skysight-inc/HackerNews huggingface dataset:
I heard some advice that asked “what would you do if you knew you were going to fail?” and then to do that.

It was really liberating to make me think of things that were interesting and valuable to me and also to be frugal with others resources.

So it helps me prepare for failure and so when it occurs to just keep doing it. Come in the next day and do some more.

It also helps me have a really long horizon on work so that every day is sort of like planting a few seeds for a plant that no one likes.

Mediocrity can be perfectly fine if it’s accretive. It’s the churn that stalls us out. Making marginal improvements every day is actually wonderful.

If I’m truly locked into a terrible situation and I have no creative freedom, I just try to focus on the art of the mundane task. I once worked in tech support and we were super rigid and it was kind of boring. I spent time trying to understand the patterns in customers calls and needs, because I had to be on calls, I worked the “credit backlog” by correcting customer issues where they had emailed and recorded an error. It was super boring, but let me find common features that caused the need for credit. And just knowing that made the calls a little more tolerable.

It’s basic advice, I know, but just having a mindset that I’ll always come into work lets me keep going when a company fails. Or more likely, I completely bomb a presentation or don’t get a job.

Also helps that I know my own failures better than anyone else and I’ve found that what I see as a failure is invisible to others.
And if you're running X: any window can just decide that it wants your keystrokes anyway.
Can you give some more details and context about this please?
If you don't use the benefit, it's effectively compensation that you don't get. I'd much rather a company just pay everyone an extra $30 a month than include a free gym membership that most people won't use. Stuff like coffee is used by enough people and is so cheap that it's a negligible cost, but I've had jobs that included gym memberships, personal financial counseling, unlimited re-imbursement for new certifications, etc. Making those "benefits" instead of just paying people more to spend how they want is employers trying to lock you into staying at the company.
> I think it's pretty distasteful however to take advantage of the crypto community he claims to champion.

That's not what I replied to. You said it was a pump and dump and blatant illegal market manipulation.

> Your claim he's not actively working them into a froth is certainly at best a generous take. [1]

This is a lie and another hallucination since I never said anything even remotely close to this. You said it was 'blatant illegal market manipulation' and I showed you that what you linked contradicts that explicitly.

> However, your characterization is once again neither charitable, nor particularly civil.

lol, you literally lied and invented something I never said.
Another optimization would be to keep the request buffer around and use it as backing storage for all the strings objects that result. The weakness of this strategy is that it doesn't make sense to keep it around if you only need a small part of it. It's a common source of memory leaks in Java where `String.substring()` just creates a new object with different start and end indexes for the same backing buffer.

A possible disadvantage of arena allocators is that everything is now tied to the lifetime of the arena, even though it might not be required that long. You'd need to practice a strategy like subarenas, RAAI, garbage collection or reference counting within the request as well.

The occurrence and advantages of all these strategies unfortunately are heavily workload-dependent. Most strategies work well for 80% of the workload. Different workloads of course.
I tried the same thing.

The tool doesn't handle the direct link, it just gives information for about.gitlab.com again.
People in not too distant future will likely view with envy the readily available fresh air we currently have. Given that in a century or two the CO2 concentration in outside air may reach the 'stuffy classroom' level[1].

Imagine that, having to live and work in oxygenated habitats on our home planet.

https://www.acer-acre.ca/resources/climate-change-in-context...
Good lord.

Straight white could simply meant mostly white or mostly straight and white
The first is the big one for me: Work on things you care about.

If I'm engaged with a project because it's intellectually stimulating and/or just plain "cool", I'm going to be 10x more productive working remotely than I ever would be in an office. In fact, unplugging and not overworking myself becomes an issue in such a situation.

OTOH, if I hate what I'm working on, remote work makes it way too easy to procrastinate and slack off. If I'm in the office, management would be able to identify me as being unhappy and target me for termination :D You can coast working remotely an hour a day on an easy but painfully dull project for a long time.
You don’t seem to have understood my comment. I’m describing an observable phenomenon, not saying a there is a conspiratorial group which made it so. It has nothing to with agendas or ideologies.
There is no ability to run a random page though that tool. It can only look at the root index page of the domain.

And this mostly makes sense. It means they can cache results more easily, there is no way the tool could return so quickly unless it was cached.
I agree in the sense that image scaling definitely requires you to think of pixels as more than just squares, but IMO browsers and OSes have gotten good enough at it that as a web developer you mostly don’t have to think too hard about it other than to remember to use high enough resolutions.
He didn’t say they had zero female engineers.
These databases are really prevalent in the Clojure community

- Datomic

- Crux

- Datahike

- DataScript

- Datalevin

Some of them running in the browser, which power Roam Research and its clones

- Athens

- Logseq

- Obsidian
Entering a wreck at 40m without a guide line is asking to die.

