skysight-inc/HackerNews huggingface dataset:
> In what other programming language can you put spaces in variable names?

ISTR that many dynamic languages allow this with dynamic assignment features, but you often need to use similar dynamic access functiona rather than simple variable access to access them.

Ruby also allows whitespace if it is unicode but not ASCII whitespace, without use of dynamic assignment/access methods.

SQL allows spaces in object names but requires quoting, similar to shell.
FWIW I haven't found that to be the case with something as simple as making an image autoresize.
Fortunatelly on Linux it's just using standard repositories.
I'm still not understanding why we are questioning their right to do this? Back in the old days, you paid for an advertisement in the newspaper. Your right to post that ad was completely controlled by that paper. If you posted an ad with inflammatory or blatantly false information, the newspaper would refuse to run your ad.
Imagine if I was Nixon running against JFK, and I attempted to buy an ad in the Times on the second page, immediately after the election, indicating that the election was fraudulent, and that I had actually won. Would anybody have run that ad? Absolutely not. What's incredible is that Twitter does actually allow these tweets but simply indicates the facts may not be accurate.
Hmmmmmm. Wonder why Github has bugs with the world's most popular browser, but doesn't have bugs with a (very similar) browser made by their owners ./s

(It's mostly a bug, or a setting in Chrome to not ask websites to use dark mode.)
I am working on providing feeds with "Picture of the day" for the device. I agree that that service should run hardened software to prevent your scenario from happening.

If you run the device in local mode though, WiFi is never enabled.
AWS services such as ECS Fargate let you specify an upper bound to the number of instances that can possibly be spawned.

There is even a default 'task limit' they enforce which we had to increase by sending an email request.

Typically though, as in the article above, it's the database service scaling that causes big shocks.

Rule of thumb would be to always ask if there is an upper bound to every cloud service one uses.
How does nim-regex implement capture groups and zero-width assertions (like \b)? Both of those are tricky with DFAs.
> I would think you could obscure whatever marker you use fairly easily, any basic encryption should work.

Indeed, you can, and there are situations in which it makes sense. However, it doesn’t really help when it comes to detecting abuse of this sort. For one, CGNAT causes problems. There’s also the issue of people linking to articles from sites like HN and Wayback Machine. Those two alone make it nearly impossible to automatically rate limit based on an ID in the URL.

CGNAT is a big issue that Western companies tend to neglect. However, it’s increasingly common in places like India, and it’s even seen at times in the US, especially in rural areas.

And, of course, public VPNs are growing in popularity.

Unfortunately, all of these factors mean that performing any sort of risk analysis or rate limiting on IP address alone tends to be ineffective or outright harmful for moderately large sites. You can do some fairly basic categorization (this is from a residential ISP, this is from a datacenter), but beyond that, it’s not particularly useful.

Hypothetically, let’s say:

1. We tag every URL with an IP address association in some way.

2. Someone posts a link on HN.

3. We see lots of requests with IP address tags that don’t match the actual requesting IP address, so we block or rate limit them.

4. We’ve just blocked traffic from HN.

Another hypothetical:

1. We design, calibrate, and test a rate limiting system in the US.

2. Some large percentage of real-world traffic comes from India and is behind CGNAT.

3. We’ve just rate-limited most of India.

4. So we exclude India.

5. But now we’ve rate-limited Nigeria, and malicious traffic from India isn’t blocked.

What we actually end up doing is similar but mostly relies cookies instead, and it’s only a single risk factor. It’s not perfect, and it has some caveats that the URL solution avoids, but it has far fewer false positives.
This speaks more to the narrowness of your view than it does about shell.

Example: I work with parallel filesystems quite a lot. Often I will need to parse through GB of logs spread across a cluster to track down a particular sequence of events for troubleshooting.

I could load up a fancy IDE with all the bells and whistles, one that instantly refactors all my 'foo', and still spend a (very) non-trivial amount of time carefully crafting (and documenting, and debugging) a proper application to solve the particular problem I'm working on.

OR - I could rattle off a pipeline using a few general tools and get the needed details in less than a minute.

You analogy about hammers is particularly amusing, invoking the old saw "If the only tool you have is a hammer, every problem looks like a nail". You take this to the absurd degree that you end up championing nail guns!
Earnestness is some mix of ethics and disclosure. Perhaps truth coupled with reasonable expectations (honesty meets humility) would be a better characterization, but most people don’t really know what truth, or rather alignment, really entail in a purely communication capacity.

The challenge with earnestness is not everybody can either attain or receive it. It is a gift that takes a certain level of intellectual capability and personality to appreciate otherwise it’s written off as unintelligible or an insult.
Distros are always full of drama. The stakes are low so the nonsense is high.

