skysight-inc/HackerNews huggingface dataset:
The Russian have been preparing for years, so what kind of highly unlikely?

https://www.govinfo.gov/content/pkg/CHRG-115shrg28945/html/C...

https://www.jstor.org/stable/resrep18769?seq=4#metadata_info...

https://www.fpri.org/article/2018/03/bosnia-russian-chopping...

https://www.spiegel.de/international/europe/the-fragile-stat...

https://www.balcanicaucaso.org/eng/Areas/Balkans/War-in-Ukra...

https://balkaninsight.com/2022/03/01/serbian-far-right-group...

https://balkaninsight.com/2021/11/23/experts-urge-improved-a...
Imo, chances are, it is yet again bad analysis. Regardless of whether this is trolls writing or not. Prices of food will go up tho.
Agreed. In times of war, we should assume that everything is a fake, especially if believing is oh so very tempting.
In practise using latest or just the major version has caused far less wasted effort for our team than scrambling to update versions because of some newly discovered CVE.

It's a problem in frontend builds because js libs are quite poorly behaved so we fix more there but any backend stuff, be it alpine / debian base images, jvm libs, toolchains so on we've not had an issue with specifying only major versions.

Dogmatic rules are wrong 100% of the time.
I am using AWS ECS as a Docker repo with releases using the image hash (as well as a server). If you want to rollback to a certain time, you just identify the appropriate Docker image tag, and restore the Docker you used at that time in your development environment.

To give an example, we got stuck on Python Pandas 0.24.2 for two years when the Pandas 1.0 upgrade happened. At the time we pinned the version as one job was failing. With COVID priorities naturally changed and this was forgotten. When normality returned we suddenly had to upgrade 10 jobs to Pandas 1.2.x, a very painful migration that took one Engineer 4 weeks of testing. In hindsight it would have been far better to upgrade this one job, as it would have only taken a few hours.

Again it is a trade off. Having unexpected dependency changes can be cumbersome when you are releasing a small change. However, getting senior management to agree of weeks of upgrade testing can be challenging as well. My natural preference is not to pin versions, unless I absolutely have to.
I hate it enough for day to day use that I'd leave a job over it if I was forced to.

It's fine occasionally for training, as you suggest, or for explaining a design to people, but like you I feel it's an encroachment.

Thankfully I'm experienced enough that I can afford to refuse to take jobs that impose it.
Previosly on HN:

[1] https://news.ycombinator.com/item?id=23077992 - (May 5, 2020 — 151 points, 133 comments)

[2] https://news.ycombinator.com/item?id=11932675 - (June 19, 2016 — 219 points, 202 comments)

etc.
No, I put a straight-face ascii emoji for a reason. :|
Yes, and no.

This does mean that you have to actively manage your versions for any security fixes. Which you should be doing anyway. However when upgrading or patching you have to check in a bunch of places to make sure the update was effective.

As someone mentioned else where, its better to pin to major versions rather than specific. You'll need to make sure you have decent integration tests and monitoring though. I mean you have that already right?
Highest quality I could find is https://youtu.be/I3JpOy_fOmA?t=512

4k quality even has interlacing artifacts which makes me think it is as close to original broadcast you can get
For a pretty good client and a rather large western player base https://www.gokgs.com/ always was a good place to play.. Didn't play for a few years though, so things could have changed.
I have said it before[1][2] and I will say it again:

The Chinese model of online information management has been extremely successful and there is no reason for other rulers to not try to copy it.

India has it in place[3], Russia is trying to do it [4]... and the west has been doing it too and it is done by making it seem like people have free choice of posting infromation but having tech companies remove, hide, shadow-ban, or otherwise limit the spread of information dangerous to the rulers.

This is inevitable and there are no other options.

[1] https://news.ycombinator.com/item?id=30510857

[2] https://news.ycombinator.com/item?id=30492226

[3] https://advox.globalvoices.org/2020/02/10/what-do-we-know-ab...

[4] https://www.economist.com/business/russia-is-trying-to-build...
Depends on usage case. At home I :latest everything. The work of constant adjusting tags to bring it up to date is more hassle than the risk of something breaking.

