skysight-inc/HackerNews huggingface dataset:
I don't understand why that would be important.

The only value in responsible disclosure is protection of users. If you figure out there's a way to harm a boatload of people, it's nice to do what you can to ensure it can't happen before telling everybody how. It makes sense. But there's a very good reason it comes with a not-too-distant deadline before you give up on it.

But this? We're talking about finding ways that people are being actively harmed. How does "responsible disclosure" come into play here?

The only thing it would seem to do is to protect companies and their bad decisions. That's not the point. At best they've screwed up, and at worst they're actively malicious. How do users not deserve to know that they are being harmed as soon as possible? How do potential users not deserve to know that they will be harmed by using the product, and that the company is either doing a poor job of protecting them or actively trying to exploit them?

There's no reason to try to attach any ideas of "responsible disclosure" here unless you're explicitly trying to protect the vendor.
In the two cases adjacent to my field where this happened, the only people who kept submitting to the old journal were people who were clueless about the whole situation.
Maybe your definition of competence is wrong? A lot of people can build systems with some number of 9s of availability, but how many people can build a 50B company?
They seem to have overlooked hypovitaminosis D as a condition. Research indicates that it's a serious risk factor for hospitalization.

https://vitamin-d-covid.shotwell.ca/
Same. I was doing MEG stuff there anyway (Stan’s team). Out of curiosity, which team were you with?
It too me a second to find the info about the issue. https://trojansource.codes/
I wonder if he hid that on purpose to seem like a fresh perspective? He doesn't even mention it in his Substack bio.
Has anything actually happened since the FB meta promotion/announcement, or is this just speculation about what Mark said?
SDL’s advantage is that it supports more platforms (like mobile and Switch), and is much more battle-tested with hundreds of games using it, including Valve’s ones. Many people seem to use SDL for only windowing and input and seem okay with it.
> Average “gift” is $180k in Vancouver for first purchase and $340k for “upgrade purchases”.

Am I miss-reading the article? It says, "Among the 30% of first-time homebuyers in Canada to get help from their folks on a down payment..."

For "upgraded purchases" it says, "The CIBC report found that the mover-uppers who received help — just under 9% of Canadians — got $340,000 from their parents in Vancouver on average."

The way the article is presenting it it seems that 70% of first time home buyers are not getting anything from their parents?

Edit: [1] is the CIBC report the article is based on. It says "family members" instead of parents as used in a some what loose manner in the BIV article.

[1] https://economics.cibccm.com/cds?id=9dc124d8-9764-4c1d-83b4-...
Someone on here posted the other day that someone they knew at Roblox said it was their secret store that became overloaded. Presumably a Hashicorp Vault type service (or something similar.) This update appears to support that claim.

That's definitely a problem you only get at scale.
Just put robot.txt and block Googlebot from there. Google obeys robot.txt.
Sorry?

(One Laptop Per Child I underststand. Not its relationship to my comments.)
The link seems to be in an infinite redirect loop.

https://webcache.googleusercontent.com/search?q=cache:d4DE5B...
Best UI Kit Design
One way to be driven to be more collaborative from a rational motivation, chosen first principle, perspective, is realize you own everything and everyone.

Because you do. The only thing you will ever really have is the reality you can impact around you. So take charge!

Your job isn't just your day job. It is to run and push the planet along a good direction as much as you can, because it is literally your planet. These are all your people.

So learn to "use" people to your best advantage by learning what makes them tick, how to communicate and motivate, how to encourage and help even the people you only see once.

Be a great world leader from the perspective that you are objectively at the center of your world and you really do have the ability to move needles. So move every one you can.

When you do consciously act to move needles forward it's very motivating and self-affirming.

