skysight-inc/HackerNews huggingface dataset:
> So let me get this straight: companies are offering a recreational product, games, on terms you don't like. But instead of not paying them money, so they will be forced to either change their business model or go out of business, you want to get the government involved? For games?

No, for digital rights, not necessarily only games. Also, games cost money, money is my time on Earth being converted into cash through my labour, I deserve to have my only real resource (time) protected from being taken from me due to shitty business practices. A ToS/ToU/T&C isn't a higher law than national laws just because I clicked "I accept" and I hope that my government will get involved to protect me from more powerful entities than a single individual can take on, doesn't matter if it's games or any other digital goods, it costs money, I get protections.

Or you can live in this cyberpunk-ish hellhole where corporations can dictate what is legal or not and your only power is to choose to not buy from them, I much prefer my government and the society that supports it to be dictate what these corporations can do rather than the goodwill of a for-profit corporation.

It's all checks and balances, goodwill isn't really compatible with the morality of chasing profits so we need something else to imbue morality in this system (aka, a government), you liking it or not.
Arthur Clarke apparently had some beef with Christianity all his writing life, but sometimes he went as bitter as this.
The good faith assumption that the other party is trustworthy (within reason) does not exist on the street. This is why driving is regulated, and most places in the world demand driving licenses, the car to be insured and the owner to be ultimately liable for the car. Chainsaws are rarely regulated, not registered and the even of serial murderers using it is considered rare. Do note however, that some legislations might have the owner on the hook for negligence if they didn't exert reasonable efforts to hide away dangerous machines and substances.
> It seems almost impossible to say if log4shell was bigger or more costly than Heartbleed or the Debian OpenSSL bug (there are probably still keys out there made with the damaged randomness). Log4shell is just in recent memory.

Seems pretty clear to me - Heartbleed (and all the other serious memory exploits) required a great deal of skill and a lot of luck to exploit, and in return you either don't get a remote execution, or you get a very tiny chance of a remote execution.

In comparison, log4j is about as easy to exploit into an RCE as it is to use curl.

Log4j is a guaranteed remote-execution exploit just by filling in a user facing form with the correct URL, while memory exploits are not guaranteed to result in an RCE, requires more skill than simply typing into an input box or an email.
At a previous employer, as soon as I finished a task, my manager would go on assigning me cumulatively more work than what I was supposed to do. Not surprisingly, they could easily sense my reluctance to take any more of it, so they would try to sweet-talk me into doing it, say, "You always do a good job!" and the like. Most of the time I didn't know how to respond to such wily tactics, which I would describe as quite insincere and exploitative.
Do people just say “late stage capitalism” to things they don’t understand?

To services that aren’t based on the trade or value of physical assets?

To models they didnt see when they were reading case studies during their MBA?
It could have been 1 kilobyte, but after numerous decisions to track everything to the Nth degree, the account was closer to 400 petabytes.

</sarcasm>

When I contracting at a large tech company, so had to implement a service that would delete any personally identifying information from the database for users that had been inactive for more than 18 months. Essentially this meant dynamically scanning the entire database schema for any columns that had a user ID and deleting any matching records. It was kind of a fun project.
What conclusions were you able to come to from this data? What was the cause of your headaches and sore eyes etc?
This is true. Omicron is milder than the flu
No, with RAII you still need to design your program around who owns each object, and thus who should clean it up. You end up with borrowing, move semantics and others. With (Tracing/Copying) Garbage Collection, none of this exists.

Not to mention, Copying GC also solves memory fragmentation, which C++ still suffers from unless you also design your allocations carefully around sizes of types.
> No, they don't.

> Ifbyou want control over who can move in somewhere, or what can be built somewhere, you have a simple solution, buy the land in question.

