skysight-inc/HackerNews huggingface dataset:
If there's malicious code already excepting with that level of privilege then, yes, you're pwn'd. However, I don't think that's what the main threat is. Probably the main threat is totally legitimate code, that has access to those variables, and now it may do something bad on accident.

It's sort of like how I tell my mom, "Even you don't want to know your passwords", when explaining that she should use a password manager. The reason in this case is because she may get fished and redirected to a fake website. If there's a password manager, and she doesn't even know her own password, then it won't recognize the certificate and she's safe. However, if she does know it, then she has the ability to leak it.

This is the same with environment variables, and a reason why secret storage is preferred over them. Think of environment variable as your mom knowing her password, and secret storage to her using a password manager. More or less haha.
I'd love to know who's trying to oust him with all these leaks about lockdown parties at Number 10, it's been an absolutely masterful bit of politicking. They wait just long enough for Johnson to commit to the lie, then drop another leak that discredits his previous defence. My current theories are:

* Michael Gove: he's always had leadership ambitions and is good mates with Malcolm Tucker-esque figure Dominic Cummings who's well known for his ability with this kind of shit-stirring from his experience with Vote Leave and the 2019 Tory election campaign. Gove has backstabbed Johnson before (he sabotaged Johnson's leadership bid at a previous election) and while he's nominally a Johnson loyalist I'd definitely bet he's got the guts and the motivation for an 'et tu, Gove' movement.

* Dominic Cummings: he's definitely got an axe to grind against Johnson after he (allegedly) got forced out of the tent by Johnson's wife Carrie Johnson who's apparently exercising a lot of influence at Number 10. This might be purely a spite move! He's an interesting character, he's never really been a Conservative ideologically and is clearly an intelligent political operator with his own agenda revolving around breaking up the 'blob' of bureaucratic inertia in the Civil Service in favour of a more data-driven culture associated with the tech world. I still don't really know what to make of him if I'm honest and he's been around for years now.

* The Coronavirus Recovery Group, a faction of Tory backbenchers opposed to lockdowns and other COVID restrictions. Someone was definitely trying to sabotage Matt Hancock last year in a similar fashion, and someone on the inside had to be leaking the CCTV footage of his hypocrisy (for those unware, he was the Health Secretary during the first stage of the pandemic and very hawkish on lockdowns until he got caught breaking his own mandates to get off with a member of his staff - both were married). The Tory backbench is on the whole increasingly anti-restrictions and this could be a way of achieving this policy - these revelations of an entrenched culture of hypocrisy and 'one rule for the little people, another for the elites' have certainly destroyed the credibility restrictions had with the public indeed they're being rapidly phased out for the most part.
From experience I can say that it works. Simply by using different clothes (as you described, t-shirt vs multiple layers). The only people who really struggle with no heating homes are those who need colder temperatures to sleep. I had several guests who complained that they'd like it cooler at night than during the day. However, that's not really possible if the house isn't really heated anyway and thus won't lose heat during the night.
If you're doing user-agent detection, your code is broken by design. Use feature detection instead.

Please. I'm tired of having to use an extension to spoof user-agent in order for some websites to work. The creators of the Vivaldi browser were even forced to permanently spoof Chrome's user-agent due to websites unrecognizing the Vivaldi one.
I absolutely understand it, but I think the correct, although bit inconvenient approach is the one you mentioned — properly learning the framework either through docs or other materials.

Way too many developers try to write spring (but also jpa and many other useful, but complex tool) by trial and error, which let’s be honest, not a good tactic even if one can easily inspect the source. (The recently posted microsoft blog post “even if the precondition doesn’t do anything, you still have to call it” comes to mind)
Well, I'm not Indian but I can see it being a separate dialect, much like American English. For instance, an Indian might say "I have a doubt" instead of "I have a question". And as you mentioned, there is an accent, just like with American English.
going cloud native (AWS/GCP/Asure) & using their build tools makes things simple for things like container management and integrated development.

GitHub because it’s better UX. It’s even quite simple to setup good automation around a codebase.

Platform teams are using Argo, dev teams not really doing too much ci/cd which I like.

& to be honest CI/CD requires continuous investment as things continuously change. Not that it isn’t necessary… but in an enterprise environment you I’ve seen teams become more successful on their own rather than trying to fulfill any “reciprocity” bs.
Could you elaborate further on this? I’m curious what commonalities you find in the cuisines of these areas.
I still think that critical thinking has an important role here. You say "they didn't reason themselves into the position and you cannot reason them out of it". This is correct and is actually what critical thinking is about: reason about something instead of blindly believe in something. If they were capable of critical thinking, they would have reasoned about it instead of blindingly believe in it. And while they could still reach the wrong conclusion, you could still try and reason them out of it.
The word legal itself means that it is authorised by law. "Everything which is not forbidden is allowed" is an established principle of law. Without the law, there is no such provision. Therefore, without the law something can not be either legal or illegal.
The protests in Germany regularly include all sorts of other conspiracy subcommunities, including the seedy underbelly of it all, anti-semitism, but also 9/11 truthers and weird esoteric believes. Anyone really into astral healing five years ago is busy these days proving viruses don't exist.
> (Posix) shell scripting is just everywhere and is an important skill to have.

