skysight-inc/HackerNews huggingface dataset:
BITS GmbH | Munich/Germany | Java Dev | Angular Dev | IT Consulting (PM) | Fulltime | Onsite/Remote (50/50) | https://mybits.de

At BITS, we support both, corporations and startups in the digitisation of their business units and processes. We are looking for fulltime

- JAVA developers

- Angular developers

- Fullstack developers

- Software Architects

- IT Project Managers

- IT Consultants (Infrastructure, Cloud, Network) and

- IT Students

to join our teams.

If you are looking for challenges and like to push issues forward, then we would be happy to hear from you, regardless of whether you have just completed your studies or have years of experience.

More info: https://www.mybits.de/offene-stellen | about BITS: https://www.mybits.de

Feel free to contact me: marc.schallehn@mybits.de (please refer to HN)
Germany introduces new EU consumer protection rules by 2022
Anybody got a better link of what it will look like? The article has only one tiny image and links to a recording of a 30-minute Zoom call: https://www.youtube.com/watch?v=uB_Dm9pN4FQ
Hello! I'm one of the founders of https://cogram.com, a coding assistant for data scientists and ML practitioners. Cogram brings Copilot-like features to Jupyter Notebook.

You can use Cogram by writing ordinary code (and Cogram will complete it), or by writing comments (in which case Cogram completes the code that matches the comment). We've also launched a web app that generates SQL statements from descriptions in simple language.

We're just starting out and would love it if you could try it out, give feedback, and spread the word if you like. It doesn't cost anything -- we have a generous free tier (1000 completions / month).
No Old Maps Say 'Here Be Dragons'
Agreed.

The problem is that when the government is derelict in it's duty (or, if critical mass of people believe so), this is the expected outcome. If people lose faith in the government to protect them, they're not going to roll over and die, they'll take whatever measures they deem fit to defend themselves and their property.

Law Enforcement exists for a reason. Maintenance of a degree of order keeps the populace happy while professionalism and codification of enforcement moderates the response (at least in the general case). Ideally, it's the "win-win" scenario where the perpetrators get to be treated well enough, while the populace is confident that violations of their safety and rights will be addressed.
> Are there buffer overflow bugs that are not security bugs? It could be just my bubble as a security consultant, since (to me) "buffer overflow" assumes remote code execution is a given.

Not necessarily:

1. Most compilers use aligned variables and fields unless forced not to with a flag. Going 3 bytes over an array of 12 bytes can result in an overflow that is never detectable at runtime because the extra memory being used is used exclusively by the bug.

2. Malloced memory is harder (but not impossible) to turn into an unintended execution because the pages may be marked for data only by the OS. The stack pages are ~marked~ [EDIT: ~NOT marked~] as executable.

There's probably millions of buffer overflows that will not only never be exploited, but will also never be detected.
Libtree: Turns ldd into a tree; explains why shared libraries are found or not
How to rest well
The Telegraph is mainlining drugs which have side effect of thinking that everything was better in the old days and nothing should ever change as change scares the old people.

It is a posh, old school conservative tabloid and very flexible on what it considers to be the truth.
And only in the Netherlands. Calling this "voluntary" seems a stretch.
> They have no means to force a design on the cathedral that the French public dislikes.

Historically, almost every time this has been true from a legal perspective yet challenged by the papacy, the papacy has won. I'm not saying that they will challenge it this time, but the papacy looks towards the next millennium, not the next decade or quarter as do most public institutions.

For what it's worth, I'm neither Catholic nor Christian.
> Wouldn't this imply that the vaccine is physically harmful to you?

I have no evidence to say that the vaccine is physically harmful to me, personally, but there are plenty of stories on the web where people in the prime of their health, have been struck down with something after taking it.

However, there is plenty of evidence to say that covid itself is not harmful at all... look at the stats - literally no one is dying!

These jags are also brand new: they're a few years old so there is ZERO data on long-term risks. None! For all we know, in a few years people may start dropping dead with heart conditions.

Now, if covid was as life-threatening to the majority of people as it is being marketed as, then I can potentially see a case where people should get it but the figures do not lie: almost no one is dying from covid.

Remember, this covid jag is a treatment for something that it's unlikely you will succumb to. So, should you get every vaccine going just in case?

Additionally, the gov wants you to keep taking it, over and over again! That will increase your long-term risk (again, zero data on the long-term effects!).

Plus, by giving in and taking it each time you're told, what kind of world are you leaving your children? They're going to have to get a medical procedure to go to the pub ffs!

So, in answer to your question about whether it's harmful... we don't know and the thing is do you really want to risk your health and that of your children for something that has almost zero chance of affecting you?