It’s easy to get sucked in.
Keystone is the hidden nefarious program that apple installs as its been clearly stated to convert intel into arm code lol
It’s a bit arrogant telling everyone that they’re wrong when you’re changing the entire purpose of a product. It’s dead.

It was accurately described already in the press release and that killed it.

If there is backtracking it will make it more dead as it would break trust.

It’s dead. You killed it some more here by shouting down the community.

Edit: to clarify I have over 100 CentOS boxes which will not be running CentOS or RHEL next year.
Also maybe Seven by David Fincher which is about a serial killer, too.
Terminals and text editors have had dark themes as default for decades. This isn't a new trend. Spotify also has never had a light theme since launch (10+ years). Facebook (and 99% of other software released today) goes by whatever your browser/OS preference is.
Imgdiff: Faster than the fastest pixel-by-pixel image difference tool
If the math produces the wrong conclusion in some cases, it’s worth trying to figure out if the model can be improved.

Anyways, we’re not really disagreeing as far as I can tell.
Stopping DB accesses is a great way to mess up a lot of stuff. Even just stopping connections to the live website would be full of potential issues. Should it stop all access or still allow access to the administrative interface? What is the root cause of the billing overage is a report by finance or someone running a large job on EMR, should that pull the plug on the website?

What if the new services that are being suspended are writes to queuing systems that are used for order fulfillment or other business processes, should we drop these orders on the floor?

It's much easier to handle it post facto, and write off the expense on the cloud provider side, which doesn't cost them that much anyway. There are some guard rails that prevent people from doing catastrophic things that they can't write off (eg. taking all of the compute capacity of a region for hours on end, preventing other customers from actually using it) using limits that require manual intervention to be raised.
Follow up to “I'm not fat”, I used to be fat
I think he lays it out pretty well: earnestness is more than sincerity, it's dedication to solving a problem for its own sake rather than as a means to an end. I'm not sure why you want that to be quantifiable, but I don't see that as being useful since Goodhart's law then kicks in.

I do agree that on a single continuum from roulette to race, entrepreneurship is closer to roulette, but it's a limited framing because entrepreneurship is neither a well-defined rote exercise like a marathon nor a discrete probabilistic event like flipping a coin. To the contrary, building a company is a continuous feedback loop involving thousands of decisions over which an entrepreneur has complete agency. The uncomfortable truth is twofold: founders' choices do affect outcomes, but those outcomes are not predictable and have no direct relationship to ones own perception of merit, hard work, fairness, or morals. Getting hung up on the luck aspect and whether or not some successful person is humble enough is a defense mechanism that ultimately gets in the way of maximizing your own success.
Ah yes, this is how SAP and Oracle make their money: you "buy" a "COTS" solution, and then spend ten times as much having them build something for you .. which in the end you don't own.
Three rules to understand how Apple prices its products
But we all understand that an old newspaper is quite different, right? Now 'news' is instantaneous, simultaneously 'published' everywhere, unedited, capable of rousing the rabble like a lightening rod...

We'll need different rules for this new media.
I think chrome was the most secure in 2015, but a lot of updates in all browsers have shipped since then!

Also, if you include google in your threat model, then chrome was never that safe
Some expensive software will demand you use particular distros for them to support you

Example:
https://www.synopsys.com/support/licensing-installation-comp...
It seems to me that the perception of boringness can come as a result of earnestness being very niche/focused. Your example is a great one! But if anybody who is not a fan or doesn't know Borges, they would probably find a person earnestly passionately about his writing quite boring -- as one can only have the time and mental energy to be truly earnest about so many things.

In contrast, GP's example of popular people are likely those who are good at faking that kind of deep interest in many things, tailored to their present company, so that they attract a few people from many different crowds. Of course, this is based on my own experience only; in certain circles I can feel quite loquacious and come off as extroverted -- usually because of an earnestly shared interest -- but in most cases I think I come across as boring or even introverted!
I'm quite impressed by that “chromeisbad” as a domain was not already taken.
Why "Summon the JSON"? That makes it sound like it teaches JavaScript.
Not putting a dot after the www in your domain name seems weird :)
Possible correlation and hand waving equals causation.

I, too, was hoping for something, well, technical. Considering #1 on hacker news...
The cookies popup on that site is a thing of beauty.
That’s “Deceased”.
It would be also great to have at least one link for all API, so that I can easily learn more about a particular API.
Sure. Since you say this is not a big deal and CentOS is not dead but is just changing, I really only have 2 questions:

1) What in your opinion were the main use cases for CentOS before this change announcement?

2) How do you think CentOS Stream is still viable for those use cases?
Well it’s definitely nsfw but a quick search confirms this is true. Wow. One of the videos is from playboy tv. Pretty hilarious loophole.
I don't think the people that create "periodic tables" for other areas understand the principles behind the actual periodic table of elements. I've never seen any example that had any kind of underlying principle like the real thing.
> The Linux man pages are upside down. Examples don't come till the very end, if at all.

man pages are meant to be a full reference, not a quick tutorial.

