skysight-inc/HackerNews huggingface dataset:
I am curious about "compiler" attack they are mentioning. Looks like they compromized compiler used to build the code. Any more technical info on this aspect?
Hm, but it was the way they managed the transition. When I joined (actually I believe I joined literally the day before the cut-off for the holiday gift so got it even tho I started in December 2011)... it was "free Nexus" (and so on, choose from a list, etc) and then it was "very cheap hardware devices we have excess inventory of" and then it was "donation to a charity we chose" and people got miffed because it just smelled like a big tax write-off.

They would have been much better off just eliminating the holiday gift with a heartfelt letter from Larry explaining that he didn't want a creeping culture of entitlement and we were all aware we were compensated handsomely anyways so happy holidays, you'll get your annual bonus soon anyways. Pretending the charity thing was a gift was a bit weird. At that point I was giving 5-10x that amount in my own cash to charities anyways.

It's handled a bit better now, because you get to choose the charity, and it's accompanied by a good matching charity drive program etc.
If you give people defined vacation time, you have to pay it out when they leave in CA. If it's undefined it's worthless, which is good for the employer.
(Throwaway account.)

The company I own got hacked and our database was stolen, containing basic user and company data for 100,000s of users as well as some partial card data. From the moment I discovered the breach (browsing logs after an unexplained brief outage), for the next 3-6 months, my life did not belong to me, but to insurers, forensic investigators, regulators, the police, credit card companies, press/media, and thousands of customers who emailed and called about it. Suddenly my life went from two or three people I would regularly interact with a couple times per week, to dozens of people who were involved in the crisis response, cleanup, and 'remediations' who I would speak to multiple times per 16-18 hour day.

Around the same time, I lost some close friends very suddenly - one to cancer, another to old age. And there was the whole pandemic thing. I still haven't been able to grieve properly about that.

You read about data breaches happening almost every week to various companies large and small, and mutter about how careless they were, or worry about whether you were personally affected. But from the inside, it is a totally different story for those involved (if they have even an ounce of genuine remorse and concern, as I did). Behind the scenes, they are an absolute shit-show. The truth is we had been careful and the hack was due to a compromised vendor, not our own code or networking, but I felt massively responsible and like the worst person in the world. I worked the 16-18 hour days in part to assuage my own guilt, but also because I had nobody else that could. The one saving grace was having good cyber crime insurance (which, I note, is now far more expensive than before - I'd pay it many times over, though).

I'm still not over the incident, and have regular therapy (and regular nightmares) with many days spent unable to really focus on anything. Burnout is real, PTSD is real, and I don't know if I will ever feel truly safe again - I certainly feel that I need to get myself off the internet as soon as possible, and away from any kind of business leadership role. I just cannot ever face something like that ever again.

Thanks
How do you design an e-commerce database?
1. Docker doesn't have to create anything ‘from scratch’ to package for Debian, Ubuntu, etc.— it's already in Debian

2. They are running their own apt repos already anyway! The thing the grandparent commenter is complaining about is part of normal apt usage. It's not a manual installation of some piece of Docker, just a normal part of configuring apt in order to install something that is, in fact, properly packaged.
The only reason Microsoft makes any effort, even if abortive, is that other systems have very successful package managers. Best of breed, until recently, was Debian's Apt, which has worked well for decades. Lately it is beginning to be eclipsed by Nix and Guix, which automatically manage multiple versions of libraries installed simultaneously, for subsystems that need specific versions.

Dependence on windos was always an exercise in masochism. But it is easy enough to switch. You can still run any old windos programs you still need, under Wine, typically faster than native; or keep windos VMs, one per app.
I like it. I bet we can get the doctors to agree with prescriptions for social interactions.

"5 min / day exposure to incorrect thought for Relaxation purposes"
I don't know if that was the lesson I would have taken. The lesson I'd take is "don't work for a company that tries to manipulate employees to work ridiculous hours for the possibility of more pay".

