skysight-inc/HackerNews huggingface dataset:
> How are they going to sell tickets with their infrastructure offline to a ransomware attack?

They get by temporarily by doing things manually until they get their services back up, and they get compensated by insurance, but a few day partial loss of business pales in comparison to how much revenue they would lose by going offline. A vast swath of their current and potential users wouldn't even know they existed without them having an online presence. The only solution would be buying that knowledge from someone else such a travel agent. Even with that knowledge, it would be orders of magnitude more inconvenient to book and receive tickets, there would be a lot more fraud, and everything would move much more slowly.

> We get minor conveniences for having them online. We suffer massively when they go offline.

We get MASSIVE convenience by them being online and we suffer transient, relatively painless outages when they go offline. The most serious outage we suffered was that pipeline going down, and it was down for under a week.
Bot Framework is horrible. It's the most ridiculous IM platform I've built anything for, and I've covered a good bit of the spectrum.

They really need to expose a full-featured API for Teams, something at least as powerful as what you used to be able to do with the UCMA SDK for Lync/SfB.

I've given up on anything ever getting exposed through Graph API in a timely manner. It took two or three years before you could get online/busy/away presence information on a user without outrageous, unsupported hacks.
Who Are the Starseeds?
This kind of thing doesn't surprise me at all - a surprising number of developers miss those types of things, and one of the things a lot of people miss seems to be checking for situations where you end up with excessive amount of calls doing little work, for some reason.

E.g. at one point (long time ago), MySQL's C client library would call read() for 4 bytes to read a length indicator, and then read exactly the number of bytes indicated by the protocol, which led to a lot of time spent context-switching vs. reading into a larger user-space buffer and copying out of that.

On Linux simple, plain "strace" remains one of my favourite first steps to find performance problems in part because these things are near immediately apparent if you strace a process because the really pathological cases often ends up dominating the output so much that you'll spot them right away.

Another "favourite" issue that shows up often when you use strace like this is e.g. excessive include paths - running strace on MRI Ruby with rubygems enables and lots of gems pulled in is a good way of seeing that in action - like this zip problem it's an example that seems totally reasonable when the number of gems is small, and that first becomes apparent when you test with lots of gems, and look at what's actually happening under the hood.

A similar example of testing with too small datasets and/or on a large enough machine to not spot what becomes immediately obvious if you trace execution was how a type 1 font reference library made available by Adobe (no idea if they wrote it or if it was from another source originally) which would exhibit another typical pathological behaviour and call malloc() hundreds of times on loading a font to allocate 4 bytes at the time instead of allocating larger buffers. (strace won't catch malloc(), but ltrace does)) To avoid messing too much with the code, we replaced the calls to malloc() with calls to a simple arena allocator and load speed shot through the roof and memory usage dropped massively.

Too few people trace execution of their code. I know that because if most developers did, issues like the above would get caught much sooner, and would be rarer in published code.
I don't agree that he rejects much of TLP in Phlosophical Investigations, although most secondary sources say he did. So I'm deviant.

I wrote my undergraduate dissertation on this subject, 40 years ago.

I think it's a bad idea to write an undergraduate dissertation that implicitly criticises prominent philosophy writers; they are probably your examiner's drinking buddy.

I got a gamma (scrape pass).
The programmer responsible for this implementation successfully inverted a red-black tree during the job interview and explained a Big-Oh optimal solution for doing so.
I agree. Long term ketamine use can lead to some severe problems; addiction and physiological issues (destroying bladder, urinary incontinence, etc.) Not really in the same category as LSD. Only a very few and... brave ... people do LSD "recreationally" and in large quantity.
The work is the work, no matter how much the project itself took to build. If it was easy for exploit developers to pull a Pidgin exploit out of their butt, they'd be cheap. The fact that it's a niche target can actually make bugs scarcer; sometimes, exploit devs can draft off the work other people have done beforehand.
That's sort of what I was getting at. This seems like PR thing.
> the last thing programmers need is a person who has dedicated their career to creating more process

not ALL developers crave this. I've been through companies where process is scoffed at (some developers burn out trying to manage their own stuff, others love it) and companies where everything has a process - eg Pivotal Labs, the extreme example of agile by the book (some developers burn out with all the inflexibility, others love it).

I don't love "agile", but for what it's worth, it's a reasonable starting point to create a sustainable culture where the company can try to 1) remain agile (adjective) as it grows, and 2) keep developers reasonably in control of their work schedule. There's worse alternatives, I guess?
Arkane Studio's Arx Fatalis has been ported to WebAssembly
I'd say that there are more than one concept that can be labeled by the word "exist". If you don't say which concept you're talking about, and the other person is running with a different concept that wears the same label, that discussion isn't worth having.

