skysight-inc/HackerNews huggingface dataset:
Yes, of course it's vulnerable, verified with Docker debian:sid. That was my first reaction when I read this, but I wanted to verify it first. You beat me with this post.

Since you've already let the cat out of the hat (which is not ideal), please file the bugs at Debian and Ubuntu.

Test command:

redis-cli eval 'return select(2, loadstring("\027")):match("binary") and "VULNERABLE" or "OK"' 0

While we're at it, redis has ignored the advice at: http://lua-users.org/wiki/SandBoxes
Almost all of the critical functions (loadstring, load, getmetatable, getfenv, ...) are present and unprotected in the redis 'SandBox' (which isn't).

Which means, disable scripting or shut down your redis instances NOW, which do not run with the same privileges as any client which has access to this. Scripting can be disabled by renaming the EVAL and EVALSHA commands to unguessable names.
The first artificial heart patient died after almost three months. The next one lived eighteen. Maybe I've just walked this earth longer than most, and have seen more reports of how this stuff goes, but the fact that someone lived more than a day or two with a non-human heart is huge progress in my mind. Maybe next time will be a month or two. Oh, wait, the first patient already did!

So I guess I'm a little surprised that anyone would have a negative take on this.
For former colleagues I'm personally always willing to answer a reasonable number of questions for free. But after leaving one particularly-unpleasant situation, I did barter that I'd give a friend a brain dump if we could do it over dinner and he'd expense it =*).
Agreed, at least to a certain degree :)

I never really got good with pactl or the various other interfaces, so while it's great that Pipewire is compatible with them, I was also hoping that Pipewire would mean I never needed to get comfortable with them.

If I have any criticism of Pipewire, it's that as someone who is not really interested in learning all of the quirks and weirdness of the old systems and would happily never really learn those systems except for older compatibility reasons, it's slightly weird to be running Pipewire and have all the tutorials that I've run into around it still start with, "let's learn some Pulseaudio commands".
Great article. All of this complexity is the reason I started Courier (YC S19) [0], which we just launched on HN [1] a few days ago. :-)

We take the approach of essentially offering an abstraction layer that lets you route to one or more channels based on data related to the notification event instead of having to hardcode the integration at the callsite. This has the added benefit of also letting you pull the template abstraction into the same space (so you don't go crazy manually maintaining HTML templates for email, plain text for SMS, BlockKit for Slack, etc. etc.)

FYI we support integrations for nearly all of the channels mentioned here: email (via SMTP, SendGrid, SES, and others), Discord, SMS (via Twilio and others), web push, WhatsApp (via Twilio WhatsApp), Slack, & PagerDuty. And many others...

[0]: https://www.courier.com/

[1]: https://news.ycombinator.com/item?id=30527757
It's still relevant for Web PKI work.
protip: you can use an IIFE (immediately invoked function expression) to put whatever conditionals or logic you want inside JSX! I use this all the time and it's much nicer for more complex blocks:

{(() => {
switch(state) {
case 'loading': return <Loading />;
case 'ready': return <Component />;
case 'error': return <Error error={error} />;
}
})()}
Another EFI implementation is Tianocore [1], I use it to boot NetBSD on my Pine64 Quartz64 board.

[1] https://github.com/jaredmcneill/quartz64_uefi
That would be unprofessional.

On the other hand you can often negotiate a shorter exit period; it will depend in some sectors _when_ you are leaving as much as how much notice.

e.g. as I understand it, in government sectors in the UK, you might find your notice period runs out at the beginning of any new Budget regardless, or you might find yourself on gardening leave.

And if you travel into London you might find your final date has as much if anything to do with your travel season ticket loan period!

Cuts both ways, too: longer notice periods for employees resigning are matched by longer notice of redundancy (and statutory pay), as well as other redundancy protections, like they can't make you redundant just to hire someone else they prefer. It's a very different world to the "at will" states of the USA.
Yes. Just apply existing VLT gambling laws to this stuff. 18+ rating and odds of winning must be made public.
That still requires the "unification" angle - now it's merely alcohol instead of an interest area. :-)
>> in a way that teaches the interviewer something, you've made the job of interviewing much easier.

A tip I have that I don't see much is related to this - good people love to learn, and also generally like to teach, and this goes both ways across the interview table. If you know something the interviewer doesn't and they want you to teach them about it, that's a good sign for your interview outcome, and also a great sign that this is probably someplace you want to work.

And vice-versa - if you don't know something in an interview but you have time to ask the interviewer to explain it, or to point you to a reference where you can learn about it, that'll help a lot with the they-don't-know-this signal, especially in more junior roles. In most technical jobs, it's impossible to already know everything, so demonstrating that you're someone who is always learning is the next best thing to already being the expert they want.
I think that EDGES probably didn't see a real signal is more or less the expectation of the field. I remember that the feelings towards the result at the time was quite sceptical, and it seems it didn't take long before someone discovered that the published result wasn't very robust: https://telescoper.wordpress.com/2018/09/03/edges-and-foregr...

