skysight-inc/HackerNews huggingface dataset:
From the article: "the upcoming Ryzen 7000 line and likely Mendocino are not safe to use. They all contain a remotely exploitable hardware backdoor that can not be turned off"

Does anybody know what he's referring to? Something in the PSP? How is this remotely exploitable -- do they have a built-in BMC or something that listens on the network?
It's crazy how good nixos+git gets when you've iterated for a while. I'm using the same setup on my work laptop, my home PC, and my router.

Coming up on my 1 year anniversary with NixOS and couldn't be happier, even though it has taken quite some time to adjust to (and I still barely know the language).

Having one place for all configurations is such a breath of fresh air, and having my work & home PC being identical (even Gnome is declaraticely configured!) is so nice.

Before NixOS, I resented using my private PC because it was never up to date with what I had configured on my work PC, but now that's just a "git pull && nixos-revuild switch --flake ." away - regardless of what has changed.
Funded by the advertising industrial complex, captured, gamed, and manipulated by all industrial complexes including political and tyrannical, and take a peek at the last investment rounds and % of those rounds they took hold of.

My favourite subreddit?

https://www.reddit.com/WatchRedditDie
Underrated truth bomb right here.
"A Mind Is Born" 256 bytes, C64

https://www.linusakesson.net/scene/a-mind-is-born/index.php
If someone's that skilled, you might be able to double up on slower remote jobs and collect two salaries instead of getting one position with the demands of two jobs but with the salary of 1x to 1.9x of a slower job.

There seems to be diminishing returns for salary increases with responsibility increases.
This isn't really accurate: xmpp isn't p2p, it is hub and spoke. All comms (except optionally some VoIP and file transfers) go through the server. XMPP can also do store and forward pretty easily with common server addons.

I'd not really describe it as fragile or bloated either, having used it for twenty years or so with no real problems except the now-solved absence of e2e encryption (OTR, OMEMO).

Still, clients could be better.
When essentially all mainstream and government claims are based on said crank's claims,

Which they manifestly are not. The evidence is overwhelming, and comes from numerous independent sources.

There is no genocide underway.

If you want to live in that universe, that's fine for you.
I guess I meant to specify software. I can think of a few places where hardware products got traction under new ownership. The problem seems to be one that only afflicts software products.
You could try looking at civic technology organizations. I felt that the work I did at USDS had a huge positive impact, and you can find private firms like Nava or Truss that work on the same / similar projects if you don't want to work directly for the government. There are similar agencies and organizations in Canada, the UK, EU countries, and some Latin American countries, too.

There are also some orgs at tech giants that work on socially impactful products (e.g., sustainable hardware teams at AWS or Azure, like the folks who work on https://natick.research.microsoft.com/), so I wouldn't rule those out entirely.
Fair enough. I could have googled it. I live in a bubble of Linux and AWS/other cloud services, so this sort of thing isn't part of my world.
I was curious how Apple handled this for Canada, IMO their (previous?) solution seems reasonable enough:

https://i.postimg.cc/SsT0Tsgs/Screen-Shot-2022-05-26-at-11-4...
As a rabbit trail/pet peeve, I think there needs to be _some_ standard in this space. It is silly to me that iMessage/SMS/Google Talk/Facetime/etc. can't all just interop on some open standard. I understand there are marketing forces pushing against it, but we do it for email, why not chat & talk? Totally ridiculous that I have to think "is this friend using Android or iOS?" when I text or call them. Even worse for group texts, plus means that windows/linux users can't easily message through their iphone. I haven't dove into it, but XMPP seems like a good candidate.
Respectfully, NO. Atrocious parental behavior is not just bothersome memories that somehow should be prioritized second to a goal of reconciliation. Reconciliation should not be considered a default 'best outcome' for this kind of situation.

Children who are parentified (cf. "parentification trauma") or who are subjected to narcissistic parents never get to be little kids, and that trauma affects them in hundreds of different ways that leaves them a brutally incomplete individual.

