skysight-inc/HackerNews huggingface dataset:
With an SBOM, attackers gain an advantage, but it is highly concentrated in that attacker. Defenders also gain, the gain is highly dispersed amongst defenders, but each gains ~ the negative value of the attacker's gain.

Put another way: there are far more defenders than attackers. When something helps both attackers and defenders, the gains of defenders outweigh gains of attackers.
When times become hard, people turn to drugs, depression and religion. The wave will die down with the virus.
What Is Good Software?
It’s a terrible point that the graphic doesn’t support in the slightest.

But to answer your question: IC engines are energetically inefficient - at best a large fraction of the input potential energy escapes as heat, and actual car engines are worse than ideal.
Honestly, it's kept me from contributing to packages, too. I have no problem with the outcome, my patch being "owned" by the project -- that would be my intention by contributing.

I just have a strong dislike of bureaucracy, form-filling, and being "on file" somewhere.
Having kids at 22 is a significant setback for most people, at least in America. Yes, not as bad as child brides, but it's certainly not the "easy path."
I am neither in the U.S. nor a student, not even an extrovert - and I still feel the effects of our local lockdown on my mental stability. So does my wife, who is usually more resilient than I am.

This will have a lot of subtle consequences down the line.
Madvr on Windows for video playback supports both windowed hardware overlay and fullscreen exclusive mode as options so that is one application which exists.
The US federal gov’t spends about 3x as much on those over the age of 65 than it does those under the age of 18 (including transfer payments to parents of those children)[0].

Personally, I think that should be flipped, but kid’s don’t vote.

[0]https://www.cbo.gov/sites/default/files/cbofiles/ftpdocs/23x...
This is neither new nor related to high costs of college.

My parents told me of very similar setups when they were growing up in the 1960s USSR.

A roommate in the mid-2000s did similar work as a side hustle.

The actual practice is surely as old as university credentials.
Please, say more.
Song publishing seems like a bad example here — it’s insanely easy to make that arrangement in practice because there is an existing real world payment / licensing structure for exactly that transaction.
Christie's commissioned the Beeple work to sell as an NFT. Why would an auction house do that?

There is more to it than speculation. There is a con where something went on. Maybe the auction house commissioned the money to pay for it and had a 69.3 million fee.

It saddens me that journalists have chosen not to follow the money and ask the questions.
Assuming that the license is linked to MS/live account and not local on machine. Though it may still activate if it was present on a machine before.
Thankfully the author does not review academic papers anymore!
Reproducible builds would've had a sporting chance of defeating the solarwinds attack, because the injection point was on particular build servers that were reached through other vectors. If a second party performs a build to verify it, the attacker now has ~2x the cost to conceal their attack.
Ethernet and IP Networking 101 (Heavily Illustrated)
FSD works, it's not better than humans yet. Needs more training.
This post is a better summary IMO https://www.reddit.com/r/programming/comments/hhlvqq/its_pro...
There is a valid point here.

I keep a float at all times so when there is a significant drop in a stock, I can buy more in order to narrow any losses, which of course makes it easier to profit if/when the stock rebounds. It's done me quite well with the shakiness of the market over the past year. So it feels like good trading, and not so much like a gamble.

The one that backfired doing this was CannTrust because of their far-too-many scandals. They took a hit every time a new level of their scandal was exposed, turning them into a penny stock that QTrade won't even let me sell if I wanted to.

So even when you think you aren't gambling, you still are. A greed scandal (CannTrust was growing legal medical weed, supplemented by a whole lot of illegal grow op space and other shady dealings) is all it takes to change the status.
I love this, especially the comment on DIP. We went way overboard with dependency injection implementations.
> optometrist was wearing arcteryx gear during my exam

Arcteryx pieces feel great on, the same way avocados taste great in your mouth. And just like you'd likely be misleading people by using an avocado as an example of the average fruit, you are misleading people by using Arcteryx to stand in for technical outdoorwear.

Hell, that holds even if your optometrist was wearing a fucking rain shell in the office. Compare:

1. jacket made of mostly straight, rectangular pieces of material sewn together, then taped at the seams (which can rub against your skin) in order to make it waterproof, probably with long arms so it doesn't ride up when you raise yours (e.g., you end up with wrinkly, noisy sleeves)

2. jacket with fused seams, made of pieces that are fabricated to fit together and follow the contour of the human body, with thicker material fused only in those areas that were measured to be high abrasion

Number 2 is obviously the wrong garment to wear inside a climate controlled building. But it feels so much better than your run-of-the-mill slicker that I could see someone in and out of a building deciding to simply leave it on for a bit.

In other words, the technical specs responsible for those differences match "real quality reasons" for someone to decide to wear it for longer periods, even in conditions for which the garment wasn't designed.

