skysight-inc/HackerNews huggingface dataset:
Not the GP, but entropy production is any process that increases your ignorance about a system (and usually, if you're doing it intentionally, everybody else's ignorance as well).

To produce entropy you have to grow the number of possible microstates that are consistent with available knowledge of the macrostate.

Usually you accomplish that by converting stored energy into heat somehow. A charged capacitor has low entropy compared for the energy it holds; discharge it through a resistor, and you produce a bunch of entropy because that energy can now be distributed in a lot more ways among a lot more degrees of freedom, and nobody can possibly keep track of them.
The comments I've read on here seem strangely negative, I don't understand why.

I think this tool looks great!

I appreciate the time and effort you put on to releasing a free and open source tool to help solve a real problem.

Keep up the great work!
> I have an old saw about UTF-16 not being an irredeemable format and UTF-8 eating the world being bad, and I'm happy to dig it out again.

> UTF-16 is great for lots of East Asian languages, which billions of people use. In UTF-8, most of those languages require 3 bytes to encode a 32-bit codepoint, in UTF-16 they only ever need 2. This ends up being a huge savings.

That doesn't make UTF-16 not a terrible format, though. East Asian countries use better formats instead. For example, in China they use GB18030.

When your case for "UTF-16 is not an irredeemable format" is "it's better than UTF-8 at a task where nobody would use either format anyway", you're not making a strong case.
I think 'we have to exploit our workers to stay competitive' is a bigger argument against capitalism than 'I choose to exploit my workers because it gives me more profits'.
What Is a Database?
I consider it potentially harmful. Anonymizing data is a hard problem, and what is considered sensitive is not settled. For example, an IP address is personal identifiable information under the GDPR. Most people don't mask that in their logs though. If you copy records from production that have network information in them (last known IP for example) then your data controller should be very concerned.

Another major problem with tools like replibyte is that people use them properly, and then a database schema changes, but people don't update their script to anonymize new tables or columns. Then a few months later someone notices sensitive data has made its way in to staging, and into the backups, and the database dumps devs made to debug things because "it's only staging data, who cares!"

Protecting user data is something that you need to be extremely vigilant about. In my experience, the less access I have to production data the happier I am. Copying it and using it in staging, even if you're careful about it, fills me with dread.
<3 thank you - all comments are welcomed to improve this tool. Of course production data are sensitive and everything that can be done to prevent data leak is super important.
I wish people wrote less
Because of the end of the 380, Airbus will be shedding staff at some point. If enough of them are disaffected, some of the NDA knowledge will leak. Sure, you have to discount sour grapes, but this is also true of the ex-Boeing engineers who are backfilling our belief in the corporate failure there.

I don't think there is an elephant in the room, but there's potential for an unknown problem, sure.

One way to understand the risk might be to do the differential on each companies commercial and military product, and its failure rate: the mil stuff has different pricing, and might have different 'six sigma' type rules around things because it has to manage being flown in much more variant constraints: bigger envelope, more risk. If they can do it "better" for mil spec, and don't do it better for commercial, then something is bust in the culture.
Sure, and it will be caught by CI (if you set it up (properly)) and code review (if it happens (and nobody misses it (and no commits are pushed as a cleanup after (...)))).

So basically if everything works perfectly, you won't have that problem. We know processes don't work perfectly, so it's better to avoid that issue in the first place by never leaving the literal tokens in the config.

Also, even if your CI catches the problem, it's too late - your credentials are now in the repo and in the CI system and likely in your log collector attached to the CI. You'll need to roll them. Same with reviews.
Ah metaserver! I wonder how much of my code is still there (and if it is still Py2). I read the Atlas blog post, which implied that metaserver was rearchitected, but still 3M SLOC of Python.

https://dropbox.tech/infrastructure/atlas--our-journey-from-...
Wonder why it's not used for browsing btrfs snapshots. It's such a great bit of ui.
I thought entropy (in the Shannon sense) was a property of discrete and finite probability distributions. It's essentially a measure of how random a sample from such a probability distribution is. Notably, continuous probability distributions don't have meaningful entropy (or in some sense, their entropy is always infinite). It's worth considering the similarities and differences between entropy and standard deviation.

