skysight-inc/HackerNews huggingface dataset:
> how did they figure out the theoretical best time in the first place

A rarely used tool is brute-force searching for ideal inputs by making a computer play the game, trying all possible inputs. In theory, this process could find the ideal set of inputs for any game, but since the space of all possible inputs grows exponentially with the length of the sequence, this is only viable for optimizing very small portions of the speed run. Instead, a heuristic algorithm can be used. Although such an approach does not guarantee a perfect solution, it can prove very effective for solving simple puzzle games.

https://en.wikipedia.org/wiki/Tool-assisted_speedrun#Method
Notion | Head of Platform Engineering & Head of Product Engineering | San Francisco, CA

Here at Notion, our work shapes our culture and our culture inspires our work. We seek to hire creative toolmakers that want to be the best in their craft. We believe this will enable us to achieve our mission of enabling the world to better solve it's problems. We are looking to expand our Engineering Leadership team.

As the Head of Platform Engineering, you'll lead the engineering group responsible for Notion's API and the broader platform surrounding it. Apply here: https://grnh.se/ef56d33e3us

As the Head of Core Product Engineering, you'll lead the engineering group responsible for the core of Notion's product—the docs and wiki experience, the editor, our mobile apps, collaboration tools, and more. Apply here: https://grnh.se/3a76669e3us

Some other Engineers Roles:

Engineering Manager, Infra https://grnh.se/a9433dd23us

Engineering Manager, Product https://grnh.se/8e36e69d3us

Software Engineer, Infra https://grnh.se/b65f8c493us

Software Engineer, Backend https://grnh.se/5e2b054d3us

Software Engineer, Fullstack https://grnh.se/c6b21b743us

We're hiring for many more positions, see notion.so/careers
If you search for "eurorack kit", you can find a ton of module kits where you get all the parts and solder them yourself. It's a really enjoyable hobby and a nice way to ease into electronics.
As someone who will shortly need to do two very compute intensive functions in the browser (filtering large datasets (100k+ rows) via client specified queries, and parsing large sting blobs) what is my best option?

I’m aware of server side rendering but I suspect the performance in the client may be better responsiveness, with a failover to the server if it’s faster to provide a query response, but is there anything I should _really_ consider for client JS performance at that level?
I think of it more like someone's house getting robbed because of them having bad or no locks¯\_(ツ)_/¯
This dude's stuff is incredible and I never heard of him before today. He should be famous!
It was not visible in the UI before. It was very hard to find, which is probably why not many people are using it.
Saga | https://saga.so | Fullstack Software Engineer | REMOTE

Saga helps teams explore and connect their knowledge across notes, documents, and other SaaS tools.
We are building a rich-text editor that can automatically search, suggest and cross-reference information for you.

We're looking for passionate engineers who want to join us on a mission to connect everyone's knowledge.

Stack: React, Typescript, Node.js, GraphQL, Postgres.

Fullstack Software Engineer https://saga.so/careers/software-engineer-fullstack

Junior Software Engineer https://saga.so/careers/junior-software-engineer

Learn more about us https://saga.so/careers
Yeah. That seems like exactly what I was describing. Thanks.
Why Did Longitude Matter in the 1700s?
> Expensing upkeep...writing off rent

Expensing missed rent and eviction costs isn't free money; it does require reserves, but it does help a 1 year impact spread out over many years.
No idea, but I was just trying to answer some questions. I remember vaguely that I needed some points to help and I needed to help to get the points, so... I shrugged and let it be.
If it were government crypto (or centralized government money transfer), you'd have recourse in the courts.
> That's just not how civil society works.

This is a cope and also irrelevant.

