skysight-inc/HackerNews huggingface dataset:
You run a script that has obfuscated code. The script is "broken" and has an easy problem for you to identify for me. You feel good about finding my amateur mistake.

In the background the script has dropped my public ssh key either into your authorized_keys if you have sshd running, or into a random location if you do not and launches sshd as you in the background if it is not running. It can be on a high random port listening on 127.0.0.1, this is fine.

The script also backgrounds an outbound connection to a machine I control enabling a gateway port that I can use to SSH back to your machine even if you are behind a firewall. It will tell me if you have ssh listening on 22 or on the loopback and what port. My tunneled ssh connection will utilize that ssh key I appended or dropped. I am not on your machine as you. That back-grounded connection can also be added to your .[a-z]* shell login files based on the shell you are using at the time so that if you reboot the tunnel is recreated.

Now I am on your machine as you and I can grab your private keys, ride along your existing SSH channels that you have authenticated with your 2FA/MFA provider assuming the hosts you connect to leave multiplexing enabled, connect to your browser and watch the console http session data and so much more.

This scenario will technically work on most peoples setup. About 10% of people will run the script. No hacker tools or malware required, just an obfuscated script. This will never be detected by anti-malware software. The script language will depend on what I think your organization uses. It could be python, perl, ruby, go, java, bash, anything really.

The only technical mitigating control would be to limit where the person can make an outbound connection. i.e. pre-approve TCP destinations. If a laptop or workstation can SSH to a random cloud provider then the script will work.
Unix Time should be an implementation detail. ISO-8601 is IMO the preferred format for APIs.
To add a reference:

Suburbia is Subsidized: Here's the Math -> https://www.youtube.com/watch?v=7Nw6qyyrTeI

Essentially urban sprawl/suburbia/single family homes cost more for the city (road upkeep, water/gas pipes, etc.) than what they contribute in taxes, so many cities are in a positive feedback loop of building more houses to get quick money to do maintenance on the previous rounds of growth.
Can you cite any evidence of this?
Presumably AGPLv3 is why Grafana would rather develop this than Cortex?
That's a very naive statement. In machine learning, for example, there's a lot of scenarios where performance isn't critical but due to the huge quantities of data you may need to process (especially during feature engineering or selection), micro optimisations like this can result in huge improvements over millions of iterations.

Not to mention Python has Cython and numba's JIT which can provide great performance when needed.
There is no list. It's not possible to say, "I know these 5 things, and they'll make me more productive." Feynman solved all his physics problems with Calculus. That's it. One tool. Part of is is knowing your tools. The other part is being able to see a problem, break it down, and understand how to manipulate it into something that's attainable. That's it.

I worked with this guy Pat several years ago, and he was on a different level than the rest of us. PhD Mathematics etc. I remember the day that I understood what made him different than me. We were standing in the hallway to our suite in the office building, and the first time visiting he says "This will be easy to remember. Lots of 3's." I looked at him for a moment puzzling his response. He says, "2745, lots of 3s." Pat was better than me at programming, because he saw things in a fundamentally different way than I did. He did things like that all the time. He wasn't better because he knew C++ or Java more than I did. He was better, because he would approach a problem and find a shortcut, or an optimization that the rest of us just didn't see. If something just seemed off even if he didn't know the technology, he could go figure it out, because his grasp of what to look for was much greater. That is what makes someone 10x better.
So low earners are allowed to eat basic food, but pay astronomical taxes for any luxuries in their life. Which you and I could easily afford.
> I have no reason to believe they ever stopped

They certainly haven't given us one.
Yes! The usual corporate websites are worthless and don't present information. Every non-profit, club, or community provides a humble but clear website with the required information and menu!
Look at that bloated visual rich websites:

www.ibm.com
www.siemens.de
www.salesforce.com

What is wrong? The "About" must be at the top, the things you provide must be linked with some words at the top or left. They put their images, much Java-Script, and useless stuff across the homepage.

