skysight-inc/HackerNews huggingface dataset:
>>How do you reduce the status of millions of machines, the software they run, and the interconnected-ness of those systems to a single graphical indicator?

There's a limitless variety of options, and multiple books written about it. I can recommend the series "The Visual Display of Quantitative Information" by Edward Tufte, for starters.

>> Literally there are hundreds of things broken every minute of every day. On-call engineers are working around the clock...

Of course there are, so a single R/Y/G indicator is obviously a bad choice.

Again, they could at any time easily choose a better way to display this information, graphs, heatmaps, whatever.

More importantly, the one thing that should NOT be chosen is A) to have a human in the loop of displaying status, as this inserts both delay and errors.

Worse yet, to make it so that it is a VP-level decision, as if it were a $1million+ purchase, and then to set the policy to keep it green when half a continent is down... ummm that is WAAAYYY past any question of "threshold" - it is a premeditated, designed-in, systemic lie.

>>You don’t know what you’re talking about.
Look in the mirror, dude. While I haven't worked inside AWS, I have worked in complex network software systems and well understand the issues of thousands of HW/SW components in multiple states. More importantly, perhaps it's my philosophy degree, but I can sort out WHEN (e.g., here) the problem is at another level altogether. It is not the complexity of the system that is the problem, it is the MANAGEMENT decision to systematically lie about that complexity. Worse yet, it looks like those lies on an everyday basis are what goes into their claims of "99.99+% uptime!!" evidently false. The problem is at the forest level, and you don't even want to look at the trees because you're stuck in the underbrush telling everyone else they are clueless.
Why is this on Hacker News? It’s obviously a delivery station, not any kind of data center based on the trucks that were inside the facility in the video.
Actually I'd never seen that before. Using lava lamps to generate randomness predates Cloudflare by a few decades. :)
How is being a BTC bro thumbing one's nose at empire? The winners from any kind of successful BTC movement will overwhelmingly be just a slightly different set of private, unaccountable, economically (and hence politically) powerful people, who are even more ideologically predisposed to libertarian fairy tales.

BTC success in El Salvador would be a defeat for the vast majority of the populace, and a non-event for empire, except maybe to be used as a model to repeat elsewhere.
For the same reason I find the grammar of Kakoune a lot easier to understand. It is similarly subject first instead of predicate first.

I wish there was a NeoKak that would integrate with other environments like VS Code the way NeoVim does.
In the US, you can call your local bar association. They’ll generally find an appropriate lawyer, and charge a small amount for the initial consult/matchmaking.
More amazingly, this is intentional. If you didn't want log4j to trivially exec remote code, you were expected to add a properties file telling it not to.
The log4j maintainers seem to have realized that this (the "%m" in a PatternLayout doing lookups) is a bad idea around version 2.10 (released in 2017) or even version 2.7[2] (released in 2016). These versions both included changes that allowed you to disable this behavior. Unfortunately, the Java compatibility mindset meant that they didn't take the further logical step of making the behavior that disables lookups the default.

I think this vulnerability should be used as a lesson against the vagaries of the classic Java API design issues that we're now finally starting to turn away from. Having an extensible formatting mechanism is not necessary a bad idea, but the problem with this and so many other "magic" features provided by Java libraries is that they are:

* Opt out, instead of opt-in
* Hard to discover - if you don't read the ENTIRE log4j documentation (which is pretty large!), it's hard know that this stuff is happening.
* Too inclusive - adding JNDI was a bad idea, but even allowing things like environment variables or JMX Beans to be looked-up wholesale from a non-sanitized message is a bad idea.

The problem is much deeper than log4j really. In hindsight, features like JNDI, RMI, and most of all Java Serialization should have never been part of Java in the first place.