The people from the follow up instruments are very polite about all this, which I guess makes sense if you've used the EDGES result to get money for your own antenna.
> USD: $1,311 vs $1,310

Who is the alternative in this case? So Atlantic is saving me $1?
Whatever they need you to do. The point of a notice period is they get time to prepare for your departure. If nobody is asking you to do anything then there's not much you can do. I would begin preparing for my next role.

I've been on notice periods of 2-3 months for the past 5-6 years. Generally it involves finishing projects, training others and writing documentation for whoever takes over your work.
IMHO it's quite important in the long run - I have often seen people get jobs or sales or consulting projects in large part based on referrals or reputation from peers they have worked with 10 or 15 years ago. The guy or gal who's your junior hire today may well be a purchasing manager or tech lead somewhere interesting in a decade or two.
Stool tests might help spot early pancreatic cancer
Yes, that would probably fix it, but there's no software support yet in any games, afaik. It works only in desktop mode.
Control-flow components like "<For>"... because you couldn't stand just writing "for" or "if" like a caveman and had to invent a custom DSL for it.
I would love to not have 1on1s. They are awkward, and I don't see a point, besides ticking some box in manager sheet.

I'm introvert (probably like large part of soft eng).
> There's going to be a lot of resistance to distros shipping a binary they didn't build from source. It might work if you could ship Tow-Boot on the hardware and make it optional for the OS to care, but unless I've missed something OS integration is needed (if nothing else, because it has to share storage).

That's kind of the point here -- distros would stop shipping the bootloader, and the bootloader would be independently managed, to be treated as a board firmware instead of os package.
Plus it doesn't use the sha1sum, not to say it is a particularly slow function.
When I've had notice periods the bulk of the "work" has usually been creating / extending / clarifying documentation, and attending knowledge-transfer sessions with colleagues. I have rarely if ever done any true "net new work" during those periods. Maybe if there was some task that was half-finished that I could finishing knocking out, I might finish that up.

The rest of the time, which would generally be the bulk of it, was spent surfing the 'net, going to long lunches with my colleagues, or hanging out in the break-room swapping war stories, talking about out-of-work hobbies (mountain biking, etc.) and such-like.
Nice write-up! Question about the (excellent) schematic PDF -- in the pulse trigger section, the emitter of Q3 seems to be tied to the top of R14, but I don't think that can be right? Is it supposed to be connected to ground?
Indeed you bring up a good point. There is risk. However, you never know what is the complete reason for someone getting fired, unless you are the one doing the firing. There are lots of things that do not get disclosed. It's also very easy to assume reasons if you're a bystander and be 100% wrong. I've certainly done that a lot.

It could easily have been that the other person got fired for completely unrelated reasons. It of course could also have been that he did in fact get fired for the reason suspected. In this case the question is again - what does the parent commenter want to optimize for? Is it peace of mind or job stability?

If the situation of having to lie is really bothering them, then perhaps the risk of things going wrong is worth taking? The original commenter is the only person that can decide that.

Also, if they keep lying, what's going to guarantee that they will not get promoted because they accidentally did well enough? Or if, indeed they keep getting not promoted, then will that look bad? Are they in an "up or out" level?
Is it worth the trouble for an eventual User to learn Blender?

I don't do animations, but I like to edit some personal videos with a pinch of VFX. I always read that it is great and powerful, but has a difficult UI. I always wanted to learn it, but time is limited.
I believe this kind of policy of masking preschoolers is unique to the US. At least I’ve never heard such a thing in reporting about Europe.

For example in Germany caregivers don’t wear masks when interacting with children either because it’s considered to harm their development.
Hilla, a new full-stack framework for Spring
That is exactly why most hospitals are required to take sick patients. The Emergency Medical Treatment And Labor Act requires hospitals that accept Medicare (most of them) to provide (minimal) treatment to any patient that shows up.
I'm referring to the earliest era of transparent space, when conventional matter supposedly coalesced. If we look back to that period and still see red-shifted mature galaxies then something is very wrong with the current models. I'm under the impression that we don't have good observations of the period 375k-400M years after inflation and that infant galaxy observations have not been confirmed.
> Sending an email and saying no.