In his television interview, Wheaton noted that the only reason he's alive today is that he did not really know how to kill himself as an adolescent.
With rubygems.org or hex.pm, the package maintainer must explicitly publish a package to the registry. The registry never poll the original source, so the whole issue would not exist in the first place. I found Go's package registry very strange and limited:

* What if I am using a source control program other than git? Mercury?

* What if I have files in my git repo that I don't want to show to the world, like tests?
I am willing to bet no one did this.
SQLite is quite famous for new developers as the default db in Rails and Django. There's a widespread misconception that SQLite is a toy DB and that it's necessary to switch to a real DB like Postgres or MySQL.

I suspect this fuels some of the hype--trying to correct the misconception.
It has been said that a language is a dialect with a flag and an army, but, really, the correspondence between flags and languages is not great, and the use of flags to represent language choices has always been placing pretty above useful in a way which is worse the more diverse your international market is.
I don't get the value of this company. How can fellow SWEs who learnt about kernels, networks and hardware (among other incredibly complicated works) get excited about ONE CLICK CHECKOUT?

Maybe this is the JS boot camp effect.
The more I read about South Korea, the more I am convinced it's one of these countries where societal development did not follow economic development - along with e.g. United States.

Lack of respect, empathy, trust, etc. can be expected in poor countries where each is on their own, labor is not as valuable, and some resort to unethical means to survive. But in countries which there's enough money floating around - absence of these values is a moral failure of the society.
One thing that I always gave Dell/EMC credit for was that they at least outwardly seemed to have left VMware free to their own thing. As opposed to a lot of their other acquisitions that they bastardized in this rush to sell enterprises on everything private cloud. We'll see Broadcom ends up taking the same route.
This might need a bit of unpacking to ensure that people don't come away with the impression that you're talking about "great replacement" white supremacist bullshit here. Assuming, of course, you're not.
Certainly part of it is that, as you have been around longer and maybe moved higher up, you probably better appreciate how expensive it really is to have "just" a small team doing something that could largely be outsourced. You have the developers of course, their benefits, their manager's salary and benefits and some small slice of attention up the management chain and across other functional groups like HR. And it's just one more distraction from the things that actually matter to running the business.
> This is ultimately a good move, and matches trends and emerging best practices on the web and elsewhere.

It solves some issues and creates others. Icons are more helpful than words in the menu bar, particularly as it gets more monochrome. And the complete confusion between buttons that look like text, links, actual buttons, and weird typography we find on the web is not exactly a good model to emulate. I really would not call that “best practices”, as they are responsible for a significant worsening of the UX on all mainstream platforms.
Just use vscode and remotes. Zero hassle and zero friction - just fire up and start coding. It is seamless.

I use it on windows, Debian, macos and even Chromebooks and don't have to worry about any kind of syncing. It just works

It has a built in settings sync thing, but as a general rule I strongly strongly avoid the use custom settings (in anything) to avoid the issue you are facing. There is in my experience a huge productivity gain to be had by just being pragmatic and using (and knowing) defaults in everything you use frequently, and not being a useless prima dona if your custom key bindings are missing from every single machine you need to use each day/week/month/year. We jump around servers and computers frequently, so I find it is easiest and most productive to just go with the flow and use the defaults so I can be working immediately as soon as I SSH into a new host or am given a new laptop to use for a 3 week long contract or whatever.
No it doesn't. Just because people do start wars over most of those things doesn't mean they should. It only takes a little shift to a less insular perspective to realise that the world doesn't have to be that way.
>Furthermore, how in the modern world can people stand up to a government on a military level? An untrained population of gun owners with limited ammo doesn't stand a chance against the biggest and most heavily armed army in the history of the world, right?

Worked well enough for the people in Afghanistan, Iraq, Vietnam, etc., didn't it?
>something happened in the late 60s early 70s.
How fast is it compared to rust ? Do you know.

