skysight-inc/HackerNews huggingface dataset:
Trevor Noah, like the leading French player or even the former US president all have a white parent but somehow everybody define them as black or Afro-xxx. This is for me a strange perception.

At least in Trevor Noah's case he grew up in South Africa where he was absolutely and objectively treated differently under law due to one of his parents being black. The fact that his other parent was white did not give him any advantages on that front. I imagine that colors his world view quite a lot.

The US used to be the same not that long ago. Didn't matter if both or only one of your parents where "black", you were equally banned from the 'whites only' parts of society. Even today in the US racists probably won't be less racist against you just because one of your parents are white.

the external aspect of that person that is defining the person and the color is taking precedence on everything

Basically yea, at least in the US. I think the best working definition you will find for 'black' is would the person have been kicked out of a "Whites only" establishment in the Southern US in the 50s. My gut feeling is that that is the definition most Americans instinctively use.
It's been mentioned on HN before, but in case you haven't seen it: https://www.youtube.com/watch?v=1OfxlSG6q5Y.
And MRT (Malware Removal Tool, catchy) on the Mac.
>But, when people are mostly making decisions off of marketing and PR and don't have access to good information, there's no particular reason to think that a product being generally better or even strictly superior will result in that winning and the worse product losing.

Absolutely hit the nail on the head. Advertising distorts the market, meaning what would be a good idea in theory becomes a completely different thing in practice.
My favourite part of this tweet is the down-thread reply from the author:

"In fairness MSFT are really good in terms of web facing things, particularly security things." [1]

This, of course, aged like milk the very next month. [2]

[1] https://twitter.com/GossiTheDog/status/1427966653938143233

[2] https://www.paloaltonetworks.com/blog/2021/09/azurescape/
Indeed it isn't, but it's plausible enough to make that other plan useless anyway.
It's worth bearing in mind that while they certainly make a lot of money, sports teams in Europe aren't primarily run as profit-making entities (they are sporting entities before all else). To the point that the national government stepped in to block a recent move by premier league clubs to form a new pan-european league which would have generated more money, but would have undermined the spirit of fair competition between teams by removing promotion and demotion between leagues.

Another example that occurred to me: I understand that American sports actually have regular breaks specifically to facilitate adverts. Whereas football (soccer) matches have two uninterrupted halves with a single 15 minute break in between.
Actually it's the process how I (DIY) deploy several static sites from my local machine. I build the Docker image (hugo sites with nginx, expose a single port for HTTP traffic) and save it as tar. Ironically the base images do come from a registry, but I can't deploy to a public registry and don't want to host my own.

On the server where I need to run that site, I just transfer the tar, load the image and run the docker image. It's so straightforward I much more prefer this way than being dependant on external registry sites for deployments.
Vortex86 SoCs were once quite commonly found on embedded boards used in industrial automation. Outside of that I'm willing to bet you'd find them in semi-embedded applications like point-of-sale devices.
The alternative is that people could simply buy houses if they didn't have to compete with landlords.
The same warning obviously applies to all the American AV vendors, given what we have learned in the last years. And this is not idle speculation and baseless accusations, it's right from the inside part of the NSA and CIA leaks.

So what is one to do? Where is the free open-source AV the world needs, which has the same number of highly skilled full-time developers and researchers as Kaspersky does?

There really needs to be a global AV effort and software, funded by governments, but open and transparent, and based in a country which does not sit in the shadows of over-reaching spying agencies. But what will it take for this to happen?
Microsoft DirectStorage API Available, but Without GPU-Accelerated Decompression
We supply servers running some proprietary control software and a school district put Kaspersky on it after receiving it. We mentioned to them we can't be involved with that product anywhere because of our companies involvement with DFARS, and frankly we are surprised they were able to get away with using it being a government organization. Still there though, guess they just don't care.
Except that they only miss those shots because they haven't had enough practice attempting them.
My first generative art project, a starfield generator
The idea of a public ledger, where any public record can be kept without the need of a central authority certainly has value. The fact that current tech solutions are not efficient, and thus expensive, should not hide that value.

