skysight-inc/HackerNews huggingface dataset:
I'd say the opposite. The quicker the feedback loop, the faster you can learn. Just because some beginners choose to get the feedback faster doesn't mean they are doing something wrong.
Why don't they reuse CodeQL to provide a true code search using maybe a subset of CodeQL capabilities?
How does MAD and France/UK nuclear arsenal fits into this ? It is my impression Russia (and maybe the EU but since I live in the EU I suppose we are the goodies) is waging an attrition small skirmishes war (don't really know what the end game is though).
I've deployed Rails at a few different companies. I wouldn't quantify it has hard by any means, there's just a lot of configurations to read through and verify every time. Realistically, the defaults are complete sane and could be deployed as is without much change.
Ukraine has weapon-grade nuclear reactors, which produces weapon grade plutonium at scale.
Universal Coronavirus Vaccines – An Urgent Need
Hardware U2F to unlock would make this my dream.
Like I said, you're assuming the US gives a shit. The Cold War ended a while ago, the last Cold War generation is aging into retirement. Europe/Russia is now a secondary concern in the US next to China. NATO blowing up would destroy American diplomatic credibility, but we've already kinda done that in multiple ways over the last few years, and our military is still more than potent enough to look after our interests.

Granted Russia is still seen as an adversary, but if Russia manages to quickly steamroll the Balkans/Poland/Ukraine and then challenges NATO to do something about it, I'm not sure there's the stomach for a bloody, protracted invasion of the continent to reclaim the lost members.

There's also a large swath of the US that sees NATO as a waste of US time/money, with members that largely don't pull their weight and are just mooching off the US, hell that was part of Trump's platform. And Secretary Gates under Obama complained, more diplomatically, about the same thing.

There's a substantial chance that a Russian invasion of any part of Europe would be seen as a "European problem" by a large chunk of Americans. None of this is to say I support that position, but that's where we're at IMO. America is largely turning inward for the first time since WWII, the question is whether Europe will figure that out before Putin does.
> and you get into the sort of "Communism would work if people cooperated!" silliness territory.

What are you on about?

Lets run a quick thought test:

Are you for or against people selling:
- bio-weapons to kids on the street?

- heroin?

What about sending money to North Korea?

What about... you get the point

Free-Market means no restriction on market, the magical self-regulation will restrict undesired transactions somehow.

What modern economies have are:

Open, fair markets, overseen by governments to ensure its fair and open. They are not somehow communist because they regulate and ensure baby milk is free of heavy metals and paint has no lead in it.
In a language with proper bounds checking, regardless of which one, the result of this attempt would have been a core dump.

Sure there are other ways to then take advantage from killing a critical process, but it would be one attack vector less.
I disagree with you: IMHO "escaping user input in the application constructing the query" is one possible form of sanitization. Why do you think it is not?

Also I said "similar class", not "strictly equivalent". Both instances are a case of "user input handled as code, not as data". Now with SQLi the problem is widely known (but sadly still happens) and we have techniques like parameter binding to outright avoid the problem. The same techniques are among the <edit>theoretical</edit> possibilities to avoid the problem with log4j.

Though I agree, the problem are the insecure defaults (JNDI enabled) and that seemingly every java dev used log4j but wasn't aware of the "${}"-expressions. I just pointed out that this "trend of neglect" [sry, non-native speaker here<edit>, but I hope you get what I mean?</edit>] seems to continue: Everyone and their CISO is now aware that attackers can abuse JNDI and the whole mitigation recommendations (<edit>e.g.</edit> remove JDNI classes) so far was primarily focused on that. Still, even if JNDI wasn't a thing, the "${}"-expressions can still be abused (it's just more specialized now and not a huge pwn fest), requiring mitigations beyond disabling JNDI. Just look at the reporting for more examples of ignorance: When this started to explode, there were some who thought blocking the string "${jdni" in their WAF would be enough (and maybe it helped against script kiddies), but a smart attacker just used/uses a string like "${${env:randomstring:-j}dni[...]" defeating the simple filters...
What Is the Fed Taper?
This is a solved problem. Employees of RIAs have the same trading restrictions. The SEC's adopting release[1] of the RIA Code of Ethics requirements gives a pretty good overview of how it works in the "Personal Securities Trading" section. Each RIA firm has their own policy implementing the rule but here's an example of how family is typically defined from a random firm's policy I found via DDG:

