skysight-inc/HackerNews huggingface dataset:
The host application is still C, and the final compilation of the mix of C and sanitized C still relies on the optimizer to be fast, so it might be possible for the untrusted library to reveal UB in the rest of the application. I can see how the whole approach (wasm + taint) would make compromise of the sanitized bits through crafted data harder, but I'm not sure it does enough for guarding against a supply chain compromise of the library.
My cousin died and it hurt, yes, so I'll vouch for that.

But just today I read about someone who's waiting for surgery, nor urgent yet but his chances of keeping his brain intact shrinks by the week. His operation has been deferred twice because of the unvaccinated fools who need the bed more urgently. Reading that hurt too. Which hurts more?
Oh I can top that. I worked for a startup that was acquired by a mega-conglomerate a few years back. They told us that there was an important meeting Monday at 8 AM and to make sure to be there on time. So we all showed up, dialed into the remote meeting (phone call, not even zoom) and it was a recorded message informing us that we were all terminated effective immediately and we would receive details of severance via personal email. Oh yeah and it was the week before Thanksgiving.
> This ridiculous complexity and scale highlight why Microsoft has historically struggled to deliver reliable feature updates for Windows 10, forcing them to drop “Windows as a Service”, moving to a more manageable yearly update schedule.

The author seems to have a distinct lack of understanding of windows codebase. They didn’t move away from windows as a service because of code complexity, they did it because businesses didn’t and don’t want a rapid release cycle for desktop, they want stability. And NOBODY wanted massive UI changes without a very clear version difference so they could move to the new UI when they were ready.

Windows as a service was a bad idea they properly course corrected on.

Furthermore, most of the code he’s referring to is up the stack and would presumably need to be ported to Linux unless they’re going to abandon all of their enterprise users and apps (they won’t). MinWin was only 25MB after all (yes I realize that isn’t a complete OS but it gives you an idea of how much space all the “other stuff” is taking up).
On topic - I suggest the following blog post series:

https://acoup.blog/2020/09/18/collections-iron-how-did-they-...

I learned a lot about the production and manufacturing of metal (iron) items. If I recall correctly, for iron production, a lot of people are involved in obtaining the fuel (wood, ash, charcoal) and not so many blacksmiths are necessary
Are you the person in the video?
I didn't know verbal/emotional abuse requires a minimum word count! Please tell, what is the magic number that serves as the threshold?
I appreciate the perspective.

If you're telling me I worked there at literally the worst possible time frame, I'd believe it. I may have my experience skewed through the perspective of Nick's influence, but tbh many of my issues were unrelated to him or his sphere of influence.

The C level thing may not have been a "big" mystery, but it was to me, and as somebody who was running the dev of a flagship software product (UniFi) it set off alarm bells that nobody I talked to could explain who was handling the roles of those execs. I'm not exaggerating when I say I effectively got "I dunno" as a response when I inquired, and I dug.

It is good to know, though, that what I experienced wasn't chronic for the entire company's existence.

To clarify on the China thing, I wasn't trying to imply that anything nefarious was actually happening. Just that it warranted some scrutiny when a security focused product was being developed on the Chinese mainland and by a team of Chinese citizens that are subject to CCP laws. Given some of the things that have happened around that country's involvement in tech in recent years, I don't think such scrutiny is unwarranted, especially when the team has a track record of security "goofs".
DARPA Funded Researchers Accidentally Create the World’s First Warp Bubble
Dude, I'm a non-tech guy. I just frequent HN for intellectual stimulation.

If I can set up a custom domain, you can definitely do so.

I'm a freelance and my livelihood also depends on cold emailiing people. It's just a false belief that we need Google to handle important aspects of our life. No, we don't
The Mystery of the Paris Supermarket
Neural Health selected to scale with 5G
The second version of the "WOM 5G Challenge 2021" competition announced the winners of this initiative, which aims to invite entrepreneurs to test their ideas on the 5G network on a real scale.

