skysight-inc/HackerNews huggingface dataset:
I don't quite know how so many people in the tech industry seem so entirely disconnected from the rest of humanity, but this seems to be firmly in the "Just because we can, we should!" category that doesn't really sit well with "not people involved in creating it."

Stuff like this is why I'm more and more certain we'll see a divergence in years to come (extending current trends, really) between those who are more or less puppets of the tech industry (consume what's in their feeds, buy what's advertised, generally behave as Very Profitable Eyeballs), and those who want less and less to do with the current state of consumer tech.

I'm reminded of some quip about how the tighter the Empire squeezes, the more systems (people) squeeze through the cracks... and it sure feels like the tech industry has been trying to squeeze all the profits out lately, even as they're actively driving people away with rubbish like this.
> There are organizations where SHA-1 is blanket banned across the board - regardless of its use.

> I have very recently seen customers move to older much less functional (or useful) VCS platforms just because of SHA-1.

A company this dysfunctional has problems far beyond their choice of revision control system.
I'll raise everyone that and mention that my favorite built-in feature for avoid it:

ctrl+shift+p (firefox) or ctrl+shift+n (chrome/edge)

ctrl+c link

ctrl+v in private window

hax

You can also create a bunch of containers in firefox labelled 'Paywall Bypass 1, Paywall Bypass 2" etc
Oh hmm, I see, thanks!
> All that is left is the hard work of making the transition to a new hash easy for users — what could be thought of as "the other 90%" of the job.

If that was all that was left, we could at least be using sha256 for new repositories.

It seems to me the big missing piece is support in libgit2, which is at least showing signs of progress:

https://github.com/libgit2/libgit2/pull/6191
It's not even really that the live version mutated to become transmissible, exactly - the live oral polio vaccine is reasonably transmissible through the usual fecal-oral route full stop. The problem is that as it spreads through a community the vaccine virus - and especially the type 2 poliovirus - tends to mutate in ways that undo the attenuation which allows it to safely be used as a vaccine and cause it to spread, paralyze and kill in the same way that wild-type polio virus does. Viruses with these kind of mutations have been circulating in the developing world for some time and there seems to be concern they may now be in the UK.

(In fact this is the only kind of type 2 poliovirus in circulation these days - the wild version of it was eradicated a few years ago. There were a bunch of celebratory announcements of this that made it to HN which were probably rather premature. The WHO and their partners had a fancy endgame plan for this involving pulling the type 2 component of the vaccine, at which point it would go extinct for real and we'd no longer have to deal with it. This plan failed spectacularly.)
It's interesting that your first assumption is suburbia and not an actually rural setting.
> I'm sure the fact this setup forces all apps to go through Apple's app store and pay them 30% of their revenue is just a unfortunate accident.

Does a normal enterprise charge its users to install internal apps? If not, this seems like an odd complaint.

> My point is that if Apple truly believed sideloading was a risk to user security there wouldn't be certificates that let you sideload on all devices. They would force companies to provide a list of devices or only allow devices enrolled in their MDM or some similar reasonable restriction.

That last part is effectively what they're doing: you have to do the same level of scary prompt and authentication to install an enterprise certificate as you do to enroll for MDM. Yes, users can still be socially engineered to compromise their device but that's an order of magnitude harder than just convincing someone to run some random binary.
> To do this, the team grafted breast cancer tumours into mice

Speaking of sleep, if I was doing the above I'm not sure I'd ever sleep well again.
The comment full of random garbage will probably look weird to a human, but by the time a person is looking at the code it will probably be too late.

