skysight-inc/HackerNews huggingface dataset:
ATT&CK Evaluations of Cyber Products
What did I just read? A parody?
My first Debian install was 2.0. I ordered the CD's (there were 2, as I remember) from an on-line shop that sold burned CDRs with linux images. I wish I could remember their name...
You say

> I'm very sorry

after saying

> perfectly optimal worker automaton

I don't know if your intent is to come across as sarcastic or as genuinely sympathetic here. If you were going for genuine sympathy, I'd like to explain why your words sound dismissive:

Taken literally, words like "perfectly" or "optimal" refer to an absolute.

Human life is very rarely absolute. We deal with ambiguous information and must make choices which are trade-offs among competing values we simultaneously genuinely hold. This is such a recurring fact of human life that people sometimes use absolute words as an exaggeration, as I think you did here. That exaggeration expresses emotions like exasperation and incredulity. It says, "it is utterly ridiculous that your job even had those unrealistic expectations of you." That is the literal meaning of what you want to say with the words "If you're getting fired for not being the perfectly optimal worker automaton", right?

If I was talking about how my workplace had ridiculous expectations of my output, that would be an expression of sympathy. But I am not, so it is not.

The other thing that exaggeration does is refuse any thought about magnitudes. Without a sense of magnitudes, you can't hold the information you'd use to decide on a balance. Exaggeration is a refusal to acknowledge problems of balance. True sympathy acknowledges the realness and difficulty of the problems faced by another.

Incredulity sounds more like, "I don't believe that your problem is real."

----

Maybe you think I'm incorrect.

Maybe you think there isn't a balance to be struck.
Maybe your life experience has shown that this balance is obvious and easy for you.

Thats fine. You're free to disagree.

But if you do and sarcasm was your intent, please know that it is both less clear and less kind.
> you’ll still come out far ahead the average senior software dev living in some midwestern city

Come out far ahead how?

I'm already pulling close to 6 figures, and I expect to reach $120-130k in a relatively short time period. Do I -need- to move to SV and live in much shittier conditions and have an insane cost of living just to earn some more money? ... I feel that remote work makes this an outdated concept (my company is fully distributed).

I'm almost 24 and if I continue to manage my finances correctly, I should have my own spacious home by 25. I'm in South Carolina, but there are plenty of other reasonable places in the US. The money that I don't have to spend on high cost of living goes straight to my savings. I get that my situation is atypical, but it's absolutely possible to have a great life and earn great money while not living in SV. If I ever feel like I need to earn more money, there's nothing stopping me from creating my own startup, etc.

I guess I'll never have the "prestige" of working in SV, but I seem to do just fine by going to conferences and networking.
I'm very much a Linux-head since the 0.98a days, and my desktop computer that I mostly use for recording music is OSX. Mainly I've avoided Windows for a variety of personal reasons. I also have a dozen Raspberry Pis running Linux, so I try to keep everything reasonably similar.

Recently I bought matching laptops for myself and my non-technical partner. For ease of maintenance, I left Windows 10 on both of them, and set up LSW under Windows Terminal (versus Windows Console, which is far too limited for that use).

Dragging the terminal window to the edge of the screen does a half-screen maximize, and then I have Chrome browser take up 3/4 of the opposite side of the screen. I use tmux to split that screen in half so I effectively have 2 terminals available immediately, and of course tabs. So it literally feels like I have 2 operating systems on one screen. Most importantly, with the newer WSL you can simply add 'export DISPLAY=:0' to the end of .bashrc to run GUI apps without the added overhead of whatever remote desktop software.

Having done that means I can keep our music files in sync (MusicBee), all our shared resources are compatible in exactly the same way, and I still have something of a familiar Linux experience at my fingertips when working on either laptop.

Also, Windows 10 seems 10x better than the previous Windows versions I've tried and worked with in the past. It's still sluggish and has annoying things popping up and dinging, but it's easy enough to get used to, given the ease of maintenance for everything else.
File IO, regex matching, printing a text table, making HTTP requests and so on.
> you will be met with help and kindness

How is that different than the U.S.? Are refugees not met with help and kindness in America?

