skysight-inc/HackerNews huggingface dataset:
It is interesting to note that this type of hotpatching will be prevented by the "strong encapsulation" new Java introduces.

BTW, the java code that actuanlly performs the patching : https://github.com/lunasec-io/lunasec/blob/master/tools/log4...
You mean that they are adding log4j maven dependency where there was none?
Software is not charity but it's a responsibility. As probably the most innocent example, when you ship an app that drains a user's battery you betray your users.

But then how about an app that sneakily collects data knowing that users won't even understand what you are doing or why?

You can be a responsible business which unfortunately won't necessarily be appreciated. Or you can be a typical business that exploits information asymmetry to the last bit.
This is what panic looks like.

Given the virus is by most recent evidence assumed to be airborne (https://www.gov.uk/government/publications/sage-98-minutes-c...) it wouldn’t take much at this stage to cause the system to flood with cases.

If you’ve been vaccinated are you going to be fine? Probably.

If you haven’t? Shrug. We’ll find out in the next couple of weeks I guess.

The government knows that they now need another round of lockdowns but don’t have enough support among the public to do it, hence the desperate push for this as the next best thing.

The queues to get jabs in my neck of the woods have been massive, so maybe that’s a good sign. Not that it was fun standing in a big queue with that many strangers for hours.

I’d prefer to have an actual Omicron vaccine but hopefully winging it with this one works.
Adoption curve takes a while. Typescript definitely wasn't common back in 2012, I can tell you that.
> Not a fan ... but I will give credit where it’s due

If you want to give credit, there are a number of actors, a number of facilitators, and a number of mostly spectators. You cannot immediately entail who did what, who is responsible, without knowing how the mechanism works (sometimes, without having information from the inside).

Some careers are based on taking credit irregardless; some other surely must be linked to real merit... Do not jump from "John was in charge" to "John did it" (to define the actual role and impact of John means considering a complex system).

About the specific context, I think there exist articles praising a number of key actors.
This is very cool to see. When I discovered and subsequently purchased my framework back in October I had an idea for a homebrewed, 3D printed expansion card, where plugging it in/activating it immediately executes dban (or some other, better alternative).

Or you could always just carry an enormously strong electromagnet on you :-)

Very keen on picking one of these up purely for the novelty, price isn't too bad. Although I think the demographic who would and could actually benefit from a failsafe for having their laptop physically yanked away from them is quite small.
Linux does this, actually. It's called "static calls", and it saves on an indirect branch by directly overwriting jmp instructions to point elsewhere: https://blog.yossarian.net/2020/12/16/Static-calls-in-Linux-.... As others have mentioned, doing this repeatedly has performance implications.
Until recently you had a lot of freedom on your OSX device, you could install and uninstall whatever you wanted , you could have a firewall that blocked applications. On iOS and slowly on OSX this freedoms are lost, already when you open your computer, open an application Apple is notified (for your safety), only a few more steps are needed until you will get laptops with iOS like lockdowns and maybe a PRO expensive version for the ones that want the key for the gates.
Good to have if you run a dark net marketplace or a political disident ring from public libraries.

An additional refinement is to autolock the device if a certain personal key combo (ex. Shit - vol up - vol down) is not pressed every few minutes in response to an audible click. If not unlocked in a minute or so with a complex password, the device halts to a disk encrypted state and unpowered ram, minimizing the window attackers have to recover RAM state.
My company has Lenovo Thinkpads as their standard laptops, and they cost basically the same as MacBooks. So it's not like Apple are charging uniquely high prices for their laptops
Well, I know that, because I have to sustain that lack of sun and wind here, too.

But the south(west) of europe still has lots of sun, like it almost always has. And a bit further south, there is always sun in the desert.

