skysight-inc/HackerNews huggingface dataset:
The landing page has no pricing, no support model, says "made for indie hackers", had no company name and credits the page to a single person.

How much more obvious can it be?
That is the first thing I thought, if we are to trust this info then the issue that stands out is not that a toddler did it, it's why the hell wasn't it locked in the first place.

I worked in far less sentitive settings, but all these IP policies pretty much engrain this in my mind. Locking before moving away from my desk is muscle memory by now.
New Mobile App Update Released
Are you customer-centric? Or product-centric?
If you are keen on your customers, then this version will suit your needs.

The updated #mobileapp comes with features focused on customer growth powered by AI. The updated version with predictive analytics introduces new insightful dashboard metrics and powerful #cms.

Discover the blend of AI with a real-world design experience.

#customercentric #epixel #mlmapp #directsalesapp
Exactly right - it's a legacy feature we keep not to break some user flows, we're looking to rebuild that pretty soon.
How often do you tweet?!
Fair points.

I wonder if 5G could help with the 'last mile' problem, regarding serving sparsely populated areas economically. It's fast enough to be used for home broadband.
Did a quick and dirty implementation to read a file from Java. Immediately ran into the "ustar " vs. "ustar" magic strings used to differentiate between format versions as I generated files on several different systems. That lead to some head scratching because I couldn't comprehend why there would be a difference on that last whitespace.
Definitely appreciated, thanks!
Well, if you’re really interested in more info, there’s a place online where free speech and discourse happen, and they often discuss this very topic. Here’s one such thread[0].

More seriously, see any discussion on Tibetan Buddhism, underground Catholicism, underground Protestantism, Islam in western China, Winnie the Pooh, letters found in Halloween decorations, Taiwanese airspace, forced labor, etc.

[0] https://news.ycombinator.com/item?id=26632065
This what Reuters reports. They use The Paul Ehrlich Institute (PEI) as a source.

If you go to PEI to check it out, their newsroom has article titled:

"COVID-19 Vac­cine As­traZeneca – Safe­ty As­sess­ment Re­sult: The Vac­cine is Safe and Ef­fec­tive in the Fight against COVID-19" https://www.pei.de/EN/newsroom/hp-news/2021/210319-covid-19-...

Cutting and pasting from the article:

>The safety assessment by the Pharmacovigilance Risk Assessment Committee (PRAC) at the European Medicines Agency (EMA) confirms the positive benefit-risk ratio of COVID-19 Vaccine AstraZeneca. As a risk-mitigation warning, the SmPC includes the fact that in very rare cases, specific thromboses are found in the period up to 16 days after vaccination. Based on the positive safety assessment by the EMA, Germany will resume vaccination with the COVID-19 Vaccine AstraZeneca starting 19 March 2021. Those willing to be vaccinated will be informed about the above cases during vaccination education. Medical doctors can find information on the website of the Paul-Ehrlich-Institut.

>... The vaccine is not associated with an increase in the overall risk of blood clots (thromboembolic events) in vaccinated individuals. There is no evidence of a quality defect - that is, an association of specific batches or manufacturing at specific sites of the vaccine with the observed thromboembolic events.

>... A very rare form of thrombosis (primarily cerebral venous thrombosis) associated with platelet deficiency (thrombocytopenia) was observed in a very small number of vaccinated individuals predominantly under the age of 55 years following vaccination with COVID-19 Vaccine AstraZeneca.

>... This very rare coagulation disorder occurred more frequently among those vaccinated than would be expected numerically based on the rarity of this clotting disorder without vaccination. There is currently no evidence that the occurrence of these clotting disorders was caused by the vaccine.
Buyer beware when buying a Tesla with Bitcoin
Sorry to highjack this thread looking for a product recommendation, but I've been running the same old netgear router with dd-wrt on it for about 8 years and am thinking of an upgrade.

I had been considering ubiquiti, but the stuff in this thread (not just the ads, mostly the "stuff doesn't work" posts) has made me reconsider.

