skysight-inc/HackerNews huggingface dataset:
I had sysadmin rights on my school’s Windows servers after some very simple social engineering (for a 10 year old). The real irony was that I was called to the principal’s office on multiple occasions because I seemed to be able to fix things on the network that the local “admin” (e.g. music teacher) couldn’t.
Fun times indeed.

It completely ruined my respect for authority figures. Which in retrospect has been the most valuable outcome from being the local “that kid from Wargames”
Thanks, I didn’t know about pipx. If it works as advertised that will be a huge improvement for me!
Not if you run your entire dev setup through docker, though. I'm tired of python's craziness. Always someone on the team unable to do poetry install, because some variant of their system makes it not have a wheel, and suddenly a whole c++ toolchain needs to be installed. And if you maintain lots of projects with different versions it's such a hassle.

Now I volume mount the git clone folder into a container that has everything set up. And that setup works for everyone, on all OSes and not depending on local environments.

PyCharm uses that image as a remote interpreter, so pressing play in pycharm just works.
There are not a lot of providers on the FIPS list though. Coupled with the fact that virtually all government employees use Windows computers, and you end up right back where we started. The only real competition is Windows hello.

The various auth apps are problematic because they usually come with some kind of requirement for intune or similar to do remote attestation. That's a weird place for the government to be with contractors, since a lot of those contacts don't have language requiring that contractors have a phone at all, much less that they allow the federal government to MDM it.

It could be providers other than yubico, but it won't be.
I had two friends that did similar in the early 2000s, except that while the school knew there was a breach, they never caught who did it. Had all student social security numbers, grades, attendance, etc pulled into a thumb drive on the school network. I imagine this happened a lot around various school districts, especially in that time when school networks were less secure.
Apparently a few early birds have arrived in Ottawa this morning.
At the macro level, if you're the policy-maker and doing the persecuting, stories like this should give you pause. Of course it's survivor bias for the individual.
It's always been passed off as too slow, or too complex, or completely unnecessary. Modern microkernels are fast enough, proven secure, and we just need to start building the stuff to use them.

Imagine if you woke up in a world without household or industrial circuit breakers or fuses. There would be stories in the news every day about some foolish person who plugged in their own old appliance and didn't upgrade to the newest model, and thus burned down their house. How could a user have been so foolish? Clearly we need to license all devices that will plug in to houses so that the fires can be prevented.

Any efforts to institute circuit breakers would be considered too complicated, or too much resistance added to a circuit, stealing power. Any number of rationalizations would be internalized by electrical users and electricians everywhere.

This is the software world we live in.
Wow, thanks. This is way more complex than I expected. When I started working on this I thought that I might want to switch to "binary coded decimal"[0] to avoid issues with inputs like (0.1 + 0.2 - 0.3).

I haven't had a chance yet to read the full paper, but it talks about fixing trig issues too. Would this fix my (unfortunate) result for `e^(ipi) + 1` to be exactly 0, too (instead of something ugly like (-210^-16 + j1.22*10^-16)).

And is there an implementation I could use?

At some point I plan on open sourcing this code, so if I never manage to fix this then maybe someone else might someday do it. Originally I figured I could finish this whole project in a few months, especially after figuring out webassembly and discovering MathJax. But it ended up taking way longer than that, with little things constantly popping up that I wanted to fix before I could even think about sharing it.

[0]: https://en.wikipedia.org/wiki/Binary-coded_decimal
> i have a hard time imagining that that has changed.

Fun trivia, https://www.portauthority.org/system-map/ shows stats on this. It doesn't support deep linking, but I went to the outbound stop just after the bridge, and it says

In FY2021:

Average Weekday Ons: 0.32

Average Weekday Offs: 5.1

Pre-pandemic ridership for CY2019:

Average Weekday Ons: 1.00

Average Weekday Offs: 37.00

It has dropped by quite a bit since the pandemic. The 61A has a daily ridership of 1,643 and the 61B has 1,312.
Unlisted App Distribution
A very weird thread that degenerated into: "PaaS vs self-hosted/self-owned hardware".

I'm pretty sure most people sysadmin'ing their Linux servers are actually doing it with rented dedicated servers. TFA btw specifically mentions: "don't manage physical hardware". Big companies like Hetzner and OVH have hundreds of thousands of servers and they're not the only players in that space.

They don't take care of "everything" but they take care of hardware failure, redundant power sources, Internet connectivity, etc.

Just to give an idea: 200 EUR / month gets you an EPYC 3rd gen (Milan) with shitloads of cores and shitloads of ECC RAM and a fat bandwith.

And even then, it's not "dedicated server vs the cloud": you can have very well have a dedicated server and slap a CDN like CloudFlare on your webapp. It's not as if CloudFlare was somehow only available to people using an "entire cloud stack" (whatever that means). It's the same for cloud storage / cloud backups etc.

