skysight-inc/HackerNews huggingface dataset:
If I was them I'd be concerned that it DOESNT move in this direction. Not a lot of money to be made selling one-and-done fake detection software, but a fortune available if they can convince clients a perpetual subscription is a core requirement.
I would expect any serious Russian cyber attack would more closely resemble "polonium tea" in the sense that it would be: incredibly destructive, quite obviously from a state actor, and yet officially not connectable to Russia.

Strategically cyber attacks are the most effective when they damage your adversary heavily, and yet at the same time make it so that politically retaliation looks like aggression since there is no unquestionable link between the actor and the action.

Consider Stuxnet as an example. Widely understood to be a joint US/Israeli cyber attack on Iran, and at the same time difficult to retaliate against.

While annoying, these outages we've been seeing are hardly doing any serious harm. Very little money is ultimately lost because of them, and it's not remotely clear that this is a cyber attack. So if they were cyber attacks it wouldn't make much sense. Not saying that it's impossible they are, but it seems there are many other more plausible explainations.
That was a pretty rapid response from CF though, are we sure they didn't know ahead of today? How long did they have to determine "no evidence" before making a public statement about it?
Hey man don't worry too much. It's usually just the vocal one percent, some of us get annoyed, some of us have the world seemingly fall down around us when a "spam" notice arrives.
Yes, I have contributed to projects I use in my own time. I do this to make improvements I care about, not because it is something the project has prioritised.
So then write a post that says "Ask HN: What is going on GH's being out X many of days". Otherwise you get 6 posts across weeks with the same discussion.
I feel I work on a high performance team and code reviews are a joy. When I submit my code for review it's an opportunity to share my work with my peers, potentially explain my thought process and my work process and we get to learn from one another, and when I get code to review it's the opposite, I get to see how my coworkers think and tackle problems.

I have never once felt like a code review did anything to erode trust and I don't see how a code review could slow down a work process. Using git, as soon as I submit code for review I begin work on the next task and if I need anything from the branch I submitted for review, I just merge that into the new branch. If changes are requested I make the changes and then merge again.

Code reviews are among the best ways of ensuring that code remains consistent and that everyone is learning from everyone else. That's why in my team all pull requests are reviewed by two people including one junior developer.
Statute of limitations did not apply. All crimes were scrubbed by Western govts and forgotten by Western media. Remember legacy auto pays for most ads during news broadcasts
another tip - ff has an extension that adds the page's url to the title bar. This helps keepass autotype work better since it has a url to match

https://addons.mozilla.org/en-US/firefox/addon/add-url-to-wi...
Thanks! Just had problem
Container images are a decent way to get close to a root filesystem but with what approaches a REPL loop for debugging.
Is anyone these days? That said I, personally, do prefer more concise naming.
No, there are not. Pretty much all the popular contenders are less plausible, and most still need dark matter to explain all observations, so they only add more complexity.

Dark matter is a simple theory that explain a wide variety of unrelated observations.
Thanks! And yeah, based on my experiences helping several relatives on anti-coagulant therapy for other reasons (heart problems, clotting), it's really terrible to be on and quite dangerous day to day. Maybe not applicable to someone younger, but the them they literally could never stop either once they started.
The packages that were used in statistics were SAS, SPSS and Stata. perl is not a statistical package and has nowhere near the depth of statistical capabilities of R.

Don't forget that I also mentioned the checkpoint package in my post. You only need to know the date for that, not the version of each of the packages.

In your last paragraph I think you are referring more to software development practices than what is available through R. Simply using R or any language doesn't guarantee this.
Really? No, comparing the uptime of two services (actually, one service and one open source self-hosted service) it's relevant to consider _why_ one would have more downtime than another, even if they don't use those features. Even if the parent posters workflow doesn't use the new/deprecated features, they will still be affected by the downtime GitHub have monthly.
Yeah that definitely needed context lol
Thanks for the feedback! We've removed the email address requirement.
Internally strings will either be UTF-16, or if a string can be represented in LATIN-1 it may use a more compact representation.

JEP400 is about I/O, previous to this change when you create something like a FileWriter without specifying the charset the platform default would be used. For a long time this has been recognized as a common foot gun, hence this change to a default that is more likely to be what the developer actually wants.
Verily productizes Alphabet's prostate cancer grading algorithm
just speculating (usually set design isn't accounting for anything beyond "looks cool"):

- Hazmat suites can contain climate control, and the Tuareg wear dark clothing as well

- Wyrding Module: In Lynch's words: He didn't want Kung-Fu on sand dunes

- No idea what you mean, but charging into battle has since been proven to be viable tactic by the Avengers, so it has to work

- Ornithopter refers to the propulsion, like a bird, instead of a simple helicopter; I'd have to watch Lynch's Dune so to see how those actually look like in his film; Villeneuve nailed them pretty well

- Same reason why the first Enterprise under Archer used fancier screens than the ones under Kirk or Picard; IMHO Lynch borrowed a lot of his aesthetics from WW1, and the Dune universe is surprisingly low tech anyway

- The navigator: A wild guess, I always understood it as a way to show the importance of Spice and Arrakis to the Guild when they had to send one of their Navigators to talk directly to the Emperor instead of using proxies
But 4 ads inciting violence? C'mon, maybe you let one pass, pretty bad... but 4?

