skysight-inc/HackerNews huggingface dataset:
I concur with others that this is the "new normal."
My husband is a cybersecurity professional. He says that in the past few years, hacking for personal information has gotten to be such a "normalized" business that hackers now purchase "off the shelf" hacking software that even comes with customer service support tickets! So it's opened up new opportunities for those with no programming experience. You can see how out of control this could get, and quickly.

What steps do my husband and I take, considering the risks that our personal information is probably already "out there", maybe dozens of times? The same as you - freezing credit at all 3 bureaus, using 2FA, using unique, hard-to-guess passwords that are updated on the regular, and being careful about what you send through gmail. I use mega.co.nz to store all personal documents, since that cloud service has encryption. So far, so good. My identity has not been stolen nor my bank or credit hacked.
Gtk+ was originally picked up to face Qt back in the Linux pre-historic days.

We all know how well those community contributions turned out.
That's a clever way of looking at it. Did you come up with it yourself? If not, I wonder what you think it says about a person that they were exposed to this idea before they interviewed with you, versus after.
You mean self importance?
Hmm, a SCP shell script on my laptop, prompting my SSH key's password and deploying the site to the target machine?

Or a constantly-updating behemoth, running as root, installing packages from yet another unauditable repository chain?
I'd think it probably just splits to two groups: 1) IT is critical, therefore we'll use modern tech that makes it more reliable or better, VS 2) Meh, It Works™, so why change it? We've got better things to do than figure out the latest pointless tech...(especially the case at smaller places, where there's less budget for the invisible backend machinery)
This is the fundamental problem with hybrid. It's the worst of both worlds, as it forces a regression to the most-accessible, which will always be video calls.

I think a lot of the forced-hybrid environments are a result of companies waiting for their commercial leases to die.

That said, I remember sitting on a lot of conference calls in the office pre-pandemmy, so... isn't video better?
Public school is available pretty much everywhere in the US, but it is not necessarily very high quality depending on demographics primarily, which is deeply unfortunate. Most "normal" families cannot afford to go anywhere else.
There are absolutely former big3 folks working in the current administration, I for a fact know of two.
Hey HN, we are happy to announce Modus, a language for building Docker/OCI container images. Modus uses logic programming to express interactions among build parameters, specify complex build workflows, automatically parallelise and cache builds, help to reduce image size, and simplify maintenance. Modus is distributed under AGPL-3.0. The current version, 0.1, is a preview release; it is not recommended for production use. Feedback is welcome!
When you have the right mental model, this is an appropriate approach.

Not every mental model is correct, either locally to a domain or globally in all cases.

1 < 2, in almost all cases except for small Z_{0,1} or similar type cases where mod functions modify the space to something exotic or comparator functions are defined far out of the typical. If you think there is a case for 2 < 1, and you aren't appealing to something exotic, you have the wrong approach.
Speed – Security – Scalability Tradeoffs
That's an interesting idea. Flip the adoption.

One tricky thing is to make sure that the code snippet can actually run. Often you need a bit of a bigger context to run the code. Like env vars or dependencies.
Same and I've seen a definite change.. I went from enjoying hands on competitive fps games to just watching dumb comedy and anything more makes me sleepy. I'm going it will get better but if not well people in the future will just pity us ... Had brain fog, lost the "drive", still good at complex problem solving but somehow feel unable to relate to it like part of me gets it and other is completely clueless and too tired to even bother
Russia provides a considerable amount of oil to the rest of the world. The US exists in that same market. Countries banning Russian oil makes the price for all non-Russian oil sources go up.
Except oil producers stopped producing on their own because prices were literally negative. THe government had nothing to do with that.
Some people are just looking in the wrong places. Tim and Gregg have kept me in touch with quallity Cinema. 5 bagger for sure.
All of Trump's policies were inflationary. Tax cuts, trade war with China, limiting immigration and threatening to leave NATO.

The only good thing would be that OPEC+ would almost certainly be producing more oil since Saudi Arabia much prefers Trump. They even recently invested $2 billion dollars in his son in laws fledgling investment fund.
> come to the correct conclusion,

What makes you so sure that this is the correct interpretation? Both things could be true at the same time: there could be selection bias at the same time as critics are perhaps out of touch and snobby.

You could backtest this theory: see if perhaps critics scores were at one time a bit closer to general audiences or not. I think you'd find that at one time good critics were a bit closer to general audience scores.
Zapier could easily add a DSL that mirrors their UI. It's not the UI that makes it powerful, it's the integrations and workflow.

My approach to integration for ETL was a DSL.
> Flat earth is an interesting case in point. It is actually quite challenging to show that the earth is round in a way that does not require you to take anyone's word for anything.

