skysight-inc/HackerNews huggingface dataset:
I haven't run the numbers on game consoles or PCs, but in my day job of machine learning it absolutely makes sense to buy expensive hardware. Even accounting for the costs of electricity, full time system administration and hardware depreciation.

AWS is making a killing on selling GPU time to startups that should put in the effort of getting their own on-prem compute. The market inefficiency here is that AWS knows that startups don't want to get distracted by system administration and they're squeezing it like hell.
Not to mention poles in the unit circle.
> it's a mitigation that applies when you already have code execution

Sounds like a huge deal if you want to run untrusted code inside a sandbox.
Specifically, those who bought a house to live in in the last 3-4 years.

Also those who renewed in the last 3-4 years. Which realistically means most of those who bought in the last 20-25 years.

That's likely over half of all homeowners - not so small a fraction after all!
With profits, shouldn't you have an infinite runway?
Not really. It's just that tons of Facebook/Instagram domains show up in the PiHole admin page.
The whole prudish / secretive attitude around salaries has got to be one of the most annoying parts. Just get the formalities over with instead of wasting time, please.
This is the best of these attempts I've seen so far.
Why I use mutt, and why it’s better than anything else: https://lwn.net/Articles/837960/
“Software Engineer I - 40-250k”
How... do 80 searches cost them a dollar? That seems insanely high unless they're counting fixed costs that'll go down fast (on a per-search basis) as they get more subscribers.

8,000 searches costing a dollar, in actual resource use? OK, maybe. Still seems a little high, but maybe. 80? Are they paying someone to manually look things up for you?
Okay, but now we’re back to Tailwind being back to syntactic sugar for styles (you can definitely put media queries in a style tag).

I disagree with your preference; all the classnames are not easily parseable and obscure the markup, and I much prefer the CSS media query syntax. But that’s, like, just my opinion, man. If you like it better, don’t let me stop you!
When you look at the role that the West played in the Arab spring movement in general, specifically Intel agencies destabilizing Libya, and supporting extremist movements, the rapid pull out of Iraq, when it was known that extremist factions were waiting for this to happen...the West had it's hands all over this. The West was involved from the beginning, just not in obvious ways.
If your projects are small enough that relying on the cascade is a reliable option, you probably don’t need tailwindcss. If you’re working with 50+ devs on the same code base with many moving parts and shared components, you can’t afford to verify whether the cascade breaks something on every single change. So imo there’s nothing inherently wrong with your post, it’s just that tailwindcss doesn’t really excel until you’re working with a bunch of people authoring css in a shared codebase. (That said, now that I’ve drunk the kool aid I use tailwind or windi css even on my own projects. It’s pretty great once you know it.)
Did the owners of .com do the same thing?

Because http://com. Works as well.
Just to play Devil's Advocate: being explicit about salaries is the kind of practice that sounds amazingly good on the surface, but might have some unintended real-world consequences.

For instance, whereas before when salaries weren't explicit, a weaker candidate with some good qualities who was on the bubble for consideration might be able to get a job if the salary was more favorable than the company was initially planning. With explicit salary ranges, if the candidate isn't deemed good enough to warrant hitting that predefined range, they might be unemployable in that field and not gain the experience needed to progress. In the past, a weaker candidate might have been able to go for a lesser salary range, get the job and gain more experience, and maybe make it up down the line. Maybe that's no longer a path forward for a lot of people on the bubble.

And stronger candidates who are perfect fits and world-class performers might be lost for a lot of companies because the company has the excuse of a pre-defined salary range. So maybe firms miss out on some genius, perfect fits, because the bean counters can't be bothered to assess everybody's merits individually.
Would be nice for someone to keep and publish a list of exclusives so we can track this.
Those transparent democratic institutions didn't stop 20+ years of war in the Middle East.
Paid search means that the service is not incentivized to appeal to advertisers. Disclaimer: happy Kagi subscriber here :)
Fair, but buying a long lived asset to both save money and get a larger capital gain is different than rushing to buy depreciating goods because one is worried their prices will go up further.

