skysight-inc/HackerNews huggingface dataset:
Lucky for me, I've had tinnitus for over a decade now (thanks to sitting right next to a loud server for years), so, it won't make it any worse than it already is... hopefully.
Living in Austin I would say it’s a mix, but the main thing is that you now have about a third of people (including most of the high risk) who are vaccinated (at least the first dose) and joining the ... 1/5? Or so? ... who “don’t believe in COVID.”

Combined that’s a decent chunk of the population getting back out. I think it’s still quiet compared to normal, but it sure seems like one giant party compared to the last year. It’s really hard to subjectively judge these things.
Uh... Also tons of coal will be burned. BTW "green" energy products are not 100% sustainable. Lots of rare earth metals and other mined materials go into solar panels. We can't recycle solar panels right now, neither wind turbine blades. Hydro destroys riparian ecosystems.

Useless uses of energy cannot be construed as good for the world.
Oh, France absolutely funds it for propaganda reasons, and that was one of the stated reasons of forcing RFI to joint the new, state-backed international Radio-TV group a couple of years ago. That's not even some hidden, secret motivation. It was stated publicly.

I'm just saying that the dog doesn't always (emphasis on "always") go where the masters want it to go, particularly when the masters come and go at the whim of the voters but the dog is always there.
Not even close!
Thank you for pointing out the about:config setting. Looks like the new compact mode is roughly the same density as the old normal mode. Definitely a loss.
The end of the post is extremely specifically and carefully not describing a framework for rolling out files to exploit these vulnerabilities; those files as described do nothing, and serve only aesthetic purposes. While it's easy to read that as a wink that they are exploiting the vulnerabilities they found while maintaining plausible deniability that they aren't, it's equally possible it's the other way around: they aren't rolling out exploits but want people reading the blog post to believe that they are. Or that they want to lay out the framework so that others can do so, but aren't actually going to follow through themselves. As written it's essentially unverifiable, obviously on purpose.
This new wave of social investment platforms is really exciting. Stocktwits is just noise. I'm still shocked Twitter hasn't capitalized on cashtags by at least showing market data. I've recently been a big fan of Commonstock: https://commonstock.com/ it actually allows you to link your broker through Plaid and shows a leaderboard based on actual % gain on positions.

That said, I like you bringing more competition to the scene!
WOW so we have our summer readings and then sum
Hmm... a multi-threaded language would be nice. Always surprised when I see a single pegged core for eslint, prettier, or babel.

Workers are coming to Node... so soon.
"Were you asleep when the Edward Snowden leak happened"

... yeah I'm not going to play this game.

Nation states are certainly doing better than AirTags if that's what you're worried about Secret Agent.

Passive trackers will let you pinpoint someone indefinitely.

And someone motivated is going to catch your spurious 3G emissions but miss an AirTag literally designed to be noticable?

Puhlease. If a nation state is chasing you and this is what turns the tides I strongly suggest turning yourself into their embassy now, save yourself the trouble.
Temporarily banning UMN until they can get their IRB act together makes sense, but wholesale reverting every commit ever made by a UMN e-mail address -- whether affiliated with this research or not -- seems kind of extreme?

I'm not sure how many people here understand this, but the University of Minnesota is quite large, over 50,000 people. That's comparable to the entire population of Palo Alto and is larger than MIT, CMU, and Stanford combined. Jeff Dean is a UMN alumni. I am too. The fraction of this set that is actually associated with the shady research is tiny.

It seems to me like the kernel maintainers are at best wasting a whole ton of their own time on this, and at worst re-introducing a wide range of bugs that UMN contributors had fixed over the years. A real "cutting off your nose to spite your face" situation IMO.
At which point do you tax? The raw materials/commodities, the parts, the final product?
Subdomains (like .xr) for alternate root zone Handshake now available
Speaking of excel files, Does anyone know of a good way to port sheets with equations/functions to python? Sometimes I need a calculations from a sheet and I have to manually copy them over.
How strange, what do you mean by this comment? I just visited the website of the beneficiary of the proceeds and they have this to say about the death penalty[1], for example: “African Americans make up 42% of people on death row and 34% of those executed, but only 13% of the population is Black”.

It sure sounds like racial bias to me! And I for one I’m glad the they chose this nonprofit organization which is doing excellent work.

[1] https://eji.org/issues/death-penalty/
What will all the designers and frontend folks do though if we don't keep tweaking, tweaking, and tweaking...?
There's one important factor you're missing: for lack of a better word - "staffability".

Just about every programming language has also a web framework implemented in it, so if you want to create a full-stack web app, the range of options is just dazzling, which results in a highly fragmented ecosystem.

Meanwhile on the front-end there's essentially one language(with different flavours) and 3-4 leading frameworks, so once a developer has these covered, they can be hired to do anything in this part of the stack.

