skysight-inc/HackerNews huggingface dataset:
Is it really so much worse, outright playing with fire?

There are only few things running untrusted code on a typical end-user system, most notably the browsers executing javascript. Now that would be attack-able. But then again, it seems unlikely that anybody would launch broadly deployed attacks, as the vast majority of systems would run with mitigations on, so it's just not worth the trouble considering that and considering that you also have to get lucky to actually extract something valuable (and recognize it is valuable). On top of that, browsers also bring a bunch of mitigations that make it harder to exploit these bugs even if system mitigations are disabled.

I'm personally not very concerned about anybody trying to attack me with spectre/meltdown class bugs that can be and are usually mitigated, even with mitigations disabled on my system. If somebody wanted to attack me, either at random (broad attack), or targeting me specifically, they'd have far better ways and targets to try first than hoping I'd visit their website and run without mitigations enabled and have something valuable in my memory.

This is different if it's a shared system, like cloud machines/shared hosting, where this is an class of bugs is far more of a concern. And if you know or have reason to suspect you're a specific target, then you might err on the side of caution as well.
What does T+0 mean? Instantly or same day?
Real time securities wouldn't need brokerages to front collateral while the trades settle by the virtue of no settling period. They would only have to deal with customer capital used to buy the stock.
Exactly, that's also where anti-vaxx started. Kids get diagnosed with autism usually just after getting their last childhood vaccines.

Correlation is enough.
40% on existing software & even better performance when emulating old software. Mill is extremely alien with no indication they're able to get any of the same gains. Regardless of their brilliance, they seem to not know how to run an engineering business & their choices show that (our new CPU needs a completely new compiler vs adding a new backend, our new CPU needs a new OS, etc). Their efforts are basically "boil the ocean" levels of engineering without any sales to justify that they're on a path to success.
> I put them on and somehow found myself lying on the floor of my room, two hours later, having become completely lost in the music.

I've had this happen with Stax headphones (they call them "electrostatic earpeakers"). They sound sublime. They are also super comfortable. Alas, they are not wireless and require a special driver unit. But if you have the chance, do check them out. It's a wonderful experience.
Let’s say I want to write a “best practices” guide - where does it fall? Should each topic contain all 4 quadrants?

Example topic is “Explicitness vs conciseness in naming” (it could be (over)simplified to “prefer explicit over concise naming”).
Btw in this context I would like to share Type Fast by sindresorhus [1].

I find it excellent and definitely a helpful tool to think about when you are struggling with type safety vs runtime data.

1: https://github.com/sindresorhus/type-fest
You should get a consult with an employment attorney in the state where your job was located, and ask if you were terminated unlawfully, what your options are, and what the realistic outcome is.

If you are a 1099 independent contractor, broadly there are no protections under the ADA. Only your contract controls what either party can do. If you have a contract that requires good cause to terminate or 30/60 day notice that could apply here.

If you are an employee, or misclassified as a contractor and should be an employee it is possible this was unlawful termination. Whether you would be an employee depends primarily on your job responsibilities, not what your employer decides. It is a fact specific matter, and being physically outside of the US, not a US citizen, not authorized to work in the US means it is most likely you were an contractor and not an employee.

It is also possible they are justified in firing you if you were an employee. Under the ADA the employer is required to make reasonable accommodations for a disability. But you need to request it. And if it creates an undue hardship for the employer, or you are no longer able to complete essential duties it is lawful to fire you.

