skysight-inc/HackerNews huggingface dataset:
I don’t really understand your problem as in NixOS it is precisely the easiest to handle some packages from this repo and anothers from another. You can just add a single line of an alternative repo like altNixpkgs = “reference repo either by url or path” in the let in “block” and instead of pkgs.something just use altNixpkgs.pkgs.something.

Also, I usually manage my home packages separately from my global config. The easiest way to do that is probably by adding a different channel/path to your user’s nix-channels. I believe home-manager uses that. Alternatively you can also do the trick I mentioned in your home.nix file.
Yep, that's correct.

And no they don't most of the time. Investigations about this are rare apparently and also only working for one customer in that capacity at a time is not really an indication of pseudo self-employment or tax fraud.

If the company dictates you your work hours and you suddenly appear in organisational diagrams as if you were employed and you were part of all company meetings and a couple of other things in the same vain then that would be indicative of pseudo self-employment. It's basically mostly about whether you are bound by instructions or not. This is however checked rarely (usually it would need to be initiated by one of the participating parties and we do not want that) and also hard to do rigorously. The laws around that are mainly to protect people from earning too little and being subject to paying all their social insurances/taxes by themselves and not getting any vacation days. For higher paying jobs this is not much of a threat since being paid higher than an average FTE would also count as indicative for being self-employed. Same goes with working from wherever I want (yay homeoffice).

If pseudo-self employment were ascertained during an audit my customer would need to retroactively pay the social insurances for the months I worked for him and if he were to employ me further he could deduct that from my income of the following months but only for the last three or four months. I think there is a chance under very specific circumstances that the customer could try to demand that I would have to pay the difference between what a normal FTE would be paid compared to what I was paid but it's not yet clear whether that is actually lawful and I think it only applies if both parties were not entirely clear that the business relation ship is based on the premise of freelancing.

All in all I am not very concerned that it will actually ever be a real problem. I have talked to at least two dozen freelancers doing what I do. Sometimes for over a decade and never once have they been questioned in their status in any way.
NFL pledges to halt ‘race-norming,’ review Black claims
I know some people who work for a TSMC subsidiary- they take security extremely seriously, all data is physically located in Taiwan and everyone remotes in, super locked down systems, etc.

I can’t imagine their actual production floor being connected to anything at all, ever. You’d need a stuxnet style airgap jump.
Fire and flood insurance protect against discrete or regional risks whereas ransomware will potentially disrupt operations globally, and actually most private insurers won't offer flood insurance to large swaths of the US because the risk has been deemed to be too high. The US gov insures against coastal flooding at GREAT expense to the tax payer.
Auth0 (https://auth0.com/) | Seattle - Buenos Aires - London - Sydney - Tokyo - Remote | Full-time | Engineering

Awesome tech is made by awesome people. And we’re always looking for new team members who bring the energy, passion, commitment, and collaboration that has made Auth0 the great company it is today.

So what do we exactly build? Auth0 is an authentication and authorization platform designed by developers, for developers. Basically, we make companies’ login boxes safe, secure, and seamless for anyone logging in. Our mission is to secure the world’s identities so innovators can innovate. But it’s a big mission that requires a lot of teamwork.

Words, code, or people, whatever your skill, there’s a place for you here.

Auth0 makes the internet safer by safeguarding billions of login transactions each month.

Our team is spread across more than 35 countries and we are proud to continually be recognized as a great place to work. Culture is critical to us, and we are transparent about our vision and principles. We practice N+1>N which applies to everything from our people to how we iterate our tech; we believe in one team, one score; and we give a shit about everything we do.

Open jobs:

Senior Platform Security Engineer (Data Security):
https://auth0.com/careers/job/senior-platform-security-engin...

Principal Security Architect: https://jobs.lever.co/auth0/f793b302-fbd1-46db-a9eb-6d6292f9...