I ask because I've started a side project in rust because all of its guarantees were appealing to me (I don't want to spend too much time on bugs, and my code uses some threads). I also need maximum performances. So I've chosen it. But now I have my compilation times that reach 45 seconds, so I'm slowly wondering if the go balance (towards fast compilation) would not be more advantageous; unless of course, performances are real bad...
My understanding is that Bolt lined up loans for employees to cover employees' tax burdens due to exercising their options.

In simpler words: Bolt helped employees take out personally guaranteed loans to give Bolt money.

In the loan terms, if the employee leaves for any reason, the employee owes Bolt the entire loan amount within 90 days of end of employment.
I found a genuine compiler bug once, but it was in an obscure C++ compiler for the Playstation from an outfit called SN Systems (I think it used the EDG front end).

But it was in a semi-experimental feature that did some really weird stuff - it was for inline assembly code without an `asm` block - you could just inter-mix MIPS assembly instructions with your C++ code statements. Or rather you could if it worked properly. It was an ambitious feature - a bit too ambitious I think.
Amazon launches same day delivery for Prime customers (2015)
Daniel Gultsch's response is also worth reading: https://gultsch.de/objection.html
Do you have a broom? Congrats, you have just established a reach advantage.
Which one would you suggest ?
I hate that we’ve built an internet nobody wants. I’m tempted to give up on tech and go become a potter.
They're fat/inefficient because of the electron base, so they use more RAM and resources to run than a native app would.

Obsidian, for example, takes over 2x as much RAM on my computer as Emacs does, which is crazy.

Add to this the fact that they all have to work with basically the lowest common denominator of interfaces, which means they're consistent across platforms but also completely eschew anything native on any of those platforms. In the Mac world, this is especially egregious because we as a tribe tend to actually LIKE the way the Mac does things.

There's a phrase popularized by Brent Simmons about this: Mac-assed Mac apps. See

https://daringfireball.net/linked/2020/03/20/mac-assed-mac-a...
One thing that’s interesting is the author talks about midlife crises at 58. That’s not midlife, midlife is something like 35-40. I started joking about midlife crises at this age at work and people get very uncomfortable and weird about it. I suppose I brought into focus the fact that we’re not as young and permanent as we might think, despite at 58 deluding ourselves into thinking that’s “midlife”. My uncle has terminal cancer and he’s 65.
Mental models are a perfectly interesting part of experimental cognitive psychology, no need to attack them over that post.
This is what I've done for a long time. You get the benefits of keeping things synced and having a full history.
I can understand that, for myself I don't miss them. An index on the column is just fine for me and personally I prefer to manage that in the application layer (I know I'm probably not in the majority). Lack of FKs is what allows for their scaling technique (using Vitess) from what I understand. I'll say for my use it's not been an issue but I do understand that migrating an app that does need/use them might be hard/impossible without other big changes in the code.
I was just about to make this point. How does "one click checkout" become worth $11B?

(massive) Capital misallocation, i'd imagine
That's the point of a pool. You slowly regain them until your pool is full. You can burst 5 (or whatever k) moves at once, but it takes time to refill the pool.
Even a subreddit like /r/nba has become super political. Literally impossible.
Frostpunk requires a lot of resource management and focuses a lot on hard choices. For example, choices between letting people die in the wilderness or taking them in when you may not have enough food to feed everyone.
> VMware isn't just a hypervisor, it's an entire ecosystem of VM management and orchestration. You can tie it into AD, delegate different permissions and roles to users/groups, manage upgrades, interact with PowerShell and other APIs, it has integration into Dell and Cisco solutions, all sorts of additional features you won't find running CentOS and KVM without adding more 3rd party software on top and cobbling it together.

This is it, really. For big companies this kind of stuff is important.