Also the law is not always able to grant effective recourse. Even if the company fired you unlawfully or violated the contract, it can take too much time and money to prove what happened, you can't always put things back the way they were, if you win collecting on a judgement takes work too. But a lawyer can advise you of your rights, the realistic outcomes. In many cases if the company was legally in the wrong you can reach a settlement for severance, or can get help filing a complaint with the state department of labor. In most states you can get a free or low cost consultation with an employment attorney, and can contact the state bar for a referral if you don't know anyone to refer a lawyer.
This usually boils down to references and then by extension the trust in those references. It is definitely tricky, before COVID we would fly in new hires to meet them and talk to them, since then we have only hired one new person and only because one of our team has a prior relationship with that person so we can extend our trust.
The last seconds looked almost CGI, it's awesome to be witnessing this. Wish I was close enough to feel that spaceship BOOM!
Walmart and McDonald’s have the most workers who rely on aid and Medicaid
Covid-19’s Effects May Linger in Your Body, Even After Asymptomatic Cases
Some ability to net—that is to buy at one price, sell at another, and only settle the difference—is probably desirable
Do self-described audiophiles often perform ABX testing? I think if they did, it could lead to some uncomfortable moments for many
https://archive.vn/jPbd1
And there is an argument for not being able to afford the effort in that scenario too.

At the least, risk will be higher than it needs to be, and that puts the other validation into question as well.
This is a dup of: https://news.ycombinator.com/item?id=26005457
Rize Education | Full-stack JS Engineers | Full Time | REMOTE (US or Canada)

Rize Overview:

* Mission: fundamentally transform higher education and provide every student with the most affordable and effective path to their fullest potential

* Initial Problem: smaller colleges desperately need to increase enrollment, but can’t afford the upfront investment & fixed costs required to create new degree programs

* Solution: pay-as-you-go degree programs that require zero upfront investment, fixed costs, or risk. Rize provides 4-year, non-profit, accredited colleges & universities with skills-based majors & minors for college credit at a fraction of the cost of traditional programs

* Traction: working with 90+ private colleges. ~100 majors and minors already adopted across 30 colleges, with many more in the pipeline. Google & Unity partnerships

* Funding: Raised Series A from top VCs

As we look to enrol thousands of students for the next Fall session, we’re looking for a Software Engineer to help the Rize team scale operations via automations and reporting.

* Stack: Node, React/Next.js, Typescript, GraphQL, Prisma.
* Shipping is our heartbeat.
* Permanently Remote (not just during COVID) in the US or Canada.

More details: https://docs.google.com/document/d/1XsUHLOWeMT8WrlXKJH_wvXSM...

If you're interested or have questions, email andre@rizeeducation.co -> that is indeed a .co domain, NOT .com
I assume smartphone companies have an incentive to just switch, given that I don't think Apple et al want to leave their users without a search engine by default. They'll probably just switch over to Bing as well.
This product should be open-source and we pay for hosting.
Hey HN, Joan from the SUS here as well! Happy to answer questions about the Build Sprint alongside Kyle.
So let them. That's what I do. And I do that because someone, somewhere will pay now, or pay later.

Maybe the customer finds someone hungry enough to pay for them.

Or, maybe that customer pays hard going through this cycle a few times too.

Not my problem and it does not have to be yours.
Soft disagree with 3. unknown might be better than any but then the typechecker isn't going to let you read any fields from the object, even if you are using a null check. And the given example is weird because you don't need to add a type annotation there at all. The problem really is that TypeScript doesn't have an "unknown deserialized JSON" type.

For #7, in a lot of (most?) cases, the name of a generic isn't meant to be descriptive. I'd argue that functions that expect it to be are doing it wrong. If I have a `function reverseArray<T>(arr: T[])`, the point of T is that it can be anything. Saying `reverseArray<ArrayTypeToBeReversed>` serves no purpose.

TypeScript also really, really needs to have a strict typechecking mode. Yes I know the "it compiles to raw JS" arguments, but it could easily add extra checks in the JS code (basically what example #4 shows).
SN9 flipping maneuver didn’t go so well
Back when I was starting out, what your describing was called an "systems analyst".
How thoroughly are 'opinion' articles vetted? Not at all? Why are they considered substantial then.

