skysight-inc/HackerNews huggingface dataset:
>I don't believe it's fair to spread doubts

I think it is fair as long as I make it clear (which I hope I have) that I didn't investigate fully after I saw some warning signs.

>spread doubts just because they don't get fixed in a day or two.

I am not a security expert, but tptacek is, and in 2017 he wrote that "You
don't want your browser to be any number of days behind the Chromium patch
cycle."[1] IIRC, tptacek or someone of similar credibility said that the browser
and the kernel are the primary targets of zero-days exploits on a desktop Linux
install.

[1] https://news.ycombinator.com/item?id=13517227

Also let's see how another party handles patches for Chrome: the Arch User
Repository's Chrome package (not an official part of Arch Linux) "will
automatically get updated as soon as the Debian package is available. This is
checked at least once per hour."[2]

There are many many things a distro needs to get right to compete with, e.g., Debian or Fedora on all the criteria desktop Linux users care about. It is not easy. My thanks to Nixos's maintainers for investing their time in trying to advance the state of the art. But Linux users invest a lot of time, too, and in chiming in today I did so because I thought I could save Linux users some time by presenting my conclusions after spending many 10s of hours installing and exploring Nixos.

[2] https://aur.archlinux.org/packages/google-chrome/

>Installing your preferred version of Chrome using Nix is as simple as
supplying an alternative upstream URL for the google-chrome package.

Please correct me if I am wrong: this requires building Chrome from source, which will spike the user's CPUs for hours and is impossible with less than 8 megs of RAM ("More than 16GB is highly recommended")[3]

[3] https://chromium.googlesource.com/chromium/src/+/HEAD/docs/l...
Wow CodeIgniter, blast from the past. Funny at the time it was a pretty nice ORM/Framework. Apparently I still used SVN also. https://alessandrovermeulen.me/tags/codeigniter/
I read the article, but I have the ability to research things for myself and not take a single article's word for something. it's not like one can't find the emails and read them on their own, without an article spinning things a certain way.
It's a crappy metric. What about:

Time to stop from 60 mph?

Effective turning radius at 60 mph?

Interior noise in decibels at 60 mph?

Maximum shock absorption at 60 mph?
The tech companies are not analyzing things at this level. They close a number of accounts each month. A certain number of those were engaged in fraud and will generate chargeback activity. Others were legit but accepting payments in advance. Once the business is out of business those too will generate chargeback activity. Some are legit but had bad service, lost key employees resulting in complaints. Once the account is shut those also often generate chargebacks.

So they sit on the money for 180 days, it doesn't cost them anything and saves them a big pain in trying to claw money back from any of these folks who may not look at them that fondly after being cutoff for what may have a been a silly reason.
Vupen / Zerodium folks (Chaouki Bekrar, et. al.): helping governments monitor, abduct, torture, silence, and murder their enemies through monetizing sploits.
I'm curious what I'd use JSX for in a CLI :)
Even so, their lips still got tired
Paper-filtered coffee seems to taste of wood or paper (slightly). I have used the same metal filter since the 80's. It is the oldest piece of brewing equipment I have.
Understood. I think most people would start eating plants for protein before they resort to insects unless the insects are processed beyond recognition and relabelled. :)
How are they going to sell tickets with their infrastructure offline to a ransomware attack?

I'm not sure a perfect solution, but the standard of living was pretty good before the internet. Doing away with reliance on infrastructure for critical things like food processing, energy, and transit does not seem like a high price to pay to avoid a Thanksgiving turkey conundrum.

All these services are going to go unhacked, until they're hacked. And it's a complete skewed problem. We get minor conveniences for having them online. We suffer massively when they go offline.
Ohio State Senators call for more rules regarding abortions in the state
**** COMMODORE 64 BASIC V2 ****

64 K RAM SYSTEM 38911 BASIC BYTES FREE

READY.
Solution: put bug in, get accomplice to claim bug bounty under an alias.

(This is fraud, don't actually do this! But it comes up every time someone does bug fixing metrics)
If a little redesign makes you move to Chrome, what exactly was stopping you?
> the reality is going to be that paying is necessary to continue to exist. What happens when that option, as crappy as it is, is off the table?

Insurance. Back-ups. Bail outs. Go out of business. That ransom paid has negative externalities that manifest nationally.
Idk i found home growing mushrooms is basically another hobby to be invested. I tried it once, the final result was pretty weak, and I didn't get a lot for how much effort went into it.
I just submitted this and it got a lot of votes immediately but got flagged in less than an hour. Considering it is from Scientific American and reasonably cogent I suppose the reason it got flagged was the use of a word in the title (which was in the original article) which I have now changed in this resubmission.
Ketamine is already legal for doctors to treat patients with and there are ketamine clinics in California.
Sploits are worth a lot more because of the damage they can do.