The English wording? A minor problem. I'm thankful that Andrew explains what is wrong and how to fix it! As a German, I'm annoyed by Germans who use every chance to tell other people that their English is much better (than mine).
App Review: AI Video Tool Synthesia Studio
> having Facebook/Meta experience on your resume starts hurting you against others who don't

Depends if one is a React, Folly, BOLT, OCaml, GHC, clang contributor or not.
I think classical psychedelics are among the safest drugs, but honestly, how is that not "too much acid"? If they needed medical care, that implies that if they hadn't received that care they would not have been perfectly fine. Yes, it was an accident caused by irresponsible use, but let's not mince words. The point where a dose is "too much" should be (at the most) the point where you need medical attention, not the point where you suffer some permanent damage or death.
> it took them over 3 months to even get any credentials for VPN, let alone repositories.

What you're saying is, you can just join, get paid, and do nothing? Where do I sign up?
Not sure how they plan to offer competitive prices.

"Electricity prices in Germany ranked amongst highest globally" (2021):

https://www.iamexpat.de/expat-info/german-expat-news/electri...
You have to find the "Download" button and click it, it's very non-obvious :< The entire page seems to be designed to funnel you into signing up for their paid service, which makes sense, but still doesn't feel great...
> he is on some personal vendetta against that company

I'm on a personal vendetta against any company that abuses its employees. Lidl, Amazon, and others besides, consider me an 'equal opportunity employer' when it comes to abusive employers.

Also, your comment is well outside the HN guidelines.
I think GP's point was that this is a situation where ethics and business value align (better origin verification is a selling point for a network) and yet bafflingly carriers aren't making the right choice--by either estimation of "right".
> Frankly, this is an awful idea. Investment in real estate is basically the best way for the middle class to use their savings to build wealth and long-term financial stability.

Yeah, at the expense of everyone lower on the financial ladder than they are. Personally, I'd be ok with it being straight up illegal to own a residence you do not live in. A bunch of rich people might cry about it, but compared to the suffering of people living on the street or just struggling to pay outrageously inflated cost of basic shelter, I don't give a shit.
Almost like all the "isms" are total garbage. The best route forward would be to examine all the "isms", find the parts of each that can be brought together to make a new path forward. Unabashed capitalism is a scourge, just like any other "ism" if left unchecked.
I got a similar feeling from the documentary. Some of those songs seem so perfect, as if they were born that way - but the actual creative process was messy, with various wrong turns it could have taken, fumbling around in the unknown.

I also feel like I understand better how miracles like Sgt. Pepper happened - not by careful planning or having a clear design at the start, but taking the time, day after day, working on ideas, noodling and joking around, sometimes arguing with each other, sometimes discovering happy accidents.. And every take is different!
Why isn't my time zone highlighted on the world map? (2003)
> And please stop with the peacocking of how good of a person you are by trying to show off how you reach out to these people and all the protests you engaged in. It's just gross.

FWIW, such anecdotes help me understand the writer and where they're coming from. I don't think bringing a gun for self-defense and distributing some beer to a bunch of kids to figure out wtf is going on is "peacocking of how good of a person you are", it's just being a human being. Working with what you have.
Apple don't want to let people get used to the internals and spiritually like to enforce a very clear us versus them philosophy when it comes to their new toys. They open source things they want other people to standardize around but if it's their new toy then its usually closed.
MathLive
> much of NYC subway is still diesel for various reasons

NYC subway still uses cloth bathed in oil to insulate some electrical circuits.
Why do people even think that we can have a civilization by only making morally-sound decisions?

These types of experiments were reasoned to benefit the collective at the cost of the few. Which might be a decision one would make, if the factor to optimize for is the long term prosperity of the collective. Morality is relative, individualized, ambiguous, and always changing. Concluding that morality is not a stable pillar for civilization.

So why are we sitting here asking the government to be accountable to our morality?

I think morality is trending.

