skysight-inc/HackerNews huggingface dataset:
All the time. Finding obscure uses of libraries/APIs or just how certain code snippets are used, or even just repos about a general topic/implementation of a thing. It’s very sensitive and oftentimes doesn’t work well but I’d prefer to spend 30 seconds trying a couple different variations of my search than get no results at all. Google’s open source search is probably better but until they index Github it’s practically useless for me. Github search may be a bad search tool but by nature of having so much code it’s still useful for me.
I can't agree, because I don't work on diffs, I work on whatever the current state of the file hierarchy is. When I make changes to a file, it's not enough to know just the few lines before, I need to know what versions of code are operating dozens of lines away and in different files.

Further, diffs only make sense if you have the full version of the files, pre-diff. Without that full file state, diffs could operate in all sorts of incorrect ways.

I think this is one thing that git actually does correctly: save full checkpoints of a directory structure. I want the same thing when I'm dealing with, say, edits of an essay or book. I want the saved full state, and may produce a diff for convenience, but I wouldn't want to save the diff as the fundamental object of interest.
This is very bad. A lot of time when I'm stuck with some issue like how to use an API and can't find answers in docs or SO, I usually turn to usage of the said functions with github code search. Most often they are some 3 old project with 1 star that shows me how they used it and what values to use, etc and that really serves a good purpose.
Great news, not only because of the improved experience in browsing GitHub, but also because finally a big tech player as acknowledged that it is indeed possible not to have a cookie banner, simply by not processing non-essential personal data.

It would be awesome if this started a trend.
They could try to extradite FB employees when they travel to countries they do have an agreement with.
Performance may be improved purely in software (I don’t think this is true) but to improve power use you definitely want to keep throwing out old hardware. We’re not at the end of process shrinks yet and old stuff always uses more power.
Only useful if you already know about a repo.
Those are not language specification issues, apart from const and constexpr. If you are doing systems programming you may quite reasonably care about fine details and at least C++ is one of the languages that gives you the tools to do so if it matters to your use case.

But the high (abstraction) level of C++ development, in particular modern C++ which is largely pointer-free, make is pretty easy to rapidly write code with a minimum of foot gunning.

I'm more concerned with the unpredictable performance of java or python. Others write excellent code in those languages without needing to worry about that, which is also great.
Not going to happen. Consumers demand a lower price today and would buy from a competitor if the price is 3% lower. They won't pay extra for the resilience of the supply chain.

Also, the choice of geographies is not that wide. You need a place with lots of reasonably skilled but relatively low-paid people.
> "They don't know what they don't know," she says. "They don't know that research shows the longer you're out of school, the less likely you are to return."

> Some of her students are calling their break a "gap year," but Cifuentes says it's not the kind of gap year wealthier students might experience. "They're working, and their families are getting used to that extra paycheck. That's going to be really hard to give up for school."

It's not just about that one year
There's a couple of mentions of Cyprus in the article, but I'm kind of disappointed in how the article doesn't expand into any more detail on how having a Cypriot corporation can be used for tax avoidance purposes, and to hide the beneficial owners of unusual things.

It's my understanding that the part of Mindgeek that rents colocation space, owns/leases/runs servers and buys wholesale scale Internet access in Canada, is the Cypriot corporation.

This isn't really a "new" thing in the internet porno business, people have been doing funny things with panamanian, cypriot, maltese, manx, channel islands, nauru corporations and such for 20+ years.
On top of this, the NT kernel is actually pretty decent

A lot of people that where not in computing back then do not realize that Microsoft picked up a lot of great people due to market forces, they picked up a lot of talent from DEC including David Cutler and the cream of the crop from the OS2 team. This was the team that designed and built the original NT Kernel and it was by and large the best parts of VMS and OS2 coupled with those individuals learnings in building those other systems. I agree with you on the Win32 API and it is a shame that the NT Kernel gets dinged for it.
good that at least in one country they do something, but everywhere else it's wild wild web and the bandits are not threatened.
I think that sometimes it takes a bit more than discipline, if you are going to really do it right. Sometimes there is an underlying medical issues keeping you from quality sleep (and leading to a delayed sleep phase) and other times it might actually be that, given your genetics or what not, you just don't sleep until later.