> And even while waiting, we do not separate kids from you and put them in cages

While I do not agree with this tactic, I also think that this paints an unfair picture, since Canada has never experienced immigration issues to the degree that the U.S. has. Maybe the U.S. should do what Mexico did and let caravans of migrants show up at the border in Vancouver?

> https://www.bbc.com/news/world-us-canada-48696974
> And we accept the most refugees in the world

"According to the US-based Pew Research Center, which looked the the UNHCR data, 2018 was the first time the US did not lead the world in refugee resettlement since 1980."

I guess congratulations? I don't necessarily view "accepting the most refugees" as a moral calculation, nor something that should be a competition. But if you want to keep score I guess the U.S. is now 28-1 since 1980. Go America!

"The US is the world's major recipient of new asylum applications, registering 254,300 applications in 2018.

Canada was ninth on the list of new asylum claims with 55,400 registered in 2018, behind the US, Peru, Germany, France, Turkey, Brazil, Greece and Spain."

Jeez only 9th? Worse than Peru?

"An influx of asylum seekers crossing at the US-Canada border has become a political issue after approximately 40,000 people "irregularly" crossed into Canada between 2017 and 2018."

Why is this an issue for Canadians?

"
Canada currently is struggling with a backlog of almost 74,000 asylum claims with applicants waiting almost two years for a hearing."

Other relevant facts from your article.

But hey, the U.S. is bad because that's what the news says.
I guess from that point of view makes sense.
Aside: this is one thing I found interesting about go. They maintain one compiler and two front ends:

llvm: https://go.googlesource.com/gollvm/

gcc: https://github.com/golang/gofrontend

Go: https://github.com/golang/go/tree/master/src/cmd/compile

And I believe all three are maintained by the go team. It should be noted that the LLVM implementation is used by tinygo:
https://tinygo.org/
One person who has talked about another benefit is Dan Harmon:

(apologies as I don’t remember where or the exact quote)

In an interview he mentioned that his [particular] fame meant that he no longer had to go through the superficial conversations when meeting someone new, that everyone knew enough of his authentic self that they could just jump straight in to meaningful conversation.

I remember this because, for me, that would be the only compelling reason to become famous.
I think this is actually from PyCon Israel 2016 and was uploaded in 2019.
> The perf penalty of misaligned loads and stores is incredibly low.

Yeah, this.

You might as well think of them as free in most scenarios involving small reads and writes. If there is some small advantage to misalignment (often, reduced memory use through better packing), do it!

The cross-line penalty would occur only for 3 out of 64 alignments for a 4-byte load: less than 5% of the time, and then the penalty is small.

That % is more or less worst case in well designed code [1]. Sometimes you can do misaligned loads that you guarantee will never cross. A common example is a misaligned LUT where the values overlap. E.g., given n, you want to load 8 bytes with:

[n, n+1, n+2, ..., n+7]

Let's say n ranges from 0 to 15. A traditional aligned LUT would have 16x 8-byte values, one for each n (128 bytes). You could also do it with a single 23 byte LUT, running from 0 to 22, and a misaligned load into that LUT at byte position n. As long as you align the LUT itself (e.g., to 32 bytes), you will never cross a line.

For large accesses, things become less clear. After all, a 512-bit AVX-512 access is guaranteed to cross if it is misaligned, and 256-bit access randomly distributed cross half the time, etc. Vectorized code is also the type of code that may be written to approach the 2/1 load/store per cycle limit, so it really pays to try to get alignment for any type of non trivial loop.

---

[1] Specifically, this is the crossing % you would get if you could assume nothing about the distribution of the accesses, i.e., they are uniformly randomly distributed. If you know something about the expected alignment, then you can shift everything to make crossing less likely.
NUL is explicitly 7 bits. Any other null could be larger than a machine byte.
I've seen Black do this (the dict needs to be too long to inline):

call(
{
"key": "value",
"key": "value",
}
)
Even your link tells specifically the name of '\0' is Null, NUL is merely an abbreviation

See the table here https://en.wikipedia.org/wiki/ASCII#Control_characters
Great work! Would you know if this can be used to deploy interactive ML models?
NICE still exists - just about (Nonprofit International Consortium for Eiffel).

http://www.eiffel-nice.org/index.html

Had a lot of fun with Eiffel back in the day. Being able to work closely with Bertrand on the language was a great privilege.

