skysight-inc/HackerNews huggingface dataset:
> How bad is this exactly?

7.1 out of 10

https://www.intel.com/content/www/us/en/security-center/advi...

This was part of IPU 2021.2 in November and other bugs in other CPUs were fixed as well, one rated 8.2 affecting many, but not all, intel cpus (intel-sa-00562). If you haven't updated your UEFI/BIOS since last November and you love to run untrusted code by untrusted third parties on your CPU, the larger story about microcode bugs and privilege escalation into the management engine is bad and best fixed keeping up to date with microcode updates.

Please note that the IPU 2021.2 fixes are not runtime loadable: https://github.com/intel/Intel-Linux-Processor-Microcode-Dat... and require an UEFI/BIOS update.

The concrete story is mostly about a problem with the Atom line, which allowed code execution in the IME and a full dump of it. Very interesting for nerds that want to hack into that for reasons of taking ownership of what they bought, less interesting for malware, but not irrelevant. The link is about the Chip Red Pill Team giving a talk about how they broke the Atom and what intel hides inside.

It is a good talk by people who have years of experience cracking open Intels chips. I can recommend it to anyone who cares about that.

From a news perspective however it is three month old, if we ignore the zero nights russia talk in September ;-)
Only one past submission with a comment:

https://news.ycombinator.com/item?id=27353083 (1 comment)
I put document scans in a directory and name them something relevant, like "2021 state tax return". Only takes a few seconds to find anything I need.

I have both on-site and off-site backups; I have no desire to put personal information of that sort on anyone's web server.
How can that make sense? Agriculture and Industry merely produce things for people to consume. So if everybody was to be carbon neutral, Agriculture and Industry would have to be carbon neutral, too. Otherwise not everybody would be carbon neutral, because people would be responsible for the emissions from Agriculture and Industry.
> Kernel level anti-cheat is meaningless.

If kernel level anti-cheat lead to "serious cheats" having to resort to the above, then kernel level anti-cheat is actually pretty fucking effective.
Sure. And every one-night stand should be considered rape if one of the parties ends up wanting more than that one night.
Because, suprisingly, Noone is forcing you to update immediately!

Hell, there's still a lot of 5.x deployments out there that work just fine. I even manage one or two (both of them being very old, legacy installations in enterprises. In both cases I'm making slow and steady progress to getting them up to 7.x or 8.x so that we can benefit from engine improvements etc).

> Why would anyone in their right mind use a language ecosystem where each major version upgrade breaks their code

That. Is. The. Entire. Point. Of. Major. Versions.

A big red warning and culutral understanding of "stuff we said would be gone, that we gave you a year+ of notice on, is now gone, go read the migration notes if you've been sleeping under a rock."

You act like this is happening monthly? 8.0 came out in Nov 2020... , 7.0 was Dec 2015.

> I just don't understand why people accept this from their tools.

Actually our tooling is pretty nice. Between psalm, phpcs and rector, we have tooling that can forwarn of deprecations in use, and most of the time fix them automatically.

Should you always use PHP? No. But the debate on the nuances as to when to not use it doesn't tend to go well with those who just throw everything out the pram acting like PHP developers are insane because it's not a haskell/rust docker project.
Also, what suggested they were scaling "unsafely" was that he was asked to interview folks within a few months.

Generally, if you're hired, and you're working out, and your coworkers like you, why wouldn't you immediately be trusted to vet new hires? This is more or less startup scaling 101 - strange the author didn't just say "hey, mind if I skip the interviews?". That usually works for me for _years_!
I read this as the posting was for Senior and the offer extended was at a lower level, that’s not uncommon — Amazon particularly is somewhat famous for down-levels happening in interview debriefs.

