skysight-inc/HackerNews huggingface dataset:
I made this comment elsewhere [0], but by this logic anyone who builds an ecosystem for an open source tool should be accused of the EEE strategy.

> There may be a time where you must use Github CLI instead of a "standard" git client to interact with Github projects

So we're accusing MS of a slippery slope based on a phrase from 25 years ago, which there is absolutely zero proof or indication of them pursuing in the last decade (at least).

When GitHub show the _slightest_ inclination to do anything of the sort, I will be standing there with you, screaming blue murder. As of right now, they're progressing the development of git, "embracing" the open standards that have been developed (lfs being exemplary) and have shown absolutely zero signs of extending git in incompatible ways. See elasticsearch [1] for what "extend" _actually_ looks like.

> Right now they have embraced and are extending (such as with Github CLI).

If they _hadn't_ embraced, people would be complaining that GH are forcing non-open standards to be used. I firmly disagree that the GH issue tracker and pull request management are an "extension" of git. They have nothing to do with git whatsoever.

[0] https://news.ycombinator.com/item?id=28149098
[1] https://news.ycombinator.com/item?id=28110610
At least up to this point, the amount of growth in the industry from moving fast and having buggy software (as opposed to moving slow and having fully verified software) has more than made up for all the hacks. For every $600 million dollar hack, there's been $6 billion dollars in gains from growth in the industry. Moving slower means fewer hacks, but it also means lower growth, and the growth is the more important multiple right now.

As the growth slows down there will be an increased focus on best practices for smart contracts, on auditing, and on formal verification. There are also a lot of startups that are looking into insurance for smart contracts and crypto balances in general.

In general, the best experts in the space could probably write smart contracts with >100x fewer bugs than your typical smart contract. Especially with something as complex as the EVM it's difficult to assert that any piece of software is truly bug-free, but there are a lot of steps that can be taken to make them significantly more rare. It's just that these mitigating steps are more expensive than the growth at this time.
honestly? boomers, lol

but every once in a while great discussions pop up here, vitalik buterin himself even posts here sometimes, also that guy from coinbase etc
Now say you're a company hired to do an audit. Same incentives.

The hilarious thing is nearly all of these high profile hacks happen even after being audited.

There was one company I remember being called out as a suspect, but I can't find the name.

Also given (a) anonymity (b) ability to take cover amid so many other hacks, you could do this for a few years, slow down, and remain a top tier firm claiming the lowest hack rate.
There's probably about a million people who have had to implement some kind of geo restriction content system and there's probably only about 1000 people in the entire world who want such a system to exist.
Depends what your aim is, and how long your time horizon is. You might feel better today but when new information comes out showing the mob was wrong, that's the kind of guilt that can lead you to a very dark place.
There is 'Discussions' for this, which you can enable per repo on GitHub, and have a sort of chat / forum as part of the repo
> then save even more on the salaries

the problem is that remote is seen as a benefit (which it is), and so naturally must be priced as part of the salary.

The fact that being remote requires some discipline, and this discipline makes for a better employee doesn't play into it - because a employer would already expect such discipline, whether it actually exists or not.
High quality protocols like PoolTogether for example have this: https://docs.pooltogether.com/security/audits-and-testing
> Saying "just play a different game" is as unhelpful as saying "just buy a different phone"

No. This is a false comparision.

The smartphone market is a duopoly that is worth trillions of dollars.

Battle royale videos games are not that.

If fortnite eventually is worth trillions of dollars, and literally almost every single person in the world has to use it, on the same level that they use freaking smart phones, `then` we can use anti-trust law, or pro-competition laws on this now vital service.

But until then, it is a false comparison.
I don’t understand why two teams means slower. Are you keeping the total number of engineers the same? If you are saying 2x engineers on electron complete tasks faster than 1x on electron and 1x on native, you are basically agreeing with OPs take.

You take money to provide software. But then you become lazy and greedy and want 1 size fits all. End result is your users having clunky, high latency experience.
Germany is following suite with other European countries and stops free testing in October. Why?

Free testing on a massive scale and using masks felt like the fastest road to normality.

1. Protect children

Even though I am vaccinated i can still catch and transmit the Rona. That chance is even higher as i am potentially asymptomatic. Living together and having often contact with children who cannot be vaccinated makes that a huge problem. I do not want to expose the little ones to serious long term health issues.

2. Go to events / economy

In that regard, i felt safe to go to events or indoor activities where I knew everybody was tested negative. Now we can have super spreader events again. So I will avoid indoors.

