skysight-inc/HackerNews huggingface dataset:
Sorry, I don't buy it - tried it for 4 years and that's just not the case. It was stumbling block to be on Linux and without Visual Studio with every tutorial or instructions. I think you have it easy since you know the ecosystem so well - and coming over from Windows, you know what alternatives to look for.

For me, even simple things like getting C# aliases working was a pain. I would not recommend a Linux developer to be picking up C# to do cross-platform development anytime soon. The only nice benefit I've seen is the amount of batteries included with .NET - but that's a solvable problem in other languages.
When WPF was first released, toy applications would make both my CPU and GPU fan spin up to gas turbine levels.

Now only WPF applications that try to show more than a dozen controls at a time make the GPU fan spin up, a huge improvement. I suppose this explains the new "flat" style with huge amounts of white space. It's not about elegance, or style -- it's the only way to keep fan speeds tolerable.
Mhm, now we get to hear how some great future philanthropists donate/launch telescopes for society, making them forever great in mankinds eyes. 'cus some entitled folks had to leave a legacy of trash in our orbit since they can't leave anything useful.
The point is that customers are already paying a lot of fees in Ethereum for financial services on the blockchain. Right now that money goes to run a lot of powerplants and gpu farms but will sometime in the future go to Ethereum staker. PoS coins are a combination of money, store of value and investment in a financial service "cloud".
> The only frustrating thing is how clearly it's been highlighted that the rich and powerful countries get all the vaccines and we'll only get them here once everyone in the west has been vaccinated three times over.

One can only be ashamed about the state of things. There are NGOs which try to help, but this is clearly not enough. And it is dumb, too - we will not get rid of the virus until all countries work together and help each other. It is a global issue, and our leaders do not have half enough brain to understand that.
ah. Learning what ethereum is by looking into a random pdf by an unknown twitter user. Never change your pseudointellectuallity hn, never change
Hey, Nikolas from Prisma here!

Can you elaborate what exactly you mean with "GraphQL integration"? You might be referring to Prisma 1 which was a "GraphQL layer for your database". Prisma 2 (which we are referring to with this article) doesn't have a native GraphQL integration any more :)

Prisma is very different from Sequelize in various ways (see our docs [1]):

- Your data model lives in the Prisma schema

- Database access doesn't happen via model instances but via the Prisma Client API [2] which always returns plain JS objects making your queries much easier to reason about
- Prisma Migrate auto-generates migrations based on your data model (and lets you customize these migrations when needed)

- Prisma comes with Prisma Studio out of the box – a modern database GUI

- Prisma is not a community-project but built by a VC-funded company

– We care a lot about our community, documentation, and providing support (something we've seen lots of developers complain about with other ORMs)

[1] https://www.prisma.io/docs/concepts/more/comparisons/prisma-...

[2] https://www.prisma.io/client
That's exactly the problem, those songs are not in either artist's genre. The artists don't sound similar, but the songs do. By "genre" I mean the effective genre (mood/vibe, instrumentation, pacing, chord progression, etc) of the song, not the nominal genre of the artist.

I would listen to those two songs in a row and be completely satisfied by the transition.
My preferred DB layer is Objection.js[0] which is simply an ORM-layer on top of knex[1], with official TypeScript support.

[0] https://vincit.github.io/objection.js/

[1] https://knexjs.org/
The project is interesting, but how can they be so dumb as to post these patches under an @umn.edu address instead of using a new pseudonymous identity for each patch?!?

I mean, sneakily introducing vulnerabilities obviously only works if you don't start your messages by announcing you are one of the guys known to be trying to do so...
1. Get permission
2. Submit patches from a cover identity.
At least in the university where I did my studies, each professor had their own way of thinking and you could not group them into any one basket.
If you can’t make an experiment without violating ethical standards, you simply don’t do it, you can’t use this as an excuse to violate ethical standards.
> So the only convenient way to have security is to use the cloud version? Got it.