I think what happened is the government started to get good at Public Relations. Morality has become a reason fed to us for justification of legislation that somehow takes something from us. The irony is, government decisions cannot be biased by morality in principle.
I wonder though how representative Get Back was for a Beatles recording session. The band was clearly imploding and in contrast to prior albums, they didn't have a lot of songs prepared yet. There are the famous Esher demos that were recorded before The White Album. And even though they are acoustic, a lot of songs seem to be worked out already. Of course, they've put all kinds of extra touches on them in the studio, but they'd work pretty well for "The White Album - Unplugged".

I was surprised how even under the circumstances stuff comes together pretty quickly. Like how McCartney makes up the main melody of Get Back in seconds while jamming, as if he is just picking it out of the air (assuming that it wasn't staged for the camera). Then once Lennon puts his mind to the sessions again, there is clearly a very strong chemistry between Lennon and McCartney where they are just having fun and tweaking and evolving the songs at a rapid pace.
How does this stack up with https://github.com/thanos-io/thanos, which I've used to pretty good success.

The only criticism I have of Thanos though was the amount of moving pieces to maintain.
It's the same problem: the extraction of fossil fuels. We have plastics because they're close to free as a byproduct of that process and the ocean is acidifying mostly because of dissolved atmospheric CO2.
It's almost like there's some truth to the "Trying to make dozens of shitty pots actually produces better pots than trying to make a single perfect pot".

Iteration eats inspiration for breakfast.

https://austinkleon.com/2020/12/10/quantity-leads-to-quality...
It'll be nice when the serf mentality of finding meaning in your job is finally gone from the world.
But if you write it on one line, the capitalization of We is definitely wrong.

However you can always tell your correspondent is German by their capitalization of second-person pronouns! Also the awkward use of "kind regards" because they can sense that "with friendly greetings" doesn't sound right.

"Dear Ms. Smith, we would like to inform You that Your cloud subscription will soon be expiring. Please send Your payment by registered letter to..... Kind Regards, Dieter" ;-)
I disagree, the PC vs Mac is arguably not positive PR towards the PC industry but was very popular back when it aired. Even now Samsung sometimes poke fun at Apple mistakes. I would argue micro aggressive advertising is negative PR just with lipstick on it.
Yes, I tried Setapp but they turned Lunar down saying they need to:

balance the number of applications on the platform with the number of paying subscribers to ensure revenue growth

Then proceeded to add a competitor of Lunar called DisplayBuddy ¯\_(ツ)_/¯

I'll ponder on your advice. It's true I mostly heard the negative side because the happy users don't have a reason to talk about their expectations.
½ rack (22 U)
Traffic: 2TB (+€0,05 GB Extra)
Term: 36 months

from 299.00€/month

Very impressive, yeah. 2 TB of traffic for ~22 servers for 300 EUR and they lock-in you for 36 months of contract. I think I'd better opt-out.
Yeah, it sucks that they are trying to milk it.
Bullseye. The company I work for has a large home office, plus a satellite office tower in the same city. Plus a satellite office in a second city. So even before COVID, we were working with users remotely. We own all three buildings and land, and have always been proud of that for some reason. Very emotionally invested in the Home office.

Obviously COVID changed all that and exposed the opposition to remote work as just obstructionist. Our company was 100% remote for over two years, and both sales and profits have never been higher. Yet some of management really just can't deal with it now. Ironically, the IT mgmt is the one most opposed to remote work and barely signed off on a hybrid model.

I'm in the same age cohort as most of our executives, and though your comment may seem ageist, I think it's spot on. These VPs and managers love to schmooze, have $$ lunches, golf with vendors etc. Their entire work life is designed around schmoozing and building their little networks with vendors so they have a safe landing spot if things go bad in their careers.

You might say this is the same as ICs who build networks, but I don't get paid to network. I don't recommend technologies based on who I golf with.