I am a fan of "early to bed, early to rise." But for me it's got to be with a PAP machine.
I have nothing directly against cloudflare but I think it would be better to try to support one of the smaller analytics companies if possible. They are the ones who made products that got big companies like cloudflare interested in the space.
That's a good point, and I agree with everything you've said, especially anecdotally that oils in particular have more to do with nutritional health than processed foods... But, my original point was that oil _is_ highly processed.
Amazon disallows pointing out paid reviews
That's a really cool looking game.

For someone that's a web developer that's never done game development at all, do you have any recommended resources for learning?
I really hate the lies you see on a lot of new sites that they will send cookies "necessary for basic functionality."

You're serving articles, there's no reason for session tracking!
We've been working on a project similar as supertokens, but does not mess with password manager and with TOTP and WebauthN support (Yubikey is tested).

The project really needs a great frontend. Right now it's mostly just a an API with all these features. It's also MIT licensed:

https://github.com/curveball/a12n-server
I don't know what it means, but I recall seeing that word once before. That was in the context of explaining git also, so there's probably something to it.

https://news.ycombinator.com/item?id=25122863
Not necessarily. Only if personal data is collected by the third party.
I've spent far too much time reading this while I'm supposed to be working - and I still don't understand it. Hopefully someone can help.

__static_call(name)

is a macro that expands to (name inlined):

({ \
__ADDRESSABLE(__SCK__x86_pmu_add); \
&__SCT__x86_pmu_add_tramp; \
})

It is used in this context

#define static_call(name) __static_call(name)

Which is used in this context

static_call(name)(args...);

But... this (expanding the last version) isn't valid syntax?

({ \
__ADDRESSABLE(__SCK__x86_pmu_add); \
&__SCT__x86_pmu_add_tramp; \
})(args...)

A block isn't callable in C?

---

It might help if I understood what the final product (assembly) is supposed to look like, but I don't. For instance, at the end of the article the final assembly produced is discussed, but it's not clear to me what code is producing that assembly/what the surrounding assembly is supposed to look like. Taking the last example

call __SCK__x86_pmu_add
; in call + "trampoline"
ret ; "trampoline" returns, completing the call

Is this code generated inside a trampoline function (so that last ret is actually a ret)? Is this code called inside the caller, and someone played with the return address? Something else?
Is the AI messing up the newline? or is that just HN formatting

quite impressive. now ask it to solve the K&R exercises ;)
> The moment you use them for analytics

Not even then - there are plenty of analytics you can do without a cookie banner, as long as they don't identify the user.

Conversely, anything you do other than your obvious business requirements (e.g. if you buy something physical I need some address or identity to verify at pickup) requires consent whether or not it's analytics.

(Not a lawyer, not legal advice, jesus just don't track people...)
PayPal is bigger, and they offer trading of some crypto currencies.

And notably, PayPal's market penetration is much greater than Coinbase's.

https://www.paypal.com/us/webapps/mpp/crypto
If you'd like to know more about Billy Mitchell, who was conspicuously unmentioned in the body of this report, including the reasons for this, I recommend the following lecture (audio): https://www.nationalmuseum.af.mil/Portals/7/av/billy_mitchel...
I bet their revenue distribution is pareto with most of it coming from whales/institutions. This is where the current growth + long term growth is and will come from.
Read the "Toxoplasma of rage" by Scott Alexander or watch the "This video will make you angry" by CGP Grey.

