skysight-inc/HackerNews huggingface dataset:
> I think perhaps people show be more careful what they say online in open locations. These are not private conversations. Other people see them. When you say something in an open forum it's the equivalent of carving it into a tree in a public area in the real world.

I can agree to disagree on things, but I will leave out by saying that the Internet is a global medium that spans multiple continents, cultures, and languages. If the expectation is that everything posted online needs to be thought of through the lens of a global press release, the end result of that is you are going to have a lot less interesting content online and lot less culture.

There is a difference between a truly private post (meaning that no one is supposed to see it) and a targeted post intending to primarily communicate with a specific audience. When I write posts on HN going into programming details, I don't preface them for people who are unfamiliar with the concept of programming. I don't write in the same style on HN as I do in other contexts, and I don't engage in the same topics. All of that stuff is public, people can correlate it if they want to, in which case I'm going to kind of shrug and kind of look at them weird.

This may just be a personal opinion, people are welcome to disagree with me on this, they can disagree with me on anything. But I think transparent communities with their own circles, memes, cultures, and concerns are a good thing, and making those communities more insular, or demanding that they constantly explain themselves to people who don't understand the references, have a background of their concerns and internal debates, or recognize the people involved -- I think that's an unnecessary burden to place on people.
We obviously won't be wearing masks until the end of time, but only until the virus is under control. Just in the USA, 1,000 people are dying from COVID per day, and omicron is coming.

The pandemic doesn't only exist in how it affects you personally. There are many responsible vaccinated people who are going to die because of people who aren't wearing masks.

Masks and vaccines like this have not existed until relatively recently. We now have tools so that not as many people have to suffer and die from pandemics.
There's so much here to argue. I disagree with the fundamental idea that there are good reasons to not talk with the intent to let misconceptions and delusions thrive in a society. Society and the progress of humankind hugely benefits from increased knowledge and understanding of facts acquired through scientific method.

I think Richard Dawkins makes a convincing argument on this with his book "The God delusion" in regards to the article's "dilemma number 3".
Sapphire on the higher end ones, "Ion-X" (gorilla glass) on the cheaper ones.

Sapphire is more expensive than chemically strengthened glass.
How to build machines from liquid metal
God forbid a father create IP that can feed his family long after he's dead. You need your head checked. I mean even giving your argument some credence, the man died before he hit retirement age.
How do you feel about research papers showing that trading randomly is as good on the long term ?

https://www.researchgate.net/publication/235937406_Are_Rando...
I started to use it a few years ago when it was the only distro runs flawlessly on my laptop. All other distros had various problems at the time. I think that's its killer feature, hassle free.

It's the only distro I would recommend to non tech people if they want to try out linux.
Good examples. These feel like "noble lies". https://en.wikipedia.org/wiki/Noble_lie It's a delicate act to pull off, obviously, since you absolutely have to be right, and must assume that the other party is okay with it , assuming you're right. If you're wrong, the whole thing falls apart once the other party finds out.
I have to agree with the OP. If Linux OS going to be for mainstream users, it will eventually succumb to the same issues that plague proprietary OSes. Like low configurability (gnome is already doing this). Mainstream users want very different things from a computer than we do. And in many cases they don't even want a computer anymore, they'll just use their phone or iPad for everything.

I also don't think the mainstream really care about privacy and control. Most of them are really happy in their walled gardens. As a power user I don't want to 'dumb down' my experience and work towards that, so if they really want it they'll have to buy it from a vendor that does it for them. Most of the big names are trying to get there already (like canonical)

And yes eventually a company will make another walled garden based on Linux but it will suck because of the vendor lock-in, limited access to its internals ("because otherwise we can't support it"), and commercial to subscription services. Basically this is exactly what ChromeOS is already.

