skysight-inc/HackerNews huggingface dataset:
In this post https://drewdevault.com/2022/05/12/Supply-chain-when-will-we..., Drew DeVault talked about supply chain attacks against language package managers (npm, PyPI, cargo, etc…) - and compares them to official Linux distribution repositories (deb, rpm, etc…).

I wanted to try and figure out if this solution - use official Linux distribution packages instead of language ones - would work in practice, what that might look like, and how that might scale.

I thought that the answer would be no, because it wouldn't scale - but, surprisingly, I think it might?

My thoughts & research are written up here: https://duncanlock.net/blog/2022/05/29/supply-chain-attacks-...
> Because that's not too far off from the vast majority of billionaires who simply can't/won't liquidate their potential net worth because it would have negative consequences.

That's... not how the rich access their wealth.

Musk himself has taken out massive margin loans collateralized by his Tesla stock. This allows him to live a very lavish lifestyle without actually having to liquidate his positions or pay any kind of income or capital gains taxes.

In fact, this is how most extremely rich individuals operate: their wealth is locked up in equity and then they take out tax advantaged loans to fund their lifestyles.

So yeah, if I had a painting worth a few billion dollars, and a bank offered me a 500M loan collateralized by that painting, yeah, sure, of course I'd take that deal.

Though ironically, Musk has also recently sold billions of dollars worth of shares, first back in the fall, and again in advance of his purchase of Twitter. So I'm actually not sure how your hypothetical applies to Musk.
The value created fame, which increased the value.
It's true, I don't. But that doesn't mean he does. He clearly chooses to do PR and marketing differently than 95% of all other businesses. I'm highlighting that, and saying maybe that "good PR" doesn't always equal good for his employees, customers or community. We need to take into account the cost, not just seek PR for PR sake.
I think the point of the comment in discussion is:

"Though the spreadsheet was supposed to make clerks obsolete, it in fact just upgraded their job requirements to allow the operation of spreadsheets"

And probably their salaries too.

This is more in line with the discussion related to OP, as well, as devops employees exist, even though apparently it is automated.
Robot touch makes people feel good, especially when accompanied by small talk
It is basically a big rendering library, providing C# APIs for rendering and sound. It also packages all assets, and can be used as editor.
It's mainly a tax on uninvestable capital like subsistence wages and pensions. If you only wanted to tax 'excessive' concentrations of capital, a wealth tax would be more effective.
This is the only reference I've ever seen to Air Farce outside of my own childhood, in which I'd watch it with my grandmother. Incredible summary
Can you do it with twilio?
I just tried to get 7 random routes across Vienna by bicycle and not a single one suggested the train.

I cannot reproduce your complaint at all. Do you have an example you can share? This seems false.
Massive MIMO. Arguably a modulation scheme if the array of antennas is treated as a whole.
That is a good point. Sorry that I leapt to the other interpretation.
Works fine on my cluster. Marking as "can't reproduce".
Ya that surprised me. I'm sure as hell not going to Tims if I can help it.
I can code on ketamine as long as I'm not doing anything novel nor dealing with something that requires a global, holistic view of a system and its interactions. Once you've done something for long enough it becomes subconscious, so as long as I'm still able to type code in and see what I've typed (to correct all the mistakes lol) it's possible to program while under the influence.
this doesn't solve the SMS 2FA problem but if you know what you're doing with voip you can set up a DID to answer with a filtering message like "please press 8675 to be connected", and it'll only ring your actual phone if somebody follows the instructions. cuts down on 98% of telemarketing and scams.

then only give out the DID number not your direct phone to things like car dealerships.

i had one car dealership that I took my car to for an oil change one time that persisted in sales calls for six months until I finally escalated the matter to their general manager.
I purchased a copy of your supporter edition before I even finished reading.

Part poor impulse control, part believing in the HN filter, part doing my part to support idealistic founders putting their time and opportunity where their mouth is.

I hope that you find great success.
The linked page has box and whisker plots. On a box and whisker plot the lower bar is the min, the upper bar is the max. The box goes from 25th percentile to 75th percentile while the bar in the middle of the box is the 50th percentile.

Therefore the stats you mentioned are all there min, max, and average with two different definitions of average given (geometric mean, and 50th percentile).
Don't accept that the culture at your workplace is "how things have to be in the real world".

Every time I've left a job out of frustration with the work culture I've been told "It'll be like that everywhere." That statement has been wrong 100% of the time.

Actively seek out data to challenge the status quo. Does one have to work long hours to get promotions? Does one have to work long hours to get good pay? Do you have to compete with your colleagues to get a promotion? Do you have to have thick skin and take abuse for career growth? If you're failing is the solution to buckle down and try harder?

For all these questions look around at other roles in the company and in other companies. Don't believe any conclusion based on your own experience.