The selected startups were Neural Health and RoboMotic, which will have the opportunity to work with WOM experts to demonstrate the benefits of fifth-generation technology and, at the same time, make their ventures more attractive to their clients and also be financed. It is estimated that the projects will be launched in the next three months, with results to be seen early next year.
because expecting things to not change is SELFISH

life evolves, and we do too, our habits too, our needs too, we need to adapt to the environment, we need to adapt to weather, we need to adapt to scarcity, we need to adapt to people's mood

you are selfish if you expect things to just stop, and if you don't adapt, nature told us that you'll go extinct
Here is a good timeline (complete with Elon's tweets) for Tesla's self driving capabilities.

He has been lying about it for 5 years now and has been stringing on Tesla customers with statements like, "It's almost there!" and "Next version will blow your mind!" etc.

https://www.reddit.com/r/SelfDrivingCars/comments/n6nsmt/elo...
And where generally closer to our modern day MDs then real mediaval MDs. As those where theologists coming from christian universities where they received basically zero true medical training.
https://www.aimloan.com/

(no affiliation)
Yeah, to distill what you're saying (lmk if I'm still misunderstanding), GWei is ETH, but looking at it relative to USD (or whatever fiat) is wrong. That's where I disagree, because electricity and equipment is denominated in fiat, and the whole system is an electricity/equipment (in fiat) -> ETH conversion system, so the relative price of ETH to fiat is beyond relevant, it's the whole idea. No one would do this if ETH were worth less than the fiat needed to make it (promise of future worth aside).

And yeah, I do think probably most people still think in fiat, so if you kind of elide all of the ETH/GWei steps and say:

> Hey, buy a mining rig for $2k, you'll make $60/day after electricity costs, you'll make your investment back in a month and after that it's pure profit

That's all people care about, and rightly so. If, on the other hand you say:

> Hey, buy a mining rig for $2k, you'll lose $10/day after electricity costs... that's it

That's not super appetizing right. And the only way the system makes fiat is if ETH is worth fiat. You can't abstract it out of the system, it's the only reason the system is relevant at all.
I sort of remembered this and was going to comment once I found it, but you beat me to it - and saved me some work. Thanks! It's a very relevant and important story.
How the Supply Chain Crisis Unfolded
Good.

Facebook is the global scale, slow motion online equivalent of the Fyre Festival.
Absolutely! The “industry” of healthcare is solely focused on $$$, not care.

Case in point: hundreds or thousands of people died from COVID-19 because hospital protocols didn’t accommodate rolling patients.

Think about that - beyond the covid tragedy, how many sick people are suffering from pressure sores for want of aides to perform basic care protocols. It’s gross… the president of the local hospital chain here was whining on TV about the lack of nurses. He makes $15M/year and cut nurse salaries by 25% in 2019.
The origin story for this is reminiscent of how AO3 got going. Maybe if you partner with them, make a "Wiki Of Our Own" sister project, it would get more traction and then move up the search rankings organically?

Although checking the AO3 wiki page, man I didn't expect them to have hosting costs that high.

Do you have a project site? I might be interested in contributing.
> Coming to MySQL was like stepping into a parallel universe, where there were lots of people genuinely believing that MySQL was a state-of-the-art product.

> (it seems most MySQL users and developers don't really use other databases)

> But perhaps consider taking a look at the other side of that fence at some point, past the “OMG vacuum” memes.

> Monty and his merry men left because they were unhappy about the new governance, not because they suddenly woke up one day and realized what a royal mess they had created in the code.

> I am genuinely proud of the work I have been doing, and MySQL 8.0 (with its ever-increasing minor version number) is a much better product than 5.7 was

————————-

There’s definitely a lot of “our users are sheep” and “everyone else is dumb” going on in this post.

