skysight-inc/HackerNews huggingface dataset:
I remember that one. They did change the headline in fact. The original version erroneously said

Russian Software Company May Be Entry Point for Huge U.S. Hack

They changed "Russian" to "Widely Used"... Oddly the version the wayback machine caches has "Russian" in the headline as well as "based in the Czech Republic" in the first sentence.

https://web.archive.org/web/20210106195835/https://www.nytim...

It is clearly an alarmist "yellow journalism" kind of article, I agree. The headline swap is a bit revealing; they never would have framed the article this way in a similar situation for a U.S. company, even if "may be entry point for huge hack" would be just as accurate.

I'm not sure there is anything technically incorrect in the current version of it though.

Also holy cow is Internet Archive doing god's work, I'm gonna go send em some money right now.
Writeup of the actual attack malware running on the build servers:

https://www.crowdstrike.com/blog/sunspot-malware-technical-a...

It attacked MSBUILD.EXE processes on startup, and it didn't matter if they were started by TeamCity or by a homebrew script in Powershell.
Ask HN: Best Wysiwyg Text Editor?
Curious what do you use in your work or project. Would like to know what your reasoning is
New phishing attack uses Morse code to hide malicious URLs
Do you mean personality wise?

Physically, I just googled and found he won a most beautiful faces award this year and consistently ranked on the same list. Never heard of TC Candler but their youtube lists have millions of views. I doubt he’s actually objectively #1 but clearly they don’t think he’s unattractive.

There’s a lot of variance in female taste, so you frequently see comments along the lines of “[Objectively attractive celebrity X] is not attractive AT ALL”. And the comment is true, for that woman.

But it’s very risky to generalize based on a small sample, especially if it’s all from your personal bubble. I guarantee that if Pewdiepie wasn’t famous and you put his photos on Tinder they would do well. He’s lean, young, 5’10”, has good skin and a reasonable fashion sense, and there’s nothing obviously wrong with his face. That alone more or less puts him in the 90% percentile.

https://comicbook.com/gaming/news/pewdiepie-most-handsome-20...
Then a bit of software for the SSC was used to analyze radio astronomy data for a decade or so.
8 years? I’m old enough to remember Iraq’s weapons of mass destruction.
Should it empower you to bypass the terms under which content you're accessing were shared? Have you considered that maybe that's disempowering other people using the same tool?

Edit: as far as I can tell the groupthink has gone beyond “everyone should use a free license for everything” to “I have a free license to everything damn the actual license”.
Global variables are evil. Environment variables are global variables. Lord knows how much time I’ve wasted helping people figure out why something works on one machine but not another. The answer is often because they had something in some obscure envvar that may have been set once upon a time by lord knows what.

The alternative? Users launching a program should explicitly specify configuration information. Choose sane defaults. Let them be configurable via cmdline args or a config file. Ideally both. An explicitly specified config file is so much cleaner than envvar imho. Scripts that locally override global envvar is super sketch, hidden, and error prone.

TBH I think the fact that Docker exists is testament to the INSANITY of Linux environment configuration. It’s so incredibly hard to reliably launch a program that we built ecosystems of containers to encapsulate system wide configuration. And even that is hard and error prone.
> Evidently history began when the author started experiencing it.

If you pay enough attention, this is usually the failing of most non-historian takes on history. “Normal” is usually better replaced in such articles with “whatever was in place when I was born”.
Me experience is the exact opposite.

As a user:

- If I need the service and only intend to use it for a very small project, I love forever free plans. Because I know I can subscribe use your server time and forget my account forever. I often subscribe with a temp email so that I don't even receive your emails anymore.

- If I seriously need the service and is ready to pay for it, I don't really care about the free forever plan vs free trial vs paid trial.

As a business:

- Any time I have offered a free forever plan, basically 95% of the created accounts are dormant free accounts (like I personally am when I find the correct tool to scratch my itch). 4% are from people (usually from south east asia) creating hundreds/thousands of accounts (sometimes manually !) to circumvent the free plan limitations instead of just paying for the service. And 1% are from legitimate users/customers.