Get the most good out of others and yourself for this planet you own.
I know we're already in the weeds, but Malcolm Gladwell’s “Revisionist History” did an excellent episode on the stuck accelerator problem, basically showing it almost certainly didn't happen.

https://www.pushkin.fm/episode/blame-game/
We've invested quite a lot in trying to communicate with other ape species. There's very little to show for it. Koko the signing gorilla is the biggest success and 1) that was conducted hugely unethically 2) had a closely-involved researcher/caretaker/interpreter. Without the lead researcher communication was very limited.
I've played sports my whole life, and there's nothing I dislike more than endurance sports. Doing anything repetitive for a long length of time is just incredibly boring to me, and I highly prefer learning and mastering a set of skills that can then be combined in various ways, usually in real-time, like one sees in basketball, taekwondo, racket sports, etc.

I have a running theory that many become interested in endurance sports as adults because they actually don't know how to play other sports. So in a way, these endurance sports are the so-called "easy" way in because they don't require the skill refinement that more skill-based sports require like basketball, martial arts, etc. So these endurance sports are actually the low-hanging fruit of sports or on-rails sports in a way. I'd love to see stats on how many of these sports are started as adults. I am not demeaning the endurance sports at all, but I would seriously guess from my observations that this is the case of getting involved in them. Endurance sports are also ones that one can stretch into later life easier.

And I think another thing is that once one starts in these endurance sports, it becomes an obsession of tinkering and "getting the gear" (https://www.youtube.com/watch?v=R3SFqV0hMyo), which can get quite expensive. You gotta make sure you got the right shoes, clothes, bike, bottles, earbuds, glasses, etc., and there's endless tinkering of workout and eating strategies. I feel it's just different than grabbing a glove to go play softball, having a basketball and shoes to play basketball, a racket for tennis or badminton, or just having a dobok for taekwondo or whatever else uniform for a martial art. Gear obsessions for ball sports or martial arts really only go so far. Endurance sports sort of favor tinkering of the body and gear because of the timelines in the sports and the idea, real or perceived, that every bit of gear matters. So participants in these sports become obsessed with this tinkering, which is obviously enabled by certain socioeconomic factors.
Yeah, I suppose this would be acceptable in this instance. But it still repeats x and y, and if x and y were complicated expressions instead of just simple variables, I wouldn't want to repeat them.

For example, the proof of the Minkowski inequality in Wikipedia [1] contains a statement of the form "x_1 = x_2 = x_3 ≤ x_4 = x_5 ≤ x_6 = x_7". Except that x_1, ..., x_7 are so complicated that any notation that requires repeating them doesn't feel like a satisfactory notation for "all of mathematics".

[1] https://en.wikipedia.org/wiki/Minkowski_inequality
> The update to Monterey broke all my ntfs tools.

If your tools are scripts that run in the background, check to make sure the binary running those (e.g. /usr/bin/perl) has the proper permissions.

Each time I've upgraded to Catalina, Big Sur, and now Monterey, I keep forgetting to add the binary to System Preferences… > Security & Privacy > Privacy > Full Disk Access.

Good luck.
It's worse than a prisoner's dilemma. In a prisoner's dilemma, if both parties cooperate, then they get a higher joint reward. But when some academics cooperate to do something like make a new journal, they don't get any reward in terms of tenure/promotions, which depend 99% on publications in high quality venues as assessed by university-level entities and external reviewers.
Sorry, I'm dipping out of this conversation because I don't like arguing...but this is a troll position.

Would you feel the same way if you or your SO had some awful disease, and someone was buying all the medication and selling it at a price out of your reach? 'Sorry honey, we can't afford medicine, that's the market working lol.'

And before the argument starts 'well, someone else would just make more...' that takes a lot of lead time, like houses do. And by then, aforementioned medicine buyer has made enough profit to buy even more.

I mean, it happened with TP or all things. There was enough for everyone, until people got greedy with it. Happens with gasoline yearly.

Seems people with houses don't care because it's good for them. Hell, I made a lot of money in all of this even.

Please understand I'm not arguing from a position of need. I don't need a house, and if I did, I'd just buy one.

I'm arguing for people like my brother, who worked hard their whole life and keep getting priced out by asshole investors.