No immediately reaching for maximum impactful tools will leave you behind and those who are not so "shy" to use strong words will advance and get more exposure. It's a memetic race. You get more attention for more outrage. Rewards and incentives shape what we see.
Just out of curiosity, How much resources (time, money, etc) does it take to train a model like this?
I'm glad we're using dedicated vpn boxes... kind of annoying that I can't use a wifi directly, but usually at my home desk and tethered in anyway. Didn't know about the VPN issues in practice.
DS9 is peak Star Trek for me. It took what I loved about TNG and gave it the "Babylon 5" Arc treatment with a bit more darkness to it. I would highly recommend watching the whole series. It's available now on just about every streaming service.
I think the fact that the censorship is government-mandated, as opposed to privately-mandated makes it worse, not better.

Publishers are supposed to reject illegal state censorship, not embrace it.
Changes at Twit for 2021
Binance.us, Kraken, Gemini, cash app, crypto.com, etc... there are many many ways for people in USA to buy & sell cryptocurrency. Most of them are more reliable than coinbase. Coinbase's main advantage is just being earlier to the game than most, and many of their users will continue using them because they don't yet have a reason to put in the effort to switch.
Amen. Her paper is citing dated problems in AI models. These problems have been known for at least 4-5 years, and the responsible AI community has been working on it. No progress mentioned. The paper read like an editorial rather than actual AI research.
Those numbers are self reported from scientific polls. But a 90+ percentage point difference even when self reported, probably means there's a large difference.

>Death rates, for example, at a naive guidance look worse for Spain.

Spain is about 4 times as densely populated as Sweden, you'd expect spread and death rates for a communicable disease to be higher.
A PC is used for much more and has much more expansion capabilities. Not to mention my PC is better than any console even though the GPU costs as much as a retail PS5. If I was on the console upgrade cycle I could wait until PS6 to upgrade my computer. That's a portion of the PS4 cycle and all of the PS5 cycle for ~$1200 (no need to upgrade storage and other accessories for a new build).

People on the high end could even wait 2 console cycles to refresh.
I'm not optimistic about the US Gov's ability to defend and maintain these networks. Yeah they have a lot of money to throw at the problem but eventually you have to put the best, most knowledgeable people in front of those computers and do work. They can't hire the best and brightest though, and are otherwise unwilling to make the policy changes necessary to be able to. When security professionals can make 2-3x in the private sector and smoke as much weed as they want (in this case the stereotype has some truth to it; a lot of devs/engineers use marijuana) what incentive is there to work for one of these alphabet-soup government agencies?

Even if the positions paid more and had more modern drug testing policies, I have never, NOT ONCE, met someone who works in software at a government agency or at a company doing government contract work who wasn't a massive fuddy-duddy-boomer.

These breaches will continue to happen until the Gov takes a more pragmatic approach to it's technology and brings it's culture more in line with the private sector.
Oh boy do I love all the used stuff, that's all I've been buying for the past decade with some rare exceptions like monitors and storage drives :D
The overhead is apparently quite real and easily measurable. There was a proposal (not sure if accepted) to make the KVM virtualization module monolithic to avoid indirect jumps through a table of function pointers called kvm_x86_ops: https://people.redhat.com/~aarcange/slides/2019-KVM-monolith... (page 13 ff.)
I've been using Airflow for the past 6 months extensively in my projects and it is such a pleasure to use. I am excited to try out this release. Had a little trouble integrating Selenium and webDriver using BashOperators that run individual Python scripts and should probably switch to PythonOperators soon.
They’re definitely one of the easiest if you actually want to do accounting and tax reporting properly. Decentralized exchanges don’t make it easy to get transactions off of and non-US exchanges have to be reported as foreign bank accounts.
This is a complicated decision to have made and perhaps a blog post is needed for this. But here is an attempt to answer it:

