skysight-inc/HackerNews huggingface dataset:
> ...set the bar about 1-2 std. div. above their typical hire.

How's that metric determined? For the candidate, current staff, and interviewer themself?
As lots of us know from experience, it's very ver hard to get an in-production project into a warning free state with warnings at maximum and warnings as errors. I'm currently working on a new project this year and it has been such a joy to have near max compiler warnings as errors with multiple compilers (and clang tidy and clang format) right from the start.
I agree with this. I had to show their escalation support how to use dig to view public DNS records vs. their own internal DNS. I still have some domains with them, only because all the other registrars seem to be following the same path or have other issues I find even more repulsive. The process to become a registrar is just tedious enough to keep me from doing it.
Show HN: Heroku Alternative for Python/Django apps
Minted all 21M bitcoins today
> before "modern electronics", so the charge lasted longer than a few seconds.

If you take any capacitor and charge it, it'll take quite some time to discharge on its own.

The discharge is usually controlled by a resistor in parallel with the capacitor on the PCB. Removing the capacitor from the board disconnects it from the discharge resistor. So not much "modern electronics" going on here :-P
Travis followed this basic model years ago also, though I don't know if they were explicit about the privileged/unprivileged; it was more just no secrets added to the environment for PRs from unknown forks.
Is there an app like "virtual lawyer" of some sort where the user can enter where they are and get coached about their rights and obligations?
You're righty it's exactly the premise of the article.

Seey I've been building in the crypto space since a long time and this post was also a way to express my impatience. I'd like some things to have progressed further by now. Particularly all the web standardization points...
One reason for having the flags before the <path> is so that you can terminate the flags by using '--'. This is especially useful to prevent dubious files being expanded that might start with '-' and be interpreted as flags that leads to unexpected results.
> I had each function definition in its own .sql file, with a preceding "drop function" call, and a Makefile clause to run them all.

why drop instead of CREATE OR REPLACE ?
You've got to love that -Wall rusted in place as meaning not, in fact, all warnings, but instead just some arbitrary set of warnings that some people wanted many years ago and now we mustn't change it because too many projects have code that builds under -Wall -Werror only because the warnings that code triggers weren't covered by -Wall many years ago.

https://xkcd.com/1172/ in action
Ha, gotta love the Nintendo DS stylus!
I'm glad SSRF is getting more attention. It's incredibly potent, especially in cloud/k8s/micro services eras.

Some good examples:
- From screenshot service to Kubernetes account takeover at Shopify: https://hackerone.com/reports/341876
- SSRF and the Capital One breach: https://blog.appsecco.com/an-ssrf-privileged-aws-keys-and-th...
> Any insights from the early days of the development of email? Does LibreSignal fork, provide interoperability, and just take over, becoming the "email" of tomorrow?

The project was discontinued. You can't develop a "Signal client" without relying on Signal servers. If you do, then you'll need your own server and there is no facility for it to talk to other servers. That pretty much makes it dead in the water.

Something like Matrix which does have federation lends itself to that usecase though.

> Protonmail stated they don't log IP on their homepage. What they meant was "unless the cops ask us".

They don't log IPs if you don't enable advanced logs. They do however and have always said they will comply with legal requests from a Swiss court.

It is in their privacy policy, https://web.archive.org/web/20210627220655/https://protonmai.... This snapshot is from earlier this year.

> We will only disclose the limited user data we possess if we are instructed to do so by a fully binding request coming from the competent Swiss authorities (legal obligation). While we may comply with electronically delivered notices (see exceptions below), the disclosed data can only be used in court after we have received an original copy of the court order by registered post or in person, and provide a formal response.

It's also mentioned on the threat model page https://protonmail.com/blog/protonmail-threat-model/ and

> The Internet is generally not anonymous, and if you are breaking Swiss law, a law-abiding company such as ProtonMail can be legally compelled to log your IP address.

Also mentioned in their transparency reporting https://protonmail.com/blog/transparency-report/.

So that never was if the "if the cops ask". There would be many cases that are denied, and we know this from their transparency reports.

The issue is some very silly people thought this meant a law abiding company would risk prosecution/contempt by not abiding by the law/courts. They failed to read any of the company's policies which have been on the website clear as day and got upset about that.

The reason Protonmail is modifying their marketing is to keep people happy who don't have the attention span to learn about any of the products they use from reading any of the documentation.
The new American (Micro-SaaS) dream
Matching Outfits for Couples for Different Occasions
No this article is one year old. But it's true that it's a rather weird coincidenct that it popped on HN exactly a year later.
Apple shipped X11. It’s really just Microsoft.
This is misrepresenting the referenced paper. They specifically tested brain tissue, but in a context that invalidates their results for realistic (in-vivo) scenarios.

