skysight-inc/HackerNews huggingface dataset:
> [Lawyers] are overall much more willing to recognize when they aren't well-versed in other fields, including both substantively and in terms of mental models.

That's a refreshing perspective. Any inkling as to why? I'm guessing prolonged exposure to the adversarial process would cause lawyers to be a bit more introspective about the limits of their knowledge, but are there other reasons, too?
You're asking for a citation that...culture affects behavior?
Most people don’t disable background tracking or bother closing an app when they’re done with it, so while it’s unlikely all 50 are, it’s very possible many have had it open in the background for days (if not weeks).
Yes but I'm having trouble with the client side.
Especially Cordova or Capacitor.
In a hybrid app with keycloak in the back it's just not working.
I tried the cordova-native keycloak adapter but it's just not working.
Pure Vue or Angular no issues.
Flutter issues because AppAuth is not very well documented and it's even worse for Android Java or Kotlin.
Security or auth should be treated as the president of the 1st class citizens, instead it's a mess.
On the backend everything is fine, but frontend is in a really bad state.
My boss threw his hands up and said we a switching to gitlab. I love github, why you doing this to me Microsoft!
I have seen quite a bit of code in the Java ecosystem over more than 15 years, but far less than 90% of it. And even in the small slice that I've seen, I'd say the quota of ignorant error handling is way lower than 90%. Especially the higher-quality Java libraries that people reuse over and over usually behave okay with regard to exception handling nowadays.
There are people who ALWAYS want to negotiate. It's a reality that sellers/buyers have to accept. I usually stop after one "No" because I'm very bad at haggling, but I know a lot of examples that people get what they want even after multiple "No"s. Some people are good at this.
Well, you don't end up having to query their DB directly, you can do it via standardized IHE ITI XDS/XCA over a network like CareQuality. There are startups like Particle that can do it as a SaaS.
A lot of folks seem to like https://java-programming.mooc.fi/.
Google is taking a cautious step back into the world of robotics (2019)
Russian tactical software appears to run on Windows (@3:34)
The US has begged for years for the EU to take their national security more seriously, even just the bare minimum required under the NATO treaty which most nations have not actually done.

instead they used that money to increase social spending happy to allow the US Tax Payer to fund their security...
Yeah, any "critique" or "argument" assignment seems to have weird grading biases.

In my freshman Composition class we needed to pick a controversial topic and argue one side. Highest grade on that assignment went to someone who argued that smoking causes lung cancer (this was 2003). The instructor explained that it was the most convincing paper. Those who picked an actually controversial topics got the lowest grades because their arguments were less of a slam-dunk.
Yes. “Physical world is reality” is a conjecture that is unprovable and even nonsensical within the scope of natural sciences, the very statement is in the realm of philosophy.

You confirm you’re taking a philosophical stance, which is miles above the baseline level of discourse I’m observing (and may not be as much of a fallacy in your case). However, are you doing that consciously, with rigour and analysis, after considering the merits of alternative positions? Do you make an effort to compensate for own biases?

There is a very strong implicit bias towards physicalism, which largely hinges on the popularity of natural sciences (in other words, since sciences that study materials and time-space are all the rage, it’s very compelling to see the reality as having materials and time-space at its root; if all you have is a hammer then everything seems like a nail) and requires constant compensation to keep an open mind (especially if you are anything like me and are really into physics and adjacent fields).
Yeah, but theory and practice are very different things. If CI always worked for me and my experience was great with it. I will not invest time to do independent CI for everything. Hence depending on Github Actions. Clearly not the best approach, but it's about being pragmatic also.
I believe tools like nomad and consul shine here.

Using nomad as a job scheduler and deployer allows you to use various modules for jobs: java, shell, ec2, apps (and containers).

I use it in my homelab and it’s great. That said, I don’t use it professionally.

I think Cloudflare is running this stack alongside firecracker for some amazing edge stuff.
I see this as a major signal to the outside world that Mercedes feels confident in its technology.

Mercedes must really think it has a better system than its competitors.

Either that or these expenses are going to be considered part of its marketing spend?

Another thought: isn't it still usually the responsibility of the at-fault party's insurance company to pay out for crashes anyway? Or, in no-fault states, each insurance company covers their own driver and passengers, so it's not really important who cases a crash.

