skysight-inc/HackerNews huggingface dataset:
Look, I'll just say it directly because (slippery-slope fallacy aside) we all know this is how things will play out in a few years after this gets rolled out:

gov: "hey Apple, pedophiles are rampant rn, do you really need to wait before the devices upload photos to icloud before you use that on-device scanning? here's some cool proposed legislation to motivate the conversation. oh also here's some more images that are illegal."

This conversation will happen behind closed doors with much better wording and probably with real stakes for Apple. They've built a dream technology for control freaks in government across the world, something that we in the technology sphere have traditionally fought against for decades. All it just needs is a honest day's work to scan all the time vs on upload.

This is the fight to fight if you'd rather just not deal with a future when, surprise, the scope creeped but now its too normal to oppose. People will get vanned by less benign government who interpret things far more mundane than pedophilia as undesirable.
I'm hesitant to post the link as it's still very alpha, but I am developing a Jira alternative for exactly this reason! Check out https://tahsk.com and let me know what you think I'd love some initial feedback.
> The saying could just as well be "it’s not my xyzzy of wargbl" and, if it became popular enough, would be perfectly understandable

Yes, and it would still sound like total nonsense. I actually know concrete examples from internet culture that are pretty close to that. "I shiggy the diggy". Total nonsense yet becomes second nature after lurking certain forums for a few days.

The cultural context in the "xyzzy of wargbl" case is you made it up to prove a point. If it somehow became popular enough, fully understanding it would require the context of our conversation. It doesn't help explain the word choice since the words were made up to begin with.

Now that I thought about it, the "my cup of tea" thing must mean tea was extremely important to english speakers. Tea drinking must have been integral to their culture. They developed preferences and the concept of one's preferred tea made it into the language as a synonym for preference. Still surprising to me since this never happened to coffee or any other beverage.
This is the most likely outcome. Moreover, they won't even announce it.

Apple learned a valuable lesson here. Roll the panopticon out in secret, and don't announce it. They've done a very good job locking down their modern devices, enough that security researchers would have an exceptionally difficult time proving that they're doing it anyway.

GrapheneOS is still a viable option until Google ends upstream security updates in 2023. That's a solid two years for Purism, PinePhone, and anyone else working on linux phones to bring their performance and feature set up to modern standards.

The correct course of action is to buy a Pixel 5, run GrapheneOS for the next couple years, while donating to the main privacy-focused linux phone projects, and make the switch again in 2023.
Eh? Says who? Every C programmer I've ever met knows about this. It's basic C.
If you consider SAAS and locked-down subscription models to be innovative, then this is definitely true.
"…in Order to Implement It Silently Once the Uproar Quieted"
For me, it was "no need". I liked everything I saw. I just had no need to write Rust.
I've been heavily considering getting a PinePhone, when a new iteration comes along. I only need my phone for calling and texting, anything on top of that is just icing on the cake. If I can run all my favorite GTK apps on it, then I'll consider it a slam dunk.
It's probably both a bit more fair, and also more instructive to others, to say that they tried to create a sanitized code environment, then executed certain elements of the user input as code.

It isn't quite as stupid as they just executed code blindly, and this also highlights the difficulty of this approach. It is extremely difficult to get this approach to work correctly, to the point that it's probably reasonable to just treat it as impossible and reject it.

It is also likely that "they" is actually at least two sets of people; one who invoked this evaluation code on the "queryString" variable, and another who created the evaluation library, and these are probably not in the same company because it reads to me like this code evaluation is part of a external-to-Atlassian library. Would appreciate confirmation or denial of that from people more familiar with the Java ecosystem than I am.

And that further highlights the difficulties of maintaining, or indeed even communicating, security dependencies across entities like that. I suspect that whoever wrote $!queryString, either didn't really understand what that ! was doing, or assumed that behind that ! was some sort of safer kind of execution than turned out to actually be there. (It would be interesting to know if Atlassian needed to do anything else to deal with the fact this is technically an API change, or if the ! was never necessary in the first place.)

Upshot, I wouldn't call this "one dumb mistake, obviously never execute user input lol", it looks to me like a serious of issues crossing between many subsystems and probably several entities. I'd call this less obviously a problem with a particular developer or Atlassian per se, and rather more of a good demonstration of the sort of pervasive, systemic issues we face trying to keep things secure in a world of imperfect developers trying to wrangle hundreds of thousands and millions of lines worth of code and keep it secure. As I examine this I'm finding my reaction is less "lol" and more a sobering reminder of how little it takes to screw up this badly and how hard this can all be.

