skysight-inc/HackerNews huggingface dataset:
In my experience those scanners were used for software certification. You're paying money, they run those scanners on your system, they spew meaningless warnings, you're doing meaningless actions (hopefully harmless) to mitigate those warnings and you've passed a certification, congratulations. Nobody checks whether those warnings make any sense, nobody checks what exactly did you do to mitigate those warnings, it's security theater. And that was extremely expensive scanner, I checked their website and they're selling it for big money.

Probably other people find it more useful.
> Not saying they couldn't develop an operating system; but the rest of the article did a pretty good job of explaining why they just wouldn't.

I'm not sure what point you're trying to make here. If Google (or rather Danger) could have forked Android instead of creating a new operating system, they would have done that too. In fact, they did, in a sense, as Android uses the Linux kernel, after all.

Sure, Google now actually is trying to create a new OS from scratch (Fuchsia), but it remains to be seen if it will be a success in the market (or if it will even ever be deployed in a commercial product).

> If someone 'cheats', there is a pretty good chance that they also 'lie'. And enough with the cultural relativism. Some things people do are recognizably bad just at the human or even social animal level.

I share your difficulty in wrapping your head around this idea, but a certain amount of cultural relativism is required here. And your own absolutism isn't a absolute as you think.

Here is an exercise that may help: Why is cheating at poker considered, well, cheating, but bluffing (including deliberately faking tells, or other subterfuge) is not?

If you say "bluffing is part of the game", try to understand that much of what is called 'cheating' is seen as part of the game in their context, and while getting caught cheating is cause for losing face, it isn't cause for feeling guilt. In fact, whoever is doing the catching is supposed to feel embarrassed for pointing it out, not self-righteous.

> Even dogs get embarrassed by their own behavior, if they are caught out.

Right. While the idea of 'Face' or shame is something that exists in Chinese culture, and is as powerful a force as guilt is in Western cultures, it doesn't work in the same way, and trying to guilt a Chinese person typically just shames them instead, and makes the shamer a target for anger and even revenge. This point perhaps could have been given more space in the essay.

Aside: I think that this is part of what drives the 'social credit score' initiative: In a very real sense it is a system for measuring 'face', but there is never a 'shamer' that can be embarrassed or blamed.
It's a shame that the necessary work of criticizing our media is so often undertaken dishonestly.

>When Donald Trump made the same calculation, saying he couldn’t cut ties

This is not what happened.

Donald Trump denied that the Saudi royalty was known to be behind the murder of Khashoggi despite the conclusions of U.S. intelligence. He was part of the coverup, obscuring the known facts to preserve his relationship with bin Salman. Joe Biden, on the other hand, said bin Salman was responsible for his murder but decided not to penalize him.

Both of those decisions are unacceptable to me. That does not make them the same.

Say what you will about the New York Times, but they rarely tell lies as brazenly as Mr. Taibbi.
Indeed. The BBC’s Domesday book was put on a pre-CD glass based optical medium which should last forever, but they managed to lose reading equipment for it, and a huge digitization effort from the 80s would have been lost (they published a call for help, and eventually someone found a reader in their garage.... but it was a close call)
These conglomerating farms are exactly the reason for the lower quality food the poster is talking about. If the trend you identify continues then the relative scarcity of high quality food will rise.
Double clutching is changing into neutral, then into the target gear, right? How could that be faster?
Your over wrought and stilted writing does nothing to obscure the reality that you are a fucking moron.

India is roughly twice the square miles and three times the population of Western Europe, encompassing some 2,000 distinct cultures.

The notion that you can make any sort of comment about "Indian" cooking is absurd. Lets be real, you have probably had food from at most 2-3 regions. "Curry" isn't even an Indian concept, its a fucking British one based on a misinterpertation of the name of at most 2-3 dishes.

If there is any chance this post can be traced back to your real identity you should delete it as you look like a fool.
Not really.

Life transforms matter and energy into increasing structure and complexity.

A classic pathological life-like process is the paperclip maximizer.

The paperclip maximizer transforms matter and energy into a regular structure of low complexity.

Crypto is one step worse than the paperclip maximizer. It converts matter and energy into pseudo-random numbers.

The only structure discernible within the randomness is the mechanism that induces organic lifeforms to work on behalf of crypto.
What's wrong with the existing notification inbox in macos? It's available quicker, by just swiping in from the right side.
Thank you! In the settings (scroll to the bottom) there is a "-" and "+" between "reset zoom" button. That will help you adjust icon size and text across the app. Great for a 4K TV.
In New Zealand, the average dairy herd size on the South Island is 611 (414 nationally).

In Wisconsin, it's 150.

