skysight-inc/HackerNews huggingface dataset:
A lot of companies and people don't really appreciate how much training is really needed to operate even the simplest of mobile phones.

I completely agree, but at the same time it's funny that you can take a two-year-old without any formal technology training at all, accidentally leave an iPad where they can get it, and before long they're showing you gesture commands you didn't even know about.
Similar issues:

- Hacking 3,000,000 apps at once through CocoaPods - https://justi.cz/security/2021/04/20/cocoapods-rce.html

- Remote code execution in Homebrew by compromising the official Cask repository - https://blog.ryotak.me
/post/homebrew-security-incident-en/

- Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies - https://medium.com/@alex.birsan/dependency-confusion-4a5d60f...
There are two orders of magnitude difference between the number locomotive operators and the CEO & engineering jobs:

55k/7m = 0.8%

7m/170m = 4%

There's a legit difference between arguing about a $40k line item on a $1m house sale and a $400 line item.
That is just to highlight the redundancy!
That is not as cut and dried a decision as you frame it to be.

California emissions testing for vehicles includes licensed smog test stations and a process where undercover inspectors bring cars that are in violation to those stations. If the smog test station is incompetent, they will be cited and perhaps stripped of their operating license.

If another state decided that they’d like to start performing random tests upon their network of smog test stations, without any retaliation to those stations, then it would not be a violation of ethics for that state to send undercover cars through the stations.

It would be unethical to punish those who fail undercover tests, unless the state had announced that random undercover testing was beginning and that punishments would be applied for failures.

The researchers were not attempting to modify the behavior of the participants, nor did they seem to be interested in naming and shaming specific maintainers, so it’s not as simple as “anyone who comes into contact with the experiment must be fully informed”.
I think it's pretty much impossible to determine apple's intent here, for the obvious reasons.
unrelated but https://www.makespace.com/ returns 502 for me

502 ERROR
The request could not be satisfied.
The Lambda function returned an invalid entry in the headers object: The header must have a value field. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.

Generated by cloudfront (CloudFront)
Request ID: DFzajQj3Qn2NiP4mPERWYWVljBFZz7W3GtFt8maH2FaBgpyaDjY-YA==
Doesn't matter. People just won't update from the old firmware. Horse has left barn. Door no longer matters.
Because men and women are physiologically different and are just not attracted to the same things. For example most women don't like hunting, while men do, most likely due to evolutionary reasons.

If it's just about statistics not looking as nice and even as we'd like then no, in my opinion we shouldn't make any efforts to change it.
> Nano is great for editing config / text files quickly

emacsclient makes it just as easy to edit a text file extremely quickly with Emacs as to open a new vim or nano in place.

> emacs [...] initial learning curve is a bit low but then it gets higher and higher

Emacs's difficulty is, for simple editing cases that you could use nano for, only a little bit more difficult than nano, and certainly easier than vim - no modal editing, and you can learn the essential shortcuts (save, undo, open, close) in very little time.

I don't agree that the learning curve increases - more complex things require that you learn more about Emacs, sure, but my experience has been that it's about as easy to go from beginner to intermediate Vim knowledge as it is in Emacs, if not slightly easier due to the latter's better design and documentation.

> emacs [...] can't be found everywhere

TRAMP has been around for two decades now, making this largely irrelevant - https://news.ycombinator.com/item?id=26982916
This is a poorly written op-ed. The author claims to prioritize the valorization of wealth, the encouragement of saving, and the encouragement of children, but fails to make any case for why we should value these. He then completely neglects to make any case for how increasing capital gains might lead to the deterioration of these values.

Raising capital gains is not going to discourage the next innovative companies, in fact it's likely to have the opposite effect. When a startup succeeds enough to reach a taxable event it is often at an exponentially large return on investment. In comparison a simple doubling of the tax rate is not going to materially affect the magnitude of that outcome.

Capital is always in search of returns. A general tax on net gains is not going to materially change that fact. The primary effect it will have is to further encourage investment into value-generating assets instead of speculative plays, something desperately needed right now in this frothy market.
Even so, left-right and liberal-authoritarian are orthogonal axes.
RSSOwl – Powerful RSS / RDF / Atom News Feed Reader
They do just fine with acoustic frequency ranges.
There are informal mechanisms as well. Someone will say to a hotheaded or greedy faculty member "look, you can't boot M off this patent, three years ago that other faculty member booted N off a few patents, there were issues, and then we had to pay tens of thousands for all the amended filings!"
Hmm. Seems like, in a political discussion/argument, the least open mind "wins", because they are the most impervious to evidence.

But the consequence is that the other side becomes less open minded too. They've tried arguing with someone who Just. Will. Not. Listen, who Just. Will. Not. Think. And when they run into the same arguments from someone else, they are less likely to be willing to listen themselves.

