skysight-inc/HackerNews huggingface dataset:
Funny thing is I agree with you that Google should hold itself to that bar, but I don't agree as to Project Zero being the reason. I think we very much should distinguish Google from P0, and that P0's policy should be irrelevant here; their entire purpose is to be an independent team of security researchers finding vulnerability in software, indiscriminately. It seems a number of others here feel similarly (judging by the responses), and ironically their support for the position is probably being lost by dragging P0 into the conversation.

The reason I think Google should hold itself to that bar is something else: Google itself claims to use that bar. From the horse's mouth [1]:

> This is why Google adheres to a 90-day disclosure deadline. We notify vendors of vulnerabilities immediately, with details shared in public with the defensive community after 90 days, or sooner if the vendor releases a fix.

If they're going to do this to others as general company policy, they need to do this to themselves.

[1] https://www.google.com/about/appsecurity/
Skip the meeting saying you have another meeting to attend to,

later ask for "Action Items" "Meeting notes".
Tuxedo Stellaris 15 Linux Gaming Laptop with AMD Ryzen 9, Nvidia RTX 3080
macspoofing said elsewhere ITT:

> DOM mutations are not the expensive thing, it's the final render.

This is the crux of the issue: Updating the DOM will immediately rerender the page, even if there are additional changes that need to be made at the same time. So library/framework authors twist themselves into pretzels trying to work around the browser automatically doing all this unnecessary extra work that developers don't even want. Clearly it's a DOM api deficiency; there is no api to 'make these 15 changes scattered across the DOM all at once', instead each individual change causes a cascade of wasted effort repeated until the last change is applied OR developers take the nuclear option and just replace the whole damn page with a completely new DOM on every frame. Insanity. The solution seems obvious to me:

Browsers should introduce a transactional DOM api that is only rendered after the transaction is 'committed'. It could be full-on transactions like a real DB or something simpler like a double-buffered frame swap. This would be relatively easy to retrofit into JS apps and frameworks and would enable them to effortlessly avoid a huge amount of wasted effort on the part of the browser.
Didn't say it was good advertising.
This is deeply saddening.
Some nice internals of these gems here: http://www.corestore.org/cm200.htm
What outcome does a domestic vaccine passport achieve? I work in health information privacy, where regulations were written to prevent that specific situation. There's no denying it's a proxy for political positions, so the case for it needs to be clear, especially in a world where people say in public that it is "irresponsible," to entertain critical opinions.

What problem does a domestic vaccine passport solve?
I suspect this is a reference to the specific feature infinite/virtual scroll. The DOM nodes are only materialized when you scroll near them. CTRL-F is not able to find text that isn't currently in the DOM. If you scroll it into view, it suddenly starts working.
I wish there was something mentioning the tightness of the labor market. If workers are plentiful, is there as much incentive to automate?
>a study of 52,238 patients showing zero incremental benefit from the jab to the previously infected

This study ended May 15, 2021, and it notes that:

>Lastly, it is necessary to emphasize that these findings are based on the prevailing assortment of virus variants in the community during the study. It is not known how well these results will hold if or when some of the newer variants of concern become prominent.

Another study found that, for people already seropositive for SARS-CoV-2 antibodies from a previous infection, getting the first dose of an mRNA vaccine increased antibody titers by two orders of magnitude on average [1] but that the 2nd dose had no effect on antibody titers.

[1] Florian Krammer, et al. "Antibody responses in seropositive persons after a single dose of SARS-CoV-2 mRNA vaccine." New England Journal of Medicine (2021).
https://www.nejm.org/doi/full/10.1056/NEJMc2101667
I feel like it goes to show that there can be times when we're really blind to these sorts of things. When I look back and watch older media like that, it helps me be more conscious of the assumptions baked into content today.
Martin Fowler is not "Uncle Bob". And "thank you for stating the obvious" is usually an insult in American English.