Instead of going through offshoots trying to find the killer app, I'd much prefer to see cryptocurrency tech evolve in order to bring costs down. Take the base use case of keeping "bank account" records and run with it until it works (as of now, it does not). Out of the viable -- for my definition of viable -- cryptocurrencies out there, the only one I see moving in the right direction is Ethereum. They are taking their sweet time, though.

If a killer use case is needed, think micropayments: The ability to pay 0.1¢ to listen to a song, paying directly to the artist.
What non tech user even care about the version number of the browser. I have no clue what version I use.
Yes. But a possible reason why it is relatively well received anyway is:

1) There are no new facts likely to come out any time soon & the situation is unlikely to change.

2) This is a question of public spending.

3) Joining dots, someone is being taxed to fund other people literally just entertaining themselves.

Eg, say I don't like team sports and there are some homeless people living nearby. Why should I be paying taxes for an uneconomic football stadium? The people who use the stadium can pay for it. If they can't afford it, it shouldn't be built. There are real problems in the world that are more important than people distracting themselves.

And from that perspective, downright contempt for pro-public-spending-on-stadiums seems a plausible position.
I feel traditional antivirus software is the very opposite of zero trust. It runs at a very high level of permissions and intercepts almost everything.
I didn't own one. I ended up choosing the budget option. But if it was known for being bricked because of the boot software like multiple Nexus 5x that I owned, then I am skeptical.
Only if HN promises me to never again force me to read a comment starting with "full disclosure ...".
That's a pretty bold statement that nightlights are associated with obesity.

But there's a theory blue/white reduces melatonin output.

So, use red nightlights, apparently true red wavelengths don't affect sleep.

https://www.healthline.com/health/why-not-to-have-red-lights...
(I should have said team sports, apologies)

It's the second most popular team sport in most European countries, including the major ones. It's the second one even in England, despite low visibility and significant competition by sports that don't really exist elsewhere [0].

[0] https://www.skysports.com/more-sports/news/36244/12069769/ba...
This happens constantly, the entire tech industry runs in whatever direction Google in particular is going. First it was Hadoop and all the pain that came with that, and now it's microservices and kubernetes and all the shit that brings into our tech stacks.

Stop sprinting is good but also : stop following Google. You are not Google. You do not have the needs of Google. Just stop it.

Pick the simplest tech stack you can find. This gives 100x more time to your developers to work on company solutions and not fighting technical complexity.
But with money being so unequally distributed, this will just result in an even more unfree internet.

If participating in anything on this new internet requires money, the Bezoses and Musks will be able to do whatever they want while the normies will beg for scraps in this vision of the web.

Instead of fixing a corrupt authoritarian system, we'll just end up implementing digital neofeudalism.

This is already starting to happen with NFT games, where westerners keep Filipinos as indentured servants. [0] It'll only get worse from here if we don't stop it.

[0] https://reason.com/2022/02/01/the-biggest-nft-video-games-ec...
If those are on Magic the Gathering Online, do you really own them? What happens when that shuts down in favor of Magic Arena?
I'd say Chicago hits three of their points, but fails 1. miserably.
There are so many reasons to visit cities like London or Paris that individually each reason only makes up a small number of visitors percentage wise. I don't personally know anyone who came to London to see the Queen but it seems lots of people do.

Living here and experiencing the carnage common after football matches, I can promise you that a shit load of international and domestic tourists come to watch football.
Couldn't find any introduction to the project on the blog but the official repo has more info on the background for the project:

>Rust is more secure than C. Despite our efforts, it's all too simple to
mess up when using a language that does not enforce memory safety. We
estimate that at least half of our tracked security vulnerabilities would
have been impossible in Rust, and many of the others would have been very
unlikely.

