skysight-inc/HackerNews huggingface dataset:
> 2. Use real authentication rather than network firewalling.

This is in vogue but it’s wrong because it presents this as an either/or.

In reality, people are going to goof up and auth flag at one point, accidentally bind a service, or just run a service with a 0-day (a.k.a everyone).

There is no reason to run a server accepting traffic from every IP if your clients are coming from known ranges.

People see the zero trust model and mistakenly think it means no network-level filtering. This is completely wrong and all of the big players still protect backend services with network ACLs on top of required auth.
A 2 hours long game, at a descent price, is a plus to me. I abandon a lot of games because they get boring after a few hours.
Arguments before commands.

For example, "rm -Rf /" would become "/ rm -Rf".

I'd do this for two reasons: 1) it's more common to edit your last command than your last argument, and 2) you can't destroy anything by accidentally hitting return at the wrong moment.
> SWE can pay upwards of $500-600k after 5-10 years of experience.

Where? lol
Sure. The only way to create quality software at a reasonable cost is to start out solving a really small, specific use case, get that implementation robust, performant, and with few defects. Then expand into another small, specific use case.

This was known already by the pioneering software engineers in the 1960's. There are two things pulling us away from it:

- Business naturally wants to tick off as many boxes as possible on a feature list. This leads to software that purports to do many things, but do them all quite shittily. Like Deming, I believe this is a swindle to acquire many customers in the short term, but screwing them over and losing them long-term.

- There's some sense in trying to generalise the code, too: sometimes that leads to cleaner and more readable code. Often more easily testable code. Well, maybe. It's a very difficult point of judgment, and I personally get it wrong quite often.
This is also my understanding. The lowest visible frequency is close to half of the highest visible frequency so there might be some harmonics at work in this mechanism.

When I set my LED lights to RGB(0.1,0,1), it looks very much like my blacklights (UV LED, or 405nm lasers. and maybe I should get a tube to compare). I can tell them apart because the physical offset of the R and B LEDs makes a bit of visible fringing, or maybe it's that the single violet photons are coherent (with themselves) whereas the red and blue photons are not, or maybe the retina is a subtler instrument than its simple physical description suggests.
Tink Is Joining Visa
The middle ground is that it's fine to invest in stuff which is characterized by volatility as long as the consequences are on your own account and you can justify the reasons to do so. Apart from the fact that most media outlets thrive by feeding a bi-partisan story, there's in essence only yourself to blame. The crypto market as of now has a lot of similarities to the pre-2000 Internet bubble. Lots of shitcoins and creation of a large bubble. The fact that incumbent investment firms and companies are looking into it doesn't mean they have it right. Time will tell how this all plays out.
You’re aware Top Gun is fictional, right?
That's a fair point, and I don't know what the solution is. Thanks for engaging with my post in good faith.

Self-ID in particular is a salient issue in the UK because the Conservative government had plans to implement it, but recently scrapped those plans in favour of the existing system (trans people in the UK can get legal recognition of their gender change but it's a medicalised process that takes one year; the proposed changes would have made it as easy as signing a single piece of paper.) I don't know what the perfect system looks like, but we need to be able to talk about edge cases.

By the way, Karen White wasn't suspected of being a "secret rapist" - she was a rapist. The reason she was in jail in the first place was that she had been convicted of raping women.
I'll throw my random feature request in here since everyone else is:

Ability to write github comments as org mode instead of markdown
And by doing the best, you mean doing the most to pervert that system into a hereditary feudalismn for own reproductive fitness, just like happened everywhere this was attempted.

It starts with placing kids in better schools, cheating, disabling help programs and ends up at modifying tests to serve themselves better.

And most importantly, by design creates an underclass of undesirables. People less able or outright disabled, who could be used by others to seize power.
For Chisel, the most popular tester Treadle has VCD dumps built in. That way you can do your behavioral debugging directly with the source. Of course, for anything involving timing etc you'll have to go with the relevant vendors' tools, which is typically Verilog/VHDL.
It recently dawned on me that one of my tenets is just the flipside of the Rule of Three.

