skysight-inc/HackerNews huggingface dataset:
BBEdit has a pretty strong ethos of "giving the user what they need" over what they ask for or what they want. Additionally, they obviously put a lot of thought into the interface and how it works. A lot of editors have flash, and an option and plug-in for everything, but I can't find things, the flash distracts me, etc. It feels more GNOME-ish in giving the users fewer good and well-placed options and less KDEish in haphazardly throwing in the kitchen sink somewhere in the menus and preferences if you can ever find it--but I've created a false dichotomy, because BBEdit kind of throws in the kitchen sink without ever feeling like they're just jamming in icons, menu options, and preferences incoherently--best of both worlds. In BBEdit, in addition to the logical placement and thought, they have a well-maintained PDF manual which I've gone through pretty thoroughly a few times. I like to learn software like this, RTFM, then I know what it can do. I don't like to "easter egg hunt"--pick around menus, or pick around half-baked after-thought "documentation" on the editor's website. I don't invest serious time into programs that don't seriously invest in their documentation. For me, it just makes a huge difference in learning a program and knowing what it can do.

I also just don't want to curate a mini ecosystem of plugins or extensions to accomplish my work--with varying documentation standards, interoperability, design aesthetic and sensibilities, and so forth. I want want 1st party solutions coherently integrated, full documented and integrated, and BBEdit goes this route, by and large. This isn't a magic bullet, but a different set of trade-offs that I strongly prefer, as you can find just the extension that works just right for you in a thriving ecosystem, but for me, I prefer 1st party "maximize the utility under the curve" kind of thinking, the same way Debian or a Linux distribution makes packaging uniform. Yeah, it's not compiling qmail with my custom set of patches, but as a coherent system, it delivers a lot of value.

I use BBEdit as my primary editor for everything, but I tend more toward SREish stuff than heavy development. BBEdit is really in a league of its own in what you might think of as the editor equivalent of "soft skills" like coherent design, ease-of-use, documentation, first-party features not reliant on extensions as opposed to having to use plugins and third party code (with the associated drawbacks, but you really can't match the functionality of your perfectly crafted editor via 20 carefully chosen plugins if you're willing to make an editor your lifestyle) etc. Unfortunately, in practice, that does tend to lose to "hard checkbox features" and extensibility.
I kindof agree with you, but if you go to a university lab then you will likely find that all the students are all in the same groups. You don’t really want to blindly trust the group that way.
As legal wranglings go, that's quite a bit smarter than just pretending that the supremacy clause and the commerce clause don't exist.
The other responder pointed out I was using the simplest terms, which frankly looks right to me. But the answer is more pedestrian. I read the information phrased it as 2/3 was diesel and 2/3 of the remaining amount was labor. So I eliminated the chain and simplified it to 2/3 and (1/3*2/3) 2/9.
> People today confuse reviews with criticism. The two are not the same.

They are if you're talking about journalistic film criticism (vs. academic film criticism): https://en.wikipedia.org/wiki/Film_criticism

> Personally, I like guys like Mark Kermode, who can say "this movie was complete and utter nonsense and I had a great time" or "this was a really smart movie, but it just didn't work".

I think you're implying that Mark isn't a film critic, but that's what he calls himself (his bio: https://www.markkermode.co.uk/). Also, movie critics recommend "bad" movies (https://www.rogerebert.com/reviews/speed-2-cruise-control-19...) and dump on "beloved" movies (https://www.rogerebert.com/reviews/the-usual-suspects-1995) all the time.
I wouldn't say that I exactly 'visualize' it. For me it's more of a bunch of formless even nameless things and connections that don't have specific shapes or places, only logical structures. The lines of code also flows freely but it feels more like synthesis from those ideas rather than copy-typing. Eventually the 'picture' or network in my mind gets complicated/unstable and I have to draw it out.
Couldn't that be mitigated by git adding a --readonly option that prevents any write operations? Then just use that option for any PS1 executables?
That’s partly true, but it is more relevant to Git than to other things because there are malicious ways to configure a git repository that will end up running programs written by someone else under your user id.
Or create a mercurial repo that contains a .git directory, and rely on finger memory making them run git immediately after cloning...
I am always wary when there is a guaranteed return even if it’s a very safe investment. But given the stability of the US Govt, could someone explain who is on the “other side” that provides these returns and why?
Possibly ELI5 sorry!
Damn this looks good. Going to check it out in depth.