Fixing some bugs and adding some features is a nice-to-have that most people and companies aren't willing to pony-up much for.
My crystal ball says...

* Improve channels from Stack Overflow to other properties - kind of like what they tried to do with the Developer Story, just with more reason to do it. ( https://www.pluralsight.com/newsroom/press-releases/pluralsi... )

* There are a lot of eyeballs hitting SO, and a lot places to send people - https://www.prosus.com/companies . As they control the server, they can inline those ads more easily.

* Job portal expansion. Supposedly this is profitable now, just not VC deals profitable. There are quite a few classified sites that Prosus has already.

* Expand links to edtech - Skillsoft, Codecademy, Udemy to name a few of them.

* Have the resources to spend on making that enterprise content product if it's not too late (Atlassian and Microsoft have been there for a while). People kept wanting a SO instance they could host locally. They were willing to pay a bit for it (but not the Big Tech prices that SO was supposedly selling it for). SO tried to do this with Teams, not sure how well that works/went. So, maybe they'll get that product finally made.
I continue to wonder why more companies aren't utilizing application whitelisting. Most, if not all, of the attacked companies run Windows, and Windows have been able to restrict system to only running whitelisted application for ages.

Sure, whitelisting is annoying to say the least, but these are critical systems, you don't need to install new software daily or even monthly.
There are much bigger issues in the justice system than simply decriminalizing marijuana. Its civically ignorant to think this is the most important topic.
Neither VB, VBA, VBScript nor VB.NET are "low-code" or "no-code", they all were rather code heavy... Some VBA 'apps' relied heavily on their hosted application object-model (Excel, Word, Visio, etc) - but there was still quite a bit of code that the average corporate Excel-wizard was never truly comfortable with.

In the Microsoft space, historically the true "no-code" solutions were Access Web Databases (no VBA allowed - of course they axed that whole service in 365, as they could not monetize it as well as SQL Azure), or web-capable Excel workbooks that rely exclusively on PowerPivot/functions (no VBA allowed), or web-enabled InfoPath Forms (also... no VBA allowed).

In their modern universe their equivalents are; PowerApps, PowerAutomate/Flow, LogicApps and PowerBI - just as the article states.
Just when you started to think Stack Overflow was bad.... it's about to get a lot worst.
Cryptocurrencies are basically securities. If it's difficult or impossible to exchange fiat currency for cryptocurrency and vice-versa, the value of cryptocurrency drops to basically nothing. What's the point of owning a security you can't sell to pay your taxes/mortgage/electric bill?

Even if cryptocurrency<->fiat transactions continue to be legal in other jurisdictions, making it illegal to trade USD for $crypto would make it very hard for a US company to pay cryptocurrency ransoms making such schemes much less lucrative.
Fair point, but as someone not familiar with exploit markets, I do find it surprising that an exploit in a relatively niche (because desktop linux is relatively niche) IM client is worth $100,000k.
It was very challenging to sleep with CPAP. I took an extended break from the CPAP machine around 12 years ago, and then I tried the oral appliance - it worked wonders, and I haven't looked back.
Things GPT-4 Will Improve from GPT-3
The fraud implications will keep me from ever buying any drug from Amazon.
A few years ago, Etsy claimed that they were on a big mission to remove resellers and only allow individual, bespoke sellers.

I haven't seen a whole lot of evidence that they have, or have been successful.
Thanks I'll have a read through it, I can lots of uses for this already!
oof, good callout!

I received it as a christmas present and must have lowered the cost in my memory: it's a breville café roma, which isn't listed on their site in the US these days, but is still in Canada? Which is where we ordered it!

At the time I think it was actually ~$200 CAD, but it appears to be about $200 USD now when I view US Amazon. Sorry for the misinformation :)
Speak up about what?

Of course there's a majority of white men who don't see a problem with the status quo because they never feel the negative effects of it.

I see two categories of detractors, when it comes to these cultural shifts. One is more sinister than the other. One category doesn't like the shift because they feel called out and they feel somehow attacked rather than taking the information and making a positive change. The other category actively hinders minority participation because they afraid they can't compete in a labor market that includes skilled minorities ( or whatever unsavory reason for making their industry unwelcoming )

I know this comment is likely to fade based on the opinions I see propped up in this thread. Honestly, this thread is a disappointing place to be.

I guess the "political activists" want to make Jetbrains a welcoming place for non-men or POC. And that's really cool. I'd say if a person can't behave themselves in that space (which really isn't hard at all), good riddance to them.
I would assume it got flagged because it's a duplicate, as someone linked in the comments?
Why should they capture all of that value, most of which was generated by the community itself? They should get paid for the generated efficiency but should not be paid for the gross value passing through the network.
*Almost any system can attempt that.

