skysight-inc/HackerNews huggingface dataset:
It’s honestly freeing. I was so happy when the last holdout among my clients told me they no longer need to support any version of IE. Removing all of the IE polyfills and babel transformations from package.json felt so good.
Yah... I have a long-standing habit of commenting `TODO` for some debugging or WIP code. Then, before I commit, I can just do `git diff | grep TODO` and see all the new TODOs I've added.
Payment data, including card data, was obtained as well. This would not be held by the crowdfunding platform, but by the payment processor only, that are subject to quite a few rules and annual audits.

Definitely a hack.

Besides, opening unlocked doors can still get you charged with break and entry, or in this case, unauthorized access.
I quit coffee for about a year before and I lacked focus at work and the ability to scratch away at things day after day to get bigger things done.
Supervising in C++: how to make your programs reliable
Do you use HTTPS? SSH? A password manager?

Everyone has something to hide -- it is a matter of how much and from who(m). In our world of Big Data/surveillance capitalism, I don't see how you could even argue against stronger privacy rights...
They're essentially identical problems. In Linux these strings are arbitrary bytes with a rule forbidding byte 0x00, in Windows they're arbitrary unsigned 16-bit integers, I don't know if 0x0000 is forbidden. Not a significant difference.

Rust's OsString provides a structure that has the potentially nonsensical raw data inside it, and offers ways to ask for:

* The Unicode text if that's what is actually encoded (or else None)

* The text after applying Unicode decoding rules and substituting U+FFFD (Unicode's "Replacement Character" �) where errors occur

* The actual raw bytes / 16-bit unsigned integers

If all your program cared about was a filename, this is not coincidentally also how these operating systems spell filenames, so you can just hand the OsString to an OS-level file API, to open it, rename it or whatever without caring if it is Unicode or not.

The U+FFFD option does expose one potential surprise on Unix flavour systems which doesn't exist on Windows because U+FFFD is one UTF-16 code unit, but it is three UTF-8 code units, so such a "decoded" input could exceed the size of some internal storage you'd assumed would never need to be larger than the command line maximum length.
I'm in your exact situation, but... going to the store. Putting stuff in a cart. Waiting in line, like sibling said. Unloading it from the cart. Reloading it in the cart. Carrying it home.

I just described several steps that are a complete monotonous waste of my time and that I consider unpleasant and that someone else is willing to do for me if I give them a sum of money I can afford not to care about.

That's amazing, imo. (At least for me; I don't know how amazing it is for them, even if I tip highly.)

It is kind of funny, but, hey, humans are kind of funny. I'd rather not even walk outside for a minute to throw my trash into the bins; if I could leave it outside my door and have a person/robot pick it up, that'd be sweet. :p You can take this to an extreme, where you eliminate every unpleasant task via some magical means, and that world sounds like paradise. Cue dystopic collapse of some kind.
"Actually, there's no evidence that LCDs are bad for eyes:"
If that was true, there would be no such thing as dry eyes.

https://en.wikipedia.org/wiki/Computer_vision_syndrome
These became extremely common by the time I stopped doing Uber Eats in early 2021. As a driver I loved them because their business model was 100% aligned with delivery services and would always have food ready to go, be polite and responsive (unlike how many restaurants treated drivers), occasionally give a free water bottle as a thank you, etc.
You still can't tell whether a domain was automatically renewed at expiration by the owner or by an attacker. A lot of registrars will auto-renew at the expiration date, or close enough that you can't tell from WHOIS records.
> There are 2 backlogs, one run by product and one run by dev/ops/arch/sec. Over the course of a PI (about 1 quarter), capacity planning usually allocated 70/30 between the two backlogs.

Does "run by" mean that dev has to justify their projects to product and vice versa? Or is this a "this is our area, we'll take care of it thank you" kind of thing?

