skysight-inc/HackerNews huggingface dataset:
As best I've been able to tell, this was not an intentional feature; it was added by the original author for configuration, so that they could drop LDAP URL's into the log4j configuration file, thus using LDAP as a "configuration server". I don't think they realized this would cross paths with every single log message as well.

Mind you, I also think that original intention was idiotic: Now your java application can't boot up unless your LDAP server is working, and for what? That's the kind of thing that makes global restarts & outage recovery a disaster.
I think it's a perfectly OK idea, as long as you control the servers you are trying to access via this feature. The problem is about not sanitizing user inputs. You can achieve the same by forking a process whose file path is controlled by user input. Does it mean allowing a program to fork processes is also insane?
For better or worse, Microsoft is all in on the JS ecosystem. I could sooner see TypeScript being rewritten in Rust: at least from a performance perspective, there’s a lot more room to improve there. But I think it’s safe to say that’s not gonna happen.

VSCode is much larger, and much more complex. I just can’t imagine it happening ever.
> Bane vs. Pink Guy, also known as Bane vs. Filthy Frank, is an image macro series based on a screenshot from the film The Dark Knight Rises altered to include the Filthy Frank character Pink Guy. In the image, the Batman villain Bane is preparing to fight to Pink Guy.
Do businesses that run Node.js use some sort of caching proxy to protect from cases like this, or does npm make something like that difficult to implement?
well, atleast you have the agency to do something about it yourself.

also, building access systems should be hosted in the building they reside in for security reasons anyways.
there is no eval_from_url(), though.
Running at 1.5 GHz, air cooling is enough. The Pi 400 has a massive but thin heat sink that keeps it running well at 1.8 GHz (and I overclocked to 2+ GHz with no ill effect or throttling).

If you have ambient temps under 80°F and a light breeze past the bare SoC it doesn't seem to throttle unless overclocked to 2+ GHz.
I find the hardware in the more "elite" laptops lasts longer. In 2015 I bought an Asus ROG middle of the road priced computer and have had to replace the hard drive in it and two keyboards. I have a macbook from the same year and 0 problems, and use it more than the Asus.
Put it up a watertight enclosure Hook it up to a directional antenna and it would make a good PTP set up.
If forced shutdown is a priority, causing a bugcheck would probably be your best bet. This could be part of the USB driver for the device, or you could write a piece of software running as admin to trigger a fail state (like killing wininit or any other critical part of Windows).

You'd have to watch out that you don't let the system store a memory dump, of course, that'd be the exact opposite of what you want.
How about data science or machine learning? Is there a career opportunity there?

There was a lot of buzz a few years ago. I’m not sure if it panned out.
Thanks, that's pretty convincing.
Why Google PageSpeed Insights Score Is a Vanity Metric
Meta expands bug bounty to include scraping
There is a middle path here...
We don't have any external customers; they are all internal. We're all on the same side of the table.
Hoo boy.

X11 definitely wasn’t designed for this. It’s a byproduct of its (poor) design and the fact you can directly interfere with the renderer.

It’s the same as the c64 not protecting memory addresses so you can poke memory to fuck with the video output, which people did, but the c64 is not a good computing platform in the modern age almost because of this.

You might be better served by actually looking how X11 works, with quirks and what it was originally designed for, I promise you that your hair will stand on end.

I should note: “potentially dangerous” is seriously downplaying a genuine problem linux had with keyloggers- it just wasn’t overly common because Linux is not a big enough platform for trojans to target, but it was known to be easy. Hugely easy.
Fuck Off and go back to Kentucky you fucking sad trump-blowing nazi.

