skysight-inc/HackerNews huggingface dataset:
Sure, but you don't need to know which butterflies flapped their wings - you just need to know "if there's a tornado, the house falls down, and we're in tornado country."

In the example above, it seems sufficient and entirely testable to conclude, if for whatever reason NFS is flaky, $PATH resolution will skip the directory with the right linker and fall back to the old one, and if for whatever reason you call the old linker, it has different behavior about static initializer order. That's enough to both describe the problem, reproduce it, and fix it. No, you're not going to be able to identify which particular packet was lost, but (and I say this as someone who's maintained production systems that rely on cross-continent NFS) you expect that packets can be lost and you figure out how to make the system robust against it. Don't put multiple files with the same name on $PATH, or call the linker by its full path, or something.

And that leaves you a very far distance from "something spooky is happening with the computer and so passwords weren't being checked today, who knows."
You'll always get spam, email for example. You're not required to solve a stupid task before sending it. The recievers mail client can filter basic spam from real mails. Yes, there are false positives and you'll have to look in the spam folder. But you will do it carefully, not get phished that easily and see no sketchy pill ads.

Bots and spam will always exist and training googles AI to detect stop signs won't change that.
There could well be millions or billions of sand particle sized objects coming through constantly.

The Solar System is big. Almost all of them will pass through and miss everything. We literally have no way to notice them.

Incidentally we have spotted a second interstellar object. https://en.wikipedia.org/wiki/2I/Borisov is more what we were expecting them to look like.
I am an idiot, I skimmed the article, and thought it was about Tom Waits Nighthawks at the Diner (which is also a painting).
Thanks for the kind words!

For developers everywhere competition is great. We recently made 18 new features free and open source https://about.gitlab.com/blog/2020/03/30/new-features-to-cor... and today Github with an improved free plan and their team plan came down to the exact same price as our most affordable plan. BTW Maybe an idea to rename their lowest tier from team, may we suggest bronze? :)

Since you mentioned contrasting here is a quick take on the features that you lose if you go from a GitHub Pro account to a Free account, I got the list from https://news.ycombinator.com/item?id=22867974 :

Protected branches in private repos => Free on GItLab
Draft PRs in private repos => Free on GItLab
GitHub Pages in private repos (using 1) => => Free on GItLab
Wikis in private repos => Free on GItLab
Code owners in private repos => Bronze on GItLab
Multiple issue assignees in private repos => Bronze on GItLab
Multiple PR assignees in private repos => Bronze on GItLab
Code review automatic assignment in private repos => ?
Scheduled reminders in private repos => TODOs are free on GitLab
Standard support => Bronze on GitLab

For a complete comparison across all the stages (like monitor and defend) please see https://about.gitlab.com/devops-tools/github-vs-gitlab.html
I just realized I've been paying for Github pro for like a year for absolutely no reason at all.
Note that WaPo is owned by Jeff Bezos.

edit: This is mentioned half way through the article.
Doesn't work for me if the filename has underscore(_) or dot (.) - it only copies part of the filename.
Once you realize spirit describes the human wave-function you will stop being uncomfortable with the word.
Showing how Yang-Mills and SU(3)×SU(2)×U(1) fall out would be a natural starting point for a proposed unification theory. This model doesn't even try explain the existing particle hierarchy as a special case.
This is an informative video in what is involved in designing ventilators.

https://www.youtube.com/watch?v=7vLPefHYWpY
A self signed cert is a a real cert, its just not provided by an CA authority. I guarantee you this http just redirects to an https location, (just tested it on my own device), so there is no plain text transfer. In the mobile industry this happens all the time as backend endpoints grow and change.
This depends on your definition of informal terms like "letter", "character" etc.

The typographic term for combinations like this is "digraph". (Wikipedia's definition: "A digraph [...] is a pair of characters used in the orthography of a language to write either a single phoneme [...] or a sequence of phonemes that does not correspond to the normal values of the two characters combined".)