I don’t think Josh started as a Senior and then got demoted, the post explicitly says the $ was less than desired (due to the offer being made at the lower level).
really hardcore activist groups these days tend to be full-lifestyle cliques. you can't fake hormones or diy face tats, and it's hard to maintain any charade three tabs deep.

this has the benefit of isolating these groups, but it also has the detriment of isolating these groups. you can do almost anything when you know wider society has no place for you, but you have a chosen family with a shared purpose and intention.
Yes, the concept is not necessarily to disrupt this one group, but to make everybody find it impossible to trust any teammate in any activist group. This treatment is reserved for infiltrating groups that want to disrupt existing power structures.
The worst thing about this (apart from the obviously misleading name) is if you correctly interpret it, it implies your work is your life.
Relative to the average office job, yes. In a tech-centric job, this is pretty common.
The key thing for me is that he seemed to specialize as a frontend but ended up as a full stack with a slight backend bias. If you want to be a frontend, ending up full stack with a bias for backend is not optimal.
Carefully protected? That's security stuff. I'm asking if Apple is analysing everything I do on their computers.

From the links above, it seems that Apple's Privacy policy reserves the rights to monitor ALL your data and usage of its devices, and that it then actuates this policy using snooping mechanisms in Mac OS. Do you agree?
Good suggestion.

My favourite translation with commentary is Keith Seddon's Epictetus' Handbook and the Tablet of Cebes: Guides to Stoic Living.
i quit after six years in a phd program... my only regret is not doing it sooner
This is good to hear! I’ve worked positions before where this definitely wasn’t the case (had to use limited PTO for doctor’s appts). Maybe this is something that’s changed significantly since COVID
The way Valve works suggests this is less a policy of Valve the company than the desire of a few devs who work there.
AstraZeneca vaccine: Did politics and nationalism get in the way?
> When it comes to other businesses, consumers have choice. If one company charges too much of a premium, consumers can go elsewhere. If I go elsewhere from Apple, I lose access to all of my purchased items.

Well Apple has always charged 30%, so it would be strange if you suddenly wanted to change platforms now because of that. It's reasonable to ask you to do your research before buying it.
This article's assertions regarding gentrification seem applicable to the internet as a whole as well.
I've had absolutely no luck with the cheap ones off of Amazon. What kind did you go with?
The toilet paper shortage writ in silicon.
>I have never heard of

That's the point

>or would consider reading.

Why? The point of lists like this (and of learning) is to go beyond what you're comfortable with and expand your horizons and knowledge.
> Unless you run flatpak...

Well yes, sandboxing should be the goal! Installing Steam from Flathub is a good first step on desktop machines. But as long as games require anti-cheat software at the kernel level, I'll keep a Windows partition around to sandbox the gaming world as a whole.
I can't figure out if this is sarcasm or an actual response.
> "the pile"

it's essential to organize them otherwise locating the piece of interest becomes too frustrating and time consuming. we use a stack of tool boxes from the hardware store to organize ours.
Not really. Since 1986 there have been literally dozens of Zelda titles released. This would be equivalent to someone saying that they had never heard of Star Wars or Microsoft Office.
Ramfs, Rootfs and Initramfs
Apple spies on every application you run: https://news.ycombinator.com/item?id=25074959.

See also:
https://news.ycombinator.com/item?id=28411918
That's Apple's spin on this and it's as greedy and unreasonable now as it was when they just started.

The fair setup - as far as the owners of expensive devices are concerned - is to:

1. Be able to install arbitrary software capable of running on the device.

2. Be able to pay for it in whatever way that is supported by the software vendor.

This are reasonable expectations.

If Apple provides a way to install pre-approved software through their Store - excellent. As an option.

If Apple provides a way to pay using their super pro-consumer payment system - ditto, as an option. Possibly as a required option (option!) for programs distributed through the Store.

You want convenience for either aspect - you go through Apple, pay them extra, be happy. You don't want to pay them - install yourself and pay directly.

Voila. It's not very complicated.