People are very good at handling rules with one exception. All mammals are live birth except platypuses. All accounts have foo unless you live in California. Et cetera. Two implementations of a bit of logic is just a case of this.

When you get to three cases, you’ve lost the plot. You have to reformulate the question to restore the two-ness of the system (even if that’s splitting it into two twos), otherwise it doesn’t scale conceptually.

YAGNI isn’t a rule, it’s a dismissal. A dodge. A cop-out. As such, it gets misused, all the time. Anyone who wants to sound smart and be lazy will just say YAGNI, and it takes a lot of experience with a person to know whether they’re just lazy or lazy like a fox.

The Rule of Three is concrete. It contains a contract/escape hatch which prevents inaction from becoming unbounded.
The exported styles are compatible (if you don't use newer features like terrain & fog) because Maplibre is nearly identical to GL JS v1.13, there were no rendering changes since the fork.
My thoughts exactly. A single green point light...
I know the text stream interface has lots of limitations and formats are often unspecified or underspecified.

I would just add that if you happen to have numbered fields with consistent delimiters (and no quoting or escaping of delimiters), you can do all of these things with cut, sort, grep, and head, to say nothing of awk, which can typically do them in a single line.

ls -l foo/ | awk '$NF == "bar.baz" {print $NF, $5}' | head -10

The numbered fields with consistent delimiters part is a big if, and of course the fields are numbered and not named, so you don't get to do the "name,size" thing (you have to know explicitly that for this particular command, the filename is the last field and the size is the fifth field).

One direction that some people have gone is to treat JSON as a universal form of structured data (where text is a universal form of unstructured data). You could rebuild many Unix tools or near-equivalents to work well with JSON records instead of, say, lines. Your pipe example would be pretty straightforward in jq if you had a version of ls that gave you JSON outputs.

Here's a crummy, primitive version of ls that gives JSON outputs. :-)

#!/usr/bin/env python

import json, os, sys

ret = {}
for arg in sys.argv[1:]:
here = {}
for entry in os.listdir(arg):
path = os.path.join(arg, entry)
stat = os.stat(path)
here[entry] = {
"size": stat.st_size,
"ctime": stat.st_ctime,
"atime": stat.st_atime,
"mtime": stat.st_mtime,
"uid": stat.st_uid,
"gid": stat.st_gid,
"mode": oct(stat.st_mode)[2:],
}
ret[arg] = here

print(json.dumps(ret))

With that, you could then use jq to do various kinds of selection and aggregation. (The specific data model here is probably not right yet, because it allows, and requires, exactly one level of subdirectory nesting in each listing.) I'm not sure how the jq learning curve (combined with JSON-refitted Unix tooling) would compare to something like PowerShell, which is super-verbose compared to Unix traditions.

Apparently there are several ongoing efforts to create Unix shells that use JSON or other structured data more natively, but I have yet to try any of them.

https://ilya-sher.org/2018/09/10/jq-is-a-symptom/

https://github.com/ngs-lang/ngs

(also see the numerous shell projects linked from the NGS GitHub page!)
I'm not sure I agree. Some of the best Scrum Masters I've worked with was not developers, but peoples person with great process optimization skills. Some of the worst I've worked with have been developers or product owners that failed to separate their roles.
> This situation is more of a script kiddie than a hacker.

Is this a useful distinction? Define the sharp line between a "script kiddie" and a "hacker".

You're describing a person who detected your vulnerability and acted within a 3 hour window of it appearing and closing. If I were you I'd be more focused on reflection and not on putting labels on whoever hacked you.
Brave’s nontracking search engine is now in beta
> Egypt, Mesopotamia and the medieval Islamic cultures survived especially well in their extremely dry climates. And they had no violet in them at all.

In ancient times purple was a luxury for dying clothes, even in medieval times, and harvesting sea snails for the dye was lucrative business between egyptians, phoeniceans etc. so how come they claim we can't see it?