First of all, it's a bad idea for all of the classic Goodhart's law measure-becoming-a-target reasons. Management throwing money at a problem reveals a certain amount of stupidity fostered by desperateness. Second, it's a very devious practice. This person made 2,000, but most likely worked an extra 10-20 hours a week for a few months. That's 2,000/120 = 16.6 dollars per hour. The company effectively got a lot more work out of some employees for a pretty cheap price. Yeah, sure the other team got a lot more. But never, ever work your ass off for the possibility of more money.

What's fascinating about this post is how the author manages to frame his exploitation in terms of how he was ungrateful or unreasonable. Yeah, sure, for your own benefit you shouldn't care that much about bonuses and you should be grateful for what you have. But that doesn't mean you should let your company exploit you! It's perfectly okay to fight your damnest to get more money from the company. Lord knows they're fighting to pay you the least they can get away with.
I just spent the last 5 minutes playing Road Blocks.
> even if it can't pay a huge amount for some positions, there's always a lot of recognition that everyone is needed to make it work, and everyone is appreciated

I can't pay my rent in recognition or appreciation though.
In what universe are managers averaging less base salary than individual contributors? Aside from a few outlier engineers you see from time to time...
The lack of chrome is such a frustrating design trend. In Windows 10 in particular I find it so difficult to find the .. well, windows because everything just kind of blends together. There’s something to be said about the workaday utility of how things used to be. They weren’t necessarily beautiful in a conventional sense but they were so much more intuitive.
There is no guard on the back of the treadmill, so that the belt can easily pull children under it.
> we’re investigating this issue and/or taking corrective action

Who says they haven't? I mean, isn't that the exact claim they're making when they say the CPSC has mischaracterized the situation? That they've investigated the issue and determined that the CPSC's stance is incorrect?
The article does read like that but he seems to have basically applied lean principles to writing books. And he says he's written 2 books that both make him $10k per month so it seems he's walking the walk.
The HN analog to the Australian album experience is a new acquaintance telling a software engineer about their idea for an app.

The stamp shop people were professionals, that's why it looked like an office. They showed the author how their business worked. Showed what it would be like to do business with them.

That's not what the author wanted. There wasn't anything personal about it. They didn't string the author along. They didn't provide ambiguous social signals. The author was just a little slow on the uptake. A little slow to say thanks for your time.

Educating potential customers is part of a professional's life. The author learned something about stamp collecting. It's no more exclusively what he does than it is exclusively selling Australian collections.
What is Interruptible vs on-demand?
Show HN: SupaScript: Postgres extension to dynamically import JavaScript libs
Yes? If something is possible but inconvenient, that's clearly better than it being completely impossible.
I am probably at the opposite end of comfort with technology and still get confused on whether swiping up or swiping down will accept the call - one of the dumbest interfaces. Why, two buttons to accept and reject calls that we used to have everywhere was too complicated?!
Not only that, but each arm can produce dozens of newton-meters of torque, with possibly sub-millimeter precision, and like you said, fast. Just building an arm with comparable specs is quite the challenge. You end up needing hydraulics because even the finest, most expensive transmissions with belts to move the motors closer to the body, still end up being too heavy to achieve human agility+strength.

I looked into building a robot arm which could cook breakfast. It's almost ludicrous just speccing out the torque requirements to pick up a skillet.

You end up having to pick harmonic drives and less speed but more stiffness, or hydraulics, which are lighter, but messy, less stiff (can be both good and bad) and less reproducible.
Can be very different. I recently benchmarked it with a simple python based benchmark (as I use python most often) and in some cases the differences were even 2x.

Some results and benchmark here:
https://github.com/vprelovac/python-speed

These were coming mostly from the fact that some providers updated to the latest gen AMD chips which was making big difference compared to 3-4 yr old Intel chips.
Sure, and if they lack space, some things simply are not an option. These folks in tight NYC spaces wouldn’t install a table saw and a router table in their living room either.

