skysight-inc/HackerNews huggingface dataset:
There's a limitation to `position:sticky;` though, which is that it will not work inside of ANY parent that's `overflow:auto` or `overflow:hidden`. I hope this gets addressed in a future version of the spec one day. Gtihub issue: https://github.com/w3c/csswg-drafts/issues/865

The biggest issue that happens to me is that I'll have a large data table where I want `overflow-x:auto` with a sticky header, and this is just impossible without Javascript. Of course, the UX of such a table is not ideal, but sometimes nothing will substitute for a large data table when you have a lot of data that goes into a table and people want to see it.
I am not saying it's factually incorrect. My point is that it includes a lot of Gregg's personal feelings (and maybe was informed incorrectly about the situation) and I'm just not sold that the guy who was assigned to show off Dtrace was the bad guy here
Snowflake CEO Says Diversity Goal Is Secondary in Hiring Choices
Top comment on tech crunch:

> You’re quitting over that memo and “the timing of it”??? Don’t let the door hit ya where the good lord split ya.

“While the Medium memo doesn’t wholly ban politics, the first engineer said that the “undertone” of the statement creates a “not safe work environment.”
Oh it’s the “undertone” of the memo that’s so threatening to you. Ok bbbyyyyyeeeee! :-)

Snowflakes gonna snowflake. Oh and we get yet another Tech Crunch article pushing for companies to allow their employees to spew on and on about politics.... as long as they are the right politics, and by “the right politics”, I of course mean “left”.

It’s a workplace... not a coffeehouse. Keep your politics to yourself, do your job, or show yourself the door.
I never got a chance to see it again. I ended up spending more energy with another Sun project that wanted to switch the CDDL license to the GPL, only because they wanted to avoid going through the legal approval procedure to ship mixed-licensed products. Maybe I'll share that story one day: it was another eye-opening experience.
You have made a false dichotomy of it I feel. I don't think there are two models, just various points on a spectrum of tolerance.

I don't entirely disagree that politics is not needed in the workplace, but people spend almost all their time at work now and so it has become their defacto social space. If you spend 8 hours a day there it is important to make sure it's comfortable.

That increase in diversity is a direct result of talking about the issue of intolerance in the workplace, making it more comfortable for different people to work there.

You can be a hard working closer and tolerant of others all the same.
How does zero-trust escrow work? Seems like this would have a very limited set of applications without an external source of truth.
Because they will probably use Verifiable Credentials. That could lead to a lot of new use cases by reducing the KYC costs. Also embracing that tech for identity will open the door to any sort of proofs (like diploma, …). And eventually will kill the passwords.
Strangely the vaunted leadership principles of Amazon dont include one for ethics
Don't underestimate just how many people are needed to defend a village.

A village has a lot of land to defend and not many people to do it. The local town or city sized group will just pitch up with many more men and overrun you. All whilst having enough people left for defence. And they are likely to have more access to heavy weapons that can blow your house up from a distance.
US intelligence officials no evidence Navy pilot UFO encounters alien spacecraft
Apple updates AirTags' privacy measures
So is this "developer-splaining"?
Sure, but Apple have first party data on who you are and what you do on IOS, so they don't need IDFA. Google are similar on Android.
I saw these too, mostly on Twitter. I shorted Boeing based on them and made some nice money. My friends didn't believe me that this was looking real bad.
G Greenwald has an interesting take on it
https://greenwald.substack.com/p/the-fbis-strange-anthrax-in...
If you are only one with IT knowledge there it is already your responsibility - in case of ransomware or some disaster you can be hold responsible. Of course all depends on your contract, potential loses, managers mood and managers need to cover their asses.

Good news: looks like your position makes you kind of manager yourself - you, to some degree, can influence and even demand things. And for sure your responsibility is to communicate state of business to the upper chain.