Mgmt needs to realize they can't unring this bell, and will continue to lose effective performers who (especially in IT) have more options since COVID.
“ Chances are, every time you used your credit card, filled a prescription or pumped gasoline, a calculus formula was used to calculate it.”

https://study.com/academy/lesson/calculus-in-the-real-world....
Strictly speaking, this is not Lidl (chain of grocery stores). Lidl is owned by the same parent company - Schwarz Gruppe, which has a pretty big digital branch with several companies focusing on different products (e-commerce, cloud infrastructure etc). StackIt is one of those companies.
It is good to see one more local competitor to AWS backed by the largest retailer in Europe, who also uses those solutions for their own e-commerce projects.
Is YC turning into a kind of fighting club?
People with trauma and mood disorders are by definition in constant contact with what is bogging them down.
Exactly I'm living proof that seniority comes with the ability to spend more time on problems to understand all the details before committing stuff which no idea how that works.
> it's also a cultural thing

Good places to see this are New York and New Orleans.

New Orleans' French and Spanish quarters have residences on top of business concerns. We Americans, on the other hand, built separate residential and commercial neighborhoods with a train connecting the two.

Likewise for Manhattan. Dutch-settled areas have homes on top of shops. This pattern continues for a bit under the British, but converts to distinct residential and commercial streets before going whole hog on the pattern with non-commercial neighborhoods.
Single-page list of 149 subprojects, http://www.christophersebela.com/tumblr/a-list-of-mkultra-su...

FOIA documents, requested in 1990s, released in 2004 & 2018, https://www.theblackvault.com/documentarchive/cia-mkultra-co...

HN ranking for this story (demoted from #5 to #100), https://hnrankings.info/30853793/

If citizens are paying for psy-war offensive research, can they also pay and benefit from psy-war defensive research?
I've been thinking about this idea a lot recently. I'm decently new to the big-tech-co space, but it does seem like a huge amount of resourcing goes into design and defense of projects. I wonder what y'all think about someone doing a timeboxed MVP (a sprint or less?) as a way of susing out design, and THEN getting reviewers/etc?

Obviously you have to take security into large consideration when doing things like this - but this is what qa/sandbox environments are for.
> having Facebook/Meta experience on your resume starts hurting you against others who don't

It already does. Meta is reportedly paying more to hire talent because of their reputation.[0]

[0] https://www.businessinsider.com/facebook-pays-brand-tax-hire...
Hi. I'm Marco, I work at Grafana Labs and I'm a Grafana Mimir maintainer. We just published a couple of blog posts about the project, including more details on your question: https://grafana.com/blog/2022/03/30/announcing-grafana-mimir... and https://grafana.com/blog/2022/03/30/qa-with-our-ceo-about-gr...
It's worth mentioning that I just logged in to my UniFi device and it did not have any obvious way to convert to a strictly-local account.

Do you have a link with instructions to do so?
How is this even legal? This tenant screening report could easily allow someone to discriminate certain individuals. I'm assuming when you fill out a rental application its in the fine print but who or what regulates what data the use?
> when the serf mentality of finding meaning in your job is finally gone from the world

Emperors, scientists and other productive members of the elite have done this since age immemorial. If anything, the average person finding their work meaningful (versus simply toil) is a recent phenomenon.
When you see a Meta candidate you know

* They went through one of the hardest interview loops in the industry

* They went through one of the hardest promotion ladders in the industry

* They solve all problems at huge scale out of the box

* If you aren't paying top of market and they're still interested, they're most likely financially comfortable from their years at Meta and won't be jumping ship every 18 months for a 20% raise

I'd say that's pretty attractive as a hiring manager
The CSS cascade, leveraged properly, is perfectly compatible with the principle of favoring composition over inheritance. See https://every-layout.dev/rudiments/composition/

A good approach that scales will use the cascade instead of fighting it. That means global rules and carefully-applied exceptions, with rules' specificity inversely proportional to their reach:

> Sensible CSS architecture has “reach” (how many elements are affected) inversely proportional to specificity (how complex the selectors are). This was formalized by Harry Roberts as ITCSS, with IT standing for Inverted Triangle.
^ https://every-layout.dev/rudiments/global-and-local-styling/
Because machine learning accelerators are, in the broadest sense, not "done" and rapidly evolving every year. Exposing too many details of the underlying architecture is a prime way to ossify your design, making it impossible to change, and as a result you will fall behind. It is possible the Neural Engine of 2022 will look very different to the one of 2025, as far as the specifics of the design, opcode set, etc all go.

