skysight-inc/HackerNews huggingface dataset:
Nowhere in particular as its impact is going to be slow and progressive everywhere so not much noticeable. I find quite dumb to make a life choice for just that reason, to be honest.

In Germany for example there is no noticeable difference, although some people like to think that yearly differences in snow are due climate change.

In Spain I could observe some storms are now a bit stronger and sudden as they used to be as if the weather would turn slightly more tropical.

But these events, even if are an actual consequence of climate change and not just causality, are like not easy to spot as the climate stays mostly the same and there is no apparent change in any drastic way. Perhaps after hundred years if we compare it with today that would be more dramatic, but that’s all. And still there were short periods when the maximal recorder temperatures were even higher during the Middle Ages, so it might be feasible to imagine a future where everything is reversed like the Ozon depletion drama from the 90s. Heck even a single super volcano could change everything in a single month.

So I don’t think the question is more important than where would you like to live for its climate.
It's more than that. Reifying your mental symbols affords better and more complex symbol manipulation. It's the same principle behind writing down equations instead of doing them in your head.
You're right, I will edit my comment. Thanks for this framing.
The reason companies like Microsoft are basically calling for companies to stop relying on SMS is that it is just way too easy to compromise a phone number or a sim card and there are way too many people that get subjected to identity theft this way. Compared to other second factor options in the market, SMS is probably one of the worst ones precisely because operator security is so flawed.

It's better than just having "secret" as your password, but not by nearly enough that you should feel particularly secure with it.

The issue with with all multi factor authentication is dealing with the likely situation that one of your users locks themselves out of their account and needs to have the factors reset so they can get back in. The secure way to deal with that would be to go, "Sorry, we don't know you and you've lost all your data. Goodbye!". But of course with important accounts that usually escalates pretty quickly with upset users hogging your helpdesk employees and not giving up that easily. So, most companies have help desks that are easily talked into "helping you". That's what they are incentivized to do. Companies with tight margins are the worst. Like most operators for example.
Turn off the TV and anti-social media, take a walk in the sunshine, and voila.
30K Websites Down After Google Cloud Outage
Well, didn't we just experience two major npm published packages containing malware? Both had CVEs.

Now we have the probable root cause, buried in a wall of text. No CVE.
A few years back, on day 1 of my new job I was given root access to one of the development boxes.

So I ask: "Okay, how do I log in?"

The IT guy: "What do you mean, you just log in using your personal domain account and then sudo su -. You know what sudo is?" (followed by loud sigh)

Me: "You mean like production domain, same that we use for our desktop?"

IT guy: "Of course! What do you mean, what other domain would you like?"

Me: "Can I at least change my password to something else just for the dev environment? Can I log in with SSH key?"

IT guy: "No, no, no. Per our SECURITY policy, SSH keys are disabled and you have to use our domain login and password". (another sigh... of course)

Me: "Are you aware that when somebody has root access to the box they can do whatever they want including intercepting passwords of all users that log in to that box? In this case, every single developer that ever needs access to dev environment?"

IT guy: "That's not true. SSH is encrypted protocol and it is not possible to access passwords".

Me: after many tries to explain this to various people from IT, I gave up and set out to intercept all passwords of all IT employees. After I had passwords of almost everybody, I put them all in an excel and sent to IT for "verification".

There were a lot of angry people that day wanting me fired... fortunately they came to their senses.

Unfortunately, my development box access privileges were revoked.
I use it to copy links from my work Macbook to my Android phone.
Sure, but you're replying to a comment about policy for recessions, not for when the job market's looking great for everyone, so it's bringing up labor shortages that's moot. People weren't walking down the street to get jobs at any sort of company with ease in 2008, or in the middle of lockdown.
That subtitle was in no way accidental.
> I like democracy, but the problem is democracy in its current US form (parliamentary system is better but EU constitution is fucked and causes similar problems) is best at interpolating the options that have been presented.

