skysight-inc/HackerNews huggingface dataset:
If you want to debug a performance issue in postgres, then the answer will be similar: "just use EXPLAIN ANALYZE". You could get out a C debugger and step through the source code, and there are cases where that is appropriate (e.g if you're working on Postgres itself, or you're trying to diagnose a bug in postgres), but if all you want to do is debug your query then you should use the postgres-specific debugging tool (EXPLAIN ANALYZE).

Same for React. If you are working on React itself, or you need diagnose an actual bug in the runtime then you'll want to use the JavaScript debugger and step through. If all you need to do is work out why your component isn't updating then you can use the React-specific tool (the extension) to make your life much easier.
Nushell 0.30
Fascinating. So by my dummy math, if you could get even 400 of these toaster-size devices on Mars, in just over one year you could produce enough oxygen to provide appropriate levels of rocket-blast-off oxygen for a trip carrying four astronauts?

6g / hour * 400 = 2400g/hour or 57,600g a day = 21 million grams in an earth year.

55,000 lbs. = 25 million grams about?

And you'd need about 1/25th that amount for those astronauts to breathe for a year...

Just to say I'm curious to know how this technology could scale.
From my reading of the threads in the kernel mailing lists, it seems the IRB thought "is it bioscience with experimentation on live animals? No? Then it's all fine".
It's worth remembering that this was a repeat offense. They failed to respond to the first complaint.
If you wanted to know if the kernel review process is able to reliably catch malicious attempts you literally could have just asked the kernel maintainers and they'd told you that no, review can't go that deep. Or looked at non-malicious bugs and observed that no, review does not catch all bugs with security implications.

You'd very likely would have been able to get code past them even if you told them that there are attempts coming and got their approval.

Given that, you need a good justification why that wasn't enough for you, and what value you truly added over what already was the common view on the issue. But at least we got valuable recommendations from their paper, like "there should be a code of conduct forbidding malicious submissions" and "you could try vetting peoples real identities". (I guess they added to the last bit, giving additional data points that "works at a respected institution in a related field" is not sufficient to establish trust)
Just the same way a celebrity can reach millions. A programmer can reach millions via software.
Yes, lots. You need to pay operational complexity early and often. A lot of tools don't work out of the box due to volume sharing, permission issues, etc. You need to figure out dev vs. prod images, how to do incremental builds locally (e.g. you switch branches) and in CI (new push). Lots of issues like this.

Overall it's worth it in the end if you're making a long term investment, IMO. It forces you to build modular infrastructure from the beginning, so there are few surprises when pushing to prod.
They only support OpenGL 3.x
I'm not sure how you get that. The ban is mentioned as part of a single sentence that acknowledges the current state of the situation, which seems obligatory, so of course it's there. Then the whole second paragraph is talking about how they're shutting down the activity that led to that situation while they work on getting to the bottom of it.

This seems like an entirely appropriate balance of text and emphasis for a statement that is short and to the point. Which is also appropriate and laudable. Typically when an organization says any more, it's to try and do some spin doctoring.
Their name has "socialist" right in the middle of it. You might argue over definitions of socialism and whether it's left or right. But I don't think you can say "a group that calls itself socialist has at least this one left-leaning trait" isn't a position reasonable people can disagree on.

What I find worse than people going both ways on wether nazis are left or right leaning, is someone in a position of authority like wikipedia saying, one side is objectively right [about a question that isn't even rigorously posed] and will be treated as such.
Stocktwits/eToro are both quite popular.
How do you mean? The blockchain itself is decentralized. So if all the systems operate on the blockchain, they are decentralized.
Oh, true
I suppose you believe the Democratic Peoples Republic of Korea is democratic then?
I’d recommend just trying to set up a webpack 5 build from scratch: I’ve done it twice recently, and it’s been a pleasant surprise how much easier it was than it was four years ago.

Also, parcel Just Works for a lot of problems.
There is complexity, but it’s not nearly as large as you claim it is, nor does RISC magically resolve the issues you’ve brought up.
Here's an interesting notion -- that a lot of wisdom is simply bound up in the integral over time of personal life experience.

Thus, the value of wisdom is individual, and non-transferrable -- it can neither be carried "backwards over time", nor handed over to another human via a "brain dump".

The best one can hope for, is to distill personal lessons from our own experience (compute that integral), and invite others to sample it (no guarantees that it'll stick in any way, but their journey might be similar, allowing them to compute their own integrals faster, by seeing our own).
We were never talking about policy, so I don't know why you bring that up. We were talking about the George Floyd protests, and whether it was caused by peoples' poverty.
Maybe one could perform accesses on mechanical hard drives in such a way you could encode a signal with it. Maybe reading a couple bytes from the inner tracks of the disk for "0" and outer tracks for "1", assuming they produce different but consistent access sounds.

