skysight-inc/HackerNews huggingface dataset:
They can't put you in jail, but if you violate US sanctions they can put you on a blacklist that no US business is allowed to deal with (assuming they notice you, and you get caught).

It's up to you to decide if that threat is enough to intimidate you. Most people won't blame you if it does.

(Also, probably talk to a lawyer)
But of course! All makes sense now:

https://restaurantguru.com/The-Drunken-Fly-Stratford-upon-Av...
The tool is actually already available (maybe a gray market thing though…), but it’s windows-only and a little pricey. I’m not convinced that “right to repair” will result in custom open source software for every smart fridge in existence, and I don’t really trust average folks to make good decisions if everything was open to all anyway.
Why use vaccines in a highly targeted way instead of giving it to everyone?
I disagree.

Before Delta, it was reasonable to resume almost all activities after being fully vaccinated.

I don't believe that is true any longer. There are too many breakthrough cases, presumably driven by a much higher viral load that can overwhelm defenses. (The figures I have seen are 1000x in the upper respiratory tract of infected people; I haven't been following well enough to know what the increase is in actually expressed viruses. But it's going to be a lot, and viral load has proven to be a very significant factor for transmission.)
Golang-team refused to add `math.min(x,y int32)` when I asked them with an internal Google ticket, around 2017. The company already had 63 separate instances of the function. I would add the 64th instance in my team's code. They said that's fine and closed the ticket as "Won't Fix - Working as Intended".

I wrote a golang WaitableBool struct for my team's code. I tried to submit it to the company's internal 'contrib' library, but golang-team rejected it. I pointed out that the company's C++ and Java versions of the struct were used in >150,000 places. Clearly there was demand and the Golang version would become widely-used. They argued that all Golang coders should always remember details of channel syntax and be happy to read five lines of boilerplate instead of "value.waitUntilTrue()".

I think their team was too senior. None of them were willing to add breadth to the standard library, despite massive code duplication within the company. They need a junior team member who can get promoted for growing and maintaining the standard library. We all need that.

[0] https://pkg.go.dev/math
Nice arb!
Could you recommend a good reference on the time interval for peak viral load in infected vaccinated people?

CDC recommends testing of vaccinated people, since they can be infected and the vaccine suppresses symptoms, so they won't know to self-isolate, https://www.webmd.com/lung/news/20210729/cdc-reverses-guidan... (July 29, 2021)

> Even if they’re not showing symptoms, fully vaccinated people should “get tested 3-5 days after exposure to someone with suspected or confirmed COVID-19 and wear a mask in public indoor settings for 14 days after exposure or until they receive a negative test result,” ... “Our updated guidance recommends vaccinated people get tested upon exposure regardless of symptoms,” CDC Director Rochelle Walensky, MD, told The New York Times
Leaving aside the fact that they are profitable because of the zero cost service, like Ryanair, we should consider how many businesses only have the standard they do because of consumer action through the media.
> ...has figured out just the right script to tell support ("oh, I dropped my phone and it won't turn on...")

Isn't this vishing? https://youtu.be/BEHl2lAuWCk
This is the solution - the negotiating power dynamic is too much in favour of the employer when the alternate choice for the employee is (another equally exploitative job|destitution)
Spot on.

I’ll add to that: Networking / making connections. IMHO, that kind of stuff probably doesn’t happen so much on LinkedIn. Better venues are probably local meetups (see meetup.com) or good old conferences.
> Even people who correctly identify market bubbles and have good timing can lose in the long run because the gains during the run up of the market compound so much it ends up being smarter to ride out the dips.

I tripled my investment when I sold last year, but I would probably have done 3.5x now... lets see what happens next year. The wood prices went back down a lot, at least: https://ns.reddit.com/r/HomeImprovement/comments/p7rfsq/ever....
Why have I been seeing so much attention given to voting in threads on HN these days? Is there an influx from Reddit or something by a bunch of people who didn't take the time to learn the etiquette here? We speak only when there's something to be said, vote only based on the quality of the comment and move on. You don't need to address downvoters. If you had something to address them with it should've been in your original comment, then maybe they wouldn't have downvoted.
I don't think this is a good example. If your position is, "We should do X because of Y" and I respond "conspiracy theory", I'm taking the position that Y is inaccurate. You could respond e.g. by citing evidence of it.

If OTOH I respond, "Ah, it is what it is", I'm disagreeing that we should do X but without taking any position on Y or explaining why I disagree. That's what TFA is discussing - ways to weasel out of a discussion without being pinned down to a position or an argument.
FWIW, https://en.wikipedia.org/wiki/Electricity_sector_in_Sweden says Sweden added 20 TWh of wind in the last decade, so doubling that doesn't sound extraordinary.