> “Immediate Family” generally means any relative by blood or marriage living in the individual’s household, any domestic partner or other minor child residing in his or her household and, whether or not living in the individual’s household, any other relative with respect to whose investments the individual has influence or control.

[1]https://www.sec.gov/rules/final/ia-2256.htm#P72_13634
Sleepers are usually priced to compete not with the flight, but flight + one night at a hotel.
A business critical application that was continuously pulling data from Novell file shares, DCOM remote controlling Excel and really long .BAT files to manipulate it, and FTPing it to other places with some abandonware FTP app. All on 3 shitty old PCs with "don't touch me" post-it notes on the front and hard monitor burn-in. In a break room next to a copier.
We should give her a break. She is busy solving problems in her district.
Parker Solar Probe Touches the Sun for the First Time, Bringing New Discoveries
=(
I joined last week but still no preview

> Join the GitHub Code Search Waitlist
Access is limited during the technology preview of GitHub’s future code search. Sign up today for your chance to try it and give your feedback.

You’re already on the waitlist for GitHub Code Search! We’ll email you when we’ve enabled it on your account. Make sure your primary email address is up-to-date.
No one had to invent the monolith or define how far it should go; it was the default.

Microservices came about because companies kept falling into the same trap - that because the code base was shared, and because organizational pressures mean features > tech debt, always, there was always pressure to write spaghetti code rather than to refactor and properly encapsulate. That doesn't mean it couldn't be done, it just meant it was always a matter of time before the business needs meant spaghetti.

Microservices, on the other hand, promises enforced separation, which sounds like a good idea once you've been bitten by the pressures of the former. You -can't- fall into spaghetti. What it fails to account for, of course, is the increased operational overhead of deploying all those services and keeping them playing nicely with each other. That's not to say there aren't some actual benefits to them, too (language agnostic, faults can sometimes be isolated), but the purported benefits tend to be exaggerated, especially compared to "a monolith if we just had proper business controls to prevent engineers from feeling like they had to write kluges to deliver features in time".
University and from thinking about large problems I'm interested in.. Also game design.

I basically picked a "side project" that I wouldn't mind doing forever.. So a hobby.. And then I just collect ideas that could be useful and I slowly get bored and go deeper until most of what I read and watch is more "advanced" than it was before... Maybe one day I'll be considered an expert problem solver, if so, it'll be because I took the time to try and solve one problem thoroughly and so many subproblems are cross-disciplinary. When you have some concept of "wasting time" then you'll have too much anxiety to follow this process in a way where you can develop a natural and relaxed approach to problem solving. If I'm wrong and that you need the anxiety to break through some ceiling then I'll spend my life as a happy layman.
The virus is so widespread that there’s no stopping it. Vaccinating improves individual outcomes and reduces the health system burden. It doesn’t eliminate the virus, and mitigations just kick the can down the road. Omicron at least will burden hospitals less, and once Paxlovid scales up the impact to the health system will be cut another order of magnitude.
This is a particularly weird space because people have generally not been concerned about security in segments unlikely to be profitable to attack: Modder communities have generally been full of hacked or modified apps and operating systems, published by random unknown people all over the world, and generally haven't been that scary, because there's no financial incentive to attack. Attackers are generally looking for a large number of victims or particularly valuable targeted data.

