skysight-inc/HackerNews huggingface dataset:
The goal of BGP or other routing protocol isn't consensus though. Each router really just wants to find a next hop for every destination, and there are lots of reasons for differences.

In the case where there are multiple next hops to choose from, it might be nice to have some sort of quality metric to decide, but that's really tricky to measure and integrate. It's really outside the scope of BGP.

You would need to instrument packet loss or transfer speed or something like that by destination path on your application servers (or load balancers), and be able to adjust the proportion of traffic through various paths; keeping in mind that you can't really influence the path beyond your routers or the return path.

It's a lot of work, and I don't think the tools are built for it, but I would love to work on it for someone though. I did something similar for SMS routing, but that's a ton easier, fewer choices, less traffic, clearer success, etc.
Didn't they just blanket revert all patches from University of Minnesota?

https://news.ycombinator.com/item?id=26889550
They don't have to, it's the ,,redearcher'' who has to apologize.

The University has to do exactly what they have done and follow up, to keep their reputation.
YouTube Premium pays creators substantially more than viewing ads would, and the creators thank you by shoving ads down your throat anyway. Skipping them is more than fair.
Nice! Re linking, writing a bot scraping the links and adding PRs would be a great thing to have =)
From what I've experienced code based frameworks are often used because the language itself doesn't handle that case well on its own. In the case of F#, JS, etc, using DI again as an example, partial completion/currying once you get your head around it means that quite often programs are just chained one line factories (similar to the one line you used to register your singleton/instance in a DI framework so no more code bloat). As a bonus you learn something that is multi applicable, not just for DI and doesn't bring in any more "magic" or runtime errors if a registration is missing because the compiler catches it. Everything is just functions/modules which means mocking is a breeze too, refactoring is easier, etc.

This is my own personal experience here mentoring dev's in both technologies, especially when they come from different backgrounds. YMMV.
> Apple may be legally required to at the very least, comment on this situation.

"Required" to comment? By whom and for what reason?
Because there is no central authority, what stops these alternative DNS servers from selling these domains themselves? Still seems like an interesting concept, but I gotta research it more.
Is it?

Their ethics committee approved the research, and yet I see no acknowledgement of their responsibility.
That's true, but my comment was more pointing out that the price is there (it's not prominent though)
> The last line is "We will report our findings back to the community as soon as practical." It should be followed by "and we will provide an update in no more than 30 days".

I don't really think this is a worthwhile distinction. Personally, it comes off as trying to nanny a process that involves the Linux kernel maintainers and UMN Admins. There's a ban on UMN, probably until they show they can head off ethical issues. The public doesn't need to be sitting around demanding an update in 30 days or less. They'll act when they have confidence in their facts and the outcome, and the Linux community will undoubtedly act in kind.
Ask HN: Is it legal to scrap Goodreads's Reviews and build a better alternative?
Is it legal to scrap Goodreads's Reviews and build a better alternative?
Sudden Infant Death Syndrome
I don't have a strong opinion on it: I think inheritance has worked out pretty well when I've used it (e.g. if I want a bunch of links to target a specific div, I can hoist the hx-target to a parent.)

But I salute twinspark as well and if it dovetails better with your sensibilities I encourage you to use it.
> But you don't get splashy outrage, and thus less success at "raising awareness" with people that didn't care before, which is what your comment seemed to argue for.

the reason for doing it, is basic quality science. it's proper blinding.

the result is raising awareness, which if it leads to more scrutiny and a better and more secure linux kernel, seems to be a good thing... in the long run.

i mean, i get it. a lot of this security stuff feels a lot like gotcha qa, with people looking to make names for themselves at the expense of others. and yeah, in science, making a name for yourself is the primary currency...

but honestly, they ran their experiment and it worked, uncovered an actual, not theoretical, vulnerability in an irrefutable way, in a massive chunk of computing infrastructure that powers massive chunks of society.

papers like this one can have a lot of potential in terms of raising funds. this is the sort of thing that can be taken to governments, private foundations and public corporations to ask for quite a lot of money to help with the situation.
This looks lovely, but I wonder about the reliability for anything that touches living things.

I set up an Arduino-based programmable logic controller to manage the fogging and primary heating circuits for our commercial greenhouse, with a separate Node.js-based server component that handles only Arduino configuration changes, logging and alerting and it works beautifully. The idea of having a full Linux machine (especially in a RPi form factor) running the process control functions would be a bit scary.

Still, the capabilities here seem so far beyond what you could do with a single PLC that it's very impressive and I can definitely imagine using it for something non-critical, or with multiple hardware backup systems.
if they release a statement as fast as they did for the ISCA'19 peer review fraud case you might be waiting a while (took more or less 2 years)
> Now they appear to be doing it again. It’s a different PHD student with the same advisor as last time.