They could discuss either concept, and have a meaningful discussion (with quite a bit of agreement). But because they're actually discussing different concepts, but using the same word, the discussion just wastes everybody's time.
One possibility is that they invest heavily in Teams and Jobs. Those two both solve problems that many teams really struggle with and would be willing to pay a premium for tools to help them solve: documentation and hiring.
“ This bill would make lawful the possession for personal use, as described, and the social sharing, as defined, of psilocybin, psilocyn, dimethyltryptamine (DMT) , ibogaine, mescaline, lysergic acid diethylamide (LSD) , ketamine, and 3,4-methylenedioxymethamphetamine (MDMA) , by and with persons 21 years of age or older.”

Amazing! I’ve been curious about LSD but it’s kinda hard to get. Also glad to see ibogaine, ketamine, and MDMA on here in addition to psylocibin as they all have great medical potential.

Really hope this is signed in to law!
Would this result in not paying or them hiring consultants who pay on their behalf and just invoice them for "resolution services"?
Raspberry Pi 4 OpenBSD based home computer/gaming console
When I started programming as a kid, I had a Commodore 64 and later an amiga 500. Those machines came with very simple software and expected you to write some, rather than giving you thousands of pre-made packages to learn and play with.

A lot of existing software was video games. They were much simpler than those people play nowadays but they were still a lot of fun. Part of the fun was low latency.

I started working on a gaming console based on the raspberry pi that would have the kind of low latency that older home computers and gaming consoles had, and found a way to do that.

At some point, I realised that users would want to use a keyboard, read and write files, connect to the internet, stuff that is taken for granted with computers today.

So I wanted not to run on bare metal anymore, I needed an OS. Writing one from scratch would take me years and it probably would not be as good as an existing one.

But existing desktop operating systems tend not to be good for games, as they introduce latency and are able to stop a game at any time to do some other task, which can result in stuttering that the game developers cannot fully control or avoid.

I modified the OpenBSD kernel for the raspberry pi with gaming related extensions, in such a way that when the game runs there is no latency and no stuttering.

A game on my own fork of OpenBSD has the same performance of the bare metal code that I have written previously. And it can do file I/O, connect to the net and all that kind of stuff.

And when you quit the game it's just like normal OpenBSD so you can program it and make games yourself, browse the web and do all sort of stuff.

I am thinking that other people may want to have something like that, both for nostalgic reasons and for learning programming, so I thought of asking around and, if enough people like the idea, turn this into a product.
Good question. It might be a difference in degree rather than a difference in kind. Consider the social media space: if you want to build a Twitter clone, you could do so in a pretty short amount of time with a pretty small team. You could buy ads to get everyone to know your product's name. Those ads will bring in enterprising early adopters, but no matter your ad spend or the quality of your platform (you could even include an edit button for pete's sake--and for free at that!), you're very, very unlikely to unseat Twitter. The reason is that Twitter's product isn't its platform or even its brand--the product is the social network i.e., the network of users and the interactions between them. That's moat.

> If you think about it it's mostly the brand, not anything to do with taste. Same can be said about different beers or about Nike, Levi's, Apple (arguably) etc etc.

Brand is king in fashion (and to a lesser extent, low margin consumer products like cola or cereal) because fashion is largely about signaling status. I don't think this effect extrapolates to SO.
The entire field of front-end engineering needs to take a step back and think about the user instead of overengineering every problem and constantly changing things just to justify their job existing.
Verify purity with blockchain. Quick someone give me VC money plz.
I love github as a product but for the past months, issues are a weekly occurance, often multiple times a week, and always in the middle of the day (Europe).
Probably because someone worked on a high enough abstraction not to spot it, then tested it on small enough files to not see enough of a performance issue to dig into what actually happened..
I find it's kinda hell moving files from both my android AND iPhone ... it feels like a 20 year old process in terms of it working in fits and starts and random failures.
It definitely does help.

It's still acidic, but for instance Aeropress says coffee brewed with an Aeropress and paper filter has about 20% the acidity of a regular drip brew (and about 10% of a french press). (As far as I know this is largely down to paper filters and lower brewing temperature, both of which you can emulate other ways.)

Obviously only a personal anecdote, and for most people it'll never make a difference, but as your stomach becomes irritated it doesn't take much to make it worse. On a bad week, just drinking some black tea (ph~5) rather than green (ph~8) or putting a bit of black pepper on something can be enough to have me in pain for hours. Think like, normally it might not hurt to poke your arm, but if you've got a big bruise it doesn't take much to make it hurt.

On a good week, drip coffee through a metal filter is largely fine. On a bad week, it's painful but coffee from the aeropress still sits mostly okay.
> Second, the people taking this idea to extremes are a vocal minority.

