skysight-inc/HackerNews huggingface dataset:
Not on hand really. This was a pretty prominent case, but not the only one:

https://taxjustice.net/2017/06/02/whistleblower-ruedi-elmer-...

There was also the case of Eckart Seith. He was very recently acquitted probably because the issue gained too much attention to cover it up. He was accused of economic espionage and other crimes. The prosecutor very clearly was partial and only after 5 attempts he was dismissed.

This isn't restricted to Switzerland at all of course, similar problems are as prevalent in other countries if you look closer.
"""

“One of the tenants of the PC industry is standards,” said Dell’s Tom Schnell, the Senior Distinguished Engineer who designed much of it

"""

Freudian slip there...
The problem is that a dealer won’t actually sell you a Rolex unless you’re a repeat customer or you spend an absurd amount on other random jewelry. If you just walk into a Rolex dealership and ask to buy a Submariner, you’ll be put on a list (and you’ll never get a call). If you walk in and spend $100,000 on a diamond bracelet with a large markup and also ask for a Submariner, you might get put somewhat higher on the list. The dealers know the secondary market prices and most will make sure _they_ are getting more or less the same markup even if Rolex won’t let them outright sell at the secondary market prices.
This AI Does Not Exist (IDEA) is an AI system that can answer questions about itself. The system was created by the research team at the University of Cambridge and is based on the concept of an "AI mirror", which can be trained to look at itself and answer questions about its own existence.
My school made foreign languages completely unappealing to me by teaching them in the most dull, tick-box way possible in a school where even the top set contained pupils who massively cut into teaching time by behaving like animals, if you've ever seen the UK series The Inbetweeners my school was basically that but with grotty 1950s asbestos-chic buildings that hadn't really been upgraded since they were built. I thought I hated learning languages and promptly forgot the little I learned, but online learning at my own pace rather than a hastily thrown-together timetable with a course that's not being disrupted by constant piss-takers is a completely different experience. I've started learning French and the experience is night and day.

I can't help but feel very let down by my state education experience, it feels like British state schools are a uniform Ford-esque production line that takes children as an input, utterly breaks their spirit, and produces a docile blue-collar workforce that doesn't really ask questions as an output. Private schools on the other hand actually seem to set their pupils up for life rather than simply being a cog.
prefer not to get into a debate about the efficiencies of x vs y but sufficed to say: Computers are only getting negligibly faster over the last 10 years and our software has gotten overall quite considerably slower.

A runtime overhead that slows everything down to 1.5x, even with low hanging fruits is only going to accelerate this issue.

From a consumer perspective: We all act as if everyone has 8-16G of ram, because that's what we're used to, but the reality is that the majority of people have 2-4G of ram, even these days. That's not counting the anemic CPUs that are often inside awful cooling solutions.

From a server perspective: we outsource our Ops to cloud providers and pay a significant premium for computational speed, which means things like runtime overheads have direct costs.

The reason I called it inefficient is because it's not adding anything we don't have, it's just "another layer" with a large runtime overhead.

And, anyway, I'm mainly referring to this talk: https://www.destroyallsoftware.com/talks/the-birth-and-death...
A single policy update can reverse all of this.
Thanks! Indeed, the variability of size and usage of each instance was the big issue, and then doing features that crossed instances meant they'd be crossing shards whatever they did, so it made sense to fix the variability issue.

(I'm also surprised/reminded how fast Slack grew and how quickly it became effectively ubiquitous — I think every company I've contracted for in the last five years has used Slack).
They both look like they're in sync, but at the top of git.videolan.org shows a notice saying they're moving their projects over to GitLab. The list of projects being moved over doesn't include FFmpeg, so I guess ultimate ownership is at ffmpeg.org.
How does this work when you want to log different things? Like if I had a web server, I wouldn't want the server log and access log to go to the same place. Sure, I guess I could send one to stdout and the other to stderr, but what if I have three things?