I'd hate to be the PhD student that wastes away half a dozen years of his/her life writing a document on how to sneak buggy code through a code review.

More than being pointless and boring, it's a total CV black hole. It's the worst of both worlds: zero professional experience to show for, and zero academic portfolio to show for.
There is ample evidence of a fair election I have seen zero verification that the laptop belonged to hunter Biden in the first place and a lot of reasons to believe that the story is largely fabricated. Specifically its entirely sure that the laptop exists. It's possible it contains some actual stolen data in the same way that a lot of celebrities nudes are now out there due to a vulnerability in icloud.

Its not clear to ME that the physical device ever belonged to Hunter Biden or that it contains anything like what they claim it contains. The single source of truth is massively tainted because the source is a lying scumbag with zero integrity. If you conclude otherwise I conclude its because its the answer you wish were true.
Custom version? Isn't `deno compile` what you want?
> Why should they waste their time with extra scrutiny next time?

Because well funded malicious actors (government agencies, large corporations, etc) exist and aren't so polite as to use email addresses that conveniently link different individuals from the group together. Such actors don't publicize their results, aren't subject to IRB approval, and their exploits likely don't have such benign end goals.

As far as I'm concerned the University of Minnesota did a public service here by facilitating a mildly sophisticated and ultimately benign attack against the process surrounding an absolutely critical piece of software. We ought to have more such unannounced penetration tests.
At least for me, WSL1 had pretty good performance on the Windows file system. On WSL2 accessing the Windows file system is pretty slow.

You can read about it here: https://github.com/microsoft/WSL/issues/4197
Giving them more activities to do and the greatly increased exercise are the two big ones. Even if you think it's better to keep a cat inside, there are strong reasons in either direction. People that let their cats outside aren't just being dumb.
I think psychological safety comes from similar expectations of the employer/employee relationship. You don’t have to agree on the specifics, as long as you agree on the methods.
I wonder what effect the work-from-anywhere environment we've created, and pushed further with COVID-19 workplace closures, will have? Lots of the places where housing is being built en-mass now are previously rural areas, without onerous zoning restrictions. Houses are being built, just not in the usual areas. Building material costs are rising, as the author notes, but could it be because the demand for them has exceeded the supply?
I recently asked a friend (software dev) whether he thought his employer was going to ask them to resume working in the local office and he was skeptical that they ever could do so. Too many of the strongest devs had already moved away, and he felt the chances of replacing them now with local, office-based developers of the same quality would be basically zero.
Not everyone can work remote, but enough that it could alleviate pressure in the traditional centers.
This doesn't seem like a genuine question. You provide no details, and WSL2 works great for everyone I personally know. You could probably get help there: https://github.com/Microsoft/WSL/issues

But, obviously, you would have to actually be willing to provide meaningful details and not just... what you posted here.
Breaking up a no-hitter with a bunt requires bunting for a base hit, which is orders of magnitude more challenging than a sac bunt. It's not as rare as pitching a no-hitter, but it's rare enough to be notable when it happens. You have to place the bunt in one of only a handful of defensive dead zones and it requires elite base running speed.
Is it just me, or is there not a single image on that page? (I tried allowing JS.)
Based on the source how do we know they just didn't literally make it up?
Can you help me understand? My friends in New York tell me that house prices are down more than 20% from 1 year ago. Real estate agents are desperate for sales. Most houses in New York have been taken off the market because prices are too low. My place in Manhattan is down 20%. Where is the bubble???
From what I’ve read, with the M1’s unified memory and the ability to swap extremely quickly, it’s like the SSD is more of a cache, making the limited RAM much less of an issue— https://singhkays.com/blog/apple-silicon-m1-black-magic/
It's a matter of trust. UMN was given a fair amount of trust before, as academics were entrusted to do goods in research in ethical ways.

Trust is an important social contract since it lowers the cost of social transactions. But trust takes a long time to earn and can be lost in a flash.
The pandemic has been awful. It could have been so much worse
It seems concerning that the investigation is being conducted by the CS&E department itself, rather than an independent third party. There's a risk that the results of the investigation won't be seen as impartial, since the CS&E faculty obviously have an interest in protecting the department's reputation.
Can someone explain why engineering of bugs into products is bad but hacking to find software defects is good. I think trying to do this sort of research is good because obviously it presents a vector for malicious actors we should all be aware of. It’s good that the Linux team found these issues but I don’t see the intention as being any different than any other kind of hacking, just like some organisations will send you phishing emails once or twice a year to see if you’re susceptible.
Petroleum is mostly marine microorganisms. Coal is mostly old forests from a time before fungi developed the ability to break down lignin. Dead trees back then just continued to pile up without ever rotting.
The university's ethics committee approved the research, and it was guided by a number of their professors. I see no acknowledgement of this in the statement; instead, I see the groundwork laid for hanging the students out to dry.

