skysight-inc/HackerNews huggingface dataset:
Yeah, to judge from a writing point of view this is a terrible introduction. It links to a Github page with a 1 line readme although the paragraph itself says "There is a README file that has some question that can be answered based off the artifacts that are also on my Github." (That README is in a subdirectory in that git repo... I think?).
I'm an embedded dev too and I just barely use SO. Too often the questions are either out of date, not relevant or questions get flagged as duplicates because a tangentially related question has been answered for a different architecture and compiler
The major issue with this paper and this protocol is that it is not reproducible.

As the protocol is not accessible / published, we cannot determine how the difference in the set of measures between participants were determined and as such no researcher can independently replicate this study.

This is why those licensed diet / lifestyle change are never science: by definition. Even if they actually produce the desired outcome, all the research is produced either by the creator or by researchers that entered a license agreement and thus have conflicting interests and bias.
I never heard about Hackthebox; do you recommend it? What is their business model?
supposedly most anodized alum pans are coated with a a nonstick coating (probably teflon/derivatives)
There are more complex reasons around managing the electrical grid which make this not such a bad thing. Reactive power and grid inertia control for example. Solar and some types of wind turbine (my understanding is that Doubly fed induction generators can) don't contribute to these factors at all.
> This might be why a few of my Highschool’s computers would interpret every 5th right click in minesweeper as a left click

This is just pure evil.
I heard about that; amongst other things, if the amount of times SRE gets pinged because of a software fault exceeds X amount, they basically give the pager back to the team that built the software. They aren't taking responsibility for reliability if the software is not reliable.

I really appreciated working with a team of SRE types, it gave me a newfound appreciation for quality in software development. I remember one instance where a colleague in my team went up to the 'ops' team and wanted SSH access to a production server to check on some settings (environment variables, I believe). He thought it was a trivial thing, you know, "just lemme have a peek" kinda thing, but the ops team flat-out told him no, if he needs to print env vars, he can do it in his own code - we did continuous releases, a patch could be deployed within minutes if passing all the checks. I loved that the ops team had the mandate from higher up to say no to requests like this, and I found them a lot more professional than the software developers, including myself.
Some falcons have nostrils that are designed to slow down the air flow so that they can continue to breathe while diving at very high speeds. Even though they exercise hard to catch their prey they aren’t winded as a result. Unlike say cheetahs that are completely out of breath at the end of a chase and have to breathe for a bit before they can eat..
Username checks out.

If you were wrong, never changed, and just trying to get away with it: suck it up.

I honestly wonder 1. why someone hated you for years, 2. the hell are you doing online that you gave that person enough bullets to get you fired, 3. don't you also have good relationship in your workplace that you weren't able to convince them not to fire you?

Get legal involved on this, you guys are nuts.
Its also anything produced by a artistic production process e.g. in software- aka build-artifacts or documentation.

As with all industries that are "birthed" by a mother-field software-security has overloaded the term inherited from its birth place industry.

In this case, its the product produced by the investigation.
Could you please elaborate on this? I’ve never heard of that being related to an IPO before, so I’m wondering if this is a standard practice for competitors to get known groups to do this sort of thing, or if this is an economy destabilization measure that’s in the playbook of some nation state actors. Any insight there?
Likely this person hasn't worked in a large old codebase outside of Google. Migrating dependencies is a large part of the maintenance work in every large old codebase with lots of dependencies.

> The last two words are the crux of this issue: monorepos deliberately centralize power.

No it doesn't, it democratizes decisions. In a monorepo when someone breaks an API you have the power to roll that breakage back. In a typical environment you will have to deal with that breakage sooner or later anyway without any say on the matter. So a monorepo makes it much harder and costly for library maintainers to break downstream dependencies, while in a typical environment they can break their API every new commit and create a ton of work for everyone else without a second thought.

"But I don't have to migrate without a monorepo!"