I agree with you that there are some decidedly undemocratic elements to many "democratic" systems (such as the ones you've mentioned), and to be clear I wish that was not so. But these same democratic systems have historically not just expanded the overton window, but exploded it: the advent of progressive taxation in the early 20th century; the advent of high income tax rates in the 1930s-1950s; the social welfare states that most social-democratic European governments erected in the 1950s-1970s (and the skeletal welfare state the United States erected at the same time) - just to name a few.

> We can print money, and if there is inflation we can fix bottlenecks

We can't just print money to the extent that's required for the really big policy changes. You want a UBI? A universal capital endowment? Free health care? These things require significant revenue to sustain year after year after year. I don't think that's necessarily a problem, there just isn't a free lunch. And the US is the most likely to be able to get away with it: there are plenty of nations that don't entirely control their monetary policies (EU countries, for example)
"All models are wrong, but some are useful"

A lot of so-called experts don't quite grasp the former and don't care about the latter. They cannot be relied upon for actual decision making, since the low level details are what's hard!
Come live out here for a while, talk with people, understand them.

I've lived all over, including LA, east coast, south, Chicago, near the border of Mexico (I worked with illegals there even in sweat shops).

Rural America is garden of peace and contentment compared to the urban areas.

Your views are admitedly from a visitor... and there is no way you can compare them equally that way.

Ignore Foxnews & CNN and get to know rural America before condemning it.
Yes, because pure services don't get CVEs. CVEs are for distributed software.
Honest question:

Can’t the oddity of planet orbits also be explained by a sun in motion causing the orbits to be a little dragged shape? The direction of drag is probably the ghost planet 9?
whats the difference lol
> It is a lost and shallow view made by people who have chosen not to engage or understand what they espouse on.

Translation: "I have no argument for why my Dunning-Krugerands should be worth anything, so instead I'll just be insulting and superior."
Distrod does similar, getting systemd-init in wsl.

https://github.com/nullpo-head/wsl-distrod https://news.ycombinator.com/item?id=29142556 (10 days ago, 24 comments)
Depends what you consider peripheral. The places within a couple hours big enough to notice as you drive through are basically Lions Bay/Squamish going north, Maple Ridge/Mission on the 7, and Abbotsford/Chillwack/Hope on highway 1 out the Valley.

Chilliwack and Hope might be cut off, though I think it's possible to get there via minor roads/unusual routes. Abbotsford is partly flooded, but areas that aren't should be accessible. Lions Bay/Squamish and Maple Ridge/Mission are fine, as far as I know.

So if a 1-2 hour drive is the limit, then parts of Abbotsford/Chilliwack/Hope are pretty miserable right now, but it should be fairly localised.

On the other hand, you can argue that most of Southern BC is "peripheral" to Vancouver, despite parts being 4-5 or more hours away. Those parts will have more issues, since you start getting into places where the only connections are (were) the highways that flooded and washed out.
Most humans are already in places safe from climate change. Even in low lying Bangladesh, studies predict that climate change will only cause between 900k and 2.1m humans having to move over the next hundred years. More Bangladeshis than that move on an annual basis for other reasons anyway.

https://iopscience.iop.org/article/10.1088/1748-9326/aac4d4/...
Some about "devops" stuff?
At last, pytorch "@" operators can be called from fortran so that they can call dgemm()... Hahaha.
JPMorgan sues Tesla for $162 mln after Musk tweets soured warrant deal
The conflation is appropriate as the original clam is that fiat currency is backed by trust that the nation won't default. If the nation defaults in both cases, they are equivalent.
And that is one of thr major defects I pointed out.

It's not "fine".
Apps that don't let me at least paste something from my password manager can also fuck right off.
Yeah, Office 2003 is the sweet spot. It's also the last version that installs entirely offline, without any attempts to sign in or phone home for verification.
There is a lot of corporations that are far from market dominance. There is more to the world than Fortune 100. Some companies chug along with ~500 employees for multiple years with a lot of rotation.
Late, but in looking at things it looks like there are a significant number of things that Ninite will install and Chocolatey does not. While one can re-run the Ninite installer later for updates I do prefer the less all-or-nothing model of Chocolatey.
You know, I wish that there were a requirement for people to read just one book on economics before blathering about cryptocurrencies.

