skysight-inc/HackerNews huggingface dataset:
I would really hope my organization doesn't start blanket banning excel macros for "security". It'll be a huge blow to productivity for several.
Public sector employees tend towards mediocre because the compensation is awful. The only way to attract anybody at all who doesn't entirely suck is to offer some other less tangible perk, like job security.
Any chance that the James Webb telescope will have a look at this?

Would we get better data/images from it than from MeerKAT?
Interesting. I tend to put a high amount of trust in people and have rarely been let down. The cases where I was let down were exclusively with drug users earlier in my life, a very predictable outcome in hindsight. I don’t think the advice you were given was good.
While it's true that the attack vector you describes exist, assuming you can trust both the driver and hardware, it is hard to exploit as most software cannot talk directly to the driver. Even if it does, manipulating it the way you describe is challenging. By comparison, it's not only easy to talk with most drivers in a monolithic kernel, there is also many more ways to manipulate it which will result in the entire system being owned. Security isn't all or nothing if designed robustly. I hope the case for IOMMUs becomes stronger due to increased popularity of Operating Systems with userspace drivers. The BOM cost is simply worth it.
The Eclipse incremental compiler is faster than IntelliJ on any decently sized project. Something like 20-60 times faster for us (<1s vs. 20-60s).

I think the UI of IntelliJ is snappier, so for small projects that leads to people saying it's "fast".
You know that people can and do buy/own apartments in apartment buildings, right? And that on the flip side of the coin, many people rent single family homes?
Well life is a struggle for all of us, no?

Many traits that are seen as desirable can wreak havoc on the lives of those who possess them. We envy those traits when we see them in others because we do not have access to their visceral experience, and lack awareness of their inner turmoil and struggles.

I think it important for all of us to extend ourselves grace. Living ain’t easy and we are often doing better at it than we think :)
Quantel Paintbox History: Painting with Light
I loved story. And you wanna know what? I like people with a pulse. The guy tried something out. He took a chance. He tried to make his own luck. And you co-re-discovered some foundational truths along the way that the experience has made more immediate and penetrating for him. Which helps us/me because he can convey it with conviction.

I wanted to riff of a couple of points:

'“Yeah okay that’s great but nobody cares about this math crap. You need doctors.” Goddamnit he was right. If nobody could be bothered with the math, then I was no better than Gwyneth Paltrow hawking vagina eggs. To build trust I needed to get endorsements from trustworthy people.'

This slightly miscommunicates how it works; it's even more annoying. True you need the people usually first. But one day it will come down to math/science. And if you don't have that right the same people will roll their eyes at that too even if they can't spell math.

And "Occasionally I like to disconnect from the IV drip of internet pseudoknowledge and learn stuff from books. I know, it’s weird—maybe even a bit hipster. But recently I read Wharton’s introductory marketing textbook, Strategic Marketing Management."

I'm sending this in from the engineering cheerleading club: Never apologize or down play reading (a book) or writing. It's good! The other side doesn't get it? That's why you need a pulse so not to care about such things.

In the alternative? Get a 12-pack and re-watch the 'Breakfast Club' with the other side. In the end we all play more than one roles and we all could use help on the way.
I've actually been researching Internal Family Systems! There are some things that make me a bit wary about it, but I think it may be worth trying.
It allows Carnival Cruise Lines to operate cheaply. Cruises depend on cheap labor and low costs. This brings affordable cruise vacations to the masses, as well as employment opportunities in the industry.

There are vacation alternatives, such as land-based resorts. But they tend to be more expensive.
Most populated areas of the world are also not suited to having everyone living in rural areas being herded together into an ultimately dystopian pod-life hellhole.

The facts are that whoever is advocating for this have not thought past their subjective experience and are exhibiting a serious lack of empathy for the majority of human beings they quite obviously are unaware of who are living in many environments which are completely different from the ones advocating.
Absolutely. However, if anyone is harmed by a bogus subpoena request, please give me a call because I need a new car.
If only there were a way to cryptographically verify such things.
Hi, one of the authors here. You're right that in order to ensure that you won't receive timestamps lower than some threshold, you need to know all the nodes in the system, and you need to hear from all of them (if even just one node is unreachable, that will be enough to hold up the process). That's quite a big assumption to make, but unfortunately there doesn't really seem to be a good way around it. Lots of CRDT algorithms have this problem of requiring causal stability for garbage collection.

Using a consensus protocol is possible, and would have the advantage that it only requires communication with a quorum (typically a majority of nodes), rather than all nodes. However, it has the downside that now a node cannot generate timestamps independently any more — generating a timestamp would then also require a round trip to a quorum, making the algorithm a lot more expensive.
We just got a utility bike and... wow. Cut our daily car trips in half, and it's a lot of fun to ride. It's got a seat on the back, so we can haul kids around, or carry groceries.
Diabetes Drug Metformin Linked to Birth Defects in Boys
I can't get it why there isn't a serious industry effort towards methane-powered planes.