- People in the 95 and 4% categories still believe they are owed support. And if you don't give them an easy way to let them contact you, they now have twitter and facebook and business reviews websites to get to you. On top of emails, LinkedIn messages and yes, phone calls.

- Cutting the free accounts has almost no impact on real customers acquisition. You can let people experience your product with a temporary trial, that includes support and way more features, but behind the credit card screen. Extend the free trial as much as needed if people ask for it through your usual support channel. You will still get abusers but those are easier to detect, because they need to provide some payment details which are harder to fake, and after you shut them down for the third time in a row, they usually go away.
Funny how the conclusion that someone is "talented" is always observed in retrospect.

Just common sense to evaluate someone based on empirical data.

We're often overlooking the practice ... to reach their level

Not that often. We certainly don't do it when filtering kids for selective
schooling or national sports squads.
If you're interested in self hosting I keep a list of ngrok-like tunnel proxies: https://github.com/anderspitman/awesome-tunneling
Code Smell 62 – Flag Variables
I've stopped using xpdf years ago. It was OK, but got obsolette compared to other readers, like Evince.
> SF it's the bro-y white guy CEOs who push the wokeness the hardest. Almost feels performative. SF needs to solve these problems if they want to be a tech mecca.

its like that in vancouver too but with far less money and even far less exits
Also, filenames with one or more newlines bork a lot of Linux software.
This is missing the era when copyright law wasn't applied to software.
> This was a widely cited poll that asserted for the first time ever, the majority of Americans mistrust the mainstream media

A poll released by the largest PR firm in the world[0], famous for their work with Walmart, GEO Group, Keystone XL, etc.

Why would the creators of "Working Families for Walmart" ever try to manufacture consent? One wonders.

[0] https://en.wikipedia.org/wiki/Edelman_(firm)
okay well you can support their lifestyle and I will reap the benefits.
Richard Dawkins' concept of a meme is much broader and more abstract, a self-perpetuating idea (that need not be graphical in nature.) The internet meme, while it still fits Dawkins' concept of a meme, is a distinctive phenomenon, and is essentially graffiti released from its former physical constraints, allowing it to spread virally, often without any clear reason behind its popularity. The Chad/Kilroy meme, because of its origins in worldwide troop movement during WWII which enhanced its spread, bears a striking resemblance to a modern internet meme for that reason.
Have you read about the Fosbury Flop? This is an example of changing the model in order to push the boundaries of what was considered possible. Also, I agree that there is likely a talent component to establishing the best models for training - but it's also a skill. Imparting these models is what world class coaches do, after all.

You are totally right that well-exploited sports have established models that are probably optimal, especially at the elite level.

I find these circumstances boring, personally. My interest lies in learning unfamiliar or complex tasks for which no optimal model is known, and also in maximizing the rate of skill acquisition by iterating on the model generation in an abstract way.
It surprised you that MSNBC, NYT, and NPR have primarily left-leaning audiences? Their coverage leans left like Fox News leans right, particularly MSNBC. If you asked the surveyed Republicans how much they trust Fox News specifically, I’m sure the stats would be a mirror image. Similarly, democrats trust a news industry which, outlet-for-outlet, is more aligned with what they want to hear. After all, it’s never “our” news we mistrust, it’s the other guys!

Truthfully, I think the smart folks on both sides of the aisle know the news media is a for-profit business whose interests are tangential to telling the truth.
I used to do maps for Soldat. You can get creative with the included editor
That looks like a great follow, thanks.

