skysight-inc/HackerNews huggingface dataset:
Yes. This is precisely why passphrases are a bad idea - people tend to use their easy-to-remember default password, which gets compromised along the way if an attacker can get their hands on the key file and throw their full processing power at it.

SSH certificates are a solution to that problem.
"if they said, we have 8 people with COPD in the first group and then waited for COPD patients to show up at the ER for the second group until they had 8"

Did you not read this? I asked whether if they did this they would come up with the perfect 1 scores on those items. Whether they actually did or not is a separate matter.

What troubles me more than whether this study was faked or not is the certainty HN readers have that it was without being able to answer simple questions about why they believe that. Is this test just measuring the likelihood of each group having the same primary diagnosis? If they added people to the second group so they had the same number of a primary diagnosis, would that result in a 1.0 p value on this test?

These should not be difficult questions to answer for somebody certain that fraud occurred.
Better link:

https://archive.ph/3mmv4

Original link:

https://www.thetimes.co.uk/article/kremlin-arrests-fsb-chief...
That Ligotti chap really managed to put the darkest possible spin on the greatest possible miracle - consciousness.

Our brains represent a step change in the timeline of complexity in the universe, from subatomic things spontaneously coalescing into atoms, all the way up to Thomas the paranoid android.

Instead of being depressed that we will get hurt and die, let's be happy that we will be able to experience many interesting and wonderful things, many of which can be quite pleasant and meaningful.
I'm using SSH certificates to manage a few nodes in my homelab and it's a pleasure to not have to deal with managing the known_hosts file on my clients and authorized_keys file on my servers. There's only 1 line in my known_hosts for my nodes and authorized_keys doesn't even exist on any of my servers. If I add a new node to my homelab, I don't have to make any changes in known_hosts or authorized_keys in the existing nodes and it's easy to bootstrap the same known_hosts and sshd_config that I use everywhere in the new node.

SSH keys would make managing these few nodes a lot more complex that it is.
That sounds more like an Apple "form over function" issue than a USB-C issue.
I feel like these days your deployment should be as hands-off as possible. A merge to the main branch should pick up the changes, run the build process, do any necessary migrations, and push the app container to a server somewhere. Once you've got it working you can deploy as often as you like and (hopefully!) everything just works.

As such it shouldn't really matter what you're deploying, or even how long it takes. You merge and forget about it, and a few minutes later users are using the latest version. It doesn't matter if that's 3 minutes or 15 minutes because you can just carry on working happy in the knowledge that it's taking care of itself.
FBI trolls Russian embassy with geotargeted ads for disgruntled spies
Haven’t you tried calling the DMV before? It’s a nightmare. Governments are not significantly better at this than private industry. Private industry can be great at it, they just have no incentive to be currently.
Also you have to compare safety to the alternative of coal
> What else could it even be?

As I said, my usage is closer to calling a thing “free” if I consume it without paying for it, and importantly it doesn’t matter who receives the bill.

If my wife buys a new couch for our home with a credit card that is nominally her’s, but for which I make the payments, I would not call the couch free despite the credit card bill being in her name.

> You started your gotcha with the truism that it's not free, so, yeah, nothing is free, and the whole discussion is meaningless. You're arguing in bad faith, but that just makes your argument meaningless.

I just asked a question about the meaning of “free” in this context.

> Your counterargument is that there exist diseases that cannot be treated anywhere?

My counterexample to the claim, “There are current Earth societies where no one is unable to get treatment because of insufficient funds”, is anyone in these candidate societies with a currently untreatable disease.

I don’t understand your point about typhus.
This is the actual plan for renewables, because they are just cheap period (though their fuel is pretty darn cheap too). Demand response, simply dumping the excess, storing excess as heat etc.

It's not a good idea for nuclear, because even nuclear that runs all the time can't compete on cost with renewables and any deviation from that schedule destroys the economics conpletely.

