skysight-inc/HackerNews huggingface dataset:
Maybe I am misreading them but I don't quite think that's what they're saying so much as "you can't market your free product to other people as something they can and should be using, and then turn around and tell them to fuck off when they come back with complaints that it doesn't live up to those claims".

A lot of open source projects seem to do this. If you make it clear your project is just something you found useful and others might too, then I don't think anyone really has a complaint about that.
Show HN: Litter Boxed (Clone of NYT's Letter Boxed)
Ah the good old "fuck you I got mine" philosophy.
At the transmitter there are two kinds of gain. The first is simply crack up the power and more signal energy will be received at the receiver. The other "gain" is where the physical shape of the transmitting antenna directs more of the energy it receives in one direction (usually straight ahead) rather than a different directions. The amount of gain due to the physical shape will vary with the frequency of radio wave relative to the physical shape the antenna.

Think of a flashlight. The beam is brighter in the middle and falls off towards the sides. That's "gain" compared to a flashlight that beams light in all directions equally, like a sphere.

So while the transmitter can "shape the beam" to create gain, the receiver cannot (though the path lose equation implies that it does). The receiver can physically just trap the amount of watts per square metre that it receives and this amount depends only on its size and not on the frequency of the incoming radiation.

So the transmitter and receiver antennas are very different in their physics of how the operate but the Path Loss Equations fudges things to make it look like they are the same ie that the gain of either is equally dependent on the frequency/wave length when in fact that's false and the two antennas are asymmetric in how they respond the carrier frequency.
> An engineer that builds a system that controls 1000 machines in some distributed system, that serves content to 100 million people has massive leverage

The idea of individual engineers shipping services on their own is long gone, though. Big companies have an almost unthinkably large army of engineers working on everything these days. It’s never just one person doing the magic that makes a service go. OTOH, decades ago it wasn’t too uncommon to find just a couple key engineers at the helm of key services.

I think the real driver is the amount of money pouring into the tech space. Companies have to pay more to compete with each other for talent because there are so many tech companies trying to do tech things now. It’s as simple as that.
Nobody is forcing them to rewrite it or anything. Github canceled his account because knowingly posting malicious software is against the TOS, and it is not difficult to argue that putting infinite loops in the startup code of all your users is malicious. He still has the code on his computer to do whatever he pleases with. The rest of the world is just looking at it askew and calculating the odds something like this is going to happen again and what they should do about it. If you are going to be a dick to your users you should not be surprised that they will refuse to use your software afterwards.

In a way, it is kinda sad that this behavior drives him away from the financial security he so seemed to crave. "Yes I just caused your dev team to do hotfixes during the weekend and cost you XYZ dollars in downtime, can I have a senior dev position now plz" is not a very convincing line when interviewing.
I work for a small org, joined when it was like.. 7, now we're ~50, and fully remote. The where doesn't matter, but the when does for us. We still exploit synchronous communication quite heavily.

Yes i know some orgs can async everything. Some people prefer it. You could argue many cases on why async makes for a more mature interaction process, more efficient, etc. However we have not managed it. I'd say largely 50->80% of our communication is sync, and i don't see anyone advocating for changing that with us, despite having basically fully flexible hours and a global team.
Ask HN: Steps from Analyst to Data Engineering?
For someone who has strong SQL skills and some scripting experience, what would be the best approach to shifting into data engineering?

A constraint is that current place of employment does not offer transfer or mentorship opportunities.

If you were to recommend the top 2-3 actions to take to enter the field and gain employment, what would they be? (self-study resources, courses, projects, bootcamps)
In 2020, YC cut the standard deal from 150k to 125k, while still preserving the 7% equity (and the 4% pro rata).

To sell a solution, first create a problem ;)
Yes, we agree. That's why in my other comment I mentioned SARS-1.

COVID can be considered a warning shot. If we don't get our house in order, something like SARS-1 or worse will set us back a century (depending a bit on location, but still).
>> The purposeful malicious intent is working hard against his stance.

OK, but should cloud providers similarly be held accountable for screwing their customers through negligent acts - to come full circle, like pulling these updates without doing any checks or QC?
There are many boundary conditions and parameters that come into play, but I can envision a scenario in which children are not imprisoned, but women are still able to work.

The major cause for imprisoning toddlers and even young kids these days is the risk posed by vehicles.

My parents' generation grew up in a developing country where the villages did not have paved roads, and 90% of traffic was very slow moving ox pulled carts or motorcycles, and maybe a small portion of small cars. The grandparents' generation all had 4+ children, and women were not staying home to watch the toddlers. The toddlers were supervised by older toddlers, who were in turn supervised by older kids and they all just ran around the village all day until it was time to eat.

Outside of caring for infants, the mothers had many duties such as working in the farms, factories, cooking, and cleaning, similar to men. What they did not have is legal ownership of capital and sufficiently high income streams to go their own way if they wanted.

