skysight-inc/HackerNews huggingface dataset:
I assume it's a reference to the Great Filter: https://en.wikipedia.org/wiki/Great_Filter

The rough idea is that the galaxy seeming insanely quiet could potentially imply that it's rare for life to reach a level which we can easily detect; space-faring, multi-planetary, capable of astro-engineering, etc.

If that is the case, it might be that there is a "Great Filter" which tends to knock these civilizations back into their stone age, or kill them outright. Maybe it's nuclear weapons, or grey goo, or biological experiments that break containment, or an AI that decides to kill its makers, or even just conventional wars that stunt their growth, etc. Generally, some kind of technological development or societal event that leads to that civilization going/staying dark to the galaxy.

The potentially worrying question is: have we passed the Great Filter? Or is it still somewhere in our future? There are any number of things that might kill or stunt humanity in its crib, before we spread out far enough to be able to persist.

And even then, how long is it going to be before a nuclear holocaust on Earth would no longer effectively cripple humanity, even if we've colonized the solar system and could nominally survive it? Or imagine AI-infused grey goo that spreads throughout the solar system.

There may also be more than one Great Filter.
Pretend for a moment that someone not connected with China in any way could be critical of the US and its role as the last super power. I know that might be difficult task, but try your best. or not, i don't care.
Is there any other chat app that does this? Or want other app? Would be interested to see a PoC and experience how this feels.
The last part of your story really resonated with me. Zero worries, pleasant job, and dealing with just the parts of a company that you're interested in (e.g. not having to worry about sales, marketing, or payroll on your own).

Great job!
Exactly.

The whole point is to send the BTC directly to the wallet address you completely own. Not to be sent directly to a centralized exchange, or directly sending the whole 1 M USD fiat to the bank account.

Once the BTC is in your own wallet, THEN you can send parts of it (either in BTC or USD stablecoin) to the exchange to then get it in USD.

Even so, it still has to be declared, otherwise it can be seized. This crypto whale seems to have handled this without knowing the bank account deposit limits in this persons account. No wonder it triggered the AML systems and the authorities froze the account.
Hasn't a democratic government promoting democratic principles not done more than enough damage to sovereign states' autonomy in past decades?
I'm still happy we are seeing a overreaction rather than a underreaction with new variants.

Imagine a variant that spreads as fast as Omicron, but is more lethal than Delta.

With a underreaction we'd be back to January 2020. We clearly aren't out of the danger zone yet.
The study is a case of deception research. Deception research is a type of research in which the researchers are lying to / hiding information from their subjects - the mails purported to come from individual citizens, and did not mention that this was an academic study.

Other fields (e.g., psychology) have long since recognised inherent problems with the ethical aspects of deception research (in a very tiny nutshell: you harm your subjects' agency). Therefore, guidelines and protocols have been established (e.g., by the APA).

Roughly, those boil down to:

- don't do deception research unless no alternative method exists AND the outcome will have significant value

- inform the participants as soon as possible about the deception.

In this case, both IRB and researchers failed to recognise this as deception research. That is in itself a serious issue.
Yeast needs oxygen to grow, but not for fermentation. I'm not actually a yeast doctor. Good luck with your breadstick.
Typical communist inefficiency
...and then compile it.

This site provides binaries.
Logback RCE Vulnerability
Starting an useless thread also did not help.

Enjoy the season festivities.
I meet in person people I care about, and talk to them. We exchange our recent life experiences, or not, depending on context. I don't care what people I don't care about do.

For documenting my experiences, I have photo album on my phone. Can show it to someone physically, or send pictures on Whatsapp for example.

Works for me, anyway.
It would, which is why the Go compiler and linker do not put the build time in binaries.
>It didn't really get shut down in 2011. It got removed from the power grid. So, Isar 1 continued to produce power, which was then promptly discharged into the environment as heat.