The idea that the US government's power to tax all of American commerce is "valueless" shows that you simply haven't thought for even a few seconds about anything in the field.
The earlier article, discussed at the time:

Why Emacs? - https://news.ycombinator.com/item?id=3256721 - Nov 2011 (128 comments)
Steamboxes that large aren't common but steam bending of wood has never been 'lost', it has just been substantially scaled down from how common it was in the past, just like many other techniques for working wood and other materials. But in bespoke furniture making it has been in continuous use for centuries. I'm really not sure what part of it was deemed to have been lost.
"A "dwarf planet" is a celestial body that (a) is in orbit around the Sun, (b) has sufficient mass for its self-gravity to overcome rigid body forces so that it assumes a hydrostatic equilibrium (nearly round) shape, (c) has not cleared the neighbourhood around its orbit, and (d) is not a satellite."

According the the wrong-headed AIU definition. So, yes, _Jupiter_ could be a dwarf planet, if it hasn't cleared it's orbital neighborhood for some reason.
Wow, do you have more resources for the drain to waste system?
It is far more important to be able to explain your line of reasoning to those around you, especially professionally (much of the essay was about school/work), than it is to hope your coworkers are able to "see beyond the obvious".
> I never mentioned anything about impersonation and said the opposite of what you are questioning

Surely in the modern disinformation environment you are joking when you write "[l]et the company be sued for making false claims" as if that is a moral justification to allow bad actors a platform. (If not, please search court cases relating to Fox News being sued for lying and their subsequent incredibly ironic justifications.) I understand what you think it is - an appeal to authority - but it's laughably naive. How many spreaders of misinformation during this pandemic faced any repercussion at all?

Intentionally spreading misinformation about a pandemic, or for that matter any time one spreads known misinformation in order to manipulate others, should be harshly condemned as morally despicable, and also made impossible wherever possible. It is clear people will act in their short term interest wherever possible, and I would not describe "social isolation" or most other appropriate measures as fitting that bucket.

Finally, before you argue that I shouldn't support "censorship" from unregulated big tech, please know that I fully agree and I believe free speech to be an important concept. I find it unjustifiable and deeply concerning how analogous being removed from FaceTwitTube is to being censored / silenced / "cancelled", but I refuse to act as if the principal of freedom means you should be able to use web technologies to maliciously act against others.
Is your landing page and hosting dashboard all built and powered by Budibase?
The Last Questions (Part 2)
It's not really conceptually different from relying on third party libraries in any context.

I haven't touched JavaScript since the late 90s, so I dunno what the hell's going on there, but in my C++ projects I typically have 10-20 dependencies (counting modularized Boost as one). They're either built by a custom script which includes the SHA256 of the tarballs it expects, or by a particular pinned commit of vcpkg which likewise uses SHA512 to verify its downloads.

I generally only update these when I need a new feature or bug fix, which means I'm unlikely to get bitten by any temporary security compromise.

If the "particular checkout of vcpkg" type of approach is impossible with other package managers, that's unfortunate.
20 years ago a friend noticed his social security cars as female.
So he spent a few months trying to fix it.

He eventually gave up.
For my CitiBusiness account, not my personal accounts
Argh, if only AHK used some mainstream scripting language, at least in addition to its leetspeak. I will never learn it by practicing once in a year.
When it costs a few dollars to make the latter and tens of millions to make the former then it’s fair to not be super impressed.
… and twinned rainbows are caused by larger droplets being flattened by air resistance and so refracting light at a different angle.

If you’re interested in this sort of phenomenon, check out Light and Colour in the Outdoors which explains a lot of them with various amateur experiments one can do with e.g. two razor blades or a long tube or whatever to visualise them.
That is a great idea.

