skysight-inc/HackerNews huggingface dataset:
> I said that the majority allow untrusted execution. If you consider your engineers laptops to be trusted you're thinking about networks the way people did ~10+ years ago.

i never said anything about trusting engineers laptops.

Let me put it another way, are you running your build pipelines bare metal, allowing anyone to instantiate the pipeline against a branch of code that anyone in the public has written? Or is that build pipeline running against a private repository, or triggered by trusted users, or does it run inside a temporary VM or container that gets destroyed afterwards? That’s where you harden CI/CD. I’m not suggesting fixing buffer overflows aren’t worthwhile (security should be multilayered after all) but it’s missing the real risk since you’ve already got code remotely executing. Thus your threat model should be about ensuring you minimise the blast radius of that code.

To use your colourful
language: if your build pipelines are running bare metal then you’re thinking about infra like people did ~10 years ago.

> This isn't true, but even if it were you can just replace awk with anything else that's not turing complete.

But you’re still not addressing the real issue. If you can’t trust the the code executing and you’re not sandboxing that code then you’ve already lost the fight. You can’t give unrestricted access to execute code remotely and then moan “we wouldn’t have been exploited if everything was written in Rust”. The bone headed design was allowing unrestricted remote code execution and not the buffer overflow bug in ‘cat’.

> That's like saying the real hack is sending a phishing email, ignoring all privesc, lateral movement, etc.

It’s really not. What I’m taking about is the equivalent of saying “phishing attacks are always going to happen so you need MFA et al to harden against the array of of ways one can manipulate the system”

You’re entire security model seems to be focused around fixing every fucking executable against every possible class of bug and that’s insanely impractical. Whereas I’m suggesting one shouldn’t implicitly trust remote code in build pipelines to begin with.
How to Structure Data in HTML Table
My expectation is that the next dominant platform will offer something unique which creates enough value that I'm willing to overlook the unfinished parts that deduct value.

When Neo4j and other graph databases went big in the past decade, they value they created: "finally! I don't have to faff around with RDBMS tables and Cobb purists to store and query my non-relational object-graph!" - despite the fact that Neo4j then (and still?) didn't support running serving databases concurrently or schema enforcement or even transactional atomicity (I think they fixed that recently?)

So in this context, what business-value does PolarDB add or create that makes it worthwhile to deal with its expected short-life?
Maybe for dismissing a trillion dollar product and extending human life.
I mostly agree with this. It's weird that you get an engineering degree called "science" which is mostly set up to prepare you for entering the commercial software industry. Universities can't even figure out which college to put the CS department under. There needs to be some sort of split where one track can focus on the academia/research and other on practical applied concepts.
The website includes a lot of examples. I think making it easier to create marketing videos (including advertisements, but also internal ones) is one use case.

Another one outside marketing is making educational lecture videos is a lot of work even with speech pre-written. Often execution goes through several passes. If we continue in the direction of moocs/online education than making it easier for teachers to make videos is valuable.

Multi language support they have is also big use case.
I don't 100% agree, but let's play with "academia is exploration, industry is exploitation".

How would you ensure you explore something useful? How would you ensure to transfer what you explored, so you can exploit that knowledge? What if you exploitation is stuck in a local minimum, how would you ensure you send feedback back to exploitation?

I feel a more useful model is Technological Readiness Level (TRLs). Academia deals with lower TRLs, while industry deals with higher TRLs. Somewhere in between there is -- there needs to be -- a huge overlap to ensure a proper continuum.

This can also be phrased in a risk perspective. Lower TRLs are extremely high risk, almost like throwing money out the window, but have extremely high societal reward. Think curing cancer or terraforming Mars. These are best funded via grants. High TRLs are low risk, low rewards; issue some bonds. Somewhere in the middle is VC territory.

But how? PhD students doing industrial internships; PIs doing industrial sabaticals; engineering managers becoming adjunct lecturers or giving guest lectures; academia and industry working on common projects; making patents could as much as papers on an academic CV.