I wouldn't formulate it that way, it's just a bit annoying for me to see this trend of not having even tiny bit of security built in and having to do extra work just to protect the dashboard. Just one admin account and a random generated password would be fine.
I think the Nike Monarch's are crustier personally.
Even if those they did get approved were actual security holes (not benign decoys), all that it validates is no human is infallible. Well CONGRATULATIONS.
It is ok to put the sign. But not for the person who transgressed to suggest 'why dont you put a sign'
DuckDuckGo is a big one in the stupid naming area. They own duck.com, they suggest using "Duck It" (which kinda works IMO) and they still choose to use the ridiculous "duckduckgo" branding. It's stupid but it's honestly the main reason I'm not using it. That and their crappy duck logo.

I wish they would be wise and rebrand too.
So you want your backend to be the most taxing and inefficient system we can possibly imagine? Are you really being intellectually honest when you say things like that?
Researcher(s) shows that it's relatively not hard to introduce bugs in kernel

HN: let's hate researcher(s) instead of process

Wow.

Assume good faith, I guess?
It sounds very familiar to me, I am Slovenian and our sound Ž sounds similar to ř

I know that Czech also has Ž, but to my ears we pronounce it harder, so words like žrelo, or žrebiček ... it kind of comes close.
Assuming your Monopoly house rules allow arbitrary contracts (if they don't, they should) the non-winning players can extend credit to each other, and allocate their combined resources very efficiently to try to beat the winner.

It's very hard as a single player to beat a credit union. So the winning player will want to build some sort of alliance with at least some of the losers to make their coalition weaker, which will pull those players up the ladder and give them a chance, and so on. It creates a mostly good dynamic of cooperation for self-preservation.

In the end, one person wins, but it's often a close race.

(This works best if you play with the same crowd every time, because then people have reason to build trust with each other and won't suddenly default on a huge loan without feeling the consequences of it.)
Given current academia which puts a significant negative on discussing why research failed, I doubt your idea of post-mortems, public or private, will gain any traction.

https://academia.stackexchange.com/questions/732/why-dont-re.... seems to list out reasons why not to do postmortems
Walmart have literally thousands if not tens of thousands of product lines, but after an initial study are not using their hyperledger implementation for more then 25 according to the website.

But that's not the real problem: the real problem is, how can blockchain contribute anything to this problem for them? The process of validating the origin of goods depends on remotely uploading certificates of authenticity - an artifact produced off-chain.

From that point on, nothing else matters - since it all depends on whether that certificate is legitimate, trust is external to the chain.

The rest does not require "blockchain" at all and is actively made more difficult by it - since every other step is just regular logistics tracking, something Walmart is very good at.

Again: what possible benefit is blockchain bringing here? The original artifact is off chain, the goods in question are offchain and the cited benefit is not "improved security" -- it's "quicker look ups". But...that would've been achieved by just scanning barcode numbers into a database at every location (which again: is trust, it's not a fact which is established on-chain).

So yes, I do believe people are wasting their time on something obviously useless - IBM was involved and their biggest contribution to my country was to call 25 million people logging on to do a census on one night a denial of service attack. Walmart executives aren't technical - they need to know "what the blockchain could do" and IBM sells them some snakeoil.
Can someone explain what the kernel bugs were that were introduced, in general terms?
> 1) Contact a single maintainer and explore feasibility of the study

That has the risk that the contacted maintainer is later accused of collaborating with saboteurs or that they consult others. Either very awful or possibly invalidates results.

> 2) Create a group of maintainers who know the experiment is going to happen, but leave a certain portion of the org out of it

Assuming the leadership agrees and won't break confidentiality, which they might if the results could make them look bad. Results would be untrustworthy or potentially increase complacency.

> 4) Interfere before any further damage is done

That was done, was it not?

> Besides, are you arguing that ends justify the means if the intent behind the research is valid?

Linux users are lucky they got off this easy.
“Hey, we are going to submit some patches that contain vulnerabilities. All right?”