Also, I dont think FB would let ads go unchecked in the USA: waaaaay too much hassle in case an "illlegal one" slips through. It's just that FB does not see the need to do that in Myanmar, as that govt can do them little harm.
Is it actually cheaper to get everything somewhere else? My test is covered by the doctor but they would charge like $1k for the device if I wanted it which is where I was anchored.

Would you mind sharing where I can get the testing apparatus for cheaper?
This is completely absurd reasoning. If we knew who was going to die, we'd let them know beforehand, so they could pick a safer spot on the street at their "death time".

There's no such thing as a deterministic future, as you suggest.

We can't stop doing things because a theoretical future will be changed. This is absurd.
Haha, making SSO a little less boring. :)
Can you share the datasheet/block diagram without requiring us to create an account?
Modularizing Magic Equations in a Codebase
> It can't be spun as 'we sell so many ads we can't check them all'. It's 'we don't check them all because that's cheaper'. Unless the price of the ad is so low that paying to review it is a loss, in which case don't sell at that price, or treat it as a loss leader.

Or maybe more precisely: "we don't check them all because our business model wouldn't support it." The arrogant (and false) implication there is that making their business model work is the highest priority, and all of society's other priorities should take a back seat to it.

If your business model only works with shitty automation that doesn't actually do its job, then you need to find a different business model.
Very likely to be lower than GitHub/etc, because it's a much simpler system that can be reinstalled from scratch in 30 minutes by an experienced admin on brand new hardware if needed.
Why even ask such an obvious question
" you can use the smartphone to re-record a pre-recorded fake video."

I assume the intent is not to store solely a direct hash of the original video, but also the original file which can be fingerprinted, or the fingerprint itself that will be matched if a later duplicate is uploaded.

Fingerprint differing from hashing in that two non-identical, but similar files (e.g. an original video and deepfake) can have the same fingerprint, but differing checksums.
Can you see the opposite viewpoint?
can't open a PR right now.
I've been thinking about code reviews a lot.. and I think a big problem with existing code reviews is that for most orgs, code reviews were a way to move planning to the end of the development process instead of keeping it up-front.

I think the foundation of the pyramid (API and Implementation semantics) is often discussed in code reviews when it should have almost no place. By the time you get to the code review not only should these have been ironed out and shared with the whole team. What you should be looking at is simply adherence to the plan, and calling out deviations.

I wrote about a small rat about this: https://xangelo.ca/posts/code-reviews-are-failure/
One could argue that this isn't talking to a well adjusted animal living in its native habitat. It is talking to a long term research subject/victim suffering at the hands of "researchers" while trying to teach it a language that is utterly alien to it. Of course knowing how animals communicate in their natural habitat is not useful if you want to ask them deep questions like "what do you think about global warming" or "do you think god exists", to which they probably wouldn't have an answer anyway.
This might help: https://www.youtube.com/watch?v=N6mIKytM5BM&ab_channel=Busin...
.loc lets you supply a callable, so you can write:

table.loc[lambda df: df["column"].between(2, 3, inclusive="neither")]

this is useful when your dataframe has a long name, or when you have some long method chain and you need to subset at the end: table.foo().bar().baz().loc[lambda df: ...]

it is still more verbose, but I actually prefer always providing column names as strings. it's more explicit. I don't like R's environment-manipulation metaprogramming magic where you can give column names as symbols.

as for resetting the index all the time, this is something of an antipattern. if you set up your index right beforehand it isn't necessary so often.
Wouldn't that make it super easy to steal an ebike? No your problem but I wonder if putting these in a truck would be an effective business model
It's actually 3x, not 2x. Probably why writers shouldn't express things this way, but it's clearer reading the article, this is a 200% increase, not that the rate is 200% of the normal rate.

Also, the link to the NHTSA doesn't work, but I'd be interested to read the primary research. Concern is they're just taking accident rates for sober drivers and BAC 0.08 drivers, which isn't a fair comparison because they aren't time matched. As in, drunk driving is a lot more likely to happen very late at night/early in the morning when bars close, when traffic is extremely low and accident rates are also very low. If your chances are 3x the chances of a person driving any time at all, you're much more than 3x the chances of someone driving unimpaired at 2 in the morning.