You wouldn't know what socialism is if it shot you in the face.
The very definition of survivorship bias :)
My cynical opinion - it doesn't have the emotional "hooks" that Haiti (very close to the U.S., mostly Black, etc.) or Palestine (U.S. / European involvement via Israel) have. And the script (an officially Buddhist country killing Muslims) does not [$Bitter_Disapproval_Comment] strike many Americans / Europeans / etc. as being particularly evil. Nor as likely to cause any problems for Westerners.
I bet the hardware will be working 10 years from now as well. Apples tends to use great hardware even if it is sometimes a little underperformative compared to PCs at the same price point.
You're not the only one. I absolutely detest it (to the extent I would absolutely leave a job if they made it a requirement) and a significant portion of devs I have worked with are lukewarm at best.
Thanks, I'll have a look.

Also, good call on your PS. :)
I think of it as being like one of those trivial "faster-than-light" things like a spot of light.

You can easily swing a laser pointer fast enough that the beam would crosses Earth's Moon faster than light. Information is moving outwards, not sideways, so that speed doesn't matter.
Is it possible that you're not making the "right" moves because you're the CTO?

Leadership is hard and it's hard because you're making bayesian calculations on suboptimal choices. Almost by definition.

Say a Jr. dev has a problem that they can't solve. They kick it to an intermediate.

The intermediate can't solve it so they kick it up to a senior.

The senior can see a couple of solutions, but want's to run it past the architect.

The architect takes these options, weighs them against n number of considerations + the dev roadmap and sees strengths and weaknesses to all of them.

They package those pros and cons and brings them to you, the CTO to make a decision between these sub-optimal choices.

In this kind of environment EVERY move you make is going to be a little bit wrong. You just kind of have to minimize the wrongness
Yes our world view should be "RESPECT MAH AUTHORITAH"

You offer no solutions, you just bitch and moan that people don't conform to your white-wing politics.

Boot liking Rimmer.
Likely they mean an immediate mode UI [1], as opposed to a traditional retained mode UI. Immediate mode UIs have gained a lot of popularity in the games/graphics world over the past few years.

[1] https://en.wikipedia.org/wiki/Immediate_mode_GUI
Extending TCP is considered infeasible due to its pervasiveness and the calcification of it across the ecosystem. Implementing a new protocol is also considered infeasible for similar reasons. So they arrived at a new protocol over UDP to implement new features.
> Cheap and reliable batteries will be essential for decarbonizing multiple industries.

I wonder where all of the battery waste goes and if we are truly better off with piles of lithium batteries but reduced carbon footprint. Did I miss some recycling innovation for said batteries?
This is more apt than you know.

If Rust finds only the amount of penetration that Erlang has, it will have failed.
I agree. It'd be the same with Covid too if the risk was high. Ultimately the reason so many don't want a Covid vaccine is because the risk of hospitalization is only 1.6% and is well below 1% if you're young and otherwise healthy. Or if you already had Covid and have natural immunity you're about as protected as the vaccinated (<1% chance of hospitalization).

If the risk of hospitalization or death was 10%? 30%? Almost everyone would want the vaccine except the real hardcore anti-vaxxers. You wouldn't have to mandate or otherwise coerce people to take something if the threat was that credible generally. Few resist the smallpox vaccine, for example.
Japan admits overstating some government economic data for years
We already have Intel 4004. Enough CPUs already.
As much as everyone dislikes this episode in the history of social media I feel like fb is merely a catalyst. Why don't they go after the perps?
There was a brief period of time back in the early 90's where I felt I understood how Linux worked -- the kernel, startup scripts, drivers, processors, boot tools, etc... I could actually work on all levels of the system to some degree. Those days are long gone. I am far removed from many details of the systems I use today. I used to do a lot of assembly programming on multiple systems. Today I am not sure how most of the systems works in much detail.
Proof of Steak
When you say "Web development" do you mean building servers that are connected to the internet and ultimately do work because someone sent a request of some kind or do you mean building CRUD websites for e-commerce? I agree the latter is really boring, but there are a ton of jobs that do the former. Even jobs that _sound_ like they should be very web-centric don't feel that way if you aren't working on clients or handling HTTP.