I thought the 2nd law of thermodynamics was saying that with incomplete knowledge, the probability distribution of possible states becomes more and more spread out as time goes on. It's almost a limit to how you can make predictions or simulations of physics when the initial state of the system is not fully known. Equivalently, it's a banal statement about chaos in the sense of chaos theory.

The only thing I don't get is how physicists get around the discrete and finite restriction. Maybe the state of the system is not what has entropy. Rather, one can define an arbitrary function f from the system to a finite set S, and then talk about the entropy of f(System at time t), because this is indeed a discrete and finite probability distribution which you can take the entropy of.

Hmmm. Maybe I understand entropy.
I think that Web 3 will add value to the internet, and that its particular value will be determined over the years. The bad ideas will eventually be filtered out, and the good ideas made stronger and more identified.

Right now I'm using crypto pairs for automated trading (https://tradecast.one), which is a good a purpose as automated trading of stocks or any other asset.
For me the border where it starts to flip is whether branding something "disinformation" tells more about the brander or the branded.

For example a Russian protester being detained for displaying an empty poster, doesn't tell us a lot about the specific believes of the person with the poster, but a lot about the people who react to such a thing by robbing that persons freedom by claiming it was desinformation (which it wasn't, it was a symbolic act of protest).

On the other hand if someone claims vaccines are a evil plot to inject nanobots into our bloodstreams to track everybodies position, this would be desinformation even without any state entity ever reacting to it. It tells a lot about the believe systems and world view of the person claiming such things, but it doesn't necessarily relate a lot to actual policy out there.

A third thing would be strategic denounciations like the ones the Nazis used when they coined ther term "Lügenpresse" which translates to "lie-press" or more modern: "fake media". This is used as a form of preventative denounciation. So the act of calling things disinformation before it is even clear what is said in order to weaken it's credibility once it is said and to create an incentive for their followers to only listen to them, not to others. This of course tells also more about the entity who calls something desinformation than about the receipients of such labels which can be wildly different people and organisations.
I think it unrealistic to believe that accountability tools work and it is quite crazy to judge people on these metrics.

If management cannot define a sensible output at the end of a work shift, they seem to be overtaxed with their responsibility.
A variant of analysis paralysis
If you immediately think "Jew" whenever you read the word "globalist", maybe you're the one with the problem?
Honestly - don’t care. The internet makes me able to see endless tragedies big and small 24/7. I help my family, friends, and community and pay it forwards. I sleep like a baby.
Rust / WASM framework for building client web apps
Do you think that FB is unique in being something that people use without adding value to their lives or do you think some form of reckoning is coming where people stop doing all of the things they do that don't add value to their lives?
I have no specific knowledge but suspect that it just never cross-pollinated; illumos is a somewhat separate community from the Linux-sphere. For all I know, you can build the same code on Linux with OpenZFS and trivially switch it to BTRFS by replacing the paths.
"Oh, that was easy," says Man, and for an encore goes on to prove that black is white and gets himself killed on the next zebra crossing."
Why? It seems writing this is the only which complex thoughts can be formulated and be passed down through the generations.
I've found a couple times now that the reason lsp-mode doesn't work and keeps asking to restart the server is because I had another binary in my path with the same name as the server it's trying to call. For example just today this was happening with pyright, and it worked perfectly again after running "pip uninstall pyright" in a terminal (or maybe it was called lsp-pyright). I believe the lsp-mode keeps its server binaries in a separate folder.
It makes sense to me and that's why:

1. Auto-detection of sensitive data is planned

2. Detecting database schema change is also plan to prevent leaking sensitive data.

RepliByte responds to a very common need that almost every company end to build internally. The idea is to collaboratively work on a tool that can be used by anyone and that can be improved to avoid leaking data.
i don't want to attack the person, but calling the death of a person, if it would be a murder/assasination, foulplay makes me sad in any case, even if it was not a murder and it was selfimposed.

that guy in the park surely had other goals in his live most of the time than dying in a park.

i hope he can rest in piece.
That's how data sources work for serious uses as well.

