skysight-inc/HackerNews huggingface dataset:
Good debug logs have a value beyond software debugging by its developers - they are useful for ops too. More than a few times nginx and postfix debug logs allowed me to see how requests are processed and find a mistake which would be hard to spot just by looking at the config. Debug logs can be enabled for requests from configured IP even on a server with high load if traffic from the IP is low; rr I assume has no such option.
The State of Charter Cities Is Strong
Hmm, why bother even having the no-js class, then?
My Apple watch tells me my heart rate is spiking every time I have more than 5-6 drinks in a night.
I'm Swedish and have never seen nor heard "schtum" before.

Guess "keeping quiet" didn't come to the author's mind. /s
German exports alone nearly match the United States despite the US having a far larger population and economy.

https://en.wikipedia.org/wiki/List_of_countries_by_exports
Somehow none of that has happened with the existing fabs here, so why would it suddenly be an issue?
Wait till you learn where trash was going up to 1992 https://www.nytimes.com/1992/06/29/nyregion/ocean-dumping-en...
Media has perhaps the most competing firms of any nationwide industry. I don't understand this take, and I see it a lot. There are probably 20 relatively trustworthy outlets through which you can consume US news.

That is a lot. Look at the competitive landscape in other industries. There are basically 4 tire companies, 4 or 5 home builders, 6 or so mobile handset manufacturers, 4 or 5 US based airlines... You get the picture. And all of those industries are still decently competitive.
Oh for sure. Writing the blog post (at all) and putting that policy in without discussing it within the company was a REAAAAAAALLY bad/tone deaf move. When they announced it originally I assumed it had been implemented for weeks and they had the expected all hands meeting internally and concerns/edge cases worked out.

They clearly didn't. Saying that was dumb would be the understatement of the week.
I'd say split the difference. Stay where you are for another year or two so you gain some financial benefit, then go for something else where you are better suited. If the thought of that is intolerable, then you should leave sooner.
If you mean XMI that's XML indeed. But merely it using XML doesn't begin to describe its insanity. It has metamodels, meta-metamodels, ..., all described in OMG's "MOF", starting from the idea that OO principles somehow pass as formal method or logical framework, and ends in "Extreme UML", posing decision problems with unknown complexity/feasibility/decidability left and right.

It's truly junior OOP zealotry going beyond its comfort zone. What's particular bad IMHO is that OMG/IBM managed to undermine completely unrelated and useful BPM modelling standards into the dead end that was UML, taking those down along with the nonsensical XMI, MOF, EMF, GEF.
Another Apple store scam(s) (multimillion dollars) that was recently in news but 'somehow' didn't get traction on HN:

https://www.theverge.com/2021/4/21/22385859/apple-app-store-...

Edit: Submitting this link to HN seems to redirect to another submission (of the same link) from 6 days ago that has a grand slam of 6 comments. Why can't it be resubmitted?
It isn't insane, it's just an engineering tradeoff. Streaming a browser takes more of some resources, probably bandwidth, processing power for video decoding, and the cost of the remote hardware. But it takes less RAM on your local machine. If you are running out of RAM and not running out of the other resources, this tradeoff makes complete sense.
> The whole "little alcohol can actually be healthy" meme is a good example of corporate sponsored research combined with publication bias.

It also is what everyone drinking a few glasses of wine here and there want to hear
Maybe credit card, but cash, debit, interac, etc don't.

If I etransfer (Canada) someone money and that person up and disappears I am out that money, a bank will do absolutely nothing. You can file a police report but those chances are also basically zero.

Same with cash, if I give someone cash or take cash out and don't store it properly I lose the whole thing.