Prod stuff....yeah best to pin it for supervised upgrades
I kinda wish SPARK were mainstream. Ada kind of aims for the same things as Rust, but it's been around such a long time. It's amazing how long C has stayed around.
What about a function like f(x) = sin(x)? I feel like when x gets big the error will start to increase.
That's good to hear. Peace to you, too!
two lawyers arguing about indemnity for a year
How can it protect from cloned hardware? Ie. they get keys, clone them, sell at discount - and sell shipment address + software/hardware backdoor on the side.
Cool but this has been around since forever
Call me stuffy but I argue for writing your own Dockerfiles, all from one or a small number of common base images (e.g. scratch+debian, or what have you), served from your self-hosted registry.

If you want to use some provided official image for vendored software, just port it over.

Then you tie the build+push into your pipeline however suits your org, be it fully manual or end-to-end CI with regular rebuilds.

This solves several issues mentioned elsewhere in the thread. As a bonus you won't be affected should docker.io or quay have issues or make breaking changes.
he's a reputable investigative journalist with a track record.
Which company do you work for?

I researched pair programming companies a while back and didn’t find any.
Look at the Serrapeptidase entry. Then do a cursory search on google on the same and then on google scholar.

You will see the amount of information missing from the wiki page.(compare with Serrapeptidase entry on say drugs.com).

Then look at the Talk page of the entry. You'll see the editorial battle there with some "power editors" squashing any attempt to correct the page.
You have touched on one of the biggest reasons I am against private school. We can't force our countrymen to know each other as adults but I think they should start in the same classrooms.
> There is often no function to find in solving a problem

In finance NN can be used to calibrate models, i.e. generate parameters to a model (function) that replicates existing data (obsered prices/volatilities).
The article about the Padauk is interesting. Especially the description of the FPPA feature. Multiple CPU contexts? This sounds suspiciously like SMT to me which would be a total novelty for a micro controller (afaik).
Analysis! Fun. Let's analyze 'em:

> 1) stage a dirty bomb, blame it on ukraine, order a general mobilisation.

Equivalent to #5.

> 2) freeze the conflict now, hold on to the "gains"

This would be the smartest move. But it would also signal that Russia admits defeat, which may work against Putin. After all, his goal is to hold on to power.

> 3) Assainate Zelenskyy

Putin is certainly trying. It may be media exaggeration, but supposedly he's survived three attempts.

If it happens, though, I don't think it will tip the scale -- Ukraine won because there are competent people in charge, and because Zelenskyy didn't flee. Zelenskyy dying would still leave competent people in charge.

> 4) Stage some other stupid humanitarian horror(bombing of russian hospital/orphanage/school) general mobilisation

Equivalent to #5.

> 5) carry on, regardless.

It's impossible for Russia to make progress, because they have no way of carrying fuel, ammunition, food, and other supplies to the front lines. Any time they try to extend their lines into Ukraine, they're cut short, because five days later the front line runs out of fuel. And they can't guard their supply lines because they never achieved air superiority.

Putin's options are extremely limited.
When enough people believe in a thing, it has a measurable effect. That's what we're talking about, here.
Fortunately most browsers already have some measures to prevent that (https://developer.mozilla.org/en-US/docs/Web/CSS/Privacy_and...), the demo avoids automating the process altogether, and relies on tricking the visitor into 'voluntarily' telling if they've visited a site.
So maybe it’s genuine.

Or the admin is bored.

Or the admin got this sent randomly from someone. Maybe an FSB operative, or maybe a convincing troll, or Russian or Ukrainian or frankly any intelligence service.

It’s completely unknowable. Any heuristics for determining authenticity go out the window, because they would be used by a faker too.