There's a Netflix documentary called Behind the Curve (2018). There's a guy who keeps running these experiments to prove the earth is flat. But keeps inadvertently proving that its round!
I kinda disagree, a little bit. You can live happily in a big housing project, as long as some basics are there. No noise, not too dense, some green spaces and also a fair owner. Lots of buildings failed because owners stopped caring, so everything rot, and people here didn't help either. Some of my family lived in these and it felt ok enough. Some other projects 500m for them became no-go zones. Quite surprising.

That said I'm not pro big-structures[0], I understand it spoils the area too much. Near my town, an ex no-go zone has been replaced by smaller buildings, that was enough to regrow a peacefulness that left for 30 years. It's walkable, the woods nearby are walkable, almost shocking.

[0] even though, I still love them for some reasons
So I guess some Americans do think the U.S is just a single isolated bubble in the world

Is this also your take on the car shortage? The fact people are paying 40% higher prices on used cars?

Is your official response to that - Hey, theres a chip shortage in Asia, but who cares? you're in charge! start making the cars without the chips!! start making chips at home!! vroom vroom!!
It wasn't even actual ram pressure - there was ~500 GB of unused ram but something like 800 GB or so of negative cache dentries.

So, it was over some threshold that the kernel decided it was time to start reclaiming all those entries and locked up the entire server while it was doing so. Madness.
Bread is defined as anything I think bread is, and the same goes for any other word. To hold another position would be in some way dishonest.
it is possible, if wages dont increase to cover the dues theyll end up making less. whether this is good or bad for them will end up dependong on whether the union is focused on the success of the employees, whoch depends on the wuccess of the company or if yheyre just thete to fill their own coffers.
Were they ever in sync? I've always seen critics as a "negative recommendation" -- if a critic recommends a movie, it's usually bad and vice versa (and like all rules there notable exceptions like Thor Ragnarok, which both critics and normal people loved).

And this is true not just in movies but books as well. Critics in both domains love the "ooh lala, fancy pancy hard to understand arty farty" book/movie that doesnt make sense but makes the critics feel smarter than the holloi polloi.

Critics have always recommended movies that wouldn't appeal to the working Joe , in a sort of condescending manner. (and yes, like all rules, there are exceptions)

Coming to this article-- as someone who isn't a data scientist, I wasn't sure what point the author is making? Correlation is 0.7-- eh?
That sounds like architects have been tempered by regulations moreso than having changed ambitions though, am I missing something? My understanding is that the modernist and postmodernist icons were not academics but practicing architects, sometimes both.
There's a MASSIVE impact crater on the far side of the moon which we never see.

Imagine if it was inverted. It would look like a MASSIVE eyeball staring at us during our evolution.

Imagine how that would have impacted religion!
>No, not necessarily. He may be just a bad writer. Or the title may have been written by editors.

That's a poor argument to convince someone to read the article.
Google form > email action was my best use case
Yeah, it's a question of prioritizing which projects make it into the pipeline. Marketing automation is often subordinate to automation projects for other departments like Finance and Operations when it comes to prioritization.
IMO it seems obvious to me, but that might be because I took a statistics class in college.

(Not “obvious in retrospect”—I’ve had a number of personal discussions with people where we talk about the difference between critic & user scores on Metacritic.)
Depends how you define defeat. They could easily end up in an Afghanistan situation and have to withdraw after a while.
I think 1.4 Trillion in asset purchases by the Fed has more to do with inflation than Russia invading Ukraine. You could make an argument it impacted wheat prices. But the oil market already priced the invasion in, it’s in backwardation with farther months trading lower and lower.
That saved my ass. Had been on AOL for a month or so, by stealing my dads CC number out of his wallet. Just happened to look at what the bill was going to be and it was something stupid like $400 (mid 90's dollars, so like a grand today).

I quickly found a fake CC generator and updated the CC. I was panicked for about a week..but he never found out. It never hit his CC, and then I was changing the CC every couple of weeks whenever I got a warning.
I meant this

> I love trains and take them over airplane when it's an option. However, trains are often around twice as expensive as flying for may routes.

But I agree that switching trains is also an issue.
It can be a bit annoying to try and extract the interesting technical stuff from articles with quite a bit of conspiracy-shaded noise in them, but the dumbed-down summary is:

- Apple devices request signatures in order to perform software updates

- Those requests include the device's ECID, which is fixed per-device and used to generate the signature

- Those requests are sent in plaintext to the signing server

- As a result, it would be possible for someone snooping on internet traffic on something like a backbone to correlate an ECID with the IP address the request was sent from, and over time track the movements of a unique device between different IP addresses.

It is worth noting that the ECID is not considered secret information, though it is unique and unchangeable. This is also not a surprising revelation; the functioning of TSS and SHSH blobs has been well-known since the early days of iOS reverse-engineering.

The interesting technical point here is one about the plain-text nature of the request, which could potentially leak (admittedly pretty low-resolution) information about the physical location of a device. Encryption would obviously have no effect on Apple's ability to access the data, so that's a bit of a red herring.

