skysight-inc/HackerNews huggingface dataset:
I only started digging into this space last week, but I think cosign, rekor, and fulcio are not related projects but rather critical components of sigstore. Cosign is the cli for signing and verifying artifacts, Rekor is the transparency log, and Fulcio is the certificate authority.
Depending on how clogged the drain is, ive seen those be useless before. The general case for those to be useful is that main drain is only blocked because the user closed it purposely. If the drain is clogged it becomes pointless-ish
If we haven’t gotten an email, does that mean our account wasn’t part of the leak?

Was this a system wide event?

We have been on Heroku for ~5 years and the last 18 months have been far less reliable. Sad.
Gee I’m sure my managers at Intel as a green badge would really have appreciated that waiting to fail speech from me when I was getting paid $35/hour (with some benefits, I’ll admit) in 2013 via W-2 contract.
None of them seem all that conducive to source control or merging. Any good format for that?
Love the idea and will look more into it. Not sure why you got such a non-constructive and rude dismissal in another comment, especially given the hacker news guidelines
So the original issue was described as a leak of github oauth tokens, and made it sound like the risk would be someone using oauth tokens to access github repos.

Resetting passwords implies something else may have been compromised (passwords, either hopefully encrypted), but is a pretty scary ask for them to make without providing more context here.

Trainwreck indeed.
lived across the st from the Supreme store on Lafayette for years - we started digitalocean in the same building as their store - know the supreme founders well - and the "origin story" - good guys - only thing I garnered from looking at your comment history is that you don't understand what the word "objectively" means yet use it ad nauseam - and - you're unfamiliar with the site guidelines - i'm new here so maybe I read them more recently than you? good thing I was here to remind you before you get in trouble for intellectual dishonestly - don't worry - everyone makes mistakes friend! :=)
Sounds like I need to start charging hourly X-D
I just recently investigated cosign for signing and verifying local container images. It seems very useful.
Yes, same here. Looking like a really big breach is my guess given the strange wording and downplaying of the issue, combined with what we actually know (Heroku source code accessed; Github tokens leaked; some other tokens leaked and now mandatory password resets).
I'm starting to wonder about setups for remote meetings and if that is a big part of the problem. Like most colleges, we were thrown in the deep end with distance learning. We've done distance learning in a single classroom that is well equipped for twenty years, but never from a teacher's home.

For one class, a bead-work class, we used a camera attached to a flexible gooseneck and a switcher from Blackmagic Design[1] to go between normal camera and the bead camera. It worked well and got me thinking about how we do our home setups. I think the laptop webcam with a small screen is the real problem. It just isn't the best placement. I watched my nephew and niece do remote classes on a Chromebook and that really seemed uncomfortable. It feels like your looking at a room through a porthole.

I am starting to think that hardware needs to be improved, and the whiteboard needs to become an actual surface in your office with remote updating. Multiple cameras is a winner and a big screen to view the video call seems to work really well.

I get the feeling that if I ever go back out into the mainstream workforce doing remote work, I will invest in a home production setup with multiple cameras and a switcher with overhead (documents) and camera pointed at a whiteboard.

1) https://www.blackmagicdesign.com/products/atemmini
https://www.scss.tcd.ie/doug.leith/apple_google.pdf
Sorry, I meant Paperlike.

Although, since you asked, I do use my Paperwhite for writing, but I never released the software I glued together for that purpose.

I have a raspberry Pi set up as an access point running a little python/flask app that's controlling a X server receiving input both from the Kindle and from the regular keyboard / mouse. The flask serves the screen image, a container html, and some basic javascript to handle input (e.g. taps become clicks, long taps become right clicks) and update the image from time to time. The only tricky thing involved is that Kindle's browser is very very old, so you can´t do anything fancy or modern. The whole thing is basically a slightly modernized implementation of [1]

[1] https://hackaday.com/2015/08/21/easy-to-read-bicycle-compute...
> When state changes, components passed that state in the form of props are re-rendered.

https://reactjs.org/blog/2018/06/07/you-probably-dont-need-d...