Is anyone in the world either exploring or exploiting? Then why don't we create a system that allows people to quickly switch hats, as required to achieve larger goals?
I haven't seen a great Prezi presentation. The motion and movement has never helped the content, it just made me a bit motion sick.
Is Facebook evil? Yes, it is
The beginning of this lecture (30 seconds in) by Harold Abelson (author of SICP - Structure and Interpretation of Computer Programs) explains why Computer Science is a terrible name here.

https://www.youtube.com/watch?v=-J_xL4IGhJA&list=PLE18841CAB...

Not sure about the year.
Great coloring I really like it :-D
Amazon refused to refund $7k after shipping an empty box instead of a Sony A1
One of the many examples how large hydropower plants destroy the environment.

That’s why nuclear is the better option these days: It’s low-carbon, capable of baseload and provides large amounts of energy without the need to destroy large patches of land.
Why is HN against asian passerine birds? https://en.wikipedia.org/wiki/Japanese_tit
I did a bit more digging and it seems like FaceTime is mostly SIP with some proprietary changes, yet in the decade or so since it was introduced, it's strange that no public thirdparty clients have appeared. I wonder if that's due to threats of legal action from Apple, lack of interest, or something else.
Disable JavaScript on medium. Look for my HN comments containing "progressive degradation".
VoIP is as good as the underlying network. Consistently high quality calls requires packet prioritization which is only possible on a private network not the Internet. Many landline services are VoIP on the backend (phone jack on broadband modem) and there's few quality complaints as voice packets are prioritized across the broadband link and arrive at a phone switch never touching the Internet. On cellphones normal calls are prioritized LTE data.

Using your laptop's lid microphone over Wi-Fi over best effort broadband is a house of cards. Internet age codecs like Opus are better able to cope with adverse network conditions compared with G.711 but can't smooth over them entirely.

Your ISP is only going to prioritize their integrated VoIP service unless you buy a $$$$ enterprise connection that will honor your packet priority tags.
But this shouldn't matter. We still have a subconscious and we sometimes do things that we don't really think through, or do them on auto-pilot. So you could be doing things which you don't think through and they are still indicative of who you are as a person. But now, you don't know this part of you and you end up in a situation where some algorithm running on some servers somewhere is a better predictor for what you want (among other things) than your own thoughts.

Truth is people seem to not care about their subconscious. And they fail to understand the power of data when combined with 1 million other people. I still hear the response 'Well I have nothing to hide' way too much from people living in 2021.
In Islam we believe that the dead can hear us, so we make prayers for them, we give charity in their names and perform other worshiping rituals in their name too. The best kind of charity is the ones that have a continuous effect (sadaqa jariya), like donating to a school, planting a tree, digging a well for people in need ... etc. The belief that good people will enter heaven and that we’ll once meet again there if we die as good people is very comforting as well.

When I remember my lost grandfather, I try to do things that he’d be happy about and things that he’d have wanted to be done when he was alive.

May your lost ones all rest in peace.
That's the same as Sidewalk (except for counting against data caps): All data is tunneled to Amazon and can't be tied back to your IP address or SSID.

"Sharing your internet with the neighbors" is an extremely misleading description of the product.
>Kinda makes you question other things people that age claim as absolutely true like "true love" or "worst day ever" or "my biology is wrong"

In all of those cases, the best thing to do for a teen's mental/emotional wellbeing is to take it seriously and treat them with respect. Everyone has to gain lived experience by living it, and you shouldn't try to invalidate their feelings just because they've experienced fewer of them.
We settled this debate at our department by calling ourselves the computing science department. This makes it clear that we are at the interface between the mathematics that algorithmically computes various things, but that these computations need to eventually end up on a machine that can be engineered today or in the future - a computer.
Wikimedia has been maintaining a phabricator fork for years and have sponsored upstream with monetary contributions on more than one occasion.

