skysight-inc/HackerNews huggingface dataset:
In their defense, gross negligence takes less time and money, and they probably won't suffer much from this incident, so it all still paid off on the bottom line, and now a whole lot more people know who they are. Free marketing! Bonuses all around!
Posting in a subreddit will likely get you more traffic than you would have gotten back then.
The secure constant time implementations in Ring are from OpenSSL, and written in assembly, because that sort of code cannot be written safely in C or Rust.
Sounds somewhere in between Plato: 'Wise men speak because they have something to say; Fools because they have to say something'
Does any alias work? If someone gives out tribble@joesmith.33mail.com, and they typo it to tribbl@joesmith.33mail.com, would that still work, or do the aliases need to be created first?
Ever since I switched to my apple silicon Mac I've been using Safari, an unpleasant side effect being that apple seemed to spy on passwords (the browser freezes unless it remembers your password), and youTube ads
FR4 Isola 370HR PCB
FR4 Isola 370hr PCB is a PCB made of high performance 180 ° C glass transition temperature (TG) FR-4 system, which is suitable for multilayer printed circuit board (PWB) applications requiring maximum thermal performance and reliability. The 370hr laminate and prepreg products are made from a unique high-performance multifunctional epoxy resin reinforced with electronic grade (E-glass) glass fiber fabric.
Understand this basic thing:

Regardless of what we do (or don't), climate can and will change drastically at some point, most likely due to variables we have no control over. It's just a matter of time. It can happen now, it can happen next week, next month, next year, in the next 10 years, next 100 years, next 1000 years, next million years. They say that they know it will be in 5 years or 10 years or some made up number. But no, it's not possible to say for sure. It could very well be tomorrow.

There is absolutely no way to control climate in any meaningful way by doing or not doing something as humans. Even if we did manage to identify the right variables and control it a few times does not mean we'll be able to do it every time.

Environmental change will most likely wipe off our species too, just like it has done to countless other species in the past couple of billion years.

Having said that, we as humans have managed to survive some big environmental changes, like the last ice age when several other species perished. Not all of us will survive but enough of us will.

So, what are some of the climate catastrophes we need to protect ourselves against and are we doing enough to prepare for that?

One big problem today is that most humans don't have access to energy to heat or cool their habitats artificially if the planet warms up or cools down significantly. In developed nations, this is taken for granted but poorer countries lack the infrastructure for it.

Solar, wind and hydro are unreliable if say some climate catastrophe causes sun to be blocked (say because of volcanic clouds or asteroid impact or something similar) and there is no heat or light from the sun. The only good sources are fossil fuels and nuclear. Do we have infrastructure for it spread out around the world so that no matter what part of the earth the asteroid impacts, as long as it doesn't wipe off everything all at once, we can rise again?

What other problems might we face climate-wise? And assuming it happens, are we prepared such that enough of us will survive?

No, we're not thinking about any of that shit because the entire fucking world is hung up on "Global Warming" and "Climate Change", the PR material that CleanTech Industry in the U.S. fabricated to get tax breaks on their investments when they thought that the world was running out of oil... and moved the production to China... except China stole the technology and built upon it... while the U.S. found and perfected fracking... and now China is using the same PR infrastructure to promote selling solar fucking panels and wind turbines... while using their pawns in politics to try to stop fracking and natural gas projects in the U.S. because it hurts Chinese energy business.

Get a grip.

Get a job in the industry. They need technologists in energy industry too.

Read a book or two and widen your view of the subject.

How about "The Absent Superpower: The Shale Revolution and a World Without America" by Peter Zeihan?

Or just to see another side of it, how about "The Moral Case for Fossil Fuels" by Alex Epstein?

Anything but repeating this PR nonsense over and over again.
Solarwinds was dumb, but this definitely was an advanced attacker who hit FireEye, DHS, and Treasury. They had ownership of over 18,000 solarwinds servers and went after 10 or less orgs. When they did, the attacks they used were complex. It was very clearly as a state sponsored action and I don't understand why you would dismiss that.
> Of course not. What did I write that would suggest that?