Looks like there's a lot of room for consolidation in Wisconsin.

https://www.jsonline.com/in-depth/news/special-reports/dairy...

http://www.siddc.org.nz/about-siddc/south-island-dairying/
DST is the time zone I have a problem with. ;)
Don't need to go to social media, just look at the number plates of the "upper class" folks

They usually plaster their caste names on the bike or number plate
Here's a deplatforming example that is very much in line with societal consensus: when Daech was recruiting teenagers and young adults from Europe, there was a constant struggle, by both platforms and law enforcement, to systematically de-platform the accounts pushing their propaganda.

It is likely that had this propaganda been allowed to run unchecked, there would have been even more people recruited by Daech to go fight in Syria (or get married off), and to attack random civilians in the name of this ideology. Most attacks, if not all, were perpetrated by people who had in large part radicalized online, away from extremist mosques where they might have been more easily detected.

That being said, I don't believe censorship or de-platforming should ever be used outside of preventing the spread of propaganda that results in actual attacks on people. Anything short of this is just talk.
So the same CVEs show up for debian but not redhat even though they're not being fixed upstream.

Is IBM/redhat paying someone here? I don't understand why it would be different.
Being trans is not a mental health issue.

Gender dysphoria is a mental health issue, but gender dysphoria is being taken out of ICD 11 and the new classification - gender incongruence - will not be under mental disorders but under sexual health.
Not sure what GPU algorithms you’re trying to implement, but linked lists (and generally anything with pointer-chasing) are almost maximally terrible on GPUs - they are really not designed for that.
> Train company profits count for about 2% of the total cost of the ticket

Considering that this is about the same as inflation and less than the usual annual ticket price increase which is decided in part by the government, I strongly suspect that this number is an accounting exercise more than anything else.

There's also the profits made by the trains leasing companies as many TOCs lease their rolling stock

> There is competition to rail if the price was too high -- driving, coaches, flying, not traveling

There's no real competition for most commuters around London at least. The trade-off is rather with the cost of housing.

It makes perfect sense to complain about overcrowding for that reason and because pay a lot of money for their tickets, indeed.

People commute by train because it's the least bad option and/or the only viable option. That does not mean that it's good or that there is real competition.

If the number of trips has been increasing I think that the main drivers are the concentration of jobs within London and the booming housing costs: People live further and further away and have to commute by trains.
Really? I know many people who earned their livelihood with wordpress... Did you made anything better?
The Long Walk of the Situationist International
Also, 48v for 'phantom power' on condenser mics in studio audio production has been around for decades.
When it comes to "unpopular" ideas and peoples, fear and moral superiority justifies:

censorship -> incarceration -> extermination

The path is plausible and logical if each previous step fails.
And heck, the ends (protecting people from hate) justify the means,
so why fret over it? I mean, what could go wrong?
> dead end rural lifestyle

Sorry, but who's growing your food?
Great read. I believe that's an issue not just with container security scanners, but with automated security in general.

One example: I enabled AWS Security Hub to have some sort of security score on my account and although it found a few interesting, it generates way too much noise to be usable.

Microsoft also has this sort of security score for Azure and Office 365 environments and they have the same issues.
In that case entire country is fringe because I've seen cast discrimination everywhere. Including metro cities.
It's clear from the comments that a lot of people don't have the problem that this product solves. But I certainly do. I spend most hours of most of my days in meetings. This looks like a much better solution than my browser calendar. I would estimate that there are hundreds of thousands of people in roles with very high meeting overhead for whom this solves a big pain point.
And if your data is truly contiguous and its struct of arrays instead of the other way around, SIMD becomes much more usable.
Any time you see an advertisement for a product whose primary function is "hey give us your super secret stuff, we totally won't do anything evil with it," you should assume that the vendor is going to do something evil with it.
Well, almost all of the work of Greek philosophers and their science and philosophy achievements were in Catholic Europe completely forgotten and actively censored for centuries. Fantastic Roman infrastructure, aqueducts, running water inside the multi-storey buildings and huge sewage systems were completely neglected - people completely lost the Antic ideas of hygiene - resulting in horrible sanitary conditions as newly built cities lacked any sanitary infrastructure. Even rich people lived like that, almost no castle even after the middle age had a sewage system, nor running water. They used wells for water and dropped sewage in front of houses, on the streets directly.

Now, they didn't return to stone age of course, practical tools and technologies that were a part of common knowledge remained in use, but many advanced engineering skills were lost. Also the society drastically changed, it fell into religious fanaticism and extreme conservatism - which is the main reason why it was called the dark age actually.
Treason is kind of a stretch.

A real coup involves the military and people actually taking over the role of government. We were not even close to that. January 6th was incredibly embarrassing, but it wasn't even a proper attempt at overthrowing the government.