3. Stop mutations

Until we have an anti viral that is effective once you are sick, the overarching goal should still be to have as few infected as possible. The more people have it, the higher the chance of further mutations. The kicker is that now when a mutation occurs in a vaccinated person it will favor a variation that properly has immune escape rendering the vaccine efforts useless.

If the government thinks it is an effective instrument to convince anti vaxxers to get a shot (which I doubt) make only them pay for tests.

If the arguments would have been that the tests themselves have become less effective to detect the Delta strain or that too many test centers are scammers, i could totally get behind a discussion. But then the solutions would be much different and not "stop free testing".

Our short sighted government has bet everything on the vaccines to be the ultimate answer to the pandemic. Watch them scramble in 7 month when a omega variant occurs that hits like a hammer and circumvents the immune response of the vaccinated.

Then we will again hear the all to familiar phrases of "who could have seen that? No one predicted that!" We get full lockdowns as there have been no further improvements in the public health departments, IT infrastructure or new concepts to make class rooms safe. In the end our children, teens and 20 somethings will suffer under the measures the most by robbing them of another year of what should have been carefree joyful youth.
> in the case of online sales, the merchant is the known quantity with a reputation

This is absolutely not true. There’s plenty of risk buying expensive goods online, lots of problematic merchants. I don’t understand why merchants are inherently more trustworthy than customers?
I think free, easy movement between countries is a thing of the past. Climate change is going to lead to nationalist isolation as countries try to preserve their resources as they start to run out.

Things are still largely locked down from the pandemic, and I don’t think international tourism will ever go back to being as easy as it was pre-pandemic. Many formerly bustling tourist sites have decided its really nice not to have tourists.

In this context, I think we can expect the Balkanization of the Internet to continue.
When we have VR/AR tech that will make it possible for realistic avatars of people, body language and all, to “appear” in your living room, that’s when WFH will really take off.
It's absolutely ridiculous.
The Thunderbird Project was transfered to the MZLA Technologies Corporation, a for-profit subsidiary of the Mozilla Foundation.

https://blog.thunderbird.net/2020/01/thunderbirds-new-home/
Another question I have is whether varying Facebook usage patterns and tendency to actually take the survey, among different groups and people with varying opinions, is accounted for and whether it can be accounted for at all.
We need to kill copyright itself. Once copying is no longer a crime, all these problems will solve themselves.
Ah yes, COVID. And then some states passed laws that the mail in ballots couldn't start being counted until after election day.
An inside joke :-)
So, just because there are sick and terrible people, we should give away our freedom and privacy?
Apple should just scan the pictures that are in iCloud (their servers). They just assumed that if you have the iCloud option enabled on your device that it gave them the right to do the scan on your phone/computer.

I want to also point out that A/V companies never said they were going to scan for child abuse images on your computer and report you if they found any.

Like you said, the optics are terrible.
I will take you up on that bet. Feel free to contact me and we can set it up.
Auditors have never fully prevented bugs in any other computing domain, i dont know why cryptocurrency would be any different.
How would you fix climate change if you had huge amount of money?
Let's suppose someone give you $2 trillion tax free and ability to act anywhere in the world, what would you do to fix climate change?

What technology, policies, actions would you take?
What's pathetic is thinking that using inclusive language is anything but pathetic.
Thank you... I couldn't understand the reason to use it.
It’s very hard to say without being you, but try stuff out.

Depending on your COVID situation it could be travel, speaking clubs, perform a comedy gig, etc. anything that is wild or uncomfortable

At the same time what are you passionate about? Maybe there is something you can study and really get into?

If you are a coder like many of us I think learning more coding things like a other framework this isn’t the answer. That’s just my experience. It’s a never ending meaningless thing, a set of tools to solve problems. Maybe that is just me after too many years!

Also try exercising etc.

What I have come to realise is what you believe and feel, while it feels absolute can be fleeting. Some endorphins can make a lot of difference to how you see things.
Though, that means you just need one modified motherboard.

Put each CPU in, extract the keys, deploy in a regular motherboard.
Shenanigans aside, 0.x versioning is commonly used when developers cannot (yet) make any guarantees about backwards compatibility between minor releases.
Being an employee of such a big company is close to being a public servant, which may not suit everybody, anyway.
So now my page styles are a security exploit vector too?
Embed Plotly Dash into your Flask application
Yeah I can understand that. Once you dive into crypto however, you quickly realize that $600m is just not that much money (especially not if we are talking about digital assets valued at current ticker price). And that lots of money isn't necessarily the right measure of quality of the project.
I did not find it a very compelling joke until I checked out the list of projects: some running their "0.*" versions for 10+ years, and many a familiar name in there too — ouch!

