skysight-inc/HackerNews huggingface dataset:
Yes loans exist. Teams generally loan players who they have on contract but don't see them making the first team to other teams to either foster their development or save money on their wages.

The team getting the player on loan generally takes on the player's wages and in some cases also pays a small loan fee to the loaner club.
The plonk at the end was the mic drop heard around the world.

I had no idea stuff like this went on in OSS dev.
Basically you are buying a player registration with Fifa, so if a team wants a player they have to purchase the registration with the relevant authorities. Loaning players is just an agreement between the clubs and the central authorities that the registration will be loaned for an agreed amount of time. This can come with clauses that a player must play a certain amount of games, can't play against a parent club etc and the loaner must pay a fee or contribution to wages.
No kidding --- the vast majority of third-party repair information is available only because of lax security, and it's far more detailed that what the companies will ever willingly release.

Laptop schematics are still relatively easy to find these days, but unfortunately the search results are flooded with people trying to sell them; they used to be even more freely available several years ago. (Google tends to want to ignore the word "schematic" in a search query, unless it is in quotes. Make of that what you will...)
[superseded]
Is someone sending a letter to the University of Minnesota human research approval board or that university's equivalent?
Hen’s Teeth – and the Building Licence in Valencia
I've recently gone through the process of getting our stack, which includes python, go, and docker, running on an M1. Docker for Mac only recently released M1 support but it runs well enough. We upgraded to Python 3.9 to incorporate some M1 compatibility updates as well.

Overall, developing on the M1 Macbook Pro has been great so far.
For the M1 you can now use windows for ARM.
The easiest way to implement that would be using a Crossfire Diversity Nano receiver [1] with a backup battery. It supports GPS out of the box, directly connectable to the receiver.

For a custom solution, ExpressLRS [2] is an open source system that can be flashed to FrSky R9mm receivers that you can hack on to add features you want. Or buy Semtech [3] and ESP32 modules and build your own hardware to maximize transmit power (standard hobby receivers only have 25-40mW telemetry)

PS. TTGO LORA32 modules [4] already have ESP32 and Semtech module assembled, only need flashing (again, lower power than a dedicated 30dbm module)

[1] https://www.team-blacksheep.com/products/prod:xf_nano_div_rx

[2] https://github.com/ExpressLRS/ExpressLRS

[3] https://www.aliexpress.com/item/1005002116232826.html

[4] https://www.aliexpress.com/item/4000010599226.html
I think it's more cultural differences. The same happens with formula 1. Haas still at bottom.
I don't understand why this isn't a more widely-held sentiment. There's been instance after instance of corporate espionage in Western companies involving Chinese actors in the past 2 decades.
Exactly-once delivery is covering processing in this scenario. Because of that it is not covered in tests and schemas.
REST endpoint was just added to create entire use case. But you are right, if in this part of the system something will go wrong you will have duplicate message. But it’s rather at least once publish rather at least once delivery. Message will be delivered once, but published twice :)
I know they exist and I'm ignoring them in this case. Actually curious people who are on the fence will have potentially interesting chats and would not be classified as misinformation.
But you have to multiply that by the possible locations on the map and the enemy states. I imagine it would be possible to get a few hits at the starts of levels but I suspect that the vast majority of the frames for any play-through have never been seen before.
The particular patches being complained about seem to be subsequent work by someone on the team that wrote that paper, but submitted since the paper was published, ie, followup work.
Bad things happening to bad people is still bad if it’s done unjustifiably so. There’s nothing really about this story that prevents it from happening to a site you like.
Cars will increasingly become electric and power stations will increasingly become clean. The inconvenience will minimize. Anyway, i’m the united states it matters relatively little what ordinary people want, it matters what businesses want, which is presumably the biggest reason we don’t have a carbon tax or any other sensible environmental policy.
Right, internal apps are the sort of thing I think fall in the 'subset of problems' its good for, but as soon as you have a design guide to adhere to (i.e. you aren't just shipping the out-of-the-box configurations) its buggy and painful.
I think yesterday’s iMac shows that they haven’t given up on thinness.
Apple confirmed to Verge that it doesn't have UWB.

https://www.theverge.com/2021/4/20/22394335/apple-u1-uwb-loc...
I love those stories and agree they are fun, but aren't they also very money-oriented most of the time?