Of course, even if they time match the rates, there's still the reality that a lot of sober people driving at 2 in the morning are still impaired. Tired driving is also quite dangerous.
Interesting that Russia is at almost 2x the next country (USA).
100% this. They are so far behind and every move will be to use regulation against competition
Less than you've already wasted waiting for GitHub to come up from the dead in the last year alone. If you're insinuating that we'll have to restore everything from scratch, don't worry, the machine is being continuously replicated and sysadmins are trained to restore everything chop-chop.
> bits of information as to the cause and remediation efforts.

That's what post mortems are for. Happy for people to submit those.

Also, why are cause and remediation efforts important to you? If you rely on the service and it goes out, what more are you going to learn here that would help you? Genuine question.

> I always check HN for major outage news when it comes to github/AWS/GCP/Azure

Why not just check those status pages? Or check Twitter? HN seems like a weird place to check for it...
All LSI "SCRIPTS" HBAs had firmware as part of kernel/driver sources among the many platforms they were used. I believe linux used a simple assembler whose sources were included in kernel to generate the binaries (if not preprocessor tricks, even). *BSDs definitely had their own solution too.
Epic has an extensive set of interoperability APIs, mostly based on open industry standards, which enable easy sharing of data across platforms. Is there something specific missing?

https://open.epic.com/
I don't think anyone is overlooking the reasons why one might have more downtime than the other.

The problem is that ultimately the downtime itself matters and not the reason, and if you don't need any of the features that GitHub offers, then the self-hosted route is a better option.
I ran a GitLab instance for a company pretty much solo and it never wound up going down outside of when I was upgrading it, that I can recall. The thing about that is, it’s a small scale instance. If an upgrade or change failed, I could literally delete everything and restore from backup in under an hour, and never really needed to do that (although to be clear, I did actually test that it was possible.)

Now I’ll tell you the real problem with it: it worked great for people who were located in the U.S., but it was terrible for certain remote employees due to increased latency, and the fix for that would be to set up a complicated replication setup that puts data closer to people not near the main instance.

There’s obviously other issues, but that is one that is probably commonly overlooked that most SaaS solutions can do better on.
It's worth noting that most of these issues impact urban areas where "moving", in or out, is just part of the territory. If you really want to look at resilient "strong communities" where people just stay put, sometimes for multiple generations, that's very much a feature of smaller towns and more rural areas. (That's actually one reason why the modern suburb attracts such strong criticism; it's not self-sufficient in the way a rural village or town is, so it has no real chance of developing a "strong community" of its own from scratch.)
I configure Prettier once on my JS codebases and then never touch it again. Seems about as "solved" as is reasonably possible.
That's the first thing that came to mind as well, and Stack Overflow definitely operates at scale, but OP asked for people doing distributed systems. SO is famously monolithic, famously operating from just a handful of machines.
Microsoft Investigating Alleged Lapsus$ Intrusion of AzureDevOps Repositories
You missed the /s at the end
okay, so i'll just relay that to the south philly rubes that told me they went. /shrug.
If people see random bikes wouldn't they do fun kid stuff like throw them off of bridges or knock them over?
Majority of convictions are plea deals, because trial penalty is just too large. And it is pretty much impossible to overturn existing convicion on anything but technical process mistake - no matter how convincing new evidence of innocense is.

While guilty murderer can walk, courts are also super eager to accept shoddy "scientific" evidence. And being defense layer is also worst for your career the being prosecutor. So, I am not sure it is as rosy as you make it sound.
Do you make someone sign a legal document when you give them your number detailing the uses and limitations of how they can share your number? No. You don't.

Once you give your info away it is not "your" info anymore. It is info about you, but you do not own it.

Is it rude? sure, but not illegal.
I would rather have a system like here in Germany for criminal trials where the defendant chooses the lawyer they work with and the lawyer gets paid a set hourly rate by the government.
"Be Sure To Drink Your Ovaltine."?
I'm really not sure why so many people have such a strong reaction to dark matter theories.

Yes, dark matter is the best way we currently have for fitting the data within most of our existing frameworks for understanding the universe. I really don't see the relation to epicycles.

There are people out there working very hard on modified gravity theories. I'm not aware of any that are able to explain the current data. If anything, trying to modify gravity to fit the dark matter data would be most similar to epicycles, it's devilishly difficult to come up with increasingly complex theories that fit more and more data that's coming in.
Rest assure, a open source project with ~100 contributors (whereas maybe 10% regularly contributes) has less activity and changes than a multi-international company focusing a SaaS with "1000 to 5000" employees worldwide.
Hacker Group Claims Access to User Authentication Firm Okta
That's rich. Here is an idea: if you are looking for a face to hate, for example that of a dumb Russian who is fed only propaganda, has no ability to separate truth from manipulation, no ability to see nuances and that would make excelent cannon fodder in Putin's personal war, than you should look in a freaking mirror. Don't worry, your Putin will come to you.
>In the 4th quarter, we recorded one crash for every 4.31 million miles driven in which drivers were using Autopilot

But this is not FSD , is a combo of human + some driver assistance, come back when Elon discloses how many times the human was forced to intervene to prevent a crash.