Whether digraphs have separate keys on a keyboard, are treated as distinct for the purposes of alphabetisation, whether speakers of the language think of them as separate "letters" when spelling out a word and so on, are all separate issues and varies between languages (or, more precisely, between the conventions for writing a certain language).
So have you read the stories about how hospitals rent cooling containers and some cities use ice rinks to get additional storage capacity for dead bodies and go "I wonder if there is any excess deaths going on"?
> For everyone else in the field it seems like this is effortless

It gets easier the more you experience. I’ve been in the game for around 20 years. I still get caught on sharp edges in code bases. Things still take longer than I originally estimate. Recently, I lost hours on a dumb docker thing because I don’t understand it as much as I would like. One of the code bases I work in from time to time still takes me sometimes days to figure out something that “should be easy,” and I’ve been in that code off and on for literally years. I think you are doing just fine. There are people in this industry who can’t code themselves out of a wet paper bag. You sound like you are already beyond what some professional programmers can do.

Seek help from other contributors to the project. It could just be a shitshow of code that takes hand holding to understand.
Oh no, sorry if there was a misunderstanding. I said "sadly" because it is so unfortunate that we are all in this current situation -- a pandemic. And it feels "sad" in this specific context because I am seeing an uptick in searches for toilet paper, a result of people being unable to find it anywhere else. It's a sad state of affairs all around. I have no judgement on people buying extra toilet paper.
I'm not even a software engineer. Lowly MBA that writes R code. even I understood the gist. But the part that I understood well is that _this was a HackerOne managed program_, meaning that it's HackerOne's job to take a raw submission and turn it into a well designed report that can be triaged and fixed.
store.steampowered.com is a fully web accessible site with a CA signed certificate though. It's the main steam marketplace. I think the whole point is that they are leveraging this for their app, so using a self-signed CA doesn't make a lot of sense in that case (not that I'm sure it ever would for a company these days, SSL certs are cheap).
Apple removed all advertising from Shazam after they bought it.
Thanks for your encouraging comments! There is already a proposed observational test for the maximum entanglement rate hypothesis (based on the location of the stretched horizon in the context of black hole physics), proposed here: https://www.wolframcloud.com/obj/wolframphysics/Documents/so...
i totally agree with you. it's hilarious that someone would try to argue with the article's main point on a platform that basically proves the point.
There was some, but we tended to put a bound on meetings to 10-3. I had a good excuse in that I had hard deadline of 3:45 to pick my son up from school most days. The days that I stayed late, it was mostly for social events. Either TGIF on thursdays, or group celebrations which were generally at 4.
I'd like to see that. Although honestly I find him and his brother to both be frustratingly vague and abstract at times.
git will also do this, so on a fs that allowa arbitrarily byte named files, you end up with tree objects of same name which makes digging them out later "fun"
My legacy silver org plan (20 private repos) only shows a migration plan to teams at $4/user, is there something I'm missing? The new free tier seems effectively the same or better.
This posits a simplistic economy where everyone can predict the future. The real world has risk and unknown effects. If someone stockpiles a lot of masks on the chance that they'll be needed, hoping to thereby profit, they're taking significant risk, and reward for that is not unreasonable.

This is essentially how finance, banking, markets, and pretty much our whole economy work.

The idea that producers should only be able to charge a modest margin over their "costs" is pernicious nonsense. Furthermore, if you punish this sort of risk-taking intensely enough, producers will just shut down during unusual times (the exact opposite of what is needed).
No luck.

But I did make that python program to take photos. 64 images to scrape one day. I'm not too concerned of the difficulty of OCR, there's gotta be some libraries for it, especially on black and white text from a web page.

(I did OCR with cellphone pictures and it worked)
> “We support every employee’s right to criticize their employer’s working conditions, but that does not come with blanket immunity against any and all internal policies,” Herdener said.