One of the earliest lessons along this line was Itanium. Itanium exposing so much of the underlying architecture as a binary format and binary ABI made evolution of the design extremely difficult later on, even if you could have magically solved all the compiler problems back in 2000. Most machine learning accelerators are some combination of a VLIW and/or systolic array design. Most VLIW designers have learned that exposing the raw instruction pipeline to your users is a bad idea not because it's impossibly difficult to use (compilers do in fact keep getting better), but because it makes change impossible later on. This is also why we got rid of delay slots in scalar ISAs, by the way; yes they are annoying but they also expose too much of the implementation pipeline, which is the much bigger issue.

Many machine learning companies take similar approaches where you can only use high-level frameworks like Tensorflow to interact with the accelerator. This isn't something from Apple's playbook, it's common sense once you begin to design these things. In the case of Other Corporations, there's also the benefit that it helps keep competitors away from their design secrets, but mostly it's for the same reason: exposing too much of the implementation details makes evolution and support extremely difficult.

It sounds crass but my bet is that if Apple exposed the internal details of the ANE and later changed it (which they will, 100% it is not "done") the only "outcome" would be a bunch of rageposting on internet forums like this one. Something like: "DAE Apple mothershitting STUPID for breaking backwards compatibility? This choice has caused US TO SUFFER, all because of their BAD ENGINEERING! If I was responsible I would have already open sourced macOS and designed 10 completely open source ML accelerators and named them all 'Linus "Freakin Epic" Torvalds #1-10' where you could program them directly with 1s and 0s and have backwards compatibility for 500 years, but people are SHEEP and so apple doesn't LET US!" This will be posted by a bunch of people who compiled "Hello world" for it one time six months ago and then are mad it doesn't "work" anymore on a computer they do not yet own.

> Could it be that using the ANE in the wrong way overheats the M1?

No.
The 'yellow peril' aspect of it was certainly disgusting.
One of the ways he got caught was a fuckup on his part. He claimed a really high speed run of Through the Fire and Flames, and ended up taking the video down claiming copyright. This ended up being bunk, because someone saved the video while it was up and it turned out that he spliced in such a way as to "lose" something like 2,000 points mid-song. Guitar Hero has never had any mechanic to allow one to lose points they had already gained (unless it did in the earliest GH1 development days). The only thing even remotely close to that is the Big Rock Endings from the Rock Band series, where you have a series of freeform lanes to do whatever you want in order to build up a bonus, which is subsequently awarded to your actual score when you hit the final few gems after the BRE. But, those points aren't tallied to your total score until you actually hit the final gems. The score discrepancy in Schmooey's TTFAF video was a decrease in the actual score, as Clone Hero doesn't support Rock Band style BREs.

It is literally impossible to have that happen legitimately, and that's why he took the video down, because it essentially was a key component of what busted him (and was also featured in the Jobst documentary).
That's NES though, he doesn't seem to have his GBC records uploaded. I actually can't find any recordings of GBC records.

But yeah, watching tetris pros is amazing. The "classic" is of course 2018's Jonas Neubauer vs. Joseph Saelee NES Tetris world championship match:

https://www.youtube.com/watch?v=L_UPHsGR6fM

If you've never seen it before, you'd probably don't think you'd enjoy watching twenty minutes of two guys playing tetris. You'd be wrong.
Two years into the pandemic, we still have executives who can't be bothered to learn something as simple as how to mute their microphones during a Teams meeting. I think it's a subconscious reaction to the idea of them being muted. In a normal meeting, no one would ever think to mute them since they're so high on the food chain.