Heck, it may even be true. But you can’t really argue that hybrid author isn’t saying it.
I was talking to a coworker who said to me -- what do you think about asking for bonuses like my friend at FB gets, to get us to do more work? I said: I'm paid more than I know what to do with already. It's not a problem of money, it's a problem of managers who aren't leaders, and lack the ability to inspire anybody to do anything. It's no surprise we don't get much work done if nobody is inspired or proud of what they're doing.

She had apparently never thought of this, but agreed. I guess a lot of people think it's about the money and then wonder why they can't get much done. imo the money determines who works where, but has almost nothing to do with the amount of work that gets done.

... so yeah, I agree.
That makes sense if the public tests are "compress these bytes, expect this output" but I'd expect instead to have a lot of specific components with their own individual tests.
A relative who put in over 20 years in the army told me that a lot of their post gate guards were contractors these days. Considering that when he told me this it was the height of the occupation of Iraq ('05, maybe?), and that lots of the soldiers on these posts would soon be guarding gates and checkpoints in Iraq, it struck me as super fucking weird that they didn't use that as a training opportunity to get them experience doing that stateside—very different, sure, but any experience beats none, surely, and training's a ton of what they do when not deployed anyway, so seems like a win-win, but I guess either that's not true or whoever landed those contracts had some really good lobbyists.
These kinds of behaviors won't really change until governments finally pull their heads out of their asses and ensure that regulatory violations above a certain threshold are aimed squarely at imprisoning or personally fining certain key decision makers inside a company. You know, actual people inside its structure, not just the monstrosity as a bloated, extremely wealthy business entity that can and will absorb fines as nothing more than a cost of doing business..

That they fine the corporate entity as well, sure, why not but that they also explicitly make it known that they will seek criminal charges against actual human beings who made specific choices and decisions to ignore certain major rules. Even if the top brass cover their asses with lawyers under such a regime, asking any subordinate to break rules will always be weighed with the question of "and will I be one of the ones who gets literally jailed for this being uncovered in court?" That wholly new chain of consequence-weighing might at least make blatant disregard for legal limitations more problematic for everyone at a company like FB and so many others. It might also make the leadership hesitate more because they'll rarely be sure if an employee they asked to do something illegal isn't also gathering evidence against them as he or she violates the rules under their orders.

Punishing malfeasance by applying nothing more than fines to multi-billion dollar corporate entities as abstractions is absurd nonsense. And it's funny in its hypocrisy, considering how "tough on big corporations" is a popular politician's theme that gets votes, only to be forgotten by both politicians, and apparently, voters as well once someone is in a position to make rules with real weight.
Not really. Dry run is useful for complex commands you're not sure the effects of. These options are so that when you intend to type:

rm /home/john/some/file.txt

But you accidentally type:

rm /home/john some/file.txt

It says:

rm: cannot remove '/home/john': Is a directory

Instead of john not having a home directory anymore.

And people aren't going to use a dry run option or interactive confirmation every time they run a simple command like that.
I had issues with that since my phone's Wifi chip seems to have powersaving in it also, which means if my phone is screen-off in my pocket, it's not necessarily 'connected' to my router as far as the router is concerned. It effectively reconnects sporadically to grab push notifications or when I turn on the screen, but otherwise is mostly sleeping. I wasn't able to come up with a presence detection system more reliable than the one HomeAssistant uses, which is "is $my_phone inside $gps_fence"
thanks, yeah I was watching the video and noticed the recipient of the call frantically typing, likely knowing that account lockouts are coming.
> Once you venture outside the HN echo chamber there are large numbers of people who really prefer that their data stay on their own PC.

AFAICT, that's backward: people with that preference are over-, not under-, represented on HN.
Dumb dolphins are not as smart as average dolphins though. They are dumb.
Thank you lucaaa !
Yeah, that's not the job of the judiciary to worry about that.
I'm also very tired of the increasing rate of change. I know a lot of people here will be familiar with the Red Queen Hypothesis [0]; although the term initially comes from evolutionary biology, I think it's applicable in any situation where there is a lot of competition. And then most if not all the tech companies, which are aware of this effect even if they don't give it a name, are constantly trying to "innovate" and find the New Hot Thing before the competition does. And this makes said companies try to go faster than they would go if they weren't so afraid.