Maybe systemd/journald supports this use case by forcing you to adopt some sort of structured log format that you emit to stdout, but I don't think I want to have to conform to whatever journald wants me to do, unless it's standardized and well-supported among various logging tools.
I don’t think anybody claims that you need consent to do the equivalent of displaying “other products you may like”. The customer entered the store willingly, and what you describe is quite literally the job of a shop assistant.

The need for consent would come if the assistant were to record the entire conversion you have with the customer, and send it to Facebook or Amazon in exchange for money.
How exactly is what you’re describing going to work logistically?
https://news.ycombinator.com/item?id=31177861
Big Wind is the meanest firefighting tank you ever saw (2021)
I'm sure you know this, but giving someone a large and unexpected bolus of insulin is a good way to kill them, particularly if they are asleep.

If I were designing an artificial electronic pancreas like that, I would be super, super paranoid. It's probably one of the few medical devices that I really think should be a strong user of asymmetric cryptography with a challenge-response-challenge-response protocol and multiple independent sanity-checking validation steps at every opportunity. If it can't deliver the bolus it thinks you need, it should alarm loudly and tell you to manually check. If it has a bit flip in the night and slowly drives 255 units of insulin into your bloodstream at 3 am, you won't wake up.
Maybe not web3 but something blockchain-powered.
Schools are more than just for a career. They are one of the foundation pillars on which our kids character and future are shaped. You can't teach empathy online. They learn when they see their friends breakdown in their arms after first breakup. They learn about bonding when they experience win or lose together arm in arm. As I said, online can teach everything intellectual but hardly anything emotional.
Ask HN: Has the 'Fullstack' meaning shifted to mean dev in front end frameworks?
Previously, I have associated Fullstack roles to mean a technologist biased to frontend & backend development as well as other sysadmin (pre-docker era) and understanding of various things like networking, testing, etc. Someone capable as a tech-lead.

Today, I see a lot of fullstack frameworks popping up and wonder how you'll associate a role labeled fullstack?
2015 in the title, 2018 in the linked .pdf file at https://arxiv.org/pdf/1505.07375.pdf

If you're going to be OCD about dates, please have them correct.
Testing my System Code in /usr/ Without Modifying /usr/
Caddy is my server/proxy of choice. It replaced Traefik, but I have one complaint. It looks like the documentation if very outdated. The examples in the official docs or elsewhere on the internet never work, and I always find myself ging to docker hub and then browsing the source for hints of the correct configuration. This happens especially when configuring letsencrypt or zerossl and the name of the properties keep changing. There are other examples, but this is my main gripe.

Is there a place where we can contribute to more up to date docs?
Four eras of practice:

1. DHTML scripts: individual scripts that provided functionality e.g. a date picker. You grabbed the scripts, and wired them together on your pages to enhance your page. Includes the first generation of Ajax scripts (in page communication with the server, often using raw HTML, text, or XML). Hidden iframes and other techniques also used for server communications.

2. jQuery: the popular library that everyone used because it provided a fabulous API to access and modify the DOM, plus helper methods to abstract out browser differences and bug workarounds. Bringing Ajax to all web developers, allowing them to enhance the pages delivered by their backend web server of choice (PHP, RoR, etcetera).

3. component framework (Cambrian explosion): mostly enhance pages delivered by the server, each framework with a unique approach to its API. Pages use components designed for each framework. YUI, Dojo, jQuery UI, Mootools, ExtJS. Starting to see more Single Page Apps, but no widespread usage of any framework on large numbers of sites.

4. React (and other 2nd gen frameworks, mostly virtual DOM): fully component based, can easily deliver an SPA (Single Page Application) and often the server only really delivers JSON (no HTML pages except a blank container). Widespread usage of React in industry.

There were plenty of early adopters for each technology, but as far as I recall, widespread usage follows the progression above. And the above ignores plenty of important first innovators and minor steps (for example, I used script.aculo.us).