Not on Windows.

Which may or not may matter.
I do not think this is the right question you should be asking.

Your aim should not be to want to do a Ph.D. Your aim should be to want to get involved in a particular research area that you are already interested in, and you see that opportunities at academic institution are better suited to accomplish this goal.

To me it sounds like you just want to do a Ph.d for the title.

When I was contemplating a Ph.d I started out like you, just wanting to do it for a title. But after spending time as a research assistant in my pre-Ph.d phase I realized that just "doing a Ph.d" is not at all what I wanted. I wanted to work on something I was passionate about. Else it was better not to attempt anything at all.
You are correct, I was sloppy (and also underinformed and curious).

I should have said "service is included".

Which I (with my temporarily bruised ego) think means that the standard +10-20% that you apply in US it not really expected.
I think a key issue is that generally the person designing a house isn't the same person who will be paying the energy bills in 30 years time.

Few people will pay a lot extra for a better insulated house.

The end result is that the cheapest insulation allowed by law is used rather than something that costs more today but saves a lot in the long run.

I wonder if a solution to this problem might take the form of "We'll sell you the house, and promise to pay half the energy bill for the next 50 years". Obviously there are issues with that... is there a better way to align incentives?
Very publicly his flight attendant, then fired her, and then left death threats on her phone’s voicemail.

Yeah he’s comfortable enough with blizzard culture to willingly make recordings.
To save others from searching what the extension is, from the extension github page:

Chrome extension to remove YouTube recommendations, comments, and more so you don't go down the rabbit hole again!

https://github.com/anthonyftwang/youtube-rabbit-hole
When I started using Linux back in 1995 I had a large notebook where I would write down everything that I was doing on the system. This was a way for me to keep track of thing that I've attempted to do, that have worked or have failed.

At that time I was learning Linux and I often reinstalled the system. My notebook has helped me to get the system back to the point that I needed at certain time.
> With peer-review you know that someone will read your work that has the background to understand it and to catch errors.

That's overly optimistic. What you mean is "with peer-review you know that someone will at least skim your work and maybe catch errors."

I agree with the rest of your points though. Zero peer review is probably not a great solution.
Nobody "blindly" supports democracy. It happens to be a system with an obvious mechanism for continuous improvement or at least self-correction. It's also empirically quite successful at avoiding war and fostering prosperity.
SHERLOC/WATSON instruments on board Perseverance rover can image with 10-15um resolution. Not super impressive in terms of microscopy, but it's getting there.
South Africa here, it's not common to build energy efficient houses although it's gradually getting slightly better.

I'm busy changing all my windows to double glazed (single glazed is the norm, believe it or not) and proper insulation in above the ceiling.

Instead of freezing my ass off every winter it's now super pleasant, and it's cooler in summer. Such a non-brainer - I just don't understand why people don't do this more.
A wise man in ancient time did this by comparing shadows in different places. Can't remember his name though. But he was quite close with his calculations. It doesn't need to be expensive. Just wait for noon. Then hop in a car/bus/train/whatever and do the same at the same time next day somewhere else. It helps if the shadow-casting thing is the same height.
I think my argument runs counter to this. Stop chasing things you think might give you happiness/contentment in some long run, as though it is some intangible second order effect.
Rust support in the Linux Kernel (v3 patches)
I lived in a PassivHouse in Germany. Didn't need to heat if it was more than 4C outside (less if more people were at home). I never experienced -40C, but at -20C it worked fine. Probably the only time all heating had to run to some degree 24/7. I'm sure that -40C would've been fine as well.

In the end it all doesn't matter. You build the house to some standard and then design the heating system to be able to cover thermal loss for the expected temperature range. In Canada you'd probably just add twice as much heating as you would in most of Europe. But especially at those temperatures, very well insulated homes will save a ton of money.

The only part that kind of worked less well at very low temperatures was the heat exchanger for the ventilation system. It didn't run at full capacity if it was well below freezing. But I guess there are other systems out there which are designed for -40C as well.
uLisp always seemed interesting to me, but I've never managed to have a good place to use it.

Lately I've been wanting to try running Spry [1] on an mcu. Or perhaps write a lisp-like language using msgpack as its datatype.

