skysight-inc/HackerNews huggingface dataset:
Ask HN: Where do you submit your annual blog post?
I want to tell my not-quite-amazing story.

But I don't blog. And I don't want to be a blogger.

I don't use Facebook, Twitter, Insta, etc.

I looked at Hacker Noon but they don't really do job-related stuff.

HN seems like we/they don't like original content posted on HN.
The incumbent control is executed through regulations. Cities more friendly to regulation have this type of problem more often. I see this sort of thing attributed to capitalism all the time when, really, it's just corruption of the regulatory process. Corruption isn't a bug in capitalism, it's a trait of humans. Corruption has crippled bodies of all types, from the UN to my HOA.

With zero regulation this problem wouldn't exist. The guy would rent the space and open an ice cream shop in days, if not weeks. There might be rat feces in the chocolate chip but he'd be selling it.
I think there are two strong factors here:

1. Nostalgia is a hell of a drug and change is scary.

2. I got mine - time to pull up the ladder.

SF is a really weird place to live where people want to keep it locked into a scenic ideal that isn't scalable to the population that wants to live and work there. There's also a weird conflux of geographic constraints coupled with a whole boatload of money. Additionally, all of the businesses established in SF have a strong motivation to keep more businesses out to protect their revenues, even if more business would contribute to a stronger economy through long term growth. I think it's fair to say that SF is slowly falling into the ocean, but there's still enough demand and money flowing in that it keeps pushing itself up periodically.
If the law, as written, does actually classify this as human research, it seems like the correct response is to sue the University for damages under that law.

Since IRBs exist to minimize liability, it seems like that would be that fastest route towards change (assuming you have legal standing )
Microsoft CBL-Mariner Distro
"Linux OS for Azure 1P services and edge appliances" [now powering Linux GUI apps on WSL]
Ask HN: What will happen to the Go ecosystem if one day GitHub closes
Seeing all those `import "github.com/repo/lib"` worries me.

There is no central registry in Go (like PyPi, or NPM, or Crates.io), and it seems there is no will to add one.

Are we expected to mirror github on our infrastructure to become resilient in case of a major outage?

How can a language be so popular with such bad design choices?

After reading this article: https://medium.com/@rwxrob/gophers-we-dont-need-no-stinking-package-registry-cb8f9051e6f0

I sense a bit of hypocrisy:

> What if the thing goes down or becomes unworkably slow (as NPM has done on countless occasions)?

What if I remove my git repository? What if Github goes out of service?
I agree with the sentiment. For a project of this magnitude maybe it comes to develop some kind of static analysis along with refactoring the code to make the former possible.

As per the attack surface described in the paper (section IV). Because (III, the acceptance process) is a manpower issue.
To clarify, the raise is about 8% over the regular inflation rate.

The bigger issue is the fact that all new stuff is not significantly different or better, but almost 3 times the price. The floor is falling out.
Nearby businesses objecting.. That's like In-N-Out saying Whataburger can't open near it. Wow, that is/was such an incumbent advantage.

Yeah, the rent in Manhattan/SF/etc. is sometimes more costly that the entire staff for a year AND the fixtures. There's motivations to throw those kinds of places together ASAP with contractors working 24/7 until it's ready to launch. Not having the permits together, aggressive timeline, and everything lined-up to launch ahead-of-time is just too risky.
Additionally I've been in situations where management turns a blind eye to an obvious sociopath, and sociopathic people are a real phenomenon which prey on people's vulnerability. I tried just be vulnerable, it back fires. Since experiencing that, I've found myself keeping a distance, I tell my truth but I don't share vulnerability since it sucks when it's used against me. I'm in a stronger position not sharing.