[1] LOG4J2-2109: https://issues.apache.org/jira/browse/LOG4J2-2109

[2] LOG4J2-905: https://issues.apache.org/jira/browse/LOG4J2-905
You are right, I forgot. In the sixties the "Kelvin" became a Unit of Measure. But it's a convention - it remains a "degree", somehow, though the concept is weak: it indicates discreets, values are continuous. Degrees make more sense when "24.4" does not, while measurements are intended to be ideally precise.
uBlock Origin is better.
So are we ever going to get dark theme?
title
because 75% of them are probably dead links now ;-)

but all the major browsers have sync. you can export them from chrome and import them into brave

and btw if you use a lot of bookmarks (i do too) you might love this graphical bookmark manager YASD - you can browse bookmarks as thumbnail images of the site -- much easier to browse them for the link you want):

https://github.com/conceptualspace/yet-another-speed-dial
More a tapestry. The amount of IC orchestration required for all the moves here is unlike anything I've ever seen. (Since the cold war)

They are telegraphing the entire world here, if you want to expose the truth, think again and maybe stfu.
In my experience, a lawyer will also nudge you towards whichever course involves keeping a lawyer involved. They'll never tell you "if I were in your shoes, I wouldn't keep going".
The format string should not allow remote execution unless explicitly tuned on either.

Logging should not be the thing you have to sanitize.
Bullshit.

Knowing your rights, reading the law and discussing it is a perfectly fine thing to do for everybody.
Advent of Code 2021, one language a day
This is a fundamentally dishonest letter.

The exec knows perfectly well that employees negotiating as a group have a lot more leverage and consequently will get better outcomes than ones that negotiate individually. The letter does its best to imply agreeing to pool your leverage with other employees is a bad thing when, in fact, it's usually a good thing.

Also, do a lot of people really not see the implied threat of a phrase like "consider the consequences"? Of course there isn't a direct threat -- implied works just fine and leaves you on a much nicer legal footing. I'm pretty sure most Bliz employees get it.

I especially like the bolded part. Of course the leadership of Bliz does not like the workers' rights under the NLRA. Emphasizing it really makes the point that a lot of double-speak is going to happen in the letter, for legal reasons.

Bliz management has a rather direct and huge conflict of interest when it comes to giving their employees advice (legal advice, no less!) on how best to negotiate with them. It shows how little they respect the intelligence of their employees that they would release a letter like this.
Those large libraries don't change either, if you use a fixed version.

Security updates are important, but it's not like CVEs are particularly common in 5 functions like left-pad, and bloated code that isn't reachable in your app is probably not going to be an attack surface.

Especially if a dead code remover gets it.
Only if that's what their union local decides to negotiate into a new contract with ActiBlizzard.

Unions are made up of the workers within them, and especially new ones are there to represent their members' interests. If their members want flat pay, then they'll push for flat pay. If they want pay based on performance and other metrics, they'll push for that.

There's no rulebook for unions that says "Everyone must be paid the same, and terrible workers must be unfireable." This is a negative stereotype of unions—based on some real-world examples, to be sure, but a stereotype all the same—that has been aggressively pushed as anti-union propaganda for decades.
Once every few years I tank office productivity by sharing this out. My small way to fight late stage capitalism. ;)
I'm not sure about those particular air rifles, but there are .177 and .22 caliber air rifles capable of 50J or more. A half gram .117 pellet at 1600fps is 60J. They should definitely be treated as weapons.
It depends on what the union negotiates, but most unionized workforces do not have flat pay, so I doubt it.

They have pay based (mostly) on seniority, specialization, job title, etc.
Three business days. The demand letter requests a response by December 15, which is a Wednesday.
I agree with everything you said except FAANG. To keep with the corporatist shill culture it is now technically MANGA instead of FAANG with Facebook’s rebranding to Meta.
> it doesn't mean someone else hasn't already acquired it

It goes further than that: trademarks are registered in 45 different classes and trademarks of different classes are completely independent, but the USPTO goes by

> "Trademark, same name, same class”

meaning more than one entity can register the same trademark name in the same class, because trademarks have a requirement of distinctiveness.
Because their passion is for gaming jobs, and that's what they're desperate for. They're not desperate for any job in particular.
> Will people want to work in VR? If it means 4 screens on the balcony of a Tuscan villa instead of a tiny desk in a depressing space? Maybe.