My experience has been that places that ask for "fullstack" are generally small shops that don't want to hire specialists because their problems are product-centric, not engineering centric.
I'm curious, what don't you like about the X1E? I have a Gen 3 and it's super wonky with an external monitor, nvidia + linux seems to still be a mistake.
Dude every single comment in the post when this was announced was against it.
Science is always up for discussion. A lot of people like making appeals to authority and calling that "science".

I say this as someone who is vaccinated and encourages others to be so as well.
> 65 yo population in Italy is 22.8 vs UK 18.4. Most people dying are the old ones so you'll see more death in countries with older population, in general. Moreover the way we count covid victims in Italy is to count every death even when the covid was a minor co-factor. For instance an 80 yo with several chronic disease and cancer dies and is positive to covid as well? It is counted as covid death here, inflating the stats.

About the other statements, if you think UK did a good job with covid, well, I'm happy you trust your government actions. Live long and prosper btw.
Capital and also just straight up mindshare. How many people would have had any idea what mRNA was two years ago? Now it's a kitchen table thing, everyone's seen a dozen explainers on what the basic idea is and how it works. It's firmly associated with new technology, agility, and highly effective vaccination.
Got it. You can add Smalltalk to that list as it can compile in itself (and for some even the VM source code).
https://knowyourmeme.com/memes/bane-vs-pink-guy--2
Do you think that is still the case? I can think of all kinds of applications where software can contribute to non-profit driven goals. Healthcare, government, energy/climate, etc.

I think the problem is it becomes hard for some to take those jobs when they could instead work in, say, social media or finance for many multiples of the pay.
Hm; I guess when being in talks with a company using the language, assuming the pragmas idea I elaborated in a cousin comment, I'd then be asking questions like: "Is your codebase any=default or any=forbidden? What percentage of it is any=allowed?" (Instead of the current: "are you using JS, Go, or Rust?")

Notably, in my particular case, what you say is a problem is exactly why I want it: because when writing the PoC, I don't really know what I'm doing yet; and I want to only sketch it. Once I see the sketch and it looks like the general idea has some promise, I want to "grab the pen and start drawing" - i.e. start diving into the nitty-gritty dark corners of ugly interactions, corner cases, & stability, as a way of better understanding & exploring my domain/project/idea (specifically, using the compiler as a tool that is forcing me to do that, by asking me difficult questions). And I may want it graded in various areas of my codebase: some are super unimportant or still being explored, and I'm ok having them explicitly marked as "sketchy"; others are where I really care about extreme security, so want full prover power, and I want to know their exact boundaries too; finally, some are the "more or less know what I'm doing, but not life-critical" to bigger or lesser extent; notably with some small corners marked with an explicit "caution: here be dragons" `unsafe` (I mean, `any=allowed`) yellow tape.
True, but I mean a program where most of the sports-specific classes are devoted to the playing of the game itself.

You could easily fill half of the non-general credits with topics like strategy, history of the game, general game theory, etc.
I would similarly commend you for the awareness and bravery to step down, but I would offer two notes here:

> In no way am I a great CTO

> I am not a good manager

It sounds to me like one core thing you learned is that good developer != good manager != good CTO. With that said, all three skills are different, but improved in the same way. Practice and with focused attention. It sounds to me like you were still focused on development and never really gave yourself a chance to develop those management and CTO skills.

It may still be the right call to step down, but I would at least consider trying to shift your focus to the other skills instead of development, if a leadership role is of any interest to you long term. You could also step down to a manager role so you can focus on one of the two at a time. If the learning here is that you actually don't want to focus on those skills over development, then nevermind this for the most part :)
When the idea was to turn relatively expensive electricity into hydrogen to replace gasoline, then it made sense to make the electrolyzers as efficient as practical, even if that made them more expensive.

But using curtailed intermittent power is different: here, the electricity is cheap, and capital cost of the electrolyzer becomes more important than efficiency. Under these different design tradeoffs, one might use a different technology (alkaline electrolyzers without platinium group catalysts, say, rather than PEM cells with expensive Nafion membranes and platinum.)