I dont think their claim is true. What's next? "Why it took us decades to see rounded corners"?
Anything that modifies sleep is not healthy.
Weapons used in WWII were different. There's no use for aircraft carriers now in a global conflict.

It is only an instrument to punish countries that are not willing to give up control of their natural resources (mostly oil-rich countries in the Middle East).
Alas, John McAfee, We Hardly Knew Ye
is there a small home kit way to do this?

All the ones in coffee shops i've seen involve an awful lot of tall glasswork...
Dutch consumer assoc. claims €1.5B in damages from TikTok
Human engineering to fight against climate change
Information Is Power: Turning Product Hunt Data into Actionable Insights
Hi guys,

I don’t know about you guys, but I’ve always been a big fan of Product Hunt. So, in celebration of our launch on Product Hunt, we decided to demo Veezoo (our simple AI powered natural language tool to ask your data anything) for founders, geeks, and investors everywhere by analyzing Product Hunt's site data to provide interesting, actionable insights for those looking to understand current startup/tech trends.

Data has been dubbed the “new oil” upon which empires are built. Yet, despite its potential value, most insights remain difficult, if not impossible to unearth without the use of artificial intelligence — which often brings it outside the realm of your everyday employee.

At Veezoo, we believe everyone should be empowered to use data-driven insights to improve their work, productivity, and performance without having to call IT or the tech team and then wait days to get an answer. That’s why we created an ultra-simple, chat based AI interface to enable anyone from the insurance salesman or financial analyst to the ecommerce owner or early stage VC to find their “needle in the haystack” through simple questions, fast answers, and invaluable insights.

In celebration of our launch on Product Hunt, we decided to demo Veezoo for founders, geeks, and investors everywhere by analyzing Product Hunt’s site data to provide interesting, actionable insights — especially for those looking to understand current startup and technology trends.

Try the Product Hunt demo here: https://veezoo.com/PHdemo

To do this (and also show off a bit more what Veezoo can do :), we created an analysis into Product Hunt Trends and Insights including:
- Trending Topics on Product Hunt
- Top Product Hunter insights
- Tips to Maximize the Success of a Product Hunt Launch

For the rest of the post with the charts/graphs/videos, visit:

https://www.veezoo.com/blog/veezoo-product-hunt-launch/
Well, if you can afford a cheap VPS, you can use something like WireGuard or OpenVPN to work around NAT - just forward all of the requests to the VPS to your own box instead.

I did it a while ago and it seems to work fine to this day: https://blog.kronis.dev/tutorials/how-to-publicly-access-you... (disclaimer: forwarding ALL ports is usually overkill, unless you're lazy like me)

Alternatively, just ask your ISP for a static IP address, even though that could be more expensive.
God this is Good. It also capture so much not just on Trello or Jira but Software in general.
> One possible solution to such problems is to prohibit paying ransom by law. Hackers can still be destructive, but at least they will have less incentive to participate in such activities.

One possible solution to rape is that women walk around with a bomb and if someone tries to rape them they kill themselves and the attacker. Rapists can still be destructive, but at least they will have less incentive to participate in such activities.
Money isn't relevant but reputation is. My primary school was best is county(so like best/2M people). I would bet that without it I wouldn't be where I am now.
I know how drastic difference is because some of my siblings went to local school.
Most difference IMO is in seeding ambition and giving motivation and encouragement early in life.
I was just told I can achieve anything I want and I just know it, while all they got was fear, dumb teachers and punishment for out-of-the-box thinking.
Actually teachers unions are why you can't fire the worst teachers there.
I think you cannot get really rich without knowing such people and easiest way where people mix are extracircullar activities so I recommend sparing some $ for kids on those.
Avoiding unauthorized app stores because they might have apps than contain malware would be a stronger argument if Apple's own app store didn't also have apps that contain malware.
Most crucially, a true meritocracy would fire people at will whenever a better applicant surfaces for any position. What currently happens is that we get many "has beens", or people who seemed ok at the time but are actually getting bad results.

Plus, to judge results you would need either objective criteria or average of many opinions like in democracy.
> Might I ask where you found a $16/year VPS, and whether you'd recommend the provider?