Or maybe just make critical systems off the internets :>
My sister was disabled with cerebral palsy and lived on a meager SSI allowance in the US. She spent a good portion of her time doing surveys, entering sweepstakes, and whatever offers she could find on the internet. It was a great way to supplement her fixed income.
Of course that says little about SARS-CoV-2 relative to all the other viruses we don't know about, either sitting in a Chinese government lab, or in a bat cave somewhere.

I guess I don't find the argument "we can't figure out how to reconstruct SARS-COV-2 from known viruses" very convincing on either side.
The example in the article is an exception but, companies (including Sun) are generally very careful about using open source, and using it without attribution would be the exception not the rule.

Large companies are slow, indeed. In the late 90s I wrote a few operating system plugins (nss_ldap, pam_ldap, GSS SASL plugin for the Netscape directory server) which were eventually obsoleted by native Solaris equivalents. The Sun versions were on the whole better engineered, if less flexible, because their OS team had a depth of experience that I didn't have at the time.
Computing the number of digits of an integer even faster
Coming from the greatest terrorist state to have ever existed, that's funny.
These standards are more or less useless. It seems that people who swear by them expect the hackers to attack some documents or a powerpoint presentation.

These standards (and PCI-DSS, and ISO, and NIST (and this one is by far the best)) have plenty of blah blah that never gets implemented. They rely on some magical risk assessment exercices with a nice risk grid that gives you answers.

The reality is that the top 5-10-whatever risks are very simple to assess and very difficult to address. Unfortunately such concerns do not exist for the writes of standards.

I have been doing information security for 25 years in huge companies. The more relevant the risk is, the more painful it is to implement.

Even the ones such as "awareness" that theoretically should be useful assume that people care or think. I get emails from people who went though 10 awareness sessions who wonder why someone wants to enlarge their penis. And yes, the awareness sessions wera like in the ads: short, to the point, entertaining, relevant, magical.

So now imagine rising a risk that endangers the key legacy system that cannot be isolated.
Wire has KYC requirements
Embedded ethics.
Container ship scores ‘off the charts,’ ‘fantasy’ charter rate: $135,000/day
Infrastructure as Code with Terraform, Azure DevOps, Azure, GitHub, Docker
Well its turtles all the way isnt it, "And the readers should read this comment and the parent of proving that. Not that this comment or the parent is true.".

The same standard would apply to your comment.
Powerful and essential uses of banana for men
Would be a real shame if someone used mitmproxy modify the validation request in transit. Looking at one of the provided examples [0] it does not have any mention of certificate pinning.

With all due respect this service seems to alleviate the most simple to implement parts of a licensing scheme while not solving the actually challenging parts. Even combined with a sophisticated obfuscating tool it leaves a lot of holes to be filled by the end user.

[0]: https://github.com/keygen-sh/example-cpp-license-validation

Edit:I guess this is slightly offtopic since the article talks about the offline activation method not the online one.
Crypto enthusiasts make two claims often:

1. Crypto makes it easier to transfer money without govt regulation.

2. Crypto does not make it easier for criminals to transfer money without govt regulation.

How can #1 be true and #2 be false?

No one is saying crime was impossible before crypto, just that it was more difficult and expensive (sometimes prohibitively so).
And a lot of cases where around the table you have those who say "here is the risk that must be addressed" and then the others who say "if we do that we break production".

Both are truthful and full of good will.
I agree banning it would not solve this.

Do you agree that banning it would make the problem smaller?
I hadn’t even thought of this consciously: that having such disregard for authenticity also could mean they are playing it fast and loose with other, more important topics such as privacy.

Thanks for this insight
You can exclude domains from your search using `my_search_string -site:example.com`. A better solution is to use duckduckgo[1] for search.

1. https://duckduckgo.com/
No news here. They’re always said “we don’t know what those things are, maybe cameras errors, sensor heat, lens flare etc… but since we don’t know what are, we classified those events as UFO, not ‘we know that those events are aliens’ “.

I don’t understand all the hype behind these news
Especially for such rocket because you may need also additional fueling.
Microsoft has a record after successful previous version of windows the next one remains buggy and user doesn't like much...