> Dr. Kory asked the National Institutes of Health to review his group’s manuscript outlining dozens of successful trials and to consider updating its Aug. 27 guidance in which it recommended “against the use of ivermectin for the treatment of Covid-19, except in a clinical trial.” On Dec. 10, Sen. Rand Paul and I sent a letter to the NIH requesting that it review Dr. Kory’s evidence.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7521351/
My opening statement is short, so I'm assuming some charity in reading it. My complaint is the idea that you can make a hard distinction between function and pass that to another layer is a huge mistake in our industry. As noted by us conversing in a web browser. :)

Are they separate things? I mean, yeah. But they interplay with each other such that near every attempt to force them apart is full of ugly edge cases such that I assert we would benefit from people seeing that form and function typically work together in building things that work.
Static typing check is a huge boost for code refactoring. It allows you to quickly make changes and be reasonably confident that you haven’t horrendously broken something.

It doesn’t obviate the need for dynamic validation nor is it meant to do that. But it does give you a clear point of where to perform those validations rather than littering it everywhere throughout your application.

It doesn’t obviate the need for testing either. But it does eliminate an entire class of dumb programming errors such as incoming a function with the wrong arguments.
I use ALL_CAPS in generics so they are easy to tell apart from functionNames and ClassNames
Here's a couple of links to try...
https://bestofshowhn.com/
https://posobin.com/hn_classics/
Why would you think that they feel a need to be the "good guys"? They are doing their part in perpetuating a power structure that benefits them personally.
The best spare part for AKGs are the pads from Bayerdynamics, which fit K240 just fine and make them much more comfortable.
Seems they're still having problems with their headless tanks given it looked like the 2nd raptor landing fire flamed out immediately, even earlier than the previous flight. I thought they had switched to using COPVs but that either malfunctioned or didn't work as well as expected.
Thanks! Looking to add a feedback 3rd party service soon, but in the meantime you can DM via twitter @EpicPythonApp or email at hello@epicpython.com
Yeah - it really looked like they just got lucky with the debris somehow avoiding SN10. I wonder what the reasoning was behind them even having SN10 on the other pad during this launch - surely it would have been safer to just keep it in a hangar until afterwards?
it also means 'right now' in Ukranian
Why does everyone in r/wallstreetbets make tons of money from option trading?
It means that the regulation itself isn't the issue but Google is just afraid that it destroys the idea that they cannot be regulated, and that other countries will follow suit.

Obviously anyone would take the entire Australian search market for some rather mundane regulation. If someone came to you and said you can have an entire country worth of Google's market, you just have to fork over some money for news headlines you link to you'd say no?

Microsoft in contrast to Google is a diversified firm that doesn't really rely on avoiding regulatory scrutiny that much, so they don't care.
Wasn't a big part of this issue fueled by RH fronting the money for trades when the customer was transferring money into their account from a bank over ACH? Making ACH instant (which I believe is in the works) would solve that, not T+0 for settlement.

(I don't have a good feel for what was the bigger driver of RH's issues though: overextension because of slow ACH or slow trade settlement.)
Nobody on Wall Street has empathy for the losses of anyone else on Wall Street. It kind of comes with the territory, I think.

To state that another way....do you feel sorry for Gabe Plotkin?
Same. Rollbacks are awesome. Not only rollback in the boot menu, but also just keeping your OS configs in Git. It is so nice that I can mess with my configs without concern, then when I am done I can diff them too see what I changed, continue messing to clean them up a bit, then commit (or reset if the experiment didn't work out). When I used Arch I would edit a handful of configs trying to set up something new or tweak a setting and I could not get back. I would need to take notes or just try my best (I have force-reinstalled packages countless times).

I'm also waiting for the parts of my new desktop to come in and I'm excited that all it takes is cloning my config repo and applying to get to exactly the same setup. With Arch I would have reinstalled to clear the cruft that has accumulated, however with NixOS I can just audit my configs to see an entire list of cruft and easily undo it by removing lines.
The second bit of hifi I ever bought, a NAD 3225 amp, still sees daily use in my house for my daughter, and is almost 30 years old. It's been stolen, recovered by the police, and still runs fine.

Headphones are perhaps a little more fragile, but NAD isn't even particularly expensive.