Civil society works a certain way because of its social interaction dynamics. The internet works much differently (namely, retribution is much harder, which rules out most tit-for-tat transgression management strategies, and the scale is much larger than is possible with human interaction).
Thank, I get it now. Not a solution but perhaps try git bisecting the working and non-working version. It’s never a good thing to hunt down a bug but when one has to, the immutable nature of nixos actually makes it a very handy process.
I got 12% and 1 in 12 and the
National Epidemiologic Survey on Alcohol and Related Conditions-III survey which IS your entire life mixed up in my head and was arguing that point not about 2020 specifically.
2.93 marks the last Blender 2.X release, which is significant because Blender 2.0 came out in August of 2000. 21 years of 2.X development is the "Era" they're referring to. The next major release will be 3.0!
Do these recent attacks (pipeline, meat plants, steamship) have anything in common? Do they share exploits? Are they related to or enabled by the solar winds hack? Or is this just media amplifying what are otherwise routine events now?
If you don't like downvotes then make your own subreddit and attract like opinions. I personally don't think posts should be voted more negative than -1.
Polonium is not “THE” reason smoking causes cancer, it is “A” reason. There are plenty of other cancer causing chemicals in there too, polonium has good company.

It’s a bit nick picky to point out, but given the historic confusion tactics by tobacco companies, it’s important to be accurate when talking about ways smoking effects health.

https://www.cancer.gov/about-cancer/causes-prevention/risk/t...
> that's a personal problem

Well, that personal problem affected _all_ of my co-workers when we were sent home during 2020, so even if experienced remote workers get it figured out, I think it still needs to be addressed and listed especially for those of us who are new to this.

Also, the downside is not just because of my struggle, management attempts to hinder that separation: "Its 8pm, but since your there with your laptop, would you mind...". And things that didn't use to be emergencies are now, since the level of effort to address them is considered significantly less (by your manager anyway).
Discord Experiencing Partial Outages
In almost every sense that matters.

The model that seems to underlay this idea is that in a financial transaction, one person is a customer, and other is the provider (of a service, or product, etc.). But not all financial transactions fit this mental model of what is a kind of social relationship.

Suppose you go to Craigslist, and find that someone is selling their old bike. You give them a call, give them cash, and you get a bike. Were you their customer? Something doesn't fit. This is a one-off transaction, on each side. There is no "custom". But I don't want to argue the point, because there are other examples.

Suppose you get the opportunity to pay for an internship at a prestigious lawfirm. You pay your $1000 bucks, and then you work for free for a few weeks. Are you their customer? Sure, there was a financial transaction, but the relationship isn't one of being a customer. Is it?

Ok, suppose you are a plumber. Every few years you pay a fee to a certification board to keep your license. You also pay membership money to the Better Business Bureau. Are you customers to the certification board, or to the BBB? Doesn't seem like it to me.

Students are students. That is the relationship they hold to schools. That there is also a financial transaction happening is incidental to the primary relationship. Indeed, for students who pay no money because everything is funded by grants, then the idea that students are customers breaks down further.

I understand the temptation. It is a lot of money most people pay for an education. But students are not customers, and university degrees aren't products.
The primary thing to help randsomemware would be to have tested backups, where you can reimage the computers and restore from backups reasonably quickly.
Are there actual examples of the US "assassinating" bad actors in this way? That seems farfetched, as opposed to just going after them in the judicial system.
This might be a good thing for proponents of surveillance. They can wait until some really bad things happen and people beg for facial recognition.
I don't think the analogy fits because there are so many ways for an attacker to compromise a system besides the "front door". If we want to stretch things, a member of your own family can unwittingly let a guest perform an action that enables the robbery weeks later.
> there are standards and operating procedures that can be used

99% of these standards are completely useless and exist only to reduce legal liability. The other 1% are only incidentally slightly useful.

You will never ever create a secure company by following some stupid checklist, unless the checklist is so extreme as to be useless to most orgs. “Step 1: only run OpenBSD…”
> To gain access to the M.T.A. and other systems, the hackers took advantage of vulnerabilities in Pulse Connect Secure, a widely used connectivity tool that offers workers remote access to their employers’ networks. [...] The hackers took advantage of a so-called “zero day,” or a previously unknown coding flaw in software for which a patch does not exist.

