skysight-inc/HackerNews huggingface dataset:
Worldwide there are several each year IIRC. There are a lot of small regional timezones you have to account for - at least two Native reservations have their own timezones, each offset by 15 minutes from the timezone of their surrounding region I believe, or at least they did a decade ago when I worked with all this.

Also political changes often bring TZ changes, most obviously when larger countries split into smaller ones. But changing trade patterns can lead to TZ and DST changes, such as when Samoa skipped forward 24 hours, skipping Dec 30 2011 completely, putting them in the same timezone as Australia and New Zealand.

https://www.theguardian.com/world/2011/dec/30/samoa-loses-da...

It also had July 4 1892 occur twice, due to originally having moved back 24 hours to align with the US.
If "observing what your computer was doing and making <internet> requests" was always legal, then there would be no such thing as illegal hacking, because that covers essentially all possible activities one can do with a computer. There may be some who would prefer that world, but it is obviously not the one we live in.
Can't wait for all the ... race conditions

Thank you, thank you, I'll see myself out
JS is the only programming language I know of where people read zero docs and still decide they know how to write it.

They wouldn't dream of this with C, Java or even python (even though these probably work exactly like other languages they know -- unlike JS), but for some reason perfectly smart developers make this crazy decision all the time.
I didn't say not smiling makes you an asshole, I'm making two separate points. The first was that expecting people to be generally courteous to other people, whether they're explicitly paid to or not, is something we should expect from everyone. It's called just being a human being. And again, everyone's allowed to have bad moods now and then. But in general, if you go through life with a scowl on your face and approach things from a standpoint of "I'm not being paid for this so I don't care, I'm not doing 'unpaid emotional labor,'" you're just kind of a jerk. That's the context of the last couple comments in this thread so it's important to keep the "I'm not being paid to smile so I'm not going to smile because that's labor" thing in mind.

The second point, which is related but I think still separate, is that I wish just being an asshole was enough to get fired. I sort of had it in my head but didn't really articulate that I was thinking of being an asshole as a more extreme version of what we're talking about, what I refer to above as just being kind of a jerk. Maybe on a scale of 1-10 being a jerk is a 3 but being an asshole is a 7 or 8.
Not under pressure. Liquified, at atmospheric pressure, and vented to make ignition of leaks impossible. There is a minimum partial pressure of hydrogen that must be exceeded before it can ignite. Keep leaked hydrogen below that, and it is harmless.
im impressed by how well it all works. cant think of any API that comes even close. Often not by lack of effort.
We have always been allied with Mideastasia, let the oil plusflow like water!
The 12 and 13 Minis have been estimated around 5% for the last couple years. That's about a tenth of the regular iPhones they are selling. Pro/Max models split the rest. I don't own one but I hope they keep selling it because it seems like a great option for the people who buy it. 5% is still significant volume and I assume it benefits from all the other processes they do for the other phones. Unfortunately, it doesn't help that it's a cheaper phone and also a lower volume phone. Here's one of the more recent estimates from last year. https://www.notebookcheck.net/iPhone-13-Mini-sales-continue-...
> I don't think this person understands where white-hat boundaries are

Not that ignorance of the law is an excuse, but when are software developers not in infosec supposed to be taught these limits?
On one hand, someone working infosec might also have access to a spare computer running tails, which they use to sell the exploit to a third party exploit customer, but only after reporting the exploit to the victim company to cover their tracks regarding liability for things like those IP logs. On the other hand, it's not uncommon for a vulnerability to be detected multiple times by different unrelated people, especially if that vulnerability makes itself know via semi-regular use of the product/service.
RV-4 – Van's Aircraft Total Performance RV Kit Planes
So my wife has a chemistry degree and we have talked at length about how there are many molecules used in food that are identical regardless of how they are derived (“natural” vs synthetic), noting specifically that the naturally derived versions are often less pure / more likely to contain unwanted byproducts because (obviously) they are not the sole molecule in the food from which they are derived.

