skysight-inc/HackerNews huggingface dataset:
is there a Floridian campaign to eat wild caught invasive species? 215 pounds is a lot of meat - I wonder whether it might be possible to combine ecological preservation with healthy consumption of protein
How is it inflammatory? It's a simple statement of intent.

Anyone getting butt-hurt over that should go back to Reddit.
The mitigations are to stop development and water intensive agriculture, and anyone who runs on that platform won’t be elected. The problem will, painfully, solve itself when water supplies are exhausted.
Oh yes they do. GA is part of a company that also sells services in Italy. They should follow the law if they want to keep earning that non-US Adwords money that allows GA to remain free.
Sure hope that Jello Biafra doesn't have his facts straight in his 1991 song The Sky Is Falling And I Want My Mummy (Falling Space Junk) with NoMeansNo. The part
of the song about US orbital satellites carrrying plutonium waste with them. Please be just a little bidenism from this also so priestly character that JB is. The pitfall of the priestly archetypical character so many a time is just being out to to get the good old Holy Spirit emotional response from the churchgoers and not so much alawys concerned with getting the facts straight.

Increased solar flare EMP risk during the next years ain't a picnic either. Yo this all sucks. Bummer vibes. But don't shoot the messenger.

The song: https://youtube.com/watch?v=mE5ir7bJnDI
Exactly. But unfortunately Hacker News is becoming Reddit; where infantile, insecure shut-ins downvote facts they don't like.
Thunderstorms recently have been much more powerful as well, yeah?
Sorry, yes, it's 13+. That's still unreasonable, in my opinion. Lots of kids program before the age of 13.
And what happens on reboot ? Then you get to hardware solutions, and a small website is not going to want that.
While true, that depends pretty much on which libraries you depend on, and the npm like ecosystem doesn't help in that regard.
I have been a Netflix customer since the DVD-only days. My wife & me watch a show in the living room, while my son gets his weekend allowance to watch a cartoon in the bedroom. This used to work fine, until Netflix decided we can’t play two streams like this. There were other reasons to cancel, but this made the decision easier.
Dehumanization Is a Feature of Gig Work, Not a Bug
"Using your logic, anyone loaning out a book they own should be criminally charged."

Oh you better believe that if this was possible to do with physical books, it would be done.

The only reason this isn't much of a thing with ebooks is that if you use the bigger ebook services you don't really own the books in the first place.
Big govt vs Big tech is pretty much a conflict which is taking place in local theatres worldwide.
CA and NM both have Democratic "trifectas", and it can reasonably be assumed that they are dominated by anthropogenic climate change believers.

However, I would dispute your claim. The majority of the land (and thus resources) in the SW is under federal, not state control. Ergo, federal representatives play an outsize role in deciding questions central to the SW role in and sufferer of climate change.
Jrnl: Collect your thoughts and notes without leaving the command line
Ageism in tech is super real.

I worked for a FAANG, and I thought ageism was a problem there -- I worried that I needed to be financially ready to retire at 50, because I might be unemployable there by then.

Now I'm at a younger company and you're seen as washed up at 35.
I have a pretty alright old Celeron laptop, Chuwi with a great screen, same 3-generations-old Goldmont era core. Nice machine, even with it's nearly 3 year old Atom.

Personally though I'd really like to see a more modern offerning. A Pentium 8500 would be such an interesting really micro server. 4 newer Atoms/E-cores with AVX & AVX2, plus one big P-core... very compelling. Even a last gen N5105 or J6413 Tremont I hear is a huge boost over the old Goldmont.

The product development lifecycles tend to be years long, alas. I really wish people would just make really small boards, low-features, fast, & load them with oculink to let us do what we will with the cores.

Edit: oh STH review not looking as sunny as i thought wrt the n5105. Better but tbought i was much bigger diff. https://www.servethehome.com/two-fanless-intel-celeron-n5105...
You may be looking at this through a very narrow, heavily politicized lens.

First: GDPR is a compromise, so it's a bit uneven. That's partly due to lobbying by google and friends. Second, privacy very much needs protection. Even if you are perfectly fine giving up your privacy, other people aren't. Third: you can actually process user requests. Depending on how you do it, you don't even have to show a banner. Is that really too intrusive?
I was in the middle of transitioning my existing account to Brex. I have many things to do and so this lower on my priority list. I'm glad I was only in the beginning of the transition and that I hadn't moved over completely. While I wasted a few hours of my time, nothing near what I would have wasted if you had pulled this on me later.

Good riddance. I dodged a bullet.
>Would you please stop posting flamewar comments

Sure, my rhetotic got kinda out of line. I get excited debating.

>and using HN for ideological battle

I reject the characterization, it's almost implying I have an end with these posts besides putting a point of view that's at least an alternative to status quo that can make people realize they don't have any skin in the game, and that the US State Dept. has. I also don't. I don't really care about the outcome of the war.

>If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.

I'll do that then. Thanks for the heads up.
Maybe for consumer apps, but for a lot of enterprise apps that have to be compatible with existing APIs or domain-specific data standard that require two name fields, that’s not really a viable approach.
> Anecdotally, including us, anyone you talk to here is dealing with mold issues,

Is the mold a recent thing related to el Niño or has it been a problem for a while?

In the US at least, many houses built in the 90s-2000s have mold issues because they were built without proper water vapor permeability and also with materials that are also not moisture resilient.