Personally I just think that a Linux that's for everyone is simply not Linux as we know and love it anymore.
One of the random thoughts I had was that I’m sure there’s going to be plenty of clever ways to obfuscate the jndi payload, sort of how you can ping an IP address in octal, an integer, or hex:

https://ma.ttias.be/silly-little-ip-tricks/
> all

That's the problem, not everyone can be vaccinated.
It wouldn't be HN if someone doesn't do hot takes.
That guy was a real jerk!
Oh man I feel like I have PTSD from procrastinating on projects for so many years. Heart rate is up, and I feel like drinking in excess.
I mean the other side of that punchline though is that Ivermectin is completely ineffective in clinical trials at reducing severity or mortality from COVID-19.

The worm hypothesis is practically a curiosity to solve later.
I was misremembering the specifics too, it turns out. It was much closer to do_brick(). Ugly.
When people start recognizing that Mayor Breed is a part of the problem, and not part of the solution, we may get a chance for solving SF issues.
Humanity already corrects itself in terms of better adaptation for denser and wider social life. Modern urban society requires less emotional response than people were able to give centuries ago. You have to accommodate wider circle of people that you interact with, including the incredible amount of strangers that you meet through whole life. With population growth and more urbanization this process will only continue.
I’m shutting down my tech company based in SF due to the bad faith accounting practices of their local tax office. (I’ll just open a new one elsewhere) I won’t call it corruption because I don’t know that anyone is personally profiting, but I’m sick of dealing with it.

I’m out, I’d never recommend anyone do business in SF. Time and again I’ve seen the same bad behavior when I interact with any department (I once spent a week in the planning office— every day with revised plans, ultimately rejected not because of anything being incorrect but because, and I quote “I don’t like the drawings”). SF city government is run by a bunch of entitled pretentious pricks on arbitrary power trips and no regard for the people they ostensibly represent and serve.

I’m not surprised in the least that they can’t figure out how to provide basic safety for their citizens and businesses, or that they’ve lost entire regions to lawlessness.
> your subjective experience

Can't be more precise.

That thing you experience when you think to see it in the wild when looking at a 'red' thing.
Which is probably the same when you imagine that 'red' thing.
A lot of people do also dream in exactly the same way about a 'red' thing.

What is 'redness' in your consciousness?
And what is it outside of it?
> Tensorflow ... V2 had huge breaking changes

Meanwhile PyTorch doesn't follow SemVer and always has breaking changes for every minor version increment. There's always "Backwards Incompatible Changes" section for every minor version release: https://github.com/pytorch/pytorch/releases
Cool project, solid contender for Alacritty.
Doesn't this require conversion between currencies, inherently adding a ton of risk?
DJI added to US investment blacklist
Thing is, with Proton and X I have a rock steady and capable env to do all of my gaming, and I have been doing so for years now. I've no need or desire to bring windows back into the mix.

Wayland messes that up, on top of frequent crashiness. Wayland does not solve any problem I have, but it does break most of the things that were working well.
I don't think that was the gist of any argument he made though.

I distinctly remember that book saying that "THE BEST OF US DID NOT SURVIVE." Because to survive meant to make compromises.
FDA’s forced hand drops Pfizer’s Bombshell Safety Document
Sometimes I wish everyone in Linux just came together and worked together in one big kumbaya. Arch it’s rolling release base, with Nix for configuring it, Elementary its UI and UX and pop_OS’s willingness to put users ahead of principle. Top it off with Red Hat backing and Ubuntu popularity and oh baby.

I know I know, strength in diversity. But a man can dream..
This reminds me of the 'stop the steal' campaign to overturn the US election and the UK's remain campaign to overturn the result of the Brexit referendum.

Why can't people accept the result and move on?
The problem with becoming benign is the competition between needing to be breathed out onto people before the immune system destroys it, and respiratory diseases have never not been nasty.
The ring out on the iMessage ding is really long. Are these official sounds? Is it just that the speakers connected to my system are much better to hear how long the sound plays compared to an iDevice crapeakers?
Sure, and this is where the immune erosion comes into play: as vaccination rates go up, so does selection pressure for immune erosion.

