skysight-inc/HackerNews huggingface dataset:
I currently pay for a Github Silver plan annually ($600). When I try to downgrade to Free I get a message (in red) "You will no longer be able to access your private repositories or create new private repositories."

How do I downgrade without losing all my private repos.

Thank you!
I'd assume that the proper place for defining what's a valid filename would be on the filesystem level, so a filesystem of standard ABC v123 would not allow non-unicode names; so non-unicode filenames would either get refused or modified upon copying/writing them to the filesystem.

This is not new, this would match the current behavior of the OS/filesystem enforcing other character restrictions such as when writing (for example) a file name with an asterisk or colon to a FAT32 USB flash drive.
>In your example, I could setup a free Wi-Fi hotspot with a different DNS entry for http://loadbalancer.steam.com, have it go to my local ngixn server with a page that looks exactly like Steam's login, capture their user credentials, and then redirect them to actual Steam.

Sorry, I don't think I communicated my hypothetical app clearly. Imagine the sequence is like this:

1. App makes a background HTTP request to http://loadbalancer.steam.com

2. Load balancer responds with a URL string like "https://a.steampowered.com"

3. App verifies that the domain ends with "steampowered.com" and starts with "https://"

4. If verification passes, app loads the response URL in the in-app browser

In that case, replacing http://loadbalancer.steam.com with a spoofed page doesn't do anything because the app's internal logic sees the response, not a human user. If you replaced it with anything but a https://*.steampowered.com, the app would refuse to load the URL, so I don't see the vulnerability.
Sorry to break it to you, but anyone who is still at Facebook at this point thinks they are at the top of the heap and a lateral move to maybe Google, Apple, or Microsoft would be worth considering if it included a bump in grade. Amazon is a place Facebook recruits from, it does not go in the other direction. [FB and Amazon have the same moral issues if you work there but the environment at FB is an order of magnitude better, particularly for mid-level engineers.]
Are you looking at CQL at all? https://www.categoricaldata.net/ They're using Category Theory to inform their schema design and query language.
I saw it within ten minutes of it being posted, it didn't reflect reality. I drafted this when it said it was posted thirty-five minutes ago. I sent it after an hour of the post being up. I sent mail to the site's moderation about this post's title when there were only four comments or so, not including the one we're discussing. At none of these points was what the person said true.

I think I've had a fairly-conclusive watch on this post; the accusations in his post don't reflect reality and haven't.
Qemu would run faster than PCEM per cycle and the game would run faster and without dropping frames :D
If it's correct to the framework we have--do we have "a framework" for evaluating the universe? It seems more like there are many. Within senses--millions of frameworks. Within math, millions. And for good reason; this lens offers a different look at this aspect, and this other lens offers a singular view of that one. Stars are white. Stars are blue or red or yellow. Stars have no color. All of these true and helpful, and also conflicting in some context or another.

Looking at the way he's evaluating universes and aiming to find one that's so well matched to ours, just intuitively I also have to wonder how many different ways there are of modeling our universe that are worth keeping around no matter how poorly they fit in even some big ways.

Interesting stuff to think about though.
True, there probably have been some important refinements, but part of the issue is that a lot of that work has been done along very long, sometimes many-decades long, paths that so far have had zero experimental validation.

Basically, people have been building giant ladders and constantly improving them, but we don't know if any of the ladders were put up against the right wall. We have no idea if these theories actually correspond to reality or not. For example, string theory and supersymmetry.

The LHC was created partly with the goal and expectation of detecting particles that would validate supersymmetry, but so far it hasn't, and many are beginning to believe the theory may be flawed or wrong. In some sense that is a bit of a theoretical advancement, but so far, supersymmetry theorists don't appear to have a popular alternative they're considering instead. If they fail to find evidence for it in the next 10 or so years, it's probably just a total dead end. And string theory has been at it for even longer.
You precisely made a point, it's easier and natural to say "⅏⁝⏏⌸" rather then "The pain you feel when you stumble around in the dark in drowsy stupor and step onto a plastic construction toy brick with your bare foot." It is the nuances and connotations in a particular language the bring out the 'true' meaning.

In one of the languages I speak, "hucci" means stupid, but in fun, loving way. Stupid just doesn't cut it.
In a company the size of Amazon, no one gets fired without paperwork, and termination has a process. Someone initiated that process and made the decision to follow a policy.

