skysight-inc/HackerNews huggingface dataset:
In my view, this isn't really a software problem. Your plan is on the right track though.

We already know its neigh impossible to ensure software is bug and vuln free. We have to reckon with the fact that secure software is possible, but extremely hard and impractical to achieve with any regularity.

Because of well known computer science problems such as the Halting Problem[0] and more that I am totally ignorant of, the only alternative is extremely thorough verification like happens in planes[1]. The rub is that unlike aerospace and other critical controls, we cannot define the software security problem as closely as is possible in those other critical systems. Doing so will undo the benefits of our general technology solutions.

The reason I claim it is nonetheless not a software problem is: In case after case of these troubling examples of security failures, there are only a few organizational commonalities that link them all together. Time after time, there are shocking misconfigurations, corners cut, best practices eschewed, warnings ignored, processes disregarded or absent and swept under the rug.

C-Suite execs, as has been well noted, opt for the checkbox-style silver-bullet-whiz-bang, because they can understand the value proposition of one-problem-one-fix and it is easy to communicate to stakeholders. They are totally ignorant to and uninterested in the details of actually providing a quality product. Their product is often not what they are selling; They are getting their bonus, and they are gonna exercise those stock options.

The only way to make a dent in this security problem is to require adequate processes for infrastructure the way we require adequate lighting, or fire protection devices, or plumbing. Until it is a business requirement to provide appropriately managed processes, infrastructure, testing, and finally development practices to go along with it all, there is no hope.

Will your school or hospital be shut down next? Will it be your bank that is defrauded when your cardholder details are skimmed at the local gas station or stolen from a multinational retailer? Will it be your government's top secret clearance database, your municipal water, your child's photos from their phone or social media?

Our only real hope is that the next victims of this heinous, Steinbeckian, tragedy are the Congress, Senate, and whoever else it takes to get a fucking grip.

[0] - Computerphile https://www.youtube.com/watch?v=macM_MtS_w4

[1] - Examples of aerospace validtion https://scholarworks.sjsu.edu/cgi/viewcontent.cgi?referer=ht...
> slow acceptance of gay rights

Huh? Many US states legalized same-sex marriage before other Western democracies like France, New Zealand, Germany, etc. What exactly was slow?

https://en.wikipedia.org/wiki/Same-sex_marriage
DOM Invader: DOM XSS just got a whole lot easier to find
Can you share what you guys used for hydrating on demand as you scroll?
Laughed at the bandit part. I grew up mule deer hunting in Terlingua and I recall nearly every person I met gave off that "fugitive from the law hiding out in the desert" vibe.
[edit]
This is relevant context, which goes to the author of the book’s reliability as a source of information.

The mobbing of someone who (implicitly) endorses the political posture of the author is of course a cause for concern, but you’d think there’d be more desire to understand why that might have happened, beyond just agreeing that Thing Bad.
This is off to a great start!

Being able to filter by things like industry or type of role would make a huge difference too, or even search by keyword. I know that's additional layers of complexity, but it makes a huge difference when trying to find the right fit!
it's also a matter of the dependencies used, are they running in supported .net
Humans may change to (or get replaced by) a form of life that doesn’t grow and/or demand resources uncontrollably and inter-competitively. It is just a relic of our natural origins: eat and breed or get eaten and outbred. When biological reproduction (or life) is over, there is no need for trillions of energy. And when we are speaking billions of years, all humane/natural conceptions become pretty naive. I bet that no one could correctly fantasize about even thousands (not to mention millions) of years from now on. Almost all of our science fiction and futurism is Ford’s “faster horses” of evolution.

Edit: I learned before that this view seems controversial to many people, but I fail to see how on these timescales “humanity” could not be just a transient spark of its own short time.
> they tend to revert to explaining it a different way out of a suspicion that you don’t get it.

I think that's because, in my experience (outside of HN), many people really don't get it. They say something like "this proprietary software did something nasty again" without knowing that the GPL exists or that it's effectively impossible for GPL'ed software to do nasty things. Hence, it is always worth explaining the GPL and its values to them.

It's not always easy to see when someone already understands the values and just disagrees with them.
> But every member has a veto.

No, most EU legislation is decided on by ordinary legislative procedure, using qualified majority voting rules in council of EU ( https://en.wikipedia.org/wiki/Voting_in_the_Council_of_the_E... ).
Do you honestly believe that? They could be as good, but I would wager that they wouldn't on average. There is fair amount self sorting based on aptitudes.
> In "Entity Component" systems...

> In "Entity Component System" systems...

Something something Douglas Adams.
I grew up with these people. They hate the working class. The “policies to help the working class” is legacy Democratic politics. Today, that’s rapidly changing, and they only care about the working class people if those people aren’t white. (See the reaction to JD Vance’s book.)
dowvotes? so whats the disagreement? Chernobyl? Fukushima? aren't humanities failures?
Apparently, when scientists say "we don't really know what is going to happen," a lot of us subconsciously interpret it as "even the scientists can't say it will be bad, we will probably be fine."

