skysight-inc/HackerNews huggingface dataset:
> Has this ever happened?

Unfortunately this has: https://www.wired.com/2015/12/researchers-solve-the-juniper-...

While the full results were not released, it was pretty clear that a rogue commit happened to the VCS. This is the highest profile example that has occurred in my corner of the tech world.

The broader category of this attack is "insider threat" and it is a real thing. Even googling for "malicious code commit" turns up this other example for me as one of the first results: https://www.theregister.com/2021/03/29/php_repository_infect...
Facebook knew of Honduran president’s manipulation campaign (2019)
> do the work and learn to write a native app

Why? I want it to run on all platforms. That's one of the best things about the web. I'd rather just not support Safari than write and deploy separate MacOS, Windows, and Mobile applications.

My and most user-bases agree.
It doesn't look like you can actually get that release yet.
I have been using Linux since last millennium and I can tell you there is no shortage of bugs.

Just right now I am fighting my Fedora upgrade and Pipewire systems that are constantly reverting my custom configuration that I wrote to prevent automatically suspending audio to my external DAC. On a normal audio output it does not matter when your audio stops sending analog signal, but mine is connected over Toslink. When the signal stops the DAC on the other side also shuts down. Then when the sound gets back it takes time for it to turn on again (2s of silence + 2s of slow volume ramp up) which is extremely annoying. This happens by default after 30s of inactivity.

Unfortunately, Pipewire developers seem to be having some pretty strange ideas about how to work with user configuration (basically, don't care about it).

I had custom configuration and then it got overriden when they decided to move configuration from /etc to somewhere in /usr. Then I edited in /usr but it got overriden by fedora update system the next time it has been updated (I guess I could have predicted it). Then I followed documentation and edited in my $HOME/.config but apparently this also stopped working yesterday.

And I just want to keep my audio working. Don't get me started on graphics or dev environment.

See, no shortage of frustration there...
After Facebook Leaks, Here Is What Should Come Next
Thank you for signing up. In the spirit of MVP I am doing the matching manually now. If the service takes off I will automate that. I understand what you're saying about the need for UI around whether or not there are any matches.
I've gotten a lot of exposure to Chinese culture lately and particular noted how much contempt they feel for displays of aggression and anger that many Americans think are masculine and intimidating.

(e.g. they think it makes you look like an out-of-control loser)

I'm left feeling that Elon Musk's antics on twitter (below the fold on this article) are like that. I think some men think he is being cool or maybe he thinks some men thinks he is being cool.

It makes me sad because he's displayed an astonishing ability to execute on electric cars and space travel and he effaces it with this buffoonery. My guess also is that this doesn't play so well with women who vote, are 50% of public opinion, buy a lot of cars, etc.

If you are selling a niche car brand you might get somewhere appealing to wanna-be macho men, but you need a broader appeal if you want to take a chunk out of GM or Toyota.

(It's funny because Tesla is the one car brand that's made my wife stand up and say "there's something special about that car"... And she could care less about the McLaren 720s we parked next to the other day.)
It's in the repo: https://raw.githubusercontent.com/git/git/master/Documentati...

[edit: in fact it's linked from GitHub's blog post, at the bottom, and it's included in the announcement email: https://lore.kernel.org/git/xmqq8rxpgwki.fsf@gitster.g/]
Actually my impression is that Microsoft is probably the largest corporate sponsor currently for git devs. They’re primarily focused on large mono repo support and ecosystem improvements that fit into their GitHub strategy. Overall, I’d characterize their Git involvement as positive.
> Owning a house is also a huge luxury. It's strange to deny either of these realities.

I'll happily deny this reality. Owning a home is a huge luxury to some, but it is also a huge burden to some.
OK, please explain how fixing housing, healthcare, education will remove the need for parental leave. It's your argument, motivate it.
Your support is much appreciated!
What you say makes sense to me. OTOH, I get the impression that some of our infrastructure has a financial incentive to eliminate any reserve capacity. E.g., that snowstorm in Texas last(?) winter.

