skysight-inc/HackerNews huggingface dataset:
I love it told like this: https://news.ycombinator.com/item?id=26406351

1) naming

4) concurr2) cache invalidation

ency

3) off-by-one errors
I tried to but I'm very sure I didn't balance my macros the correct way at the time. I tried to eat lots of soy protein powders and things but have some kind of bad reaction to too much soy for some reason. By that time I had lost interest in eating that way and the noticeably negative effects on my sports training made me go another direction.
Google and EPFL Study Reveals Inductive Biases in Self-Attention Architecture
We need to force people to use respond-to (rather than just write a message) then show threads and your place in them beautifully and conveniently so they would enjoy that.

Fun fact: this can be achieved with e-mail, no need to invent new protocols.
How quick does it spin up?
End-to-end encryption protects against interception. No encryption will help you if your phone is compromised since the data is just sitting there in the clear.

The judge may have been compromised but there are also cases where brazilian judges retaliated against WhatsApp when it failed to deliver decrypted messages:

https://theintercept.com/2016/05/02/whatsapp-used-by-100-mil...
Its horrible how common this is. I used to do work on local business sites and the security was horrific. Pages that contain sensitive data or even CRM management pages exposed to the public internet with no password at all. On some of the less sensitive ones I had a look I found details of family members in these exposed sites.

Not only that, but it was all horribly outdated. Seen some things running on rails 1 pre release on a debian server about 6 years passed end of life.

Its a wonder the world works at all.
Show HN: Open Source and Handheld Game with MakeCode Arcade, Mathtown Alley
> What is the simple test for whether this is the case or not?

As suggested in GitHub's announcement post[1], you can test this with the following:

`git config --show-scope --get-regexp 'filter\..*\.process'`
(replace the single quotes by double quotes on Windows Command Prompt)

> Is this a default-on scenario?

On Windows yes, because Git-for-Windows configures Git LFS by default.

[1]: https://github.blog/2021-03-09-git-clone-vulnerability-annou...
It can also be the exact opposite. A targeted approach that leveraged my here and now skillset and long-term technical interests is what worked for me.
its not anti-Israeli to refute the statement "Foreign powers did not create Israel. Jews did." by pointing out the actual Middle Eastern Jews who lived in the region are the ones doing the worst in modern Israel
The sad part is the majority doesn't know how and why they should do this. They just get their personal lives broadcast to the web for all to see. There was or at least used to be a subreddit showing the more interesting exposed cams.
Sure, we can continue back to the British or maybe the Neanderthals too.
Consider the Lindy Effect, also popularized by Taleb: "The Lindy effect is a theorized phenomenon by which the future life expectancy of some non-perishable things like a technology or an idea is proportional to their current age, so that every additional period of survival implies a longer remaining life expectancy."

Bitcoin has survived bugs, attacks, forks, bans, smearing... and it all just made it stronger. Antifragile, although very volatile.
I assume the primary user base of git-lfs is folks doing things like video game development (so that they can check in image/audio assets to a repo without massively bloating it), which probably has a much higher fraction of Mac/Windows users than folks writing server-side apps or whatever.
Sure, I want to hire people who are good. But honestly a well designed interview is a pretty good way to find them. You get some false negatives (people who are good, but interviewed poorly because of stress). But I suspect most people I passed on (90%+) were true negatives - they didn’t pass the interview simply because their programming skills aren’t as strong as I’d like to see. And (I hope) most people who struggle with interviews can figure that out with a bit of practice. If it takes you 5 bad interviews before you do a good one (and land the 6th job you apply for), that’s great. Nothing is harmed in the process but your ego, and a bit of time.

Every time there’s an article like this on HN there’s people whinging about the interview process. But for most developers, interviews work fine. I stand by my claim that a well designed interview with a balance of content (see my other comments in this thread) is a fair and accurate way to assess a candidate’s programming skills.
Buildings (and more often, industrial facilities) appreciate when regulatory changes eliminate the possibility of building more in the future.
Its interesting that you can and people have scanned the entire ipv4 space in minutes on a fast VPS but it would take you forever to find your first ipv6 address that is even in use.
> $15 billion over 30 years is a big bill. But amortized over the hundreds of nuclear power plants in existence, it adds little to the overall cost of nuclear power.