I have found that people that don't like being questioned/challenged have something to hide like a con-man or someone selling fake luxury goods.
Xbox.com Is Down
Quick! Invade and size Vancouver while no one is paying attention.
Rare earths are neither particularly rare, nor particularly likely to be unusually abundant on a Planet 9.

However!

A Mars or Earth-sized planet sufficiently far out in the solar system might be sufficiently cool to be able to retain helium in its atmosphere, without being a gas giant planet. If so, it might conceivably be the best place in the solar system to obtain 3He, an isotope that has considerable attractiveness for use in fusion reactors. A D-3He fusion rocket might even provide a nice way of getting out there and back in a reasonable time.
I agree that cities can be great at times. But as a whole comparatively they are not as stable or peaceful.
Too many things down today according to down detector. Many were affected by Google Cloud but there was also interruptions on Instagram.
What Is the Best Type for Currency?
Exactly this. I see so many people conflating NFTs with “expensive JPEGs”… No, an NFT is a cryptographically-secured representation of ownership of an economic asset.

Yes… It also happens that there’s a ton of money being ploughed into weird, niche, expensive digital art. But this has now created an economic market in a space where previously one was not possible, by virtue of the fact you could never prove something was original, unique, or “yours”.
I don’t think I am missing the point. If you had gone all in on call options in Feb 2020 you’d have lost 100% of your money (depending on expiration)
For those who take this headline as an indictment of the trump-Russia affair, keep in mind the article content actually goes on to explain that the many many non-dossier related instances of sketchiness was a big factor in some reporters taking the dossier too seriously.

“ The first problem was this: There is no doubt that Mr. Trump had long curried Mr. Putin’s favor and that he and his family were eager to do business in Russia. Moreover, Mr. Mueller showed, and filed indictments that explained, how the Russians interfered in the 2016 campaign by targeting voter-registration systems, hacking into Democrats’ emails and taking advantage of Facebook and other social media companies to foment dissent and unrest.

Mr. Trump’s choice of Paul Manafort to serve as his campaign chairman reinforced the idea that he was in the thrall of Russia. Those fears were borne out when a bipartisan Senate committee found Mr. Manafort to be a “grave counterintelligence threat” because of his ties to a Kremlin agent. So, given all those connections, it was easy to assume that the dossier’s allegations must also be true.”

Likewise, the article does put the dossier reporting issues in perspective stating:

” None of this should minimize the endemic and willful deceptions of the right-wing press. From Fox News’s downplaying of the Covid-19 threat to OAN’s absurd defense of Mr. Trump’s lies about the election, conservative media outlets have built their own echo chamber, to the detriment of the country.”
All reporting is selective. Nobody can report everything, and you can't afford to waste your audience's attention.
You're not using OpenWRT on a C7/A7? Please do someone a favour and sell it, they're in short supply.
This is fascinating to me! Quantum computing is such an incredible frontier. But I suppose it will mostly be used to decrypt all the currently un-decryptable internet traffic being archived at the Utah Data Center [1]. But, maybe it will also be used for something good for humanity, too.

[1] https://en.wikipedia.org/wiki/Utah_Data_Center
Oh wow, that's crazy. Thanks for sharing that.
> The orbital period also goes up quadratically with distance

By Kepler's Third Law, isn't it proportional to the square root of the cube (3/2th power) of the distance?
Hope Technology – 7005 hours and counting [video]
I would be interested to hear examples of important conclusions that PG was able to come to only though writing.
You have 127 qubits that you measure and you end up with a classical string of length 127. Sure, that classical string, the measurement result, could have ended being any of 2^127 possible different values into which the wavefunction collapses. But that is no different from saying that there are 1^1024 possible states that a 1kB of classical RAM can be in. It is not related to the (conjectured) computational advantage that quantum computers have.
Buy now, pay later in Microsoft Edge
Isn't the problem, though, that you don't really know what is, and isn't, achievable until you actually get there and have the benefit of hindsight?
The San Report [audio] – Speakingaboutnews – Listen Notes
> Especially from VsCode where it uses the Eclipse language server.