So I'm curious if having any non-trivial amount of electricity supplied by a usually-reliable mechanism becomes a long-term risk.
Related: it's been a year since Pijul (https://pijul.org) began working towards 1.0 (https://news.ycombinator.com/item?id=25032956). Seems to be coming along nicely, they're in alpha now and it's showing.
Monterey app memory leak isn't just caused by Mac pointer
CotNET
And again I ask, really? Because there's a massive difference between a soft, light Naples pizza that's eaten with a fork and a doughy, thick Dominoes pizza and a crispy, salty New York slice and a chewy, deeply roasted Sicilian pizza. Even in New York which I'd hazard is in the top 5 pizza cities in the world, there's a massive difference between Joes Pizza and Lucali.
> But two, C++ invites pedantry. I heard endless discussions about "ooh, template meta-programming", "struct or class", "but is this idempotent", "you should be using move semantics", "why on earth is this a unique_ptr".

Interestingly, I've consistently had the opposite experience. In C++, when I ask, "how do I do X" there will be a few different options, but pretty much any of them will do. As long as you avoid things that are definitely UB, you're fine. In Python, I'll find endless religious arguments about which is the most "Pythonic" method. Whenever I try to just hack out Python code to just get things done, I always feel like I'm being judged, because usually the quick-and-dirty method is far from the most Pythonic.
Yeah, in the US. I had 2 weeks-ish off total and random days/hours when there were big procedures, but was "saving" the rest for when my wife returned to work. My child was chronically sick (but worse than I/we knew), and I had no idea what the future had in store for us, I was worried if I "used" it all, then I'd be forced to work from home and care for my child.

I have a great manager, who would've been ok with whatever, but there's only so much I was entitled too. I also had bills rolling in, so anything unpaid was out of the question. I'm sure I could've survived with being unpaid, but living off GoFundMe donations didn't sit well with me. Ultimately GoFundMe paid for her funeral.
Taste, by definition, is subjective. Good taste is a matter of knowing your audience and knowing your inventory. If you can use your inventory to create something that your target audience loves, you have good taste. It requires having a great inventory (knowing the taste of a lot of things), and having good emotional intelligence, and hence it takes time to develop good taste and maintain it.
Tested on Windows 10 with no issues.

I use QWERTY for coding but sometimes need to document other things in French. This is a pain killer.
Nope, given that even for basic stuff like better error handling, or async runtime, one needs external crates.
But it was a bad idea.

Elements of it left now, but the very bad bits (like derivation hiding implementation Dog knkows where) have thankfully gone extinct
All of this signing is only useful if someone is actually checking or enforcing those signatures, otherwise it's just LARPing.

Being able to sign commits with your SSH keys makes signing actually useful, because it enables a new workflow that developers will use:

- You give every dev on your team a Yubikey

- They generate an ed25519-sk key that only resides on the Yubikey, no software required as it works out of the box with both openssh and GitHub

- They upload the public ID of the key to GitHub, same as before

- You enforce commit signature verification for your GitHub org. You're done, no need to install any software, everything Just Works.

You now have:

- No private keys on developers machines, rendering all types of supply chain attacks like NPM stealing your .ssh files ineffective

- Enforced 2FA for everyone without any hassle

- Every commit signed by developers, enforced and with no developer overhead. Checks a lot of boxes for those SOCs and ISOs.
AWS Amplify and CDK = 3
I don't think it's the consultancy that's under question -- it's the question of what RAD tools that companies that weren't necessarily "software first" reached for when they were working on stuff in-house. Banks, manufacturing companies, telephone companies, places that decided to roll their own rather than call up IBM or Accenture (well, whatever Accenture's predecessor was). I worked at a place like that in the 1990s, a successful CLEC with a huge IT department that wrote their own custom software for order tracking and sales management -- and they wrote it in Visual Basic and Access. That's a market that Smalltalk might have been extremely successful in, but it really was basically owned by VB/VBA in the 1990s.
> nobody today considers God's mandation of kings