The first stunning example was back in 2000 which was Outlook Web Access on Internet Explorer 5: the first usage of XMLHttp and it was many years before anything else approached its sophistication as a (mostly?) single page app with complex updates. I presume it had a proprietary component system, and IE5 was enhanced to make it work smoothly.
> Wouldn't it be great if the man page of getaddrinfo mentioned those (mine only mentions gai.conf)

That's a huge part of the problem. Was looking for a monograph to pass on my successor that wasn't so familiar with linux - modern linux - as in systemd, docker, nssswitch, pam_homed, network-manager is penetrable but more often than not I'm just looking at the c source in github and I am in my 30ies, starting in my teens running linux nonstop and I'm still throwing up my hands every other day...

Add time constraints and pressure to deliver (don't waste your time understanding this, just do xyz) and here we are - on the other hand it's not okay that you have to devote years of trail and error to get a comprehensive undestanding of the system.

I guess a nuclear power plant has at least a training plan and complete reference book - that still needs to be read and grokked and trained upon but modern linux is often just undestandable by reading the source if you hit a problem - for some projects like things in the freedesktop ecosystem and partly systemd even that is kind of difficult because i.e. this bug https://github.com/systemd/systemd/issues/19118 explains the problem - there is no overview documentation, no clear way to look up what's happening, not even a good way to introspect and it's several components that interact with each other fail subtly. I've chosen this one because I've also hit it, not because I want to blame systemd, which is not so bad there are much worse things out there but it's part of a trend to introduce complexity - not sure what is necessary complexity and what is unnecessary - went to uni in compsci without ever someone slapping out of the tar pit (http://curtclifton.net/papers/MoseleyMarks06a.pdf) in my face and maybe that's part of the problem.
I tried something similar with a project of mine[1], with a focus on API rather than frontend so I could build tailored apps for each device/user. At some point I should get around to finishing it -- I mostly focused on S3 and local filesystem compatibility, but being able to explore filesystems from other devices (maybe through an agent) is a neat idea.

[1] https://github.com/gmemstr/sliproad
Fiction isn't exactly a good argument
[1] discusses firejail running as root:

> For a server, the process exposed to the outside world runs as an unprivileged user (unbound or nobody). The process is started by a separate process running as root (as explained by @Ferroin above). The starting process is never exposed to outside.

> The same is true for Firejail. By the time the unprivileged server process starts, Firejail is already sleeping.

And I think Docker has a similar problem as mentioned in the "warning" section in [2]:

> Warning: Anyone added to the docker group is root equivalent because they can use the docker run --privileged command to start containers with root privileges. For more information see [3] and [4].

[1]: https://github.com/netblue30/firejail/issues/1720

[2]: https://wiki.archlinux.org/title/Docker#Installation
It implements some patterns for rendering in both environments using the same code.

The main problem with rendering in both the client and server environments using the same code is that you need to fetch data in two different places. On the server your code needs to fetch data during the render itself, whereas on the client you need to fetch data asynchronously then re-render with the data once it arrives (which in React means triggering the API call as a side effect, then setting the returned data as state, triggering a re-render).

Unless you really need server side rendering and can't do it statically, Next.js is the wrong choice. IME like 98% of projects are just using it because the tech lead is resume padding or an idiot. The others are something similar to Reddit or Quora with a complex UI and dynamic data that needs to perform well on SEO. For those ones Next is probably a pretty good choice.

Stuff like Next should be the 3rd tool in your arsenal after client and static rendering. It's a bunch of extra complexity for very little gain in most cases.
This reminds me of huge phage's ability to infect bacteria and improve their functioning, actually increasing the survival rate of their host bacteria.

