skysight-inc/HackerNews huggingface dataset:
Before this all began, we declared independence [0]. This approach is merely pleading for freedom.

Somehow the Snowcrash faction seem to be winning over the Cypherpunk visionaries. The former envisioned a largely dystopian technological future where in-the-know people enjoy benefits and avoid downsides, whereas the latter attempted to enable unfettered growth.

Where is the modern herald call for throwing off tech designed to subvert the individual?

[0] https://www.eff.org/cyberspace-independence
> It happened at the time of a High Court appearance via video link from Belmarsh in October.

> A 'transient ischaemic attack' – the interruption of the blood supply to the brain – can be a warning sign of a full stroke. Assange has since had an MRI scan and is now taking anti-stroke medication.
Software Engineering Folklore
There's a decent list of references here:
https://www.pehsu.net/PFAS_Resources.html
poverty is one hell of an issue in the us. it boggles the mind how people live in such brittle homes and yet nothing changes. perhaps just like with covid “prayers” and “thoughts” are all the future dead will be given by the “freedom loving” society?
In my experience this is probably not viable. A single, valid update to a direct dependency can bring dozens or even hundreds of updated sub-dependencies. And an audit fix will often update just the lockfile. Maybe I lack imagination, but I can’t think of a workable heuristic for determining how the lockfile was changed.

I think, instead, it would be good to move in a different direction for sub-dependencies generally. A rough sketch:

1. Packages state their dependencies as they do currently.

2. When released, they’re built and bundled by the package manager host.

3. Included in the bundle is a manifest of the dependencies used, specific imports used, and a hash for each (recursively until exhausted).

4. On install, identical code (same hash/same bundled result) is deduplicated.

5. A human readable record of dependencies and imports used is produced. It’s important that it’s human readable, because:

6. This should not be filtered out in diffs. It should be subject to review just like any other change.

All of this is pretty complex, and there are probably ways to reduce that complexity. But it has some obvious advantages:

- Only your direct dependencies are installed. Tons of bloat can be stripped out.

- Even deduplication can be performed on the package manager’s servers. And hashes aren’t a particularly expensive lookup.

- It would go a long way towards addressing audit fatigue: if your dependencies’ bundles don’t include affected code, the audit doesn’t apply; if they do, you can be reasonably confident the audit is valid.

- A (wild guess) huge amount of the time, sub-dependency changes will require little to no review. Their stable parts will seldom change, and the parts shared among several dependencies could be reviewed as one unit.

- Lock files themselves just need to track direct dependencies (and even then, only to support semver ranges).
It is similar in California: https://transparentcalifornia.com/salaries/all/?&s=-total
I wonder (and do not know) if the issue is that Apple vets contracted manufacturers, and if they later use forced labor after promising not to, in order to win the contract, then it's wrong to sue Apple for the Chinese company's behavior?
You know what else is tilt-up? Most big box stores. Not sure why Amazon is being singled out here as I’m sure this building complied with all local building codes.
> Question: what was the peak wind speed? Is it more than a hurricane's, or less?

More, a lot more, to the point where any building code that saves you would just make it not economical to build anything
What I Learned from the Open Source Data Stack Conference 2021
> Local TV stations are required to broadcast weather.

Television stations in the U.S. are required, in a broad sense, to serve their local communities, and many choose to do so by providing weather forecasts and alerts, but I don’t know of any law or regulation that requires broadcasters to provide weather information, in emergencies or at all.

Stations do have to participate in the Emergency Alert System, but they don’t have to transmit anything other than the required tests and an Emergency Action Notification for a national emergency. (See 47 CFR 11.52(d)(4).)

The better source for tornado and other warnings is NOAA Weather Radio (https://www.weather.gov/nwr/), a network of dedicated FM stations transmitting in the 162 MHz band. Receivers are widely available and can be programmed to turn on only when a warning for a specific area is broadcast.
A perfect example why youtube’s decision to hide count of dislikes wasn’t a good idea.
Mutable databases make it easy to do real-time updates
It appears according to their 2019-2020 report, that they spend about $2.4 million on "Internet hosting" compared to total revenue of nearly $130 million. That's under 2%.