Not convinced that's true. Without arbitrary faith in kings, a country risks falling into civil war and chaos via power struggles between warring factions.
The argument against apartment living is the lack of choice in the matter. More people are living in apartments now than before and it isn't because of preference.
Or all the telemetry enabled in Windows and then making local accounts more difficult, although once you sign in to a Microsoft account to download some broken app from their app store then they start uploading all your app launches and activity anyhow.
It might be hard to do a targeted attack. On the other hand, flipping random bits is likely to just start crashing stuff and / or producing incorrect results pretty reliably.
Right, it sounds to me that people are confusing Dithering with Compression. Back in the day we used Dithering to represent high-color-depth images in lower-color-depth devices... it sounds similar to compression but it is not.

It's like confounding stenography with cryptography. In a way, both are used to "hide" a message, but they are completely different beasts.
Many of those are useful to me even if you don’t care about them…which proves your point: there’s no reasonable (and sometimes none at all) way to pick and choose.
Assuming you run your database in a public cloud, what's the likelihood of someone throwing money at the cloud provider to run the attack on a host shared with your database, with no added benefits to them?
There is something you are missing obviously. Naval engineers are not dumb.

> it shouldn't be hard to track and aim a 30cm object at 100 m with a laser that is moving +/- 5-10 meters at a speed of 5m/s

Boats don’t move only in one direction. They have side-way vibrations along the three special axis and constantly rotate along two. The 100m is extremely close for two boats and I think you don’t realise what a heavy sea looks like (understandable if you have never been far from shore). Navigating in nine meters high waves is not exceptional for a military boat. You are constantly losing line of sights with distant boats.

Keeping a laser on something fast is doable (that’s part of what an optical targeting system does) but staying fixed on a small receiver gets tricky. I don’t think the win in bandwidth and latency justifies the hassle which is why I don’t believe ship-to-ship laser communication will ever happen. Ship-to-space however, that wouldn’t surprise me.
Yeah that's exactly my issue too. My interests are all over the board and I don't want to hound my friends into reading a book about a mercenary (to use your example). I just want to talk with other people who already find that topic interesting.
You can't make a perfectly straight beam due to imperfect optics (and diffraction/Huygens principle), so a beam will only reduce the loss by a constant factor, but the area of the beam still increases by n^2 as it propogates.
> that you do not have any role in making Git itself

GitHub employs at least three full time git contributors, including the author of this blog post.

(Disclaimer: I am a GitHub employee who works on git-adjacent things)
There is a lot of enterprisey crap, but there are also many decent libraries. In particular, i am pretty happy with the Java options for the things you mention - the PostgreSQL JDBC driver, JDBC itself, and HikariCP for pooling, the JDK HttpServer (no templating though, don't know if you need that here), the JDK HttpClient, Jakarta JSON with Joy as an implementation, and SimpleFlatMapper for CSV. None of them are perfect, but i am pretty happy churning out generic business service type things with them.

I wish there was some way i could take a sabbatical from my job and come and try to rewrite your service in what i consider effective modern Java. I am pretty optimistic it would be competitive with Python in effort and maintainability, but i have no way to prove it!
> If you have a process running on your machine can it use this to get root? Read Keys?

Yes. There's a BlackHat talk on that[1]. DoS is a big issue on shared hardware too. You can crash other processes, the kernel and the hypervisor.

> And if your flipping your process's memory for that long, what are the chances you are next to sensitive memory for another process?

You don't need to leave it up to chance. There are apparently ways you can control it and of course you can just spray everything.

1. https://www.blackhat.com/docs/us-15/materials/us-15-Seaborn-...