I know a guy back in college who majored in actuarial science but he's also doing computer science. These 2 subjects have good synergy.
I don't doubt that some people have this ability and have no reason to think Tesla wasn't one of them.

His feats are perhaps even more remarkable if he didn't have any superpower abilities such as this.
Is Zapier like an Enterprise Service Bus but for connecting multiple enterprises?
Ok, we've changed to that from https://github.com/git/git/commit/8959555cee7ec045958f9b6dd6.... Thanks!
GPT-3 has been able to argue with you about which art styles look best or will be most marketable for over a year now
Yes but it's nice to have the SSL built-in for when you want it. Web servers like Varnish and thttpd take a really hard stance on the issue, where they don't want to touch the crypto at all. Honestly, I don't blame them because implementing SSL is prodigiously technical and emotional. One of the things I do is I offer a file called redbean-unsecure.com that has zero-security baked-in so that folks who love redbean but want to handle the security separately themselves can do so. But like I said when we don't have strong opinions on separation of concerns, having a fast snappy tiny zero config SSL is nice.
Interesting, I haven't had the opportunity to ever ride in one.
These models look backwards. They mine the past of what human imagination created and produce passable composites that lack individual expression. The more they’re used, the more obvious the technique becomes and soon we’ll be tired of it.
Show HN: Analysis report on Certification expiration status of Russian sites
Sanctions against Russia’s TLS/SSL certificate renewal leads Russia to become increasingly isolated from the new cyberwarfare. analysis report on current Certification expiration status of Russian sites.
Still doesn't suck.
You gotta check downthread a bit where someone else straight admits it, but also just remember that overall the group on HN is much wealthier than average, some truly so.

Plenty of people here are legitimately not part of the working class even in a technical sense. eg they do not sell their labor, but are supported by exploiting surplus labor of workers.

It's entirely possible the person you're responding to is an asset owner, and is correct and sincere. If you depend on exploiting workers then worker power must be scary as hell!
It's actually the compression that forces it to learn higher level concepts.

In your stop sign example, say we are trying to teach a visual model the difference between toy stop signs and real stop signs.

To train it you feed it a 3D model of the world and the actions a person takes in response (ie, ignoring toy stop signs but stopping for real ones). Once the embedding is well trained (with lots of data) if you then run it through something like UMAP to reduce the number of dimensions in the embedding from hundreds to 2 or 3 you'll see it has "discovered" the concept of "scale" - all the small toy stop signs will be clustered together and the real ones clustered elsewhere.

That generalisation forced by compression is where the abstraction of "scale" comes from.

(Of course in real life you'd use a more complex model than just an embedding for this, but in principle this is the idea).
I dunno I'm only just 30 and I am way less excited by tech than I was 10 years ago. Less and less of it is stuff that caters to me... For example I got one of the second generation kindles and it was fantastic, and after that finally died I got a Kindle Voyage because it had the page press pseudo buttons. I'd have preferred actual buttons but better than nothing.

Now I am terrified about what happens when that Kindle Voyage dies the only option I have for one that has page turn buttons now is the Oasis which only has them on one side, which doesn't sound too bad, but because I'm left handed I am more capable of using both hands for stuff than most people so when reading with a kindle I pass it between hands all the time. Sure I could do that with an Oasis, but I'd have to rotate it 180 degrees and wait for the orientation to change instead of just passing it across.

I know this is an incredibly nit picky complaint, but it's an example of a category of tech gadget I feel let down by.

