skysight-inc/HackerNews huggingface dataset:
I think that the patches that hit stable were actually OK, based on the apparent intent to 'test' the maintainers and notify them of the bug and submit the valid patch after, but the thought process from the maintainers is:

"if they are attempting to test us by first submitting malicious patches as an experiment, we can't accept what we have accepted as not being malicious and so it's safer to remove them than to keep them".

my 2c.
He seems to forget that the Amiga had the OS in a ROM (or, in the case of the A1000, in a separate Kickstart disk to be loaded at power-up).

Boot-loaded Games disposed of the GUI (Workbench) and some other things, but the OS was not included in them.
> a single streamlined product.

Problem is, the past will remain with us in every book, code example or stackoverflow answer. As a beginner you need to understand the difference between .net framework and .net core because any blog post or tutorial will reference one or the other. Now people start calling it .net 5 or .net 6 instead of core, but you have to understand that this is incompatible with ".net framework" or ".net 4".
Makes sense considering how open source people are treated.
>>>On the Feasibility of Stealthily Introducing Vulnerabilities in Open-Source Software via Hypocrite Commits
Qiushi Wu, and Kangjie Lu.
To appear in Proceedings of the 42nd IEEE Symposium on Security and Privacy (Oakland'21). Virtual conference, May 2021.

from Lu's list of publications at https://www-users.cs.umn.edu/~kjlu/

Seems like a conference presentation at IEEE at minimum?
Should've at least sought approval from the maintainer party, and perhaps tried to orchestrate it so that the patch approver didn't have information about it, but some part of the org did.

In a network security analogy, this is just unsolicited hacking VS being a penetration test which it claims more so to be.
“ Application developers should care about data – not SQL”

Anyone who has been bitten by an ORM generating inefficient SQL (and subsequent having to learn and care about SQL) knows the above not to be true.
My guess is: a journal that does not focus on studies of human behavior and whose editors are a) not aware of the ethical problems or b) happy to ignore ethics concerns if the publication is prone to receive much attention (which it is).
I believe opponents call it "death tax" in the US as well. The progressive linguist George Lakoff has analysed this framing issue in depth.

https://www.chronicle.com/article/who-framed-george-lakoff/
Towards Real-Time AI Humans with Neural Lumigraph Rendering
> It's a fucking war there, people are sent to war to kill and to get killed.

For me it is "here". The fact that for you it is "there" makes me think that you should talk more to actual people that are living in the countries you mentioned in previous post instead of lecturing them over internet with copy/paste of Russian propaganda "news" pieces.

Besides, it might be a novel concept for you, but here we have an actual elections. People can always vote for some Russian puppet (Medvedchuk, for example) and "join" Russia. I guess majority thinks that "fucking war" is better alternative in this situation.

> GDP in Ukraine is ~3,5k$ per year.

Your point being? It is not like Ukraine was some rich local Eastern European Switzerland until sneaky CIA/Soros sponsored NGOs "destabilized" it.

> Your software developer friends are just outliers there.

Are you intentionally omitting my next sentence?
Thanks (This thread may now read a bit confusingly as I independently found that and edited my comment above)
Japan? South Korea? Just brainstorming, here.
>>>On the Feasibility of Stealthily Introducing Vulnerabilities in Open-Source Software via Hypocrite Commits
Qiushi Wu, and Kangjie Lu.
To appear in Proceedings of the 42nd IEEE Symposium on Security and Privacy (Oakland'21). Virtual conference, May 2021.

from https://www-users.cs.umn.edu/~kjlu/

If the original research results in a paper and IEEE conference presentation, why not? There's no professional consequences for this conduct, apparently.
Just because you have never heard it, does not mean it does not exist. Look at how the article is written and you understand it takes sides.
> And a Japanese speaker would have an advantage in understanding Chinese characters, even though the languages have no kinship.

https://en.wikipedia.org/wiki/Pseudo-Chinese
theres even kind of a leet-like thing in japan to spell japanese sentences with only kanji so they look chinese

and the funniest part? the chinese themselves can actually somewhat understand these sentences
* plonk *
Was a very nice touch.
context matters a lot.

the Belarusian security forces are not as loyal to the Lukashenko regime as you think. They are all part of the same social fabric, they have mothers, brothers sisters who are among the population. The oppositions successful unmasking of them has been a massive spanner in the strategy of Lukashenko oppression.