That made me laugh out hard :D
Neovim is listed as a "notable ZeroVer project" and yet it has a 1.0(!!) milestone in the GitHub project page.

https://github.com/neovim/neovim/milestones
These are single-statement bug fixes in Java code so it likely would not make sense to try to cut them into multiple commits.

Consider this line (my Java is a little rusty, but let's hope not too rusty as I start a new job next week in Java) in method get_answer of the class Query...

return fastCache.answerOrEmpty(newQuery).replace(EMPTY,defaultValue);

Perhaps the author, upon reading the bug report concludes that the problem is they've calculated a new query but in this scenario it's the similar old query they ought to check in the cache instead and they write:

return fastCache.answerOrEmpty(query).replace(EMPTY,defaultValue);

However a colleague who never really understood Query.get_answer() and reads the same bug report fixes the reported site of the problem, changing from

answer = Query.get_answer("Some complicated query");

to...

answer = Query.get_answer("Slightly different query");

Again this is a one line change, and perhaps it cures the symptom, bug closed, but the author was correct, and "Slightly different query" just happens to avoid the case where newQuery is different enough from query for the error to cause trouble.

This type of change that "fixes several issues" is fixing a correctness bug and I don't really believe you that you'd refuse to accept the first one line change because it "fixes several issues". Correctness bugs are going to do that.
but is it that simple though? Even in enterprise company we have to do 2-3 review on PR before merging.

I think proper DeFi company should have their own system on deploying contracts. Further, they should have their own security team that audit everything.
There’s nothing in the design sure, because new photo hashes do need to be added. But they will will be CSAM images, as explained here: https://pingthread.com/thread/1424873629003702273

People should really stop using this “conspiracy theory” as a reason for Apple to not scan for CSAM in a privacy-preserving fashion. There are way too many “hot takes” that don’t take into account any legal ramifications of their “what if” scenarios.
Seemed like a strange joke until you see the table,

Project Stars Released Releases Current Version 0ver years
React Native 96,747 2015 359 0.65.0-rc.2 (2021) 6.3

...lol

God forbid tor, sklearn, react-native release a v1 -- people might expect things!
using the an ISO date with a release/beta/branch-name as a version number always make more sense to me...
Memfd_secret() in Linux 5.14
quite a bold assumption most are smart here. most people here are experts on a subject matter or two but we should still take their stances on crypto (and other industries) with caution.

maybe they dont just understand it at all, too. and its a lot, wrapping your head around all the defi fiasco alone is mentally challenging as hell, haha.
> Low in the stack, low in the version. That's the HashiCorp way.

> Most experts have come to agree, for all their complexity and absurdity, Kafka's writings have been influential, despite the prevalence of bugs.

I'm loving this.
That's what you hire auditors for.
> You received this email because my big data team analyzed your activities in Jira, Confluence, Gmail, chats, documents, dashboards and tagged you as unengaged and unproductive employees

What a terrible place to work and measure of productivity.
I live in Berlin atm, and spend a not insignificant amount of time in Italy. Honestly it will depend on you and what you want to get out of it. I'd go for somewhere with jobs appropriate for your skills/qualifications and also for somewhere that does not speak English primarily (my office is an English speaking office though YMMV). It will be harder of course, but more rewarding in the end. It took me 2.5 years to be approximately conversational in German, still not professionally fluent though. But I can at least talk shit at the späti with people. If I had to move again I would probably go to Portugal and try for a fully remote position.
5. The system can easily be abused by governments or malicious actors to frame innocent people. People merely suspected of keeping such images are de-facto punished and stripped of rights even without standing before a judge or getting a conviction.
Sensations cannot be produced, no matter how many neurons you simulate.

We can only model certain phenomena we deem important, but who can really say?

I'm happy with "less than human" simulations, in fact, I'd be disgusted with a perfect human simulation -- if they help us automate/solve problems.
I shall contribute mine: https://porkskank.com/

Nothing but a single photo of a dude with a bag of beans on his head.
Most people have never heard of PoolTogether, so I’m not sure if your definition of “first tier” and “high quality” is objective.

Regardless, this quote from your link stands out:
“it should never be expected that 100% of the deployed code has been formally audited.”
Sustain had a good podcast with Ryan Sipes (Community and Biz Dev Manager for Thunderbird) back in Februrary: https://podcast.sustainoss.org/67
This just moves the risk from the vendor to the consumer.