> Amazon’s external communications policy prohibits employees from commenting publicly on its business without corporate justification and approval from executives. Herdener previously said the policy did not allow employees to “publicly disparage or misrepresent the company.”

Amazon is straight up firing these people for expressing their personal opinions. Amazon isn't even claiming they lied, or pretend to speak officially, or any other reason.
Agreed, I don't really see the upside of getting a "proper" programming language for this.

I just got done with a client of mine migrating a considerable amount of infrastructure code that used Troposphere (Python -> CloudFormation) into Terraform 0.12. The old code was very difficult to reason about, had all sorts of inter-related components that caused infrastructure changes to be scary, and really there seemed to be no benefit of being able to write Python for it.

They now have over 100 services in Terraform 0.12 and they feel confident even making network routing changes in prod during the middle of the day with the new system (something that was unheard of before).

I've found it much easier to write declarative configs in Terraform over the years. Back when I was at Engine Yard we used a project called fog to write infrastructure code in Ruby. It was nice for the time (must have been 2012 or so). But again, I really don't think the problem is that I need a programming language to define my infrastructure. I need a way to declare my infrastructure and manage that state so that I know that what I declare is what is running.

I totally can see teams choosing to write infrastructure code in TypeScript, and Go, and Python. And now you have a mess.
What do you think of a variant on this?

https://blog.regehr.org/archives/1180
1. Yes, not as long professionally. More experience with CloudFormation and pyplates. Pulumi has libraries that wrap around Terraform providers for some of its integrations such as Google Cloud Platform.

Terraform pro:

* Simple deployments are fairly easy to grok, the base language is simple to understand

Terraform con:

* Advanced deployments, using templates, modules, functions is nontrivial to teach and error-prone.

For my use case, we have multiple environments - as most folks do - and we also have several "micro-service" like services deployed each with its own configuration. It's very easy to write a function that generates these variations:

function someResource(args, additionalOptions, etc.) { }

This is much easier to teach, and so I would argue that Terraform solves for a case that doesn't really exist in many businesses.

2. TypeScript

3. The getting started information is fairly solid, I didn't have a lot of difficulty getting started.

4. Primarily Kubernetes resources on GKE, service accounts and tokens, Cloud SQL, storage buckets, and so on. Creating a service account, a database or storage bucket, and then linking that into a Kubernetes secret is pretty simple.

4a. I did hit a bug where Pulumi handled poorly a resource which I manually deleted in GCP. I had a Cloud SQL instance (Postgres), a User in that instance and a Database in that instance. (Cloud SQL instances can contain multiple databases). I manually deleted the three of these, and Pulumi had trouble trying to unwind state if I recall. The bug is here: https://github.com/pulumi/pulumi-gcp/issues/268

5. We aren't a paying customer - our needs around compliance mean we need to run it self hosted, and Pulumi's CLI is OSS so we are using the Pulumi CLI and some really hacky shell scripts to emulate a "server" and prevent reentrancy, effectively treating Pulumi deploys as critical sections. We have no plans to release these scripts. I understand they've recently added a self hosted option, but we haven't had time to evaluate.
Dramatically raise prices for travel, add lottery’s etc.
Workflow automation w/ built in CI/CD, package management and code scanning etc.

The most important bit is workflow automation. It can be triggered on most (all?) events github emits

https://help.github.com/en/actions/reference/events-that-tri...

It was super obvious the value prop when it was HCL based. YAML based it kind of looks more like 'another CI'. It's still insanely powerful, just not as developer friendly anymore.
Those are addressed by the QUIC specification, by having lots of encryption. The whole content of QUIC packets is encrypted. You can't really do a lot with connection IDs. And for most of the packets you can't even observe the full connection ID, since an abbreviated version is sent.

Acknowledgements are encrypted.
VR facial expression and body language is still pretty low fidelity, but the technology is going to continue to improve. Most of the tech for capturing facial expressions exist already so it's a matter of integration.