1: https://github.com/gokr/spry
Yes, it's one of the top recommendations (internal wall insulation) on my EPC and have had a survey. 60mm PIR boards would be used. Turns out I wouldn't have to sacrifice much space but would have to pay a bit extra replacing the cornices.

There are some regional grants in the UK that can cover a large portion of the amount. For me, it is £7.5K, with the quote I received at £9K. This would not have covered the kitchen or bathroom.

Going by EPC recommendations and numbers alone, I can reduce my energy requirement by about 40%.
Not just 1600 - it was fairly common knowledge since antiquity. In 300 BCE, we knew not only that the Earth is round, but also roughly its radius. Moon's distance and radius was estimated about 100 years later. Sun-Earth distance was also (incorrectly) estimated about the same time, but with enough precision to know it's much further and bigger than the Moon.

Columbus was being dissuaded from his voyage because people correctly calculated his supplies will run out way before he reaches Indies west-wards
The recently completed summary also says Activision had collected about 700 reports of employee concern over misconduct and other issues—in some cases separate reports about the same incidents—since July, when a California state agency filed a lawsuit against the company over harassment claims.

The Nov. 16 article, citing interviews and internal documents, also detailed misconduct allegations against Mr. Kotick, including when an assistant complained in 2006 that he had threatened in a voice mail to have her killed

There are other examples of the culture in the article. I simply don't see how the CEO didn't know this was in the culture, especially considering the allegations against him. It isn't like this is the first time we - non blizzard employees - are hearing about the culture there, either. How, exactly, is expecting him to be held responsible vindictive?
Welcome to https://github.com/flashlight/flashlight

Good luck.
Thankfully web developers took care of that.
Then use 550 instead.
Curiosity rover already used jpeg compression: https://www.design-reuse.com/news/34583/jpeg-encoder-ip-core...
I am not knowledgeable enough on the topic, but as far as I know X didn’t have a wide-spread way to manage colors either — so I guess clients like that would default to “don’t care about it”, which will translate to some default color space.

Clients that query for this yet theoretical only color space extension can then ask the server for the color balance of the given screen and fill their buffers accordingly. The existing buffer protocol could also be extended to contain information about the color space used for server-side handling of this information, though as the other commenter mentioned, it is best handled by the client, the protocol has to display it only.
That's just a problem with developers who do Java as their 'nine to five' job and don't have any interest or passion to really find out how stuff works. I've met a lot of those people and there's no reason they can't contribute if the project is set up to accommodate it.

On the other hand there are the enthousiasts (like you I presume) who like tinkering and using the language to the fullest. Any successful project needs at least a few of these people, but they can also go overboard by building a lot of custom functionality where any standard library could have been used.

While I'm also an advocate for increasing knowledge for the systems you're working with it's no 'sin' to use some libraries. For instance: for your HTTP server example, it's quite easy to just listen on a socket and respond to a request. But you want parallelism, so you need a thread pool. And queues, configuration and error handling. That will escalate quickly so why not pick whatever Java servlet implementation which has most of the complexity and - more important - is already production tested so it won't fall over when you deploy it live. And then there's stuff like OpenID connect or SOAP (yes, still exists) where you can 'plug in' an implementation on some servers so you can get work done instead of worrying about getting all the implementation details right for some complex protocol.
> Looks like an IDE / language server that unrolls the annotation generated code might be what's missing here.

I think you're missing the point.
If an app I was using did that, I would immediately delete it from my device and look for an alternative. It wouldn't even matter to me if the alternative offered less features.
Much higher than 90%. The one I had in the passive house I lived in was specified to 98% at most temperature ranges. I guess most of the time the temperature difference isn't that large anyway (<20C) so they will lose next to no heat.
> Windows don't make for very good ventilation

The point was not with ventilation quality, but with the feasibility and compromises of alternatives. (The strict point was with defining "mandating good ventilation".) Mechanical ventilation with energy recovery may be far superior, but if that means constant noise it will be an issue - to some, a radical issue.

> They definitely can warm an entire house

And I have stated that they can be perfectly inadequate and ineffective (explicitly: which is not contradicted by your statement). Evidently, it will depend on implementation, and again on the expected effect (where temperature is only a partial factor).

Speaking of implementation, I have been in hotels where the heating pumps were unbearable in that they made the room tremble and clearly vibrate.

So, when one speaks of mandating technologies, there are critical implementational issues to be remembered, and the "embrace" drive is to be immediately criticized (just applying one's usual duly Reflection). It is relevant that I have seen in the past legislation mandating some technologies only halfway trough (e.g. mandating valves without mandating pressure control systems), creating immense damages on large territories.

Edit: also:

> Heat pumps don't always need big fans ... Not much louder than a gas furnace

You have not stated they are perfectly silent, 0db - in fact, you seem to suggest the opposite. As said, some do not tolerate background noise.

