skysight-inc/HackerNews huggingface dataset:
The reuters link posted here is click-bait junk. This section from the Microsoft blog provides better context.

>We detected unusual activity with a small number of internal accounts and upon review, we discovered one account had been used to view source code in a number of source code repositories. The account did not have permissions to modify any code or engineering systems and our investigation further confirmed no changes were made. These accounts were investigated and remediated.

>At Microsoft, we have an inner source approach – the use of open source software development best practices and an open source-like culture – to making source code viewable within Microsoft. This means we do not rely on the secrecy of source code for the security of products, and our threat models assume that attackers have knowledge of source code. So viewing source code isn’t tied to elevation of risk.

https://msrc-blog.microsoft.com/2020/12/31/microsoft-interna...
Only truly beaten when you can do all artifacts enabled on Monsoon. Mwa ha ha ha ha!

Apparently the devs didn’t complete the first level? Or maybe only completed the first level?
There's a world of difference between "China has some liability for delaying the response" and "China intentionally engineered this in a lab". The reasonable argument of the former is drowned out by emotional blame-thinkers who have adapted the latter.
Is there some survey/list somewhere which of these topics are still relevant today, might have a comeback in the future or are definitely a thing of the past?

A lot of these topics where somehow mentioned in some of my ml courses at university but my professors never really bothered to put them in a bigger picture.
As someone who doesn’t know much about Texas and most of what I know comes from TV. Texas has always seemed like a backwards, red neck, gun crazy, republican voting state
Isn't Apple doing the exact same thing with their proprietary ARM ISA extensions?
Exploits are much easier to find if you have pure source code and not having to reverse engineer it.
It's so fucking SLOW.

I'm sure it has something to do with Angular or modern JavaScript development, somehow.

I'd rather poke my eye out than navigate around in Jira.
closed source = only the badguys get to see it. :-(
> This means we do not rely on the secrecy of source code for the security of products, and our threat models assume that attackers have knowledge of source code. So viewing source code isn’t tied to elevation of risk

I don't know how much of this is true. Wouldn't it be helpful for bad actors to understand how Windows defenses work looking at the code thereby increasing the risk?
It just lowers the cost of exploit development, that's all.
I remember putting this book in my pile almost a decade ago, is it still relevant?
> We are not “internet vigilantes”

Except they are. They’re using methods outside law enforcement to deal with problems. Isn’t that the definition of a vigilante?

Besides that, are what they are doing even legal with regards to CFAA? I can’t imagine a prosecutor going after them, but that doesn’t make it legal.
Recently started using KDE again after many years. I love how full featured Kate is, and yet it's light and fast enough that I can still quickly edit a small file and get on with my day.
If healthcare professionals refuse the vaccine then why should the rest of us be vaccinated?

This behaviour sends an appalling message to the public.

Frankly, there should be serious consequences for the staff involved.
I kinda agree with this
Hate to see how easily monopolistic services like YouTube give up basic human rights, in order to please tyrants, who's in solo charge of accessing to the market, which YouTube does not want to lose.

I witnessed multiple shutdowns of accounts, criticizing Russian regime. No explanation was provided, like Google always does. Selling ads is more important, than life and freedom of people.
Label Rouge chickens are my favorite, and I wish I could find that same standard for other meats in Germany.
Exactly, in case of Julia I think it all boils down to multiple dispatch and ahead-of-time compilation. But it's still dynamic!
> I'd have to rearrange the room to accomplish that, there is nowhere close to enough space behind my monitor to put a tripod.

My top tip is to use a full-size dining room table as your desk, rather than something sold as a modern desk. Then your monitor sits about in the middle of the table and you have so much space behind it, around the sides, and beside you. It's a huge improvement to have this extra space.

Things marketed as 'computer desks' are invariably about 4x too small for comfortable use and placing your equipment on.
Tomorrow one of my email addresses will stop working
Dang, I was really hoping to find examples of the MCMC methods in Ch. 8.