Every time I look for a router nowadays, everything looks like a hedgehog it seems[0]. Has anyone got a recommendation for a solid, high performance home router to put dd-wrt or similar onto? (also, would people recommend openwrt or something instead? I've not really looked at alternatives since I set this up).

I tend to trust flashing something open source onto it better than whatever crap the manufacturer has decided to put onto it.

Thanks in advance.
May the developer can also monitor the download server and verify the sig with a cron. That will decrease the timeframe for a successful attack. Good idea?
I'm not sure if this is an "American thing", but in (Western) Europe usually a candidate that holds a degree in engineering or has a couple of years of experience is enough to be considered a competent developer. Sure, there are tech interviews and the like, but in all my years of experience and companies I have worked for, most if not all of the colleagues I have worked with were normal developers (which for 99% of the tech companies out there means 'good developers').

I'm not talking about rock stars.
Daily Dot article: https://www.dailydot.com/debug/gibberish-tweet-u-s-strategic...

Response in scribd PDF form: https://www.scribd.com/document/500831873/FOIA-U-S-Strategic...
I refer you to the answer I gave earlier.
My colleague took a screenshot of my desktop, then made it full screen. Took me an embarrassingly long time to figure out why my computer was frozen.
I like how it takes the Spot out of the box and seems to look at it curiously. Very WALL•E. Nice showmanship.
For years, this was the case for me under penalty of termination. Now I always lock my screen although I work from home and nobody except me has physical access to my computer.
There is an exploration of this train of thought in Frank Herbert's novel "Whipping Star", where a criminal condemned to a Clockwork-Orange-style conditioning to abhor pain and suffering nevertheless finds a way to commit murder by exploiting a truly alien being with no human-understandable concept of suffering.

Still, I think in non sci-fi scenarios, an abhorrence for suffering and moral behavior are very much linked, if not perfectly equal.
I think there’s a pretty good argument for that being the case, since they’re exposed to the public but you can’t phish what someone doesn’t have access to and it’s really hard to accidentally reference something classified if you don’t know it. The government usually doesn’t shy away from a bit of overhead to have firm separation between classified and unclassified systems.
So the thing is I limited the memory to 100MB (because how much memory could you need to serve 1MB, even if every go-routine stack is 2-5kb and the references are all to one piece of data?)

This was an issue, but I found that even with giving it more memory things didn't get much better -- the performance was still much worse. Weirdly enough, net/http did well memory wise (and reasonable performance wise, for Go), but I went to fasthttp since that was what was at the top of benchmarks for go, but the simplest you-would-think-this-would-work code didn't produce the results I would have expected.

[EDIT]

> edit: looking at their bug tracker, it might also be something like https://github.com/valyala/fasthttp/issues/518: the request is not considered responded to so the goroutines never terminate. I don't know the fasthttp API at all tho, just looked for "leak" on their bug tracker and that stood out

So I actually got some help from a reader which was pretty awesome (https://gitlab.com/mrman/kcup-go/-/merge_requests/7), the fasthttp code performed much better after that.

I should also mention that I got some advice that didn't pan out -- in particular using fasthttp.ServeFile (https://gitlab.com/mrman/kcup-go/-/merge_requests/9)
My wife recently left the computer unattended and the chair unflipped for 30 seconds. I come into the room and see our almost-2yo daughter handling the keyboard and the mouse like a pro. Despite never doing anything with a computer before.

Toddlers are truly keen observers. You think they're just trying to smash a toy or eat their picture book, but they're constantly watching everything. In the recent months I had a whole lot of stories that follow the pattern of "how in hell did you know these items belong together?!". There are moments when I wonder if toddlers have a secret worldwide community, and communicate with each other while parents are asleep...

(Also our cat learned to use our daughter as a distraction sometimes, making her noisy so that we vacate the kitchen, while it runs in to snatch our dinner...)
The lack of a number or upper case letter means that it'd basically need to be an internal password, meaning US Strategic Command has some terrible security. I wish that made me think it was unlikely.
This type of snarky tone isn't that constructive and doesn't add to debate.