I guess the real issue here is that many people simply do not understand how dangerous gym equipment can be. Small kids simply should not be allowed around it, no matter if there is some plastic guard part around it or not.
Not only that, the AMD Ryzen will support ECC memory, while Intel will not. (Now if only you could get ECC memory for the additional 15% it actually costs.)
It's a standard sort of thing.

The idea is that a non-manager has minimal ability to affect the company's bottom line. While those further up have the ability (and now have the incentive) to affect the profit of their division or the whole company.

So a worker gets 100k with a 10% bonus, his boss gets $120k with a 40 percent bonus etc. In a good year the boss will get almost twice the worker but in a bad year he will make just 20% more.
Google Cloud does sustained use discount pricing so the charges decrease as you progress through the month. It looks like your chart would be accurate for an on-demand 1 hour of use machine but you're missing about 20% discount on GCP if you run the machine all the time.

Nice work including some general network capacity in your chart. That's something that's often missed in comparing machine types.
Try elevating user privileges for some cool Easter eggs!
PLV8 is cool, but I wanted to use require("module") and have all the nifty NodeJS stuff like require("http"). SupaScript is an attempt to emulate NodeJS inside Postgres, with dynamic module loading over the web, caching code in a table, and then caching that stored code in memory for later.
And your point? If this is innately part of us then it's even more callous that it's vilified, or are men not entitled to your sympathy and support?
Dog rescues smaller dog from owner's backyard pool
ARMv8 is not fully "RISC" insofar as that means anything. x86 is only "CISC" because "CISC" is defined as whatever x86 does.
>Poor people don't need small LED lights

Huh? Reliable light is one of the best things to provide impoverished areas with, after clean water/food/medicine/sewage.

It's one of those things that we really take for granted, but if someone dropped you in the middle of the woods, I bet a headlamp and power source would be one of the first conveniences that you'd ask for.

Anyways, like others have pointed out, the energy comes from charge carriers moving between the metals stuck in the potato, not the potato itself. That particular misconception comes up surprisingly often, to the point that it's kind of a running joke in its own right. Portal 2 had a pretty tongue-in-cheek take on the gag.
I would concur. The bonus system at prior fine employers usually looks like Company_perf_scaling * Bonus_pool * Group_political_pie_slice * Personal_perf; I usually assess it as "magic money".

Yearly bonuses IMO should be rolled into base salary raises. Bonuses otherwise should be project based IMO. "Good job on the big projects, have xyz $/stock".

Bonus structures for ordinary engineering / programming where a bonus might be >20% of total salary seems to be out of line with our normal work output.
If you do really good can you take a year off? If not, then it’s still not unlimited. I’d like my salary and benefits be quantified in my contract rather than “manager discretion” which can go south in a hurry if you have a terrible manager.
I’d pay close attention to it. We don’t talk about the death of website development as a career because app development was available for everyone to transition to, so it mostly got ignored. But it happened, and there was nothing anyone could do about it. It’s a dirty little secret that if we honestly told new people switching to web dev ‘hey, yeah, just so you know, our jobs as we knew it kind of vanished once’, they’d think twice. The other dirty little secret is we almost sent all the work to India once. The new dirty little secret is there’s going to be apps like Airtable which will be another rug pull when Enterprise stops giving a shit about custom branding.

If businesses didn’t start moving their apps off Desktop and into the browser, what the hell were we all going to do? We’d have to goto the Java bootcamps, instead of the web app ones.

Pay attention because I don’t think business wants a fancy new UI and backend every few years (especially in the Enterprise space). I think we’re going to be done with this too.

They will one day just load all that crap into Airtable and standardize business tools industry wide.
First, thank you soooo much for this.