So yes, I would not deconstruct all the conventional power plants, just yet. And I think having some backup gas plants is not a bad idea, either.
Zero To Production in 30 Minutes
The insta-feedback. I learned to spell because a little red squiggly line told me to try again. I avoided the right-click to autocorrect. Now everything just autocorrects and I assume people are more and more reliant on it.
Sounds like your complaint is with Red Hat and not the developer?
I'm honestly starting to feel like I transported back in time to my 1980's small town childhood, when the adults around me all blamed "Satan" for everything in the world they didn't like.

"Capitalism" has about as much to do with software performance as actual devil worship had to do with my Dungeons & Dragons or heavy metal cassettes.

And if your life as an engineer or user is "miserable" today, then I wish I could transport YOU to the 1980's. Yeah, existence is suffering... it sucks to be in the top 5% of household incomes, be inundated with open source platforms and tools that didn't exist too long ago, and a have a supercomputer in my jeans pocket.
Another uncomfortable truth: most software engineers beyond a few years' experience are highly resistant to suggestions for improvement in their craft. They're more likely to use their intellectual/verbal skills to push back than to move forward.
Colleges go back to drawing board – again – to fight new Covid variant
> Religion shouldn't be criticised simply for having a framework for moderating response to desire, and because it offends some sacred cow of "natural" desire.

Oh I'm not criticizing religion for having a framework. I'm criticizing it because it's the wrong framework. Of course some natural desires must be regulated. That's just self control. People don't need unprovable superstitions to stop killing each other. For whatever small crumbs of peace religious harmony may have brought religion has brought plenty of excuses for war, murder, and hatred.
This was my immediate thought as well. Oh Ross, if only you closed that damn laptop lid (and didn't incriminate yourself blatantly on stack overflow)
Actually we know it wouldn't.

The agents arresting him did in such a way that they prevented him from touching his laptop (by creating a diversion), because they were feared that such a protection might exist.
> Capitalism is a handful of people who own the means of production and the rest of us trying to get by.

Well, good thing then that the "means of production" for software development consist of a 500€ laptop, which is well within reach of just about every programmer in the Western world.
I'd add to your first category that there's a lot of languages that adopt features that other languages have, making a ton of languages converge into basically the same language with some caveats. I don't remember the post now but I believe it was posted on HN some time ago, it was pretty insightful.

Anyway yeah, I'm glad Go is resistant to change.
Please explain to me how the survival of birds is linked to the survival of human life on Earth. We are already in a civilization where we don't depend anymore on foraging stuff that grows in nature anymore.
I seem to remember Windows 10 has a similar feature. You can pair your phone with it, and it supposedly locks automatically when the phone goes away. I've never seen it work, though...
> 12. The open source maintainer problem

The what problem? The only problem I see are entitled developers who think that putting stuff on GitHub and calling it “open source” is somehow an occupation for which they deserve a salary.
I disagree.

>> First, it is not related to the parent's point at all

The post was about switching away computers. My (badly implied) point was, a lot of the effort is wasted unless if you still use an Apple iPhone...

If you skip using an iPhone, then fine, but the other options out there are likely worse.

>> Second, it is perfectly possible to run AOSP based OSes not tied to google

You can build your own Google-free etc version but again most people won't because of the effort and the need to redo for updates again and again. The Parent post author probably has the means to do it, but it's another endless task they have to stay on. All other options (to my limited knowledge - plz share if you know more) mean compromises in apps, and functionality - unless you're happy to spend hours each wee/month troubleshooting and setting up workaround and working with specific compatible hardware.

It can be done. But how much of your life will you want to spend on that? Reading other comments maybe it is a solved problem now - it hadn't been last time I tried.

If I assumed too much from the parent post then sorry.
Author here. I am seeing a lot of comments about how the graphs are not anchored at 0. The intent with the graphs was not to "lie" or "mislead" but to fit the data in a way that was mostly readable side by side.

