skysight-inc/HackerNews huggingface dataset:
Let's say everyone in the world thinks it's ok to steal. Let's say stealing became so prevalent, it was normal and common. Would this make stealing ethical?

Weird is a poor descriptor. In the case of entitlement to take time on your employer's clock to engage in activity for which you were not hired to perform is simply and unabashedly unethical. It is stealing, no matter how many do it, it is still stealing.

But there is another angle that also makes it unethical, and that is that your romantic focus at work is necessarily a captive of their workplace. It would be different under different circumstances, such as meeting someone at a social gathering and turning on the charm for romantic interest, because they're not going to lose their job nor create a toxic work environment should they rebuff your advances. When you target a romantic interest in the workplace, you are taking advantage of the others' inability to choose not to be romanced.

Is it imperative to you that you be permitted indulge your entitlement to behave this way at work? Can't you do it instead somewhere, anywhere else?
> Aaron Schwartz

*Swartz
This is caused by the way the US justice system is set up to be adversarial. I would much prefer a system where state prosecutors are seeking _justice_ for all parties involved not convictions at all cost.
Does this shift the balance between TSMC and Samsung and Intel? Or is it copyable?

How soon could it be in production?
When a police officer shoots a kid with their back turned, wearing headphones who couldn't hear the cop say "stop", is the police officer responsible for the kid's death?

Where does responsibility stop?
I am a robotics engineer. Everyone wanted to mock Tesla for their announcement. And sure, it may well be vaporware. But I do think they have the resources to buy/build something that works, and moreover their Dojo AI system would possibly be well suited for training a humanoid. This is a major piece which other companies do not have. Finally they have the manufacturing capability to spin up a manufacturing line.

However it is weird for them to make the announcement without any hardware to show. It’s kind of like me announcing I’m going to climb Mount Everest. I could, probably, but there is a lot to be done between then and now.

I think Tesla could do it, if they really believe there is enough profit in it to make a massive investment. They could purchase Agility Robotics and be well on their way. So I think it’s possible, but only with significant investment. Time will tell what really happens.
DPI of the network traffic at the ISPs upstream of the server side (Whether ordered by US national security letter or other) would collect some very interesting data on ASN/IP traffic origins and time of day usage patterns, however.

Or even something much less than DPI and just high sampling rate netflow.
Ship tracing spans from Rust Applications to Jaeger
The story with Mars is quite a bit more complicated than I've written, but we did scan it, and then try and isolate it, for a few weeks before we tried the restart. Let's just say there was a lot of redundancy that only broke once it couldn't ping at a very specific time.
Why was rotation ever a recommendation? Did it used to make sense?
‘Wash your hands’ was once controversial medical advice

Everyone knows handwashing is an easy way to stay healthy, but that wasn't always so. In the 1840s, advocating it cost a doctor his career.

Everyone knows ... or is that just what big hand-wash wants you to think...
Not the OP but someone who also finds Swift brilliant

I really enjoy the value types — real structs with copy-on-write behaviour (internally). So there's a lot of freedom to model your application with a single source of truth that can be updated in a transactional way, diffed, unified, intersected, without worrying about any leftover state causing bugs

Protocols and protocol extensions are very powerful. Allowing you to write a generic interface and then add explicit functionality to anything which adopts that interface in a very clear way

In combination with pattern-matching enums which can store uniquely typed data with their cases, it makes it very easy to model complex systems in a readable, maintainable way

The combination of all these things, plus powerful generics and a very thoughtfully designed set of foundation APIs, makes it very pleasurable to write and read Swift code

The new async/await functionality also seems like it was considered for a long time. It manages to stop you from doing stupid things with threading at compile time by being conservative about how you can use structures concurrently
Come work in Visual Effects!
Lichess is far superior to other chess sites in the interface, quality of play, and quality of the community.