To get back to tsjq's comment, fossil and biofuel is only about 20 TWh out of about 150TWh of electrical production in Sweden. It's therefore likely the majority of this electricity came from hydro and nuclear, and unlikely to come from "wood chips".
> it is generated on a separate device which does not communicate with your browser, and does not know the target domain.

No, not always and many password manager solutions do integrate with your browser and know the domain for the password.
>What will it take to have them create some mechanism for recovery?

People valuing it sufficiently to choose an alternative (and most likely paying for an alternative) over the benefits of free access to an established network.
It's not about UX so much as company policies. I edited my post a bit to clarify the part of the article I was referencing.
What laws make it illegal for a regular person to republish a list of SSNs and corresponding names?
A huge chunk of all the
offices in the developed world moved into people’s homes and a not-insignificant fraction of those offices will remain in people’s homes indefinitely. This isn’t just going to work by having the office in bed. People actually need more home space per person.

Unlike many past peaks this time it actually feels like there is a fundamental change that supports the increasing prices.
is there any difference between "intellectual contrarianism" and "true skepticism" aside from whether or not you agree with the conclusions being reached (or perhaps the questions being asked)?
> Basically, when you quit, you have to go through this process of getting your number released from their mega-account with ATT or whatever, and that's just one more bit of turmoil in a time when you just want to be done with it.

I did this about a month ago at the same company Rachel is talking about. It was dead simple. I created a task where I mentioned my personal email account. The next day they mailed me a porting key, which I relayed to my new carrier. It started working within a day. Haven't had an issue so far.

I always felt that some of the writing on this blog had a tendency to make mountains out of mole hills. I can't say for sure about the rest of it, but this is definitely a mole hill.
I don't think recognizing it as labor needs to change how you feel about doing it at all. I'm doing labor that makes HN more monetarily valuable right now by writing replies and I'm obviously fine with that. And as to almost everything being labor in some way... well, that's the world we live in for better or worse.
I would say the most common one IT people would be familiar with is: "We've always done it this way."
It was interesting to me because I had no idea there was relatively affordable consumer gear like this. I was into “cantennas” back around 2005 or so but hadn’t thought or read about point to point wireless connectivity for many years.
why electrolytes?
You can build upward. You can actually "make" land like in Monaco for example. The land is there, its just the way its used. And making it so you can't sell for profit would decincitive new construction projects even more.
A driving test is not based on accidents per mile. If you, by your own admission, cannot handle rain, left turns and construction work, you should not be on the road.
It ingests but it doesn’t exhale.
I'd be interested to hear from someone with deep security knowledge:

Some people have dismissed OpenBSD's mitigations as overhyped (i.e. - things like W^X are not the main problem, linux has long caught up, etc).

But now we see Apple adding precisely some of these mitigations.

Where does this leave such architectural countermeasures? Are there real gains from investing in such low-level things? Are they irrelevant in an age where many laptops still have ports that give direct DMA access, users are not savvy and sandboxes incomplete?
I'm astonished some companies push the "user your own phone, which we now basically can control" angle. I mean, that's really shitty.

I've been working for the same small software shop (single owner, and I trust him) for 14 years, so the entire development of the modern mobile ecosystem happened while I've been in this job.

I use a personal laptop for all my work. I do this because I have Strong Preferences, and there's no way for the company to interfere with my computer. I can say this because (a) I trust the guy and (b) it's not actually possible for our corporate stuff to affect my personal stuff. (My computer isn't on the domain, for one thing; for another, we've all increasingly moved to "remote desktop into a VM in the colo" as a work pattern, even the devs, because it puts us all closer to the app servers and database servers. What device we use to reach the corporate environment is increasingly irrelevant.)

But this is a post about what OTHER people should do. Most people aren't in my position. Anybody who works for a big corporation -- which I define as "anywhere your boss has a boss" -- should absolutely assume that Bullshit and Chicanery Will Ensue at some point, and treat your personal computing security accordingly. Don't cross the streams if you can at all avoid it. If you must, minimize exposure.
They obviously did have a conscience. That was why it was deemed a war crime in the Hague Conventions to fire bomb cities, it was then re-iterated in much more explicit terms in the Geneva Conventions.
Reactive changes with server side templates is less complicated than using a frontend framework.

Just fetch the pre-rendered HTML fragment and put into the page. Done.

And the good thing is that you can render a server side component either as part of a full page load or separately for a dynamic update.

But if you have decided to do frontend rendered templates, then I agree, pick one of the popular frameworks from the start of the project.

Vue is IMHO a better pick than React, Vue has better ergonomics and is just better how everything is tied together. Vue is a well designed framework.
If you're using work profile and the company doesn't literally own the phone, there's not much they can do.

