skysight-inc/HackerNews huggingface dataset:
Just wanted to chip in; great explanation. Often as a citizen of one country vs another it is tough to understand the logic behind some decisions but this actually made sense to me. Still think the costs of war is high but the logic behind entertaining such an idea is a little clearer.
I'm aiming to post something more HN relevant later today. ;)
Putin doesn't want to lose power. All these propaganda, military moves are to give poor people something to take their eyes and minds off the reality - him robbing the country for 30 years. If you have absolute power for long time you know what happens.
The other issue is the "viable" in "minimum viable" often gets omitted.
I should have been clearer: written partially in C or Fortran.

SBCL, for example, has C bindings in the /runtime subdirectory.
rqlite: running a distributed database on a 3-node microk8 cluster
Using GitHub to manage your first CVE
Giga Texas: Harold Green Officially Renamed to Tesla Road
> And it's not about his knowledge, it's about his presentation.

They're not quibbling with the factual content.
I think the key difference is in the motivation of the player. Many people have hobbies that one might call "grindy", consider how much time and effort goes into gardening for example, but because they're not getting paid we don't call this work.

For me it becomes work when the motivation to keep playing shifts from intrinsic (sense of achievement, community, completion, etc) to extrinsic (money).
See I listen to people who know what they are talking about on this topic, people like Ray McGovern the former head of the soviet desk for the CIA, and I find their comments refreshingly nuanced, explaining things like how we promised Russia we wouldnt do an eastward expansion of nato, etc.

...and then I see comments like yours that just seem to want to make Russia into this mustache twirling always evil villian and to me its people like you destroying hopes for good conversation that seem like the real villians.
He asked how to make things easier for his vulnerable coworkers, not how to cover his ass.

Honestly, my suggestion would be to be open about your own experiences and the impact they've had on you. (Not necessarily abuse, but just offhand comments like 'oh, it's silly but I can't stand yelling because my dad yelled a lot' or 'I don't drink because my family's had issues with it', etc.) Be open and clear that a.) you don't judge people for being 'weird' and b.) you accept things other people need even if you don't need them.

Don't be overly emotional about it. Just accept their human needs in the same way you would if a coworker had a disability. Oh, that person needs more space between us? Alright. Not any different than a hard of hearing coworker who needs me to speak up a bit, or a visually impaired coworker who uses zoom on their computer.

My saying, "Hey, I have a bit of anxiety so I'm going to gather myself for a moment; do you think you could step back and give me some space and we could try to pitch this conversation a bit quieter?" shouldn't be much different than my needing a stepstool. I'm short. It happens.

If you treat the people around you as individuals, then people understand they can ask you for what they need.
This is why electric turbopumps (like those used on RocketLab's Electron rocket) don't scale up to larger rockets well - the power draw is just infeasible to support with current battery technology.
Entertainment industry legal shit is beyond stupid. I’ve heard of one person’s pirated music and movie collection that exceeded the GDP of most first world countries, going by the numbers the industry gets awarded in civil suits. They literally just tell the courts how much money they’d like and it gets rubber stamped.

If you have money and an army of good attorneys, you usually get what you want.
Don't you think the responses from folks who have dealt with them invalidate your first sentence entirely?
We did have a disaster recovery plan in place, and we implemented it.

It is my opinion that killing public access to a paying customer's server without talking to them first, and not providing any remedy for 60+ hours, is definitely something that DO support deserves blame for.
Yes, most of my work has been in fields that are highly credentialed.
> You can use your own personal data however you want to

Oh but I can't, when the companies decide not to offer those services to the EU due to the onerous requirements of GDPR. Because the GDPR was not some harmless default being changed but a horribly written regulation that affected the way software must be written, from data retention and storage to logs and analytics.