Phones are similar, Samsung's new flagships don't have SD card slots or audio jacks AFAIK, meaning they are following a trend away from the things that made me go with them in the first place.

I can't remember the last time I saw new bit of tech or device and thought "wow I want one" really and it makes me really fucking sad. I have a good job now, I can actually afford enthusiast level tech... but now I don't want any of it really and whenever I buy anything I feel like I'm choosing the least bad option instead of buying something exciting
Oh yeah, in such an environment that would not make sense. I'm saying it should be a (local/global) config option, not enabled by default.

EDIT: Or maybe even more general, trustedOwnerUsers / trustedOwnerGroups
I like that in iOS only a few of your photos are visible to apps like Messenger. However, I do not like how simple the calculator is. I cannot check previous calculations, so if I made a typo, well, that sucks. Android has its perks, too. I like to use F-droid and Termux.
Git honours embedded bare repos and exploitation via core.fsmonitor
In earlier news, it's unexpected that "cd directory" will give the directory owner access to your account.
Linux also depends on GCC or compilers that share its behavior w.r.t. type aliasing.
What you are referring to is monopsony power, and Amazon isn't even close to having a monospony on warehouse labor.

Warehousing is massive industry and even at their size Amazon is less than 10% of it.

The most realistic solution is for workers to spend any spare time they have learning new skills to move into better industries. Trying to make pick pack roles not suck is not realistic.
Companies are really starting to push their luck. They already are dealing with a tremendous labor shortage. These games they're playing are just as likely to drive people out of the industry as they are to get them to come back to the warehouse size open workspace a long commute from home. People now know how much better things can be while preserving or even increasing productivity. That genie isn't going back into the bottle because a bunch of middle managers suddenly are having a psychological identity crisis not being able to spend their days Lumberghing over the workers.

But go ahead and try to force things. First people will leave for a competitor who isn't trying to reverse time and if the competitors join forces to try to make offices happen again, people will move on, perhaps even becoming the competitors themselves. Take the 'L' and move on to better things.
You don't have to trust repos you clone, if I understand correctly. You just need to trust ones you're given in other ways. The difference is, clone won't let you set up arbitrary config (or malformed internal data or etc.)
Re: Ambrosia...

If you've got some Escape Velocity nostalgia hanging around, check out Endless Sky - https://endless-sky.github.io
It was an innocent mistake. No one intended to steal credit for your work. I've fixed the title now.

In the future you can get better and quicker results by letting us know about misleading titles at hn@ycombinator.com.
Aussie industry where bullying, assault and mental health issues are rife
https://alex4d.com/notes/item/imovie-2013-is-consumer-ui-on-...
> Faulty script. Second, the script we used provided both the "mark for deletion" capability used in normal day-to-day operations (where recoverability is desirable), and the "permanently delete" capability that is required to permanently remove data when required for compliance reasons. The script was executed with the wrong execution mode and the wrong list of IDs.

Bad script! Bad! So faulty, running itself with the wrong list of IDs and running itself in the wrong mode.
Please don't be a jerk in HN comments. We want curious conversation here. Swipes and supercilious putdowns are really bad for that.

https://news.ycombinator.com/newsguidelines.html
> more, higher throughput highways

Please not. But maybe underground, then yes, sure why not.

> removing a major thoroughfare, essentially to spite drivers)

I don't really know the particular situation. I hope it was not out of spite! That'd be sad. (I do understand fwiw - how it can come across like that). I do think a city should never accommodate high speed traffic, only maybe on an interstate or a truly segregated roadway. A lot of these high-speed corridors are through residential areas, it's just plain dangerous, noisy, polluting. There's a reason nobody wants to live next to a high speed road, and if they do, it requires a lot of empty buffer space (huge front yards, basically) to make it tolerable.