It's hard to stay open minded in the middle of this. It's a battle. There are areas I just don't want to talk about any more. So I guess I'm losing the battle, at least to some degree.
As a sport I have no opinion on golf. But the entire setup of the sport is of course to make it accessible only to people above a certain income.
All while the topology in all jurisdictions is so different that it will never be possible to directly compare
It's also piggybacking on dbus and gvfsd esque names for non root persistence.

They are common but small compared to systemd. there are lots of commonly installed deamons, most people can't keep track of all of their names through all revisions. Even if you did it's still going to be hard to spot with legitimate looking names like this.
Do Amazon employees get a worse deal from the union than from Amazon, via its scale (i.e., healthcare rates, etc)?
> Ms. Roth remembers watching the flames engulf the house when her father, an amateur photographer, asked her to smile.

I guessed that the girl was a normal child that wouldn't smile as someone's house burned down, but she was trained to smile whenever someone shoved a camera into her face. I wasn't too far off.
We have a commercial paid API. As simple as that.
Online Courses You Can Use to Become a Data Engineer
That is not considered high impact by the research community ;)
> because batteries don't come apart nicely without, at a minimum, high risks of shorting them out and thermal runaways.

Is there a way to speed up self-discharge? Or maybe manufacture batteries in a way such that they can be easily discharged over a ~day, bypassing any circuits limiting the maximum discharge?

The way they're packaged sounds harder to mitigate, though.
I was going to complain that this blog post seemed like a rip off of the book Atomic habits. I'm not very clever.
Great book that I would recommend to anyone!
Assuming what you're saying is correct (I don't know), what other effects does spraying disinfectants everywhere have?

I would be very surprised if doing this is a good idea, even if it kills covid and/or flu.
Zanzibar doesn't actually contain any object data, only authorization metadata. So you can't do the complex queries you're suggesting against Zanzibar itself, and presumably the databases that store actual data have authz as a requirement prior to the actual query (which is fine bc Zanzibar is fast)
Poland also has a Personal use exemption due to a copy tax we get on computer media like CDRs, USB drives and even ordinary HDDs. Permissible_Use_of_Protected_Works: https://en.wikisource.org/wiki/Polish_Copyright_Law#Division...

Art. 23. Copyright

The scope of the work's own personal use

1.

Without the author's permission, you may use an already disseminated work for your own personal use free of charge. This provision does not authorize to build on the basis of someone else's architectural and urban planning work and to use electronic databases that meet the features of the work, unless it concerns own scientific use not related to profit-making purposes.

2.

The scope of personal use includes the use of single copies of works by the circle of persons remaining in a personal relationship, in particular kinship, affinity or social relationship.

but software is explicitly excluded by 77:

https://en.wikisource.org/wiki/Polish_Copyright_Law#Chapter_...

Art. 77.[32]

Provisions of Article 16 subparagraphs 3-5, Articles 20, 23, 231, 27, 28, 30, 331-335, 49, paragraph 2, Articles 56, 60 and 62 shall not apply to computer programs.
I dunno, I think this is one case where outrage and rejection weren't too quick in coming.

Let's say you're a software architect (dunno if you are or not). You hire four new software devs, two of them from Colorado State University, and you put the two from CSU on the same team. After a year, you find out one of them has been secretly working for CSU's cyber security research department and poisoning your product with patches that do nothing or subtly introduce bugs on purpose purely so their professor can write a research paper about your company's process. Naturally, you fire the developer and that leaves a bad taste in your mouth and CSU promises not to interfere again. Then you get suspicious and start checking the work of the other CSU dev more closely and find out they're submitting bad patches too! They claim that these bad patches were submitted because their experimental static code analyzer didn't find any issues with them.

What conclusion should you reach?
They likely wouldn’t have cooperated with study, but advised that there is no point to it as there is no mechanism to catch the behavior they described.

It sort of like asking “What if we volunteered for the parks department and slipped a load of salt into the fertilizer?” - of course bad actors can find new ways to circumvent security.
They can contribute without having any special status. Rust already has a robust RFC process and good technical leadership. My worry is that these things weaken and rust very gradually becomes your typical corporate software product where more and more independent features are just bolted on without care to any larger vision. That won’t happen if FB, etc keep contributing as ordinary contributors. But it could happen if they’re elevated to a position of leadership.
The typical way of writing this would be 9e-19 of the earth's mass.
Linear Regression for Fun and Profit (2012)
If anyone in the Phoenix Metro area is looking to team up with someone to start a WISP let me know, I'd love to get this setup in PHX.
No one’s discussing that, and I think that’s the most valuable question of all. Was this experiment so worthwhile that it ought to have been approved? Or was the experiment itself so irrelevant that ethical compliance or not, it shouldn’t have needed doing? Is random testing of gatekeepers an appropriate process in Linux development?
I am really sorry to be so pedantic about this and if you don’t know that’s completely understandable: are you sure those firms are actually using tropical algebra for this? I am sure that there are many firms that handle the mathematical/computational headaches that come about in transit planning, I am just skeptical that any of these headaches involve questions of tropical varieties.