2. https://github.com/google/rowhammer-test/blob/master/rowhamm...
CPU? More like memory controller and their capacitance banks.
Clearly Corey has a Lambda function parsing links to his website from external sources to see who is talking about him (and that if we ask him to open source he will say no because "it's ugly code"). :-)
What does any of this stuff have to do with Rowhammer, an attach that doesn't even target the CPU, which just so happens to have ECC on all its registers and cache lines?
Here you can choose between MDI and pump.
s/airport/airplay
Seems like it still might be useful for small bits of data like session tokens or other encryption keys
A thoughtful tour of a Lego minifig as sliced by a CT scanner. This is kind of the reverse of 3D printing - rather than build something layer by layer, the assembly is scanned and visualized in slices, allowing a peek into the way parts mate. Differences in density can be automatically color coded - in this case the dye of the figurine provides a convenient separation between differently-colored parts.

I never knew that the hands of minifigs were ribbed to create a rotating press fit!

This reminds me of the fun I have reading [name that ware](https://www.bunniestudios.com/blog/?cat=54) by Bunny Huang. There's a sense of discovery and delight in analyzing the choices made by designers of physical things.

Does anyone know the site library used to pull off this scroll-animation? It works excellently on mobile and I recall it being used heavily on Apple.com to showcase product cut-aways.
> Most Apple users will definitively want those on, and will break your system in subtle ways if you disable them.

What happened to the good old days of "ask for user consent before phoning home"?

I mean, Apple is miles ahead of Windows in that regard, but your average Linux or BSD setup won't phone home outside of repository downloads unless requested.
Glide Notebook
Multiple updates for Safari are delivered over the course of six months. And note that the graph I've shown you plots the daily performance of browsers for the past year.
Additionally, Amazon is absolutely the type of company to create their own x86 processor if Intel/AMD are unwilling to make some customization.

Intel does not want to be competing with an Amazon Basics processor.
Gobi dessert doesn't produce solar power when it is night in China, but solar power from Chile can supply China at night.
There are plenty of municipal entities who can't afford to meet various minimum legal requirements. Furthermore, it's not always clear what severity is attached to various compliance requirements.

Bankruptcy can cancel debt, but it can't create new funding. If the money isn't there, it isn't there.
It’s a plot to resurge demands for DDR3s.
Uhh I can't really understand this argument frankly. You're making a value judgement of grilled cheese as a commodity food but still, if someone put a grilled cheese in front of you that used plain white bread and one that used sourdough, you'd notice the difference, right? Sure you could argue that the sourdough grilled cheese is not a real grilled cheese but in doing so, you are inherently distinguishing the two items, therefore demonstrating taste to a degree.
The pf firewall is unaffected and can stop any calls to Apple.
The US Navy has a lot of active carriers and few superpower-scale threats, so they're taking an opportunity to experiment (USS Ford) and can afford to do it (for now). It seems like the right thing to do while they can. Ford is the largest warship ever constructed, it's not very surprising they might have problems with a new class.
I left Apple for the same reasons. They want complacent morons who pay $2000+ for a glorified email checker. Not legitimate developers. Idgaf how much iOS/MacOS users pay, I'm not learning Swift or objective C. Apple is the farthest thing from a company that wants to encourage development. They just want major players to shell out large amounts 30% transactions.
To my understanding it's still hard to exploit this to steal information / break access / etc just because you'd need to know where the right bits were.
On the other hand, if all we want to do is break our adversary's process / crash it / make it perform arbitrary incorrect behavior, this seems substantially easier to accomplish even if we have no idea at all which bits we are flipping.
How would you know they have a tracker?
My understanding is that Google's SKUs are the same die. Non Google versions just have the Google specific silicon fused off, or require a MSR knock sequence to turn on.
The OS firewall can only block incoming traffic (but not Apple's I believe) and has almost no configuration options.

Some popular third party solutions that are actually useful are Little Snitch [0], LuLu [1], and AdGuard [2].

[0] https://www.obdev.at/products/littlesnitch/index.html

[1] https://objective-see.com/products/lulu.html

[2] https://adguard.com/en/adguard-mac/overview.html
Just in base, you could switch to openssl from ports in a minute.
I use Linux and Windows heavily for both home and work. I'd say I spend more time tweaking settings in Linux than Windows. The difference is in Windows I'm spending more time tweaking it to stop doing certain things I don't want and in Linux I'm spending more tweaking settings to get it to do the thing I want.