Methane would require a major redesign of the aircraft and fuel system similar to hydrogen but not as extreme (it's much more energy dense.) Some studies have suggested that the economics of methane from conventional sources could be better than current jet fuels.

There is a lot of talk about synthesizing jet fuel with this terribly uneconomical process

https://en.wikipedia.org/wiki/Fischer%E2%80%93Tropsch_proces...

using atmospheric CO2 to either produce or replace CO. That process requires a knife-edge balance between chemistry that builds up and tears down hydrocarbons so you have a huge factory that produces a trickle of fuel. Methane is much easier to synthesize.
You're assuming that someone who grew up in a rural area is destined to be a farmer no matter what and just gave an example of the bias those kids face. The same logic would suggest that a kid who won a music competition in high school shouldn't apply to Berkeley because the other Berklee would be a better fit for them.
How is that regulation going to happen? What mechanisms of power are going to oversee such a thing? With all due respect, I think you have everything right except for this. I think you’re dreaming. These kinds of blessings don’t just fall from the sky.
Why wouldn't you recommend a lawyer to someone who wasn't legally wronged, but feels they may have been?

What's wrong with pointing someone to a professional consultation in this scenario?
Yandex collects data from mobile phones before sending the information to Russia
Potentially, they may struggle to sell that gold later. Russian gold has specific composition - it's relatively not that difficult to identify its provenance. What's the point of hoarding treasure if you can't sell or exchange it?
There is clearly an issue with the network protocol if the packets run the risk of starting to socialize with each other!
You can still run a default/master server.
That was actually going to be my first choice. From what I read it seems better polished than others. But then I read some recent lab tests in which ESET missed blocking a ransomware attack. And that's the threat model that worries me the most.
I think with the Steam Deck being based on Arch, Valve recommending Manjaro as a Desktop Distro, and Microsoft having more frequent updates to Windows, Canonical has probably seen the shift in popularity towards more rolling release style distros/frequent updates and wants a piece of the pie.
So every major technology company will need to figure out the real contact details of every town government (how do you propose they will they do this?) and then when they receive one of these "life or death situation, you must respond immediately" requests they are supposed to call up the town, get the number for the police department in the town (hopefully the police department isn't shared between multiple towns or this could get confusing) and then call up the police department to confirm that they are the ones who sent the request?

I guess I don't see the value the town government contact details is providing here. If you have some way of figuring out the real contact details for every town why wouldn't that same mechanism work for figuring out the real contact details of every police department?
Great idea. Expensive, though. What if, instead, a bunch of us buy land in the area, form a democratically-elected government, and mutually agree to limit development on that land such as to preserve the current level of density and our quality of life?

We can call this idea “zoning”.
From my point of view the most accurate information is "Just. Say. No."
This is what we call an hyperbole.
We use HTMX at Savio (https://www.savio.io), which started as a pure Django app.

Our operating theory was that using a JS FE framework was overkill for a CRUD app. So we went with stock Django and server-rendered HTML.

It became clear that parts of our UX would benefit greatly from client-side interactivity, which is what we eventually expected to happen. We sprinkled in HTMX (on top of our Jquery) on certain pages and it's been a breath of fresh air. We even built a nice Kanban board w/ HTMX and a Jquery plugin. Key benefits include:

1. When you're looking at a template the HTMX syntax makes it obvious what happens

2. HTML is rendered server-side in templates (imho where it should be) and is sent down the wire

3. We get a lot of stuff for free from Django (routing, back button handling, etc) that we don't need to build with a FE framework

Even though we're devs we believe the best code is no code (in the literal sense, not the de rigeur "No Code" sense). Maintenance costs are important to us. Getting stuff for free is important to us. Building for a specific use case is incredibly important to us.

With that in mind, the Django + sprinkled HTMX experiment has been pretty successful thus far.
> as directly relevant to humans when it wasn't done in humans is misleading

The authors point out that the same observation was made in human brain tissue of covid patients as well, it is literally in the paper.

"We had the opportunity to examine human cortex and subcortical white matter samples from a
cohort of nine individuals[...]"
They definitely messed up quite a few times. They had a lot of internal management that was down-right hostile towards open source. Not everything was rosy with Sun either though; there was immense gnawing of teeth from the community, mainly stoked by Stallman and a personal vendetta over emacs of all things.

I agree with your sentiment though. Nothing is perfect, but I do appreciate what they've been doing with GraalVM, new JEPs, and advancing the language (other than the var keyword ;)
I'd love to get insight into which of the batch were the 29% that applied with just an idea and were accepted. I think it'd be interesting to see where they are super bullish versus maybe where they need to see some proving out or how those with just an idea presented themselves.