The answer to all these questions is No, but if your work culture believes the answer is yes you may be limited in your career growth.
> Incapable people demand automatic self firing self ranging self targeting weapons now!

Do it. Now such tech not exist, so nonsense demand it.

> it’s using lisp macros so surely HN loves it eh?

No, it is not. Now does not exist any machine with self cognition, and all self-targeting weapons considered as objects, not subjects.

If you will create self cognitios machine, this discussion will have sense, but before - non sense.
Companies that say they’re doing DevOps are like countries with ‘Democratic’ in their name.
Tim Hortons is a place for people with either no taste, no money, or no choice in where they get their various coffee and snack fixes.
This Illusion, New to Science, Is Strong Enough to Trick Our Reflexes
Zuckerberg was the ultimate authority at Facebook. Everything the company did is his responsibility.
Not even yuppies in MB go to Tims
Such thing do exist in some countries. I remember one of my relatives protected their phone number by adding an incoming call password.
What do you use to manage all the subdomains?
I’ve done this for 30 years. I didn’t do it to catch people selling my info, but I do enjoy it when I do. I do it so they don’t send me email to my personal email address which I only give to people I want to email me. I can also blackhole someone that’s marketing to much and it is easy to search my email for any correspondence to and from that vendor.

It is awkward sometimes when I say It on the phone but I’m also in senior leadership at a big company so my skin is about as thick as it comes with regards to awkward situations. My entire career now is a series of awkward situations I’m asked to fix.

Also, I use a password manager (dude it’s 2022, if you’re not using a unique password already you ought to reconsider your life choices and once your password is unique who cares if your email is too?)
I'm in the same boat. My plan is to stay at $company and learn as much as possible about cloud, devops and data Governance and maybe try to find a position in the Astronomy society. Not sure if it pans out.
> The platform of choice is mostly Kubernetes these days

Is it? These days I see SAM or Serverless Framework or other FaaS solutions all around me and it seems that everyone is migrating away from ECS/EKS/containers, it might be my own particular bubble though.
What is the alleged fraud then? It seems pretty clear that this is what he is accused of:

> From at least in or about June 2021 to at least in or about September 2021, CHASTAIN used OpenSea’s confidential business information about what NFTs were going to be featured on its homepage to secretly purchase dozens of NFTs shortly before they were featured. After those NFTs were featured on OpenSea, CHASTAIN sold them at profits of two- to five-times his initial purchase price. To conceal the fraud, CHASTAIN conducted these purchases and sales using anonymous digital currency wallets and anonymous accounts on OpenSea.
Are you urban though or suburban? The suburbs have basically no options for anything that they serve.
TN visa is employer-specific. They cannot work with your company while under another employer's TN visa. Although the TN visa has no minimum salary requirement, I doubt the application would be approved with no salary.
It would be nice to be able to see the numbers in a table (perhaps in a auxiliary page, instead of the main page). Sometimes people want to rearrange the data or use another representation. (log scale? sort by 75% quartile? ...)
Something I don't think many talk about, the fact that ffmpeg can input and output images, and does it really quick.

Recently I was working on processing large images (100-200MB per jpg) which needed a crop, some added text and "progress bar" for a timelapse. I started with imagemagick, it was super slow, so tried graphicsmagick, also slow, just somehow I thought, why not try ffmpeg.
Man, it's night and day difference. It processed my images super quick (from ~30 seconds down to ~1 second), and had surprisingly good documentation (compared to IM/GM), and allot of support on stackoverflow etc.
Hard to know anything for sure since results are "tailored". But Google used to be excellent for technical searches, whereas now it is unhelpful at the best of times. I'm guessing this isn't counted in "most searches gor most people".
Not sure I believe this. Instagram could’ve conceivably killed Facebook a decade ago if they’d chosen not to sell. Reminds me of Steve Jobs talking about Microsoft bringing about the dark ages of desktop computing: https://512pixels.net/2010/05/the-desktop-computer-industry-....
Is that a US thing?
Lol. Sony? Nowhere else on my CV has come close for "the work of work" taking all my time, and only incidentally writing a line of code in between plannings and meetings and SAFe rituals.
Churn. I've had 4 managers in 6 months. I'm ready to go consulting because at this rate I never have the same colleagues for more than a few months anyway, and I'll get paid more.

Just waiting for that RSU cliff, or redundancy. Whatever comes first.
https://brutal.chat/
It would help - immensely - if world readable wasn’t the S3 bucket default.

Defaults matter, and AWS cares more about ease of use over security. Which helps explain their security position.
> So straight from the horses mouth the expectation is somewhere over 40.

There are 19 other numbers between 40 and 60. How do you reach the conclusion that since it's more than 40, it must necessarily be exactly 60 all the time for every employee?

> “Insane work hours for everyone, no overtime pay”

> you only get overtime pay after 10 hours, not 8 hours like you would think.