For example - get AWS AMI where we can pin it or let it be latest.

> the spirit of immutable infrastructure

Immutable means changes recreate the resources. Not that that there won't be any changes. Mutable infra is where we keep patching the same resource and potentially end up in a state where we are not able to recreate it.
I've seen a startup founder leave a meeting to take a call, indicating that it was someone important. His phone was on the table facing up, and we could see the contact photo of the caller - indeed worth taking.

A colleague heard him talking in the hallway. It was his wife on the phone, and once he was in the hallway he switched to their family language.
Fixed, corrected, improved.

/* extract, reformat, print json */

int dprintf(int, const char *__restrict, ...);
int fileno (FILE *);
#define echo do{if(fwrite(yytext,(size_t)yyleng,1,yyout)){}}while(0)
#define jmp (yy_start) = 1 + 2 *
#define pc(x) putchar(x)
#define dbg(x) dprintf(3,"%s\t%s\n",x,yytext);
%option nounput noinput noyywrap
%s brace bracket bracketbrace number quotes
%%
/* brace
+-------------------+
| "key":{ |
| "key": { |
+-------------------+
*/
\"[^\":\]\)=]*\":\40*\{ {
dbg("<<brace>>");
pc(10);
echo;
jmp brace;}
<brace>\} echo;jmp 0;
<brace>. echo;
/* bracket
+-------------------+
| "key":[ |
| "key": [ |
| "key":[ |
| "value" |
| "key": [ |
| "value" |
| "key":[ |
| "[value]" |
| "key": [ |
| "[value]" |
+-------------------+
*/
\"[^\":\]\)=]*\":\40*\[ {
dbg("<<bracket>>");
pc(10);
echo;
jmp bracket;}
<bracket>\] echo;jmp 0;
<bracket>. echo;
/* bracket + brace
+-------------------+
| "key":[{ |
| "key": [{ |
+-------------------+
*/
\"[^\":\]\)=]*\":\40*\[\40*\{ {
dbg("<<bracket+brace>>");
pc(10);
echo;
jmp bracketbrace;}
<bracketbrace>\] echo;jmp 0;
<bracketbrace>. echo;
/* number
+-------------------+
|"key":1 |
|"key": 1 |
+-------------------+
*/
\"[^\":\]\)=]*\":\40*[0-9\40\12\15]* {
dbg("<<number>>");
pc(10);
echo;
jmp number;}
<number>, jmp 0;
<number>. echo;
/* quotes
+-------------------+
| "key":" |
| "key": " |
+-------------------+
*/
\"[^\":\]\)=]*\":\40*\" {
dbg("<<quotes>>");
pc(10);
echo;
jmp quotes;}
<quotes>\" echo;jmp 0;
<quotes>. echo;
\n|.
%%
int main(){ yylex();exit(0);}
Out of college, I interviewed at a finance firm where it was made clear to me that the junior people wore blue dress shirts and only the senior people wore white.

I didn't end up getting the job but I consider it a bullet dodged. It was like a white-collar McDonalds where you had to "earn" the white collar.
Could you name the company? We need strong anti-monitoring laws. The only profession I think needs constant monotoring is the average cop, and not so average cop, like the FBI.

It's ironic many cops are required to wear cams now, but they can still cover that lens.
Absolutely; that's how Erlang represents strings. (Technically, a linked list of integers; there's no such thing as a Char.)

It generalizes really well to Unicode; encoding is unnecessary. :p

On the other hand, I think the name of the function that converts an integer to its own string representation, integer_to_list, could have been chosen better.
Ever try cleaning Git commit history? How about having GitHub clear a repository cache containing a secret?

You’re not wrong, but this is a whole class of issue that can be avoided for trivial levels of effort.
Since generating valid values is difficult, it sounds like an opportunity for an open-source fuzzy data generator with rules for different database types. Encode all the lessons shared in those "falsehoods programmers believe" articles about names, addresses, phone numbers, email addresses, credit card numbers, dates, time zones, etc into one testing tool that everyone can use.