The grandparent's complaint holds true for home theatre equipment as well, with constant standards churn driving flipping of high-priced and mostly sub-par components (much HT gear, even extremely expensive, big name gear, is very sub-par repro-wise: Arcam and Marantz will sell you HT processors that struggle to accurately reproduce a CD-quality stream; the most recent "8k" recievers from Yamaha, Denon, etc, don't even implement 8k correctly); most of that is driven by copy protection as much as anything else.
Looks like 1 of the engines failed to re-lit during the landing.

At least this time 1 of the engines was functioning correctly all the way to the explosion. This is an improvement over SN8 where all the engines failed to re-lit properly.
> We can't measure that directly because we can't just expose a bunch of folks to Covid and hope for the best.

We can, but medical ethics hasn't caught up yet. I would participate in a challenge trial, for instance.
SpaceX Starship launch: Starship SN9 explodes in failed landing
I worked for a few years and then went back to a Ph.D. program.

It's now possible to do an M.S. while you're working. There are now a number of good online programs, with Georgia Tech's OMSCS at the top of the pile. You might want to take a year or so in your current position and then evaluate whether an M.S. would be a career enhancer. The culture of Master's programs nationally is shifting towards working professionals doing their degrees online, so the case for quitting your job to go back to a full-time residential program is going to get weaker and weaker in the coming years.

Ph.D. is a totally different game and a bigger conversation. Short answer: unless you really, really want to work in academia it's not going to be worth the opportunity cost.
I would consider look at the content of websites, not of ads.

Advertising is generally dishonest and predatory. It also tends to be AB tested and targeted enough that it doesn't feel dishonest to the readership of any particular venue. I just went to:

* Huff Post, and the first ad was: "Groundbreaking Device Exposes Greedy Internet Providers While Speeding Up Your Slow Internet"

* NYTimes, and the second ad was a sketchy "Bitcoin is the future/Invest Now"

* Wa Post: "Internet Providers Don't Want You Buying One, but They're Not Illegal"

Most venues don't have much control over the ads they serve. It's usually done through ad networks. I think Wa Post and NYTimes are top-notch journalism, while Huff Post is a sensationalist rag.
The case I mentioned didn't have to do with validation - in a case like that, I would have used a type guard, or more likely a runtype. This was a Javascript corner case that I hadn't previously encountered, where if you load the same module from two different paths, they aren't `instanceof`-equivalent. In this case, both the codebase of a module I was working on, and the codebase of one of its consumers, imported the same module from the same package, and I ran into the issue when I `npm link`-ed the module into its consumer's node_modules dir for testing and to ensure I hadn't inadvertently broken an implicit contract. The `instanceof` mismatch, between an object instantiated in module code and the class imported by the consumer, confused the type system and gave me spurious errors as a result.

Thinking about how to solve this, it occurred to me to use a type guard, since it would have effectively convinced the type checker that my object instance was in fact an instance of the class of which it is an instance. But it would've been a wart and also imposed the aforementioned runtime overhead - not that that would've been meaningful in this case, it wasn't in a hot loop or anything, but I still didn't like it. So I ended up instead exporting the shared dependency from the module and having the consumer import it from there, rather than from its own (IIRC otherwise unused and thus eliminated) copy of the shared dependency.
Only sort of. If you care about power consumption (like a thin and light laptop, a tablet or a phone) then the M1 looks pretty good. But if you want optimal performance, for gaming, engineering, ML, and other workstation tasks, then you want a design that is only optimized for performance, and can make use of a much larger power envelope.
My perception of the Oxford/AstraZeneca vaccine is that their credibility is compromised. I take claims of its efficacy with a similar dose of salt to claims about the Russian and Chinese vaccines.

Reason is that early on they were rushing data and approvals on grounds of national pride, in a very similar way to the Chinese and Russian authorities.

Pfizer and Moderna seem to have been more thorough.
I completely agree. I pride myself in having a smattering of knowledge in a wide range of topics. As a result I can have an intelligent conversation nearly anyone on almost any topic. This in itself is extremely valuable.
Location: Bulgaria

Remote: Yes

Willing to relocate: Yes

Technologies: C++, Java, HTML, CSS, JavaScript, Python, C#

Résumé/CV: https://drive.google.com/file/d/1BkRg0gYFvRnKtb3Rm8L0BZLZ87A...