Senior Backend Engineer II, New Product Team: https://jobs.lever.co/auth0/f850ad71-fc27-4432-bf8d-39f76f41...

Staff Software Engineer, Platform: https://jobs.lever.co/auth0/12655ef5-9e35-4064-8144-8a9269d4...

Senior Engineer, IAM User Management: https://jobs.lever.co/auth0/7ca518b8-c20a-4fcd-ae62-e6dbcce4...

Our hiring process is documented here: https://auth0.com/blog/how-we-hire-engineers/
Each NixOS machine has a current configuration, symlinked from /run/current-system. For example, my NixOS laptop currently has this:

/run/current-system -> /nix/store/95n5xr5n8bw6xbab8fiz6cqc6mydryg8-nixos-system-Sweetpea-21.11pre291991.ea7d4aa9b82

My $PATH contains /run/current-system/sw/bin, so all of my machine's (globally-installed) software comes from whatever the current configuration is. There's also some other stuff in there, like /run/current-system/kernel and /run/current-system/etc, which contain what you'd expect.

Let's say I want to change something. I edit /etc/nixos/configuration.nix, then run "nixos-rebuild build", which produces this:

/nix/store/0fhxjqbv20psbkjvw70wni9ww2cxfqgm-nixos-system-Sweetpea-21.11pre292748.6933d068c5d

That step does all of the downloading, etc, but it doesn't actually change anything on my system—the /run/current-system symlink hasn't changed, so I'm still running on the old configuration.

When I'm ready to change, I run "/nix/store/0fhxj.../bin/switch-to-configuration". This step actually changes the /run/current-system symlink, updates /etc, restarts any daemons that were updated, etc. Obviously, if your configuration has a new kernel, that won't be applied until you reboot.

In practice, we almost always just run "nixos-rebuild switch", which does the build and switch in one go.

This whole process is entirely idempotent and reversible; I can switch back to any configuration I've ever built (unless I've since removed them to save space, of course). GRUB also displays a list of every configuration you've ever built, so you can always boot into a stable configuration even if you've somehow made a royal mess of things.
Planned obsolescence goes beyond whether phone software gets updated or not. It covers changing designs so that you can tell one generation from another, so that there is social pressure to upgrade despite the phone working fine.
100% agree with you.

I really enjoy supporting people who have already built their own tool, but need a programmer to take it to another level. Such projects tend to be well scoped, and the project owners are heavily invested in and understand their actual needs.

In 20+ years of professional programming, projects that started with the end user solving their own problems have nearly a 100% success rate.
"Unless you've got enough RAM that you can put your entire workload in the initramfs, you're going to want a filesystem as well, and you're going to want to verify that that filesystem hasn't been tampered with."

I have enough RAM. More than enough.

About 10+ years ago I was easily running the entire OS in 500MB of RAM on an underpowered computer, boot from USB stick, tmpfs (or mfs), no swap. Today, the amounts of RAM are even greater on a comparabley-priced equivalant, at least double, more likely triple or quadruple. I was not doing this to avoid some "anti-tampering" scheme, I just wanted speed and cleanliness, and not having to worry about HDD failures.

However I was using NetBSD not Linux. One thing I have learned about Linux, it is not nearly as nice in the way it handles memory exhaustion, or, in the case of this RAM disk setup, what we might call "running out of disk space". IME, NetBSD anticpitates and handles this situation better by default. I could routinely run out of space, delete the overgrown file at issue and continue working. I noticed an interesting comment recently from a Linux developer on resource usage under NetBSD: "Lastly, redbean does the best job possible reporting on resource usage when the logger is in debug mode noting that NetBSD is the best at this."

I like this RAM disk setup because it forces me to decide what data I truly want to save long-term. Any data I want to preserve I move to removable storage. The system is clean on every reboot. In a sense, code is separated from data. The OS and user data are not stored together.