I don't work with databases, so maybe this already exists. :)
Those are great features to have but they're not in the app yet. This is why there should be a warning in the README to tell users to be careful when they use it now.
Digikey will sell you single Lattice ICE40UL1K FPGA for US$2.75 plus shipping and handling. [1]

These days, a lot of the things that used to be done by FPGAs are now in the realm of capabilities of the Raspberry Pi Pico, and the US$1.00 RP2040 chip it's based on. [2]

1 - https://www.digikey.com/en/products/detail/lattice-semicondu...

2 - https://www.digikey.com/en/products/detail/raspberry-pi/SC09...
Even if you want your credentials in SOME file, you don't want them in THAT file. Because that configuration file contains enough valuable configuration that SHOULD be in Git, in which case the credentials would be in the way.
I’m having trouble understanding why anybody would expect that to be the case.

I have, for example, built things for government in the past. They paid for some code that I wrote and now they can use it as they like. But, (as with any client), they don’t have the right to turn around and give it to you.

If you want that code, I’m happy to sell it to you. But, again, you’re not allowed to sell it on or give it away.

Because that’s how software consulting works.
I have multiple Quests, and got Vive a while back too. VR is always amazing at first but it hasn’t had a lasting use case for most people I own that own it.

Furthermore, Apple is really well positioned for AR, which may be more adoptable than full on VR. iPhones already have had pretty good AR capabilities built in and Apple has really just been developing the technology probably to ultimately integrate it into the rumored headset.
Splash screens waste users' time in software
It seems to be the case that if you give someone a bunch of money, they'll stop wanting to change the world for the better. There are thousands of billionaires who could each end hunger and homelessness but have chosen not to.
...which are things you do every now and then, unlike a job, where you have to be there 5/7 days for a number of hours ?
Dalie could change digital art space
I use SES just for delivering emails while hosting the emails myself. Feels like an optimal solution.
You can easily use pg_dump to do a "vanilla" backup to s3. Its a managed db service but if you wanted to run your own you can extract your data and move to a new db. The lock is not "complete" you are acting like you can't even extract your data.
It's really rare for someone to handle something like this as well as it appears Vivek at Hackerrank did. The apology was straightforward and took full ownership, they showed that they had changed a process so it wouldn't happen again, and they compensated SymPy for their time in a way that seems at least superficially very fair.

Hats off to Vivek.
> a message board for paranoid tech nerds?

Ah, this explains why I feel at home in this community.
That's fair enough though, isn't it?

We can't blame the developers to not support any oddity and particularity that exists… and then blame them because the distribution makers adopt their tools because they work well (as a result?).

I'm happy they focus on a standardized base, this results in less development effort focused on more useful stuff, cleaner and more robust tools, it also makes it easy to switch between distributions and to target this standardized base when developing.

It also can be seen as a assumed limitation. Any tool has limitations. But the /usr merge has been conducted with reasons, and makes this kind of stuff actually possible. It's not like keeping a split /usr is very useful today anyway.

Systemd is not something distributions have to bend to. It's something they willingly adopted because it solves well problems they have.

And it's not just Lennart. Hate he gets gets old fast.
Or sell the intro for 9$ and provide a link to the tome inside the book to your own payment processor.
I'm pretty sure they use that internally (when I was there Hangouts was used). However, Google work culture is (or at least was till fairly recently) centered around shared docs and email (automations send email with action buttons for example vs. hip companies were such things are fed into Slack). Hangouts was mostly used as a lightweight 1:1 or small group communication and resolving an issue. I imagine post-COVID the Slack-style Chat has gotten more use, but I'd bet Gmail is still at the center, not Chat.
Maybe it's time to finally pay market rate for government employees?

