skysight-inc/HackerNews huggingface dataset:
The US didn't need to invade: President Kennedy instituted a naval blockade and that plus Kennedy's promise to remove US missiles from Turkey in exchange was enough to get the Soviets to agree to remove their missiles from Cuba.

That blockade of course was an agressive act against Cuba, and it was the correct course of action IMO because a rule that says that no country will be agressive towards any other country is unworkable because there is no power above the countries that could enforce the rule. (The UN is toothless.) If a country's leaders adhere to an unenforceable rule and insist on other countries doing the same, that will on average lead to more death and less prosperity for the world than if each country's leaders rationally pursues their country's interests IMO.

Some courses of action at the country level are more ethical than others, but it is more complicated than you imply it is and any ethical framework has to take into account certain realities.
> Granted, reusing a GC is a good reason to use JavaScript.

WebAssembly GC phase 2 standardized: https://twitter.com/tlively52/status/1493681050693738501

Dart already has a prototype: https://github.com/dart-lang/sdk/commit/6faa5f3bd00ad8cbc640...
> - it’s easy to hit a Unix command line length limit when a single * argument expands into many arguments. xargs solves that, but it shouldn’t be necessary.

this isn't true in the vast majority of cases on Linux and most other Unix-like operating systems; Linux has ARG_MAX=2097152, macOS =262144, and Solaris 10 =1048320. this problem does often arise with globstar, but! that is actually an argument towards having the shell expand arguments, not each command; if each command had to implement globstar, it would be effectively useless.

> - Unix tools cannot discriminate between * and the list of arguments it expands to. Consequently, rm cannot know whether you typed a single * or the specific list it expands into, so it cannot silently accept the latter and ask ‘are you sure’ for the former.

zsh comes with a function to check "rm" arguments and issue a warning if rm * is supplied. this doesn't work for arbitrary commands, but few commands actually require such treatment. a comparison could be made to tab completion functions, which are also shell-specific.

> - “cat foo* > foos” or “grep -r foo * > foos” fill up your disk.

I am almost certain that the implied premise is incorrect. According to https://pubs.opengroup.org/onlinepubs/9699919799/utilities/V..., the shell performs word expansion before redirection.

> - tools that don’t want to accept file names as input have to do all kinds of escaping to prevent it. For example, you can’t have a calculator that can be invoked with

this is a bad example; it is simple to write "calc '3 * 4 + 5'", or of course more reasonably "calc '3*4+5'". in fact, this program already exists, and is called expr.

> I think a system library function to do the globbing, etc. would have been the better choice.

that would be terrible. it would be impossible to innovate globbing extensions like ksh or zsh; the system administrator would dictate for all users a major component of their experience. in modern terms, it would be like only being able to install Gnome or KDE, not both at the same time.
I think many people are unable to consider the whole picture. They want to ideally look at these things in isolation.

There's some set of [reason] the 'west' wants Ukraine to join NATO, and in theory, there's no issue with that right?.... but in reality, the consequences could be severe. It's silly to ignore the consequences when you've been informed upfront.

Most people wouldn't have any idea that it has anything to do with NATO, since the media is doing a wonderful job of misinforming. It's being pitched as 100% unprovoked aggression.
Plus they're loaded with really good materials. I know little, but one example is gold in the welds--for satellites, and only for satellites, some contact or weld is done with 80% gold, 20% tin, which is the best for corrosion, some special qualities. Also heat foil is solid gold.

But only on satellites.
In the mid 1990s I had to figure out how to set up a radio-based[0] NTP server. There is a radio broadcast from Ft. Collins Colorado (NIST) that is highly accurate. Someone else at the large company I worked for had purchased an antenna (as described in the article, it was "a ferrite bar inside a plastic enclosure" but no one so far had figured out how to use it. I got a telecom tech to temporarily install the antenna on a post in a small outdoor atrium at our computer center, then I put a Sparc station on a cart so I could wheel it out there to connect the antenna to the serial port. (Got some strange looks from co-workers on their coffee breaks). I did a lot of reading, spent some time getting the source code to compile correctly, and finally got it all working, so that a more permanent installation could be made and we would now have another low-stratum NTP server for our internal network spread across the state.