Chess.com does have some excellent pay-extra-to-use content.
Oh wow this is fascinating bit of history. I wonder how the i-cache drift detection is implemented. Cheers.
you don't think there are at least some benevolent DAs who work hard to conduct themselves ethically and aim for the seat because they truly are interested in making their communities a better place?

maybe it's why i struggle in many ways, but i like to assume that not all roads to power are dripping with the blood of those who were ran over.
Hardened_malloc
It’s been several years since I’ve worked in Clojure. When I started to dive into the language, I was warned not to write macros without a good justification (and heeded those warnings).

One of my most memorable projects[1] relied heavily on macros. I knew at the time that I was using the tools I had to automate a performance optimization technique. What I didn’t know at the time was that my former (and once again future) ecosystem, JavaScript (now TypeScript), was going through a tooling revolution (of sorts, no value attached to that observation). Babel, and then countless other tools, were transforming more and more JS. Now that sort of thing is pretty much the default.

All of that is to say: macros are not a silver bullet, they’re not trivial to write/read/maintain… but goodness dealing with similar use cases in JS environments routinely makes me long for them.

The amount of esoteric knowledge required to build something similar to my 150 line library in a JS context is absolutely bonkers. Versus just using built in language features and calling runtime functionality as needed at build time.

I don’t want to overly romanticize either macros generally or Clojure specifically. But I sincerely believe a large part of the frustration with the JS ecosystem from developers’ perspective would be significantly less frustrating if manipulating the language and sharing build/runtime logic were part of the language itself.

1: https://github.com/reup-distribution/espalier
Haha I remember a friend had made a lisp one with as few lines as he could use, on his macbook which he used the gyro to install smackbook to change the virtual desktop. https://www.engadget.com/2006-05-25-smackbook-and-macsaber-b... good times.
> Signal without the phone number requirement becomes THE way to move data from anything to anything - malware would be written which setup a Signal account and used that for command and control.

Element doesn't require a phone number and I have no malware issues... also email doesn't.
Tell HN: Azure is having a major outage
One hour into it, no status page update. Looks like Active Directory is down.

I guess they felt left out with all the AWS issues lately?
What we have seen in the past 10 years of machine learning is that it’s extremely hard to know the next technique that will be practical in a vast array of problems. We had CNNs, batch norm, lstms, transformers, self supervised learning, reinforcement learning and a few other techniques that need to be perfected, thousands of ideas to be built upon, but nobody knows the next big thing that will work on real life problems.
Damning whistleblower report reveals sidelined engineers, scarcity of expertise
The announcement here talks more about the context:

https://glaubercosta-11125.medium.com/728187331f53

It also mentions rqlite and dqlite.
> Some libraries in wealthy countries have community makerspaces, 3d printers & fabrication tools you can check-out and so you might talk to your librarian and see if they are interested in a tech hub

While we're not in a _heavily wealthy_ area, the Fulton County (Atlanta, GA) area library system seems to not have any of these. Our newly renovated libraries still only offer DVD media for checkout.

I'm an alumni (and employee) of a heavily technical school in the area, so that's definitely a great avenue to go down.

I love our local library system _until_ we look at technical books. They're _so_ behind on the times. I did my Master's degree through a local (public) technical college and doing that made me want to continue learning.

re: e-books, I (personally) can't do technical e-books. I don't know what it is, but I just can't stay focused on them. I need paper.
> So a grand jury of regular ole citizens decided to indict

As the old saying goes, a grand jury would indict a ham sandwich if the prosecutor told them to.

Edit: I'm not sure how many are aware of how grand juries work.

The prosecutor presents evidence, but the defense is generally not allowed to present any evidence (the defense isn't even allowed to be in the room unless they are explicitly summoned). Grand jury proceedings are secret. If there is an indictment, the defense will not even be allowed to see what evidence was used.

Thus, it's not surprising that a manipulative prosecutor can sometimes get a grand jury to issue an indictment based on flimsy evidence, leading to the saying about them being persuaded to "indict a ham sandwich".