If you're wondering why you're getting downvoted, might be one of those.
https://www.amazon.ca/CPython-Internals-Guide-Python-Interpr...
This feels like the kind of essay describing a thing that, if you have to be told about it, you don't have it.

I'm on HN during my work day. People who "work hard" probably aren't. They probably only know about pg through direct connections, not through idly scrolling the Internet bored one day.
Depends how much you value salary..wouldn't necessarily measure yourself by it
Maybe there's some setting I'm missing, but the default android experience seems to be Chrome downloads a pdf which then is read by Google drive.
This seems to work really well in cases where you're just laying down boilerplate. A few cherry-picked comments seem to suggest that React components are an ideal use case - which makes sense, that's a lot of munging and syntax to just render some strings.

However, I find the process of writing these sorts of functions cathartic and part of the process to get into zen-mode for coding. I think I'd feel less joy in programming if all of this was just done by glorified commenting and then code-review of the robot.

I like to think of coding in terms of athletic training, which usually is comprised of difficult tasks that are interspersed with lighter ones that keep you moving (but are giving you a bit of a break). Training for soccer teams often involved lots of sprinting and aerobic exercise - and in between those activities we would do some stretching or jogging to keep our body moving. These sorts of small functions (write a function to fetch a resource, parse an input payload, etc.) are when my brain is still moving but getting ready for the next difficult task.
Very good communicator. And one of the most 'balanced' speakers. I have seen a few people get so stuck in topics that they forget about the bigger contexts (for example, craftsmanship, microservices). He always looked pragmatic in his approach (for example, tech debt). Possibly because he is not only a consultant but works for a company that delivers things into production- and comes up with radar).

He can explain the overall concepts very well. You can then go into details. (Refactoring book, UML distilled, NoSQL distilled, etc. I even learned LMAX first from his bliki.)

Going by blogs on his site and his signature series books, I certainly look forward to things he will write/ contribute to.
Awesome, thanks for the detailed response!
I hope Thread[0] and Metter[1] will solve that problem

[0]: https://www.threadgroup.org/

[1]: https://buildwithmatter.com/
anonymous non-checked untested code is problematic in all cases. This doesn't change that.
If you wait 21 days after the first dose, or 14 days after the second dose. Unless everyone had their second dose 7 days after the first one you still don't compare the same thing.

We need something like, 21 days after the first dose, and split the result between people who got one dose and those who got two. We also need to make sure that the repartition of ` age since first dose` is the same for the two doses group and the single dose group.
You remind me of a coworker I had four a couple of years. He and his wife were both extremely competent and well-compensated programmers. Their lifestyle was basically "work for two years or so, save up a bunch of money, then quit and wander the world doing whatever they liked until the money ran out, repeat." I've thought about them several times. Some part of me is really, really uncomfortable intentionally living off of my savings for a prolonged period, but I also sometimes wonder if they haven't figured out something important that I haven't.
That's incorrect. "Whisky" is not simply a Scottish spelling of the word for grain spirit; in Scotland, an Irish or north-american spirit will be spelled with an "e".
This looks amazing!
I was going sign up for the preview and stop immediately after reading the additional telemetry that is scrapped from my IDE, Microsoft would basically be allowed to steal my code and see it whenever they need. Including unintended snippets like local (git ignored) secrets and any sensitive information that it might catch without my "snippet by snippet" approval and not way to ignore files (afaik).

Until this is fixed, good luck but not thank you Microsoft.
I cannot multitask. At all. Listening and writing are two different tasks and I cannot do both at the same time. If you ever see me writing in a meeting you can know 100% that I am not able to listen to anything being said while I am writing. I am amazed by people who seemingly can both write and listen at the same time.
https://en.wikipedia.org/wiki/Variants_of_SARS-CoV-2#Overvie...

> My understanding is variants of highly dangerous viruses rarely keep the high level of risk as the progenitors.