To get the quick tutorial others have already mentioned cheat.sh [1] and tldr pages [2] is another good resource.

[1]: https://cheat.sh/

[2]: https://tldr.sh/
Only the brave and rich companies can use H.265 now, because of the patent.
There are two major patent holders and there are some companies not belonging to either of them. Using H.265 to anything other than experiment and research in my country(as the patent law stated these for the exception of patent use) has a risk we cannot take.

I guess rest of us, honest patent-abiding citizen and low profit buziness have to wait until the middle of 2030s to use H.265 safely.
In defense of Paul, I'm reminded of work highlighted by the twitter account Real Peer Review (once banned and now reincarnated). It highlights various bits of so-called scholarship that looks like political ideology dressed up in fancy words and financed by taxpayers. "Decolonizing math" and things like that. Some recent examples:

https://twitter.com/RealPeerReview/status/133532437242123879...

https://twitter.com/RealPeerReview/status/132655686041831424...

https://twitter.com/RealPeerReview/status/128234439739327284...

https://twitter.com/RealPeerReview/status/131274252267491738...

(NSFW) https://twitter.com/RealPeerReview/status/128226118909190553...

(NSFW) https://twitter.com/RealPeerReview/status/130979001821976166...

I wouldn't expect taxpayers to finance my church. I'm not sure why I'm on the hook to fund this particular non-falsifiable dogma that I vehemently disagree with.
I find it maddening when articles presume a specific operating system without ever explicitly mentioning it. This is not limited to a Mac - happens with Windows and Linux articles as well.
Where did bytes come from? [video]
Alternatively, you are playing from a modern typesetting of the music which has some extra notes added to detect that you are making a derivative work through your performance, like how map makers add "trap streets" to their works.

Being serious, though, I believe that a typesetting of a piece of public domain music can be eligible for copyright, but I don't believe that a performance from that typesetting can count as a derivative work of the typesetting, even if the musician faithfully performs a few "new" notes added by the typesetter.
https://en.m.wikipedia.org/wiki/I_know_it_when_I_see_it
I strongly agree with this narrative and it matches my own experience. I spent 9 years of college and then grad school using exclusively either vi or emacs because I believed IDEs were a crutch that weak engineers relied upon. It wasn't until I got a real job that I found myself forced to learn a proper IDE (IntelliJ).

It blew my mind just how powerful the IDE was and how it massively increased my productivity. Putting aside code completion and code generate, I found it much easier to navigate a codebase using a proper IDE that fully understood the language. When I contrast that to my previous solution, a highly customized emacs configuration with lots of packages and my own functions, the two just don't compare.
> I think the point is that with [Unix] you aren’t just stuck with what some product manager at JetBrains thought was a cool feature.

But you see that’s exactly what you are, because you can’t refactor Java code with what you call “Unix tools”. So your only option is to install actual IDEs on Unix.

And “find usages” finds... actual usages (e.g. method calls), not simple text matches which can end up being 80% noise. For `grep -r` you might try `Ctrl+Shift+f` instead.
While interesting, I think this model is only viable for a certain subset of computational workloads.

AF2 took like two weeks of computation on 200 TPUs to train. I’m not sure if they used a data parallel or model parallel distributed training approach, but I don’t imagine either would scale particularly well to a globally distributed network of worker machines in a folding@home analogue...
CentOS is just a red hat clone. There are a few iirc.
The factors contributing to the rise of psychadelics are due to the "push" away from western practice of treating mental illness with books like "Anatomy of an epidemic" by Whitaker and screenings like https://medicatingnormal.com/watch/.
If only we had some way for the user agent itself to apply a different stylesheet…
The shell is a total mindfuck.

Trying to do any non trivial scripting/programming in it will mess up your mind.

Oilshell perhaps?
Did you do the graphic design? I'd be interested to hear a little about the process of the design of the cards.

Your site says the cards are made by https://www.thegamecrafter.com/

You live in Poland - after having the cards made, what then? Did you ship them to Poland and you distribute them directly from there? Or do you use some sort of fulfillment service?

I notice you have a 5% affiliate program - how is that working out, is it driving sales? What approach did you take to choosing how to do that?
It's for enterprise (and other) customers with SSO. No all sites require two steps for this, though. HackerRank lets you leave the password field empty, and based on whether you have SSO enabled it either redirects to that or returns an error.
In the security industry it's commonly known Chrome has the best security, this partly due to the amount of money Google invests in finding vulnerabilities (via fuzzing) in Chrome.

