skysight-inc/HackerNews huggingface dataset:
> The problem was that NPM changed ownership of already existing package-names - which caused the left-pad owner to remove his packages in protest.

And of course that npm allowed unilaterally pulling packages and breaking all dependents.
Any semi-serious security posture must involve blocking ads. The incentives in the adtech industry mean that the security issues with ads can never be fixed.
Because they are basically strictly mopeds and not used for ordinary people.

The cited study there is unknown because it’s not actually cited.
I grew up in MN and I just wanted to say that it's generally not that bad, even though it sounds terrifying. All of the infrastructure is designed to handle it, houses are (mostly) designed to be insulated and heated properly, everyone owns appropriate winter clothes, has appropriate hobbies (cross country skiing, etc.) and the very cold snaps usually only last a few days to a week. It's also sunny when it gets this cold and almost never snows (the atmosphere is basically too cold to hold moisture), so you get a lot of high quality sunshine, clean air and manageable roads. Like many things in life, it's all a trade off, and I personally would take it over California smog most days of the year.

Some of the cities with the strongest shift in average temperatures due to climate change are actually in Minnesota, because one of the consequences is going to be less polar vortex events, which means the region sees less of these sudden rapid downward shifts in temperature. The difference in winters now (much milder) compared to when I grew up there are already meaningful and noticeable, which you can observe scientifically on the state's humorously named (but I think they recently changed it) Winter Misery Index https://www.dnr.state.mn.us/climate/journal/winter_misery_in...
Lol “think of the children”. Blizzard can go fuck itself.
NFTs are an ideal way for corporations to fund open source projects. When used as a fundraising tool by non-profit projects, they are a portable proof of contribution that confers status to the contributor, and thus incentivizes contributions.

Recently, they were used to raise millions for Ross Ulbricht's campaign for a sentence reduction.
Embattled Activision Blizzard: 'consider the consequences' of unionizing
The day I become a manager is the day you pry a laptop out of my cold hands.
Are you ever logging strings that come from outside your software, be it things users type in, HTTP headers, ...? Then you don't control if you are "using any of the jni special Uris".
only when using the gossip protocol :-)
Bryce Bayer is your dad? That's quite the exceptional employee you're talking about then.

I recently used his other famous invention (Bayer order indices) to come up with a fast approximation algorithm for blue noise (still working out the kinks of an improved version).

https://observablehq.com/@jobleonard/pseudo-blue-noise
I think you and I probably agree on much of, this so take all this as discussion, not argument... that being said --

Wanting to trade services for money is not enough. Everyone wants that. But good candidates want more nuance to it. More autonomy, more meaningful work, more leadership. Or less of all those things. If I just need a code monkey who will crank out the tasks, I don't want a visionary tech lead. I may want a code monkey who aspires to be a visionary tech lead as we grow. And vice-versa. If I need someone to come in, lead, and build a team, I don't want a code monkey who is looking to just coast doing easy corporate CRUD apps. Software dev roles have a massive variety in their levels of autonomy, leadership, and growth. So do the candidates. The phone screen may miss many things, but you can at least match up on those factors.

> If they're too low, a good candidate might go through with things anyway and try to negotiate beyond the range.

This struck me as an interesting take. I tend to envision good candidates as the one who command enough market value to simply filter low salary ranges out. Why bother negotiating past their range, instead of finding a role that is in my range. There is no lack of job opps out there right now. I've even done that just in the last few months - found jobs that sounded ideal, but declined to continue once I realized the salary was too low. I did so politely, and invited them to call me if they ever have roles at a higher salary.

I also agree that more could be done in emails and phone calls, making the phone screen less critical and better for all involved. But I believe the key to making that world is to fully lose the concept of a "full round" of interviews. Especially now that everyone has remote work experience, lets make the process more fluid - more calls and emails, less massive half-day interview marathons.
> Populations don't exist the same way you and I do.

This is the premise upon which something could work for populations and not individuals, yes.
If many people misinterpret a piece of writing or miss its point then that seems like it is empirically "ambiguously worded", regardless of how clear it seemed to you.

(You are of course free to think and write how you please, but attributing all comprehension errors to readers may limit the reach of your writing.)
It's absurd but they are parsed from parameters as well.

Both Minecraft servers and clients are vulnerable to chat messages with them.
But anyone actually "buying into the climate change narrative" knows that the result isn't warmer winters.
Been on both sides of that line, in my experience there is FAR more lunacy among the development folks.

But to your point, the lunatics always feel like they are the “normal ones”
> Cryptocurrencies are a big part of solving the environmental problems activists identify

No, they’re not and it’s shameful to try to promote proof-of-waste under the guise of environmentalism rather than just acknowledging that you are trying to find buyers.