For me the great innovation of Eiffel was the ability to turn off the pre-conditions once you'd shown the code works, thereby preventing your code methods wasting time verifying and validating the parameters needlessly at run time.
I loved this bio. In particular, it reinforced the value of blogs and websites that are independent of closed systems like Medium, Facebook, etc. This site exists as a passion and gift to the world. With the Internet Archive it is much harder for this to disappear compared to serving the same content on Facebook.

It was a joy to read the bio of the creator and to learn of the interests, background and desires that led the the dictionary. Adding to my list of favorite sites.
That is probably wrong in this generality because it is used by ING, at least.
An interdisciplinary mashup I’m curious about is using videogame engines (e.g. Unreal) for quality real-time 3D rendering responding to e.g. audio signal (music) or motion, and creating cool art installations / live performances based on that.
Oh, Canadian skill immigration, did you check from which countries most of immigrants came in Canada last 5 years?
From Ian Murdock's wikipedia page, the debian's founder: "He named Debian after his then-girlfriend (later wife) Debra Lynn, and himself (Deb and Ian).[3] They later married, had three children, and divorced in January 2008.[4]"
Mapping the Future of Bioprinting Research
> it’s safe to assume that attackers are likely to lie on their fingerprints

I hate this sentiment that every one who doesn't want to be tracked is a criminal.

It's the digital version of "You don't have anything to hide if you aren't doing bad".

---

I don't understand the fear about bots or scraping. As long as bots are behaving nicely (not slamming servers), they are just as much web citizens as humans.

The web is about sharing of information and having an entire company about exterminating the viability of bots is horrifying.
x86-64 Assembly Language Programming with Ubuntu
By Ed Jorgensen

http://www.egr.unlv.edu/~ed/x86.html
In 1993 I had a DEC AXP 3000/300L workstation (Alpha with a 32-bit memory bus). It was fast, but the DEC OSF/1 OS was pretty bad and hobbled the machine.

There were lots of portability issues, for instance GNU Emacs wasn't 64-bit clean whereas Lucid Emacs was, so for two decades I ran Lucid/XEmacs instead.

Alpha was the first microprocessor to hit the billion instructions per second mark (BIPS-0) and was used to build oa 50Gbps router in 1998 using Alphas 21164 with routing code running entirely in L1 cache:

https://www.cs.princeton.edu/courses/archive/fall12/cos561/p...
I have been suggested https://www.recomendo.com from a friend of mine and have found it useful.
How do you find part time work?
I usually complete the work for the 2 week sprint at my current remote job in ~5 days. How should I go about finding part time work? I never see it advertised and please don't tell me about Upwork and other freelancer sites since it is obvious that it only works if you have an established account /reputation or work for $10/hr.

I had two full time remote jobs for awhile but I am always paranoid that they will find out about each other, especially at the start in the background discovery.
Extortion would be 20milion. 2 mil is not unreasonable given the circumstances.
Soap Bubble Wiki
There are cheaper phones, it's not hard to find pretty good phones that are around 70 euros.
In an alternate universe, DEC got out of their own way and partnered with IBM to port OS/2 to Alpha. I wonder what that world would have looked like.
> Now, that's a hard thing to contemplate, as 'nobody' can really compete with SV at their own game

As in total aggregate, I agree. On a per-capita basis, no. Some countries have a very healthy tech sector without being as large as in the US. Canada does not not need to have FAANG, just an F is enough.
Counterpoint: You want to help people, educate people, lift people up — and your only talent best suited for this is your writing skills, your speaking skills, your musical abilities or your acting skills.

Fame is how you reach a larger audience.