There's a lot more to physical environments than high resolution graphics. You've got more senses than just sight. Your body is still experiencing the depressing desk even if your eyes are trying to convince you that you're at a Tuscan villa. That seems more depressing.

You're essentially just describing a high resolution 3D desktop wallpaper.
I just want to note that, as of 2012, numerous Hacker News commenters were confidently declaring Assange would never be extradited to USA.

https://news.ycombinator.com/item?id=4390885
>I'm not really convinced security issues in open source libraries is a funding problem. Sure, sometimes money might help, but it might also just be used to add unnecessary features. I really see a management problem.

The article points this out as a management issue as well, but in regards to the response, not as the cause of the exploit.

With a funded dev team, the response to fixing the bug would come more promptly.

The issue here is that the FOSS decelopers who are doing this work for free are now expected to make this their highest priority. This kind of linchpin software SHOULD be properly funded by the companies and entities that use them.
I appreciate Chris’s Clojure work.

I wish what people call web 3 would be called web 4.

For me, Web 3 was the (mostly failed) semantic web. That said, ideas and tech behind the semantic web are alive and well in knowledge graphs. Life is good.

I would welcome more opportunities for decentralization and privacy in Web 4, I hope it works out!
The biggest reason is lack of knowledge and awareness amongst Developers. Increasingly, Management and Senior Management do not have the breadth of knowledge and understanding of these areas to be able to overrule inertia against their adoption.

The problems are not technical but cultural. I experimented with Picat and have looked at Prolog and Mercury. Picat is a superb language. It allowed me to rewrite a constraint satisfaction problem in 150 lines of code that had been an ungodly problem area for months. The original was in Java but the design was the issue. But I had ab exchange with Picat's authors to try and make it more attractive for Corporate Developers but it's not their priority.

Based on my experience - 3 things stand out for me:

The idea of a separate language is too tough. It must be embeddable in a larger, mainstream language. Minikanren is a good example. Embeddable Prolog is hit and miss today. The idea needs to be developed and polished. I work primarily in Banking. A large Bank will have hundreds of apps. Adding a new language, technology, nailing down Management and then having to maintain knowledgeable staff is not an easy proposition. So much easier to adopt if we can integrate ideas into mainstream platforms (Java, .NET). By all means build the stand alone platforms but also offer it as an embeddable component. Clojure with Datalog, Racket with Datalog, Minikanren are good examples.

We need more, better success stories and wins to be publicized. Erlang has had a huge win with Whatsapp. For all its life since the mid-70s - I'm not sure I can point to huge, visible truly large wins. I'm sure there are successful projects for Prolog and Mercury et al but it needs wins.

Teach, teach, teach - evangelize and get the idea out - not as much re tech but applying logic based programming. Business rules definition, BRM, BPM are natural areas but you don't see logic programming formalized in them. Try and change that.
I guess movie soundtracks are the closest to that in widely distributed music, or artists like Aphex Twin.

There's an infinitely vast space of potential sounds, and an infinitely long fractal knife edge of interesting sounds, and it kind of makes sense that finding unexplored areas of that fractal edge between boring and incomprehensible gets harder over time.
Not playing for the win aggressivly enough ends up becoming playing for a draw ? .

At the world championship you would want to play conservatively , defensively and wait for a mistake to strike, there is a lot to lose if you try to force a mistake and play more aggressively.

It is not cheating or against the spirit of the game to do so, world championship matches have almost always been filled with draws.
In my (giant) company, it appears there is a bit more room at the top for managers, but in general leveling up is more difficult as there is an expectation that the amount of headcount you manage is commiserate with the level, so the optimal leveling progression appears to stay an engineer for as long as you continue to level up and then switch into management.
When it comes to random people on the Internet making jokes about mass casualty events, it certainly feels more like callousness than coping.
> does holding the domain have any legal merit?