I have over 10k dives and the closest I came to death was when I was guiding on the liberty wreck in bali when a small earthquake shook the wreck, I was barely 3 meter into the wreck that I had dived hundreds of times and couldn't find my way out. Fortunately my buddy was outside the wreck at the time and used his banger to guide me out.

Point is, shit happens, so you better plan for it.
Yayagram – Physical Telegram Messaging
If the cookies and/or same origin policy are shared between the marketing page and the actual "business" pages then it doesn't matter - both sides should be considered compromised.
Show HN: How to debug Lambda functions with VS Code
That's not the same thing at all. Microsoft paid money to the NFL so they use the tablets, presumably more than the other bidders. That's what competition looks like.

A better example would be if Microsoft forced the NFL to use their tablets by threatening to invalidate all of the Windows and Office licenses in their organization. Would you say that's "leverage" or anti-competitive behavior?

Imagine if Samsung offered $400m to the NFL so they use Samsung computers. Microsoft's "leverage" could prevent the NFL from taking that offer, and there's nothing Samsung can do about it. That's anti-competitive behavior: one company unfairly disadvantaging competitors to the detriment of the customer (NFL in this case, which wouldn't get the $400m)
In Europe it's a very similar story, CMAS vs PADI.
There is a video Ad popup or something that keeps appearing after I hit close, how do they expect a user will read the article with an annoying and distracting video next to it? Awful UX.
Thanks! Do let me know if you are still looking for any particular feature
Whoops, good call. Made some edits.
One thing to consider is that manual signing, even on an air-gapped machine, doesn't buy more security if your entire CI system itself can be compromised, unless the person responsible for manual signing is really able to verify that what was built matches the code. The only feasible way to do that is with reproducible builds on randomly selected servers that are then compared to each other, but even that assumes an attacker can't compromise every build server. The only way to do that is to have at least one build server be disconnected, but then you need all dependencies available locally.

Either way, there is tremendous complexity in trying to achieve this. Realistically, you should take artifact signing to mean what you're installing is what the vendor actually built and not something shipped by a man in the middle. It does nothing to protect you from the vendor itself being compromised.

For questions like "why is the control system of that bridge on the Internet," consider the case a few years back when I first moved to Dallas that someone managed to compromise the city's tornado warning system because it was entirely controlled by unencrypted radio signals. The system predated the Internet. Somebody managed to set off alarms citywide for nearly an entire day by just pointing some handheld transmitter at a tower.

Unfortunately, the security posture of any infrastructure controlled by effectively anyone other than the military is close to no security at all in many cases, especially older infrastructure.
There are several countries in Asia that have recently experienced, or are currently experiencing, rapid growth.

Due to that growth, some people are "getting rich quickly" legitimately.

Observing this leads other people to believe that they, too, could "get rich quickly", without necessarily understanding the specific set of circumstances that led to the riches of the others.

And of course there are fraudsters waiting to exploit that belief.

Some portion of both the fraudsters and the marks immigrate or share their views with their networks overseas, and you have the situation you observed.
Not quite. To get started building Unikraft unikernels, you can use kraft[0] tool which builds a bootable image. At the moment, this is the entrypoint into the ecosystem and allows you to build, for example, NGINX for KVM, Xen or bare-metal.

Having said this, we have on-going work to integrate Unikraft into Kubernetes. We are very excited about this work and will be making noise and providing extra details about this very soon :)

[0]: https://github.com/unikraft/kraft
Am I though? She posted a joke on Twitter mocking the idea that white people couldn't get AIDS. It's only unfortunate that her statement was immediately interpreted as racist.
I totally believe you, that diving in shallow water must be amazing and not that dangerous, but now I am scared that some teacher may start there and then "obligate" you to go deeper! "Just a few more meters, everything will be fine" :)

Thanks anyway for worrying about me, ha!
None of my examples needed experts to address — just someone of the affected group on the team and (yes) comfortable enough to speak up. Also, even in your hypothetical, there will still be issues that are difficult to raise internally because the entire area is political. And so nobody will, until your company embarrasses itself in very public ways.

People bring politics and emotion. If your customers or staff are people, it is more effective to be able to discuss their issues directly without contorting yourself into a "just focus on the work" correctness.
1) VMs have hardware backed isolation - containers do not.

2) Containers share the guest kernel. To elaborate many/most container users are already deployed on top of vms to begin with - even those in private cloud/private datacenters such as openstack will deploy on top since there is so much more existing software to manage them at scale.

3) Platforms like k8s extend the attack surface beyond one server. If you break out
of a container you potentially have access to everything across the cluster (eg: many servers) vs breaking into a vm you just have the vm itself. While you might be inside a privileged network and you might get lucky by finding some db creds or something inside a conf file generally speaking you have more work ahead of you to own more hosts.