A small amount that runs all the time is probably a good idea in places far from the equator, but even then the plummeting costs of renewables opens a few other doors, like shipping green hydrogen around.
that's only the first study discussed though.
By 'THEN try Forge' you mean pay 1000$?
I guess firing many staff didn't really save them a lot in the long run then.
I'm assuming it's a him because his handle is the masculine form of the Hebrew word for snake.

But maybe that's there to throw us off the scent...
What is his background and what is your environment?

Does he know what a text editor is?
There are lots of exceptional individual contributors with no desire to ever go into management.
Ok got it, every task type are able to logged what they want, so basically, there is one task that is sending dirty output, I add a fix on the roadmap in order to clean this task, thanks for the report
Why do you speak for others? I personally cannot wait for this.
Furthermore, licenses can absolutely be revoked remotely. You may still possess the physical license but it can register as suspended in databases.
> Opponents of cancel culture absolutely considered Donald Trump to be a victim of it.

Is that an existential or universal claim?
Any Delphi experts know of openings for remote devs from Ukraine (now in Germany)? Sorry if inappropriate to ask here, hope it's understood given the circumstances.
Those are no longer cost competitive with PV and batteries.
Surprised I didn't see this elsewhere in the thread but what they were thinking was totally different. From what I've heard the code wasn't meant to destroy files, it was buggy.

Sure it was negligence with a bad outcome, but the intentions were good.
I would advise against anyone learning C/C++, any more.

I wish I had instead learned Go and Rust.

The tooling around C++ was phenomenal, with Turbo C++, Borland C++, and C++ Builder. But the tooling around Rust is just as good or better now, in my opinion.
We're a work-sample culture here too, and one of the big concerns we have is asking people to do work-sample tests and then face a subjective interview. Too many companies have cargo-culted work-sample tests as just another hurdle in the standard interview loop, and everyone just knows that the whole game is about winning the interview loop, not about the homework assignments.

A rubric written in advance that would allow a single person to vet a work sample response mostly cures the problem you have right now. The red flag is the vote.
I'm glad someone's Got The Life style that lets them try these experiments.
I mean from the perspective that both oil and extractable uranium are practically finite. The sun and the wind and gravity are not.

Therefore, if it consumes a finite resource, I would say it isn't renewable.
If that is important to you, what prevents you from only doing business with companies who will operate on terms you find agreeable? Is it necessary to force others to avoid low-touch, low-cost companies/services that they appear to be perfectly happy with?
> an OS that doesnt even enable root by default

This is a meaningless statement. Just because there is no way to log into the root account doesn't mean there isn't a kernel that treats uid 0 specially.
What a cash grab

Firefox devs should quit this sinking ship ASAP, fork the browser and setup some sort of developer funds like blender/krita/gimp/godot and many other

I'll be happy to donate directly to the firefox team without having to go through this mafia
The requirements to join the GitLab for Open Source program can be found here: https://about.gitlab.com/solutions/open-source/join/#require...

They are:

- OSI-approved open source license: All of the code you host in this GitLab group must be published under OSI-approved open source licenses

- Not seeking profit: Your organization must not seek to make a profit through services or by charging for higher tiers. Accepting donations to sustain your efforts is ok. Read more about this requirement here: https://about.gitlab.com/handbook/marketing/community-relati...

- Publicly visible: Your GitLab.com group or self-managed instance and your source code must be publicly visible and publicly available.

