skysight-inc/HackerNews huggingface dataset:
Another quote about the development following the global financial crisis GFC.

> Once the financial boom turned to bust, they naturally pulled out all the stops to support the economy, just as public finances came under serious strain. Central banks’ concerted efforts arguably avoided a repeat of the Great Depression. Moreover, their subsequent, very accommodative stance helped lay the basis for the global economy’s recovery while contributing to the gradual convergence of inflation towards objectives. Still, with the burden of the recovery largely on central banks’ shoulders, the extraordinary and protracted low interest rates, combined with the unprecedentedly large balance sheets, have been one factor behind the legacy of higher debt that shapes the road ahead. This is deeply ironic: high debt was a key cause of the GFC but, since then, debt has continued to rise globally.
Hubble Detects Farthest Star Ever Seen
It picks choices where the winner is about 10 times the weight of the loser. Very simple. Still trying to come up with something better that increases difficulty over time.
> Even if you can answer every question I put up here, would you mind publishing your phone number so everyone in HN can give you a call every time something isn't covered here? By the way, what are your credentials? Why should I trust your assertion that this is a solved problem

Good questions. I have no credibility and I don't pretend to have it. Ask you nutritionist. I just read the official nutrition advises carefully. And you should too. Also, check the referenced research if you can.

> or suggest this information isn't regularly changing.

It doesn't for quite some time already. Also all changes have been explained. See for example: https://news.ycombinator.com/item?id=12480733.

> * "Limit"?

You probably don't have to avoid it like a poison. The less, the better, I guess.

> * "Sugary drinks?"

Every drink which contains a lot of sugar. For example, Cola and juice both have about 10 grams/100 ml of sugar. This is 2 table spoons per 200 ml. Compare to the recommended daily sugar intake.

> * "One or two servings" that's literally doubling the serving count. How can that be, where consuming twice as many of something is as fine as consuming half?

It must depend on how much calories you generally need per day. People are very different. If you need a personal advice, ask a nutritionist.

> * Juices should be limited but my fruit and veg intake per meal should be 50%, that is contradictory information, unless you're trying to suggest blending things reduces its nutritional value.

I don't see any contradiction here. Fruits contain not just sugar but also fiber which is necessary for a good health. See also: https://www.nhs.uk/live-well/eat-well/5-a-day/why-5-a-day/.

> unless you're trying to suggest blending things reduces its nutritional value.

This is not how I understand it. See also recipes from the HSPH.

> * Is it better to starve than to violate these rules?

In general, they recommend a diet with a great variety, so it's a "no".

> What, specifically, are the consequences of violating these rules?

There is a lot of info on that website. If you read that, you will see, e.g., that processed red meat increases the risk of a cancer.
Depends a lot on how many Spring apps out there have the prereqs to be vulnerable. The widespread nature of Log4Shell is what made it “worse” than other RCE vulns. I don’t have a sense of how many vulnerable instances of this one might be out there but the number could be enormous.
Correct. It is responsive to “no one should be jailed for words” not to “this guy should/shouldn’t be jailed for his specific words”.
The lawsuit, it seems like a grey area. Report on something but then further facts come out and your story is literally outright false. You've been misled and abused by your source. I guess that's the job of a journalist to ensure what you are publishing is true.

Flipside, there's a term named "Krebbed" for a reason. https://www.urbandictionary.com/define.php?term=krebbed

Krebs has a history of poor journalism to say the least. Frankly, it's best to ignore Krebs. I stopped reading him years ago.

https://itwire.com/business-it-news/security/new-york-times-...

https://itwire.com/business-it-news/security/infosec-researc...

https://itwire.com/business-it-news/security/ex-wp-man-krebs...

3 separate instances where Krebs got it wrong. Seems to happen a little too often.

Seems clear to me, Ubiquiti got Krebbed.
Ask HN: What are you switching to from G Suite legacy free tier?
Google Apps Engine, later G Suite, later Google Workspace, used to have a free tier where you could have a custom domain connected to Google hosted services such as email, drive, calendar, etc, for free.

Google have nudged us for years, prompting an upgrade to one of their paid tiers but now they are sunsetting the free tier for good.

My question is: what are you switching to, what does it cost and how many users do you have?

I'm looking at ProtonMail, Tutanota, Outlook, iCloud and just staying at Google. We have to switch or pay within a month so I'm curious to see if you've landed on anything and if so, why.
> Unlike most other package managers files, Go modules don’t have a separate list of constraints and a lock file pinning specific versions.

