skysight-inc/HackerNews huggingface dataset:
This is Cloudflare's official statement (I work for Cloudflare):

This afternoon we were alerted that the Verkada security camera system that monitors main entry points and main thoroughfares in a handful of Cloudflare offices may have been compromised. The cameras were located in offices that have been officially closed for nearly a year.

As soon as we became aware of the compromise, we disabled the cameras and disconnected them from office networks. No customer data or processes have been impacted by this incident.

This incident emphasizes the importance of the Zero Trust model that Cloudflare follows and provides to customers, which ensures that if any one system or vendor is compromised, it does not compromise the entire organization. Unlike the previous castle-and-moat approach, a Zero Trust model functions more like bulkheads in a ship, making sure that a leak in one place doesn’t sink the entire ship.
Isn't that the site that argues the UK cannot get by with renewables, but assumes large amounts of biomass are needed to be grown locally?
It demonstrates the combination of concurrency and scale to 0 which I havent seen in other public clouds.
Sad to see GNU missed out.

“After participating for 12 consecutive years, for the first time ever
the GNU Project got rejected as a mentoring organization in the Google
Summer of Code 2021.

We did not get any explanation other than: "We had many more
applications than available slots. We hope you will apply again in the
future!"”

https://lists.gnu.org/archive/html/summer-of-code/2021-03/ms...
They all have fish ladders these days. Not perfect, of course, but there is some effort out into at least.
I have the same experience when apparently anti-vegan results/studies appear on HN. Usually the headline is a million miles from what the study could claim to show. It would be nice to actually see this paper.

This was the last time I looked at one of these claims: https://news.ycombinator.com/item?id=23661158 (Article claimed 25% of vegans have low blood iron, and the study involved ..10 vegans.)
Woah, didn't know that, neat
https://archive.is/HZdMr
None of these limitations work. There are facebook and IM groups set up where real users of Amazon sit and companies offer free products to these people for good reviews.

These users have years of real account history and they really did buy the product. Its just on an external service, the seller refunds the money.
Ahhhhhh that was then, this is now. Everything is on the internet unless you're actually serious about security.

Not a huge deal though, this will hopefully cause them to look at truly closed circuit or isolated cameras.

CloudFlare & Okta is insane though.
There is a huge difference between “clone a repo” and “clone a repo and run code from it”.
Exactly like in the US except that the target market here isn't the privacy-conscious, it's the people banks don't want to service (poor and/or poor credit history)

If you have the means to tally an order and a card terminal, though, you could have a kiosk with a note acceptor attached.
The Big Tech monopolies were enormous donors to Biden. They will get what they bought, compliance from Biden and the Democratic party. This is just stage craft to make people feel like there is a struggle, when this is just about the state and those in power fully coopting and merging with Big Tech to create a web of entrenched interests and power. Big tech will control information and use censorship to define the narrative to keep the powerful in power, and in exchange Biden and his people will ensure the monopolies of the tech companies that serve their interests.

Anyone remember "too big to fail" from 2008? Guess what our government under Obama did... Make the banks even bigger and give them implicit government guarantees. Biden learned from this and will do the same for big tech.
Holy crap. This is huge.
Nit, you can already abstract over lifetimes. But I really agree with the HKT comment, in principle. In practice it's not so bad. Abstracting over async, mutability, and borrows would be more important to smooth over a few of these issues (there are ways around both, but it's not always obvious).

Most of these issues arise for library authors. I think a lot of folks in the ecosystem today are writing libraries instead of applications, which is why we get these blog posts lamenting the lack of HKTs or difficult syntax for doing difficult things that other languages hide from you. I don't think users have the same experience when building things with the libraries.