What they are missing is being able to defend themselves from Wagner group mercenaries who have absolutely no such ties and couldn't care about who they kill. Sending mercenaries and arms with a mission to take out the Lukashenko regime while fighting the Russians who are infiltrating the security forces would be the only strategy.

Helping in other ways (from the comfort of an arm chair) is possible but it means cracking down on off-shore banking and money laundering (much of it takes place in Europe & the US. Good luck.

That's pretty much how this has been working throughout the history of the human race.
CPU rendering should not be a thing in 2021
Deaths are clearly exponentially increasing:

https://ourworldindata.org/explorers/coronavirus-data-explor...
Meh, this means a lot of viral social experiments on Youtube violate the Nuremberg code...
Out of curiosity, what would be an actually good way to poke at the pipeline like this? Just ask if they'd OK a patch w/o actually submitting it? A survey?
Brisbane startup Octopus Deploy secures $223M
Not a big loss: these professors likely hate open source. [edit: they do not. See child comments.]

They are conducting research to demonstrate that it is easy to introduce bugs in open source...

(whereas we know that the strength of open source is its auditability, thus such bugs are quickly discovered and fixed afterwards)

[removed this ranting that does not apply since they are contributing a lot to the kernel in good ways too]
1) They identified vulnerabilities with a process
2) They contributed the correct code after showing the maintainer the security vulnerability they missed.
3) Getting the consent of the people behind the process would invalidate the results.
IEEE, see the publications list at https://www-users.cs.umn.edu/~kjlu/

>>>On the Feasibility of Stealthily Introducing Vulnerabilities in Open-Source Software via Hypocrite Commits
Qiushi Wu, and Kangjie Lu.
To appear in Proceedings of the 42nd IEEE Symposium on Security and Privacy (Oakland'21). Virtual conference, May 2021.
I wouldn't call this fake research. Maybe unethical, but they did do research, and they did obtain data,and they did (attempt?) to publish it.
Making Vaccines Is Straightforward; Getting People to Take Them Isn't
The IEEE apparently. It is a clear breach of ethics but apparently they don't care
How much work do you have to deal with if a column gets renamed? Be honest.
I know this is going to be contentious, but a quick Google shows that

* both originated in China (both attended early university there)

* one appears to be on a student VISA (undergraduate BA in China, now working on PhD at UoM)

China doesn't allow its brightest and best to leave, without cause.

When I see research like this, it also makes me think of how "foolish" China sometimes views the West, and the rest of the world. Both for political reasons, eg to keep the masses under control, and due to a legitimate belief we all have in "we are right".

Frankly, whilst I have no personal animosity against someone working on behalf of what they see as right, for example, forwarding what they believe to be in the best interests of their country, and fellow citizens? I must still struggle against goals which are contrary to the same for my country, and my citizens.

Why all of the above?

Well, such things have been know for decades. And while things are heating up:

https://www.cbc.ca/news/politics/china-canada-universities-r...

"including the claim that some of the core technology behind China's surveillance network was developed in Canadian universities."

When one thinks of the concept? That a foreign power, uses your own research funding, research networks, resources, capabilities, to research weaponry and tools to destroy you?

Maybe China should scoff at The West.

And this sort of research is like pen testing, without direct political ramifications for China itself.

Yes, 100%, these two could have just been working within their own personal sphere.

They also could be working on research for China. Like how easily one can affect the kernel source code, in plain sight. And even, once caught, how to regain confidence of those "tricked".

dang: This post does not deserve to be flagged. Downvote? Sure! Flagged? I've seen far more contentious things stated, when referring to the NSA. And all I'm doing here is providing context, and pointing to the possible motivations of those involved.

Others kept stating "Why would the do this?!" and "Why would they be so stupid?".