The weird thing about the Go devs is there is always that little bit of elitism under the surface that I detect in their writing (whether it be colors in the playground, the GC, etc). I spent years writing Go and have now moved to Rust. What I find odd is the Rust team has done (IMO) one of the greater achievements in PL history and yet they seem to not have this elitism thing going on (or maybe I just haven't noticed). Go on the other hand, IMO, made some "interesting" language choices (like keeping null) and they seem to want to be celebrated for it and claim their achievements as new and novel.

EDIT: To clarify, I'm talking about the core Go devs - those that work on stdlib and the compiler
Ruckus is not bad, but not great either. I've got a ICX 7150-C12P that worked fine until the PoE power supply failed just a few months out of warranty. I'm glad that I did not pay them for the "license" to use the SFP ports (which every other manufacturer just enables by default).

I do like their WAPs. I've got a couple of RS510 WAPs that do a great job, but initially they had some noticeable performance problems for almost a year until fixed by a firmware update.
> The increasing demand for cryptocurrency mining in Lebanon has prompted many shops across the country to accept payments in USDT

I don’t blame you for missing the part of the post that actually addresses which cryptocurrency they’re resorting to, since it’s literally at the end.

But, you do realise that USDT is a stable pegged (with super shaky/shady backing) to the USD, right?
This is why physics should be taught along with math.

They went out of their way to explain how first-order linearity was so fundamentally important for all sorts of non-linear forces.
I don't know anything about this topic, or who any of these people are.

But I do know that often those seeking 'inspiration' will become so enamored with their own insights that they often fail to execute on what they have found. Instead they do everything they can to maintain that feeling of enlightenment at the expense of truly realizing the meaning of their insight.

This isn't specific to drug use, it's not specific to software development or any set of tasks, it is simply a common theme in human behavior I have anecdotally noticed in myself and others over the years.

So based on that...

What I think what Alan Watts intends to say is that if you don't *do* anything concrete with your inspiration then you're simply sitting around on the phone waiting for the next dopamine hit from your 'next great insight' about [literally anything].

In my opinion I don't think this is necessarily a bad thing, just that Alan Watts was likely a more objective driven person than his peers, whom sought to live in the experience rather than use it to further some abstract objectives.
Sounds great as long as you either put work into multi OS compatibility or stick to the same OS.

Depending on your situation that sounds like you have a good solution that's working and you're happy with.
Devil's advocate: USDT might not have FDIC insurance, but there are stablecoins that do
I kind of agree, but it seems crypto is only a hedge against incompetent/corrupt government insofar as

1. It can act as an actual alternative currency and
2. Those governments do not adopt it their citizens' alternative currencies themselves or choose to tax it

It seems like in this story the actual alternative currency the Lebanese are "foreign currencies", and crypto is seen as a potentially profitable speculation in the midst of an economic downturn.

The extent to which cryptocurrencies actually server as currencies, and therefore actually hedge against national currencies, is inversely proportional to the extent to which they are used as a speculative asset class. People have a really low tolerance for price volatility, and if the value of currency swings up and down it can make it really stressful to participate in an economy.
> Someone's fears or beliefs are labeled "conspiracy" if

the labeler doesn't understand the difference between conspiracy and conspiracy theory.
Why is the "fair price" not significantly higher than it was 2 months ago, for short-dated futures? Supply is temporarily disrupted, all input costs are significantly higher, and it's a very inelastic market because elasticity comes from mass starvation. You can say the move was an overreaction - but it's pricing in many unknowns, the probability of which are certainly not zero. What if Russia banned all grain exports, for example?
Are you guys aware of Nix, both the language and the build system? Nix at its core is a build system, but the community pushed the boundary of what a "build" means so hard, now Nix could also be used as one definition language for everything in a CI/CD pipeline (also with a canonical collection of "building blocks" in nixpkgs), from (reproducibly) building artifacts to running automated testing/integrating tasks to automatically deliver the artifacts to whatever the "infrastructure" is. After all in a very general sense the whole CI/CD pipeline could be seen as just another build artifact, which I think resonates a lot with your idea.
How do you think your project and Nix would overlap and/or (or both) complement each other?
About which the airline said "(we are) reviewing this case in detail and would like to state that our IT processes are completely robust."
Words can be extremely damaging. The US has libel and slander laws. What's so different about hate speech? It's harmful, almost as harmful as some forms of physical abuse.