But none of this is applicable in modern US society.
I have been at Google for many years, and the only time I have ever heard of this are certain corporate housing for long-term temps working in MTV and for a while there was some subsidized intern housing.

If such rates exist, they are uncommon or not often talked about.

There may be better proof out there, in which case you ought to provide it. But until I see something better, I am very skeptical.
Sweden’s new Psychological Defense Agency to combat disinformation, fake news
does a laser make a bright spot on the airplane that is ?visible to the person back on the ground?
There is an assumption not to be an asshole. But that's where it ends. If an endless stream if cars likes your directions, they can't expect you to keep standing where you are, giving each of them directions.

In the same way, if someone posts some code you can file a bug or give a patch, but that doesn't entitle you to anything from the original author. Maybe you helped him making the code better and you're scratching each other's back. Maybe the author is just extra nice to you. But just because you've received a gift, you're not entitled to more gifts.
No, that's off-chain knowledge coming into play.

You know Bored Ape Yacht Club and Phunky Ape Yacht Club exist. How do you know which one owns the copyright to the images? Which one's the original artist, and which one's the fraud?
> Assuming you’re ambitious and willing to relocate, you can now go to Silicon Valley, make all of the right moves, and amass millions of dollars in a decade of working for the right companies

It's quite easy to do it in 4 years or less now.

At current pay rates and stock growth rates, you have to be VERY optimistic to turn down a FAANG job.
I just got solar panels. I was crunching the numbers and it's a long payback. I am really waiting to see how it turns out.

Currently, the days are very short - 9 hours of sunlight. It's been cloudy and/or snowy quite a few days - which means zero production. Partly cloudy also drops production significantly.

On a good day we might generate 25-30kWh of electricity. But that is also approximately what we use. I'm hoping that during different seasons we will have higher production and/or more days of the week generating.

Because otherwise, our electric bill every month is not a huge part of our expenditures, and we've paid a large upfront cost to (currently) only reduce that by a portion.
You're right in the package storage sense.

I don't think you're right in the builder/building practices sense.
Show HN: A naive SHA265 collision finder in Rust
1. The Ad Hominem (on top of the Attribution Error) is uncalled for.

2. You originally claimed, " no its a criminal act. crashing RANDOM servers that you DONT know what they do ...". That is far removed from what you're talking about here. Which is not only misplaced, but also ignorant.

3. Your original claim also implies that the intended effect of the change was to crash "RANDOM servers". I disagree with that claim, and with your subsequent claim that that proves malicious intent.

----

I understand that you're upset — I suspect because you've suffered either this or a fate similar to many unsuspecting users of the npm libraries in TFA — and would like to see whom you view as the cause behind it (i.e., the author) suffer some form of punishment. But that doesn't mean you should support just about any harm done to them by any entity in the world.

GitHub is not a software distribution platform/marketplace. It is not an "App Store". The relationship between one GitHub user and another is not very similar to the relationship between an app store user and publisher.

If you pull someone else's code through GitHub, you're clearly making a copy. From that point on, that copy is your responsibility. That is how the FOSS world has always worked, and so has GitHub's model of public repos.

Now, if you ask me about npm, that is a whole different thing.
Yeah exactly! They are even less practical than my example. Its very confusing how they are worth so much to me
I think the issue is coordination costs. In fact, Coase's entire theory of the firm is predicated that they exist to minimize coordination costs. I think it is interesting to think about this shift (and the remote from work phenomena as a whole), as adaptations that are essentially following a drastic reduction in coordination costs. More of our work can be asynchronous, done from disparate places, communication tools are infinitely better, etc. If you take the theory seriously, all else equal, you'd expect smaller company sizes, remote work weeks, and more generous time off. But that you'd still have a sense of needing to know "when it happens" equally makes sense given that coordination costs for a lot of these scenarios haven't reached zero (i.e. I can decide to work Tuesday but if I need Bob and he's decided to not work Tuesday that's a problem. Yes, maybe we could work something out individually, but if this happens enough times, and with enough people, its more efficient for the company as a whole to dictate a schedule when we can reasonably expect folks to be available)
It's about commitment. There's a saying, "Are you the chicken or the pig in this ham and eggs breakfast?"

There are all sorts of reasons why this isn't going to work and I think you know that. This has been another great learning experience, but it might just be time to move on.
Apple App Store devs made about $60B in '21
My problem with these line of numerous shallow books and courses are

1) Written by people who has no experience in industry or they are not working on "real" machine learning jobs

2) They think the standard in industry is pretty low and any BS works. For example the concept of "lagrange multiplier" is missing from the book. One need this concept to understand training convergence guarantee.
If you're happy with the way it's working and it's not too much overhead for you to administer it, please don't take down your server. The fewer independent email servers out there, the easier it will be for the big boys to justify no putting in effort to interoperate with the ones that are left.
Not really. He's charged with leaking to the media. There's only one story that's been recently leaked to the media: The one about helping NSA to spy on domestic and allied political leaders.