There... is no relation between the two?
Yes I know. I afforded a rare joke. In fact, I stated that one can now attempt the intellectual exercise of visualizing -40 Kelvin: there, the interest - theoretical, and supposedly very practical and urgent - is raised which was lost in the poster's stated irrelevance of -40°C vs -40°F.
> Use opsec for phone numbers, call them at terrible hours ( at home) to discuss offers of payment.

IANAL, but if your goal is to give the them additional grounds for suing you, you may be off to a good start.
Hello,

Thank you for distributing the designs. The choice of license is completely yours to make.

That is what the comment above should have said instead of complaining.
Yes, exactly. Actuaries are quite good at their jobs, which means the cumulative lifetime cost of insurance generally exceeds the (cost of covering a loss * the probability of that loss), so the only three good reasons to buy insurance are:

(1) you can't afford to cover the loss if it should occur (or maintaining/raising cash to cover it would be more expensive than the cost of insurance);

(2) the peace of mind from knowing you won't have to worry about raising cash to cover a loss (even if you could cover it) is worth the cost of insurance to you, even if it's a bad deal financially; or

(3) you know more than the insurance actuaries about your individual risk profile and have an edge (which is rare but can happen -- e.g., you know a specific product model is extraordinarily likely to fail and buy a cheap extended warranty for it).

The first is the best and primary reason to buy insurance, the other two are corner cases.
My fear is the joke from the movie Primer:

- "How did you get over here?"

- "Do you know what they do with engineers when they turn forty? They take them out and shoot them."

I've read in other threads that the ageism fear is overblown, and also that it's not overblown at all.

My plan is to develop enough of a professional network (whatever that means) that I won't be doing leetcode problems for a twenty-five-year-old interviewer when I'm fifty.
Negative Temperature
No idea what CBP is and the first few paragraphs gave no clue. Is it a widely known TLA? Did I miss a memo?
Fenced (generally fenced forest), but surely wider range than the tree itself could reach. If there had been mustangs I wouldn't have been allowed near them. What I mean is that I don't know if the horses ate the seeds, and if they did eat them, I don't know if they mashed them into a non-viable paste.
Indeed - Even the recent facebook outage outlined how slow recovery can be if the primary investigation and recovery methods are directly impacted as well. Back in the old days some environments would have POTS dial-in connections to the consoles as backup for network problems. That of course doesn't scale, but it was an attempt to have an alternate path of getting to things. Regrettably if a backhoe takes out all of the telecom at once that plan doesn't work so well.
> If you aren't running an application on your home server or phone that others can connect to from outside your network then this isn't likely an issue for you.

The direction of the connection isn't relevant. For instance, when you are playing Minecraft and connect to a server, the connection starts from inside your network, but could be used to attack your Minecraft client.
At least one of the people who died inside the facility was a 29 years old maintenance worker. I do not know how predictable tornadoes such as this are, but I won't be surprised if these deaths could have been prevented.

Source: https://twitter.com/AmeliaMtv/status/1469634726558412800
my favourite feature of tree style tab is coloring tabs based on content: yellow search, orange news, green internal stuff etc
> How badly does this torpedo googles ad biz?

Google itself offered this very product. A system for micropayments that would eliminate all of the ads. Nobody used it.
How does the downloaded java class get executed though? I get that you can get the logger to download from a server but what needs to be on the server? e.g. how does it trigger the malicious java class? Does it need to contain certain methods/interface?
> Is this correct?

Is it correct that they will sue you if you don't comply? Maybe, that's up to them.

Is it correct that your use of the domain name violates their trademark? Also, maybe. That depends on the market you are in, the market they are in and that the trademark is registered for, and other things.

If you aren't willing to just hand over the domain, and don't want to just roll the dice on liability, you should seek professional legal advice, and not respond in any way until you have received and considered that advice.
You don't want a concrete or brick home in an area with any seismic activity though. There's really no perfect shelter for all potential disasters.
This is the niche that made WAFs like Signal Sciences so successful.
No, text is self-moderated by each user by using whitelists of users.
That button grays out when both profiles are running. Try it.