If they do so, the maintainers become more vigilant and the experiment fails. But, the key to the experiment is that maintainers are not vigilant as they should be. It’s not an attack to the maintainers though, but to the process.
Not when it’s the Daily Mail.

I don’t like Google either, but the mail is an absolutely drain on society, and in my opinion has done much, much worse than Google ever has

Yeah google suppresses competition, and shamelessly sells your data, but they aren’t deliberately and carefully peddling hate and dog-whistle racism. Their business model isn’t literally to corrupt people’s minds, addict them to controversy and clastic words and profit from that. They don’t directly benefit from a less-educated society

Google was around in the 1930s, I find it hard to believe they would have come out in full support of the Nazis
Yep. To take a physical-world analogy: Would it be okay to try and prove the vulnerability of a country's water supply by intentionally introducing a "harmless" chemical into the treatment works, without the consent of the works owners? Or would that be a go directly to jail sort of an experiment?

I share the researchers' intellectual curiosity about whether this would work, but I don't see how a properly-informed ethics board could ever have passed it.
"USB speakers are attached through the built-in USB hub on the keyboard to allow playing of MP3’s while toasting occurs."

This is attention to detail right there!

Takes "Of course it runs NetBSD!" to a whole new level :)
> it might make sense to borrow 900 in ETH with 1000 ETH collateral. Then you make your vote on the DAO with a power of 1900

No, you would vote on the DAO with a power of 900, because your original 1000 ETH collateral is being held by the lending protocol
Are You a Growth Hacker?
Starting a new digital identity
This is a good question. You would recruit actual maintainers, [edit: or whoever is your intended subject pool] (who would provide consent, perhaps be compensated for their time). You could then give them a series of patches to approve (some being bug free and others having vulnerabilities).

[edit: specifying the population of a study is pretty important. Getting random students from the University to approve your security patch doesn't make sense. Picking students who successfully completed a computer security course and got a high grade is better than that but again, may not generalize to the real world. One of the most impressive ways I have seen this being done by grad students was a user study by John Ousterhout and others on Paxos vs. Raft. IIRC, they wanted to claim that Raft was more understandable or led to fewer bugs. Their study design was excellent. See here for an example: https://www.youtube.com/watch?v=YbZ3zDzDnrw&ab_channel=Diego... ]
Building a security response team in Alpine
I understand your opinion, but it's not like that everywhere. I work for many clients who have single servers or specific setups and having to configure Nginx is an extra step and an additional layer that could be made totally unnecessary by building in just one admin account and assigning a random password to it.
> So while there is specialisation in brain tissue, rather than there being circuits designed at a low level for certain cognitive tasks, it is more that the connectivity and kinds of neurons within an area are tuned to excel at a specific class of problems.

Hasn't there been a lot of recent work showing similar circuits between songbirds and humans that seem to have independently evolved?
Get this TERF shit outta here, there's no alliance between them and the modern feminist left people associate with Twitter/Tumblr and love to complain about.
Fair point.

I'll just leave my comment as it is. The university administration still bears responsibility in the fact that they waived the IRB.
I don't have much experience with node.js, so this question might sound silly. I don't see anything about database support in the blog post. Is Prisma enough to work with a PostgreSQL database from node.js? If not, what else am I missing?
Warmonger say jump, HNs been in the air.
This is a key question.

If we can replicate the information processing in 1 minute of brain activity by rearranging and moving rocks in a specific way over a 10 year period, would that arrangement of rocks have subject conscious states, or not?

If yes, it's a good argument in support of panpsychism, because those conscious states would seem to be substrate-independent. And if not, why does the brain have subjective states but these rocks do not? What makes our wetware particularly special?

There's clearly something profound going on here, even if it's currently beyond our ability to articulate properly within a scientific framework.
Misplaced trust was broken, that's it. Linux users are incredibly lucky this was a research group and not an APT.
Which easy thing do you think is hard to do in Haskell?
> non-existent... static analysis .... Whats being done to address those issues?