The Pulse VPN has a history of security issues (see e.g. https://arstechnica.com/information-technology/2020/01/unpat...) - so much so that the second and third Google autocomplete results are "pulse vpn vulnerability" and "pulse vpn hack". One practically enforceable at scale rule is to pay attention to whether your vendors have a bad security track record and also be meaningfully prepared to switch (switching VPNs is no fun, but it's doable).

Another one is to ask your vendors what they're doing about their security track record and whether they are taking systematic measures to make zero days less frequent and not just fixing individual bugs. "Stop using memory-unsafe languages" is one of my favorite answers to that, but there are a lot of others: "use sanitizers," "test your code with fuzzers," "use open-source components for the privileged portions," "get frequent third-party audits," etc. are all potential answers too. Some work better than others; any of them is better than not having an answer.

> “The M.T.A.’s existing multilayered security systems worked as designed, preventing spread of the attack,” said Rafail Portnoy, the M.T.A.’s chief technology officer. [...] there was “no employee or customer information breached, no data loss and no changes to our vital systems.”

The other really good answer here is to not have an all-or-nothing architecture for your network, and it sounds like the MTA is doing that already. Don't wire the train-switching network to the email-checking network just because you can. This is much harder to practically enforce at scale in an environment that wasn't designed for it, but it's a great rule to enforce in new systems. Any time you build something that would be worse to get taken over by hackers/ransomware/whatever than the rest of your company's computerized systems, build it separately and make limited interfaces for people to interact with it.

The move to put everything in the cloud really ought to make this easier: you can make a new cloud account for new systems and use bastion hosts etc. for developer access to them, instead of throwing it in your existing account.
Yes, you need a repo from Packman. Less than 15 minutes to set that up if you know what you are doing. Yeah, if you don't install a new machine frequently you will have forgotten the details until the next time. And some guides on the net are not as good as others. Haven't done it myself for many months, so once again I don't remember it in detail.

I guess the reason is that their corporate lawyers tell them that they must not do it. There might be patent issues buried in that code.
Mlvwm: Macintosh-Like Virtual Window Manager
See also Chrysler and GM:

* https://en.wikipedia.org/wiki/General_Motors_Chapter_11_reor...

* https://en.wikipedia.org/wiki/Chrysler_Chapter_11_reorganiza...
That wasn't a problem in any of the other forums I've contributed to. Go figure!
Eh, I feel like that's being too picky. First, California's "ban" is only a three-year moratorium on FRT in police body cameras, whereas King County's is on "the use of [FRT] software by county government agencies and administrative offices."

Second, and where things get a bit more "technical" is that SF is both a city and a county, yes, but it's only one city in that county. There are 881,549 people in SF county compared to 2,252,782 people in King County[0]. According to each county's Wikipedia page, SF county is 231.91 square miles to King County's 2,307. King County has 39 cities and towns[1] to SF county's 1.

So while yes, you're technically correct, I still think that the headline is accurate as-is. Most of the country's counties are similar to King County (eg, not a city-county), and it's important to distinguish the fact that this ban covers a tremendously wide area and numerous municipalities.

[0] https://www.census.gov/quickfacts/fact/table/kingcountywashi...

[1] https://kingcounty.gov/depts/health/codes/cities.aspx
Good for Joel and Jeff. They made a good product that produced value and people loved. They finally made the big bucks they deserve.
My local Target has started carrying high(er) end coffee beans — Stumptown, Peets, Blue Bottle, Counter Culture, etc. Interestingly, these bags DO show a roasted date on them. When I eyeballed it, they were all about 5-6 weeks prior, so not straight from the roaster but not horribly old either.
At last, KC did something right. Hooray! There's nowhere near enough unsolved violent crime to justify the surveillance state. And yes, I have been the victim of an unsolved violent robbery.

P.S. who cares if KC is first or not. What matters is it got done.
Rack is awesome, and I use it almost every day. But it's not a way to get started with Eurorack.