The overall result is that it's easier to scale work if you offload it to the front-end, because by the time you found your <insert highly specific language/framework combination>, your front-end developers would have done most of the work twice over.

There are many more reasons why you would want a SPA instead of a full-stack app, but this is one of the strongest.
I don't mind sponsored segments in general, but most of the channels I watch end up with some combination of Raid Shadow Legends, Nord VPN, SimpliSafe, Squarespace, and Raycon. It's actually refreshing when the sponsor is in some way related to the channel content, but I find it's fairly rare especially on the higher-subscriber channels.
Oh so interesting ! In my french uni, psych teachers were all doing wikipedia research to prove it was unreliable by timing correction delay of purposedly introduced mistakes,

They were so proud of their discovery. They didnt think to time what that would take if they went to a printer and changed the text there before a book is printed.
> compact mode) and hide it in about:config[0]. I guess I should count my blessings that they aren't removing it entirely

I see this is your first rodeo. Probably within 2 years the story will change to "removed rarely used setting to minimize maintenance burden". Make no mistake removing it from the UI means the feature is already dead
It's terrible but not unheard of. The same thing happened in Italy too and possibly in Wuhan. India is going to have a terrible period, but not very much worse than other cases like Northern Italy, London, New York, Belgium, Brazil, etc..
When will they finally incorporate the tree style tabs into the browser? I don't need a new look, give me better, more productive UI changes... I get there are extensions already (1) but having this functionality be incorporated into the native browser will make it faster and possibly even more usable (like allowing us to select and bookmark all the tabs in a tree view as well).

1) https://addons.mozilla.org/en-US/firefox/addon/tree-style-ta...
“Prompt tuning” closes the gap with fine tuning in large language models
I feel like this is an extension of the "make everything tablet-friendly" design trend that seems to have taken over GNOME development (who in turn clearly got it from Apple).

In fact, the new UI reminds me quite a bit of the GNOME Epiphany browser.

It's not bad... I guess? I don't like it, personally.

I also don't understand why they're spending any amount of time on this.
windows 10 is now another linux distro option
Not sure how this university is run but this doesn't sound plausible to me.

>... learned today about the details of research being conducted by one of its faculty members and graduate students into the security of the Linux Kernel

And this sounds like mainly a lot of damage control is going to happen.

>We will report our findings back to the community as soon as practical.
This reminds me of a few passages in the SSC post on IRBs[0].

Main point is that IRBs were created in response to some highly unethical and harmful "studies" being carried out by institutions thought of as top-tier. Now they are considered to be a mandatory part of carrying out ethical research. But if you think about it, isn't outsourcing all sense of ethics to an organization external to the actual researchers kind of the opposite of what we want to do?

All institutions tend to be corruptible. Many tend to respond to their actual incentives rather than high-minded statements about what they're supposed to be about. Seems to me that promoting the attitude of "well an IRB approved it, so it must be all right, let's go!" is the exact opposite of what we really want.

All things considered, it's probably better to have something there than nothing. But you still have to be responsible for your own decisions. I bamboozled our lazy IRB into approving our study, so I'm not responsible for it being obviously a bad idea, just isn't good enough.

If you think about it, it's actually kind of meta to the code review process they were "studying". Just like IRBs, Code review is good, but no code review process will ever be good enough to stop every malicious actor every time. It will always be necessary to track the reputation of contributors and be able to mass-revert contributions from contributors later determined to be actively malicious.

[0] https://slatestarcodex.com/2017/08/29/my-irb-nightmare/
They might not personally like it, which is a personal preference, but I wouldn't describe Hong Kong as 'pretty bad', which is a value judgement.

By most metrics, Hong Kong is a much more livable than just about anywhere in the United States.
Can someone who is familiar with Linux kernel development explain how

In the past several years, we devoted most of our time to improving the Linux kernel, and we have found and fixed more than one thousand kernel bugs

and

the extensive bugfinding and fixing experience also allowed us to observe issues with the patching process and motivated us to improve it

squares up?

They are part of the social infrastructure and still felt compelled to conduct a breaching experiment? Sometimes one must step across social boundaries, but only under extreme conditions. What really went on there?
I didn’t know this was a thing. Makes sense when I think about it though.
>scars from the 90s/00s hegemony

Honestly curious, are you referring to Microsoft's illegal[0] tactics to destroy Netscape?

[0]https://www.washingtonpost.com/archive/politics/2000/04/04/j...
Oh thank god. I don't mind any sort of ad honestly, so long as I have a low friction way to pay to get rid of it. That's YouTube Premium for me on YouTube so I'm happy with that since I interact once and then all ads go away.

This will do just fine.
I think OP's point was: Nobody is forced to use Facebook. People choose to use it even though they hate supporting the ecosystem, because it makes some things convenient. Pretty obvious point but some people here (not you) claim that participation is something you are essentially forced to do, for whatever reason.
Nobody is entitled to a particular place in ranking and making this maximally transparent would almost certainly result in people gaming them more effectively decreasing the quality of search results for all users.