That said, there's a bit of leakage of complexity. Sometimes it's really hard to write a convenient API (like abstracting over closures) and that leads to gnarly errors for users of those APIs. Closures are particularly bad about this (which some, including myself, would say is good and also easy to work around), and there's always room for improvement. I don't think a lack of HKTs is really holding anything essential back right now.
I visited a cement plant once, and they were burning chemical waste as part of the fuel stream.
Great pivot into "this illustrates our excellent security".
Germany didn't switch from nuclear to coal after Fukushima.
From my perspective (ie, opinion), probably not.

I've been hiring engineers for a few years, and I've come to associate a CS/IT Masters + unrelated undergrad with bad candidates and generally use it to filter _out_ candidates (unless something else on the resume catches my eye). Conversely someone with a science degree and a bit of experience (or some decent personal projects for fresh career-switchers) is a much better sign.

My experience (read: anecdata, opinion, bias) is that the IT/CS masters candidates I've interviewed have switched for money and because of failure-to-thrive in their original industry, and have no care or passion for software, and have done poorly on interviews. The non-CS-undergrads-but-no-masters candidates are just the normal spectrum, with a higher variance (some with 0 skills but much hope, some with really interesting backgrounds and wide-ranging interests like how you sound).

Data disclaimer: I'm only at ~500 total lifetime interviews/10 years experience so far, I'm in Australia, I have no recorded numbers or hard data just "feelings" and "intuition".
Great! Sounds like "we could have owned half the internet" was hyperbole.
I feel like this has to be a negotiating tactic to get another year delay out of the IOC. The competitors and support staff alone are already tens of thousands of people, no? There’s just no way they’ll be able to throw the Olympics if they aren’t prepared to open the border.
Question - I have a Droid LG V20 , think the device is from 2017.

Never updated. Running 8.0

When I run the Tmobile app (wanted to peek at settings), its asking me to update.

Should I do it ? Am i safe if i dont update this monster to suck my data ?
Buried deep in the article: 16- and 17-year-olds are also eligible, although they're limited to the Pfizer vaccine (the other two are only currently approved for 18+).
That’s why it’s amazing, type safe efficient multi-threading without dynamic memory allocation with a nice syntax...it’s the holy grail of server programming.
Zhihu Form F-1 IPO Registration Statement
Law of Attraction List of Wishes Tips
It's questionable whether or not America's healthcare system would be considered "globally competitive" though. We do have top-tier medical research but there's a lot of waste too
I was also confused by this when looking at your pricing page: https://singlelink.co/pricing/

My thought process: "Oh, they'll show ad-network ads on the free tier, I guess that's OK. How much is the tier that removes ads?" and then I couldn't find a tier that mentioned it.

I think it'd be much clearer if the free tier said something like "shows Singlelink watermark/logo", and the next tier up said something like "no Singlelink watermark/logo"
Of course. But not every system of differential equations leads to chaotic large scale behaviour.

I gave examples of economic systems that do not.
Scientists invent a new type of microscope that can see through an intact skull
Yeah I just don't see this being a thing either. If Google allowed businesses to pay to moderate (i.e. censor) their own reviews at their own will then that destroys any legitimacy in the reviews of a business, eliminating any value of Google Maps reviews to the end-customer and killing the product.
A bigger problem in my opinion is that Rust has chosen to follow the poll-based model (you can say that it was effectively designed around epoll), while the completion-based one (e.g. io-uring and IOCP) with high probability will be the way of doing async in future (especially in the light of Spectre and Meltdown).

Instead of carefully weighing advantages and disadvantages of both models, the decision was effectively made on the ground of "we want to ship async support as soon as possible" [1]. Unfortunately, because of this rush, Rust got stuck with a poll-based model with a whole bunch of problems without a clear solution in sight (async drop anyone?). And instead of a proper solution for self-referencing structs (yes, a really hard problem), we did end up with the hack-ish Pin solution, which has already caused a number of problems since stabilization and now may block enabling of noalias by default [2].

Many believe that Rust async story was unnecessarily rushed. While it may have helped to increase Rust adoption in the mid term, I believe it will cause serious issues in the longer term.