For example - XP was good but Vista was flop... 7 was excellent but 8 was disaster... But I'm curious for the release...
Enjoy the knowledge and follow along! Most of the core and other courses are online somehow.
Unfortunately that is what is often recommended to win grants and get considered for the best journals. But yes, it should draw scepticism. But then again, scepticism is anyway part of the game in science, always.
> The only pass that matters is their ivestor's.

Which relies on the company's public statements being honest. Normalising unrealistic timeline announcements hurts everyone.
I think the issue is the splicing flankers and recombinant mutation occurring naturally in that particular place.
Show HN: Monte Carlo DFS Lineup Generator and Optimizer
Yes. In that case, one of the benefits is likely to be that this is a legal means to supplement her income whereas actually "working" for pay may jeopardize your disability income.

Being disabled sucks for so many reasons and rules that actively make it unnecessarily hard to make your life suck less is one of the suckiest things about it.
Why? If someone wants more control their interests already aren’t aligned with the community. Developer resources aren’t just some faucet easily redirected.

It’s worse to have people trying to jam shit into the main project if they don’t actually care about the main project. That’s how you get contributions that are huge hacks and require more work to review and iterate on than is worth it to the community.

If some company forks for an observability product and doesn’t contribute back, they clearly don’t want to. Don’t try to force them.

git is an incredible tool for managing forks and this anti-fork mindset is right out of old school open source culture from the early 2000s.

Demanding people contribute to your project instead of forking just sounds like demands to pay homage more than anything.
Lex Fridman in Conversation with Vitalik Buterin
> On the one hand, the cultural zeitgeist of the moment is almost certainly too far on the side of allowing and accepting people to be soft and weak.

This screams like a political opinion. This is exactly why people want to believe in the alpha. You're projecting your belief to others and pretending others feel like you. They don't.

Please read this article https://en.wikipedia.org/wiki/Social_dominance_orientation
Aiven.io | OSS Developers (Kafka, Flink, Postgres, ElasticSearch), Developer Advocates, Sr Software Engineers in Testing, Python Backend Engineers, SREs, Platform Engineer, Security Engineers | Berlin, Helsinki, Toronto, Sydney | Full-time, remote/onsite | https://aiven.io/careers/

We are Aiven — a cloud technology startup launched in 2016. We create managed cloud services from the best open source technologies that take the infrastructure worries away from our customers. Our products are used daily by hundreds of customers across the globe to power their next-gen event streaming and analytics applications with more joining every single day. Backed by Europe's leading investors, we’re now looking for top talent to join us in our headquarters in Helsinki and our offices Berlin, Toronto and Sydney.

We recently raised $100M in series-C funding! This investment will allow us to increase our open-source contributions, add new open-source systems to our platform, and it will support our global expansion.

Aiven Cloud Platform runs on many different clouds. While the product is simple to use from the customer's point of view, there are lots of interesting technical challenges under the hood for developers.

We are looking for motivated team members, who will share our vision and passion for software development and will work together with our Team on the development of the Aiven cloud platform.

We are looking for OSS Developers (Kafka, Flink, Postgres, ElasticSearch), Developer Advocates, Sr Software Engineers in Testing, Python Backend Engineers, SREs, Platform Engineer, Security Engineers in Berlin, Helsinki, Toronto, Sydney. Remote options are also available. If you’re interested, send us your application along with a link to your GitHub profile. Please feel free to send me a line irina.kusyk@aiven.io
The problem with autodelete or timed content is with caching services. There are a number of sites that allow you to see deleted comments. If a social media service is large enough, I imagine the same will be created.

Once something is on the internet, it is always on the internet.
If you're looking for market opportunities try the manufacturing industry. We have loads of CNC machines running very old Windows operating systems. Not only that, we also need support from the manufacturers. Often remote support from overseas.

I currently secure this by unplugging the network when they are done. Exposing a windows 98 machine to the internet is scary. When that machine is a critical production machine it's terrifying. We have 100k in spare parts to keep it running and spare hard drives with images ready to go. So we pay for reliability. Your KVM would mean we don't have to connect these to the internet but still get remote support. For $300 that's a no brainer.