Also if the firefox instance is launched with no-remote, this won't even work as expected. Instead it'll start another firefox instance with remoting enabled, which will fail to start because the profile is already in use.
Yes, + they have to make impossible choices. There's a product right now at work we're debating killing and the decision literally comes down to evaluating whether losing an important organizational partnership or taking a reputation hit would be worse for the company. There's not a right answer; that's just fortune telling and having to own the results.
High winds are not tornadoes, these are very different circumstances. You are trying not to get hit by a tornado, and if you do trying not to get relocated by one, or you’re trying not to get hit by something thrown by a tornado. A high wind isn’t going to throw a house at you or a shard of metal though a tree, a tornado will. There are small ones that are mostly harmless and will at most knock over some corn, it’s hard telling the difference between one of those and one that will pick you up and throw you a quarter mile.

Absolutely do not hide in a vehicle from a tornado. You want to be low and near something well anchored. Inside a ditch, huddled up next to an overpass foundation, etc.

A tornado either hits you it doesn’t, but few people in places where there are tornadoes are going to be dumb enough to be near one in a vehicle. You can avoid them while in your vehicle but even seasoned storm chasers still sometimes get taken.

Source: Iowa raised, been a handful of meters away from a weather event that lifted and shifted a couple of buildings a foot off their foundations and peeled a section of roof from a barn. It may have been a microburst instead of a tornado, it was quite dark at the time.

And no, the ditches are there for water drainage like the other poster said… though I’m not sure about vampires :)
My experience differs. I once had a legal dispute in which I was asked to sign away some additional rights in order to receive some money that I was owed anyway. My lawyer said, essentially, "you are in the right, but you aren't planning on using those rights anyway, so just sign the paper and get this over with."

There are scrupulous and unscrupulous lawyers, much as in any profession.
I’ve long had this gripe with MacOS.
Many years ago made a flowchart to demonstrate the difference: https://wanderingstan.com/wp-content/uploads/2009/07/alt-tab...
In the 18th century the phrase "Well Regulated" had a different meaning, for example a "well regulated clock". It's a misconception that it refers to regulation as we understand it in a modern sense.
Sure, all it does is it breaks left clicking hyperlinks in all other applications.
Interesting logistics problem, I wonder how good Amazon is about re-routing deliveries from other warehouses if a local one goes down? This is bad time of the year to be losing a distribution center.
aws isn’t a hobby platform. businesses are built on aws and other cloud providers. those businesses customers have the expectation of knowing why they are not receiving the full value of their service.

it makes sense that part of marketing yourself as a viable infrastructure upon which other businesses can operate, you’d provide more granular and refined communication to allow better communication up and down the chain instead of forcing your customers to rca your service in order to communicate to their customers.
That is a good point. Staying safe is insanely difficult.
> I never seen people locking the dependencies to an exact version

This depends heavily on the language/ecosystem. For example, golang's Minimal Version Selection[0] basically requires libraries to specify an exact version – the only way they'd get a higher one is if another library in the dependency graph had manually upgraded to the higher version.

But yeah, if the source is hosted externally and you don't have a local copy somewhere, then that's going to hurt. Which is (part of) why "should I vendor my dependencies" is such a perennial topic.

[0]: https://research.swtch.com/vgo-mvs
This is a great reason to ensure your mail client doesn’t auto-download embedded images, send read receipts, etc.

No reason to tip your hand until a lawyer tells you to. For instance, the last time I dealt with a lawyer, they had me send responses directly, in hopes the other side would underestimate our position. It worked, fwiw.
I love Universal Paperclips. I've played through it a few times over the years.

In fact, I'm wearing a UP t-shirt right now. I won't say what the text is, since it's a spoiler for one of the best moments in the game.
Worse yet, you don't even need to be whitelisted for the server to log an attempted chat message.