All the arguments against this is not a "meme", it's Apple guarding its profits in ways that are explicitly and aggressively anti-consumer.
I feel like so many are just:

“If this one thing can overcome all these hurdles for no apparent reason then all these other things will happen for no apparent reason. Wouldn’t that be great?”
Not all hope is lost! If you are standing at the edge of the earth where the disc meets the... uh... nothingness, you would also measure the drift. I would suggest a trip to the south pole and measure again. I still believe in them.

edit: Wait, do they believe in the south pole?
That's not the original minifig. That's not even the original minifig that had a face.

https://blog.hobbydb.com/2018/11/05/the-evolution-of-lego-mi...
I think the biggest one is this:

"Each Program Does One Thing Well."

followed by:

"Store Data in Flat Text Files."

I can't really say new programs adhere to either of these principles. In fact, it seems those seem to be actively shunned. I enjoy PopOS and I still have Vietnam flashback to my very first linux install way back when ( I installed it next to Win95 and results were not fun since it was my dad's PC ), but some things were better.. even if they were less user-friendly.

So yes. I think my real answer is yes -- it should be less user-friendly if that is the only way to maintain those pricinples.
Our dishwasher is newer so I think I’ll try it in the washing machine first, but that’s a good idea as well.
Generally, they haven't. The most I've seen is using pre-release to communicate between teams when a shared dependency is ready to ship.

In the Rust community, there is tooling and culture around Major that we pay attention to that. Otherwise, I've seen no one care about minor vs patch until now, which is what led me to write this post.
This is completely orthogonal to the article's thesis.

The entire piece is about optics, and doesn't take any position. In fact, the only time the piece departs from its neutral tone is to decry the latecomers accused of sanewashing the space and pushing its original community to its periphery. This is sympathetic to the radicals, albeit incidentally.

You've also misunderstood what sanewashing is. Sanewashing is with reference to the mainstream, not some supposed absolute moral truth. It describes the transformation of a radical viewpoint into one that's palatable to the mainstream. It makes no claim about the moral truth of the radical view.
Reminds me of a game called "Telling lies". Must have been inspired by these events.
I'm tech savvy and that's exactly why I'll be avoiding third-party payment systems on iOS. But yeah, I don't need an explicit reminder to do that.
Every major retailer that sells Lego sets will likely carry or stock some version of a "classic" set which is 1000+ bricks that are the same as the ones from 40 or even 50 years ago (just available in more colors & perhaps some bricks introduced in the 80s or 90s). There's no license, stickers, software, etc.

Most of these sets are sub-$50, so relatively affordable.
I found Lila much weaker. ZatAoMM seems more coherent both in how it touches subjects and the parallel (life) story.

Lila seems like it might tell you more but it kinda just... hints towards a great reveal that never comes. Then it just ends.
It’s important to remember that the pushback to the healthcare plans was astroturf — the Tea Party was announced by a mortgage broker on CNBC.
I agree up to a point and up to a certain level of achievement. But, for example, while I was good enough at math to get through an engineering program at a good school, I'm pretty confident that a physics or math degree would have been very tough and I doubt I could have done it. If I tried really hard and spent lots of time with the TAs? Maybe but I doubt it.
That would scare me at any other company, but Shopify has an excellent reputation for WLB, so at least at the time that thought did not occur.
I think that has less to do with LLVM/GCC being C(++) implementations and more to do with the fact that the primary language compiled by these compilers is C and C++. Other languages that target these compilers aren't used nearly to the same level (maybe swift now?).

The JVM, for example, doesn't see the same issue so much with non-Java languages. Mainly because (IMO) it's been hosting non-java languages for several years now.
When outsiders understand what a movement is really about, but it sounds bad, so movement claims that outsiders' (accurate) perspective is wrong.

"No sane person would belive %movement_belief%, what we really believe is %moderate-not_insane-image_saving-fake_belief%.
The logic etc that you're writing in the templates is in the backend language though? And it's all run on the backend.
You could say literally the same thing about any political slogan. For example, please explain "government accountability" or "serve the people"? That literally could be anything. Another example, "Medicare for All", pretty straight forward, but what does it look like as a policy?

https://www.propublica.org/article/medicare-for-all-is-not-m...