[1]: https://github.com/rust-lang/rust/issues/62149#issuecomment-...
[2]: https://github.com/rust-lang/rust/issues/63818
> If that info is well taken care of

It isn't. https://en.wikipedia.org/wiki/United_States_Office_of_Person...
Everything is "mismatched types" in Rust, literally it doesn't do any automatic type conversion (casting), so it's not the right language for most people.
In particular, powering the world with nuclear instead of fossil fuels means commercializing either breeder reactors or seawater uranium extraction.
One could say Alberta also got the worst rate of covid-19 case in Canada since september?
if the wsb narrative is true - and that if they hold, the shorts must buy at any price - then why don't other knowledgeable traders and institutions recognize that and get in the game?

In other words, if the wsb moon-theory is true, it would have already happened.

Isn't it more likely that the price is, at this point, just getting pumped by memes and wsb throwing good money after bad?
A later tweet claims they got access through a vulnerability in the Verkada security cameras used by these companies: https://twitter.com/nyancrimew/status/1369442432639770624

That's not good, but it's bullshit to claim, "if we wanted to we could have probably owned half the internet in like a week." I seriously doubt that any of these companies have their security cameras on the same networks as anything sensitive, let alone production infrastructure. Heck, I doubt that any have their cameras on the same networks as developer machines (which are used on public networks all the time and can have all kinds of dubious software installed on them).
A couple boxes, likely VLAN'd off, were popped.

Note in both screenshots, copious amounts of 'mmcblk0pXX', that looks like an embedded device. Probably the same cameras this group found vulns in. The idea that those cameras somehow give access to all of cloudflare, or all of OKTA, is wrong and clickbait and sensationalist.

By the way, according to github [1] this girl is in Switzerland. There exist extradition treaties, and she is not operating under a pseudonym. These are publicly traded companies. She could very easily find herself in prison for this.

[1]: https://github.com/deletescape

edit: wording.
The main thing that changed was not the project length, but that the projects are now supposed to be part-time (4 hours per day) instead of full time (8 hours per day).

I'm curious to see how it's going to work out. Halving the student's stippend and the scope of the projects is going to be a big change. On the other hand, it might make it easier for students outside the USA to participate. In other countries the GSOC coding period often overlaps with part of the school year, including final exams.
> And, as I said at the start, that makes me kinda sad, because I do actually like Rust.

I think that’s the most important part of the article. People like Rust but it’s becoming more complex than C++. But unlike C++ it’s more difficult to pick and choose what you use.

Rust’s death will be one by thousand cuts. “I really like the language but can’t justify all that complexity in my new small and simpke project” is what will cause the popularity to drop.
No. There was only about 2/3 of the round log remaining, and they cut (a mix of quartersawn and riftsawn) ten planks out of it. All were full-length, but some were decidedly narrower or rougher than others. They chose four main planks to build the tabletop around, with a fifth full-length cut from one of the scantiest planks to wed the book-matched left and right center planks together, in the center.

https://www.thefenlandblackoakproject.co.uk/blog/quarter-saw... for diagrams of the plank cuts.

https://www.thefenlandblackoakproject.co.uk/blog/2019/11/1/s... for a description of the main plank configuration.
Second Life
The price of four or five kids could easily cover the pay of a private teacher/tutor. It seems like the ideal learning environment. I'm probably missing the point of going there in the first place.
Nuclear's problem isn't safety, it's cost.

If nuclear were 10x safer but no cheaper, it would still be moribund.

If nuclear were 10x cheaper but no safer, it would be the dominant energy source on the planet.
I am not giving up my vegetarian diet due to one study (n = 21) of a potential negative affect (surgical scars). Meat-based standard American diet has negatives as well. Given that the iron and B12 levels were low for the vegans in the study it would be interesting if they supplemented that and check for an improvement.

edit: corrected study participants number
Yeah I don’t get it either. We’re supposed to be upset that it did it’s job? Lol?
Selling snake oil is illegal and immoral because it misrepresents the product.