Edit: Forgot to say, the point of these jags (despite them incorrectly being called vaccines) is only to make you feel better when you catch it. Make no mistake, they DO NOT prevent infection, DO NOT prevent re-infection, DO NOT prevent spreading... so what the hell are they for? I believe that the newest strain that was discovered in South Africa was in someone with the covid jag...
Relevant: https://news.ycombinator.com/item?id=29031488
Agnosticism is useless for the purpose of decision making, it only suggests that all decisions are equally good.
If your question was "Alternative to Instagram that lets me import my existing archive" then you'll find Pixelfed is 'not the droid you're looking for'. Like the vast majority of the new fediverse apps, it provides no way of bringing your existing content with you, when you join.
People don't call free from their realtime threads.
This is an interesting conclusion, because as I understand it this is only really true in some states.
Wisconsin's self defense law is more permissive than many, and so Rittenhouse probably couldn't have used the same defense as easily in many states.

In other words, it's not "plainly obvious", and this comes down to the context beyond the moments before he shot people. Wisconsin law says you can ignore that context, and that self defense is self defense even if you create the situation that requires deadly force or are the aggressor.

Wisconsin law has exceptions to this, that allowed Rittenhouse to use self defense despite having himself escalated.

This is a bad thing for a few reasons (two people who both shoot each other can legitimately claim self defense, taken not much further and Ahmaud Arbery's killers could claim self defense after he reached for their gun to defend himself), and anything but "obvious".
Show HN: Cute-JSON – fast JSON formatter for Java
It is true. Definitely not for the faint of heart.
Suburbia is worse... like a desert.. no water no trees no shade with all the houses built wall to wall now, and no toilets, one MUST drive a car to survive
> he also could've bought the subscription with stolen credit cards

Now they're looking at you from two angels.

Instead of all this jumping through hoops with anonymous VPN and payment methods, why not just do it from Starbucks?
thanks - long week. I should read more carefully.

Inside a supabase project users can connect to their projects as either "anon" or "authenticated". The role information is passed inside a JWT.

I'll need to confirm with Oli (asleep right now) on the technical implementation but I believe either of these roles is assumed when running the RLS checks.
I don't think the name matters, what matters is that they built the brand early on and were daring enough to build separate brands for their products.

Sure, "Meta" _means_ something, but Apple (now) does, too, by association.
Ultimately, you can blame the CEO for everything.
> Father Drouin’s proposed interior redesign of Notre Dame will be submitted to France’s national cultural heritage commission on 9 December

As is frustratingly common, the media is stirring up opinion based on vague details and assumptions from a 30 minute video call in May. If there was more detail available it would be more difficult to tell people what to think.
maybe because the country with the FED can print new dollars and spend it on stuff they like (infrastructure bill, paying back debt, …) while such dollarized countries, (beside yes the short term stable currency) just see medium-long term inflation (without the aforementioned benefit the dollarizing country gets).

Google for: „cantillon effect“ (also accounts for inequalities inside one country like the US)
post on the 'who wants to be hired' thread.

then search the 'who is hiring' thread, and apply to a few companies that match. seems like a bunch of companies are hiring interns for everything.

also, if you are willing to SDR, it's a great way to get in, and pay your dues in a way that most people never will at any software or tech company. if an engineer ever tries to dis you? fuck you buddy, you got an engineering degree, but i was an sdr.

in all seriousness tho, i think it's a great place to start. even if it's highly likely you'll get fired. it's high risk, high reward. i've never done it at someone else's company - tried it myself - it's hard.

after that, Level 1 Technical Support. done. do your time there, study on the side, concentrate on titles, you'll be there in no time.

also, obv, go to a booming fucking vertical. crypto. defi. vr. securitah. whatever it is this week. or will be next week.

ideally, go to a booming fucking company, whether in a booming fucking vertical or not.

who is that? flexport? stripe? i don't know who. prob anything that is bad for humans and humanity.

many of the big companies are booming, but....what a fucking existence. but if all you really care about is getting enough coin to retire early and then get depressed and kill yourself because you no longer have a meaningful goal, then big company might be for you. they can pay really well. you might die a thousand deaths before you have a chance to take your own life, but at least you'll be able to brag on the FIRE boards.
Testing Phone-Sized Faraday Bags
In the US military, among both uniformed service members and federal civilians, it's still more about seniority, institutional knowledge, and security clearances than certifications (with actual skills being even less important). The pay and benefits are good (much better than average for a given location with similar education and years of experience) if you make a career of it, but you won't start as an O-4 or GS-13 after just passing a bunch of certification exams. Highly paid contractors are typically former military because of their institutional knowledge and security clearances.