And "cobbling it together" is very much understating the effort involved to keep it running: eventually you'll upgrade one of the components and it will break something, because you didn't read the release notes of an upstream dependency that mentioned a breaking change that affects your particular setup.

Having the vendor (vmware) provide this as a delivered, tested, supported solution is so much easier.

Similarly, I suspect it would be significantly simpler to find IT firms and/or hire individuals with VMware knowledge than it would be to find the equivalent on KVM + Cockpit + the dozen other components you need.

Note: I'm not saying this is right or the way things should be, but simply pointing out the "enterprise" perspective. Boring technology is safe.
3. Burn through my 15 minutes morning paid break to go make some breakfast or coffee and decompress.

The scrum is rarely a productive meeting, it is more of an outlet for the extroverts of the team to talk.

As an introvert, this tires me.

Often the people in question don't even take breaks themselves. I wish they would take their break to have that small talk so I could keep my break for a better time.

This seems generalized to all teams I've worked in across several companies.
You're right, it's definitely an issue that people are more likely to turn down the same product if they think it was made in a big building owned by a group of people instead of, say, in an old lady's home.
The two things I always bring up in interviews on why I like Go:

1) Easy to use pointers. There's just pointers, not like C where you can have anywhere from 4 to 8 different types depending on your platform. And no, pass by reference vs. value are not the same as pointers.

2) Very simple to use concurrency.
That’s what high explosives are made for.

To use a real world example: Columbine was a failed school bombing because their detonators didn’t work because the product they used for the detonator’s changed between their testing and when they purchased the final “real” devices.

The guns were intended to keep everyone terrified and in place until the bombs could kill everyone.

A fluke manufacturing change to the product (I think a clock) between their detonator tests and their actual attack is the only thing that stopped nearly everyone in the school from being killed that day. They even set a bomb outside of the school to kill the first responders when they arrived — again, it was a horrible tragedy, but what happened was so much less than what was intended.
If your org has a software consultancy sales arm, you can make this shift by becoming a solutions architect. You'll get to work with sales and product to create solutions for prospective clients. A good product person will jump at the opportunity of a dedicated architect to help them with the tech portion of pitch decks.
I've been doing "home dir is a repo" for a while now too and I'm always surprised when people think it's weird/dangerous. I wrote a few guides with tricks on how to do it on my blog that all started with "This is probably a horrible idea but here's how to do it anyway!"
In fairness this hypothetical situation shouldn't even exist, no one should get a laptop with a HDD in any case.
His other example, Snikket, is self hostable and interoperable with the wider xmpp world. The pattern is largely related to companies wanting to build walled gardens. On that basis, most open source tech has "failed" in the sense of having created greater value in VC backed companies with marketing departments than in communities without them. It isn't really surprising that it works that way, and IMHO it isn't failure.
I suppose that makes sense. Personally, I would write lessons learned rather than learnings in part to get rid of the red squiggle. My dictionaries flag "learnings" as a typo.
Federated Credential Management API (Draft)
This is sort of similar to what Evergrande was doing with executives, right?

IIUC, Evergrande strongly "encouraged" execs to take loans (secured against their income - which was considerable) to buy Evergrande "investment products".

Obviously, this was just a way to pay employees with their loan. If things blew up - the employee is completely screwed. If things don't blow up (which seems unlikely when an employer has reached this level of desperation) - then it's still not clear it was worth the risk premium to the employee.

This literally feels like something from a dystopian novel - where you take out loans to get your salary - and you only actually make money if your company grows 10x in one year - and even in that case your benefit is slim - while the VCs and founders walk off with 85% of the gains.

Hardly anyone understands finance - and most people underestimate how greedy some people can be. I feel like there would be no end to suckers who would fall for this trap.
I talked to a 'pure' project manager for a big company, basically this guy went to a 2 hour project meeting then to his secretary got a new folder and into the next 2 hour project meeting. Basically ticking boxes related to gantt charts. This is the far end of project manager, a fully political position with not too much expertise in the specific project required.
They do.