The Capitol riots were basically just the kind of thing that happens when you have too many morons in the same place at the same time. Sort of a critical mass of idiocy.
Well, GP did say that was the top end of their hourly rate, so maybe not that much, but I think it's safe to say they're very solidly into six figures. Under those circumstances the calculus does no doubt change/ I don't think it reflects the reality experienced by the majority of people with less otherworldly remuneration, families, etc.
The weird problem with this strategy is that there's a number of people who become more conservative, for whatever reason, as they get older.

The generation that comprised the hippies are now in their 80s. Mitch McConnell would have been in that generation.

So while the current crop of conservatives are dying off, they are being replaced by new members.
Interesting idea, I have always wondered who could be supply side partner for startups that are trying to innovate in lending businesses.

Who is the supply side of the capital that's being lent out?
Where do you get the figure on your home page "less than 5% of the lithium-ion batteries used in electric vehicles are recycled"?

Edit: Reading that back standalone, I think it doesn't mean what it sounds like it means in context. I think you are saying less than 5% of the batteries going in to new cars are recycled, not less than 5% of the batteries coming out of old cars are recycled.

The latter is the valid comparison for your "Our materials are recyclable", and I suspect it's not the case. The car industry is very good at recycling in general, and the main reason more electric car batteries aren't being recycled is that they haven't reached end of life yet - they are often lasting longer than expected.

Normal car breakers are able to recover more than 90% of the materials that went in to making the original cars. Electric car batteries should be able to easily achieve those sorts of numbers.
I don't see that he's trying to own the libs. He points out what problems he sees with aspects of modernity- we all do that- in a comedic way, in the style of internet subculture, and advocates seperation from that modernity and its problems. Hence moving out of cities to small towns, moving off of big tech platforms and having your own personal website, growing and cooking your own food, etc. In general, becoming progressively more independent from macroscopic society.

This stickman guy seems to be the opposite of that. Hanging around in cities, headbutting with antifa losers, makes you just as much of a loser. None of it's real, it's all performative- it's all cringe, a waste of time, a distraction when you could be building something better. LS definitely wouldn't consider stickman 'based'.

I don't see the edginess, either. Something edgy is trying to be transgressive and out there, but LS's thumbnails and titles are just standard /g/ vernacular. To his audience- internet-goers who are used to /g/-style vernacular- there's nothing edgy or transgressive about the language/imagery used, it's just standard memes.
Speaking your subculture's language to your subculture isn't edgy. Black rappers don't say digger to offend white suburban moms, LS isn't going to left-wing people's facebook/twitter pages and posting soyboy memes at them; he's mocking those people in his own space, among his subculture. Of course they can be edgy and offensive to you, but you're the suburban white woman in this scenario.

I certainly don't think anyone should aspire to being 'a nice linux nerd', or to go out of their way to appease suburban white moms' overactive sensitivities and imaginations, for that matter. That would be very cringe and bluepilled, so to speak.
Really hoping that the RPi 5 has this. Combined with presumably improved overall performance, it would be a game changer. I don't think it makes sense to fork a 'pro model'. Probably cheaper overall to just add it the regular model.
I went through YC S20 and it's been amazing. It opened up a whole new world to me that I previously didn't have access to. I come from a poor, immigrant family with no fancy college background. I'm located in a non-tech hub city. This was my first startup and getting to partake in YC essentially put me and my company on the map. The internal network itself is also fantastic and the value of having group partners (mine were founders of several companies that you all used) who have experience.

I think a lot of people miss the fact that YC at the end of the day doesn't care about the actual idea / product but if there is a way it could be used by millions and if there is a path from this widget to something bigger. It's just the MVP and seems to be pretty successful considering it has paying users already. At the end of the day, YC funds people, not companies. If they think you have some potential and can prove it with a little bit of traction or some background or having the right team. There were numerous companies in our batch that pivoted once they started the batch.
This article shows an interesting contrast between how different types of scanning tools address the issue of valid CVEs for which there are no updates.

The question is "do you want to know about a valid CVE if there's no patch available"?

For high security environments, the answer might be yes (you want to evaluate individual patches to see if they impact your application)

For many environments the answer is likely (as is the case with OP) no, you only want to know about issues for which there is an updated package available.

Interestingly (well to me :) ) more established scanning tools (e.g. Tenable Nessus) default to "no" on this question and container scanning tools mostly default to "yes". (I did an example comparison https://raesene.github.io/blog/2020/11/22/When_Is_A_Vulnerab...)

The important part is that your organization makes an informed choice about which works best for them.