For "proof", you can check how much exploit vendors pay for exploits for each browser. For example Zerodium offer:

* $500k for Chrome RCE

* $100k for Safari RCE

* $100k for Firefox RCE

https://zerodium.com/program.html

The higher amount would generally indicate its harder to get an RCE in Chrome.
the story specifically leaves trust as an ambiguous quantity in that relationship. she obviously doesn't trust him. so, not only are we left to ponder her nature, but his relationship to her. does he take her suggestion at face value, assuming goodwill on her part, or does he expect her jealousy?
These days, language servers and wiring up one of the clients in Vim.
It's awkward that the author feels they can't morally post an example, because it's impossible to judge the claims when only the least-strong evidence is presented.
Does anyone else see the irony that hand waving is being disputed with hand waving?
This is an advertisement linking to a broken storefront in case anyone was wondering.

Maybe the creator can share more about the design of this device (ex/ what embedded device you're using (ESP32?), is an ASIC driving the display, epaper supplier, etc.)?

Have you considered using E INKs Kaleido coloured epaper?
A different way to look at this is to consider that 'the left' has already been through this, repeatedly, and is exploring ways to directly counter right-wing propaganda rather than passively sit back and assume the 'marketplace of ideas' will just take care of it as centrists tend to do.
> is clear that CentOS is now a Dev focused operating system not designed or targeted for Stable Enterprise operations with a community of Enterprise SysAdmins around it

This is absolutely not true. Would you have described RHEL this way? If not, then you shouldn't describe CentOS this way either. CentOS took RHEL's place in the chain. Instead of Cent being downstream of RHEL, the two were swapped around.

> If you believe the changes are "not all the much" then you are clearly not in touch with the user base of CentOS, outside of Devs that is

Say what you will. I've been using Cent since 2012 and currently run numerous workloads in production on it. I've shipped SaaS products on top of it and have been responsible for widespread maintenance. I've been a package maintainer for numerous packages as well.

> But for us Old School, OnPrem sysadmins running CentOS for Stability, and Long Term Support, CentOS is most certainly dead

I know plenty of old school on prem sysadmins who run CentOS for stability and LTS (I'm one of them. I have 3 bare metal machines in prod at the moment running CentOS). I may go with Rocky for one of those machines (it's a router/load balancer), I haven't fully decided yet.

That said I agree with you somewhat, that is the one area where this change could be somewhat negative. However, with CentOS being week and months behind RHEL right now, do you see that as a good thing? Do you like having an unpatched system for days or weeks at a time when an embargoed security fix hits RHEL and has to wait for CentOS to build and distribute? I don't. Security patches are top priority for me.

Edit: Blog post mentioned is now live: https://freedomben.medium.com/centos-is-not-dead-please-stop...
Cyberpunk 2077 has already recouped its development costs, CD Projekt says
The issue is not what is being censored; the issue is that we have censors at all.
There is a lot of software that only officially runs on RHEL-likes. E.g. Oracle Database only supports on RHEL-likes and SLES.
They have that trust because all the software installed by homebrew is open source.
This is why dates on articles is so important. I can’t tell if this website is newer or older than that response so I can’t tell if this is a problem today or was a problem that was resolved
> and I don’t want to spend time planning a long term OS strategy. [...]

> That’s why folks reach for Mac OS ...

A conservative Linux distro choice is way more stable than Mac OS is in regards to "sudden" changes you need to deal with. And on the time scales we worry about CentOS or Debian, Windows has its pitfalls too.

In all cases, if you need a long-term strategy, it's always going to involve some level of preparedness to handle a change.

If you want to keep up with all the distros and their individual going-ons, that's your choice. You can use Linux just fine without doing so.
Vendor support. We have a couple software packages that we run that require CentOS/RHEL.
I love that article! Thanks for sharing it!
Do you get the source to the code that runs it, or is that a black box?
Eh not really a fan. Seems too close to outsourcing, but who knows. Also seems like it will lead to way more security issues.

On a positive note, I can see a bunch of work coming out of this to fix things done poorly.

Sorry I think it will actually lead to companies leaving AWS.
Does that mean they don’t have respect for say quantum computing research? Because I’m pretty confident most people in SV won’t understand, say, a paper on quantum error correction.
> We start from the belief that AI should be used for socially beneficial purposes and always remain under meaningful human control. Understanding what this means in practice is essential.

> We embrace scientific values like transparency, freedom of thought, and the equality of access...
I have used `grep -r` a ton on our codebase and purpose-specific tools like “find usages” are always more to the point while `grep -r` can easily be misleading.

Also you can’t just tend toward greppable names (whatever that means) if you share a codebase with developers who are on Windows and wouldn’t be able to tell grep from sudo.
"Ancient Ascians appeared. The oldest one with long beard came closer and told: "You have to save the Repository". After yesterday battle all you could think of is to save anything. A hot cup of coffee would do just fine. At least they know the way..."
Gotta say, I was hoping this was an implementation of Piet that ran on the GPU: https://www.dangermouse.net/esoteric/piet.html