I wonder if this announcement is legally meaningless in most cases...but I'm not expert in this area.
I wish this was posted in the okta security incident page or something like it.
Why are you collecting email addresses to deliver the results of a self-reported test that would drive shopfront purchases? Just allow users to take the test online, deliver the results, steer them towards the products. You'll get their email if they order, no?
Maybe we can extend her logic like depending on one's standing in society their treatment priority will be reversed. So governor as first citizen of the state would be last person to be treated for ailments and so on.
Medical information systems are the worst, because the poor people who have to use them can't influence the initial choice or development of the thing.
Again, how much it actually change across those releases? GitHub most likely are going through more changes on a weekly basis (if not daily) than what Gitea does on a monthly basis.
Dubious, when the user is the one initiating the copy (by requesting the download) and the one benefiting from the copy.
JDK 18 G1/Parallel/Serial GC changes

[1]: https://tschatzl.github.io/2022/03/14/jdk18-g1-parallel-gc-c...
This is off topic, but I'm deeply curious what a plant to recycle lithium batteries looks like.

I believe they'd be handling almost every form of matter, from solid lithium to liquid electolyte, the combustion gasses of bad batteries blowing up, and the plasma of the fire itself.

Seems like a hell of a challenge and I'd love to hear all about it.

(extracting gold is simpler, by comparison, and can be done at home by the sufficiently motivated- https://www.youtube.com/watch?v=ASQCa7mfjVo)
We spent many hours each week on 4 homework problems (per week) that were progressively harder, and built on each other.

Not sure how to explain, but there was no need to have any extra time spent on getting the syntax right. If you could figure out the logic, that was what you were supposed to be learning.
See video link in my other comment. It highlights Umicore in Belgium and films their process (dating 2015). You may find some details on their site.

https://www.umicore.com/en/about/recycling/
I think that’s the switch (somewhat) _away_ from paid usage.

https://itassetalliance.com/blog-posts/what-do-oracles-2021-... says there was a change in 2019 that made critical security updates a paid feature.

The 2021 license change reverted this somewhat, by giving you one year of security fixes for free in the long term support versions (I’m sure I’m missing some detail, if not completely misinterpreting things, here)
That’s what battery cases are for. There’s no need to weigh down a standard model with battery capacity that’s far beyond what the majority of users need. That’s more of a concern with niche phones that won’t get specifically designed battery cases, but for iPhones there are plethora of options.
Hashicorp packer + AWS CDK (or Terraform) can you get a lot of the characteristics of containerized deployments without actual containers.
Yup. After a few years of trying to follow the rules, I just decided to use data scrapping techniques.
Your pricing is crazy expensive.

$200 for a mouthpiece that you can get online for $20.
What so special that makes that piece of plastic worth more 10X more?

$180 for a pillow you that can be had online for $30.
One doesn't, but there is a clear distinction between attempting to learn a language by memorizing its words and grammar, and learning it through context.

To actually understand a language in the same way we understand our native language, we cannot learn the language by memorizing the meanings of words and treating each sentence like a logic puzzle to be solved.

Practical knowledge of language is largely tacit.

A native speaker does not need to know what tense a word is in to use them, they do not even need to understand what a verb is. Explicit grammatical understanding can help us reason about a language, but it is not necessary to learn it.
The Arrival of Java 18!

[1]: https://inside.java/2022/03/22/the-arrival-of-java18/
Connecting a gaming PC to Apple Studio Display
People with expensive cars don't drunk drive? Seriously?

Even if that were true, I have a hard time imagining that the cost of self driving packages won't continue to decrease until it's included in literally every new car. Just a matter of time (assuming someone is able to make a fully working version).
For those curious, the extensively commented source code can be seen here:

https://github.com/redis/redis/blob/unstable/src/rax.c
They just took their time, and it became a joke because other people were already flying around when they came in public saying they were flying first.

Overall, an entirely irrelevant issue.
> walking down this street with a bunch of phones in a wagon

They could always be thrown in the back of a car, and you can drive slowly down the street, possibly jumping from parked spots on the side if there's light traffic you would be interrupting if you stayed in the street and went too slow.

I wonder if there's people that you can hire that are already set up to do this in large metro areas. It's crazy what you find people doing for side hustles when you look sometimes.
I look thru history when I am building on top of stuff that already exists. In a complex system that has been around for a while, how else do can you figure things out?
It seems the pre-MS GitHub's approach of "we have maybe 1 new feature a year in the pursuit of keeping our duct-taped service afloat" might have been the right call. Nowadays tons of new features are pushed out every week[0].

0: https://github.blog/changelog
From now on whenever the topic of slaves comes up, I’m going to refer to the masters as mains.
I tried to look at the Gitea repo to see how fast they get commits, but github is 500ing :-(

https://github.com/go-gitea/gitea
I don't see it in tech circles as much, but in other circles like consulting, banking, advertising, it's pretty common to see people constantly cycle back and forth between the same set of employers every couple of years. Think Goldman Sachs trader leaves for JP Morgan, then leaves for Morgan Stanley, then leaves for Goldman Sachs, and so on
Trying to find some background on "Excir", the company whose technology is being used, and they've been on Dragons Den! https://www.cbc.ca/dragonsden/m_pitches/excir-works

https://www.cheminst.ca/magazine/article/saskatchewan-chemis...