That seems contradictory. The existing owners did by definition buy that land they own. So you're saying thus they get to decide, but also that no they don't.
Ok. So you're positing that a giant heavy runtime, written in C++, via a library, can then run C++ code faster than...C++? Good luck.
I have a self-sharpening stainless steel kitchen knife made in Czechoslovakia with waved edge. It never sharpened, but it still works just fine for everyday kitchen needs, except for peeling (I have a ceramic peeler for that), because of the waved edge. However, I have no idea where to buy a second one. «Bread knifes» with roughly similar edge are large, thick, and non-flexible.
Yes! Thanks for the insight about the virtual DOM. I'm definitely not saying the virtual DOM is bad, or that JS is bad. But like you said, people are starting to mix pages and apps, thus also mixing the complexity requirements of each one. Luckily, it seems server-side rendering is coming back, even in React.
So you've flipped from bad-faith speculation about my intent to, "I believe you’re probably well-intentioned", and from "I believe you’re using discredited research" to, "my issue isn’t with the science," without addressing any of the studies I linked or the consensus they represent. And now you're gaslighting about the post-George Floyd nationwide pullpack in policing:

>but how can you list so many studies and still assert something widely untrue like the “de-policed minority communities”

To illustrate how wrong you are with just a few examples:

* Portland abolished their gun violence unit in 2020 in response to the George Floyd protests. Gun homicides have soared as a result to their highest level in 30 years, mostly in minority communities [0].

* While violent crime soared in Chicago last year, also chiefly in minority communities, arrest rates for violent crime fell. The UChicago crime lab attributes this in part to a "pulling back of proactive policing" [1].

* "In a reversal of plans to divert funding from police to social services, Oakland Mayor Libby Schaaf said Monday that she'll push to reverse planned cuts to the city's police department and seek to quickly hire more officers amid a spike in violence and homicides that has left some residents afraid to leave their homes" [2].

>Maybe you could even make some money and write for them; https://prowhiteparty.wordpress.com/2020/12/17/black-people-...

I'm not interested in race chauvanism, race-based nationalism, or racist politics generally. I support colorblind policy with class-based affirmative action, and the vigorous enforcement of laws against racial discrimination.

>I'm not interested in engaging with you further.

Good, I'm done responding to your repeated falsehoods and bad-faith accusations. Thanks for revealing your true nature to the reader.

[0] https://www.oregonlive.com/crime/2021/10/under-the-gun-who-h...

[1] https://news.yahoo.com/chicago-violent-crime-arrests-down-12...

[2] https://abcnews.go.com/US/wireStory/oakland-mayor-seeks-reve...
You would download the game from the same place you’d get updates if you bought a physical copy off a friend. The purpose isn’t decentralized downloads. It’s retaining the ability to virtually press the eject button and put the disc in a different console.
Wait until you see how bad the pertussis vaccine is at protecting against whooping cough!

Are you up to date on your boosters for DPT? I don't know anyone who has maintained that.
Why don’t we have biodegradable chips?
NetBox[0] is a large project that does this.

https://github.com/netbox-community/netbox
You can only be offline for a set amount of time with Steam (last I used it), and the check is made before you go offline.
Bullshit indeed, but for your disagreement. Just a brief look at the general opinion regarding cryptocurrencies, bitcoin and a number of other positions clearly shows a certain hive mind tendency. It's not complete and there are indeed many dissenting voices with their own nuanced opinions, but the downvote and upvote system is also present to further encourage groupthink positions.
I could not live without a log file.

You should create a log file (text file is fine), where you write as much as possible about the program flow: user logged in, user navigates ..., request started, query submitted with parameters, query responded with 1100 records, result processed, result formatted, result delivered, finished request.

The log should be appropriately detailed.

Correlate the log entries with the user ID, session ID, request ID, thread ID, etc, whatever appropriate.

Timestamp the log entries with millisecond times (2021-12-27 14:21:33.512)

Watch and observe the request flows over period of days.

Perhaps you will see where the problems are.

1) Too many records fetched from DB.