And anyway, heat is not some mysterious cancer-causing phenomena that's insufficiently studied by science. It's heat! You know, warmth. It's not only necessary for mammalian life, it's downright pleasant. People voluntarily put themselves in saunas, hot tubs, and pay to get hot stone massages. It's nice.

When it stops being nice, you can definitely tell! There's no need for "5G radiation" measurements with scientific instruments. When you're heated to the point that you take damage, it hurts. You have a built-in sensor for that. No need for lab tests.

If your phone isn't burning your hand, it's not burning your brain. It's just that simple.

PS: insects are 100% for certain being wiped out by pesticides, which are poisons specifically designed to kill insects. You'd have to have fantastically good evidence to argue that no-no-no-no, it's not the millions of tons of insect poison killing them, it's the microwaves that we've always used before, but suddenly they're deadly because they're used for mobile phones... slightly differently to how they've been used previously.

"...according to the study presented in Stuttgart, which is yet to be peer reviewed."

No peer review? Shocker.
Quitting Entrepreneurship, Getting a Job
A charged capacitor has a surplus of electrons on one side, and a shortage on the other. A bleed resistor allows current to flow from one side to the other, balancing the charges on both sides so there is no relative voltage. Q=CV
No they aren’t. Anything which touches bodily fluids must be authorized by fda
Careful, nononolaughs, you're making jokes and spelling imstakes!
A universal system for decoding any type of data sent across a network
Black People Who Oppose Critical Race Theory Are Being Erased
I think that's a huge part of it. Most of the users nowadays are using smartphones and tablets.
Maybe a reference would help - I'm not sure how this is a meaningful statement.

It seems that there could be many somewhat "generic" Western European jokes about despots which date back to Roman times. But without more information I can't think of any jokes at or about Hitler specifically that could possibly date back to the Romans.
Tk and gtk2 apps were performant and used way less memory so that doesn’t seem like it should be necessary.
Was blocked
OTOH, we can rephrase the title as "Robots getting cheaper than a living wage in Texas".
Edgar Allan Poe was a true Genius in the sense that more than any other author, his writings spanned very many genre of literature. Some of his stories, eg. "The Man of the Crowd" defy any simple categorization.

And the language is just beautiful, a couple of my favourites;

From "The Murders in the Rue Morgue";

THE mental features discoursed of as the analytical, are, in themselves, but little susceptible of analysis. We appreciate them only in their effects. We know of them, among other things, that they are always to their possessor, when inordinately possessed, a source of the liveliest enjoyment. As the strong man exults in his physical ability, delighting in such exercises as call his muscles into action, so glories the analyst in that moral activity which disentangles. He derives pleasure from even the most trivial occupations bringing his talent into play. He is fond of enigmas, of conundrums, of hieroglyphics; exhibiting in his solutions of each a degree of acumen which appears to the ordinary apprehension præternatural. His results, brought about by the very soul and essence of method, have, in truth, the whole air of intuition.

From "The Purloined Letter";

"That is another of your odd notions," said the Prefect, who had a fashion of calling every thing "odd" that was beyond his comprehension, and thus lived amid an absolute legion of "oddities."
You may want to have a look at BritBox, which combines content produced by BBC and other UK outlets (ITV..etc).
The Right Roadmap to Build an MVP: From Idea to Launch
In JavaScript a zero-length regexp `//` coincides with a comment syntax, so it is invalid and alternatives like `/(?:)/` should be used. In my opinion this is the correct approach.
How the pandemic turned shipping containers into the hottest items on the planet
1. f32::from_bits/to_bits etc allow safe bit-casting between primitive types. Libraries like safe-transmute wrap up unsafe array pointer casts into safe APIs. Rust has great tools to address the use-cases where C would use unions.

2. The big picture here is that for graphs and other data structures, you figure out a safe API for the data structure and write a library that hides the unsafety behind that API (or just use a library that someone else already wrote). You get a clean separation between a small amount of unsafe code and a large amount of safe code. This is the Zen of Rust and it's why "Rust can't express <XYZ> safely" is almost never an important issue in practice.

3. Rust's ownership and determinstic destructors mean you really have to go out of your way to create a memory leak; "just forgot to free it" doesn't happen. A memory leak has to be something nontrivial like a global data structure that is added to but not removed from, or a reference-count cycle that isn't broken. There aren't really good automatic static techniques for detecting these AFAIK (and I have a background in static program analysis) --- you would need something that models heap states over time, like shape analysis, which doesn't scale. As far as I can tell Rust at least as strong as any other real-world non-GC language at preventing memory leaks, certainly stronger than Zig which lacks ownership and destructors.