And these appear to be their patents for the leachant: https://patents.google.com/patent/US20180112289A1/en https://patents.google.com/patent/US20180142322A1/en

TLDR rather than traditional high-temperature or extremely acidic solvents, they have a room-temperature gold-specific solvent.

I'd still like a little more detail about how the process works; how do they delaminate boards? What happens to the tin solder, the FR4, and other bits and pieces?
hn: cool link, check it out

me: click, scrolling messed up, close the website
It substantially comes down to the amount of language practice those students have had over the years, starting from listening to large amounts of varied material (from conversations/books read aloud) as young children, and then from reading a wide variety of material. The kids who read, and read, and read (especially those who have someone discuss with them the meaning and structure of what they are reading, hearing, or experiencing) learn these skills to great fluency. The kids who don’t, don’t.

Some kids live in households where they listen to thousands of books by age 5 or 6, including not only stories of increasing complexity but also natural history, biography, science, technology, ..., and other kids never get that kind of attention or experience, and end up far behind in those skills.

The ability to “memorize” (i.e. learn) rests on a vast subconscious structure built up by fitting together language, starting from little bits and pieces of vocabulary, and building to subtle understandings of complicated ideas.

The way to train it is by giving the little neural net of the brain as much meaningful input as possible about the relevant parts of the world, and letting the brain fit them together in a web of connections. Not by trying to practice/drill rote trivia (say, reciting state capitals or the multiplication table).
> > > At Boston College Law School this semester, a constitutional law professor asked students: “Who does not think we should scrap the constitution?” According to a student in the class, not a single person raised their hand.

> This would be the expected response to any question in an 8 a.m. class.

Not only that, you're gonna get a fair number of votes for "scrap" in any classroom full of people who've spent much time studying and thinking about the constitution. Most "no" votes will likely be from people approaching it practically, as too difficult to realistically improve on in the current political environment—an "in an ideal world" kind of framing would have a real chance of getting a very sincere and considered, universal "yes" from the whole class.

This is because it's fairly bad, and it's been (plenty) long enough to see exactly how and why it's bad. Some parts never worked right (the electoral college comes to mind, which broke completely about as soon as it came in contact with reality and effectively never worked the way, or had the effect, that was intended, at all) and a bunch more kinda work, but are clearly not optimal compared with proven alternatives.
I took the quiz but wouldn't put in my email address for the results.

I WFH, I haven't worn a collared shirt in over a decade. Who knows their necksize?
Would have been nice if they did the leg work to pair this with cost of living

> The survey did not take into account the cost of living in the countries featured in the league table (comparing the cost of a house in San Francisco with one in Pune would provide more context)
What do you mean "independent CI"? You start with a `Makefile` with the commands for testing, building and so on, and CI is just calling those commands but on another instances, that likely gets triggered for each commit/tag/pull request/whatever.

When you first setup CI, you don't actually just develop for the CI environment first, that's the second step after you know how to perform the same things locally. So not sure why there would be "independent CI for everything".
Yeah was gonna post this. Not sure if is updated enough but it's worth reading the Borg paper https://research.google/pubs/pub43438/
Github-actions is not created to encourage that though. It uses syntax that only works on Github. Look at their workflow-examples and you will see.
Starlink helps Ukraine’s elite drone unit target and destroy Russian tanks
> “I accept the point that eight isn’t a very big number. But I think the findings are really stark, that all eight of the ads were accepted for publication,” said Rosie Sharpe, a campaigner at Global Witness.

That doesn't seem like a particularly stark finding. Eight ads submitted by the same organization getting approved just tells us that they probably had a high reputation. Now, eight ads submitted by a mix of different actors all getting approved would make for a much stronger case, what we got here was somebody running the exact same experiment eight times and pretending to be shocked that it gave the same result each time.
Not sure if Vista was the low point or Windows ME. Probably Vista.
Seems likely that migrating to Azure is related to being acquired by Microsoft. I blame the new ownership for the decreased stability.
I have never used that tracker. If anybody is a power user please tell what to find there which can not be found on TPB. I prefer to dig for some rare music (not pop/rock/rap) and books about crafts/sciences - this content is a rare guest on TPB.
We have solved this problem already for text with digital signatures. There might be a way to digitally sign speech in real-time and show the signature on a display device, which is captured on video. It could be just a smartphone app or a separate device. This way every video could be proven authentic, even if they originate from unofficial sources.
There’s also my not alma mater (I didn’t graduate) the Olin college of Engineering
It would be nice if GitHub started operating the way GitLab does. Free community edition (open-source) and paid proprietary Enterprise Edition (source-available). Developement being completely public (employees push their commits, do code review and work on issue boards on the official GitLab repo[1] which is publicly available)

[1] https://gitlab.com/gitlab-org/gitlab
Ask HN: Sponsorship/Advertising for a B2B Infosec Product?
My microISV will soon be ready to launch a new infosec product, which is targeted at businesses (it will not be sold to consumers).