A complex enough app will require modifications to the auth flow. Most services achieve that via webhooks or by forcing devs to write code in their "dashboard". This code would then live outside the main codebase which is annoying. So we thought that if someone was making their own auth, they would want to have all their code in their backend API itself. The best way to allow that was to hide the auth server behind their API server (which is a proxy to the auth server for certain APIs like sign up / sign in etc..)
Shopify: Experience with a $5m biz and Why SHOP could Surpass Amazon
Oh, this is perfect, thank you!
When my 5 year old was recently asked what was his favorite chip, his response was "chocolate chip". So that shortage may be just around the corner.
To an extent, but there are easy ways to cut the search space. For example, you could make a unique request with garbage on it from a known IP every day, and then all you have to do is build a rainbow table for that one IP to find out what the salt is for each day, and then you can fully reconstruct the logs.
> There's no practical way for a company, on its own, to refuse orders from a government

https://en.wikipedia.org/wiki/Joseph_Nacchio

Not confirming nor refuting, and it's worth noting that the CenturyLink lines are now more than likely under bulk surveillance... but one wonders what things would be like if there were more people like Mark Klein and Joseph Nacchio and Ed Snowden.

Some blame must be assigned to thinking creatures who succumb to learned helplessness in the face of illegal orders.
That's good to hear. I felt kindof bad for the receptionist being forced to use RHEL. This was during RHEL3 and the desktop was not great.
It seems the huge and annoying "Why don't you join Github" banner is gone now, too. They must have eliminated the persistent cookie that clicking "Dismiss" presumably set. That banner was very frustrating for me, as I clear cookies regularly from the browser profile I use for random surfing.
this is not a uniform phenomenon, some vials of ~stock~ concentration have more volume than listed.

a 5 dose vial with 7 doses volume means an error of 40% .

the final bottling process is not obvious, so

H1: the stock concentration could _possibly_ be diluted by up to 40% in some vials.

H0: the vials are filled in one aliquot of appropriate concentration at higher volume.

bare minimum this is sloppy manufacture, due to deviation in portion control.

worst case 7 people are receiving off lable dosages.
Did you search for "PMS5003" on aliexpress? I found a few suppliers, and ordered one for $15.81 with shipping (4.9/5 rating; 156 orders)
Buying bitcoin with PayPal isn't equivalent with buying from Coinbase or other exchanges/brokers. You can't send your bitcoin outside of PayPal. You cannot withdraw to your own wallet/cold storage.
Have you ever read that story about the NRO just donating two spare spy satellites to NASA, which are basically superior to the Hubble telescope? I feel like the US military has orders of magnitude more money and material compared to NASA.

https://en.wikipedia.org/wiki/2012_National_Reconnaissance_O...

I think there are probably a couple of technologies that are only used in rare occasions, like how we first learned of the cool stealth helicopters because one crashed during the raid on Osama bin Laden's compound.
I'm impressed and glad you chose a real Open Source license. I really hope you can make money off of this so it can remain free to use (and I think you can, judging by Auth0's customers)

Also, I assume you can add captchas as a custom theme. Could you add some sample code for that (and other user stories) in your docs/repos? In cases where somebody's got to implement something super quick, and there's a competitor who has really easy to follow docs, sometimes that alone can convert a customer.

The use cases we have for Cognito include: zero-trust authentication portals for services, enterprise SSO, customer portals for applications, session/user management. For Auth0, the same plus API management (including billing, authn+z, etc)
>Massive Scheduler performance improvements

THIS! Mainly looking forward to the scheduler HA improvements! That has been the biggest pain in a self managed Airflow environment.
Commits are snapshots, not diffs
Gemini is regulated, more stable, and doesn't randomly perma-ban with no recourse when their AI runs amok.
How about "Git For Ages 4 And Up" [1]?

[1] https://www.youtube.com/watch?v=1ffBJ4sVUb4
The "certain regulation" here is simply that you can't advertise to your customers that you're getting them the best possible deal when you have deliberately chosen not to give them the best deal. As the SEC points out: their pricing isn't better than traditional brokerages. This isn't like Uber, where the lie is that the low prices are subsidized by investors and will be jacked up later on down the road; here, the lie is taken directly out of the hide of RH customers.
Great post!

Percentage-wise, how many hot call points have moved to static call sites versus remain based on retpoline? Are there any in-vivo performance measurements?
Except if you go for decentralized exchanges, that sidesteps regulation and KYC/AML entirely. If countries keep fragmenting their crypto regulations, then so will liquidity. The decentralized exchanges will be the only venues left that pool liquidity at a global scale.