Email: gabidb3@gmail.com

I am looking for a software development internship
this is exactly what I've been thinking...Gamestop has over 5,000 physical locations across the country...this is an extremely valuable resource that if utilized correctly could turn them into a hugely successful empire again...Esports is still in its infancy but it's already a billion dollar market...even better...why not partner with AMC, another entity in this WSB movement that is failing and also has many locations with huge screens, sound systems, and seating...perfect for esports or some kind of AR/VR setups, IDK, if these CEO's can use their imaginations there's many paths they could try...
Best platforms and tools for freelancers to make more money
That kind of makes sense though - university jobs rely on government funding and it's usually the Republicans who (at least claim to) try to reduce government spending.
The main EU issue was that they weren't getting supplies they said they were promised, right? [1] And, presumably, if the supplies are short, there wouldn't be enough available near-term in the US to make a difference. (Added: And, right, there were testing issues in US trials early-on.)

[1] https://www.npr.org/2021/02/01/962705729/eu-to-get-9-million...
Which distro? I have one as well and at least under mobian , while it is really far from stable, it works. But reboot cycles sound like a hardware bug rather than unstable hardware.
Illustration how "move fast and break things" in aerospace domain works.
> There is no economics textbook that accounts for market participants buying stocks to watch them crash as a form of entertainment

Sure there is. Monetary policy. Cost of money is too low.
I've been debating a lot in these comments, but I do want to take the time to appreciate this point of view. It's definitely one I hadn't considered.

If Robinhood is getting people who otherwise wouldn't save to invest, even if they're getting worse returns than they would at somewhere like Vanguard, then I could definitely reconsider my perspective that they're a net-evil. I'm not entirely sure I buy that story, but it's absolutely a reasonable perspective and one I'll keep in mind in the future when evaluating new information about Robinhood.
Scalpers aren’t the main reason you can’t find a new console
> Is there a writeup/summary somewhere that explains "the lessons learned"?

Not that I'm aware of, but I'm sure you could check the GitLab commits and/or ask on their forum if you're interested.

This is a young project (just under a year old) with developers who do this for fun. The developers are going to keep making changes that maintain the fun they have during development.

Mistakes will be made. Things will break. Lessons will be learned. This isn't a decades-old mature distro, so if you're expecting something absolutely bullet-proof then Garuda currently isn't it.

However, I will say that the pace of improvement is pretty stunning. Their direction and what they have achieved in a short space of time is pretty impressive - not just within the distro itself but the surrounding OOB features and infrastructure like ChaoticAUR (prebuilt AUR packages), secure password management (Bitwarden), dotfile sync (NextCloud), a pastebin service for log output (Privatebin), ...

Is it perfect? No. Is it for everyone? No. It is what it is, and doesn't try to be anything else, and I kind of like that approach.
Astra Zeneca bungled their FDA trials in 2020. They went from being one of the most promising vaccines to an also-ran.

https://www.nytimes.com/2020/12/08/business/covid-vaccine-ox...
Very true, I missed that thanks - to illustrate how that could be important (to the scripter):

kaneda@tetsuo:~ which type

kaneda@tetsuo:~ type type
type is a shell builtin

kaneda@tetsuo:~ command -v type
type

This was on Ubuntu, the which script doesn't resolve type or command silently, while on say Arch it's verbose ("can't find type in (paths ... ...)" so even a failure-to-find emits differently for the `which` crowd.
I returned a homepod after really wanting to like it. I tried several locations, didn't matter, the bass is overpowering.

There's a HUGE bass boost. It's unlistenable to anyone familiar with what a relatively neutral frequency response should sound like.

I don't know what type of curve they are targeting with all of their auto-eq magic but if you're not going to make it user-adjustable, I don't know why you would choose a bass cannon.