It doesn’t seem like there is much interest in finding ways to keep phacility alive.

Note: I work on phabricator at Wikimedia. My opinions do not necessarily match those of the foundation and I’m speaking from personal experience not from any position of authority.
My shock here is that someone would order something that costs $7k from amazon! Buy that from BH, newegg, some specialty retailer, etc. Not American alibaba.
My company is planning on a slow semi return to the office starting in September, if and only if the kids are in school.

Me? I'm not planning on ever going back. I've moved away and will start looking for a fully remote position should the company require me in the office more than a few times per year.
I do not trust Amazon to ship anything safely and securely anymore. Almost everything I receive is damaged, late, or mis-delivered. Books are especially abused somewhere in Amazon’s fulfillment. (They’re always bent, creased, or dirty.) Items that are supposed to be 1-day shipping typically take >=3, and Amazon’s tracking mostly says “oops! it’ll come trust us”. (Not verbatim, obviously.)

Amazon’s return process is becoming incrementally more obtuse as time goes on. While they’re still decently good, it’s getting harder to do easy, no-nonsense returns. Typically—if they don’t just tell me to dispose of the item myself—they demand I drive to Amazon lockers or Whole Foods or Kohl’s to drop stuff off at no charge, and pressure me into just getting Amazon credit.

I would never buy a $7,000 item on Amazon under any circumstance.
Even if you did manage that somehow, this is still running LoRa for the wireless. IIRC bandwidth is in the single kilobits/s range.
I believe the selling point is that it's cheaper than paying a person to act, where you'd still need to manually review it anyway.
"the difference between mathematicians and computer scientists is that mathematicians love math and computer scientists hate computers"

https://mobile.twitter.com/sydgibs/status/138740846208320307...

(not true in general but still insightful)
We also now have an education the is more equivalent to a US computer science degree: Software Engineer.

I think the US degrees are more focused on practicality than the Danish version. Basically the Danish universities will teach basic programming in one or two languages and the expect you to be smart enough to figure out the rest.

It’s not that one education is better than the other, but given that I didn’t end up doing reasearch of heavy computational work, I might have preferred a US education.
> In math everything is purely theoretical conjecture. No hypothesizes, no testing, no observation, just derivations of theorems from axioms.

Sorry, no. Your statement is quite ignorant of how mathematics works, and how mathematicians create new theorems and proofs - your description is actually backwards.

Proofs often use axioms, but it's rare that somebody starts with a list of axioms and extends them to a higher-order theorem in a backwards fashion like some Prolog program.

In advanced pure math (ie. analysis), we usually start with a novel conceptual diagram (hypothesis) and decide which fields and axioms apply, so it's very creative. The language of mathematics is used to express original ideas that usually spring from imagination.

Some of the scenes in "Good Will Hunting" are pretty accurate, including the hallway blackboard, mirror and "flaming proof" scenes.
It is alibaba: it's life might not be so short? They are huge and have a cloud provider arm.
Ironic that this is being posted by the NYT (though not as an editorial, I guess), who fired Quinn Norton within 24 hours because she'd embedded herself in Anonymous and consequently used the word "fag", years earlier. The mob framed her as anti-gay despite her having had an outspokenly bisexual life partner around that time.
Amazon is for USD items, not KUSD items.
+1 BH. I've ordered entire palettes of camera gear, and every filter and end cap was accounted for.
> "will kinda sorta work"

That sound more like an anti-feature resulting in unstable programs that almost work.
If this was true, then night shift workers would not see lower life expectancy, even controlling for other factors.
As I estimate, this crowd has collectively spent upwards of hundreds of hours reviewing my performance. Some of the feedback they provided was high quality, and it helped me during critical moments when I was working on important endeavours. When I realized the value of what they were giving away for free, I stepped on the gas to see how far this would take me. I've had mixed results so far, so I'm wondering how I can be more systematic in my approach.
I’m an Anki user and a frustrated piano student. This looks so good. Would love to try it out. Keep it up!
Haven't had any problems with Amazon shipping, but I'm thinking I might need to record every unboxing just to make sure I can prove what happened the first time it DOES hit me.