Selling stock, when you make it clear that your stock is worthless does not misrepresent the product.

And, again - note that Alice is not even required to make such a disclosure, when selling her stock to Bob. The assumption on the stock exchange is that as long as public companies are up front and honest about their financials, it's Bob's responsibility to not buy stupid, overpriced crap.
Correct me if I'm wrong, but isnt any sort of async support non integral to rust? For example in something like Javscript you can't impliment your own async. But in C, C++ or Rust you can do pretty much anything you want.

So if in the future io-uring and friends become the standard can't that just be a library you could then use?

Similar to how in C you don't need the standard library to do threads or async.
Thanks for something truly thought provoking this evening.
I find this trend really interesting, and agree that its one of the potential futures of personal computing.

I've heard, on HN, people lamenting that an early vision of computing –– people creating their own applications –– has not arisen. Most people, outside of CS, have no idea how computers work.

I think this post, the no-code movement, and products like Zapier show that there is a future for this. People don't need to know how computers work to create their own services – SaaS applications abstract over the implementation details, and APIs provide the interfaces for prosumers to connect them and build their own solutions.

I'd be curious to hear your thoughts on Zapier. How do you think we can go beyond "API connector" products?
sfeed is the greatest! [1]

The reason I couldn't stick with other feed aggregators in the past is because of the perpetual accumulation of the unread count. The output of sfeed_html is just links [2]. No unread counts. I can remember whether I've read something or not.

Just stick it on a server, run as a cronjob, and you have your new browser homepage. And if you want to move your "database" it's just a directory of tsv files. Brilliant.

[1] https://codemadness.org/sfeed-simple-feed-parser.html

[2] https://codemadness.org/downloads/sfeed/html/feeds.html
Individuals in the US are not allowed to own machine guns except with extremely limited exceptions. Owning a machine gun does not inherently make one evil, so why can’t we own them?

Rhetorical question. You already know the answer.
Socialization with a particular community is the primary value private schools provide.
Incidentally this breach is not specific to Cloudflare, it affects lots of companies:

https://www.theverge.com/2021/3/9/22322122/verkada-hack-1500...

Hackers gained access to over 150,000 of [Verkada]’s cameras, including cameras in Tesla factories and warehouses, Cloudflare offices, Equinox gyms, hospitals, jails, schools, police stations, and Verkada’s own offices, Bloomberg reports.
This is outdated speculation. The preponderance of current evidence points toward what we expect from previous vaccines -- once you've been immunized, you are incredibly unlikely to transmit the virus to others:

https://reason.com/2021/03/08/contrary-to-what-the-cdcs-new-...

In fact, the CDC just updated it's own guidelines to reflect these same facts:

https://www.npr.org/sections/coronavirus-live-updates/2021/0...

If anything, these guidelines are conservative.
> Google has no strong incentive to keep reviews honest

Have you actually thought about this at all? Why on earth would ANYONE bother reading reviews that they know to be categorically fraudulent? Without keeping the reviews honest, at least to a degree that the general public considers them honest and legitimate, Google Maps Reviews becomes worthless and a dead product. Fake reviews are a very real threat to their product's value and Google arguably has very good strong incentives to keep reviews honest so people keep using them.
By the way, Patrick, while you're around: any plans to GPL CROMA at some (remote) point in the future? Have always been curious to see it...
> I have never experienced such an interview, both when I am the interviewer and the interviewee, and I've been thru the entire process at multiple FAANGs.

I've been through the all-day on-site interview at two FAANGs and every coding interview involved me standing at the whiteboard for the entire interview. As the saying goes, data is not the plural form of anecdote, but it's certainly common enough as a format that it has to be considered when discussing whiteboard interviews.