The goal was to show the high level change, in a glanceable way, not to get in to individual millisecond comparisons. However, in the future I would pick a different visualization I think :)

The benchmarking has also come under fire. My goal was to just to put the same site/assets on three different continents and retrieve them a bunch of times. No more, no less. I think the results are still interesting, personally. Clean room benchmarks are cool, but so are real world tests, imo.

Finally, there was no agenda with this post to push HTTP/3 over HTTP/2. I was actually skeptical that HTTP/3 made any kind of difference based on my experience with 1.1 to 2. I expected to write a post about "HTTP/3 is not any better than HTTP/2" and was frankly surprised that it was so much faster in my tests.
You seem to misunderstand what a postal address is.

The provided information on this website is not enough to do legally binding business (at least in some parts of Europe, it's not only Germany).
My first researches about alternative are not convincing (quality, response time) but I am still looking for something else!
How do you know that there isn't already a secret order in place to look for a particular list of hashes? Perhaps something that has been sealed due to national security?

If it's triggered, send the details to a particular group of individuals with certain clearance to view and verify.

If they have the ability to do this, they will definitely do this!
I don't know what headless means here.
Jesse Kline: CBC's 18 words you can't say is the dumbest thing I've ever heard
Would You Recommend Safe as a Scaling Framework?
That still sounds like a revolution to me.

If we get to simply exclude all of the successful and largely bloodless ones, then of course revolutions are messy and risky. It is that way by definition!
Me neither, so I donate to Marcan on Patreon:

https://www.patreon.com/marcan/posts

(I'm not saying you should, I just thought your point is good and I wanted to point out the possibility of sponsoring to everyone here).
Is it local-only? If so, it has far fewer privacy implications than CSAM scanning.
Google says employees flouting vaccination rules will eventually be fired
I still don't get the whole idea behind Clubhouse - I've read it's modelled on some 80s-90s phone parties or something like this? All I know it's some kind of invite-exclusive voice chat
Never thought or seen this, but really like the idea!
They will hit the outlet and bring the AC with them, without bumping voltage.
Reinfections are possible but the symptoms are almost always mild. Just like with the other coronaviruses.

https://www.nejm.org/doi/full/10.1056/NEJMc2108120
In Germany you can enter into a verbal contract without any exchange of personal details. Why would a website be treated differently? I'm curious.

As far as I understand German law is very flexible about what constitutes a valid legally binding contract.
I think some of these work up to a point.

I recently talked with my partner about this, and annecdotaly, one friend had bad enough depressive episodes, they got an antidepressants prescription. Later they complained that it really helped with the downs of the depression, but in general it felt stifling and kind of muffled the highs in life previously accessible.

But, fortunately, the medication helped enough that they started and stuck to an exercise regime and then managed to phase out the medication.

I think with mental health in general, everything comes with a great deal of your-mileage-may-vary.
Yes. One is application binaries, the other is photos.
You are right there is hardly a tech that hasn't existed in some form or shape since 1970s. Doesn't change my point (and nobody said newlyweds have to be on their first marriage).
I played around with their open source code a few years ago, and found it, well, operable, if not particularly useful.

On the flip side, I do not, I repeat, DO NOT recommend giving their team money for pretty much any reason. They've been struggling to put together any working hardware (and promising the opposite) for years through a genuine comedy of errors. I think the most recent design iteration of MycroftV2 is something like a Raspberry Pi on a daughterboard in a 3D-printed case. I still check in on their blog and subreddit every few months to see what's changed, and everytime I'm rewarded with additional details on what seems to be one of the most incompetent engineering organizations I've ever heard of.
I think part of it is that there are suddenly a bunch of clear, actionable and measurable goals when doing a migration - so people can commit to progress, deliver on it and feel good about their accomplishments.
Which is why putting that observation here on HN is so important. We can do something about it!
There was a period towards the start of the vaccination programme where, yes, the UK Government took a number of chances that seemed to pay off regarding vaccine approval and purchasing. However is the Hurclean efforts of thousands of NHS staff and volunteers which should be the subject of most praise. It was and is an amazing an effort from a vast group of people who weren't in the VIP lane.

