skysight-inc/HackerNews huggingface dataset:
> It is a form of vendor lock-in, and avoiding vendor lock-in is one popular motivation for using open source.

Likely also a false one. For example, if you use WordPress guess who your vendor is? WordPress. More vexing, if you use Kubernetes provided by a cloud provider guess who your vendor is? The cloud provider, because of all those non-free doodads they put into their managed service.

It is possible for a company like AWS to continue to offer a managed service for things like elastic, but I suspect elastic wants the nature of the agreement to change; which as far as I can tell we're not privy to.
Now I just wish that I had a project that I could do this for. Or that I was the kind of person who can keep up this type of work for so many years.
I get up an hour or so early on most days to work on a personal project before my normal dev job.

I find it's really helped my mental health, especially when work can be a bit frustrating (in entirely normal ways)
After Rolling Out Blue Carpet, Biden Begs Mexico to Stop Migrants
Well, we certainly didnt co-evolve to be fireproof in all this time, so what adaptation to fire do you suggest we did evolve?

Its probably to do with cooked food, not vision - which is already co-evolved with the Sun, for when we are active/hunting/etc.
> A daylight colored bulbs are probably not doing our night vision any favors

More importantly, colour temperature >3200K screw up the circadian rhythms of humans and animals:

* https://www.darksky.org/our-work/lighting/lighting-for-indus...

* https://spectrum.ieee.org/green-tech/conservation/led-street...
This is some fantastic debugging. I love war stories like this! They give me confidence that the world is full of mere mortals like myself, and we can do great things nonetheless.
Working 2 hours a day when nobody is bothering you and you have peace of mind to concentrate is tremendously valuable.

Additionally doing that for 23 years, you can get done a lot of work.
If law was as simple as reading what's written down, then what are all the lawyers and courts for. There is a lot of interpretation going on.

But really I was referring to the process of how the laws are formed in the first place. A lot of the time they start out under-specified, and as abuses emerge we make more concrete laws using our new understanding. Of course the latter part usually leads to a lot of discussion and resistance because of the collateral damage any new law causes by being slightly broader than necessary. Which is a major reason many industries self-regulate in the attempt to make explicit laws unnecessary.
How about any hobby projects from Kaggle, advent of code or something like that? I find those things very refreshing after my mundane day-job.
>'ve used it to do support work in Antarctica

That should be a whole post by itself.
SEC Publishes VanEck’s Bitcoin ETF Application
What rust would do for this particular situation is make it painful to share an object like this across threads and make it obvious that such a share is happening. That wouldn't prevent this problem, but it would make it harder to stumble into.
I like this and submitted my own personal blog. Out of curiosity, are the blogs curated in any way to prevent the site from being overrun by blogspam?

Some feedback, I think adding pagination to the "all" page would be nice, maybe even an alphabetic index.
It already jumped to humans. Mad cow disease infects humans as well.

The difference in infection levels is that mad cow disease is transmitted through ingestion, so the usual avenue for human-to-human transmission is cannibalism (see e.g. the outbreak of Kuru that resulted from ritual funerary cannibalism), which is rare. Animal-to-animal cannibalism in animal feed is more common.
The 'eagle shark' that glided through ancient seas
>> Also, it's sex not gender people are referring to.

> I don't think so.

You don't think lady in 'mail-lady' refers to woman?

> why would you describe someone as "the mail carrier with a vagina"?

Rude. I never would. But if I did it would be redundant after calling her a woman. What do you mean?

But maybe I'm trying to help my brother find a partner so I do want to point out available women, and that does imply people with vaginas. Again, so, and what do you think would be a more efficient way to do this?
100% agree, it's a win-win for everyone!

Filipino culture is also very friendly and most VAs speak almost fluent English.
Keep in mind the threshold is much lower when playing an instrument is involved. For electric guitar, for example, I've found anything above 13ms is perceptible and makes playing in time more difficult.