Programming is just so much easier when you don't need to worry about security.
I wonder what the value of the inverse of this is - time theft. How many employees are paid to be on the clock but are not working? I bet it's in the hundreds of billions per year nationwide.
TBH these days it’s probably quite rare to use OpenBSD in prod. Most companies use either Linux or “the cloud”.
So if a creep amasses a database of those even though individually they aren't "illegal", what do you do? You can't call it CP for one but not for the other. Especially if they're made publicly available on facebook. It's a lame slippery slope argument but it's gonna get hashed out in criminal defense cases where Apple is calling someone a pedophile.
As somebody who lives in the Northeast US I'd like to not see a "true delta wave" until the first Tuesday after Ragnarök.
What is the current toolkit?

Win32 is quite basic in the set of controls available, almost everything in traditional Win32 applications is custom drawn, beyond what you also find the HTML forms as components.

Then there are all commercial components that are so common in Windows applications.

However if you will, the future is WinUI/UWP, and that is the only one getting full Mica support.
You're entitled to your opinion, but what you're suggesting is wrong. What you've said are some observations made and some interpretations based on evidence gathered but none of it concludes that cellular organisms invented DNA, that suggestion is still stuck in a chicken vs egg scenario.

The fact is, we don't know how these systems could have created themselves or been created abiogenesis. There are wildly different theories, but it's far from a closed case.

I used to think the same thing as you because that's all I was taught to think, but perhaps if you looked at what synthetic chemists think about abiogenesis you may find it interesting / informative to see what they have to say about the challenges involved in it. An interview with a synthetic organic chemist on the topic: youtube.com/watch?v=r4sP1E1Jd_Y
This advice makes me extremely unpopular in NAS forums, but I strongly recommend you never use any other RAID option than RAID-1. When a disk goes bad, you have a single mirror disk that you can directly and immediately connect to your computer and recover from. With any of the NAS proprietary RAIDs, or something like RAID-5, you'll need to somehow hook up 3 or 5 disks to your computer to have any chance of a recovery.

The NAS gurus always say "RAID is not a backup", and it is true you should have additional backups. But no backup solution is perfect, none get updated every day, especially if you plan on keeping the backup off-site. For most users, the NAS is the backup. All I'm saying is that when a disk fails on your NAS, you'll be in panic mode and will want the easiest, most direct path to data recovery, and there is no RAID option in this scenario preferable than RAID-1.
Have you considered the number of client-side SDKs surreptitiously doing things on “your” mobile device?

One of the most common is “scanning” your location constantly, feeding your daily routines to marketing data aggregators, which is arguably more invasive of the average person’s privacy than CSAM flagging.

I’ve posted in the past a list of a short-list of offending SDKs frequently phoning home from across multiple apps from multiple developers. Since weather apps sending your location surprised people, I thought this problem would get more traction.

This Apple thing, where this is iCloud file upload client SDK doing a thing on upload, is an instance of this class of problem.

It’s not an Apple thing, it’s a client SDK thing, and the problem of trusting actions on “your” end of a protocol or cloud service is not a solved thing.
I wouldn't be surprised if the shortages hit other manufacturers introducing new models as well.
Shard rebalancing in the Citus 10.1 extension to Postgres
There's various ways how to do those in fonts. I think Apple uses bitmaps. Microsoft uses several overlaid glyphs in different colors. And there's also a way of embedding SVG as glyphs in fonts.
I agree it’s a failure. On the other hand, they failed their way into eventually making the right decision, recognizing they had been wrong, and apoligized. I’ve seen worse!
Innocence over credible suspicion.
Your views on this matter seem, to me, to be virtuous and empathetic.
I suspect that being influenced by presentation is ineluctable however, which might be part of why you don't see much agreement.
That's true, but in my poor man tests, Babashka was in the ballpark of Python for me.
Recently read the book "Running Out" about aquifers in western Kansas. Takeaway was that the overwhelming majority of farmers were explicitly targeting emptying the aquifer within their lifetimes.

Unclear what they expect to happen next.
Traceroute(8) Gets Speed Boost
> … comes preloaded, with … and every app you coul imagine.

Bloatware?
I became very unhappy with Synology when I discovered that boot loading was signed, and I couldn't just put Debian on this box that was running a hugely overweight customised Ubuntu with background services that were difficult or impossible to switch off.

The NAS is an underpowered DS216 (two 5.25" drives mirrored, 800MHz ARM, 256MB RAM) that I'd bought new, foolishly assuming the official OS would work just fine on it. More fool me, eh?

I still have the device - but I am never buying another, and I actively disrecommend Synology going forward.