Remote management (such as remotely doing a factory reset) only impacts the work profile. I think the only thing they can do outside of the work profile is check what version of Android you're on to see if you have the latest updates
+1 for dehydrated [1]. Aside from being able to run basically anywhere, it is very easy to script: Create a file with the list of domains you want, and run `dehydrated --cron`. dehydrated will obtain certs and/or modify existing and/or renew, or just do nothing.

Certbot is designed for interactive use: obtaining, changing and renewing certificates are all distinct commands, and if you tell it to obtain a cert you already have, it'll just obtain it anyway. Handling this from a script is a huge pain.

[1] https://github.com/dehydrated-io/dehydrated
YubiKey uses U2F and FIDO2/WebAuthn. The YubiKey also does a lot of other things, depending on which YubiKey you have... but if you want 2FA on random websites, those are the most likely protocols (used for GitHub and the like).

The basic U2F + FIDO2/WebAuthn is the least expensive model, around US$25. These days it works seamlessly on Chrome, Firefox, and Safari.
Came here to recommend WGU, as well - it's my alma mater.

They're not a great school, but if you know how to code and want to fill in knowledge gaps and get a piece of paper at the end, they're a great fit. Plus it's possible to get a bachelor's degree in associate's degree time or less (I did not because I don't have enough focus in my day to do more than a full-time course load alongside a full-time job, but I know people who did WGU's CS course in under two years).
Because just like shaming the use of drinking straws, it’s a low effort (and in my view mostly inconsequential or even misguided) change that gives you a feeling of moral superiority.

Actual sacrifices are hard and uncomfortable. Who wants that?
I Moved to Warsaw, Poland from Palo Alto, California
What about giving people a choice like this to pay for the labor? Either pay $1 per month for your account, and then this service is free for you whenever you need it, or have a free account, but then this service costs you $1000 if you ever need it.
Pardon me for the language, but it is fucked beyond repair. We've destroyed the planet. I wish to go back to analog life.
Hmm. That commenter’s username seems familiar…

Thanks. :)

> The problems introduced by caches have been further exacerbated by the current trend towards increased parallelism. On recent processors implementing simultaneous multithreading [18], such as Intel’s “Hyper- Threading” processors [11], access to the L1 cache is shared between two independent instruction streams

And here we are 16 years later, with NO_SMT. Neat.

Perhaps my emotional outburst wasn’t substantive, but boy was it satisfying. I’ll try to restrain such urges in the future, but somehow I doubt a 16 year “told ya so” will pop up again any time soon. It’s half as old as I am.

I wish I could remember Linus’ remark about cperciva’s attack being merely “theoretical.”
Basically you want to slow the flow of water and increase the soil's permeability and retention capabilities. Beaver dams are a good way to start, but things like Hugelkultur burms, terracing and swales are all methods of capturing water run off and directing them into the ground where they can enter aquafers or be absorbed by the immediate soil.
Some niggles:

'Only' about half of those were in Russia itself. Breaking things out by Soviet 'provinces', which are now independent countries: Belarus had 2.3M and Ukraine had 6.9M.

Absolute numbers also don't tell the whole story: 25% of Belarus' population was killed, while 'only' 12.7% of Russia's was. Ukraine, 16.3%; Latvia, 13.7%; Armenia, 13.7%; Poland, 17%.
My somehow similar space predominance fiction would about one smaller country, unable to directly make use of space, but unwilling to leave it to other nations, intentionally causing the Kessler cascade by sending and detonating a few bombs in space.
This outlook ignores a critical factor.

Intramuscular vaccine delivery did not confer high levels of mucosal immunity. However, subsequent infection of the vaccinated may provide excellent systemic protection while allowing mucosal immunity to naturally develop as a consequence of infection.

If high levels of mucosal immunity develop as a result of breakthrough infection, that may go a long way towards reducing r0.

Further, nasal delivery covid vaccines are underdevelopment. These may also provide mucosal immunity.

So there is still a very plausible way out of the pandemic that includes the near eradication of the disease.
In this case though, the customer did buy a product, the Oculus Quest.
Okay cool. Just a product vision thing, then.
Didn't Google Books have the same policy with libraries? We scan your books and in exchange... of course we don't give you the scans.
Not to mention being associated with extremely bad business decision of dumping 30-50% your customers in one swoop
I didn't claim it was necessarily paid, just that they were convinced or tricked into it. The piece itself isn't problematic at the surface, putting an end to human trafficking is a good thing, it issue is the people behind the organization and their motives, which NYT either didn't know or ignored.
How Anne Boleyn’s years on the continent made her a match for Henry VIII
I'm no where near a subject matter expert, but I thought there was a mild correlation within humans?

https://en.wikipedia.org/wiki/Neuroscience_and_intelligence#...

I take your point on ravens and chimps, but surely whales are more intelligent than shrimps.
If you just need one ptp link, you should be able to find a used set of their older stuff. It’s an 80m link and you’re not trying to keep your CPEs consistent like a WISP.
Let's be honest we all remember a stupid thing we said or did 20 years ago.