5. This is an issue I don't know much about so I'll leave it.

FWIW the endgame for unsafe code in Rust is formal semantics for unsafe code, proof obligations that guarantee the unsafe code preserves Rust safety invariants, and proof-assistant tools that let you formally prove the safety of your "unsafe" code. There's a lot of work to get there but that work is well underway.
There's a line somewhere between vaguely imitating sounds and actually imitating speech, and I think this duck is on the side of the former.
The crap dev environments for iOS and Android are the real reasons people gave up on native.
Aye I remember bringing back a lot of dead monitors, TV's and even a cheap Pentium 4 motherboard by swapping caps.

A place I worked at had a bunch of 19" Optiquest LCD monitors which ALL eventually died from a single bad cap on the power supply board. I fixed every one of those monitors, think it cost less than $10 to order the caps from digikey.
I suggest you do research in Ethereum on:

- staking

- automated market makers

- p2p lending/borrowing

E.g. the compound.finance whitepaper explains some technical details well.

One incomplete definition could be that you submit your money temporarily to the control of a mart contract.
Arguably a (valve-based) pumping system without valves wouldn't be considered error-prone but rather non-functional? (I might be missing something, though, since I don't really know whether heart valves are dual-purpose like that.)
Part of me really wants to believe that ancient Rome’s plebeians sang “Ceaser unum testiculum habuit, Augustus duo sed parvae sunt” (or whatever it would be: please excuse my use of Google translate).
And yet monkeys & other primates can’t seem to. That is strange
>Cherry picking failed predictions from popular magazines does in no way counter decades of peer reviewed climate science

Difficult to divide climate change properly.

Divide the science only, climate change is a problem no doubt. We have options to fix the problems. We aren't going extinct in 10 years, but we have to act. The sooner we act, the less we have to do.

Divide the doomsayers, they outright believe we are on the edge of extinction now because of climate change. Afterall climate change is much easier to use compared to mayan calendar. Who after their defeat at mayan calendar and y2k and all these. They needed a new one to cling onto. So now climate change is the equivalent of multiple nuclear bombs going off every second.

Then you have the politics. AOC, Al Gore, and so many other politicians want to use climate change to push their agenda. AOC gets tons of attention because she doesn't even attempt to hide it. According to her we are going extinct in 10 years or so. To stave off extinction we need to establish millions of high-wage union jobs, promoting justice and equality, and other not-going-to-help-climate-change ideas.

Al Gore made an entire movie full of predictions that have passed now. Did you know Florida has been under water for over a decade now? That's because the ice caps have completely melted and displaced/killed billions on Earth. All because we didn't let Al Gore pull off his political ideas.

That's the problem. Al Gore has done more damage to climate change then actual climate change. What we need to do is stop doing that.
C# is also cross-platform. .NET Framework has been completely replaced with .NET Core now (and renamed to simply .NET).

The only part of cross-platform support that's a little wonky is the GUI, but that's because Forms is just a thin wrapper over the Win32 forms API and WPF was built around DirectX. But that should get a lot better in a couple months when Microsoft releases MAUI (Multi-Platform App UI).
Becomming pregnant is not being forced to give birth but being forced to carrying pregnancy to term and giving birth is being forced to give birth.

But you are right. This distinction is meaningless by itself.

What actually has meaning is if what we are forcing/forbidding you to do with your body puts your health and life at risk for some other benefit, for example for benefit of a single new other human.

Forcing someone to carry pregnancy to term to save the life of this new human is like forcing someone to giva a kidney to save some other person's life.

It's commendable but it shouldn't be obligatory.
Make your life carbon neutral?
Good day beautiful HN

For me, offsetting your carbon footprint is a super quick and simple way to make a difference for a small cost without having to change your way of life.

Personally I'm veggie, rarely fly or drive, and am conscious of my footprint in my day to day life - yet I'm starting to get stuck on where to improve next (without radically changing my lifestyle) so for me carbon offsets are an easy win.

I know it's not an end-all solution to climate change, but if everybody did so I think it would make a huge difference. Especially if they are verifiable (evidence of removal), additional (wouldn't have happened without the offset) and transparent (can be audited).

I'm wondering what this community thinks.
Disclaimer: I'm launching this solution as a subscription under https://carboncroc.com/individuals - so in a way this is market research :)
Regulation is the scapegoat for nuclear's failure, but it's equally the case that regulation is vital to nuclear (and to nuclear getting liability caps.) If the risk of nuclear were not socialized no one would build it (or insure it).

What has also prevented changes from happening is that nuclear scales down poorly, so the cost of iterating designs is so large. Making a new kind of PV cell or module, or wind turbine, is comparatively much cheaper, because these are individually much smaller and cheaper. The replicated nature of these sources is an advantage in so many ways.
Pachyderm Is Hiring Senior DevOps, Golang Engs, and Product Managers
I do use Signal. But unfortunately I lack convincing power to make everyone else use Signal.