4) While there are vm escapes they are incredibly rare compared to container breakouts. Put it this way - the entire public cloud is built on virtual machines. If vm escapes were as prevalent as container escapes no one would be using AWS at all.
So it is true that all you type goes to a third party. Sounds like a keylogging feature to me.
I think that's an unfair exaggeration. Military law still respects members' rights. In fact, the 5th Amendment is even more "in favor" of the military member than the general public when it comes to law enforcement interactions, because case law mandates that military cops consider the member to always be "in custody".

The 3 points to Miranda rights are cops, custody, and questioning(provided the questions would reasonably illicit a criminal response).

For example, if I am a cop and I walk up to you on the street and ask you questions, your 5th amendment only applies if I'm not letting you go (custody). There's some ambiguity on the custody part, but it's usually revolving around the idea that you're under arrest. For the military, since you're always "Subject to the code(UCMJ)", the custody part of Miranda means that the only factors that matter for cops (and this is more broadly inclusive of authority figures or anyone who is a "mandatory reporter", meaning someone who must report criminal activity/statements to military law enforcement) and questioning (so, is the subject being asked questions that would elicit a criminal response). If I (a cop, commander, supervisor, whatever) I a subordinate a question that I know is likely to elicit a criminal response, that response (and the fruits of it) are inadmissible in court and cannot be used to further a criminal investigation. So, I can ask Private Dump "Hey Dump, what did you do this weekend?", and be fine, but if I ask "Hey Dump, how much Cocaine did you snort off that stripper's chest Saturday?", I would be eliciting a criminal response (assuming that I have reason to believe he was engaged in criminal drug activity on Saturday).

This tends to work in favor of the subject of an investigation, though, because they a) can't incriminate themselves without a rights advisement unless they willingly volunteer incriminating information in response to a question that wasn't likely/designed to elicit it and b) they have to waive their rights before asking these kinds of questions, so they know they are being investigated (and what for, since Article 32 advisements are WAY more thorough than Miranda).

As for your point about this and other amendments being mute for military, there are a couple ways to think about it. If a military superior or law enforcement conducts a search without search authorization or consent, the results cannot be used against you criminally, on administratively. Effectively, they could kick you out (but not with any of the negative flags, like a dishonorable), but they can't prosecute you. This applies to searches, asking questions without Art 32 advisements, etc. Effectively, your rights are still being respected and they're interacting with you like an employer, just with a bit more authority.
Hi HN, SST (https://github.com/serverless-stack/serverless-stack) is an open source framework we built for serverless. It allows you to debug your Lambda functions locally while invoking them remotely (https://docs.serverless-stack.com/live-lambda-development).

In this example, we show how to set breakpoints through VS Code and inspect a Lambda function. Let me know if you have any questions about how this works.
Exactly. I don't understand people who don't get this.
It doesn't offer anything better than hundred other bytecode formats, some of them in use for decades, since IBM and Unisys mainframes have gotten into production.
Your constant promotion of Sourcehut on unrelated topics really leaves a bad taste in my mouth and turns me off wanting to use the service.

It comes off as highly unprofessional.
> Instead of my transaction being between myself and a merchant it's me, the merchant, and Telegram.

The part about a transaction being between you and a merchant is true only if you use cash and only if you physically buy something with a physical receipt or no receipt. If you use any digital payments, then the transaction metadata is known to several parties (beyond your card issuer and the merchant’s bank). If you buy something online, usually your email provider also has access to your entire purchase history.

So the main question is whether you trust Telegram more or less than your email provider and/or all the parties who get your transaction data.
We’ve crossed majority support: https://thehill.com/homenews/news/544500-poll-majority-of-re....

I’m from a Muslim country, and among Muslim Americans same sex relationships are taboo. While Muslim support for same sex marriage crossed the 50% mark a couple of years ago, it’s completely rejected within the community itself. (Almost no Muslim Americans identity as LGBT, and virtually no mosques will perform same sex marriages: https://www.cnn.com/2019/05/28/us/lgbt-muslims-pride-progres....) But the many Muslim Americans who oppose same sex marriage don’t oppose the “existence” of gay people. They believe, consistent with their religion, that marriage is for procreation and government sanction should only be extended to heterosexual relationships. They are also probably ignorant on the issue of sexual orientation being an innate trait. My aunts don’t want to grant government sanction to same-sex relationships, but it’s unfair to say they’re a danger to the “existence” of gay people.
Edit: I was wrong with the above statement.

After doing some research around this. Cenotes are an exception to the rule and even though Open Water Divers often do enter inner rooms in wreck dives and caverns what matters is maintaining a direct line of ascent.

---- Original ----

Open Water can do caverns. Dos Ojos is incredibly popular and has hard ceiling.