I know for example Cardiff City's renaissance and brief promotion to the Premier League corresponded with an influx of foreign cash. That's undeniably massive fun for supporters of Cardiff, but decidedly un-fun for teams that did not receive such an infusion of money, and in the end it doesn't make me too jealous of the pyramid model.
To be fair, the consequences of unethical research in medicine or psychology can be much more dire than what happened here.
I'd like to add that there is a critical shortage of security auditors for smart contracts and blockchain protocols.

Projects are willing to spend up to millions to squash away vulnerabilities. For example Balancer opened a bug bounty for their v2 with $2M USD for 1 critical bug:

https://docs-v2.balancer.finance/core-concepts-1/security/bu...
Investing $100M of your own money into a rocket company and then 18 years later taking NASA astronauts to the ISS is equally crazy.

Most people will remember the achievements and not the bold claims.
It's also not a pen test. Pen testing is explicitly authorized, where you play the role as an attacker, with consent from your victim, in order to report security issues to your victim. This is just straight-up malicious behavior, where the "researchers" play the role as an attacker, without consent from their victim, for personal gain (in this case, publishing a paper).
> Privacy setting for Last Seen: Set by default to Everyone and nobody configures it.

It surprised me that only 10% of his random (French) sample is active daily (179/1751=10%). In my contacts, I do see people who have accounts but haven't used it in weeks, but it's not the norm. However, I see lots of people in my contacts who show no info for Last Seen. Is he underestimating how often people configure the privacy setting for Last Seen? Or perhaps there is another factor that determines when Last Seen gets shown?
I just started using zettelkasten method using org-roam. Since I just got started, my notes are not big yet. But it's amazing experience for me, that writing what I've just read in my own words made it stick longer rather than just reading without writing about it. Before I started using zettelkasten, I read the book How to Take Smart Notes by Sönke Ahrens. Then applied what I read.

Currently, I'm learning deep reinforcement learning and I have to deal with computer programming and mathematical equations in my notes. Fortunately, emacs org-mode supports org-babel, latex and latex fragments. My learning got better with this experience.

The disadvantage is that the learning curve using emacs and org-mode is steep unless you use emacs and org-mode every day.

https://en.m.wikipedia.org/wiki/Zettelkasten
This is in France, where text messages were free (unlimited with your subscription) long ago before we had internet on our smartphone.
Thus people use text message a lot and did use WhatsApp only to contact people outside from France
I guess it could be useful for simple DOM manipulation. The issue with it is, despite how great co-locality of concerns is, is that it can't EVER be separated. So I would use something like this if I wasn't using any framework at all. As soon as you use a framework (e.g. svelte/react/vue), the need for manual jQuery/dom manipulation drops to near 0.
So I'm not using docker or Python so my opinion isn't so worthwhile but I would say you made the right choice for right now.

I have an M1 Air and ended up listing my iMac I use for work as the Air was just wholely faster for my tasks. For the average dev, I think there's a weird hap right now of "M1 now vs M1X/M2". It's getting later in the cycle and while M1 support has greatly gotten better, it's now closer to new models with drastic changes.

Now in my use (TS/Node), the M1 in native Node is unbelievable, it's twice as fast as Intel machines. But that's my use case.
Naive question: how is looting vulnerable smart contracts even illegal?

Without a legal framework of smart contract enforcement, recognition of literally-hypothetical assets as valuable, the public nature of blockchains that would preclude "unauthorized access," and unlike an exchange holding assets on behalf of customers - smart contracts are effectively leaving money on the ground for anyone clever enough to pick it up.

Clearly I haven't given it as much thought as the people involved, but it seems like if I'm not using my abilities full-time to hack and loot smart contracts, I'm missing the most direct and best possible effort/reward application of that kind of skill.
Poll: Which homepage should the logo on the blog lead to?
I expect it to lead to the main homepage and often click it, then realize it's still the blog and then manually edit the URL.