The fetishistic obsession with naturally derived flavors and additives is mostly blindly dogmatic and ignores the science.
At least those tax cuts were on income, by definition money earned through productive activity.
My two comments are that firstly, some fields don’t support the genius narrative. Consider the eradication of small pox. This is definitely in the top 5 best things humans have ever done, and may ever do. But there are no geniuses associated with this, it was a lot of small contributions over time.

Secondly, I think it is very obvious that there are some (not all!) potential geniuses who never achieve anything because they don’t get the right encouragement, support and coaching. Geoffrey Tozer snd Walter Pitts are two examples that come to mind, plus the no doubt many nameless female geniuses who never had any chance.
Node.js just needs a proper standard library and this will stop in no time. Never going to happen though.
Can you not take $1M loss? At one point, you had owned $1M of stock. It went to $0. That's a personal loss of $1M.
Here you go:

https://clinic.cyber.harvard.edu/files/2020/10/Security_Rese...
If you like what you do who cares? If you don't, find a different job?
I'm not saying the country can't change from within, I'm saying two things, one is that you can't change it by attacking random people within it, two is that you have no right to tell people to go face death.

Changing the country takes time and organization, you have to cut through propaganda with the real information, change public opinion, and then organize action. So supporting the opposition and independent journalist, human rights groups that help arrested protesters on one hand, and sanctioning the government and the oligarch on the other might actually do something. Deleting files of some random russians and telling them to go get murdered will not.
The vast majority of people buying expensive houses and condos are paying for prestige, location, and square footage, not quality of fit and finish. You can get stuff done better, it just costs even more, since the skills are rarer (as they are no longer needed for many projects, thanks to mass production and power tools).

Unless you're self-managing your project, the people actually doing the work for your contractors are generally coming from pretty similar places/skillsets for multi-million dollar places as for "basic" ones.

There's a reason "want something done right, do it yourself" is hardly a new aphorism.
Because that's definitely the same thing.
Are they still waiting for it to cool down to the point where they can see farther than Hubble?
You're right it is hard to beat that. And mostly everyone can see it is absurd. It is also probably absurd to extrapolate this event to a representation of an entire culture or political affiliation. I would challenge you to ask ten liberal people you know what they think of this.
The license for that doesn't appear to allow modifications and has a restriction on competition with openby.design, so I don't think it meets the Open Source Definition.

https://openby.design/license.html
https://opensource.org/osd
I have seen a buyout that made sense. A company was making a niche product, and their demand dwindled until they had a single customer which depended on that product. The company was going under, and their customer offered to buy them. Neither company was in the billions (about 100 and 10 employees), everybody kept their jobs, the buyer was able to better tailor that niche product to their needs; it was a real win/win.

I think it's important to preserve that kind of merger and codify the anticompetitive behaviors and write sensible legislation to prevent that.
Thank you for the link, but is it something you expect all non-infosec engineers to know?
There is an argument that without Pitts, you'd never have seen a Von Neumann architecture. Not nothing.
I sometimes think that a CS degree is part of the issue.

The things that make JS unique aren't even mentioned in a lot of degree programs.

Larry Wall famously said the three virtues of a programmer are impatience, laziness, and hubris. Not learning JS is at the exact intersection where people do all of these at the same time and meet with epic failure. People seem to think to themselves, "I learned Java and this looks like Java, so it must act like java" and so they run down the completely wrong path.
Nice work and thanks! Is there any more info on how the nvme flush issue led to such massive perf improvements? The blog post doesn't seem to go into details.
And that sheer amount of glyphs needed to be designed mean that, contrary to the article's claim, the fake or synthesized bold is not a crime but rather a form of self-defense.
Exponential View is hiring a growth marketer [Remote]
I am a Google Analytics consultant. Let me make this very clear: There are different products and everything will be lost.