But I also like the real-time aspect. I like the urgency. I just want something in the middle between "You can't move your hand ultra fast so you lose" and "I will spend 10 minutes considering the optimal move".
The languages that truly let you do anything you want flexibly invariably lead to incomprehensible ivory towers. It is why managers hate Lisp, it's why Perl is joked as write-once read-never.

The issue with the "DSL" is the third letter in the abbreviation: LANGUAGE. A language isn't just a specification of syntax. A language is a collective shared understanding between a sufficiently large number of people. Without that, it is a dead language.

Socially in programming, programming languages need to align to real-world concepts, because that is what enables the language to be understood by new adopters. And converging on those shared meanings is hard, because designers and lingo makers can't anticipate all the variations of understanding people will have.

Learning a language is hard. So every DSL I've encountered invariably forces me to be the compiler: what is this being translated into language-wise and what does it convert to. That is a big load, so your DSL better provide power and convenience to deserve it.

DSLs also run headlong into NIH/creator's advantage. The people/person that make the DSL and implement it will know it FAR better than any adopter will. And documentation is always lacking. So what is blindingly obvious to the core practitioners is very much not so to the noob.

You are limited by the average intelligence of the programmer at a cultural level. The lone mad scientist may produce amazing ideas, but all the groundbreaking technology happens because an army of people can be coordinated to implement something.

Lisp is basically a DSL factory, and everything is done via DSL. Can Perl7 do that better than Lisp? Is that a good or bad thing?

Well, it doesn't matter. Perl5 is what it is. Perl6 was a social failure. I doubt Perl7 will change anything.
A great many East Asians greatly admire Western music. At it's best it's both mathematically interesting and aesthetically beautiful. Frankly, I admire their utter lack of cultural insecurity.
WeWork founder A. Neumann’s new crypto project sounds like a scam within a scam
> Or I wonder if this has to do with the Taiwan flag or lack thereof.

AFAIK there never was a Taiwanese flag there, and the different input methods for Chinese have non-flag icons (same for Japanese).
From what I've gathered, Larry was simply focused on Perl 6 (which became "Raku" in Oct of 2019). It seems to me that he just wanted to let others handle the new development in Perl 5 rather than being directly involved all of the time. I don't think he has done much at all with Perl 5 for quite a long time.
> I'm convinced it's possible to merge these concepts intelligently

The MYN methodology comes pretty close to that for me: https://www.michaellinenberger.com/AboutMYN.html

(Don’t be put off by the marketing angle and the terminology, it’s still the best personal work task management methodology I’ve come across.)
Semi related, I recently watched these videos of Benn Jordan's field recording adventures and enjoyed them a lot.

https://www.youtube.com/watch?v=bnJzRUjd4ds

https://www.youtube.com/watch?v=I1i_ECeB2fo
I install SyncThing-fork first of all.

SyncThing has all my music, notes, and books. Basically anything small enough that I don't worry about storage space lives in a sync folder, unless it's code in a report.

My personal use of tech is pretty heavily influenced by that app. If it weren't available I'd probably do a lot of things differently, and rely more on apps with usually proprietary sync built-in.

Then I get F-Droid, KDE connect, and BitWarden.

After that I usually customize the shortcuts in the tray. I'll get rid of the Bluetooth and location buttons so I can't accidentally turn them off, since I basically never purposely turn them off.

Then I get the do not disturb timer app, and get rid of the regular do not disturb, so I don't accidentally leave it on(It's very easy to forget when you only use it a few times a year at the absolute most).

Then I get all the usual proprietary "you are the product apps" and set them up, and install all the various apps I like having around.
Who said that's the reason he was calling them garbage ?

In my case I followed the link, realized it was a 3 part article so I went to the first part and got the message, said "Well, lets check the third one then" and got the message again.

So objectively it is a garbage website, they were trying to convince me to subscribe by showing me something I was not able to see due to the site design