Reading certain areas of a floppy disk would probably be even louder and more consistent.

There could be a "setup program" that listens to the computers microphone and performs various accesses, choosing two that meet the criteria for being distinguishable enough for another system to tell apart. Lower frequencies for 0, higher for 1.
Fair criticisms!

Personally I'm thrilled to finally have a good terminal experience on Windows. The copy/paste behavior is very comfortable to me, given the similarity to gnome-terminal. And to be honest I never really got comfortable with CMD's behavior.

I don't use WSL itself much, so I can't comment on those bugs except to say I hope you find fixes.

I've ended up doing a lot of PowerShell for work lately, so I jotted down a guide for myself for getting the terminal to behave the way I like, if it's useful to anyone: https://gist.github.com/sandyarmstrong/8b48d7dd0cb01c63cabc6...
Exploitation of Pulse Connect Secure Vulnerabilities
First I've heard this. I've used neither. What is the major harm of WSL2?
I actually wrote a longer comment but deleted it because i didn’t think it was fully formed:

> Maybe it’s like an operating system context switch. I feel like I am in one mind because I have memories of what came before even microseconds ago. But how do I know that my memories were not just loaded right now for processing...I guess simulation theory stuff. We don’t really have any proof that we were actually in control of the moment that just happened a microsecond ago - that could all be an illusion.

Just a funny coincidence that on such a topic as a global consciousness we had such a similar idea ;)
Plus, wouldn't it be much easier to do this under the guise of equality with some quickly thought up trash contract enforced on all developers?

One might even say that while this useless attack is taking place, actual people with lifelong commitment to open source software and user freedom get taken out by the "NaN" flavour "NaN" koolaid of the week.

Soon all that is left that is legal to say is whatever is approved by the "NaN" board. Eventually the number 0 will be found to be exclusionary or accused of "NaN" and we will all be stuck coding unary again.
Sure. I was answering your question:

> Why do you think that enough of an investigation hasn't been performed in order to understand culpability?
Right. And I have no problems with this stuff being stuck into content that I pay $0 for, as long as it's not obnoxious.
The heads of departments are political animals.

This is purely a damage mitigation strategy. If we give them more credit than they really deserve, the department and IRB were severely negligent.
As is discussed in the article, mains pressure hot water cylinders are more expensive than low pressure ones. Also the installation (ed: of the first mains pressure HWC) is more expensive since it's supposed to be done by a certified plumber where (I'm fairly certain) a homeowner is allowed to replace like-for-like. Anecdotally, it does seem like there is a hesitancy in switching to mains pressure hot water, due to old valves and such failing, but I think the biggest reason is simply that a low pressure hot water system means less heated water going down the drain.

From memory, the pipe is just a piece of 1 inch copper. There's nothing on the top, it just points straight up to the sky.
> Ethics aside, warning someone that a targeted penetration test is coming will change their behavior.

They could discuss the idea and then perform the test months later? With the amount of patches that had to be reverted as precaution the test would have been well hidden in the usual workload even if the maintainers knew that someone at some point in the past mentioned the possibility of a pen test. How long can the average human stay vigilant if you tell them they will be robbed some day this year?
I was shocked when I learned that American sports teams could be bought and moved to another city.

I've never care for soccer or followed any of it. But I know enough to know that if you tried to move a big British soccer team to another city it might just set of a minor civil war.
Oh, I don't think socialism is only in the name of nazis, I think their nationalization of many practices and aspects of culture is key. Do you think "nazis had socialist tendencies" is a position that no reasonable people can take?

I didn't mean to suggest taking the name itself as the only evidence of socialism.
Black Lives Matter protests may affect police violence and murders
I entirely disagree.

Not once do they talk about getting the ban removed, instead they talk about figuring out why it happened and how to be better at having research done being ethical.

Was the ban the trigger to them (the heads) looking into it ? Of course since they do already have safeguards and review processes in place, this happened despite those, so they're saying they will investigate them to figure out how this project was validated and make sure to strengthen these processes as needed.

The end goal they give themselves in that message is not a ban removal but "safeguard against future [such] issues".
California declares emergency in state's most water-starved region
> Typically it's the people from the hard-to-get-into colleges, or with years of company tenure, or with specialized knowledge causing the psychological safety issues.

This is an extraordinary claim that requires extraordinary evidence.
That engineering blog post is a bit ambiguous to whether or not SQLite is also used in the browser web-app, which I'm presume is being used for most people who clicked on the link.