The numbers that I see for "Big Tech" software engineers seem to be in a whole different universe, though. Better to keep practicing for your algorithm interviews.
Is there a list of the sites Google de-listed somewhere? I'm pretty sure (in fact I knew some, but I can't remember) it included some interesting and totally legal websites.
Veromin CBD Gummies Reviews
https://promosimple.com/giveaways/veromin-cbd-gummies/
Not OP but I've been experimenting with tortoise and it's pretty awesome! I love that it works with pydantic out of the box so it integrates with FastApi really nicely.

I just started a small side project with fastapi + tortoise + postgresql + vuejs and so far it's a pretty fun and smooth experience!
Because there are several extensions (extra fields) to ZIP that record the full modified date in addition to creation and access date if the OS supports them.
If there’s anything I learned, is that any skepticism tied around crypto tech is generally met by the doubling of the value of whatever you doubted over time. I don’t have real answers for any of this, I just accept this stupid shit is going to be worth what they are saying in 5-10 years time.
They start showing images around minute 18:

https://youtu.be/uB_Dm9pN4FQ?t=1076
That's like saying every historical monument or building should be redesigned in a modern context. No thanks.
My question would be how you could add more products for the same target audience. Can you send me a dm on linkedin? Ronald.
> Forgetting where algorithm X is O(N^2) or O(2^N)

I find it absolutely shocking that you would consider it trivial knowledge whether an algorithm is low-degree polynomial or exponential. The pendulum is swinging way too far to the other end. If you can't remember/figure out whether the code you're writing is O(N^2) or O(2^N) you should not be writing code professionally.
Identity can always be botted and forged.
Not all zipcodes uniquely identify cities
The incumbents, with all their issues, are miles better. Cryptocurrency doesn't work, and nearly every business in the space is a scam at some level.
I mean, technically you can write the goals of the company into its charter as whatever you want. It doesn't need to be money/growth/etc. And you could, technically, find investors who will back that goal with their money. And you could, provided you jump through the relevant hoops, take that company public. I'm not sure what restrictions exist on the markets, but I don't think there's anything technically stopping someone from creating a non-profit-oriented public company.
There are frequently posts on HN about NPM packages getting compromised.

Of the top 10 posts on HN about NPM in the past 30 days[1], 9 are about security problems, and last 1 is about package spam.

[1] https://hn.algolia.com/?dateRange=pastMonth&page=0&prefix=fa...
I've been using Copilot these past days and it's kind of mindblowing. I was doing some Rails tests, and after writing the factories it suggested me the exact right expectations. Did not expect that, kind of scary. Same for suggesting while commenting code. Wtf.

I'd love to keep using it, but I'm way too familiarized with Sublime Text to change now (and I tried to customize VsCode). I know it's a long shot, but it'd be great if they release an extension for Sublime.
That's how I (try to) use Instagram as well. It's still working more or less fine for me, but what bothers me is that it has also become an essential messaging app for me. I don't use Facebook or WhatsApp, so Instagram is the only way to stay in contact with some of the people in my life. I guess if I wanted to leave, I could ask them for phone numbers or email addresses. I should probably do that even before I actually leave.

(By the way, my main messaging apps are Signal and Telegram, but I also have LINE, for my contacts related to Japan, and iMessage, mostly for family. So many apps...)
I agree the best possible language model would possess general AI, but you can't go from no intelligence to general AI in one step. It seems likely to me that the intermediate levels of intelligence such a system might develop early on might actually make it a worse language model. The evolutionary path from dumb language model to language model with human level AI might well lie through an unhappy valley in which the fledgling AI makes more mistakes and is easier to catch out than a pure language model. In which case, a system would never take that evolutionary path.

This is a problem with systems optimising towards a single specific function. It constrains their optimisation paths.
All of this is true. I would just add one thing - if your peers are raising money, it's often suicidal not to accept money in the current market. The anecdotes about Google, Facebook, AirBnB are very hard to transfer to startups which are not lucky enough to have network effects to exploit.
Let me present you McAfee copying a folder full of zip files, at least this is what it did five years ago. First of all, it is horribly slow scanning any kind of zipped content. Second, it scans a whole folder if you touch one file. Third, it forgets you scanned a file if it gets modified, even before closing the file.

So you copy a buffer full (64k?) of bytes, and mcafee scans the full folder. Then you copy another buffer full, and it scans the full folder again. And so on.

I saw the windows estimated copy time go down from multiple days to a few minutes by adding an exclusion on a folder.