But you could also hide it as a fake lookup table or inline XPM or something like that.
Interestingly, in UO the ground was a grid based system, you could only drop items into a tile and they would be centered there. So the floating inventory system was different code it would seem than the discrete ground system.
It has been making us poor the whole time, but city budgets are good at hiding the burden we carry. Every municipality you stepped foot in today is probably one that carries significant debt because the rate of return on development of the current style (sprawl-oriented) is terrible. Compare this to higher-density options where people are pedestrians who are free to walk into shops along a boulevard, with no need for parking spaces and drive-thrus, which are shown to be more prosperous for cities and foster more productive and sustainable sources of tax revenue in downtowns and public centers more generally.
> Violent, nationalistic, performatively Christian, law-and-order, hero-worshipping big-man conservatism as a front for both fascism and corporate profiteering is pervasive from the beginning.

Yea, and this stuff is pervasive in any big series or movie that's come out in the past 5 years that's not aimed at a children's audience. Maybe it's more telling that I can look past all that stuff because of how pervasive it is in every other aspect of our culture.

And additionally, as a conservative I agree with a lot of these points, and I think it's good to be reminded of the hypocrisy that many conservatives live out. In my opinion, the first two seasons had a pretty equal underpining of pointing out the hypocrisy of the left as well which is why I enjoyed them.

Season 3 did not feel balanced. Sure they still pointed out the hypocrisy of some of the left's values, but it feels to me like they've taken a much more unbalanced approach with this latest season.
This is such a disingenuous article.

You know what what is costing you untapped talent? Not having an office. Just as there are people that prefer working remotely, there are people that prefer working from an office.

I can say personally that I know a lot of junior devs that have not gotten the mentoring they deserve due to remote working.

Just have an office and let people choose to come in or not. Maybe have junior members of the team come in to the office on a regular basis at the start until they're onboarded. It's not that hard.
While this might be technically true, I don't think it's the case for the vast majority.
An MP-complete post is one in which the meta-pedantry completes in polynominal time.
Thanks for pointing those out! Fixed.
Now that weed has been largely destigmatized if not universally decriminalized, it's time for parents to step up and teach their kids responsible use, including non-use before a certain age. We do this with other recreational drugs like alcohol. Perhaps we can gradually introduce them to higher and higher potencies, like French parents do with wine.
I also have found vapes to have other adverse effects - some psychosis, and worsened short-term memory loss (compared to flower). Flower hits different.
From 2004-17 I lived in NYC and didn't own a car and very rarely rented one.
From 2017-20 I lived in Chapel Hill, NC and (along with my wife) owned two cars.
From 2021-now I've been back in NYC. We sold the cars and have no plans to ever buy new ones.

I've been roughly the same person the whole time. My change in buying behavior wasn't so much personal preference as much as it was the lifestyle that was enforced by the policy choices of the location I was living in.
I found this, which says that the SHA algorithm allows for truncation: https://csrc.nist.gov/publications/detail/sp/800-107/rev-1/f...
I just (June 23rd) got e-mail from Brex indicating what their criteria are:

We feel confident in delivering a best-in-class service to customers who meet any of the following criteria:

Received an equity investment of any amount (accelerator, angel, VC or web3 token);
More than $1 million a year in revenue;
More than 50 employees;
More than $500k in cash;
Tech startups who are on a path to meeting the criteria above, and are referred by an existing customer or partner.

I'm still rather shocked by how badly they handled this. Even if I weren't a one-person (and highly profitable) consulting business, I wouldn't want to stay with a firm that treats its customers so poorly.

That said, the tone of this letter was far, far better than the previous one. And it gave some clear criteria for who is in, and who is not.

So they handled this poorly, but they've at least made some effort to make things less bad.
Isn‘t it strange that all these aspects of non-relativistic quantum mechanics are always tested experimentally using photons, entities which are inherently relativistic?
I'd say marathons and computer games (except the clickers) should not be on this list due to the difference between active vs passive participation.
Who's to say anything about anyone? We only get one shot at this. There's no perfect way to live a life.
The verbatim email:

---

Our limitations due to new United States sanctions

Dear sir,

Due to recent sanctions from the United States government, we have reviewed the organizations we have been communicating with to understand to which organizations the new laws apply.