More broadly, if there was price stability for single family homes, buyers would be outraged!
If they are - Joseph and MIT, please stand up to them. The standard for infringement is confusing similarity. Researchers aren't marketing goods and there's no risk of confusion.
Where did they say that? You can get lots of drm-free games and software. Going out of you way to do that is like only getting fairtrade whatever, a bit unusual and restrictive but hardly "stop participating in society".
Thanks, this is very interesting!

When I use the TikTok website in France, from desktop, I notice my Ublock Origin blocks 30 to 40 requests per minute, this doesn't happen with any other socials. Therefore, I didn't dare installing the app on my tablet!
Distill down what DevOps is, and it's just the pursuit of customer value through a learning organization. It's name has changed, and will change, with fashion trends.

DevOps, SRE, doesn't matter. A name doesn't guarantee you're doing it right.
> So giving them a thumbs-down is bad, but filing a formal complaint is fine? That seems like an extreme escalation.

No, on the opposite. If a coworker is just a bit unpleasant but I'm forced to rate them, I'm more likely to rate them negatively for reasons I have no idea about (maybe their dog died or are taking new medicine or whatever).

If I'm not asked to rate them, I won't do anything, until it's grave enough I should intervene. In this case, I will contact them directly trying to understand them and solve the problem in an amicable way, without involving any external party. This helps in a vast majority of cases. Only in extremely rare cases, once in a few years, the problem becomes so grave that another person needs to be involved. In any case, giving anyone a thumbs down doesn't solve anything.
I used to think the same thing when it came to the obesity problem here in the US, but someone said something to me that made me rethink my position.

They said: if you have a few people that are obese, that’s an issue with them. If nearly half of society is obese, you have an issue with the society.

Macro issues need to be addressed at the macro level. Yes, an individual can choose to not participate and be better for it, but that still leaves us with the same macro issue and it’s likely worth addressing that issue.
> Not really, there is a lot missing from Spotify

True, I have experienced that. I love the apps, but I ended up switching to youtube premium due to that.

Anything that isn't in youtube music as a song, usually is available as a video either uploaded by the artists themselves or as a "not so legal" upload. Not a fan of the apps though.
Another situation: You make 160k, the max range is 170k, but you'd like more than the max range. In the old world, this would work. You would gain more comp, and your new employer would acquire your talent. It's the free market at work. In the new world, neither of those will happen. I'm concerned about the consequences of that on economic growth and innovation.
U.S. drops Covid testing requirement for international travelers
>On July 10, 2003, Orrin Hatch, chairman of the Senate Judiciary Committee, took action against what he calls "an anachronism that is decidedly un-American." He introduced a bill that would allow a person who has been a U.S. citizen for 20 years and a resident for 14 years to run for president.

I'm just just following history.
Meh, second hand ski market is very patchy, the selection isn't great and different boot sizes might require binding remounting. Skis only last 100 or so days so cost/day is tiny compared to other ski expenses. You could save a few hundred dollars by buying second hand but then you have a big risk of injury from bindings not working properly. The time and effort looking second hand is a big factor too.
From an individual for defamation? Yes.

From the state for some very specific opinions (we should gas all the Jews)? Yes.

But that's literally the same everywhere with free speech. The specifics vary slightly, e.g. in the US being a woman and topless, or saying you want to murder the US president is a crime, in France insulting Jews is a crime. There is no place on earth with absolute free speech.
The problem with him re: US politics is that every job besides president is too small for his ego, but he can't be president.
Yes.

BS5 is pretty nice, but it could be smaller, haha.
> Does anybody else have the feeling HN somehow became "programmer news" along the way?

Your definition of "hacker" may vary, but a hacker with a computer is also a programmer.

Considering that Hacker News is a website accessed via the internet using a computer.