> lower throughput highways

Again, not knowing the particular situation, since this can be very context dependent, and maybe we have radically different examples in mind, so ymmv, fwiw, etc... Just as an example: in my town, a recent a high throughput highway was reduced from 4 to 2 lanes. That did not reduce throughput. It did decrease top speeds, no more mad max style passing and jostling, and fewer accidents. Basically, cars now toddle along in single file, at a civilized clip, but no longer that accordion of rushing and breaking from light to light anymore. It also is so much safer for people crossing the road, or biking. It took decades to make this happen. When trying to get these, most drivers at these public planning meeting could just not imagine that removing lanes has any kind of net good. After two years now of this conversion, which is positive is so many ways (it does not even inconvenience drivers, only curbs their worst impulses), every other similar proposal still face this same kind of opposition. This mindset is completely ingrained to such a degree that it almost seems monomaniacal.
I think what they're implying is that they can restore _everyone's_ data quickly (i.e. 'usual' infra failure), and one Jira instance's data fairly quickly (but some manual steps), but the problem is they nuked a large subset of customers while everything else kept running. This means that they can't do a complete automatic restore, and instead have to deal with it customer at a time.

I'm sure that they're going to make their customer at a time thing properly automatic now... Still a big failure, but a little more subtle than you make out.

(disclaimer - worked for Atlassian years ago)
On the one hand I agree with you; on the other hand that would entail enumerating all possible unsafe configurations. In general when designing a security measure you never want to try to enumerate everything that could be unsafe, because there is always an attacker who is more clever than you are who will think of something you left off the list.
The numbers I quoted were post-diesel increase. But it's possible that the numbers are wrong or used a different diesel cost at the height of the spike or were using a diesel price from a really high-tax state or were using a really inefficient truck. The numbers I used would have seen diesel be about twice what you're spending, which is an insanely high multiple. I have no reason to think I'm righter than you, I'm just trying to troubleshoot the reason I was off.

The labor to maintenance/insurance/etc. ratio seems to track pretty accurately. So maybe I should have said 3/6, 2/6 and 1/6 respectively (since the other responder wanted the same denominator).
So, instead of breaking their repo up so git is more performance, they forked mercurial instead?

Madness
Slightly off topic (and not to nitpick your anecdote), but Jesus is generally believed to be born sometime between 6 and 4 B.C.

https://en.m.wikipedia.org/wiki/Date_of_birth_of_Jesus
> The solar energy system created at Chalmers back in 2017 is known as ‘MOST’: Molecular Solar Thermal Energy Storage Systems.

> The technology is based on a specially designed molecule of carbon, hydrogen and nitrogen that changes shape when it comes into contact with sunlight.

> It shape-shifts into an ‘energy-rich isomer’ - a molecule made up of the same atoms but arranged together in a different way. The isomer can then be stored in liquid form for later use when needed, such as at night or in the depths of winter.

> A catalyst releases the saved energy as heat while returning the molecule to its original shape, ready to be used again.

So it's like a solar panel except that there's a chemical 'hold' step in between the solar and heat phases.
The teacher thing is a real and complex problem. Police is a bad example though, they aren't labor unions in any meaningful sense. No police union has joined a labor dispute on the side of labor. But they have, time and again, intimidated, arrested, threatened, even killed workers exercising their rights.
Funny. I'm on a personal journey to reduce self-doubt.

Maybe there's a time and place for self-doubt, and some people certainly lack it severely, but my extreme levels of self-doubt have always stopped me from trying things and now I realize how much it has cost me.

Maybe instead of "self doubt vs no self doubt" the questions should be:

- Is my project in the 95th percentile, or higher, compared to all projects in this given context?

- Is my project in the 70th percentile or higher, compared to all successful projects in this given context?

- Am I in the 95th percentile or higher, compared to all people in this given context?

For me, it's much easier to answer "Yes" to these questions (and the answer is usually "Yes") than to answer "Yes" to an ambiguous "Is the project going to succeed?" or "Am I going to succeed?"

Some may find this contradictory: If you think that you're above the 95th percentile, then how do you have self-doubt at the same time?