Most common law countries abolished grand juries long ago, and about half of the U.S. states no longer use them at all (even though they are still technically allowed).
GPL does not prevent users from distributing modifications: it simply requires them to give _their_ users the same freedom if they do so. The AGPL further updates this for the cloud era.
Linux servers are everywhere, MS uses linux, linux users are common on here, wikipedia killed Encarta. Don't be amazed, its the norm.
At one point I was planning to make something using a glass table with a camera underneath it and ArUco markers on the bottom of the chess pieces.

The problem with trying to make something that uses electronics is the number of squares on the board making it quite a big fiddly task.
I think you are right. Quite a few Microsoft services on DownDetector spiking [1]

[1] - https://downdetector.com/
Not really.

If operational expenditure decrease while capital expenditures stays constant, it could still cost the same amount of money to mine but use less electricity. A miner pays both for power and the mining rigs.
>Plenty do, and plenty die while they're in prison. This is not a rational justification for what happened to Schwartz (and looks to me like victim-blaming)

It is not attempting to be a justification for what happened to him. It is demonstrating that Swartz was not acting rationally. You shouldn't blame someone for triggering an irrational response by another person. And it isn't victim-blaming to say someone is dead because of their mental illness anymore than it is victim-blaming to say someone is dead because they had cancer.

>Blaming mental illness is an utterly weak response here. Many, many people struggle with mental health and don't commit suicide; the assumption that mental health issues == suicide is reductive and harmful.

You are the one being reductive and equating all mental health issues to suicide. I am talking about one specific person with mental health issues. Talking about Swartz's mental health history is important. If he got the help he needed at the right time he might still be alive. Talking about that aspect of the story can help save the lives of people who feel similarly trapped as he felt.
You made me think: 3d printing. At the moment it is very fiddly for hobbyists but eventually it will be way more easy and with better materials. The idea of 3d printing things you’d normally buy may not be so crazy. Or maybe an amazon warehouse will 3d print and deliver as if it were any other package.
> […] then redirecting control flow with the altered state by overwriting a function pointer.

The analysis calls this out specifically:

> Conveniently since JBIG2Bitmap inherits from JBIG2Segment the seg->getType() virtual call succeed even on devices where Pointer Authentication is enabled

Which is disturbing. Was the code compiled for the arch64e architecture in the first place, or it is a bug in the LLVM compiler toolchain? The armv8.3 authenticated pointers have been invented to preclude this from happening, but that is not the case with the exploit.
It wasn't just Ortiz. Judge Nathaniel Gorton played a huge role:

Gorton is well known to the Massachusetts Bar, whose members whisper he rarely meets an indictment he doesn’t like. He’s noted as a hanging judge; prosecutors go out of their way to get high-profile cases assigned to him.

After Swartz drew Gorton, his defense lawyers told Heymann the pressure of the case had rendered Swartz suicidal, his attorney later said he told prosecutors.

“Fine, we’ll lock him up,” [Judge] Heymann responded.

Swartz killed himself shortly thereafter, in January 2013.

from https://theintercept.com/2021/02/15/marty-walsh-aaron-swartz...
Probably best I log out of youtube on the tv otherwise someone is going to expect dyson hair curlers/straighteners/curlers for christmas.
I feel like you must have seen it given that you're working on this but just in case, the AlphaGo Documentary (2017) was quite good. I bet you'd enjoy it.
>you're wrong to think this

Security engineer here. No they aren't. I'd say they are being a much more comprehensive in their security analysis by including the cons in their calculation rather than dismissing them and assuming that the pros outweigh them.

>opinion is shared by most of the security community.

No it isn't.

Security by obscurity is a very valid defense-in-depth measure. There's a reason you disable "debug-level logging" on production webservers.

>There is ample evidence that the cons FAR outweigh the pros in this particular comparison.

Show said evidence, please, because there is ample evidence that open source software magically being reviewed by hordes of people is many times a myth.