[0]http://www.articlesfactory.com/articles/computers/using-wwvb...
The same can be said for being struck by lightning. Yet people don’t say the problem of the world is that you can be struck lightning. It’s obvious propaganda.
How many times have they run the experiment of detonating ~10,000 atom bombs at once?
> Two others were unused/unnecessary.

Not necessarily (in general)! It could be that those other two locations are part of the eyes for someone in management. This report not adding a status update could represent 10% of 25% of the stuff they're tracking on a regular basis. Do you notice if some small percentage of all the things you're tracking stops reporting? Or does it fall through the cracks? I'm betting the people tracking that work in the other two locations would notice if everyone stopped reporting.

Should they notice the reporting drop off? Yeah. But we're only human and must rely on process and the cooperation of other humans for everything to work efficiently.

(In no way am I saying someone should have to report in four places. They should fix their process so they're reporting in one place and anyone who need eyes on those people can check there.)
Putin has:

Invaded two parts of Ukraine and waged a proxy war for years.

Attempted to destabilise, poison or assassinate opponents throughout Europe.

Positioned hundreds of thousands of troops at the Ukraine border.

Threatened nuclear war recently - he directly said they would use nuclear weapons.

Putin is the one threatening war here, though of course they are waging a disinformation campaign to try to paint the US as the aggressor.
but that's not relevant to the original question of *
There is still creativity at the edges (devising new exploits, figuring out how to defeat an input santiser) but day-to-day pentesting work is pretty mundane: you go through all the ports, services, API endpoints looking for standard vulnerablities (CSRF, XSS, SQL injection), look for common login and session issues, if you see XML or file upload you try some standard ways of subverting those, and you test for access control or application logic errors. Proxies like Burp can make it easy to intercept and modify requests or replay them with different sessions.
Can you say more about this? I have never heard about this.

To my knowledge, my bank cannot access my safe deposit box without my key or without drilling and replacing the lock my key opens.

Am I mistaken about this?
There's a few ways of doing anonymous functions now, and some capture `this` and some don't. This is not a nice part of the language perhaps, but it's not like e.g. Java doesn't have similar complexity with inner classes and outer 'this'
I mean in this situation
Just be careful with vest, wrist, and ankle weights. They’re great for static exercises, think leg lifts or arm raises, but can wreck your ankles, wrists, and back while doing any sort of cardio, even walking:

https://www.health.harvard.edu/staying-healthy/wearable-weig...
Do you use the regular strap? I've been trying to get into workout stuff but the regular strap never really keeps the device in place when I go for more than 10-15 minutes
The end of waste: The grand plan to build a truly circular economy
Honestly there are so many tangentials in this post that it's really quite hard to get through without losing track of what's what, or what's real and what's hypothetical.

The article mentions network delay filtering algorithms that fall in broad categories x and y, but doesn't mention what NTP actually uses (linking to some pdf presentation elsewhere). Then there's a section about clock selection (which I understand to mean server selection) where it sounds like clocks are selected at random, no matter if they're on another continent, it's just favored if it has a low stratum. Then NTP talks to up to 5 servers and averages the resulting clock diff and, uh, applies that "using the PLL/FLL clock control system". This refers to some phase lock loop stuff from what earlier seemed to be a tangent: how quartz clocks work internally. So NTP actually tells the hardware to adjust how fast it counts? That sounds like I'd have heard of before but okay. If the offset is large and it's not enough to slow down or speed up your internal quartz for a time, it'll instead just update the time.

The TL;DR seems to be this picture: https://sookocheff.com/post/time/how-does-ntp-work/assets/nt...