Also, we drill holes in wood, our value add is low. 50% margins would kill us. You may want to look at increasing your cost.
Yeah but that's after years of escalations by DDP and US. Before DPP, we could even say that China-Taiwan relationships were at its peak. China's recent moves are primarily a response instead of a proactive move.

The DPP has done a lot of dubious things that raise tensions, all for political scoring, such as:

- blatantly lying about that they warned WHO about knowing about the Wuhan virus. They later published their email to the WHO... And their own email shows that they've been lying. :-(

- at the start of the Wuhan outbreak, they immediately banned all mask exports to China.

- they've banned TV and news outlets that have a pro-mainland stance.

- more recently, they've banned importing vaccines from China, even though they don't have alternatives. Even donations of western vaccines from mainland NGOs are rejected.

I mean, I understand the desire for independence. But surely you can advocate that without the need for immoral populist moves that harm not only the mainland government, but also the people, right? Lying about COVID and banning masks really pissed off a lot of mainland citizen. Banning mainland vaccines harms Taiwanese people. All this for scoring political points.

If you look at Tsai Ing Wen's Twitter, you will see a lot of mainland citizen mocking her. The article says the government has "fanned the flames of Chinese nationalism". But sorry, I can't agree with this. The article makes it seem as if Chinese people's thoughts are a wholly artificial construct created by the CCP. But Chinese nationalism existed before the CCP. Lots of people genuinely care about the Taiwan issue. There's a saying that if China becomes democratic, then it would have launched an invasion yesterday.

The article also makes it seem as if China has been strengthening its military with the primary goal of invading Taiwan. I also cannot agree with this. Its military strenghtening's main purpose is to defy foreign aggressions. One of the CCP's founding purpose, and its source of legitimacy among the people, is to end the era of foreign imperialism. China has suffered a lot, for 100 years, because it was weak and could not resist European and Japanese colonizers. Building a capable military is their version of "never again".

Military strengthing was accelerated due to Obama's Pivot to Asia. Around 2010,the US sent warships to the South China Sea, and instigated UNCLOS issues even though the US didn't ratify UNCLOS. Then China was like "so you want to play military games? Fine, have it your way". And now we have artificial islands in the South China Sea and aircraft carriers... https://original.antiwar.com/dave_decamp/2020/07/19/the-us-h...

As for the US again, they tried sending diplomats to Taiwan, which is like 1 step away from formal independence. They knew full well that doing this will trigger an aggressive response from China (and would have since 1949), but they still went ahead and did it. This still amazes me because it was the US in the 70s who co-created the One China Policy in the first place.

Like I said: multiple parties are hell-bent on forcing a violent resolution. For no concrete gain that benefits anybody.
Serious question, how does that hurt the original project? This has never been a concern in the projects I’ve worked on. Getting mad every time some developer writes code that didn’t go to your project is a good way to be mad all of the time.
Remember when Apple announced that ZFS was going to be their new file system?

Still waiting: https://arstechnica.com/gadgets/2016/06/zfs-the-other-new-ap...
The hardware is reporting the errors to the kernel but not crashing the system. It's "difficult to detect" because unless you are specifically monitoring for those stats, the only issue you'll see is degraded performance on an occasional machine (assuming you are watching carefully enough to even discern the performance delta). Some of the error counters are even predictive of an issue rather than something that is actively impacting performance. The FB software is basically scraping those messages and bus stats into JSON that can be consumed by their monitoring infrastructure.
Taito announces mini arcade cabinet with rotating screen and trackball
That’s what I thought-sounds much like the great stuff coming out of Chris Buckley‘s group.