A strong point in the "Introduction to Statistical Learning" by the authors is that each chapter ends with example programs in R (albeit with a fair number of typos).
Is there something you can point me to, in order to learn more about Canada's approach? So you're saying that a program specifically to give cash to white men only as "extra help to own houses" would be perfectly fine?
Video / Art - The First Fifty Years, by MoMA curator Barbara London.

“Today when I walk along the urban sidewalk, I see pedestrians who are no longer confined to their physical bodies. They circulate among virtual communities, slipping in and out of their online lives using the latest software on their portable devices”
Apologies. Fireworks are the text book example of public goods.
So how can reviewers review the code then? The features do look excellent, a strong coreutils candidate.
I can see how they would feel that way and I think part of the problem would be exactly that - they will not be able to assimilate ever.

> taking over

Culture. Dilution of values. Fundamentalism which is so entrenched the religion (I suspect, high 90s % of strongly religious demographics, primarily Islam).

Long term, I see even worse divergence of national unity - these people are now speaking the language, but their own German dialect, their kids are raising with local kids, etc. I personally do not see Germans share most of middle-eastern/islamic values. You cannot forcefully assimilate 2 different polarizing cultures, it is a time bomb of cultural divide. No matter how humanitarian your views are, there is no going away from this fact.

I think the best solution is to provide aid - military, financial, food/medicine to these impoverished countries instead of taking refugees.

Edit: I can't respond to your comment below, but I basically have fundamental disagreement about aligning Holocaust with Syrian refugee crisis. You're trying to shoehorn a narrative from the perspective of the lawmakers, I am asking simple questions about assimilation and integration. We're talking past each other? Anyways, I learned a few things from your opinions about the history of these archaic refugee laws. IMO they should be with the neighbors, not transcontinental. Thanks for the discussion.
Sorry, I meant examples of people using a chosen authority as the ultimate provider of truth.
I need to get back on the IRC.

It used to be the whole internet to me.

Back in the 90s, I could never understand the appeal of www, when the IRC was so fun and interactive.

One of my worst tech predictions ever: "oh that web thing? That'll never take off. Who wants to just download and look at a bunch of formatted documents? You can already do that with a word processor".
Sounds like another restatement of the cyclical idea of history, "Hard times create strong men, strong men create good times, good times create weak men, and weak men create hard times".
> Perhaps people have ideas they'd like to discuss, but don't want to risk "losing points" because the idea may be unpopular. I know that I have personally experienced this, and stopped myself from expressing an idea because I've been pretty sure it wouldn't be popular.

This is a problem with your mindset, not the HN system. You should not place significant concern on collecting Internet karma. I currently have over 18,000 karma, and I happily and regularly have expressed thoughts and opinions that get me -4'd. (Basically, as low as you can go on a given comment.) Doing so has not hurt me in any meaningful capacity, or even, obviously, in a meaningless HN karma capacity. Post unpopular views.

I'm mostly aware that a certain crowd will downvote anytime I point out that Section 230 should be repealed, that we'd all be better off as a society if Google stopped existing as a website and corporate entity tomorrow, or that unlimited data is a bad thing for ISPs to offer, etc. Sometimes I am surprised when I make a comment I expect to be unpopular, and it ends up somewhat popular!

The problem you run into is that many people feel that a comment they disagree with is low quality. Encouraging flagging over downvotes would actually increase censorship: Instead of downvoting, users would flag a lot more comments, and they'd be more likely to be hidden by the site.
No one who doesn't own it thinks that low profile bike clothing is cool.

Or rather, only people that own low profile bike clothing think it is cool.

https://www.gocomics.com/pearlsbeforeswine/2015/11/13
I don't know if I missed it in the article, but did they say anything explicit about write access? Seeing the source may give access to new zero days, but it would be much worse if the attackers were able to seed a large number of commits into the code that introduce subtle vulnerabilities.
Thank you for the detailed comment. During quarantine I started working on a rudimentary sound engine, and this gives me a lot to think about. I really appreciate your analysis of the feedback you received.