Speaking of Twitter, their "trending" section introduces yet another level of possible editorializing/bias. They have started to try and summarize trending topics in a digestible way, but this introduces the perceived authority of their interpretation. I haven't seen anything particularly egregious on their part, but it's definitely something to be aware of.
You're not the only one. I like a lot of apple varieties, and red delicious are firmly on that list, somewhere in the top 5. I always found the hated of red delicious to be a particularly amusing kind of pretentious groupthink. Just forget for a moment what your hipster "apple connoisseur" friend or your favourite foodie podcaster say about them. Forget the hate, actually try them and realize they're actually quite good.
Follow the CAPEX: Cloud giants Amazon, Microsoft, and Google 2020 comparison
I worked at a company where we interviewed frequently in teams of two.

The pairs were chosen mostly at random from the large development team, except that at least one would be more experienced with the company, typically.

The first team of two would get to know the person.

The second team would do a technical interview.

If the candidate did well by getting four thumbs-ups, they would often be invited to have lunch with members of the team they could be joining. Unless lunch went horribly, they would then meet with a director for the final interview.

Eventually the lunch part was skipped, but it was a helpful way to expose potential culture or tech fit problems that were missed earlier.

This process worked really well, with the exception of the candidate often having to explain some part of their background three times.

I’ve never been part of an interview since that I liked as much, and we didn’t wear out.
Don't a lot of printer drivers pretty much support pdf though?
The logic behind this was that a first strike is unplausible to be only 5 missiles. Stanislav Petrov knew a first strike would have involved hundreds of missiles launched at the same time.
“Mac” in title needs to be all caps. MAC = media access control. It’s not referring to a company’s product.
Elon Musk is gonna get millions of people REKT
I did a motorcycle tour through South America and happened to drive though here, to the town of chachapoyas and kuelap.

Kuelap is insanely underrated. It's a mini machu picchu, admittedly maybe not as cool but almost, but the day that I went there, I was the only tourist there, minus a few laborers doing restoration work on some of the sites.

On the other hand, machu picchu is pretty much a parse of people 24/7

True undiscovered gem.

I have a few pics of it up at

https://andrew-max.github.io/adventure/2017/03/08/vilcabamba...
Noticing that due to time/money constraints familiar tech with a free testing plan gets better chances of accepting is not the same as demanding freebies. If you have time and money to do a full review of every alternative available, go for it - don't forget to add training / new tech implementation to the budget. If you're in a "we need something that we know can do X now" position, you'll likely get a recommendation from people experienced with X.

I've also got a number of solutions that just solve the problem at reasonable price. My recommendation in those categories will be "X can do it; have you got specific requirements that X doesn't match? if not, I can implement it with X and we can review that in months/years".
The article appears to be lifted straight from Wikipedia.
Good luck finding a fix for that problem.

Better to focus on something that’s actually actionable, like adding a change log.
Because for many people, the making of mistakes is what makes you unreliable and untrustworthy.

Superficially, they have a news agency with seemingly no errors in one hand and one with a thousand corrections in the other. Unless you are willing to consider that the errorless news agency is just not admitting it, one seems nice and consistent and reliable and one seems clumsy and stupid.
If I want truth, I read or watch primary source material. Everything else is commentary.
Here is an article that does mention testicle size: https://newslanded.com/2021/02/06/a-new-chameleon-species-mi...

(which I guess might tie into the other thread about minimum organ sizes!)
The parent said "Homemade vaccines are not contagious (just stating the obvious). ", they didn't say "homemade vaccines made from artificial peptides are not contagious".
RE language acquisition, I often wonder how much is circumstance. I have an engineer friend who on the one hand is making excuses but he points out his job doesn't really require him to talk to anyone, further, his programming job is almost entirely in English, looking up API docs or language docs in English, writing code while thinking in English, further he's somewhat introverted. So, his language skills are not so great for the amount of time he's lived abroad. Conversely his sees socialite colleagues doing jobs that require interaction doing much better.

