't have a problem with poor people living right next to rich people. I think the more we isolate ourselves from each other, the more we lack empathy for each other. Having been homeless, my personal experience is that people who haven't been homeless don't get it at all. The first night I had to think about where to put my stuff, I realized I was not prepared to deal with that.
Three Men Arrested in $722M Cryptocurrency Fraud Scheme
SBCL is a de facto standard, and relying on it is fine.

Clasp is nice, but SBCL is fast enough that it's mostly extraneous unless you really need to talk to c++ code.
Disclaimer: Not a hardware engineer, nor a CP/M aficionado (though I definitely remember Gary Kildall), but a former AST Research (later AST Computer) employee. AST was an "expansion board" manufacturer turned systems OEM. During the transition from memory and connectivity boards to desktops, the company's top hardware engineers explored an architecture they based on an "intelligent, arbitrated, multi-master bus." The notion was to speed up operations and increase power by designing a bus that accommodated multiple processors (on boards, of course) operating independently - arbitrated by a central CPU. It never flew - but I always thought it an elegant model. This was in the 1986 timeframe, long before GPU's became popular.
I’ve recently been working on an ESP32 variant of something similar [0]. ZMOB-like designs are so much fun to think about.

[0] https://twitter.com/eismcc/status/1201310140416217089?s=20
$5k from one customer. I bet it wasn't the only time he did this.
Odd - working for me on Firefox with those plugins. What error are you getting?
It's clearly not singular, since I listed other broad classes of intrusive search, including one, search incident to arrest, that is individualized and every bit as intrusive as a warrant-based search.
Bitbucket and GitHub had feature parity for much of the early years. The performance arguments (though some of them were rather spurious) and the network effects of the Linux team itself seem more critical for git winning than GitHub. (As a devout darcs user at the time, I watched from the bleachers of that fight.)
Imagine if you are completely wrong. Willing to bet humanity on that?
This is one story. If you pull the financials of major public colleges, prof salaries per credit hour taught are increasing.

No other metric matters.

The cost has to come down, and that includes the cost of instruction etc.
Clojure with a good c (stretch goal: c++) FFI on LLVM would be amazing. I somehow suspect the reason we don’t have it in a fully baked form is that it’s hard.

That said, there is Ferret which is Clojure-like, and compiles to c++: https://ferret-lang.org/

Racket is also lovely, and I hope that their port to Chez Scheme will enable alternative implementations, since more of Racket is now written in Racket rather than c.
Correct - things you take for granted like ARP and TCP/IP are completely up to you to take care of. Further, the Kernel has little visibility into most kernel bypass stacks, so /proc or iproute are often blind to what's happening.

DPDK does have "kernel interfaces", so you can direct packets to the kernel.