I do not see where you read anything wrong.
Thanks - not heard this before!

Impossible to imagine how this could go over people's heads. Says something about how narrow many people's cultural horizons were in the 1930s I guess.

According my parent's retelling of the RtH story, the humour is a result of posh people (who get to make BBC comedy) being exposed to working class while serving in WW2, although there is obviously gay subculture in there too.
Bingo. See also the rumored “definition of insanity”; i.e. doing the same thing over and over again, but expecting a different result.
i think the original proverb is actually the fish stinks from the head, which later became the fish rots from the head, but this is biologically incorrect.

https://australian.museum/learn/science/stages-of-decomposit...

for example you can see the decomposition of a pig, it looks like the head is first, but it is actually the bacteria in the gut.
JPEG2000 supports lossless encoding. Even if you scan at higher than print resolution, if you compress too much with lossy compression, the original print resolution date won't be recoverable.
Approving a drug based on a theory that it might help is not a good approach. If you're asking for approval to sell a drug to the public you need more than a hope. Some degree of solid proof that there are better outcomes with it than without seems a bare minimum threshold and Biogen couldn't clear it.
I would use nature of statement (https://www.wikidata.org/wiki/Property:P5102) -> expected (https://www.wikidata.org/wiki/Q50376823) as a qualifier. That would make it easier to update in the common case where it does happen by just deleting the qualifier.
> we'd be doing ourt clients a great disservice to sell them on a microframework with our homespun implementations of security, transactions etc.

One of the benefits of Spring Boot was that Pivotal test and ensure all the components work together, so you can upgrade safely. It made keeping things up-to-date much easier.

There's no business value in trying to knit it all together yourself, if you can pass the work onto somebody else who is paid to do it.
Setting up async communication in a tech team
Yes my guess was that they had left Rupert Murdoch in, and left out the buffoon who currently has the keys to number ten.
I doubt the maintenance part. I lived in one and experienced more maintenance. You have the heat exchanger as an additional moving part which needs cleaning, new filters, etc.

Also, you need a perfect seal between inside and outside. So any cables going outside (blinds, air conditioning which you'll still want if it's 40C outside, etc) needs to be sealed and is thus much harder to replace or repair.
Minor correction: Gorenje is Slovenian, now owned by a Chinese company.
Ireland to launch basic income program for artists
In my country, you can verbally tender your resignation in the meeting to fire you, and the company will almost always accept.

It saves the company some paperwork, and weakens the employee's case for taking them to court for wrongful firing. In exchange, the employee can truthfully tell future employees they weren't fired.
> all you have to do is compile a binary and copy it to the server

Docker does this quite well, and solves a bunch of other problems you're likely to have regardless. One really simple example is "how do you copy it to the server?" Do you have ssh keys for your server on development machines? How do you handle the "Oh I'll just remote in and fix this one X"?

It's also _crazily_ easy to get started with, and handle middling amounts of scale. If you're on AWS, Elastic Beanstalk is plug and play. If you're not, DigitalOcean App platform will host it for you, with automated deployments from git for $5/month with basically no configuration needed from you.
Didn't he also write a letter on behalf of the HR/People manager around the sexual misconduct claims and then put her name on it ? It may have been Helaine Klasky - I'll find the article.
> Samsung allegedly will have 3nm in production early this year while TSMC 3nm has slipped to late this year.

You're making the mistake of taking their process names at face value.

Samsung 3nm is less dense than TSMC's 5nm which has been shipping since 2020. They are more than 2 years behind, as they still haven't matched TSMC 5nm even when their new 3nm launches.
He is also not supposed to leave death threats in voicemail.
"just a disaster waiting to happen" - if I was the maintainer, I would appreciate a test that demonstrates the failure scenario.
Not really. Just a prediction about the future and as the infrastructure takes years to build out better to start early than late.

Bandwidth usage globally has been growing at around 30% per year for a long time now with nothing showing it would slow down (obviously not all of this is wireless). LTE will sooner or later run out of bandwidth and thus 5G basically allowing more mpbs on the same radio spectrum (and also rolling in new frequencies)

Even today in relatively low population density country like Finland (where I live) LTE connections in cities are slower during peak hours due to the radio frequencies just being full. (In general most plans have unlimited data so people use them a lot)
If you ventilate purely via windows, you'll need to always pay attention to avoid any mould. With a ventilation system hooked up to a heat exchanger, there's basically zero chance you'll ever experience mold.
I used Spring Boot and just set debug breakpoints, that way you don't have to step into and out-of, you just press "play" and it moves to the next breakpoint.
The anti-charity people get around their absolutism by inventing "mutual aid", which is what they call charity when they like it.

(similar thing in education involved deciding "equality" was bad, so they invented "equity", which is the same thing except they like it.)