Anyway, putting the entire OS in intramfs makes sense to me. Intramfs, or at least tmpfs, is a filesystem so the "you're going to want a filesystem" comment seems strange. Also I think the reason(s) one might want a more optimised, lower overhead HDD-based filesystem could be something other than "not enough RAM".
I get why that's surprising but I think it's important to beat that surprise out of your brain, because $100k is a rounding error for any state-level actor --- not just the US, but, like, Seychelles as well. If you have a problem that can be solved with a Pidgin exploit, it's a problem you'd fall over rushing to write a simple $100k check for.
Source to support your statement?
Why Data Engineer’s Should Use AWS Lambda Functions
My minimalist coffee recipe is this: put 1.5 tsp ground coffee in the mug, pour boiling water, stir, add milk. Done.

The coffee needs to be good quality for the grounds to sink down, Lavazza always works for me.

This coffee is like the French press, or a white Americano, just unfiltered. I call it Gypsycano.
Really, any machine needs maintenance. Even an electric stove or a microwave needs an occasional clean if it gets dirty. Why should computers be the only special appliance that needs no maintenance whatsoever?
Either seems plausible to me, especially since US$100k chump change for a TLA or other state sponsored actor.
The global minimum of a distribution is not, in any way, a "single datapoint". It is a property of all the data points that ever were - in this case, it contains information about all humans that have ever run in the history of the species.

It is in no way comparable to knowing how many humans there are, which can't actually tell you anything about how many aliens there could be.
>...most of the money went to large corporations...

As far as I know, no landlord, large or small got any bailout. Are you saying investor-landlords received some type of direct stimulus? If so, can you elaborate?
Various providers of "cyber insurance" are right now busy getting rid of ransomware coverage because it turns out offering that isn't working for them. and yes, they do require companies to have cyber security infrastructure and audits.
Seeing some of the mess that IT-support is for enterprise customers I wonder would they really do better. On other hand SLA could be a real thing and kill the incompetent providers.
I’m still trying to reprogram myself to understand hype momentum trading.

I’m just about ready to open small but meaningful positions in meme stock options and meme cryptos. I expect them to make a loss, but all the others tops were not tops and actual hedge funds and non profits (Mormon Church, for example) join the sentiment and trade too.

All top indicators don't matter when the Federal Reserve and Congress are adding more money into the system. It doesn't matter if people that rarely have money to invest are talking about investing.
I built a drum machine last summer. highly recommend it. wasn't analog, but I was building it for different reasons.

I had some help, and some disappointments, but building your own hardware is pretty easy with the Arduino ecosystem.
If you don't mind the storage penalty, it looks pretty convenient to set up an Arch Linux chroot and use packages from the AUR when you need to: https://github.com/lemniskett/archbox/blob/master/NIXOS_INST...

Nixpkgs itself is several times the size of the base Arch Linux package collection, and by ‘non-unique’ package count, Nixpkgs is also much larger than the AUR. In addition to Nixpkgs, you can find Nix packages in several community ‘overlays’ for Nixpkgs as well as Nix's own user repositories.

You can check to see whether everything you currently use/need is conveniently available for NixOS in a comprehensive-ish way through the combination of these two web search tools:

• for Nixpkgs/NixOS: https://search.nixos.org/packages?channel=21.05

• for NUR: https://nur.nix-community.org/

NixOS also includes native Flatpak support.

Fwiw, packaging most things for Nix is very easy. I left Arch in ~2010 because at the time the package management stack and default repos on Arch basically sucked compared to most distros I'd used and liked, and from then on I decided that if I wanted software that wasn't in my distro's repos I'd just package it myself. After taking a little time to learn the tools on whatever distro I was using, I never missed Arch or the AUR. Compared to other distros, packaging normal software from source is usually exceptionally easy on NixOS.