I assume that most chargebacks happen for purchases made with stolen credit cards. So the chargeback just returns the money to the rightful owner.

If the consumer used bitcoin, and someone stole their credentials to buy something, then they would have no way to get their money back.
And of course, extensive DRM and geo-blocking drives people to pirate.
"In the U.S., 353 million doses have been given so far"[1] which covers 164 million people[2].

GP suggests that 12366 have died directly from the vaccine which would put it at 12366/164000000 or just above 0.0075%.

(Assuming those vaccine death numbers are just for the US otherwise the percentage drops even further...)

[1] https://www.bloomberg.com/graphics/covid-vaccine-tracker-glo...
[2] https://www.scientificamerican.com/article/breakthrough-infe...
only 3 pages are free. To be able to view more you need to pay a monthly subscription.
Yes. If you read Apple’s documentation about this, the user is notified immediately when their account is disabled, and they have the opportunity to appeal the decision.
It's not that merchants are inherently more trustworthy, it's that the buyer has ample opportunity to research the merchant and establish credibility. If there's a merchant that only accepts crypto and the buyer can't get comfortable that the merchant is trustworthy, the buyer can walk away instead of making a purchase.

The merchant has much less to go on. There aren't review websites detailing the reputation and history of every random buyer that enters a credit card onto your website.
Thats a very good question! I am a full stack developer and have no problems writing big applications in python, javascript, html, css and juggling multiple frameworks at once. Also i am very experienced with async code and asyncio. But at work i am the only one with this skill set. The most of the other developers only have application specific domain knowledge and can write python code.

One of our biggest internal projects at work is our web based accounting system. If there is a bug that is not a technical issue but an accounting issue, i cant do anything (i have no clue about accounting). If the bug touches multiple layers of the software (backend and frontend) our application developers are sometimes busy for days. Thats slows down development and is expensive.

With Lona, and the Lona widgets i created for our accounting system, i can give them a very simple, abstract and pythonic API for common tasks like "show an table and then update it", "show a progressbar with an abort button" or "show a popup with 3 buttons".
The code is more readable for everyone involved, and the application developers can now solve most of their problems on their own.

Performance: Yes you are right, you have to sacrifice performance for this approach to web, but performance is in this kind of applications no problem. CPU time is cheap these days, developer time is expensive. We are a small team.
What's interesting to me is how the memory used for buffering data is accounted for in system statistics. If we want to attribute this memory to a process, then attributing it to the writer seems to be the natural option, since they are the ones responsible for using this memory. However, killing the writer after they wrote to the pipe won't free up this memory, because it's buffered. So I guess it could be counted in the Working Set Size of all the processes that have the read end of the pipe[1]? In practice, I think it's counted as "system memory". I'd prefer the Working Set Size approach, since it gives you an indication that to free up this memory you need to kill those processes.

[1]: So for each reader process we would add S/N to its WSS, where S is the size of the buffered data for the pipe, and N is the number of processes holding the read end of the pipe.
I agree, but I've also been told off for making many, small commits. I don't know why the complainers don't squash them together if that's the way they feel and leave the moaning out of it.
I think the approach is noble but by looking at their own website, just the H1 has this:

> <h1 x-style="mt:0; mb:8px; font-size:2.5rem; md|font-size:3.5rem; line-height:1.25; color:white;" style="--asm-margin-top:calc(0 * var(--unit-size)); --asm-margin-bottom:8px; --asm-font-size:2.5rem; --asm-md--font-size:3.5rem; --asm-line-height:1.25; --asm-color:white;" class="asm#c871 asm#c23e asm#822f asm#825d asm#b9fa asm#6330">Just-in-time CSS, unlimited possibilities</h1>

I think that is spaghetti code. I can do that with my own library and much cleaner functional approach, and much reduced code https://github.com/meerita/utilcss
Now, if customers could obliterate and boycott Xsolla that would be a great message against such shenanigans...
I've checked again. Only one letter was corrupt and only Subject line was corrupt. I've chosen to fix folder index from folder properties, and voila! The message was fixed.

It wasn't an overwritten message or IMAP bug, it was some corruption of the Thunderbird folder index.
CDNs hope you've never heard of them – but if there's an outage, it's big news
Sorry, I misread the username and assumed you were the commentor I replied to. Yes, these things are _possible_ but there is no evidence or indication that they are happening with Github.