They spend about twice as much on donation processing as they do on Internet hosting.

Some non-profits split their activities, so that they can tell donors that their money goes entirely towards grants and such, while administration comes out of a self-sustaining nest egg that was funded by a particular large donor or coalition.

This makes it clear that keeping the lights on is separate from the mission, and that there is a cap on overhead.
Dopamine ensures you will always be manipulated whether you like it or not regardless of the delivery medium.
When there are Tornado Warnings in the area, are there any policies at big warehouses like this one (not just Amazon's others too) to take shelter? Is there enough time to get to a reinforced area? How long would staff have to stay in the reinforced area?

Low probability, high consequence events are hard to plan for.

Sad for all those who have died or are suffering in the wake of the storms.
> Log4j maintainers have been working sleeplessly on mitigation measures; fixes, docs, CVE, replies to inquiries, etc.

They've been doing a poor job of communicating. Considering the attention this issue is getting, they should have a prominent notice on their project page[0] about it like the one Logback[1] has telling people that they are not affected.

Furthermore, even their post about the issue[2] still fails to clarify many details like

* are people using newer JDK versions safe, like one commenter in this very thread assumed[3] ?

* does it only affect the format string and not parameters as many [falsely] claimed when the news started making the rounds ?

* what should people trying to block exploitation on a firewall level look for ?

> for a feature we all dislike yet needed to keep due to backward compatibility concerns.

They have not recognized the security risk posed by what is effectively an expression language interacting with user-submitted data. Java projects used in server-side templating like OGNL, JSP and JSF implementations, Spring keep having security vulnerabilities with this even after 20+ years. It is an effectively impossible task to get this 100% secure.

The ridicule Log4j is getting serves a purpose beyond fun: it lets people know that the project's maintainers are not up to the task and another logging library should be used instead, as there might be more issue still undiscovered or added in the future.

[0] https://archive.ph/ZhjWO

[1] https://archive.fo/QkzIy

[2] https://archive.fo/NvjKP

[3] https://archive.fo/5cNtw
First step is to plug in headphones to serve as an antenna. Then you're all set.
Or we can learn about the signaling pathways involved, that could lead to interesting things
Wikipedia itself, the website that constitutes 99% of the value the Wikimedia organization provides, costs very little to run, it's like 20% of their budget. The rest is wasteful projects run by a bloated org.
You provide your work with a price tag of $0. So people/companies pay $0. What’s so hard to understand about that? You give away BMW’s for $0 and the same thing will happen. You are signaling that your work is worth nothing. So people then expect you to do more work for nothing. Yes of course! You yourself value your work at $0! And the world then agrees. Don’t be naive and expect otherwise.
I think that what throwaway is saying, perhaps without trying to do so, is that you can't expect people in a FANG to care about the best interest of their employer, not if there are metrics set up that don't reflect the interest in question. You can't pay six figures salaries and expect to find people without razor sharp focus on personal gain.
One of the many reasons I love the ABC (our national broadcaster in Australia) is that everybody knows that they will have the info you need in an emergency - on TV, radio, online, and social media, round the clock.
More.

It's much more likely to be hit by a hurricane in Florida? It's also unpractical to build everything to be able to withstand the off chance there's a tornado. You essentially need bunkers.

Better question here is if there are adequate alarm and evacuation plans.
A classic repost; but a topic that never goes out of style and needs repeating.

I have a family member that is a detective with a state police group… the amount of things people willing give up to police is astounding. Cuts both ways, one I can think of he wished he the suspect hadn’t said something (a victimless crime done for a good reason) and now hints to people in similar situations about a lawyer before they open their mouth.
https://www.steelmasterusa.com/quonset-huts/disaster-resista...