There’s no shortage of useful applications for green power. Having constant competition to waste that power has incentivized keeping dirty power online and delays conversion by keeping the prices artificially high. Cryptocurrency mining operations can move quickly so they’ll soak up the cheapest green power which might otherwise encourage industrial users to relocate or accelerate personal electrification by people in the area.

Since cryptocurrency expensively doesn’t solve any real problems, that’s pure waste and obstruction at a time we cannot afford it.
It's not a big deal compared to the past when pandemics could kill 80% of the human population. We'll survive it.
are we talking about the same game of life? in conway's, the update logic for a cell depends only on the immediate neighbors of that cell. so the time to update an entire frame is O(m*n), which is not hard for any matrix size that would reasonably fit on a laptop screen.
Tictactoe in PyFL, my experimental functional language
The corollary is it's easy to earn favor with your manager by borrowing tasks from them. They always have too much to do.
This kind of (mis)feature should only be available in the format string, which shouldn't have untrusted user input.
> They are your average Joe, with barely any special skill.

This is not true. It is no more true for streaming then for acting, hosting tv show or entertaining in bar via magic tricks or playing music. The ability to produce entertaining streams is a separate skill. Not just in game skill.

> This is something which never happened before, not at this scale.

At the time when live music was a thing, there were definitely few thousands musicians able to live from it. Which is as large scale as successful streamers seem to be.

> growing from home, with average equipment and average products

Really, no more true then about musical instruments of the past.
I kind of agree with you, but the problem is that "management" is often (very) poorly defined. Is it people or project management? It is often implicitly the two without much rational. Even considering project management the style can vary greatly between somebody concentrating on filling various spreasheets vs somebody pressuring others all the time about deadline vs somebody wanting to ensure engineering is performed and not just mere coding vs somebody having broad picture ideas for future dev.

It makes sense to have "managers" in fast foods. It's way harder to even just define the role in an environment where everybody is a knowledge worker. Maybe we should even stop using that term and stick with more precise role descriptions.
https://imgur.com/a/Qs1ukGM

100%, 67% zoom, python comparison (similar examples)
To put it as politely as I possibly can: advertisers can suck my ass.

They could have been good citizens, but they've proven time and time again they'd rather be the scum of the goddamned earth and use every annoying and malicious trick in the book to fool you into paying attention to their bullshit for the second or two it takes to make their shit go away instead. Not to mention all the overhead of their shit making everything fucking slow as hell.
Hmm. By this logic, aren't power-efficient appliances a bad thing because they reduce demand for energy and thus reduce incentives to generate greener power?

It's not clear to me that this is how supply and demand work. While increasing demand may increase investment in new capacity, it also should drive up the price of electricity. And since in some markets renewables are cheaper than carbon sources, one would expect that increasing the price per KWH will increase the production of the costlier, more polluting carbon sources.

More speculatively, due to the high volatility of cryptocurrency, I'm skeptical that major power infrastructure investments would be driven by the (presumably) extremely elastic demand of cryptocurrency mining. If I'm investing in energy infra, I'm going to invest in markets of increased consumer and industrial demand, which have fairly inelastic demand curves. Investing more to supply electricity to Bitcoin miners requires me to effectively take a bet on the future price of Bitcoin.

I think there is a solid argument that cryptocurrency mining provides high demand for excess capacity, and thus might provide a sort of credible floor for infrastructure investment returns, but that only makes sense if traditional demand are unreliable.
Removewat 2.2.9 Crack and Activator 2022 Free Download [Latest]
That is annoying ... but it could be much more detrimental than annoying if it is also reporting back to a global tracking network that sells your profile to be used against you by a multitude of other actors.

The difference here is between you watching ads versus ads watching you.
Brutal night throughout the region. From the photos I've seen, the candle factory in Mayfield is the worst-hit; storm shelters can only do so much.
Middle 50s programmer here.

I'd say the author forgot 'Survivor'. It's possible to remain a higher-level programmer, just switching projects from time to time as your work ages out.

Advice to the younger generation: About 25 years ago, a fellow programmer told me he was once in management, but switched back to programming. At the time, I though management was the logical career progression (an idea I no longer hold). I asked him why he left management. He replied "Because in management, they nip at you from the top and they nip at you from the bottom." Meaning that you still have a boss, but you also have underlings that want things from you. It was great advice.
Indeed. But the reason propaganda is called such is because it's an information push - to propagate (same root word) rather than publish information.
I'd say knowing your IDE well is critical to speeding up your workflow.

I managed to fix three thousand code smells on a very badly written codebase in a span on two days. Thanks IntelliJ IDEA!
> There's a reason that some people compete at the highest level and some are in the fat part of the bell curve.

It's the same as with any activity.

Time * dedication * (1 + natural talent)

> This comment shows a remarkable disregard for the level of skill required to compete at the highest level.