>Arti is cleaner than our C tor implementation. Although we've tried to
develop C tor well, we've learned a lot since we started it back in 2002.
There are lots of places in the current C codebase where complicated
"spaghetti" relationships between different pieces of code make our software
needlessly hard to understand and improve.

https://gitlab.torproject.org/tpo/core/arti
> why cities keep on bidding for the olympics, which is otherwise hard to rationalise.

There was one bid for 2028 and one for 2032. Compare with 8+ bids in years past. There are fewer and fewer new cities that have never hosted before putting in bids (ostensibly due to insane construction costs/demands by the IOC). 3 out of 5 cities bidding for 2024 withdrew their bids and the other two got 2024 and 2028. 2032 seems to have gotten only one bid. What's happening is that this "intangible benefits" theory is dying as more and more of the world realizes that there are none. On the other hand the olympics and the world cup does seem like a good venue for authoritarian regimes to create spectacles.
I used to live near a stadium and can echo that. Depended on what it was used for too. If it was a concert it usually made the neighborhood fun and lively. If it was for a hockey game then the neighborhood was awful.
> the security world has come to the consensus

Any links? If you really care about security of your OS, consider security through compartmentalization approach, which actually works. See also: https://qubes-os.org.
On Debian and Debian-based system you can install the “make-guile” package.
> should be subsidizing new Marvel movies, or Call of Duty, because those are popular forms of entertainment too.

Government subsidize movies and art for their cultural value.
> Jetbrains is Czech.

Their headquarters is Czech, but many of their developers are or at least were based in Russia.

> They have suspended their sales and R&D activities in Russia and Belarus two weeks ago

"R&D activities" is a funny phrase. Does that mean they've stopped all development in Russia (i.e. there are no longer Russian employees working in Russia with commit access) or not?
By size of fan base, cricket is worldwide #2, basketball is #7.

https://en.wikipedia.org/wiki/Sport#Popularity
Nix allows to have a "declarative" approach to configuration management, whereas Ansible uses a more "imperative" approach.

For example, applying a Nix configuration is more-or-less guaranteed to be an idempotent operation, while this is not guaranteed at all using Ansible : many Ansible modules are not idempotent at all.

This brings many useful features, for example the ability to rollback to a previous state, or more generally the ability to have some determinism in configuration management of complex systems.

Nix and Docker can be combined together, I have many hosts where some services run in Docker containers, where the Dockerfile is defined in the Nix configuration itself, or generated by composing the upstream Dockerfile with my own configuration values.
The jobs were mostly shipped over seas. The ones that were left had to compete with the lower prices that were the product of third world cost of living/labor. Management took advantage of the fact that most of their workers don't understand/pay attention to inflation.
> …or someone open-sources a knockoff of it, such as Google's Borg vs Kubernetes

Google made and open-sourced Kubernetes themselves. Yes it's based on Borg, but it was an internal project first.
> what can Nix do my existing tools can't?

Nothing; even CSS is Turing-complete. It's all a question of how easy, how secure, how reproducible, etc.

> as far as I see, you can only install the tools Nix repo supports

Lol what? Nix literally just executes a given command, with given arguments and given environment variables. This comment is like saying "Makefiles can only build C projects".

Just like Make, if you can build something with some shell commands, then you can build it with Nix. It's often as simple as:

runCommand "my-program" { myEnvVar = myValue; } ''
put your shell commands here
mv my-build-product "$out"
''

('runCommand' tells Nix to run a Bash executable, with the given env vars (including the given commands), and a "default builder" script as argument (that "builder" will eval the given commands))

> Again, is this a real problem anyone faces (and that isnt fixed by docker or ansible or any of the other hundreds of tools)?

Nix has been around for two decades. It's more appropriate to ask what was the point of creating Docker, Ansible, virtualenv, etc. when Nix already existed.

> And then there is NixOS, which again, I have no idea-- I can create my own Linux distribution that is what, reproducible?

Maybe you're getting hung up on terminology; if you would consider "Ubuntu, but with my SSH config file" as "my own Linux distribution", then sure, NixOS creates Linux distributions. If you would call that "configuring a Linux system", then NixOS is for configuring Linux systems.
I'm not generally a fan of sports, but that sound pretty awesome. I'd definitely give that a try if I came across it.
> Once an individual cyclone gets going, that makes it stronger, yes.