And if it wasn't a rain shell, it's likely the piece was comfortable, breathable, didn't look like the average piece of outdoorwear, and was perfectly fitting for the conditions of an optometry office. (I own probably four of their Delta LT fullzips which are so light I sometimes forget to stop wearing them in the early summer.)
I got "This is not available to you" or something like that, which I've never seen before. A few refreshes later (I also don't have a twitter) it worked though.
Surely this is a bit of a tautology - like, 'when viruses are endemic, people will suffer from breathing dificulties, pneumonia, low oxygen count and in some cases death'. The idea is, like with COVID, we do something about it. Also no one turns to depression or drug abuse any more than they turn to being admitted to an ICU.
The scale matters when classes are graded on a curve. If a few students cheat the score distribution doesn't change too much, if a significant fraction of students cheat it really hurts those who don't.
That’s just the tip of the iceberg too. A quick summary of the lockdown harms:

missed hospital visits for heart attacks and cancer screening, cancelled childhood vaccinations, school closures, child and spousal abuse, kids growing up without seeing facial expressions on others, pain from postponed elective (including dental) procedures, food shortages in the third world (and even in developed countries), the highest number of overdose deaths ever recorded in the US, massive economic damage, closed gyms and sports, suicide & mental illness
Yes, I believe that's the last one. IIRC there's another important one that expires like two months before.
I'm not sold that borderless fullscreen matches it. I can see the difference in video panning between exclusive fullscreen and borderless. Granted, it is not a huge difference, but it does exist. At the end of the day we continue become further and further abstracted from the hardware. Input lag on the display, input lag in the device, etc.
If Clang server crashes, surely that means some bug in it was triggered? lsp-mode only converses with it over JSON, after all.

Clang's developers might appreciate the corresponding bug reports.
I was under the impression that grass is actually much more efficient at turning CO2 + sunlight into biomass than trees.

But I am not completely sure, too much misinformation circulates.
Amazon aside, I see the $15 argument more about making minimum wage, a concept we’re already engaged at a policy level, reflect reality. IMO if we’re going to have minimum wage in the US then we need to make it work for its intended purpose of requiring companies to pay people a living wage for their labor. If that were the goal we’d adjust minimum wage for inflation and cost of living since its inception and then require it to adjust every year as the value of the dollar does. In its current form it is more of an excuse for companies pay below a living wage.
I’m going to go ahead and say it. Usb-c is a disaster. The promise of a cable that is universal ended up being a cable that looks the same as every other but u have no idea if it’s the right cable. Maybe in the next 10 years it will be fixed but from my POV this has not been a success or the panacea it was made out to be. You can actually brick stuff using the wrong usb-c cable and you will have no clue until it’s too late.
> The question is whether Microsoft's products add real value to their customers.

I'm pretty sure Outlook convincing me not to read corporate mail was not of value to my employer (Microsoft's customer). At the very least, it added confusion and delay when other employees expected me to see things they emailed. Perhaps letting me focus on other stuff was of benefit to the employer, but that's tricky to measure; it's hard to imagine employers want to use a terrible email system to subtly discourage email use, there are more effective ways.
It's interesting how Mother Jones spins a fairly minor polling difference into a whole narrative about "Black Parents [Not] Joining the Push to Reopen Schools." First, they clearly are. According to the CDC study cited by the article, 46% of Black parents agreed that schools should reopen in the fall: https://www.cdc.gov/mmwr/volumes/69/wr/mm6949a2.htm?s_cid=mm....

The article spins out a Black-white difference on this measure because 62% of white parents think schools should reopen in the fall. That modest difference can almost certainly be explained by differences in where people live: Black people are more likely to live in urban areas, where density can feed concerns about easier spread of the disease. They are also more likely to live in Democratic jurisdictions, especially cities, where government officials have been more cautious and have urged more caution about reopening.

As a Marylander, I'm not surprised that people in a neighborhood within Baltimore City limits is skeptical about school reopening. The white people up there are also skeptical about reopening! Meanwhile here in exurban Anne Arundel county, people are much more eager about school reopening. We had protests this past summer in front of the county health office (which is by my house) urging the county to reopen high school sports. Black parents were at least as well represented at these protests as they are in the county as a whole (about 15-20%).
>>none (!) have been able to properly formulate this (even after I'm hinting that it's not only about code deduplication) and 75-90% believe it's all about code deduplication

Well, duplicate code is the typical manifestation, as the sibling comment [1] relates:

>>> if I'm saying "there's a button here" in my HTML and in my JS and in my CSS, then I'm saying the same thing in three places (even though they look nothing alike) and maybe I should find a way to consolidate.

