skysight-inc/HackerNews huggingface dataset:
This is kind of what I'm wondering as well. I understand the compulsion to try to get the other side to just fix their shit, but when a gnat is buzzing around Godzilla, the gnat can't exert enough pressure to convince Godzilla to dance.

Go to another bank or go to CashApp or TransferWise (now called Wise I think) or any number of the dozens of apps-masquerading-as-banks and get a new set of ACH details. Get the $2,300 you're owed.
Just for good measure even if you're not in Washington state, file a claim there and possibly with the Washington State Attorney General's office. Bob Ferguson has no qualms about taking Washington companies to court to do the right thing.
Routine Maintenance
Once again, focusing on 'the women', making them the problem and not the guy being a creep, and dismissing everything else related, is pretty telling. Gaslighting, I think, is what they call it these days. But we're clearly not going to agree on this.
hah, I just commented the same suggestion^Widea above.
> Honestly we even have the technology to do it now just limited will if things ever get real bad that would change very quickly.

more important than technology imo is: where are the funds?
who is going to pay for all this air filtration?
What's actually malicious about the code? It's an infinite loop that logs to stdout. Sure, it's not what the library is supposed to do, but is it malicious code?
It's a lease. However long it takes to clear $299 a week?
I'm pretty sure you're correct as far as the US is concerned. Panama is different though. Panama imposes no income, corporate, capital gains, or estate taxes on individuals or companies that only engage in business outside of the jurisdiction. No distinction is made between active business or passive income.
I kind of agree, its a bit too fragmented.

I think there are a handful of "obvious" interactions that should have been called out.

Politics + Space: Greater international competition for space-resources will likely begin, and we may see the end of first-come-first-serve orbits. The international inward-turning politics may be particularly poorly timed; we may see irregular military action in space.

Politics + Cyberspace: Inward-turning politics combined with greater awareness/impact of breaches (including on increasingly-autonomous vehicles?) will almost certainly lead to countries closing their digital borders a-la China. Its already been proposed in the UK, I believe.

AI: This is going to be the source of some huge wildcard, and I think everybody knows it. Companies have massive amounts of data on people regarding how they behave; eventually someone is going to give that data to an AI with the right/wrong instructions to make a noticeable impact on society.
You’re running mission critical software without thoroughly parsing your chain of dependencies and then automatically deploying updates on top of it? I don’t think the author is at fault here, just bad practices of whoever broke their application.
And the former is right, whereas the latter is only present in academic discussions of use of language.
Wtf, that dress is not black and blue. What are people smoking?
Pgsodium 2.0.0: Modern cryptography for PostgreSQL
You’ve never heard of reputation until just now?
Pay respect to the author and also to people who use the word and want easy pronunciations so they can spend more time on what's more useful. If, say, our lovely Indian instructors on youtube decide that gif is git but with f, then let it be, for that they are making contributions.
Actually, in my experience, people that either run their own servers and/or encourage to do so are vastly overrepresented. Interesting self-hosted projects regularly make it to the front page, too. There are, of course, a lot of people and opinions on here, but the overall hacker spirit seems to be alive and well.
I am wondering if there is a niche for a paid repository (npm or maven) that actually verifies/tests/analyzes libraries and recommends/bans libraries/versions that didn't pass such verifications. That could potentially prevent Equifax hack, Log4j, etc. Could be good for the enterprise.

I am frankly surprised that dependency attacks are not a big thing yet (or they are?) as we devs just throw in any dependency in if it looks like its doing the job.

Also many corporate repos are just a garbage bin of crap. I can quietly replace a library in the repo, make sure the projects grab my modified version before the release and rollback shortly after). I remember called this a "maven bomb" and discussed with my teammates and a manager - who didn't give a shit
Is it not equally crazy that a single random person has the ability to make such an impact on so many systems? That's exactly what FOSS facilitates here. Again, I wouldn't do what this person did, but situations like this are a byproduct of FOSS.
Sorry it was a long time ago. I think it was on reddit. Guessing Colorado as early days of legalisation but this is news article from years ago. It might have been a state not fed thing too as I was thinking about it after and that makes more sense logically.

I also tried to find/link when I wrote comment but I couldn't find it again. But 100% read about this some years back and the weight/value cops used as damages used in court.
I don’t even live in a big city and I get same day delivery on some stuff. I had an item get here 3 hours after I ordered it once.
The solution to A will break manual attempts to address B.
I am talking about google camera app that came out of the box on my pixel. I take a few hundred pictures a day for work, I am forced to use it due to their stupid intent policy on Android 12, and I frankly hate it.
I use SMPlayer. Despite somewhat "ugly" UI, it's a very capable MPV skin.

[1] https://www.smplayer.info/
The evidence provided in the article seems pretty damning. State licensing boards don’t take too kindly to their constituents being taken advantage of.