Even if that's a general trend that doesn't mean it's a rule. And the rationale "a dead host isn't as useful at spreading the virus" doesn't really apply to covid since only a small percentage gets hospitalized or dies, most infectees remain fit enough to spread it further.
I also grew up on the East Coast.

My first "real" job out of University had me pinball around the continental US, which eventually lead me to California.

When I drove down from Washington [state], I passed through a grove of Redwoods. Having never been to California and never seen live and in person Redwood trees before, I took a few minutes to pull over and chill.

Clearly an experience I still remember.
I think it's the other way around: it won't reach stage 4 until that is resolved.
WTAF? Was this supposed to be some kind of security thing?

This misreads the room so badly on where people are at in 2021 when it comes to the idea of tech companies and consumer privacy.
I was pointing out that he doesn't seem to have considered it within the text you mentioned. Perhaps it appears elsewhere, though it doesn't appear to be tending that direction.

The problem, as I see it, isn't even about incitement to violence. There's plenty of Holocaust denial that isn't an incitement to violence, unless by stretching that term far past its breaking point. It's not even really hate speech, in a strict reading of that term -- it only becomes defined as "hate speech" because we know that it originates from people who have had more explicit hate speech restricted.

But that doesn't mean it's without harm. These "questions" are really assertions that rather than being killed en masse, Jews have in fact inflicted great deception on the world. That creates mistrust -- sometimes violent, but more often merely prejudicial. Those prejudices can take effect in myriad ways, impossible to trace to the questioner, but nonetheless real.

Would a smart person like Hitchens be fooled by this? Surely not. But then again, he doesn't even seem to consider that it's a possibility. As you say, he seems to think that violence is the only way harm could be inflicted, and nothing else seems to be involved. That's a blind spot.

That blind spot is important here, because his entire argument is based on "Let people make their arguments and surely we'll come to the right conclusion". I don't believe he himself is capable of coming to the right conclusion because he's missing something right in front of him -- something somebody must surely have pointed out at some point, but which he doesn't even consider to be a problem worth mentioning.
People have made some variation of this argument since the move from writing binary to writing assembly.

With every new layer of abstraction there’s more power.

The long term benefit of a tool that can do this well far exceeds what humans can do by hand, but that may not be true in the very short term.

Either way, I suspect the benefits to be big.
JSX is exactly a customized template DSL. It's not a particularly difficult one, but that's exactly what it is.
What are you even still trying to argue?

First you claimed antibody tests are inaccurate, which is totally false.

Now you're worrying that there are too many antibody tests...? Just like there are 3 vaccines, at least in NYC there are/were only 3 or 4 main antibody tests administered by the city.

It's super easy. Basically nobody's anti-antibody test the way there are anti-vaxxers, so it's actually a significant proportion of the population. And you know what? Being sick and useless for a day or two is actually a big impact on people's lives, I don't know why you're so uncaring.

It would obviously be beneficial if the commonly recognized antibody tests carried the same weight as a vaccine card, i.e. an equivalent standardized "antibody card".
For me the similar thing was when I started to read HN, 3 years ago.

It wasn't until 3 month before graduation, when a guy at the lab that I admired suggested HN and all the hustle culture and the background stories of successes was available first hand, that I started to get truly anxious about the time I felt like I wasted/ was wasting during college. Playing games are really hard now, so is watching movies. My list of movies or clips that I'm supposed to see on downtime is filled with daunting "productive" materials.

Also created the bad habit of quitting (job) when I feel like I'm stuck or "not growing/improving" due stress. The mentality of having to "constantly be productive" also caused strain in my personal relationships.
He is right on all counts about Bitcoins, Tethers, Lightning and so on, but I still wouldn't short crypto today. Irrationality is still building up and opinions of crypto adepts are "buy". At least I think so by reading forums. If I had to guess crypto will require a large external event to crash - Taiwan annexation, Zeta variant of Covid, Russia invading Eastern Block etc. Something which will prompt one or more large players to get out first, and then it will start falling down like a house of cards because of Tethers (and now USDC are suspect too).
Ask HN: What Are Your Programming Pet Peeves?
I think my biggest programming pet peeve is people shooting down my long variable names.
I don't make all my variable names long. IMO, I make them all long enough, and I hate when people tell me to shorten them, as those names are often some of the things I've thought the hardest about in my PR.