I have seen claims that alkaline electrolyzers are available for < $200/kW in China.
If we count all the lives saved by extra organs donated, maybe?
I am so sick of hearing about vaccines. It has been two years. If this shit actually worked well as intended, covid19 would be gone by now.

Instead it is constant moving goalposts and secondary results.

It prevents deaths? We are doing 1000+ deaths a day in the USA. It is a joke.
Yes, I use Raylib for toy games, and for toy apps. Raygui, the Raylib gui library, is an immediate-mode-gui. It doesn't seem to hog any resources for the frame updates, but I lower it for apps where I don't need very high refresh rates on state changes such as moving stuff around or changing an input in a dialog or text box. I've been playing with immediate-mode-guis for years (nuklear, imgui, etc.), so I wasn't sure what was novel about this. There are tricks to store scenegraphs and only update what changes, which pushes you away from true immediate mode anyway. I am more curious about how you render fonts at scale. Do they implement sub-pixel rendering or SDFs to achieve variable resolution clarity?
The Real EPCOT: Walt Disney's plan to build a real city at his Florida park
Some good advice here. One thing you may want to consider is that CTO of $x MM company and CTO of $100x MM company are two completely different roles. As different as engineer vs manager.

If you haven't actively adapted over the last 8 years, this may just be the result of being in a job you don't like. Whereas regular-exec work might be a lot of management, architecture decisions, etc., high-level-exec work is more pure politics, storytelling, and resource allocation.

There's a reason a lot of startups replace their sr execs every 10x-100x growth period or so.
Destruction Is Still Mutually Assured
That's not boolean: vaccinated individuals transmit _less_ than the unvaccinated. It's not as good as we'd like but it's better than doing nothing and given how quick, easy, and cheap vaccines are it's like mandating seatbelt usage even if you know that some people will still be injured.
I'm reminded instead of the supply chain issue our economy has gotten itself into. As more people pile on AWS it becomes the weak link....

Maybe we need more baskets to distribute our eggs amongst?
Status page looks like it was updated. Seems more like we have a lot of impatience on this board.
The logic of "I'll make sure my minor child doesn't have sex with the threat of an untreatable STD and substantially higher lifetime risk of cancer" is so incredibly insane to me
I have a hard time empathizing on any level.

Seems akin to "I'm going to forbid my child from wearing a seatbelt to ensure they pay attention while they drive."
Tangentially related: If you enjoy this sort of idea in fiction-form, I can't recommend Josiah Bancroft's The Tower of Babel series (beginning with Senlin Ascends) enough.
Not this year, I've seen lots of laptops coming out starting at 32GB at reasonable prices, pretty sure your 99% is more like 80-90%
I don't have to trust public health agencies. I can go look up the numbers in my local hospital or ask family members who work there. >90% of ICU cases and deaths are unvaccinated. Hand wavy arguments about "the data is bad!" from a non-peer reviewed paper with 0 citations does not convince me that you're arguing in good faith.
> Everyone wants the job, and there's only one of them to go around.

no, everyone does not want that job. People who do want that job reduce the equation that way, though
I’m not arguing against autopilot. But it’s level 2. You still have to monitor it. I find the Mercedes system interesting because it’s level 3, even if only in limited circumstances.

Also level 2 charging? Preach. Public charging (except at like hotels) seems like it should be minimum 50kw.
Fluent-bit/fluentd are written in C and ruby :)
I'm actually in political communications; I leaned heavily into the rise of identity politics. (I'm a gay disabled female. Not great in early 00s tech, especially as a teenaged girl, but VERY good in certain spaces). I do tech stuff for non-techies, and it works pretty well, especially as there's more crossover between politics and tech. (I had to explain rms to a bunch of policy wonks the other day, that was weird).

I just missed talking about tech and was sick of getting blank looks when I rambled about how Page Rank is a mistake.