This is not an "upgrade." This is "replace product with a different product in the same space." Old GA data is incompatible with GA4 data, and there is no way to bring data from one into the other. Google is discontinuing Google Analytics, and applying the Google Analytics brand to Firebase Analytics.

Nothing carries over. Configuration, implementation, goals, user permissions, historical data, nothing. It all has to be re-built from scratch.
needrestart – check which processes need to be restarted after library upgrades
Maybe he was in because he was pleasant to work with and not stressed all the time? I've seen new busybodies like you (maybe) and no one wants to be around them.
Ah, right. Yes, you're expected to run both side by side for a couple years so they both populate.
I liked "Whatever features within their algorithms that are creating the addictions, especially in teenagers — they can disable those features. That could be another thing."

The algorithm isn't trying to help, but YouTube or Reddit or FB or whatever is addicting anyways unless they design an algorithm explicitly to reduce engagement by giving you stuff you don't like.
Yea, as a first-time Google analytics user I recently had to navigate the GA4 vs UA products (the blogging platform I used only supported UA, but every new guide is for GA4). When it came to instrumenting my actual product, I just used Amplitude and try very hard to not have to open my GA4 dashboard (really, just to see traffic attribution). Can't believe _this_ is supposed to be some pillar of their legendary money making machine...
Two TUIs for Hacker News are linked

https://github.com/aome510/hackernews-TUI

https://github.com/donnemartin/haxor-news
Good luck with that, considering the sunset date is next year.
GNOME developed GObject Introspection and it works well for GNOME.
> Meaning, I log in to my desktop at home, I leave and log in via RDP and get the same desktop session, which I can again resume when I get back home. This is either not possible or doesn't work well last time I tested xrdp and friends.

This works with x2go.
Completely agree, without precise location, they are relying on unreliable signals. You should only have to tell it once explicitly though, they don't seem to keep the cookies around for the store selection.
I agree with you. There was a comment on here at some point that if you have a solution that starts “If everybody would just...”, then you don’t have a solution at all. Everybody will not just respect open source maintainers (well deserved) right to not be harassed, poked, and prodded.

I 1000% agree that open source contributors and maintainers don’t owe anyone anything, but if people still demand things, I’d recommend putting disclaimers like you’re recommending front and center, if at the very least so that maintainers can respond to the pushy people with a link to it.
To me that is actually grounds for OP to sue the employer for slander/libel/unjustified termination etc. OP did their part and the employer didn't.
Oh boy, are you out of touch, kudos.
None of these examples got away with it, or even acheived any of their stated goals. If terrorism actually worked, it would be a lot scarier.

Also fortunately most political extremists don't want to kill just random people. Weapons of mass destruction don't discriminate, making them poor choices.
“Until the day a machine spontaneously becomes self aware and decides to draw something, this policy is a non-issue.”

To further agree with you —

The day the AI files its own legal appeal to its own rejected copyright application — that is when this policy might start to change
I think the subtext of CFAA is that the law believes it shouldn't have to tell you not to try to pry credit cards out of someone else's website. I'm not speaking normatively, I'm just telling you the way it is.

I think publicized security research --- which I obviously support --- has created expectations among technologists that either weren't intended, or were more wishful than the facts support (lots of researchers, most probably, think the CFAA is a bad law and are happy to set expectations premised on its illegitimacy, but: see Wesley Snipes for how that turns out).

If there weren't lots of public security research, I don't think you'd really have to tell developers not to go looking for vulnerabilities.

Again, and to be clear: if it's something running on your own machine, or a machine you own, go nuts.
Leo Szilard [1] is generally credited as coming up with the concept of a fission bomb. He enlisted the help of Einstein, who had political clout, to bring it to the attention of the US government [2].

[1] https://en.wikipedia.org/wiki/Leo_Szilard
[2] https://en.wikipedia.org/wiki/Einstein%E2%80%93Szil%C3%A1rd_...
To make it simpler, we could make 12 PM solar noon year-round, use 24 fixed-size hours per day, and just vary our schedules throughout the year so that work and school times make sense.