Yes ultimately the OP will end up with a physical check, I’m not saying they’re getting some huge payout or something.
I haven't actually checked if the README or description of the package was updated to reflect the new (malicious) behaviour of the code, but even if it was, I think that knowingly exploiting people's trust to stop their software working should be treated as evidence of hacking.

It's like if you went to work one day with a spray can hidden in your jacket and started graffitiing the office walls, but justified your actions by saying "Well you could have searched me before I entered to make sure I wasn't carrying that spray can".

Or perhaps a better example, what if some (free) binary application auto-updated, and included in the release notes or documentation a sentence stating that the "File > Open" option had been changed to instead delete the selected file. Would you still blame the victim for their "self-inflicted injury"?
Your poem does the subject justice. Just in case you have not seen it before, one who writes bad poetry is a poetaster, which the OED [0] defines as:

A petty or paltry poet; a writer of poor or trashy verse; a rimester.

I should very much like to be known as a rimester. It sounds adventurous.

[0] Oxford English Dictionary, 1989. No link; it's a handy 20 volume set.
Because gravity doesn't press the two sides together. Tension does. Clearly a hotdog is more like a pita or a wrap. Not a sandwich.
The most stunning outcome here is the apparent internet consensus that Star Wars is better than Star Trek.

This is indefensible.

A Star Wars fan will tell you there are, at most, four good Star Wars movies. A Star Trek fan will tell you there are 6-7 good Star Trek movies, depending on whether you count Galaxy Quest. This might leave us with some room for debate about whether the cultural impact of Star Wars episodes 4 and 5 outweigh Star Trek's larger amount of quality material.

Except that Star Trek is a TV show.

For the movie franchise to not even be the better movie franchise is just... there's... it's not even a question.
fair use varies greatly state to state as far as I understand it
That's interesting. The current top comment implies that spam filters weigh DMARC so heavily that it's essential to reliable email.
Indeed. Much easier to use IPA here, but the likelihood people can write/read it is pretty low. I'm out of practice, but should be /æʒər/. Could also copy-paste that into here: http://ipa-reader.xyz/
When I read of someone dying prematurely, I actually find it reassuring if the person OD'd -- it's an identifiable cause that I can avoid in my life. Seeing people drop dead for no apparent reason causes me more anxiety!

I can see the flip side though, that it having been preventable makes it more tragic.
An open source modular smart mirror platform
I love AWK for some dead-simple borderlands between sed and Perl (or worse). But the performance can be a problem with associative arrays.
Isn't it sad there's an assumption that if people aren't politically aligned, they don't respect each other?

I have many friends and family members who are not aligned with my political views at all. I'd never let politics get in the way of that. After all, what is accomplished by avoiding someone because you don't agree with their views?
I was going to ask how the routing algorithm differs from eg Kademlia[1], but then I realised this explicitly builds on Kademlia’s ideas.[2]

Kademlia uses “bitwise XOR of peer id” as a distance metric for routing; after querying the DHT you can immediately build a routing table for reaching a particular peer, and you instantly know a next hop for any particular destination you had in mind.

Yggdrasil’s contribution is that it only does this next-hop thing when you first wish to connect to an Yggdrasil IP; instead of just sending to The closest current peer and expecting them to forward, you recursively ask that peer if they have any closer ones to a particular address and add them to your list. When you can’t get any closer, you have either found that peer (and a public internet IP you can contact them on), or the closest node to them that can forward there (eg over non public network, Bluetooth, etc), or you can’t find them. Very cool.

Future work alluded to at the bottom of that post:

> Also, while the current DHT should be fine for peer-to-peer type applications, I wouldn’t want to be the keyspace neighbor of an especially popular server, as this would mean a large number of DHT lookups would go through my node. A caching DHT could, in principle, be able to address that issue without changes to the protocol, but that’s not a very high priority given the size of the current network.

[1]: https://pdos.csail.mit.edu/~petar/papers/maymounkov-kademlia...

[2]: https://yggdrasil-network.github.io/2018/07/28/addressing.ht...
It is definitely slow in DRO mode. I have not had it act buggy on me. When I could use it from intent on android 10, it was far less buggy than the google camera app, which does not work well with intents - reopening without sending picture back on confirmation often, etc (although there have been some improvements on that end in recent updates).
If Go tries to automatically solve A, it prevents a developer from solving B because there is no way to control field order.

By Go doing nothing, a developer can manually solve both A and B.
Fastmail tells you very explicitly what to do and how to do that, I recommend doing that, at one day you may be hit with a very important email going undelivered.
I... need to get on writing about this. Lost a bit of motivation after I defended but I definitely want to polish it and add new features.
Why unfortunate? What do you think is wrong with the hardware?
Wow!

You are prohibited from making any statement about the service without Amazon's permission.