If I were you I'd just dive right in and hit Nix's channel on Matrix with the Nixpkgs manual in hand if I found something I wanted to use that wasn't already packaged. But you can fall back on the options outlined above.
They could make it a full blown web app too. App icon, notifications, etc.
SEC struggling to rein in Elon Musk’s tweets, letters reveal
As I said, we can dislike it, but as a society we have basically decided that anything short of reasonably straightforward violent crime/extreme violent crime and high value property crime and easy to prosecute drug crime is not worth the effort.

I don't disagree, but I hear very little discussion about low solve rates for smaller crimes.
> Almost no one is willing to suffer even minor inconvenience in favor of stopping climate change.

People aren't taking minor, inconvenient, personal, moral steps to solve these problems because it's obvious that won't do anything to solve the problem. It's irrelevant whether or not I shut the water off when I brush my teeth when the farm over in the desert is subsidized to run a center-pivot irrigation in system in the middle of the desert that pulls 800 gallons per minute. Collective action is required, which means that instead of moralizing we need to fix the incentives. The only incentive that is universal is price.

A few people deciding not to fly or buying produce at a local farmer's market instead of the grocery store because they're concerned about climate change is not a signal that's audible to The System.
This highlights something I believe to be a deeper truth about programming in general: the whys matter, sometimes more than the hows.

So much of programming is patterns that exist for extremely arbitrary reasons (note: not acausal reasons, just reasons that are unimportant to the immediate problem domain one is trying to solve, or perhaps important in a way one doesn't yet know). Knowing those reasons can give you some mental hooks to hang the arbitrariness off of.

COM, which Joel mentions anecdotally at the top of the article, is a great example of that. I think the biggest challenge people have remembering why COM works the way it does is it's there to solve a problem that primarily the Microsoft software ecosystem had, which didn't show up in other software ecosystems as strongly: Microsoft had a vested financial interest in enabling developers to create closed-source binary blobs that could interact with each other via exposed objects.

Though COM is language-agnostic, most examples from textbooks of the mid-'90s era reveal the big problem it's solving: C++ was the hot language at the time, but C++ doesn't standardize name-mangling, so two arbitrary binary blobs of C++ code from two different compilers weren't guaranteed to be able to use the objects in each other's libraries. This isn't a problem Apple's software stack saw so often (Apple had fewer toolchains, so compiler incompatibility was less frequent a problem) and it was rarely a problem in the open-source OS ecosystems (if you're passing around source code instead of closed-source binary blobs, you don't care about name-mangling issues because you're building the source as a lump under the watchful eye of one compiler). But in the Windows world, with a pile of choices for compiler and a business need to support closed-source binary blobs that could expose objects, it was hell.

It's helpful in understanding COM to understand why Microsoft's ecosystem needed a way for closed-source libraries to expose objects in a language-agnostic way.
I just tried this, and the official python language docs came in third with SA just after. Now, for sure, it should be first, instead of the dumbed down tutorials, but it's certainly on the first page.
I don’t understand this. He’s got a massive audience. How hard is it to build a Twitter clone where he can blast his messages to all his followers?
It's not so simple though. Because even trusted curators and media organizations still feel obligated on some level to maximize engagement. To compete with social media, they often end up promoting and peddling similarly terrifying, pessimistic, and "engaging" content.
Reference counting pauses when cascading deletions take place, it well known domino effect.

C# allows for GC free regions with GC.TryStartNoGCRegion, manual memory management via MarshalServices, stackalloc, Span<>() and value types.

Almost forgot Unreal C++ is GC based for entities and anything Blueprint related.
Ah, you automate the posting of stories from certain sites?
I agree. Over the years I have tried most methods and acquired equipment, currently settling on V60 when I have time and instant coffee when in hurry, but have always hesitated to get Aeropress due to the plastic.

As you said, boiling water in plastic just doesn't work for me.