Your demo video looks really great to me. Maybe it's not something serious music production people would use, but stick this on an iPad and I could see someone having a lot of fun with it, kind of like https://loopyapp.com/ or https://audiokitpro.com/synth/
The shutter count is just a good estimate for how much the camera has been used.

Using the camera for video doesn't really have much impact compared to photography since the shutter is just kept open
> Americans might object to military aid that encourages Muslims to attack Christians

Baku is far from a strategic rival to the United States. It’s not an ally either, more non-aligned. Transcaucasian geopolitics—-in reality, most geopolitics—-are not a daily priority for most Americans in a badly-managed pandemic.
There are a number of problems for biking in the US, but first among them is we don't have separate bike paths. All the other problems like showers at work, rampant bike theft even from secure storage behind multiple keyed doors at fancy tech companies, excessive spandex are secondary.

Cycling as an activity has gone way upmarket in the last 30 years, as there aren't many new people in the sport and the main demographic is wealth older guys who spend obscene money on bikes.

The classic case is "Fat bikes", which were the unexpected success story a few years ago, and took over the industry by storm. All the sudden a ton of guys are getting another $4k bike, and people like me who always bought used aluminum or steel frames for racing (won't explode like carbon- have seen this happen multiple times, won't cost much to replace). The number of wealthy men in their 50s I know with $20+k of bikes is amazing. Sure, it's better than buying a fancy car, but it's a change from when I was a kid and most guys just had their commuter bike and road bike.
Perhaps Istanbul shows it more than other places. The city was originally Greek, then Roman, Byzantine and more recently Turkish for the last 600 years. But the city itself is a myriad of cultures likely due to its economic importance. Wikipedia covers the history pretty well.

https://en.wikipedia.org/wiki/Istanbul
If you ever mentioned this idea to any friends, they are probably biking quite a lot but aren't going to tell you.

And if it's the helmet, bike, and shorts that are so embarrassing (they are not): how is going to a gym going to change that?
With economic policy, I sometimes wonder if artificial floors tend to cause less strange distortions than artificial ceilings, because there's usually already a floor: zero. We just raise it a bit.

I feel like it's easier to anticipate the side effects of raising a minimum wage than it is for an earnings cap.
Smoking Bans Saved Lives but May Have Increased Drunk Driving
Are there any reasons to use a full synth these days? I'm not a musician but I've been dabbling in digital audio on and off and I really like the sound quality of sampled instruments especially for Piano. I haven't used the original DX7 only a VST (Dexed) for it.
nah. mainframe apps are very snappy with that text only interface.
> does a video in this HDMI out mode count as just one click

A mirrorless camera's shutter is only used during taking photos (and some cameras, like the Sony A7S2 which I own, can also run in "shutterless" aka silent mode, at a slight expense in picture quality). It will not be impacted at all if the camera is used exclusively for video.

> Also can you completely avoid using a battery with a power line adapter?

Not with Sony Alphas, they will drain the battery even if hooked up to a powerful USB charger. Get a "dummy battery" for your camera.

> I tried using an old Nexus 4 as a live streaming camera a while back but after a few weeks the battery bulged and the gorgeous glass back shattered.

I hope you got rid of the phone or at least took out the battery, when it bulges it's having internal issues and now is a fire / explosion risk. You probably used a cheap power supply that has lots of high frequency ripple.
JIRA does not suck, it is people who are using it. The same with programming languages and frameworks.

We all suck just accept it and try to improve yourself and others point by point in that new 2021!
Jira is not all that bad. With Jira It's easier to write stories outside of the tool and copy/paste in. If you have a side hustle or small team Jetbrains YouTrack is free to 10 users (I think) and it's awesome.

https://www.jetbrains.com/youtrack/?gclid=EAIaIQobChMIx5iu7O...
Reincubate Camo works incredibly well. Bit expensive.

https://reincubate.com/camo/
Agree. The psychology of money (https://www.amzn.com/0857197681) is a take on personal finance through the lens of history and human behavior, quite different from the usual in this genre.