Turns out, when scientists say that, they literally mean it.

Cue 49°C heat wave at Canada.

"We don't really know" should be considered an absolutely terrifying phrase out of the mouth of a climate scientist - and we'll be hearing it for years to come.
Is Geothermal Going to Be a Thing?
Caves of Steel was published in 1953. Back in those times, population dynamics weren't as widely known. The world had just passed 2.5 billion and naive rates would put it at 9 billion over a hundred years later.

It seems like old science fiction authors regularly set the time of their worlds much closer to now than reasonable for some reason. To be more relatable perhaps? Blade Runner was set in 2019 for example: fully synthetic humans, flying cars, wars in space. None of that happened. Then there's 1984 by Orwell, and I'm sure dozens of other examples if you looked. Still waiting for that hoverboard (Back to the Future 2 was set in 2015).
It appears I displeased the xkcd strike force according to the downvotes.
>And the closest data I can find is the world surveys on self perceived happiness where people rate themselves on 0 to 10, with 10 being the happiest they can imagine themselves, and on those surveys, individualistic western countries tend to rank better.

"western countries" is a broad category that includes Europe and the UK. I think the parent was suggesting that these countries' cultures are distinct from the U.S. w/r/t finding meaning.

>...to help people find meaning and wellbeing in their life is great, and should be a goal of society, as long as is not forced on people...

What an odd response. Was anyone suggesting forcing anything on anyone?
Rrweb is great

From 3 years ago:
https://news.ycombinator.com/item?id=18776496
> robotically woke

I like this phrase a lot. Woke or not, we all agree that we hate the roboticality. It's just a cheap/shallow conviction, lack of depth and thoughtfulness, etc. is what I consider actually harmful.
> The definition of private information is anything and everything that the user does.

This is absolutely absurd and completely false. It is not private information that I am running a copy of Audacity or Firefox or Emacs (quite the opposite, I want people to know that I use the superior text editor), and neither does the same statement apply in real life - "anything and everything a human does IRL is private" is a similarly obviously false statement.

> Telemetry, by definition, is a theft of private information.

Again, false, because telemetry is defined as non-private data. Neither, in fact, does "telemetry" imply non-consent - you can have opt-out or opt-in telemetry, and either one can have a prompt that is shown to the user on program start-up.
Which stock exchanges do you support? Any data other than stock exchanges?
> There's no need to use blockchain technology for stock trading.

You can believe what you want, I find the current system very hard to trust.

With a blockchain, you don't have to trust anybody: you can just always get verifiable accurate real-time information with no possibility for manipulation or corruption.

> The current centralized clearinghouse system works fine

I don't understand how anybody could think that a system that can't even reliably and accurately tell you how many shares of real stock are in existence, requires self-interested self-reporting for vital stats with a slap on the wrist fine for "errors", and allows shares to be sold multiple times somehow is working fine.

> is highly scalable

T+2 time for trades to clear is highly scalable?

> No one cares if a handful of retail investors lost money on foolish GameStop trades.

The issue isn't that some people made or lost money on a trade: the issue is that there's different sets of rules for different people with the current system.
I don't think fines for cookie violations show up in that tracker. It seems to only include GDPR violations; cookies are regulated by the ePrivacy Directive, a separate (but intermingled) set of laws.
Music. There was a time when arithmetic, geometry, astronomy, and music were all considered essential, and most importantly, interrelated, mathematical arts, taught as the Quadrivium.

Today we teach arithmetic to first graders, or earlier, start learning basic geometry in grade school and get the full course on geometry around 7th or 8th grade.

Music, of course, is not part of "STEM" and is no longer considered a valuable thing to learn, and astronomy, if it's taught at all, tends to be "here is the sun, the moon, and planets. Memorize this mnemonic for the names for the planets: My Very Excellent Mother Just Served Us Nine Pizzas. Whoops, I mean Just Served Us Noodles", and most people who go into astronomy don't really get courses on it until they enter college.
I don't think it's possible for copilot to improve on this problem. It doesn't actually understand the code, it's just statistical models all the way down. There's no way for copilot to judge how good code is, only how frequently it's seen similar code. And frequency is not the same thing as quality.
It's a "where are the bullet holes on the planes that survived" kind of problem. The thing that overwhelmingly kills game projects is overscoped design, which manifests into a need for very detailed, configurable entities with rich scripting functionality. So if you pursue scalability at the level of the entity system itself, as a thing you should invest substantial engineering resources to - you are effectively saying, "yeah, I have a team of 100 people to throw at the game's implementation and they are going to add literally every feature we brainstormed and also stuff we haven't". Because if you actually don't intend to do that, then you can instead adopt a pattern of prototyping it in whatever works well for authoring, followed by profiling and hardcoding a fast path as necessary. "Fast from the beginning" is just guessing about the bottlenecks.