Edit: Also Cavern Diver is just a specialty cert and doesn't confer any extra penetration. Those certs are mostly designed for skill mastery. IANTD's Cavern cert is required to get Full Cave, but I don't know if PADI's would count towards it.

https://blog.padi.com/2019/04/29/must-dive-cenotes-for-open-...
Basecamp isn’t a huge company. The bargaining power probably wasn’t that significant.
Sorry? How is this unrelated? SourceHut provides similar services without the spyware. Seems highly relevant to this thread.
The article briefly mentions RHR (resting heart rate) also. Anecdotally of course, but I notice my RHR being ~5 - 8 bpm lower when I abstain from alcohol for a few days.
Announcing that your company accepts a currency is not 'blatant and illegal market manipulation' or a pump and dump or a scam no matter how ridiculous people's reaction is.

No matter how upset you are, this is just a question of legality.
We can't know what he means, or what is in his heart now, but his actions are definitely suspect and he appears to have a bias. I think he should have been imprisoned or fined into oblivion years ago for his anti-competitive actions and gross ethical violations.
That's not what they mean by "keylogger" and some reasonable people would agree with them on their naming. Suppose you have a log-in page, and a user name field, password field, and a "Log in" button. If a website secretly submits everything entered into the password field even when "Log in" isn't clicked, such as when a user accidentally pastes a password for another website and realises it before logging in, I think most people would call that a keylogger.

In Gitlab's case, it seems to be their search function. It provides search results without needing to press Enter or clicking a button. From a technical POV, this is the exact same kind of keylogging as the above, it's only the intent that makes this okay and the above not so.
No you really don't. I do a lot of technical diving and depend on my buddies for safety. The key is to select reliable buddies who have been properly trained.

And taping your hand to your power inflator is just too stupid for words. Put some helium in the mix.
JavaScript Interview Questions with Answers
Think of ACLU as having been bought by the tribal outrage media for their reputation assets.
It is actually fairly common, Gitlab puts hundreds of different ads to Facebook and it has to track which one of these ads actually work and cancel the ones that don’t result in profit.

Most noble thing to do would be using server-side tracking/analytics but because of additional coding and losing access to Facebook analytics, most web sites usually don’t bother.
Fortunately for me, Grammarly has so alienated me with its relentless, irritating ads that there is no possibility that I will ever install it.
For any beginning divers reading this, dive your limits.

I am an instructor and it always makes me sad to hear about people questioning the hobby because of shady dive centers.

Do not let a guide or instructor talk you into exceeding your certification limits.

Also, if anyone encounters a situation like what is described above please report it to PADI asap. PADI takes cases like this very seriously and will initiate an investigation immediately.

You might save someones life.
The day the US stops air travel, many (myself included) will understand the severity of a proposed pandemic.

Since domestic air travel continued unabated and without direct testing to board a flight, it’s not hard to see how many people got the idea that this pandemic wasn’t all that serious.

Dr Fauci never once suggested it - to the best of my knowledge.
I’m not letting you use my furniture.
"In my, and my parents, extended circle of friends and acquaintances,"

Thats not much data to base such a generalization on.
Also, do you read all of your parents and friends emails, and check their spam folders!?
Are you sure it scanned a repo and didn't redirect to the about.gitlab.com page? Can you provide a link to these results?
> On the site you are inspecting, information entered in the name, family-name, given-name fields were logged.

That doesn’t sound like “autocomplete purposes” to me.
The ambition to delay progress for 10+ years.

Good to know that at least two do so, even though Zig isn't even 1.0 and TinyGo is well tiny Go subset.
Completely agree. It's just a natural transition to where the best place to tell a story is at the moment. It was in movies, since that was the best way to tell an entire story and have someone watch the whole thing and get the character developments and story. But now, TV captures people much more deeply, especially with binging. On top of that, you have much more time to put in a more interesting story and fully developed characters, instead of rushing to fill everything into 2.5 hours (Justice League, anyone?). It's a trend we're going to keep seeing, and I for one love it!
It is also the very first time we are doing it.

Maybe not THAT bad.
Brands are testing out OnlyFans as a marketing channel
Lessons learned from growing a PM team in a hyper-growth startup
> There's repatriate flights weekly out of both NZ and AU.

What if you are not taking a "repatriate flight", but rather you are simply an Australia citizen who wishes to travel abroad e.g. to see family or be with a lover? My understanding is that Australia has forbidden its own citizens from freely leaving the country over the last year.

And having to do a strict hotel quarantine upon reentering definitely does not qualify as being able to freely travel, and as I said in my original post above, many people would not stand for it. Most European countries that require quarantine, for example, allow one to do it at home and it is easily gamed.
Apple's follow-up to M1 chip goes into mass production for Mac