Attacking the PinePhone is... ridiculous... there's almost no reason to do so, with few users, almost none of which who would pay a ransom or who has sensitive state actor data available. And the fact that it's such a useless attack vector is also why nobody had their guard up on executing code there.
Just her? Not every other lawmaker?
You should probably google "Decentraland".
I remember having a babysitter when I was little who was doing her high school algebra homework. I was curious, so she tried to explain the concept of x/y variables to me and it made no sense to me at the time, kind of broke my brain briefly. Then, as an adult, I had a Math-PhD friend attempt to explain some advanced number theory concept to me and I had the exact same feeling of just completely not getting it and feeling like my brain was broken. Math has been the only subject that could consistently produce that feeling, I've always had sort of a sense of wonder and awe about it.
Why invade Crimea? Ukraine has two choices now, join nato or develop nukes and ICBMs.
I use pass with Emacs, using this package [1], and it's very nicely integrated and useful.

[1] https://melpa.org/#/pass
I have relatives in Slovakia. Never heard anything about NATO from them. Can you point out where are you finding that?
That is a very good argument for controlled large feedback times in a learning environment, also, just some of the time, when thinking about your code is the focus of the exercise.

I'm one if the people that thinks that coding in paper is a great learning task. I tend to not ask people to do that in practice because it's a very effective way to lose control of a classroom, but I do use the second best task that is asking people to explain their code.

Anyway, if thinking about the code is not your focus, the increased feedback cycle is all cost and no gain.
Of course they are. I guess that's one of the few cases on which all law makers can agree. Doesn't mean they should be exempt.
iirc, somewhere around Shoreditch/London there was a wall with their logo - i was pretty psyched seeing the owl i haven't seen in quite a while :(

Edit: just stitched 10 photos i've taken of that wall (09/2018), resized to ~iMac 5k x3 resolution and cut in 3 parts (i've got 3 virtual desktops) and set each as a desktop background.

Link: https://imgur.com/a/V6LjRDN

Sorry for the lame stitching tho :(
Microsoft Equation Editor 3.0. The piece of add-in for MS Word that has been there since 1995, and finally removed in 2018 due to a security problem. Yet, they are still everywhere for work related to high school maths.

And there aren’t better replacements. I could type in the old equation editor blindfolded. Every keystroke has predictable behaviour. Ctrl-F for fractions, Ctrl-R for square roots. No other equation editors offered that. The new equation editor is not the same, I need to press so many unnecessary arrow keys just to get what I could have done before in half of the time.
> As far as I know it gets quite hot in (all of) India

Nope this is a myth. India has all sorts of weather (from snowy winters to hot/humid/arid climate and everything in between). The institute this article points to is in Bangalore. Where temperatures are between 15 degree Celsius and 30 degree celsius throughout the year (only during peak summer does it touch 38 to max 40 degree celsius). You don't even need fans for most of the year. Not to mention Bangalore rains.
Say it with me everyone, "the industrial revolution and its consequences...."
The unfortunate part of this is those that retired usually (at least where I am) arent replaced with like-kind. Generally, Ive seen those positions downgraded to hire someone cheaper while still doing the same load ... or just eliminated altogether because redundant or vendor (despite this usually being a false assessment). So the job that is now open and advertised isnt as enticing as the position vacated.
I see now, sorry for misunderstanding.
Thank you..

Just setup isync yesterday. So close to having freedom to move from Google whenever I want
I assume iOS may have a problem of the application doing:

for each path {
decode(path)
}

and the OS can't parallelize that, because it learns about a new file only after decoding the previous one.
Wars usually seem rational to the people starting them. Conceivably attainable goals for short- or medium- term political purposes. But war has a way of escalating, dragging the participants along to a fate none of them really control.

As a hypothetical -- Russia does invade Ukraine and the Western forces offer substantial but indirect military support. Russia strikes at a supporting NATO military installation just metres over the border in a NATO country, on the assumption that NATO will not respond to that as an Article 5 attack on their territory. But they assume wrong.