2) Too slow DB fetch (missing indexes)

3) Cold DB caches

4) Some exponential loops

Instead of text file, you can use a structured log, but a simple text file will quickly give you results.
I don't use DDG because it just uses Yahoo under the hood. I tried to find a link but seems to be deleted by a DDG bot on redit and the page on their own site declaring the news has been overwritten. It's just Yahoo in a trenchcoat targeting the #1 concern with Google with some new marketing slogans.
That doesn't make sense to me. The iPhone comes with a web browser. If a user wants milfs and butts they can put that in the address bar.
You mean like Europe and much of the rest of the world? "Freedom" or something?
Sorry if that came across as an endorsement. I'd go with the nordic modules instead because the documentation and support will be much better. The development costs of weird, cheap wireless chips isn't worth chasing marginal BOM optimizations. Just don't go to the other extreme and spend $40 on an Intel SoC for your wireless thermometer like I've seen others do.

I haven't worked with CSR modules since I left that job around 2017, but the latest vendor toolchains for some chips were still on GCC 3 (~2005) at that time. We were taking bare reels and doing certification ourselves if it matters though.
True, in fact I think a lot of those ideas are not even remotely new. For example, in shogi (Japanese chess), stalemate is a loss for the stalemated side (because that side can't make progress), and three-fold repetition is a loss for the side giving checks (because that side chose not to make progress).

I remember the Kramnik-DeepMind collaboration studied the stalemate=win variant, I don't remember what the results were.

What would be the wisdom of Black winning stalemates, though?
The expression turnaround effect is way faster and creative tools more accessible than other popular platforms. It practically weaponized the reaction video.

Speaking of one subcommunity of adults on TikTok, I've never seen a better anti-cult tech tool. You can show a respected cult leader speaking and give the Larry David "eh" shakey hand and just destroy the impact of the cult's carefully-prepared video. So a lot of orthodox actually stick around and are welcomed to consider some really interesting counter-cult thoughts and responses. You can tell they're watching when publishers share the comments they get. Well, and also when cult leaders frantically encourage people to get knowledge from approved sources...

The overall presentation effect is nearer to realtime compared to traditional video platforms, so TikTokers can react to things faster while _also_ giving it a little more thought and creativity than the average streamer. You get the sensory effect of quick, easy to consume video plus the de facto emphasis on creative scripting and editing that puts just enough care into the approach.

(At the same time it's Tencent, so anytime I see a video of PRC women shocked at the US homeless population I'm reminded of the very real possibility that it's been amplified via state input.)
...why are you even talking to some stranger here then, is it worth enough to risk being exploited with a RCE 0day

Like, uh, just define a clear threat model, accept risks, and move on??? Or just don't use computers
> Sometimes it happens that if you donate clothes to some African communities, corruption will take over and your donation will not reach the hands of those in most need. The clothes will instead be sold into the illegal markets, profitting feudal lords.

I'm led to believe[1][2] outrageous profiteering starts well before such donated assets---which are sold in bales---ever reach the shores of Africa.

What privileged 1st world citizens naively perceive as altruism turns out to be nothing more than a facade for egregious textile dumping with middlemen in transit to squeeze out any remaining residual profit...and it's turtles all the way to the ad hoc environmental disasters this racket has created in already immensely impoverished countries.

[1] https://www.abc.net.au/news/2021-08-12/fast-fashion-turning-...

[2] https://www.youtube.com/watch?v=bB3kuuBPVys
Same thing happened to me after playing for a few days the last time this was posted. I checked the directions several times and agonized over what the word could possibly be. In my opinion the possibility of repeated letters should be called out explicitly in the instructions, and maybe also adding a new color of tile for this scenario.
Tough life right there @abzug. we're here: here's another virtual hug from another country.
I did the same, but with a far less complex system. It's a markdown file synced using iCloud, where input happens using Apple Shortcut. Works quite well. Screenshots here [1].

