skysight-inc/HackerNews huggingface dataset:
I think the analogy isn't quite the same.

Imagine if instead of a quarter granting you an extra life, it gave you a power-up that let you clear the first 10 levels in 2x the speed. That is the design we have reached.

More quarters never made an arcade game easier or different, it just got you more time to play the game. The game design principle of arcade games was to make progression difficult but still possible by playing MORE. Pacman has some RNG, but the rules are there and aren't circumvented at the whim of the developer when a player starts to excel.

New games seem to have espoused the principle of pay more to play LESS which is almost an opposite goal and in the parent comment I think "fun" refers to playing the game, which they might feel is warped when people pay to avoid the playing aspect.
I assume this is /s and I laughed when I read it. Well played.
Predictions:

- If it's even mentioned (hopefully, given log4j topics), nobody will concretely commit to anything that would look like "funding those open source projects we all use internally, rely on, and just assume will be fine." Or putting serious resources to fuzzing, analyzing, and generally beating the hell out of packages like that, committing any fixes back upstream.

- Nobody will be willing to consider that the reason we're in this spot is because we've spent all our effort on complexity and new features instead of actually locking down and making bulletproof a smaller set of features. To borrow from Apple's recent issues as discussed in Project Zero's writings [0], I'm sure your support for an obscure Xerox compression algorithm was used never, or nearly so, in practice (in text messages!). However, your inclusion of it allowed a nice entry point for some absolutely nasty software. Perhaps, instead of supporting every format under the sun you can find, you can support the common ones only, and lock those down. No, instead, we can convert our facial expressions into animated animals and send them to people (I'm not sure I want to know how many weird corner cases that code has).

- Nothing will change, ransomware will continue, reporters trying to shine light on questionable countries will continue having their phones/laptops/watches/etc hacked to hell and back, and we'll continue stumbling forward in the complexity canyon that swallows everything that gets near it.

We could make major security improvements if we were willing to say, "Let's focus on the 20% of the features that make up 80% of the use, and turn the rest off by default." Simplify the software drastically, which then means we can simplify the hardware because performance isn't as critical. But the tech industry's internal structures are absolutely opposed to this - you're promoted for shipping new features, not maintaining things, and not doing weird low level security analysis and fuzzing.

I'm pretty damned pessimistic about the state of computer security, if it's not obvious.

[0]: https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i...
That system exists. They are called bench trials. No defendant is forced us submit to a jury. The defendant doesn't want a jury because he thinks that it will "sock it to him" on a Saturday. He wants a jury because he thinks that his fellow citizens will see that the government is improperly accusing him of a crime. The defendant has the right to a trial by people who are not part of the same government that has accused him. The fact that the jurors don't want to be there, that they have lives away from the court, is exactly what the defendant wants.
I understand, but I have been burned -badly- by relying on critical path dependencies that failed to stay up to date.

Even if only by a week or two, it can be enough to wreak havoc (but my experience is that they are often many months behind).

Like I said, though. I am not competing with anyone, or trying to make money. I write software for free, for those that can’t afford it. I pursue the vocation as a craft, and deliver Quality that would be totally unacceptable in a commercial endeavor (by which, I mean, high quality. Most commercial efforts go for “good enough” quality).

Most folks here would not find working the way I do, to be very satisfactory.
This trusts loginwithhn. The metamask way can be used by any site and only need to trust hacker news.
2gm of ground flower, burnt. smoker

Thats with extreme efforts at conservation, i dont smoke joints. I use either an Allihn condenser or a small hand pipe (which isnt as efficient) but neither burns except when im sucking on it.
Fascinating. I recall two other interesting uses of ffmpeg: to stream to twitch[1], and to record video[2].

[1] https://stackoverflow.com/questions/54273291/streaming-a-str...

[2] https://www.youtube.com/watch?v=HO6oU5oT6uU
That’s anecdotes, not data.
Because Russia is failing apart. People living in post Soviet sphere see how other countries are developing. Ukraine had higher GDP per capita than Poland - now it's 4x lower. It's true for every single place from Kaliningrad, Caucasus to Vladivostok. They are worse off they their neighbours for purely political reasons.

Only thing that holds everything together is the authoritarian regime with strong military and natural resources. The problem is the world will become less dependant on fossil fuels and mining in Siberia is more expensive than pretty much everywhere. Russia won't be able to pay for the army.

This is an existential treat to the Russian state, hence the war is very likely.
It's in that verge article;

"The summit will also include the Apache Software Foundation — the owner and maintainer of the Log4j library — and Oracle, owner of the Java software platform on which the Log4j library runs. GitHub and the Linux Open Source Foundation will also be represented."

