skysight-inc/HackerNews huggingface dataset:
Regardless of reality, perception of reality is more important for this. The boss can think the worker is wrong, and can react with a

> That's stupid, it won't work due to X, we're going with Y

or a

> Thanks for the feedback, but this time we're choosing Y due to X.

One is going to leave the worker happier than the other and feeling safer despite the boss thinking the worker is wrong. Unless you can measure the counter-factual (often not) you will only guess as to which was better.
It's not just the linux kernel. You can imagine this having some fallout to other open source projects where they all come out and say they won't accept contributions from the university. Huge PR nightmare.
I am a time-traveler from the future, here to beg you to stop what you are doing (2014)
Yeah, have heard the same from friends - IAS officers are unable to find beds for their close family. Remdesivir is being sold at 20-50x retail price.
Apparently the researchers in question don't have tenure. If that is so, RIP to their achedemic careers right now.
Interesting historical perspective, thanks. And to put that growth into more recent perspective, in the last 7 years we have had a "512 K" day and "768 K" day. See:

https://cumulusnetworks.com/blog/768k-day-importance-adaptab...
How is DHS Cybersecurity related to this?
I have the same feeling. Nothing altruistic about it, Microsoft stands to benefit greatly from having Linux inside Windows. Altruistic would be open-sourcing Windows or something.

That said, I'm glad they're seeking to benefit by increasing interoperability and developer goodwill. Their current strategy is good for users and devs and probably the best we can hope for. This will change if/when Windows becomes the one and only viable platform again and switches back to using that as leverage, but with the way things are going I think that will take a while. Not only have they been losing to Linux on the server front, they've been losing to the web and Apple/Google on the application & mobile fronts, so they are a long way from lock-in there.
> Disney's interest is in marketing the DAO so that customers purchase from it

There is little chance that having comics paid through the DAO would make new customers. The authors have an interest in the thing considering the event we're discussing, sure, but authors rarely get to choose their terms.

Disney, as an IP holder, or publishers, currently are in a situation of power, and it would be foolish for them to pay into a new system for no tangible benefit.
A potent analogy, perhaps it will sway those that don't consider consent an important part of social research.

I expect the department and university to perform a thorough investigation, and respond with decisive action afterwards. Not the other way around.
> inexperienced players fighting each other will have a lot of huge randomness in their outcomes and altogether the game only becomes fun once you reach a certain minimum skill level

This is a very good point.

I play chess with my children a few times a year and I was subconsciously feeling that it is not that fun.

Only after watching The Queen's Gambit I realized that the fun is there, but out of reach for me.
From an outsider, the main question is: does this expose an actual weakness in the Linux development model?

From what I understand, this answer seems to be a "yes".

Of course, it is understandable that GKH is frustrated, and if his community do not like someone pointing out this issue, it is OK too.

However, one researcher does not represent the whole university, so it seems immature to vent this to other unrelated people just because you can.
2.3 million homeowners are in forbearance. It's been over a year, people are getting use to NOT paying.

Banks just also flat out STOPPED foreclosures. So we have millions of homes in forbearance and we don't know the true number of loans that are delinquent. Meanwhile in some markets prices have gone up 30 percent in 1.5 years which for a normal first time home owner means higher loan costs, bigger down payment and more interest. We also have homeowners who WANT to sell but won't until we get back to a normal market. If interests rates go up, we start foreclosing, homeowners start selling, and all those millennials who regretted overpaying for their homes start selling ALL at once, we could easily be in a buyers market.
Youtube-dlp, a fork of youtube-dl has intergrations to use this database already.

https://github.com/yt-dlp/SponSkrub
I have this exact same feeling with some Java programmers' fascination with coffee terminology, especially Beans. Maybe because I grind my own beans at home, it always triggers me in some sort of Pavlovian way.
Equities can also drop 50% in a matter of weeks. Be circumspect about the risks that you willingly choose for yourself.
This is exactly how I wanted federated auth to work.

Everyone would have their own DNS domain (this was in a science fiction reality where DNSSec was very secure).

That DNS domain would be exposed by their firewall, it would serve a single static domain.

Something like MX records would be setup for simple auth services and one-time payment transactions.

So when I needed to login to a site instead of talking to facebook, the site would talk to the root servers which would hook them up with my domain on my router.

The for a credit card transaction I could authz a transaction between the remote website, my router with my information and the credit card payment provider, so that the website never saw any details.

This would be wrapped with a service so that the home user never hand managed their DNS zone similarly to the way NAS appliances often run linux and NFS without people needing to poke into it.

But it needs to not be written by a FAANG company and needs to piggyback on open standards. Maybe DNS isn't the exact right tool, but it needs to look something very much like that with a hierarchy of open registrars.