Static analysis is being done[1][2], in addition, there are also CI test farms[3][4], fuzzing farms[5], etc. Linux is a project that enough large companies have a stake in that there are some willing to throw resources like this at it.

Human review is supposed to be done through the mailing list submission process. How well this works depends in my experience from ML to ML.

[1] https://www.kernel.org/doc/html/v4.15/dev-tools/coccinelle.h...

[2] https://scan.coverity.com/projects/linux

[3] https://cki-project.org/

[4] https://bottest.wiki.kernel.org/

[5] https://syzkaller.appspot.com/upstream
No .. Linus can approve it on himself. Linus cannot approve such a thing on behalf of other maintainers.
Well, you're better served to just migrate to an open podcast app like Overcast, PocketCast, Podcast Addict, etc. Their player is better than Spotify by an order of magnitude anyway.
> This is in fact the very FIRST point of the Nuremberg code

Stretch Armstrong over here.
Most of the early investors (very early, startup phase) of Amazon and Apple got shares in the company at rock bottom prices. Does that make them a ponzi scheme?
I guess someone had to do this unethical experiment, but otoh, what is the value here? There's a high chance someone would later find these "intentional bugs" , it's how open source works anyway. They just proved that OSS is not military-grade , but nobody thought so anyway
Some of us having serious lingering symptoms.

I was on blood thinners before. Since covid my blood clots far more quickly now.
I can’t miss any doses of blood thinner or symptoms start up fast.
If an actual maintainer (i.e. an "insider") approves your bug, then you're not testing the same thing (i.e. the impact an outsider can have), are you?
As I said, the research is the goal. Acknowledging China's past behaviour, and applying it to potential present actions, is not xenophobia.
The same group did the same thing last year (that's what the paper is about - may 2021 paper obviously got written/submitted last year), when the preprint got published they got criticized publicly. And now they are doing it again, so its not just a matter of "acknowledge they screwed up".
You're quite welcome to try explicitly asking a woman back to your place for sex. Please let us know how it goes.

Why do you not think bachelor pads are a thing? Where do single men live now?
Why are minorities relevant? He was talking about left-wing..
Instagram for pets. Because why not?
The same reason that Bitcoin hasn't been displaced by newer projects.

Both have massive network effects. Marginal technology improvements aren't enough to convince developers to build on a platform that has no users, no application & no infrastructure.
US owners find greed doesn't play well in European soccer
I won't go so far as to call Rogan a racist, but it is undeniable that he platforms known racists and does little to challenge their hateful beliefs. In effect Rogan is re-platforming those rightfully cancelled from forums with even the smallest amount of decorum, allowing hateful rhetoric to spread unabated.

>Yeah... because it's a bullshit conversation that people know is false, and any attempt to try to argue otherwise would see you utterly destroyed with facts.

This is not something someone with a convincing argument says before:

>Rogan and Chappelle are great friends. Rogan was friends with Patrice O'Neal. He's friends with Colion Noir and has him on the show about every six - twelve months.

...using the same argument whites use to justify saying the N word. Racists/supremacists tend to have token black friends, typically of lesser status or means, as cover.
I don't quite understand the outrage. Quite sure most HN readers were doing/involved in similar experiments one way or another. Isn't A/B testing an experiment on consumers (people) without their consent?
Taken to an extreme, this has a 'kingmakeer' problem though, where who wins the game can often be decided by someone who has no realistic chance of winning (either by directly aiding or allying with one player, or failing to block another player).
It sounds even more like Morse code when you realize that the double Ts are a longer sound than the single Ts. It really is like dots and dashes.
> but nobody thought so anyway

A lot of people claim that there's a lot of eyes on the code and thus introducing vulnerabilities is unlikely. This research clearly has bruised some egos bad.
Of course, because one doesn't need permission to leave China? Or even a high enough social credit?
There doesn't have to be a way.

Kernel maintainers are volunteering their time and effort to make Linux better, not to be entertaining test subjects for the researchers.