That’s spreading the cost of one plant, once incident. There are a lot more plants and Japan isn’t the most geologically stable place. It has had its share of accidents too.
I wouldn’t be betting against more accidents in the next 30 years.

https://en.m.wikipedia.org/wiki/List_of_Japanese_nuclear_inc...
OP here, first time making a full game from scratch. Used Microsoft MakeCode Arcade for this project, mostly built in the Blocks language as a challenge. Only had to dip into JS a few times to alter parm settings.

The game is a math trainer that should run on all devices. Use the directional pad to arrange the animals to create a valid math expression. Press A to change animals and B to check the result.

I'm most proud of the auto-solve feature (press Menu) that re-arranges the sprites graphically so that the math expression is correct.

Feedback appreciated!
It's a worse option for everyone:

- Pushes down wages for other workers doing similar labor, by taking demand out from the normal market

- Because the prison itself (or, more likely, the prison-industrial-complex corporation running it) is seeing a huge profit from these ventures, it provides a perverse incentive to keep their labor pool 'strong', be it through lobbying for harsher sentences, or encouraging shot quotas amongst their guards/COs.

- Conditions prisoners towards working less for equal work (we shouldn't encourage the idea that -any- class, race, or creed of human being is worth less for the same amount of work)
No its not, because that work generate value for companies at a very low cost. So it both builds a system that pushes for more people in prison and displaces workers who would have been paid higher.

Prisoners should be given some kind of work / study / something. But it should't generate value for anyone but the prisoner or perhaps lower costs for the prison (cleaning/etc)
Serious security: Webshells explained in the aftermath of HAFNIUM attacks
The article says it costs $20B to build a state of the art fab. The USA is just about to pass its second $2T stimulus package. I’m betting a fab is not in there.
This isn’t a serious question if you consider that the people who struggle with them have spent their time optimizing for delivering real value and the problems don’t demonstrate or even provide entry from that.
The important thing about Roblox is that it's part of a larger trend of platform that enable a competitive creator environment that bubble up the "best" content to the top (like TikTok, YouTube, and Reddit). Roblox does it for games, and perhaps in the best way we've seen so far.

This perspective can also give us a sneak peek into will replace Roblox in the future. If you look at the YouTube --> TikTok transition, the main differences are that TikTok's content is entirely recommended, and that the content itself is more shorter (i.e. faster to trigger the dopamine response). The new gaming platform will likely be similar - a faster, quicker experience that will initially cater to kids but will eventually capture adults as well (and the content will evolve to support that).

Side note: It's absolutely incredible how much the comment section here is filled with parents either complaining or seeking validation for their ways of raising their kids. It shows how the transition to digital consumption is polarizing and challenging to our conventional wisdom.
I hadn't heard of Zulip before today, but I think they have a very good approach to this problem. In some ways it's like tagging each message.
How much of this is due just to Germany switching from Nuclear to coal after the Fukushima incident?
It probably depends on how "sexy" the UI in question is meant to be. I've read that on submarines, every pipe that leads to the outside ocean has a primary control valve in one place, each with a physical handle that is turned sideways when the valve is closed. Thus, it is immediately apparent by looking at the valve array whether any valve that potentially opens to the ocean is properly shut before deep-depth dives.
Tesla: “Full self-driving beta” isn’t designed for full self-driving
It depends on your definition of success.