> being persuaded by an essay is ... a red flag that we may be being manipulated by someone we wouldn’t choose to be manipulated by

I was persuaded by SSC essays, despite not knowing much about the author. Was that a red flag? Was it bad that I remained convinced by them despite not finding out much about what experiences in his background have shaped his perspective?

> How would you modify your criterion to distinguish the two?

The distinguishing factor is in what you should be persuaded by.

If a "cult leader" is able to convince you of something by presenting you with good arguments, maybe they aren't a cult leader/it's not crazy to believe whatever they're selling.

If someone's convinced of cultish notions because they were persuaded by bad arguments, I'd say the primary remediation is "don't be persuaded by bad arguments", not "don't listen to people unless you know who they are". I wouldn't say the second statement is terrible advice, but it's not the primary problem.
That Final Thoughts section is... odd. Stealth sponsored advertising?
Good. I was hoping this was the case. Unfortunately I already moved to fastmail so there will be little benefit to me.
This flaw is from a year ago and had nothing to do with the recent hack. The discourse in these posts that often involve a certain country tend to always lean more towards people's political beliefs rather than anything actually being reported in the story.
Seems to me they have a lot of "show this at that time" bugs - I relatively often see UI elements that shouldn't be there or active layered on top of each other as well.

Additionally to hands and props disappearing at random.
Don't be so snobbish. Mitigating color and exposure problems absolutely will lead to better pictures.
There’s actually nothing server specific about GraphQL. The specification makes no mention of transport layer, it’s simply a type system + query executor.

You can pretty easily (if you have experience with the GraphQL reference implementation in JavaScript) create a GraphQL layer that sits inside of the browser, with a schema created by the UI team, that executes calls to REST APIs to resolve the data.

You could think of it as an “ORM” for the browser, which seems cool, but I wouldn’t necessarily recommend this approach (though I have done it in the past) for two reasons:

1. The “graphql” library isn’t really optimized for size so it can add a bunch of overhead to your JavaScript bundles

2. One of the benefits of GraphQL is to combine multiple requests for related data into a single query to be sent from the browser. Yes, that makes the life of the backend developer harder as they try to optimize for performance, but it makes for less data/fewer requests over the wire to the client. If you stick GraphQL in the browser, you’ve now just moved your N+1 query across the internet.

If you really want to go down that road, Apollo offers a “plugin” to their GraphQL client that allows you to call multiple REST endpoints as if they were a single GraphQL endpoint (without embedding the actual “graphql” library in the browser): https://www.apollographql.com/docs/link/links/rest/

A better approach for what you’re looking for would be to schema stitching (which allows you to combine multiple GraphQL endpoints together and treat them as one. You can even combine that with your own schema definitions to mix in whatever backend sources you want; e.g. your vendor + FedEx REST APIs): https://www.graphql-tools.com/docs/stitch-combining-schemas

Or if you don’t want to do the work yourself, check out OneGraph, which uses schema-stitching to do exactly what you describe. It’s pretty cool: https://www.onegraph.com/
Isn't that effectively what GraphQL is supposed to be?
>And yet natural language aptitude highly predicts programming ability

Its all correlated with g.

>[0]

They contrast "language learning ability", ie intrinsic intelligence, with "math knowledge", ie amount of schooling. For reference, you can take (a version of) the math knowledge test used here: https://www.idrlabs.com/numeracy/test.php

If the article wanted to give a more honest interpretation of the paper, they would have focused on the leading predictor of programming ability, "fluid reasoning and working-memory capacity". One supposes this to be quite useful in math and engineering.
I develop a Rust security application. As much as I want to use a pure Rust crypto library, the #1 factor for me is that it is audited. Unfortunately, libsodium (Sodium Oxide in Rust) and Rust-Crypto are the only ones that satisfies those requirements. libsodium being the only one that isn't easy to misuse. I wish I could help crowdfund a cryptographic analysis of all of the Rust crypto projects. It would certainly make cross compilation easier.
I feel exactly the same, I've been learning a second language and it's nothing like learning programming, in fact arguably the opposite, I've found that obsessing over grammar is almost detrimental to making progress with a new language.