Hell, even concluding it’s a fake is dangerous, because what if that’s the intention? Next thing you might be wondering if this is reverse psychology and trying to conclude things from something that really has no informational content to the lay user.
Yeah some question of "hey did you try the docs, if so what were you missing?" or something would go a long way. In this case, the Python tooling had been previously good enough that I started slash work poking around in the IDE. When I couldn't find anything, I went into my bookmarks and what docs I had didn't have any kind of banner or other warning that the project had been abandoned. It was only when I went looking for a blog or some sort of news source from the project that I found myself looking at the repo readme. The only indication that the project was dead was a small blurb at the top of the readme which you could easily skim past if you were looking for something specific. I tried to raise this point to them that the status of the project is not obvious and requires reading a dramatic gist ("moles in discord") to understand and yeah that wasn't received well. This whole time I was handling myself like I would a team at work that I'm not familiar with, very professional and objective. I didn't leave in some flurry of insults either.

Regarding pseudo-official servers, I imagine Discord wants a beat and handle on the community but ultimately the way the business has to move and make decisions is not compatible with how these people behave in public.
Some people have rotational asymmetry in their eyes, and this is compensated for by eyeglasses with rotational asymmetry.

https://en.wikipedia.org/wiki/Astigmatism
https://developers.google.com/web/updates/2020/10/http-cache...

Google claims a 4% increase in bytes over the network.
> Wikipedia

Would be interested to know any future planned scope of work. What are the current big issues needing resolving?
This is a very vague response and to me comes across as FUD.
Games won't install or run without connecting to blocked or decommissioned servers, printers won't accept "foreign" cartridges, scanners won't scan, DVDs/BDs won't play without auth, TPM, DRM... What a time to be alive! (
Whoever cloned the hardware would need to know the private key Yubico embed in it, and those aren't east to extract, although presumably feasible for cutting edge chip reverse engineering labs.
As a long term user of 420chan, I can say he has sadly lost the plot. All major happenings on the site were marked by his absence, and most downturns by his presence. He wasn't hiding in the shadows micromanaging the spooky anonymous hackers like he pretends nowadays, he's just a weirdo trying to relive and rewrite his glory days.

For most of its existence, 420chan has been plagued with administration incompetence and downtime, so I find it very hard to believe someone who can't even run a site is secretly masterful at hacking them.
All functions can be approximated by the Fourier transform. Look up the equation to see why it applies here (Hint: it is an integral of f(t)e^(t)).
300USD for that flimsy shaking setup, you can buy a very decent microscope for 300USD with HD camera and solidly built.
wow this is the first i’ve heard of this and it’s very stupid
I think there is, I's been a long time since I had issues with SELinux. To be honest I have no idea how the GUI works. I do everything with CLI.

From the top of my head, I don't know. But this might help:

https://wiki.archlinux.org/title/SELinux
Or Myanmar, but things there are changing. Previously they drove on the left as in the UK. Then a fortune teller told the dictator to change to drive on the right, but the imported cars still had the steering wheels on the right. With the penultimate government, this was starting to change. There's a new government now, so who knows?

I've driven in a Bolivian chuto. The steering wheel and pedals are moved, but everything else stays where it was manufactured. It's odd to sit in the right sea as a passenger in front of a dashboard with no steering wheel.
I had to enable js for it to work in firefox
In the context, comparing it to a $300-$400 DIY solution it isn't expensive.

A different thing, sure, but not more money.
This seems very focused on spelling. What I find is key for a good spell correction system is how the words sound. For example I find that Firefox often can't find the word I meant for it's suggestion list but pasting the misspelt word into Google gets the right result 99% of the time as the one provided option.

I wonder how difficult it would be to adapt this to work on sounds or other frequent typos and misspelling sources instead of just characters. It seems it should he possible if you can define a decent "normalization" function.
version numbers are never immutable. they are arbitrary labels that are created by some centralized authority and can be changed by that same authority.

artifacts being removed is much less of a problem as artifacts being spoofed with malicious content.
The info about Putin not being the only one in charge of pushing the "red button" is new. Hopefully it is also true, but afaik there hasn't been any concrete info about that, quite the contrary, the feeling is that all the world risks getting into nuclear war because of one "madman".
Agree, even if it completely genuine there doesn't seem anything that useful in it. What I find interesting, if true, it might be a first sign of more, actually corroborated information coming out in the coming months and years.