Because it most certainly will, sooner or later.
But then the tribe is on the move and a few need to sleep. I think a mostly synchronised schedule is more likely.
Geeez. I didn't even know that was an option. Very disappointing Coursera!
What the Putin-Biden summit in Geneva is really about
I could find no explanation of why it was called the Scottish café or what the link to Scotland might have been. Any ideas?
I'd argue the opposite -- why not order from Amazon?

Lots of folks have come to trust Amazon's reliability and customer service over the years, so it does make sense for customers to order expensive things from Amazon or any other online store, especially with a pandemic going around.

This incident in particular does seem to be an outlier, and we'll have to see how Amazon resolves it.
nazis refusing to refund other nazis? i am all for it
It's genuinely astonishing how bad Amazon is at shipping books now. It used to be their Thing, and now basically any book you buy from them arrives damaged. You can complain and get them to send a replacement and the replacement is damaged too.

In my experience Amazon Japan still knows how to pack books correctly, but I haven't ordered from them since the start of COVID... they properly secure books to a bit of backing cardboard (with shrink-wrap and/or rubber bands, usually) and then mount the backing cardboard inside of the packing box so that the books don't slide around and get damaged. I'm sure it costs like an extra 50 cents per package to do this, but presumably their customers demand quality in other countries where Amazon doesn't have a de-facto monopoly.
Hmm.. A cursory look at the Starlink subreddit would seem to disagree with claims of unreliability.

I stopped reading the article about halfway through because it stopped talking about Starlink. Yes, US broadband is horribly broken. That's not news.
We have data lakes, why not data rivers too?
It seems that Alibaba is going more open source than Amazon for their clouds services. That’s interesting and they may use this approach as a key differentiator.
If I had to guess, I would say you are not allocating enough personal time during your day so you are claiming it back in the night. And the lack of sleep is tomorrow’s problem.
For me its because the external site ads suck and the tangent conversations here in hn are mostly insightful and thought provoking lol
Point is the description is about as useful as describing a car as an cage with an engine and wheels.

Yes it is correct.

But it can be anything:

- a car

- a truck

- a trailer with a power generator

Phabricator was a (very) different take on the same class of tooling as GitLab: source code management, task management, code reviews etc integrated.
It's good news for them that the box was empty instead of filled with sand - that way the weight in the USPS shipping data made it obvious they weren't shipped the camera. I wonder if this was a Fulfilled By Amazon purchase or whether Amazon directly bought this empty box from a wholesaler to stock in their warehouse?
I think a part of the problem is many people don't know what CAPTCHA really does and that even smaller numbers of people know exactly how much traffic is abusive in nature.

Good luck with the fight.
It really is high school 2.0, as you can tell by the classes offered. There are classes that are below what is traditional for high school, but college credit is given. You can get college credit for the very first introductory algebra class. That's honors 7th grade, or regular 9th grade. About the same applies for English composition and science.

It's not just older people who wish to avoid being in classes with immature young people. The mature young people are also trying to get away from the awfulness.
That username lmao
How does Amazon protect itself against unscrupulous buyers ordering $7k cameras and then claiming they received an empty box?
While the message might be ok, this is terrible English. Really needs a proof reading.
Oh, what's going on here?

> OceanBase, the database of Alibaba's fintech company Ant Group, will be open-source soon, possibly as early as June 1, according to Sina Tech.

https://cntechpost.com/2021/05/27/ant-groups-in-house-databa...