My next NAS box will probably be an old Microserver running FreeNAS or some reasonable OS. The Synology's predecessor was a tiny Linux box that I had to install my desired services on by hand, so I know it's feasible.
India’s DNA Covid vaccine is a world first – more are coming
"all that transpired played a role in his condition" just means that when something medical happens to someone, obviously everything before the event is evaluated. That doesn't change the fact that

a) Sicknick was never hit by a fire extinguisher, contrary to the early frenzied media reports—corrected weeks after the fact, if at all—that linked such a blow to his death (and contrary to his family, which always insisted that he had never been attacked so)

b) the autopsy specifically looked for some causal effect from the pepper spray and his death, and found nothing

Wecht did not examine Sicknick but claims to be "shocked, amazed" by the "natural" verdict for the officer's death. He does so using a worker's comp example, which is inapplicable in this case. Were it applicable, every single time a police officer dies of a heart attack or stroke a day after a stressful event, the pathologist should rule that death as "non-natural", which of course is nonsense. Heck, Wecht goes further and says—again, without having participated in the autopsy—that there is a strong case for ruling the death a homicide! Good grief.
Too many of us don't have the guts to say no to excess work.
That's the thing that gets me about the idea that the world needs more food.

Yes, people are better off being fed rather than not in countries where food is scarce. Better yielding crops are great for this.

Should "developed" nations end up relying on rapidly growing crops that are selected for macronutrients (or perhaps just calories) at the expense of micronutrients? In my uncommon opinion, the answer is a likely no given that we generally eat way more than is necessary and at the expense of our long term health.

The only way I can see it being beneficial in places like the United States is if it allowed individuals to grow their own food faster, cheaper, and more easily. But then we will likely implement regulations to discourage people from growing their own food. But that's pure speculation.
One person I know of gets real stock (AFAIK). It took a few years of working there initially before they were vested but now he can choose to sell them immediately after they become available to him every year and pay income tax on it or hang onto them for >= 1 year and then they get treated as long term capital gains like regular stock. He bought his entire house with the stock he accumulated over the 10ish years he worked there.
Alternatively:

I have 1 opening at my company. I set up a team to handle the hiring process for that position. They choose an internal candidate, who then transfers. I still have 1 opening, despite having completed the hiring process for the open position.

Being rejected from an internal position didn't guarantee that the person would quit, just increased the likelihood. From an "expected hiring committees" perspective, having an internal transfer guarantees two hiring processes. Having an external hire, provided the number of internal candidates is somwehat low, should result in (on average) less than two hiring processes.

>Except in the first scenario the person transferring is most likely familiar with internal tools, practices, systems, deployment, culture, goes on and on. Not only that, I have tangible, full fidelity data on their performance in the form of artifacts produced for their current team. Externally, I'd need to rely on data collected in their interview process.

This part I fully agree with. It could definitely turn out that the benefits of an internal transfer more than outweigh the increase in resources used on hiring.
Let's take an example estimate like: number_of_options = (salary * 0.10) / last option valuation price

What's good about it, what's bad about it?

Realistically, as an employee, your total comp has a bunch of factors that include bonuses, insurance, benefits, travel rewards and flight/hotel choices, expense discretion, charity support, the list goes on to contain a lot of things.

These frame the question in terms of what portion of that total package value to you do you want a in the form of lottery tickets? (and not their price or claim of value on it)

Maybe you say, "nice salary, I'd like an additional notional 20% in options over 4 years," etc.

Maybe you are doing fine and you see a near term exit and you say, "This company has a 2-3 year horizon, I don't need the salary as much and I'll trade 25% of your offer for options provided you provide me and my lawyer with the full cap table. If not cap table, I need to price that in to the risk on the salary and I'm going to need 20% more."

If you don't have negotiating leverage or skill, you just say, "thank you!" and throw them in your change jar with old lottery tickets.
Question for hobbyist mushroom growers: how essential are all those steps he took to ensure a pure culture? Is it common for wild harvested mushrooms to have competing organisms that would overwhelm them?
ONNX Runtime Web–running your machine learning model in browser
If you check the github issues and community talks on YouTube, it is quite clear that when Microsoft went full steam with WinRT, most likely the remaining UI teams got ramped down.

As they pivoted back into Reunion and merging Win32 and UWP worlds, new teams were created, so....
It's painful to see that GitHub Copilot is called "AI". For god's sake, it is not AI. It's just an advanced auto-complete for coders. GPT-3 is close to AI, GitHub Copilot is not.

Jesus Christ, please make them stop. Stop using AI as a buzzword.
Maybe I'm missing something but it doesn't seem that Bungie provides a link to the full guidelines? Sounds like it would be interesting to read.
It saddens me that a developer decided to stuff json into the registry, when it's perfectly possible to instead store nice and compact binary data structures. But this is 2021, can't have efficient data representation anymore.
I also have a Synology and it kind of blows me away how much stuff is just... available. And whatever isn't available you can install via Docker pretty easily.