> I have never heard these spouted as the benefits of React.

You will find this if you read enough of React developers' blogs. JavaScript and DOM these days are fast enough that most pages can completely re-render the page and replace the whole DOM in one shot and you won't be able to tell the difference. The downside of doing that is that you lose focus, selection, scroll position, etc. So preserving those things is the benefit of React.
Reinsurance business is a black swan [0] in the negative direction.

[0] https://en.wikipedia.org/wiki/Black_swan_theory
This is the response I got:

> Sorry, that part of the email wasn't clear. We don't compare passwords between Heroku accounts, this was more of encouragement so customers will hopefully practice good password hygiene.
Same team developed dbdocs.io where you can have both diagrams and data dictionaries of your tables and db together.
The fact that everyone must have insurance does not mean that everyone has it. I mean, someone can cause an accident while not having a drivers license with a vehicle that's not street-legal.

I'm not from Nova Scotia, but we have the same principle of mandatory insurance that has to cover also the accidents caused by people who are violating the requirements, which doesn't add much since the requirements are strictly enforced and violations are not that common, but mitigates those rare cases.
React dev tools, specifically. Of course I (and GP, assumedly) uses the browser dev tools. I don't find the React dev tools very useful.
Here some people I follow:

---

For commodore 64 news and projects

@allc64@nerdculture.de

---

For command line tips and tricks

@climagic@mastodon.social

---

For kubuntu news

@Kubuntu@mastodon.technology

---

For lubuntu news

@lubuntu@mastodon.technology
It's sentimental attachment for some objects - the daughter figured out how to repair T-shirts and sweatshirts (she learned the trade from her self taught father but he could not do these repairs prior to her breakthrough).
> This is categorically false. If you want to update props in a stateful component it is exactly the same - just pass new props.

https://reactjs.org/blog/2018/06/07/you-probably-dont-need-d...
Accidents happen. But if someone besides the woman herself can be legally proved to be at fault, I'd argue that person ought to be guilty before the law of anything between involuntary manslaughter to murder, depending on motive, premeditation, actions, and surrounding circumstances.

To clarify my position further, I'm not entirely convinced a woman who intentionally aborts her own baby should be subject to legal review. Though I believe she's morally culpable for doing so, at least at present there are a lot of practical issues with enforcing such a law.

That being said, it's very different if someone else can be shown to have caused the miscarriage (or abortion) to occur -- whether directly or indirectly.

In the most extreme case, consider someone who pointed a loaded gun at a woman's pregnant belly, unprovoked, and fired it, causing the baby's death and injury to the woman. That person ought to be charged with 1 count of first-degree murder and 1 count of aggravated assault, at minimum.
The most famous example I'm aware of is when Warren Buffet insured the "Billion Dollar Bracket" challenge for QuickBooks, which would pay off if someone had a perfect NCAA bracket. That's 63 correct binary choices, so the odds that anyone gets it are incredibly low.

Of course, they were using his fame to help sell the challenge, but I wondered what premium he got.
It's interesting to note that in the common big presentation format in person, the presenters face is almost invisible, whereas the main thing we can see is their posture and gesturing, with a tiny bit of facial expression.
there is an overflow drain hole it case the main one gets plugged
Don't put data in source control; use a database.
I recall there also was em which displayed a single line as it changed. With ed I used to invoke the 'p' command constantly to confirm that my changes were correct. With em it was done for me automatically.

IMO Unix utilities evolved along with the concurrent advances in technology. If anything, the pioneers were far more concerned about functionality than aesthetics. The earliest UX principles only emerged from the work on Smalltalk at Xerox PARC.
Could this pottery shard be a 1k-year-old hand grenade? Signs point to yes
It's it possible to diff a parquet file?
(P)react vs. Web Components: a Xoogler's perspective
You weren't paying attention from 91-95 or so, then. You'd run into Sun, SGI, OS/2, 3.1, Mac, NeXT, and DOS everywhere you looked, and might have heard about Linux. New Netscape versions were released nightly. There was no data mining, or ads.
All I meant was that if higher NAD levels make cancer spread faster, then that suggests a reason why the NAD level decreases as we age. That doesn't imply anything about whether higher NAD levels actually have that effect, and I thought it was reasonably clear from my comment that this was the first I was hearing about it.