In other words—leave the clocks alone! It's not the clock that's the issue here, but rather the learned inflexibility about arbitrary work and school hours.
Why do people pay taxes that put them in real risk? Isn't the point of taxes to contribute financially to the continuance of the place that is doing something for you? I currently owe like 5 years worth of taxes, but paying it would compromise my well-being, so they can wait. Seems perfectly rational. If you have 50000 to pay in taxes, but only 10000 in savings and $3k a month in expenses, or even $50k in savings, only a small amount should be legally required from you. Maybe the U.S is different.

Not to say I'm not working on it though, but if paying taxes would put me on the street, guess what, I'm not paying them until whatever they pay for lets me live a life. Just like any other debt, if I'm put in a vulnerable position, debts don't get paid unless they someone else owns the thing I'm living in or depend on, or they can break my legs, like the bank. One could argue you shouldn't have made that particular risky financial move, or you shouldn't be taxed on reception of illiquid assets, which would also both be valid.
Please name a company where you would expect such behavior to be encouraged. Genuinely curious.
Technology Connections has some decent videos on the topic.

https://www.youtube.com/watch?v=FyKRubB5N60&list=PLU_9ndwi4C...
I have never had a stock option that was worth anything. As a result, I count their value as zero if they’re part of an employment offer, although it’s been a while since I’ve had them as a putative benefit as well.
I did, in fact, laugh out loud at this. Did you think those personal checks were meant to prevent you from getting COVID?
How are regular developers going to vet the literally 1000s of Node.js dependencies they rely on?

And who's signing these updates? The package owner? Well, he's the one adding malicious code so he can sign whatever he wants.

I'll say it again, Node.js needs a proper standard library like Go that takes care of common needs most people have. It's been improving but it was a historical mistake to let microdependencies run wild.
Don't forget that nobody has had to pay student loans for two years.
Maybe obnoxious people aren't the problem. Maybe reasonable people are.

After all, I wouldn't lose sleep over an obnoxious person making an obnoxious demand. They'd be summarily ignored.

But I would feel a tinge of guilt if someone made a good faith effort to offer an improvement, and the contribution was technically sound, but I just didn't get to it.
It never was numbered before. But naming things is hard. So they switched.

From top of mind it used to be Urchin Analytics, then Google analytics, then universal analytics and now GA4.
This is a wildly niche and specific list. Did you have a specific reason for including these or these just artists/works that you personally enjoy?
And there's tons of people (myself included) who would love a structured way to make this a hobby and meet like-minded people without having to commit to grad school.
Basketball almost assuredly has to be an extreme outlier here though, in that outrageously rare physical attributes are almost a necessity to play competitively. I realize there have been some exceptions with very small players but they seem rarer and rarer each year.

This doesn't invalidate your point, but we might get a more accurate picture if we only looked at people who ended up 6'3, strong and athletic.
This has been coming for a couple years already. I agree there are some organizations that probably didn't take GA4 seriously until this week, but I don't know how many of them were really delving into their historical analytics to begin with.

Anyway, I don't mean to take away from your moment to hate on Google. :) It's just not a classic Google discontinuation like when they eventually shut down Stadia or whatever.
Ethical issues aside it's easy to see how people in that situation can basically just stop working / start interview prepping while waiting for the layoff.
I really enjoyed this, I think looking the organisational structure through time is a good take that I haven't really seen addressed so clearly before.

I would have liked to see an exploration of the "through time" lens on some of the more micro code-organisation structures he talked about at the end like class hierarchies. It's definitely a common problem in legacy code—there's some idea you want to express but the existing structures make that very difficult and so you end up twisting your idea to fit, further ossifying the existing structures.