As a sidenote there are also differences in severities and how vulnerabilities are counted (e.g. if you have multiple issues in a package do you count each one or just count once for that package) which can lead to different numbers of issues being reported by different scanners. https://raesene.github.io/blog/2020/06/21/Container_Vulnerab...
Investing in a calendar widget is not a “crazy idea nobody will bet on”

This is something that’s easily bootstrapped and which can be run as a lifestyle business at best.
Great, I'm hoping you'll sign up for my upcoming weather widget which tells you the weather in a single location. It's only $30 a month, and it will save you time as you will no longer have to use any other weather widget.

At some point in the future I plan on offering additional locations (at a compellingly low per location monthly service fee TBD).
As someone who worked on memory allocators in a past life: cosign. Size-class based allocation for small objects is how modern memory allocators have worked for a long time now. I'm genuinely baffled by how many people think that the bump-pointer allocation for same-sized objects is unique to garbage collection.
If every comment has to be suffixed with “for me” or “IMO”, it would be quite tedious to read. In most cases it’s clear. In cases like this, it could also be that the writer isn’t earning a six figure USD income or is in a country where even a $10 here and a $10 there add up relative to one’s income.

It’s also very easy to say that X is most valuable and Y is nothing when you have very limited X and have a lot of Y.
When you say LATAM, which countries are currently supported?

This sounds awfully familiar to how credit cards work in Brazil, where merchants can let you divide payments in an arbitrary number of monthly installments. For example Amazon let's you divide up to 10 times, some brick and mortar stores let you parcel up even longer.
The risk of a failure is _sometimes_ high and this will lead to something called alert fatigue: https://en.wikipedia.org/wiki/Alarm_fatigue
Wow, YC truly is the leader for investing in innovative companies. This is disruptive as hell!
Update - I see the similar Firefox Send was closed down due to people putting iffy stuff (phishing, malware) in the messages.
Twitter's selling point was never the application, it's the network. This product has no network, it's just a very basic app.
Let's not forget that approximately 20% of all UK COVID cases were caught in hospital. Not exactly the envy of the world.

FWIW, I think we should keep the NHS and have it free at point of use. However, I don't really care how that service is provided - government employees, private, whatever - as long as the service is good.
Don't pay it any mind. There is a certain class of posts where certain opinions and moods of HN become apparent.
Isn't speed limit set into the "adaptive" part of cruising?
Digital WTF Book (2019)
Do YOU? Because I did farm chores growing up and the stuff you're tasked with doing is never particularly dangerous. Dirt and grime washed off just fine and it was good exercise and time outdoors.
My opinion on pricing for software is pretty straightforward:

If its a local app, cloud/sync/whatever "anything" should be optional/opt-in. Developers should charge an upfront fee for a point-in-time of that release, bug fixes are included for N years, but feature releases are available as an annual/whatever upgrade.

If cloud/sync/whatever makes sense for an app, then that should be available as a separate, monthly service fee. If it makes sense, then the developer can "bundle" both that monthly fee and the annual/whatever feature upgrade fee into a single subscription.

That unified subscription is what most apps do, but its important that it be separate and opt-in, while giving customers a way to pay you otherwise. That way, your revenue is aligned with customer happiness. I think back to the 1Password transition to the subscription model, where they left tons of customers behind on the non-sync product without giving them a way to pay; now, their revenue is not aligned with the success & happiness of those customers. They're still customers! Yeah, they're not paying you every month. They'll probably pay you again in the future. But, oh no, they can't fit into your MRR metrics that you need to communicate to investors; that's your problem, but you're making it the customer's problem, which means you're actually anti-customer.

If we're speaking of a website, then fundamentally, you've willfully unaligned your business model with any ability to price it transactionally. Maybe that's fine; if I think about something like Slack, that app makes zero sense to price transactionally, it's gonna be monthly, so I can't complain about that business model. But, Notion [1] is an example of an app which should have a transactional model; not everyone wants sync.

Everything is connected to Money. And, in software, I think the biggest reason why customers have began noticing how much slower and less reliable software has become is literally because of Money; its because every app now needs to be a web service. Because your app is a web service, it has to live on the web. It gets served to customers by underpowered AWS m5.large instances; did you know that your customer's iPhone is more performant than an m5-tier AWS instance? It has to travel a thousand miles over the internet. The data model lives in a database; your customer has a 5Gbps SSD hardwired to the PCI-E bus of their CPU, but instead, by putting the data In The Cloud, you're making sixteen network hops just to query for something.

None of this is better. Some of it is necessary, for some product domains, but don't fool yourself into thinking its better.

[1] https://notion.so
AFAIK the reason it's different is that Debian/Ubuntu publish lists of unpatched CVEs but I don't believe that RH do.

What scanners are often doing is pulling the published Sec-db for a distribution and using that as their data source. So as a result they can only report on things that are in the data source.