There isn't really an undo process except credit cards.
Please be careful - wire transfer often do not have an "undo" or even if available it's often too late to use it.
Basecamp policy prompted by internal complaints wrt Asian customer names mockery
Yeah. Notice how the free speech absolutists are nowhere to be found here.
But for many people, maybe even most people, they're not just "a phone". They're a multi-purpose tool that comes in the form factor of a mobile phone. Camera, chat, web browser, games, social media, music player, access to nearly the sum total of human knowledge... Treating such as tool as merely "a phone" doesn't make any sense.
A Basecamp employee speaks out about yesterday’s policy change
buy an iphone?
> What do you suggest the students learn in addition to or instead of this?

Two things:

1. Many people don't start from a premise of: "Let's find out what The Law requires of us and we'll proceed accordingly, out of a sense of duty, loyalty, and obedience."

Instead, to a first approximation, their starting point is: "I don't give a [hoot] about The Law except pragmatically — I want to do X, so I want to know: (i) under The Law, what pain could others inflict on me if I were in fact to do X, and (ii) by what means could I prevent, or at least mitigate, such an outcome?"

2. Weather forecasting is the best analogy I've come up with to describe legal analysis: You have to make a best guess about how various "energy sources" — litigants; legislatures; courts; armed camps — will interact at a given place and time.
Two Hundred Forty Tables and No Documentation?
ABET accredited schools already require "ethics". Most of these classes are: Emmanuel Kant existed and "don't copy that floppy." I'm sure there are some very competent professors from the philosophy departments whom do a very competent job, but I'm speaking in generalities.

The fact is that if someone's employer, like an academic advisor, asks you to do something "unethical" most of that training is moot.
I was sixteen when I first started diving. It was only after I first (briefly) lost track of the dive group, at night, that I realized I had absolutely no plan for what to do if I was disconnected from the guide. (At night.) This possibility hadn’t been discussed, at all.
Oh, we should have them. But despite all their education (which includes ethics) and professional associations, your revered "professionals" aren't any better than the "wage labourers".
FWIW, I run yabai without having disabled SIP and it works great. There is probably some subset of functionality I am missing out on, but it does what I need it to.
Fixing a Bug in Java
Agreed, but there's been a major project since 1968 to ensure that capital generally is big enough that it's more important to protect its interests than poor people's. That's the entire purpose of the Federalist Society and fusionism. That's why Donald Trump was actually in a way the most establishment candidate in 2016, he was the first to recognize that traditional fusionism is dead with declining religiosity in the US, now instead of the religious right/libertarian fusion you have the white grievance/nationalist/libertarian fusion instead. Unfortunately, the new fusion is essentially proto-fascism.
> It is really sad how the domestic/western production became irrelevant.

Has it though? The West is up against governments. TSMC is part owned by their government. SMIC is part owned by their government. Samsung's share of South Korean GDP is so large that it might as well be the government.

In the face of such organized and concentrated competition, what's so sad about some private businesses falling short?
Thanks... good things happen when the end user is on the App Page :P

I am going to outline it on the next website.. for now, it's present in the Upgrade tab on Paletter Lite

Screenshot: https://imgur.com/a/CJvf0fh
Resolved: Application Load Balancer Session Ticket Issue
And the Most Sexist Invention Award Goes to This German Startup
Indeed. If UMN can't tell how to undo the damage, then it is intentional sabotage, and should be prosecuted as such.
I've done something similar for my current job. I've used all these same data sources, even got access to the IATA stuff eventually. I also used GeoNames a lot, it's not specific to airports but it has decent airport data and I need a lot of the surrounding features as well.

Every source was definitely useful, but I think ultimately crawling Wikipedia was the most useful and highest quality set of data for me (after some significant data cleaning). The List of Airports By IATA Code [0] is almost as comprehensive as the official list from IATA, and you can follow the links to crawl info about the airport and city served. Getting info about what city the airport is considered to "serve" is so useful, as most airports are technically not in the city people consider them to be the major airports of, and some "serve" multiple cities.