So...since you claim to be familiar with actual data, I suppose you can link a source or two supporting your claim? The person I replied to linked a paper in Frontiers in Oncology, and presumably its authors and reviewers did "actual real analysis of this data."
Please tell us more about the significant gene flow between Europe and North America prior to the Age of Sail.
This tabular file format doesn't exist.com
VHDL has been used for design and simulation of boards (by myself and others).
A well written post, and beautiful art.

Thanks for writing it up instead of creating 10,000 NFTs!
A 1993 Kellerman article claiming guns in the home increased homicides. From what I recall, he would not release his dataset to other researchers, and many other researchers couldnt replicate his work.
CSV should be pretty easy to merge, given that it’s line based.
You are limited to the basic types (int, floating point, string, and blob), however. I can somewhat get behind the opinionated argument for not needing more specific types like most common language types, but not the lack of a date type.
Lol, just saw this now. Yeah, I went into discrediting you instantly because I have used Linux for over a decade and continue to use it daily, and I know you are wrong. I don't really care what you think.
>what you just described can basically become unusable

Oh, so like every JS interface ever. :D
>> In /some/ places, car insurance is required by law.

Looking this up for the US (the country where I live), it seems that only NH doesn't require car insurance (ninja edit: Virginia as well). So for me, this is an interesting hypothetical, but not in a way that's a part of my reality as I do not live in either of those two states.

>>At first thought, it appears more financially risky to drive!

As someone who does not own a car, and does not drive (and is poor - very poor in HN standards as well as in the city I live in), I would like drivers that I share the road with to have insurance, rather than drive without insurance. Getting hit by an uninsured driver would be an absolute nightmare that I doubt I could even afford to bring to court.
Laughs in Lisp

Code is Data would like to have a word
The value and information of @IIAOPSW comment is just gold when you compare it to the primary one. The delivery brings additional value corresponding to the absurdity of the post.
It's a little bit of all of those factors.

In the early days of XSLT client side support was limited. IE still dominated the web in the early 2000s. IE 5/5.5 only supported the XSLT working draft and made up more than half of IE's market share. In 2001 if you were excited about client side XSLT it was only available to fewer than half of your visitors at best.

You could do XSLT on the server side and spit out HTML but that was just one of several ways of converting your raw data to HTML. For most developers it was easier to go from a SQL database through ASP, PHP, or whatever to HTML.

So in the early days it didn't gain much momentum. By the time browsers supporting client side XSLT were dominant AJAX was pretty well established as the new hot thing. JavaScript was ingesting XML with little interest in having the browser handle it directly.

The tooling in the early days wasn't that good either. Dreamweaver 8 added support around 2005 but I think by then the AJAX train had sailed. Before then developing an XSL stylesheet meant a lot of rerunning a processor and reloading a page. For the same effort you could just do the work in PHP or ASP and get more programmability.

Today everyone has a browser capable of doing client side XSLT very efficiently but XML is seen as old and crusty. No one wants to go back and learn XSLT because most developers seem to have doubled down on JavaScript.

Since XML as an endpoint format has been ignored for so long I would bet it doesn't have a good SEO story. While it can carry all the metadata Google or Facebook wants, if they don't crawl it then it doesn't matter.
Its one thing to make an honest mistake, its another thing to make half-baked conjectures about entire swaths of research fields where people have made careers and wrote full-baked PhD thesis's. Its frankly disrespectful to everyone's time when someone who hasn't even tried to be reasonably informed makes up some random explanation for everything and presents it as if their "insight" is worth anything whatsoever. My rudeness is on par and in response to rudeness. Failing to make bullshit feel unwelcome in the most uncertain terms is nothing more than an invitation for more bullshit.
“families like”

Gates’ father’s legacy is founding partner of an internationally known law firm, though I believe he stepped aside before it achieved global status.