[1]: https://mobile.twitter.com/giansegato/status/146896340342311...
You practically cannot have the same vulnerability in C, because no one would bother implementing that kind of flexibility in C.
The bus! That sounds like a very interesting project.
As does dynamic linking, which is perfectly equivalent.
I'm going to quote (I think) Jesús Gil [1]: "it's easier to quit jail than poverty"

[1] https://en.m.wikipedia.org/wiki/Jes%C3%BAs_Gil

Completely off topic: It's fun showing to young people YouTube videos of Jesús Gil. That was Spain in the 90's. https://youtu.be/HB7H0a4X-b8
Yes, that is what I mean. I dont think the freedom argument makes sense since you already have to carry your Vax card with ID, so if you're going to be a bit authoritarian why not just do it right?
https://en.m.wikipedia.org/wiki/Carbon_dioxide_in_Earth%27s_...

I like this article, it’s the stuff I really dig into. I like your idea of reading the sources, perhaps I will go to that for this one as Wikipedia has lots of sources at the bottom.

As for why it’s important to go back is because I’m interested in how the previous levels were achieved either the high levels so we can mitigate those natural sources or more relevant to today is how the low levels were achieved. I think the data should go back as far as we know, ideally all the way to the creation of the earth. Or at least the great oxidation event.

My understanding is that the all time global low was achieved by trees ending up in swamps in a high oxygen environment (35%) that essentially caused trees to suck all the CO2 out of the atmosphere.

Like here’s the thing, when we had 800ppm CO2 we had coral reefs in the North Pole (the plates have shifted and those fossils are currently in Alberta).

I think society should be given informed consent, we can eliminate CO2 and have the current climate, or we can go to 800ppm and have coral reefs on North Pole.

Also I think if the public knew it would empower our leaders to go toe to toe with China and India. Like if they don’t want to cut, then we go to 800ppm, call us when it gets too hot / the monsoons too severe and we can talk.

You’re definitely correct regarding consensus, I find it to be an appeal to authority and politicians use it to convey that the science favors a particular policy over another.
I'm confused how this would work. What about METH_VARARGS | METH_KEYWORDS functions? These are declared with type PyObject* f(PyObject*, PyObject*, PyObject*), are cast to PyObject *f(PyObject*, PyObject*) for the PyMethodDef, and then are cast back to their original correct type before being called. Wouldn't your approach generate bad shims for these?
I’ve done something like this in the past with a spreadsheet, but I recently fell out of the habit because of the overhead of taking a few minutes at the end of a long day and opening the spreadsheet up on my laptop. I’d like some kind of cross-platform life logging app that is equally usable for longform entries when I have full access to a good keyboard and quick notes when I just have a phone and a few seconds of time. Some kind of highly customizable rich schema support (long text entries + basic biometrics like self-reported sleep) would be ideal. Any suggestions?
You're being very vague. If the game is centrally located there's absolutely no point of using a distributed ledger to begin with. The same place the game is stored can store your license.
Interesting. Being a portable headset, I assumed the Quest 2 would be rather low-resolution. That is not the case after all. I wonder how often the games it runs actually run at the full resolution.
Do you yearn for explainability due to getting irrelevant search results? Is what you're searching for more specialized than what the public might consider general knowledge?
Impossible is a bit of a joke there considering the instability this country has has had on those timescales. 3 generations ago South Dakota being a state was a novelty.
Do you have any opinion on whether it’s a good example of a modern Python project, as per OP’s request?
Well, as they say: The issue with statistics is that you can never be sure :)

As I am not aware of any existing software to analyze causalities in such an irregular log, I started writing my own this year.

It is an interesting challenge. The approach I currently take is a visual one: I draw a chart on which every notch on the x-axis is a 24-hour interval. And two lines on it. One is the line where I did not do something (say take Vitamin D3) and the other line is where I did do it.

The y-axis is the probability of an effect (say having a headache) in that time interval.