Consider how the Japanese assumed the Americans would be amenable to sue for peace after Pearl Harbor at some point. They had a mental model where it was risky, yes, but rational. But they deeply misunderstood their enemy. History is full of this pattern.
> The question is less about NATO deployments and more the will of NATO leadership to go to war with Russia over its more minor members

This is the point of putting NATO troops in the country: if Chad from Nebraska and Juan from Madrid get shot by Boris it’ll significantly alter public/political opinion much more than if Igor gets shot by Boris.

They put these troops in the Baltics so that the Russians would end up shooting kids from a wide range of influential NATO partners.
Samsung Electronics and IBM jointly develop new chip design
Intel Lists Ponte Vecchio XT: A Higher-End Variant?
Very droll, but notice that I can write the phrase "Don't make snarky comments" without us having previously agreed on a formal definition of "snark".
Keys? can you please elaborate.
This is a bad take. You are asking for the forum and sub forum/tag approach. A community that small will simply not be engaged with frequently enough to avoid seeming “abandoned”. This is exactly the set of circumstances that led to content aggregation sites like Reddit.
That was step one, it would then core dump on step two when trying to go over bounds.

Naturally this could eventually be used in another way.

There are no invicible fortesses, but some have enough defenses in place to keep almost everyone away or die trying, except the very resourceful ones.
That is amazing.

I love quirky old tech-debt that people still work around. It means there's either a sysadmin that is super into it and knows everything from inside-out, or they're a sysadmin that's pulled all their hair out but damned if they don't keep it running!
This was some joke played irl, the comment is complete nonsense. Sorry for trolling you, I hope you work out your things.
Well, actually I've even found 600-level games on Chess.com to be harder than 900-level games.

Obviously I've improved. But I wonder if the many of the very low ratings on Chess.com are just due to people making terrible blunders in otherwise pretty solid games.
Are you saying that cloud used to be better? (Real question, I don't know if cloud is getting worse)
I've experimented a bit with lowering the hls_fragment value and the playlist length, and found that fragments smaller than 2 seconds caused too much buffering on the end client for it to be stable - which resulted in higher latency than before.

I'm looking into the latency issues and I've started drafting up possible solutions. Low latency MPEG-DASH might be something to experiment with. It won't reach sub-second latency, but it will definitely be better than HLS.
For most of course it's not important, but Lichess has "blind mode" - this enables blind people to play chess online. Implementing this feature of course wouldn't pay off for Chess.com.
+1 for Concrete Mathematics. Learning more about discrete math had an immediate impact on my job as a data scientist.
That workflow is exactly what I do, but it's on a small codebase rather than on a big one.

The benefits of working on a small repo include:

* Faster compilation (only depend on exactly the libraries you need)

* Faster testing (only need to run the tests which are actually relevant)

* Easier to understand for new joiners because there's just less code to sift through

* Faster startup (this is probably java specific - the classloader is slooow)

* No (okay, fewer) rebase wars

* Easy to see what's currently being worked on because the Pull Requests tab isn't 200 long

* Very fast rollbacks without needing to recompile a git revert (just hotswap the container for that particular service). You can't do this in a monolith without risking rolling back someone else's important changes.
> I hate to say it but the Afghanistan withdrawal really showed what happens when Americans stop giving a shit, and they probably don't give that much of a shit about Latvia.

The US is facing severe internal crises. It's weakening the country's ability to conduct a consistent foreign policy.

(I'm deliberately not saying what the crises are, because there is pitched disagreement about that. The point is that no matter what, infighting is hampering foreign policy.)
I fondly remember using a self organizing map and using it to disastrous effect during a brief stint at automated day trading. I always think of it as having paid a couple grand to learn about SOM and how to layer neural networks.

https://en.m.wikipedia.org/wiki/Self-organizing_map

He was a clear and innovative thinker. R.I.P.
Europe in general seems to have largely lost edge in gaming at the end of the '90s, probably as a result of the death of 8-16bit. Then there was a bit of a renaissance once we adjusted, with the rise of Rockstar North, Ubisoft, and CDProjektRed.