Bezos conveniently had 25 relatives and family friends that could invest 50,000.

Musk family and African gem mine abuses are easy to source online.

IBM wanted nothing to do with transistor computers that might cannibalize their vacuum tube computer business until government funded the research; forcing progress through government action is pretty well established in history, just saying.

Austerity is for those with integrity.

The benefits of collective effort are pretty clear; why agency is locked up unless a billionaire can profit further is bizarre.

Relativity implies people without healthcare or universal healthcare are making an uninformed choice without experience.

The philosophy of our system is moral relativism and sunk cost fallacy, obfuscated by government funded propaganda. IMO.
Sure you can, here is example:

0101010010000111101010101
I’m currently job searching and actually came across several mentions of jquery in job descriptions. It’s still alive!

Edit: 3,700,000 downloads per week on npm alone. That’s not a complete or perfect representation of usage, but that’s a significant number
> It would be like a client getting an HTTP 502 from a load-balancer and the service invisibly restarting.

If the load-balancer can't gracefully handle malloc failure than instead of a 502 response, hundreds, thousands, or perhaps even millions of clients will simply get EOF or possibly even hang indefinitely.

Same principle applies to the kernel--if the kernel can't gracefully handle malloc failure, things can quickly become much more unpleasant than a spurious 502 somewhere.

If you've never had to worry about malloc failure, it's because other people have. Failing gracefully under pressure is difficult, so we tend to push those chores into a small number of software and hardware services. But the people writing those solutions still need the software stack beneath them to provide the ability to handle things as cleanly as possible.

Imagine writing an ACID database if a failed disk operation crashed the entire machine. Yes, you can work around it, but actual QoS would suck at scale compared to being able to isolate the fallout to the particular transaction.

Linux' overcommit absolutely has caused me and others countless hours of grief. Because overcommit blunts, obscures, and redirects memory back pressure, things tend to soft fail or timeout in cascades across completely unrelated services, and you really have very little ability to control it in any meaningful manner.
What loopholes do you think they taking advantage of specifically? Because the article doesn’t describe any. It’s mostly about how they’re treated like “second class citizens” compared to the permanent staff. Which is exactly what contracting is, and exactly how it works for me. In reality, contractors aren’t citizens at all, and not being allowed to use the nice facilities, or eat the free snacks or whatever is just a part of the role. Whether you’re a games tester or anything else.
Ach, there may well there be signal in there (and the insurance companies do enough stats modelling to tell if there is) - I mean, isn't the car color a well known example where the people's tendency to drive recklessly is correlated with their choice of buying a boring color or a flashy one?
At least in the US, govt art is not art in any meaningful sense. Even the horrendous corporate art is better.

The closest thing to good govt art in the US is the tax-dodge stuff such as opera.
i was going to say, audio knly doesn't work better. one reason i dislike phone calls. don't get time to think.

it's different when pairing or being continuously online with your team while working, because then you don't have the feeling of waiting for someone to talk all the time.
Still waiting for it to be available on the new Apple chip
You call the argument a red herring, then name all the reasons people use a framework over vanilla js: conventions, learning curve, flexibility, tooling.

Sure, the browser apis are great and always getting better, but I don't see how that's a reason not to use the framework.
So which ones/resources do you like for day-to-day negotiations?
There are loads of wealthy people living in Dubai without issues. Every country has its tradeoffs, but whenever I leave UAE I'm suddenly conscious about my wallet and dread using public bathrooms. It is what you make of it and there's a lot more here than the fake glamorous life everyone likes to moan about.
Or maybe it’s more like saying ICEs will be a ghost one day? EVs were once the path not taken…
Location: Taiwan
Remote: Yes
Willing to relocate: No
Technologies: Python, Docker, AWS/GCP, MLFlow, Dagster, ONNX, GitLab CI/GitHub Actions...
Résumé/CV: https://www.linkedin.com/in/gergelyimreh/
Email: gergely@imreh.net