So a hacker can hack on things without a von Neumann-style computer.

But if you are hacking on it, you'd be a programmer.
>Finally, what problem are you solving for?
Smallhold farmer livelihoods that are underachieving relative to their capacity.

Solar water pump (SWP) systems are expensive to our target market of smallhold farmers when purchased with up-front cash. Since a SWP is an income-generating appliance for its user (apply water toward grow crops -> sell crops -> $$) we focus on how the farmer can sustainably make a down-payment and pay off the SWP on a rent-to-own basis. The market and industry space is widely distributed, so we target equipping distributors to accomplish the above with farmers in their respective geographies.

>what's the technical setup?
> the panel
Typically 120-200W collapsible solar panels that the farmer deploys daily.

> controller
Our IoT controller that collects local environmental & usage data that equips distributors to monitor their productivity (and so their anticipated loan performance).
> and pump.
DC-submersible, capable of delivering shallow groundwater accumulated over recent rainy seasons. (Power level matches the panels minus losses). Difficult to go into more detail than that without exposing more about our specific go-to-market strategy rather than anything that helps bring more farmers and distributors to the table. At the end of the day, pump models & panel sizes run the gamut in any given country's market - we help distributors select among these in their local market rather than exporting one SKU to everybody.

>What's the wattage and parts etc.
As above, with hosing & cabling sufficient for the groundwater depths involved. Accessories beyond that like sprinklers and a bag for carrying are generally appreciated by farmers.

>What's the final cost?
We have offerings between $600-$1300 paid out over a year. Of course a distributor can choose whatever payout plan they feel their local farmer market will bear.
Agreed 100%. At big tech salary is close to useless and rarely the primary number that changes during negotiations. My highest paying job -- a 3.5x raise -- came with a $75K salary cut compared to my previous job.

This should be, by far, the top voted comment. I don't think MSFT sharing salary ranges is consequential in any way.
Holding dollars was a a better investment than holding assets these past few months.
You are correct that in Canada we don't do 30-year fixed mortgages. We only lock in interest rates for a 5 year term.

However, we have what's called a stress-test. In order to get a mortgage at the previously low 5-year fixed rates of 2%, you still had to qualify as though the rates were >5%. This means that if rates go up to 5% everyone should still be able to afford their payments.
Good recommendation. Scientific papers and tweets is pretty much the source of most large publications articles at this point.

Better to just search PDFs and tweets at this point than read their verbose outrage & clickbait wrappers.
The law is indeed technical. But you know what's even more technical? The topic they are trying to legislate. I would rather have lawyers as staffers and the actual lawmakers come from a diverse group of backgrounds. As it stands now, most lawmakers are coming from a very small set of backgrounds and there are not enough scientists or engineers among them.
as I recall in the bible there are more than a couple of recipes for mixtures of incense, resins, and ointments

example: https://www.laparola.net/testo.php?riferimento=Esodo30%2C23-...

(Es.30, 23-25)

https://www.biblegateway.com/passage/?search=Exodus+30&versi...
Don’t be so sure. Large libraries often aren’t well-separated and so you end up not being able to strip as much as you intend (unless there’s an explicit design goal that’s somehow enforced to keep things in isolated components). If you can’t strip, that means there’s a dependency somewhere which means you may end up exercising code you didn’t intend. Log4j is an extreme example and generalizing from it to all libraries is bad engineering but paying attention to dependency graphs is a good idea even if people will continue to ignore the problem.
Compared to the steamed games we saw back in the day (~2012) this is hugely impressive. Felt smooth and responsive enough on a mobile connection. In fact, it played better than in home steam streaming over wifi did.

Granted, I still hate the idea of not owning anything anymore, but technically this is very impressive. Kinda like a really well executed prank by a school bully.
How do the Washington/Colorado salary disclosure laws interact with bonus structures and stock grants? A staff engineer might make $250k/year in base salary, but their total comp could be much higher.
Holding dollars is always a better investment if your investment time horizon is a few months. In an FDIC insured account.