OpenID is kind of close to the start of that, but I don't like the way it piggybacks on e-mail addresses and I think it needs to be its own thing and simpler to manage.
>We basically at this point assuming bad faith for all UMN patches

This seems like a gross overreaction to three commits that didn't even make it into mainline. Especially when done for commits years before the "research" was done. But I suppose nobody can miss a chance to let loose a little outrage
It has everything to do with it when it comes to the U.S. If we were another country, maybe it would be acceptable to have police harrass people for not wearing masks. But in the U.S., giving police the license to harrass people minding their own business will inevitably result in more police brutality that affects some races more than others.
> The research method used raised serious concerns in the Linux Kernel community and, as of today, this has resulted in the University being banned from contributing to the Linux Kernel.

> We take this situation extremely seriously.

I think it’s because the last bit of the first paragraph – the ban – flows onto the second paragraph – the situation.

Once you’ve had the two linked, it’s like one of those ambiguous optical illusions, where you just can’t see the other.

If I were writing that statement, I’d be concerned it looked that had there been no ban, there would be no situation. Said statement doesn’t do that for me.
Because your brain is physically inside your body just like water is physically inside a bottle.

Speaking of sci-fi maybe in the future you will get a brain implant and someone could remotely control you or manipulate, transfer or observe your consciousness.

Btw notion of mind uploading is very feasible imo.
cremation is the majority option in northern europe and UK https://en.wikipedia.org/wiki/List_of_countries_by_cremation...
It's a bit unclear who complained to whom about this - and I'd expect looking into this to be part of the review. i.e. I could easily see "some people reached out to IRB concerned about lack of its involvement, IRB talked to researcher and went through process, came to result for whatever reasons" happening and not being something that is reported up the chain, because it was "resolved".
What is a static site, and how does it impact search engine optimization (SEO)? This quick 5-minute guide answers all your questions.
Did Linus comment on any of this get? :popcorn:
What you're describing is a system centralized around a technology and a few brokers. As network effects kick in, it becomes harder to use alternative systems. The blockchain itself may be decentralized, but there is no guarantee that systems built upon it would be decentralized.
Okay, I read your post as you were stuck in a dead end job with no alternatives.

If you are fine to stay in that exact role till you die, then of course there is no reason to do anything else. It does get harder and harder to find time to learn as you age though, saw this first hand with 60 year old cobol programmers 20 years out of date trying to learn Java...
I think everybody is missing the point. If one grad student was able to do this, imagine what a team of dozens of well-paid, well-equipped, and highly experienced security experts could do.

In other news, we just learned that any half-decent security agency has already injected their own vulnerabilities and back-doors in OSS.
If that's the model Linux uses there's no doubt in my mind that the US, China, and probably Russia have vulnerabilities in the kernel.
SponsorBlock would work fine with Widevine. In fact, I am planning on expanding it to some other sites that have DRM.
> What makes bunting dishonorable?

Well, it is obviously subjective, but bunting can be used to prevent no-hitter which is why I personally see it as disgraceful.
the project is 30 something odd years old now, and is no longer a hobby, it is now critical infrastructure that powers virtually everything.

it's unfortunate that something happened in the project that cost the maintainers a lot of hours, that comes with the territory of working on important software, i'd argue.

i don't want an espionagetastic fundamentally untrustable and inescapable computing hellscape, airplanes falling out of the sky, cars crashing or appliances catching fire because it "already was the common view on the issue."

if the paper raises awareness of the issue, it's a good thing for society, it seems. if money materializes to do background checks on kernel contributors, that seems a good thing, no? if resources materialize for additional scrutiny, that seems a good thing, no?

if anything, the "common view" / status quo seems terribly broken, as demonstrated by their research. while what they've done is unpopular, it seems to me that ultimately the project, and the society of which large chunks it now powers, may be better of for it in the long run...
That's one take, but not all endorse it.

"Which approach leads to the least dead people globally?" is another potential way of looking at things.
Godot 3.3
Malware? Any countermeasure against state surveillance is a good thing for us.
Kind of like how Mozilla will open-source Pocket any day now, just like they promised in 2017...
I'm not the only one https://mobile.twitter.com/SarahJamieLewis/status/1384871385...
In your example, `HEAD` is the server address, which is interpreted as a local file. `$(touch hello) git@github.com:torvalds/linux.git` is the command to be run in the remote (locally in this case). It will not connect to the server in GitHub.

P.S. it seems that you have an extra space before `--upload-pack`.
Fool or troll or prejudiced frigtard that you undoubtedly are, where, above, have I said that I don't understand it? If I haven't said it, it is your wrong understanding or claim (unless there is good evidence), which is why I 'decorated' you with those above adjectives :), just as you implied wrong shit about me. Dry up and blow away, weakling.
Don't pollute this space for your pathetic ego-boosting kicks.