The UK has fallen well down the ranks regarding 1st, 2nd, and booster delivery compared to Europe.

As for the endless announcements of changes to government policy to the press before Parliament ... this Government has been on the receiving end of the sort of dressing down from the House Speaker that would have resulted resignations and party explutions in the past.

But it has had the desired effect of making people think the Government is doing well, so I'll give him that.
CSAM didn’t allow that, they only included hashes provided by multiple governments.

The backlash was obvious from the outside, but it’s clear someone spent a lot of time building something they felt was reasonable. Even if Apple presumably just implemented the same system in iCloud, at least people became aware governments have access to such systems.
> My ThinkPad X1E has horrible battery life under Linux

I ran the M1 Pro for a whole day during early testing without charging (because we hadn't initialized the USB-C port yet) and didn't even run out of battery. And I didn't even have the power management driver running yet.

> has a boatload of issues with thunderbolt

We'll see how that goes, but I get the feeling Apple's Thunderbolt controllers are going to be a lot less insane than Intel's...

> HDMI port

That's just a DP-HDMI converter and whatever needs managing is managed by DCP firmware; it'll work once DP works.

> audio

WIP, already working on some machines; we just need to write a couple codec drivers to get it working across the board.

> WiFi

That's my TODO for this week, and I have it all planned out already :-)

> when my Thinkpad goes standby with an external monitor attached via TB, some ACPI interrupt goes insane and starts burning 100% CPU resources.

Good thing these machines don't have ACPI then! :-)

> USB ports regularly don't work after stand-by.

We actually already have a workaround in Linux for USB lockups that affect macOS on these machines, so we're already doing better on that front.

> BMC support seems problematic as well, my battery status is often 'unknown' with the Lenovo ACPI kernel modules.

That goes via SMC on these machines, which has a very simple interface. That's my TODO right after WiFi :-)

> And this is even with 'official' support from Lenovo for Linux.

Turns out "official" support sometimes is horrible... we can do better than that.

> I can only imagine how bad the experience will be for running Linux on Apple products for the coming years.

Some people are already using them as their daily driver; I don't see it taking more than another year to be in a very good place.
OK, but during the Volcker shock interest rates when up to 18%. Not just a little.

Go to an online loan calculator and try this: If you have a loan for 100k dollars, and the interest rate is 4%, your payment is 477 dollars a month.

If the interest rate is 18%, the payment is 1507 dollars a month. The difference is not minor.
Because last time it happened you had 1.) to call in an old consultant/employee 2.) that you know is now unavailable.

The first part of that has been true at especially one place I worked though and while luckily he was still available it was still terrifying since he had left behind a proper Rube Goldberg machine. If he had been unavailable we would have had spent days and would probably just have had to recreate it from scratch (I watched him closely while he fixed it and it was a mix of at least from the top of my head: undocumented services, certificates that were expired, accounts with passwords that were unknown.)

I've also experienced to be the one that was called to because the IT manager remembered that I used to be the guy who knew how to fix a certain problem with Sybase Adaptive Server Anywhere. I had documented everything I ever knew and could think of about it but it turned out someone there had "cleaned up" a bit.
Those who need more assurance just look at our SOC2 compliance, or have us go through a security review, or opt for the dedicated-environment deployment option.
> His government says 15min wait isn’t necessary.

I agree with that.

> ... you say he is trying to deflect his own personal scandals.

I didn't say that.

> His government supposedly does a decent job - you say it’s not his credit.

All I'm saying is that the credit is due to the NHS for executing on the vaccination campaign.
Yea I mean nothing is perfect. While capitalism doesn’t lend well to maintaining open source software (which I find to be a surprising comment given that GitHub exists) it does lend well to things like having a house, or being able to save money for retirement, or to creating markets where you get products you want. YC for example has enabled lots of founders to create brand new companies and services we all use.