The authors even refer to that work in the abstract. The “breakthrough“ seems to consist of showing that the method produces the same results as vanilla backprop.
If you want any business done for you, you should ask a busy man to do it. - W.J. Kennedy, 1856

Or, less charitably, the Gervais Principle strikes again.
He has now been called in to testify in front of congress on it ... twice. However insignificant the dollar amount, knowing the details of it is his job.
In Europe, Teslas and Tesla chargers are CCS - but limited to Tesla only.
I rarely see Teslas on non-tesla fast chargers.
Yes, there can be good reasons to fork (especially after making a fair effort to have things fixed), and bad reasons.

But also yes: There are two particular issues with bpf tooling forks. 1) They look deceptively simple, but those that are kprobes-based are really kernel-specific and brittle, and need ongoing maintenance to match the latest changes in the kernel. One ftrace(/kprobe) tool I wrote has already been ported a bunch of times, and I know it doesn't always work and one day I'll go fix it -- but how do I get all the ports updated? No one porting it has noticed it has a problem, and so the same problem is just getting duplicated and duplicated. Which is also issue 2) Unlike lots of other software, when observability tools become broken it may not be obvious at all! Imagine a tool prints a throughput that captures 90% of activity and no longer 100% (because there's now a fast-path taking 10%). So the numbers for some deep kernel activity are now off by 10%. It's hard to spot, and that increases the risk people keep deploying their old broken ports without realizing there's a problem.
The story goes that Hyrum tried to call this "The Law of Implicit Interfaces", but within Google everyone started calling it Hyrum's law and that's what's caught on.
> Red Hat (now IBM)

Red Hat may be owned by IBM now, but it hasn't yet been subsumed into the big blue blob.

Obvious example, Red Hat offers various supported or managed Kafka products. IBM just partnered with Confluent.
With the ME disabled/removed
People have been discussing a possible lab leak for well over a year. For the most part commenters here on hackernews have been close-minded, arrogant, dismissive and probably wrong. disgusting.

I don't actually care much about the lab leak hypothesis. So I don't have a dog in that particular fight. I think contagion itself is a myth. See the work of Dr. Tom Cowan if you are interested. I just don't like the arrogant attitude I see on display here all the time, on so many topics. People wielding beliefs, opinions, and "scientific consensus" as if they were facts, and there is nothing left to discover about biology or wider sciences.

Guess what people, human understanding of the natural world is moved forward by those who DO NOT AGREE with scientific consensus of the day. The heretics are the interesting ones to follow, not the rest of you lot.

I'm quite frankly glad to see a bunch of you eating crow right now. You should.

Good day
I bought a bicycle like that. It had 10 year full warranty given that I would get a service check each year at the bike shop.

It came with a service card where the price of each service check was listed. And while the price didn’t exactly double each year, they grew exponentially and would have ended up more than doubling the price of the bicycle.

I ended up forgoing the warranty and decide that a new bike was a better option.
Google Chrome to Help Users Identify Untrusted Extensions Before Installation
Reminds me of when Apple started providing "smaller size updates" to OS X. I was curious about the details since my doctorate had touched on the topic, so I worked my contacts (I had a few in Apple engineering from the FreeBSD / OS X relationship) and after a few months I got back as answer: "We're using a tool called bsdiff, are you familiar with it?" I was indeed, since I was the author of said tool.

(Just to be clear, there was no license violation involved in this case; just a lack of awareness of the provenance of the open source software they were using.)
I guessed it right away, but had no one to see my glory
Nice story and judging by it congrats on overcoming your "low-key" austrailian manner handicap ;)
Where does this expectation come from that a rich organization or person using open source software should be paying for it? That’s against the entire spirit of the open source license in the first place.
You can still use gplv2 if you like. The auto-update clause is optional afaik, and lots of projects are gpl2-only.

I suppose you're right though in as much as it splits mindshare.
Lots of people with lots of resources tried, and made pretty good phones/OSes - Nokia, Palm, Microsoft, Blackberry.

They all fell down on the lack of apps.

If your phone doesn't have apps for Facebook, Instagram, Twitter, TikTok, WhatsApp, LINE, tens of thousands of banks across the globe, credit cards, transit cards, various government ID schemes (try booking your vaccine in Sweden without an iPhone/Android) etc etc you'll never make it.