Which makes sense -- they host the Open Source Security Foundation (https://openssf.org/) which is meant to be working on exactly this type of problem.
Data structures and algorithms are just parts, like screws and nails. When you're building a house, you don't need to remember if you should use 2 18-penny nails or 3 16-penny nails, or if you can use screws, and what kinds. What matters is that you know how to go look up the building code, find out what's required, use those parts, know how to verify they're installed correctly, and know the consequences to doing it wrong.

Once you've built a dozen houses you may remember these things implicitly, but you never need to remember them. You do need to know why they matter, how to look them up, and how to adapt them to your particular job.
Yes, you would still have people connect to the bastion if they're on the VPN; part of the point of a bastion is to have a central place to monitor and control SSH access, which a VPN doesn't really do for you. Additionally, you will inevitably end up with team members who need access to the VPN (to reach staging and test versions of your applications, or to access customer support consoles) but don't get SSH access; a bastion gives you a standard configuration to apply to your fleet to ensure that "on the VPN" doesn't ever equate to "can log into a server".

You should generally do both things.

Wait, I should word that better. You should generally have both sets of controls: network access control with a VPN, and fine-grained, auditable SSH-level access control. I don't love the "Linux shell server" approach to providing those SSH controls.
I wouldn't call it stigma then.

Sure, it may rarely come up in discussions but it doesn't imply someone is inferior to someone else.

The kind of people who believes formal education trumps everything are not in touch with the reality of education.

You probably did way more learning in your professional career than most graduates do during their degree.
For me, there's nothing that Windows 11 has that 10 doesn't, so I haven't bothered with 11.
You're probably also more able to work if your folks make enough money to have a stay-at-home parent (so you don't have to watch your younger siblings), buy you a car to get back and forth from your job, etc. Without seeing how they actually did this study, I'll go ahead and chalk most of this up to generational privilege.
I'm a long-time THC consumer. The effects differ tremendously based on a wide range of variables. I've also retrained myself after many years to override my natural THC behaviors.

Let me give some examples. College days, my first real year of smoking, I got really high. I mean, really really high. Close to a psychedelic experience. I went to the cafe to get an ice cream sundae and when I walked in, everybody in the entire room stared at me. Or, it felt like it. 30 people making eye contact looking at me AND THEY KNOW I'M HIGH. It was extremely uncomfortable- for my entire life growing up, I hadn't really ever made eye contact with people and having a lot of it was intense.

A few years later, I get really high at a Grateful Dead show. Completely different experience- everybody was getting high and having a great time with strangers and I didn't feel judged and it was GREAT, socially speaking.

Following college I began my professional career, but I am also a full time smoker, so I had to learn how to deal with the "OH GOD THEY KNOW" feelings and forced myself to be highly social at parties, etc. It can be really weird to be a person who is very introverted and wants nothing more to curl up in a ball far from people, but walk around a party introducing yourself to everybody and making intelligent conversation.

Im interested in the psychopharmacology of cannabis and why so many people get the paranoia effect. I suspect it's probably a side effect of tweaking your endogenous cannabinoid system, in combination with the social pressures associated with cannabis consumption.
If you haven't tried Overcooked (1 and 2), it is definitely a game to get into. Good fun for the whole family and has only light mechanical elements with mostly puzzle/working together as a team being the focus.
That sounds pretty terrible, do you have an example of some docs which demonstrate that practice?
I had a statie help push my disabled car to a safer spot then on his own come back about 15 minutes later to check on me and let me wait in the back of his cruiser for the tow truck. (It was below freezing outside.) I’ve seen them helping disabled and stranded motorists on the highway. I’ve had them stop and run emergency lights to protect us while I changed someone else’s tire on the shoulder. I live on a semi-confusing curve where we get an accident a year or so and the road is state-owned, so I see the state police response to help the affected drivers and pax. Even when the driver was clearly at fault, they’re professional and helpful.

Recreationally, I’ve played a lot of baseball and softball with cops; I end up hearing some of the good and bad socially there as well.

Are there dickheads who become cops? Hell yes! The profession probably specifically attracts some of them. Are all cops bastards? Not in my experience.

Edit to add: our college campus police had a phenomenal relationship with the campus community. If I had any kind of issue, I’d have had no qualms about asking them for help. That’s a bit of a “gimme” perhaps, perhaps they have an easier job in some ways, but they had earned the trust of the majority of the community in ways that the neighboring college police forces had clearly not.
Because then nothing protects members from Russia. If two NATO members go to war, there is no clear side to take.

Also, Russia does not want to join. They want the USSR back
Russia has controlled Crimea since the 18th century. It's not an artifact of Soviet Union.

>All these regional problems are mainly due to the language. If Ukraine allowed Russian as it's second official (or at least regional) language, Donbas would return back in a blink. And Crimea might follow.

What? History goes back farther than the 20th century.
Microfibers Released into the Air from a Household Tumble Dryer
This is an institutional problem and they should be blamed though.