And that doesn't mean OOP is definitely good at the authoring task, either. It just happens to be good at kicking the can down the road and letting things work inconsistently, which may be correct in a prototype when you don't know if you're actually shipping that feature, and only poses an issue if you've tied the authoring to the runtime implementation in a deep fashion. Godot doesn't assume this; while it does have hierarchical relationships of objects, it has some boundary points with respect to reuse(scenes and scene instancing) that make the path of least resistance be to make separate authoring and runtime versions of entities, with one spawning the other.
This sounds like a really bad idea. Controlling pain, maybe, but even than raises issues of what exactly is pain and what is control. What people are not seeing here is that pain is a generalized concept in the brain. The pain of loss, the pain of remembering, and so on are also pain and without that pain we are at risk of losing our humility and humanity.

I have some personal experience with this in an ex-friend who takes a lot of pain killers and has done a lot of terrible things to me and others apparently in part because he feels no pain over anything he does and hence no guilt. Possibly there is more going on there, but his successful avoidance of pain seems to be a significant contributor to his alienation from society.

Life is suffering. No suffering, no life. Putting bounds on that might make some sense, but eliminating it could erase much more.
Strongly agreed. I work remotely and going to a coffee shop for grab a coffee mid-afternoon and get some work done is a massive part of my workflow. A change in scenery helps kickstart my brain, combined with caffine it helps draw me out of my mid-afternoon lull into the most productive hours of my day.
I'm pretty sure most of them pirate Ableton Live.
As far as I know that flag doesn't give you permission to create unknown variants or effect backend code generation that will assume there are only the defined variants. I could be wrong, but I don't see anything about this documented in the rfc: https://rust-lang.github.io/rfcs/2008-non-exhaustive.html
That is definitely not the ceiling. Remote work does tend to be a lower than in-person roles in tech hubs... but also higher than in-person roles in smaller, non-tech cities.

If you are hitting a ceiling, it is not the remote aspect that is limiting - something else must be going on.
Nope... I like my coffee and tea... next question
> someone with a chloroform infused rag and a wrench can visit any of us at any moment.

Phrased like this it sounds like you are implying that the legal system in any EU country has no power over goons with wrenches, and everybody is effectively living in a police state. Why even bothering to pass laws around encryption?
Unfortunately scientific research at this point is not trying to solve difficult problems but just do a small step change improvement that can be published. Most of the kinetics and thermodynamics of these catalyst behaviors have been well understood for decades. The logical next step in scientific exploration would have been to untangle and understand the interactions of the different processes of interest and how they impact one another. Instead most of the research in these areas are to use fancy tools to create patterns like nanostructures that can never be done at scale and create a contest to show delta improvement in the reactivity while providing minimal fundamental insights to either understanding, explaining or solving the problem.
Your point about traditional sources of meaning withering due to science and modernity is correct, but I often struggle with why -

Science has virtually nothing to say about the meaning of life. Science cannot contradict most traditional sources of meaning because they do not make many if any scientific assertions. To my way of thinking, the erosion of traditional sources of meaning and morality is caused solely by human hubris : we see all our scientific acconolishments and think "bah : how could we trust opinions held by ancient humans?! They didn't even have the internet"

This seems to be a cycle thats repeated itself throughout history. Excess results in a rejection of traditional morals and meaning, which leads to a harsh reconciliation wherein civilization is struck with the rude reality of why those traditional morals where there in the first place. Which leads to an embrace of these traditional values, which then eventually creates more excess.

Fascinating stuff.
Ah, I think there is a misconception at work here.

The problem isn't "Kernel code should not allocate" but "Kernel code should not implicitly allocate".

And C++ thinks this is none of your business. You can have no allocation by not providing an allocator - but you can't have no implicit allocation because the language will go out of its way to hide some of the obvious places allocation might happen rather than expose its warts.
This :)
Rent a “fat” person in Tokyo and more crazy stories
I'm curating the coolest and craziest stories in Japan. Proving there are some things that are truly "only in Japan". I've lived here almost half my life and continuously find new things I didn't know about. Weather you're planning a trip to Japan or just love reading about cool sh#t from here, I think you'll love Big-in-Japan.com.
Anyone interested in this subject material might find Geoffrey West's work including his recent book Scale and many video lectures on YouTube to be interesting and a bit more precise also.
While it’s natural to optimize for a single connection, having redundancy also avoids this issue. Paraguay > Argentina > Chile and Paraguay > Bolivia > Chile are both viable options. Countries should have strong grid conditions to every country on their border as it provided both countries redundancy at very low cost. As a side effect all of a North and South America should end up being able to share power with each other, as should all of AfroEurasia.