This could be the same for mitochondria, infecting cells and not killing it slowly, but actually improving it, increasing the host's and therefore its own survival rate.
Can someone please explain to me why "relatively" safe drugs are being cut with Fentanyl, a drug which seems to be killing a lot of people? To me it seems counter-intuitive to kill unsuspecting users of party drugs. If the dealers/manufacturers wanted to make more money, why not just cut it with baking soda?
Reading the introduction section should be enough. It’s pretty clear that they’re talking about Amazon targeting ads based on your interactions with the Alexa and not, as the title here implies, based on just listening in to other things you say.

The paper does talk about “voice data” which I think is a bit misleading. “Voice data” to me would imply an analysis of the sounds your voice makes directly for ad targeting purposes but it’s clear enough from the context what they actually mean.

Amazon does plenty of rubish things already, no need for us to make up extra things!
I think you've hit the nail on the head; npm was the real killer app - it makes it very easy to try out node and result in a real, usable app with very little code nor (visible) complexity.
I agree. I really liked Caddy, when I used it a while back, but the documentation did stand out as being particularly in need of some love.
>3. But another factor is less reaction time and more that the late 20s and early 30s players have spouses and more expansive lives beyond the game, so they simply cannot spend the 100+ hours a week perfectly tuning the midlane or hard carry meta where the fundamentals can change really fast. Also, for the most successful players (read: millionaires) they want to enjoy their wealth and do things outside the game.

I think this is the biggest factor in the same way most devs don't stay in the same job for 20 years (particularly the top ones!).

Additionally, most games change a lot over their lifespan; what made someone a top player in the early days doesn't necessarily continue to benefit them now, and mindset/skillset changes are not easy to make.
Poker is a great example of that: pros from 20 years ago might have experience, but if they're not up-to-date with the cutting edge of theory and solvers, their 'experience' will get them crushed.
>Balenciaga kicks and 99c bowls of instant noodles do make an odd combo...

I don't know anything about shoes, but I looked up Balenciaga and those have to be some of the ugliest shoes I have ever seen.

https://www.balenciaga.com/en-us/defender-sneaker-green-6856...
Yes, we have all DNS settings configured correctly. We use big email provider to send emails (Gmail & fastmail). We send order emails via smtp client.

We already did try to figure out why our emails are marked as spam including external help and available support channels and do follow all known good practices.

I'm not looking for advice on how to make my email not look like spam to their systems. Please assume for the sake of the quotation that we did due diligence here.

I'm really asking if there is a precedence for someone trying to sue big company for damages caused by their refusal to not mark legit emails as spam.
It's really interesting seeing people take their sqlite history to the next level for analysis (simomw's datasette[0] is very powerful).

There's honestly so much you can learn about how we use shells that not many have tried to tap into.

In this space there is mcfly[1], which has a small neural net to try and determine which command to suggest from context.

Zoxide[2] too provides a heuristic for directory navigation based on current directory and your previous navigation history

I do look forward to what atuin[3] develops further in this space (disclaimer, I'm one of the maintainers)

[0]: https://datasette.io/
[1]: https://github.com/cantino/mcfly
[2]: https://github.com/ajeetdsouza/zoxide
[3]: https://github.com/ellie/atuin
Well that just says nothing, it's not a sign for security or quality nor against it.

I run around 600 jails (so obviously no systemd (FreeBSD)), but the host for sure has pretty tight MAC policies (and some jails too).

What other MAC-System do you use? tomoyo? apparmor?
That falls at the first hurdle - the page you link to says shipping September 2022.
thank you! I learned a lot from this comment... including that it's possible to print the IR spectrum. Amazing.
This is a real life :) I get your point and I know some people who work your way who went very far. But if you don't want examples from my circle just read some biographies. People who spend 1000s of hours on something are passionate about it, they really want it. I don't think you can discipline yourself to spend 12h daily on something without going insane. But if you really want it, it's effortless, it's what you want to do.

I'm taking time to respond because what you say is what I've been thought, and I think it's just unnecessary mental gymnastics that may cause suffering. If it does not and it makes one happy, then whatever story works seems fine. But having two different narrations that end up with the same actions, I'd choose one which is less painful.