Nix lets you pin your whole dependency tree, and Nixpkgs includes facilities for managing the configurations of many applications, including integrations with their plugin systems that explicitly manage external runtime dependencies, like stuff your vim configuration might call at the CLI. Without that stuff, reproduction can often fail in practice.

And in the case of NixOS, you can also reproduce things like running services and their configurations, which users exist, etc. Those are OS and configuration management features, not package management.
You're exactly where you should be. Reputation isn't an assessment of skill or knowledge, it's how useful you are/were to the site (as you state, contribution), and the site needs questions as well as answers. The person with 1000 reputation purely from asking questions is no less deserving of that score than the person that got the same score purely for answering some.

It's probably better to think of the points as something akin to money paid out by mechanical turk for doing things the site needs, including cleanup and formatting in some cases. At that point, your contribution and what it means is fairly clear.
Obfuscated Open Source Subtle Bug Insertion Contest

Edit: If it's not a bug bounty to fix it, but a vuln bounty to sell it, then it's highly-unethical but not necessarily illegal.
The problem you're highlighting is that driving is dangerous, more than anything else.

Limiting the speed cars can drive is a much better mitigation, along with better city design to avoid car use, and minizmize fast car use.

The approach of "what if the driver's attention is impaired by <thing>"

Has to be rehashed for every instance of <thing> and is never going to fix the root of the problem - that cars are dangerous
A federal regulation requiring decent cybersecurity measures would be better.
Google Pay got a redesign last year, but I also never really found the old app to be that bad either. It did NFC transactions, I can't really imagine a much "deeper integration" than that.
My Bösendorfer grand piano sounds much better than my B&W loudspeakers with high end project amplifier in the same living room. It is not even comparable.
It points to the need for native software to allow collaboration and this is actually happening slowly.

I still hate Figma though. It's too primitive and I'm sick of being given Figma links where the necessary resources are 50% chance not isolated, or not vector, or not exposed at all.
These are the kinds of articles I love to see on HN!

I think it's so interesting to see how different OS' have approached these long lived operations over the years. Arguably, *nix OS' have been able to move past these problems since it appears that package management is much more of a first party concern. "Oh, you want to upgrade this utility? Well, I rely on these other things so you should update them too."

I'm a webdev so a lot of this is foreign to me w/ how it actually all functions but it's cool to read about these problems and speculate how/why they came to be and why they may only exist on certain platforms.
you should reread what you've just written and think a bit about who you think the problem is

we were having a conversation pretty tightly scoped to PCR tests that got loosened up (by you) to include lockdowns.

Now you're talking about Q-Anon among other unrelated things. If you want to have meaningful conversation that changes minds by informing people - this isn't the way to do it. It very much seems like you just lump everything into one big ball of political hot topic and leave very little room for nuance from people who disagree with you.

That's very unproductive and I'd suggest this mentality of assuming someone elses position based on political hot topics de jour is exactly why so many people are tribalistic when it comes to choosing what they believe with science.
> How can cryptocurrencies be banned in any meaningful sense?

By banning them? In the law? Enforcement would probably pay for itself, plus some. Throw in a whistleblower bonus, like the SEC has, if you want it to run on autopilot.

More aggressive: level repeated 51% attacks. This is well within the budget of any of the G7.
Fauci emails reveal how the virus was created:

https://twitter.com/Littleb29872980/status/14001539060895047...

Arrest Fauci Now!
Partially agree - issue may not be due to psychedelics, but it is irrefutable that California's woes are due to its policies. I will go ahead and say this is not just California issue, but west coast policies in general that have created crisis after crisis - that includes Seattle, Portland, SF and LA. It is time we allow criticism of these policies with an open mind.
It feels like a chicken-egg problem. The actual consequences to the business aren't often serious, so it's difficult for them to get support to spend serious money on it.

Maybe mandatory high-cost, high-limit cyber insurance, with dramatically lower rates provided you can prove x/y/z, would make for an incentive?
Location: Ageria,

Remote: yes

Willing to relocate: yes

Technologies: HTML, CSS, Javascript, Sass, React, Python, Git, SQL.

Resume: https://drive.google.com/file/d/1loGydzvnSm5veCuhfSxjoEDxYcP...

Email: ez_taklit@esi.dz
Prosus has taken a backseat in most of their investments, though.

That is no guarantee that it'll leave SO running as it does, but it gives a good hint that this statement is probably right, with prosus as owner.
It's still a great way to do it. Instead of 3D printing a custom pulley for your hobby build robot, you could just use a standard VW part that costs much less and will last a lifetime.
Marxism is derived from Hegel's work.
While its less useful for future people with problems, I have better luck on discord communities when they're available.