Or "Make American Great Again" or "Build Back Better". Any slogan can be questioned. IMO, "Defund the Police" is almost the most straightforward political slogan I can think of and if you Google it, near the top result is a website explaining exactly what it means.

https://defundthepolice.org/

The problem with a lot of people who were questioning "Defund the Police" in my experience is that they would go to BLM protests but then be much more moderate and not actually interested in what the protests meant or what defunding the police actually means; the slogan wasn't unclear, it was wanting to look like you cared but not actually doing the work to convince yourself or learn more.
Precisely. Many, many retailers have gone out of business in my country in the last ten years and a lot of them died painfully. Trying desperately to turn things around- unsuccessfully.
I thought the Mario sets were pretty awesome. My friends kids showed me there and I had to have them too. Mario also Bluetooth connects to a smartphone for various activities and there are 3d rotatable build instructions

https://m.youtube.com/watch?v=Fq3hw4imZ3g
If the manufacturers only provide batteries for at least ten years, don't lock it with dongle chips and provide specification requirements for third parties.

Well. Lenovo doesn't sell new batteries after fives years, uses dongle and doesn't provide any specs for third party manufacturers.

It is not possible to get an battery for X220/230, T420/T430 which is manufactured after 2017. At least I don't get anyone but Lenovo prints on the label "2020" :angrysmilie:
If person A goes to bed with person B...because A had had enough drinks (alcoholic, served by bartender C) to think that B was a very attractive single, while B was pretending to be single as part of getting "revenge sex" against partner D, who was cheating with E, who felt neglected by their partner F...then how many of people A through F are guilty of rape?
Though I believe you, it is incredibly far-fetched to think that they will go to such lengths, invest so much time and energy just to alter someone's mental state.

It shows that these big interest groups have way too much money.
> Aren’t you doing exactly what everyone else wants to do? Mansion in the Sticks for me, but City Shacks for thee?

I'm hoping to be one of these people one day, but I'm also hoping to be taxed appropriately for it. Make people who cost society so much pay taxes to cover their costs.

And until then, stop taxing my condo in the city as if I'm the same as the 4 bedroom house on a 1/4 acre lot down the street.
Good. If Lego won't evolve, they'll die. I'm glad Lego is still around and thriving, as that didn't always seem like it would be the case (from my personal experience as a kid).
Syntax-highlighted ALGOL-y code blocks seem to be back in style if they're not going with the constant "toss that screen up to a hologram" bit.

Sometime there will be a nice interview of such on the design that goes into that, not necessarily for "hacker sequences" but general imaginary computer interfaces like https://www.hudsandguis.com/home/2021/theexpanse .
It need not be micromanage, but could rather just be stuffing your day so full that you have no choice but to work continuously.
this just isn't true. Airbus has used tricks like this for decades without problems. the problem was just a totally incompetent implementation.
On the other hand, the argument can be made that the kids' lack of respect for the dad's career might be what's leading to the dad hiding away at work in the first place?

I feel this would be something relatable to a large portion of the people on this site, given how many of us practically live our tech careers. Even if we aren't putting in overtime at work, many of us spend time not at work on personal projects or learning some new tech. We might think of it as different from work, but for an outsider it'll just seem like more work.

It's also a sort of hypocrisy since if the point of the movement is to allow people to be free to do what they find meaning in, surely it's contradictory to diminish what someone finds meaning in just because you don't think it pays enough.

I know that if I had someone who didn't care for how fulfilling tech work is to me, I'd probably end up avoiding them too. Back when I went through a similar phase with my family, I too just buried myself more in work to not have to deal with them. Now they do understand, so I end up spending more time with them.
There's another perspective that might be worth considering - management knew your team would deliver. Specific platform skills are learnable. The ability to ship something isn't always - especially at scale.

I'd much rather give a team 3 months to ship something that I'm 99% confident will be delivered than to try it twice with two teams that have an 80% chance of delivery each.
Location: Canada

Remote: *

Relocation: must (see below)

Technologies: javascript/typescript, react, nodejs, high load, ruby, microservices, flutter

Résumé/CV: http://bit.ly/37RvQap

Email: mbutlitsky gmail

-----

Hands-on software engineer with diverse 20+ years background both in technical and management side of the business (~50/50). PhD.