> The research method used raised serious concerns in the Linux Kernel community and, as of today, this has resulted in the University being banned from contributing to the Linux Kernel.

The research method _approved by the University's internal authorities_.
I have been using Firefox for 15 years and will never switch. For me it's the idea of supporting the underdog along with the security. Plus at this point I really know how to use it well!
Firefox still has a few UI elements that look like they haven't changed in 2 decades. Probably still using XUL. Wonder how all these UI changes pile up onto a very old codebase.
You're not wrong, but I think you're missing the value of React: the simplicity is not having to worry about the correctness or efficiency of your render engine. You get to go back to a more declarative way of writing code that comes with a modular composable style. There's a cost to pay for this: surrendering control (and easy insight) of the DOM you once knew to React's core logic. You do get a variety of callbacks to hook into, and I always encourage people to learn more about their frameworks, but you're not buying a set of convenience methods like you were with jQuery: this is effectively an interpreter between your data and its rendering.
Wait, are you saying should wait for them to become permanent before stepping in, or step in now and wait for them to not be permanent before resuming?
Aesthetically pleasing files...lmao
To disable the blue check you just don't need to open the app, blue check for sender only triggers when you view the message in the actual app, but not if you read it in the notification/on the lock screen.

As long as the app is not open you also won't be shown as online, that only happens when actively using the app.
Where I went, it was so widespread that it was considered normal and nobody would even think about speaking out about it. Only with hindsight did I realize how despicable it was.
Yeah, i thought the same thing.
This is basically someone yelling in an office put through a diplomacy filter, which is what you would expect happened.
I’d be surprised if someone hasn’t emulated or otherwise cloned whatever 8-bit computer and BASIC interpreter you used as a JavaScript web app that can we loaded in a few seconds in any modern web browser.
You’re missing the issue. Once hospital access is unavailable, the death rate spikes.

Young people are absolutely at risk. I can probably name a dozen <45 who required hospitalization, most briefly. Most of those folks had some impact for weeks or months.
This is sweet as hell! Honestly had no idea I was only a few degrees away from some big names, super cool.
aren't icon menu bars a somewhat recent trend (last decade), I remember text menu bars were more popular back in the day and then boostrap came along.
> Malicious strangers trying to sneak vulnerabilities by submitting malicious patches devised to exploit the code review process is not normal.

How could you possibly know that? In fact, I would suggest that you are completely and obviously wrong. Government intelligence agencies exist (among other things) and presumably engage in such behavior constantly. The reward for succeeding is far too high to assume that no one is trying.
Google will invest much more money to avoid setting a precedent if class action is taken.

As an individual, if you can fund this yourself and it's monetarily worth it - sue individually. Or collectively assign your IP to a single entity and sue as one, a class action will result in a LOT more investment in legal from big players like Google.

They'll appeal and re-appeal just to avoid a precedent.
We're not ranking high enough on Google, better get the government involved!
This isn't too difficult if you can write the algorithm in software (ie. matlab).

Do a basic OFDM with bins say 5Hz wide, with QAM data. Align timing, phase shift and amplitude by brute force looking for known marker bins. Choose such narrow bins and such long symbols to try to hide the effects of echo, reverb etc.

Deal with noise and channel deficiencies with lots of erasure coding.
you should notice that the professor involved is listed as being on the Program Committee for IEEE S&P 2022 already, meaning he must be well-connected with various higher ups at the conference. This is probably why they are reluctant to remove the paper. There were similar issues with the ISCA'19 peer review fraud case. IEEE/ACM are having some major issues these days.
That makes sense. I totally agree.

There are existing, well-established online communities outside of Facebook for this particular topic I am interested in. And now that I have found out about the Facebook group, I see why they appear to be slowly dying. OP seemed to imply it's Facebook or nothing. I disagree with that.

And I think there are many examples of communities outside of Facebook that do it well in a privacy-friendly way that are well supported by its members.

I am definitely making an un-forced choice to join to have access to their content. The trade-off, of course, is that I have to agree to their terms and offer my pseudo "support."
The person in power here is Greg KH. It seems like he can accept/reject/ban anyone for any reason with little recourse for the counter-party. I'm willing to withhold judgement on these allegations until the truth comes out. Seems like many here want retribution before any investigation.
History is full of failures where they did almost exactly that, just without the "re" in front of "training". The creation of that weird MS Office toolbar thing for example must have consumed a large fraction of the last remaining blank slate non-users in the experiments that led to it's design.
Similar, nothing in the laws of nature, nothing of any fundamental significance, nothing in any rule book or of any engineering consideration says that UI should never ever change.
It'll be harder for you than it would be for him but I still wouldn't discount it! Considering the alternative is (1) trying to get into a PhD program (might require a year or two of remedial classes with no guarantee of success) and then (2) spending 4-6 years doing a PhD, reaching out to the randos may well be much faster AND lowest risk.