I don't know if it's just me, but I'm seeing a lot of urge to change everything even in more conservative big enterprises, which used to be the safe space of sorts for people who wanted to build products in stable technologies, maybe not so hot but still really solid and well-functioning. I can understand if enterprise desktop applications are seen as obsolete and everything has to be web now (to me it still sucks, though, both as a developer and as a user. I assume I'm obsolete as well), but since a few years ago, now everything has to be Everything as a service, and machine learning must be shoehorned in some way, no matter whether it's well suited to the problem at hand or not. It's being so bad that higher management starts demanding rewrites of 100K-1MLOC applications in new languages, with every component of the full stack being new, because trusted technologies are apparently not evolving fast enough.

As I've said above, I assume that I'm just obsolete. But I'm pissed off at the current state of the industry, not only because I have to switch jobs for my mental stability, but also because I used to be at least partially in sync with many aspects of the industry, but that has stopped in the last 5 years or so. I don't see myself being a developer for too long... it's too much bullshit and I have non-software skills that I can put to good use in a job that doesn't make me insane, even if the pay is lower.

[0] https://en.wikipedia.org/wiki/Red_Queen_hypothesis
90 million lines of test code?

That seems ridiculous to me. I can’t imagine what would lead to so many lines, but I strongly doubt it’s all actually source code.
Isn’t SQLite essentially not accepting outside contributions at all? In such a case this CoC really might work just fine.

As would a red “GO AWAY” banner.
I've been on both sides, but yes, just my opinion. On the other hand, this is newsworthy because it's unusual. I suspect it's unusual for a reason.
> That's the actual problem in your scenario.

But it's still a problem that exists, and one you have to acknowledge!
It can be done and it isn't hard for the company. I'm going to float a guess that you haven't experienced a mass layoff where they pop your coworkers one by one over the course of the workday. It's very painful and takes a very long time. Anybody who has been around for one would almost certainly take the mass layoff over 8+ hours of constant worry just to lose your job at the end anyway.
> I'm an infrastructure dev, not an DBA or an advanced SQL user, I never used window functions, or wrote a query that filled half the screen, or have a thick web of foreign keys ... If you keep things damn simple so you have confidence in efficiency and performance, then MySQL works pretty damn well in my experience, and Postgres, for all its academic correctness and advanced query feature set, has been pretty damn annoying.

At that point you're effectively using MySQL as a key/value store with an SQL interface, rather than a full RDBMS.

Which is, in fact, pretty much exactly what MySQL was originally designed to be and it's extremely good at it.

> If you keep things damn simple so you have confidence in efficiency and performance

I can have that level of confidence on a minimally tuned (albeit sensibly indexed, you still have to make sure the indices you need -exist- on anything, realistically) postgres at levels of schema/query complexity where getting mysql to handle it -at all- would be ... an experience.

Having used both extensively, I'd say that there's a lot of knowledge when using mysql that's basically "introducing complexity into your application and query pattern to work around the optimiser being terrible at doing the sensible thing" and then there's lots of knowledge when administrating postgresql that's "having to pick and choose lots of details about your topology and configuration because you get a giant bag of parts rather than something that's built to handle the common cases out of the box".

So ... on the one hand, I'm sufficiently spoiled by being able to use multi column keys, complex joins, subqueries, group by etc. and rarely have to even think about it because the query will perform just fine that I vastly prefer postgres by default as an apps developer these days.

On the other hand, I do very much remember the learning curve in terms of getting a deployment I was happy with and if I hadn't had a project that flat out required those things to be performant I might never have gotten around to trying it.