There are always consequences for over sharing, the obvious answer is don't overshare.
Capitalism? Socialist countries such as Cuba and North Korea are far worse in terms of state-mandated incumbent preservation. Their economies are lifted directly out of 1950 in the best parts, and the feudal era in the worst parts.
You Can Sell the Trees You Don’t Cut
What kind of avenues exist for a competitor to stall committee hearings like that?
Pretty sure it's much more generous than the UK for everyone except the well-off. In many cases the US managed to pay more than 100% of people's previous salaries in unemployment, structured to be most generous compared to their previous job for those with the least pay before, whereas furlough for those lucky enough to get it was capped at 75% and unemployment for those unlucky enough to lose their jobs entirely was barely boosted over the stingy standard payments. Unfortunately, trusted US publications like the New York Times mislead their readers about this for nakedly partisan reasons, just like they did with every other part of the US pandemic response and how it compared to the rest of the world.
On the plus side, it looks like these vulnerabilities can't be exploited once the device has been fully set up (unless I'm misreading the reports).

But, still, we all know that the S in IOT stands for "security"
Knowing that at least one row of data in a database might have been modified randomly means you can't fully trust any one line in the database completely.

It reminds me of the story of https://en.wikipedia.org/wiki/Annie_Dookhan
https://windowsserver.uservoice.com/forums/295047-general-fe...
Use MySQL Dump Command to Backup and Restore Any Database
I don't think SQL does compose well. Queries aren't first-class values in SQL.

I can write a query that queries the result of another query, but I can't store a query and then pass that somewhere to query from.
I agree with you. Its silly to act like the phenomenon doesn't exist though.
My favorite example is that Blue Bottle a san francisco based coffee company that started as a super tiny shop ended up becoming one of the big companies and had a difficult time opening up coffee shops in the neighborhood due to the 6 franchise location.

To be fair - it did take a lot of VC money to build out the company and it has a pretty impressive footprint. Still kind of funny to get kicked out of your own home turf.

FWIW - as a former SF resident I love the diversity of stores without all the large chains coming in.
Apparently they aren't doing human experiments, it's only processes and such. So they can easily emulate the processes in-house too!
Please make your substantive points without flamebait.

https://news.ycombinator.com/newsguidelines.html
Its biggest use case has and always will be accountability.
Nothing I said is false, any of you downvoters want to dispute what I said?
SF resident here: stuff like this is absolutely real and commonplace.

If anything, stories like this actually undersell the situation since a lot of the "brokeness" isn't just due to incompetence but rather straight up corruption. DBI and Planning in particular are notorious for bribery[1], but the problem is extremely pervasive throughout the city government.

[1] https://missionlocal.org/2020/09/rodrigo-santos-dbi/
Well, with zero regulation this guy would open up his shop and the other business owners would just dump trash outside of his door until he's forced to move away (or, like, worse).

Regulations work both ways and even the regulation here (restricting the opening of a new business) is something that can and has benefited small business - lest we forget when Walmart aggressively forced out competitors with heavy market saturation before consolidating services into infrequent super-stores.
I don't think I can see that.

??
By "bogus speculative asset", you mean "store of value asset", unless you are also implying that the $10tr gold market, including the gold stored by central banks across the world, are also bogus speculative vehicles.
You'd apply for permits on a place you aren't renting just in the hopes that its still vacant and available when you get the permit?
I’d suggest paying for things like https://watchnebula.com/ or a creator’s ad-free patreon version of videos is maybe a better path than trying to game the ad system? Or at least in conjunction with it.
There are 4 or 5 other small-business ice cream places within 3 blocks of that location.

As far as I’m concerned the more the merrier, and it sucks that this particular project became a nightmare for the owner, but objectively this is already one of the most small-ice-cream-shop-friendly neighborhoods on the planet.
I'm in Delhi right now and its truly bad over here. My neighbor was sick and we literally couldn't find a hospital bed for him that had sufficient oxygen. The system is breaking down.

This is what they originally warned us about.
I don't understand the seeming incongruity between these two statements:

On the one hand:

> One way to think about Cellebrite’s products is that if someone is physically holding your unlocked device in their hands, they could open whatever apps they would like and take screenshots of everything in them to save and go over later. Cellebrite essentially automates that process for someone holding your device in their hands.