I don't know what the policy is explicitly or if it's justified, but there should be visibility into that kind of decision making from the outside. It's in the lack of visibility that we see bad shit happen with hiring and firing.
I am assuming you are talking about our deployment on GCP Cloud Run? We have thought about sending a heartbeat API call. It we notice any user experience friction because of this lag then we will definitely do that. As we said in the blog, this has not been a major pain point as of today.
When you emailed this question to GitHub Support, how did they respond?
No additional tracking of people is needed, Google/Apple/Telcos already know where exactly have you been in the last few weeks.
Holy smokes - the second one was unnerving to say the least!
For most, yes, but there are people who use them while awake... for instance, people who suffer from conditions like ALS or COPD.

Even as someone with just vanilla sleep apnea I'll occasionally strap mine on for a while when suffering from a head cold...certainly helps open things up.
> SAML is pretty simple, it just uses XML which I think turns people off to it by default. I've implemented it once and I feel like I have a decent handle on what it is (though maybe I've just avoided the worst edge cases).

I once tried to implement it, and found that the specification was spread across ~500 pages of dense PDFs. I find it to be complex.
One might have run the risk of being called a delusional pervert if one had correctly anticipated the massive scale that online sex work has grown to since the dawn of the internet.
One can't look at Russia and say they're the good guys - but I have a lot of empathy for how they're treated by the West. I don't think it's always fair or justified by any means.

Governments seem to find it useful to have a bad guy to point to, for various reasons, and Russia has served this purpose a lot. That's a shame, because we should be trying to get along peacefully rather.
Singaporean nurse’s US stint cut short by Covid-19, some stepped up to help
I 100% agree with you, however this seems to be only an outrage because these people happen to have Left leaning political views

Right leaning people are fired all the time for their views on social issues, and no one seems to have a problem with that normally.

Further if these employees would have been fired to taking a counter view I bet there would have been cheers for their firing

no the outrage here is not really because " people shouldn't have outside-work activities be held against them" no it is more "I agree with these employee opinions and am outraged they were fired for an opinion I share"
I think it depends on OS (Linux is $0.008/Minute, but macOS is a lot more - like $0.08): https://github.com/features/actions (scroll to the bottom)
Kubernetes “Whoami” Service
A thread on a sensational topic tends to fill up early with reflexive, a.k.a. thoughtless, comments simply because those are the fastest to write and because the people with the strongest feelings on a topic have the most activation energy to comment. Unfortunately such comments tend to be superficial ones that merely repeat pre-existing positions—usually angrily—about the generic theme (China is a popular one these days but it can be anything people feel strongly about). Sometimes they come with pre-baked talking points that sound detailed enough, but are still superficial, generic reactions because they're being pasted in from previous places.

It takes time for reflective, a.k.a. thoughtful, comments to emerge, especially about the specifics of a story.

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

Reflexive/generic/superficial comments get downvoted, but not because communist agents are manipulating the threads or because the bulk of the community disagrees. They get downvoted because they're high-indignation-low-information, and tedious. In other words, they're flamebait, which is against the site guidelines: https://news.ycombinator.com/newsguidelines.html.

The users who post and upvote such comments, unfortunately, draw exactly the wrong conclusion from this. They take a flying leap into feeling certain that the community (and/or mods) is biased toward the view they dislike and stacked against their own view. They somehow manage not to notice the countless posts that support their positions and are upvoted just fine. Then they start a meta flamewar about the site being clearly biased / obviously infiltrated. That flamewar is even more reflexive, angry, and off topic than the first one.

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
The UK Gov actually has an overview for you to inform yourself as to what they consider far right:

https://www.gov.uk/government/publications/overview-of-the-f...

(The report itself doesn't do a particular good job either as they use some dubious sources and I don't agree with half of it, but their definitions of the groups are close enough).

I've listened to a lot of Weinstein on various shows he has appeared as a guest on and I haven't heard anything that can be considered far right. One of the first times I seen Weinstein was when he appeared on Dave Rubin who is a gay liberal/libertarian (the last time I watched his show it seemed to change every other week) that lives in California.

> Perhaps you could be excused for believing someone isn't far right when the overton window among english-speaking countries has narrowed so far to the right of center.

This is a complete nonsense. The Anglo-sphere for the most part is pretty much centre, centre-left. Many conservatives and paleo-conservatives complain their conservative parties aren't really conservative (which isn't far-right either btw).

The term far-right in itself is a poor description. A better term is a "reactionary right". But that is a whole other discussion between the "reactionary right" and the "traditional right". Right and Left are really poor descriptions of political positions and that is why many tests online now are multi-dimensional.
> You can see that there's a lot of overlap and that these offers cover very broad sections of the industry.

True, but that applies as much to their $200k figure.

> This gives students the opportunity to explore and develop immediately employable skillsets without impacting their already limited budgets.

The stuff that's worth using has free or cheaper alternatives anyway.
What I’m driving at is, if the loop really doesn’t terminate, it would still be safe to do that optimization because the incorrectly-optimized code would never be executed.