In summary, I only ask you attempt to look at problems from a lens different than the one people like you and I currently look at things. It's easier when you know and love people affected, admittedly.
My heart goes out to the people who likely had to work crazy hours to fix this, but it really is wild that it was down for so long. What was the last service of this size that was down for 4 days? That is a failure in architecture that goes way beyond whatever the specific cause was here. That post-mortem is going to be a doozy.
The junior devs were probably chucked in a corner with some colored wooden blocks while this was being resolved.
Is there an easy way to tell if this is happening?
The accident record seems to be here:

https://dotlibrary.specialcollection.net/Document?db=DOT-RAI...))

Note that spellings vary: "Hassan", "Hassen", and, in the document above, "Hasson".

INTERSTATE COMMERCE COMMISSION

WASHINGTON

INVESTIGATION NO. 2543

THE SOUTHERN PACIFIC COMPANY REPORT IN RE ACCIDENT NEAR HASSON, CALIF., ON NOVEMBER 19, 1941
Sun did it originally during the waning days as well as an even worse yahoo toolbar. Oracle discontinued the contract as soon as they could after acquiring Sun.
Which girl are you referring to?
"Realistic" is not a middle point between "Negative" and "Positive". If you want to have a model of reality that is as close to truth, it would fall significantly closer to "Negative". (https://en.wikipedia.org/wiki/Depressive_realism)

However there are strategies that both ways of thinking can adopt to improve their experience / performance in the real world.

Optimistic people can try to see "both side of the coins" and not miss underwater rocks.

Pessimistic people can adopt a defensive strategy where they minimize risk to the point that they are willing to take it.

Two side notes: You can be smart about it in both situations. Also in both cases you should take out the emotional toll.
How much do you give to China / The CCP?
My startup built a tool that tells you how much of your money goes to China and the CCP.

I'm a big fan of "voting with your wallet" and think the world would be better if we all could show what we literally value vs. talking about "values." Also did an interview here: https://hackernoon.com/walter-haas-is-bringing-trust-to-onli...
So completely out of your field and just screaming into the void?
‘Trojan Source’ Bug Threatens the Security of All Code
I am actually impressed they said "a" reason rather than "the" reason, attention to detail.
This totally happens, and is a thing, but tracing a "unexpected change in metrics on our DB server to "increase in metric showing call volume to DB server" to "increase in metric showing increase in fleet size of app servers that call the DB server" takes minutes to identify, not 24 hours.

And the remediation procedure is quite simple too - scale down. If the fleet can't handle it, increase your throttling. If even with increased throttling you can't handle the load and everybody's timing out (but you still can't scale out), you start spinning up new load balancers, and applying weights in DNS where at least some percentage of your callers are getting through while others see full failure.

The key point is in anything related to such an outage, even if it takes a long time to recover, your customers shouldn't see a full outage.

So it was either an entirely different class of problems or Roblex has a huge ops skills gap. I'm betting the former.

edit: never mind, maybe it's the latter after all: https://twitter.com/NIDeveloper/status/1454773313792880640
DoD reiterates commitment to keep profiting from Taiwan-China tensions
SCMP title: Asked about US defence of Taiwan, Blinken repeats commitment to weapons sales

https://www.scmp.com/news/china/article/3154380/asked-about-us-defence-taiwan-antony-blinken-repeats-commitment-weapons
That contract was signed by Sun before the acquisition and was discontinued by Oracle as soon as they could.
Seems like a cool project and kudos to the authors attentions to detail.

These lines tickled my Bone of Irony:

> No installing apt packages. No dealing with missing header errors. It should just work out-of-the-box, and for every platform

I think it’s interesting/ironic because at some point the layers of header files were pitched as a way of making things more modular and better. A means of simplifying. Aptitude was meant to do the same thing. Simplify a process that was formerly seen as icky and complicated.

The author could have just as well mentioned just about any other software install/deploy/configure technology. In the end it always seems that yesteryears “it makes things easier” is eventually derided and replaced with a some new simple straightforward mechanism. As whatever the new approach is, scales in time and application, it takes the place of what it derided and becomes the new derided. One big merry go round.
I was in a similar space. Feel free to email me if you'd like to talk more.