That being said, I don't see how the existence of image-gpt supports the notion that GeneralAI exists. Image-gpt couldn't (for example) write the next version of itself.
Michael Andretti Now Sees the Potential of Electric Cars
Billion Dollar Heist: How Scammers Rode China's Chip Boom to Riches
Scram Switch
The only thing I will say is that this would not meet my personal code review standards for logging. Rule number one is never put functional calls in a logging statement, only log static data. As optimistic as one might be that the 'ic' has no side effects, the most conservative approach is to never put anything that interacts with run-time behavior in a log statement. This is especially good practice when working in many code bases in many languages. If one gets comfortable with something like say 'ic' that has no side effects when wrapping function calls then one may assume this out of habit when interacting with other such utilities, other languages. The conservative approach is best in my experience and that is to never insert run-time code in log statements and only log static data.
Changing the send action to Ctrl-Enter (or maybe it was Shift-Enter?) helps with this. It also helps prevent accidental yubikey posts and is good for when you need to write up multiline posts.

Just saying in case anyone wasn't already aware.
Seems like gzip would be the bigger issue there. There are millions of valid ways to compress a single file
How to Hack a Computer Network and Fight Against Server Hack
You mean like when the FSF weakened the GFDL so that Wikipedia could move off the GFDL?

https://en.wikipedia.org/wiki/GNU_Free_Documentation_License...
The case for trailer parks
Half day long take home exercise are a huge red flag and disrespectful of the candidates time. Ours takes at most 1 hr.
I love how the report says the child „took advantage“ of the situation
Yes. The ship needs to have a certain amount of water going over the rudder to effect steering.
Honest question, do they have the cash at hand for that?
Ecology: Gene drives may help control invasive grey squirrel in the UK
Mobikwik wallet suffers 8TB breach of 3.5mn user cards and their PII documents
> But prints work equally well in any environment.

GP say they "have debugger set in pycharm and use it all the time". So under the assumption (explicitly made in my comment) that they're always using PyCharm to run their program, that's not a concern.

> I can remove prints by just checking out the latest version of the file.

Thereby losing all the changes you've made while observing program behaviour, which may be less than desirable.

Meanwhile it's just as easy if not easier to disable or delete breakpoints from the View Breakpoints pane / window: https://i1.wp.com/cdn-images-1.medium.com/max/800/1*0wAP-w-a... you can just uncheck the "Python Line Breakpoints" box, or select all breakpoints and [Delete] them.
My local credit union uses a USB device (IR sensor?) that detects how close to the computer the user is, if they walk away the computer automatically locks.

Surprised those devices aren't in more widespread usage.
And I agree with the proposal committee for declining your request. For a language that prides in having great backward compatibility, what you were proposing wouldn't fly.
Seriously? These corporations' PR stunts make you happy?
"In a telework status". So, working from home? It annoys me when people use unnecessarily technical vocabulary.
For completeness, you should check out Elixir and Phoenix (channels and presence) for the server. Easy websockets, isolated player processes, non-blocking VM, plus deep introspection for debugging issues. https://youtu.be/JvBT4XBdoUE. We see more and more indie games being built with Phoenix LiveView.
AWS launches new EFS storage class that cuts costs in half
Genuine question — when does a referral bonus (pretty standard) turn into a pyramid scheme
I’ve been listening to the “secret history of western esotericism” podcast, and some of the writings of those guys is just as incomprehensible as anything in the Bible.
A supply chain attack to get a backdoor into curl wouldn't involve any of the methods he describes in his blog post, it would involve putting the backdoor into one of the dependencies that curl uses such that when curl is compiled using the tainted lib, you end up with a backdoored curl.

Are there any libs in https://github.com/curl/curl/blob/master/configure.ac that do not have the same level of rigor in testing that curl does?