Of course the difficult part there is that Wikipedia data isn't really clean or standardized. The page HTML isn't standard, even things that look very standardized like the sidebar will have 30 variations when you crawl all the airport pages. There is WikiData, but I found it still wasn't simple to get the data from there, and it also didn't include most of the page content which I wanted. [1]

Nowadays we have direct relationships with the airlines/GDS/so on, and also a department of people to add and manage the data ourselves, because even the direct source gives you pretty poor quality data. The project was way more fun when I was wrangling data from a dozen places around the web :) Now it's more of an enterprise CRUD webapp with some fancy localization and GIS tooling.

[0] https://en.wikipedia.org/wiki/List_of_airports_by_IATA_airpo...

[1] This was a while ago, so maybe WikiData has changed
Well that was 20 years ago.

A smart washing machine is more powerful that a computer from 2000. :P
At this point Google is the malware. Bait and switch, I miss the era that I could freely customize with termux, now waiting for a decent linux phone.
This discussion and the one it references, previously on HN[1] conflate UML the diagram syntax (which remains useful) with UML as visual CASE tool. The latter never really lived, any more than any other "programming without writing code!" tool lived.

The former is alive and well, after shedding a lot of the fiddly details and requirements that the bits of the diagram be expressed in low-level details. Case in point: association vs aggregation vs. composition in class diagrams. All three express a similar idea by having a line joining the two classes: this class and this other class work together. But for aggregation and composition, one end of the line is supposed to have a diamond. Which end? Should the diamond be open or closed? What about multiplicity? Which end of the line has the number? It depends, sometimes both.

But all that detail, while sometimes useful to people looking at the diagram, really only matters for the benighted folks who try to make their UML diagrams input into code generators.

Forget "UML is dying", accept that CASE tools will never be more than fancy and fiddly code generators, and use the general ideas around diagramming, including some UML syntax, as a way to communicate among team members and stakeholders who are sufficiently technical.

1. https://news.ycombinator.com/item?id=26934577

p.s. Don't use quotation marks for emphasis. Ever. It's wrong.
Materials with high radioactivity have a short half life and materials with low radioactivity have a long half life. So that makes the problem a bit better.

Then look at the kind of stuff that they have to bury and store. It's not just the fissile material itself, it's pretty much everything that had to have had contact with it. Wikipedia mentions "steam generators, pumps, lids of reactor pressure vessels" [1] - those seem very reasonable to just dump in the ocean.

I agree that material that can be used as fuel for modern reactors in the future should be kept accessible.

[1] https://en.wikipedia.org/wiki/Ocean_disposal_of_radioactive_...
There is more to the story:

"The app was a fake, designed to trick people into thinking it was a legitimate app."

Same app, different user:

"He wanted to make sure his investment was secure, so he purchased a Trezor Model T hardware wallet and downloaded an app on his iPhone called Trezor, which asked for his seed phrase. The app didn’t connect to his Trezor wallet, and he figured it didn’t work."

NEVER TYPE A SEED PHRASE INTO AN ONLINE DEVICE. That is never required during normal operation of any hardware wallet, that's the whole point of using one.
Even if you're in an IDE, the debugger will often require configuration if the app is not running directly on your local setup. This can range from rather trivial (run app in debug mode, connect to debug port) to rather complex (change the docker image for your app to include a debugger service of some kind).
Droidscript has support for writing custom intents, which Pythonista (and Scriptable, a JavaScript version of the same thing) do not have. A malicious Droidscript application could access other applications on the device.

https://symdstools.github.io/Docs/docs/app/SendIntent.htm
> It's far more surreal when I've had to check into work, plan all day how to rip-off or exploit users without losing them, and then be cheerful about what a great customer focused team we are.

I suspect this hits home for a ton of people and applies to many people who don't (or are unwilling?) to realize.

I used to work for a company where their whole deal to make money was convince old people to enter their credit card and make them forget they ever entered it. Of course, I did not know this when I joined. I stayed for about 6 months I think.
Not a theory. I've heard it from MSFT product managers.