My point was that the specific field is very cutting edge, and my understanding is that any 2021 application of tropical algebra to a real transit network would be a high-risk speculative research project, not a well-tested optimization methodology.
The problem is when political polarization becomes so strong that they become two separate ethnicities. The USA would probably have already fallen apart if it wasn't a federal country ?
Right, and the aggregate affect it has on individuals, and that creation of a feedback loop, is useful to understand for why the culture won't change. I'm just listing out how the initial expectations and organizational incentives in IT tend to run counter to what is needed in software. IT you don't -want- agility, and so you purposely structure your org to make change as difficult as possible. Software development that gets structured that way tends to be developed very, very slowly, and with no real user feedback. IT basically mandates waterfall approaches, decision by committee, and dilution of responsibility.
Status of macOS Support in Nixpkgs
In law there is a concept of due process, a burden of proof, an independent adjudicator, and an ability for both sides to present presence, and (generally) a presumption against the accuser, who is required to prove their case. All of this is absent.

A government cannot shut your company down without proving (to the extent necessary to satisfy the appropriate legal burden of proof) you have done something irreparably wrong.

Google and Apple have removed the due process, removed the burden of proof, and decided to appoint themselves as sole arbiters of any allegation. Allegations are by default upheld without evidence or even accuracy.

Maybe we need a middle ground, bringing in due process and independent oversight, with an independent adjudicator? Arbitration already allows for this, helps keep costs low, and ensures a burden of proof is met by the accuser.

It strikes me there's many many more shades of grey here around the extent to which being blocked from a service should prevent being able to read or access existing content, or download purchased content, as opposed to uploading new content (after being banned).

When the accuser is at Apple or Google's scale, the EU talks of them as gatekeepers, and that seems an apt term - these are economic gatekeepers, and ought to be accountable to others. As it stands, their unaccountability is helping the antitrust cases against their stores and platforms. I don't think they can have it both ways.
The secret you learn is that many people that like work a lot, actually fundamentally don't like their home lives, whether that be their spouses or their children.
I mean, no shit, they didn't ask me, so their stats are wrong. Pretty sure I got the flu last year during the pandemic. (Got a negative COVID test.)
It's pretty huge that people with cold/flu symptoms now stay home or mask up. People used to just cough and sneeze everywhere.
(unless you meant 90e(-18%)=90*10^-.18=59% of the earth's mass)
A single data point: I didn't get flu once since I went self employed and started working from home most of the time in 2006. Less public transport, less open space offices, less restaurants at lunch time. Maybe a coincidence but if people had less chances to meet other people, maybe because those other people kept social distancing, then they had less chances to get flu. It's way less contagious than covid to start with.
I think the question is, if he didn't enjoy doing it, would it still be worth it, for examples for others that might view it as work
Facebook has been contributing to the Rust ecosystem for a long time; they've been sponsoring Rust conferences for the past few years, they've had employees helping do work as part of the teams.

EDIT: oh, they've also published another post detailing their history with Rust. Lots of very interesting things in here! https://engineering.fb.com/2021/04/29/developer-tools/rust/
And to the post on HN about the article yesterday: https://news.ycombinator.com/item?id=26943408
"You can read through the Malware policy page for more details and examples of common violations." is not an explanation. It's not even specifying which part of the malware policy the app violated, just that it violated it. That's the sort of thing I'm talking about- that's not an explanation, it's a simulacrum. You can see that the replies from "Cindy" are canned. I'm saying that Google owes developers some sort of explanation that is not canned and actually at least references some sort of behavior or code contained the actual app in question.

"Your app is bad and we don't like it, look at our bad things policy for examples of bad things we don't like" is not an explanation, "Your app is going this bad thing so we don't like it" is.

It's like being fired for violating company policy without at least an explanation of what happened or what policy it was. Sure, maybe that's totally legal and above board, but companies don't have to behave that way- they can choose to write a good-faith paragraph about 1) what the bad thing was and 2) which policy it violated and 3) why it was a violation. I don't see any of that in their correspondence.

I'm not saying this needs to go to an independent arbiter[0]. Google can choose what apps to allow. I'm saying that Google really does owe long-time developers explanations when they nuke their apps from orbit.

