skysight-inc/HackerNews huggingface dataset:
Having been in several situations - As Gaia admin, working for big budget low competence IT for a "major" company, and as a shoestring SRE on a household name that's still held together by duct tape in some corners - it weird what is obvious, what is possible, and what level of escalation would be required for what kind of attack. It would have be possible and even trivial for me to impersonate a user at any of the three. At Google, I would have left indelible tracks that would have gotten me fired, see Gcreep (whom, oddly enough, I replaced - I was the next SRE hire at Google Kirkland after he'd been sacked). At the largeco, the tracks would have been indecipherable; nobody would have been able to notice. The logging wasn't there. The ability to analyze what logs they had wasn't there. As a shoestring engineer, I'm pretty sure I would have clear knowledge of who did what if something were discovered, but I would have a significant problem finding it unless something were obviously wrong. I know I can't stop a rogue admin; my team is small enough and needs to react fast enough that we can't spare time for access controls or break-glass, even if they were handed to us on a silver platter.

I'm quite concerned about what that means and what this means, and I'm watching this intently. Probably for nothing; I know this is in the realm of risk we're unprepared for, and can't prepare for. Darned if I don't worry anyway.
I think the N-word as a socio-linguistic phenomenon has parallels in other words used in identity politics. Reclaiming a word may be some mind of a double standard but, it's also a way of dealing with set of sound that are loaded with all kinds of negative meanings, and has been embedded in a groups identity. It's no so simple to make such a word just go away.
There are some technologies that might be improved to achieve the required efficiency (eg power-to-gas[1] or cryogenic storage).

[1] https://www.kit.edu/kit/english/pi_2018_009_power-to-gas-wit...
Countries controlling Covid-19: Coronavirus recovery or a second wave?
> the joy and pride about your work are within yourself and not in your employer

I just wish I realized this sooner. No one else is responsible for your career progression, job satisfaction and personal fulfillment other than yourself.

A recent experience I've had was to initiate a conversation with my boss for five years that I've been unfulfilled with how I haven't been receiving actionable, meaningful feedback for a year or two, and that I'm having problems engaging myself with the current progression of our projects due to this.

Expect how I was treated?

I find it how hard to imagine how I wound up with an insubordination charge when the reason I initiated such a discussion is because I wanted to work out the relationship and wanted to stay. I'm in charge with all of the projects, and I've been deeply involved and accountable for the whole business.

The anxiety and tension the whole situation brought to me wasn't worth it. I'm just passing time until this all blows over.
I agree with you. You know what's worse? FaceApp. But somehow, the general public just gets it. This is what the peoples like.
https://www.youtube.com/watch?v=5q-BH-tvxEg

"With the motor turning around 200 revolutions per minute, it will take well over two trillion years before the final gear makes but one turn."
Except maybe Sweden re pandemic.
Why we burn out
They should have also collected monthly a total of $62500 extra “taxes” from all these people — the higher the income, the bigger the tax share.
Not for internal surveillance stuff. I'm working on a platform to commoditize IP cameras and NVRs.
> what is the scenario where a single madman causes a complete simultaneous nuclear conflagration

An actual nuclear war planner wrote a whole book about that:

"The Doomsday Machine Confessions of a Nuclear War Planner"

https://www.bloomsbury.com/us/the-doomsday-machine-978160819...

P.S. USSR doesn't exist anymore.
But surely they didn't access the system and post these messages themselves.

They could argue, with the advent of remote working getting more and more predominant, that they simply left their computer unattended for a second while logged in.

Beyond that, they could argue they simply clicked on a link and something might have happened they aren't aware of. Or that they didn't know what running that one executable would do.
I'm skipping out local simulation of remote players as a potential mitigation strategy to illustrate the core concept which is caused purely by latency and local client simulation of the controlled player.

Naive extrapolation can cause issues, for example players appearing briefly from behind corners on other peoples machines that they actually stopped behind.

How you might locally simulate depends a lot on the game simulation. Is it deterministic or not? Are more complex things happening like rigidbodies being simulated in a distributed manner that still need to collide reasonably and so on.
I would never have thought this type of thing was clever. I don't want to pull expertise but I've been an AI research for 20 years, thinking this stuff isn't clever isn't new for me :)

If anything, this is "less clever" than older techniques like tree-search, as it is very easy to confuse, and will start just producing nonsense.
In a Victory for Privacy, the EU Court of Justice Bins EU-US Privacy Shield
This is good news; FreeBSD's wifi/bluetooth stack definitely more love and a bit of polishing. The last time I tried using Intel wifi on FreeBSD the driver kept trying to use wrong tx settings without allowing me to change them, leading to slow performance and poor signal (the same card under Linux/Windows had excellent signal from the same AP).
Hey, don't worry; we are just taxing the negative externalities of your existence.