"and maybe" it's just otherwise hard to get the point across, as you've discovered. Isomorphisms are easier to distinguish (and validate!) versus homeomorphisms, but unnecessary pedantry usually results in MEGO. We shouldn't expect senior developers to automatically embody the virtues of mathematicians or philosopher-kings...

yeah, I am nitpicking worse, but after 40+ years in the industry and suffering through tens of thousands of marginally relevant distinctions in "gotcha" interview questions, I am without shame even though my head is nodding in acknowledgment of your points...

[1] oops, I meant https://news.ycombinator.com/item?id=26532424
> might be able to do purchasing decisions based on used components, their CVE/etc. history, or sheer amount (in less being generally better, unless there is a reason to suspect the vendor e.g. rolled their own TLS instead of using one of the usual suspects).

Counting CVEs is a poor indicator. It's not a pure function of how many vulnerabilities exist, it's a function of how many exist, are found and reported. Those latter two components have a strongly economic nature. It's cheaper to not search and report than be fastidious.

If anything, more CVE reports from a given company is a positive signal that they give a damn.

(There's also the problem that CVSSv3 is not a very sound measurement of risk. It's sorta-kinda just made up without derivation from a sound theoretical foundation, nor is it based on data about actual impacts. The scores don't move smoothly as a continuous function but jump around a fair amount. It's very easy to swing between widely-separated named categories with a bit of argumentation.)
:-) FWIW, through my career i changed my views on this topic.

I started off loving dynamic, then i spent years preferring static. Nowadays i don’t actually have too strong an opinion on types (despite what this thread might suggest!), both approaches have value.

These days i place value in something else - less lines of code. Expressive languages like Python & Clojure, these make a lot of sense to me because in my experience nothing correlates stronger with bugs than too many lines of code. By this logic i should be writing in APL but i suspect that goes too far the other direction!
I think you flipped the numbers my dude. The federal government spent "about $615 billion—on transfer payments and services for people age 65 or older" in 2000, and "Federal spending on children in 2000 will total about $148 billion, or $175 billion if payments to the children’s parents are included"
Not accurate in my community and no data. It is an opinion piece extrapolating from a few examples.
// I recently discovered I can click one tab - then hold shift and select a group - and then move those to a new browser window - then ctrl-shift-D to save all into a bookmarks folder name. //

You can just select tabs then right click on a tab to bookmark all into a folder. No need for the new window stuff.
You're not ablating anything there. What happens when Train Infinity (Train 150K) doubles in size (to Train Infinity_2 -> 300K)? What happens when you add an unseen class? These are real-world conditions that hamper existing theoretical estimation of the generalization gap-- the "ideal world" always gets larger. In Bengio's group paper (Predicting the Generalization Gap https://arxiv.org/pdf/1810.00113.pdf ) they actually do these sorts of ablations.

Also, you use K (thousands) and $K$ (latex K) interchangeably; it's really hard to decipher is K is a variable or what you mean.
I don't know what the " the types all the way down hole" is, but you sure seem to be ascribing a lot of views to me which I don't hold. I also don't know what this tangent into unit testing strategies has to do with any of the prior points about type systems.
“think of the children” has always been a lie, though. Or at best a surface level truth. When the rubber hits the road (i.e. when it comes to spending money) the US as a country doesn’t care about things like early childhood education all that much.

In many ways the pandemic response was in line with the norm: rich kids do just fine, poorer kids are mostly ignored.
The young have little/no independent earning capacity. The investment we put in the young has a much longer time to accrue positive personal, social and economic benefits. Positive interventions in youth poverty and social stability reduce lifelong skill and mental health deficits that promote adult health, wellness and independence.
It's definitely possible in principle with LSP in Emacs I think at the very least if I'm going to put time in the future into getting this working well in Emacs then it makes sense to take a break and see what the cutting edge is like in a mainstream thing like VS Code, so I know what we're really aiming for in Emacs.
Pi400 is a fun thing. How much more powerful is the Pi400?
I don't understand - are you implying that the act of deciding to have a long lockdown necessitates that the decision makers do not care about children, or are there specifics you are leaving unsaid?
Almost anything can be open to (mis)interpretation, whether it is an HN comment or an article in a weekly city newspaper. In the context of the article,^1 I interpreted this quote as a summary of the author's experience working at Microsoft while Gates was CEO because it was, for him, "[his] most memorable moment" of the years he spent working there.

1. The interpretation I choose for this article may not be the same as every other reader. Correctly or incorrectly, I believe that this company did not need to do much in order to continue to generate revenue once the Windows monopoly was established. The NYT article perhaps supports this idea. Microsoft could afford to be behind the curve on innovation, as the author suggests they were in the article. Rather than compete, Gates could simply focus on stifling any competition. Aside from its focus on thwarting competitors by any means necessary, Microsoft could afford to be wasteful. Much of the time spent and work done by employees like the author could very well be irrelevant to the continued success of the company, with no material effect. Time could be "wasted", so long as competition was blocked.