> The entire interview has this elevated difficulty. You are constantly being judged and evaluated over the course of the interview. I have consistently asked for people to clarify why the Whiteboard part is elevated over any other technical portion in how stressful it is and how much that impacts performance, and I mostly have been attacked with strawmen.

I agree that the entire interview has elevated difficulty, but which aspects are intrinsic / essential and which parts could we remove with minimal impact to the effectiveness of the interview?

For example, we both seem to be in agreement that writing code with a pen makes the whole interview harder without facilitating what we usually want to measure - the candidate's ability to reason about complex problems and write good code to solve those problems.

From the findings in the paper, just having a proctor in the room is correlated with the candidates performing worse on the programming task (as measured by writing code that passes the test cases). I'm sure there are benefits to being able to observe the candidate directly, but those benefits should be weighed against the drawbacks and evaluated in light of whether or not it's really a net positive, regardless of whether the interview process as a whole will still be stressful in other ways.
> free and full health coverage included

I don't know about other European countries, but I often heard this argument in France, and it is bullshit.

It's free but overall about 60~70% of your work value/cost for employer is taxed.

It's free, but when you need to see an ophthalmologist (for example), you are either lucky to get an appointment next year, or have to pay 150 Euros for a non-affiliated doctor.

Its free, but so completely broken that we have to pay by ourselves what is called a "mutuelle", which is basically an insurance that covers partially what is not paid by the national health system. And this thing became mandatory a few years ago.

It's free but so inefficient and corrupted that when you subscribe you have to wait 6 months and re-do the procedure 3 times because they lost your files somewhere in the bureaucratic black-hole.

If this is the definition of "free" in Europe, I'd rather get both my money and the real freedom to decide how to use it.
For a while I tried to only run untrusted builds in Docker containers, like doing `docker run -v $PWD:/src node npm install`, but IDEs are not really configured to deal with this. Even my Vim has ALE and would just run node_modules/.bin/tsserver on my machine, which could be anything. Why aren't our tools concerned with this at all?
If you don't like the method of interviewing. Don't apply to join the company. Simple.
The "it's all the activist's fault" argument has long since become ludicrous. No, it's because the nuclear lied about how cheap it would be, then failed to execute properly.
Sorry about that. I don't think hacker news allows you to format lists, but I wanted a list. It increases the readability on desktop, but destroys it on mobile.
> AFAICT, tokio is basically going to become the default assumption

I've noticed this as well. And then there are the libs that don't support async, like diesel. I lost time trying to find the right combination of libraries for a web project. There are a lot of things I don't like about Go, but this part is easier.
> but you don't accidentally shadow-ban someone

Have you considered when the shadow-ban is triggered by an automated moderation system based on heuristics or ML which Google is known to use prolifically across their product range?
This says they are using the T-mobile network: https://about.dish.com/2020-07-01-DISH-enters-retail-wireles...
> Renewables CANNOT replace nuclear OR fossil fuels. It's literally impossible based on current or any near-term technology.

Nonsense. It's clear they can, although it's more than just using Li-ion batteries.
I'm not totally sure what the author is asking for, apart from refcounting and heap allocations that happen behind your back. In my experience async Rust is heavily characterised by tasks (Futures) which own their data. They have to - when you spawn it, you're offloading ownership of its state to an executor that will keep it alive for some period of time that is out of the spawning code's control. That means all data/state brought in at spawn time must be enclosed by move closures and/or shared references backed by an owned type (Arc) rather than & or &mut.

If you want to, nothing is stopping you emulating a higher-level language - wrap all your data in Arc<_> or Arc<Mutex<_>> and store all your functions as trait objects like Box<dyn Fn(...)>. You pay for extra heap allocations and indirection, but avoid specifying generics that spread up your type hierarchy, and no longer need to play by the borrow checker's rules.

What Rust gives us is the option to _not_ pay all the costs I mentioned in the last paragraph, which is pretty cool if you're prepared to code for it.