I found the postscript absolutely fascinating: 'A brief history of why the U.S. consumer thinks the way they do'. http://reader.epubee.com/books/mobile/ac/acc521dcbf15f206f9b...
Have you looked at ManyCam? I remember it being a very nice piece of technology that can switch between multiple cellphone feeds with effects while emulating a webcam.
Pretty much. We can divert a little to support customers reporting issues, though I don't feel JIRA is much friendlier here compared to GitLab once you get the hang of both. The only one I see benefiting from this monstrosity is management and upper layers, and they indirectly pay for this through lower morale and retention rates. If you really need the graphs that badly, you might as well spend a few hundred man hours to write a script that imports data, run some data science logic and draw them. And maybe put all that info.
That’s a perspective I suppose.

I worked in the space for awhile. Nobody ever mentioned that take in those years. Ticketmaster is good at dividing and conquering the different stakeholders. They aren’t doing anyone any favors imo.
It was very surprising to see them discuss for so long without even mentioning what it the system is. Maybe shifting gears based on speed is simply a bad idea?
I've been using Rust since 2016 and I've never installed a nightly version for code I was writing. (I did install nightly for some code completion tool or something back in the day. Maybe Racer?)

I think it's still recommended to use rustup.
Those are the easy targets,its not intellectually interesting to me. It's like when atheists were obsessed with debating creationists online some years ago.

My point was that people don't have a clear view of what lying precisely is when they say they would never lie due to their morals. Your answer was to bring in Trump stuff. I don't care about Trump stuff.

Sure there are overt lies.

My point is everyone lies, but defines socially acceptable lines differently. People who are pathological truth tellers don't get far in life.
Sounds like the attackers did not have write access. From the original blog post:

> The account did not have permissions to modify any code or engineering systems and our investigation further confirmed no changes were made. These accounts were investigated and remediated.

I would also hope that direct commits don’t go immediately to a production system without some sort of review. At my workplace we have branch protections for all “main” branches that would result in a deployment. At least one other person has to review changes and all of our automated checks have to pass before anything can even get close to running through a deployment pipeline.
I find this to be one of the most insidious side-effects of press censorship under authoritarian regimes - it seems to create an ecosystem of resistance media that is just as biased as the government propaganda.

A similar thing happens with China through stuff like Epoch Times or Guo Wengui's channel. The outlets that position themselves as strong opposition to the regime are themselves untrustworthy sources, which ironically just serves to bolster the position of the regime. ("See? You can't trust anything! Even in so-called free countries all the news is fake!" etc)

Do you have any recommendations for media organizations that are doing reliable reporting on Turkey but aren't propaganda fronts for one faction or the other?
Some Canon cameras also render a focus square right in the center of the screen, or around any faces that it detects. Very inconvenient.
“Why are my tests so slow?” A list of likely suspects and anti-patterns
Show HN: Validated ideas 2.0-list of 9k popular but poorly executed products
Hi everybody!

Since the first version of Validated ideas got good feedbacks, I decided to extend it.
Now it has more than 9,000 products (iOS, Android, Web apps, Extensions).

This list is good for people looking for business ideas that are already validated (so you know that there is demand) but were executed badly so you can improve it based on the reviews.
It's also good to get a feeling about the market and how people should avoid mistakes when building products.

For the first 500 buyers (465 left) there is a more than 50% discount.

I hope you find it useful.
Happy new year!
SHIREN THE WANDERER
GOTY
The Wick Editor seems to be the closest thing to replicating what Flash did: https://www.wickeditor.com
General-Purpose Robotics Company Flexiv Closes Series B Funding of over 100M USD
Maybe read a bit on Deref: https://doc.rust-lang.org/std/ops/trait.Deref.html

Any time you have a &String reference, it triggers coercion to &str.
> This is a problem with your mindset, not the HN system.

That very well may be true.