Update: Also, as I've said many times on Twitter (as @vasudevram), "Bullies are always cowards".
You are using a throwaway HN id, I see, ha ha, to escape the result of your trolling or hate-spewing actions.
Mainly because 'the government' has all these people with guns and flak jackets that are perfectly happy to come after people proactively.

If McDonalds maintained a SWAT team and was run by people known to bomb weddings in the pursuit of regional stability, I'd be worried about them having my location data too. But they're not going to so that, they're going to come up with a crooked scheme to feed me more burgers.

The quality of the outcome is arguable, but the level of risk is much lower.
This is too quick a dismissal: if they sandboxed each extraction tool they'd be more likely to be able to say that a compromised tool did not compromise the entire system or data collected by other tools. This is exactly why programs like browsers, messaging clients, etc. have moved things like media decoders into separate processes, especially since those tools can be sandboxed quite aggressively whereas a monolithic program will use a fair number of different permissions.
I know I’m a sample size of one, but I just searched for the string (without any quotes) ‘biden doj to investigate mpls police joshua caplan’ on Google, the story on breitbart.com was the 2nd result, the first result was the same article on ‘newsbreak.com’
If Nebula existed before I created SponsorBlock, there is a high chance that I would have never created it. Though, I am happy that I ended up making it though, as there are other annoyances to skip like "interaction reminders" and intros.

I think paying for sponsor-free videos is the best way out.
I've seen this reaction a few times. Can you say more? Presumably Signal users value privacy, and the implication is that when hacking tools used to violate that privacy are applied to a device running Signal, it may try to interfere and prevent the extraction to some degree. This seems like an ideal feature for a private messenger.

In contrast, it would strike me as strange if a Signal user switched to another messenger that allowed the data extraction because they were uncomfortable with Signal blocking it.
The university has an ethics board to review experiments. So what experiments get allowed reflects on the whole university
I block commit, push, and release workflows by lint, type errors, and test, but I don't block running tests or running my program.
That study conflates caffeine and coffee from the very first word in the abstract. I wouldn’t trust it at all — it’s like an article about CPUs but the writer doesn’t understand the difference between a processor (called CPU) and the rest of the stuff in the computer case (which, as a whole, is also called CPU).
The general feedback I have seen around this is to launch and re-evaluate as you go. As soon as you are making enough to justify the expense, do it.
Ah... Yes.

Seriously, you kids do not remember things clearly or simply weren't around.

Microsoft simply cannot be trusted.

Maybe ya'll are fine forgiving and forgetting but personally I take a stance on a company for this kind of behaviour I don't forgive.

Same goes for a lot of companies with awful histories of Child Labor and agregious abuses.

> Linux is the long term threat against our core business. Never forget that!

I won't.

https://www.theregister.com/2001/11/12/ms_promotes_linux_fro...
I'm not an economist and don't claim to understand what's happening, but what I do know is that I considered entering the market before the pandemic but abstained because I felt the prices were inflated by all this "free money" from cheap loans, and I was competing with people who seemed to have no limit on what they wanted to pay. Then, the prices went up by more than 20% during one year, a period where most economies stalled and went into recession.

I'm not touching this with a ten foot pole, I don't care if I have to rent for decades. I'll spend my money on something else in the meantime.
Is Chrome Lighthouse Broken for Mobile Testing?
The scores don't seem to match up with the actual mobile page load speed - and seem impossibly low for top high-traffic sites like Uber, AirBnB and Pizza Hut.
Oh my gosh, their IRB approved this as exempt knowing all the details? Initially, my guess was that the researchers misinformed the IRB about what the experiment involved.

But the IRB approved as exempt an experiment involving (1) humans (2) who are deceived (3) and who do not provide informed consent.

Additionally, an IRB review should take into consideration all possible harms to people that could result from an experiment, and as a result of this experiment, many downstream Linux users were affected who also did not have an opportunity to provide informed consent.

I would think this would be a hard experiment to get approval for at all, let alone exempt. That's bananas. For me, this taints the reputation of the university.

Edit: The more I think about this, the worse it gets. One of the pragmatic aspects of not harming participants is compensating them for their time. Through the experiment, researchers get data, and participants get something in a trade that's not always exactly fair, but at least treats the research participants with respect. That's why it's common to receive gift cards for filling out surveys. Research participants in this experiment (skilled software developers) were presumably not compensated for their time during the experiment and their time is probably worth quite a bit. How in the world did this pass IRB as exempt.
Rapid Prototyping with Django, Htmx, and Tailwind CSS
> I was told over and over 'this is all boilerplate'.