I guess my point is: being a sysadmin for your own server(s) doesn't imply owning your own hardware and it doesn't imply either "using zero cloud services".
Growing up in a Third-World country, I was tinkering with electronics at age 10 and built my first crystal radio at age 11 from junk parts. Dumpster-diving isn't hard as long as you don't mind the occasional dead dog.
Yes many companies are increasing pay. Inflation, great resignation, etc. are all factors.
I used to use Wire and then I got my friends to use Element. It’s been working great so far. I just wish it had support for emoji skintones in responses.
But not suitable for anything Unix or Unix related, because it has no MMU (and likely won't ever have an MMU).
Update: Safari reader mode now works. Thanks!
It had completely depended on the bank. In the Netherlands, 20 years ago it was a hardware OTP device. Same with a big Swiss bank ten years ago. Up until a few years ago with a big german bank it was a physical sheet of OTPs. Now it’s a mobile app that either recognizes a challenge image, or receives a challenge by network.
Solaris most assuredly had neither ZFS nor dtrace for the first decade of Linux existence.

Kernel architecture (be it micro or monolithic) per se is no virtue.
> Iirc, a 2018 stackoverflow survey of what devs use had 50% on windows, 40% on Linux and 10% on mac.

You needn't rely on your memory, the survey is still available [0]. FWIW, it doesn't seem to contain a question about the OS where development takes place, only about the targets[1]. The top answers were:

Linux 48.3%

Windows Desktop or Server 35.4%

Android 29.0%

AWS 24.1%

Mac OS 17.9%

[0] https://insights.stackoverflow.com/survey/2018/

[1] "Linux and Windows Desktop or Server are the most common choices that our respondents say they have done development work for this year." (emphasis mine)
From a customer service standpoint, customers are less likely to be repeat customers when everybody in the entire building is trying to sell them a credit card on top of their purchase. My grandmother, who between she and her husband never took out a line of credit for anything in their entire lives, got so fed up with the practice that she started wasting their time by agreeing to sign up for a card every time she checked out at any department store. Of course she was always declined because was an 80 year old with a credit score of 0.
Off topic: I'm watching Hackers[0] for the first time tonight and this is on Hacker News.

[0] https://www.youtube.com/watch?v=peBuMWtkw8s
I forgot to mention one other thing about tree-sitter: the error recovery/tolerance, which is a requirement for practical parsing applications. It does an excellent job of returning a parse tree even if the text contains tons of errors. Instaparse, besides being much slower, just gave up if a single character was out of place. Super rarely there will be an error that causes tree-sitter to fail more comprehensively, but it is one of the few parser frameworks that even tries.
In the grandparent comment, he accuses me of lying and hypocrisy, neither of which is correct. The only thing I had accused him of is not knowing anything about the Cultural Revolution, which is obviously correct, since he had confused it with the Great Leap Forward.

Ignorance is not immoral; it's the state we all start in, after all.

So I do not agree that falsely accusing someone of lying and hypocrisy is "identically snarky as" correctly "accusing" someone of ignorance.
A deck will be replaced several times over before the bridge is. A little bit of stuff falling onto a roadway below can cause a lot of mayhem. On boring overpasses they stick boards across the bottom flanges of the I-beams. On fancier types of bridges they have to come up with more elaborate ways to catch stuff.
vim will ~never have a better debugging experience than VS Code (or any proper IDE) I think; and That's OK. Each tool has it's own uses. I'm a Vim fanboy; but i still do any non-trivial (local) change in Vim. If i have to dev on a build server; local(tmux) Vim vs remote-ssh VSCode it becomes closer.
Was mass incarceration of the Japanese Americans a noble cause? Nobody wants a bunch of hot-war enemy spies running around, after all.

I'm not trolling you, I want to know where you draw the line (if at all). 9% false positive? 99%? 99.999%?
>>Senior sysadmins are really hard to come by today, not to mention someone who wants to do architecture also.

I am not so sure... I am a well seasoned sysadmin, been doing server, network, architecture. I consider myself a solid linux/network expert and have managed datacenters. When I look for a new/more exciting job, or for a pay raise, all I see are "cloud, AWS, devops". I never see "old school" sysadmin jobs e.g. as you say, we have a room full of linux boxes and we manage them with ansible/scripts/etc, but we design and maintain them ourselves, come join our team".
Hmm, i don't think they're directly interchangeable. I think of clean as specifically what impacts your ability to write new code. If the code performs horribly, doesn't scale, has lots of security holes, that could still be considered "clean", if you are easily able to implement all the changes you want.
For a while with my home lab I cronned a python script to look up my external DNS and update my domain in Route53 (and Dyn before that). Worked out pretty well, I think it only updated once or twice in two years.
Not sure I agree with you 100% on your police work there, Lou.