In particular, the hundred-ish year old design called a Quonset Hut is partly designed for this wind-deflecting purpose.
Even the bad ones that are terrible and below replacement level are worth it?

I don’t think so. Some coaches are “worth it”, many are not.
Bank angle and center of mass are related. You countersteer to shift the center of mass towards the inside of the turn, and then steer in the direction of the turn to maintain a balanced equilibrium at (more or less) constant speed in the turn.

On a motorcycle, you can add throttle to bring the bank angle back to vertical. On a bicycle, you can steer deeper into the turn to perturb your center of mass back towards the vertical.

You're a LOT more likely to notice this on a mountain bike than a road bike. If you start throwing a road bike around like you do a mountain bike in a tight section among trees, you're likely to end up using your helmet.
youtube channel schematix did a two-part series of iteratively improving a TEG rocket stove. very entertaining but i dont think i'll be building one.

https://www.youtube.com/watch?v=_dvbN2vKrc4

https://www.youtube.com/watch?v=B8b1OYy-b5I
Arguably you shouldn't make too hard to get exceptions, but what we frequently see is that the developer actually don't appear to know that their code is make outbound connects, and they certain don't mention it as part of the requirements.

We've frequently build setups where machines are completely isolated, because the requirements do not mention that this software will connect to servers on the internet. When we install the software it then fails to work, because it was never testet in a closed environment. I've seen Java applications fail to boot because they cannot can't pull a XSD from the internet... Why isn't that just bundled? Why do you need to get that a boot time? What is that other server is down?

But you're right, valid firewall opening should not be hard get.
You can, and some organizations do, segregate administration from other activities, so that the former has secure funding that's independent of ordinary donors.

Maybe not everybody can do this at all times, but over several years, with significant revenue coming in, it seems like a feasible and worthy goal.
If you were lucky enough to have real core then you may not have had to toggle in bootstrap after powering on ...
Dissolving a pure gold bar in acid
Seems like scope creep for an educational institution to me.
Measuring economics= econometrics. It is a very specialised field of statistics. Which means about 0.01% of the population understands it. The first thing to understand about statistics is that a single point of data is worse than useless. You need to be up to date on hundreds of points of data to be in the game. The second point is that when a single point of data is used in a mass media publication it has been chosen to sell advertising and not because it might be significant.
So onto the claim made in the statement.”Annualised”in this case means that the figure for a period of 90 days has been multiplied by 4 to create a completely artificial number that a person who has studied arithmetic can do in their head. It has no particular meaning or significance, it just makes for a flashy headline. Every person and every product has its own inflation rate and it changes by the hour. Assembling billions of these individual points of data into an official figure is on par with astrology in terms of its predictive power. Weather prediction is way ahead of economics. Even the experts are guessing and a guess by an expert is just that, a guess.Your mileage will definitely vary.
Hah! I’m old enough for 8-bit “home computers” but missed this sort of thing by a few years. That’s lovely to imagine. Thanks for confirming!
Especially egregious in this case... what about the 50+ workers killed a candle factory in the Mayfield EF5?
Brave FTW :)
Using Baserow (FOSS Airtable alternative) to power your landing page
I had to turn these off because they went off 5 times a day for large parts of the year, often at night. We get a lot of weird spot storms in northeast Georgia from the Gulf that seem to confuse warning systems. It was a choice between dying of stress and poor sleep for sure or maybe dying from a tornado.
Yep. I always chuckle when people are surprised by this stuff.

Florida State was about to become an all girl school in the 1970s before Bobby Bowden saved their football program.

Clemson’s applications skyrocketed in 1977 when they beat Georgia early in the year and run consistently higher any years in which the team is having success.

Donations increase. Alumni come to games, get together, see their friends, show their kids around campus, tell stories.