GitLab's discretion means that we review applicants to ensure they meet these criteria and do not violate our CoC. The renewal helps us to ensure that our program members continue to meet these criteria.
One place you'll see this in real life is modded flashlights, running Anduril. My friend has an absurdly powerful light with 1 button and 20 modes: https://budgetlightforum.com/node/38364
Imprisonment for a crime is now "cancelling"? Really?
> an indiscriminate digital attack

I disagree. Users are responsible for the open source software they use. If they want to blindly execute software from the internet without auditing it first, that's their problem.
not a forum but this has good privacy and osint info: https://inteltechniques.com/podcast.html

lots of content, you gotta weed through a lot to get the good stuff
Feedback for my AutoPause browser extension
Listing: https://addons.mozilla.org/en-US/firefox/addon/autopause/
Github: https://github.com/NDevTK/AutoPause (MIT License)

I would like to know if anyone has a suggestion for it :)
This wasn't just an attack on Russia and other people's bad behavior doesn't excuse your own.
Mark Zuckerberg – The Tim Ferris Show
Facebook selects Kansas City for new $800M data center
check out Aaron Hsu on youtube, he works with it (finance sector IIRC)
Any luck so far?
I must be missing something, how doesn't a drug market require a physical address?
Yes. I believe that those people should be able to judge me and socially shun me, including calling for my firing, if I express that I am pro-choice.

I think they are wrong, but it's on me to try and persuade enough people that I'm right.

If they see it as I support murdering innocent people, then how can I possibly demand they hand me money, interact with me normally, etc...? I'm certainly not going to employ someone who says "I think we should kill <group of people>".

I think they are fundamentally wrong about the core concept, I don't think it's right for them to "cancel" people over that as a result, but that doesn't mean it should be illegal to do so, because forcing people to support behaviour they find abhorrent is worse.
Possibly because Gitlab doesn't have any better record regarding outages.
From polling results (both Russian and western) majority of Russians are supporting the war.
I would use this instead

- Devdocs

- Zeal on Linux and Windows

- Dash on mac
what happens when the free market decides to do something in nobody's best interest except themselves?
Is Algolia Down?
im trying to use algolia search on a few diff websites and it's not working. Here's one for example [1]

[1] https://tiptap.dev/guide/custom-extensions/#node-views
Intel with decades of experience is barely "winning" against Apple's first desktop chip.

Yeah, slight disparity there!

And that's completely discounting the whole power thing. If Apple were ever to develop a desktop chip that chucked efficiency out the window and focused on raw performance by throwing as much power and cooling as possible at the chip? Things would probably get spicy indeed. If only Apple had a desktop chassis optimized for maximizing power and cooling. Oh wait, they do with the Mac Pro - and it's the only Mac not yet migrated to Apple Silicon.

I'm sure Intel is sleeping well with their "lead" :)
in America the most common intervention is AA, whose doctrine is that willpower alone is not sufficient, that you must appeal to a higher power. We also know this intervention isn't any more effective than someone just trying get over it on their own, yet it persists, and is even court ordered often.

I listen to old Lovelines from time to time and I thought it was weird when a caller asked Dr. Drew why he only suggests AA for alcohol addiction and never anything else. Dr. Drew, and even Adam Carolla, both got oddly defensive and started attacking the caller, as if even bringing up the question as to if alternatives exist was to question their authority to even speak on the matter. It just gave me a bad taste in my mouth for them to treat this twelve-step program as unquestionably the only way to deal with addiction.

But between that and the fact that AA is often court mandated, like you say, it makes me wonder why AA is put on this pedestal and people aren't given more treatment options.
As another comment said, this would be good for those with short attention spans or those with reading disabilities like dislexia to focus better. I would want to see an epub renderer so I can read ebooks with this method.
My personal worst hit list in this space:

- Companies that will not even listen to your (serious) bug reports if you don't have an account with them. Looking at you suddenlink.net. Failed big time, gave up.

- Voice robots that do not understand users, despite being native speakers

- Voice robots that do not understand non-native speakers
At least in the US, almost all full-time orchestras are union shops with the American Federation of Musicians. The first stop for major issues should not be with management's HR, but with the union local and the union steward for the orchestra. Most of these orchestras also have an Orchestra Committee made up of musicians, and it is this committee's job to help as well. And most of the largest orchestras do have an HR rep.

HR is there to protect management. The union is there to protect employees as a collective. Individual results may vary.
> Certainly a lot of cancer patients died that way.