This is an authoritarian dream, and it's why cash has a big target on it.

Got a fine? Deduct it. Putting people on the take gives government significantly more leverage over them.

Next up is to incrementally pair it with a social credit score. The concept is fundamentally against free expression; it's the same old model used keep large fractions of social classes from becoming independent.

Real solutions involve decentralization and less tax on _time_, the power players want cheap labor, so they were allowed to import it. That scam is well known now, so onto plan B.

This is really a proposal for extreme centralization via hidden tax on value producers. It's a deliberate problem; hence the Hegel soluton.
>But you're perfectly fine with the kind of reasoning that pooh poohs the preferences of billions of people as "Stockholm syndrome", oh please.

I never said all the users have it, I said the level is high. This comes from observations and experience, of course, not research, so I can't generalise to all users and I didn't.

> iOS alone has a billion users, and Apple has been around since 1976.

Billion of devices ≠ billion of users. C'mon, do you really think each 8th person in the world has some Apple device? Also, you said billionS, that's laughable.
Yes, thanks, I've clarified this.
https://news.ycombinator.com/item?id=23852177 explains it, with a quote from the article. They weren't able to map the whole thing, because of repeating patterns. That's now starting to change.
Shorts don't get caught, they'd blend right into the WSB crowd.

Also, if you had Elon tweet that, I am not sure if the price will go up or down like you expect. :)
Google Is Working on Tattoos That Turn Your Body into a Touchpad
Of course you can, but that won't do anything. The situation is such that you
sweep the floor and in a couple of hours everything is again covered with
black dust. Unless you keep the windows (and the balcony doors and the
lightwell windows) closed and the air purifier running 24/7, year-round, you
wouldn't achieve anything in the way you propose.

Besides, keeping the windows and doors closed 24/7 during the summer months
(and quite a bit of Spring and Autumn too) in Athens is suicide. You'd have to
also run an AC unit 24/7. And that's expensive and pointless- there are times
of the day that it is very pleasant outside, even in the heart of summer. So
you close your windows in the monring, to keep the heat outside, and reopen
them in the evening to let fresh air in. That saves a lot on AC costs (and
energy waste) - but of course it lets the dust back in.

In general, Greece is not Dubai. It doesn't make sense to try and create a
sealed environment to isolate onself from the outside, in one's home. Finally,
Athens is a city of 7 million people. Implementing your proposed solution
would significantly increase the cost of living for many, not least because
most live in old houses that would need maintainance before they have any
chance to be used in this way.

The obvious solution to the problem of course, is to improve air quality
across the city. After all, at some point most people have to go out and they
can't very well take with them their sealed, air-conditioned home cocoon.
This is bad news for everyone in the EU who has data in the US and uses the Privacy Shield act as the protection guarantee.
We do that currently for some data processors, and I'm a little intrigued about what we'll do with all of our US-based data now.
What does "DM" mean in that context?

(Went to wikipedia, but their suggestions like Death Metal and Dance marathon are probably not it ;) https://en.wikipedia.org/wiki/DM )
All walls are now tagged WONT.
I think they are. I doubt any newspaper articles use it to refer to the median, at least I've never seen them use it like that. Do you have any examples?
It's fio in czech republic. Probably not much useful to you.

It's not the EU enforced API (that's not intended for end users anyway - I tried asking other banks for API access too, and failed). This bank had this API for years.
Gmail redesign turns it into a one-stop productivity suite
How was this made?

The GPT-3 model hasn't been published, and training it yourself would probably cost millions of dollars...
So, did you make Twitter aware of this?
Finally! There is hope for EU, they apparently found some of their balls. Hope they keep 'em.
> One retail stores doesn't have about 50% of market (I don't know the real numbers) like Apple does

iOS market share is less than 15%

> Also, the app you built was specifically for apple. You cannot sell it anywhere else.

Sounds like the app developer is taking a deliberate risk while doing so. Why do they need to be protected?
The ruling notes that standard contractual clauses are still available. Most providers offer a Data Processing Agreement that can be signed and amended to the standard contract for businesses in the EU. It then gets muddy though as a DPA needs to be considered against possible legal demands of the US Gov and whether the processor will be forced to comply, assuming the data is stored unencrypted and it is possible to comply.
The idea is that you might need to invent a new algorithm where a technique from an existing algorithm is used in a modified way or in a new setting, and then knowing the actual technique can be essential to find an inspiration.

E.g. if you know that convex hulls can be computed by sorting by angle and sweeping, then you might come up with the idea of sorting by angle and sweeping in problems that are unrelated to convex hulls (e.g. determining what is visible from a given point in an environment with obstacles).

In general, if you know a lot of those techniques and heuristics, you will be much more effective at problem solving in domains where these techniques apply.

It is relatively rare for this to be a big factor in routine software development, so that's probably something one should filter for only if interviewing for roles where you might need to design novel algorithms (which Google probably has more than the average company).
Why would you need to be anonymous?