But that's the problem, it's the extreme vocal minority who are calling for (and succeeding in) cancellations of perfectly reasonable individuals who want to speak at universities. See Jordan Peterson, etc.
> This is meant sincerely, not glibly: How? How can cryptocurrencies be banned in any meaningful sense?

The main avenue would be by getting rid of the sanctioned on/off ramps for crypto (that is, crypto exchanges), leaving only the illegal on/off ramps which I'm sure exist.

This obviously wouldn't stop everybody, but it would certainly be a deterrent for all but the most motivated and well-connected of buyers. At that point, exchanging a large amount of crypto would be similar to laundering a large sum of dirty money; possible, but not trivial and certainly not an "easy out" for a major corporation experiencing a ransomware attack.
ot: Thanks Christian for your firm stance explaining crypto to the London judges.
> I am assuming they do not have a legal basis for doing so or courts would have granted/ordered such access.

It's also possible that they have a lawful basis and warrant, but realise executing a physical warrant won't get access to what's required - with e2e encrypted chats going over Pidgin, on an encrypted laptop, you need to be very confident that when you swoop, the laptop is on and decrypted. You get one "go" at that, otherwise you have a suspect, little or no evidence, and an attorney requesting their immediate release on bail absent any actual evidence, which would let them flee and clean up any other evidence that may be out there, either with them or others.
What I would really like to see is a modal editor that doesn't use vim-like keybindings. Ideally something where the user decides what key executes what function, and maybe some optional vim-like defaults.

Vim's macros are great. You can record a list of actions (with q), and they will be written in a clipboard as a string of key names. Unfortunately, this depends on w meaning "move to start of next word", i meaning "enter insert mode" ^[ (the escape character) meaning go to normal mode, etc. You can remap a key on the keyboard to represent a different key in a specific context ("nmap j k" gives the j key the k key's behavior in normal mode), but you can never change a key's underlying meaning (j will always mean go down a line, even when the j key behaves as k).

Vim's keybindings are so deeply hardcoded into what vim is that's it's just not feasible to change them. I would really like a modal editor that doesn't have that problem: a modal editor that doesn't even try to be vim.
The same was true of Yahoo in its last days as an independent company. Their holdings in Alibaba and Yahoo Japan (an independent, successful company) were worth more than Yahoo's market cap.

Selling Yahoo to Verizon meant splitting the web properties out from the company, leaving it as a shell for its holdings.
Not completely true. I’m active on SO and other stack exchange sites as a consumer and bookmark tons of questions. They sync with https://Larder.io for me too. I can’t upvote though.
I remember having my PayPal account locked for no specified reason, and they said because too much time had passed since it had been locked they would only reopen it if I physically mailed them a check with my bank information. Of course I refused such a ridiculous request and vowed never to use PayPal again.

Yet I was still forced to use PayPal for another retailer because the retailer's credit card processing was broken, so I had to create a new account. It's frustrating when you have to go through a middleman or external company that treats you like garbage instead of being able to use an established payment system that works.
Where is that stated?
#BitcoinFixesThis
of course, old faithful will be around for a while yet..

Let's go for a beer soon!
> I usually search my codebase by reading the results of a grep into a temporary buffer and 'gf'ing to the appropriate file

I used to do that too, I now use the Ack plugin which is almost instantaneous on a codebase that grep used to take 2s-3s long to search. The speed isn't what matters though, it's the fact that Ack only searches source code, not all files so my results is less polluted with irrelevant matches.
For anyone into packaging and building software I can really recommend SUSEs open build service, https://openbuildservice.org

It's really powerful.

Checkout what opensuse is currently building here; https://build.opensuse.org/monitor
I tend to agree with you in most situations, but I do think there are some counter examples.

The recent rollout of various COVID tracking apps for large companies come to mind. There was no way to predict the need, and low code tools were leveraged heavily to spin up quick solutions. e.g. I believe SalesForce products were used for some of the "Vaccine Finder" types of sites that spun up in my state.

That aside, as a general rule, if these are such important projects, the business should expand its development org and improve internal processes to better react to business needs.

But it seems like an almost universal problem (especially outside of tech) that this just does not happen. There is often very limited appetite to take on the risk of a big dev project without understanding its value. You could argue that building a business case is a better way to prove that value, but on the other hand, if you can build a business case by literally implementing a solution, and bring data to leadership that clearly says "this is worthy of investment, and here's a v1 already working to prove our point", this appeals to the risk averse management types since it proves the need.

I don't think this is a great mode of operation, but I think it helps explain why we see such investment and growth in these tools.
I'm curious if seeing headlines like this causes other companies to invest more in security.

Or is it more like "well as long as it doesn't hit us we don't care"
> I found my answers in API docs and GitHub issues most of the time.