I am wondering why Tesla fans think this stats are proving that so called FSD is safe , don't you understand stats? did PR tricked you,? this proves that soem assistant like one keeping safe distance between cars is safer, make all the data public and let us compute the real stats please.
Yeah, that was too bad.
The SC tries to only take landmark cases and their precedent is more important than the precedent of any other court.
This page is 70% marketing, 20% content unrelated to the title, and 10% a single paragraph actually related to the title.
Yeah, I switch to Linux as my main OS about a month after Windows 8.0 was released. I definitely didn't like the direction Microsoft seemed to be taking. I now run MX Linux and have a Windows 10 VM (with GPU pass through)for the games that won't run under Linux and for the occasional photo editing session (I really dislike Gimp!). Linux has had way fewer issues for me than the recent chain of Windows releases.
AWS Corretto is a good option - https://aws.amazon.com/corretto/

its fully certified and production ready. And most importantly - official Docker image https://hub.docker.com/_/amazoncorretto

Even oracle JDK does not come with a supported, official image
This is great.

You don't need the curl -- read_csv works with URLs directly.

The lambda can be replaced by passing parse_dates=[“date”]
I agree with you, put support agents in the panopticon. You could go as far as to give them access to each others logs and enable a bounty system for reporting (verified) abuse anonymously.
In addition, how do you even determine credibility when even real attackers might renege and not deliver on their promise of a bribe?
On the contrary, trying to find ways to improve
Lapsus$ Gang Claims Okta Hack
Okay, so maybe don't lie on the internet and go around telling people a bartender told you to fuck off when all he said was "No" and we won't have to make assumptions about what you had to have done to get a service worker to tell you "Fuck off".

Also -- if the bar is on the first floor why would they be taking kegs upstairs in the first place?
Writing by Numbers: Do we want journalists to be rated like sitcoms? (2000)
Lost me at #3
> There are more interesting and less implausible hypotheses out there than the "just so" dark matter one.

I'd love to hear about all of the less implausible hypotheses you're referring to.
Actually Project Valhalla is going to fix (well at least improve) this:

https://openjdk.java.net/projects/valhalla/
I believe the 10k time series is how many complete end to end traces (across multiple services) it will store at once. Lightstep has settings where you set sample rate, retention, which traces you want to collect etc.

I believe $100/service is top level service, not endpoint. But really not sure.
Git is distributed, you should be able to completely detach from your remote and still work effectively. I think a lot of big projects get too lazy about good, reproducible build environments and just rely on centralized CI to do everything.
Yeah that's a good point! At most of the companies I've worked at we came up with our own coding problem so we just needed the infrastructure to run the takehome. I'll take a note of this and see if it comes up in customer feedback!
> After having studied maths and physics at university and worked as a programmer in a mathematical field for 20 years (and studied much more maths in my spare time), I now see my poor recall as the limiting factor in my abilities in maths.

Same story here. Undergrad engineering math curriculum came easy to me, and it stuck as it was our bread and butter (calculus + diff eq). Once I got to grad level courses, the frequency with which we would utilize the material elsewhere dropped dramatically, and the net effect of that was I could never recall the topics until I needed them.

The next problem was even more significant: If I took even higher level courses, they relied on knowledge of the material I took in one of those prior courses that had not been burnt into memory, and may have taken 2+ years prior. The only reason I did poorly was because I had not memorized enough of the prior material.

On my own, I studied/reviewed the undergrad statistics course 3 times over many years and it never stuck. Finally, in 2018 I used spaced repetition to memorize much of the material, and over 3 years later I can still read material that utilizes those statistics and understand what I'm reading.

Memorizing is useful for things you don't use often.
I would like to see this thread continue ad infinitum
"Amazing low cost"?
They're one of the most expensive data center operators I know.

Hetzner is about half the price. But neither can have more than 3 HDD per machine which is just absurd.
Gitea is absolutely production ready, we use an older version by now and don't even think about it much because it just works so well. Exactly what you want in production (production = software should work more often).

Actually not "vendoring" dependencies from github is very much not production ready in many cases.
I picked up a couple banks of memristors to replace the pots in your circuit :)

Hope to create a small feedback circuit across each memristor, essentially letting it 'train itself'