Getting a backdoor into curl would mean seeking out the weakest link in the dependency chain.
Stuck Suez cargo ship in Microsoft Flight Simulator
Why not New York or california? Oh right.
A broken screen image is another good one. To hear someone come back from break and start loudly asking "WTF?" will never not be funny.
So Tibet belongs to the ROC and the mainlanders have no rights to it... Interesting.
I don't remember exactly, but I believe I was related to Java, probably trying to debug some Java app with IntelliJ. I'm not 100% sure if the problem was due to some intrinsic LD_PRELOAD/libc limitation or something related to the tools I tried, but trying to find what the problem was with something so gigantic seemed impossible so I went the tun2socks way which is more transparent for applications.

(Also Go programs are famous for bypassing libc.)
You think gay people don't like money or that big banks work against the interest of gay people ?

I'll tell you a secret, in big corporations, gay people are many, don't hide and are sometimes in power. They celebrate pride months because they care, they're the bosses :D

And it's perfectly fine :D Sexual minorities are often oppressed by traditionalists and uneducated people, and a coke addict stock trader is quite the opposite of that.
I actually have written email software before (and dealt with the horrors of IMAP and MIME), but that's no tthe point of that sentence, it's about email management and not having your email client do stupid things. not about using the protocols
Unfortunately no. I pretty much just installed and configured my gmail account on all the devices. Only tricky part was my VPS because it didn’t have a GUI.

I don’t use magicdns yet since it’s in beta.
The goal is not to eliminate npm, but to decouple it from the runtime itself
25 years later: you're fired because of that tweet. As you know, semicolons are now considered highly offensive.
Windows has something similar built in. It locks your pc whenever a paired Bluetooth device (eg your phone) goes out of range
In Archegos Case, Banks Face Big Losses as Bets Go Awry
Object classification through a single-pixel detector
Apparently the idea here is to substitute a bunch of convolution kernels with, well...optics
> none of these in my case. i simply used go’s benchmark tool to figure this out. i kept running it and trying out stuff along the way. at the end of development i ended up with a very performance-focused codebase.

That sounds like "right-provisioning", or am I misunderstanidng you?

> result: i now have a running golang app that’s been up for 2 years without a single restart, indirectly serving millions of users on just 4 cores and 4gb of ram. no memory leaks, no cpu issues. very impressive compared with the standard java solutions that that company usually pursues.

This kind ofexperience is exactly what I was expecting to get out of Golang, very easily. That said, 4 cores sand 4GB of RAM is a lot of resources for a single binary, also there is the magic of swap to save you if you ever get in trouble (the app would theoretically get slower to the point of becoming unresponsive). I'm not sure how complex this application is, and I'm certainly not arguing for Java (because that's both hard to optimize, tune and write in the first place) but I wonder if there's a difference in complexity here. Is it the usual 3 tier app kinda deal?

> this being said, it really depends on your use case. this golang software was a proxy that was handling an LRU cache. definitely not rocket science.

Ahh there it is, thanks for sharing this bit -- Go would function as an excellent LRU cache -- I assume this program is performing a redis like functionality for another app? Are you offering the LRU functionality itself to users? I am actually kind of interested in what it does now...
My point is I don't like them :) Seriously though, I feel they do a lot of astroturfing and smokescreening to make a lot of noise about inconsequential stuff while saying nothing or very tame things about the real leaks in privatized education and healthcare.

If you look at their "Worst of 2020", almost everything is below 10MSek, which is drop in the bucket budgetwise https://skattebetalarna.se/arets-varsta-sloseri-2020/)
They have 23B in cash and short term investments. But with rates so low its probably wiser to finance it out over 50 years and pay a couple percent in interest.
> I have been getting vaccines all my life. They're quick, they're free (with my health insurance), and they have potentially saved my life. They've certainly saved millions of other lives.

[...]

> My public college required everyone living in the dorm to get vaccinated for meningitis. It was not a big deal. I suppose people who didn't want the vaccine just didn't live there.

Vaccinations are safe and effective. People should get vaccinated. This is especially true for covid-19, where the disease is for many people serious and the vaccinations are very good and have few side effects.