Asana (https://blog.asana.com/) leads to the blog without a link to the main homepage.

Shopify and Stripe redirect to /blog instead and they lead to the main homepage.

Twitter (https://blog.twitter.com/) doesn't even have a link to the main site.
*are holding onto

My 2015 MBP is still going strong and Apple support were even pretty great at helping when I did have one issue, even though they classify it as Vintage. But you're totally right, I'm really impressed by the M1 and am just holding out for the M1X to upgrade.
Ok this FIFA part makes sense, because I always wondered why there were fees that had to be paid for foreign players.

IIRC, when an NHL player under contract decides to play in Russia for a season, I don't think I ever hear of compensation being paid to the NHL team in return.
Why wouldn't you just cross-compile Go programs, instead of compiling them from inside an x86 emulator? CGO?
This article appears to be shadowbanned. Didn't know that was possible.
Personally, I think their data points should include "...and we had to explain ourselves to the FBI."
I know it’s a bit of an apples and pears comparison, but which part of changing the file extension feels more difficult than editing package.json?

I’m thinking about new projects rather than converting existing projects.

One benefit I can see to .mjs is that if all extensions are .mjs it’s clear what type of project it is without the need to open up package.json.
>If the "machine" somehow continued to work fine with him not being there for 15 years, why did his position even exist?

Tons of paper pushing positions exist so that politicians and high level appointed bureaucrats can do favors for people whom they owe favors. Someone (like the deadbeat brother of someone who donated to the governor's campaign or whatever, just making up a reasonable example) who could never hold such a well paying job on their own merits will be given a job and as long as they continue to punch the clock (though per TFA that's not a hard requirement in Italy) the will continue to get paid.
@nikolasburk can you comment? Before compiling this list I was seriously considering using Prisma to kick off a big upcoming project. In the spirit of being open-minded I'd really like to know if I'm fundamentally misunderstanding Prisma capabilities.
https://www.ans.org/news/article-447/nasa-work-on-lattice-co...
I was thinking of which physical qubits are connected to each other.
I have hit the same problems with Python deep learning tools. Apple’s version of TensorFlow was an OK start. If you like conda, they now have pretty good support for M1. I have the usual Docker problems, and I don’t think that they will get sorted until many more pre-built containers are also built for ARM.

That said, I love my M1 MacBook Pro and for now I don’t mind too much keeping my old MacBook nearby.
Over a year ago, I was investigating using Prisma to be the ORM for a GraphQL API of a Postgres database. When doing a proof-of-concept, I discovered that under the hood @prisma/client was spinning up it's own GraphQL server that it would send requests to in order to generate SQL to send to postgres. This extra middleware layer between my frontend code and postgres generated some pretty poor performing queries that took 50% longer to complete than the queries generated by using Hasura as our whole GraphQL API.

A quick glance at the @prisma/client code makes it seem like this pattern is still the case, since they have an "engine-core" package that downloads a binary server behind the scenes and runs it on a free port in the background.
It's pretty sad the M1 devices come with expensive 16GB variants and Apple doesn't even offer 32GB configurations, though.
Not to be confused with HyperScript [0], a popular JS templating library.

[0] https://github.com/hyperhype/hyperscript
And what exactly would Russia gain by invading Central Europe? Even now they can barely afford maintaining their occupation of Crimea.
> The same manufacturer that's known for dropping macOS support

Eh? Latest macOS runs on hardware from as far back as 2013.
> In my experience, it's easier to reason about and build systems when idempotency is an application level concern.

This is exactly what we are doing in my company :) But it’s always good to have an option and know that we can do it in specific cases without external calls. In this scenario it can be nice simplification.
The linked one is harmless (well it introduces a race condition which is inherently harmful to leave in the code but I suppose for the sake of argument we can pretend that it can't lead to a vulnerability), but the maintainers mention vulnerabilities of various severity in other patches managing to reach stable. If they were not aware of the severity of their patches, then clearly they needed to be working with a maintainer(s) who is experienced with security vulnerabilities in a branch and would help prevent harmful patches from reaching stable.