No, that's what makes and maintains a cyclone. Trade winds primarily just move it.

I have no idea if trade winds are expected to fade with climate change, that's an interesting question. There will always be differentials, though, so I don't think there's reason to assume hurricanes/cyclones will stay put.
Don't forget to not roll your own crypto!!!
While your point is probably valid, your example wasn’t. The rose bowl is owned by the city of Pasadena, so the city gets payed when it’s in use.
Ask HN: Should I create a cloudbase reconnaissance tool?
Hi all,

I'm a penetration tester and I want to create a service using vultr. Where I just want to give the IP address and the port number and it will give me back all the results about the target. For example: Nmap,DNS,shodan,virus total,metadata,possible IP subnets and SSL-testing. Also, one excel spreadsheet with the data.

I'm doing this work repeatedly. And I want to know if other people also do this task repeatedly? So, maybe I can create some service.

Sorry, if this question is stupid. This is my first time asking any question here.

Please let me know, what you guys think?

Thanks in advance.

Shazeb
A Crash Course in Bad UX
Halting Problem and Quantum Entanglement 2020 Breakthrough Result [MIP*=Re]
You know that the exact same thing happened in 2009 and 2012 because of monetary reasons?
I’m surprised they charge to post at all since the most likely approach to build this in real life would be to use a validium (stores data Offchain) and the cost to the network operators would be fixed and very cheap.
> considering USSR got the brunt of WW2,

Well, except for, you know... Germany.
> Fortnite does not run on Linux. What do you suggest?

Don't play Fortnite. Skip the game that was designed to rip off your money instead of entertaining your kids, and teach your kids something useful like programming their own games.
It's exceedingly rare for an NFL stadium to be used exclusively for NFL games. If you look at the schedule for e.g. the Buccaneers stadium[1] in Tampa - which the city owns and leases to the team - you'll see that it regularly hosts concerts, monster truck shows, college football games, etc.

1. https://raymondjamesstadium.com/upcomingevents
> - Can't build with nix-build. After long time searching it seems like you're supposed to run nix-build -E 'with import <nixpkgs> {}; callPackage ./default.nix {}' - shouldn't there be a simpler way for this common case?

This is because the default.nix you have is exporting a lambda that expects arguments to be saturated, `callPackage` does this for you automagically hence why you have to use it.

Instead you probably want the nixpkgs import line _inside_ default.nix, either in a let-in binding or using the `?` operator to default a lambda argument to something, usually nixpkgs itself bound to a `pkgs` argument so you can use `pkgs`[0].

Even better, you can use Niv to pin nixpkgs to a specific nixpkgs commit so that it doesn't change as you update your system's nixpkgs channel with the `nix-channel` command because `<nixpkgs>` is special syntax referring to what's stored in your $NIX_PATH[1].

[0]: see the default argument section: https://nixos.wiki/wiki/Nix_Expression_Language
[1]: https://nixos.org/guides/nix-pills/nix-search-paths.html
> Can't build with nix-build. After long time searching it seems like you're supposed to run nix-build -E 'with import <nixpkgs> {}; callPackage ./default.nix {}' - shouldn't there be a simpler way for this common case?

I think the StackOverflow post linked in the answer gives a good explanation: https://stackoverflow.com/questions/44088192/when-and-how-sh...

With other languages, e.g. with Haskell, you can run "stack build" and it will build the project.. or with C, you can run "cc *.c" and it will build an executable with main. -- Whereas, the `default.nix` example given in the tutorial is supposed to be given to callPackage. (The tutorial which provides the example instructs you to modify the all-packages.nix file in a clone of the nixpkgs repository).

...Which is unhelpful with the mindset of "I just want to write a Nix package for my thing", or just weird compared to what you'd expect from "Hello World". (But makes more sense in terms of "how to get started with nixpkgs").