Furthermore what are you supposed to do with this data? If you ultimately find that one site is given one score and another is given another and you disagree with this are you going to demand that google show other people the sites you prefer in a higher rank? Nonsense.

No matter how they rank showing their hands would almost certainly be harmful to google because it would allow political groups of any stripe to put pressure on them to "fix" their results on any number of dimensions. Google would in short be crazy to give this to you and you aren't entitled to it.
Using something like Parcel means it's usually as easy as adding parcel serve or parcel build to package.json and it handles the transpile, module resolution, bundling, tree shaking and hot reload for development.
Maybe the design team should have to personally retrain 100 computer illiterate users before the redesign goes live?
I'm not taking a side, just making the shallow point that "fuck these people", etc., is not good HN posting.

It's common when we post a moderation reply for people to assume that the mods are disagreeing with them [1], when we're just asking them to follow the site guidelines. Those two things are orthogonal, but they fuse under temperature: that is, when one is feeling hot about something, it's hard to separate them. They come unstuck as things cool down.

(I don't mean to pick on you personally. This kind of reaction happens in everyone, certainly including me.)

[1] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sor...
WSL2 crashes consistently n my own microsoft laptop in current windows, and I've tried diagnosing an improper configuration: how does one work around that?
Can you comment on the Vector API that Java is set to include? Do you think it's entirely misguided, or more of a best effort given what one can reasonably expect from Java?

http://openjdk.java.net/jeps/8261663

(I'm completely ignorant on the subject)
Not sure why this is being downvoted.

Before the pandemic, the Fed tried to wipe out the crypto space by raising interest rates... Then when they realized that their policies were threatening to take out the entire stock market instead, they decided to suddenly drop interest rates back to 0.

It seems like the Fed was trying to find a sweet spot of interest rates which would wipe out all speculative investments but would allow non-speculative investments to stay afloat... They simply didn't anticipate that stocks might be more speculative than crypto.
AI-based system could help triage brain MRIs
Immediate knee-jerk apologies are usually worthless because the person apologizing usually has no idea what's going on and can't make a reasoned statement. They're just trying to do damage control.

The best apologies are the ones that are done after some reflection, not under duress, and not purely for reputation.
California City is waiting, very cheap land.

https://www.atlasobscura.com/places/california-city-unbuilt-...
Come up with new design paradigms. You can't tweak yourself out of local maxima.
> However, they proved a big point: how "easy" it is to manipulate the most used piece of software on the planet.

What? Are you actually trying to argue that "researchers" proved that code reviews don't have a 100% success rate in picking up bugs and errors?

Specially when code is pushed in bad faith?

I mean, think about that for a minute. There are official competitive events to sneak malicious code that are already decades old and going strong[1]. Sneaking vulnerabilities through code reviews is a competitive sport. Are we supposed to feign surprise now?

[1] https://en.wikipedia.org/wiki/Underhanded_C_Contest
Wow, that is...quite the introductory section!
I have also seen many times a university happy to throw a student or even a faculty member under the bus, and in this case it seems extremely clear that they were running an unethical sociological experiment that was probably not reviewed by the IRB there. That's grounds for the university very rapidly turning on you.

Violating IRB ethics is a very serious issue, and has timelines in place once a complaint is filed. I expect that this statement was intended to be fast, short, and direct because of the time sensitivity.
I pay for YouTube Premium, which goes to creators, so it's extra annoying to still have to watch a million awkward VPN pitches.
Design and implement the UX and UI for actual distinguishing features. Or improving the settings menus, the "customize" view, adding more tab management features (adjustable minimum tab width?), et alia.
Perhaps start with a set of blocks representing available resources. The 'top' equivalent could be a stream of blocks falling down the screen. Manipulate and rearrange the blocks to create new sets of blocks representing your desired function.

Deleting a file would be similar to any current GUI file manager, but with more blocks - drag file block to delete block. Opening a file with a particular program would be similar. Chaining a series of operations would be where it gets interesting. The shape of the pieces would control what can be chained together.
If you need to tweak firefox interface more, these resources will help:

https://www.reddit.com/r/FirefoxCSS/

https://github.com/MrOtherGuy/firefox-csshacks

https://github.com/Timvde/UserChrome-Tweaks
$60k vs. $18,000 Masters degree in Computer science: How much they differ?
As an end user, not really. If you can get in touch with a NOC that understands the problem and is willing to listen to you, maybe. The problem is it can be pretty hard to find someone.
Work on fixing compatibility for safari on windows
The research approach is distasteful and dangerous. Any one should not introduce bugs or malicious code intentionally, even for research purpose. The results are also a bit trivial. It is easy to imagine that this type of code injection would be possible. So let this be an example of what is the consequence of intentional malicious code injection, even in the name of research.