All for a bunch of politicians pretending to represent us while I am willing to bet that the vast majority of Internet EU users is busy hunting for the "Allow All" button on every damn cookie popup on every website today. There was no need in the market for this.
Personally, I dislike competitive programming interview problems. Competitive programming, when viewed as a sport, requires training and practice. It's a muscle that you must constantly train. If you stop for a few months, it may take you a few days or weeks to get back to the previous level.

So it's always frustrating to find a new job because I know I'll have to spend weeks practicing on problems that will have no relevance to the posts I'm applying to. To me, it's a waste of time.

I think companies that uses competitive programming problems (that are irrelevant to their engineers' day-to-day jobs) end up hiring people who are very good at interviews and perhaps not as good at their actual jobs.

Of course, there are jobs which deals heavily with algorithms and optimizations, for which these types of interviews are relevant. But the article is not talking about these relevant cases.
I shared this one since it was actually drafted by a lawyer, and they explain the various parts of the license and the though-process behind it which I found interesting.
It has a reputation for being slow if you're not using the DNS-based version of the protocol (DNSLink). Though the experimental IPNS-over-PubSub interface helps if both sites are using it.
That sounds great, thanks I subscribed to it!
Do you listen to any other similar podcasts you could recommend?
Helps when it's destigmatized/decriminalized a bit.
When these people get together I cannot imagine anything good for regular people coming from it.
Yeah that's what I am getting at. If it was user friendly without risk you might.

I could put a pi on my home connection, but don't want that as an attack vector to my network. That's a flaw. But much like web coding, there are vulnerabilities whatever you do and however much time you spend securing it.

Redhat had a cartridge deploy system. A good attempt at appyfying the server space. The one click installs.

Plesk has one click installs for a wealth of software, but I never use these, why?

Email is a good example. In our organisation we originally ran out own SMTP server. These days would I? And if not why not? I used to sit next to the mail server in the late 90s and read the logs.

For very personal email I could host my own, and that's very tempting. But the other half of the conversation might well be eavesdropped.

Then there is backup mitigation. And multi endpoint. I still haven't worked out the multi device thing for something like signal.

With email I can have multi clients access my server. But again backup mitigation issues and privacy.

And hassle. Strip out the hassle and I would like easy cloud deployables given secure trust. I don't want a host trading personal messaging.

Of course there is so much current friction, I just trade it all in for convenience.
Very cool! That's what I had in mind.

Agreed that you added "unoffically", but you also created a new method todo login (vs cookies/oauth2/etc), so I wasn't sure how to map the "unoffically" word with your novel approach. Your disclamer makes it very clear. :)
note: IIRC Wikimedia had deprecated Bugzilla for bug reporting and replaced it by Phabricator.

> Github issues are nowhere near usable for a large product such as gecko/firefox

I have huge doubts about that.
Looking at the development of Servo on github was beautiful, the colored tags, the PR views, the activity stats, the reviews diffs, the wikis, everything about it was much more readable than it is on Bugzilla/phabricator IMHO.
https://github.com/servo/servo
The same can be said currently about webrender.

About scale, github is battletested, for Example Rust is an example of a large scale repo with a LOT of activity (~has more weekly commits than gecko-dev)
so the premise Github issues are nowhere near usable for a large product seems false.
What idiosyncrasies could mozilla devs have that are immutable and that make them so much different from large projects developped on github?
You specifically mention issues: Github can do meta-issues, can auto closes issues after PR merge, has bidirectional PR/issues references, can autoclose issues on markdown checklist check, etc etc
and if you couldn't fit into existing github features, I'm pretty sure you could totally solve your issues with Actions such as https://github.com/marketplace/actions/dependent-issues
Also github is accomodating, when the Apache foundation migrated to github they were open to do changes to the platform to facilitate Apache needs, cf: https://github.blog/2019-04-29-apache-joins-github-community...