No matter what your major, the activities that we can all enjoy together bring us together.
Shooting and robbing communists is justice, not a crime.
It's a less common usage than "good", but "(economic) bad" is a valid noun for "anything with a negative value": https://en.wikipedia.org/wiki/Bad_(economics).

To address the core of your point - IMO, the best world is one in which neither casinos, nor anything else, are advertised. The harm done by manipulative advertising _vastly_ outweighs any benefits of finding out about something good that you would otherwise not have heard about. If someone has to pay to make me aware of something, and I wouldn't hear about it organically via recommendation or research, it's probably actually not that great. And even if it is - even if my absolutist stance means that I miss out on some truly great things that I would otherwise have found via advertising - I'd rather that outcome than being manipulated by corporations.
At least until Murdoch and Fairfax get their wish and the ABC is dismantled

Then we'll be able to hear about it in between commercials for gambling and MasterChef
Latencies, schedulers, interrupts oh my The epic story of a Linux Kernel upgrade
They do this a lot. Modems used to be split between Infineon (then bought by Intel, then bought by Apple) and Qualcomm, with the Qualcomm ones rumored to have better throughput and signal strength.
A warehouse is a very bad place to be... what kills you is flying objects, not the wind itself.
https://news.ycombinator.com/item?id=29517459
Maybe not the best time to promote a library using Java serialization.
Java Serialization is probably the number 1 source of serious Java vulnerabilities since applets, and it isn’t even particularly fast compared to other serialization libraries that target JSON or something else
Because tornado warnings and watches happen many times a year in tornado alley. Amazon is far from exceptional in having its warehouse open during these weather conditions.
That's why I donate only to my local Wikimedia chapter. They are a separate organisation which does not swim in money and they spend it sensibly.
These workers were killed in a warehouse, not their homes.
Thanks so much :) No promises on timing, but sure, I'll do my best to write something up.

And thanks for commenting as well; I'm honestly really relieved that this apparently didn't come off as too critical, I was somewhat worried about that. It's a weird situation where your post is one of the better ones about Log4j2 that I have seen today, and there's stuff there that I really appreciated you writing and articulating, particularly around your hesitation to make things that companies would start relying on. But it was also the only one that got up to the top of HN that I saw when I logged in, and... I kind of went back and forth whether it was right to complain about a broader trend underneath it, given that the actual substance of your article really isn't falling into the trap I was complaining about.

Anyway, just reiterating that you wrote a good article and a good take, and it's not even that the title is egregious or worth a rant in isolation, it's fine. It was just the Nth title over X months that I've seen about Open Source funding that happened to be phrased as the Open Source problem, directly after I finished reading a different article that was suggesting that Open Source devs all need to learn how to set up their own LLCs and invoicing departments.
This is one of the main advantages of using a lower level library like Vulkan or DX12. Higher level APIs like OpenGL and DX11 do a lot of work for you, but that work can result in extra allocations that you can't control, starting driver threads, extra resource transitions, etc
0. Insight porn from previously-successful VC or VC wannabe
Make a pc version for us tired gamers who turned their gaming systems in for work computers :)

That said, this looks really cool. Great job!
Already happening regularly:

https://skinperfectionsrgv.com/vampire-therapy-the-extraordi...
The Appeal of Artists Who Won Fame After Death
Well, yeah, required might have been too strong. It is strongly frowned upon for a station with a news/weather program to not participate in a "The NWS has requested...". Not sure they'd not get their license renewed, but their audience sure wouldn't watch them for much longer. What kind of news station would NOT broadcast this info?

Besides, if you're a news/weather station in Tornado Alley, you pride yourself on the equipment and people operating it. They do entire promos dedicated to storm spotting etc. I've worked with one local station shooting a package specifically for this.
IF you cant bill for feature creep on a contract get a new lawyer who can write out better contracts or walk away, some things are not worth the hassle.

You can get a contract for bespoke programming which includes such things as feature creep billing for just a few hundred, its not expensive but if its not written down, you dont have much of a leg to stand on if things ever had to go before a judge or some sort of arbitration unit.