I've done both, I'm not disregarding amount of skill and dedication it takes. But it is completely different from programming.

Competetive gaming is akin to real sports, more about situation, luck and reaction rather than natural wits. All games are following patterns which you can learn just by spending time in game which adheres to limited set of rules defined by game logic.
Yes this is still possible if you log any user-modifiable value. One example would be logging out a user agent header - if an attacker spoofs this to include a JDNI URI then the vulnerability can be exploited.

This is why this CVE is so scary - I would imagine the majority of applications using log4j will log out a user-supplied value at some point.
Maybe. I know we've hired people who did objectively poorly on our coderpad and they've been effective - although in one case not as an IC, IMO - while other people who did objectively great were just not.

I think my feedback is that the coderpad is not about whether you can solve tricky brain teasers correctly. It's just one signal along with several others: can you understand directions, can you demonstrate familiarity with a coding environment, and does it seem like you can think through (again: simple) problems in a way that we can compare to more real-world stuff.

Personally, my favorite challenge stuff when I was last interviewing were take-home problems that were more representative of the type of work the position would be doing. I could take my time, and idk I felt like I was doing something meaningful and holistic instead of implementing an algorithm. I've brought this up enough to realize that it's a controversial idea though; a lot of people either want that scheduled hour coderpad because they are taking their personal time for it and that's what fits in their schedule, or I've also heard people say that if they are going to do work then they expect to get paid for it, so a take-home assignment doesn't work for them. Of course there's also the possibility that someone will just copy an answer from somewhere and submit it.
Oh wow, it's all done using no 3rd party libraries too. Gonna bookmark this just to browse through later
Before the invention of sewing machines (19th c.), I assume gloves were either quite expensive or very simply made (simple woolen mittens).
Going by the Salus' summary:

- Write programs that do one thing and do it well.

- Write programs to work together.

- Write programs to handle text streams, because that is a universal interface.

(3) definitely makes no sense outside of CLI commands, (2) is too ill-defined to be of any use (at least outside of programs, though even for programs it seems to be quite redundant with 3), which leaves (1)... which is basically a matter of taste: "one thing" is an extremely ill-defined concept, and you could easily argue that most of the useful SUS commands break it, especially (though not exclusively) if you look at it from GNU's coreutils.
Separating the question of "functional units" from "packaging units" is a good point – you're right that there's nothing non-Unix-y about packaging coreutils together.

I might add a third category, though, maybe "development units"? Something like Python's batteries-included standard library strikes me as a bit less Unix-y – not because it packages things together but because they (as I understand it) develop things together and do so in a way that creates barriers to outside packages integrating quite as well as standard library packages. (Or at least that's what I've understood from the outside, looking in)
° shouldn't be used with Kelvin scale.
How do you handle stateful resources? Say for instance you have multiple elasticsearch clusters with terabytes of data on each cluster.
Wow. That site is very wrong. Their historical data is wrong too. It’s all the same value!! It’s about 100x off reality.
It’s been known since 2020 that it is fiction. Bitcoinfees.net appears to be correct (1-2 sats/vB). https://jochen-hoenicke.de/queue/ Also shows vast majority in last 24 hours paid <10sats/vB.

I notice that earn is also reporting way way too high numbers. The fact is you can send 1sat/vbyte right now and it will confirm. 7 cents. Anyone actually using BTC will agree with me here.

Look at the mempool. If it’s empty, BTC is super cheap. It is empty right now and frequently is on weekends.
So big that you cannot call it "card' anymore :)

Jokes apart here you can find an insight about qrcodes capacity: https://github.com/dtonon/papiro
The good parts of the Unix philosophy have already been subsumed into common sense as a programmer. So what remains as "The Unix philosophy" are the controversial, more religious components.

You can tell it's a little religious because, like Agile and REST, "everyone is doing it wrong". Where the thing everyone is doing wrong is a weird little corner of the thing with dubious utility.
I never thought people would pay $2 for a plastic bottle of water.
What? Doctors have residency- a three or more year internship/working interview.
I’ll take my discussions about money without the added gatekeeping, thank you.
To remove secrets you can use git filter-repo to rewrite commits
The borrowers were not experts in the detail of the mortgage markets. They took loans that were offered to them by industry actors who knew or should have known that the sub-prime loan applicants were a bad risk, but let’s give them a pass on that because who could have predicted a real estate crash right?

The real fraud was not writing these loans to less credit-worthy borrowers. It was the mechanism used by Wall Street banks to combine these sub-prime mortgages into mortgage-backed securities.

Not only did the bankers often mis-represent the composition of their MBS, they also employed massive amounts of leverage based on the fraudulent ratings they knew they were getting from the credit rating agencies, no questions asked.

The leverage involved in MBS is what makes them an attractive financial product to municipalities and governments since this extra leverage is what made the impressive promised returns available on such a “safe” asset class.