I guess that doesn’t necessarily help in the “+=2” case, where you probably want the optimizer to do a “result += x/2”.

In general, I’d greatly prefer to work with a compiler that detected the potential infinite loop and flagged it as an error.
ArduBee – A micro drone for open source development
I don't know if "nothing but" is fair. They add noise, certainly. But if astroturfing is happening, to pretend by fiat that it's not significantly distorts the discourse.
And is that an ethernet port on the right?
There was a video done by scientist who worked in Wuhan 5G station that explained how 5G is messing up balance in cells. But its being taken down now. Its okay. Downvote me into oblivion! We been there before. I still can find my posts from many years ago accusing Verizon and other carriers of spying on Americans and closely working with NSA, and I also been called "conspiracy theorist cook" and that there is no evidence at all. Until we had Snowden came to the light of course...
Investment is gambling, smarts are winning.
If by "that Google guy" you mean Damore he did dozens of things wrong simultaneously.

If by "that Google guy" you mean the one who got fired for posting critical memes about pay on Facebook, I'm pretty sure they were ordered reinstated and the notice was issued.

The Amazon folks fired here did nothing more than say they were concerned about working conditions on Twitter. It's hard to have a more explicitly protected activity.
I don't think discontinuing employment should be categorized as 'evil'. Amazon doesn't owe them a job, and if the seller of labour crossed a line that the buyer doesn't like and that has been clearly spelled out prior to the work beginning, no one should force the buyer to continue buying labour from the seller. That would be closer to evil than the former option.
I get that you guys want to say that publicly, but let's be real. No company would invest a massive amount of money in a duplicate product. One product will eventually starve.

I guess it is up to us to guess. Anyone?

I see GitHub being the unmovable giant here. Microsoft is publicly developing on it, as opposed to Azure Dev Ops. It has a very large mind-share. More developers are willing to use it without having the Microsoft stigma that some nix people feel.
I just tried downgrading from my Pro Account and got:

"Your account can not be downgraded yet because one or more of your private repositories is over the collaborator limit for the free plan. Please make sure that each of the private repositories owned by your account below has 3 or fewer collaborators before downgrading your account. Questions? Please contact support@github.com."

Am I missing something or is this not implemented yet?
You could borrow bximage from Bochs too to generate them easily :D.

Or in a Unix platform, with just dd and vnconfig under OpenBSD or kpartx under Linux.

>dd if=/dev/zero of=a.img bs=1440k count=1

>vnconfig vnd0 a.img

>newfs_msdos -F 12 /dev/rvnd0c

>vnconfig -u vnd0

>file a.img

a.img: x86 boot sector

That's under OpenBSD, under Linux is similar.
Why wouldn't there literally be enough antibody tests for everyone in the world?

The world is full of factories producing a wide variety of things, including biological material. These factories can certainly gear up given time.
Note that Euromomo reporting is seriously delayed for probably most countries. Here are Dutch numbers that include better estimates for week 14

https://twitter.com/DToshkov/status/1249693421201129480

https://twitter.com/statistiekcbs/status/1248552559637389312
Most people shouldn't. Clickhouse or other column-store data warehouses (redshift, bigquery, etc) are very fast and have all the features to handle time-series and other data.

Druid is good if you (1) make use of native integrations like Kafka (2) Need every field indexed for fast seeking to a few rows (3) can use the JSON API to make up for the still-in-beta SQL interface (4) don't need every single event/row as they are pre-aggregated (5) always have a time-column to partition by (6) want to use the native S3 tiering for older data (7) dont need joins and complex analysis

Imply's distribution is better than core Druid but it's still more operationally complex than Clickhouse and alternatives.
No -- Mosh is careful to make sure that a transient network attack can only result in a transient application-layer consequence. So a single misrouted IP datagram can't permanently affect the connection. Mosh does this at the cost of having client-only mobility; the client keeps sending to the same server address for the life of the connection.
> These requirements are fundamentally incompatible with webapps - where a no-questions-asked software update is only a press of F5 away, by design.

If by "webapps" you mean "applications that run inside a web browser" then I disagree, since it is possible to pin a specific (presumably third-party audited) version of a webapp by using a static local bookmarklet or saved file. See my other comment [1].

You're right, though, that this is not the typical user experience for a web app, and you might reasonably believe that all webapps should be visibly associated with a domain on the internet.

Personally I think it is acceptable if a high security webapp requires a slightly less convenient UX compared to normal webapps. Nevertheless, it should still be quicker and safer to "install" a bookmarklet than install a native application like the Tor Browser.