In addition to my belief that github can be better or at least as good as buzilla, if gecko migrated to github, it would attract order of magnitudes more open source contributions because of the lower barrier to entry and to familiarity (also bugzilla is awful on smartphones)
You really think you should seriously consider the migration.
Yes, it does. I avoided the trigger words because of how triggered the HN crowd can get.
Protip: this is where we are at with Web3 right now.

People are excited because they can build, any state you see is not the end all be all, and can be changed... by you! It's also very lucrative, more than FAANG while using a simpler stack to deploy a product, so that will keep attracting builders and their networks.
Ensure that there is more than one woman around in your company. Ensure your workplace policies are friendly and flexible for people who need mental health days, address family time, get pregnant, need sanitary equipment, parent children or other dependents, etc. Ensure all the women at your company have opportunities to work with and have women co workers, or women friendly gatherings like lunches, and be open to feedback to change policy accordingly once you have enough women coming together during their talks that they can suggest changes collectively.

Being the sole woman in a company of men when means your superiors are men, your peers are men, and the only recourse you may have if any of them act inappropriately towards you is to report it to another man.

Edit: respect boundaries and consistently remind that if they have a boundary they are free to enforce and you will respect that. Boundaries come in the form of more than “please don’t x”. They are also “I prefer x” or “can we y”.
Hibernate is actually the first thing I always disable on any windows machine - it takes up a lot of extra ram. And with SSD startup from cold is usually so fast I find fast startup not all that great either.
Excessively complex DSA questions are not very useful for me as an interviewer. I prefer to offer a fairly simple test problem that has room for elaboration. For example, when evaluating SQL skills, looking how the candidate would model mapping between companies and stock ticker symbols is instructive. You can start with a simple flat table, extend to one to many relationships, discuss when normalization and denormalization make sense. You can keep elaborating this, too--add in multiple exchanges to get many to many, and so forth. This lets you see how the candidate evolves a design in the face of changing requirements, which is critical.

These kinds of questions are great for leveling an applicant. How a junior dev answers these questions will be very different from what a senior dev has to say.
I am explicitly not recommending that anybody try cannabis for COVID although I don't think it will place you at significantly greater risk (I doubt there is enough high quality evidence to show that cannabis consumers are at high risk of respiratory problems associated with covid).

That said, a standard e-nail vaping rig comes with a temperature controller that is very accurate and precise (degree resolution, 10 degree accuracy according to my tests). In pratice you could get high purity THCA (99.9% THCA), set your vape slightly below 220F, and inhale the generated steam.

I have a background in biochemistry and did a fair amount of research into cannabis chemistry and it's pretty amazing how underutilized cannabinoids are.
from the other reply it sounds like you made up your disaster recovery scenario on the fly.

DigitalOcean (and a lot of IaaS providers like them) expect you to create new servers on demand because the underlying hosts aren't 100% reliable. It could have been a RAID failure or a bad PDU feeding a rack or a number of other scenarios that would have taken your droplet offline, not just an abuse ticket.
Engines in dragsters are also know to have very high power comparing to engine size, but they also make less than 10k rotations at full power before they fail. That is enough to last one drag race which is several seconds.
I don't think that is very far off considering writing is the primary use case
Given the amount of games that release, you got it the wrong way around, it's not "a few bad eggs", it's "a few good eggs" in a basket full of bad eggs.

I would really enjoy to something even close to evidence that shows this to be true, because this sounds...far from correct, to put it nicely.
> Only people who never have to deal with the police say things like this.

> edit - people are responding with anecdotes of the police being unhelpful.

Which is it? You want to get pedantic about what is "suggested", make a comment about how "/Only/ people who never have to deal with the police say things like this", then people come out to show how they have had bad dealings with the police, and now words don't matter?
> Maybe the french stuff was more useful in practice

It was highly pushed by the national telco. The telco lent terminals for free so they were easily available, and there were tons of useful services, especially but not only from national companies: starting from the 80s you had stocks, online shopping, travel reservations, information services, message boards, databases[0], games, dating sites, ...