Intelligence agencies can only wish they were able to distort the picture for the public reliably, and frequently mess things up.

So the most likely explanation is the obvious, apparent one: He was shocked at the extent of the friendly spying, and leaked it to the media once it became clear it would be buried.

The interesting thing is how Denmark will handle this.
Not OP but simply put, these lasers are fairly trivial to assemble anyways. And the vast, vast majority of users don't go lasering aircraft. Given how incredibly tedious most governmental processes are in the US, licensing could take an extremely long amount of time. Not to mention there's a privacy issue there-- why does the government need to know about my scientific curiosities?
The people at the top are deeply cynical of ideology. They fill the ranks of middle management with true believers and play their own games.
As a counterpoint to the "harder to clean" argument, I can offer the following.

I've just been to Montreal, and with temperatures well below freezing and lots of recent snowfall, the segregated bike lanes were completely clear of snow. Every day. In the places I've been around town, I am not sure I've ever come across any significant debris, in any season.

This is in stark contrast with many (especially older) bike lanes in the UK, which are basically unrideable in any season as they're covered in drain covers, potholes and debris.

I think the difference here is not so much the difficultly of cleaning as the commitment to doing it.
> Almost like it saw there being a big downside to a union being formed. I really wonder why that is

It's also possible for a union to be bad for the company AND employees at the same time, right? Just because actor A dislikes something does not imply it must be good for actor B.
> If BTC-style price manipulation was the rule with gold, married couples would be melting their wedding rings.

You mean like all of the "Cash 4 Gold" commercials that aired in the 2000s when gold went on a huge climb?
Accel's $250k deal does not appear to be a grant, which is truly no-strings attached money. It looks like a convertible note with no valuation cap; so non-dilutive until the first priced-round.
No, it does not absolve anyone of responsibility.

Accepting that bad people exist and are bad and that their badness needs to be fought against, does not make the bad people somehow less-responsible for the badness.
Yes, north-African, i.e. Arab. Per https://en.wikipedia.org/wiki/Septimius_Severus:

> He had Italian Roman ancestry on his mother's side, and was descended from Punic forebears on his father's side [..] The Punic people, or Western Phoenicians, were a group of Semitic peoples in the Western Mediterranean who traced their origins to the Phoenicians of the coasts of Western Asia.
I've always been casually curious about applying to YC, but I'm allergic to the terms because they are not in plain English.

I'm not interested in learning about SAFEs or cap tables or any of that. I'm interested in running profitable businesses with basic P&L statements and not owing anyone anything.

If you immediately value my business at $1.7 million, I should probably in the next 12 months be making $1.7 million in revenue as a baseline. So how is Y Combinator going to help me do that?

Engineers are expensive. How is Y Combinator going to help me sell my product and grow so I can pay my staff?

Why would I not just take a bet on a PR firm[1] since advertising is a total wash for small businesses?

[1]: http://www.paulgraham.com/submarine.html

Edit: I'm very happy for you that you think SAFE and maybe valuation cap, discount (without context), MFN, pro rata, "high resolution fundraising" are basic terms, but for most US citizens they are not, and for non-US citizens even less so.

Y Combinator goes to great lengths to attempt to describe these concepts, at least one of them they introduced and didn't exist anywhere else in fundraising prior, but they go to little to no lengths to explain how they will help you grow your business.
I'm also really curious about their bets and the data. I thought the market was starting to cater to older, more experienced founders?

That's been adjusted up so that YC invests $125,000 for 7%. It still feels really low these days.

I've heard of VC firms investing 3-5 million for 10-20% in seed/series A with no seed [1, 2], which seems like a much better deal. Lots of room for growth before giving up more equity.

Which VC firms are investing like this, and how do you connect with them if you're outside the bay area but already have a product with significant growth?

Or, contrary to this, does YC offer value beyond monetary that makes the investment worth more than the alternatives?

[1] https://web.archive.org/web/20200817011057/http://www.apollo...

[2] https://news.crunchbase.com/news/seed-funding-startups-top-v...
Readable Recipes
No idea, I haven't tried it (and not planning to) but I can understand the curiosity to find out.
I just want to say I am glad pro gaming took over. Back in the day it was only Quake players advocating for 120 FPS (for various reasons, including Q3 physics being somewhat broken), 125hz mice and stuff like that. I am talking 20 years ago.

The number of lost souls parroting the old "human eye can only see 30 fps" has gone down considerably over the years. The last 10 years were fantastic in that regard, despite the whole RGB craze.