This paper dives further into it more than I can anecdotally: https://online.ucpress.edu/mp/article-abstract/36/1/109/9206...
Sounds like a good opportunity for an IPv6-only version at a discount/lower minimum. Many people (Google says 45% in the US) don't need servers to have v4 these days.
Pentax DLSR have this feature too. The same motors that are used to control the sensor and prevent camera shake are used to offset the sensor slightly while multiple images are taken
It's the Doomsday Argument and I can see how you're applying the same logic.

Doesn't this logic also imply that solipsism is true? 1 observer is less than 7 billion observers and therefore more likely under the logic of the Doomsday argument.
Would love to see a tesla valve
But now we need a new term to mean what "open-source" has meant for two decades, just because for some reason we wanted to be inclusive of licenses where the source is viewable but not open for use. And once we've redefined it, we've rendered all discussion of open-source deceptive for the period where it had its traditional meaning. I don't see any benefit to this inclusion.
Massive problem, eh?
Especially when those 2 hours are enough to get the day workload done:)
Because he might like $1M
With regards to "main" vs "master" I honestly don't care. It might make some people feel better, and it might not. Should I care, and comment here about it?

Why?
So Google track people for years in (to some people anyway) an ethically questionable way, and the thing the DOJ don't like is them trying to stop?
It's a bit more complicated than that.

Google's system is optional for both the content creator and the rightsholder. If the rightsholder would prefer to use the DMCA, they obviously can. If the content creator would prefer the rightsholder use the DMCA, they can dispute+appeal which will force the rightsholder to file a DMCA takedown if they want to continue with their claim.

Unfortunately there's often a lot of confusion about the dispute+appeals process, since it's a multi-step process and there's a ton of people incorrectly conflating disputes with appeals, but the important takeaway is that a content creator can choose to force a DMCA takedown via an appeal (which happens after a rejected dispute).

The reason content creators rarely choose to go the route of forcing a DMCA takedown is because:

1) the only remedy for a DMCA takedown is a removal of the entire video, which is often less preferable than the remedies offered by the google process (ex: replacing/muting the audio in the claimed section, monetization split, restrictions in only some geographical regions)

2) the DMCA repeat infringers clause requires that companies terminate relationships with people that repeatedly get DMCA takedowns. This manifests on YouTube as a 3-strikes-and-your-channel-is-deleted policy that only applies to DMCA takedowns, but not copyright claims that come through the optional google process.

3) There's some scary warnings about how particularly vindictive rightsholders react to this by choosing to file a lawsuit against the creator in addition to filing the DMCA takedown
Fair point. I guess I was just surprised this made it to the front page of HN
Thank you for taking the time to reply! :)
Thanks mate, really appreciate the encouragement from someone who's made it.
I tried reinstalling OSX, now it seems fine! ¯\_(ツ)_/¯
My email is r@pex.com

The way this works is that you send all content through us via our SDK which generates fingerprints (so content doesn’t exchange hands). If the rightsholder is registered with us (it’s free), then we can take care of everything from payments, ADR (alternate dispute resolution), reporting, ...

If the rightsholder uploads their own content to the platform, they are able to pre-license their content in our system (different word for allowlist, but a bit more nuanced as these lists run into GDPR issues).

Rightsholders are also free to have direct relationships with platforms while we run the backend. We don’t require any particular licensing to be done through us.

Hopefully this makes sense.
URE is a read error, not a drive failure. So yes bigger disk increases chance of silent and loud UREs, but with URE rate 1e-15, for RAID1 disks up to 40TB are usable (you can redo the rebuild if it fails, or simply ignore the loss of data in many cases). If we ever get to 100TB drives, their URE rate will probably go down as well. This and low demand will probably make them quite expensive.
I know, the answer to the climate toll of eating meat is vegetarianism. But I like to see this more as a question of harm reduction - hundreds of millions of people will not give up meat tomorrow.
It's mad cow and I don't believe that the US has had only 6 cases of mad cow with the insane way cattle get treated.

They just call them "downers" and terminate them and some most likely end up in the food supply.
> How much is a substantial fraction and who determines that

I determine that and I say +80% , you dont get weasel out of this with useless semantic distinctions.