A large issues is islands, but plenty of people setup off grid houses completely dependent on Solar. It’s simply generally more expensive.
Is there the wall of shame/hall of fame pages for 4chan-related doxxing incidents? Are those greentexts the only content they share?

In 2000s there used to be external wikis for ops done in a local BBS in my country, and those used to summarize timelines and key informations that led to development. They were probably doing for their own fun but were also useful for defending side.
The title is clickbait. It makes it sound like someone hiking in a ravine just happened to stumble upon these paintings. In actuality, the guy just felt guilty, so he confessed and gave them back. The subtitle says it all:

> Ending a long-running mystery, a construction worker guided the police to the hiding place after admitting he had taken the works in a daring one-man raid on the National Gallery in Athens in 2012.
Calmness would just help you think logically. You can take a second to breathe and make better decisions. Maybe you would have made the same decision in the end and you just wasted those few seconds to take a breath but more often, life isn't so rushed that you don't have time to breathe and think for a moment.
I keep finding winners of movies. Burn After Reading has been jumped up to my top 10 list just because of how benign and absurd it all is. A cool tragedy I think most people should see is "Into the Fade" with Diane Krueger and the drug addict from Babylon Berlin (dont know his name off the top of my head). A lot of mainstream "marvel-the-good-guys-win" type of people won't like it but if you want cold blooded reality it does it well.
> inherently violent

Sorry, data collection cannot actually be "violent", by definition. Please stop trying to abuse the English language and actually start making reasonable arguments.

> Instead how about a do-not-hire-or-collaborate-with registry of the individual contributors participating in projects that employ those tactics and see how they like trying to opt out of it.

Mob justice - the tool of hypocrites everywhere, to be used against their enemies and then denounced when it's not convenient for them.
Effects of raw red beetroot on metabolic markers and cognitive function
It appears to be quite a bit better. I had been considering upgrading my TV while on the NVIDIA, but haven't considered it since moving to the new Apple TV
The bureaucracy comes in because of too many stakeholders, not too many smart people.
it became a state in 1959 with everything finally crushed out of it - before that it was still a quasi territory with more independence
> For example, normally you need to filter, do settling for sediment etc - how did they solve all this?

The key sentence should be this:

> In their study, the team tested the disinfection efficacy of commercially available hydrogen peroxide and chlorine compared to their new catalytic method.

In other words, no, this doesn't replace coagulation+flocculation, sedimentation, and filtration; it's only replacing the specific disinfectant in use.
Best+affiliates+programs
So much work could be structured this way. My company had a regular motley of random tech work that could support a queue of grab em in the next month tasks.

For example, there is a need to add code coverage calculation to a bunch of repos. That is my work. I know nothing about it. Any developer is as equally qualified to do it as I am.

Yet I will be pulled off an actual project when we already have a dev shortage to do this. We could benefit from outsourcing it instead.
Food factories are FIFO, and you want FIFO dispensing, so I can only imagine the optimal solution is FIFO transport. I could readily imagine "magazines" for anything coming in cardboard boxes - spring or gravity fed, high-aspect ratio stacks in some kind of frame. Specially built container trucks which are easy to load with these "food mags". 6Axis robots to load them into the factory.

Spent mags get put into an empty trailer and sent back to the factory.

Loose bag items are trickier, but if you put those in reusable plastic totes, and put those in the mags, and automatically eject them into another mag, I think it would work well with the existing suction arm ones.
Classically political economy was the study of the accumulation and distribution of material wealth. The first part of this study involves figuring out how society produces a social surplus or net-product above cost of maintaining labor and productive capital generating that product so that the workers don't starve and all the industries don't get mothballed. The second part involves figuring out who the social surplus or net product actually gets paid to in a financialized market economy as a result of leverage and various state policies particularly concerning land and money.

The classical normative political agenda then usually then revolves around figuring out how to maximize wages for the least advantaged members of society which don't own property. It is thought that doing so will increase the productive energy which the largest fraction of the base of society will be willing to volunteer towards maintaining and replicating the political system, without the need for a top-heavy political system, in a manner resembling a pyramid, but ideally where people are merely ruled by a common set of ideas with regards how to best achieve such a system without the need for an absolute ruler or king.
Past thread:

Show HN: Rysolv – Fix open source issues, get paid - https://news.ycombinator.com/item?id=25879238 - Jan 2021 (101 comments)
I think you can certainly google most of it. But certainly the combination of climatic change and the bubonic plague certainly helped bring down the plans of the Emperor Justinian to reunite the Empire. An excellent resource is the Fall of Rome Podcast. Most historians will agree that no one reason alone caused the Empire to fall, rather it's a combination of factors that together brought it down.
They're a bit out of place. But if you say "Looking for cofounder, equity only." it's hard to call it deceptive.