But on the other hand:

> We are of course willing to responsibly disclose the specific vulnerabilities we know about to Cellebrite if they do the same for all the vulnerabilities they use in their physical extraction and other services to their respective vendors, now and in the future.

If UFED just copies data from unlocked phones, why would they be using vulnerabilities to do so?

I guess my question is, is Cellebrite capable of copying locked devices, or more to the point - has vulnerabilities to unlock devices without knowing the access PIN?
> Every single person involved knows it's bullshit

In many countries, this is a sure sign that palms need to be greased.
SqueezeBox Keyboard
To be fair there is a balance on preservation and development. Development run amok in the city is pretty bad while underinvestment also creates some strange pressures.
Yeah, I saw that. But the whole thing is a bit too unclear to me to know what happened.

I'm not saying this is innocent, but it's not at all clear to me that vulnerabilities were deliberately introduced with the goal of allowing them to reach a release.

Anyway, like I said, too unclear for me to have an opinion.
packed_simd is now packed_simd2, the original author is MIA and no one else has crate or repo permissions

I really think the general push right now is towards stdsimd being the future for portability.
So, as a mostly Windows guy: What Linux GUI apps are you going to run? What has a Linux GUI but no Windows app or alternative?
What's the difference with eToro?
That is takes $320k and 12-18 months to stand up a new retail space with a full interior refresh in a city like San Francisco is not that surprising. Also, not that it takes anything away from the point of the article, but it seems like Mr. Yu may have committed more cash up front than was necessary. I could be wrong but rent, legal, and architect seems like it could have been half that. Sweat equity excluded of course.
Hi IT, we got a FOIA request for all of xyz’s drafts.
The ability for competitors to object to you opening up your shop establishes that.
Based on the title, I expected an article about the habits of super wealthy gamblers, and was pleasantly surprised to find out it is about actual whales. Nice.
Summary of Michael Lynch's Hacker News Course
The doctors in my family all openly say that the real numbers are at least bigger by a factor of 10.
There was no implication of abuse intended in what I wrote. The intent was temper the notion that everyone receiving unemployment benefits is on the brink of poverty. The reality varies widely. The topic requires more nuance.
Then you might like TIS-100 [1] and Shenzhen I/O [2].

[1] https://store.steampowered.com/app/370360/TIS100/?curator_cl...

[2] https://store.steampowered.com/app/504210/SHENZHEN_IO/?curat...
PureORM[1] is an implemented thought experiment on what a "pure" object mapping library would look like - where you write regular native SQL and receive back properly structured (nested) pure business objects.

It would contrast against traditional ("stateful") ORMs which use query builders (rather than raw SQL) to return database-aware (rather than pure) objects.

The name pureORM reflects both that it is pure "ORM" (there is no query builder dimension) as well as the purity of the mapped Objects.

[1] https://github.com/craigmichaelmartin/pure-orm
Do you have a source for this? I'd love to see them move in this direction based on the success they've had with VSCode.

Edit: Nevermind, found one myself:

https://www.youtube.com/watch?v=-ri7TmPeqLc
The federal government has updated the rules for exemption in 2018. The MSU link is more of a summary than the actual rules.

The fact that a mailing list is publicly available is what made me worry about the applicability of any sort of exemption. In order for human subject research to be exempt from IRB review, the research needs to be deemed less than minimal risk to participants.

The fact that their experiment happens in public and that anyone can find their patches and individual maintainers' responses (and approval) of them makes me wonder if the participants are at risk of losing professional reputation (in that they approved a patch that was clearly harmful) or even employment (in that their employer might find out about their participation in this study and move them to less senior positions as they clearly cannot properly vet a patch). This might be extreme, but it is still a likely outcome given the overall sentiment of the paper.