Consider these two names:

car_to_base_new_car_from

base_car

What's the difference? Do they have the exact same connotation to you?

I would agree that they're pretty much the same, but I think they have slightly different connotations. `car_to_base_new_car_from` to me hints that a new car could be based on any other car whereas `base_car`, although it could mean that, doesn't necessarily nudge me in that direction (Maybe it's a mostly empty skeleton car that is used in all situations--who knows).

Note: I also think that in certain situations `k`, `v`, and `i` are perfectly acceptable names (obviously depending on your team and language community).

This is all very situation specific, and, although it kills me sometimes, I typically don't push back too much on this type of feedback.
That reminds me of how the "X-killers" never are in practice. Whatever they sought to surplant never got that way by seeking to just kill the previous one - it got there by doing something unique. The very concept is dumb political rhetoric which is bullshit in the "insensitive to truth or falsehood" sense. Everything out of their proverbial mouthes screams duplicity and a hunger for seizing power under false pretenses.
> It’s not always been this way. When I was a kid at school I felt none of the fear of public speaking that others talked about. I enjoyed being on stage, and with my loud voice and plenty of confidence, I felt good about being there. That continued to be true once I entered the world of work, and my comfort on-stage did much to boost my career. But over time, this changed.

I am very curious about this dynamic, and why it changed.
Are you... complaining about downvoting on my behalf? How absurd.
There is SkyDB on Sia Skynet: https://blog.sia.tech/skydb-a-mutable-database-for-the-decen...
All your commits are belong to us
> Downvote me, the truth hurts.

I don’t think anyone cares enough actually

We aren’t triggered by this possible reality

There are limits to the etiquette and whats considered rude but it has shifted

Its the level of engagement, not the presence of the device itself
that's pretty simple. tar and encrypt all their data. put a DO_YOU_WANT_IT_BACK.TXT file in the root next to it and in there provide instructions to pay the ransom.
Moderna and pfizer both encode the spike protein identically.

"Follow up earlier post. Here is moderna/pfizer/wild type spike. There is only 2 amino acids different from wild to vaccine. Same for both vaccines. The change forces the protein to look like it would when stuck to the outside of the virus, without needing the rest of the virus"

From Thought Emporium on twitter (cool biohacker with particular focus on genetic engineering, but amazing breadth into physical sciences as well - I highly recommend his youtube channel)

https://twitter.com/EmporiumThought/status/14081777241920675...
Because authoritarianism is antithetical to our founding nature.

A centralized database that is used to control individuals is akin to China's social credit system. I've actually started seeing people argue for China style systems, and I find it both frightening and sickening.

When I start to push back at all, I usually get arguments like `Leave the US if you don't like it.`, and sure I'll just pick up and leave the country I was born in, but beyond that where will I be able to go?

If I just want my own individual rights, where in the world will I be able to go if what is basically the last bastion of freedom and individualism is lost to tyrannical majority rule?
The headline is wrong. The article is about mRNA vaccines in general.

Moreover, Pfizer is partner of BioNTech, which developed the vaccine. I don’t understand why OP omits that and solely credits Pfizer.
All personal opinion-

Puts are speculative gambling if no current position and a hedge if in a current position to the downside.

You can still hold your beliefs without putting on a trade. Why do you want to put on a trade that is inflexible on timing?

Bitcoin can be manipulated by tweets, incoming regulation, news, whales, etc. If you are not privileged to have this info then know you are in a game where you are disadvantaged.