Yes you do, but without a monorepo the requirement to migrate wont come from other engineers, but will come from some guy high up who demand that now everyone must switch to at least version X to reduce security issues and the huge maintenance burden of maintaining Y separate versions at once. So if you think that engineers in non monorepo environments doesn't spend a ton of time migrating dependencies then you are wrong. They migrate just as much, but they happen in bigger chunks and gets way more complicated.
> I mean as in "I buy X online. It requires me to login to my bank application and press 'confirm'. I perform this sequence, and online purchase is completed. "

Huh? This is not a real thing.
Microservices are a cargo cult thing. It tries to solve a problem that 99% of companies that apply it wish they had.
I recommend looking at the Business Model Canvas, and getting that sorted out before you write any code. In fact, your early code should be there to validate the risky bits.

Customer channel is one of the bigger challenges. Your first channel should be an organic source. I get 1500 users/month from Bing right now, but that validates search engines like Google as a channel. Your channel might be open source communities, FB groups, gaming forums, whatever. Find an easy way to test that the channel works for you. Then you can branch from that channel into paid marketing (FB ads, events, sponsorships, influencers, etc).

You should be looking for people who have built or pay for a product that is 10x worse. It's probably a spreadsheet in many cases or a mod/plugin. Very often it's someone loudly complaining on a subbreddit somewhere.
Alternatively, you can just disable internet access to any of the keyboards via 'Settings' > 'Apps and notifications'.
ERR_SSL_PROTOCOL_ERROR when trying to connect
*NATION state actors. Damn mobile keyboards. Stupid app wouldn’t let me edit the reply either, hence this.
Around 5e-14 per year, assuming random impact location, small (i.e. not town-sized) projectiles, and head impact cross-section the size an A4 paper.

You can sleep safely. Waiting for 10^14 years will take a while - by that time, no new stars are born in Milkomeda, and the Sun's white dwarf remnant has cooled down to a point of no longer being visible by naked eye. (edit: of course, it's not reasonable to assume that the 500 impacts / year will be constant till the end of time)

Hitting a random human on Earth, though, is a munch higher likelihood - around 0.04% per year if I did my numbers right.
It's now back: https://status.ovh.com

Short lived incident fortunately...
With them recently announcing that they will start charging tax for US sales, `ash1-speed.hetzner.com` resolving to an IP address (yet unroutable) under a different Hetzner ASN, and this one[0], I believe they are already in for a US region possibly in Ashburn, Virginia.

[0] https://www.bizapedia.com/va/hetzner-us-llc.html
Yubikey is godsent
Part of the problem is that the layman doesn't understand the way scientific communication works.

When asked do masks stop the spread of the virus, the answer is factually no, and people then go and spread that about like masks do nothing. People don't want to listen to "No, masks don't stop the spread entirely but provide an x% reduction in airborne particles" because they've already zoned out
The opt-in part is clearly being missed and is a huge piece of the equation.

All chat isn't a problem if you didn't explicitly go into the menu to turn it on in the first place... this also means there is a convenient way to turn it back off.

For me, this all amounts to virtue signaling by Riot towards the broader community regarding their ongoing war against toxicity.
A little larger font for HN because fat fingers
OSMAnd is visually difficult to parse (especially at a glance) and fairly complicated to use. It is not a good map app.
> where I comically have to use the same technology to talk to people in other offices.

For my current company, I have no team members in my local office. So for the short period where I was going into the office, I never had an in person meeting.
It's more likely to be a "DDoS until you pay a ransom" sort of deal where the attacker thinks the company will value uptime more highly during that period.
It is real and absolutely routine.
There is nothing of value in the history. The network of people using it is the value.
Does not work for me
Here it is: https://github.com/medmondson44/dune/blob/main/noabar/README...
Solar midnight in Golden is currently at ~1:30 though[1], so it was even a bit more in the solar evening than the actual time would suggest.