> Encouraging flagging over downvotes would actually increase censorship

That's a good point. Flagging seems a bit more objectively defined than downvoting though.
Ouch... if that's the case, how can the FCC do anything to find the scammers? It sounds like it's technically impossible (and maybe also politically, alas).
Even there it depends. 'Programming practices' is vague. Even C can be tamed, at great expense, using formal methods techniques. [0][1][2][3] Adoption of such methods can give a solid assurance of the lack of UB, like use of a safe language. Weaker measures, like adopting MISRA C, don't provide such strong assurances (although they can eliminate certain categories of errors), and as you indicate, their real value is a bit more subjective. Mandating a bad programming style could actively make things worse.

[0] https://trust-in-soft.com/

[1] https://www.eschertech.com/products/perfect_developer.php

[2] https://github.com/microsoft/Armada

[3] https://www.microsoft.com/en-us/research/project/vcc-a-verif...
A git commit is a "how," not a "what" or a "why." That's where JIRA comes in (if used properly). I don't love JIRA, but (IMHO) when it's used properly, it's a great tool.
Also a father of boys. They all tried Boy Scouts and none really took to it but all were involved in sports. Teams were ostensibly co-ed when they were younger but by middle school age they were all-male. Having that outlet to "be boys" and work out their energy and agressive impulses is important to growing into a well-balanced adult man.
Are you claiming that we may find out soon that 136,000 people (40% of total Covid deaths) are not actually dead? Maybe hiding? Maybe all died of gunshot wounds? Have gun deaths spiked by 350% this year? Has any other major cause of death spiked by an exorbitant amount in 2020? If so we should really be looking into this.
> I’m Thinking of Ending Things

Watched this over the holidays. I found the third act really deviated from the rest of the story compared to how tight the other mentioned films were. Did you think it seemed out of place?

It was a fun watch, and it made me want to watch "Oklahoma" again, but it was somewhere in the middle in terms of rankings. I literally just added the book to my library checkout list, and I'm #22 on 15 copies, so I guess it is popular. :)

Can't wait to read Antkind tho.
From the website: "Shareware is coming back, baby."

I've been on Linux for a while now and have not come across the word shareware in a long time. Odd the it makes me feel nostalgic and (oddly) hopeful (that is: a business model that doesn't rely on tracking, ads or some nebulous behind the scenes actions to monetize you).

Nice, straightforward, simple business transaction. Software sales (especially shareware) is really tough. Wish the author some success for his efforts.
Thanks, although I am hobbyist bike mechanic, I never heard of Coasting before. Frankly, doesn't sound very attractive - a complicated (proprietary) automatic gear system relying on functioning (proprietary) front hub dynamo... All that to address a practically non-existing problem: no one really has a problem learning how to use bicycle gears.
Did someone at Zepel.io create this Why Jira Sucks site?
The only major complaint I have with the downvote system is the comment-graying. The design goal is to dissemphasize downvoted comments, but in practice it biases a reader toward downvote bandwagoning, anecdotally. (if comment scores were made public again I could quantitatively verify this, ahem)

IMO comment graying should only start after a comment hits -2, instead of graying after a single downvote.
There's an electric Corolla?
Yeah from an overall perspective codegen still has to happen somewhere. However the benefit here is that the responsibility can be moved to the owner of the API vs. the consumer (like is standard practice today with operation-based codegen).

Consumers can then update a pre-generated client at-will (assuming there are no breaking schema changes) like we do with REST API clients.
By that logic the plan was fine then. 500 doses out of 2.79 million is an insignificant loss.

It’s still interesting to wonder what they were thinking, since it might be informative about how to make the plan better, or about risks that have not yet materialized.
This is my biggest gripe. It's slow and clunky. Confluence is also terrible (slow and clunky). Mkdocs, which is markdown powered, is much better for documentation.

My remaining issues with jira are not with jira at all. Jira can fix its slow ass software, it's feature backlog and I can use mkdocs over confluence. Jira can't fix poor project requirements and management.

How fucking dumb are you if you can't even write a bug report? It's what happened, what I expected, and a how to reproduce bullet list.