Where you can understand "selection and clustering algorithms" to mean "removing outlier data points" and substitute "combining algorithm" with "average the values". The abbreviation VFO is never mentioned on the page but this must be variable frequency oscillator, commonly referred to as "clock" -- if I understood it correctly. What this "filter" is, that is applied to each peer, is unclear to me.
I don’t think it’s possible to fix wealth inequality in any reasonable way. Here’s a trivially simple numeric simulation of zero-sum economy of 100k people: https://gist.github.com/Const-me/4b9b4372ba37c03feaf2f1475b1...

Typical output:

10%: $10
20%: $20
Median: $70
80%: $165
90%: $235
99%: $475
99.9%: $705
Top 10 list: $1280, $1255, $1245, $1070, $1020, $1010, $1005, $995, $990, $965

So, after starting with $100 / each and doing large count of absolutely fair random transactions, we arrived at 10% of poorest people have less than $10, the median is $70, and the wealthiest person having almost 13x the initial amount.

I hope no one is going to accuse the random number generator of being rigged by capitalists at Microsoft. That’s simply how the math works.

Wealth inequality is natural. The real socio-economical issue is poverty, not wealth inequality.
you don't. you make solar panels, which are more efficient than plants at converting solar energy to electrical current, and then use it to run a space heater. Don't genetically engineer what you can engineer in silicon.
pub/sub is a horrible abstraction. I've written about it here: http://www.adama-lang.org/blog/pubsub-sucks

My experience is building an exceptionally large pub/sub service, and pub/sub starts nice until you really care about reliability. I made the mistake of patenting a protocol to sit on top of WebSocket/SSE/MQTT as the ecosystem was a giant mess: https://uspto.report/patent/grant/11,228,626

What I learned was that by having E2E anti-entropy protocol is that it's hard for pub/sub abstractions to not lose stuff or lie. That protocol emerged precisely because years of investment in pub/sub was a leaky bucket of issues.

Braid looks interesting. I'm using JSON marge as my algebraic operator since I have an ordered stream of updates for my system. http://www.adama-lang.org/blog/json-on-the-brain
Do you play the PC version via quest link? Wondering how it performs given the unavoidable latency bump.
>You need to wait for the price to go down. It's kinda like a reverse auction I guess?

It's called a Dutch Auction: https://en.wikipedia.org/wiki/Dutch_auction
This is people being people. People have hated and killed since there have been people, and new communications technologies like the printing press or social media make it worse for some period of time. They didn't even need Facebook to massacre 10 to 100 times the number of people in Rwanda in the 90s. I'm sure there were indeed posts that Facebook could have taken down, but the people perpetrating it or the government who was supposed to be keeping the peace seem more to blame than a company in California. If Facebook actually did accomplish the demand here of efficiently policing the entire globe's communications, it could have been encrypted WhatsApp, or AirDrop, or Signal, or Pleroma, and on and on.
There is one annual thread that asks about their favorite episode of that year.

There has been one general thread, but a decade ago, or before.
I disagree with the "these days" part. Tech companies never fixed bugs. In fact, since I can remember, they have only improved on that (but they still aren't any good).
Having little to lose is not a rationale for doing something.

You've still not explained how the West is the aggressor in the face of the continued overt Russian military aggression that we can all see.
On the subject of knee pain. I'm 48, have never really jogged consistently.

I bought a treadmill for a treadmill desk. At first walking was a bit painful when walking more than an hour a day.

Now, after a couple months, I not longer have pain when walking even a few hours. In fact, it feels better to walk than to stand.

And now walking doesn't create knee or leg pain, I am starting to jog. At first once every 2 or 3 days. Now about nearly every day for 20-30 minutes. Though if I feel worn out, I'll skip a day to avoid any injuries.

i try to jog outside, but when it's too cold, i jog inside on the treadmill, while watching queued youtube vids.
It depends on your situation of course. Since may be interested purely from a liability avoidance/shield perspective. Just to check the box, essentially. Since we’ve seen how much the suits truly care about security of user start data practically every week or month for over a decade now. Another day, another major corporate data breach. They don’t suffer any consequences for failure beyond the occasional slap on the wrist for PR purposes, yet real people have their entire lives destroyed because of this crap every day. Families without a place to live, children without food to eat.