As an infrequent stack overflow user, I find the platform very user hostile, especially to new users. If you write a question that's not great, it's just locked, and you're not really told what to do, often with a vague suggestion like "lack of clarity or detail" which are orthogonal concepts. Are you supposed to just leave a comment in a dead question thread and hope that someone responds? You're mostly just left for dead.
Right. I taught myself how to make web sites (both front and back) in 1999 purely online without much difficulty.
The 0day market is actually getting disrupted by cryptocurrency. Even the major exploit brokers can't compete with weaponizing the exploit against an exchange or online wallet provider to net tens of millions in easily cleaned money.
China + India have well over a third of the world's population between them, the next seven largest countries combined (which includes Russia) roughly equal that of China.
But not more than Google's revenue / Chrome project funding. (Or at least not above board, out in the open like this.)

I don't necessarily disagree with you, but I do think it's dissonant enough to be interesting.
> So why hasn't it been legalized federally?

From my layman point of view, there is a lot involved with legalizing federally. Some of the obvious points that I can think of are:

1. Career politicians don't want to seem "soft on drugs or crime". This seems to be changing, but it's a slow roll.

2. Agency funding. The DEA gets a ton of money to enforce these federal laws. This has many layers to it and it seems much more complex than what I'm aware of, but I can imagine that all the people who currently get paid to enforce the ban on cannabis would be against this because there would likely be decreased funding to them (or at the very least, their roles would be changed).

3. Lobbying. Many people might want cannabis to be legal, but a lot of business do not because it could hurt their business. Big pharma has made a ton of money from prescription drugs that might possibly be replaced by a plant that people can grow on their own. These companies pay our representatives, and then representatives vote in their interests. One of the reasons cannabis was made illegal in the first place was because of a paper company that felt threatened by the use of industrial hemp.

4. In addition to the points related to money above (agency funding, lobbying), there are private prisons that make money from offenders of the current crimes in place. Police departments can get easy revenue from fines related to cannabis. Big pharma doesn't want legal alternatives to their drugs. Cartels also have an interest in keeping cannabis illegal. Alcohol companies may even be incentivized to keep it illegal so that alcohol remains the vice/drug of choice (this seems to be changing, major hard beverage companies have invested in cannabis companies).

These are some of (not all) the main reasons for why I think it's taking much longer than we would like.
> regulation requiring decent cybersecurity measures would be better

For those of us who make money when cybersecurity dollars are spent, yes. Practically, you’d get a federal agency writing checklists.
Run quickly*
Ive seen mention to "switching" to a configuration a few times now, what does that mean technically? Is it a reboot and select a different grub option, does it take time/have to download things? What really is "switching"?
Take a look at the new big tech coming up in hiring
Hi Fam
I and my team are currently working on the next-gen hiring platform for Gen Z using Machine learning.
We are currently doing market research and we will be glad if you help us fill the survey (<1 min) below.
https://emeka18.typeform.com/to/ksO0Czc8

Thank you so much.
pls share with your recruiter fam.
What I love about stack overflow is that you don't just get the answer to your question (usually) but the top rated answers also include the "whys". Meaning you get to expand your understanding of the domain in question.

People who write stack overflow answers really are the unsung heroes of the open source world.
Gotta love how the Amazon astroturfs are already here.
Who claimed this is the most important or only topic that needs evolution, reform and/or change?

Stop downplaying one problem because its not your problem.
I agree.

Why buying a company if you don’t want to make any change? Investment firms make profits by buying low and selling high, and it is hard to sell higher than the purchase price if things are kept the way it is.
I saw that, thank you. But the whole tit-for-tat startet with the flight I mention.
Thanks to the magic of Eurorack, it's easier than ever (albeit expensive) to build your own synth. Even "from scratch" oscillators aren't too difficult, if you're familiar with breadboarding/soldering.
Assuming if you aren't in the bay area and lucky in guessing the answer is always going to be finance/ banking. Technology is probably less important than domain.
https://en.wikipedia.org/wiki/Risk_compensation#Citations
CSS for Web Vitals
I wonder why it's implemented as a per-file copy+delete instead of a "copy all files" then "delete all files".

I also have a gut feeling that doing similar operations to a connected android phone (e.g., moving photos from your phone to your PC over USB) is also slow, probably for similar reasons.
I absolutely detest Trump and fully supported his removal from any and all platforms run by private companies much earlier than it happened, HOWEVER this is yet another indicator that our world runs through monopolies.

They're holding back everything, including shareholders. Break. Them. Up.
I like their approximate people reached metric. I've answered at lot of VBA questions which get a lot of views but not necessarily from developers who might have an account. I suspect they are mostly anonymous users and thus the answers get a lot of views but relatively few votes.
So PayPal is holding onto his money in case he incurs expenses as a result of going out of business due to PayPal cutting him off? And this seems normal and good to you?