But this is not about alternatives to WhatsApp, imo it's weird that this even happens/is possible.
> it felt like we were cheating. Feeling comfortable enough on drugs to discuss certain things is great, but it also highlighted we weren't communicating completely honestly without drugs

Take my input with a grain of salt. I am no professional.

But to me it is just like saying it is cheating to go to a therapist and talk about things you won't normally talk about. The whole point of these experiences is to shift your perspective so you can explore things under different lights. Doesn't make these experiences any less valid. You shouldn't beat yourself because it was chemically induced state of openness, it is awesome you can go there if you need to, as long as the altered state doesn't become a refuge.
This is a fantastic cross-platform project for VSCode : https://github.com/prb28/vscode-amiga-assembly

There are also similar project(s) that target Windows only and give some nice extra features such as profiling.

I've been using the above on macOS to get back into demo coding after a 25+ year break and it's been great fun/nostalgic.
Curated List of Freelancers
Notice the Venn Diagram at the bottom of the page. If you were going to put money in a security solution you would do your best work if you made sure your security related configurations were correct and remained in place. (Least privilege configuration and Change Control). It affects every other category except injection and known vulnerabilities. So then you would make sure you had good life cycle management and patch management to address the issues with software vulnerabilities and then make sure you use Prepared Statements (with Parameterized Queries) or properly constructed Stored Procedures. This is where your focus and money should go before you start doing anything else.
Agreed, the trick is to keep policy at the individual level. Because assumptions or observations of group behavior cause problems on both the right and the left.

For instance, there is a strong progressive assumption that the male/female divide if it were truly fair would be 50/50 in all industries (or at least the ones they focus on, e.g. comp sci).

But you can't on the one hand make bold statements about expected outcomes and then remain blind to the science of group differences. These issues would be far simpler if solved by focusing purely on individual achievement.
- generate code from running database and use a type-safe query builder (https://github.com/bokwoon95/go-structured-query)
AWS Jam
Ah man, and this just after the other incident where the Russian module boosters went off and the Russian agency wasn't able to communicate with it being out of reach.
Y'all smokin' weed again up there?
"The US has admitted to having 32 broken arrows with 6 nukes never being recovered."

"By some accounts, the Soviet Union built hundreds of [suitcase nukes], of which several dozen were missing. Based on other reports, suitcase nukes were never built in large numbers or were never deployed."

People in charge of nukes are like us, they make mistakes. Thats why we shouldnt have 12,000 of them
Duplicate of https://news.ycombinator.com/item?id=28446810
Childhood, Interrupted – By AJ Kay – AJ Kay
Maybe 50% of the people I know haven’t gotten the vaccine. They are generally reasonable, and I’ve had healthy back and forth with many of them. Many of them are highly educated.

None has disowned me.

My point is, it’s not fair to lump them into one big Idiocracy category.
This works in pretty much any American city.

If anything, you have to be careful with this in New York specifically, because some of the little boutique hotels have tiny lobbies that don't have a bathroom. Make sure to go for a big brand-name hotel.

The outer boroughs are trickier, but I've found that McDonald's and KFC generally have open bathrooms. And gas stations with attached convenience stores, which do exist in Queens.
Tax tires then.
that was fast, updated title.
I did this kind of a repair job to a couple of Samsung 23" 1080p screens back in 2012.

A friend gave them away since their backlights would flicker making the monitor unusable for the first 10 or so minutes after they were turned on, after which they worked completely fine.

I have little to no knowledge of electronics, but did know how to use a soldering iron. As I recall, I watched a YouTube video and was confident that if the problem was just the capacitors, then I could manage to replace them.

I opened up the monitor, saw two or three capacitors which were clearly bulging and I used a soldering iron to get them off the board.

I went to an electronics shop expecting that someone there would be able to advise on replacements which would work. As I recall one or more of replacements they had available on hand had a different "number" on it, but they assured me it was a higher rating and wouldn't affect use, I don't know much about electronics, but this made sense to me so I trusted it.

I managed to re-solder them on and they then worked perfectly.

Fast forward to today, about 9 years later, and my brother is still using both the repaired monitors. They have DVI input, 1080p resolution and VESA mounts so are actually very decent unless things like >60Hz refresh rate, higher resolution or very good colour accuracy are important to you.
So, I get really confused by Github permissions model; I know that sometimes I am forced to give something access to all of my repos when I really only want it to act on one.

Does this affect the leaked GITHUB_TOKEN, what would that token give a posessor access to, what's the scope? Just one repo, or many?

If the token gives access to, say, every repo that the user who authorized it has access to, this makes the scope of any vulnerability even worse. And vulnerabilities, like bugs, will always happen.

I've been wondering for a while how github gets away with such poor scoping of it's auth without more outcry/demand. And figured that maybe it would take an exersized vulnerability to bring attention to it.