Another fun McAfee tip is to keep your recycle bin as empty as possible, especially for zip files, because windows will look at the content regularly, so mcafee keeps on scanning it again and again.
It’s almost worse, because you’re working against this quadratic force, at a rate proportional to speed. So power output, the usual limiting factor for a cyclist, scales like 3rd power of speed.
What's so bad about fire safety?
That's the whole point: https://en.wikipedia.org/wiki/WWV_(radio_station)#Broadcast_...

The "clicks" are second markers, and the low-frequency hum that follows each click encodes a single bit of a binary datastream conveying the current time. If you've ever had an automatic clock in the US, it sets the time by tuning in to WWV and decoding this signal.
Sure thing!

The sqlite file format spec (https://www.sqlite.org/fileformat.html) is fairly short. I looked at hexdumps of where the db header should be, and a few page headers, and it seemed to line up, but not everything was filled in correctly. Trying to patch the header fields to match the sqlite spec and running it through sqlite3 didn't work, so I figured there was some more structural differences.

Since the spec is pretty short, I wrote a small parser for the sqlite files, printing out hexdumps of various sections as I went to check against the spec. The cell pointers in the btree leaf pages were missing, so I just tried reading them out in order from the cell data section and that worked (the pointers are really just an optimization to skip over cells when scanning). The table schemas are stored differently, but its a text format so its pretty easy to read (comma-separated columnName:type).

The record format was the most different part. Instead of type-tagged values like in sqlite, these records just had the column count and offsets of values. The offsets can be 1 or 2 bytes depending on the length of the record, which tripped me up for a bit. This was mostly figured out by looking at hexdumps of records. The values have to be interpreted based on the schema of the table the record is in.

The file format used little-endian for the record values, despite everything else in the file being big-endian. The schema in these files allowed array-of-vals and array-of-structs column types that I haven't decoded yet, but they don't seem to be on any of the important tables, mostly file metadata tables. There are some untyped binary columns containing an array of 64-bit floats, which was found by comparing against the csv of the same data.

Not counting some of the binary columns which I haven't decoded yet, the alternate version of the various sections were still pretty simple, so I was able to figure them out by eyeballing it. There weren't any numeric enums (outside of the ones in the sqlite spec) or flag masks that would have taken a while to decipher.
I am sure he does...

"Pfizer raises 2021 sales forecast for Covid vaccine to $36bn"
https://www.ft.com/content/5054863d-2c1e-4e2b-89ab-5d1a4a2ff...
One thing that cryptocurrencies uniquely enable is ransomware. It is not really possible to pull off on a large scale without cryptocurrencies. People tried, but it never took off until bitcoin became available.
They are going to lose 1/3 of revenue. Now NBA and Xohn Xhina on the other hand.
The Lumen Database collects DMCA requests Google receives, but the URLs are not always visible.
I generally never understood the appeal of the cloud, and the particular way the 3 big vendors sold proprietary services as a means of vendor lock-in. I mean, I understand the appeal to them, seeing how they made ungodly amounts of money doing it, and given the choice you never want to be in a commodity market, but as user/developers, the value proposition has always been unclear to me.

- The term 'containerization' implies in theory (and somewhat in practice) that you package your software in such a way, that it can run on commodity hardware with enough resources.

- The huge success of open source means that for any given problem domain (KV stores, SQL, Web Server,LB, caches etc.). There exists a best-in-class solution that's free as in speech. In fact, cloud providers' solutions use these libraries as well.

- The development of languages that combine productivity and performance (Go/Java etc.) and with Moore's law enabling ridiculous core counts/RAM sizes etc. means that there's less of an incentive to run a server farm when you can easily fit 128 peak-performance cores under your desk. Stackoverflow did this/has been doing this model with quite some success.
They were also fortunate to have that level of expertise, both medically and law enforcement which the US offered.

But I guess in retrospect using an exotic method of killing someone is bound to draw heavy attention.
The limiting factor seems to be the arm, which would probably become impossible even with modern materials pretty soon as you increase weight.
I would move to Arizona, COVID was only there for a few weeks. Phoenix is over it completely.
A company run by literal blockheads
Post has been deleted. Can somebody explain what happened exactly? I have a hard time believing Google posted nudes on social media and stole money from him.
In reality it was mostly just a stunt to scare people into paying the fees. In 90s a number of countries in Europe had tried the similar actions, I remember in Serbia the national tv station RTS was advertising continuously how their technicians are walking the city with "Swedish detectors", which were some mysterious boxes, probably some kind of EM detectors, that supposedly could detect TV devices inside the homes - but of course the whole thing was a load of crap as it's a way too much work to make it profitable, so it was mainly used just to scare the senior population into paying them.

Later they simply changed the laws to make it mandatory for every household to pay the TV tax, as their detectors obviously didn't work.