It doesn't really matter what students "prefer", if a bank doesn't do their due diligence and a student isn't able to repay their loan, then the bank should be losing that money as a bad investment. They won't give a $1M mortgage loan to buy a 50k lot, and likewise won't give it to someone that doesn't seem like they could pay it back. I do think there's value in people getting degrees that don't pay well - but then you shouldn't be getting a loan to do so.

> students would be paying whatever Harvard or Stanford asked

I don't think this is true - people simply can't go to a school they can't afford and people don't have infinite money. We gave the banks the freedom to tell children that they will indeed be able to pay back loans that they often cannot, so it's the bad actions of one organization(banks) enabling another(school). Ivy league schools may be like Veblen goods where increased prices also increase demand - but that can't be true for all schools and we've seen tuition increases across the board.

The solution that seems best to me is to first fix the bankruptcy issue - if someone can't pay back a loan that is a risk the bank is accepting by giving the loan, just like any other loan. I think that alone would probably have enough of a chilling effect that way less people would be able to attend colleges at first and they would be forced to lower tuition rates. That would correct the market going forward, but it doesn't really help people that already fell victim to this system. That seems like it could be remedied by either making interest rates 0 or capping total interest to some amount relative to the principal (e.g. the total amount can never grow to more than 110% of the principal).

Similar to healthcare, I don't think education shouldn't be profitable in the short term - it's a long term investment a society has to make in itself so you can't really track it as an individual investment in any one person. If someone else becomes a doctor I'm still benefitting from that so it makes sense that I'd pay into some of the cost to educate that person. Unfortunately in the US at least we seem to be totally unable to do anything without a short-term and concrete path to profit regardless of the amount of good it would do.
Having seen how bastion hosts or “jump boxes” work inside the enterprise I share your view. In practice they are generally not very well protected and are a very attractive target for attackers. It’s better to use a privileged session manager or regular ssh with mfa and ideally some type of identity proofing.
This article was behind a paywall for me ("you have reached your article limit").

Archived copy: http://archive.today/IeVtE
> Median home price in the US was $222k in 2008, its $400k in 2022. Rents have gone up accordingly

This is between misleading and untrue. Home prices have gone way up, while home monthly payments haven't, due to the extremely low interest rates on mortgages. This means that downpayments are less accessible, but the rest of the payments are about as accessible as before. Until 2021, monthly payments were actually unusually cheap for the last bunch of years. Probably offsetting the higher down payments and lower inflation.

But the big one is that rents haven't gone up accordingly. I couldn't find 2022 data, but from 2008 to 2020, median monthly rent went up from $783 to $1,104. In 2020 dollars, it went from $941 to $1,104, or 17%. It's significant, but nowhere near the doubling you posted.
(And Plaid noted that they vastly prefer to oauth to banks, and do with many other banks, but that Venmo won’t accept oauth and demands credentials.)
> just about the idea that recovered individuals would be less protected than a vaccinated individual on average.

I don't think its so much about the idealized immune response, but that in general, people's immune response to natural infection seems to widely vary, with many not having much of a robust response.

It very well may be that a good immune response to natural infection may be better than one from an mRNA vaccine targeting the spike protein - but in aggregate the vaccine will be more successful because its induces a more consistent response.
I always interpret new licenses through the lens of Debian's Free Software Guidelines.[0] I don't think this would be accepted as it limits usage.

Besides that, the definition of a "small business" is terrible. A company is only eligible to use the software if they meet all of these conditions:

- had fewer than 100 total individuals working as employees and independent contractors at all times during the last tax year

- earned less than 1,000,000 USD (2019) total revenue in the last tax year

- received less than 1,000,000 USD (2019) total debt, equity, and other investment in the last five tax years, counting investment in predecessor companies that reorganized into, merged with, or spun out your company

1M USD in revenue is shockingly easy to cross. It also means that businesses in high cost of living areas will be excluded before ones in cheaper areas, even if they're otherwise identical.

It's an interesting idea, but I think it's a non-starter.

[0] https://people.debian.org/~bap/dfsg-faq.html
seems like the springing requirement to negotiate a paid license after $1m in revenue is just destined to be forgotten. it will come up two rounds later in diligence and be a minor pain to deal with. I'd probably avoid using something licensed under this just to avoid the headache later. or would prefer to pay for a commercial license upfront even.
This is great. Do you have plans to expand the controls or animation options? For example, adding pauses, or additional animation types like scale or rotate. Thanks for sharing this project.
I agree with everything you said. The best interviews ive had are those where I felt like I am working together with the interviewer.

I think being able to handle criticism is an important trait to look out for. Many times interviewees will defend their method too aggressively.