My point is, some adults don't need so much intrinsic motivation. Their situation effectively carries them or at least is a strong helpful push.
> The problem is that anyone who’s reasoning skills exceed that of a five year old child should

The problem is that many companies have lots of clients that don’t have this reasoning capability. The reputation damage is much worse than the actual harm if you’re a “known contractor compromised by Russia” or whatever the dumb narrative is. It’s literally easier to drop it immediately “pending investigation”.
Both my OS do that for me by default.
I second this. ANd suggest Ethereum too
>. I think the cryptomining rigs could eventually be claimed by the government to house a large general AI

what? via hashing sha256?

what are you even talking about,nutter?
Papers with Video
> Any time I have offered a free forever plan, basically 95% of the created accounts are dormant free accounts (like I personally am when I find the correct tool to scratch my itch).

What's the issue? Unused account shouldn't be a big spending. If it become one, take a bit of time to change it a bit (delete data/stop service after a set amount of inactivity) and use that occasion to send them an email that remind them that your service exist.
Using macchanger might be a better option:

http://www.gnu.org/software/macchanger
ahhh so many hours of my high school life consumed by this game
vscode is much more responsive on linux (manjaro) than on my beefier desktop rig. no idea why.

the setup is the same. i use the sync features to sync all the config and extensions i use
There is citizenship and residency. Many countries have very low bars for legal residency, and have it as a viable route to citizenship. With a business investment of $30,000 or a monthly income of $600, it is possible to gain residency in Nicaragua. Citizenship can be applied for after five years providing the person has lived in Nicaragua for 6 months each year.
The cache probably gets re-filled again pretty quickly, if you were to spam this endpoint it'd be more of a problem but I would assume/hope there's rate limiting on it.
GNU Mac Changer makes manipulation of Mac addresses of network interfaces easier
How so? In alsa just configure your sink as mono. In JACK downmix to mono (or discard one channel) then plug output to both L and R sinks.

I guess what you describe as "such simple thing as output mono" has multiple solutions once you think about it, so no-one is forcing one
Sumatra did this too apparently. I do not know if they still do this as I haven't used it in a few years.

Edit:

So did Okular (the KDE reader) it seems https://tsdgeos.blogspot.com/2009/06/okular-pdf-and-drm.html

Evince too https://superuser.com/questions/767617/disable-drm-in-evince but it is disabled by default now.
Last I saw of the History Channel, it seemed to be a steady diet of ancient alien theories, and magical artifacts or arcane technology in the hands of the Nazis.
I don't think it's quite as nefarious as that.

Like most humans journalists have opinions, and they are more likely to listen to things that confirm their opinions.

Most people are not likely to ask "Is this really true?" of things that align with what they believe is probably true.

Professional journalists are supposed to know about these kinds of biases - because if they do not they are professional only in name.

Further, if someone was repeatedly making these kinds of mistakes in their job, you'd be right to call them incompetent, because they literally are.

For some reason it appears to be taboo to say these journalists are bad at their job. However that isn't very helpful because it doesn't encourage them to change their behavior. Even the article here appears to dance around the bush.

So here it is:

The NYT and The New Yorker are unprofessional, incompetent, and their reputation is in no way justified. They should be ashamed, apologize, and vow to do better. Where they stand in relation to other outlets doesn't even factor into it.

And the above goes for any group of journalists who played their part in the inversion of the profession's reputation in recent years.

Anyways, that's my take on the matter. I don't think the vast majority of journalists who make these kinds of errors are intentionally lying - they are just bad at their job.
On a large number of high value targets.

Like this : http://dirk-loss.de/ssh-port-forwarding.htm

In the "A visual guide to SSH tunnels" thread. Not saying it's compromised, but why would fully security conscious people, experts even, not have https:// enabled ? Sounds sketchy as f** to me.

> If this page started getting popular ...

HN frontpage is about as good as it gets I think.

https://addons.mozilla.org/en-US/firefox/addon/https-everywh... -> will save you from a lazy click on a non-https link.