It's a (great) way to get started with modular synthesis.

Eurorack is specific term for a particular hardware format (physical dimensions, power supply specifications, electrical standards). In general, most of the modules are analog, though there's no requirement for this to be true. Hardware modular synthesis existed before the emergence of Eurorack (perhaps most famously the Moog modulars, but also Buchla and perhaps 6-12 other companies making modular systems). Eurorack is an industry-wide specification that allows many different module makers to create modules that will all fully interoperate with each other.
Why not China? I always have problems with these attributions - they inevitably depend on "signatures" like timestamps and language encodings that would be trivial to deliberately fake by a competent team - and some of these hacks indicate competence.
> You know that argument that people used to have about 30 fps versus 60 fps? “The human eye can’t see the difference” and you don’t need more than 30 frames per second. By now you know better.

What a weird opener; if there's a topic that's plagued by anecdotal evidence it's this.
> for instance, above normal fresh water accumulation on land will measurably change the length of a day

Is there a name for this that I can google for?
I asked a question on math.stackexchange 8 years ago and that question got really popular and now I'm in the top 34% ranking of folks on the Math site. I don't really know a lot about math but people really like the TREE(3) function.
I'll be honest, the ATH m40x was just a google result for best headphones under $50. Comfort is very important (and completely orthogal to price)

I used sennheiser HD201s ($15 canadian on sale) for years until the cable broke, then upgraded to sennheiser HD599 ($149 canadian, on sale) because it has replaceable cable. Might add an aux jack to the old ones, sometime...
The intersection between people that buy their product and the people that has powerful machines that can mine crypto seems small
> director earns 10 more times than a senior engineer.

Where the heck do you work??

I certainly hope OP is communicating ways to be successful and secure, not how to strive to be in the 1%. For most high school students, "rich" means being able to easily pay their bills, have a decent home, and have plenty of disposable income. Only people who are already quite rich define "rich" as having the luxury of choosing whether or not to buy yachts.
How's gait identification doing these days?
I think this will not happen immediately because people would panic and run. It will be more subtle and over a couple years, but it will fade away in time.
Stories like this make me sad :(
Tiny hands stop writing for tiny readership
Also: demographics.

The oldest Millennials are 40, and more and more of that contingent are arriving in their 'family years', especially given the higher average ages of both marriage and pregnancy.
The Open Build Service and its version control tool, osc, offer some ability to fork a package from an upstream repo and still track upstream changes. It's not as elegant or convenient as Nix, but it is pretty cool. OBS supports packages for a ton of distros. It's essentially patch based, but targeting different distros (of the same package type) and different architectures can sometimes be without changing the source packages at all.

It might be fun to compare their approaches to solving this ejection problem. Nix's is much nicer to use and requires basically no infrastructure, of course.
I mentioned it in another response in this thread, but while it's technically correct that SF is both a city and a county, making it the first actual county to ban the tech, it's important identify the fact that this ban covers a much wider area, a population of ~2.2 million compared to ~880,000, and 39 towns/cities compared to 1.

With that in mind I don't have much of an issue with the use of the word "county", considering there aren't a whole ton of city-counties relative to the total number of counties in the US.
What if pricing was listed in two parts: first, the price at current market rates, relative to its alternatives; second, a share of early adopter stock. The price paid less market rates for a comparable phone treated as an investment, perhaps as much as several hundred dollars per device. The stock pool being a percentage of the company commensurate with network-effects of its adoption. Sometimes crowd-sourced purchases like this are more easily justified, and even rewarded later, if accounted for as investments.
Building an Electric Vehicle Fast Charger Is a Lot Harder Than It Seems
> I read an analogy that pinning this on "cyber security" is like accusing a mugging victim of having a lack of personal security guards. That's just not how civil society works

Civil society does punish businesses when bad things happen due to negligence. Especially when the result of the negligence negatively effects someone else.
Do these communities have any spam protection?
> If we started today with nuclear, we could trivially hit the 1.5C IPCC goal.