You still need a centralized exchange to be an on-ramp to go from regular money to the blockchain. But that's way less lucrative. You convert your dollars to USDT/WBTC/Ethereum at Coinbase, transfer to your wallet, then do 99% of trading/gambling on Uniswap. That's not a future where Coinbase is very valuable.
"One platform to rule your IT stack." - SolarWinds site.

Uh oh.
I think in a lot of jurisdictions this is possible, but there are timing considerations. I know families who have moved significant majority of assets to children much earlier than any medical issues, partially as a hedge against this.
I cannot imagine building auth into a system now without using Keycloak.

It's a comprehensive platform for sure, which makes for some pretty intense concepts and documentation.

But once you lay your hands on a suitable tutorial it's dead easy to get running, and you'll never find yourself stuck when some PHB asks you about your password rotation policies, 2 factor auth, SAML, SSO etc. etc. Keycloak does everything you could ever want for auth.
You know tech has ruined you when you read Naval and assume it's referring to Naval Ravikant
I wonder if they will be traded exclusively on a traditional exchange like Nasdaq or NYSE. It would be disappointing if they couldn't do some kind of token thing so their shares could be traded with their own technology.
Capella Unveils World’s Highest Resolution Commercial SAR Imagery
> but consumers will remember the companies that "gouged" them

I don't think so... EA still sells a lot of games
Hey everyone. I had a lot of folks reach out to me about this change. We've heard y'all loud and clear that you want a better code search. The goal of this change was to balance performance and search relevance while we work on a new code search backend. The vast majority of folks shouldn't notice a change in their search results. The folks that will are those that are using code search to count things across all the repositories in GitHub. That's a use case that we don't expressly support as part of code search but we know folks are doing it anyway. My goal for publishing this was to be open about the change and for those folks that are using code search for analytics not have to guess at what happened.
Don't universities have a huge number of IPs because they were the first to use internet ?

Mine gives one public ipv4 per device that access the internet on the network (with some exceptions). Strategies varies but if you have a lot of addresses why not use them.
Also Bittrex which is regulated in WA state.
> But, my original point was that oil _is_ highly processed.

You're not familiar with this new "unprocessed" vs "processed" vs "ultraprocessed" designation then.

https://worldnutritionjournal.org/index.php/wn/article/view/...

Oils are a "Group 2", low-processed food. Page 5:

> Group 2 items are rarely consumed in the absence of group 1 foods. Examples are salt mined or from seawater; sugar and molasses obtained from cane or beet;honey extracted from combs and syrup from maple trees; vegetable oils crushed from olives or seeds; butter and lard obtained from milk and pork; and starches extracted from corn and other plants

Group 2 foods are apparently NOT processed. For some reason, I didn't make this designation, I just make fun of it on the internet.

Group 3 foods are "processed", and Group 4 foods are "ultraprocessed". This designation is completely and utterly meaningless in regards to health.

----------

That's why something like LOL Lumpia + Stir Fry dinners is at worst... "Group 2", unprocessed by this designation (Both Oil and Flour are just Group2 designations, the most processed items in Lumpia). But if you eat a low-fat cereal + yogurt + applesauce, you're eating ultraprocessed stuff.

I bet you that "Group 4 Ultraprocessed" Low-fat fortified cereal + yogurt + applesauce meals are healthier than "Group 2 Unprocessed" Lumpia + Stir Fry dinners with fresh Lechon + Rice.
The SuperTokens microservice is in Java. The backend can be in anything (like nodejs) - for which we have an SDK that developers interact with.
Tweet Summary:130 pages of state AGs suit vs. Google
generally they are used to protect against DDOS and to have forensic data in the case there is malicious behavior and are allowed as essential to operating the service.
we already have covidseq by illumina which does this at a pretty big scale and provides survaillence and diagnostics in one test.

the issue is that PCR still is the cheapest and fastest way to get the results.
Website is down rofl
So surely with all that extra power and storage freed up, they can start indexing code in forks that are actually actively maintained?