Re: delta, think of this counterfactual — what would happen if a new variant appeared that is more lethal, more virulent, and that caused hospitalizations more quickly? You can bet the lockdowns would ratchet up.

With Omicron, we didn’t even notice it until there was a random genome scan. Viral evolution rarely selects for host death — it’s just not useful as a goal. There’s also probably relatively weak selection pressure for symptoms, though probably casing sneezes in hosts helps with spread, it also acts as a signal that can cause the host to isolate and halt spread. (See: SARS v1.)

From a selection pressure perspective, the ideal virus (among humans!) probably goes completely unnoticed for as long as possible. Humans won’t fight something they don’t even notice, and we probably have tons of these viruses everywhere and don’t even know about them.
This is only a temporary thing though. Linux will be made to work on M1 hardware (getting pretty close already) and Intel is already heading in the same direction.
Do you believe that covid continues because of excuses or weak wills or something psychological? Or that all "diseases" are equivalent? Perhaps I should read more into your confounding of cowpox with smallpox.

Leprosy is bacterial and treated with antibiotics. Same with bubonic plague, if that was next on your list.
Chickpeas, a neglected crop, may soon get a high-tech makeover
So the first part is you being upset at things I definitely don't endorse but have nothing to do with masks.

The part about forcing non essential people to be paid to not work is confusing and I don't think I understand your point but sure I'd take that deal??
There's clearly _some_ push-and-shove that happens some of the time, officials get fired for ethics violations, laws get changed, politicians lose re-election. I don't think it's worthwhile to be reductive, there's got to be a quantitative way to compare how different compliance schemes tend to fare.
> We've basically maxed out what Hubble can do.

My understanding is that all major observatories, and certainly Hubble, are overbooked by a factor of 3 or more for months, and sometimes years, in advance.

Which implies that having 3 Hubbles would allow us to do more research than we can do today. It's not ready for the museum while astronomers still battle over who gets to use it.

An instrument doesn't have to be cutting edge in order to be useful and produce valuable results. Even today, amateur astronomers are still making discoveries (asteroids, sometimes comets) with telescopes that major observatories would have laughed at 100 years ago already.

"The telescope that ate astronomy" (Webb) will undoubtedly make important discoveries. Whether it will be worth its cost considering what we could have built for the same price (such as 10 ELTs!) remains to be seen.
Friedrich Hayek idea is totally different to the idea that a lack of understanding is good.

Friedrich Hayek is just a standard idea for mature programmers.

Something that's 10 years old won't just be remade in a weekend or easily changed.

People think their idea will just change HN for the better. For most people it's smarter to trust the decade+ of work put into it.

Things like Wikipedia being hard to edit is a good thing. Many morons, don't know this which is why they keep trying to make editing easier. But it's ok to tell them why edits should be hard.
The one thing we can all be sure of though is that our elections are the most secure.
How much aeronautics/airworthiness/safety R/D is actually conducted by the FAA? My understanding is that they used to do a lot more cutting edge research, the kind that would attract engineering talent.

Looking at the 2022 FAA budget[1], they asked for $159M for "Engineering, Development, Test and Evaluation" out of a total budget ask of $18B+. That's less than 1% of the total budget.

1. https://www.transportation.gov/sites/dot.gov/files/2021-05/F...
I use Firefox containers every day and they're amazing :)

Moving the feature into a plug-in was a really dumb move though. It totally killed discoverability of this unique selling point of Firefox.

I wish they'd realise they'll never beat Chrome at their own game and try to focus again on what makes them special.
If you can get comfortable with Siri (which does send audio to the cloud, though with iOS 15 there's more on-device capability), you should experiment with controlling Google Assistant and Amazon Alexa via Siri.

I set up my phone so I can say "hey Siri ok google" and then it asks me what I want to tell google. I then say any command supported by the Google Assistant, and it passes the command through.