The underpayment is a consistent factor that keeps cropping up wherever you search for the reason why a government project or entire structure failed or went over time/budget.
tl;dr

https://securitytxt.org/ got published as an RFC :^)
Even a timeline would be subjective as the author would have to chose what to include.
Is it more complex than Prism or whatever project the NSA are on now?
I'm not understanding what you said, do you mean you had built the code before and you licensed it to the government, or in the contract you wrote to the government you specified that you owned the code that you were delivering, every time I've written code for people who've paid me on a project basis they can do what they want with the code afterwards, including give it away.
i'd love to know about google competitors.

it's just that any new one i try is either already owned by google, is using someone else's results, is doing stupid stuff like planting trees meant to distract us from real solutions to global warming, etc.

i thought some smart people would get together, get some funding, spin up a search engine in a couple of days using the cloud, and see if there was something there.

wonder what keeps that from happening.

privacy maybe?
As totally awesome as this is, don't you have any problem publicly sharing your personal data?
That doesn't invalidate GP's comment.

Even if you struggle, having a little commitment every day helps building habits and actually relieves the struggle (because a habit creates familiarity and ease).

The "we're all different" part plays a role in how long it takes to adapt and bind to this new/building habit.
Disclaimer: despite the title, this article is NOT about Personal Knowledge Management.
A business is valued as roughly profits times growth. The issue here is Meta used to have both growth and profit and now it mostly has profits. It doesn't mean the business is doomed obviously, but it means it should trade at a much lower valuation. A correction in PE means a huge drop in stock price despite profits still being there.

Google is growing its top line over 20% YoY and has a PE of 20. What PE would you give another business that sell ads but has a stagnating top line? Probably much less than 20.
My point is even when they go to far greater lengths than the others, they’re still criticised (including by you) of actively reducing device lifetime. That is absurd. Vague references to a ‘bar’ without even mentioning their competitors even as a genetic group is hardly equivalent to targeted named criticism of the company.
Every office I've worked in either had a commercial grade Bunn coffeemaker or we had to go buy our coffee from the cafeteria downstairs. Most offices were free. The government office I worked in for bit had us chip in a couple bucks a week to pay for the coffee on the honor system.
I've done a bit of unscientific plugging and unplugging ;-) The TV box is using 15ish watts so that's a bit part.

My router + fiber termination point are using 18W continuous, but that's not included in this 35, they're somewhere else in the house. The box here is only a TV decoder.
Note that when you use LSP with Emacs, installing language servers can quickly lead to dependency hell. I use home-manager[0] to specify which language servers I want installed[1] (among other things such as compilers for different languages) so integration with Emacs is reproducible and up-to-date across any distro, including Debian.

[0] https://github.com/nix-community/home-manager

[1] https://github.com/siraben/dotfiles/blob/bad2e8a29b6622e10bc...
Yes, with the TV thing set to "off" which really isn't that off.
sometimes.

but usually during specific instances - like when shopping.

i have to have someone - some entity - tell me what to buy. wirecutter. amazon's choice. etc.

the 'flood the zone (with disinformation)' strategy is working for Big Corporate.

doesn't look like democracy, nor humanity, is going to survive.
Thanks for the information.I may have changed mind once again.
What happens once usage reaches the budget? Should AWS simply turn off all of the systems and delete all the data?
The Wall of Shame: The latest US healthcare breaches reported to the government
Once upon a time, long ago, there were cartoons in magazines. Many of these depicted a bearded individual dressed in rags and carrying a post with a sign on it stating "Repent: The End is Near!" and onlookers who state something jokingly relevant:

https://duckduckgo.com/?q=repent+the+end+is+near+cartoon&t=o...

Today we have real (possibly bearded, possibly dressed in rags) individuals on the internet who "post" "Repent: The End is Near!" as millions look on and laugh.

"Does anyone even care?"

- about your post: No.

- about their lives: Yes.

Don't worry about the implications of having children: your main concern should be whether you will ever get laid!8-))

Finally, remember that no one has proven successful at forecasting anything of consequence more than ~5 years into the future.

"Artificial Intelligence"? I'd settle for "Artificial Idiocy" right now. At least it could be trained to make a decent hamburger.