It sounds like these are salaried positions and they are not entitled to any overtime pay. If they were talking about hourly positions they would be getting time-and-half from 41 hours on, because that's the law. The fact that they're getting any overtime pay at all in a salaried position is more than most companies do and is beyond what is required by law.

From the Department of Labor website:

> Nonexempt workers must be paid overtime pay at a rate of not less than one and one-half times their regular rates of pay after 40 hours of work in a workweek.

https://www.dol.gov/agencies/whd/compliance-assistance/handy...

So, there's no way the overtime after 10+ applies to non-exempt employees.
The key word is "seems".

She may be more clean than they are, but they convinced their voters that they're ethical people -- or at least ethical enough. And all of them (except Trump) started with a clean slate in their first election, before running for president.

Sandberg is starting from a bad spot. She has all the liabilities of Clinton without the decades of campaigning to give her a base of support.
1994 was a wild time. I'm pretty sure that's when I first connected to the internet and got my first e-mail address (at cello.gina.calstate.edu!). Using Mosaic and soon Netscape Navigator for the first time was nothing short of mind-blowing. By 1996, I was publishing my own websites, and then in 1997 someone paid me to build them a website. 25 years later, I'm still getting paid to build websites. What a ride!
This is not good advice. The fact that it worked for you is an absolute fluke, and it is not sensible nor rational to gamble like that, especially if you need money badly.
Yellen: I don't believe we'll see another financial crisis in our lifetime(2017)
iPad Air 2 running Linux 5.18
Normally you're never going to run a kubectl command in prod that changes anything except for kubectl apply -f. The yaml file may or may not be script or template generated but it's likely. In a lot of shops they're just going to write to a wrapper around the kubernetes API in whatever language the shop uses whether it be python, go or whatever. And there are plenty of linters for the yaml and ways to test without impacting prod.
I would say that 3Blue1Brown's educational videos on mathematics will likely be seen as "great works" in the future.

The visualizations and explanations are genuinely highly valuable for people studying mathematics (e.g. his "Essence of Linear Algebra" series [0]). The barrier to creating similar work is also high, due to the amount of time and expertise to create each video.

They also have an artistic quality and a sense of polish that gives the impression that the videos will stand the test of time.

[0] https://www.youtube.com/playlist?list=PLZHQObOWTQDPD3MizzM2x...
Real Player Remote Arbitrary Code Execution Vulnerability
I don't see why Google would sell your location data to others. Store your location data? Absolutely. Use your location data? Absolutely. Target ads to you based on your location data? Absolutely.

Sell it to others, though? No way. Why would they give away their valuable advantage? It's very much in their interest to stop anybody else from getting that information, and I trust them to be self-interested.
It's rated platinum on protondb.com already. Can't wait to fire it up at home and play it on my Kubuntu box.
As someone very active in that space, he went dark after the OpenSea incident and it's not widespread that he started something new. This is also news to me.
That's Ytalk; also ancient, and uses the same protocol.

https://linux.die.net/man/1/ytalk

I seem to recall seeing people use that around the undergraduate CS lab.

I should have mentioned that what was new (to me) when I was introduced to talk/ntalk was the concurrency of the split screen: both parties just clacking away at the same time

As a user of dial-up BBSes, I had often chatted 1:1 with sysops, nor as a sysop with users. The BBS sysop chat implementations were different/simpler; both parties were typing into the same space. This required manners: taking turns, letting the other people finish their sentence. That's the same like a Windows user being remotely assisted today: you and the remote admin can both move the mouse cursor or type into the same edit boxes.
Cringe take, but fair enough on the bank freaking out part.

My interaction with them went like this:

>staff: And what's your email address?
>me: $BANK_NAME@$MY_DOMAIN
>staff: chuckles

And on the next day I got my bank account flagged.

Edit: Turns out the restriction was not related to the email address. It was a red Canadian bank.

I would say large banks like Citibank, DBS or HSBC would never care to this since all external emails are written to have a huge 'EXTERNAL' in the subject and a disclaimer before the content.
The USPS is one of the worst offenders for selling email addresses.
Not quite. Differences in action have been found : https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2631950/ https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4497800/, and there is reason to believe this could cause higher toxicity.
Not really, he afterwards says that he was more trying to inject some humility. He really doesn't think this is measuring anything of interest. For the birds result in particular, see https://twitter.com/BarneyFlames/status/1531736708903051265.
She isn't wrong so far, if "financial crisis" means a massive recession.