Also the team published many papers about PolarDB.

https://scholar.google.com/scholar?hl=en&as_sdt=0%2C48&q=%22...
When it's not possible to pay for removing the ads, consider decompiling the app and removing ads. While I hate depriving developers well-deserved revenue for their hard work, allowing me as a consumer to choose whether I pay with cash or attention takes precedence.
I don't see anywhere that says the item was shipped and sold by Amazon.com. If it was, then I can see how Amazon.com bears responsibility, but if not then it seems more like an issue with a third-party seller.
The thing where you have to deal with raw keys? For non-technical people?

* https://articles.59.ca/doku.php?id=pgpfan:agevspgp
Let me emphasize something here: Amazon Japan ships globally. Not just books -- bags too. And that's big because the Japanese bag selection is truly something else. Alas, many are very expensive. However, since I didn't travel for more than a year now (guess why) I have shuffled the travel budget over to the bag budget and bought a bag from Amazon Japan. Here's the most important part, watch just thirty seconds: https://youtu.be/g6uSpuN2uT8?t=346 ideal size for me, incredible flexibility. I combine it with https://youtu.be/oaRyVuLuWOw?t=160 because I like flexibility :)

Previously I was buying electronics and I needed to use proxies which are added cost and hassle.
Is there something about HIBP that makes them more authoritative than anybody else other than having 'pwned' in the name? Genuine question, not being facetious. All I can find is conflicting reports all over the place so I'm trying to understand why, if this is the "true" etymology, this isn't the explanation given in Wikipedia for example? I guess I just don't understand who I should trust, or more importantly, why.

I'm not backing any particular account (in fact the two links I provided disagree with each other), my point was just that it seems silly to be so overly confident on ANY account. Unless, again, there's something special about HIBP in this regard? I'm definitely no internet historian so you'll have to fill me in a little further. :)
I'm not sure it would. There are other factors besides circadian rhythm at play for night workers.

Eg, they probably need money not, or they would be less likely to accept a night shift. Another one is how there is more noise during the day that could affect their sleep, etc...
I assume they're from India.

Whose fault is it everyone uses Facebook IM systems rather than SMS? The phone networks for not making something better. How has SMS not got any new features in about 30 years?
> Silly

I was working an operations job, 4 pm - midnight Th, F, noon-midnight weekends; because it was the only technical job I could get. I would often bring leftovers from home for a mid-shift meal. Once I brought pizza in a box, and it got taken by someone else; but you know pizza in a box, seems reasonable to eat, I guess. When my home cooked leftovers in tupperware got taken, f** that, time to polish up my resume. Thankfully, it was good timing and I got hired at Yahoo Travel, and did well there, and made connections that got me to my next job that got me to retirement. So, I guess thanks to the person who stole my meals. :)
Indeed, I'm worried that without proper legal action, the Hall of Shame will only serve as inspiration for the next wave of start-ups. "Hey look, Amazon does this and they converted so many users to subscribers. Let's try that too."
Anything over a few hundred bucks is playing with fire. I bought an iphone through them (Amazon sold, not 3rd party) last year and had to do the same thing the couple did: chargeback on credit card. They refused to investigate and flat out accused me of fraud. Gee, maybe it's the low paid disgruntled employees from warehouse worker to contracted out Prime delivery guy stealing shit? Nah, it's the guy who spent tens of thousands at your business and you never had a problem with!
It's arguable that you get compensated by having access to Alexa at no cost. Even though the two don't necessarily have anything to do with each other, Alexa is essentially a loss leader (unless it's folded entirely into the sales price of the Echo speaker, which I doubt).

In that sense, the economics seem pretty comparable to ad support on the internet to me: By letting advertisers use your internet connection, processing power, screen space, and time, you get access to content that would otherwise be behind a paywall. And ads use up data caps and congest networks as well, in some cases even more so than the actual "pay"load!

I know that some people object to ads on the internet on the same grounds (usage of one's resources without compensation or consent), but this is a wholly different story from the liability issues that operating an open wi-fi hotspot can cause.
Maybe, it’s not easy to realize, you are in a hole. Or, at least, not during early stage