skysight-inc/HackerNews huggingface dataset:
It isn't just boring. It's much worse.

Taking any kind of responsibility for a spec is a fools mission. In most shops, doing specs is not highly regarded work. You don't earn much respect or career progression. You will inevitably make mistakes and have failures that make you look foolish and incompetent. You will get blame for this, and other stuff besides. Your successes will be the invisible non existence of a problem no one expected. There will be no praise, no raise.

This is true for technical and non technical "owners" of a spec. A spec might be the most important and expensive thing a department head is up to. Most determinant of department success. They will absolutely not proceed without a liability shield between them and responsibility for the spec.

Heads-I-Win-Tails-You-Lose is just an extreme condition on the spectrum of mismatched odds in organisational world. The place where successes are overcompensated and failures undercompensated is the smart place to be.

Only fools go on fools missions.

More realistically, someone is hired for the gig. They maintain a strict CYA trail, documenting who asked for what using which system... and blame/responsibility is dispersed into the system. At this point, it's boring.
Yeah, but ARM64EC applications won't run on a x64 Windows. So you need to be able to deploy both (x64-version and ARM64EC-version).

Or did I mix up something?
It depends. Many small projects I'm involved in already have a docker-compose.yml with database, backend and other services. Combined with a private docker registry somewhere (Gitlab, ECR). If that is available I will use docker to deploy.

If that is not available, then it depends on how complex the dependency graph is. If it is simple and I can just `apt install` all dependencies then I'll wrap the install in an Ansible Playbook and use systemd. If not I create my own docker-compose.yml for deployment.

edit: when multiplexing multiple projects on the same host (happens with very small projects) I always use docker.
Not a problem up to 100,000 customers imp
There are cases where the business shouldn't promote the use of its website at odd hours (child protection, gambling addiction and other similar things).
The actual news is that one of the most comprehensive studies on the topic has just been published, confirming that "spanking can worsen a child's behavior".
Whoever's hosting it can still be found by law enforcement in the usual ways. Or maybe more idealistically we change society to remove all those taboos about people's bodies.
Limits exist, they're just undocumented. Fine for day-to-day expenses, not ok for business, real estate etc.

https://www.google.com/amp/s/labsnews.com/en/news/economy/br...
Wow, this looks promising.

Since my primary goal is just to "look and suck up" the information rather than actively practice (I know, it's not a good decision but whatever), this will be really useful, thank you.
It smacks of entitlement when dining at a restaurant is considered basic necessity and preparing your own meals is considered a luxury. Think about history. Think about the vast, vast majority of people on earth. Consider just how entitled one must be to have the help prepare your basic necessities of life.
Is it though? It is a binary format for Windows ARM, so you can mix x64 and ARM code there.

x64 or x86 Windows will still require the old binary format. So you once again have to build and deploy two versions.
$50M
> It's a mix-and-match of x86, and arm binary code, so you don't have to keep a two separate copies of every binary.

That's what a fat binary is. Multiple architectures supported by a single binary. In the simplest case, simply by including both, though some de duplication of data segments can be managed.
Communist data is public property.
> Ok, so why isn't there an option to just buy the thing at its actual cost without the subsidy and without ads? Are they unable to put a $ value on how much the ads will garner them over, say, a 3-year period?

That's the classical problem with ad-free subscription models: You remove all the people with cash to spare from your advertising pool, thus decreasing its value. At that point you might as well make the product ad-free for the people not paying as well.
And so far nobody is using that.
does docker get money, though? anyone with just a bit of common sense has their own docker hub mirror and I don't know how else they earn money...
They absolutely do. Everything starts from today, regardless of what yesterday looked like. But the new trend can go in any direction, including a major reversal from whatever the last trend was.
This is completely wrong. By this logic me killing a parent turns the parent into a perpetrator because the parent didn't learn proper self defense.

No, the parent is a victim and the children are dependents of the victim. Thus hurting the parent also hurts the children. It's the same thing with Newsblur. Hurting Newsblur hurts their customers.
> Nowadays everyone has a 'tape recorder' and then some in their pocket, but most methods seem to ignore audio completely, or let it take second place to written language.