The confident students who aren't concerned with getting all the specifics of grammar exactly perfect are the ones that are making the most progress toward being conversational, they're able to express themselves and actually have something resembling a conversation, despite using the wrong prepositions here and there or conjugating verbs wrong sometimes. The more "academically" minded students who obsess over getting the grammar correct like a math equation are still struggling to form even basic sentences outside of solving homework problems on a piece of paper. I've noticed that I've been making much better progress now that I've been focusing on just trying to express myself even if I'm making mistakes.

Which is obviously the complete opposite of using a programming language.
Remember that these individuals are usually hired and given responsibility based on their ability to game class signalling games; they exist to justify the status quo.

If the status quo were more justifiable their actual job responsibilities to other people within the organization ( conflict resolution, scheduling, resource allocation, and personnel management) are things that could be automated in a hot minute.
Similar situation as you. I view programming more like seeing patterns, structures and constructs for solving problems, which is completely divorced from natural language grammar.

The "language" part in programming is really just a vernacular term for describing differences in syntax, and has no parallels with human spoken languages.
His lines in this game... Sometimes I'm really just cringing at how demotivated/drunk/high they either want him to sound or he sounds by default.
Is Pop!_OS better than Ubuntu for gaming? Given that the officially supported distro for Steam is whatever the latest LTS version of Ubuntu is I would assume that would be the way to go.

(FWIW I'm using Arch and have found Steam support to be pretty seamless, apart from needing to install PulseAudio as bare ALSA had issues.)
If we do nothing about it there will be a time like that with comments interspersed with ads or
not being able to read a full comment without clicking some ad to unhide the rest of the comment. Im still behind adblockers but am not sure how future proof they are
Sure, but that's a great example of what I'm getting at. All that complexity may let you do some pretty cool things. But it also comes at a cost, in terms of both development effort and implementation complexity, and I certainly wouldn't call it easy.

I fear, sometimes, that our collective tendency to prefer talking about the most interesting or most capable technologies tends to bias us toward over-engineering. Slinging JSON over HTTP is, in my personal opinion, a pretty hokey hack. But it's also the option that's the easiest to implement, the most widely understood, and, more often than not, it's more than up to the task.
Is the problem the license plates or the license plate readers?

This is not a strong argument for the merits of “size” of business in the context of lawmaking. This demonstrates the privacy defects of what is a law enforcement tool intended for vehicle identification.
probably going to be spent mostly on executive compensation for the charity execs
"The headline is misleading."

This is a far-too common trend, both from the left and the right. When headlines look like leading statements I tend to conclude I'm not going to find facts but arguments and innuendo... so I why bother? Sadly, it's all too common to see these days. Blame it on click-bait for ad sales or partisanship but it's making it hard to find "just the facts."
100% agree. Perl is highly underrated in today's software development climate.
That’s former Deputy Prime Minister, for the record. Considering his subsequent performance at the polls, a lot of people would further add the prefix “disgraced”...
> an unequivocally positive side effect of advertising-based models

Democracies are bought on advertising.

Hiding the price of the user's attention is not a positive side effect to the user. Hiding who buys the user's attention is not a positive side effect to the user. Hiding how many other people's attentions are also being sold is not a positive side effect to the user. All of these are detriments to the user.
Thanks for a lucid explanation of the underlying mess. I now have a much better perspective.