I worked with a good number of SuperMicro servers that - to my surprise - the IPMI interface was by default set to "fail over to bridge to primary interface". That is to say if the IPMI port was disconnected, it would bridge onto your primary NIC with a second MAC address. The way to disable it was to download an obscure utility from SuperMicro's website, which only ran under Windows, and to pass an equally obscure hexadecimal command line flag.

Fortunately in my case, these ran on a network with no DHCP server, but I can't assume that's true in every case.
I just found out about it too on F-Droid! It appears to have been discussed once before: https://news.ycombinator.com/item?id=22646358
Yes, history is rich in parallels.
This saddens me for the following reason.

When I introduce young people to coding, it's always great to know their Mac has Python and Ruby on board, and we can quickly drop into a Python shell, or create a trivial .py file, and have some fun.

This frictionless entrée appears done.

That's a bit of a shame to be honest.
Definitely. I work a lot with librarians — that's a field which isn't considered “technical” but then you look and there are people writing shell scripts to process collections, writing tools in languages like Python to manipulate metadata or work with APIs, etc. and that distinction starts to look pretty arbitrary. (This is actually a big retention problem in the field: someone who learns that in college / on the job is going to look at the pay multiplier they can get by applying for a developer job)
Author doesn't even say why they object to the size. Are they aware that file-backed executables are paged on demand and only the active parts of the program will be resident?
So when the bulldozer comes in to "refine the road network", and you start demolishing people's neighborhoods to optimize the paths... what then?

Everyone knows how to optimize a city. The problem is that the people don't want change.

----------

The benefit of a grid-network, is that you _DONT_ know where people will go. You lay down the grid in the 1800s, and then no matter where the major commerce centers grow 100 or 200 years in the future, the grid network can largely accommodate it.

This slime-mold model requires the refinement phase, which is very high cost and destructive (buying out entire neighborhoods and displacing them to make room for the bigger road arteries). Its something that an individual slime mold can make decisions for itself, but its not something thats easy to do in today's society (especially if your individuals in the society are full of NIMBY / anti-gentrification groups who have made it their political purpose to prevent such changes).
I had something similar happen to me at IBM in the late 90s. I came to my cubicle one morning to find the PC case slightly ajar. I set the monitor aside and opened it. The sole 8 MB RAM stick was gone. I reported it to my boss who explained that someone would've taken it because getting an upgrade was an impossible bureaucratic feat, but getting a fix was trivial. Probably I was picked because I was obviously the youngest person in the office, so I must not have any power. I did indeed have a repaired PC the next day, though.
Caddyserver is Apache/Nginx killer and we will talk about Caddy in a couple of years as if it's been always the default ("why did we kept fighting with apache/nginx all those years, silly us"). Seriously. It's just a completely different way to think about web servers and automation. I'm just amazed it took all these years to emerge.
That’s basically what RHEL does: /usr/libexec/platform-python.
Yes, well if a script I wrote has somehow ended up on a machine without bash, then I'd be more worried about other assumptions the script makes.
I've recently seen complaints that gmail has gotten worse at detecting spam, and I've personally seen YouTube's comments are filling with spam. The spammers have probably just gotten better at it.
https://xkcd.com/2571/
I convinced myself that Mushu on the Ishtar gat must be a horse because horses are said to have come from the north and mare, a Germanic-Celtic isogloss would somewhat match the description if rhotacism was involved. Then I went on about Amazons and Mars just because their origin may be uncertain. So no, here be dragons.

The domestication of the horse keeps being challenged anyhow.
Add shorting on margin, borrowing against other users that currently hold Rand and being force liquidated if the other users sell

Make this a disaster lol
Differing dynamics of diseases calling for different measures. We could go down a rabbit hole debating moot points.

The fact is the original comment as phrased was totally wrong, and we could debate the clarification.

Instead let’s just acknowledge that if smallpox were around today and we had a world wide epidemic but we had a vaccine that prevented ill effects in nearly all cases but still allowed transmission, then it’s safe to assume there would be vaccine mandate. That would be different dynamics just like polio. Different dynamic need different responses.
Arizona Introduces a bill to make Bitcoin Legal Tender [pdf]
Wasn't aware of specific rules around this in the Netherlands and this definitely didn't come up in my drivers exam. The only place I heard about this is foreign media over the past years.

However something that does happen in the Netherlands is that kids get taught to pay attention and look around before opening the door of a car, no matter what hand you use. This is something my parents kept insisting over and over. Obviously only anecdotal but I expect this to be the real reason accidents like this are minimal. Combined with having a cycling culture and safer infrastructure where often the cycle lane is separated from parking spaces by some distance to make this impossible.
There's also a criminal liability aspect to it. I've worked for healthcare companies too and they do care, at least enough to have it in the conversation and to include the HIPAA officer in those conversations. Nowhere I have worked have they been flippant about it.