My understanding from the Apple security documentation is that they explicitly opted for using HTTP "rather than implement the more complicated HTTPS functionality in the UEFI firmware, and thus increase the firmware’s attack surface." I'm having a bit of a hard time figuring out how it would be possible to bootstrap an HTTPS session in that environment anyway, though I'm sure some kind of challenge-response process would allow the ECID to be encrypted either way.

But I can't see a reason that requests wouldn't be made over HTTPS outside of this environment by default; it might not eliminate the attack surface but would curtail it quite a lot. It would be interesting to know if there's a specific reason behind that decision. I don't really find it that convincing that it might be done deliberately such that essentially "someone watching a network backbone might be able to figure out what city your ECID is in".
I'm confused how the author considers thttpd more 'battle tested' if it doesn't resolve https.

Either way though, it's a great article I'm glad the author took to write. His docker practices are wonderful, wish more engineers would use them.
The only one you need details to is the aligned-holes experiment. The others are just observation. You watch the bottom of a ship vanish before the top. You watch a swinging pendulum deviate from its beginning alignment more and more over time.
Yeah, the current political system and news organizations would absolutely punish Biden for taking the blame on inflation, so the current "it's someone else's fault and also I am fixing it" is just what you get.

...though the certainty that inflation is definitely 100% Biden's fault is a bit unjustified too.
Ding ding ding.

This is what needs to happen.

To provide one painful example that I'm currently dealing with, at work we have a Marketing Automation platform, a CRM and a CX tool. Marketing use the MAP, sales use the CRM and customer success the CXM.

All 3 have their own data schemas, their own "customer view", their own segmentation tools, they own orchestration (workflows) tool, etc. Everything exists in a silo, and no one can see the big picture.

This area absolutely needs disruption, we're starting to see some of it at the MAP level with MessageGears, Vero and Supergrain but it's yet to feed through to those other customer facing functions as far as I've been able to see.
I have some small insight into this.

Often at Amazon you have the "Frugality" principal taking the wheel for short term savings, even with long term massive costs. They're notoriously cheap, think like no free coffee cheap.

One of Jeff's guiding principals that he infused the company with, is that workers are lazy and will take advantage of any moment to not be productive if you let them. If you're nice to your workforce they'll take advantage of your kindness to do nothing. This happens on the corporate side too with all the PIP stuff.

In the long term I don't think this is going to work at all, either they need to change their policy and attitude or literally no-one will work there given the choice lol. (This is more on the SWE/Corporate side and less on the warehouse side, often Amazon is the only/best game in town on the warehouse side which makes things more tricky.)

E.g. At their current attrition rate they will run out of workers in the whole country in a couple of years assuming they keep it up.
> What IP would Broadcom be "losing" by not releasing the driver code

what if there's some IP they licensed from another vendor in there somewhere and it's so entangled (or foundational - eg graphics IP, etc) that they can't release it at all?

what if there's some IP that they don't realize is licensed from another vendor and they get in trouble?

what if there isn't, but someone else says there is, function X is too close to our implementation, and it starts a big legal battle? Or what if you run into some patent troll who makes a business out of digging through code to find anything they can sue over?

what if there's some copyleft code some dumbshit engineer copy/pasted and it ends up leveraging the whole codebase open?

etc etc

This is a classic situation of "Broadcom gains nothing in the next quarter or even the next 5 years from releasing the source, only potential (if unlikely) downsides, and the only people who will be outraged are a handful of nerds who are ultimately irrelevant to Broadcom's (not RPi Foundation's) business".

It is a testament to the success of copyleft that people have now embraced that as the default and view proprietary stuff with outright suspicion just as a default, but a proprietary strategy is both legitimate operationally (nobody opens everything) and as a risk-mitigation strategy.
- The introductory text sounds weird. As if it was particularly harder for Linux users to grok Vim.

- The description of dd is incorrect.

- The description of dw is incorrect.

- There is no notion of "implicit" or "explicit" in Vim. Not a good idea to invent concepts that the reader will never find in the built-in documentation.

- The crap on forward d and backward dd makes no sense at all.

- Same for the "whole word" crap that follows.

- And then there's the bizarro "Vim has a dual mode: insert mode and command mode."

- Followed by "When you first start vim, you're placed in insert mode; when you press an appropriate key (usually ), you'll switch into command mode," What?

Move along if you are genuinely curious about Vim, there are much better resources out there.

This should be titled "This Vim Tutorial Doesn't Exist".
I am fully behind it.

Don't want to pay for Qt? Use GPL.

Want to earn money from it. Use the commercial license.

No need for anti-Amazon like license.
For static websites, hosting them directly on S3 with cloudfront, or on cloudflare might be a better option?
Where is the lack of civility in my comment? It's okay to say that you dislike what someone said without projecting that discomfort onto them. Enjoy your civil discussions with people that aren't me
That's incredibly insightful.