> Is it a simple fraction

As oppose to a "complex" one?

> Is it something governments should regulate or should consumers vote with their wallets?

The company owners should be ethical enough to pay that.

Do you use this kind of sophistry to justify your compensation or what you charge for your product or service? I highly suspect that is not the case. Easy peasy to play Aristotle when it is about poor working-people living money.
No. The evidence against the rate being 1 in 2.3 million is that the total number of cases divided by the total number of people vaccinated is a higher rate.

You can't take a subset of the population, find that that subset is out of step with the rate in the total population, and then conclude that the rate in the total population is wrong. The number of cases isn't necessarily evenly distributed, and your model is one that applies to independent random events. But the fact that a case occurred in Norway rather than in another country doesn't dramatically change the overall rate.
I wanted to add Violet Evergarden to one of the colors, but there are already 22 Violet Evergardens. Lol.
There is a very similar tool called Cython that is used by scikitlearn. Coincidentally Cython also solves a lot of python 2/3 problems since it compiles for both.
Distributed tracing with a small sample size or small persistence duration?
This is plain false: tivoization is the best example.
We do try and pay above market rate and provide benefits to our VAs. In general, our philosophy is to treat them like long-term employees, rather than as short-term contractors.

We have had 0% attrition rate and have been told by our VAs that working for us has been the best job they've ever had!
Ars Technica had a more in-depth follow up, "FreeBSD kernel-mode WireGuard moves forward out-of-tree" [0], and essentially it's just moving into Donenfield's own repository for maturation/testing until fully baked. It was announced on zx2c4 yesterday, ("WireGuard for FreeBSD snapshot 0.0.20210317 is available" [1]).

It appears that for some reason Macy, whom Netgate hired, spent a year trying to port the Linux kernel version (with ample kludging and ifdefs to make it work) rather than the more portable original core standalone version. The result wasn't great. But the rushed replacement Jason volunteered a lot of time for was, well, rushed, and everyone agreed that while kernel-mode wg in FreeBSD is very desirable the whole point of the project is to be really reliable and secure so worth taking more time to do right.

This presumably won't represent that much of a delay in the end. And while it's too bad Netgate couldn't have been more collaborative and gotten it right from the start, it's also impressive and humbling to see skilled people rallying to get it together in the end. Wireguard is such a great project.

----

0: https://arstechnica.com/gadgets/2021/03/freebsd-kernel-mode-...

1: https://lists.zx2c4.com/pipermail/wireguard/2021-March/00651...
We don't have the physics to arbitrarily travel backward through time (high speed wormholes work in theory, as a practical matter we don't have wormholes or a way to maintain relativistic speeds), so it anyway doesn't really make a whole lot of sense to speculate about how what we don't know might work. Say someone invents a new formulation of physics and time travel just trivially falls out of it, with tidy solutions for distance and momentum and everything else.
It looks like rsync.net is indeed compatible with Windows, just perhaps not out of the box. Keeping in mind that SSH on windows is somewhat new and I haven't really tried it with a service like this yet.

If you can get command line access to rsync.net with openssh and either CMD or Pwsh, then robocopy can forklift your stuff. This is without even getting into the weeds of the fact that WSL exists...

I am also seeing that some documentation exists for pointing Veeam at it, which is my preference. I don't run any metal computers that aren't hypervisors and using that to back up my VMs, be they windows or linux, is my preference.
Also, liberal societies (correlated with higher income societies) have a higher opportunity and actual costs associated with having kids. Potential loss of income and cost of raising kids arw both significantly higher than in lower income societies.
Actual post title is “Painful Lessons Learned in Security and Community”. Please don’t sensationalize submission titles.

Haven’t followed what the op refers to as a “debacle” but from this post it reads like some people publicly disclosed an issue without going through the proper security issue disclosure route and made a fuss.
yah if you have the drive I think there's lists of projects open and welcoming to beginners etc. I don't know of any good curated lists but a quick search led to..