So I would definitely take the bad with the good here. The world’s most capitalist countries also have the highest standards of living (Norway, Sweden, etc.).
Hard to tell if the designer app comes with the github repo.
https://github.com/plasmicapp/plasmic
The other thing is that specs alone don’t tell the whole story. There’s plenty of x86 laptops that on paper have better looking specs than the MacBook Air, but few or none of them are as good at what makes a laptop a laptop — mainly, battery life and heat output. There are laptops that are thinner and lighter, like the Thinkpad X1 Nano that I own, but that thing can’t touch an Air in battery life, heat output, and in some aspects performance.
Does anyone use JNDI within Log4j?
I trying really hard to understand how this feature made it into the library.
One doctor who has held this opinion this whole time, and has a book out arguing for it.

Whether or not she is right is one question, but the phrasing here is implying that there has been a change in opinion, which is not true.
Interesting to ponder what would have happened without the full-spectrum WE'RE ALL DOOMED! DOOMED I TELL YA! propaganda push. The first 'pandemic' in history that we have to be reminded all the time exists, else it would disappear.
There are quite a few billion people around the world who are wishing they had more electricity aspiring to USA living standards who will pick up the slack in demand.
This just reinforces my lack of faith in the "experts", and my belief that they are playing politicians. "We don't have a clue what's flying but listen to me because i'm a doctor" doesn't make sense to me.
The only difference between HTTP/1.0 and HTTP/1.1 is having to send the 'Host:' header.
This is why I like working in highly-regulated industry. Technically correct is almost always what flies at the end of the day, because there certainly exists some audit item tracking the thing.

I absolutely loathe the audit process on one hand, but its a useful tool for getting everyone to play the same game on the other. It also means your solution is compliant in a lot of places if you can get it signed off in one.
I am yet to see pairing work effectively for more than 20-30 minutes at a time, on a very specific problem, that really needs shared expertise. "Mobbing" sounds horrible 99% of the time.
Reconciling with Rupture: The Impact of Exile on Revolutionary Thought
2 jabs is iffy, 2 + booster seems like "probably fine". Hence the panic.
You're worried about patching the system that you're developing and releasing. Most people aren't doing that. Most people are patching systems they bought from some other guy. Indeed, they're scanning and patching dozens of systems they bought from a dozen other guys, each of whom sourced libraries from other guys, who sourced things from still other guys. Somewhere way down at the bottom of the vendor chain is Log4j.

For example, we operate an information system we bought from a nationwide vendor. The primary application is not vulnerable. The admin interface is not vulnerable. The secondary application is not vulnerable. However, there's a reporting system from a third party that was provided to us. That is vulnerable. Now we have to wait for the third party to patch so that the vendor can patch so that we can patch.

Plus there's all the other things you find that are clearly stupid, but aren't immediately important. Like this:

C:\Program Files (x86)\Microsoft Visual Studio\2017\SQL\Common7\IDE\CommonExtensions\Microsoft\SSIS\150\Extensions\Common\Jars\log4j-1.2.17.jar
It's not about the free market per se, but rather a system that allows to turn the information asymmetry into money without consequences most of the time.
> And I'm not making any predictions, just observations.

Claiming we are in the middle of a mass extinction event is a prediction, not an observation. It will become an observation when you have actually seen billions of species disappear over time. You don't extrapolate an extinction based on trends over dozens of years (especially on mostly imperfect data).
This one from the article is a bit weird:

> Sophisticated DSLs with special syntax are probably a dead-end. Ruby and Scala both leaned hard into this and neither got it to catch on.

Rails is one of the most popular web frameworks around and a combo of Rails and Ruby power some really high traffic / high importance platforms like GitHub, Shopify and Stripe's API.
Windows: Sorry, Dave, we can't shut your system down right now, you have 3 apps keeping it from shutting down and we have 37 updates to Edge Browser to install... Have a nice day.