But hey, $BIGCORP can say they checked the box! Doesn’t matter what happens now, they’re in compliance! User data? Why waste more money on securing that, we’re just going to pimp them all out anyway!

But hey, we checked the box!

(Obvious sarcasm is obvious.)
I do wish there was more corporate diversification in the offering of low cost index funds like VTI. How hard can it really be to set up a total stock market ETF? You could probably manage the whole thing on a couple computers.
Master the Boring Fundamentals
wow cool.
This is what I would like on a smartwatch.
And I never claimed that physical fitness doesn't include cardiovascular fitness.
How many atomic bombings have resulted in stratospheric soot injection? The answer, I believe, is 0, even including the two atomic bombs that were dropped on populated areas. Major conflagrations that result in stratospheric soot pumps are extremely difficult--the Kuwaiti oil fires didn't manage that, and that involved literally setting oil wells ablaze uncontrollably.

Without stratospheric soot injection, there's no global climate impact except on very short terms. Even with stratospeheric soot injection, well, look at how severe the global cooling following Pinatubo was: we'd reverse global warming since 1850... for a year or two.

(Like GP, though, I'm not keen on actually testing this hypothesis in real life.)
> British government to invade and occupy Ireland

The British government does occupy Ireland, its military is stationed in Thiepval and Holywood.

The last all-island democratic vote in Ireland was the second Dáil, which voted for the island to separate from the UK. A century on, British troops, who have been on a bloody campaign in Ireland from Drogheda to Bloody Sunday and on, still occupy Ireland.
I don't have a full solution, but as much as possible we need direct democratic control over how the algorithm works and tools to verify that it follows the agreed rules. Social networks should not be owned by "some guy" just as the court and the police, rather work according to the rules of society.

Zuckerberg should probably be compensated for the wealth he created, but he is not entitled to this level of control over sociaty.
That’s the Georgia playbook as well. They encouraged Georgia to fight the Russians. Georgians lost territory and lives and the American and Western allies shrugged and said “oh well, that’s unfortunate”.
Could you provide a source?

per 100,000 motor vehicles per year
12.4 USA 148 Egypt

per 100,000
inhabitants
per year
14.2 USA 12.8

Arnt the higher figures in Egypt because theoretically there are smaller proportion of people to the number vehicles...?

https://en.m.wikipedia.org/wiki/List_of_countries_by_traffic...
This would make me close the page.
Doesn’t that mean you can be arrested in that state?
The first Linux LiveCD – Yggdrasil [video]
I love this message. I think that most of the time it's best to have an optimistic mindset about your team and trust that they are doing their best, or at least want to. In my experience, more times than not, unproductive teams aren't the result of people working on the team being "lazy." It's usually externalities like unrealistic estimates, poorly scoped tasks and various company-driven disruptions to the team's focus. And if people are "being lazy", it's usually still an indicator of other problems that have destroyed their morale and a leader should look to fix those things. Otherwise you are trying to treat the symptom, not the problem.
“Okay So Your Bank Account Is Frozen” Starter Pack
They usually do not stretch. So lots of white space on both sides.
The article is mediocre from my POW but it contains some interesting links like "Cryptoanarchism and Cryptocurrencies".
> Take steps to quickly detect a potential intrusion:

> Microsoft Defender Antivirus

???
The security model for satellites has historically been one of assuming physical access was effectively impossible. With technology like this that assumption is going to evolve into needing to consider protections against tampering where physical access is possible.
That’s the miracle of Singapore. Opposition made inelegible through bogus tax fraud charges, elderlies working at McDonalds, bus drivers paid differently depending of their ethnicity and forcibly deported when they strike, executions every Thursday, canning still part of the penal code, first ranked exams deciding your education tracks at six, everything is fine as long as the financial industry keeps happily churning benefits. A true paradise on earth.
The only way this argument makes sense is if Ukraine's sovereignty is not acknowledged.
Maybe if they have easy efficient way to recycle gallium, which they don't mention.