I've been in the interview now 3-4 times and it's always fun (in the sense you will absolutely find out where you have weak points), but it's an absolute blitz that's over before you know it and you have to be absolutely on point. The amount of adrenaline you can work up for a 10minute conversation is surprisingly high.

My point, is that I imagine those 29% have both really great ideas and are also incredibly sharp people.
Don't forget that we very nearly had a successful coup, which would have spelled the end of American democracy. Are we on the verge of becoming a Stalinist state? No, not really. Could it happen? Absolutely, and we need to recognize that possibility to avoid becoming the next one.
It is not only not banned but "found a compromise" and agreed to co-operate with FSB according to Russian MP (google translated article from tjournal.ru): https://tjournal-ru.translate.goog/news/562296-durov-nashel-...
Incremental and partial Java compilation. Partial compilation is the notion that partially compiled software is still usable and something you can debug or introspect on. The IDE compiles while you type, it will detect syntax problems and as soon as you fix them they go away. Error markers in intellij are nowhere near as fast and you can't trust their presence or absence to be correct either.

Intellij does that a little bit of incremental compilation. They half integrated the eclipse Java compiler at some point but they never really made using it a thing. Most projects just hand off compilatio to Gradle or maven, which means you lose a lot of time waiting for that and dealing with various caches in intellij and gradle/maven getting out of sync with each other. The process for fixing that generally involves boiling the oceans and running the CPU at 400% for a few minutes.

Eclipse compiles two orders of magnitudes faster when you have it properly setup. I'm not exaggerating. It's really good at this. Intellij users have never seen this level of performance. I've tried to explain it a few times to users that insisted they had intellij configured just right. The minimum execution for a unit test after a 1 character code change is the key benchmark for this. Run a test, change something trivial, run it again. If that takes more than half a second and has a noticeable delay, it's not fast. Eclipse user to be closer to 50-100ms. Even on a (now) ten year old laptop. With intellij, it's closer to 3-5 seconds. They have improved things over the years but it never got even close to that level of performance.
>most Americans think civil war is on the way

Source?

Personally, if we survived the 60’s/70’s, I think we can survive this. They literally murdered college students in front of the world.

I’m also not sure how any of this translates into Stalin-era gulags. People throw that term around too lightly, like “nazi.” If you’ve actually studied any Russian/Soviet history you should know how insane those were, even for an era with rampant fascism.
How do we protect SMS? I’m kind of confused but I understand I guess why it wasn’t also addressed in the initial rollout… does STIR/SHAKEN even allow for SMS authentication?

I guess you could keep your phone number by porting it and get the call spoof protection?
We'll get our own flavor of gulags. The USA already has a pretty nasty and oppressive prison system. We have pro-authoritarian politicians in office, in the police forces, and now throughout the court system. So it doesn't seem alarmist to me.

I'm pretty sure the police could get away with murdering political rivals right now. But a few key court decisions are all we need to formalize that capability for the next 100 or so years.
You can still run a default/master server. This isn't really a new problem.
Typically you need to pay taxes on dividends, does a stock split dividend mean that there will be taxes incurred on the stock split?
As someone who's lived in Edinburgh, it's hard to take this seriously.
Also, living there, you have access to beautiful nature in relatively little time.
Holy shit there’s some serious voodoo waffle in these comments!
I'm American. What I can say is that pretty much all firearms based murder is rare in the US. Across any demographic in the US, there is a much less than 0.1% chance that you will be murdered by a firearm in the US in any given year. Far more likely to die in a car accident,a nd you have a much larger chance of dying in a household accident. Don't even get me started on heart disease or cancer.

Our problem here in the US is that we overreact to dealing with that <0.1% chance. We make people jump through hoops to get a firearm to even go hunting. We flood our neighborhoods with police who raid homes using grenades and armored personnel carriers. (Usually killing innocents in the process, because, you know, we throw grenades in the windows of some baby's nursery.) And, we have active shooter drills for our children, probably traumatizing some of them for the rest of their lives. The list goes on and on actually.

In America, we pretty much overreact to everything. Which is why you probably hear so many crazy stories about the US. When faced with what we perceive to be a threat, no matter how remote the reality of the threat, we are unable to moderate our responses. In fact, you could argue that we are trained from an early age, via things like active shooter training, NOT to think too deeply about our responses.
I did this years ago. Highly recommend. Got to operate 3 different machine for 10 minutes a piece with instruction over a headset.