One thing to watch out for is upgradability. My system has 4 GB of RAM, which is Not A Lot. There's an easily-accessible SODIMM slot that I can throw an 8 GB stick into, and an almost-completely-inaccessible SODIMM slot with the original 4 GB. If you're going to have slow disks you'll need lots of disk cache, and maxing out mine is looking to be a full afternoon project and not a quick in-and-out.
Synology seems like a good choice to me. Rarely heard a bad word about them. I consider going DIY to save a few nickels but if I had a larger NAS budget I would definitely go for Synology.
How I like to work (as an IC)
Anyone experience with companies in the Netherlands? I have something that's called STAK but it's shrinking round after round.
Sorry, that was a typo, I meant provably. As in constructions that have been proven to be secure assuming the underlying primitives are secure.
Specifically the one famous joke (that even made it onto The Sopranos)....

What is the hardest thing about roller blading?

Telling your parents you're gay.

I never knew a joke could change the course of history.
due to chip shortage, the features that are not nessecary for an automotive to be an automotive cant be included so -just stop making automotives
The reason people aren't talking about the decline of the dollar is because the dollar is only strengthening in its reserve currency role, which is something that requires a basic awareness of how international trade works to understand. Sadly, there are many who lack this understanding and view the role of the dollar as a type of popularity contest or measuring of a nation's economic "strength", which is not the case at all. Rather, the international adoption of a a reserve currency is determined by the nation's

* tradition of property rights and rule of law (will your money be more likely to be seized by the host nation if it is parked in nation A or nation B)

* openness of the economy to absorb foreign capital inflows -- are you able to buy as many dollars as you want whenever you want?

* openness of the economy to allow foreign capital outflows -- can you withdraw your money whenever you want?

* Overall size of the nation's capital (e.g. debt) markets -- are there deep, liquid capital markets that can absorb large investments with little friction and at a high speed. How developed are the debt markets in that country?

* Are the debt markets relatively free of domestic regulation?

Obviously no nation receives perfect marks in all categories, but the US is at the top of this list overall, and no nation is even trying to unseat the US in these categories. Not at all.

Note that the strength of the dollar has nothing to do with whether our economy is growing or shrinking, or whether we are producing more or less, have high or low unemployment. What matters is rule of law and openness to letting foreigners purchase US assets. Basically it is the exact opposite of China's economic policy. In fact one can say that China's strategic priorities are to not do well on any of these scores.

Therefore only absolute fools believe that China can ever be a global reserve currency, when its own strategic agenda is to be the opposite of a reserve currency issuer. China wants to be a reserve currency accumulator! It wants to buy reserve currencies of others, not sell its own. If the RMB ever became a reserve currency, it would be a massive defeat for all of its top economic priorities, as it would be required to run massive trade deficits, accept unlimited amounts of foreign ownership of its domestic capital markets, adopt a hands off policy for regulating capital flows, adopt an independent judiciary, and drop most of its currency controls. It would need to hand over control of large segments of its economy to foreigners. Now how likely is China to agree to do that? It would be a total defeat of their existing priorities and political leadership.
Twemoji is amazing. I rooted my Android phone just so I could replace stock emoji with Twemoji.
That was third party apps. This is the OS itself.
Thanks for the hint, this is a useful to know setting. However your statement appears to be wrong, requiring reduced motion does not stop the background rainbow animation from happening. I am running Firefox and verified my prefers-reduced-motion setting in the example result box of https://developer.mozilla.org/en-US/docs/Web/CSS/@media/pref....
Not sure why you're getting downvotes.

iOS is where all the profitable users are. While that holds true, developers will be there to sell things to the profitable users.

The principled indie developers might leave in protest, and that would be a terrible loss for the platform's soul, but realistically the vast bulk of money flowing through the App Store is not going to the indie developers.
You can just use GraalVM for that. Also, Joker does not let you do what you want, it is not Clojure hosted on the Go runtime, it is a Clojure interpreter runtime implemented in Go, so with Joker you always need the joker binary.

If you want to produce native shippable statically linked binaries with Clojure look at GraalVM native compilation:

https://github.com/lread/clj-graal-docs
GitPod is awesome and of course ahead of time. I for one, however find it heartwarming - groups of humans competing against each other and cheering for each other with sweets and cakes.

We, probably at the same time can be the worst and the best creature on this planet.
I'm assuming you're not some kind of shill, as it should be, and I do think your point has merit. At the same time I can't help myself from thinking this sort of deflective take has at least some roots in the PR efforts of "a specific family" and the industry. All it takes is a few convincing arguments to be made by real shills and taken up by others that "no, we shouldn't blame the Sacklers, because..." That's how PR does its work. That aside, I think it's clear their family got away with profiting off of wrongdoing, even after the fines. Profiting off of wrongdoing is much too common for big businesses. In some sense they can afford not to be held to account.
Is it fair to call it an ML based system?