In my team at AWS we have ~5 backlogs each planning cycle, which includes areas like 'operational risk reduction,' 'operational burden reduction,' and 'adoption'. What makes it work in our case is that both dev and product jointly own all the backlogs, and have to come to a single recommendation on allocation they put forward to the service GM. Dev has to defend projects they want to do in the more engineering focused backlogs, while product has to do the same for the feature oriented backlog. Over time, allocations have shifted significantly depending on where the service is and what customers are asking for. What I like about this is that it forces everybody to get along and to keep their eye on what's actually important (the customer). This does require that both product and dev are experienced enough to see the other perspective. Product will have to understand that it's not in the customer's interest if dev has a super high burden, while dev will have to accept that a perfect solution is usually worse than a good enough one.
> is there any connection between these events, or am i just taking the simulation hypothesis too seriously.

While I don't know about the rest, Russia has been a neocon project for a long time. If Trump hadn't given them the shock of their lives by winning and then spent the next four years sucking all the oxygen out of Washington, Hillary would have granted their wish in 2017-18.

Putin is no saint. But I think he is vastly superior to his drunkard predecessor who let the country be looted by oligarchs.

It is also possible that this is a Wag the Dog situation.[1]

[1] https://en.wikipedia.org/wiki/Wag_the_Dog
I worked in civil service (federal university), where the salary bands are public. Because they are public, it was easy to understand, going in, that the profs were rich, and I would not be. So I adjusted my expectation of what I'd get from that job in addition to salary (prestige, ability to be paid for Go when it was rare in my job market, contact with bright students). Worked for me.
I was confused by this, I wondered on what basis they inferred that code. Never occured to me it might be leaked.
I worked with a genetics therapeutic company a while ago, CAR-T is looking to be the future of cancer treatment. Extremely expensive but no long term effects observed thus far. That said, its very early in the process to say it's the "cure to cancer".
It's not a working class protest, neither is it a strike. For a protest to consist as working class, it needs to have the support of the working class - which it doesn't, since trucking unions came out against it. It also needs to be for the interests of the working class, which it doesn't seem to be at all.

It's not a strike either, because they're not withholding labour, they're complaining about not being able to labour.

Also, if you're trying to frame this in socialist point of view, that doesn't work either, because the owners-operators that are the focal point of the protest aren't even working class, from a socialist point of view they're middle class or petit-bourgeois (depending on if they rent out their rig). They also typically make around twice the median wage despite living in a low cost of living, and are much wealthier than the average Canadian.

As far as the frozen funds precedents, I agree.
> btw, apple doesn't have some magical solution to this scaling problem. their small phones have significantly worse battery life than their larger offerings. it's just that their overall efficiency advantage makes a small iphone more viable than a small android phone.

Agreed. Am currently in the SE 2020 and its battery life is terrible. Apple is expected to announce a SE 2022 and I'm curious how the battery life will be with it supporting 5G and a better SoC. If it's the same/worse, I'm going to upgrade to the 13 mini.
It definitely is the mainstream continuation of that language by the original authors. Changing the API, or the implementation, or making other breaking changes does not automatically (or otherwise exclusively) make it a "language fork". Lua has the luxury of making breaking changes, and most Lua users both accept and appreciate that. Lua is continuously refined while languages like JavaScript and PHP are stuck with their (sometimes dubious) decisions forever or _break the web_.
Not a website, but Dystopia for Reddit, an iOS client, does this well. It just announces the level of each comment, where direct replies to a post are l1, replies to those are l2 and so on. This is probably the easiest way.
Well sure; basic communication skills are prerequisite (and assumed). I was talking about GP's ref to formal processes that required frequently pushing updates to 4 different upstream management nodes, which I maintain is doing it wrong.
Yup. Webster's Third New International unabridged. It's big, heavy, and awkward to use, but it's immensely satisfying to look something up in it. I only use it a few times a year, but I'm glad I have it.

Digital is dandy, but analog rocks.
Your comment has shades of "freedom of speech does not mean freedom from consequences," which in my opinion is used to put all the responsibility onto the speakers and none on the reactions of the recipients of the message. I'm not saying your intent was to communicate that, but I feel like that's often the interpretation.