I agree with you that the cap is too low. It should cap based on gross or revenue. I suspect it's so that the smaller companies won't get destroyed by fines leaving the larger ones largely unaffected, but I'm speculating.
Dr. Monica Gandhi is an outlier. Outlier voices are important. Unique perspectives are valuable (her's coming from experience with HIV) but while listening to the views of an outlier can be comforting to cling to when they are telling you what you want to hear, it's important to look at what most experts are saying and to consider the evidence that cause them all to agree. A statement like "there's no valid scientific or medical reason for most people to keep wearing masks." is simply false. We have a massive amount of evidence that masks are effective. Once we have overwhelming evidence that something else works better to slow the spread of covid in our communities and protect ourselves and each other from infection I'll be thrilled to ditch the masks, but so far we don't.
> is serverless something that only makes sense at a certain scale?

Other way around. With enough scale you should be able to make hosting your own datacenter work.

The problem is that the people you hire tend to go off buying too much Enterprise-class shit and Empire building and the whole thing winds up costing 10 times as much as it should because they want stuff to play with to resume stuff and to share risk with the vendor and have them to blame.

Only thing Amazon did to build out their internal IT ops exceptionally cheaply and eventually sell it as the AWS cloud service was to focus on "frugality" and fire anyone who said expensive words like "SAN". And they were ordered in no uncertain terms to get out of the way of software development and weren't allowed to block changes the way that ITIL and CRBs used to.

I didn't realize how difficult that would be to replicate anywhere else and foolishly sold all my AMZN stock options thinking that AWS would quickly get out competed by everyone being able to replicate it by just focusing on cheap horizontal scalability.

These days there is some more inherent stickiness to it all since at small scales you can be geographically replicated fairly easily (although lots of people still run in a single region / single AZ -- which indicates that a lot of businesses can tolerate outages so that level of complexity or cost isn't necessary -- but in any head-to-head comparison the "but what if we got our shit together and got geographically distributed?" objection would be raised).
Broadly-speaking yes, but none of that would have addressed this collapse. This was a two-lane bridge between two major neighborhoods. People need to get to those neighborhoods and they'd have to divert about a mile north to do it without this bridge.

Pittsburgh is built at the intersection of three rivers and atop the folded spine of the Alleghenies. Any way you slice it that city's gonna have either a lot of bridges or a lot of grumpy people who can't get anywhere.
I can't remember what show it was, during the 80s, when WWII soldiers had mullets.

The weird ones, are the "mashup" movies and shows, like Streets of Fire, and Reprisal.
I love how this comment is here on a PR from Apple for an open source project…

WebKit, LLVM, Swift… these are pretty fundamental open source projects, in addition to a bunch of other stuff.

You can’t please everyone all the time, and society is too addicted to outrage these days.
Yeah, I got that with USPS change address search a few years back.

Look, I think of myself as a decently smart guy, not a sucker, etc. But at 2am when exhausted from moving and just wanting to check something off a list...I got got.

It was my mistake. I trusted Google. Google's top result took me to one of the thousands of identical copies of the official USPS change address forms that charge $49. Could have been worse, I guess.
oh my god YES
> While this really sucked, this is an exaggeration

He lost 15 doctoral students/post docs who moved on in his absence, and I'm assuming his research group(s) imploded - do you think it's going to be easy to get those back? He has a job, but it's not at the same job he had before - for one he'll be co-authoring fewer papers. So his reputation has taken a beating in measurable ways - that's no exaggeration.
Does anyone have an example of a search title that results in this? I've never noticed it but would like to investigate. E.g. does the site return different results for GoogleBot vs end user (or based on Referrer)?

It could also be local malware - cross checking between users would be a good test for this.
Really amazing. The colour and high quality really takes you there.
Woah, 42u, that's quite something! How many of those slots are you using? What kind of cooling do you have to have for that closet, and how is the volume for the rest of the house?
While in some cases you are not correct, in other cases you are, and I appreciate the reminder.
MA's problem is they spent all their money for 30yr on the big dig leaving nothing left for anything beyond the most minimal maintenance of every other piece of infrastructure. Basically everything got rode hard and put away wet for 30yr. That'll come back to bite them but the people responsible will be comfortably retired by then.
I did that in the first few startups, but it's not necessary, and is a sign of a poorly run startup. Good startups may occasionally need that frantic burst of "get it done", but mostly, just have a "work hard, play hard" mentality. The other path always leads to burnout, and nothing is more deadly to a startup's prospects of success than a burned-out, demotivated team.

If my teams have to work their asses off to get a demo or funding milestone done, I always make sure they get more than that back as time off to decompress and spend time with family. I'm also usually very flexible on hours - as long as they get the job done, I'm OK with almost any working hours they want. This is another benefit of startups - they have the flexibility to do things like that that you can't really pull off in a big co.