This is not that simple. Your hiring process is a funnel with certain conversion rates at wach step. If you overcomplicate it, your hiring timeline extends, increasing time to market for your projects and having some impact on the revenue. If you oversimplify it, risk of bad hire increases, but it may still worth it, if funnel gets much better.
If only the original hand-waving engineers were just as logically sound in their assessments.
Personally I'm not sold on Kotlin. I don't think it offers much for me over Java 17. Maybe nullable types? But I haven't had problems with null in years.
Introducing artificial scarcity on digital goods seems incredibly anti-consumer. Consider a different scenario where someone wants the skin both now and later (for whatever reason - value is driven by the desire of the purchaser), but doesn't have the financial wherewithal to purchase frivolous things at a whim. In that scenario the consumer has to make a choice between purchasing an artificially scarce good or making a good personal financial choice.

From a neutral party standpoint (i.e. I neither want to purchase the skins, nor do I benefit financially from their purchase, nor do I wish to ban their sale outright), it seems obvious that a fungible, non-exhaustible digital good (with it's near-0 maintenance cost) should be restricted from exclusive periods of sale. There is no reason for it, other than to take advantage of human brain chemistry to drive a specific type of sale by producing artificial demand.
>This is the worst possible advice to give about technical writing! What you should absolutely do if you want your readers to know what you're talking about is a) define your terminology before you use it and b) stick to the terminology you defined throughout the entire paper. Don't call a thing "red noppertock" the first time you mention it and then "crimson nopper with a tock" the next time. Call the same object, the same concept, the same method by the same name, always. Otherwise, you will only create confusion and make your reader tired and impatient.

What you are saying and what McCarthy is saying can both be true.

Using the same word repeatedly is boring, technical writing or not.

If you find yourself using the same word repeatedly, don't - as you seem to be assuming McCarthy is suggesting - pluck an alternate word out of a thesaurus; rather, take a step back and rethink if there is a different way to express your idea without using the word at all, or by using it less frequently.
There was serious consideration to sending Atlantis as a rescue mission as Columbia was not in a position capable of rendezvousing with the ISS to use the later as a lifeboat. To your point, subsequent missions were required to have a formal rescue mission outlined.
Sure, there's no technical blocker, but the article seems to be implying that they shouldn't:

> One of the nice things about Tow-Boot is that it leverages the Nix build system to generate a nice reproducable build of the platform firmware. This should take away some of the doubts of having a prebuild platform firmware instead of every distribution figuring out how to do this from source. Also distributions not doing this from source would mean there's less chance of inconsistencies slipping in.
But they still have to pay for it right? How is this different than say if you bought your game cards, opened them up outside the store and after you realized you didn't get the card you wanted, you went back inside and bought another one? I'm confused how this is different
Ya, FAANGs don’t exactly have nice offices, amenity wise sure but nobody GAF what they look like, there’s probably nerf guns and desk clutter everywhere.

Think somewhere with clients and prestige. Law offices, design shops, consulting boutiques etc.
Or yesterday, when they claimed that buying a $4000 Mac Studio advances social justice. That must have been the most tortured attempt at checking off that box I've seen in a while.
The most critical thing I do is to make sure I'm not the only one who knows something. Warm handoffs, writing docs, wrapping up tasks, etc. Other than that I work as normal, minus taking on new work, so as I handoff/finish tasks, the workload dwindles. Usually the last day or three I have essentially nothing left to do.
I believe that every new account is shown a banner to https://news.ycombinator.com/newsfaq.html

(The answer to that question is FAQ #5)
My SO is not always reliable when it comes to handling home duties while I’m away for work. So I setup a little Python script to send a text message with a TODO list every day. Twilio handles SMS, reminders are store in sqlite3, and cron runs the script once a day. It lives on a DreamCompute instance so (hopefully) no worries of a local power outage eliminating crucial (ok, not really that crucial) reminders.

Are there better ways to do this? Undoubtedly. But I sure had a good time making it work.
> You would need internet connectivity to validate your AccessKey with Picovoice license servers even though the voice recognition is running 100% offline.

Plus closed source binaries checked into GitHub which is always a red flag; you're basically using it for free distribution of your paid software.
I've been waiting for this.

While I like occasionally reading newsletters in my email, after a few subscriptions, it's doesn't match the workflow of what I expect when I open up my email—namely, spending only a few seconds deciding what to do, rather than a few minutes.

When I read a newsletter, it's like perusing a library. I want to take my time and email just isn't a good format for that (in my humble, yet slightly arrogant opinion).

There's also more features you can implement with an app. For instance, I'd love to see old posts from writers I've just subscribed to that were popular months or years ago. All too often, I feel like I miss out on timely posts.

Or even just highlighting, annotating paragraphs.

I think this will also make people more likely to subscribe to newsletters, because organizing their feeds will be much easier.

Excited to see where this goes.
Definately not. The repo is full of precompiled dlls.
That's one way to do it, as I said. The other way is to share the burden of the service by all of its users.