[1]: https://www.timeanddate.com/sun/canada/golden
Yes. That's why this isn't a "these are exploits" list, but a "this is where you need to be careful" list.

If configured properly, it's safe, but there's a number of gotchas, like indirect privilege escalation through improper $PAGER: https://gtfobins.github.io/gtfobins/apt/
I don't think this was driven by law, but by an appropriate wish to increase transaction security (you really shouldn't use SMS for this anymore).

There are some rules here that are nonsense, such as know-your-customer laws that force me to enter my home address even when the product or service (say, a concert or train ticket) is delivered to me entirely electronically.

Most of the move to purely electronic payment is driven by the market and the large banks; e.g. in the Netherlands we actually never had laws that force shops to accept cash as payment.
Probably IPFS is the best solution right now.

You know, this problem is a lot more generic than many think. There is no such thing as "forever hosting" for a fixed one time cost.
> I don't think banks can force you

They can and do. There are a number of banks where you have absolutely no choice.
Internet hiccups
From https://cloud.google.com/compute/docs/instances/preemptible: "Spot VMs (Preview) are the latest version of preemptible VM instances. Preemptible VMs continue to be supported for new and existing VMs, and preemptible VMs now use the same pricing model as Spot VMs. However, Spot VMs provide new features that are not supported for preemptible VMs. For example, preemptible VMs can only run for up to 24 hours at a time, but Spot VMs do not have a maximum runtime."

So preëmptible VMs are still supported but may now cost as much as 40% of non-preëmptible VMs, "to reflect the supply-demand dynamics of Compute Engine’s excess capacity." That's quite a big change from the current pricing structure.
Lots of hard anodized aluminium pans are made to work with induction. Quick Google search: https://www.tefal.com/Cookware-%26-Kitchenware/Pots-%26-Pans....
Which is stupid. If I say I'm walking to the store and will be gone for 30 minutes, then get hit by a truck and spend a week in the hospital, nobody would say "30 minutes, huh?"
It's not about what you are legally allowed to do, it's about the basic traffic principle that those inside bigger/heavier vehicles are responsible for the safety of those outside. The same principle that applies to cars -> cyclists applies to cyclists -> pedestrians.

You can try to justify reckless behavior however you want, but saying "I had the speaker blasting on high to warn pedestrians" is never going to be a valid excuse if you get to run over an elderly person with hearing problems or a distracted child.
This bring back some experience of mine when we used to have old windows machine with a list of exploits to enter the admin portal and mess with marks
Wonderfully scary. Scientists have two theories: water is getting in, causing startup. And, water isn't getting in, preventing dampening down.

Ie, they have no idea. Both A and not-A are being hypothesised.

The meetings must be quite confrontational. If only we had two Chernobyl to run A/B testing on.
The annoying part is that it's taken over an hour for Azure to update their status, and GitHub still haven't updated their status as a downstream service.
Not sure what the OP is asking - if he's asking what kind of API or abilities they give you I would say pretty much equivalent things. If he's asking what the underlying architecture is then I yes they're different.
You're kind of missing the point of sudo if that's all you use it for. sudo can also be used to whitelist specific user+program+argument combinations, so e.g. unprivileged users can run system updates, but not install new programs. These users can use sudo, but should not be able to reach full root privileges from it.

But if such a setup is indirectly exploitable because the default $PAGER allows arbitrary code execution, that's definitely a gotcha you need to be aware of.
Uh-oh, seems like greybeards who know how to do routing properly are dying off, and the young generation is not up to snuff.

Also, people who know the number 1 principle of OOB networking.

These are challenging times indeed.
Well, that's a bit like saying SMTP or IMAP is always the issue when your email stops working.

If they screwed up routing, BGP was very likely to be involved, but the cause was probably human error, failure of process design, failure of system design, etc etc.
Easily is an overstatement, given number of changes they did recently. I'm trying for over a year to find stable replacement for remarkable desktop app (which syncs all my data without my control) on a company computer for screen sharing. And have only just now found a way to do that in a stable way with the new "share" from RM and rmview 3 opensource app. Before that more things didn't work then did (various issues, crashes, incorrect screen sizes, all soft of things).