PS: I particularly enjoyed the unification/gravity analogy btw :-D >.<
I am very pleased to see this response, genuinely. Our Technical Curiosity aside, there are literally people and teams in such big firms dedicated for this.
From some reading I've done, it seems the type of device I'd want is a PLB and not a EPIRB (which you register to a vessel?) It also says PLBs you'd register to yourself and have to update every 2 years - but some articles I've seen say you can use them more than once. (source: https://www.rei.com/learn/expert-advice/personal-locator-bea...) How much of this is accurate?

Also, seeing on https://www.acrartex.com/products/resqlink-400 it says "Battery Replacement: After 5 years or after emergency use, whichever is first"
It's worse than that.
I was hacking a turret and slowly picking them off one by one while they "approached" me (all of them immediately knew where I was even when I was in cover) and never even engaged with the turret in the middle of the camp blasting them off.
Is Bootstrap the Best Front End Frameworks? Bootstrap Case Studies
In the last couple of months friends have asked me "are you gonna get Cyberpunk?", and some seem taken aback by my answer when I say I'm gonna get it next year. Usually when I explain my reasoning (which I apply to almost all new game releases), people seem to understand:

a) There is no way of knowing if the game is gonna be good until real copies land in the hands of people who play games to have fun, instead of reviewers who are too worried about giving an honest review with the fear that they won't get future review copies or get sued.

b) Games generally get steep discounts a year or so after release. This is not universal, but if you avoid buying into the hype then you'll save yourself a considerable amount of money.

The only way to hold these companies accountable is to vote with your wallet, and so I always encourage people to reconsider pre-orders.

I'll be eagerly waiting to see if the game gets the love it deserves over the next year and if it turns out to be a flop, it'll just join long line of over-hyped AAA release flops.
Something similar happened in NZ too under the "Hobbit Law" bought and paid for by Warner Brothers. Now everyone in the film and game industry is considered an independent contractor by default and aren't subject to the usual rights and legal protections afforded to company employees.
> I'm not familiar with Polish labour law, but it could be that in Poland like in many other European countries concepts such as "denying overtime" are inherently illegal.

Which explains why so many Ubisoft games are made in Canada...
No it would make it worse. Valves masks intentionally do not filter air you breathe out, so if you’re a carrier you’re fairly close to being mask less.

Masks are better at preventing outgoing transmission than incoming so you’ve deliberately ruined the thing that a mask should be most effective as.
Nitpick on nitpick: .. or it could be a complex non-zero-sum game.

A kills B's cow, so that milk supply decreases, price increases, and C pays more to A for the milk.
I found the removed video on Periscope for anyone interested: https://www.pscp.tv/w/cqgohTFwempNT2V5dlhYUWR8MWRqR1hxellWZ2...

Haven't watched it myself.
Aussie neobank closes accounts blaming Covid
I wish it was easy to cross compile libsodium in Rust.
I “upgraded” my HVAC to a super modern heat pump with fully variable compressor for efficiency. But the only thermostat that can drive it is a crappy Trane 1050

The remote thermostats can only be averaged and not switched (eg Measure Bedroom at night, Living Room & Office during day)

There’s only 4 time blocks per day

There’s no adjustment of start time based on outside temp. In fact, no way to say: Be at 72 at 8am when I get up

There’s a ”quiet mode” to reduce speed (and noise) at night, but clearly this is on an internal timer. It will come on at 67% for up to a minute before the timed Quiet Mode Function notices and scales it back to the pre-set maximum. Sadly, I’m already awake by then.

(Also, the default values at install are wrong - they have Day and Night switched)

Since this is the smartest thermostat they do for this, can they at least open up the API so I can have a chance to get back the features I liked about my Ecobee?

For so much money, there is so little “smart”

I think I can use what APIs I have to implement the OP solution without mechanical switches, but I can not control the compressor speed directly for Quiet Mode to work
It seems that Gmail is no longer a priority of Google, which is actually reasonable. Email provider is hardly a growing business anymore, and the market is also full of small players. How much gmail user will bother to transfer to other services? Even paying ones? I think minimal. When will Gmail be irrelevant? Probably when email is irrelevant.
I have never liked the term “programming language”. Niklaus Wirth said somewhere that a better term is “programming notation”, and that has always stayed with me.