In the case of Taxi service, I find to be more appropriate users of the local service sharing the cost of the low hours. Central government paying for local services tends to be very inefficient.
The marginal value to your career of a day's work is probably highest during your notice period, because of the opportunity for a last impression on your network for future job references etc.
Hi friends! At Canopy Connect, We're building single-click insurance data sharing - think "Plaid for insurance". Our infrastructure powers best-in-class insurance experiences. We're hiring Senior Full-Stack Engineers, a VP of Operations, Director of Marketing and Recruiter/People Operations. We're a small, fully remote team based in the US and Canada. Check out our open roles here: https://boards.greenhouse.io/canopyconnect
Thanks I hadn’t realised from the post. Makes sense.
No evidence yet that the death is due to the heart! He was old and frail as is. This is not an indication that the procedure is a dead end. In fact, there is still lots of hope!
There's no software support for foveated rendering in any games yet, afaik. It works in desktop mode and it's fast enough to be unnoticeable.
Why shouldn't they provide services? It's just easier for them to drunk drive and kill others.
> Here, do this work for free during your own time for a _chance_ at Yet Another Interview Round

Nah, I'm all set.
Paid software on github, this post is just an ad.
No, this is rather a case of the old models probably being the more correct ones: the EDGES result itself was quite unexpected and hard to explain in the existing framework as it was much stronger than expected.

Now that EDGES looks to be dead, the old predictions of a weaker effect are validated.
I would never give out references without a contingent offer that I intend to accept. I don't want 10 different hiring managers harassing my former co-workers.

I would much rather take a short coding exam.
> Bullshit has been called out.

Research and, IMHO, reason show that unless you have real domain expertise or direct experience of the event, you can't distinguish well-crafted bullshit from truth.

> I’ve been able to access expertise, military and political

Those are accessible outside Twitter. Better, the expertise is less diluted by noise, and you get expertise + focused work (papers and articles, with editors, etc.) not hot takes. Just read foreign policy publications like Foriegn Policy or Foreign Affairs.

> Russian trolls have completely failed to control the narrative. ... And the best evidence for this is the Russians shutting it down.

That may be true in this case (I am not so ready to conclude it), but we know well that it hasn't been true in many others and won't be true in yet more, and people can't distinguish. Also, that does't mean others don't control the narrative - people who using the crisis for their own ends or even people you coincidentally support.
I never tried this, but I've read multiple times (can't remember where) to use chopsticks for ALL your meals. This will generally increase how long it takes you to consume (i.e. more time for the "I'm full message to get to you brain").
It depends on the model, yes. Here are some examples in the benchmarks section of our docs: https://www.tensil.ai/docs/reference/benchmarks/

We haven't specifically tested on any ICE40 FPGAs yet - if this is something that you'd really like to see, let me know! Taking a look at the lineup, the ICE40 LP8K and LP4K would be suitable for running a very small version of the Tensil accelerator. You'd want to run a small model in order to get reasonable performance.

Generally speaking, FPGAs with some kind of DSP (digital signal processing) capability will work best, since they can most efficiently implement the multiply-accumulate operations needed.
I don't think legislators are entirely ignorant of the problem. They probably don't want to even try regulating artists; and the companies selling these lootboxes have insisted that any regulation would impinge upon freedom-of-speech. The regulations we have on gambling applies because the games involve wagering money; things like loot boxes[0] get around this primarily by not offering anything of value.

Of course, the counterargument (which I agree with) is that these have the spirit of gambling - i.e. being designed to maximally fuck with the heads of people who are even slightly vulnerable to dopamine. You will probably get politicians to agree with you on that, but they won't want to waste political capital on an antipartisan[1] issue. Sure, it might have popular support, but it harms the country's interests to be regulating things that make money.

[0] And their historical antecedents such as TCG booster packs, figurine blind bags, coin-op arcade games, and so on

[1] Political issues can be broadly categorized into "partisan", "bipartisan", and "antipartisan":

- Partisan issues are ones that typically find their way into a political party's "agenda". They are issues that one or more parties support and one or more parties oppose. Examples include basically any wedge issue in American politics.

- Bipartisan issues are ones that are obvious to a supermajority of politicians. These are issues that "everybody supports" and pass Congress with wide margins. Examples include things like copyright law.

- Antipartisan issues are ones that are obviously bad to a supermajority of politicians, regardless of whatever popular support they might have. Examples include things like right-to-repair.
> resumes are very nearly worthless

Sorry for being incendiary, but this hits me as a recent trend that is nothing short of insane. I went to a top-ranked university on the highest-paid scholarship I was eligible for, got a Ph. D. there, then got the job that all my peers wanted but only a handful actually got. Then I booked 10 years of industry experience. -- You wouldn't believe the life sacrifices I've made to be able to have all of that on my resume. If someone tells me that's all "worthless" and they'd rather ask some stupid puzzle questions and see some indication of how passionate I am about working for some no-name company, or whatever the latest hype is, then that's simply where the interview ends for me.