Hi, I'm a senior machine learning engineer at an applied AI company / AI consultancy for the last 2.5 years. Been working on projects across industries (healthcare, government, online retail, consumer business), and a big handful of different technologies to deliver impactful machine learning systems. I've also co-created and delivered internal training courses for more junior engineers and data scientists around API development and MLOps topics. Been doing hiring, and engineering management across our MLE team. Before this I was a physics post-doc, a fleet operations engineer of an IoT startup, helped found a hackerspace in Taiwan, run an Ignite speaker series, and dipped my feet into the entrepreneur world by taking on the StartupBus.
Something I've noticed is that the demand for "vendor supplied libraries" has only slowly trickled down from the microcontroller (MCU) world.

I've been playing with MCU's for going on 3 decades now. At first, you were lucky if an expensive commercial assembler supported your target chip. Then some vendors came out with free assemblers.

It quickly got to the point where a MCU stood little chance in the market if the vendor didn't serve up a toolchain for it, starting with assembly, but quickly demanding C. Then, on top of just the C compiler, folks started to demand libraries to support the chip specific hardware modules.

Going one step further, today I wouldn't think of using a MCU that was not available on a development board (no BGA soldering for me) and supported by Arduino.

I think PCB designers will come up to speed on this, but it will take time. There are some not insignificant issues. One is that your favorite distributor runs out of the component that's spec'd in the library layout, and you have to scramble. I have a tiny side business making an electronic gadget, and I've had to make multiple substitutions to keep my business running. Bless you, Octopart. ;-)
People can drive illegally. Everyone has $1mm of insurance to legally drive.
Prelude | Remote (USA) | Full Time | https://www.prelude.co/careers

Prelude is building the first candidate-centric recruiting platform. We remove friction, increase transparency, and help teams delight their candidates.

We're a team of 21 and have grown to over 100 customers (Cloudflare, Duolingo, Stitch Fix) and are well funded by top tier investors like Fuel Capital, Jack and Sam Altman, and Elad Gil. We offer competitive Bay Area salaries no matter where you're located, along with significant equity and top tier benefits.

We're hiring across the team (engineering, growth, recruiting): https://www.prelude.co/careers

Engineering roles:

- Full Stack Engineer: https://jobs.lever.co/prelude/cd8555d4-e7f9-4ca2-934f-60dab4...

- Infrastructure Engineer: https://jobs.lever.co/prelude/687b6595-ae5f-48bf-860a-a5e29f...
Economics is based on the theory of a free and open markets.

When I took Econ 101, they had a stock market simulator for us to try out. I colluded with a classmate to game the market, and we won. The only surprising part was that our fellow classmates didn't consider the triviality of it's pricing model, which was strictly based on the last transaction prices.

The Professor was convinced we hacked the computers, to cheat, which we didn't. We just used the rules as presented, picked a portfolio of stocks to sell at the minimum price to each other... then when the price dropped, our fellow students sold ... and we bought, slowly selling off our other stocks, until we had all those shares. Then we sold each other those stocks at the maximum price.

The only effective difference between that simulation and the real world is the 1-10% of the profits that we'd have to pay for "the biggest fine in history". The regulators have been captured.
Are you required by law to conduct a criminal history record check before hiring a bookkeeper for a private business?
This reminds me of Weinstein’s theory that cellular regeneration and cancer are two sides of the same coin. Senescence acts as a last resort against uncontrolled mitosis, ie cancer. This is why for example a mole that grows round and stops isn’t worrisome, but one that starts growing again from an arbitrary point and is thus asymmetric is very worrisome. In the former case the would-be tumor has burned out its telomeres and can’t grow anymore. In the latter case it indicates that the telomeric failsafe has failed and that tumor will grow without bound.
Not all of them: https://www.nbcnews.com/id/wbna39516346