She also indicates what kind of financial crisis she means:

> "Yellen said the architecture of the financial system has changed in ways that has made it safer for all parties involved, citing a number of factors including the Fed’s annual stress testing practices that simulate a crisis-like situation including significant swings in the stock market, a decline in home prices and a decline in the unemployment rate."
I wonder if those needle clumps that remain in orbit are still useful for communication? The article mentioned that a nuke launch damaged some satellites at the time. Wouldn't needles also have the advantage that they have no circuits that could be fried from EMPs or radiation? I'm not sure to what extent you can shield satellites today - but it is something to think about.
The Books That Taught a Debate Champion How to Argue
Wow small world indeed!!! The team at CenterRun was amazing
Position: Senior Android Engineer
Company: GoodRx
Location: remote opportunity or relocation to Santa Monica, CA
Able to sponsor work visas.

https://jobs.lever.co/goodrx/55b289fd-3914-4826-9aff-6c48a78...
That's part of why I refuse to own a car. Walking is much better. I love walking.

Plus the whole thing is highly conspiratorial, like you talk about. Getting you to the bargaining table ie into the dealership. Then they work you, edmunds.com has an article about all the shitty little defeating tactics car dealerships do, at the direct verbal instructions of the dealership owner, and him directly under orders from the car companies.

Plus it's oil, American soldiers die every day for that oil in the Middle East, and many local people with them. It's no joke, in fact one time a military man I knew told me he just drove slower on the highway, like 30 mph under the limit, strictly because that oil is American blood, and you use much less driving slower to reach the same place. Like the lower speed limits of the 70's, but under his own volition.

In WW2, there was propaganda (not being negative, I don't consider it a negative thing, means words to be spread, spread the word) saying if you drive alone, you're driving with Hitler. Later, if you drive alone, you're driving with terrorists. There would be no war, at all, in the whole Middle East if it weren't about oil exploitation. That's the whole deal. Israel a little bit, but oil all the way. The Middle East had, up until I think 1947, including Iran, a very high opinion of America, blue jeans rock and roll, pizza, inventions, California, Cadillacs, what's not to love. Then came the Israeli War of Independence, then grossest of all the coup in Iran in 1953 which was just disgusting, and things changed very quickly.
Silly. He was the face/favorite/twitter voice of OpenSea during his employment there, and he blew it for what.. 18 ETH in "fast" gains?
I use catchall domain for... everything. Every account at every entity has its own unique address, since probably well before 2010. I have always more than happily accepted to have my address saved into marketing databases.

I can share the frustration sometimes with employees turned sudden internet experts and "teaching" me that my email address cannot start with their employer's name. I usually retaliate by withdrawing my consent to be registered into their database.

And that ends there, I disagree with everything else in the blog post.

1. Catchall facilitates blacklisting when it becomes necessary: whatever rotating address is used by the sender, I blacklist myself as the recipient.

2. It helps detect who shares databases with whom. This is not necessarily about "selling" but more often it taught me which companies operate with which companies under the umbrella of that "and our partners" statement found in every privacy policy written by legal consulting firms.

3. It's a smoking gun for companies wbo get hacked without even knowing it. I have been informed several times of a compromise before the company itself knew it.

4. I also use suffixes on my catchall addresses, this allows me optimize my email filters.

5. It makes correlation more difficult across databases and anything that helps achieving this goal is a win for me.

6. I use a password manager, I use both the login and the password fields. The title of the entry always allowed me to find the account very efficiently.

I can probably find other reasons, I'd just conclude that after more than 10 years using a catchall domain, I still can't imagine sharing the same identifier across all my interactions.
> Java might not allow this at all in the name of being cross platform

Seriously, that's my major iteration with Java.
Remember that HR works to promote the best interests of the company, which may not be the same as your best interests.
TiddlyWiki has hit most of these capabilities for many years now, and is nearly unique in wrapping up all the code and data in a single unit that can be run in any regular browser, from either local storage or a remote server or storage. (It does need a killer web clipper, though...)

TiddlyWiki really is one of the cleverest apps I've ever run across, but I'm not much of a JS programmer, so it's got a bit of a learning curve if you want to hack on it. It's pretty easy to use right out of the box if you don't want to hack on it, though, and I'm giving some thought to moving most of the data I've collected in OneNote to TiddlyWiki to escape Microsoft's clutches after I've finally disentangled myself from Google... One thing I love is that TiddlyWikis I built 20 years ago (granted, they were simpler then) are still perfectly usable today.

My perfect data keeper might be something of a mashup between TiddlyWiki and a JuPyteR notebook.
Your text is spam. You spent community resources on spam. This is offense in many countries.

So next time try to create something valuable.
I want to say something nice about this... but unless your entire enterprise is a pure CRUD app with just a SQL database I don't see how this is useful. Complex application backends pull data from multiple sources - SQL and NoSQL databases, REST and SOAP endpoints, message queues, service buses - and perform all sorts of transactions and data transformations.

One of the strengths of GraphQL is you can transform data from multiple sources into a common model the UI can use. If your whole backend is a single SQL database schema GraphQL doesn't seem to add a whole lot of value there. I'd rather have a code generator that builds a simple Go microservice and use protobuf JS in my front end.