Isn't it the case though that many malicious sites have https:// enabled ?
Afraid I don't recall the name. Of the cities I mentioned, I must confess that Ithaca is the only one whose electronic music scene I didn't get to personally experience. I just remember picking up some party/club fliers while visiting the town one day circa 2000, and I was extremely impressed by the quality of the headlining DJs, considering Ithaca's small size and somewhat remote location :)
The built-in chrome PDF viewer PPAPI plugin is generally pretty decent and is at least sandboxed on most platforms. It handles larger documents a bit better than PDF.js.
> so, if Franck Leroy wants to have a chat

I'm thoroughly convinced this author is a made up pseudonym. No other articles, no information on what development work they do for what project paired with a generalized emotional call-to-action while misunderstanding fundamentals.
> UCM (Use Case Manager - for presets separation, like notifications, voice, media, etc..)

Ok, some domain expert on HN:

What is the UCM, when was it added to ALSA, what is its purpose, who is the target audience (e.g., is this something that helps driver author?), and how does it relate to Pulse?

I'm especially concerned with the last question, because at a glance it seems like Pulse and the UCM overlap partly in purpose.
How is rejecting a candidate soley based on race not racial discrimination?

This is illegal where I live; it is probably why companies never give interview feedback to the interviewees because they make these illegal hiring decisions behind the scenes but then say “it wasn’t a good fit”.
i bought sublimetext like 10 years ago. can't remember exactly. the license is still usable til now.

best $70 i have ever spent.
This simply confirms an assertion that low-quality advice is sought by companies that do not value advice, i.e. that their willingness-to-pay for information is low to nil.

Somewhat tautological perhaps, but also, thereby, not a compelling reason to offer a free plan, nor to be proud of being glib.

In addition highlighting that any comparison between an influencer and a consultant depends on false equivalence, which is why I don't consider them part of a product ecosystem (esp. when compared with ISVs, VARs and MSPs), or a substitute for thoughtful, professional advisors.
Nobody cares, because Substack isn’t treated as the “paper of record”. The problem is not that NYT etc. needs to be perfect, but that these news outlets are privileged sources that are used in crafting “evidence-based” arguments about all sorts of important things (but especially public policy).
Like walking into a bank wearing a suit and a good haircut vs ragged jeans and long hair. It’s also a big weakness of humans that they dole out trust this way, but it makes all the sense in the world that we do so.
How do you feel about a free-forever plan behind a credit card screen?

Google Cloud is this way: stay below their free usage limits for some services and you'll never need to pay; but you need to give them your card up-front because it's a post-paid service and they need to ensure they can charge you if-and-when you do go over those limits.

Or, for another approach: how about a plan that's free, but where there's a small one-time fee on signup, regardless of the plan you choose? (You can be upfront to your users and tell them it's a KYC measure, if you like.)

Or, how about a free service, but gated with a real KYC/AML process on signup (of the "sign in through your bank" or "upload your driver's license to this third party" variety.)

Any of these approaches, IMHO, would filter out the 4% of spammers; and also act as a barrier to anyone who isn't serious about eventually trying the service — while not being as much of a barrier to people like the GP poster, who take five months to get around to testing a service before becoming a diehard fan of it, and don't want to be paying for those five months, but also look in apprehension at the idea of possibly having to spend time trying to get their (as-yet-unused) trial extended.
Certain demographics are less inclined towards certain jobs. Does anyone seriously think it's a problem that non-white females are represented at less than 0.1% of deep sea welders?

Humans are not all equal in proclivities or even innate abilities.

The proposed solution by diversity campaigners is usually some form of discrimination, usually against white and Asian people. An Asian male has a much, much higher bar to cross to go to university, get a tech job, or otherwise than any other group, for example. It's discrimination and racism in the name of progress.

Equality of opportunity is a given, while equality of outcome is destructive and racist.
How revolutionary...
I wish. It seems like social media largely serves to amplify biased or outright false journalism rather than give it balance.
"Do what I say not what I do" is a universal mantra, very common of course here in HN.
I have most of my life savings in TSLA. I have $0 in Doge, and I have absolutely no plans to buy any.

If you base your investment decisions on tweets, you are begging to get wrecked. Elon is not responsible for anyone else's investment decisions...