But if you have to pick between two people who are equally pleasant to work with, but one was able to solve the problem, you'll probably pick the one who solved the problem. When the competition is fierce, the candidate would probably still have to spend some time practicing on these problems.
Eh, Armenia losing its war wasn't particularly detrimental to the Russian interests in the Transcaucasia - if anything it helped bring Pashinyan back into the fold, as evidenced by him embracing CSTO during the Kazakh unrest.

Minsk is also hardly "swallowed by protests" right now, they've succeeded in driving all resistance back underground.

I agree that the post-Soviet world is in a bit of a crisis but it's not particularly more crisisy than normal. Putin's just getting older.
They can move to Russia. They have as much right to move Crimea to Russia as citizens of Maine do to leave the US and join Canada - e.g. not much.

This is all hypothetical though. What happened in reality is that Russia rolled tanks into a neighboring sovereign country, invading it, and stole a part of it. It's a blatant and egregious act of war.
I just came here to complain about the grammar of "More than 1 million fewer", it took me way too much wheel-spinning to parse. I would have gone with
"Over 1M fewer" or even just "1M fewer" - we can handle the lack of precision.
I'd be interested to see this study repeated with male victims. I think each sex has its own issues when sexually victimized:

- Females, of course, can get pregnant, and our assaults are more likely to be physically painful.

- Males have zero social support and are far more stigmatized for being victimized, and they also have less of a support network/are more isolated than females on average. They also have fewer resources available since sexual assault is seen as only happening to females. Fewer shelters, hotlines, etc.
Show HN: FunkyABX: audio blind tests in the browser
false dichotomy or red herring (take your pick).
And, it was banned. All I wanted is write a fictional story and vent my anger at Digitalocean.
Hello, this is a LiveView app (although most of the player code is in javascript).

https://github.com/conradfr/FunkyABX
A professional Jury opens up avenues for corruption.

Maybe someday we can simulate human brains well enough to run the markovs on governance ideas to see if it's worth it.
You can't get a public loan for $200k. Public loans max out at around $60k. The OP was talking about government backed loans being predatory.

And someone with $60k in public loans most certainly can dig themselves out of that hole, because repayment is capped at 10% of disposable income, and it is cancelled after 20 years.
>If anything increased U.S. military presence in Poland is sorely needed.

Why? What purpose does this serve?
OP would be wrong, then. The execs those companies send will be a combination of politically brilliant and technically knowledgeable.

I've worked with a wide range of execs across several fields now and many of them are truly exceptional people with deeper understanding of their business's low level details than you'd expect.
there's a limitation of liability written into DigitalOcean's terms of service.
You report it so that the state is aware of it. Let the state find the pattern. Companies get away with this crap because we let them.
Also, Craig Silverstein, 1993 ICPC winner and Google employee number one?

https://en.wikipedia.org/wiki/Craig_Silverstein
I mean, ok, but let's not base our entire view on one trade, if you can even call forklift operation a skilled trade. Plumbers, electricians, carpenters, HVAC techs all have upward mobility from apprentice to journeyman to foreman to owning their own businesses. Apprentice level electricians make about $75k in Alaska with zero experience. Foreman electricians managing commercial electrical jobs make about $175k. YMMV per state or metro but that's some decent growth IMO, especially considering no college education requirement.

I agree that the jobs are tough in the apprentice years. You are literally doing the grunt work for that trade, but a) you are getting paid to learn, and b) if you start right out of high school you are still young and able-bodied. Apprenticeships only last 2-4 years typically. You could be a licensed electrician at 22 years old.
Just to try and clean up the attendee list since each article has a slightly different list:

Apache Software Foundation (ASF was represented by the current President, a board member, and the VP Security https://twitter.com/abayer/status/1481676645891256320)

Linux Foundation (LF it was the @theopenssf leadership led by @brianbehlendorf https://twitter.com/cra/status/1481677285325422592)

Akamai

Alphabet

Amazon

Apple

Cloudflare

GitHub

IBM

Meta

Oracle

VMWare

"Feds attending include representatives from the departments of Commerce, Defense, Energy and Homeland Security, as well as agencies like the Cybersecurity and Infrastructure Security Agency, the National Institute of Standards and Technology, the National Science Foundation, the Office of the National Cyber Director and the Office of Science and Technology Policy."
> Honestly, my suggestion would be to be open about your own experiences and the impact they've had on you.

I'd imagine that many people would disagree with this. Dwelling on people's supposed 'weirdness' is not a healthy attitude (least of all when the 'weirdness' is our own) and would not be seen as "open" or "accepting" by many, but more of a signal of entitlement. If you think that the other person would benefit from something, just behave accordingly without dwelling on it, and people will hopefully realize that they can ask you for these things with no fuss.
I agree about the mass adoption threshold, but even the current breed of tech makes the workday-in-VR feat possible: https://news.ycombinator.com/item?id=28678041