My high school teacher may have inspired a number of his students to love and pursue astronomy, but Carl Sagan inspired orders of magnitudes more.
It really depends on the career opportunities you have in SC and how they correspond to your career aspirations. There really is nothing wrong with not going to the the valley or another big tech hub, but if you want to say, become a specialist in some area of ML, then there will only be a few places to do that. It isn’t (just) about prestige.

If your goal is a comfortable life and financial stability, then you are completely right. If you want to become a millionaire or more, then you’ll have a better shot SV. If you are really focused on a specific technical topic, then SV, if you are a generalist and enjoy your work but don’t want to live it, then SC is fine.
It is very unlikely to be the case. Much more likely is that Bing either doesn't have enough search data to properly answer that query or does not have a ranking model that can answer that query correctly.
Perhaps that’s true, but it’s apparent to me that those people are the only ones with a chance at class mobility in this country now. At this point at least, it’s out of reach for me.
Yep. I already do this.

Saw it was trending on LinkedIn. There's a LifeHacker article explaining how to use Trello (Kanban) + GTD. I do that for my life tasks.

I look at the board most mornings, it helps keep me on track with life admin as well as career goals.
Yup this is basically a cumulative update to Debian 10 buster. apt update && apt upgrade picks it up just fine, and there are no obvious performance issues.
He said:

> Debian releases

Not Debian itself.

From "A Brief History of Debian,
Chapter 3 - Debian Releases" [0]:

> This was the first Debian release with a code name. It was taken, like all others so far, from a character in one of the Toy Story movies...

"Bo" was the first version of Debian that I played with. I switched to Debian "full-time" shortly after "Hamm" came about.

[0]: https://www.debian.org/doc/manuals/project-history/ch-releas...
An extra reason for being famous (could be included in #2 of the above list) is to amplify your positive impact in the world. E.g. if Bezos wasn't famous i'd probably never learned about his business strategies (costumer first, risk taking & innovating, etc). IMO this is the best reason for being famous.
4. Fame is an unavoidable byproduct of your pursuit to reach/help a larger audience.
Some contracts can be checked at compile time, if enough information is present.

In fact one of the design decisions driving C++ contracts, which now will probably only show up in C++23 due to some last minute issues, is how the optimizer can take advantage of contracts while generating code.

Languages like Idris are quite interesting for us on HN, but I seriously doubt that the kind of developers that languages like Eiffel are targeted to, would be able to take advantage of them with their current tooling state.
Probably CheapBytes.com
Very interesting. I always thought of knowledge as a graph (as opposed to a document or a tree), and browsing the graph of knowledge will be really useful for learners.

I think the obstacle is more on the authoring side (how to build/edit graphs as easily as plain documents). There is also standard taxonomy challenges, about choosing the "types" of the nodes and the associations (values of the `instance_of` of the `Association`s in TopicDB). If the platform restricts things to a fixed taxonomy, you lose expressiveness, but on the other hand if you let users create any-which category they want things can grow quickly out of hand).

A related project in that space is https://metacademy.org/ whose code is here https://github.com/metacademy/metacademy-application

I was working on an app similar to contextualize a while back, but had to pause because of other projects, but I hope to come back to it soon. I hand't gotten very far on it, so maybe I can contribute to contextualize. My main focus is on building tools for serialization/deserialization of the graph data to a text-based format that can be stored in git repos so that multiple authors can collaborate on building out a knowledge base using pull requests, see data fixtures here https://github.com/minireference/structure-api/tree/master/d... )
But I want them normalized. Normalized to single quotes.
You definitely can. AWS does it. NGP VAN does it. Every contractor that the DNC uses does it. To believe that they don't is the kind of ignorance that leads to anti-vaccine conspiracy theories and your own conspiracy theory.
$5M in Vanguard also is safe from everything but wars and asteroids.
| boring and drab

Yeah, maybe they ought to try a little of that clown makeup on to try and distract from their obvious incompetence.
Could you please name a couple of places that do? A lot of people I know would definitely appreciate this knowledge.
Consider that negative obsessions is a particular case of a more general problem - attention you don’t control.
Then why do so many of the richest people have so much stress?
VPN, or any other network segmentation does, indeed, just shift the attack surface, and often creates a false sense of security behind a network perimeter.