Admittedly, there is a cost involved for voice talent. But it is well worth it, in my opinion. I started using Duolingo to learn Hungarian. The course is in beta. It began with pre-recorded clips, which were very helpful to understand the tone. Later, the course switched exclusively to text-to-speech. It is so much harder to understand than a real person's voice, and so much nuance is left out.
I can bypass the self-signed cert error on my iPhone 8 on iOS 14.4.2

That aside, what's the point? There's no practical threat model where https makes what you're doing more secure. If you have neither a domain name that can use a real TLS cert nor your own CA added to the mobile device, it would be trivial for someone to MITM you. Just configure your Fedora dashboard to use http if you don't care about security
Okay so if your phone is your hand already and ready to be used, then it's "more convenient" (i.e. saves maybe 2 seconds) than your card, but then in all other cases it's not? I usually keep my phone in my pocket so this isn't more convenient anyway.

Personally I find any hard requirement of a phone extremely _inconvenient_, since it means I must have my phone with me. A card/cash takes up much less space than a phone.
Morandi Bridge in Italy: https://www.engineering.com/story/italys-morandi-bridge-coll...
That only works if you can convince the 90% of people who are non-vegetarian to switch over. Assuming you won’t legally ban it (I presume you’re not planning a revolution), that means you need a product that people will prefer to normal meat, which means tastier or cheaper than normal meat.
Hawaii: The Stolen Paradise
Why 5k instead of 5000?
United Airlines Bets on Post-Pandemic Growth with Its Biggest Ever Jet Order
https://archive.ph/3E9aJ
I would rather be interested in a database system over IPFS or similar where you can update data, with both public and private encrypted data. Freenet is good, but it's not a database system, and it's pretty complex.

Bitmessage is also pretty awesome already...
A similar but more flexible solution I like is to create a wireguard network between all nodes and developer workstations, which creates a separate interface called wg0. Bind every private service to this and publish what you want through a reverse proxy.

It has an added benefit of not needing vendor-specific TLS configuration and firewall rules easy to configure since everything goes through the single VPN port.
Fancy pigeons is another term of art. Similar to thoroughbred, a fancy pigeon is a pigeon with a breeding objective. I imagine the term pigeon fancier was derived from it: someone who breeds fancy pigeons.

Darwin was a pigeon fancier [0]. He was working on theories of sexual selection.

It's interesting that terms like "fit" and "fancy", as used by British teenagers are so apt.

[0] https://www.jstor.org/stable/230968
You do. And you get small vortices on wing surfaces too.
> I want to treat humans as humans and this is my solution towards a world without racism. I don't want to have to be nicer to a person because he or she is of black skin color. Or give special reasons in case of other skincolor, why this person did not qualify for a job. Or actually having to employ people because of their skin color. That would be racism to me, even if it might be well intentioned one.

But right now, you actually object to people saying "racism exists and affects how things turn out".
At the risk of becoming a real bore, I'll spell out why I think this is a really, really dumb thing:

If you have anything to do with fire fighting (and we all do in a way) you soon learn that there are three things required for a fire:

* Something to burn
* Air (strictly speaking: Oxygen)
* Something to start the fire (source of ignition)

Fire prevention is based around avoiding having all three things together at any point in time. So, putting out a fire often involves removing oxygen or removing the burning thing. Prevention can be as simple as making a rule at home that no one puts dish cloths on the hob to dry. That last phrase may need some translating!

So, you put your webby app or VM out on the internets for all to see and play with. Unlike your home front door, every Tom, Dick and Harry in the world can go and take a playful kick at it. So you need to take some care with it. There is no simple set of three factors that you can protect against as there is for fire prevention. Instead you need to follow some good practice and hope for the best.