The other point is that there may be some folks who would not want to work for a company with a CEO who behaves like the one in the incident described. Sometimes these are clues about the company culture. Thus, this quote might have meaning to some people, but not to others who are normalised to this type of behaviour.
I'm assuming you mean the US spends 33% as much on those under 18 as it does on those over 65 (otherwise your comment about voting makes no sense)? If so, it seem sensible for the government to spend more on the elderly, simply because they cost most and there is nobody else to pay for it. People under 18 typically have one or two parents to care for them. Older people don't have parents and don't necessarily have family to pay for their housing, food, etc. Then you also have to factor in that healthcare costs for the elderly are necessarily more expensive.

Not saying kids don't deserve to be well-cared for. I was a welfare kid and I'm glad there were welfare programs. Just saying I think we'll all be glad we can also get some help when we're over 65, especially if we can't count on our family (I have no siblings and may not have children).
This is very close to what I had found a need for today - now if only I had a (self-hosted)-wordpress-user-accounts bridge for the login -

and auto-prune to delete all messages after X number of hours - a new project could happen quickly with this.
The data in the economist article is for both forklift drivers and pickers. It seems fairly clear that even lower skilled warehouse workers are being paid less than they were before Amazon entered their market.

The fact that automation is both reducing the number and quality of jobs probably merits discussion as well. We simply don't have anything in place to ensure automation doesn't ruin people's standard of living.
Doxygen Awesome: Modern Doxygen Theme
Gotta disagree with you there. 80s and 90s domestics were a shame.
> I think the idea is that a lot of these come with publishing contracts built in so the artist receives a royalty if the token changes hands and the current owner has the rights to license the art.

I've not seen a single NFT that comes with an associated copyright license to the underlying work.

Additionally, the artist only receives a royalty if the token is sold on these marketplaces that enforce the royalty. There's no such thing preventing a private sale that doesn't pay it.
I have a coworker that never went to the ICU but can no longer taste or smell. Their family was never at a high risk and only felt normally sick. None the less the damage is done. No one wants to be maimed by this. Claiming “I’m not high risk (of death)” does not mean there is no risk of damage.

We all need to do our part to stop the spread of the virus.
this may surprise you, but art precedes bureaucratic patronage networks, and continues to flourish in their absence
I think the answer is no there's heathy competition between Eglot and lsp-mode. I'm not aware of others yet personally.
I am building a UI builder.

https://news.ycombinator.com/item?id=26532316
There’s no trade secret anywhere in US medicine? I can just walk in the factory and get a tour?
Couldn't it be possible to ask the user to allow certain directories or files? It might be kind of annoying but it would be safer.

Also, it could integrate with the open file dialog and only allow the application to access files selected by the user, and nothing else. That would be tough because the developer would have to integrate with flatpak APIs, and I don't think flatpak is big enough for developers to care. But that would be ideal since it's safe but also not annoying.
>The idea that two wildly different people with different points of view can't even exist in the same social network is nonsense

I agree. However I do see this happening. Its kinda crazy. I remember being on the internet as a kid (probably on sites I had no business being on lol) and people would get into heated arguments but I don't think it ever resulted in "I hate you, I'm going to try to get you banned via politics". I was around animation and creative type forums and people would go at each others throats but then like you say, bond over talking about a new software tool or animation lol.
Well, the 0s are black and the 1s are white, except when it is the other way around.
Indeed, I did. Edited to avoid arguing against my own position.
There are many things you get for texts, not just degrees. Academic degrees are just the ones that are regulated, so it's against the law to get them with the help of a ghostwriter.

But you get prestige and awards on "the free market" for all kinds of publications.
Maybe it will. But depression and drug abuse can have very long-lasting effects. For example losing a job or becoming homeless. It can be very hard to recover from that.
A thousand times this!

Principles, heuristics, "best practices," and just generally good ideas are not absolute truth. SOLID is like hand washing. Please do it! Unless you have a good reason not to.

The root of the "disprove a heuristic by a single counterexample" problem is a misunderstanding of logic. A heuristic is not a statement that universally all hands must always be washed. It is a milder claim that generally handwashing has proved useful via inductive means, so you should probably wash your hands if you want to minimize your risk.

Any expert in a given field should know times when not washing hands has been justified. But by the same token, those people know that they should still recommend hand washing to the general public because they won't know when it's not justified.

Wash your hands, please.
> Internal traffic among 4 million people is a much easier problem than traffic among a continent of 800 million people.

Can you fill in the details of how exactly it is easier?

> Quarantining between shipments would mean drivers are mostly idle, driving the cost of shipping through the roof.

Well, if they don't need to sleep between shipments, I guess they can drive back directly and get their supplies and food at home. I wasn't suggesting a full two-week quarantine if they don't intend to have any contact with locals anyway, just staying for the night isolated from anyone they could potentially infect.