And it’s not “drive in circles”, it’s “dig a 3ft hole, pile the dirt then drive backwards over it so you can see how hard it is flip the machine over”

Very cool experience.
I agree with your logic, though a paranoid person might point out that they don't need access to telegram's servers; access to the app store or to automatic OS updates would be enough.
Only that I had a lucky day in more ways than one.
You can still run a master/default server (i'm repeating the same reply to everyone because it seems everyone has the assumption that providing a server executable means the game doesn't get to provide one or something).
OS X and Linux are "wait & see" again. That describes half of our dev team and most of the seniors.
So, basically we are allowed to protect against any external security threat, except the ones created by US spy agencies.
So google gets one of these requests and supposedly its from a police force in a small town that has no government website. How do they know who to call to confirm?
Plenty of legit potential concerns.. Russian govt could "nationalize" Kaspersky at any moment and push rogue updates.
I would say that’s inherently and inescapably “cramped and noisy”.
You can have a master/default server.
Because those institutions produce a disproportionate share of the most powerful people in US society, so the kinds of people they do or don't let in tend to have a strong effect on the kind of society we live in.
Why do we accept the risk of intrusion from antivirus software at all?

All antivirus software developers should open-source their traversal software and thus guarantee that no harm can be done. The scanning doesn't need write access and doesn't need network access.
It's big in the data science world because of Spark. For general purpose JVM apps I see people mostly going with Java or Kotlin.
Action Runners are basically NodeJS applications packaged self-contained. You can run Action Runners on a RPi if you want.

GitHub.com (not GHE) use Action Runners deployed using K8S. This can be done anywhere that supports K8S.

Obviously MS used their own server infra, but to imply GitHub Actions needs Azure is plain false.
The problem is when a file also needs to be normalized - e.g. object keys in a different order, YAML syntax expansion. It can be very useful to indicate when a JSON file is identical to another JSON file but some of the properties or array items are out of order and that requires more in-depth knowledge of the data format. Let's not mention that you could UTF-8 encode characters or write out the same character using backslash notation, numeric or boolean data that might be wrapped in a string in one file but not in another, etc. There can still be a lot of modelling and interpretation to consider when comparing data files rather than code files.
I think your last sentence is what Putin counts on, that the West won’t risk “hurting the business environment” to respond to his military campaign.

I think one of the flaws of Western culture is how much business efficiency is put on a pedestal above all other priorities.

Because of that type of mindset, the West can’t even manufacture simple cloth or paper masks during a healthcare crisis (as an example).
In my last 40 years of jobs only one job had windows in its workplace. lots of Linux and embedded devices though, so it was not as embarrassing. windows shops do 10 less in 10 more time, but this is big cooperate.
Diluting the vote of your opponent/position is quite common.

https://www.newsweek.com/russian-politician-discovers-2-men-...
> then selling address, entry code and occupancy times

What locks are you referring to where locally configured entry codes are stored in a cloud DB? That's not the case for any of the ones I've installed.
The author doesn't exactly describe her method but says "No, I answered, because I really won’t have put a grade on it." Which makes me think she's not putting numbers on things - she has, in other words, thrown out her stopwatch.

Getting faster or writing better papers are both good results. Importantly, you can only know them if you are taking objective measurements. If you aren't, you will struggle to know if your methods and changes are improvements or degradations.

Fittingly, the article suffers from the same relativistic malaise the author inflicts on her students. The article doesn't explain objectively why not grading is good. Instead, it's subjective feelings, preferences, and beliefs. Maybe this is a good change, I doubt it, but we haven't seen any evidence in this article.
Why? Isn’t the point mastery? Are we grading students ability to learn, now, too? I really don’t understand what you’re getting at.
Kaspersky graduated from The Technical Faculty of the KGB Higher School in 1987. That was a definition of a dirtbag in Soviet time.
well that leaves blanks, right?
Filtering out the spam results is only half the problem. In my experience, a legitimate site's content is cloned by a spam site, and that one appears in a Google search and the legitimate one does not. The example that keeps hitting me is GitHub Issues.

Filtering out the spam only removes the clones; it doesn't get the good results back in.
> But I assume they're strongly correlated.

Well, they I assume they aren't. I assume my assumption is more likely than your assumption. You should not just assume things and build your worldview from them.
I'd pay off some debt for myself and some family, set aside a chunk for a close family member to purchase a home, and set aside a fund to pay for health insurance for another who can't afford it.

A million dollars is not enough to guarantee you can improve the lives of many but it's certainly enough to do it for a few.
You can still run a default/master server, providing a server executable doesn't mean it is the only way to play the game. But if the game stops being popular in the future it doesn't kill the entire game.
Pretty over-the-top example if you ask me
It's possible to use Kaspersky Free but block the apps internet connection*

Network Settings > uncheck Traffic processing

Network Settings > Do not scan encrypted connections

Once in a while, allow internet connection, do a quick database update then immediately block the internet connection again.

* Firewall (router or software).
Agreed. I was going to say that I bet this a myth that endures only because it is repeated endlessly. I've never seen data to prove it and my anecdotal experience is the opposite.
GPT-3 can run code