In my mind generalists are more likely to do well with people (whether at selling, persuading or romancing), which can be advantageous - unless your definition of success is becoming an hermit.
People other than the ones you agreed to let monitor you, well, monitoring you. Also, it's a major risk to the company itself, who knows what can be read off of employees screens if they're compromised.
Even the Amnesty International article doesn't call Israel's usage of WP as using a chemical weapon: they call it an incendiary weapon in the very first sentence (which goes along with the Wikipedia article I linked). The Mustard Gas comparison isn't valid; the whole point of mustard gas is to target humans. WP was being used as camouflage, and caused property damage. That can be bad! That can even be a war crime. But being bad or a war crime doesn't mean Israel used chemical weapons against people in Gaza. They used an incendiary weapon that caused a lot of property damage (which is possibly a war crime in its own right).

Edit: the entire Gaza War started with Hamas firing rockets packed with incendiary chemicals into dense Israeli urban environments. I would say many things about Hamas, but I would not say that Hamas has used banned chemical weapons against Israel. I suppose if you believe Hamas has used banned chemical weapons against Israelis, you may certainly believe Israel has done the same. But I think your definition of chemical weapons is significantly broader than international law. AFAIK neither side has done this.
Doesn't Git-for-Windows default configure symbolic link support off, though? Or does this exploit work even in that case as long as the underlying file system supports symlinks?
I think anyone who has had to comply with those compliance lists knows how useless they are. Easy to make the minimum change that makes you compliant without being any more secure.
Brent Oxley Loses Access to Create.com, Plus Millions Worth of His Domains
I don't. In fact I don't believe any kind of PR, really, as that whole exercise is more about telling a favorable story than actually informing on anything.

But those bold claims of compromise are backed up by a large, international, and simultaneously-executed roundup of the service's users, who from the likes of it all had Sky ECC in common. Also, the last time this happened was when Encrochat was compromised? That wasn't even all that long ago.
Except they existed before a boot camp was a thing and were about evaluating whether CS grads could write real code.
> the real test of intelligence was knowing that you can lie about being an accredited investor

If the USA is anything like Australia, this is still illegal. So maybe not so much about "intelligence" as it is "willingness to break the law when it's unlikely you'll be found out".

I suspect the latter strongly correlates with financial success more broadly, too.
Well, well, well. It's a Sonic Screwdriver.

https://en.wikipedia.org/wiki/Sonic_screwdriver
Thanks! To some degree the structure was the focus, because I believe the UI/UX would be the make or break for an attempt like this. I don't even think my designs would be a perfect implementation of this method.

Sqwok seems very interesting as well!
Why are people down-voting on the principal you are innocent until proven guilty?

Lets hash this out, what will you do when/if we find that the 3 letter agencies and other bodies with good translators and good intel are found to be right and there is no genocide being committed?

Will you then ignore the demolishing of the Uyghurs artefacts and the large amount of 'education' camps?

China has documented very detailed rebuttals to most of the serious (rape, death, sterilisation) claims so far. I think they would allow you check their sources as long as that's it, is this the request?

Meanwhile the Ethiopian massacres barely get a mention on HN.
Wasn't there a website along the lines of "camroulette" that showed you random unsecured IP camera feeds?
Do you mean tinypage.app? They’re a “platform” customer of ours, running a white-labeled custom fork of Singlelink.

Unfamiliar with tiny.page, but seems interesting!
He's actually the Product Owner now (I think that's what it was), which I'm assuming is a promotion.
You can get beyond that mindset by imagining how much money they earn by using open source software to run their infrastructure, as compared to how much they give back.

It's probably a ridiculous asymmetry.
I imagine these surveys just tend to omit the required consequences of each choice. E.g. asked "Do you want to pay less in tax or more in tax?", most people would likely answer "less", but if you outlined all the things they'd lose with lower taxes, a lot of those votes would flip.

In this case, I imagine people said that they'd prefer more relevant ads (I know I do), but then T-Mobile used that as justification to do all sorts of other things that weren't asked about.
GL.iNet GL-E750

I keep forgetting it's on in my bag when I come home, then it's dead when I go to leave the house again. Fortunately I have a USB outlet in my car; I don't keep SIM cards in any other devices now (other than my dumbphone for SMS).
> the headline doesn't say it's a comparative analysis of UX

It would need to be for the headline not to be bullshit.