Wow. Idiocracy vibes.
I think per capita numbers are more interesting than absolute numbers, and I'd expect that automation will improve that in the coming decades more than in the last couple of decades.
Just got back from my annual trip to the city. Paid $20 to park my car. Not eager to go back.
This looks incredible. I'm on my phone so I haven't tried this, but it looks like this supports slicing into MP3 bitstreams? That would have saved me a month of research and tons of development back in 2013.
Lilium and other electric vtol would benefit greatly in my eyes from a cable assisted starting. Just have 500 m of powercord on take-off and once you are over that initial peak you just drop the cable. Not as sci-fi, but alot of kilometers in ex-change.
I feel like having automated testing though is objectively beneficial. I imagine SO make up for that by having a QA team and spend a heap of time manually testing stuff at the expense of “performance”.
Yeah this is my concern with every having to file bankruptcy. I can live without credit, loans, etc. I cannot live without a place to live.
This already happened in Belgium. When you look at the mortality rate per age group at https://statbel.fgov.be/en/about-statbel/what-we-do/visualis... , with age 85+, you can see the big spike in 2020, and in 2021 a big decrease compared to the 4 previous years.

Less so with age group 75-84, but still visible.
Never even heard of SHEIN before yesterday, when I happend to come a cross a well-researched video that uncovered how SHEIN exploits workers in chinese sewing sweat shops, and how most of their designs are stolen from small western fashion creatives.
Thanks, you're right that they certainly are the vendor of their own vulnerable Java-based products.

AFAIK when the bug became popular on Dec 9, there are still many Java-based services running by Alibaba Cloud remain unfixed, and it caused chaos and panic among their "SRE"s.

However reading the regulation text again, now I'm not sure in this case what Alibaba should report:

> （二）应当在2日内向工业和信息化部网络安全威胁和漏洞信息共享平台报送相关漏洞信息。报送内容应当包括存在网络产品安全漏洞的产品名称、型号、版本以及漏洞的技术特点、危害和影响范围等。

It said they should report "the name, type and version of the product with the vulnerability, the 'technical characteristics' of the vulnerability and the impact". Does this mean, Alibaba should report, for example:

"Alibaba Cloud hosted Apache Flink stream computing service (whatever brand name they use) contains a pre-auth critical RCE vulnerability due to insecure processing of user input in version a.b.c till x.y.z"?

I'm not seeing how could the government know what the bug really is if "the product" means Alibaba Cloud's own product.
> Avoiding thundering herd on reconnect is a very explored problem and wasn't too bad.

Can you please share approaches to mitigate this issue?
I love Fabien Sanglard's work. I've read through his books on Doom and Wolfenstein and never would've imagined he'd start looking at sprites for Street Fighter II.

This is really great stuff and I think important as "developer archaeology". The 80s and 90s don't seem that long ago (to those of us who were around), but it's easy to forget people back then didn't have the sophisticated tools we have today. That said, people did have tools, so it's awesome to be able to get a glimpse into the workflow of folks back then.
In the case of workplace conditions and such, sure. But there's a huge issue of moral hazard when it comes to unions lobbying or influencing public policy more generally for their own benefit, for example with prison guard unions opposing the legalization of marijuana. Locking people in cages for the sale of a relatively harmless plant might benefit the prison guards, but that benefit is vastly outweighed by the harm to society.
This is not a mere leak from some government office, but also includes a lot of "notes" by local Socialist Party staff that are assigned to "watch over" a small section of their local population, such as an apartment block or similar. The database contains details such as did this person vote for the Socialist Party, what kind of leverage do they have on him (govt jobs, business licenses, jobs of parents or kids), are they part of the diaspora, do they have foreign income, etc. There was a huge scandal about it a year or two ago, called the "patronazhist" scandal. You can read more here:

https://balkaninsight.com/2021/04/16/albania-prosecutors-inv...

The big issue is how the Socialist Party essentially organized the whole collection of this data neighborhood by neighborhood in a hierarchical fashion, it's very similar to a mafia franchise. A neighborhood party member reports to the larger district, who reports to the city official, who reports higher up all the way to the Prime Minister.
Logback had a log4j2-like vulnerability, though by not allowing recursive parameter substitution it seems exploitable only of you can modify the logging configuration.