For me the current tech is sufficient for office style social interactions, but maybe not suitable for everyone just yet.
With respect, I don't think that our derivation of the conformal structure of spacetime, or of the Einstein field equations in the continuum limit of infinite causal graphs, is "hand-waving". See, for instance:

https://www.wolframcloud.com/obj/wolframphysics/Documents/so...
Great work! Although it is interesting to me how it doesn't work very well for non-white faces. Which totally makes sense given that renaissance art training data reflects the time and place in which it was created.
You are reading things I did not write. I said that what it is important is that the system they are changing to is better for Mongolian people, not that the system the government is proposing is better. In the next paragraph, you can see that I even used a conditional.

I do not know anything at all about Mongolian writing systems to know what would be better. I was just pointing out that assuming that people in Mongolia could prefer their old system instead of English, and that is the opinion that counts. I agree with you that this opinion is not necessarily the one of their government.

A referendum may be necessary but, again, I do not know enough about the situation to know if this is the case. For example, if the party in power had been elected by a large margin and this was the main point of their program, it may be not so necessary, although I still think it would be the right thing to do according to democratic standards.
Court: Photographer Gave Up Exclusive License Rights by Posting on Instagram
Open Source software releases: Q1 2020 recap
> We’re happy to announce we’re making private repositories with unlimited collaborators available to all GitHub accounts.

Huh, I thought github made private repos available to free github accounts a while ago?

Looking for historical announcement, aha, it was not with "unlimited collaborators" before.

From Jan 2019:

> GitHub Free now includes unlimited private repositories. For the first time, developers can use GitHub for their private projects with up to three collaborators per repository for free.

https://github.blog/2019-01-07-new-year-new-github/

So what's new is dropping the 3-collaborators-per-repo restriction.

I hadn't actually realized this restriction was there, apparently I've never used a private github repo in a free account! And the messaging from a year ago stuck in my head as "private repos are free on github now", I thought they had already done what they did today, oops.

Above natfriedman writes:

> We've wanted to make this change for the last 18 months,

So apparently they had wanted to do this even in Jan 2019 when they did something less than this...
Github pages are free for public repos, aren't they? Perhaps switching to a public repo is an option.
While this had the largest short term impact, I would argue the larger cultural, organisational, regulatory approches had the more fundamental long-term effect.
(7) Exactly. Please add how to free memory in standard way if there's an exception, and how not to use GoTo in such cases.
For sure. I never said SAML was any good -- I said I found it to be simpler. :)
I do not scrape Amazon. That would be practically impossible, especially if you want to keep your costs low.

I utilize their product advertising API, which provides enough data for my needs (since I'm not interested in every single product and I only update once a day presently).

The manual part is figuring out how many units are in each item. For Lego, it's pieces. For Poptarts, it's individual pastries. For toilet paper, it's individual sheets of TP. Every product is slightly different, and it's often times not obvious. Once this manual part is done once for an item, I never have to do it again -- it gets an updated price from the API, calculates the unit price (because it already knows the total units), and then it updates the website.
No, it’s impossible to do that accidentally. Due to its type safety. You have to be pretty explicit about passing a non-string in (all rust strings are valid utf8).
I have started to order for at-home delivery, including groceries. That is anec-data but I wouldn't be surprised if it is also the case for a lot of other people.

Also I know that ads of all kinds have dropped of a cliff.

I am in Denmark, but I imagine that people are people everywhere.
So Actions is similar to Jenkins?
What was the main motivation behind this? is GCP cheaper?
What's is dangerous about it?
Well, it seems to be one mode anyway. Even in that mode, it seems more flexible and probably more efficient too, than Web Forms.
I think the high-bar that you desire is less user friendly and more designer-job-friendly.

- Here the information you're probably after is right at the top: letters from the CEO, and annual statements. If you're visiting the site you probably know what you're after.

- Websites optimised for mobile usually wrap text and remove zooming because the designer is perfect at deciding at what size the text looks prettiest, and doesn't want the user to spoil this. This is the worst thing that's happened to web design, probably ever. It's worse than IE6 at it's ugliest.