I'd say stick with it, especially when it seems tough. I thought tech was a dead end job. But the less jobs there are, the less people do it. The less people do it, the more valuable the skill set is when the jobs finally happen.

Tech is inevitable. Spreadsheets replace paper. CRUD replaces spreadsheets. It'll happen, the question is how long it takes. What's happening in SE Asia is a kind of tech "colonialism", where companies try to build local. Iraq has people, it has a market. It has problems that can be solved more efficiently with code, even if it's say, used cars or dating.

Native mobile is good, but basically, you want to be able to do CRUD. That might mean React Native or Flutter work. The native jobs pay a lot better, because they're usually solving bigger problems at scale.
I wouldn’t be so dismissive of the public relations industry. Sigmund Freud’s newphew Edward Bernaise is regarded as the creator of public relations, and he wrote multiple books and talked widely about his theories for manipulating the public. These theories have been put to the test multiple times and they proved successful enough that the industry is thriving 100 years later.

https://thesocietypages.org/socimages/2012/02/27/torches-of-...
Don't judge things. Things are just as is, it's your opinion that makes them good or bad. Remember this and whenever you make a judgement then just remove that opinion of yours.
Why is it not explicitly part of a researcher's job?

You know how we know your claim isn't true? If an employed researcher says "no" to a review request, there are no negative job consequences.

I've not heard of employers keeping track of how many papers each employee has reviewed, much less using that information in promotion or bonus schemes.

While I have heard of employers using the employee's number of published papers that way.
I wouldn't be spending my time here if my family was starving, or so close to that I'd need to lie for food. In fact if anyone here claimed to be in that situation I would question if they are lying.
I’ve always run sanitized builds as presubmit without any meaningful issue. It’s always nicer to have these issues caught before code gets merged into a shared repo. The long part of things is code review anyway so waiting on a build isn’t the biggest deal in the world.
> there’s some work left in putting it in the right journals/issues,

Who cares about issues? I can't remember the issue number for any journal article I've ever read, nor what other articles showed up in the same issue. The issue number is just a meaningless line in my bibtex file.

This was important back when journals were distributed by print. It isn't now.

My experience with academic publishers, including Springer, is that their involvement has made my work strictly worse, in direct proportion to how much they have been involved.
Effectively, yes.

Though the point remains that what you've got to do is avoid impacting the asteroid entirely, whether it's a single solid core or a dispersed dust-cloud. Or more precisely, the total delivered energy has to be considered and kept to a survivable maximum.

That said, I'm now wondering what it would look like to suddenly have a sub-lethal dust-cloud impact Earth. I imagine there'd be an initial few stray shooting stars, then a rapidly-growing glow as the dust struck the atmosphere. Hrm...
Sci-Hub Girl.
tweet at the founder/CEO, he appears to have genuine concern over the project and is quite engaged on twitter
https://en.wikipedia.org/wiki/Alexandra_Elbakyan

She's a hero as far as I'm concerned.
People want to see crypto fail because they weren’t early and are just bitter.

Keep holding your dollars through the hyper inflation we are seeing and let me know how that works out.

Tether has its issues, but the market is highly liquid and there is nothing stopping people from shifting to other stables, takes literally seconds on any dex.

Everyone involved in crypto has been aware of tethers faults for much longer than the people who chime in on HN whenever one of these articles pops up. It’s already been priced in.
Cheap calories are less nutritious. You know how many servings of ramen noodles you have to eat to get a reasonable amount of vitamin A?

Generally, food isn't designed for nutrition. It's made to be maximally salty or crunchy or cheesy or whatever. This is true even for mid-range packaged items and not just the cheapest ones.
> The quality of service seems to be deteriorating everywhere.

Given that it's generally accepted that the U.S. economy is no longer based on the production of goods, and is mostly a service economy now, this doesn't seem to bode well. I wonder if this is like a normal vicious cycle which will eventually be broken, or if this is a permanent change?