But not everyone can get the vaccination. Any vaccine passport measures need to make sure they're not adding to the discrimination faced by people with certain disabilities or illnesses.
Actual problem: not understanding the distinction between a bug report and form meant for "asking others to do something for you".
My experience is around half year. That includes searching for that good developer and the other 9-10 senior interviews which you had your hopes up but didn't match. It's really hard to find a good senior dev these days...
Wait. Is that what the built in utility does? I thought it was reflection based. How does it do this without generators?
> That it will happen is a certainty,

Not saying that you're wrong, because you seem much more informed and involved on/in this subject than I am, but from half the world away I can say that around 10 years or so ago that "certainty" wasn't that "certain", so to speak, at least not from what I could gather by reading the "local" press (mostly the Financial Times and The Economist).

Do you happen to have any resources available that further comment on that certainty? Again, not because I'm thinking that you're wrong, but because I'm really curious about this subject (there was a similar Taiwan-related post on the front-page of this website a few days ago but it dropped off pretty quickly).
You said "click", I need to leave my keyboard.

Generally when I am coding I auto-run the tests on save. This means that to printf-debug I just add a message or two (and if I am coding I might already have a couple of useful ones lying around) and save. Then in less than a second I have a trace trough my program in the terminal. If I want to inspect a different variable I just add another print and run again.

With a debugger I need to kill my auto-run command, run the program, set breakpoints, type to see what variables I want to inspect, maybe switch stack frames, maybe step through a bit.

In my mind printf is like an automated debugger. I just put the info I want to see into the program and it does all of the printing for me. And when I find the problem I can just fix it and I am back to my edit-test cycle.

I'm not saying that there are no use cases for a debugger. For example I find variable-modification breakpoints very useful. As you mentioned if your edit-run cycle is slow then it may be faster to inspect a new variable in the debugger than adding another print statement. But when I just want to inspect values in my program I find printf sufficient and lower overhead. I'm sure part of my problem is that because I rarely use a debugger I am not as efficient, but I also think that printf-debugging is a very effective workflow for a wide variety of issues.
I'm over 100% confident that it is a password (a really sad one ofc). But that twitter just took focus when the child got to the keyboard. The child then typing without space or weird alt/ctrg/shift inputs and then press send. Under 0% probability.

TL:DR
twitter took focus when he typed the password and enter did send it. Everyone knows it.
We put the device with usb on it in an emi chamber and watched it on a spectrum analyzer. Unless it was in a taped box there was a mountain of noise.
I wasn't aware that happened, thanks for sharing! I'll have to read up on it a bit, but at first glance it looks like a similar (albeit slightly less impactful/evil?) scenario, indeed.
Apple terminated my developer account
Hi

Few weeks ago, I received an email from Apple, I was told that my developer membership has been terminated, this is a huge blow to me, apparently.

The letter says that I have fraudulent conduct, but I believe that's not true.

Apple just sent warning message to me and after 14 days removed all my apps at the same time.

I am disappointed, of course. But a more important issue is that I don't know what went wrong, and how to fix it. Tried to communicate with them but always was getting same generic words and texts but nothing concrete.

Apple is super confident about their judgment, they applied the most serious punishment to me, without mentioning any details.
Can you point out a specific example of racism in that interview? I haven't looked through it entirely, but searching for some common terms that I expect someone to use when showing some racism ("race", "racism", "black", "intelligence", "asian", "brown") I couldn't find anything (he does mention Black men once, but only in a hypothetical reaction he expects the general public to have, one that he criticizes).

The interview is relatively long though, and searching for those words is not a sufficient indication, so I am curious.
>it's why the hell wasn't it locked in the first place.

A second child is my guess. Or they were still in the room but inattentive. That kind of muscle memory would trigger when you're leaving your work area, and when working from home that would probably expand to your whole office.
>RFC 20452, RFC 20463, RFC 20474, RFC 20485

>RFC 68388

what are these numbers, I don't recall RFCs going into 5 digits yet
Thanks, my mistake.
> Improved Installation Time: 58% smaller install size and 56% fewer dependencies.

Great to see NextJS putting effort to reduce dependencies.