This was not my experience, n=1 of course. My SO came down with lymphoma in November 2020. All of the appointments with the oncologist and all of the appointments for treatment took place at a cancer center dedicated to treating cancer patients. Other procedures generally took place at locations that did not offer emergency services (think biopsies and port installation).

At no point during diagnosis or treatment were we turned away nor did we face long wait times. This was before the vaccine was available, so everyone was unvaccinated at the time. The biggest barrier was getting seen for "a weird pain in my back that is preventing me from sleeping" without going through the emergency room and contracting COVID while waiting.
The second part is only kind of accurate, because usually the "sign a new key" part is automated as part of some other authorization flow. For instance you can log into your corporate SSO provider, and that can actually provision a short-term (i.e. 1 hour) SSH key that is signed by the CA for you. That short-term key is then used to shell into hosts, and you periodically renew either the key or the SSO session token. There's a bunch of points in the design space you can do to make this transparent. Normally it's all wrapped up in some command that invokes ssh for you; so you just say 'corp-auth ssh username@host' instead of just 'ssh username@host' and it all "Just Works" if you're lucky.

You can also bake some basic rules/policies into the certificate, i.e. the above flow returns a signed certificate that is only valid for SSH'ing into hosts in the 'www' group (not the 'database' group.) So then operations people can add you to groups in some other place (LDAP, Exchange, whatever) and when they add you to the 'database' group, any future short-term SSH keys issued by the central authority allow you to now shell into the 'database' hosts. The hosts themselves can also have some automation to check these permissions are accurate when an SSH login request occurs. So you just file an IT ticket asking to shell into a host or group of hosts, they fiddle with some knobs somewhere, and a few minutes later you're done.

So the actual second part is more like "Get a new laptop and log back in through Okta" or whatever, and you have all the exact same permissions and whatnot you did before. It's easier for both the user and the administrators.

An immediate advantage of this are that keys are easy to immediately audit and revoke (because a central authority issues them so you have a trusted trail). But there are some more subtle advantages; one for example is that you make servers more homogenous and identical. They all just ship some specific sshd_config file, normally identical, rather than each server potentially having a different authorized_keys file; instead the central authority that issues keys is where the mapping of hosts/authorized users is, rather than each server having that knowledge "individually" in its own file. That's easier to understand, track, keep up to date (who has access where?) etc. You can just go modify a single global user and have the permissions flow downwards.

None of this really matters if you only have like 1 or 2 people doing everything, or it's your home network, but once you get above like, 5-10 people, or you have at least one sysadmin, it's actually really useful IMO. Also, to some extent, you can mix and match various parts of the above concepts (e.g. running code on every login request, to add extra authorization checks based on out-of-band information.) You have to decide what's appropriate for you. Read the ssh and sshd man pages and you'd be surprised at what you can do.

Source: I basically implemented my own SSH certificate authority infrastructure (server/client automation) "for fun."
What about the middle income students for who the vouchers would be enough the make the difference?
Why Is Microservice Orchestration Important Now
They are working on a v2 https://github.com/edvin/tornadofx2
You seem to have an ear for puns.
Yeah, it’s incredibly unrealistic tech-elitism to put the burden on everyone else because you can’t be bothered to simplify your design. Anyone who cares about self-hosting should not be advocating for the UX equivalent of setting VCR clocks.

We can be realistic about making hosting accessible, or you can bury your head in the sand with enthusiasts as AWS becomes the entire internet. It’s already pretty obvious which approach is winning.
HN logic:

A) my skillset deserves $300k/y in comp
B) I'm not paying another $10/m for my bank just because they'll have to have a human spend a few hours a year supporting me
Yes, of course!

You have 3 solutions for that:

- you can use this task using runner:DOCKER property and choose the image: https://kestra.io/plugins/core/tasks/scripts/io.kestra.core....

- you can also use PodCreate to launch a pod on a kubernetes cluster: https://kestra.io/plugins/plugin-kubernetes/tasks/io.kestra....