Monetisation / payment was integrated from the start, through the phone bill: just like premium-rate phone numbers, minitel had premium-rate services (both first and third party), so you could make money out of valuable services. It was nothing compared to the modern web (~25000 services and about $1bn revenue at its height), but for the mid-80s to mid-90s and out of a population of 60m it was quite massive.

[0] trying to get rid of phonebooks was a big reason for minitel in the first place
Is there any reliable (international) source for Russian internal affairs that is not tainted by state propaganda? Can you give a recommendation?
No but it stops them using your system as a C&C node accepting connections from external systems.

It doesn't stop it per se but it makes it a lot harder. Part of security is not being the easiest target on the block.
1. Doesn't seem to be working for me in Firefox

2. Convert this script into a handy bookmarklet to be able to use it with a single click using this tool: https://caiorss.github.io/bookmarklet-maker/
As this is from Statistics Canada, they would be using the government definitions, which include rape on the sexual assault spectrum.

https://www.justice.gc.ca/eng/rp-pr/cj-jp/victim/rr14_01/p10...
These aren't "big scary things", they are "technical debt you didn't need to take on".

...and the alternate course of action is clear: use the tools you already have.
The CDC says whatever they think is most likely to influence the public to do the whatever they think is best for public health in general.

Whether or not what they say is the truth is entirely incidental.
They already did: "...A royalty on blank audio tape and tape recorders..."

https://www.nytimes.com/1985/11/21/arts/issue-and-debate-roy...
I predict it will be "we'll do what we can about security, now what can you do about further opening up immigration...".
Apparently this was their primary concern when they had that meeting with Trump.
> a la PHP magic quotes

Up to this day, the official way to deal with XSS in .Net is by doing sanitization at the receiving point. I imagine the article is directed at that.
I feel that these articles rarely give any perspective on Russia's issue which is that Ukraine joining NATO would be a violation of prior agreements and would result in armaments being placed at their boarder which they view as a risk and security breach. The US is basically saying we don't care and we are going to do it despite your objections and then pretending Russia threatening military action is unilateral hostility.
> This is not trivial at all, note that this is not actually the original general purpose GPT-3. Codex has 12-billion parameters compared to GPT-3’s 175 billion and it was trained only on open source code. The fact that it does so well is insane to me!

It's not that surprising. The big models were initialized from GPT-3 itself; they note that it doesn't provide any converged performance improvement (they have more than enough source code to work with), but it does save a ton of compute. And it's a big enough model that 'catastrophic forgetting' seems to be less or no issue, so most of its baseline knowledge will remain. (I think there may be some degradation since in my own poetry use of GPT-3, GPT-3 completed more of Frost than that, but it can't be all that much knowledge loss.)
> if both coal and nuclear are down, can we say that nuclear replaced coal, or did coal only replace nuclear?

IMHO it depends on the purpose of the decrease. If it's about green energy, then removing the nuclear while keeping the coal is a wrong choice (see links above), and the remaining coal was chosen to be kept instead of the remaining nuclear. I would call it "coal replaced nuclear".

> Nuclear is so green, the japanese people will shell out $200B for the cleanup of the mess. So much for that argument.

There is a difference between an anecdote and reliable statistics.
Of course! But it generally has fewer bugs than it did before, and you have greater confidence that it has fewer bugs. Perfect security is not achievable - you just make the best trade-offs that you can.

Log4j has, to my knowledge, never been audited.
Normally my response here would be, "the government is doing a lot of things and focus here doesn't mean no focus on the other issues" but lately I'm wondering what they are actually doing about the meaningful "everyday" problems (in quotes because cyber security is an every day/all day problem, but doesn't feel like the forefront of the issues the average American faces today).

For instance, pushing for big tech anti-trust legislation when cable companies and telcos are just sitting around providing awful service and regularly breaking their promises for coverage and quality.