As for the needlessly aggressive remarks. I agree.

This wasn’t one - it was simply a statement of fact.
‘Although the saying tells us “If it’s free, then you are the product,” that is also incorrect. We are the sources of surveillance capitalism’s crucial surplus: the objects of a technologically advanced “and increasingly inescapable raw-material-extraction operation. Surveillance capitalism’s actual customers are the enterprises that trade in its markets for future behavior.’

Excerpt From
The Age of Surveillance Capitalism
Shoshana Zuboff
It used to be 12 weeks, not 20 as your comment implies: https://opensource.googleblog.com/2019/05/google-summer-of-c...
I don’t see why the necessity for setting things up means that the system would not encourage a better style of online conversation. Especially if services are developed for less technically adept people.
The extraordinarily frustrating case is where you're working on a repository that has multiple files that differ only by case. Git will check out one of them, then overwrite it with the other.

The Linux kernel is one of them: several of the headers that get installed to /usr/include/linux/netfilter have conflicts on a case-insensitive filesystem. https://github.com/torvalds/linux/tree/master/include/uapi/l...

Debhelper used to be one of those until I convinced them to change it: they had a Debian/ directory for the Perl module Debian::Debhelper as well as a debian/ directory for the packaging metadata. https://bugs.debian.org/873043

(I suspect I'm a little unusual in wanting to have checkouts of Linux and Debhelper on my Mac homedir.)
Alaska will be first state in U.S. to offer Covid-19 vaccines to all adults
Get this: closed circuit television systems actually existed before updates could be delivered by the internet. Another crazy fact: there are still products sold which don't connect to the internet. You don't see nearly as many ads on these products though and don't seem to be as popular these days.
The farmers down the road don't know how to post what's available at their farm stand via RSS. Facebook is far simpler.
Are there any companies actually pushing a security-first IoT model?
Yeah I noticed the calls from your site to tinypage.app and then I dug and found tiny.page, which is launching soon... strange coincidence between tinypage.app and tiny.page.

What do you mean by tinypage.app being a "platform" customer?
Looks like a few things going on:

Vaccination in JP lags the US and UK. A survey found 75% of locals don't favor foreign visitors for the Olympics. They are fearful of SARS-COV-2 variants.

On the other hand, why not allow foreigners who can prove they are vaccinated with the vaccine that immunizes against variants and also get the locals vaccinated?

And, implicitly, if Japan isn't trusting vaccines, should other countries have similar concerns about free travel?
Cache is a type of state but not necessarily the other way around
Show HN: Free proposal tool for digital consultants
It's talked a bit more downthread, but I mean if the sales director is making public slack channels featuring female employees alongside explicit jokes, then long-term thinking may not be a strongly selected for attribute at the company.

https://news.ycombinator.com/item?id=24906940
UW Scientists Turn Amazon’s Alexa into Heart Monitoring Device Using Sound Waves
Zero, management screwed the company culture and there's no individual time anymore: you're constantly pairing with people and you don't have time for learning or anything else.

Before I used to learn whatever I needed for the job when required and I often kept a podcast in the background.
If you are treating Soviet casualty reports at face value, I don't know what to say. Comparisons to coal and oil are not interesting; those sources will fall away as they become increasingly uncompetitive.

Wind is being installed all over the world in multi-use locations, including offshore shared with boats, and onshore shared with farms and ranches. There has been absolutely no shortage of viable sites, and there will not be.

Solar is also compatible with multiple uses, although there has been little need for it. Many locations benefit from solar roofing. I daresay you have seen plenty of parking lots roofed with solar, and a great many more without, yet. Similarly, hydro and municipal reservoirs, and canals, where reduced insolation means reduced evaporation. Anyone suggesting a shortage of sites that would actively welcome solar installations has no globe. Even on farmland, numerous crops benefit from partial shade. I haven't see that yet, because there has been absolutely no shortage of other sites.