PSA: I got alerted by the nightly build for some projects failing, thanks to the maven plugin org.owasp:dependency-check-maven that checks your dependency tree for CVEs. I had just added it after the log4j2 mess, seems like it was a good idea! Can't believe I went years without such a safeguard.
Glide for 3Dfx cards maybe? https://en.wikipedia.org/wiki/Glide_(API)
I can second this, I love being able to answer quickly from my mobile (I type [actually swipe] faster on mobile). It's also amazing how the push notifications clear when read somewhere else, this is not to taken for granted, it's not implemented on most other chat apps and it's a huge advantage of Element imho, sometimes it's buggy¹ but it's easy better than not having it and only Telegram is better in this regard from my experience.

1. https://github.com/vector-im/element-android/issues/4147 and also some other
> But it’s no silver bullet: your software is not going to crash and burn if you don’t write your tests first, and the presence of tests alone does not mean you won’t have maintainability issues.

> It was not our priority early on. Now that we have had a product up and running successfully for many years, it’s time to pay more attention to it.

This is a hard earned lesson but one that is firmly rooted in the reality of the industry IMO.

I’ve had the good fortune of working on a few greenfield products and bringing them to market. Time and time again I see technical and executive leadership steer teams in this direction. The fact is that writing good tests is hard and expensive. And most new software products survive less than a handful of years.

Accepting this reality will help ease the pain of working on that spaghetti codebase at your day job. At least it did for me.

Good on stackoverflow for paying back some tech debt in their successful product. I certainly appreciate the tradeoffs that come with building a business, but they can be difficult to swallow for engineers who take pride in producing high quality and well tested code.
This is a really great writeup. Whenever I try to draw diagrams using software tools, I always run into stuff like this and am disappointed with the tool's ability to help me out.

I've actually taken up hand-drawing diagrams lately and it's worked well. I get a lot of comments at work - "haha wow nice art!" (sarcasm) followed by "actually this is really easy to follow". I feel like it's both faster to draw and a more accurate representation of my mental model when I draw by hand.

But hey, if the diagramming tools were smart like in this post, maybe I'd go back to the tools for awhile ;)
The article this thread links to mentions CCP in the title.
Has anyone actually really noticed the performance of Stack Overflow? It feels like your average website before the JS bloat took over most “forum” style sites.
I wonder if they’ve traded off performance (and by the sounds of it, maintainability) with cost by squeezing all they can out of a minimal amount of hardware.
Are we really trying to compare the two, when China is currently carrying out a genocide in Xinjiang and is actively trying to land-grab Taiwan?

I personally don’t think what-aboutism is particularly helpful in the context of discussions around the risk China faces to worldwide stability.
Beyond RISC – The Post-RISC Architecture (1996)
> Researchers don't have to indicate they are doing an academic study.

Actually, they do. Otherwise it's called deception research , which falls under very specific guidelines.

In general, study participants should be treated decently. Deception research robs them of fully informed consent to participate in the study and is therefore by nature intently ethically over an edge. In specific cases, the benefit of the study's outcomes may offset the harm to its participants. Even then, that harm must be minimised.
Whoops. Well then sounds great.
Of course it makes zero sense, same with COVID vaccinations.
I could be mistaken, if it was SF II or some other similar game, but for PC (back in the DOS game, the sprites for these were not stored rectangular (with transparency) but rather a run-length of here is a line of pixels that starts from here to here. Hence your code can just "movsb" instead of checking (expensive) for transparency).

... Could've been another game, but it was fun trying to decode the images :)

(I think it also makes pixel to pixel collision easier to tackle, but don't remember the details - this might've been Star Control II thing, another game we used (as kids) to decode images/mods)
WASM-4 Game Jam
Other than ChromeOS and WSL, hardly any distribution is Wayland only, so one can't really blame the Java community to focus improving Swing on Wayland, specially with other more relevant areas still in need.

If anything the whole GNU/Linux ecosystem is too slow adopting Wayland.
> It’s sprung when you’ve lost your job, are vulnerable and are about to become homeless.