But I'm certain this idiotic step by remarkable will push more and more devs and hackers to polish their tools create more and more full/complex environment without their cloud.
They surely are, people that count pennies to buy a class B car (rental category) aren't going to get any of those.
US has competition between FAANGs driving salaries upward. Europe with the exception of, maybe, London - mostly doesn't. It would be interesting to see how shift to remote plays out here.

Fun historical fact: Apple, Google, Intel and others didn't like salaries growing so entered into illegal anti-poaching agreement. [0]

[0] https://en.wikipedia.org/wiki/High-Tech_Employee_Antitrust_L...
I don’t know how is OVH doing on average nowadays in relation to downtimes, but I worked for a company around 8 years ago that had part of its infrastructure running on OVH. That thing was a sad joke and we ended up migrating everything to AWS. Pretty much every month we had issues with them.
Can I use it to run integration tests with test containers? Is some one using it? (On Mac)
How to build your MVP from Solveo consultant
The solution will inevitably be distributed overstorage rather than overgeneration.

10% of everyones car and home battery will be annexed by the grid when needed.
> expect a 1:1 experience

Push notifications are bad and it drains significantly more battery.
Is this a joke? Is this from 20 years ago?

Publicly displaying the owner of a domain (and technical contact, and billing contact) was done until the GDPR (mandated by the European Union) was approved. According to GDPR, whois displaying ownership, etc was a violation of data protection and privacy.

Now the same EU says whois must display ownership. Well, fuck you, first figure out how that plays with your own GDPR.
> And what would you call him now, 30 years later?

Something else than thirty years ago, because presumably he has developed since then.

I think that was why GP suggested "journeyman" for younger people, because otherwise there's nothing to differentiate young "masters" from masters honed by thirty years of additional experience -- except adding the whole phrase "with thirty years of experience", which is pretty clumsy.
What about costs?
It's funny to think we have reached point in capitalism where there is too much capital. I wonder if there is any underserved actually profitable places to put it at least in the west...
Loopz – Campaigns
It's not referring to having sudo ALL permissions, but to users having sudo permissions for individual applications.

So if you are trying to privilege escalate a linux box and sudo -l returns:

(root) /usr/sbin/tcpdump

You check gtfobins for tcpdump and see that you can get a root shell with sudo access.
Yeh this didn't happen.

> Hamilton said she didn't tell anybody about what had happened for a few days while she absorbed the experience.

Sure!
>To be clear, this

I haven't read the submission, so the subject of "this" is unclear. Are you referring to Vietnam, South Korea or Australia?
When I had my net send fun back in school, an IT guy found me and just explained that if it becomes a recurring thing, they'll have to disable it on the network. And that they would prefer to keep the functionality available, so it would be a real shame if I ruined that for them. I never did another one, because I understood it would be a dick move.

No condescension, no threats. Just treating me like an adult with a constructive conversation. It never occurred that anyone might overreact like many in this thread experienced. Makes me feel pretty fortunate now.
Remote Work Visas for Digital Nomads
I find GCP's UI easier to use than AWS' by orders of magnitude.
Will we see a bit less SPAs and more of this?
Rails has come up with Hotwire. ASP has something similar I think...only questions is what CTOs will make of this. And front end devs who are super used to doing SPAs won't like this change I fear.
Thats good, thanks
> Shouldn't the person/team who makes a change take ownership of fixing any breakage it causes, rather than passing the buck to their customers?

That doesn’t feel scalable to me. I’d imagine some dependencies at Google run to hundreds of clients.