Further, at the end I additionally validate that I am postulating, that 100% it certainly may not be the case. Only that I am speculating on a possible motivation.

Are we now not allowed to speculate on motive? If so, I wonder, how many other posts should be flagged.

For I see LOADS of people saying "They did this for reason $x".

Lastly, anyone believing that China is not a major security concern to the West, must be living under a rock. There are literally hundreds of thousands of news articles, reports, of the Chinese government doing just this.

Yet to mention it as a potential cause of someone's actions is.. to receive a flag?
Aren’t they heavily encrypted?
Don't mistake mate guarding for monogamy. Mate guarding is completely compatible with polygamy and is seen in other great apes. When men say they want monogamy, what they mean is they want exclusive access to their female. That doesn't mean they don't want other females in addition. Monogamy is something males trade to get exclusivity. It doesn't mean this is what they want.

If you truly believe men want monogamy then how do you explain porn? It's a huge industry and more an accepted part of life than ever. Do you think it's all being consumed by a few guys you don't know?
Previous discussions:

https://news.ycombinator.com/item?id=11388196

https://news.ycombinator.com/item?id=17773874

https://news.ycombinator.com/item?id=26886792

(For commentary, I'm not being snarky.)
So, for "research" you're screwing around the development of one of the most widely used components in the computer world. Worse, introducing security holes that could reach production environments...

That's a really stupid behavior ...
FinTech Trends in 2021 Report – Erlang Solutions
With insightful comment from leading industry voices - if you're working in FinTech or just curious about how this important industry will look as we recover from the last year, check out our in-depth FinTech Trends in 2021 Report > https://www.erlang-solutions.com/landings/fintech-trends-whi...
What Are the Benefits of Laravel Development for Enterprises?
So I had this debate at a meetup. The issue here is how you define "hardest". Spoken Japanese is actually judged by linguists as easier than English. Written Japanese is harder because it takes years to learn all the kanji but a child will become "fluent" in Japanese faster/easier than English.

So being "literate" (able to read and write) is different than being "fluent" (able to listen and speak) (not sure that's the definition of fluent, just pointing out there are more issues.)
There are several board games that actually have rules that encourage cheating. I specifically remember one where the rule was basically "If you get caught during the turn on which you cheated, you need to pay a minor penalty. If the turn passes before you get caught, then you got away with it."
Regulators Could Have Prevented Fatal Tesla Crash
For security purposes, likely all prior entries are kept on hand with the time, for some retention period, before being wiped.
(This is not tax advice. Do your own research.)

In general, an LLC with no revenue and no deductions or credits doesn’t need to file an IRS return. That’s true of LLCs taxed as sole proprietorships and as partnerships, but not for people who have elected to have their LLC taxed as a corporation. Corporations must file regardless of activity.

Here’s a few places to start: https://www.irs.gov/faqs/small-business-self-employed-other-..., https://ttlc.intuit.com/community/business-taxes/discussion/...
My undergrad Info Systems degree switched from teaching Programming I and II in C++ and Java to C# and Java recently. I think the reason was market relevance? Either way [coming from a very hacky python background] it taught me the core concepts well. I continue to enjoy C# after graduating but have not touched Java since
In Catan there are multiple ways to try to get to 10 points, so if someone else is in the lead via one strategy (e.g. city building) it's still possible to be in the lead for a different one (e.g. development cards).
First of all can you provide any credible sources that will back your claims regarding Poland and its attempts to smuggle weapons? This sound like pure lie to me. Second thing: "The best way to help them now is to send arms" - this sounds like Russian provocation. Sending weapon to Belarus will only justify Russian miliary opperations in this country. So either you don't know what are you saying or you are instigator.
Spot on answer
> China doesn't allow its brightest and best to leave, without cause.

LOL, this is completely unfounded bollocks.
Go hack a random organization without a vulnerability disclosure program in place and see how much goodwill you have. There is a very established best practice in how to do responsible disclosure and this is far from it.
I quote qart: "Lockdowns hurt poor people very badly; they need to earn to survive."
TypeORM or MikroORM, any of those should be fine
Yes and?