I mean, I think you can call this a trap, or you can call it a life raft. If you take away the option of debt, the option that remains is homelessness. I'm not really sure its fair to call that a trap.

If there is a trap there, it's the fact that the person was in a position to become homeless in the first place. Not that some lender offered them a temporary respite.
The problem with vertical videos isn't the screen. The problem with vertical videos is our vision - our eyes are not stacked vertically.
It has had such a cultural impact to those of us who grew up with it. I was a teenager when SFII came out and have very fond memories of playing it at arcades and convenience stores with friends. I started learning how to code back then and a lot of my early code was attempts at making a Street Fighter game. (They were usually just attempts at recreating the art and animation in QBasic.)
Supported formats:

https://github.com/wader/fq/blob/master/doc/formats.md

They should probably make this a bit more prominent. It's an impressive list for a new project.
For me, keeping the light in the oven on keeps it bit warm.
I haven't measured the temperature though. YMMV.
This is impressively unhinged.

None of that guy's posts are
unusual for anyone to the left of the Democratic Party, and the 'corps/corpse' pun makes perfect sense in a context that involves the name 'Doomscroll'.

Idk if you just don't know any leftists IRL or what. The way the press and the political establishment are doing their damnedest to gear the American public up for a new cold war against our biggest trade partner (lolwut??) strikes many real people as irksome, worrying, and ridiculous. Even more libertarian leftists, who are loudly and frequently (and often correctly) critical of China (and usually muddled when it comes to anti-imperialism, besides), can smell bullshit when they read a bunch of stories about 'social credit' which turn out to be mostly hot air, or they watch two presidential candidates derail debates on a national stage just for detours where they take turns of accusing each other of being the one who is really soft on China.

This reminds me of the last presidential primary, when some boomer libs on Facebook would manically accuse anyone who criticized Biden too harshly of being a Russian agent.

Sorry dude, not everyone who disagrees with you is a bot or a foreign agent.
Or come up with a solution that doesn't result in thousands of dollars of debts after graduation. Something like tuition free universities...
Kinda ironic given that the NYT used to sell ads for CCP propaganda: https://www.bizpacreview.com/2020/08/07/new-york-times-discr...
While complex, greying hair seems like a finite and solvable problem given enough time. Build a large enough genome database, exhaustive studies for hormone balances, and do the science…it feels “treatable”.

Where as wholesale aging and solving for aging in general will be a totally other monster that never gets fully solved just partially treated. Extensions of healthy life and total lifetime seem fairly likely while “Freezing” aging is likely impossible.

Interesting that corticosteroids had that effect, as well as all of the other methodologies.

Feels like an underexplored avenue for comprehensive studies/research
I wonder, is good old SWI-Prolog adequate to run the examples in this book, or must readers use a "modern" Prolog implemented in Rust?
To be fair... CERT has affiliations with the US government.

https://en.wikipedia.org/wiki/CERT_Coordination_Center

> The CERT Coordination Center (CERT/CC) is the coordination center of the computer emergency response team (CERT) for the Software Engineering Institute (SEI), a non-profit United States federally funded research and development center.
>> Revisionist interpretations of American civil rights law and progress.

> this doesn't sound like teaching objective historical facts.

A revisionist means "examining and trying to change existing beliefs about how events happened or what their importance or meaning is"

I.e. we've understood the facts incorrectly, let's take another look to try to understand them correctly. This is literally what people who study history do every day. I read a great blog recently dispelling myths about what medieval life was like. Definitely revisionist, super interesting.
hospitals werent overwhelmed in New York, we didnt even use the hospital ship. Also the primary reason our numbers were high was because of the errors of putting sick people in senior homes.

It wasn't a cakewalk but it was nowhere the nightmares of many other places.
What is "quantum communication"?