The center of the graph is the 24-hour interval after the treatment. Then the 24-48 hour interval, then the 48-72 hour interval etc. And left to the center is the 24 hour interval before the treatment. Then the 24-48 hour interval etc.

So it would be a "perfect" graph if the two lines look very much the same before the treatment and very much different after the treatment.

Some treatment/effect pairs look promising, but so far, I don't have a result clear enough that I feel confident enough to publish it.
Why does everyone seem so obstinately binary on this topic? They slow the spread. They make you less likely to get infected and to spread it. Few things in medicine are 100%. This is nothing new. And even a small reduction in the ability of a vaccinated person to spread the virus makes a huge difference. In fact, it could likely make enough difference to bring the R0 of COVID below R1.
No, it wouldn’t have, for the simple reason that no one is willing to go to the extra effort to use a capability-safe language, for the same reason we don’t all code in formally-verified languages - it’s just too much work.

The claim in the article could be “The log4j vulnerability could have been prevented by hiring someone to punch any developer who tries to use JNDI in a logging library in the face” and would be equally valid.
>I'd love to hear about other possibilities.

Me too! I've written about this on HN more than once and bore myself with it at this point, but the short version is that I'd like to see more alternative approaches that effectively abstract away Web idioms altogether.

React, etc. code could be compiler output, not the code in which we think or write.
Yeah I would love to be able to buy the best performing Linux laptop as well.

I have been really happy with my ThinkPad carbon x1, but I am getting a little envious now.
The last few paragraphs of the post address your post's alternate history.
But it's reasonable for the same corporations to "update" their Terms and Conditions under your feet while your only recourse against is to completely severe the relationship? Which party has the power in this relationship? Why do you consider the "terms of sale" to be the only important aspect of contract relationships?

Are you also against regulations on food sales? Why can't a corporation just sell whatever bad and spoiled food they have and let customers decide by themselves if they want to be food poisoned or not? We do have rights to protect us, customers, in unbalanced power relationships.

Personal/individual responsibility only goes so far. If you like to be stomped by more powerful entities than you because you don't like governments, good luck. Just remind yourself you have never experienced a world where you don't have safeguards provided by your government to keep your life somewhat safe and somewhat more fair.
Whatever happened to Flickr?
> You should learn what it means to live. It's more than simply "being alive".

This goes full circle to what you were arguing against earlier.

It is indeed true that humans always strive for more than minimal subsistence and this is part of living. Thus it is not illogical to have things which go beyond the bare minimum to survive. They're technically "wants", but that's what it means to live.
LOL, can’t believe people will invest time on this.
> prohibition against non-compete agreements with employees

I've dealt with this recently, although it was in Québec where civil law applies so I don't know if it's the same. Here the case-law limits non-compete agreements to about ~1 year (most likely 6 months), to a specific relevant geographical area (think a county) and to a specific industry and if any of those clauses are not respected than the whole non-compete agreement is invalid. In my case they made the agreement to "companies offering engineering services", which was clearly abusive and thus I could get my new job after lawyers talked.

I understand why they want to make it illegal, it has the potential to screw over many people and be very unfair. But there's a perverse effect of not having those is that establishing trust to climb the ladder will much more difficult since the trust barrier is set higher since nothing will stop someone from working to a direct competitor. This has been a real huge concern in places I used to work and I know from confidences that was made to me that people were constructively fired for not being trusted enough. IMO they should just have made it more restricted.

IMO
seL4 is absolutely tiny, not a good example - it's probably smaller than log4j. Plus, it took years of PhD time to develop.
I’m in the Vancouver, BC area and there are a few Canadian companies that have non-competes that I’ve heard of. These are not tech based companies either.
Yup. My experience has been similar. My DDG's results when searching for programing related errors has also been consistently worse than Google.
Sure those are all feel good platitudes, but we both know that's not how the world works.

Consider the device you used to post your comment, where did it come from?