[1] https://news.ycombinator.com/item?id=22862376
Wang Jianlin, a Billionaire at the Intersection of Business and Power in China
Works fine for me on Firefox mobile, on lineageos on a oneplus6
The 2 UX designers retweeted complaints from the warehouse workers and offered a little monetary support; it's hardly like they were trying to lead a revolt.

And then this is besides the point, but Amazon doesn't give out free food and drink like Google does.
Yeah, ASCII is such a powerful mental model that I think anyone working with Unicode made a lot of concessions to convert people, no argument there. But I think we need to say we're done with that and move on to phase 2. Here's what I advocate:

- Encodings should be configurable. Programmers get to decide what format their strings are internally, users get to decide what encoding programs use when dealing with filenames or saving data to disk, etc. Defaults matter, and we should employ smarts, but we should never say "I know best" and remove those knobs.

- Engineers need to internalize that "strings" conceal mountains of complexity (because written language is complex), and default to using libraries, to manage them. We should start view manual string manipulation as an anti-pattern. There isn't an encoding out there that we can all standardize on that makes this untrue, again because written language is complex.
Imagine framing your employer as "the hand that feeds you", as if it is generously giving you a gift by paying you your salary in exchange for your labor.

Here is a different view: don't expose your most vulnerable and precarious employees to a deadly virus by failing to take the necessary precautions to protect them while they keep your company running.
> You'd be surprised how many techies (especially the younger ones) don't see the above advice as being obvious.

As an older developer, I am ashamed at many of the things I said at work when younger, and wonder why I didn't realize how stupid they were. It's amazing I wasn't fired for some of them.
Novel Annealing Processor Is Best at Solving Combinatorial Optimization Problems
Softbank is every VC/PE's analyst and associates punching bag
Judges call Jeffrey Epstein case 'national disgrace' but reject bid to undo deal
Memes_that_everyone_loves
Cannot change country of my Google Play Account more than once per year
XCOM: Chimera Squad Announced, Out Later This Month
They weren't discussing their working conditions.
> merely obtaining something deemed valuable by the blackmailer in exchange for keeping the blackmailee's information private.

Exactly. That's why if you have a policy about when the information goes public which is entirely independent of any benefits provided by the company in question, it's not blackmail.

You're not saying "unless you give me X benefit I do Y", you're saying "I'm doing Y at Z date, but I may extend that if you show you're working on the problem." which isn't a benefit to you specifically, but to those affected. As long as you make sure any benefit to yourself is removed from that decision, I imagine blackmail would be very hard to prove.

Bragging rights aren't really the company's to give, since you have the information and will be making it public, unless someone else beat you to it. In that case, going live early unless the company says you found it does impart a real benefit to you that you extracted from the company. That's not what I viewed this thread as about though. Saying you'll release the vulnerability you were already going to release (if you had a clear policy applied consistently) is not so much a threat as giving the company an appropriate chance to respond.

I agree in the case of private companies with little or no public component it does get less clear cut. I'm not sure what those would be though.
This is an incredible example of the consequences not only of bad design but failure to test every possible scenario.
yep. opening in FF 75.0 on Linux shows a white blank page. Opening in chromium renders properly.

Looks like it's three.js failing to initialize webgl in firefox. Probably some firefox webgl issue.
It really captured the personality of our president well: https://firebasestorage.googleapis.com/v0/b/ai-gahaku.appspo...
It's funny how it's named Vision Fund and invests in a company like WeWork. I'd be more forgiving if they have lost money investing in companies working for techonological breakthrough like nuclear fission or drug research for incurable diseases. Instead they invested in a real-estate office space sharing company trying masquerade itself as a tech company.
This looks like a standard recruiter email anyone with a github profile or Linked In profile with “software engineer” anywhere in it gets. I doubt the sender even knows about Killed by Google.
"A company as big as Amazon is very different than a small firm with a few employees. "

We are in absolute agreement. Frankly, I have argued before that they are already too big.

"There's also a big difference between criticizing the company's products and criticizing their business practices."

I am not sure I agree with that statement. Would you feel the same if the employee publicly criticized a company for using non recycled paper AND they have to change course now and use recycled paper; afterwards the story "went viral" and employee got fired for that specific action. Is employee justified in doing that without any repercussions? It is genuinely hard for me to argue for the employee here.

"Where "the line" is depends on the specific circumstances, but it's pretty clear to me that Amazon overdid it in this case."

To you it may be clear, but clearly not to everyone since we are having this discussion. Whether the pendulum should swing ( it should ) is a worthwhile conversation to have.

"If they found these employees' statements embarrassing enough to fire them, then it sounds like they know they are doing something wrong."

I don't know if I buy this argument. HR does not like troublemakers seems like more plausible explanation.