Sure, but my particular complaint isn't with the functionality; it's with the UI. Yes, VS Code absolutely improves the experience.
I am glad the author's habit of weirdly abbreviating the names of people in the text, regardless of whether the reader is likely to know them, is not widespread. BradCh, MikeMap, ScottRa, etc.

At least Dave Cutler gets to have a real name in this story.
Right-clickers vs. the monkey JPG owners
The software industry is full of should-be-criminal forms of negligence.

Things are already horrendously bad. Basically every American's identity could stolen at this point. If any nation state or other actor decided to operationalize any of the big leaks -- eg OPM or EquiFax -- the ramifications would be catastrophic. Imagine millions of people losing their retirement accounts and all their savings. Even if you could correct everything -- and that's a big if -- the process might take years and the intervening panic would be deafening. The amount of anger might even elicit a hot response.

To say nothing of more serious vulnerabilities. We really dodged a bullet on the pipeline ransomware.

I'm morbidly curious how bad of a "Cyber 9/11" we'll need before software starts being taken seriously as an engineering field in which practitioners have professional responsibility.
At the heart of the matter is the banking equivalent of he said/ she said. A ridiculous way that anyone can adjust the contract and justify it:

"At the heart of the dispute is a provision in the contract that allows JPMorgan to tweak its details after any “extraordinary events” at Tesla."

-

Every tweet or company announcement could be considered an extraordinary event including Covid related supply chain hiccups.
I think if you put up a stop signs next to the obstructions and wash outs, Vancouver drivers then just sail right through them like they are nothing.
Hi,

Nope it isn't - our website is built with hugo https://gohugo.io/

Our hosting dashboard is built with svelte.
Awesome project. A open source alternative for 3dconnection 3d mice would really be nice to see. It looks quite different in style of interaction compared to 3dconnection mice. I do not believe it is truly 6DoF. Instead I believe it is 3DoF with an aditional 3DoF simulated by pressing down. Not sure if a 3dconnection style 6DoF device is feasable with of the shelf parts.

Maybe this (1) style of true 6DoF is easier to source parts for. Something like this seems to exist (2)

(1) http://www.cgchannel.com/2010/11/axsotic-releases-intriguing...

(2) https://hackaday.com/2016/02/02/joysix-six-degree-of-freedom...
"If it works, don't fix it"

Just like banks still use COBOL, it's probably easier to just continue on. No matter what the officials may say.
If it’s below the noise floor, how do we separate it from ‘accidental (or incompetent?) honest marketing’?
Isn't this the biggest security flaw in the package ecosystem ever?

They don't even know when, if, who and when this was exploited, but maybe I didn't pay enough detail attention to the few paragraphs devoted to the real problem.

So shoudn't we assume all NPM packages published prior to 2nd of November are compromised?

And if so, shouldn't this deserve a CVE? (https://en.wikipedia.org/wiki/Common_Vulnerabilities_and_Exp...)
CVEs alert end users that they need to take action to apply updates. That's relevant when a specific npm package contained a known vulnerability. It's not relevant when the npm server contained a known vulnerability. There's nothing a user of npm can do to update the npm server.

CVEs don't just mean "this is a big security problem".
Last time I was in New York was a good few years ago, but I was very surprised how much more expensive supermarket food was than in the UK, like 3x more. In a huge country with lots of farmland like the US with less stringent food regulations in theory food should be cheaper so I’m curious as to what causes this price difference.
There are so many embedded systems that assume so much about 127/8. I don’t understand what industry is driving this that can’t simply look to ipv6…
I'm neither a Lambda School hater nor a patent lawyer, but it seems a little far-fetched to me that a company can lay claim to a letter of the Greek alphabet. I wonder if the settlement made Lambda School's name change absolutely necessary, or if it simply provided convenient cover
Indeed. And I have seen cases of both happening within the same single family. Different kids react to the same external pressure in different ways.