Secondly, would you consider adding:

- Vultr.com

- Storage size

- Storage type (hdd, ssd, nvme)

- Network bandwidth cost
> ads that relocate all the content

This is a personal pet peeve that drives me nuts. Shifting content is irritating and just makes me want to avoid the site. The thing is, ads don’t HAVE to shift content - the site/app designer can account for these kinds of things with various techniques such as giving the ad area a fixed height so that when it loads it’s only filling in that dead space.

Ads that obscure content deserve a special place in hell.
If foreigners looked at us the way we describe them (insert X bogeyman) and the fact that we have the worlds largest concentration camp of black men ever known to mankind.... Now what would they call that.... And then we employ them as prison labor or putting out dangerous fires..... Now what we call that..... We have laws that severely criminalize things that blacks do (crack consumption in the 90s) and not really for whites (cocaine consumption)....and the list goes on and on.... we call lesser things in other countries ethnic genocide etc.... Our State Department loves wagging the finger at other countries for lesser things that we do systematically domestically like civil forfeiture on blacks... Our sanctimonious grandstanding op-eds call such things in other countries as autocratic, authoritarian, dictatorship, ethnic genocide, strongman leadership, fascism and so on.... Look forward to the downvotes for stating the obvious....
"We" as a society are harming no one. Collectives don't do things, individuals do. The whole point of personal responsbility is that it ends at the people responsible, in this case the parents who left their children unsupservised near a high powered electric device.

> If a product or service causes harm and it can be reasonably mitigated, it must be mitigated

The whole problem is that I don't recognize your right to decide for others what "causes harm" and what "reasonable mitigation" looks like. As was pointed out in another comment, most of our grandparents grew up with open fires in the house. When a child injured themselves or burnt their family home to the ground, it wasn't treated as a social problem, but an individaul one. The only people responsible for the saftey of children in the home are those children's guardians. In this case they have failed in that responsibility. Why not just leave it there and stop calling for social change every time a kid gets hurt?
It would be nice to filter by region too. Currently, when you select a global area (like North America) you end up with lots of duplicate machine types for the various regions within. I know the prices can vary between Central US and East US but it would be helpful to narrow these down when searching.
Ha ha what? The problem is there are low barriers to entry to working in the creative arts so there's huge competion. It's like app development. Creating isn't enough. You need a marketing strategy.

Publishers OTOH diversify so can build their empires by backing multiple authors etc, some of whom break out.
I use the WiX toolset[1] to build MSI files. I can't comment on the learning curve, though. I've been using WiX for far too long to remember what learning it was like. I find MSI files and Windows Installer itself immensely valuable, so I can't imagine using anything that doesn't generate MSI files.

[1] https://wixtoolset.org/
I think Instagram is worse, actually.
I don't know anything about sole trader taxation but corporations can make charitable donations that are treated as business expenses (hence not taxed). They pretty much have to be cash, not in-kind contributions though. Ianaa, etc.
This sounds like HR is falling down on the job there. ADA accommodations don’t include attacking someone. That’s easily a for-cause reason.
Adobe Co-Founder Charles Geschke dies at age 81
What is Russia's motive purported to be?
Interruptible, "spot", or pre-emptible VMs are sold at a much lower cost with the caveat that they can be terminated at any moment. For workloads that pull from a queue for data processing or other "pausable" systems it can save a huge amount on costs. The cloud vendors get to collect ~1/3 - ~1/2 of on-demand rates instead of $0 while their hardware goes unused, effectively monetizing incremental compute power. Usually they are priced via auction, so its a truly efficient market.
Google Analytics by itself is lightweight, but if you're at a large company with a marketing department, my experience has been that it never stops there. We've got pages with literally dozens of third-party Javascript trackers, and I've had to continually push back against requests from marketing to add more. While each one individually isn't a big performance hit, they add up fast.