Here is how you can get the answer to this question yourself:

$ dig <website-domain>

you'll get its IP(v4) address.

$ whois <IPv4>

you'll see to whom this IP is registred via RIPE.

In this case, you can find that the AS it belongs to is also a host provider. They sell KVM hosts for $15.95 / month.
Are these the jobs based in Israel?
> So I wouldn't be surprised if we at some point see some attempts to keep sw-developers accountable for what they give out.

Wow, the level of entitlement around open source is appalling. People download and run shit for free and get mad that they didn’t configure it right and want the government to go after the maintainers.

I can’t wait for the day where us open source devs have to contribute patches via pseudonyms and tor because they aren’t “government compliant”.
About those benefits of having a US passport, could you mention a few of them? Because I'm a US expat and wondering why I have to keep filing tax returns but receive no benefits whatsoever. A number of important examples:

Being a non-citizen in the country I live means I am at the end of the queue for vaccination, while the US State Dept says it won't arrange for vaccinations of US expats, but countries like France and China are doing it for their citizens.

I can't maintain a bank account in the US because without a US mailing address the banks simply refuse to provide me services. The US government could care less, has no requirement that banks provide services to US citizens overseas.
Here in Europe you're unlikely to break $100k in that time.
GA too. Surprised Athens, Sparta and Cairo didn't make the cut.
Agreed. But for a completely different reason. This drone "violated restricted airspaces – including those of an Air Force base", not to mention the involvement of the CBP and local law enforcement, but I don't see any mention of the military being involved in the chase OR investigation.

It's not like it would be the first time a military (or even the US military, probably) hid info from their civilian counterparts.

(Of course, a much less cynical explanation is some sort of drug smuggling. How much batteries and drugs could you fit on a ~15sqft quadcopter?)
> we're still far off from implementing anything remotely similar to what you've just described

Absolutely. Well, you can do poor implementations of quite a few of these already but not at all at the level that would make them compelling yet.

But that's not surprising. True AR has all the same challenges as VR plus realtime detection, location, registration, occlusion, lighting... And much stricter constraints on portability, brightness, etc.

But you shouldn't be surprised that something with so much potential is interesting to people.

> augmenting reality is easier than virtualization it

Not at all! It's massively harder. Well, to do real AR (which in my opinion involves actual engagement with the real environment). To do floating HUDs is much less of a challenge, and also much less interesting.
I've setup some raspberry cluster a while back only to find that after a few weeks of running, the sd card would get corrupted for some reason. It was some combination of samsung card and sandisk cards that had the same issues, so I gave up on relying on raspberries in this way.
It’s the electric motors that are loud. Fixed wing still suffer from that, though not as loud.
The solution is to stop playing the bullshit game of Taiwan non-recognition, give it a seat in the UN and protect it.
That was a theory for MH370
Why not retractable wings quad/multirotor? Would have long flight time (especially with a gas engine) and be able to "disappear" by retracting the wings and speeding straight up or down.
The pandemic showed remote proctoring to be worse than useless
And Gacy, he had a fantastic reputation as an upstanding community member for years before his atrocities were discovered.
TSMC are a critical piece of the world's infrastructure. The fact that car makers are grinding to a slowdown and for particular assemblies, a complete halt, is very telling. The automakers themselves now fully appreciate just how critical TSMC really are. If they weren't critical, then they'd already have an alternate supply ready right now. But they don't. Its TSMC being pressured to increase production capacity, not an eager competitor taking up the slack. They wouldn't be furloughing employees otherwise. The Germans and many others wouldn't be sending letters to Taiwan requesting higher production. So TSMC is critical.

Does this mean there are absolutely no alternatives? Likely not, but TSMC are essentially the only game in town. At scale. At quality. With a useful track record of known production characteristics.
Can you mention some of those benefits?
Maybe it's time to make a service that transforms those videos back to GIFs, like the services that expand tiny urls...
While I was discussing the same with my friends in the industry, came to know about the following facts:
1. Even though resolution is high, drift of min 5m is there for the best of the satellites i.e. relationship between image and gps location. Also given the drift is random, harder to correcct.
2. Indian Surveys require Ground sample distance of around 3mm, drones can get this flying at 50 m height, getting the same from satellites would be too hard and expensive.
> Koopmans says, adding that the preprint’s accusations could harm future collaborations on origin studies with Chinese researchers.