If you're a software engineer, I'd venture a claim and say that the rando route will be easier. You have a valuable skillset researchers need -- you can code at a professional level. Use that to get your foot in the door!
Not sure exactly what you want to learn on the back end but if it's just learning than I think one of the best ways to go is get a Raspberry Pi and start tinkering with it.

You can also spin up a VPS on DigitalOcean and do much the same. They have some very good tutorials on installing and configuring web servers and SSL certs and DNS records, etc. All kinds of things really.

Personally, I use Perl to manage server side chores for things like processing PayPal payments and setting up and managing user accounts, but I'm pretty sure python would work just as good.

With Perl I use modules like LWP, JSON, Net::SMTP, and even CGI.pm to deal with simple html form data.

I also use CouchDB as opposed to an SQL DB. That's a personal preference but you can do a lot with that on the server side with Perl and CURL, the terminal, etc.
> We will investigate [...] the process by which this research method was approved, determine appropriate remedial action, and safeguard against future issues,

And the associate department head labelling it a failure of the review process: https://twitter.com/lorenterveen/status/1384966202301337603
Alternate theory - more people at home spending entire day wearing headphones
>Some of them are not able to be reverted as they already have been reverted, or fixed up with follow-on patches as they were determined to be invalid. Proof that these submissions were almost universally wrong.
update: merged
How about we skip the middle-man and reduce their budget instead? That's my preferred way of limiting government.
Well if they do it better not be phone-based.

I should not be required to have a mobile phone and even if they do they shouldn't need my phone number.

Pick a different 2FA method.
I actually started with Ava for a new project because it did a few things better than Jest. But ended up switching away because of this issue: https://github.com/avajs/ava/issues/2385

Basically, if an assertion fails in the middle of an individual test, most test runners stop executing that test. Ava (by design) continues on with the rest of that test. This makes it harder to debug issues.

(This not be a problem for everyone. I'm only mentioning it because it was a deal-breaker for me and wish I knew that going in.)
To be clear, Linux kernel patches from good UMN researchers and students are rare. We have plenty of great people at the University of Minnesota, they just don't work on the Linux kernel.

It's justifiable and natural for our name to be dragged in the mud here, but as a run of the mill software engineer who graduated from UMN, I hope our reputation isn't soured too much.
Wouldn’t being in possession of stolen material and profiting from it be illegal?
I have noticed in my own life, particularly in the last 3-4 months, more instances of tinnitus.

I suspect in my case it is as you say; working from home with headphones on all day for ~12 months has started to catch up to me.
I'd say that's a staple of socialism/communism/marxism.

From Mao to Venezuela, the core idea depends upon excluding, oppressing, and murder of others in the same country based on class.

The only thing different about the Nazis is they targeted by race not class, though Communist China is targeting Uighur and other minorities in their country.
> React devtools extension is a first-party tool maintained by the React team

Which makes my example more accurate barring two words...

> Also, the react dev tools aren't really a debugger.

All it takes to be a debugger is to provide additional info about a running process. Insight into React's internal state definitely qualifies IMO. Even if you think it doesn't quite qualify, Chrome Devtools are a debugger, and whether something that extends it to give better info is a debugger or an extension for a dubber is missing the forest for the trees.

That said, I'm not necessarily agreeing with the original premise, since I don't know how hard React is to introspect at this point (I know in the past some websites purposefully made it very hard on purpose). I'm just not sure the original comment's point of view can be boiled down to whether someone is familiar with the technology or not (and part of the reason I'm not sure might be lack of knowledge).
Society works because of trust. Activities like these erode trust. It's like "let's try and pour a bottle of acid into the freshwater storage facility".
I don’t have any of this stuff and I make a lot of money and am not doing that well.

I live in 500 square feet, don’t go anywhere(like to a bar) and don’t have a car. I don’t have kids.
Ah, while I may not forget the nature of the relationship, which sort of tempers the whole deal, I’ve definitely publicly lost patience with my boss.

It was actually kind of interesting, since I thought as you did before that.
Except for the ones on visas, interns, and recent grads. Anyone who doesn't want to or can't cram for four hours of consecutive leetcode is also going to struggle.
It's weird they took out the icons in the hamburger menu, they are useful visual cues especially for non power users who are not familiar with whith shortcuts.

Otherwise I like the look of it but it seems like totally unnecessary. I don't understand why they invest so in new ui changes.

In the meantime we still don't have WebMIDI.
> I want to see less of my browser's chrome when using the web, not more.

Yeah, a few internet-centuries ago Firefox was marketing itself with how much more space they gave to content than other browser vendors.