People aren't forgetting that civil disobedience means being uncomfortable, hurt, or jailed. For example, just because a protester reacts with contempt about what the mounted police did to two people doesn't mean that they were naive about the possibilities it might happen. One is a conscious, thinking awareness and the other an emotional reaction. Both can exist at the same time.
I would agree. I feel like we keep seeing these “software has become more complicated!” blogs. But it’s really just that modern languages/stacks don’t focus on making software development easier for the individual, they focus on making it easier for the organization.

Related anecdote: I have been using GraphQL at work and holy shit it is boilerplate galore but I swear we hardly have to train new hires on how to structure their software to look like ours.
I feel the same. Maybe 'it doesn't translate'. Or the translation was bad. Though the concepts were interesting enough to let me read them to the end. Left unsatisfied...
We spend triple that on the social programs.
>> These days, I can spin out a full-fat, shippable app, in a couple of hours.

How do you do that? What's your approach?
Certainly in the US if you are an at-will private employee you can be terminated for any reason or no reason at all, except for explicitly protected classes. Political affiliation is not a protected class, at least not on a Federal level, although a few states have varying degrees of protection [0] that may have protected this staffer. As for government employees, the situation is more complicated. If you are a low-level government employee, your political affiliation is not valid grounds for being terminated. However, employees who are considered as placed in "policymaking" [1] roles, which would include being an "adviser" [1] of some sort, would be able to be terminated according to US standards.

[0] https://www.shrm.org/resourcesandtools/legal-and-compliance/...

[1] Elrod v. Burns, 427 U.S. 347 (1976). Also see Rutan v. Republican Party of Illinois, 497 U.S. 62 (1990).
I don't think the point was to get visitors directly from those links, but to hope that the referer URLs were ending up in some kind of publicly visible page (e.g. the logs directory of the HTTP website being exposed), have those pages indexed by search engines, and get a URL reputation boost from those inbound links.
This article is really downplaying the racial element to the stories, the complaints about "smoking, making noise, bikes blocking walkways" in a city like Amsterdam is a bit telling. Not that dark stores can be a nuisance but it's clearly a dimension in this story.
I was denied tenure at MIT in 2018
I plug this every time, but here goes: https://github.com/crev-dev/crev solves this by providing code reviews, scales via a web-of-trust model, and relies on cryptographic identities. That way, you can depend on a package without having to trust its maintainers and all future versions.
Some, but not all of her Sci-Fi https://en.wikipedia.org/wiki/C._J._Cherryh

Mostly anything from the

https://en.wikipedia.org/wiki/Alliance%E2%80%93Union_univers...

with the exception of the 'Mri Wars / Faded Sun Trilogy', 'Merovingen Nights', Morgaine Cycle, Foreigner Universe, and none of her Fantasy.

Much from Kim Stanley Robinson, no matter if early or recently. Most memorable though, 'The Years of Rice and Salt'.

Probably almost anything (Post-)Cyberpunkish from anyone. Steam- or Dieselpunk? Err no, thx.

Some stuff from Stephen Baxter and Gregory Benford.

Rameez Naam's https://en.wikipedia.org/wiki/The_Nexus_Trilogy

All of https://en.wikipedia.org/wiki/Daniel_Suarez_(author)

Much of Bruce Sterling, William Gibson, Neal Stephenson.

Oryx and Crake and following from Margaret Atwood.

Anything from Iain Banks. 'The Color of Distance' from Amy Thompson.

Peter F. Hamiltons 'Greg Mandel Trilogy' and 'The Night's Dawn Trilogy', his later stuff didn't engage me that much.

The Blade Runner sequels from K.W. Jeter.

Some Philip K. Dick, there is too much of it!1!!

Gateway and following from Frederik Pohl.

Some of Poul Anderson, John Varley, Jerry Pournelle, Vernor Vinge (Deepness in the Sky, etc)

And so much more...
Nintendo Page Boy (2021)
Apple has a clear path to $1T in revenue by 2030
So, this is like "opinionated Inkscape"?
I'd trade some privacy for opt-in but full-transparency, and filters to prevent certain regexes, or sites from being stored at all, as long as the search experience was well beyond google's...because right now to me it seems all search is just about unusable, unless searching a specific site like stackoverflow, reddit, or github... and that's a sorry state for the web in 2022.
I used to do this on Windows in the 90s with Delphi: this is only really remarkable because we lost all the good tools somewhere along the way.
Correct, I consider that cheap when HSBC subsequently laundered billions of dollars over the following decade after the PATRIOT Act. The same PATRIOT Act that wouldnt have flagged wire transfers the terrorists used even if it existed before 9/11. It's just an opportunistic data collection program on everyone else.