I'm trying to find sponsorship or advertising opportunities to help get the word out, but as a microISV funding might be an issue. For example, I thought about sponsoring Troy Hunt's blog... but he wants $4,000 USD - per week!

Anyone got any ideas on how I can effectively sponsor/advertise a B2B infosec product? Total budget is $2,000 for 1-2 months.
Install debs into a dynamically provisioned container, it will feel similar.
Have you looked at identifying AI written content?

If you plan to release this, I will be your first customer.
we use boxy over at cal.com and it’s been super cool. deepak personally helped us get started
Hey FB, you know how DAU is your most important metric and basically the only thing keeping you afloat. What if you just... cut it in half?
This is my default answer. What else would you use? C# is the only realistic alternative in my opinion, and I could respect that choice.

I work in Go currently and although I see the positives, I'd be less inclined to unleash a bunch of mid-level devs using Go to create a huge codebase.

If I could have my way, personally, I'd go for one of the other fun JVM langs out there... but that's just me having fun.
I know they are working on a "Joy Milne" on a chip.

https://www.npr.org/sections/health-shots/2020/03/23/8202745...
scrolljacking is terrible. I wish there was an easy way to disable it
keycloak is an easy to use easy to deploy idp
as someone who worked in this area (not ML on records, but aggregating and ingesting EHR/ELR data) the problem is not just "the standardized record" but getting providers and hospital systems to use the record in standardized ways.

HL7 and FHIR are sort of like XML or CSV - they're just formats that define fields and delimiters. You can still emit HL7 or FHIR that can't really be consumed by anything else, and there's a huge amount of work to getting it "right". One of our perennial projects was a validator tool to help onboard facilities to produce data that was actually compliant with state/CDC systems. Unsurprisingly, from memory (that wasn't really my direct fief) basically every single system (from memory it was something like 80% of attempts) failed their first couple times and needed hand-holding to get it right.

https://fhirblog.com/2014/03/28/pictorial-representation-of-...

One of my projects was integrating a clinical recommendation tool with various EHR systems. That project didn't really end up going anywhere, but even just from the sample data being used in the various sandboxes I could tell that it was gonna be a massive slog actually getting it onto client systems, because every single client system was coded differently and there was different "quirks" to the data/etc. Fixing that wasn't really my task, just dealing with it, but the point is that even if you define a system that allows these relationships/etc to be expressed, there's no guarantee that a client system is outputting well-formed, properly normalized/denormalized data. It's rough.

And unfortunately it's 1000% a XKCD "there are 14 standards and systems still can't intercommunicate, we need a 15th standard" effect. There is already so, so much work mapping around between the various editions of ICD, CPT (procedures), and usually there are instance-specific (specific to the hospital system usually) coding systems underneath that (since in many cases eg CPT does not really convey enough information about the exact specific procedure - it's enough for billing but not enough for a radiologist to actually know what scan to perform in a medical sense). And the existing coding systems are already super generic and can express basically anything in multiple ways, which just feeds into the "it's possible to emit valid records that nobody else can really consume" problem.
> You’re going to need to back that up with a court case

Back what up? That government entities have juridical personhood? Sure, see U.S. v. … well, anyone, actually: being able to be a party to lawsuit (except being the defendant in an in rem suit like civil forfeiture) requires legal personhood.

> especially when the constitution explicitly mentions government for example the 1st amendment

How does the reference to Congress in the first Amendment have any bearing on anything being discussed?
Can we please stop posting major system incidents and status pages for major cloud/SaaS providers? What's the point?

Post mortems - TOTALLY fine. But just linking to a specific incident is IMHO not valuable to HN and just takes unwarranted frontpage space.
Well, usually you figure out how to run your tests, check code coverage and build your binaries locally first, then figuring out how to get it to work in the CI environment, not the other way around. So the replication has already been done, but in the direction of local environment > remote environment.
> without relying on the specific practice of shipping software with heaps of dependencies

Many companies just rely on the practice of shipping software with heaps of dependencies.

I worked at a place that simply spun up blank AWS images in autoscaling groups and allowed configuration management to install literally everything: security/infra/observability agents, the code and dependencies (via AWS CodeDeploy), and any other needed instance configuration.

The downside of this practice was slow startup times. The upside was...I don't know, I think this pattern happened by accident. Packaging these AWS instances into images beforehand would be smarter. Newly created services were generally moved over to k8s.

These were stateless web services for the most part.

I think the lesson I learned from this was "nearly any operating paradigm can be made reliable enough to tolerate in production."