So, in summary: They've chosen very different trade-offs, and which set of downsides is more annoying is very dependent on the situation at and.
Air filtration and monitoring are a classic market for lemons.

Wirecutter has decent-ish tests of air filters, though they assume tiny New York apartments, so you have to dig around a lot to find results for larger units.

(From reading their review, you’d think >1000 sq ft homes are unheard of in the US, but the average is closer to 2000 sq ft)
Unless I'm misunderstanding SQLite can do this as well, but with less nice syntax. The above could be written something like:

SELECT id, json_extract(data, '$.foo')
FROM t
WHERE json_extract(data, '$.bar') > 5

in SQLite. You can also add an index on one of these expressions: https://dgl.cx/2020/06/sqlite-json-support
There seems to be a bit of a bug, or confusing element. It appears that Change Everything, Inc. and Facebook are linked together somehow. It says the company is Facebook, but the size and description appear to be for Change Everything, Inc.
Somehow the OP didn’t remind me of this pertinent article [0] but your comment did.

[0] https://avc.com/2009/10/slow-capital/
One of you is trying to help these people find their next job.
This was done at my previous company near the beginning of the pandemic, where half of the company (about 1200 people) were laid off, entirely with one-on-one calls. It worked well and I appreciated it personally.
AWS is offering scholarships for AI/ML students
Ebiten in 2021
I would argue that curl is safety critical.

And it's a very nice thing, and we have it.
This. So much this.

Especially this bit:

> In the case of closed loop cargo cultists: They might end up taking cruder faster steps, but then don't actually close the loop by going back to the start and iterating.

Agile isn't about having standups. It's about having fast feedback, so that you can react to what you have learned. If you don't have that, you don't have agile, no matter what process you have in place. (For that matter, any time you are trying to do agile by a rigidly defined process, that's an oxymoron.)
> . 1) That was 10 years ago

The Holder doctrine, (as explained in the article that was provided as a source) dates from 1999 and is thus over two decades old. This doctrine was referenced in 2012 by the head of the Justice Department’s criminal division.

If you believe this doctrine is no longer followed, it would behoove you to provide evidence of your own that "too big to jail" hasn't been a guiding doctrine for over two decades.

> I can see why you chose to create a throw away account in this case to comment. I now see i'm being trolled by an anonymous account :( I'm sorry I feel for it.

Calling someone a troll never improves any discussion and is inappropriate on HN.
It might have been more useful if it wasn’t literally the day after he got another job (it’s not like he quit it because MySQL is so terrible and will now look for a new landing spot).

I don’t know the author, but assuming he has publicly made such comments before it would behoove him to link to those posts so it’s clear that he has been raising these complaints publicly for a while and didn’t just wait to dump the consequences of his public post on his now former colleagues the moment he got out.
> I'm sorry, if you feel like you're not being paid enough, the solution is not to commit wage fraud against your employer.

i'm pretty sure you did not read the second part of my comment as you did not engage with it's argument (that the definition of the word 'steal' is political). i don't think saying "I'm sorry" and then stating your opinion is an argument.

> There are plenty of employee-owned companies out there that would fit your ideals, people can work for them if they want that ownership. Or start their own. Otherwise, no, they don't get to own the output of their work. That's the way it is.

It's not about ideals, it's about the core logic of our current economic system: the accumulation of capital by one class.

Idealism or whatever can't do anything to fight back against coercive and alienating capitalist property relations where one class (property-owning) benefits at the expense of another class (the working class).
The old media is the content until the new medium discovers it's own content, not possible in previous mediums.

The global action 3D MMO that is built and modified by the user is the USP of the final medium: programming the internet!
> To me, this is not relevant. What people should be focusing on is WHY.

Totally fair that to you it is not relevant. But that doesn't imply that people should be focusing on what you think is relevant instead of what they think is relevant.

The delivery of the message is super toxic from a labor relations POV and I think a lot of people care about that, as a lot of people sell labor to employers in order to survive.