Curious how others are shorting crypto.
Wonder if the current heatwave in the PNW is pushing some back into the office where there's air conditioning. If companies want people physically back in the office, either they need to find a way to make the office a nicer place to be than home or they need to somehow create a labor glut so workers don't have viable alternatives. The former is easier to accomplish than the latter but I suspect they'll mainly be moaning and groaning instead of changing the office environment.
In his small scale test (which I admit is far from perfect at isolating sources of sound), he shows that both ICE and electric cars are both way louder than bikes. And both types of cars still have extremely loud horns. His thesis is that high background noise of cities makes people agitated and make cities uncomfortable places to live. So, yes, while electric cars do have no engine noise they still contribute massively to noise pollution and that awful constant hum of tires that engulf cities.
The government never distributes anything for free. They distribute it with money taken forcibly from citizenry. Be careful what you're asking for in begging the government to take care of you. They just may.
The thing about finding motivation is that you don't actually find it.

There are certain things you want out of life as a human being, and if believe your work is aligned with that, you'll pour your soul into it.

On the other hand, if you see work as a distraction from the rest of your life, working will be an uphill battle. I guess it's important to find work you care about, or find a deeper, more meaningful reason to do work.
Your last point is probably correct. Until WSL2 (and really WSLg) I didn't really consider having my dev machine run windows.

I also agree that the dark patterns garbage has to stop. If you want to shape my behavior, convince me it is in MY interest. If you are forcing my hand for your interests, I'll find someone better.
Might be worth looking into a beta blocker if it's adversely affecting your life that much.

"Musicians, public speakers, actors, and professional dancers have been known to use beta-blockers to avoid performance anxiety, stage fright, and tremor during both auditions and public performances."

https://en.wikipedia.org/wiki/Beta_blocker#Anxiety
Like others, this worries me. Does anyone know of a platform or service that backs up quality educational content (think Coursera, edX, YouTube lectures, etc.) forever, so that its open-access is not at the whim of a for-profit corporation?
>to imply that an entire race cannot overcome what we would consider a "moral deficiency"

It's a bit more subtle but in an important way: they say that no one can overcome it who posseses it. Which is why it's so important to define it in terms of "whiteness."
CLIPDraw: Exploring Text-to-Drawing Synthesis
> It was similar with Lionel Messi. He had great natural ability, but when his youth coaches talk about him, what they remember is not his talent but his dedication and his desire to win.

I can assure you, there are many kids that practice harder than Messi did when he was young. He is not a great player because of hard work, he is a great player because of luck. I know the VC thing about the importance of hard work. They love to promote hard work because that's how they make money. It's just plain silly to attribute Messi's greatness to anything other than luck - both his physical abilities and the environment that taught him how to fine tune his abilities.

Hard work is useless without that special precise knowledge of which work you should be doing. Few young soccer players know how to practice in a way to become Messi, even if they have the right body to do it. It's useless without being in the right environment too.

> Now, when I'm not working hard, alarm bells go off. I can't be sure I'm getting anywhere when I'm working hard, but I can be sure I'm getting nowhere when I'm not, and it feels awful.

That, my friends, is what a VC would love for you to believe. There's nothing sincere when someone in his position writes something like this. Because hey, if you're the 0.1% of the time that it works out, he gets rich. And if you're the 99.9% that wastes their time (like all the kids that never play soccer at the highest levels) he loses nothing.

I used to enjoy PG's writings. He's crossed a line where he believes that the only thing good in the world is what is best for VCs.
never heard of card skimming have you?
Paul Graham has really good stuff to say about things he knows about.

(And really bad stuff to say about things he doesn't.)
That's how I would describe working at Zipline, although I don't think anyone is looking for an exit any time soon. Folk still sweat about spending $20 on gear for projects that could save millions of dollars of NRE, not because of corporate pressure, but out of their own frugality.
Seems like in the context of this use case, the medical community would adopt the tests with the higher specificity, and there would be market pressure to lower the cost, if needed. Seems a bit of a reach to point to tests used for use case A to discount use case B.