One good (not best - there is no such thing) practice is to avoid giving away information unnecessarily. Linking IP to MAC is such a thing. Do it at home if you must but don't do it in public.
Windows Product Activation (2001)
The author asked for an update 2021-06-08, 8 months after reporting it. If they fixed it why wouldn't they say so?
An average Argentinian office worker should be able to put 2500$ per year aside. If he doesn't need a new washing machine or new furniture, he could get an iPhone. But he would need to spend all his savings just for one thing.
was this found by, or originally reported to, Project Zero?
【 AppsUP 2021 APAC】Aspiring to Create the Next Mobile Legends or PlantsVsZombies
> he is basically suggesting he has a crystal ball on when it's going to happen.

No. Just some time before Christmas 2021.
> They have no future in the ARM dominated world.

Beware: microsoft has so much money. Wars are lost, if you have enough money, the other side will eventually lose. I don't think they can be written off just yet. Even considering Linux has been running well on arm for a long time, the arm world is not irrecoverable for microsoft.
MIT and Harvard agree to transfer edX to ed-tech firm 2U
Leave that group ASAP. Things will never get better. Your group is proving to the company that they can deliver without extra resources.
note that if the containers are bridged the iptables FORWARD table wont affect packet forwarding between containers either. you would need to use ebtables for layer 2 firewalling i am almost certain.

Edit: apparently there is a sysctl setting that makes the bridge netfilter code call the iptables filter routines (bridge-nf-call-iptables) so i am kinda wrong...
And 44kHz CD quality would sound like crap.
The version of Timescaledb offered by DigitalOcean is Apache licensed, which is somewhat limited compared to the community licensed version.
I think generative art could be emergent in future, but as far as I'm aware it isn't currently. The best examples of designed emergence we have right now are cellular automata, like Conway's Game of Life, or Primordial particle systems (https://youtu.be/makaJpLvbow).
By that argument, indoor plumbing and safe running water can also be considered luxuries. Which, while true, is rather reductivist.

And if we want to talk history, having food made for you by other rather than making it yourself is not a new thing. Having a servant or a wife/mother/grandmother making you dinner was far more common in the past than it is now. I'd probably guess that more people know how to cook and cook their own food today, than at just about any other time in history
Well, in this case docker was trying to be helpful.

On a hypervisor, it's much harder for VMs to influence each other.

Linux containers (and docker amongst them) started out as convenient and reasonably performant, and added security later. One patch at a time.

Historically, hypervisors typically started secure and added performance and convenience over time.

(Very simplified. But I used to work for XenSource back in the day.)
In our company, they actively try to follow up on people.

Not everyone needs this, but in most companies you could just say what's wrong.

Eg. In Belgium, it wouldn't be a valid reason to fire someone and i don't think it's in the benefit of the employer.

Say what's wrong and try to get a solution.

If the company is bad and you don't trust them, look for another company :)
Code Shelter: help with maintaining popular open source projects
Intermediate: An Introduction to HarmonyOs RDB Using Java-Huawei Developers
Could make life easier for tourists wanting to get round a language barrier.
As I understood it, jdeps is only for shrinking the runtime and bundling it with the program. This part seems fine.. or at least they're doing the best they can :)

I ended up skipping this step and distributing a JAR - which is a bit of no-no .. but i just ask user to install the Java runtime. (it's better than making executable for every platform and then spinning up VMs to test)

However, jdeps or not, the rest of the executable still remains as bloated as before
>The machine with DB had a public interface. No matter firewalls, this is just bad. DB machine should be in private subnets, preferably with no inet access at all, even via NAT.

This is the type of thinking that lead to the attack in the first place. No, you should not pretend that your database is secure because it is hidden deep behind dozens of layers of firewalls.

You should assume that your database is always accessible from the interne and make sure that internet access to your database is not relevant.

With mongodb you are supposed to use TLS encryption and authentication even for communication within the same host because a low privilege hack or mistake could forward a database port or make it public.

In this scenario you not only need to bypass all the network security theater, you also need the password and a valid client certificate signed by a private CA.
I always thought the obvious answer was to map out the architecture, then organise the development team for the project according to that architecture.
Build systems in general can be ok, or even elegant and fun.