All research that poses any harm to participants has to be IRB approved and the researchers have to show that the benefits to participants (and the community at large) surpass the individual risks. I am still not sure what benefits this work has to the OSS community and I am very surprised that this work did not require IRB supervision at all.

As far as work on a public street is concerned, IRB doesn't regulate common activities that happen in public and for which people do not have a reasonable expectation of privacy. But, as soon as you start interacting with them (e.g., intervene in their environment), IRB review is required.

You can read and analyze a publicly available mailing list (and this would even qualify as non human subject research if the data is properly anonymized) without IRB review or at most a deliberation of exempt status but you cannot email the mailing list yourself as a researcher as the act of emailing is an intervention that changes other people's environment, therefore qualifying as human subject research.
A year doesn't sound unreasonable. Especially for a person's first time. Even large franchises in midwestern strip malls can take 9+ months to get going.

Restaurants are harder than people are aware.
Just because it's not something typically shown in film doesn't make it absurdist.
This is the rare HN joke that not only is hilarious, but susinctly makes the core point that is being disagreed about clear
Put a flaming bag of shit on the doorstep, ring the doorbell, and write a paper about the methods Liu uses to extinguish it?
In a perfect world, I would agree that the work of a researcher who's not an established figure in the kernel community would be met with a relatively high level of scrutiny in review.

But realistically, when you find out a submitter had malicious intent, I think it's 100% correct to revisit any and all associated submissions since it's quite a different thing to inspect code for correctness, style, etc. as you would in a typical code review process versus trying to find some intentionally obfuscated security hole.

And, frankly, who has time to pick the good from the bad in a case like this? I don't think it's an overreaction at all. IMO, it's a simplification to assume that all associated contributions may be tainted.
WSL allows some developers targeting Linux to continue using Windows as their main OS. It also makes them more likely to choose Azure over AWS due to integration with the tools. It's a well-planned move that translates into real revenue.

Free fully supported Linux distro with Windows support will only reduce the sales of Windows itself. So no, this isn't happening.
That creates an entirely different set of problems though.

You'd have to predict a space that was opening to apply for the permit. Then "local" businesses can object so you couldn't just get a blanket permit, it'd have to be for the specific place, so you just have to wait around until that storefront is vacant?

If you start while it's vacant, it'd be pretty terrible if you went through the whole process only to have someone else beat you to it. If you only allow one process at a time, you're stopping the property owner from collecting rent during that process.

Any regulatory process that takes time shifts some cost onto someone.
For one, the competitor waited until after the town approved all the variances and permits. That process alone took a year.

There also aren't strict schedules with these zoning and permitting decisions, it's a "we'll get to it when we get to it", and if the hearings run late into the evening, and they don't get to your issue, then maybe you have to wait a month or two until they reconvene.

So once the approval was given by the town, the hotelier, who had been watching all along, files a lawsuit against the town and my company, claiming it was granted improperly (which is technically true).

Once that happens, you're now in the thicket of the legal system, and as the saying goes, "the process is the punishment". You win one battle, competitor appeals (waiting for the last day to file the appeal each time), you win that one, competitor appeals again. Your lawyer makes a mistake, go back to square 1. And months go by between decisions. Meanwhile, you're paying property taxes and legal fees like nobody's business.
I don't see this ever being relevant on the scale of plastic pollution; people will buy a few and use them for years. For example, is the world being overwhelmed with smartphone cases?
The problem with being boring while attacking powerful institutions (like LEOs or nation states) is that it only works as long as you're small enough to stay below their radar. After a certain point, the material reality will sink in that you're a threat, and they're going to take action against you regardless of how you carry yourself. It's totally possible, given that we're starting to hear more and more accounts of powerful people using Signal, that we're approaching that tipping point, and a more gloves-off approach might be necessary.

That being said, I agree with you 100% on the cryptocurrency payments issue and think that was a misstep on their part.
Cede and Company
Yes? What's your problem with it?