Even CS servers have 100 Hz heartbeat these days. Of course, by the time we get 1khz displays I'll be too old to enjoy it myself but still likely to put a bittersweet smile on my face.
I didn't quit caffeine, but I cut down massively by keeping it in a Zojirushi mug that keeps it hot all morning instead of drinking from a regular mug. Because it stays hot, I just sip it, and that way I only drink one mug in the morning and occasionally one in the afternoon, instead of the 3 or 4 mugs I would drink previously.
which london accelerator gives startups 6k ? unless it's a wannabe accelerator
I noticed this as well in Toronto. If you tell people it's the end of the world, and create that impression by shutting everything down so it looks like zombie apocalypse out there, people's time preferences shorten, their anxiety and aggression spike.

Toronto also suspended lots of low-level law enforcement like parking tickets, reinforcing an atmosphere of living outside normal rules.
FTC Says Fix Log4j Security Vulnerability or Face Its Wrath
I completely disagree on not listening to your brain. Your brain has an emotional side, some call it your inner child, that is the raw unfiltered you. You inner child might be screaming out for help because he doesn't feel safe and needs your help. That is worth listening to. You don't want to just grit your teeth and ignore your worries.

Your feelings are completely valid and there is a reason you have them. Don't ignore them.

That being said, you also don't want to let your brain run away and make you miserable with repeated worrying. It's a balance to recognize that you feelings are real, deserve to be recognized, maybe require action, but also to not let your worries dominate your life.
I'd take any of those over 5/8
Exactly! It should be at least a year in jail if not five+.

What was the best outcome the person expected? To crash an airplane full of people?
I'm making the point because I'm selfish. If there are more people in touch with reality, then that benefits me.
> Those are far more common than malicious updates

Are they though? It seems to me that security updates that actually affect a given individual or company are few and far between.

Example: I use a library that both reads and writes a particular file format. In the past few years, it has literally had hundreds of potential vulnerabilities fixed in its parsing code. I only use it to write files, so most or all of its vulnerabilities are of no importance to me.

How often do log4j-level RCEs (or of equal severity) happen? And of those, how many occur in JS packages hosted on NPM?

In my opinion, when I'm using code from an untrusted source that neither I or anyone else has carefully reviewed, it is less risky to wait to patch until I am sure a change will improve my security posture versus YOLOing everything into production.

But there is no right answer to this problem. We are all unknowingly running vulnerable code, and will at some point likely will make an update that introduces more vulnerable code. With the current state of our industry, we will all be owned at some point. It becomes a blame game - "you didn't apply the security patches?!" versus "you deployed code you didn't review?!".
What goldfish driving ‘cars’ tell us about navigation
Yup, nowadays I see most MVPs and at first glance I am amazed at the quality. Back in the day, a well put together MVP was probably enough to make your product go viral
In regards to your loophole I’m reminded of the pretty famous Yellowstone study that showed when wolves are not artificially reduced by hunting their entire environment stabilized. Or is your loophole inferring that animals should be hunted so they can avoid their natural fate? Knowing that animals run away from their hunter I would think their natural fate is preferable to the animal than getting shot and killed.
Anecdotally, I saw the same thing on city streets at that time. Cars would blow through stop signs and go right-on-red while hardly even slowing down or looking for pedestrians. It felt like everyone was in an anxious rush to get out of public spaces, while at max fear of the virus and the stay-at-home dictates.

My observations of course could be confirmation bias, but I certainly felt it as a pedestrian and cyclist.
I went to pre-school for this reason only while my mother was stay-at-home.
I would add the analogy a bit more:

1. The paper has an authenticated watermark which cannot he forged by any known technology

2. The paper can teleport a shadow copy of itself anywhere in the world: it can be inspected by practically anyone in the world, without the shadow copy being traded as the real thing
But he didn't introduce it into any particular production environment.

For fucks sake, people need to pin dependencies to a known good version at the very least.
Yeah, I've been using a Yubikey for a bit over a year and I'm already a huge fan of the way it works with SSH/Git. It's a bit more of a pain to set up with WSL2 since you need something like https://github.com/BlackReloaded/wsl2-ssh-pageant but it's absolutely worth the setup time.
Possibly; I'm not at all an expert on the subject. My goal more directly with that was to ensure that insurance premiums would ultimately be used only to pay for emergency care rather than routine/preventive or elective care. Someone with deeper subject matter knowledge might be able to tweak or flesh it out to better achieve the intended purpose.

If I understand your last point, I really like this approach in the context of my proposal: https://www.rubio.senate.gov/public/index.cfm/2021/3/rubio-s...
Isn't that really just the inverse of a union, which facilitates collusion between the sellers of labor (employees) to raise the price (wages)?
it helps, but I was very confused at first too (the button is not very visible)
Nice strawman you‘ve made there