So that could mean two things:

- SQLite is being used in-memory, but things are still being flushed to IndexedDB for persistence? shouldn't help with faster page navigation here

- SQLite is not being used, so it can't explain the performance increase

I think the answer is more in the second link (changelog):

> - *Your workspace is now more reliable after Apr 16, 2021's scheduled maintenance — we upgraded from a single database instance to a sharded deployment, which means Notion is now capable of serving 3x as much traffic as before*
Over 94% of investors believe that Dogecoin will outperform GameStop in 2021
It is a good statement, and I believe they'll follow through, but it's missing something important that is often missing from otherwise professional communication.

The last line is "We will report our findings back to the community as soon as practical." It should be followed by "and we will provide an update in no more than 30 days".

Without any explicit time frame, holding them publicly accountable becomes trickier. At any point they can just say "we're still investigating" until enough time has passed people aren't paying attention any more.

Note that the companies that do ongoing incident updates on status sites best all do this -- "We will provide an update by 10:30pm PST".
That's been the messaging around masks from the scientific community from the beginning, and also partly why they were hesitant to recommend universal masking early in the pandemic.
How exactly is a lawsuit overkill? If the researchers are in the right, the court will find in their favor.
Their graduates have zero culpability here (unless they were involved). Your judgement of them is unfair.
The focus is rescinding the ban, but they acknowledge that the way to do so is review their actions and set up safeguards to prevent similar things from happening. There's too much bureaucracy involved for them to already publicly review their actions.
Looking at the article I would say the actual title presented is "Apple AirDrop shares more than files:
TU-Researchers discover significant privacy leak in Apple's file-sharing service", but that's a bit long for a HN title. I'm not sure what the policy is on using the subtitle (TU-Researchers discover significant privacy leak in Apple's file-sharing service) if it's more descriptive, but I think it would make sense in this case.
Sounds like we agree a great deal, then. I certainly agree that economic inequality is an integral part of the problems faced by blacks in America.
> It's a Linux convention.

It's just basic security. Direct access (ie no trusted intermediate software layer) to physical hardware is a minefield.
but those alternatives are all self-hosted, which doesn't help much if you don't plan on self-hosting anything
It appears that his current fundraising site is https://freekyleusa.com/

https://www.kenoshanews.com/news/local/kyle-rittenhouse-fami...
Guilty of weak reason #2. This post puts things into perspective. Thanks!
Actually I do understand BOTH sides, BUT:

The way the university did this tests and the reactions afterwards are just bad.

What I see here and what the Uni of Minnesota seem to neglected is:
1. Financial damage (time is wasted)
2. Ethical reasons of experimenting with human beings

As a result, the University should give a clear statement on both and should donate a generous amount of on money for compensation of (1.)

For part (2.), a simple bit honest apology can do wonders!

---

Having said that, I think there are other and ethically better ways to achieve these measurement.
Banning the university is fine to send a message, but reverting all patches from umn emails seems very shortsighted to me. Especially blindly reverting patches years before this "research" was conducted that almost certainly have had context changes around them, likely introducing more harm than good.
How Linux Works Has a New 3rd Edition
Are there similar features for Android devices? A database of Cellebrite-resistant phones, perhaps?
I made this a while ago. It is super simple and fast state manager for React Native and Expo
https://github.com/4TWIGGERS/aniuta
I do acknowledge the difference, what I am trying to highlight that perhaps dole is not what they want. Perhaps the poor people are not interested in staying indoors in return for dole and would rather risk their lives to seek things that value more than dole. It is not the lack of dole that is causing the failure of lockdowns.
I think this often papers over the tension instead of resolving it. The best way to resolve the tension that comes from doing a poor job is to do a better job. The second best way is to find a better job (within or outside the team/organization). I realize that sounds heartless, but I believe the first is usually possible (assuming competent hiring) because most people want to do good work. If you disconnect the career manager from the work being done by the employee, you make it harder for good managers too effectively redirect their employees, which results in worse outcomes.
Are you able to turn it on for the 'Windows Insider Program', do an update to latest dev build, then opt out of 'Window Inside Program' and in turn disable 'Optional Diagnostic data' ? Genuinely asking, as I would like to test it but would like to keep diagnostics phoning back to M$ home to a min. if possible.
We're using knex.js, so we're not messing around with database cursors (we get an array of objects), and we don't have to write out the columns for inserts/updates. We also sometimes use the knex query builder for super trivial selects from a single table.

But for anything more complex than that (e.g. SELECT queries joining several tables) we're using knex.raw so the query itself is raw SQL where we're very much thinking in the relational model rather than in terms of objects.
What distribution do you use?
The deception / con job was done last year. This time around, there was another series of patches from the same research group, which were claiming to be security fixes, but which scored really high on the you-have-got-to-be-kidding-me scale of incompetence. When the Grad Student was called out on it, he claimed it was due to a static code analyzer which he was testing.