That said, I like to understand a program (especially my own) by explaining it in English. There, I'm using generative, rather than recognition, processing. There might be some fruitful research in asking people to explain how programs work, rather than what they do, under fMRI.
Everyday: Firefox, Gmail and Signal

Every workday: Same as above plus Vim, conemu/cmder, Slack, Outlook and gitExtensions (desktop)
Stop Being So Polarized All the Time
this is probably because we never 'speak' (although write) in programming languages trying to convey something

Have you told anyone to grep, cat, mount, fsck, or sudo?

I'd say the more experience one has with a programming language, the more reading and writing it feels like a natural language.
I think it's closer to legal work, like drafting an agreement or a contract. You have to define the behavior of all the actors the ways they will interact with each other etc.
This is the most UWS NYC post I’ve ever read. How is this even slightly of interest to the HN community? I’m way closer than most to this sort of thing, and even I can’t bring myself to read it. I’m flagging it.
Thanks for sharing that. That's a neat piece of trivia. I'm already very impressed by Jay Miner's work, and this just adds to that. It makes sense that the TIA would be designed hand-in-glove for the 6507.

BTW - I saw in your other comments that you wrote INV+. This counts as my little brush with "celebrity" for the day. >smile<
Commercial solutions have a rechargeable battery and cycle one of the circuits occasionally to get power to recharge

This can cause trouble

Ecobee (probably others) provides a Doo-dad that wites into the furnace to help make this work
The idea is that there is a sort of contract between the backend and the frontend.

If I conscientiously create an API endpoint that allows you to fetch articles with their comments, I'm gonna craft that query to avoid the N+1 problem. So when someone uses it, perf isn't scaling linearly.

With GraphQL, you can have a frontend person add comments without anyone from the backend team modifying anything. They say "yay it works, GraphQL is amazing", and nobody realizes this is causing scaling problems because nobody on backend actually thought about it.
Infosec and other tech tutorials (Daniel Miessler)
That is how I have thought about code as well. I sort of grasp the "shape" of it, and the analogy to a board game is a good one. I think it supports why it is hard to talk about code, if we thought of it as speak-able units we could paraphrase it.
You can always run a new one. I bought new wire at Home Depot, tied it to the old cable, and pulled it down to the basement.
You'd be surprised how many engineers don't understand security.

A few years ago I complained to the DD-WRT developers that they need to serve up with firmware images on HTTPS (They were serving them up on HTTP). Their images are not cryptographically signed and they didn't publish hashes so at the very least they could try to secure the transport and use HTTPS. My request was rejected and they were confused as to why HTTPS was necessary as "it's not like we're doing online banking".
I want to sponsor a Kicad developer (bounty), if anyone is one or knows one who does one-off consulting work.
Treasure hunter in jail for 5 years for not revealing location of 500 gold coins
Looks like grid view of open tabs[1] will also be available on Android. It's good to see the Android version improving together with the desktop version, since it's pretty much the only mainstream Android browser to support extensions.

[1] https://www.mozilla.org/en-US/firefox/android/84.0/releaseno...
> Bison Carrying Capacity Peak Population Estimate: 30mn but other estimated vary, so let's call it 50mn.

That number is just for the "western prairies", when in fact bison were found throughout the entire North American continent.

The author is also careful to point out that this number is, at best, a crude estimate.
I wrote headlines as my first task on a campus newspaper before most readers here were born. Headline writers are the dishwashers of journalism.
> REST endpoints typically return a specific set of data that you can optimize queries for

You mean when someone creates a REST API he magically knows in advance how it will be used and writes a bunch of specific, optimized endpoints and queries such as "/magic-endpoint/" which returns 20 blogposts with their comments?

I don't think so. And even if that were true, the same could easily be done with GraphQL.