This isn't a "gotcha" - people shouldn't do this.
> It's likely a university with professors that hate open source.

This is a ridiculous conclusion. I do agree with the kernel maintainers here, but there is no way to conclude that the researchers in question "hate open source", and certainly not that such an attitude is shared by the university at large.
this argument is akin to somebody just having kidnapped my family while despite me knowing where the kidnappers live being told I should not gun up but "come up with a peaceful plan" (perhaps hit the kidnappers with a leaflet campaign).
Overcoming a Challenging Situation?
I left the FAANG world to join a startup in Scandinavia.

The first several months were alright, but not the best. I was having conflicts with the team leader and interpersonal issues with other engineers. Eventually, a tipping point was reached and I was subsequently removed from the team.

In retrospect, I was experiencing severe anxiety and other mental health issues, in addition to Aspergers. My communication and approach were tuned for the FAANG world. Direct, dry, and opinionated. I didn't take any time to readjust, re-calibrate, or transition into a different working and company culture. I suspect that my mental state was hindering my ability to think rationally.

I was in a "survival mode" and wanted to stick to my existing and known working routine.

I'm troubled with the fact that my colleagues were hurt by me. I'm disappointed with myself that I didn't listen to my partner, my colleagues, or the wisdom of the people around me. I'm sad and frustrated with the overall situation. I know I could have done better, and coming face to face with my social challenges is something that I have been avoiding.

I want to learn and improve from this situation. I want to repair the relationships and earn the trust and respect of my colleagues. I want to grow and be a safe, reliable and trusted person to work with.

Does HN have any wisdom or advice for me?
Everything is very open with a clear description of the issues. It was truly informative. Your website is very helpful. Many thanks for sharing!

https://www.mycardstatement.review/
Given that this conference hasn't happened yet, there should still be time for the affected people to report the inappropriate conduct to the organizers and possibly get the paper pulled.
econonist's is js-based

f12, ctrl+shift+p, type disable js, reload
For beginners, Java is pretty much C# with uppercase types, so I have a hard time believing one is easier than the other.
There are rumours that Belarus will become part of Russia shortly. Putin just said that the West/United States crossed the line and tried to murder Lukanseko. Upheaval is coming
https://twitter.com/ivan8848/status/1384815408495140865
So much about the techcrunch article
I suggest to not add a layer.
Stay close of the SQL request, you can simply have a function that will fulfill an access pattern. No need for ORM.
> the clear and open intent to not follow the rules

it's great to be honest, the only way we played uno was with cheating (if you got caught, you lost the round tho)

it creates a lot of interesting cross round strategies; if you aren't close to victory in one round for example you can hide a good card and save it up for the round, for example. hiding a card or two would get you to uno quicker, but you'd have to play them at some later point or later ruond, and you couldn't win strictly by hiding because once uno is declared your count is fairly visible. but you can strategize and by deciding which card to drop open up more possibilities for matching your last card.

I suggest everyone should try a evening of full on cheating at a luck based game, it's super fun when everyone else is doing it too.
It's not _the_ problem, but it's an actual problem. If you follow the thread, it seems they did manage to get a few approved:

https://lore.kernel.org/linux-nfs/YH%2F8jcoC1ffuksrf@kroah.c...

I agree this whole thing paints a really ugly picture, but it seems to validate the original concerns?
AFAIK, it hasn't been yet

https://www.theverge.com/2021/3/8/22319136/whatsapp-cloud-ba...
Apple Targeted in $50M Ransomware Hack of Supplier Quanta
> While it is maybe "scientifically interesting", intentionally introducing bugs into Linux that could potentially make it into production systems while work on this paper is going on, could IMO be described as utterly reckless at best.