- you have also CustomJob from VertexAI on GCP to be able to launch a container a ephemeral cluster (with any CPU / GPU): https://kestra.io/plugins/plugin-gcp/tasks/vertexai/io.kestr...
> Engineers have a far higher standard than academics.

That's exactly why I'm arguing for raising standards in academia. When you publish a paper with a traditional publisher, you have to sign a bunch of stuff. You are aware that you are literally signing off on something and claiming responsibility for it.

In my opinion that responsibility should extend to legal liability for fraud with criminal penalties if mens rea can be established.

And, yes, I'd freely apply that standard to every paper I've ever published. Because they might or might not be wrong, but they're not fraudulent!
How useful is this? I have never actually used it
I'll pay. But I kind of wish they were laser focused on just the content and not obligated to deliver useless pay for features.
Well written and updated documentation is hard to find these days, like the Arch Linux Wiki
If there ever was a shortfall in a given quarter, maybe companies could now dial up the strictness on suspicious account suspensions?
> Years of life taken goes in the cost column

She wasn't in suspended animation for four years. She received four years of a valuable service.

> us from a lower class background

She grew up in a single parent household, was the first person in her family to receive a college degree, and paid rent (actually, started helping with household expenses in high school).
I'd say it's mainly that those who have been heavily advocating all of the lockdown measures throughout the pandemic have behaved more or less like there were no side effects and we should do them for the greater good (basically virtue signaling). The other isle has advocated that maybe we shouldn't cause that kind of turmoil in society just to spare a few years of lifespan of the elderly (which is a harsh take but doesn't make it untrue).

And just thinking about stupid concepts like outdoor masking makes me want to crack open a bottle of vodka.
68 year old engineers have usually retired long ago by choice. Engineering pays well. There aren't many 65-70+ year old engineers who are even still interested in working, let alone keeping up with modern technologies.

Anyone sticking around that long at a famous company is almost certainly in it for the love of all things computers, not because they need the money.
FSF Job Opening – Bookkeeper
It seems to be a recent development in some larger American cities.

I work in a company in Berlin that has job applicants from many different countries, including the US. Common question during the process (we generally require relocation at this point) are:

- "Can my 12yo children go somewhere alone? I'm from Portland/similar and this is not the case here and it's why we're moving."

- "We've been looking and it's really hard to find an apartment in Berlin. We have this ground-floor option, but they just shot the ground-floor windows in across the street here again this morning. Is ground floor safe in Berlin?

I'm no longer surprised when it comes up, but it's quite sad.
I’m with you, I don’t even want the decentralised model, but it feels like with GitHub I get… the worst of both worlds? No decentralisation and crappy centralisation?

For example, in a work environment, what’s even the point of ‘forking’ in GitHub. I don’t want my own version of any repo, I don’t want to be playing weird rebase/merge upstream/push origin nonsense. I don’t even want to be creating branches or naming branches.
I just want a centralised repo: I make a commit and… that’s it, get a commit hash and be able to have that commit anywhere else I check out the repo, and open a PR/diff to merge into master.
No doubt. I've had his A Beginner's Further Guide To Mathematical Logic for a while, and just ordered a copy of this book which I think is going to be awesome:

Raymond Smullyan on Self-Reference[1]

From the description:

This book collects, for the first time in one volume, contributions honoring Professor Raymond Smullyan’s work on self-reference. It serves not only as a tribute to one of the great thinkers in logic, but also as a celebration of self-reference in general, to be enjoyed by all lovers of this field.

I started reading this Wikipedia page and realized that his work has been even more important than I had previously realized. Definitely an interesting character in the history of math & logic.

[1]: https://www.amazon.com/dp/331968731X?psc=1&smid=A1KIF2Y9A1PQ...
The content isn't (and shouldn't be) paywalled. There's no option but to add other paid features around it, which someone users may find useless but others maybe won't. You could also always just treat it as a monthly donation and not use any of it.