To take an OSS view, some packages run to hundreds of thousands. Imagine if the maintainers of react had to fix all their clients.
That doesn’t seem to match up with this:

https://www.barrons.com/articles/apple-iphone-wait-times-mul...
We don't know the ages of the people involved with this incident, so this just comes off as gatekeeping.
> The primary goal was to centralize billing to give member projects access to additional GitHub services. A secondary goal was to ensure the continuity of membership projects, using requestable admin access, as just described.

Seems like a pretty obvious lie.

One of the people in the issues forum post about this pointed out how they had not only failed to give them "more services," but rather taken those "services" away over time. (1)

Why is no one else calling the obvious here?

Their foundation exec director got mad when someone called bullshit on giving the foundation admin over their repo to enforce "code of conduct." So the foundation exec director set out to get them to add the foundation's account to the admin list on their repos so that they could be taken control of in the middle of the night with no warning.

This is what happens when you have self promoting people with a privileged political status in administrative positions.

1. https://github.com/dotnet-foundation/Home/discussions/38#dis...
That was one of my first thoughts when I learned sql. If there is no condition on modifying operation, it would be nice if it required ALLROWS in place of WHERE. Like UPDATE t SET x=1 ALLROWS and DELETE FROM t ALLROWS. Or at least some dummy condition like WHERE 1=1.
It’s dangerous to allow corporations to be so big, especially ones that literally sell influence… whatever happened to antitrust? Why is white collar crime so profitable?
As a Laravel user, I still avoid Livewire like the plague. Way too much 'magic' and it's not solving any of my real problems. I don't want to waste time learning Livewire because I really don't need to. Same goes for Laravel Breeze, Jetstream, Inertia, i'm sure they're great but I don't need any of it and they are becoming a thing that gets in the way more and more..
Hm I have been binge-watching a certain sci-fi show that’s on Netflix recently …
Ownership and rights? That would actually mean that if I buy NFT I could DMCA the original locations I downloaded it from? And possibly even in many cases any other sharers...
True, it assumes unique value -- but only to a single person.

Since to you your life is different in one crucial regard to everyone else's (it's yours) I dare say you are the prime candidate to realize it.
The sun is not infinite, when it runs out of fuel it will be gone too.
New Australian Ransomware Action Plan: Mandatory Reporting for Businesses
How was MS able to achieve awesome performance in VScode but the performance in Teams is not acceptable? Is there a difference in performance expectations? (I don't use teams so I don't know how slow it is, especially on the low end). Is it something related to the types of apps they are? Or could it just be the difference teams?
This is absolutely the correct way of thinking about this problem, and exactly how most people I've seen successfully use pre-empt instances treat them as well.
Sorry for the delay.. I actually couldn't find any official docs on this feature but this thread covers the bases:

https://www.tenforums.com/network-sharing/178379-disable-wla...

And it appears it may be part of 20h2, not 21h1 update.
The overprovisioning makes this kind of product attractive. A small downside is a surge in complaints from customers who experience virtually no pre-empt, and then build a belief it's engines for cheap.. until the machine stops.

Somebody once told me a policy of random offswitch helps
Yes, because no network issue ever happened in the past with the "greybeards".

Do we really need these kind of comments?
Very true, but I've also seen the inverse where days were spent on configuring and troubleshooting an off-the-shelf solution (with associated technical debt around upgrades) where a small in-house ad-hoc process could solve it much easier.

The answer is not always obvious and being able to make the right call consistently is something I consider a sign of a great engineer.
Maybe water is getting in and out at differing rates
> error: failed to run custom build command for `servo-fontconfig-sys v5.1.0`

Not sure users who prefer a GUI over the command line, would be too happy about having to fix compile errors prior to running the program?
But this is technically an invalid answer to the problem of file compression. An easy (!) way for data to be losslessly compressed would just be to have a registry of all files in existence, and to refer to each file by its index in the registry. (Like the prisoners who had told each other all their jokes so many times that now they could just quote them by number and everyone would laugh.) Data compression is supposed to be able to deal with novel but likely documents without needing to add them to a global registry.