> stand ready to sell you the tool

There are a few - they've never been from MSFT
Most scammers use prepaid gift cards, not cryptocurrency.
Agreed. It wouldn't surprise me at all if there were actuaries out there telling companies that it's cheaper to pay ransoms if and when they occur than to hire dedicated security. Which probably is true, at face value.
I once worked on an interesting instructional web app that let you create a series of short video clips for instructions (think like assembling Ikea furniture).

On the web site there were videos placed next to each block of instructions, but that obviously doesn't work for print so we used print style sheets to swap out the video embed with a QR Code that pointed to the video.

Users could then work through the instructions on paper (their preferred interaction method) and just pop into a video if they wanted clarification or needed help.
You can lose your entire live savings with a regular bank as well. There is just government programs that offer insurance (FDIC, CDIC, etc)

All crypto needs is a insurance program that offers protection and guarantees your money.

It will take time but it's inevitable at some point with banks and large companies signing up.
University of Minnesota responds to Linux security patch requests
Another similar site that i have used a lot is ... https://www.websequencediagrams.com/ .. i particularly like the svg export of websequencediagrams.
M1s are heavy on processing power but not too heavy on RAM, and it seems like this offering makes the most sense for people running low on RAM, so perhaps M1s are a logical market.
You misunderstand why syshum answered the way he did.
GP used the phrase "actual damages" which is a precise term of art in law. Damages have to exist (actual damages already suffered, or statutory damages imposed on conduct which has already transpired) to form a basis for a lawsuit -- the law does not concern itself with hypotheticals.

Whether or not there could be 'large damage' in the future (your "once I or someone else takes advantage") is irrelevant, immaterial, and only barely actionable. You could seek an injunction to attempt to prevent further potentially-damaging conduct. But you would not be able to claim any actual damages and would generally not be entitled to any form of compensation, not even for the attorney's fees generated in seeking the injunction.

As a sibling points out, conspiracy is question of criminal law, not civil law. Furthermore, in almost all jurisdictions within the United States, conspiracy requires at least one of the members of the conspiracy to have actually committed some overt act in furtherance of the crime. It should be impossible to find these researchers guilty of a conspiracy -- even if you claim that introducing hypocrite commits was the overt act, it is already clear that their intention is to academically investigate (and improve, if you're feeling charitable) the state of open-source security. Their actions (introducing hypocrite commits) are not in and of themselves violations of criminal law, so you'd still have to prove that they actually conspired to do something actually criminally illegal as well, e.g. intent to actually damage in some specific way, facilitated by these commits, some specific entity Foo which uses the linux kernel. It's perfectly clear that no such intent existed.
I got my Pinephone last week, and have been fairly surprised that it's reasonably usable. I viewed the purchase more as a donation and a signal that there is a market, but I've been using it more and my Android phone less as the days go by.

I'd encourage more people here to purchase one, even if just to tinker with. There's so many "I'll buy one when it's ready" replies, but that may never happen if there's no money to fund the companies trying to make an alternative to Android/iOS.
Partially joking. But really - MSFT has no incentive to reduce the required dev head count by tenfold.
I personally prefer using Private Internet Access, although I believe the HN scene is a bit sceptical of them after they were acquired.

Although this Reddit post does make me feel a bit more comfortable with them - https://www.reddit.com/r/PrivateInternetAccess/comments/dz2w...

YMMV, since your post hasn’t quite indicated why you choose to use a VPN.
Yes, you are right. FDIC does not cover this sort of thing.
I think the author addressed this?

> The other ambiguity is what we mean by UML. First of all, UML consists of over a dozen different diagram types. I still see people regularly use sequence diagrams. Second, there’s many different ways people use UML diagrams. Martin Fowler, a prominent figure in both the UML and Agile worlds, identifies three types of uses: sketching, blueprinting, and programming.

Then they talk explicitly about blueprinting.
Vertical Join, Pt. I
Commercial VPN services can worsen privacy (although their marketing claims otherwise).

You've now added a second government, second downstream ISP, second DNS provider, and then of course the VPN services themselves (in particular with the race to the bottom pricing, and the potential for break-ins).