Technically I think it's supposed to work all in one utterance, but I have found that it never works that way. I always have to split it up. Even still, this is a pretty handy way to be able to ask for information (Siri's knowledge seems quite limited compared to Alexa/Google) without having any always-listening devices in my home.
I'm not into gaming so didn't make the connection. Thanks!
Ask HN: How do I report vulnerabilities and bugs?
Very frequently I notice bugs and vulnerabilities to different websites / products / saas.

Some of them are minor, and some are definitely very severe. From famous startups to really big companies.

What would / can you guys do ethically & legally?
I did find some horror stories in the past about people reporting vulnerabilities

Is there a way to ethically make a decent living from this? IE: consulting, employed, self-employed, etc?

It seems most of it is not crystal clear and certain as other career tracks.
IE: if i wanted to switch careers to be a PM or sales, etc and i wanted to be an insta millionaire, there's a well documented path for that
If the emergency and need was that bad they would have absolutely figured out simple logistics to get people on a ship. The fact is most people were told go home and wait it out and are still told that and that is the treatment most people receive. There is no point in continuing our state of emergency when our emergency services are not and never were at risk. Every single lockdown and mask measure put in place has had no significant impact on the spread of the virus. It is that contagious.
> We just have to wait till the mid terms to see how much the tribe has been reduced

I realize you are saying this just to be snarky and wage ideological battle, but the fact is that we don't.

The data is readily available about political affiliation as a predictor for vaccination rates, and vaccination status as a predictor for COVID mortality. 90+% of Democrats are vaccinated, and mortality rates are around 20 times higher among the unvaccinated. It is not an exaggeration to say that materially all of the COVID deaths over the past few months have been among conservatives.

May I gently suggest that 100,000+ preventable deaths among your ideological fellow-travelers deserves reflection beyond the political consequences next November?

https://www.brookings.edu/blog/fixgov/2021/10/01/for-covid-1...

https://dshs.texas.gov/immunize/covid19/data/vaccination-sta...
I love the 90’s style 3D Art Text Effects (or whatever it was called in Word) and the Windows 95 backgrounds. I feel young again!
I don't know what xdg-portal is or how to set it up. When I searched in Google, the very first link has a bad SSL certificate (which I accepted anyway, but seems very complex at first glance), the next from Reddit didn't work and said the tutorials were all out of date.

I totally agree Zoom should fix it, but they haven't yet.

I tried to install xdg-desktop-portal with ` nix-env --install xdg-desktop-portal` but running xdg-desktop-portal does not find the binary. I'm just confused what this command does anyway.
I frequently work with Taiwanese manufacturers in the industrial PC space. Depending on what the client needs, I can specify whether the equipment is made in China (Suzhou) or Taiwan. Having the equipment made in Taiwan costs at least 10 to 15% more.
We're not supposed to be racist, yet Pew Research Center publishes this report broken down between whites and blacks. It's pretty difficult to treat everyone alike when we're always being bombarded by media contrasting our differences.
One fun heuristic I've used for thought-experiments in futurology is to ask "what will be to cheap to charge for eventually, and what comes of that?" For example, electricity. Or water. Or fuel/energy for vehicles? Or computation? What would you do if you had unlimited internet bandwidth? What will have scarcity value when we can harvest asteroids for unlimited diamonds (or just... not stockpile them)?

There's the missing Step #2 problem, but it's still interesting to think through. And in my personal experience, it can also lead to you creating the future but too early for it to be truly viable. And that can 'waste' a lot of time, if you don't enjoy or value the the exploration in and of itself.
Yeah I’ve written about those on here before. I bought some but haven’t had time to use them; I’ve read anecdotal reports of them not lasting any longer than regular HTL (instead of LTH) discs.
You'd think a booster push would mean they should hold, not sell.
This is one class of bugs that would not exist if V8 was written in Rust.
Is Log4j exploitable outside of a webserver
Everything I’ve being reading about the log4j shell vulnerability all have the assumption that process is a flavor of a ‘webserver’ (i.e. a long running process that listens on ports)

So my question is the exploitability of log4j vulnerability if the application is one of the following short-lived JAVA code