Heartbleed was caused because pretty much nobody cared to look at openssl's code and review it for vulnerabilities. Just because it is available to be looked at by white hats doesn't mean anyone actually is looking at it. And if something so critical to security like openssl isn't even being reviewed by security researchers, what gives you any confidence that random software like JoesCoolLoggingLibrary is reviewed with any more scrutiny?

Speaking of logging, Log4shell is yet another example. The most ubiquitous libraries in use. Used everywhere by some of the largest tech companies in the world, that all have the largest and most well-budgeted security organizations. The vulnerability was present in code for years, available for anyone in the world to look at, and yet...? Instead, there is evidence that Log4shell was being exploited by black hats before any white hats discovered it.

>You're arguing that 99 white hats don't trump black-vs-white.

No, they're arguing that there is no guarantee that these 99 white hats are somehow better than the 1000 black hats, and I'd add to it that there is also no guarantee that these 99 white hats magically appear, anyway. In fact, I think a more realistic visualization for most software is:

- Closed source:

-- Pros: 1 well paid white hat can easily inspect the source

-- Cons: 1000 hackers can blackbox-attack the application

- Open source:

-- Pros: 1-2 unpaid volunteer white hats might inspect the source if they have time

-- Cons: 1000 black hats can whitebox-attack the application

As a security engineer, I know which one I feel more comfortable with.
We do know what sentence she would've recommended. She and Heymann were pushing for 35 years. More than many killers and rapists get, by decades at that. The prosecution even compared him to a rapist.

https://www.huffpost.com/entry/stephen-heymann-aaron-swartz_...

https://theintercept.com/2021/02/15/marty-walsh-aaron-swartz...

And let's not forget why he turned down the plea deal: HE WASN'T GUILTY OF ANYTHING. Jstor and MIT both didn't want a prosecution, and "MIT’s site license for JSTOR [allowed] for “unlimited” use of the JSTOR library." The prosecution claimed he was going to release the downloaded materials publically, which might have constituted copyright infringement, but he had not actually done so at the time of his voluntary surrender.
There are plenty of substitute for everything, it's just that people don't like change.

We have just as many hardcore Databricks users that wouldn't want to move, or hardcore MATLAB users and Mathematica users. We don't have anyone using PowerBI anymore, those all moved to Databricks and Tableau.

Active Directory and GP are a burning trashfire and only can't be replaced if you're stuck without modern MDM on a Windows Desktop construction. The only Windows we have left is VDI based on Citrix and Ivanti, everything else is "do whatever you want" where users have a BYOD choice with no internal access (and in reality they don't need it anyway) or VPN access with a choice of Kolide-based compliance or MDM-based compliance, and either are used to gate connections, in combination with DLP and standard anti malwares.

InTune sucks, Azure AD is nice, but when attempting to integrate with everything that already exists it sucks again. We have everything that is fully-managed or half-managed on JAMF and everything else is just isolated or internet-only (which was a requirement starting 2 years ago anyway). MS Teams never got a foothold here, sucks in so many ways people just rather have physical meetings or use email. Slack on the other hand works well and has been in constant use for over 5 years now. On-prem exchange was deleted and migrated to Google's thing a few years ago, works fine, does everything we need for quite a low price and quite high user happiness. It also ended up being the directory replacement. We no longer need Kerberos, except for some legacy Windows-desktop applications, but those are stuck inside VDI anyway until we can move on.

We used to have large VMware server farms and physical oracle boxes too. The first category was moved to AWS or replaced with microservices on Kubernetes, the second one migrated to Postgres RDS in AWS, but that is an ongoing process (roughly 10TB in table size done so far, and yes that did take tweaks like adding actual indices where Oracle would automagically do that on Exadata machines for you). Even with the human investment the cost is lower, productivity higher and we are less constrained by contracts. The best part is the elasticity we gained which was always problematic, even with the fake cloud (vmware-on-aws for example) or pretend-to-be-hybrid cloud solutions (azure) that never bear the fruit they advertise, or do but aren't actually better in the end.