If it’s a year to a few years, high quality bond ETFs likes VCSH should do the job.

If it’s further out than that, then sink the money into broad market equity ETFs.
Is mob wisdom a good indicator though?
It's always been legal** in India

https://en.m.wikipedia.org/wiki/Cannabis_in_India#Legal_stat...
I see those defined when I use firejail + firefox.

LD_PRELOAD=libmozsandbox.so
Most companies have explicit and firm salary ranges for positions already -- I would bet MS is one of them. They just didn't put them in the job postings until now.
> Specifically, those who bought a house to live in in the last 3-4 years.

No, everyone in Canada has to renew their mortgage at least every 5 years, into whatever the prevailing interest rate market is at that time.
You are just arguing that a simple language is good for beginners, and I agree with that.

We want a beginner language which has easy (and consistent) syntax, no requirement to specify datatypes (implicit), and can be interpreted (no compiling required).

In its most basic use, namely just writing procedural code with basic built-in data structures, Python is pretty ok. But it has some warts and gotchas, not the least of which is mutable default parameters in functions.

Now maybe the ultimate beginner doesn't use defaults for parameters, so it's not a problem (yet) for them. Same goes for the OO features. While the beginner may not write OO Python, using modules written by other people probably will require them to step into the Python version of OO. Now it gets messier.

Ruby is superior in the simple beginner case and the complex (OOP) case. It is superior and more consistent for functional cases as well, despite it not being designed as a functional language (it still has mutability risks all over the place as does Python, except for that default parameter razorblade).

The only beginner-unfriendly thing I can think of for Ruby is the optional parenthesis on function calls. I still think optional parens is a bad design choice, and I encourage people to always use them. It's usually a style choice (but not always, because sometimes it matters for how code is parsed), and I think it's better to know as a reader that foo.bar() is a function being called. foo.bar is unclear.

One small but significant feature Ruby provides is the ability to write more expressive function names with ? and !. A common pattern is to use foo? to indicate that the function will return a boolean. The alternative, without ?, is is_foo(). Likewise, ! usually (at least for standard libraries) indicates mutation.

Back to the point though, Python used simply in isolation is not terrible for a beginner. But inevitably outside modules will get used, and the misfeatures of Python will appear more frequently. And then a further eventuality is that this new programmer will now be a "python programmer", choosing Python for future bigger work because that's what they know. Why not start with a language that is also beginner friendly but also better for large, long-lived projects?
US, next to US; UK; list of countries in Europe.
One good part is the generated classes for every color. Background colors, font colors, border colors... everything in the color palette is usable as `bg-blue-500`, `text-blue-500`, `border-blue-500` etc. Could be reproduced in css for sure, but it's a great set of defaults that you can utilize cross-repo. Standardization is a powerful concept.
>All companies in my circle are struggling to find developers.

All companies can be struggling to hire if their bar is too high and/or their pay is too low.
Huawei's big role in open source threatens new security backlash
I have this errors on techcrunch for years. I don't remember the last time I read something on this site.
I have a hard time not imagining the shoe Community (season 5 episode 8) where the college starts using an app that rates every interaction between people.

https://en.m.wikipedia.org/wiki/App_Development_and_Condimen...
Still, should it not be sorted by "easiness to move in"? After all, if one is crazy enough to emigrate just to be able to play Stadia, that's probably the most relevant metric by which one would chose the destination country.

Also, there is something intrinsically hilarious about the denials of end-user service statements of "sorry, your IP address is in the blacklist; please consider changing your Internet provider and/or country of residence" kind.
The pricing is non-linear, both in terms of total output (due to economies of scale if done right) and especially in terms of share (are their fossil fuel PPs to cheaply fill in gaps).
You could make the argument that the phone, combined with all the extremely addictive "services" it provides, is just a piece of hardware that allows the advertisers to use you (via these services, like social media).