With billions slipping through from any random branch manager at any bank anywhere, how many 9/11s is that? Any time, for any reason, funding secured.
As an experienced software developer I feel like I have decent understanding of how to harden my code both line-by-line and through sound architectural decisions, avoiding mistakes from memory safety to injection to permissions to race conditions to what-have-you. But I will gladly acknowledge that I'm not an expert system administrator and generally need to rely on others who have the necessary skills to set up servers and avoid misconfigurations to the standard I feel like can uphold in my own code.

Seeing a formulaic approach to pen-testing is inspiring. I feel as though if I were to practice, I would eventually be able to develop routines and understanding of how to test for and detect common errors. It would be nice to build additional competence and collaborate more effectively with expert sysadmins, even if I don't plan to masquerade as one.

What sort of basic checks should one perform after provisioning a server or making a service available? (Perform a port scan, validate that an internal server is inaccessible from the wider net, etc.)
Show HN: Zero-downtime PostgreSQL migrations for Ruby on Rails
There is one of these around the corner from my home in Chicago. I know what street it is on because I somehow managed to find it on the map recently. I was curious because I ordered some online groceries and less than five minutes from clicking the order button a mad guy turned up at my door, "YOU WILL REMEMBER ME! MY NAME IS IVAN! I AM RUSSIAN!", handed me the bag and sped off.
Any proof? Did Amazon confirm this? I know there was a file there that said the bucket was public, but that could have been added by the hackers as misdirection to sow doubt.
'"n years of experience" line on my resume would mean nothing. How do I prevent that?'

That's a good question. One that I failed to address in my career. I would say just focus on the tech (AWS, a language, microservice stuff like toggles/versioning). But that's just my guess.
> easily avoidable

> and you can then keep one at home, one at work, one at your parents place, and replace them every now and then to 'refresh' the backups

Yes, many of us do this. But I wouldn't consider it "easy", esp for the average user.

What % of home computer users own 2+ external drives? Or even 1? I bet it's under 20%.
Indeed, although when I was a kid parks had play structures that were fun, a challenge, and hint of danger. Getting to the top of a play structure lent a sense of accomplishment. Generally the fear/danger was perceived more than real, but pretty fun/popular up till age 10 or so.

In the last 25 years I've seen play structures replaced by the parks I visit were neutered so that even a 2 year old could fully explore, and for that reason only occasionally would there be a 2 year old on them and they were avoided by anyone older.
How can you run a small warehouse in a residential street? What about zoning?
I was hoping the article would include a comparison to that option, but sadly, no. Is it safe to assume that a fuel cell + electric motor has much higher efficiency than this hydrogen ICE, at comparable weight?
* Running any website with user-contributed content. Spam is just everywhere nowadays, and you cannot publish a simple hiscore list for your game anymore without some kind of anti-spam measures, otherwise the spammers find it astonishingly fast and flood it with spam, even if it doesn't allow any clickable links

* Thinking about it some more, everything related to security. Back in the days, the whole Internet wasn't port-scanned for known vulnerable services multiple times a day, and you could get much further with less refined security practices.

* Drawing things on screen. Back in the days of DOS and QBasic, it was just a single line of code to put the screen into a different mode and start to paint lines and rectangles on it, placing text at certain coordinates. Now you have to have a GUI (though canvas elements in web pages make it a bit simpler again; still not quite as simple as in the 80s/90s)

* Getting access to a particular memory location, without layers and layers of virtualization in between
Switzerland is all about Neutrality

What's the point of neutrality if you are gonna ignore it when it's convenient.