Self-doubt is not always logical. For me, self-doubt is more psychological than rational. I think I'll do a better job than most people, but I still think I'm going to fail, even when I see less capable people succeed.
You can just mount an external volume on top of /home/static to and be able to change the files that way. But for a single-page-app I think it works great to be able to version the entire site in the docker image tag.
Hey you can't collect an sell American information, that's OUR job!
It is an extremely big problem: https://twitter.com/USBPChiefRGV People that don't live here or those that just keep their head in the sand will never really see the big picture.
It's so it can print an error referring to the key if there was a problem parsing.
I am very pro-trans-rights. But your response here comes across as insanely dismissive to the point of being insensitive. This person is sharing their lived experience with the world, and based on a couple of sentences of attempting to remember what they felt like 30 years ago, you diagnose them with internalized homophobia? That is so shockingly disrespectful to this person.

They didn't say nobody should have gender affirmation surgery, they didn't even say they fully regret it. They shared their experience. Have some respect for the life this person lived.
Tim Cook delivers speech railing against “data industrial complex,” sideloading
I feel like title doesn't really focus on the specific behaviour change (not operating in a non-owned directories) that will be affecting a lot of CI/CD, which is what I was interesting in seeing discussion on.
Git is a very conservative project, that they did it like this suggests that they had very good reason to. Nobody is perfect, but the git team has earned a lot of trust over the years. I plan to read up on it more and wait for the CVE to be clearly explained before trying to backseat it, myself.

No criticism intended.
If you look at the plagiarized language in the article, it seems as if the BM paper authors are claiming contributions (emphasis mine). Credit is a major currency in research, and it's important to give it where it is due. If someone did this with one of my papers, I'd be quite upset.

For example (Emphasis mine):

> The risks of data memorization, for example, the ability to extract sensitive data such as valid phone numbers and IRC usernames, are highlighted by Carlini et al. [41]. While their paper identifies 604 samples that GPT-2 emitted from its training set, we show that over 1 of the data most models emit is memorized training data. In computer vision, memorization of training data has been studied from various angles for both discriminative and generative models Deduplicating training data does not hurt perplexity: models trained on deduplicated datasets have no worse perplexity compared to baseline models trained on the original datasets. In some cases, deduplication reduces perplexity by up to 10%. Further, because recent LMs are typically limited to training for just a few epochs
Alternatively, you can use less(1) in tail mode to search growing logs.

less +F -p pattern /path/to/log

(Ctrl-C to break out of tail mode. /pattern to interactively set search pattern.)
Tbh I thought this was pretty obvious.

Git hooks have always been sketchy as hell.

Can't stand the Mac specific shit my co-workers keep dumping in there.
I like this, I'll have to try it out!
I must be living somewhere with minimal dust because I have never dust cleaned any of my or my family member’s iPhones, in years. Especially not the lighting jack.
I thought the movie was "Kids", but I looked it up and that wasn't it. But it was a movie about teens in the 1990s.

Of course they were kidding. Dogs can't talk, for example.

Eddie Muller has commentaries on Film Noir dvds I've gotten from Netflix. Angel Face is an example. Google produced a list:

https://www.eddiemuller.com/completelist.html

Enjoy!
Was this change discussed publicly prior to merge?

I think this is a big mistake. Build environments use separate users for security purposes. It's insane to decrease security for everyone by requiring a single user to do everything because some of your users want to have fancy terminal prompts.

At the very least, let users configure this at a per-user level.
There'd still be a lot of latitude. Some companies have 3 levels for software devs: normal, staff, and principal engineers usually encompassing 0-10, 10-20, 20+ YoE. The salary ranges for these would be massive.
Their solution sounds reasonable. I don't particularly get why this is even a new vulnerability? If someone manages to create a .git at the root, that means the whole filesystem is under version control and appropriate hooks should execute. Why would this be surprising behavior now? In any "multi user system" as the article says, this would need root access and such a user can do many other bad things if their intent is malicious. I feel like I'm missing something obvious?