Google, for example, proposes a different school of thought – zero trust network, and strong contextual authentication of each individual request.

Precisely because you need to expose more services to more users, you need to be extremely conscious about treating singular network ingress point as a primary security gateway.

Check out https://beyondcorp.com, it’s a very interesting concept.
I was surprised too. It's a variety of "I need X to speak at my charity event," "hey can you give X my contact info," "here's my nude selfie and my number, please tell X," to "X is impersonating himself on social media and swindled me out of thousands of dollars, I'm going to report you and everyone else."

Ironically, being relatively faceless has burned me as well. I have a fairly common name, so when someone else with the same name made a shitty comment on some board on Facebook, I had days of being attacked, getting DMd to kill myself, brutal comments on all my posts...it was hours and days of cleanup and banning people.
Understanding CVSS v3.1 – From Risk to Severity
I last worked at JPL 10 years ago but all mission systems lived on many distinct networks of “dark cable and fiber”. Physical access to mission networks was usually heavily guarded. It would take accessing several doors to just be in a room with a network drop or telco closet.

Access in any of cafeterias (there’s more than 1) over WiFi is limited to common systems and the internet. There was no Cat5/6 in the cafeterias. There was also a further limited Guest WiFi network for media, guests and the like with bandwidth limited access to the internet only.
I am at 1,189 following and 12.6K followers.

I don't think I've gotten nuttier, but I have gotten more circumspect. I'm cognizant that my broader audience size means I can assume any person will have context for my tweets. It's really hard to make good jokes without a shared understanding so my humor tends to be more watered down.

I do miss the time when my twitter feed felt more like a hangout with a group of like-minded game dev and programming language nerd friends. It's still that, but it's sort of that + some nebulous cloud of strangers, which effects the feel.

At the same time, I am grateful that having a higher Twitter profile helps draw more attention to my writing. I've sold more books because of it and that materially helps me and my family, so I certainly can't complain.

It's not worse, just different. It feels very much like the difference in how you conduct yourself at a party with friends, versus on stage at a work conference. I'm still me and I still try to be interesting and funny. But I'm a more carefully cultivated, safe subset of me in the latter venue.
Could the fix have any potential negative effects on other workloads?
> What can you achieve with fame that you cannot achieve with money alone?

Reaching a larger audience.
Same. It looked weird at first, and everyone had specific complaints with it, but they were all different complaints. Now we all accept that it’s just what Python code looks like, and can stop thinking about it all.
Have contact info? Exploring opportunities in Cebu.
> > it’s safe to assume that attackers are likely to lie on their fingerprints

> I hate this sentiment that every one who doesn't want to be tracked is a criminal.

The statement you are referring to is more accurately paraphrased as “everyone who is a criminal does not want to be tracked”, which is very different from “everyone who does not want to be tracked is a criminal.”

> It's the digital version of "You don't have anything to hide if you aren't doing bad".

For the reason noted above, the statement at issue is actually the digital version of “if you are doing something bad, you do have something to hide,” which is a near-universal truth (I mean, it not true if you have actual or practical immunity from any accountability for your wrongdoing, but otherwise it's true.)
Jordan Peterson forced to retreat from public life because of addiction
Yep. This seems like the obvious one to me.
It's very hard to find a life partner who is willing to live merely comfortably knowing they can draw more blood from you, and had to resign your children to mere comfort, knowing they'll have to compete for ever scarcer living-wage-paying jobs.
From the paper - how many of you actually downloaded it to read it ?

"The Work" technique assumes that feelings (such as sadness, anger, and pain) emerge from an attachment to a stressful thought, which leads to behavior. This means that thought precedes feelings and behavior, and should be focused on as the primal cause of stress and suffering"

Anyone here familiar with buddhist meditation ? Vipassana specifically ? Isn't that what they talk about ?
Shortly after I graduated in '98, I purchased an Alpha that ran both NT and some Unix (I forget which?). This purchase was motivated by nostalgia for the DECs in the computer lab at school, which were awesome, although I agree that in the long run I wasn't completely satisfied with it.