Autoconf is just really terrible.
The protestor’s guide to police surveillance and how to avoid it [pdf]
If he’s doing the CE&I and let it pass, then he has nobody to blame but himself. Knowing it’s wrong and certifying that it’s right entails a lot of professional risk in this industry. I suspect his concerns aren’t too serious or someone else is certifying the work.

One other situation I can imagine is that the risk is outside his domain. Example: I saw a company scrape flat clays out of a roadway and use that material as fill for slab-on-grade foundations of duplexes. I wouldn’t expect those to last long, but the developer is also the owner, so he’s only hurt himself. I don’t find the owner to be particularly sympathetic, I only certified the road construction, and the only person to report the poor practice to is the owner himself, who also hired the crew.
How to migrate Firebase US to EU project
Let's Photoshop Something Nice
Are leaks hurting them from a marketing perspective?

There is little true innovation coming from Apple. Most of their products of the past 3-4 years are catching up me-too products:

- Apple Music, Apple TV+, Credit Card, VPN service
- Touch ID within the screen that might come
- Widgets in the recent iOS version

.. and so many more.

Why should Huawei or Samsung benefit from those leaks we see arriving 2-3 months before the product launch.
I’d say child porn being illegal is more idealistic than the alternative.
A.k.a. “mystery meat navigation”.
How would Apple be any different, in particular when talking about closed source and binary centric models?
I think the core of Microsoft's difficulty lies elsewhere: two factors that come to my mind are fragmentation and willingness to maintain software compatibility ad libitum (kind of like Apple maintaining Mac OS Classic mode on Apple Silicon).
Interested in more info as well.

Also, how do you handle migrations, both schema as well as data?
On the contrary, the countryside has a lot of appeal to me. For a few years we lived in a rather isolated house in Dardilly and I have fond memories of them. Not really the same experience as the countryside but I'm really glad I spent some of my youth here and not directly in the city.

Thank you for sharing that story, it's thanks to people like you that bring some new perspective I started to love my country for what it is.
I always assumed that's where it got the same from?
Oh that's cool. I'm not intimately familiar with Java, so it's interesting to see how it's done. I figured it was something like that. Coming from C++, reflection seems like a giant useless codesmell - and there are all these issues further down the line because of it. And I get the impression most Java code doesn't even rely on it
Looks like you may be able to use IPFS addresses with data stored in Arweave so that Arweave becomes effectively one of the several redundant hosts you might use with IPFS, if I understand it right.

"This Arweave+IPFS bridge allows you to have truly permanent backing of your data using Arweave, while also making it available in IPFS." [1]

[1] https://arweave.medium.com/arweave-ipfs-persistence-for-the-...
Then destroy and replace them with every service?

it's only a printed sheet
It even has a name: Inverse Conway Manuever.
https://highlights.sawyerh.com/highlights/NNS5Z1RGNBo8azS1AM...
Are you sure? I also have "127.0.0.1:external:internal" on some services and I cannot reach them with nc, but I can access those that are just configured as "externa:internal"
I've had similar really good experiences, but it's probably just luck. The last place I went to they used https://pos.toasttab.com/. It was quick, easy, everyone at the table was able to pay for their own food without having to worry about dividing up the bill, it was easy to order additional items without having to wait for the waiter to come around, etc. And, fwiw, it didn't seem to affect the social aspect of my dinner at all. Normally we all would have been sitting quietly looking at the menu, instead we all sat quietly and looked at our phones. After we ordered, everyone put their phones away and we had a good time.
How long before someone exploits this?

- Build an app that injects malware but also shows the restaurant's menu. Give it the same name as the restaurant.

- Go to the restaurant, overlay your QR code sticker on top of the restaurant's.

- When someone scans the code they are asked to install "[Restaurant's name] menu", obviously they are going to do it.