I mean, if you spent $$$$ shorting Tesla stock, then a week later the stock nosedived in response to a tweet and you made a big profit, that doesn't prove you were behind the tweet.

It wouldn't even be illegal, unless there was independent proof you were behind the hack. Without that, you just placed a bet which happened to be a lucky one - just like anyone else who was short Tesla.
Hum. I’m in the process of starting up a Wireless ISP in Europe. I was looking at using a large piece of management software provided by a Canadian company, hosted in the US. This is starting to feel like a bit of a bad idea.

I was already unimpressed with their “no one has ever asked us about GDPR” response.

I can totally see an ISP getting heavier regulation in this regard too, given it is providing infrastructure.

Maybe I’ll code it all up myself while I wait for the dedicated fibre to come through.
They can't in general, it's against the law to do that. And there are penalties if caught (and being caught is not so hard.)
At Google I'm convinced our interviewing system only works due to a combination of luck, large numbers, and generally good intentions. None of the individual steps is a particularly good way to tell if someone will succeed at Google, but anyone who passes all of these filters is unlikely to be a terrible engineer.

When you avoid terrible engineers and hire by the tens of thousands, you get plenty of good engineers and a few great ones. You also miss a ton of qualified candidates, but Google has more of those than it needs. It can afford to miss them in a way that small companies can't.
Some relatively unstructured thoughts:
I'm not sure I agree with 2 for this use case: writing the GDP table is a pain because table markup is (necessarily) verbose, and it's fiddly to copy and paste all of those fields individually. If I can get 95% of the way there with a couple of syntax errors that are picked up/fixed by my linter then I'm a happy customer.

That said the way he generates a table is in no way idiomatic react, where you take an array of objects and map the data on to the table.

In terms of code generation, is it actually any better than using an emmet expression? `table>tr*10>td` (I've probably mangled that). What's interesting with the table example is probably the combination of "knowledge" and knowing enough about a DSL to generate a coherent output.

I agree re cherry picking, though the initial fine tuning set is extraordinarily small, just 2 items. Generating a much larger dataset shouldn't actually be that tricky, though perhaps getting agreement on how to actually describe a layout in plain English might be more of a challenge. Would a plethora of descriptions for the same layout be a bad thing?

Lastly, I've been using TabNine (https://www.tabnine.com/) for the past few months, and I'm convinced that some kind of language model text generation is going to change how we write code, it's already changed it for me. If I signal my intent pretty clearly up front, I would say most of my coding is now tabbing and occasionally pressing the down arrow. Even writing comments becomes an exercise writing an initial three of four words and tabbing out the rest. Ditto tests.
European privacy and consumer support groups are mainly after lawyers' fees. They mostly make money by notifying misbehaving companies of their misbehaviour, collecting fees for the (usually unwanted, but enforcedly payable) notification ("Abmahnung" in German).

Dieselgate was started by such a group.

The system is not all bad, but incentives are against stuff like this being litigated by the usual privacy or consumer support groups, because you just can't collect fees from the legislative branch...
I think the hosted SQL model may be fundamentally flawed when you are trying to do something as complex as what GitHub is doing. You are basically saying "Here, MySQL/Postgres/Oracle/et.al., I trust you with 100% of my replication & persistence logic. Good luck optimizing all that SQL!".

I have started looking at tying together clusters of business apps that each have independent SQLite datastores using an application-level protocol for replication & persistence (over public HTTPS). This allows for really flexible schemes which can vary based upon the entity being transacted. With hosted SQL offerings, you are typically stuck with a fairly chunky grain for replication & transactions. If you DIY, you can control everything down to the most specific detail.

For instance, when going to persist a business object's changes, you can have a policy configured that reflects over the type and determines how many nodes need to be replicated to and which ones should replicate synchronously vs asynchronously based upon it. Log entries may only be async to 2 nodes, but you may decide that any accounting transactions should be replicated to 2 near nodes synchronously, with 2 more far nodes being async.

Additionally, you could inspect various business facts in the entity (or session related to the transaction) in order to determine ideal persistence strategy. One powerful example here could be to use a user's zip code to determine the geographically-ideal node to store the primary replica of their account & profile data. This could allow for lower latency access for that specific user.
I can understand it's bad for companies relying on US services, but honestly this decision is not very surprising and has been looming over EU companies for several years now, so there has been ample time to prepare for it.

On the positive side this might give startups based in the EU a small edge over US competitors (I know, protectionism is evil, free market rules, Europe tech startups are not competitive...).

US companies can still do business in the EU btw, they will just need to structure their services so that data from EU citizens stays within the EU. For the larger players this shouldn't be an issue really, I think, smaller startups with limited resources might forgo the expansion into the EU though.
Thanks for the clarification. There is not automatically way to enlarge the length. And I think that is not the things should be done by the database itself. That's my own opinion. But I think it would be helpful to show a warning to DBA when the allocated value is close to the upper limit.