"You must not issue any press release or make any public statement related to the Service, or except as expressly provided in this Agreement, use our or any of our Affiliates' names or Trademarks in any way without our prior written permission...."

Disputes have to be settled in arbitration. Paragraph 11.3

No liability for any "delays" in performance (which this might end up being)

And lots more!
It's a very sensitive topic so extra nuance is helpful.
Go most definitely allows annotations on structure fields [1]. You say the language is stuck in the 70s, but the GP has a quote from the Go authors saying that having the compiler reorder structure fields is a 1970s problem...

Well anyway, mostly it just sounds like the typical Rust enthusiast "How dare you have a strongly-held opinion that differs from my strongly-held opinion". As someone who used to work on a codebase that had to be portable across X86, Alpha, SPARC, and Itanium, paying attention to structure field order quickly becomes a routine matter. It hardly seems worthy of an argument over the merits of a programming language.

[1] https://pkg.go.dev/reflect#StructTag
Debug memory leaks with the Microsoft Edge Detached Elements tool
So you just kick the can down the road to the next person? Imagine if we treated bug reports that way? “Oh, my software doesn’t work on a Tuesday that also happens to coincide with a full moon? Well, that’s your fault. Wait until Wednesday to do your work”

This learned helplessness is not helping anyone. There are still regulations, laws and rules that empower you as a consumer and business partner. Use them or lose them!
>I have always been successful convincing my employers that I do open source work on the side for my own interest.

What do you need to convince your employers of?
How to Set Up Storybook with Next.js and Tailwind CSS
You are not TA here, and most people feel the same way. But it seems this particular author of OSS has.... "issues" of which this is really the least.
External Julia packages can impliment core features. For another example, look at StaticArrays. Fortran is a brittle old language where everything supported must be built into the language. Julia isn't.
So set it in overrides? Blacklist it in your private mirror? It’s your project, your environment, and your computer, you’re never stuck.
This, unfortunately, resonates quite strongly with me and seems representative of my peers as well
Yeah, it's pretty awesome. Panama has its problems too mind you, and one really should learn Spanish if you're going to live there.

But all of that seems small in comparison to the tax break that you get. You could spend the whole summer in Europe or North America if you wanted and it would be free, including food and entertainment, and you'd still have plenty left for a medical and retirement savings account for yourself.
I had that experience. I learned Dvorak and my touch-typing form got a lot better (as you would expect..) I then went back to Qwerty (it took a little while to switch back..) and retained the better form.
Let's ignore everything else. They're buying a private island, that would generally mean that the island is already part of a country, in which case it isn't materially different from buying a few hundred acres in rural Montana or some such. You aren't creating your own country, you're still subject to the laws of the state the island is part of.

So I'm unsure if they're confused, or it's a scam.

Certainly no matter what they may think, they don't get to choose their own age of consent.
I really don't like any argument for how to pronounce ".gif", so I pronounce it in as many ways as possible to try to annoy people.

Here's a wonderful video on the subject: https://www.youtube.com/watch?v=bmqy-Sp0txY
Now my notion of under-served rural America might be biased. I have traveled quite a bit around rural America and by far the most people in under-served communities were on the poorer side. Now I did definitely see affluent communities with minimal infrastructure (particularly in California), but that was very much the exception (even in California).

> With that available now, why would anyone spend millions of dollars to drop in a 5G tower to pick up another 50-100 customers?

Your county would—and should—spend a few million dollars with some extra funding from your state and local telecom companies to drop a few 5G towers to pick up a few thousand more customers and voter happiness for sure. Your county counsel can call it something like Rural Broadband initiative and have a plan to bring a broadband connection to 30-70% of under-served rural households in the county before 2030. A good politician should be able to sell it even to city folks as serving the community.
Understanding Next.js Data Fetching (CSR, SSR, SSG, ISR)
why would I have this hostname? It is random string with letters and numbers as usual. A container-per-build, never heard about it?
Tesla owner mines up to $800 a month in crypto with his car
> Choosing some other port than 22 is not a measure to make things more secure; as you say, it would be security by obscurity.

There’s nothing wrong with security through obscurity as long as it’s not your only security. Defence in depth, including obscurity if it suits you.
The second someone puts out a 'faker.js' that does this companies will drop it, just as they ban AGPL software.
If so would that also impact 'backing' like KickStarter and Patreon?
maybe it's dyslexia or something. You should see a doctor about it.

Also this is what "dyslexia" means:

"a general term for disorders that involve difficulty in learning to read or interpret words, letters, and other symbols, but that do not affect general intelligence."
For those who don't recognize the name, Big Mess O' Wires is a prominent developer and vendor of modern hardware add-ons for vintage Apple and Mac computers, including the very popular and well-regarded "Floppy Emu" floppy drive emulator.
PowerToys: Utilities to tune and streamline Windows for greater productivity
No a license clause can't shield you from an intently malicious act. He's probably getting charged under the CFAA.
> Under-served rural areas in the USA tend to be pretty poor, and as is starlink (or starlink-like) internet is pretty expensive both for the service fee and hardware requirements.