Even if there is no ethical violation, they are justified to be annoyed at having their time wasted, and taking measures to discourage and prevent such malicious behaviour in the future.
Just launched an IAMaaS hosted in CH based on ZITADEL open source project
Here’s a version of Monopoly: https://boardgamegeek.com/boardgame/254617/monopoly-cheaters...
There is a sea of difference between A/B testing your own property, and maliciously introducing a bug on a critical piece of software that's running on billions of devices.
I don't find much value in these kind of out of hand dismissals.
Do you have industry knowledge or do you at least care to expand? The experts certainly seem to think they'll be able to get to scale, I think they'll be devastated to have to scrap it all and fire their teams of experts "because thermodynamics".
How is it a leap? You're literally feeding the part of your brain that wants sex with other women.
FYI it's MastOdon, not MastAdon. This mistake occurs a lot. Maybe it's another issue with the naming by the way.
> indicating “looks good”

I wonder how many zero days have been included already, for example by nation state actors...
May 2021 --
I guess some IEEE member can complain loudly to take it down.
Prisma does support Postgres.
https://www.prisma.io/docs/reference/database-reference/supp...
> Snarfing up tons of data is just a ticking time bomb waiting to happen.

What about a decentralized dating app (it does not have to involve crypto)? So think it as WordPress but for dating. Say, you are a priest and you have a community where you want them to find mates. So you can download SwanLove.tar.gz and install it on your server. Then your community can use your app. So I don't own the data. Maybe you can pay me $10 per month for the license.

> But think about this: would you want to spend the rest of your life married to someone who considered things like your salary or your Strava data or other such superficial metrics as important markers of your value as a human being?

I mean, finding mates is technically superficial. Someone said, "men are pigs, women are gold diggers. But that doesn't mean true love cannot grow between them."

See it from women's perspective, "Do you want to marry a man who is sexually attracted to you?" By the very definition, the man is already superficial. But again, it's nature who forces men and women act this way.

For example: https://www.todayonline.com/singapore/singaporean-women-pref...

"39 per cent of Singaporean women will go out with men who earn less" -> So 61% women go after richer men. By your definition, men should not marry them because they are superficial. But again, it's nature who makes them act this way. It is what it is. I don't blame them. If you want, you can blame nature.

However, I think just because a woman is attracted to a man with high-income, it doesn't mean that they cannot learn the true love. Men and women can learn to build a deep meaningful relationship. But in the beginning, we have to admit that we are attracted to superficial things.
depends on many factors, e.g. which country you live in whether there are extradition agreements with the foreign country, whether you are a native of the country you live in, whether there are exclusions of certain acts in your country etc.

Not "shitting where you eat" (never do something that is a crime in your own country) is basic opsec but the details are usually a lot more complex.
Except in this case it's not "your family". People here are arguing for foreign intervention. Not everything that happens in another country you don't agree with should be solved with violent foreign intervention...
Wasting the time of random open source maintainers who have not consented to your experiment to try to get your paper published is highly unethical; I don't see why this is a bad faith interpretation.
Winforms is easy to use and understand, everything is pretty much there and I can get started with no issues. WPF,on the other hand,is a clusterfuck, not even sure who managed to come up with it.
I’ve been using Prisma for a while and I quite like it. Best ORM for TypeScript I’ve used.
My biggest issue with it is testability.
Sure, I can mock the Prisma client in tests with Jest or something, but if I want to test state I pretty much have to reimplement an in-memory DB using JS mocks.
I can also connect to a real DB made for testing but it’s quite overkill, I’m usually not interested in testing Prisma itself, just my own code.
I wish Prisma had test mode, where you could replace the client with a temporary in-memory SQLite DB without writing tons of boilerplate.

A drop-in replacement for PrismaClient for tests would have been wonderful.
I would have preferred some evidence, but I guess the downvote can be also seen as an answer to my question :)

Still looking for those facts, are we?