For the following question, the answer is in seconds. To enlarge the column length, TiDB just need to modify the meta data.
"how long does it take to enlarge a pk column using alter table on a database that has a significant fraction of 4 billion rows?"
OpenAI is offering an API for it, currently in private beta.
Yes, I was. However, I was pushing to master of a fork. Maybe thats the reason.
Yes hopefully it'll just be some extra paperwork.
You can set up automatically
The correlation goes the other way. The poorer the country the more children people tend to have.
It might be good news for EU consumers. There's no technical reason for most vendors why customer data of EU customers has to be stored in US data centers.
Augmented reality in marketing: Use cases, market trends, and adding real value
Pretty much. I had some hope about PSD2, until I read about it.

Very useless, unless you just want to give your data to more third parties.

In addition EU also broke all my bank scraping scripts (except for the mentioned bank, that still has the same API it had for years already and doesn't require two factor auth, just an api key) by enforcing two-factor (well not really, just SMS auth, it's not like I can use any other 2nd factor, or make my own).

So in addition to helping third-party data slurpers, they also broke the first-party data access with the latest regulation.
Ha! I wonder (having no mechanical engineering background) ... is it possible to to drive e.g. a tank up a hill using a lego motor with a large enough gear ratio?
If there are resources that won’t be cleared on crash, then how can you say a system is OK to crash?
Also what kind of effect on pricing it would have. Surely if everyone's baseline income increases, it creates a safe buffer-of-a-sort that necessities' prices (housing, food) can comfortably consume.
I interviewed for a job with people doing this in Swindon (England) in 1994-ish
Direct messages - so private messages to and from
As a consumer I'm all for it - but as a vendor it does make things a little more difficult
Social engineering attack seems to loose and gain popularity as companies spend more and then less resources against it. I would not claim state actor unless there is more proof.

The measures needed to prevent social engineering goes directly against the social oil that improve cooperation between employees and department. Verification slows down operations, require additional work on top of what is likely an already stressed work environment, and require training. The more a company feel safe, and the more time has past since last attack, the more people will lower their guard. People also tend to focus on past attacks, so while they might have been suspicious against a request to transfer money (the current most common social engineering attack), someone asking for "restoring access" might simply be seen as an innocent and common internal support request without triggering a request for identification.

I would expect that twitter will change their policy and training in order to address this, and in 10 years it will be removed in order to save time and improve response speed between departments, and churn rate will have replaced anyone with memory and training of this event. Then a new attack occurs, maybe with a slightly different target, and we repeat the cycle.
I consider myself an antinatalist and have no use for your service, but I just want to say that you're exceptionally good at handling the comments here.

Thinking about the types of people who would be interested in your service, I would lean hard into serving the trans community specifically. I can't think of a better way to demonstrate trust than being archivist of choice for people who are planning to stop making sperm.
Safe? Air pollution has been estimated to kill about 200,000 Americans per year.

With the recent VW scandal of modifying software to cheat at pollution tests we can eliminate safe in for that company.

Anyone remember when Ford accountants calculated that a Pinto defect in which people would burn to death would be more expensive to fix than the lawsuits so they decided to not recall the car?

"Profit from selling cars" would be a much more honest mission statement for most of them.
If we consider the gears a perfect mechanism with no loss due to friction or wear then yes, it moves. Probably in a sub-atomic scale, but yes.
I want to turn the last Gear backwards to see how fast the first Gear is rotating.
> If instance A does not like instance B and blocks it, there is reason why there can't be an instance C that federates with both A and B.

Instances will refuse to federate with your instance if your instance fails to block others that they don't like, and the list is steadily growing.
Any reason why it has to be hosted in the US? Hosting is so standardized, it's hard to argue why it can't be moved to the EU.
Worth noting is that the standard contractual clauses don't necessarily specify that the data has to remain within the EU - it just mandates that the company has to provide adequate protections.
Strategies for Facing Your Internet/TV Addiction
Disagree.

I stopped smoking real cigarettes 2 years ago when I started running but I continued to vape tobacco heating products (I don't think you even have them in USA, like IQOS).

They are much less toxic and if COVID didn't happen I could've easily continued smoking them for the rest of my life, since the negative effects are much much less then real cigarettes.

Only when I quit for COVID health reasons did I finally understand how addicted I was to nicotine for the last 13 years, since I was a teenager.

> know a few colleagues who could easily quit smoking if there were not sitting close to a heavy smoker friend. They just couldn't say no every time someone asked them to go out for smoking. I think lack of smoking socially is a big driver here.

Yeah, no, nope, no way. Nicotine addiction is the big driver, social smoking is just how you get hooked.