However, since the Wall Street Banks lied about the quality of the mortgages, the resulting MBS were massively over-levereged. This is why Ryan Reynolds explained in The Big Short, it only required a small % of mortgages to default to create a cascade of failures.

Tl:dr It wasn’t the fact that banks lent to less credit-worthy borrowers that led to the 2008 Financial Crisis, it was all the fraud that went into the construction of the mortgage-backed-securities (MBS)
I think people just don't know what they don't know. Firefox containers is awesome. I can type amazon.com and it will automatically open in my shopping container (after some configuration). I can type messenger.com and it opens in Facebook container out of the box. We even have container sync now so you can sync these settings across browsers.

Mozilla isn't perfect though. I don't understand the decision to get rid of lockwise, my default password manager on iPhone and Android.

» https://news.ycombinator.com/item?id=29321796

I don't get why they removed FTP browsing either

» https://news.ycombinator.com/item?id=27896541

Oh and is the source code for Pocket's server infrastructure available publicly as was promised when pocket was integrated into Firefox?

Don't get me wrong. I love Firefox. I just think we have a lot of room for improvement.
It also "should" only be active if enabled, "should" only be available against explicitly declared target, ... but it isn't.
I don't quite agree. Managers will be the ones assessing the devs and making all sorts of decisions as to the overarching architecture or the software development process.

Having a mediocre developer in that position will lead to all sorts of problems.
Some kind of crypto IS necessary in the end. Not for the micropayment[1] itself but for funding/withdrawing. If this is done over traditional banking system it excludes half the world with access to the internet + adds fees that go to the bank.

If its implemented trough internet mega corps instead of banks they get even more power than they already have + they will take a cut too + they will fight it to ever become a thing because it directly destroys their business model.
On top of that comes privacy concerts and all that. It would be horrible.
We dont know anything other than crypto that would globally work and isn't controlled by a single authority.

https://interledger.org/rfcs/0003-interledger-protocol/
YES, this is definitely a huge factor that I failed to mention - the concept that economic free(ish) markets are incompatible with authoritarianism and would lead to political freedom.

From a BBC article yesterday [0]:

"Indeed the US trade representative responsible for negotiating China's WTO deal, Charlene Barshefsky, told a Washington International Trade Association panel this week that China's economic model "somewhat disproved" the Western view that "you can't have an innovative society, and political control""

I can sort of see how the idea took hold, as the previous large authoritarian states in USSR and CCP had so dramatically and consistently underperformed (to be polite) the democracies that it would seem that the converse would be true, that economic freedom would force democracy.

So, ya, it would seem like a good hypothesis, but I sure wouldn't bet a lot on it without solid testing.

Yet, the political leaders all turned out to be fools and bet the entire future of democracy itself on that notion.

Then, combine that with the MBA idea that the only thing important is the ideas and management and trifling things like manufacturing can be outsourced to their cheapest locale and that manufacturing know-how, innovation, and supply chain control don't matter, and we've come to the brink of destroying the free world.

Now, we have a historical fight on our hands to recover from these blunders.

[0] https://www.bbc.com/news/business-59610019
I don't care if they have my data. My data is useless to me. Have it. I don't even think it's worth that much in the first place. I care that they make the web a crappy, unusable, annoying place. They make the browsing experience less secure. They slow down the webpages and eat bandwidth. They look ugly. It' my goddamn pc, i very well can choose what to run on it.
From the description of the project, I would dare a guess that the intent of this project was to go as self-contained as reasonably possible:

> […] written in standard C11 using only system libraries (with system libraries defined as anything included in the C standard library or supported operating systems).
there's nothing mild about many online ads. pages load faster and I don't use as much bandwidth. YouTube et al are ok, not so much other pages
> Autonomy isn't about "defining conditions", it's about solving real problems.

Sounds pretty hand-wavy. Autonomy is about defining conditions in which a self driving system can safely operate, also known as Operational Design Domain (ODD).

Of course, ODD as a concept is foreign to Tesla FSD because it is "50% of the time, it works every time" i.e. you don't know when it works and when it doesn't. It's a YOLO driver assistance system with a misnomer. Not sure how many "real problems" that is solving and definitely won't be L4 anytime soon.
How about posting what we’re losing for those out of the loop. That Reddit link is pretty useless.
> What paying some dev for open source work does is give you more ways to influence the direction of the projects.

It also gives you assurance that the project maintainer is able to maintain that project full-time, and will not be otherwise occupied at $dayjob when a CVE arises. If a maintainer can only spend spare time on a project, its state can degrade pretty quickly.
Tabletop rpgs doesn't require any props. People do use rules, character sheets, dice - and anything from sketched maps to grids and miniatures - but essentially tabletop rpgs are less limited than say an author writing fiction.