I agree. I would say this is kind of a "human process" analog of your typical computer security research, and that this behavior is akin to black hats exploiting a vulnerability. Totally not OK as research, and totally reckless!
Are there any measures being discussed that could make such attacks harder in future?
With mortality figures as low as they are it’s hard to see that number decreasing considerably with increased regulation. In each example there appears to be morbidity secondary to unacceptably delayed medical diagnosis. It is incredibly easy to spot a battery on a plain film and an infant/toddler presenting with the symptoms described warrants immediate suspicion.
No, every guy I know, including myself, consumes porn. But it's not because I or they want polygamy. I'm not even sure how you're making that connection, since that's quite the leap.
These two sentences seem contradictory from the author's response is contradictory: " The IRB of UMN reviewed the study and determined that this is not human research (a
formal IRB exempt letter was obtained). Throughout the study, we honestly did not think this is human research, so we did not apply for an IRB approval in the beginning."

I would guess their IRB had a quick sanity check process to ensure there was no human subject research in the experiment. This is actually a good thing if scientists use their ethics and apply good judgement. Now, whoever makes that determination does so based on initial documentation supplied by the researchers. If so, the researchers should show what they submitted to get the exemption.

Again, the implication is their University will likely make it harder to get exemptions after this fiasco. This mistake hurts everyone (be it indirectly). Although, and this is being quite facetious and macabre, the researchers have inadvertently exposed a bug in their own institutions IRB process!
Phoible lists four phoneme inventories with the Czech <ř> ([r̝] in IPA), three of which are varieties of Czech and the fourth being Lyélé in Burkina Faso: https://phoible.org/parameters/1214D761CC44F5F017FD63EA26B45...

However, Phoible is not exactly complete. E.g. Wikipedia has a different list: https://en.wikipedia.org/wiki/Voiced_dental,_alveolar_and_po...
The fact that the Nest motion sensors / path lights in my home have been functioning for almost 2 years (their stated lifespan) without me needing to replace their tiny batteries boggles my mind.
What are the odds your pet will be within range of an iOS device?

Perhaps intermittently if in a busy urban environment, quickly heading to nil if in a more rural area.
Also by and large reputation is a good first step in a security process.

While any USB stick might have malware on it if it's ever been out of your sight, that one you found in the parking lot is a much bigger problem.
Unfortunately, quality is expensive. Customers don't always want to pay for it, and so the businesses serving those customers don't either. This is true of good design, but other things too. For example, how many software businesses today believe having lots of bugs is OK as long as they can keep the money coming in?

Some of the most successful sites on the Web have abysmal design and some of the most successful sites on the Web break all the time. And yet, despite those things, they remain among the most successful sites on the Web. Unless and until those of us who value quality can make it pay as a business model, we're always going to lose the argument. The hard thing to accept is that if we can't turn better quality into a competitive advantage, maybe we should be losing the argument.
It's a list poking fun at their repeated reporting of things related to cancer - you don't have to take "causes" literally. It's very tongue in the cheek.

Also, as mentioned on top: "However, it is worth noting that some of the entries are backed up by scientific fact. It’s just a shame that the vast majority are fear-stoking exaggerations and lies."
Hey, Nikolas from Prisma here.

There are quite a few other ORMs for working with DBs in TypeScript (none of them providing the same type-safety guarantees that Prisma does though [1]).

In fact, we laid them out on a docs page [2] in case you want to learn which tool might be appropriate for your use case.

[1] https://www.prisma.io/docs/concepts/more/comparisons/prisma-...

[2] https://www.prisma.io/docs/concepts/overview/should-you-use-...
It's been a while since I read the The God Delusion but I'm pretty sure he criticized Islam in it. Since then he veered into social media territory, delivering cringe-worthy 'burns' and 'hot-takes' on all sorts of clickbait news items. It's hard for me to reconcile that the same man who wrote The Selfish Gene, which I love, is the guy ranting on Twitter like a drunk FB grandpa.
All online "journalism" which uses advertising as its main source of revenue does exactly this. For example in Australia we have news.com.au who uses the exact same tactics. In fact their headlines and blurbs are even shorter than Daily Mails, forcing you to click to learn what the carefully worded (yet extremely manipulative) headline is talking about. This is not exclusive to Daily Mail.
That might be an interesting topic for research LoL