But in answer to your question: Encrypted non-ISP DNS (via DoH (DNS over HTTPS) ideally) and then HTTPS wherever possible.

Most of the really constructive things you can do for privacy improvements are at the browser or OS side though. For example Multi-Account Containers, Facebook Container, uBlock, etc.
It is true. .docx files cannot contain macros, but .docm files can. The same x/m convention applies to all of the other Office file formats as well.
'I’m not a scoundrel': Library book returned 32 years late with apology
the issue is we as a market expect them to be responsible for the security of the OS and its apps. Its very difficult to manage security without control.
Ah you're right, I didn't catch that the default view is "this week." Thanks.
> I expected Musk-hype in this thread but nothing quite so ridiculous as these idiotic "analyses"

Of course there is a ceiling which any product maker will hit eventually, but the OP made a prediction that Tesla could become the worlds biggest car manufacturer and the response to that was to label this an "idiotic analyses".

This reminds me of how Ballmer was laughing at Apple and literally 12 months later Apple was the leading smartphone maker and has been the most successful smartphone company to date and the first company in human history to even cross the 1 trillion valuation mark. So yeah... I wouldn't write off Tesla as becoming the largest car manufacturer in the near future and certainly not call it an idiotic analyses.

Do you see it now?
Well, that's hard to say. In order to have, say, made different choices as an adolescent, I would have had to have the insight I have now.

Did I try to fit in, and do I still spend too much effort on worrying about others' perception of me? Yes!

I think it is OK to look to "fit in," but don't do it at the expense of what makes you unique. That is what resonated with me about this particular bit of advice.

I have seen in myself where I left some things on the table to have certain kinds of friends or to be seen (or avoid being seen) in a certain light. And I see where these conditions I have manufactured for myself don't have the staying power and are not as fulfilling as more natural relationships and experiences.
Arm Puts Some Muscle into Future Neoverse Server CPU Designs
To me the interesting difference with mainframes is that you were generally taking advantage of the extra processing power available on the mainframe. Whereas this is more like taking advantage of the extra RAM available on the cloud machines. But yeah the spirit of it is very similar.
Ha-ha, just now I am sitting writing documentation and use UML for illustrations. No-one told me it's dead.

I must say, the drawing (CASE) tools have always been missing even very basic elements of UML.

I learned UML in the year 2000 by reading the full "The Unified Modeling Language User Guide" book by Booch, Rumbaugh and Jacobson.

Every time I tried to create a diagram during the years, after envisioning how I would express the idea with UML I was blocked by the tool not supporting the notation elements I needed. Like for communication diagram the tool did not support the iteration notation for message numbers, only simple numbers (what tool was it? maybe even Rational Rose). Or qualified assignation (when association is a lookup by a key).

I adjusted to not expect much from the tools and I think I know how to use UML to create useful illustrations - just workaround the tool limitation with a comment or build the notation element from basic boxes or use a less descriptive notation then I wanted initially.

Not to say I used UML very much over the years, as I use it today I realize I forgot many things and need to refresh my memory.

However, I see sequence diagrams used all the time. From time to time I see other diagrams. The tools like plantuml as well as the online utilities like https://www.websequencediagrams.com/, https://swimlanes.io and https://sequencediagram.org are flourishing.
If you're not capable of developing your own demonstrations nor checking the quality of the ones provided by authorities, you deserve whatever level of misinformation you're fed.
@dang: This is the same mail as <https://news.ycombinator.com/item?id=26955474>, which is already on the front page. Same mail, different mailing list.
I don't see how you can possibly say it's easier now than ever. Past incarnations of this type of thing like the KKK, lynch mobs, witch hunts, the Spanish Inquisition, often had legal authority and canceled you from Earth rather than just forcing you to use some platform other than Twitter or Facebook to publish your opinion. Nor are Hollywood blacklists a remotely new thing. The only new element is the blacklistable offenses have changed from support of communists and various left radicals to sexual harassment and racism.