Just wanted to point out that this is nonsense. We already have 2C of warming baked in, if we go to net zero today, which is a complete fantasy.

In fact we're likely to reach 1.5C of warming before those nuclear plants (that you propose we get started on) even come online.

Did you even look at the graph in the top post in the thread?
The video mentions this sentiment in passing: https://www.youtube.com/watch?v=7rIJNT7dCmE&t=2624s
What about all the people who contributed over the years to Stack Overflow? All the people that took time out of their day for years to answer people's questions and keep the site organized. Stack Overflow would be worthless without its contributors.

It seems like Stack Overflow is a company that has figured out a way to profit of the Hacker Ethos of helping people. I guess if you concentrate enough naive volunteers in one space, you can sell their time to someone else.

This is happening a lot lately in Open Source and Tech. Just two examples: Wikimedia's endowment is reaching over 100 million dollars. AWS is making a huge amount of revenue of Redis.

Is there a point when the hacker ethos needs to become more broad? At the very least, we should be considering where we spend our time and for who.
You can comment without any problem. Downvoting is not the main usage of HN, like answering questions is on SO (or commenting, it's a wonder that they still allow any kind of activity for people without karma, too bad the only allowed activity is making questions, that will be incorrectly marked and downvoted most of the time).
Is there any group at all lobbying our limpwrist Congress to do something about these?
Thinking of adding an aux jack to my old sennheiser 201s, as they work fine otherwise. the reason I got the hd599 is because they had a removable cable, haha
How to create temporary table in SQL server
Some folks here might be familiar with QMK. I did a bit of tinkering with an Atmel-based split keyboard with a traditional matrix design (just like almost all custom mech keyboards).

My findings: the scan rate is around 200-2000hz (number of times a single key is checked per second). Having a split does lower this number, so does enabling i2c for either split communication or RGB.

I measured latency with an oscilloscope by checking the speed from having a key scan to a NumLock LED lighting up on the keyboard. It is variable, from 5ms all the way to 30.

I hear that ARM is way better in this regard. And ZMK might be better, too.
Because contributing has no value unless your contribution is actually good, and often there's a lot of crap that's negative value because it's wrong or off-topic or spam.

Having a barrier greatly helps overall quality.
You need a "mature" security organization that can stick it's tentacles into everything and still be effective or embed security people directly on teams to gate changes like a CI tool does. A security team that operates at a distance is totally ineffective.

I've worked a bunch of places that have passed various audits and certifications, you know, PCI, SOC, and unfortunately the audits of infrastructure isn't as deep as the average Joe would expect. They place heavier weight on processes over technical safeguards. It's like what they say about the CISSP exam, a mile wide and an inch deep.
I simply cannot get over the haphazard rebranding effort. They literally took their logo into mspaint and appended "LifeLock" to the right side of it.
You can configure RISC OS to boot directly into the BBC BASIC interpreter: https://www.riscosopen.org/forum/forums/5/topics/15793
Just curious if "ties to China" means "an IP address that may or may not be allocated to Chinese geography, and may or may not simply be a Tor exit node or a VPN service."

People are far too trusting of these claims of where these attacks originated. Very few people in the world, including journalists, know how IP networks work.
Not in that way

https://www.theguardian.com/technology/2021/apr/13/facebook-...
I think no longer. I installed a new Xubuntu a bit more than a year ago and so far all videos from the Web and they few DVDs I have watched did just work. I was a bit surprised by that.
Most published research results are false, so it's not a good idea to believe individual papers whether or not they appear to be correct. It's not the purpose of publishing them either.
How much of the billion dollars will you get?
I took a double take at this because it seemed like a headline from The Onion. But then I realized this might actually be a real thing? Overall it left me with a very gross and icky feeling.

If I were to make a ranking of businesses that I consider highly ethical and reputable, the lifelock company would be somewhere towards the bottom.

https://www.google.com/search?channel=fs&client=ubuntu&q=lif...