Maybe if the various English companies had converged, instead of selling to foreign interests, they could have survived.
It’s been a long time, but I used to use convox for this back in the day, may still be worth checking out: https://docs.convox.com/example-apps/rails/
Week/bit was common when I was working at an FPGA company. Yes FPGA software tools suck.
For sure, the Ruby standard library is so much better than JS and Rails adds even more great helper methods on top of that.
ActiveRecord (Rails ORM) provides an interface for raw SQL queries if that's really what you want to do (`connection.execute`). You can use it whenever you want. You can also swap out ActiveRecord for something else like DataMapper (or whatever) if you really want.

But, the whole point of using a framework like Rails is to let the framework make certain decisions for you, so you can develop quickly according to convention, and not think of lower-level technical decisions. Bypassing the ORM certainly works against that.
I can't speak highly enough of Clickhouse. Since 20.x, which was already one of (the?) fastest column store databases around, it's gotten even better:

- Built-in replication without the need to run Zookeeper, with multi-tier sharding support. They rewrite the ZK protocol using multi-paxos within CH itself. It's great.

- Built-in batch inserts via the HTTP protocol... sorry, TCP :(. Previously you'd have to batch using buffer tables, proxies, or in-memory buffering within your client apps. This is no longer needed!

- Better support for external data formats (avro, parquet)

It's just... so good.
The point is that neither perfect communism nor perfect free market setups are possible. Everything is always going to fall somewhere in the middle of things; you'll find some countries with less regulation in some areas, more in others.

As such, statements like "The concept of a free-market scares the politicians in America" as if it were achievable in the strict context the poster requires ("There is no /freedom/ in our markets") are a bit silly. Why would they be scared of something that literally can't exist?

Proponents of communism similarly like to use the "well that wasn't real communism" to evade critiques of the real-world implementations of it.
Nature does not use propellers. So why do people?
Indeed - Privacy Badger, uBlock Origin (with some additional lists), Multi-Account Containers, and some settings adjustments are in place for me :)

On top of network-level filtering!
This sounds very interesting! Did you ever write something up about the issues encountered?
Not simply "exempt", unless you're referring specifically to the trade window part. There is in fact a law making it illegal to trade on insider information. https://en.wikipedia.org/wiki/STOCK_Act Arguably it did not go far enough.

I just don't think Congress has much in the way of insider information most of the time. Antitrust litigation would be one example where they do, but what else? Company insiders by contrast almost by definition have insider information.
I disagree. It is about fairness to some degree. Insider trading undermines the integrity of market. Which is why Pelosi's statement here is so absurd.
> Because there is no newly invented architecture called "modular monolith" - monolith was always supposed to be MODULAR from the start.

Isn't "non-modular monolith" just spaghetti code? The way I understand it, "modular monolith" is just "an executable using libraries". Or is it supposed to mean something different?
Oh yes, and I was glad to see recent Java GC improvements get some press. Java's big win over Ruby and Python is that Java is fully specified such that anyone could write a new implementation and mechanically check if it is compatible. (AFAIK both Ruby and Python say "my implementation is the specification".)

(JavaScript is a bit of an oddity since it has a formal language spec, but NOT a formal virtual machine spec.)
And the source of the analysis of the "myth" is Chatham House, an "independent" organization led by two ex British prime ministers and one ex MI5 member.

Just look at the list of the Chatham House Prize winners [1] and try to find one person there that is not anti russian.

I guess one could find State Department press releases less biased than this organization.

[1] https://en.wikipedia.org/wiki/Chatham_House#Chatham_House_Pr...
Yes, but they run just fine. Russia can field massive amounts of heavy materials, far more than any other Western European country, and they have plenty of mobile launchers and other annoying hardware that can throw a spanner in the works for a fairly large surface area, and the number of airplanes they can field is quite impressive. It may not be the latest and the greatest, but it's not as if F35s are thick on the ground (or in the skies) in Europe either (less than 100 in total, most for training purposes).

I really would not see this put to the test, not only because of the potential outcome but because such an exchange has the potential to spiral out of control really fast.