- They open the app -> malware is activated, menu is shown. Profit.
Seems to be a series hybrid which is unusual. Most hybrids are parallel and connect the engine to the wheels. The electric double conversion of a series is less efficient than a direct mechanical connection especially at highway speeds. Somewhere in the 80% range for series double conversion vs 96% for direct mechanical drive. Also you have the weight of the dedicated generator vs using drive motors as generators in a parallel hybrid. Hybrids are usually not that useful for a vehicle that does mostly highway driving, in parallel hybrids the hybrid system is doing very little on the highway.

The van is obviously designed for urban routes with lots of stop and go so the series hybrid might make sense there, but with campers you are typically doing long distance highway travel and very little stop and go. Not much info on the drivetrain technology I can find.

Electric RV's will be great but they will need really big batteries. In the US you want a vehicle that can do at least 300 miles at highway speeds but really 500 miles for 8 hours of driving then charge overnight at a campground.

I wouldn't really be interested until there are Class A RV's with megawatt hour batteries and decent charging infrastructure (3 megawatt HPCVC) since that what I currently have and love to travel in cross country.
The only thing something like Duolingo could be good at is learning vocabulary. But I found it pretty bad at that. I had much more success with Memrise. However, this was many years ago and last I checked Memrise had regressed significantly, at least for me.

Duolingo is a terrible way of learning languages overall. Almost as bad as Rosetta Stone. But, like Rosetta Stone and other things like gym memberships, it doesn't have to be effective to be profitable.
We are not talking about alternative faux products, but meat fibres that are grown form actual animal tissue at the start (AFAIK thats how they do it).

In theory this should taste similar to traditional meat and in the future they will work out marbling etc
People have been adding censorship-resistant data to the Bitcoin blockchain too.

https://internetofbusiness.com/bitcoin-blockchain-contains-i...
I used it 10 years ago and initially locks were a slight problem. Not sure if this has been solved somehow in sqlite itself.

I solved the problem by handling all the DB operations in a separate thread that handled write and read queues. It certainly was not as easy as using mysql/postgresql where server does everything for you. Nowadays there are probably plenty of libraries that handle that for you.
California has banned state-funded travel to 17 states over LGBTQ laws
Like he said it seems to depend. Last week sending Revolut to N26 was instant. N26 to Revolut took 3 days (weekend).

There is no sepa rule that requires inst sepa if it is available.
But then, they weren’t making money, and now, they are. Google is an advertising company, and YouTube will be moderated in whatever way they think is going to sell the most advertising.
Orders are typically stored anyways?
www.zerotier.com has this at both L3 and L2 (bridging). You can push routes or merge virtual and physical Ethernet.
While it certainly seems like a fairly serious vulnerability I think it's worth highlighting that this attack requires that either you already have access to a machine on the same subnet as the target machine or that the firewall in front of the target machine is very lax. That's a pretty high bar for getting the attack to work in the wild.
Crazy to think they choose an unshrinkable language as a mobile platform :)

It doesn't seem like that powerful of a language feature (and more of a code smell) and it creates this mess down the line. I wonder what fraction of libraries even require it.. I'm guessing it's b/c of the flag soup i never got ProGuard working. I know the Clojure language/runtime itself relies on some reflection - unfortunately. That probably complicates things
Play Dev ID Requirements and 2-Step Verification
And what would you say that those goals are?
Same subnet = as another VM in your project? or random GCP VM that happens to share your subnet? Seems like pretty different risk levels...

https://github.com/irsl/gcp-dhcp-takeover-code-exec#attack-s...
Cheers, no I think it's a valid point. I've added it to the thread as a variation so will see if anyone voices a preference either way.
Taboos about people's bodies and the right to not have pictures of yourself posted to the Internet are fairly orthogonal.
Tesla has a ton of ip, Bitcoin is pretty cloneable
The interesting stuff seems to be going on in https://github.com/facebook/jscodeshift
I could be wrong, as I often am, but I think getting covid from a surface is recently proven to be highly unlikely.
Non-decimal currencies have existed in the past and there are still some remnants: https://en.wikipedia.org/wiki/Non-decimal_currency