I noticed this a few years ago and I think it is more about experience than language. As a beginner, your code doesn't work and you aren't sure why. As an experienced engineer, your code doesn't work, you tracked it to a specific section, that section calls into X framework so you go to those API docs to learn how it works.
Not that I am supporting this, but technically and legally just blackhole all IPs detected to run a Bitcoin/Ethereum/etc node, just like governments do right now with malware command centers.

Legal/technical framework is already here.
> Whenever I have taken psychedelic drugs (mushrooms), or taken cannabis, it has often made me more paranoid.

Suspending one's mind into an altered state while being aware of the grave consequences that would result if getting caught –effectively defenseless while high– makes me think hypervigilance is almost a rational response to that situation.

I've seen heavy users succumb to conspiracies but such cases were ultimately a symptom of schizophrenia. There has been research into use of drugs and mental illness.

Alcohol intoxication on the other hand, doesn't share the taboo, but paranoid ideations seem plenty. Intoxicated people misread signals, pick up malicious intent wherever and the paranoia that results blows back on the people most important to the person.
Maybe I'm too cynical, but my experience with RPA via automation-anywhere is that the primary audience isn't IT or Engineering, but frustrated Line-of-Business middle management who are tired of waiting for IT to build them a solution and can't get budget-approval for a third-party to do it for them.

Couple that with woo like "self-healing", "insights", and "big data", etc along with dog whistles like "People will be scared you're automating them out of a job. You need to use discretion when implementing solutions".

I feel like the way RPA is sold to big corporations is analogous to how health-food stores sell muscle supplements to teenage boys.
I would be surprised if this kind of thing makes it to any significant managerial level before an attack.
With the US under a constant barrage of attacks it makes sense to trash the "space force" and create a legitimate "cyber security force."

This may be our last chance to maintain global power through the use of force at all, given that so many competitors are gaining foothold in every other area.

We need bullet proof IT infrastructure, instant backtracing, and effective retaliatory responses ready to deploy, yesterday!

Why the hell isn't the attacker's computer compromised when they access the data? (rhetorical)
So the load time is fairly long due to lack of lazy loading and pre-fetching of assets, along with minimal compression of textures. Interesting to note that this port was done by the same developer who ported Doom 3 to WASM, which I'll link below:

https://wasm.continuation-labs.com/d3demo/
Probably, but that furthers my point: that "update" is new content. The original content is not especially valuable; the new content--the user activity--is where the value is.
Crypto makes it more efficient. It would still occur without crypto just fine. Your talking about a black market worthy many millions, maybe billions.
What is "biased" about calling dual use technologies such as artificially enhanced viruses weapons of mass destruction?

https://en.m.wikipedia.org/wiki/Dual-use_technology#Biologic...
Absolutely. The insouciance shield of wealth, celebrity, power, or beauty. Like them, I, or anyone else we just want real friends and people acting straightforwardly.

I was inadvertently staying at a hotel in Century City that coincidentally hosted the Latin Grammys. There were gawkers and groupies galore acting like headless-chicken spazes. Meanwhile, I'm chilling, nursing a vodka gimlet, and trying to understand what's going on and why certain people are lionized.

This is in contrast to homeless people asking for a few dollars rather than wantrepreneurs asking for a million bucks for a 5% convertible pre-prototype.
For large companies "paying in secret" is pretty difficult given public accounts. The typical CFO would rather get a new job elsewhere rather than risk prison because his CTO colleague did a poor job securing the IT. They just work there.

A ban on ransomware payment also has the nice side effect of banning ransomware insurance, which has been making the problem worse so far.
The latter. The initial wordings described multiple q and a sites in the article.
I assumed not because the article linked in the comments seemed less informative than the Scientific American article.
Paypal has denied that funding of Tor nodes is the reason for closing the account so the EFF is making claims without any proof.
It's not an email address. Many people didn't use a real address in the header because of spam, and Usenet doesn't really care if it a valid email address or not at a protocol level.
Just positively edit a few questions. You'll get rep for that.

https://stackoverflow.com/help/privileges

Questions by new users usually need a lot of editing so there is no shortage of things which need editing. You'll get 15 rep after 7 approved edits. Things will accelerate from there.
The difference is that Zerodium can turn around and sell these exploits to autocratic governments. More often than not, these governments then use the exploits to monitor political dissidents.
If we start eating insects, we will start farming them. But most of the insects we’re talking about as food sources are not primary pollinators.

And that’s the important distinction that your question raises. Increasing the total biomass of insects won’t help with the pollination problem if we’re only boosting non-pollinator species. It will not help the situation with insecticides and plants.
What does it have to do with space force? These are two separate issues.