Based on personal experience living in Europe, a society can function quite well even with a pathetic level of customer service. This might be the new normal.
I’ll pass. Not gonna stick my head in anything more than 3T ever. Even at 7T you start getting disoriented which means the field has some effect on your head? Not sure why anyone would ignore that.
VisiData is proof of how powerful yet intuitive TUI tools can be. vd particularly excels when you need to answer a quick question about a dataset and avoid opening up a clunky Jupyter notebook. I particularly love the support for writing quick Python expressions to manipulate the data inline too.

Saul, thank you for bringing such a wonderful tool into the world! It really fills me with joy every time I use it. I’m quite bullish on TUI tools largely because of vd—it feels like there’s a lot more good work to be done in this space.
In the last few years my brain has been somewhat "re-wired" so that I'm able to detect and escape "negativity ruts" more easily.

And it's the same story – some colleagues that have been willing to speak honestly about how my attitude can affect them/the team.

Team diversity (and teammates bold enough to speak up) are great!
We used to call it discovery agreement when I was at IBM.

Summarizing what they said (show you understand it) but like you're just now discovering the truth behind it - together with them.

The only sales technique that's really stuck with me.
Or maybe BGP >:)
Diet & car culture would be my first two guesses, but they are only guesses. I'm guessing it's very unevenly distributed.
Wouldn’t that count as sending information?
Xinjiang Food Is Unrivaled
Service mesh is basically abstracted DNS, so…
That is very insightful, and thank you!
This sounds more or less like OTP.
In the manage your objects/entities vs don't manage your objects entities (just code) struggle, I strongly advise the opposite for most folk: figure out better containerizations of control for your entities/objects.

There's plenty of bad examples of ALL good & popular technologies. Don't be afraid, don't believe the terror being sold to you: give it a go, explore, see what value there is.
Looking forward to and incident analysis of why their incident analysis post wasn't posted correctly.
This list is pretty interesting. If you don't mind me asking, what do you work on that you requires such sophisticated stuff?

Also, does this work only for browsers or also for mobile apps? I have always assumed that it is always theoretically possible to get data from browsers (very extreme resort is save the browser page / (screenshot + computer vision)); but it can be impossible to get data from apps (especially ios). Are my assumptions correct?

Also can you explain mobile IPs more? If they are such a big vulnerability, why is there no potential solution to them?
You could always go into your local bank branch instead of accessing it over the Internet. Your desktop's accelerometer helps add to your computers 'run by a human' score. Normally I'd take more issue with whatever possible privacy issue there, but my bank is where I keep my money so I'm really okay with them trying hard to keep bots out of my account.
You also want it to be available either for free or "at cost". That is, "open source" is only meaningful after you've received the software. Your solution doesn't prohibit me from requiring you to pay $500,000 to get my research software under the GPL.

"we encourage people who redistribute free software to charge as much as they wish or can." - https://www.gnu.org/philosophy/selling.html
403 is per request, not requester. I get random 403s when just browsing some websites. Does that mean I should close the browser and not hit refresh for fear of breaking some wire fraud unauthorized access law?
I mean this is honestly a PR/lawyer blog post.

> A core system in our infrastructure became overwhelmed, prompted by a subtle bug in our backend service communications while under heavy load.

Translation Something important went down, we couldn't trace the bug.

>This was not due to any peak in external traffic or any particular experience.

Translation We're not blaming Chipotle for this

> most services at Roblox were unable to effectively communicate and deploy.

Translation We couldn't throw more compute at the problem to manage the traffic or to put up a failover copy of anything.

>To the best of our knowledge, there has been no loss of player persistence data

Translation We literally restored our entire infrastructure from scratch and probably our last set of backups. You might have lost some stuff but we don't know what you lost since we couldn't get the last copy of our databases.
Thanks for the wide ranging response! Definitely some shows I should think about watching that I've passed over.
There's a hashicorp case study on Roblox, so likely Vault specifically: https://www.hashicorp.com/case-studies/roblox