On a more snobby note, the thing that surprised me was how easy it is to roast coffee using a popcorn maker. I got the coffee sampler and popcorn maker and it was off the charts good. Absolutely fresh coffee, with the added advantage of sometimes just eating a few coffee beans after roasting :)
WASM is slowly, and inevitably becoming Java 2.0, or better to say a new Java VM sans Java.
Also: Lotus Notes
Maybe. But if you're holding a LOT of crypto, it's very unwise to store the private keys on an internet-connected computer you also use for instant messaging and other things.

(I'm sure plenty of people do actually do that; just lamenting the fact rather than expressing skepticism at the plausibility.)
I wonder what the biggest company is that's totally dependent on a single location (or locations in the same flood zone) and at the same time is usefully insured against such destruction.
I wonder if they meant killing pathogens in the drink, before you drank it. Clean water is a modern thing.
Wow, yeah, never say that. Even if you believe it's true, saying nothing will change is sort of like waving a red flag in front of the bull. Of course things will change over time, they always do!
That's how crowdsourcing works. I think I'm more concerned over the fact that stackoverflow now needs to earn $2 billion in revenue over the next 10 years in order for this purchase to have been worth making, and we're going to probably be the ones to pay for that.
Indeed. /knowing sigh.

It does feel good when you get around to firing those clients later though.
It's a question of who comes first- Linux was first to market as a cloud OS, so it dominated. Email came first for long-form asynchronous messages, so it dominates.
As someone who works on mesh importers and low level graphics programming that new spreadsheet feature is going to be incredibly useful for debugging UVs and edge indices.
I wonder where this pop-understanding of the law that seems prevalent on HN comes from.

Loopholes exist, but in general the government is not terrible at figuring out basic schemes like this and adapt administration of the law.
I know of a police chief who just retired with a $250k/year pension whose primary contribution to the community was arresting high school kids for smoking joints.
No. Paypal denied giving any details. It could be 100% because of Tor, could be 100% unrelated to Tor. Who knows, that's what EFF is disputing.
Interesting comment that the center engines will gimbal as one
Since the competition is Electron and JS, the bar is somewhere in the stratosphere.
I can play your game. But I'll make it fair.

I'll pay you to find bugs in my system. I'll pay you a lot. But if it gets hacked:

1. You return all money.

2. You're personally responsible for all negative financial and legal outcomes.

3. And I don't mean I get to take your Nintendo Wii and your half-eaten donut. I mean you need to prove you have a whole lot of money, like how much I stand to lose. And if I lose them due to a hack you failed to prevent, I take all your money.

4. Also you can't have contracts with other people, unless you have a separate pile of money for them when they get hacked.

You game? Sign here, here and here.
Pathogens have a harder time living in alcoholic beverages, making the drink itself safer.
Bingo. Edited my comment above.
Case in point, these days the question "Do we REALLY see the same color ?", is much more one about physics, signal processing and (neuro)biology.
The point of the QR code would be to be able to scan it with a cell phone. The url on a paper would not help with that. But I guess if you have a digital invoice the link would become clickable which is nice.
The Risky Business podcast #624 talks about pretty much all your questions if your want to listen to it. But here's some relevant info: Hardening can help, but we'll always have new exploits and some of the time the intrusion comes from standard fishing rather than automation, so tech can't solve it. Crypto coins enable payment at scale, but Russia enables the operation to not worry about consequences (a lot of ransomware will disable itself on Russian computers to avoid local prosecution).

And in my opinion it's only a matter of time till something so crucial will be affected that the big guns will be rolled out. (I.e. targeted 3 letter agencies efforts) The podcast argued that touching the energy delivery / pipeline was already it - Fox asking daily how the current administration fails to deal with securing energy may be the point when some real action happens.
Trump realizing what the rest of the blogosphere figured out a decade ago. The audience has been surrendered to Twitter and FB, and they aren't coming back.
Not necessarily. Debit cards in the UK can be trusted to work offline as certain "ceiling" is saved to the card with nearly every transaction, saying ok the owner has 10.000 in the bank, they probably have enough to cover a 4 GBP coffee (yes it's still technically credit but really?)