You are choosing to discipline yourself to be doing something. So you want to be doing this thing. If you allow yourself to truly question your whole life, then either you decide you don't really want to be doing this, or you understand that you do. If you bring out the contradiction to the surface, it just resolves itself.

Because this is a logical contradiction in your mind - I don't want to do this but I want to do this. If you want B and it requires A then if you eliminate thinking about them separately and treat them as one thing - B comes with A, then either you want it or not.

It sounds awfully like preaching, and I'm sorry about that. But since you took time to read it maybe you'll at least have some fun entertaining the idea in your head while really not wanting to do something. The concept brought me a lot of joy and made my life easier so I naturally feel like sharing it.
I use all these editors, and I'd say that for purely editining purposes Neovim feels incredibly responsive, it's something that requires the whole UI framework to be fast. What keeps me from switching from VSCode are its great plugins
LineByLine: Memorize Anything
MIT researchers develop a paper thin loudspeaker
Oops. Yeah, serves me right for writing from memory, pretty sure it was setuid at some point in the past.

> That sounds pretty overengineered. All you need is a small binary that is setgid shadow, that can take username/password on stdin, and exit 0 if auth succeeds, 1 if auth fails. But we already have that: unix_chkpwd.

That's probably too limited actually. Because you can have a whole bunch of stuff in PAM: LDAP, OTP, Yubikeys, and all kinds of other fancy modules. Doesn't seem that unix_chkpwd handles any of that.

Also, I still think it has to be a network service, because the unix fork model offers lots of avenues for attack. The parent process gets to mess with a whole bunch of things before exec'ing anything, and that list keeps getting longer as the kernel adds features. It's not possible for the child to reliably defend itself against anything the parent might do.

Thus I think for security, a network socket is the best way as it doesn't allow the client process to manipulate the environment of the security service.
When the bubble bursts and Bitcoin goes to zero it will take Web3, NFTs, and shitcoins with it. And people thought silicon valley was dumb during the dot-com bubble. At least those companies were real and not just a convoluted ponzi scheme.
I imagine it's cheaper to produce at least the same result of whatever you're cutting it into.
This seems to be a pretty huge oversight. Are all systemd systems affected by this or just Ubuntu 22.04?
I adore this but wish it could catch cmd-W because i'm closing the entire browser window far too much and can't untrain my fingers
The same can be said for any commercial offering that you entrust data to. By that metric only fully self managed open source verified hardware is acceptable, right?
Yeah I definitely remember everyone learning to be diplomatic in high school. /s
presumably it gets you a better effect than cutting with nonactive substances, meaning the users buy from you instead of the 'weak shit' that's cut with soda
Datasette is good shit.
> I dislike Uber but worse than taxis?

I don't think that's what the parent said.
Wouldn't randomly dying under the age of 45 be a rare event anyway?
I agree that SELinux is largely unusable in the real-world (especially for custom apps). I've had better experience with path based MACs like tomoyo and apparmor. Firejail is also great for end users who want to safely do online banking and surf the web at random on the same machine.

IMPO, this sort of isolation is the future of endpoint security. Linux has seccomp (to filter syscalls), landlock (to limit filesystem access), and other ways that devs can build these restrictions into their source code (no external MAC needed). I've lost count of the major and minor MACs that Linux offers now. OpenBSD has pledge and unveil that basically allow the same sort of thing.

I would not consider docker/podman as equivalent. They are great for bundling and running apps, but they are not doing mandatory access control. So be careful if you consider docker as a replacement for SELinux... it's not the same thing at all.
He could also use FormData [1] to collect values from the form

[1] - https://developer.mozilla.org/en-US/docs/Web/API/FormData/Fo...
Well, it may scan the file system, which takes a heck of a long time, even on an NVMe drive. Or they broke the fuzzy finder/caching mechanism
Fidelity is rolling out Bitcoin investing for 401(k) plans