This was not disclosed up front, and at this point, it is impossible to tell whether he was creating an incompetent, no-where-near-state-of-the-art code analyzer which gave bogus results, and then was too incompetent to realize it was bogus, and instead submitted the patches to kernel developers asking us to be his QA, without disclosing that this was what he was done ---- or this could be another human experimentation where they are trying to see how gullible the patch review process is at accepting bogus patches.

We have no idea, because his research group has previously submitted patches in bad faith, and UMN's IRB board gave it the A-OK ethics review. At this point, the safe thing to do is to assume that it was also submitted in bad faith.
Yeah I agree. To me, the biggest problem is with Oakland, who accepted the paper. A single faculty member doing something really stupid is one thing. But the field's top conference accepting the work? Christ.
It's an interesting project. I couldn't think of a use case for it but the one in a readme was a good example.
Show HN: Woond – Product aimed to overwhelm Procrastination
To clarify a bit:

The root servers already use DNSSEC (which is not DNS query encryption). Try

$ dig rrsig . @c.root-servers.net

if you want to check this. (I chose c-root just for fun.)

DNS query encryption has become a more and more popular idea because of things like spy agencies conducting surveillance of DNS queries for espionage purposes, ISPs collecting them for commercial purposes, and network censors using them for site blocking. If you can query resolvers in an encrypted way that the network can't see, you can make it less likely that they will know what sites you visit or be able to block particular ones (especially in certain cases where an adversary is on-path for DNS queries but not for the resulting HTTP connection, which is not always true but is sometimes true).

This letter seems to respond to suggestions that the root servers ought to enable a query encryption mechanism of some sort so that you could query them without revealing (to the network) what the content of the query was. This is of varying interest and relevance depending on your threat model (and who and where your recursive resolver is), but it could be important in some threat models.

The letter basically argues that it isn't really necessary for the root servers to do this, because (1) in principle the information they serve isn't that sensitive (and even the fact that someone is interested in a particular part of it might not be that sensitive), (2) other people are in a position to mitigate the privacy issues, and (3) other people can reasonably do this right away without requiring the root servers to change anything.

The QNAME minimization thing in particular is like: if you want to look up the IP address of controversialsite.example.com, this might end up generating a query "IN A controversialsite.example.com." (and/or "IN NS controversialsite.example.com.", "IN SOA controversialsite.example.com.") that goes unencrypted from you/your network/your recursive resolver to the root servers. But this is unnecessary. Instead, this query could ask just for "IN NS com." to the root servers, and neither the root server operators, nor your ISP, nor governments tapping Internet backbones, will know that you were interested in com because of a lookup for controversialsite.example.com as opposed to google.com. (The TLD servers such as gtld-servers.net would still need to offer query encryption in this case.)

A further argument made by the root server operators is that recursive resolvers can do better caching to make it much less likely that they'll need to query the root servers directly for the huge majority of individual queries that are sent to the recursive resolver.
Isn't cremation the go to in India, but second to burials in places like Europe?
I like the locality of behavior concept and am interested in learning more about hyperscript.

This VanillaJS example is just plain silly. I've never seen anyone set styles and call requestAnimationFrame & do all that in an inline onClick handler. I mean html elements have a `style` attribute, why would you set `transition` in a click handler?

The vanilla example should look more like the jQuery one, with the the code apart from the markup & referencing the element by id or class, attaching a handler with addEventListener.

Your will still compare favorably, and this a slightly less "intentionally ugly" way to write the code.
AI can manipulate how we vote and who we date
> This complexity is pushed down to operating systems, compilers, assemblers, debuggers.

Is that really true though? In my experience, the amount of complexity in a layered system is roughly constant, and if you make one layer simpler, you have to make another more complex.

I would expect that compiler for a RISC architecture, for example, needs to do a lot of work figuring out which set of 'simple' instructions encode an intent most efficiently. It also needs to deal with instruction scheduling and other issues that a RISC compiler does not care about.
I'm a bit shocked that the IRB gave an exemption letter - are they hoping that the kernel maintainers won't take the (very reasonable) step towards legal action?
I'm well into the N95 and equivalents where my test is "does it slightly implode on inhalation" because that means the path of least resistance is still the filter itself.

I'm also well into the "it's aerosol" camp. Any mask at all will catch your outward ballistic spray.
I don't know why, but somehow I am not too bothered by the research itself. Sure, in retrospect, it does not sounds like it was the right thing to do (or the right way to do). But, you know, stuff happens.

Instead, what bothered me immensely is the way the PhD student handled that interaction: immediately claiming "bias", "slander", playing "victim", etc... I don't know if he learned such a way to communicate from his professors, other students at the CS&E department, or UMN environment in general, but it's very bothersome to me. Such way to communicate precludes constructive (and perhaps heated) exchange of ideas. I think people like that should be nowhere near important CS/EE projects.