- I am not visually impaired, so can't comment on this.

- Links are underlined consistently making it clear what is a link.

- I can middle click, or open in new tab. I don't want new tabs popping up just because the designer wants me to stay on their site.

- Does branding ever help this? They have the .com, why would a pretty logo make things safer? They're quite easy to screenshot.

I agree that a link back to the homepage would be useful.

Overall a return to information dense websites like this one would be a wonderful thing.
Covid-19 Shines a New Light on Cloud Misconfiguration Risk
They don't want to feel Bezos wrath.
I joined the RTX team at Harris Semi after grad school. The only devt environment they could offer customers was (as I remember it) completely Forth-based - the barrier to entry was awfully steep, even for greenfield projects.
There are dozens of CI/CD offerings and many are better designed than Github actions, including Gitlab's CI runners.

I don't see what paying Github would do for AWS or GCP. They both have their own code repos, build pipelines, container registries, and more. Even Azure has its own DevOps product.
Fascinating maps that show the world as you've never seen it
Would you ask GrubHub to not send anyone Chinese or Italian to your door? Did you inquire about the nationality of any service worker you interacted with, and ask for someone who's not Italian or Chinese? What if they're only part Italian or part Chinese, do they only get half infected?

Starts to sound kind of racist when you assume person of certain race = infection.
> A Unix domain socket path can be longer than `sizeof ((struct sockaddr_un){ 0}).sun_path`

Hm, I didn't realize this, or if I knew this I had forgotten. It makes sense because sun_path is usually pretty small, I believe 108 chars is the most common choice, and typically file paths are allowed to be much longer.

Do you have a citation for this behavior? I can't seem to find it, though I'm not looking very hard.

I guess you are right that any syscall taking a struct sockaddr * also has a length passed to it... Some systems have sa_len inside struct sockaddr to indicate length, but IIRC linux does not. I've often thought that length parameter was sort of redundant, because (1) some platforms have sa_len, and (2) even without that, you should be able to derive length from family. But your Unix domain socket example breaks (2). Without being able to do that, I start to imagine that the kernel would need to probe for NUL chars terminating the C string anytime it inspects a struct sockaddr_un, rather than block-copying the expected size of the structure -- that would be needlessly complicated.
All this has done is
1. Given people with toxic office environments a breather.
2. Taught parents how much they should appreciate their kids educators.
The relative merits of WFH productivity wise are debatable. Being forced to WFH unplanned and against your will, during a stressful pandemic? If you think productivity isn’t down per hour* I have a bridge to sell you.

*A lot of workers are surely working more hours to compensate, or out of boredom. This presents a whole different set of risks.
Not a doctor. But I am seeing growing evidence that ventilators are overused potentially. From ref [1]:

> But as doctors learn more about treating Covid-19, and question old dogma about blood oxygen and the need for ventilators, they might be able to substitute simpler and more widely available devices.

and

> "In a small study last week in Annals of Intensive Care, physicians who treated Covid-19 patients at two hospitals in China found that the majority of patients needed no more than a nasal cannula."

1 - https://www.statnews.com/2020/04/08/doctors-say-ventilators-...
C'mon, that's an unnecessarily cynical take. The offers in the student pack are here: https://education.github.com/pack

You can see that there's a lot of overlap and that these offers cover very broad sections of the industry. This gives students the opportunity to explore and develop immediately employable skillsets without impacting their already limited budgets.
Exactly. Bloomberg employs many fine reporters and writers, and often does good work. I like Mark Gurman, who often has accurate scoops of unannounced Apple products.

However, Bloomberg should be read knowing they are owned by a company and owner that does not respect their journalistic independence. Readers should know if it comes down to journalism or their billion-dollar terminal business [1], the terminals win.

[1]: https://www.washingtonpost.com/politics/bloombergs-business-...