No focus on improving housing affordability or pressure on state/local governments on solutions. Everyone just turns up their nose until the housing demand squeezes their backyard supply.

Generally very frustrating to see and I don't have confidence that either party is equipped to solve this so I'm not optimistic about post-2022 elections.
I am not a scientist. And I wouldn't trust scientists using Wikipedia "sources".
Thanks for sharing this. Really interesting. But a basic question, why not upgrading to PG 13 instead? I am curious about the reasons for staying on an older version of PostgreSQL.
That presumes a president who can successfully read from a teleprompter…
There's a Chip-8 emulator running on Uxn

https://git.sr.ht/~rabbits/chip8uxn
We deep freeze anything of that nature for a month or so before drying off to root cellar. There's a small brown moth that hitches in on dog kibble, bird seed, brown rice, and more that can establish a reproductive cycle most places with organics. So hard to get rid of.
On point 3, there are speed ups around 40, ~80, and on. The colors change at the same points.
My point was, a lot of UI followed or was heavily inspired by whatever Apple was doing even then. These days, there's more Google in the mix.

Before pill buttons, they were gray beveled rounded rectangles, be it native or web, on every platform.

I don't view now as being especially dominated by sameness versus the past.
Linux: only once, when there was no upgrade path to the newer distro version.

MacOS: never.

Windows: at least a dozen times (and I haven't used Windows for five years).
Could someone do me a solid and explain best security practices around bastion hosts and vpn?

e.g.
- would you still require users connected to the vpn to go through a bastion host?
- would you ever run bastion/vpn through the same box?
- are there preferred access use cases for each?
Discussed 3 days ago: https://news.ycombinator.com/item?id=29867290
Working from home for the past 2 years has allowed me to help a lot with my own growing family. I do clock in my normal work (if anything I do more now because of my home setup, being able to jump in and out of work, whatever the hour.) My kids have certainly grown up accustomed to the setup, too. We've got good boundaries and I'm able to see and take part in a lot of their "firsts", all while continuing to do good work.
It's a powerful idea but say I'm a website that wants to add "Sign In With HN". Me personally I've lost faith with "Sign In With Facebook/Google/etc.", nevermind some random site offering sign ins with random forum identities. As a website owner, I would have to trust that the "Sign In With HN" service would still be there in a month or two, nevermind a year or two. If I wanted to create such an SSO service, what kind of reasonable social/technical guarantees could I make to website owners so they'd be confident I'd be around for the long haul?

A better technical solution would be to offer an SDK that does the same thing that websites could integrate themselves, but then you have the explosion of languages and frameworks to support.
No because that is not a loss-less copy. The quality is severely affect and that amount of damage you can potentially do to sales is minimal. EDIT: Completely forgot about the "tax" on blank media and tape records.

Anyway, if they didn't want people to be able to copy their stuff, then they shouldn't have put it on YouTube. The music industry is being as dumb as they ever where, it's fascinating that they've learned NOTHING in the past twenty years. How much money can they possibly lose on youtube-dl vs. how much money they continue the scam out of artists.

At this point who doesn't have a subscription to a streaming service? Those who don't where never going to pay anyway. They aren't losing money.
There's no public record of the log4j code being audited, nor is there any indication that Apple audits the open-source code they use before deployment.
I use youtube-dl to download Cracking the Cryptic videos. The RIAA does not own those videos. In fact there are quite a few videos on youtube the RIAA doesn't own.
I see it now that it's a 2018 article. Makes sense!
Green hydrogen production could benefit from Oregon State research
As Ukrainian I DO blame Russia's stance here. Ukraine is a free independent democratic country. It is free to join any alliances it wishes. This is not the reason to pre-emptively attack it. Also it is totally unprovoked. It is not like Ukraine is joining or welcomed to NATO anytime soon. The real reason is that Putin afraid of Ukraine: https://medium.com/@krokodil42/why-is-russia-afraid-of-ukrai...