Oh, and regarding HN, I've been here on and off lurking since it was founded in 2005, I just thought I was too stupid to contribute. Now I'm old, jaded, and realize we're all stupid.
I emphatically reject the idea that having an imperfect null is worse than no null at all, but I understand frustrated programmers may have different beliefs.
Why would you do that? That sounds like a terrible idea, and a bad way to spend your limited development resources
Unfortunately, it is also at times oversold and this will do a lot of damage. Vaccines are regularly hyped as miracle medication which in turn causes people to stop following lots of other common sense rules, rather than as one arrow in a whole quiver of tools.
Hi, I'm Michael Altfield (Founder of the BusKill project). I'll take that bet because I'm pretty sure <99% of people will ever enable the self-destruct triggers :)

BusKill does not ship with destructive triggers. The current app is limited to locking your screen. Future releases will include soft/hard shutdown.

We do have a "LUKS Header Shredder" trigger (which we call self-destruct as it renders all the data on the FDE disk useless), but we (intentionally) don't include it by default and raise the barrier of entry because of the risk of data loss.

We'll be publishing a more detailed write-up on the LUKS Header Shredder in 2 weeks. You can subscribe for updates on our website (buskill.in) or the campaign directly (crowdsupply.com)

Also, while I recognize there are limits in PGP, I encourage it and actively train journalists and activists on how to use it (though I do prefer messaging solutions that make e2ee required and use PFS like Signal, Threema, Wire, etc).
The most impressive thing to me is toilets. Just click a button and your waste disappears. Don't know where it goes or how it gets there and pay almost nothing for the privilege.

Toilets are amazing and I feel privileged every time I use one. Girlfriend thinks I'm nuts.
Even as a software engineer, I think I could build from primitive materials a couple of battery operated transceivers to replace the signal flags or horsemen for critical communications. A little basic physics and materials science goes a long way.
>"Imagine if you could sue software vendors for lost revenue due to bugs"

It does happen when software is made under specific contract. You do pay an exorbitant price for such software though.

For generic software - this is the dumbest idea I've ever heard. Go sue your politicians instead. I am pretty sure you'd find enough cases of lost revenue / income coming as the results of their actions.
>Well you installed an always on microphone in your house, attached to a processing unit connected to internet all the time.

How is it different from a smartphone or notebook?
This page suggests otherwise (although the effect is slight): https://www.zippia.com/software-engineer-jobs/demographics/ Do you have other data?
I don't really understand this type of criticism. People complained that Go didn't have generics, and now that they've delivered, people still want to complain for some reason.

I can quite believe that the Go team wanted to be sure that the approach made sense for Go, that it was the right solution to the right problem and to keep to their backward compatibility promise. Experience is a good teacher. I really don't know why it matters in the slightest that they didn't arrive at that on day one.
> Cults are central to culture, it's true but we can still show a lot of conflicts around ethnic, cultural lines that seem to lack a religiously motivated dimension.

Existence of problematic non-religious frameworks doesn't negate the wrongness/harmful of religion.

Both religious and non-religious memes can be bad at the same time.

> I think this line of argumentation should be retired - it's just not robust. It is an attempt to gain the moral high ground by secularists...

Even if you dismiss thousands of years of wasted effort and active harm there is the ongoing harm and waste still happening. This isn't harmless LARPing. People are being shamed, ostracized, and even killed in 2021 over these--at best unprovable--beliefs. Religion also encourages lazy thinking with appeals to authority, confirmation bias, and often faith over evidence.
> Your original work uses the licensed track

Using samples for percussion doesn’t mean sampling other commercial tracks, nor does it mean you’re using loops.

> Your work is similar to their work.
>
> If they were first they have a plausible copyright claim against you.
>
> Unless the license was copyleft. Which is a motivation for copyleft.
>
> The license to a drum track only protects from claims from the rightsholder of the drum track.

This is 100% incorrect. There is nothing here that matches reality of copyright.

The owner of the original recording that was sample owns the copyright but can license to others without losing it.

If you have a legitimate license and the licenser is the legitimate copyright owner, you are in the clear.

One person using it doesn’t make them the owner.

The copyleft advice is also completely wrong. Copyleft in the context of music is untested in courts and wouldn’t make a iota of difference here.