It might be less intentionally harmful if we presume they didn't know other patches introduced vulnerabilities, but this is also why this research methodology is extremely reckless and frustrating to read about, when this could have been done with guard rails where they were needed without impacting the integrity of the results.
Greg does not joke around: https://lore.kernel.org/lkml/20210421130105.1226686-1-gregkh...

[PATCH 000/190] Revertion of all of the umn.edu commits
> the best way to get the right answer on the internet is not to ask a question; it's to post the wrong answer.

https://meta.wikimedia.org/wiki/Cunningham%27s_Law
Bhutan's cricketers: Guardians of their galaxy
>> Then you also get which country is doing the destabilization, and it sure as hell isn't the EU.

> That's a pretty simplistic view of how international politics and geostrategy is played.

So EU is sending soldiers to the eastern front of Ukraine to fight??? It's well known among Ukrainians who is doing the fighting over there.

Ukraine democratically decides to prefer EU over Russia, maybe all parties need to live with that.
The original iPad was, in terms of compute specifications, a minimum viable product. The M1 Macs are not—they are the combination of a mature platform with a mature silicon chip. Given the sheer volume of M1 sales there’s no chance they’re going to be so prematurely deprecated as the original iPad was.

At the very least I’d put money on the M1 not being deprecated before all Intel-powered Macs (present and future) are deprecated.
Facebook should stay out of policing speech.
It's bad that this is happening, but from a developer standpoint it is also very easy to overlook things like this because most APIs are not aware of who the data is for.

When an API always returns the `last_seen` field regardless of who is querying the data, it's very easy to make the mistake to present the data to someone who should not see it.

That's also one of the reasons I think most CRUD APIs use bad practice because they always return all data on a READ and may always store all data on a CREATE or UPDATE.

But.. a company like Facebook should know better. It seems they just don't care.
What was interesting in my writing is that a simple API request quota could be preventing me from scraping this much.
> I guess it'd involve much more work, and could've yielded zero results - after all, I don't think there are any documented examples when a vulnerability was proven to have been introduced on purpose.

In line with UncleMeat's comment, I'm not convinced it's of any consequence that the security flaw was introduced deliberately, rather than by accident.

> scientists don't chase around the world looking for people or objects that, by chance, already did the things they're testing for

That doesn't sound like a fair description of what's happening here.

There are two things at play. Firstly, an analysis of the survival function [0] associated with security vulnerabilities in the kernel. Secondly, the ability of malicious developers to deliberately introduce new vulnerabilities. (The technical specifics detailed in the paper are not relevant to our discussion.)

I'm not convinced that this unethical study demonstrates anything of interest on either point. We already know that security vulnerabilities make their way into the kernel. We already know that malicious actors can write code with intentional vulnerabilities, and that it's possible to conceal these vulnerabilities quite effectively.

> Honestly, I wouldn't object to that experiment either. It wouldn't do much harm (little additional vandalism doesn't matter on the margin, the base rate is already absurd), and could yield some social good.

That's like saying It's ok to deface library books, provided it's a large library, and provided other people are also defacing them.

Also, it would not yield a social good. As I already said, it's possible to study Wikipedia's ability to repair vandalism, without committing vandalism. This isn't hypothetical, it's something various researchers have done. [0][1]

> Part of the reason to have public research institutions is to allow researchers to do things that would be considered bad if done by random individual.

It isn't. Universities have ethics boards. They are held to a higher ethical standard, not a lower one.

> Running research like this against them makes sense

No one is contesting that Wikipedia is worthy of study.

[0] https://en.wikipedia.org/wiki/Wikipedia:Wikipedia_Signpost/2...