I wish I could be on the researchers' side, as I am both Chinese and an alum from UMN. But No - wrong is wrong.
I will admit I don't get it. Is this the website of the thief? And re "There are no rights or protections preventing the theft and mis-use of their art," were artists expecting to get perpetual royalties from their NFT-tied works?
The difference is, the constitution of South Africa now makes apartheid legally impossible (I assume, I haven't actually read it), whereas the corporate charter of Microsoft not just allows but potentially requires it to attack Linux.
It's funny, your comment reminds me of one of the first comments i ever made on HN that got highly upvoted.

I made the opposite mistake, read the headline, assumed it was about actual whales, didn't read the article before posting then went off on some tangent about whale watching and tourism.

Turns out it was an article about big spending gamblers in video games.

Naturally enough, I assumed this was going to be about that again until i seen your comment.
I hope he wins for the precedent. It's a borderline scam that Apple can sell you something and then change or take that purchase away later.
High - solid blockchain devs can pull a lot of money. Let me underline _solid_, there are a lot of people who took a tutorial and try to sell themselves as experts.
Listen, man. You care about trackers. I don't care about trackers. You care about these malicious attacks. I'm not that worried about them. You care about these intrusive things. I just don't go to those websites.

I care about the time spent on sponsored segments. You don't care that they're there.

All this is just different preferences. You're not better than me. I'm not better than you.
I pay for Youtube Premium specifically because I DON'T WANT TO WATCH ADS.

Ever.

I hate ads with a passion.

I get the fact that content creators need to make money, but there needs to be a better way.

Youtube needs to give content creators a way to put ads in their own content in a manner that gets automatically hidden if people pay for Youtube Premium.

Worst case scenario, I would even pay for a higher tier of Youtube Premium that let me hide that type of sponsor ad.
Does nobody here even understand what actually happened?

Really losing my faith in the accuracy of HN if such a huge thread is full of misinformation.

Basically (as I understand it, feel free to correct me) this is what happened:

Researcher emailed maintained with flawed code, maintainer LGTMed it, researcher told maintainer that the code is buggy and not to merge it. The researchers confirmed that the code was not merged or commited anywhere. Paper gets published. Nothing of note happens.

Now, one of the researchers grad students has submitted stuff to linux oh his own volition- he does not appear to be associated with the previous research. These commits are "obviously bad" according to linux maintainers and claim that the grad student is just continuing the "merge bad shit" research. These commits do not appear to be intentionally flawed but rather newbie mistakes (so claims the student)- which is why he feels the linux community is unwelcoming to newcomers.

Now how on earth did that warp to whatever everyone here is smoking?
Agreed. So many security vulnerabilities have been created not by malicious actors, but by people who just weren't up to task. Buggy software and exhausted maintainers is nothing new.
I don't think that's the case (due to how fame works) and I don't even think it's particularly productive to bring up that point.

Their actions should be rectified since they did wrong - not out of fear of a punishment. When we bring only a specific punishment in as a consequence then the question of how to respond can be shifted over to a "which is worse" proposition which means that the punishment needs to be properly proportioned.

At any rate - I doubt admissions would be appreciably impacted even if they handled this incident extremely poorly - some potential grad students might look elsewhere while most would likely be ignorant of the whole incident.
Looks more like GNOME Ephiphany.
Field Notes: Miami
Smith College?
I would say it's less authorship misrepresentation and more an established convention that's well-known to people within the field. Lead authors go first, then supporting contributors, and finally advisors at the end.
Floating tabs? I am surprised that got approved.
It was literally Chrome before. Every desktop browser has the exact same UI for tabs sans the skin.
Does setting browser.tabs.tabMinWidth in about:config work still?
The research approach is distasteful and dangerous. Any one should not introduce bugs or malicious code intentionally, even for research purpose. The results are also a bit trivial. It is easy to imagine that this type of code injection would be possible. So let this be an example of what would be the consequence of intentional malicious code injection, even in the name of research.

I wish I could be on the researchers' side, as I am both Chinese and an alum of UMN. But No - wrong is wrong.
To us, the biggest value is auto-refactoring the code to comply w/ styleguides and rules. There are many great rules in eslint that cover most known anti-patterns. For a start, just grab the .eslintrc.json from the microsoft/typescript repo.

We've hooked up "eslint --fix" and "prettier --write" to "npm run fix".

One command before committing and you comply with all our coding rules. Easy, peasy. We tie the combined checks into "npm run check", and run this in CI/CD, so we know only compliant code is merge. Check!

Most other lang tools _won't_ do this. Take PMD or Checkstyle for Java. They'll just fail your build, but won't make your code compliant.

Finally, if you decide you want to add a new code convention to your repos, it's just a one liner: "npm run fix". It doesn't get much easier.