Have you ever heard of Zen Buddhism? All the "advice" you get from Zen teachings is pretty similar to this, except with more focus on not-doing as an approach to doing.
If it didn't take 2 years to sort out the filings nearby shops did to stop his shop from opening he wouldn't need to pay 2 years of rent with no possibility of earning any money.
Is it malware if users desire for their devices to be resistant to surveillance tools?
Properly managed agroforestry is an excellent carbon sink, where properly managed is doing all of the heavy lifting here.

The napkin strategy is to grow fast woods, kiln them into charcoal, spread some of it on the forest as a soil amendment, spread the rest on agricultural land, repeat.

Elemental carbon weatherizes into CO2 very slowly, on the order of centuries, the half-life is more than a thousand years. So-called "biochar" (it's just charcoal) is an excellent soil amendment, mitigates topsoil depletion, supports good microbiomes, adsorbs fertilizers and releases them slowly, it's a big win. If we manage to do this on the necessary scale, we might eventually hit the point where adding more char to soil isn't worth it from an ecosystem health perspective, and then we can just put it into the various large holes we've dug into the earth to extract minerals. There is something very tidy about filling an old coal mine with synthetic coal!
Hiring can always keep up.

Unless you expect the best for average/median wages. Especially so if local CoL effectively eliminates the low end of the market.
Where was the ice cream shop located? In Hayes Valley or on Divisadero (couple shops already up there)
People are obsessed because you're trying to excuse the researchers behavior as ethical.

"Process" in this case is just another word for people because ultimately, the process being evaluated here is the human interaction with the malicious code being submitted.

Put another way, let's just take out the human reviewer, pretend the maintainers didn't exist. Does the patch get reviewed? No. Does the patch get merged into a stable branch? No. Does the patch get evaluated at all? No. The whole research paper breaks down and becomes worthless if you remove the human factor. The human reviewer is _necessary_ for this research, so this research should be deemed as having human participants.
Dang, I am not sure how to feel about this kind of “research”
Permitting processes are notorious bureaucratic and lengthy in every major city. The article didnt specifically cite any evidence calling out SF for being particularly egregious.

Part of me suspects some of the negative comments on here are from people seeing what they want cause SF is a popular target to hate on
That's exactly the situation I find myself in. I'm 46, divorced and remarried. I joined a FANG and lost my soul so I could have a chance after starting over from scratch at 43. I now have $200k in the bank, which is awesome and I am thankful for it. But it's nowhere near enough to buy a house. I'm already running out of steam, mentally speaking, and can't make the safe bet that I'll be able to keep my FANG job for even another year or so. I guess I just put it all in a TIPS ETF and hope it works out? IDK... Meanwhile I just have to watch while the rich get richer and the folks in the middle get pounded.
The University and researchers involved are now default-banned from submitting.

So yes.
Can you go through some of this process without actually leasing or somehow deal with that?

It would be interesting to hear how other folks actually, do this thing.
Foreign Memory Access and NIO Channels – Going Further
JavaScript development tends to involve a lot of files. Between Babel, ESLint, Webpack, Post-CSS with their high number of plugins, presets, and other support modules, Typescript, testing frameworks like Jest (that comes with it's own test runner, mocking facilities, transpile-aware code coverage etc.), and general tendency for JS developers to favor composing software out of many small modules - a typical JavaScript project (browser or Node) has thousands of modules and tens of thousands of files in node_modules folder.

Plus, a typical JS development process involves a filesystem-based watcher that reloads parts of an application on a fly as a developer changes code.

As a result, for a very big percentage of programmers filesystem performance is crucial for their day-to-day work.

There's an argument to be made that JS development ecosystem is unnecessary complex, and there are projects that try to change the status quo, but they are not ready for a prime time and aren't widespread enough yet.
But even hi res Bluetooth audio is quite terrible compared to what the DAC is capable of.
Crew of 'Ever Given' Could Be Stuck on the Big Boat for Years
What happens if the city doesn't respond to permit requests in 30 days?