It's a utility. If it costs twice as much as elsewhere you still need to pay it, until it starts getting really difficult.
That's literally what I just asked
Whenever IRC comes up I never miss a chance to recommend my favorite extensible (in several languages) IRC client weechat. I believe there have been some forks to handle discord and matrix as well.
Databass: Type safe relational algebra EDSL in Haskell
Urgh, that's horrible. Even if package authors feel like they should get some compensation, breaking code like this is never the way to go. Maybe they think most apps are "useless" anyway and could break, but there's a chance healthcare/wellness apps might break too, doing real harm to real people.
Vaccinating everyone is a near impossible task but as with most things, you can get almost all the benefits by getting an 80-90% vaccination rate and letting herd immunity take care of the rest.
> as far as I understood recently about US is that the speech is protected between the citizen and the government, not between civil entities, as business/corps and citizen

Free speech by anyone to anyone is protected from government restriction. It is the government that is forbidden from punishing speech not the government that must be party to the speech else free speech would have nearly zero meaning.

> Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances.

What is oft said is that the first amendment doesn't protect you from non governmental consequences for your speech. For example you can be fired for your speech but you may not be imprisoned nor silenced by the government.

When a private entity avails itself of remedies provided by the government to limit or punish your speech your constitutional rights are infringed because it is the government acting to limit your speech even if its on behalf of a claimant.
5grams within 30minutes of hitting the sack.
Thanks. Given that it's just another TXT record, I would assume it's just a part of setting up a email domain, especially since one has to create DNS records for SPF and DKIM anyway?
> Cars are popular for a lot of reasons

Cars can be popular and not be a necessity for the majority of the population, and that will still drastically cut emission, pollution and traffic congestion.
> No mention of Taurine and how the older you get the more you need to consume and the longer you can sleep for.

I was curious about this claim so I tried researching and couldn't find anything. Everybody just seems to look to the same study of Taurine that was done in fruit flies. I didn't see any human studies, let alone interventional studies. Even the idea that you need to consume it didn't pan out -- your body can synthesize it from a couple amino acids and B6. Do you have a source?
This is high comedy. Like alien intelligence level existential trolling. These are my people, I must find them.
Don't quit that easily! I remember reading about the minecraft dev here on HN ~10 years ago when paypal froze his account with 20M. It was the first time I heard about the game so I checked it out and thought it was complete crap and probably a scam if he really had 20 million from selling this junk of a game )))
> Fascinating to think about cosmic events as large as two galaxies passing near/through one another.

This simulation of Andromeda doing a mating dance with the Milky Way is definitely fascinating:

https://youtu.be/fMNlt2FnHDg
From wikipedia: The dress itself was confirmed as a royal blue "Lace Bodycon Dress" from the retailer Roman Originals,[26] which was actually black and blue in colour;[1][2] although available in three other colours (red, pink, and ivory, each with black lace), a white and gold version was not available at the time.

So objectively it is black and blue. Of course, our eyes tricking us about color is hardly anything new... (brown is just orange with context!)
I'd avoid OfflineIMAP and instead use mbsync. OfflineIMAP adds headers to the synchronised/copied emails, whereas mbsync makes a verbatim copy which is good for preservation/backup.
But plenty of people are complaining about the code breaking.

I think both complaints are valid. Being legal and being beyond complaint are very different. "explicitly for free" is the legal contract, and it's okay to have norms that extend beyond that.
Things Can Only Get Better (2016)
How often is "reduce cache misses" that different from "use as little space as possible"? They're basically the same if the struct can be no more than one cacheline wide. When the struct is larger, it's possible you're accessing certain sets of fields together often enough for this to be a useful consideration, but I have no intuition on how common it is. Although it occurs to me that when this happens, switching from arrays of structs to structs of arrays may be a better optimization anyway.

fwiw, Rust leaves the ordering unspecified (unless you specify it via #repr[(C)]). Currently it orders to minimize padding. (In theory a future compiler could reorder to minimize cache misses based on a profile or something.) According to https://doc.rust-lang.org/nomicon/repr-rust.html part of the rationale for reordering was generics. If you have a struct Foo<T, U>, the optimal ordering depends on the size of T and U. The same argument won't apply to Go until 1.18 is released.
People spend money on things that aren’t “game changers” all the time. A business can certainly exist while only offering a quality of life improvements to a small minority.
The article doesn't seem to answer the question it has on its headline.. instead it just goes through banal details of the hardware and software.
That's not what happened here. Author intentionally pushed malware.
What, no Vim v/s Emacs?!? I am so disappointed :)