* https://stackoverflow.blog/2020/08/03/getting-started-with-c...
* https://www.firsttimersonly.com/
* https://opensource.guide/how-to-contribute/
* https://github.com/MunGell/awesome-for-beginners
Just a heads up, the analog in Anathem is called "Hemn spaces"
Since it's hosted on GitHub, the blog is available as a git repo [0]. I'd check with the author to see if he'd accept a PR and then it's possible to contribute alts you desire.

[0]: https://github.com/theabbie/theabbie.github.io/blob/master/b...
Are you concerned about the health or cognitive complications associated with sleep deprivation?
The most important two takeaways of all:

1. don't forget to delete your tweets

2. if there's no proof it happened, deny
These protocols match the old Indiana `concepts` pretty precisely; they appear to be more like Haskell type-classes than interfaces -- they're retroactive, not inherited.
Is there any data on whether the people that had the thrombosis on AZ were also on contraceptives? The high incidence group seems to be women under 50. The same group that is most likely group to take contraceptives.

Maybe two things that cause bloodclots at the same time make it much worse.
Amazon is well known for having a very restrictive policy for contributing to FOSS
> - There's a problem with your website's SSL certificate. You're using the *.github.com certificate with a custom domain.

This should be good now.
My casual quick read did not see any manufacturers being held liable for security breaches.

Liability as security panacea keeps come up here. It's kind of ridiculous imo.

Electrical components, for example, aren't made safe by liability but by standards. And given there's no set way anyone knows how to manufacture secure components, it's hard to come up with a "you should have known" standard for liability.
COVID is not the virus, it is the disease that results from the coronavirus. The virus is the contagious part.

Sure, but do you really believe everyone was so hygienic that the flu was entirely eliminated in some areas? Most of the trips I have taken out involve at least a couple encounters with people wearing their masks improperly, touching their face, sneezing, coughing, etc. We should see at least some small amount of flu. Zero is suspicious IMHO.
See: the 1% rule and participation inequality. It seems to be a constant of human engagement on internet platforms.

https://en.wikipedia.org/wiki/1%25_rule_(Internet_culture)

https://en.wikipedia.org/wiki/Participation_inequality
If CRI is low, all colours on an object are fucked. Ao people in general are going to be worse at idebtifying what they are looking at or reacting. You won't be able to look at a picture, read text on your credit card, etc.

Sure what you outline is possible in some spesific scenario, but it's not gonna work for 99%
As a first-order approximation, "all crypto is fraud" serves you very, very well.

Sometimes it's possible that it might not be fraud, but might instead be that you just lost your money because someone was incompetent instead. But then it's hard to tell when they are just lying about being incompetent to cover up the fraud.
This was pretty heavily discussed on the reddit when it was posted: https://www.reddit.com/r/rust/comments/m1t1lk/why_asynchrono...

(And, as linked to in those comments, HN as well)
Can I use multiple machines as nodes for K3s? I think the last time I looked at it, clusters were limited to one machine, but that was a long time ago.
Not being a biologist, I'll ask what might be a dumb question: If the essential elements of each disease are compared, is there a difference? Are the prions associated with each disease different from one another? If so, is there a difference elsewhere that defines between one disease and the other?
Thanks to everyone for all comments here.

I made https://interactivesql.com to help all those people who just start to learn databases, SQL, queries, and more.

I am compiling 120+ lessons now to cover everything from the basics (select, join, group by, to CTEs, Analytic Functions, performance, reporting, and more)

Hope this helps. Feel free to let me know what do you think about it.
Nope, especially in those cases. The more sensitive the data, the more important it is to have records of who accessed or changed it and when.
> On March 2, 2021, we received a report via our support team from a user who, while using GitHub.com logged in as their own user, was suddenly authenticated as another user.

Sobering thought for me is how probable it is that a similar issue might be present in other platforms. The title calls it "rare" but given (a) the number of complex-enough web/app platforms in use today, (b) just the endless number of ways/infra permutations for "doing x", and (c) the size of a typical company's codebase and dependencies, could it be a more common occurrence than we think?