So far the only quantum communication we've done over distance is via photons, which are still photons.
>Two orderly successions with no political executions isn’t a particularly high bar…

disagree. Mao started the culture revolution because he was ousted and succeed in taking back the powers. its a high bar that all leaders after Mao didn't try another culture revolution.
"Knowing," "intended [at the time]", "would end up being shut down by regulators" are all your embellishments. The claim is "YC funded a payday lender that targeted active duty military service members." As far as I can tell, that is true, regardless of how pure anyone's intentions were at the time. The defense on offer is that the founders left the company between funding and now, but it is not very compelling given the timelines.
Hong Kong University Pulls Down Monument to Tiananmen Massacre Victims
See my sibling comment, if "the product" != log4j, Alibaba is then not required to report that log4j had a vulnerability.

Do you mean by redistributing log4j they became a "network product provider" of log4j?
Perhaps you were thinking of SFIBM/SF2IBM, aka SFLIU [1], a homebrew version of SF2 for PCs written by a Korean dev. There were specs of the file formats used out on the internet at the time and I remember the image files were stored as run-length encoding.

[1] http://cwcyrix.nsupdate.info/archives/SFLIU/sfliu.html
To reduce the problem of updating the software you can bring up a second sender and make all new connections point to that one, but don't close the old ones.

If your user sessions are less than the time between deployments, then you won't close any connections
Before anyone wants to criticize Stack Overflow, consider their server footprints as of 2016 [1]:

4 Microsoft SQL Servers (new hardware for 2 of them)
11 IIS Web Servers (new hardware)
2 Redis Servers (new hardware)
3 Tag Engine servers (new hardware for 2 of the 3)
3 Elasticsearch servers (same)
4 HAProxy Load Balancers (added 2 to support CloudFlare)
2 Networks (each a Nexus 5596 Core + 2232TM Fabric Extenders, upgraded to 10Gbps everywhere)
2 Fortinet 800C Firewalls (replaced Cisco 5525-X ASAs)
2 Cisco ASR-1001 Routers (replaced Cisco 3945 Routers)
2 Cisco ASR-1001-x Routers (new!)

Assuming they aren't lying, this is the entire list of machines needed for a site used by the world's developers. That's no small feat. Many companies whose developers blog about their "best practices" would struggle to achieve 1/10th as much efficiency.

[1] https://nickcraver.com/blog/2016/02/17/stack-overflow-the-ar...
The problem, not unique to fast fashion, is we've structured things such that recycling is rarely economical. That shouldn't be the case, our damage to ecosystems means prices are not properly accounting for the cost of negative externalities.

Whether in inputs (unethical labor practices, questionable material composition, hazardous inputs handling, manipulative marketing tactics and artificial scarcity) or in outputs (planned obsolescence, unsustainable consumption, disposal, discounting full product life-cycle), socio+ecological costs are ignored to maximize profits while keeping prices fairly low.

It's good to democratize access to more and fancier options but if this comes by cheating and a dishonest accounting of costs, it's not worth it (full cost accounting will be better in the long run, having to account for product full life cycle might spur investment and innovations in say, mechanical disposal automation or plasma arc gasification).
Then after a few months your Chinese business partner gets a bit too envious and denounce you to the police for "spying" or "fraud". Of course being not Chinese you basically have no rights and you get exit banned or disappeared while your partner takes over everything your owned.

That happened to a lot of people.
"The woods." We must continue using the phrase "out of the woods."
> I’ve just looked at the internet archive and it shows rates of up to 1825% APR. These loans are definitely predatory and so could have been done directly from the capital. Not surprised they got shut down, similar companies operating in the UK got shut down years ago and pretty much everyone is better off for it. It’s a hugely predatory industry.

It is a hugely predatory industry that ought to be shut down. Unfortunately the "payday loan" industry is still 100% legal here in the USA :( It looks like LendUp got shut down for the misleading marketing about their evil lending practices, and not the fact that it was evil in the first place.
Except for interoperability with existing systems, is there any reason why anyone would use this ASN.1 protocol/format?

What's it good for?
Back in 2005 Ebay was served using single executable binary that had around 100MB. At some point they hit maximal number of functions allowed by compiler.
Back than the best "practice" for large scale services was enterprise Java on VERY expensive Sun server.