Our understanding is that your organization is located in either Russia or Belarus. Because of this, we must pause interactions with your organization until the sanctions are lifted.

This includes:
We must pause on selling, issuing or renewing a Mattermost subscription or license key to your organization. If you have a Mattermost license key, a trial key, or a Not-for-Resale license key we ask that you not use it.
We are not permitted to provide you technical support for our software. Moreover, we cannot answer questions about our software.
We are not permitted to provide our software, including any updates, upgrades or cloud hosted versions to your organization. We must ask that you do not use any software or online services provided by Mattermost, Inc., including any versions that have been provided online to the general public.
We deeply apologize for the inconvenience. We must abide by United States laws. We hope after sanctions are lifted that we can support your interest once again.

The sanctions applying here can be found online at: https://www.bis.doc.gov/index.php/policy-guidance/lists-of-p...

If you believe we have made an error, we ask that your legal counsel please review the U.S. sanctions rules and send their interpretation to compliance@mattermost.com

Sincerely,

Mattermost Export Controls Compliance Team

---
It's likely a bad translation.

The Italian SA is the Italian Data Protection Agency (DPA), one of the per-country European regulators https://ec.europa.eu/justice/article-29/structure/data-prote... . Which acts under the GDPR and predecessor data protection laws, and is very explicitly a governmental regulator.
Filtering numbers quickly with SVE on Amazon Graviton 3 processors
I think the big question is, whether two teams writing software on a fixed budget using Rust or C using modern tools and best practices would end up with a safer product. I think this is not clear at all.
I've made perhaps overly absolutist statements like "don't you see! this kills artists jobs!" and it was shrugged off as if I was insane. I probably could've phrased it differently, but to me this is game changing in several fields. Granted, it will open up a new field of "generative artists" but, having played with these things, this is a pretty trivial job, and their training nets are only going to get better.
I'm personally a fan of remote work, but I also appreciate that it's something that I've been able to enjoy after already establishing my career and also being able to afford having a workspace at home that suits my needs. Those that are early in their careers may not have the means to create a great WFH setup, and also may not be getting the proper supervision and learning that comes from being in office and surrounded by your colleagues. I'm not saying that you can't be a successful junior employee in a remote-first world, just that this is an area of the discussion I don't find brought up enough.
The Airflow 2.0 TaskFlow API[1] doesn't use the bitshift operators any more -- if you pass the result of one task into another, the second task is automatically downstream of the first. So it all just looks like function calls, despite using XComArgs behind the scenes.

1. https://airflow.apache.org/docs/apache-airflow/stable/tutori...
Serve OPT-175B with Alpa using commodity GPUs: https://alpa-projects.github.io/tutorials/opt_serving.html

If you have difficulties accessing 8x 80GB A100 (or AWS P4) this might be a good use case.
i agree, its a terrible treatment for anxiety. ive had friends ask me for strain recommendations to help treat anxiety, my advice is always "none of them".
This is concerning from a signing perspective.

Example: `git commit -a -S -m 'signed commit'` signs the SHA-1 hash directly.

Even if the SHA-1 digest is rehashed with a secure hashing algorithm, SHA-256, it would hide the fact that the reference is to an insecure hashing algorithm. The project itself needs to be rehashed with a secure hashing algorithm for signing to be secure.
It's not just the pushes themselves; anyone who can create commits or blobs that eventually get merged into your repository, directly or indirectly, can potentially engage in a collision attack.

Sure, if you use git with a very closed development model, this doesn't necessarily affect you much. But it's (potentially) a big problem for collaborative open-source projects, because it requires trust in every single contributor. And the trust requirement can't necessarily be mitigated using ordinary means like code reviews.
Sure that's possible, but there's a huuuge difference between Possible and Default Behavior.
Can confirm.

Two of my kids use THC pretty regularly and they seem content with a life that is paying the bills but not really leading anywhere.

The third does not (AFAIK) and is on a much higher trajectory.