[0] though, you know, the more they behave like this, the more politics may force it on them
The old tripwire makes less sense in a world of cloudwalking cattle. Ephemeral containers and VMs everywhere. Machines go up, they go down.
Actually, he definitely was a trance DJ. I remember when his first single was released. He understood how to make simple melodies with hooks which a lot of us respected. Over time, he learned how to make "epic" trance hooks that help pioneered the rise of the EDM genre.

Mainstage antics are part of performance. Check out every mainstream genre before EDM. Van Halen Jump is probably my fav example :)
> Cryptocurrency does not equal Proof of Work. Stop conflating them, it makes no sense to do so.

Couterpoint:

All the major cryptocurrency are prof of work.

Ethereum is pinky promising that they will switch of POW "soon" for years. Spoiler alert: they are still POW.

The statement that all Cryptocurrency's that have any kind of following are POW at the moment is absolutely true.

When there is a cryptocurrency that is not POW and you can buy, and pay stuff online with, then we can talk, bur for now its vaporware.
Okay, “UMN’s ethics review(s)” encompasses whatever the exact ethical review process(es) are. Updated.
What are the sources you use?

Do they get a cut?
Note that the Foundation doesn't have any impact on the RFC process or the project's structure or governance, so while that worry may exist, this announcement isn't a path towards doing that.
And that fact highlights the mistakes made here.

A fellow researcher intentionally pushing bad data into a colleague's study as some kind of penetration test on the colleague's scientific methodology would be justifiably seen as betrayal, and a possibly bad faith betrayal at that since research grants are a finite resource.

The researchers in the story appear to have failed to extrapolate that sort of collegial courtesy to the open source community maintaining Linux.
"Therefore, career choice, and the pay outcomes, are not truly based on merit or ability, and can be controlled by unfair external factors."

"Merit is not innate ability. Merit is just ability - not natural ability. This is a combination of skill, willingness to learn, hard work, grit, access to resources, and (yes some innate factors such as disability status) other factors contained inside the person - but very few of these are predetermined."

How are these both true? Career choice and pay is not based on merit, yet merit is a measure of your ability. Wouldn't you need the ability to choose a career and be successful at it? My point is that if you have the merit, you will have the job and the pay.

"Yes, individuals have responsibility for their own futures, but there needs to be an acknowledgment and work toward overcoming the arbitrary barriers society has put in place for some people based on innate characteristics such as gender."

I don't see any real barriers. I understand that some people may be swayed by the opinions of others. For example, some people may not want to be strippers of pornstars due to stigma. But that is not a true barrier to entry. They have every right to pursue that career. If we live in a society where group-think is so important that you will decline a career or job based on what other people think and not on your morals or beliefs, then I feel this says more about the sad state of that individuals self-imposed restrictions in freedom than it does about "society". After all, society has approved of those careers by allowing them to be lawful.

"It's about equality in opportunity, not equality in outcome."

"What I am saying----- the playing field is not level for all contenders, based on external factors."

What makes you say the playing field is not level and that equal opportunity does not exist?
I don’t disagree with the idea that people shouldn’t have to hide certain things. I’m just commenting on the apparent naivety of the people recommending greater openness, like they don’t acknowledge the pitfalls, the potential ambushes.
When Covid goes away, we can assume masking, distancing, and staying home will also go away. In that case, all communicable diseases are likely to increase, from the common cold to STDs.
My biggest fear if Apple wins, which I do think will happen, is that general purpose computing will be eliminated. Apple will use their victory to lock down OSX in the same way that IOS has been. So no applications can be installed in OSX without going through the App Store. Then Microsoft will follow suit; future versions of Windows will be MS Store Only unless you pay for an Enterprise license.

This could potentially extend to the web as well. Apple already forces any web browser on IOS to use Safari underneath. So there's the potential that Apple could eliminate features from websites, such as the ability to play video, unless those sites pass the strict criteria enforced on native apps from the App Store.
You know they do covid tests if they think your flu is covid.

I think you are mixing up half-facts. People were saying that deaths with co-factors were being lumped as covid related deaths and different countries were classifying things differently for political reasons. No one is mislabeling the flu as covid and not giving you a covid test to detect the strain.
Does anyone know what the financial requirements are to be a platinum or silver level member of the Rust Foundation? I clicked around on their website but couldn't find the answer.
> How do you even know how to avoid that that first dollar?

It's pretty easy. When you pop a compartment open and $800,000 in cash falls out, you tell the customer that you aren't doing any business with them. Most crooks will take the rejection, because they'd rather do business with someone more enthusiastic.

The big problem is when you get in trouble with the law, because then the law has leverage on you, which makes you a serious liability to your customers.
In the U.S. at least, passwords are protected under the 5th amendment but you can be ordered to unlock a phone with a fingerprint or a face since it's something you are and not something you know.