In the first days of the Snowden leaks, I was very skeptical (and got a lot of heat because of it), because, although intuitively it sounded true and fairly aligned with my world view, he seemingly didn't say anything that one couldn't just come up with and at the time only one news paper has seen the actual documents, vouching for it.
The chutos I've been in have had only the steering wheels and pedals moved, the rest of the dash stayed where it was originally manufactured.
Lots of nasty things are "just products" of simple ingredients, like seed oils. If the ingredient was invented in a lab less than 100 years ago, I try not to eat it.
That may be reasonable; I think it's important to consider how any party's involvement will be remembered as well, though. What groups will be glorified? Will that affect the way that those groups behave, what they feel proud about, and how they are treated in future?

There are a lot of roles required in successfully defending against an invasion -- maintenance, transport, heavy lifting, fighting, cooking; to name a few. Effective task assignment can be a resilience multiplier in the moment and also has a long-term echo.
Hey, GitLab team member here. In the post, the author mentions boring solutions. This is actually one of our subvalues at GitLab. You can read more about them here: https://about.gitlab.com/handbook/values/#boring-solutions
Well, considering that Yubikeys can generate crypto keys (for SSH, PGP, etc.) on device, I assume it would be possible for a fake one to use a backdoored/weak random number generator so that encryption/authentication based on these keys could be broken...

Another potential attack (for those who use them to store keys created on another device), would be to have a way, for an attacker that would steal your (fake) Yubikey, to get back the secret key (which is normally impossible/hard on a genuine Yubikey).
That argument does not work since you have not come up with a new security argument after a pointed out there was not concrete security argument after you withdrew the nuclear threat: https://news.ycombinator.com/item?id=30570482 For the argument to work, for the analogy to work, NATO's threat to Russia needs to substantially change if Ukraine joins NATO.

Russia does not trust NATO and especially the USA, any neighboring country joining NATO allows them place more military assets close to the Russian border and having military assets close to a target is obviously more threatening. Russia had all those assets that are in Ukraine now all the time but moving them to the Ukrainian border made a heck of a difference.

I have now also looked at more resources and they mostly support what I researched before. I am somewhat worried that I accidently got trapped in a bubble as the pieces fit together almost to well, so I will have to look more for opposing opinions.

M. E. Sarotte: Not One Inch - America, Russia, and the Making of Post-Cold War Stalemate (2022) [1]

John Mearsheimer: Why is Ukraine the West's Fault? (2015) [2]

Vladimir Pozner: How the United States Created Vladimir Putin (2018) [3]

Vladimir Putin: Speech at Munich Security Conference (2007) [4]

As a probably opposing opinion I found »Documents Talk - NATO-RUSSIA Relations after the Cold War« [5] but it is 600 pages and I really only read a few paragraphs from a few documents so far. It is however co-sponsored by NATO, so there is certainly the possibility of a bias in document selection.

[1] https://www.youtube.com/watch?v=RXBKGRPwfZw

[2] https://www.youtube.com/watch?v=JrMiSQAGOS4

[3] https://www.youtube.com/watch?v=8X7Ng75e5gQ

[4] https://www.youtube.com/watch?v=hQ58Yv6kP44

[5] https://pism.pl/publications/Documents_Talk_NATORUSSIA_Relat...
High schoolers probably learned the thin lens equation.
Stock prices are not well modelled as continuous functions- the prices you see are generally trades (discrete function) and the price may or may not have been available to you at the volume you wanted (there are more variables than time).
That's what code reviews are for.

Unless you're working directly on a live server.
With such high salaries I'm not sure if there's any place on earth other than SF that can come close to the standard of living you will live with $48k in Indian metro city.
I used an old algorithm in a text search, called Metaphone[0]. It works relatively well, for English (There's a Spanish version, too). I used Double Metaphone.

[0] https://en.wikipedia.org/wiki/Metaphone
Already on it, according to the director for cybersecurity and secure digital innovation for the US White House National Security Council.

https://events.trmlabs.com/trm-labs/TRM-Talks-Russia-Sanctio...