There's a reason Switzerland held Jewish and Nazi gold alike.
Battery capacity depends on the volume, not surface; that means thicker phones can compensate for small length and width. For the use cases of small phones, some increase in thickness is perfectly acceptable.
Not affiliated, just a user and fan.
Are they though? If I remember correctly, most "gif" sites online serve webp...
Please don't post like this to HN. It poisons the ecosystem and destroys what HN is supposed to be for. Someone posting an incorrect number through what was most likely a typo or transcription error does not deserve to have a ton of internet bricks dropped on them, which is basically what you did here. You can provide correct information without treating others that way.

If you'd please review https://news.ycombinator.com/newsguidelines.html and stick to the rules when posting here, we'd appreciate it.
It's a very weird and worrying look into the way people think.

There was a company who ran a marketing stunt where they gave you a discount if you were called Karen, and IIRC a social media mob formed, called them racist, and they ended the promotion with a groveling apology.

https://www.bbc.co.uk/news/world-asia-53589897
Just one example, reneging on bug bounties is mind-blowingly stupid for a $3T company. Security researchers will sell what they find to the likes of NSO Pegasus instead of Apple. Also, the bad blood thus created makes them less likely to follow "responsible disclosure" and instead just disclose them as soon as discovered for kudos.
What exact due process are we looking for here? If I donate to an extremist organization, and my boss finds out, is he required to still continue to employ me? Or can my boss only fire me if a government takes me to court?

Is my boss allowed to fire me because my job performance is poor? Or does he have to wait till the government puts me in jail for being a shitty sys admin?

I do find this idea that speech doesn't carry consequences really foreign and odd.
This is a really interesting topic, but as a newbie I would love a little more detail. For example, with the nmap command, why did they use those particular switches?

>nmap -Pn -sT -p- --min-rate 10000 \
-oN nmap/tcp_ports_scan

I understand that nmap is a very versatile port scanning program, and I haven't used it since I was a kid, but I have no idea what about this particular situation calls for -Pn -sT -p- -oN. Is that an ideal configuration to use when you're scanning a target that you know nothing about?
Well, as I mentioned, I've only ever seen an imprint on websites from Germany, so I think you're conflating EU and national regulations.
Can a Planet Be Intelligent? Consider the Biosphere
The data clearly shows ivermectin led to 70% fewer deaths, 60% less mechanical ventilation, and 25% fewer ICU admissions. But none of those amounts are reported as statistically significant...

"3 (1.2%) vs 10 (4%) 28-day in-hospital deaths...Mechanical ventilation occurred in 4 (1.7%) vs 10 (4.0%)...intensive care unit admission in 6 (2.4%) vs 8 (3.2%)" (ivermectin vs. non-ivermectin)

These authors made a huge mistake. They didn't check the odds of all these secondary differences being slanted towards ivermectin at once. A series of low-but-above-.05 P values in the same direction show correlation even more strongly than a single near-.05 P value does.

Also, the principal result is more narrowly-scoped than reported. Though within its scope, the study's accurate: When high-risk patients wait 4-7+ days since first COVID symptoms to decide to visit a clinic and for a PCR test to come back positive, ivermectin doesn't reduce "progression to severe COVID". But ivermectin nevertheless prevents many cases of secondary COVID effects in high-risk patients, like death and need for ventilator.
> I imagine someone might respond with some carefully constructed scenario where you can only use a shell script, but I'd expect that sort of scenario to be rare.

Not to comment on how frequent this is for other people, but my rare, obscure, and carefully constructed scenario is this one:

docker run --rm -it ubuntu
Yes that is one of the cool things and it's not just European cities but it's true for living in any walking city or even living in a walkable part of a city. And yet here we are. These have sprouted up in NYC and London as well, with all the same concerns. What I can't understand is why someone would pay all of that money to live in a city like Amsterdam, London or NYC and not wan't to go out and interact with their environment and neighborhood. What's further confounding is that after 2 years of forced isolation via lockdowns and work from home that people would not relish the opportunity to get out of their small apartments and appreciate the walking, window shopping, and people watching that comes with it.
flutter and Dart are essentially this applied to the DOM and JavaScript