Don't forget that most domestic abuse and physical abuse starts as verbal abuse, so criminalising that is not unreasonable
This is about CVE-2022-22965. Maybe I’ll edit the title to reflect that.
These kinds of fantastic hackery are the reason I consistently come back to HN. This is an absolutely fascinating little piece of kit.

It begs the question to as if there would be any actual utility to a display this small with it having to be directly attached to the laptop.

Smartwatches come to mind, but tethered smartwatch-size displays...hmm...maybe add a wi-fi module and we've got something?
Just to argue against myself, I do think that if enough interviewers interview a candidate, you will get an aggregate score that will give you a pretty good sense of how well that candidate is likely to do on other interviews, and I have found that candidates that do well on these interviews tend to make good employees, although that's based only on the fact that everybody I work with has passed one of these interviews and they've mostly been pretty good employees. I suspect a lot of people who fail these interviews would also make pretty good employees, but I'll never know.
GUSD isn't FDIC insured, unless their homepage has it wrong. It's the dollar accounts in Gemini's name that are FDIC insured.

So if there's an exploit where GUSD can be stolen/duplicated, or if Gemini defaults the insurance is meaningless.

What it means is that if a bank where Gemini holds an account defaults, the government will pay Gemini up to $250k.
I've been told it can be hard to know if vendor-built apps in your environment are using Spring. What are some apps built on this platform?
Is layering always more secure? Layering may create more complexity in the system overall (usually bad for security) and spreads efforts thinner if you are maintaining both sandboxes. What's the difference between good and bad layering?
Mac fresh setup for web-dev
They all mostly ask the same sets of questions, too. If you get turned down by one interviewer, just keep track of what questions they asked, go look up the answers to those questions and you'll most likely be asked the same question by the next interviewer.
It's great that Intel is adding a mode where indirect branches must land on specially encoded no-ops. Ideally, they'd also provide special encodings for "push rbp" and "sub rsp, x" (for the -fomit-frame-pointer case) to cover the two most common first instructions in function prologues that could also be indirect branch targets.

Edit: actually, it would be best if indirect branches had to land on "special-nop", "push rbp" or "sub rsp, x" and future compilers needed to emit the new encodings for "special-push rbp" and "special-sub rsp, x" in the very few places they aren't used in function prologues. This would be better from a code density perspective, and might even allow one to turn the feature on without recompiling code and not have many applications break. I think backward compatibility would mostly depend on details of common jump table implementations (mostly C/C++ switch statements in cases where the density is such that compilers don't emit trees of conditional branches). I'm pretty sure the few users of GCC's "computed goto" (most notably CPython) would still need special no-ops at the start of each label.

Edit 2: is anyone aware of any common use of return where the target of the return isn't immediately after a call instruction? Return-oriented-programming for exploits is the main use case I'm aware of for returning to an address that isn't immediately after a call instruction. Unfortunately, checking this criterion in cases where the previous instruction is on another cache line would often cause extra cache misses.
Are you using it on Apple Silicon? If so, then Rosetta is the reason why Excel are not performant on macOS. Office365 for macOS are using x86 code at the moment, Office team is rewriting Excel to work on Apple Silicon/ARM. They have a preview build out, I'm not sure when they will release the stable version. I recalled they said it should be release in Spring or Summer.

If you have Excel running, open the Activity Monitor and find the app in the list. Then look at "Kind" column, you will see "Intel" listed. So that's why Office365 are sluggish on it.
Send Me To Heaven (mobile app)
Okay, here’s an SDK I use. It’s 16GB.

https://docs.microsoft.com/en-us/windows-hardware/drivers/do...

Show me how to use this with GitHub actions, if it’s not too hard.
A friend of mine was working as a db developer for a local hospital in a small port town when the local bookstore announced it was closing shop. He decided to buy it and now he runs it full-time. It's been several years and as far as I know the business is doing well but perhaps that was because the bookstore was already established.
Whether or not this turns out to have the same blast radius and Log4Shell, it has certainly captured a lot of attention. Lots and lots of folks using Tomcat...
What I was suggesting wasn't asking the account holder, but asking the bank. With a little training, the call center reps should be able to handle adding together the last few digits of a card number.

I agree that asking account holders for this would be confusing, but since the bank is the one calling in this case it makes sense that the caller (bank) should provide information first.

Of course, it appears that in this guy's case, not even this would have worked, since they apparently had his full card number.
> for minimal effort/outlay.