In that case it's you, paying thousands for the hardware, to enable others to use you and the limited time you have on this earth.
10c of crypto mining is about 30 minutes on an RTX 3090. It would have to be a much, much lower cost!
What are you basing “so it must not be used” on?

I would think it can’t harm, ever.
I believe it is a WA corp.
Great patent trolls? Counter example
Having grokked the abstract, I feel like can speculate a bit as to what is going on. Take this with a grain of salt; I have no clue what has actually been discovered.

I believe that the researchers have found a way to remove PAC as a barrier to exploitation by disclosing PAC verification results via speculative execution. This is only useful to attackers going after a target that uses PAC, and those attackers will need to have another vulnerability that enables them to hijack control-flow through modifying pointers to code that are located in memory.

The attackers can use this new Pacman vulnerability as a crash-free oracle that says whether their forged pointer worked, and once they find a working one, they can use that to hijack control flow.

PAC (or Pointer Authentication) is a security feature found in recent iPhones, the Apple Silicon Macs, and the Graviton3. It is intended as a defense against control-flow hijacks. It works by signing pointers found in memory with one of five keys that are known only to the processor. Before the pointer is used, the processor should be instructed to "authenticate" the pointer by checking the pointer's signature using its private keys. To prevent simple reuse of one authenticated pointer used in one place to a pointer used in another place in the program, code can provide a "context" value to be used during the authentication.

A great resource for learning about PAC and its usage in the Apple platforms is at [1] (it links to other resources) and if you want to play with a PAC enabled binary, check out [2]

[1]: https://googleprojectzero.blogspot.com/2019/02/examining-poi...

[2]: https://blog.ret2.io/2021/06/16/intro-to-pac-arm64/

EDIT: The attack works by:

1) Place your guess such that it is used as the pointer input to an authentication instruction

2) Causing a branch misprediction. On the not-taken side of the branch, code needs to perform a pointer authentication and usage of the pointer. On the taken side of the branch, code should not crash.

3) CPU speculatively executes down the not-taken side of the branch (misprediction) and speculatively executes the authentication instruction.

4) If your guess is correct, the authentication instruction will return a valid pointer. If your guess is incorrect, the authentication instruction returns a pointer that, if dereferenced, will cause an exception.

5) CPU speculatively executes a load (in the case of a data pointer) or an instruction fetch (in the case of a code pointer) on the pointer value.

6) If the pointer is valid, the address translation for that pointer will appear in the TLB. If the pointer is not valid, it will not (because of the exception).

7) All of the effects from this mispredicted branch get squashed when the CPU realizes that the branch is not taken. No exception is actually thrown!

8) Measure the TLB entries to determine whether the speculative address translation made it in. If it is present, you know that the guess is correct.

9) Repeat, up to 2^16 times.
CPI May 2022
The conflict of interest here concerns me. I don't object to content marketing, but I'd rather a) you were clear from the start that you work for this company and are promoting its product, and b) that this "revolves around [...] using Cohere’s Embed endpoint", so that people can judge how much they want to "get into language models" with pay-per-character pricing, as opposed to something more open.
do you care about terragrunt support? can i package up the terraform that gets produced and put it in a terragrunt module?

my stuff uses terragrunt extensively. it would be really cool if this fit together nicely.
For those interested, a bit more background on false positives of rare events

https://math.hmc.edu/funfacts/medical-tests-and-bayes-theore...
Why is industry-driven an issue? And compared to what others? On the contrary, SIP is as readable and understandable as HTTP. Someone who understands HTTP can learn SIP-based VoIP quite easily using their software/web background without needing a telecoms background.
I've had 8 recruiters reach out just this morning on LinkedIn. Granted, most of them are crap gigs but they were mostly crap gigs 6 months ago too. Plenty are interesting though. I'm really glad I specialized early on and found a niche.