TFA briefly mentions the hippocampus owning these kinds of episodic memories in humans although cuttlefish don't have hippocampuses(i?).

It's weird how "embarrassment trauma" memories can last so long and can force that sort of weird ooph sigh every time we recall them.

Perhaps cuttlefish experience every meal as an embarrassing memory. (Kidding but only kind of. The experience of memories is interesting - Radio Lab did a series on it iirc.)
Well, humanity still exists, therefore no disease wiped out all humans. That's a form of equilibrium, and it's a lot better than some other species.

And now we have decent medicine, we can properly turn the tables on diseases. mRNA vaccines are literally sci-fi stuff, and now they're here! Antibiotics weren't even in sci-fi, and we've got them (though they're no longer panaceas).
I had to use that toggle as well, and that struck me as bizarre. Why is it not on by default?
They understand the value to the reader, just not the value to the marketer. It's a pity the two interests aren't better aligned in this case.
Very hidden. The 11.5.2 patch from last week had no release notes (https://eclecticlight.co/2021/08/15/last-week-on-my-mac-trus...), and Apple replied to inquiries with "No further details on the Big Sur 11.5.2 update will be released" (https://twitter.com/ClassicII_MrMac/status/14256327792624312...).
In other news, I built and deployed a "2FA Mule" last weekend.

It's a stock android phone with no google account and no apps installed except for "SMS Forwarder"[1].

It is configured to forward all SMS to an email address via encrypted SMTP. This means that I can receive these 2FA codes anywhere I have Internet access - such as an airplane or newly arrived in a foreign country where my SIM card does not work.

The "2FA Mule" itself is plugged in at my office in a corner.

I'm not employing this for anything sensitive but it's interesting to consider that I can use SMS based 2FA while divorcing it from my day to day SIM identity ...

[1] https://play.google.com/store/apps/details?id=com.frzinapps....
A taken branch on the 6502 takes 3 cycles. A not taken branch followed by a Return From Subroutine instruction takes 2 + 6 cycles.

Looking up the conditional return instructions on the 8080 seems to show it takes 5 cycles when false and 11 when true.

So the two 6502 instructions add up to being two or three cycles faster than one 8080 conditional return.
Your first sentence is correct, a driving test is a no-op, at least where I got mine in Florida, and then grandfathered into California where they didn't even do a driving test, just a written one. Licenses are revoked if you get in enough accidents within a certain time period, so it's effectively the same.

I can handle quite a lot, but I don't handle a lot of things that a self-driving car can like 360 degree vision at all times or lossless memory of millions of past trips. Nor can any other human.
It absolutely is a speculation driven market, and has been for a long time, and that is the key driver for housing prices, which is why housing price increases coincided with a massive increase in money supply.

People talk about adjustable rate mortgages and such from the last bubble, and these sorts of thing played a role and helped nail in the people at the bottom, but they aren't what caused that crisis. Turning a market for an inelastic utilitarian asset into a speculative market is the fundamental cause, everything else is just an instrument of that perverted market.
It'd be nice, but almost nobody does that. Wish they would, obviously, but there's apparently no market call for it.

There are other considerations in picking a card, though, and I'm generally happy with the overall experience with Amex.
Well, I made no predictions for the future. :)

Vaccinated people are still mostly fine, even with Delta. You just don't get the close to 100% protection against severe disease, it's a little lower than that. It's still pretty good protection against severe cases (talking about mRNA vaccines).

What's clearly disappointing is that the vaccines are not very good at preventing Delta from spreading. I have not seen good estimates, but the numbers floating around seem to indicate the vaccines (again, mRNA) are still at least 50% effective against spread, but nowhere near 100%. That's the biggest gap right now.

It is true that viral loads are orders of magnitude higher with Delta. That is still compatible with all the statements above.
Sounds good but a problem with Apple's latest releases are that a lot of its security features listen only to Apple and not to the user.

This doesn't concern most of the improvements mentioned in the article, those are purely technical improvements at a very low level. But the signed system volume for example (also mentioned), while a good idea, lacks a convenient way for the user to make changes to it. I'm not very happy leaving my security to a black box and just trusting the supplier implicitly. This is a supplier that introduced a "get root with blank password" bug and the "your password hint is your actual password" one. Sure, everyone makes mistakes, especially for that reason I'd want to have more access than they offer now.

macOS is becoming more and more like iOS, which is also way too closed in my opinion. More locks is always good but the user should have a key, not just the supplier.
I'm following the studies around nasal covid vaccines. https://www.voanews.com/east-asia-pacific/researchers-begin-...

The theory is that they will create a better early response in the cells where the virus makes first contact making it more likely to stop replication early.

If it works it would seem this could be a more effective way to vaccine for respiratory viruses.