Thus, "undefined locations" is not honest. We can easily see exactly where they are being installed, with no need to guess or wonder abstractly.

Multiple storage methods are known, all low-tech, with the only open question being which ones will end up cheapest to deploy. Underground compressed air and gravity storage have been demonstrated. Production of ammonia from air and water may end up, not cheapest, but most valuable.

I trust you will not repeat these canards. They do you no credit.

Nuclear is uncompetitive today, and getting moreso every day, as costs of wind and solar continue their free fall. Geothermal may ultimately come to challenge them, particularly for baseline load.

You can, if you like, think of geothermal as nuclear power without the huge decommissioning cost commitment.
Why the switch from stdlib.com to auto code.com? The first name was much cooler
You mean that Fukushima never killed anyone during normal operations? Because people died during the evacuation, a worker died due to lung cancer attributed to the disaster (it's mentioned in the article), and we are not sure if there will be any further deaths due to radiation exposure.
This is the first article I've found that does a decent job of explaining what a resource fork really is.
This is the important part. NOT that their network was not secured, but that anyone with a super-user account can simply view archived and live video feeds of any of their customers????

> The hackers’ methods were unsophisticated: they gained access to Verkada through a “Super Admin” account, allowing them to peer into the cameras of all of its customers. Kottmann says they found a user name and password for an administrator account publicly exposed on the internet.
I don’t understand what angle this comment is coming from, but it feels like derision. If so, why?
> then seize the mobile home and resell/re-rent it. Repeat ad infinitum.

That's basically the Buy Here Pay Here(TM) car lot business model.
stdlib means something to you and me, but to a broader audience it may suggest that it’s where you might go to learn more about chlamydia.
Just because there is not an active threat doesn’t make it any less of a vulnerability to be exploited.
In the efficient implementation of a pure functional language (say Haskell without MVars), what really is the difference between state and cache?

I know this is overly philosophical, and in practical scenarios we readily (although not always unambiguously) differentiate between "cache" and "state", but the point about transitions and that being a major source of bugs still stands.
African fintech firm Flutterwave eyes U.S. listing after raising $170M
Voyager – Making of the Golden Record
Making fanfiction beautiful enough for a bookshelf
Spotilife
Hi, this is very valuable information for me. This is actually my first time developing a website, so I sorta brute-forced the content onto the site.

I'm new to that side of things, and it's a deep learning experience for me. I think my CSS styling is a mess, and the text is all over the place.

I'm using Gatsby.js and Sanity CMS on Netlify, though none of my projects are currently within Sanity's CMS because I couldn't figure out how to do that yet. Big learning curve for me. I wrote a bit about it on my blog, but sorry for the messy experience!
I switched to authy because I can use 2 devices (same "keys") and backup codes easily. I'm too clutzy not to have at least one backup device. I suppose most humans are.
Arm is indeed the killer success story but like frauenhoffer it pivoted to "licence the ipr" instead of going into world scale fab.

That's the part Europe seems to miss: making endogenous industry in territory
On one hand it’s very easy to run the code locally or in lambda because we use Go along with a library from AWS that translates the gateway proxy request event to a normal http request. So the request handling is all the same in code.

To prevent 404s hitting your function you have to define your routes in both your code and in api gateway. This starts to marry your code to your deployment.

Observability is now harder and you need yet another thing. We’re using X-ray with datadog.

To “safely” talk to Postgres you should use an rds proxy. It’s still unclear how much is different from pgbouncer or similar but in any case it’s pretty easy to knock over your db with runaway lambda invocations.

I could go on about the mistake we made of using SAM and how it ends up not supporting everything you need but I guess my main point is it’s easy to get sucked in by the idea of it being easy but you are trading that for service / operational complexity with a healthy dose of platform lock-in.
> However, a significant portion of collagen peptides can survive digestion, or leave the gut before they are digested. (Up to 10%, depending on the original source of the collagen.)

Do you have a source where I can read more about this?
having a crypto asic in any product would be sold as a way to lower costs to consumers and would be deemed ok.