If working in a team, there need to be documented standards for everything from the UX to the DB and everything in between. Its just common sense.
> zero chances surviving a tornado

Most buildings are in this category, and it make sense. This is not where the fault lies.

Building something to specifically withstand 200mph wind is NOT reasonable. Hurricanes force wind by comparison starts at 74mph and decays quickly inland.
If you offer your work with a price tag of $0 then people/companies will pay $0 for it. The nativity of open source developers thinking otherwise is jaw dropping. So yes I agree that commercial licensing is the way to go.
Sweden (17 %) and Germany have higher percentages of immigrants than the US ( 14 %). Norway is also at 14 % and Denmark is at 10 %. What's tearing the US apart isn't "weak borders" but 1/3 of the population sharply turning agains democracy.

https://ourworldindata.org/grapher/international-migrant-sto...
I deeply concur with this statement. I think folks here are conflating a one off test versus keeping your redundancy up to date as apps evolve.
> So you are saying "normal" people don't hire accountants to ensure they pay the minimal amount of tax while wealthy people do?

Did I say that? Or did I specifically refer to slimeballs, loopholes, Paradise and Panama papers, bribing legislators etc. Do normal people do that, in your view? Because it seems pretty normal among billionaires. I don't remember any normal people paying thugs to bust up strikes, or paying to print anti union propaganda and rig unionising votes.

You seem to be saying, might makes right; and that we'd do those things above if we were in their position. Even if that were true (it's not), that would be all the more reason to change the rules that allow such consolidation of wealth and abuse of power to exist.

Going back to your original claim - that it's not obvious (to you) that billionaires care less about the common good than common people - here is a poem that has survived the last 250+ years.

The law locks up the man or woman

Who steals the goose from off the common

But leaves the greater villain loose

Who steals the common from off the goose

.

The law demands that we atone

When we take things we do not own

But leaves the lords and ladies fine

Who take things that are yours and mine

.

The poor and wretched don't escape

If they conspire the law to break

This must be so but they endure

Those who conspire to make the law

.

The law locks up the man or woman

Who steals the goose from off the common

And geese will still a common lack

Till they go and steal it back
Except 呢 means "this", not "you", so you fooled yourself into believing you could understand something which you did not.
Amazon is far from exceptional in having its warehouse open during these weather conditions.

And you know that how precisely?
More just an incredibly lucrative side business in a way that the main business can never be.

Raising $10 million for a stadium is far easier than raising a $10 million endowment for a science lab.

But when alumni come back for the football, you can hit them up for money for the science lab.
Tornado warnings are sudden, the last thing you want to do is put everyone in their car and on the road during a tornado warning. A tornado watch is not reason enough to shut down. A tornado watch means “keep an eye on the weather”. There’s a lot of room between watch and warning (there’s also “tornado emergency” in extreme scenarios) and deciding when things are bad enough to close but not bad enough to shelter in place is more of an art than science. I’m sure whoever was in charge of keeping the warehouse open or closing it down isn’t exactly sleeping well.

I can’t answer your question exactly but I have been in a warehouse when a tornado warning was issued and the warehouse in the path of the storm. They got everyone together and put us all against the strongest wall furthest from the approaching tornado. (It lifted before reaching us)
The waste heat flows out the cold side of the junction, through the heat sink, and is lost into the ambient air.

You can't feed that heat back into the hot side because it's been diluted into the air, and thus it's a lower temperature.

You can't concentrate the waste heat by enclosing the heat sink in a small volume because that would eliminate the temperature differential across the junction.

You won't gain much by making a stack of junctions with each one passing its waste heat to the next one. They effectively insulate each other, reducing the temperature differential across each one. There's an optimization opportunity here, but commercial junctions are usually already sold as a stack. Adding more layers gives rapidly diminishing returns at best.

Thermodynamics is cruel.
And what is a 馬卡龍 then? A horse card dragon?