I really hate this response, and I've heard it so many times. It's "boilerplate" only because nobody can be bothered to read it to find out how they're being screwed, mostly because most of these are ridiculously long. If one doesn't want to negotiate, that's fine, but just be straight about it and quit wasting my time.

In one particular "contract", it was also insinuated that I didn't know what I was talking about, because I was (am) not a lawyer. I might not be, but I am not signing anything about "copywrite" (sic). (And there were more semantic errors to that particular one: I was being asked to sign over rights to a work that I didn't have rights to. They had waited until literally the day of a performance to show us this, too. It didn't get signed.)
This was probably more about the comment than the donation.

"God bless. Thank you for your courage. Keep your head up. You’ve done nothing wrong.... Every rank and file police officer supports you."

And sent from his work email account.
Use Open source software.
Do you think there is something inherent in MS's DNA that makes it more dangerous in a position of dominance than its competitors? Where you can extrapolate from MS in 2000 to now? (In any event, I personally don't think MS when it was dominant and going through the anti-trust suit was doing much that isn't routinely done by its competitors these days.)

Microsoft is very good at making deals with management. The marketing/sales apparatus is what really sets them apart. I can imagine being forced to give up my mac because someone who is barely technical made a decision after going out to lunch and hearing that WSL solves all the reasons I would use a Mac while giving more control to the enterprise.

While that example is a stretch to match the story, it's basically the reason why all the developers where I work have to spend time migrating from our self-hosted GitLab to GitHub enterprise. BTW If anyone at GitHub is reading this, can someone pretty please add sub namespaces within the enterprise?
The answers is both. Devs cannot work on a system (involving "data") without knowing about that data/how it works/how it is structured and how to store and retrieve it. Pretending you can do one without the other leads to a boatload of issues in the medium and long term.
Some high level info: https://www.onmsft.com/news/heres-an-early-first-look-at-mic...

An internal binary leaked a while ago, someone confirmed the WebView2 aspect: https://twitter.com/teroalhonen/status/1346196838840463360
Yep, understand this completely. Love that talk, too.

What I've pinned it to is a cultural problem in the JavaScript realm: everybody wants to impress everybody else about how smart they are, and in the process of doing so, creates convoluted mazes. As a side-effect, motivation dips and then quality control falls in concert, leading to an "at least it works" mentality.

That's my curmudgeon speculation/observation, at least.
Check out https://ai.neuralblock.app/

All the data is public, so anyone can try!

I still think this will remain human-made for the foreseeable future, as an AI will probably never be able to make the millisecond-precise segments that it currenty has
Ahh that makes more sense. My preference has been to use an ORM for your normal CRUD, but write more advanced queries using SQL (or sometimes just write the where clause using SQL, if the select is otherwise simple.) I am not a fan of query builders.
There were more than three buggy commits, at least one of which is from this month
The PDF is about DNS Encryption not DNSSEC. Some (all?) of the root servers already support DNSSEC.
Maybe that was in line with the "research"?

I think this can be an interesting topic in itself, how those trigger words and victim playing can get you through code reviews faster. It's certainly true in my company...
So you are saying that because a non-controversial method to show the same issue wouldn't cause the publicity connected purely to their way of operating, it was right to ignore the concerns? Lots of slippery slopes there, and science has spend a long time to get away from such an "the end justifies the means" attitude.
Well, you or whoever was the responsible maintainer completely failed in reviewing these patches, which is your whole job as a maintainer.

Just reverting those patches (which may well be correct) makes no sense, you and/or other maintainers need to properly review them after your previous abject failure at doing so, and properly determine whether they are correct or not, and if they aren't how they got merged anyway and how you will stop this happening again.

Or I suppose step down as maintainers, which may be appropriate after a fiasco of this magnitude.
Is there a readable version of the message Greg was replying to https://lore.kernel.org/linux-nfs/YH%2FfM%2FTsbmcZzwnX@kroah... ? Or was there more to it that what Greg quoted?
For me, the consistency with JavaScript's existing syntax is a great advantage of TypeScript. TypeScript's "allowJs" flag also makes it easier to convert an existing codebase.

ReScript seems to have come a long way since I last looked at it (it was just called ReasonML at the time I think), so it'd be worth looking into.
One thing that helped me a lot with this is Firefox containers. I started using it just to separate work and personal, but now I have Work, Personal, School, my professional blog, and my DND sessions and it is great, it really promotes separation and helps me manage all of them seamlessly and independently.
The Linux team found the source of a security threat and have taken steps to prevent that security threat from continuing to attack them.

You can't break into someone's house through their back window, tell the owners what you did, and not expect to get arrested.

People don't scream "how are we going to know that people can break into houses through broken windows without these heros!?"