Expanding a bit further, all sorts of problems arise when participants bring with them different conversational frames. Take, for instance, the case where one participant frames a back and forth as in the same way they would a dyadic conversation, while the other participants frames the same strip of events as a debate in front of an audience. The former may see the later as being bombastic or evasive, while the later may see the former as being naïve or pestering. There are all sorts of rhetorical registers available or unavailable to each depending on how each frames the exchange and using an "unavailable" rhetorical register in a particular frame can be keyed as a deception. Bad faith arguments, can then be thought of as deliberately fabricating a frame in order to induce a false belief (ex: that the participants share a common frame).

> this is a misaligned incentive that social platforms should correct structurally, rather than via governance or policies. And pushing the corrective actions back down to the individual is a cop-out.

Can platforms do a better job at framing online discussion in such a way that makes it easier to maintain common framing? Which sort of laminations are available or could be invented in order to facilitate common framing and allow readers to identify frame-breaking activity? Platform creators literally create the mediums for these interactions, the choices they make make them structural participants in the ways in which these interactions play out. As such there is an implicit responsibility placed on them because of their agency in this process.
It's crazy how Russia invading Ukraine in March was really spiking food prices in January.
At work we used to buy computer equipment from them. After repeatedly receiving RAM chips with 50% of the capacity we had ordered and paid for we don't longer use them.

I can't really imagine how that happenend. I'd assume they scan whatever they pack. Bad processes or intentional fraud by Amazon did not seem like likely explanations. A poor employee trying to improve their income? Not really sure how that scheme would work.

Either way, personally I am glad we switched to other suppliers. Too big market share for one is never a good idea.
Newly found mega comet may be the largest seen in recorded history
So the main takeaway here for me is that more low budget (“indie” or “film festival”, my terms) movies are getting to theaters and being loved by critics, but people hate them.

My wife and I have a rule in our household. Anything that was awarded at a film festival (Sundance in particular) I will not watch with her. This analysis backs up the feelings I’ve had that lead to that agreement…

Any movie that does well with critics or at a film festival has “a strong message” or “teaches us something”. That’s all well and good, but I don’t need these expensive (€20/ticket) modern fables. I’m paying to be entertained, not to be lectured to.
This is not a well-thought-out post, makes a mess of things by lumping bigotry in with systemic discrimination, and the "ironclad argument that a child can understand" isn't - there's evidence of an analytical mind here, as you'd hope from a professor of economics, but this is slapdash, hastily-written stuff that starts with a flawed assumption of what racism is.
Not necessarily, since models that predict correctly can still be wrong. Science is figuring out the real mechanism
Vaccines reduce overall levels of disease and therefore viral transmission; that's completely false. Transmissibility of SARS‑CoV‑2 can be hard to measure since asymptomatic people can be highly infectious.

COVID-19 vaccination with an mRNA-based vaccine showed a significant association with reduced risk of asymptomatic SARS-CoV-2 infection here: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7989519/
I don't have numbers or references here, but my intuition from a lifetime of space nerding is that, if the moon were struck with enough retrograde force to materially lower its orbit, in the best case that impact would liberate debris of mass and vector such that our first concern would be planetwide disaster response. (In the worst case, it might shatter the moon entirely and distribute a significant fraction of its total mass across Earth's surface; in such a scenario, the survival of eukaryotic life anywhere on Earth qualifies as a million-to-one-shot win.)

But the odds of such a collision I suspect are significantly lower even than of a similarly sized impactor striking Earth. Granted that the moon helps a great deal in sweeping space near Earth of objects that might otherwise enter our atmosphere, but something with the kind of kinetic energy it would take to produce these outcomes isn't going to spend long enough within the gravitational influence of the Earth-Moon system to be significantly affected before impact. It'd be like trying to swerve an ICBM warhead by blowing really hard on it, and I choose that simile with care - if this ever does happen, I think it might constitute a clear indication that someone somewhere in the universe really hates us!
I second a vote for Wipr.

A few weeks ago something got temporarily screwed up in Safari and Wipr got disabled and I was shocked at how many ads I was suddenly seeing. I didn't realize quite how much stuff Wipr was blocking until then.
https://justin.poehnelt.com

Mostly about running(ultra distances) and my career as a software engineer. Built with 11ty.dev.
I first read about this on reddit, but the links are now nowhere near the front page. Typically, events like this would be the top story for most of the day. "Sunset Park" is currently the #1 trending topic on twitter. Reddit commenters on the r/news thread are blaming changes to the algorithm and moderation. I wonder how accurate these assumptions are.
Is this a serious question or a Concern Troll? All of the data shows unionized working conditions and benefits are far better than the alternative in our neoliberal hellscape.