For example with Linux and browsers I'm spending my time trying to get various types of hardware acceleration (be it rendering or GPU decode) working and Windows I'm spending my time decrapifying the Edge experience.

I genuinely like both but I also genuinely feel each has their own upsides and downsides. There are also exceptions to these rules, on Linux it's much easier to set up a build environment but I may have to work around some build stuff the OS set up for itself while on Windows I'll be manually tweaking much more to get to the same point.
If I didn't have to pay for medical, I likely could've survived on savings and GoFundMe.
Who/what is "dang"?
I'm sure it's partly that. But then how do things become fashionable? Who defines the common taste for the rest of the society? Now we are back to the basics and I'll stick to my hypothesis (I explained elsewhere in the thread) that it's about appreciating novelty.
It always worked as a pause/play for already playing media, my complaint was about its use as a launcher. Made muscle memory tricky as its behaviour depended on what was running at the time.
Fair point, I agree there's a difference.
I think the main premise of the article "Dithering is not Compression". People should use compression algorithms to compress their images. They shouldn't be using "color depth decrease" algorithms to compress their images.
"you do not explicitly and clearly mention that you do not have any role in making Git itself, then you are lying by omission;"

Um - I thought Microsoft does have a big role - doesn't Johannes do the Git for Windows stuff and work at Microsoft, and Jeff work for github etc etc.
Higher incomes is a direct requirement for higher living costs ;)
> The looming climate disaster that my child might have to go through.

Climate disaster isn't an US thing. And it may strike Europe harder than the US.
To be straight: I also do not like the new templates. Thinking only newbies is not the right thing.

But there language features i like
Kotlin Scala does all these and interface with Java to boot
They were primarily animal sources of salt. Once agriculture developed, it became necessary to supplement that missing salt. From what I can find, that number is about 1/2 to 1/3 of what modern people eat.

That's not to say that's a good thing, sodium intake is a U-shaped curve. Too little is as bad as too much. Here [1, check figure 1] is a study comparing heart disease, stroke, etc. vs sodium excretion (as a proxy for sodium intake). The standard dietary recommendation is 2300mg, which is well below the minimum point in the graph.

And the 'high sodium diet' (3400mg) of average person is also below it, most people should probably be eating more salt, especially if they are sweating more from exercise or live in a hot climate.

[1]: https://jamanetwork.com/journals/jama/fullarticle/1105553
Pieter was a friend of mine, and he certainly wasn’t conflict averse. If something bothered him, he would do something about it.

He used to bring a Nerf gun to conferences just to shoot down people’s drones because he found them annoying.
Do they? Can you give an example? Because there's a recurring Epicurious series where an expert tries to determine of two samples which one is cheap and which is expensive. They're not always right but they're right quite often.
How to download your Instagram data
Thanks for your feedback. I've added a Product page and hastily dropped in some screenshots I had on hand from a planned PH launch. They are not optimized for mobile and I plan on replacing them with something better tonight but hopefully they'll serve the purpose until then. Cheers!
I chuckled haha :)
Bullshit. The physics and engineering does not support the claim!
Sounds like a great justification for ECC memory.
It's really strange to think that the American left (AOC, Bernie) are fighting for such radical concepts as social healthcare, free education and paid maternity leave. I'm from the UK, the most capitalist European country and we had all three until we regressed on university fees thanks to our wonderful Conservative party.
You mean Elon companies that have received a ton of money from various governments? Without the government Elon would make cars for rich kids only.
You are telling other people that their subjective experiences are wrong, which is just rude. Point-blank correcting anyone’s personal experience, regardless how much you might disagree with it, is usually found to be very offensive.

If you are trying to correct someone’s usage of words, please try to be a lot more thoughtful about how you approach that. Different people use words differently, and you are not the arbiter of truth.

To agree with OP: I was in a bad situation, and was diagnosed by a nurse as clinically depressed. I fixed the situation, and I was happy again.

[edit: changed order]