The UX is much better with Nix Flakes. -- With flakes, there's a standard file format where you can run "nix build" and expect it to work.
Well, snarky comments like that are forbidden on HN better stay with the I am to gulible to search argument. The patent was filled in 1998 but I am not helping your CURIOUS mind any further. ;0)
At least in the US the actual infrastructure has been failing for decades. Infrastructure actually pays out with a multiplier for years after the investment and upkeep. I’d like to see cities expend billions there before any burning of money on stadiums.
Answer found: https://unix.stackexchange.com/questions/658952/router-with-...
We've been hearing about Russian capabilities for years now. They've affected elections, they've hacked sensitive secrets, they're poisoned people and brought down gas pipelines. No evidence was offered but it wasn't needed cuz Russia BAD etc, right?

Now Russia has need for all these capabilities and .. they're apparently not there? Were they ever? Has the "Russia" of western media obsession ever existed? Or has the obsession with the "Great Satan" enemy kept us from seeing what's actually there?
It sounds like you have an illegible, compact regex in mind. If you write regexes like that for others to read, I feel sorry for the other people.

If you write the regex like you would production code, i.e. with whitespace, newlines, and comments[1], I imagine 200 lines of regex would be about the same as 200 lines of any other type of production code, be it APL, Haskell, or conjunctive normal form.

I realise this is a bit of a circular argument: if you write the code such that 200 lines is about n units of review in a specific language, then 200 lines will be about n units of review in any language. But that's also kind of the point. There's a very specific logic density that you can accomplish for production code to be readable, and that results in about that density being reviewed.

[1]: In Python you can do this with the re.VERBOSE flag, in other languages you can do it by breaking the regex apart into separate variables that are then combined together.
What worries me is that some of the research done on this suggests that even tiny amounts of light could have a noticable effect, like green and blue LEDs on common home electronics when it sits in standby or sleep mode.
Location: Sofia, Bulgaria (EU citizen)

Remote: yes, remote only

Willing to relocate: no

Technologies: MS SQL Server stack (SSMS,SSIS,SSAS,SSRS), Python (sqlalchemy, Pandas, NumPy, web scraping - selenium, scrapy), Tableau, SAP Business Objects, Linux, Bash srcipts, Git, PostgreSQL, D3.js, Impala, AWS (S3, VPC, EC2, RDS)

Résumé/CV: https://www.linkedin.com/in/ivan-ivanov-03357368/

Email: kalfa_pirin@abv.bg

Data engineer with 10+ years of experience looking for for PART TIME work, nominally 4-6 hours/day.
> So? Does it intimidate you? Should they hide or show their bodies based on what you prefer, or on what you think is right?

Millions of years of evolution went in to get them that body, and similar number of years of evolution for me to have that reaction seeing that body.

No, I am not going to join in the collective delusion that this stuff isn't real, or socially created or can be turned off at will.
> The most productive engineers I work with just stack PRs. No diff is ever more than 200 lines changed. Sure, sometimes it's annoying to fix things in the stack, but I've found that keeping PRs small is an overall velocity (and safety) win in the long run.

Sadly, the culture in some places mandates one pull/merge request per Jira issue/feature and therefore this isn't viable.

And even when it's not a top down decision, your colleagues might just say that actually they want to see all of the changes together once they're done because that's what they are used to, which will lead to you getting feedback pretty late in development and will probably make you need to refactor large parts of your code.
> Windows would be classed as malware by the 2002 definition

People don't care about malware, except for those malwares that rip their bank account off.
> So to make, say, an in game item that people can re-sell, swap, etc

There is a fairly specific kind of game where anything like this would even be useful and arguably it is impossible for the practice to not be predatory anyway. It is difficult to imagine an entity that would do this without also wanting the kind of complete control that a blockchain supposedly exists to avoid.
I tried OpenHAB once but moved away quickly to Home Assistant , its visual appealing and hackable at the config level that i could not resist.
> does the West care about Russia?

Why should it?