[1] https://en.wikipedia.org/wiki/Wikipedia:Counter-Vandalism_Un...
I assume Apple sells vastly more Airs and 13” Pros than they do any other machine they make. The lower price is a huge contributor. If the M1 were only on the top end machines, this thread wouldn’t exist.
Linux Graphics Next: Explicit fences everywhere and no BO fences
> This is similar to initiating fluid mechanics experiments on the wings of a Lufthansa A320 in flight to Frankfurt with a load of Austrians.

This analogy is invalid, because:

1. The experiment is not on live, deployed, versions of the kernel.

2. There are mechanisms in place for preventing actual merging of the faulty patches.

3. Even if a patch is merged by mistake, it can be easily backed out or replaced with another patch, and the updates pushed anywhere relevant.

All of the above is not true for the in-flight airline.

However - I'm not claiming the experiment was not ethically faulty. Certainly, the U Minnesota IRB needs to issue a report and an explanation on its involvement in this matter.
It seems that Greg K-H has now released a patch of "the easy reverts" of umn.edu commits... all 190 of them. https://lore.kernel.org/lkml/20210421130105.1226686-1-gregkh...

The final commit in the reverted list (d656fe49e33df48ee6bc19e871f5862f49895c9e) is originally from 2018-04-30.

EDIT: Not all of the 190 reverted commits are obviously malicious:

https://lore.kernel.org/lkml/20210421092919.2576ce8d@gandalf...

https://lore.kernel.org/lkml/20210421135533.GV8706@quack2.su...

https://lore.kernel.org/lkml/CAMpxmJXn9E7PfRKok7ZyTx0Y+P_q3b...

https://lore.kernel.org/lkml/78ac6ee8-8e7c-bd4c-a3a7-5a90c7c...

What a mess these guys have caused.
Why I moved from Styled Components to (S)CSS modules
Do we need that many telescopes though? It seems like one only needs many 5 at any given time.
I hate when text is flowed to the full screen width. Makes it close to impossible to read without losing track of where you are.

At least add a style="max-width: 840px" or so to the <body>-tag.
PgTyped is similar, and it's superior to any other data access layer I've ever used. Ever.
Is there any plan to deal with non python dependencies somehow - in a way that's consistent?

E.g. install psycopg2 <- requires apt-get install libpq (and that's just on Debian) but python packaging has no consistent way of managing this.
Maybe he was very productive in other endeavors, personally or societally and it was a net gain :) or maybe hundreds of patients over 15 years had undesirable results at the hospital that would of been better had his salary gone to somebody who showed up?

UBI sounds pretty good in these situations.
This matches my team’s experience with TypeORM. It’s full of bad surprises. We use it exclusively with a read-only account because we don’t trust it to change our data under any circumstance. Our current plan is to move to MikroORM, Prisma 2, or just give up on Node completely.
The idea is that a large-scale LH2 flow into the system is being consumed, and perforce heated, and may be used as refrigerant on the way there. It makes perfect sense.

Rockets do this today, as indeed they have done from the earliest days, sending liquified gases through channels in the engine bell and combustion chamber before burning, keeping them both from vaporizing.

Here, the very high efficiency of electric-driven turbines is offset by the lower efficiency of fuel-cell generation, for what is expected to be a substantial net gain over burning H2 in internal combustion turbines.

The latter are the obvious first stage of deployment, taking advantage of LH2's extreme energy-to-weight ratio for reducing the takeoff fuel load by as much as 5:1. This form will probably be fielded in existing airframes, displacing some cargo space with in-hull LH2 tanks.
One aspect? This is the full picture. We wouldn't be talking about how polluting Bitcoin is if not for the all-assets bubble, as miners wouldn't be incentivized to spend much energy mining it.

Nobody talks about ransomware or the Silk Road anymore. Crypto is all about central bank policies now.

> Regulators were sleep at the wheel because it sounds complex.

Regulators aren't asleep at the wheel, they are on average in the upper classes in terms of wealth, which means they profit from the situation.

> the tangible difference between Gme and crypto is that everyone is trading on the exact same information. True, correct and regularly reported.

Nice fairy tale. Blockchains are auditable in real time by everyone, the stock market is not, as the Robinhood fallout demonstrated.
Not really, "style=" attributes work.