Relocating to Canada, job offers from Canadian companies only.
Tus – Open Protocol for Resumable File Uploads
New hyperspectral image classification method based on spatial-spectral features
You literally said you had only experience with WordPress. Yeah those failing project make a lot of sense now.. Do you know WordPress was build by web-designers, not actual developers?

Using it for anything else then a forward facing website is a bad idea. Even using it for a website is a bad idea btw, because it was made for blogs, but whatever, nobody listened then, nobody will listen now. But I have peace with it, as long as it's only used for simple stuff.
Hussein Nasser

https://www.husseinnasser.com/search

His Youtube videos on backend engineering are fantastic.

https://www.youtube.com/channel/UC_ML5xP23TOWKUcc-oAE_Eg
It sure made my 5150 go faster!
So that 29% transportation figure is only personal vehicles then? It doesn't include trucks, freight ships or cargo planes?
You do realize, don't you, that if this qualifies as "rape", then huge numbers of men could claim to have been raped by women?
> Point they said this: "This practice suggests that perhaps the company is scaling faster than resources safely allow."

I haven't read through the full post myself yet, but that point is specifically around recruiting and hiring, where the following two statements supports what they are saying:

> The recruiters seemed frazzled and disorganized. Shopify scaled their engineering department pretty aggressively in 2021 and I wonder if the recruiting department was understaffed to meet this need. It wasn't uncommon to ask a question and to wait two weeks for a response.

> Engineers can become interviewers inside of their first six months at the company.

In my experience, people who only have 6 months of experience of a company doesn't really (yet) have the culture down 100% or have the "insides" of the company internalized, especially if joining a company during the time it's increasing headcount a lot, really fast. Seems a bit weird to ask those folks with small amount of inside experience to interview others to join it.

> Naively this individual decided (rightly or wrongly) that after 5 months he couldn't possibly learn anything from working at a company like this and bounced.

It seems, from my understanding, that the author left Shopify because they learned they don't really care about eCommerce in reality, in addition to not learning new frontend stuff.
That should be a high point of focus. It's hard to give up control, but you have to think about the "hit by a bus" scenario. In the rare chance that you were hit by a bus tomorrow, it would be a large impact since they would not be sustainable without you. What would be your team's plan for filling in your role? Answering this can help to plan out how your responsibilities can be grouped together and offloaded to others, among other things.
They now have a “bad trip” hotline for psychedelics
I took it as a trend toward more readable style and away from unnatural hard to read sentences. As in, scientific community learning to write like humans.
Is it really surprising that all kinds of different people are a part of a political movement? You would find this same kind of diversity of thought in any group of people.
Agree with this - first job I had one of the senior members of the organization came over and said something along the lines of it will take 6 months to be a contribute just from understanding all the intricacies of the business/code etc.
Those problems have nothing to do with the nature of work. Bad management, low pay and too many hours have no bearing on the importance of work.

It allows you to contribute to society and get social validation. "Personal projects" typically do neither (if they did, they would be lucrative). Even the boring stuff can be meditative. Provided the conditions are adequate, work is good for people and society at large.
To be fair if I was the dad I would not want to see this kid either nor anyone else that states they want to punch me in the face. Dad worked for 20 years to provide for his family, lost his wife and keeps providing. Wonder how much of the dad's salary still goes to supporting this 'kid' who has 3 kids of his own. 50 hours a week working is really not that much in the scheme of things, its not optimal but its not really workaholic level.
I can't read the article on mobile, it's apparently formatted for an 85" ultra-widescreen 4K screen
Well then you don't have it anymore ;)
I think there is a strong case of stated vs revealed preference going on here
You should be very satisfied with how well you conveyed the algorithm. Well done. What was your approach to arriving at this result?
Technology and automation already allow us to have a 10-hour work week with the same lifestyle.

Capitalism, on the other hand...