Same principle applies to security: each of these trackers has basically full control over the page, and if one of them gets compromised and replaced by malicious code, it would be disastrous. The probability of any individual tracker getting compromised is low, but what you should be worried about is the probability of at least one being compromised, and that probability rises exponentially as you add more.
No mention of how many episodes theres likely to be. Similar to game of thrones at about 8?
People keep using the words "psychological experiment" as if it proves the point. No, its just a more emotional description of what happened. Why, exactly, is controlled manipulation to gather scientific data require extra consent than doing random manipulation they already have consent for?
Are you talking about California state tax? The $300 thing doesn't jive with my federal tax spreadsheet..
Then just move somewhere you can afford without "a huge amount".
I write webapps for a living. If a browser plugin wanted to selectively allow XHR/fetch calls based on payload, there is very little I could do about it.

The implementation might be to have your plugin content script wrap the DOM XHR/fetch in a proxy. The proxy runs a predicate on the payload, and if true, lets it go through. The predicate would be something like "No PII", which would also imply that the traffic be unencrypted.

An app could remove the proxy. But it seems to me that most people wouldn't bother. It's also possible that there are other mechanisms, for example a special Plugin IO API that cannot be changed by content scripts.
This is great work. I know it would be a herculean task to reconcile across different clouds, but a reservation cost comparison would be really useful too.
You could have replaced SI with Security and described my current situation perfectly
It appears to be stronger than that: In the article https://www.bloomberg.com/news/articles/2020-12-21/solarwind... (pro tip: open in firefox and clear cookies)

"A former security adviser at the IT monitoring and network management company SolarWinds Corp. said he warned management of cybersecurity risks and laid out a plan to improve it that was ultimately ignored.

In a 23-page PowerPoint presentation reviewed by Bloomberg News, Ian Thornton-Trump recommended to company executives in 2017 that SolarWinds appoint a senior director of cybersecurity, and said he told them that “the survival of the company depends on an internal commitment to security.”

The following month, he terminated his relationship with the company, saying he believed its leadership wasn’t interested in making changes that would have “meaningful impact.”"
Is it even possible for a VM in realtime to failover to another server in the case of a hardware failure? I'm talking where the failure is unpredictable and the VM can't be snapshotted before transfer.
But he did get a bonus! He got the jelly of the month club, the gift that keeps on giving :)
Show HN: *Semantic* Video Search with OpenAI’s CLIP Neural Network
I knew a guy who put his two weeks notice in just before the annual Christmas bonus came out. So they stiffed him on the bonus.

They ended up paying for that in spades.

This was in the planning field and he was moving from a private consulting firm to a government job. Government is where the real power is for this industry.

If they were one minute late "Sorry, we are closed/you missed the deadline." If they had any errors in their paperwork "Sorry, reapply after you fix this."

Etc. Ad nauseam.

By. The. Book. Every step of the way. Zero wiggle room.

It had to have cost them more than the bonus they denied him.
Many psychopath in business settings.
> make it a flat guaranteed amount

Isn't this functionally equivalent to "pay better base salaries"?
Hi hackers! This a simple tool that lets you search a video semantically with AI.

Example: Which video frame has a person with sunglasses and earphones?

The querying is powered by OpenAI’s CLIP neural network for performing "zero-shot" image classification and the interface was built with Streamlit.

Try searching with text, image, or text + image and please share your discoveries!

More examples: https://twitter.com/chuanenlin/status/1383411082853683208
Similar story from a friend. The privately held company paid record dividends in both 2020 and 2019, but used COVID as a cover to do without both bonuses and raises. The only way to see this money would be to become a stock holder in the company, which is only offered begrudgingly.
Flashlight – A C++ library for machine learning
Ha! PEP 387 was edited yesterday in a way that does not make any the above wrong, but does mean you'll be confused if you go looking for my quote: https://github.com/python/peps/commit/307b9cdf8897cbade62773....
> See also

> Dunning–Kruger effect

> Karen (pejorative)
Aluminum NVMe SSD USB 4.0 enclosures vulnerable to static charge buildup
Create a church instead..
Yes, if it isn't referring to food then spicy usually means excitement in a positive way.