(They ask you to register to view but viewing is possible without verifying the e-mail)
My experience is that pairing is deeply disruptive to my exploration of a design. It forces me to slow down and verbalise something that I can clearly visualise in my mind, when the fastest way to externalise it for me is often to write the code and show it. I'm happy to walk people through a prototype afterwards and discuss it and if necessary throw the thing away and start over or significant revise it. I'm not happy to have someone disrupt my thinking about a problem while I'm trying to focus.

Fundamentally I tend to think that people who insist pairing is ok to impose on people think everyone is like them, and don't see that it's forcing out people with different ways of thinking and processing problems. Ultimately I think it's bordering on discriminatory in that it's selecting for extroverts who don't burn out by the extensive amount of interpersonal contact pairing forces rather than selecting for results.

For my part I will never work somewhere that imposes pairing. I'd rather leave software development altogether than suffer through that, because it's not worth the exhaustion and the reduction in throughput other than occasionally (e.g. while training someone or walking people through a prototype). Thankfully I have the luxury of not having to take that shit.
A look at early-stage VC firm Initialized's unicorn startup investments
AGI, since it lacks a technical/mathematical definition, can be anything. It’s mere philosophy at this point, actually even vaguer than most philosophical problems.
Zotonic, the Erlang Web Framework
Maven versions are not present in VCS if you use ranges. Wouldn't this cause issues like not know what Library version is being used in production and builds not being reproducible?
I'm familiar w some issues here. At least in the past the traceability / status of funds from sender side was not really available.

With ACH you can usually figure out who bank is and go from there. Return codes if money didn't credit. Checks same thing presenting bank and back of check. Wires same thing.

Zelle they will say nothing. If someone says I didn't get the money - you have no cancelled check to point to even.

Fraud detection is poor. TRX limits make it hard to use for some things def a stay away
Maybe instead of adding "new knowledge" our brain works by "removing bad candidates".
> Creating a long fake is riskier than a short fake. Making mistakes is a risk, and so the more content the more risk.

But this isn't really a long piece. It's very short in actual content, only padded with prose.

And what exactly is the risk anyway? That someone will identify it as Ukrainian disinformation? That's very low stakes, which we know because it has already happened with other bits of "info".
I meant you can use CSS on the checkbox once it is checked, there is no need to actually submit a form. I understand that you can't use CSS directly on the :visited selector.
Has bellingcat made any big mistakes? They're kind of a big name in OSI
The RP2040 actually has built in 12Mbps USB 1.1, no serial bridge required. But if you do want to use a serial to USB bridge the max baud rate is 921600.
Would this be suitable for external customer facing web apps, or is it more for internal data apps and dashboards? For example Streamlit initially looked exciting for easily building data driven apps but it wasn’t suitable for external customer facing apps.
So fortunately these kind of life-and-death decisions are far above my pay grade. My personal skin in the game is roughly: live in San Diego. So my opinion and five bucks gets you a latte.

There might come a point where a cautious, politically-acceptable, consensus-driven approach actually increases the risk that the big game starts.

When the stakes are this high, if there is a realistic path to de-escalation that has to be the goal.

But there may or may not be a realistic path to de-escalating the situation.

Money may be a lever: 2T+ stimulus packages are becoming the norm in the US. That’s significantly more than the GDP of the RF. If a ton of aid gets the world to a better place, that’s most likely way EV+. Russian sovereign debt it yielding 20%+, maybe money can help.

But if the internal dynamics of Putin’s situation make it impossible for him to back down? It’s probably better to do something decisive than to wait for the wrong sanction or just ambient pressure to kick off the big one anyways.
German State Confesses To, Downplays Government Spyware (2011)
I definitely wouldn’t say the old way is without its own problems - only that it’s what most older people were familiar with. Remember that cable TV is something which became popular when the boomers were in their 30-40s so at least from an American perspective you can kind of view the 20th century as a series of escalations returning to and then blowing past the worst of the yellow journalism era.