Does anyone thinks this is a wrong way to look at things? I haven’t read it, but if it’s just a hypothesis / fact finding document, there is no accusation.

Seems odd we have to tiptoe around this “or else” argument according to Koopmans.
Google will consider lowering Play Store cut to 15% for certain apps
Fogbugz is Fog Creek :-)
> Then consultants go to jail.

Because they'll just call 911 and say "I just paid ransom under cover"?

You know this is why incompetent lawmakers terrify me. They believe they can just be "tough" and everyone just falls in line instead of trying the infinite loopholes you leave open, each of which is a better outcome for them than the draconian path drawn by the law in spirit.

If you make payment illegal, not only you're punishing the victim, you're adding a STRONG INCENTIVE for them to keep the whole thing a SECRET.

You're shooting your own foot.
> When I containerized MongoDB, Docker helpfully inserted an allow rule into iptables, opening up MongoDB to the world.

Yeah I had the same problem. If you are not using orchestration engines like Swarm of Kubernetes you can just avoid it by explicitly binding the port to your local interface (i.e. -p 127.0.0.1:27017:27017 instead of just -p 27017:27017)
More on this from The Verge [0].

[0]: https://www.theverge.com/2021/6/24/22547934/google-play-app-...
If Xi considers unification to be his legacy, there is a high risk of invasion.
Understanding Artificial Intelligence Through Algorithmic Information Theory
He stated he made up the superdrug on his loggiaonfire site a few years ago to fuck with people & send them on a wild goose chase. The specificly colored artificial drug at least, which he had claimed was the perfect synthesis vs the other colors or w/e
South Korea is not 100 miles from China and has a massive US military presence. This article is about the very real danger that China invades Taiwan - which it has already stated it wants to do (in case the military flyovers were not convincing) - and cuts off the world from the best silicon.
> The critics are talking about Software Engineering (~1/3rd of the company?)

It's closer to 2/3.
great post and my favorite CS topic, LSH is particularly relevant to machine learning because of its use in indexing of embeddings, which are now omnipresent in ML (from word2vec to transformers to image and graph embeddings etc, etc.)

it is now supported in ElasticSearch KNN index (they use HNSWLIB but you can call it a descendant of original LSH in a way)

check out ANN benchmarks [0] for comparison of LSH performance to other state of the art methods like proximity graphs/HNSWLIB [1] and quantization/SCANN [2]

As an introduction LSH (with MinHash) is also described in detail in the book "Mining Of Massive Datasets", ch.3, "Finding Similar items", highly recommended [3]

if you want to play with LSH, python "annoy" library is the best place to start [4]

[0] https://github.com/erikbern/ann-benchmarks

[1] https://github.com/google-research/google-research/tree/mast...

[2] https://github.com/nmslib/hnswlib

[3] http://infolab.stanford.edu/~ullman/mmds

[4] https://github.com/spotify/annoy
Here is another one. World relies on only one relatively obscure dutch company for its EUV lithography equipment. For DUV the market is divided between 3 players two in japan and the aforementioned one. Apps market for semiconductors is also cornered by two companies. This whole space has consolidated in last decade or so. Everyone wants to have full control over their supply chain, so everyone is trying to buy their entire supply chain.
Most people who use Teams on their phones, are doing it as part of their jobs, and the teams client and instance is provided by their employer - as such the phone typically has to align to a certain set of security requirements, including storage encryption and PIN/password locks.
Any relation to: https://en.wikipedia.org/wiki/Rolling_hash ?

Also I wonder if hexagonal lattices were a better choice for the 2D use case. Having multiple randomly sized, shifted and rotated hexagonal lattices would come very close to: https://en.wikipedia.org/wiki/Grid_cell