Perhaps a big difference between the projects at this company and others is the vertical integration where things that are distinguishing to the company are pretty much created from scratch by internal development and maintenance teams. Things that don't matter or are shit no matter how you do it (looking at VDI) are delegated to MSPs but they have to run on our infra so we know the state of the infra no matter what the MSP is trying to tell/sell us. At the end of the day, this works great for us, everyone is happy, and a profit is made. This is in Western Europe if that makes a difference.
> Most undergrad CS curriculums won't cover it.

The serious ones do. At least, I found it to be commonly known.
Two cases that pissed me off recently:

1) dropping support of some Adaptec RAID cards in RHEL/Centos 8 with Linux 4.18. Like <= 5xxx series. Yeah, Adaptec 5x series is old and weak performance, but perfectly fine and widespread SATA controller card for servers. Many storage-oriented servers don't need anything faster.

2) Radeon RX4xx RX5xx GPUs worked on kernel 4.19, but they don't work for many people on newer kernels such as 5.10 and higher. Lots of error messages in dmesg, lots of reporting on forums, no official guide as to how to fix that. Amdgpu driver is in state of being endlessly rewritten presumably due to shiny new GPU cards and cutting edge Linux can't work with older cards reliably anymore.
Regarding interactive training resources, there are other good resources which are partially free (or limited) and partially payable content:

- https://chesstempo.com/ has a great collection of chess puzzles

- https://www.chessable.com is specialized on interactive training. They have may free courses and combine what a classical book (text plus moves) would have done with memorization tools (for openings, tactics etc)
Raw performance has never been an issue for me on laptops anyway. I care more about the laptop not sounding like an airport because the fans have to spin at full speed to cope with web browsing. Or having to carry a charger around with me everywhere because the laptop gets 4 hours battery despite having a huge battery pack.

These new macbooks are like a dream. By far the best laptops I have ever used.
Transformers subverting convolution on their own turf (vision) was certainly unexpected.
>It does seem rather premature to kill yourself before being convicted.

Ask Julian Assange his opinion on that.
Very simple, avoids hyperbole, but makes a great point. This marks only the first time Matt Bruenig would lose a job for something he posted.
YT had a long way to go with its live experience. Even something as simple as chat is horrible during livestreams on YT (go figure - google? flubbing chat?). But for Twitch - half the experience is the frenetic memetic microcultures that live within each channel.
So you're saying you wouldn't be interested in what Einstein, Newton, Turing, etc had to opine? It seems some people are really boring around here.
Reddit Announces Confidential Submission of Draft S-1
> I don't think this is going to work very well.

I've built prototypes using libjpegturbo for encoding to web clients and it works out fantastically in my experience.

I don't see a requirement to ship anything remotely modern if the desired product experience is achieved regardless. No one said it always has to work on every class of device everywhere for every type of user. Maybe someone just wants something that functions in any reasonable web browser and isnt interested in directly competing with twitch.tv.
This is really fascinating subject and seems like a rich area for research.

I was curious about your comment regarding arm and risc-v not having coherent instruction and data caches. Is this a toggle on these chips hen for turning it on and off? I think I remember reading about some SoC that have this configurable.
For whatever it's worth, that article repeats the false claim that Heymann was pursuing a 35 year sentence for Swartz; they were in fact seeking an order of magnitude less time, and were unlikely to get even that (Swartz's own lawyer, writing after his death, noted that even if convicted --- not itself a certainty --- he might not have faced any custodial time).

I write this not to downplay Ortiz and Heymann (I share the common HN sentiment about their behavior and culpability) but as a warning that if an article gets the basic fact that you don't work out sentences by multiplying the statutory maximum for an offense against the number of counts, there's likely other stuff they got wrong too, and this whole article is inside baseball.

Who knows where Ortiz and, more importantly, Heymann are headed now. It's worth keeping your eyes open.
We don’t seem to have a clue in the world what we really want.