All had pretty much the same upbringing, rules, experiences, and discipline.

I've never used it, so don't have personal experience.
Ask HN: What options are there to send an HTTP request with a hardware button?
My friend has is a small twitch streamer and wants to press a real life button that would clip his last 30-60 seconds of his stream. While it’d be trivial to write a serverless function that does this, I’d like the request to be fired from something he can have on his desk vs something like a chat command. Also if anyone has insight on using a Cloudflare worker on the edge vs a lambda/google cloud function, I’d be curious to hear which is more appropriate + cheaper for this kind of thing. Thanks!
Do you have the links for the lady's videos?
What's your expience with cannabis that makes you think every weed smoker only watches tv and eats pizza?
The next step would be to make it declarative like PlantUML or Ditaa.

Surely, my diagram shouldn't have programming crud around it
US Supreme Court expands gun rights
Not sure where your confidence came from but a Google of “sco Microsoft” reveals:

By the mid-1980s Microsoft had gotten out of the Unix business, except for its ownership stake in SCO.[20]

https://en.m.wikipedia.org/wiki/History_of_Microsoft
If only we hadn't been burning fossil fuels, the sun wouldn't be punishing us like this!
Same here, but I've started tagging certain kinds of links. I haven't used the tags much, except to look up recipes, so it remains to be seen how much mileage I'll get out of the tages, but I do like using Pocket as a kind of reading queue to help keep my tabs tidy.
(Ok, I should read the text before sending.)
Twitter launches newsletter tool, Revue
> > There are organizations where SHA-1 is blanket banned across the board - regardless of its use.

Reminds me of the time a security audit (which literally just involved running some scanning tool and dumping the results on us) complained that some code I had written was using MD5 - but in a use case in which we weren’t relying on it for any security purposes. I ended up replacing MD5 with CRC-32 - which is even weaker than MD5, but made the security scanning tool mark the issue as remediated. It was easier than trying to argue that it was a false positive.
Not really, there is some code involved to do that.
You just know that some Amazon listings are written by GANs.
I use Google Keep. It's amazing. It's one of those side tabs on GMail that you close when you first start a new account and never look at again.

I use the web and iOS version (through "share") half a dozen times a day.

https://keep.google.com/
I wouldn't take hellcow's comment too literally, X-Plane is about realism, which isn't the same thing as the sensation of flying. A non-pilot might find that MSFS gives a better sensation of flying because of its superior graphics, and might not care (or notice) its far inferior flight modelling.

> maybe we should distinguish between a flight sim and pilot sim?

I wouldn't use pilot sim, it gives the impression of a 'career mode' beyond the scope of directly operating the aircraft. The terms I've encountered are flying game and flight simulator.

This is almost, but not quite, reflected in the Wikipedia article names. The X-Plane article is under X-Plane (simulator), whereas MSFS is under Microsoft Flight Simulator (2020 video game).
California Finds Tech Hub Competitors in Miami, Austin
This is fascinating! I've been meaning to set something up on a spare rpi for this and I hadn't heard of yacy before. Thanks!
There isn't any reason you can't run a neural net on a CPU. It's still just a bunch of big matrix operations. The advantage of the GPU is it's a lot faster, but "a lot" might be 1 second versus 10 seconds, and for some applications 10 seconds of inference latency is just fine (I have no idea how long this model would take). All the major ML libraries will operate in CPU-only mode if you request it.
The article is opposite of your point- that modern cannabis products are much more potent than ever before and that young people who consume them regularly are prone to severe psychiatric repercussions beyond just "being a stoner"
Not without the text of the license. I, as a developer, cannot just poach open source code under MIT without including the copyright and terms from the original project. From the license:

"The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software."
At the same time, if Brave wants to market a browser while simultaneously promoting a technology that a huge amount of the populous dislikes, maybe they ought to review their priorities?
It couldn't possibly be that you remember 80% of the things you foresaw that happened vs. the ones that didn't.
I try to maximize my earnings during my working hours (M-F, 9-5ish) so I can enjoy things outside my working hours. Most of my work related unhappiness comes from the idea that "I should be making more money." I'm finally at a spot, where if the market rebounds a little, I'm in the top 10-15% of pay for an individual contributor, I think. Full time remote for the last 5 years, low cost of living state, and my annual income is somewhere between $350-$450k depending on how the market does (or much higher if things really turn around). I'm on year 1 at this new gig, so I won't feel that amount until bonus time comes around early next year, but man, it's bringing me a lot of joy, I can tell you that.

The only question is, do I buy a boat, a beach house, or a lake house? I live near a lake and already have a jetski and a friend with a boat, maybe I should just buy a tract of land to drive my jeep and some ATVs. I mean, maybe people get a lot of happiness out of work, I certainly don't. I like to have fun.
This is consistent with decisions from the Austrian and French data protection authorities (DPAs). Note that Google is a Processor (for this product), meaning that Google itself does not violate GDPR, but only the websites that use it.

Following the Schrems II case, the "threat model" used by EU courts on these matters is "American law enforcement can serve a warrant to American companies." Long story short, any processing that Google does after collection is not considered to offer any protection, because American law enforcement can just tell them not to do that and they won't. Hence, the "Anonymize IP Address" setting in Google Analytics is not considered to have value for GA.

It might theoretically be possible to use GA compliantly by proxying data through an EU-owned service which obfuscates anything considered personal data, at minimum the IP address and various cookie values. This scenario hasn't been confirmed by anyone as compliant, but the regulators seem to always go out of their way to dance around it rather than just saying "GA is non-compliant, always, forever." Still, for the trouble to set up such a service you might as well just stand up a self-hosted first-party analytics solution.

This particular decision on GA is purely about the cross-border transfers, and doesn't seem to touch on whether using cookies for analytics requires consent. That's a separate issue (technically about a separate law).
How about separate but still treat both.

Then in the event of heavy rainfall there is much less poop in the overwhelmed (mostly) rainwater treatment plant.
Gotcha, that's disappointing.

I think my friends were riding along the Charles River, for what it's worth. They're more occasional bike commuters (once or twice per week) than a real serious bunch, and I don't know their start/end points.

Rail-to-trail appears to be how most longish (10 mile +) bike paths come into existence in the northeast, from my observations. There's a lot less "free space" to work with than other parts of the country, since the land is so developed / dominated by automobiles.
I think this is widely predicted actually
Thanks, I'll add that, as well as your other links, to the reading list for the evening.
> It's definitely immoral for a city to have laws that make it impossible for working class people to live there (e.g. a suburb with moderately expensive land that bans multifamily housing and has large minimum lot sizes).

"Working class" is your designation, but I don't think anyone is entitled to live in any specific place (especially when they don't currently live there). Even drawing the line at the city level is arbitrary--should every neighborhood have all social classes of people mandated for living in it? Every apartment building? I just fundamentally disagree that laws reducing population density are inherently immoral simply because they might become desirable places to live that make it more expensive to live there.

> On the other hand you could argue that choosing to move to a city with immoral laws is itself a way of supporting those laws, and in doing so you become partially responsible for their outcomes.

Who's morally responsible for the laws and policies resulting in high crime, bad schools, rampant homelessness, and high taxes endemic to urban areas (at least in the US)?
Theoretical calculations predicted now-confirmed tetraneutron
This is just patently untrue.

Matthew Walker has been on a half dozen podcasts addressing this and almost all the data available in sleep research seems to suggest a lot of the same shit.

Get 8 hours of sleep. No you can't function on 6. You just think you can.

Have a sleep study done to see if you have sleep apnea, need a CPAP / BPAP.

Don't drink alcohol and caffeine before bedtime.

Don't look at screens about 2-3 hours before bedtime.

This applies to over 99% of all the individuals they tested.