1) Basic JAVA app that uses log4j for debug logging

2) SpringBoot application but with WebApplicationType.NONE[1]

[1] https://docs.spring.io/spring-boot/docs/current/api/org/springframework/boot/WebApplicationType.html

Not trying to avoid mitigation or remediation tasks but trying to prioritize my workload

Thanks
emphatically agreed. ssshhhhhhh...
> The shell should be an abstraction over a computer

Except shell itself is an abstraction over a computer by encapsulating system APIs.
Inventing the Service trait – Tokio – An asynchronous Rust runtime
Beware of the euro - it's a giant ponzi scheme - always has been, always will be.

The Marxist attack on the USD will stop after the 2022 mid-terms.
not only that but the idea of ownership of a token and the underlying asset have yet to be challenged in court
With sufficiently complex systems to detect fraud, such as AI or that involve constraint optimisers, it is not always doable to isolate a single, clear parameter that is responsible for the data to be flagged. This is an issue also for them (source: been working on several complex rule based systems that exhibited this very problem).

As for the human powered appeal process, how to design it so that it is not spammed/abused as easily as the upload?

It's easy to explain everything away because of evil corporation, but those are also actual technical issues.
Somehow had never heard about Rhasspy till today, seems pretty awesome.
I'm not overly religious but am Christian, and feel like many these behaviors you're describing are also shown by ardent atheists. I feel like the key to many problems lies in moderation and in general not harassing people instead of being a zealot for your personal beliefs.
Cloud Run for GCE (Proposal and Discussion on Twitter)
It was truly a bizarre experience. First we noticed a random intermittent ringing noise in the house and couldn’t figure out what it was. We tracked it down to the Alexa but since there are no logs or notifications we didn’t know what had just happened. It seems the person hung up when they heard us looking around so we never saw any visible indication that anything was happening.

Once we figured it out, we then had to spend half a day going through the Alexa documentation (useless) and random threads on Reddit to figure out how the access control for this feature and Alexa in general works. Like I said, certain changes to your account cannot be made without contacting support and being escalated to a certain team. By the end of it I still could not be certain we had locked this person out because of the number of changes they had made to the account and how much of a mess the app is.

The thing I really don’t understand is that this feature has been deployed for over a year and has received negative attention in the press. It’s just unbelievable that they would ship a feature that can turn your Alexa into a listening device and not think through what could go wrong, and never revisit it in a year.
> Do you realise that mutation is not something the species can consciously control?

Very much so, and my post was carefully worded to refer to evolutionary selection pressure, and not any kind of agency on behalf of a virus.

I assumed the audience here would get it.

As an aside, there are much kinder ways to voice this kind of concern that don’t drip with contempt; consider taking a less accusatory tone in the future? That might trigger fewer downvotes the next time the reading comprehension module needs coffee.
hah! somehow I never heard that one, and googling it points me to a 13 year old reddit thread discussing a book that’s new to me, “The Unix-Hater’s Handbook”, looks like a great read, so, Thanks!
This is just an instance the carry trade[0]. Borrow at a lower rate and lend at a higher rate. Works great until an event causes it to reverse and it all falls apart in a liquidity crisis. Then come the bailouts.

[0] https://en.wikipedia.org/wiki/Carry_(investment)
I just did an update and release 1.1.0 of my docker image with support for pgTAP from 9.6 to 14.

I should write up examples of how we use it, but we use a variant of the `run` script in the docker image. I’ve also built my docker image with multiple architectures as I run on arm64 but need to run on amd64 servers. The Sqitch docker images appear to be _just_ amd64 images.

The other difference is that I’m using alpine instead of debian-slim.
"What puzzels me is that it should be the other way around when you take inflation into account ..."

You're not taking into account the very real risk that the Euro doesn't exist in 5 or 10 or 20 years.

Many, many people in (PIGS)[1] do not appreciate being tied to the deutschemark.

[1] No offense meant.
Extraterrestrial Sample Curation