Could you explain this part? I've always seen internet publicity the same as traditional, its a pay to play game and rich people have it locked up.
> our best and brightest

interviewing.io's best and brightest.
So the entire apparatus is coming into existence in order to essentially buy/sell goods in USD. And the reason this cannot be done directly is because of financial/legal restrictions on the Lebanese populace? Just trying to understand the value-add for the people on the ground using it in everyday life.
My story of becoming a full-time content creator
Why would an expert on scam prevention answer the phone?
Containers offer a lot of advantages, portability, IaC, OS abstraction, common predictable environments, etc.

I personally like them a lot but it's definitely not the only way to do things.
I'm not claiming that doing what Shulgin did was harmless. I was replying to an anecdote of one with a comparable anecdote of one.

With this kind of super-heavy use of novel psychoactive substances, there really can never be anything but anecdotes. We'll never see double-blind studies of large groups of people taking all the substances that the Shulgins took over their lifetimes, so anecdotes are all we have.
I'm friends with at least one Flynn person and I'm always wondering what they'd think of our weird architecture. There's a lot of interesting code in that repo!
> A reasonable persons understands you are: XX (Female), XY (Male) [...]

A reasonable person is also not applying a chromosomal test to determine gender. Instead, the reasonable person identifies gender by appearance, incorporating anatomical features, grooming choices, and social paraphernalia like wardrobe.

In most people, chromosomal, hormonal, anatomical, and social genders conform. The "reasonable person" heuristic is therefore correct in the majority of cases. However, the risks are borne disproportionately by those for whom there is nonconformance.

A gender-neutral option on identification provides at minimum a signal that the a binary (social) gender marker is not helpful for identification of the bearer. That's rights-enhancing, with no cost to the gender-conforming majority.
Yes, this attack had multiple stages. First stage is to get something running, and to do that they do use a memory bug that Rust would prevent. The second stage is the sandbox escape that the post describes which is done with only logic bugs, so that would still be vunerable if written in Rust.

While rewritting the world is not possible, all these attacks show that definitely new systems should probably not be written in memory unsafe languages.
And the implication is the 'quality' of engineers at the companies is actually reversed - the top performers at Dropbox are struggling and leaving while the under performers at FANG are struggling and leaving.
> SPAs incur complexity that simply doesn't exist with traditional server-based websites: search engine optimization, browser history management, web analytics, first page load time, etc. That complexity

Content-focused media agency that needs SEO doesn’t want an SPA. More news at 11.
I think you’re confusing two different senses of “vector”, there is the contiguous series of items “vector” data structure that both C++ and Rust have in their standard libraries that’s used in the code example, and there’s “vectorizing” which is an optimization to use things like SIMD to operate on multiple things at the same time.
> FWIW: Anytime you see a shocking datapoint bouncing around in the news, it got there because one person actually looked at the data ONE TIME.

> But there's no guarantee OP actually knew what it means! And the folks repeating it definitely don't know. : /

I wish everyone took this to heart.
I love OptiSigns. I used it when I was a sysadmin and still use it at home for my homelab. Support has been great, they do a monthly newsletter and constantly add features. More importantly I've never had any weird downtime or deauth issues over a year since I've started using it. They handle mixing local and internet assets very well which allows me to make changes with PRTG dashboards and random >file.html scripts I run. They even have emergency/flash messaging for quick communication and a home app for employees who are remote.

I am not a paid endorser, just love the software.
I took a guess based on the context and linked article

SRS = Spaced Repetition Studying

But I think I'm wrong. Given some web searching, I think it means a "spaced repetition system." Which means, you can't use SRS or SRSing as a verb.
Sure, it's 1.5% instead of 2.5% (Florida). The average house price is $800k vs $200k... do the math.

Property tax is much more in total, and percentage of household income in California than Florida.
You don't entirely 'hang up'. You -- as Alan Watts said -- mature and deepen that communication with a different form of communication: meditation. It's like hanging up the phone and meeting with your teacher in person, not hanging up and never talking to them again.

You don't need psychoactive drugs to have deep, earth-shattering mystical experiences, and I don't understand why one would want to rely on drugs to get them.
Is it mostly automobiles? Does it get better outside the cities?
> I have no credibility and I don't pretend to have.

And yet you're giving nutritional advice on Hacker News to complete strangers. Maybe remember your lack of credibility next time you claim a topic is a solved problem.
The evidence is in the news everyday. Financial institutions, companies and individuals are all diversifying into crypto. It is a new asset class, and yes a volatile one.
Are the CryptoPunks dying? The data tells an interesting story
> applicants who just can't do the job

While that definitely matches my observations, the current interview grind:

a) filters out people who can do the job too

and

b) somehow also manages not to filter out people who can't, either.