Sodium hydroxide is very cheap chemical that can be used instead to get hydrogen with aluminium, and unlike gallium don't have to be recycled. Perhaps the whole "get hydrogen from aluminium scrap" thing does not make economical sense anyway.
Maybe I've actually tried to get a better understanding, and just have a different perspective on things? I consume a lot of varied media, but I also work 10-14 hours a day.
Good process is there to protect people, if it’s not doing that kill it.
Changing Room Illusion
I mean… this is an interesting write up, but the “got root” boils down to “someone committed the root private key to git and then left it sitting there”.

To be fair, I bet there are a lot of things like that out there, along with folk using “password1” as their login.

…but it felt like a bit of let down in the story.

1) Get shell access!

2) look for a commit entitled “root key here”

3) profit!

I was a bit disappointed, I was hoping for some exploit… but I guess often this stuff is just mundane human failures.

…also, is it fine to only partially redact a private key in an image?

I mean, tell me I’m wrong here, but isn’t that kinda bad? (Maybe it’s just a mock image for the post, who knows).
> Who cares what Biden will say?

Well he happens to be the US president. His constituents and the rest of the world might care.
What's sad about so many major services failing to get IPv6 going is that other service providers who are considered lesser have managed it without much issue, and every single person I know who works in tech has IPv6 dual stack networks at their home. IPv6 seems to have more residential service penetration in the US than it does in commercial/provider space. Neither GCP nor AWS correctly support IPv6 dual stack across their entire portfolio, yet has-beens like Rackspace Cloud had it working on OpenStack over a decade ago.

The point I'm making is that getting IPv6 dual stack networks in place where you have existing IPv4 connectivity /really/ isn't that hard. Organizations make it difficult, rather than it being intrinsically difficult, and it's only gotten easier as time has gone on and early adopters have paved the way. Hell I've got dual stack IPv6 set up on my Digital Ocean droplets without any issues and all their services correctly support dual stack configurations... what's the story with Google and Amazon?
I use the fitness strap and it works well, though sometimes I dial the back too tight and get a headache.
If you rely on website looks to determine the level of trustworthiness, I personally think you're opening yourself to be easily scammed.
Saves you the CPU cycles of having to step through the entire list when the word is zebra.
It even does this for globals (which are just another table), so there’s never an “undefined variable” error (even though there really is).

It’s pretty unfortunate. You can mitigate it using meta tables though.
You're being hyperbolic... I am merely pointing out this doesn't appear to be unprovoked. This place should be a little more open-minded than an MSNBC panel.
Yesterday on TV I've heard a security analyst say the following when answering a journalist's questions on Ukraine:

"In war-like situations you should assume that everything you're told is a lie unless you can prove it isn't"

I thought that was spot-on. At the moment there is no way for the general public to know what's true and what's not.
Node js is definitely great to kickstart a new project.

However I believe it becomes a trap when you start to pull in dependencies.

I recently resurrected a node.js project, just 3 years old, expecting it to be working as the day as I archived it.

Well no.

A package broke because of the newer version of Node.js. Therefore I performed a full upgrade of all packages and then _my code_ broke because some other package did not maintain backwards compatibility.

So I reverted everything back and manually upgraded only the necessary packages to make everything working again.

Both NPM and Github tell me how many unsecured packages I am using but I don't care, it's a project I am using for myself. But if it was for work I would have to spend time fixing a lot of broken things.

I think Node.js is not a boring. It is young and still growing.
This seems like something that would be almost trivial to develop once you have basic orbital stationkeeping capability. The challenge with the trash tug use case is you want your spacecraft to survive engaging a randomly tumbling object with a mass that could be substantially greater than its own. You don’t need that if you just want to interfere.

I would be very surprised if strategic DoD satellites didn't have some kind of close-in defense capability to ward off any vehicles sniffing about.
What do you mean by "now"? Did something happen this month? WPF and WinForms haven't seen much at all for... a long time. This comment sums it up well: https://news.ycombinator.com/item?id=29424984
Probably? I haven't been there in years, but I'll be contacting them to pay the fine.
Crimea was part of Russia until about sixty year ago.