Total anecdote, up for you to believe: Back in April 2016, one of my then-housemates bought a brand-new Macbook Air. A week into his ownership, he exclaims surprise that he is logged-in to another Facebook account, someone we are totally not acquainted with. I borrow his MBA and try to investigate but, alas, I lack expertise for it. The only relevant thing I can eke out is that they both went to the same event a week or so ago and probably shared a Wifi AP, where a "leak" could've happened. Or maybe a hash collision in FB's side?

I would've reported it to FB but then I don't have enough details; with the two conjectures I have, I'm basically holding water with a sieve. But now the thought that someone I totally don't know might end up logged-in in my FB account is a possibility that bothers me. And I have no idea how to prevent it other than minimizing what could be compromised (and no, "Get off FB!" just isn't in the cards, I'm sorry).

Kudos for Github for investigating and fixing this issue. Another thought that occurred to me while writing this is how many users of other platforms might be filing issues like this but can't provide enough detail and so their reports are eventually marked as "Could Not Reproduce". Not exactly leaky sessions but just general security mishaps that they would struggle to describe to support.
I saw the article (it got a lot of attention talking about holograms), but I didn't see any actual holograms. I hope they get a 3D Hologram Printer so that they can actually output their computations.

And go MIT!
"Freedom software" sounds like word salad to my American ear, so I'm not sure how you see that as serviceable. If you showed me the phrase and put a gun to my head to guess what it meant, I'd probably guess it was a jokey way of talking about software written in France.
Cool name for sure, works for both I guess, both are tough and deep I guess.
> So open source means only licenses that are most favourable to the big tech monopolists now?

Open source originated in the 1980s and 1990s in largely academic circles. It gained mainstream popularity as an alternative to closed source "shrink wrap" software and closed shareware.

Back then the legitimate fear was that closed-source vendors would lock everyone in and end up effectively owning the entire computing ecosystem and the Internet. By the mid-late 1990s Microsoft was well on its way to having a total OS monopoly on PCs and increasingly servers, and were it not for Linux and many other projects this likely would have come to pass.

Good news: open source mostly won! We now have a fairly open compute ecosystem. Even Windows was dragged into adopting more Posix-like standards, and the Mac is just a proprietary GUI and set of system services running on top of a mostly open BSD kernel. It's borderline trivial to port most software between Windows, Mac, BSD, and Linux, so we avoided OS lock-in!

Then along came the SaaS business model and closed Internet silos.

Cloud-hosted SaaS just totally upends everything. Now open source doesn't really matter from a freedom perspective. The cloud has all your data, and by keeping select bits of code (or even just the system configuration) secret and locked inside cloud servers vendors can achieve DRM that is effectively impossible to circumvent.

You can't even run the software yourself, and even if you could your data isn't yours. Having the source is meaningless. It's a model that's more closed than closed, and not only is it compatible with classical open source but is actually fed and sustained by it. Open source is free labor for closed cloud SaaS.

The OSI is fully industry captured and isn't interested in challenging this, which is why large projects are adopting non-OSI-compliant licenses.
I wouldn't be so quick to blame the sexual revolution. There are many other relevant factors that have changed since the 60s, such as the cost of owning a home and raising kids. People are less likely to have nearby family to share childrearing responsibilities, and so on. It's likely a confluence of factors.
Same here. It's so relaxing when everyone else is sleeping. All other responsibilities fade away.
> For example, the entire deployment configuration for this blog is contained in this yml file

Isn't that not quite correct?

If I'm reading this correct (which I may very well not be), isn't this a reference to a Dockerfile:

image: marcusbuffett/blog:latest

Which then might have lots of other complexity contained within. I wouldn't call that self-contained, I think that's overselling it.
Huh? I want my bank to be VERY clear on when I transferred money for my home closing (and keep that record). They need to keep records and the browser used, IP used, authentication flow etc. Why does this have to be thrown away?