I've also seen cases where the organisation structure was changed to affect some change, but the existing code structure makes that so difficult that the software doesn't actually change to reflect the new structure at all, and instead the new organisation is just slowed down by coordination costs at the organisational level as well as different coordination costs at a technical level.
The question they should be asking isn't "is this tech stack perfect or a mess" it's "is this actively preventing, or about to prevent, us from meeting our uptime and cost and development goals"?

The idea that a shop that built a messy system will suddenly build a non-messy system just if they pick up a new set of tools - that they don't have practice with anyway! - is exactly the silver-bullet fallacy. The system turned out messy because it's complicated, switching to a very complicated tool doesn't take away the complexity, it just changes the way you manage it.

The last couple Kubernetes shops I worked at were that exact sort of hodge podge of custom glue with high tech debt and low bus factor. Just even doing something "simple" like "ssh into the box and poke around" when the two wizards are out suddenly has a huge learning curve. ;) So then you get into discussions of "oh you should've been using managed kube" or "oh, don't use TF -> helm -> kube, use [other way] of managing it" or blah blah.

After you fuck it up a few time you might have enough useful experience so that you can build it well next time... just pray that by then we're still using the same tools. :D
I really like usefathom.com
So basically you're interpreting this clause as "if I want to be a total asshole, I can, and no one is allowed to complain"?

I reject that interpretation entirely. Sure, maybe the author isn't legally liable for any harm here (though I'm not entirely convinced that's the case), but we are all well within our rights to tell him he's an asshole for doing this.
Everybody thinks they are exceptional.
I'm sure someone clued this person in in that this blog just gave his adversaries a huge gift in their lawsuit. Not a smart move at all to publicly announce your own guilt in a case you might want to win.
1989 Tiananmen Square protester fatally stabbed by legal client
Same; we have been doing a lot with it. The GA4 way of working is a big shift for some properties, for sure. Good time to be working!
Yeah, I agree. I can’t see how something could be well known if a rando on HN hasn’t heard of it.
If you don't exercise them, you could lose them.
JS has had integers since pretty much day 1 with bitwise operators. They just (from a user perspective) convert back afterward. If you were choosing just one though, floats would definitely be a better choice than integers.

It's also possible to make length 1 typed arrays of integers and operate on them if you really need. Then, as you mention there's BigInt numbers which are supported on the last few versions of every major browser except IE11.
> it sounds like the HgCdTe-based FPAs are primarily an electrochemical thing

HgCdTe is a semiconductor like Si or GaAs, but it has a much smaller bandgap.

> My impression of more modern IR-spectrum imaging (Teledyne/BAE/L3 stuff) was that it is basically a bolometer sensor

Bolometers rely on heating. HgCdTe (& CMOS imagers) rely on photon generation of electron-hole pairs, which is an altogether different mechanism.

> behind vanadium/germanium-doped glass

The most common reason for putting Ge in front of an IR imager is to filter out more energetic photons (ie, visible light), since those will also be detected by most IR imagers.

> I'm thinking of some of the new stuff that can deliver 1920x1080 60hz output - that'd definitely help with targeting.

Yes. State of the art is UHD, eg https://www.teledyneimaging.com/en/aerospace-and-defense/pro... The issue will be the product cycle, which for the military is extremely long.
There's plenty of crabapple trees that have been grown just this way.
You have made two assumptions there.

1. That I don't use Linux when I can. I use Fedora on all my personal equipment, including laptops. When I have a choice I do use Linux because it is simply a better development environment. The question was because this is an article about Docker Desktop on MacOS and the poster suggested using Podman.

2. That running `brew install docker` was actually that hard.

Don't get me wrong, I absolutely dislike running MacOS on my work laptop, but I don't have a choice and I have not seen a job where I would have a choice. Docker works "seamlessly", except that being a VM it does use 3Gb for even the most basic containers.
Do you want staff to be curious enough to... Let's see... Run queries on your customer database to find out their friends' account balances?
Related: https://en.m.wikipedia.org/wiki/Total_Resistance_(book)