This is even an issue in dry areas like California.
For those who don't know, Minecraft is a ripoff of Zach's Infiniminer.
email draft with attachment.
As an EU citizen, I find it to be a huge improvement to detangle my data from US-American entities. Especially with the election of Trump and January 6th. Maybe Americans haven't fully realized what that meant for US-EU relations for the next hundreds of years. The US is just not a politically stable country until further notice.
At least weed is fun. Nicotine is useless.
Agriculture typically uses 75-80% of the water in southwestern states.

Residential is around 7% (similar to losses from evaporation).

Residential per-capita use has been declining for decades. Agricultural use per acre or flat or rising.

Stopping development has little to do with the water issues in the SW (it might still be a good idea, but this is not the main reason why)
Their recommendations suck because they don’t have any good content to recommend.
I'll take a stab, but I'm keeping it fuzzy, not because I haven't worked the attack out at a low level but because I don't want you to know that I haven't worked the attack out at a low level. Some of this will be wrong.

We're in the bizarre circumstance of being able to get our target to use a partially corrupted version of their own secret RSA key to decrypt a message of our choosing (this never happens! Only with Mega!).

We're looking for q, one of two factors of our private key. We set m, the plaintext message we get to choose, to the middle of the range of possible q's. Remember, q is smaller than m; we've got a 2048 bit RSA key, and so q is 1024 bits; the client is effectively going to pad it out, and then blindly extract the 2nd though 45th bytes from it.

What we're going to do resembles a fault attack (we're sort of simulating one by scrambling qInv). One of two things will happen:

* If m < q, the message is going to miss our faulted qInv (it won't wrap the modulus for the q part of the CRT calculation, by definition, which cancels out the qInv part of the calculation) and thus decrypts properly. After padding and extraction, the client will pull 0's out of the decrypted message --- remember, q is much smaller than the whole message space of m, and remember, the client doesn't bother to check the padding! the number of things that went wrong here is bananas! --- and post it back.

* If m >= q, our qInv fucks up the decryption; we decrypt (I assume) random gibberish, all the way through the space of m. We extract 43 bytes of the random gibberish, posting back a non-zero value.

It's described in detail in III.B.2 of https://mega-awry.io/pdf/mega-malleable-encryption-goes-awry...
(December 2019)
something I'm not getting here. If you buy a EU engineered IoT home appliance that has PII including, whether a user is presently inside their home, then every company I know operating in this market uses US based clouds (what other options are there LOL) to do things like digital twin or device shadows but by using a local availability zone.

So this is very different than GA, but depending on the threat-model can be worse. Also very similar metrics can be gathered from the data as from a GA cookie (are they eating, cooking, showering, watching TV).

CloudAct would (or should) in this case also apply here or what am I missing?
Unfortunately no - the cost will depend on the number of visible pixels, and worse, there are secondary costs depending on the arrangement of those visible pixels on screen, what part of the texture happens to be there, whether any sparse textures need to get paged in from system memory, whether GPU occlusion culling is going to cull certain things it wouldn't normally cull, etc. And other things are competing for GPU time like your OS compositor
You could say he's a non-fungible toker
Yeah, I mean I would definitely recommend going to a hospital in Thailand for the sleep study rather than UCSF's sleep clinic. You might even save money with the cost of room, board, and plane tickets included.
As a bit of a caution on the book, it's probably worth a look at this article: https://guzey.com/books/why-we-sleep/
This gives "Sovereign Citizen" vibes not gonna lie.
When actually using the software means "taking it, adding it to a commercial software and never telling anyone, incl. the developer of the original code, and not giving any attribution whatsoever, and earning money over that piece of code", yes GPL makes it hard. It's by design, and this is why I license anything and everything I put in the open GPLv3+.

If anyone contributes to a GPL software, they're clearly attributed. Moreover, Git makes this attribution irrevocably visible. Before that patches were sent in with mails, and mailing lists were open, so attribution was also visible back then. So, no, GPL makes attribution visible, and irrevocable, by design.

GPL doesn't seek rent over any idea. It forces ideas to stay open, forces you to put your improvements back in the open. You'll be attributed, your code will be in the open all the time, and nobody can grab and run your code and hide into its software to make any kind of unjust profit, which makes "Open Source" coders visibly and literally wince and cringe, because they can't grab and paste a piece of code and make their days easier.

Again, this is by design.

Sorry if my viewpoint towards your view is apathetic, but the whole field is already infested with programmers who only understand being able to copy and paste code left and right to develop software as a useful metric.

It's not about Microsoft, it's just about being honoring a license. A case-tested, lawyer written, trusted license which many developers chose for licensing their work. It's a breach of contract, plain and simple.

As I said elsewhere, some of the code I'm writing is backed by papers. I don't obfuscate my papers to prevent anyone from implementing it, but if I open my reference implementation as GPL, this is because I don't want someone to grab it and run with the code, change it a little, put into a closed source program and call the idea theirs, possibly patenting it in the process.

I have a serious piece of research, my Ph.D. actually, and I'm still developing the code powering the whole idea. I was planning to open it under GPL license, to force its evolution in the open, but I understood that people don't appreciate that. So, probably I won't open the code. Binaries maybe. Highly obfuscated, protected binaries, probably.
> Sweedish movies about the super rich getting marooned on an island after a storm and ending up at the mercy of the housekeeper.

TBH, I'd see that.
They provide the accommodation and then have like 10 people being monitored by 1-2 technicians overnight. It is pretty lame to be billed the amount they did for the equivalent of a couple hundred dollars of overhead and then manhours.
> They choose a time that computation happens. But computation should instead be done as soon as possible, and the output delayed to the necessary time.

This is fundamentally not a solution for any problem where you're reading input from outside. If that animation is reacting to user input, rendering the frames 100ms ahead will create 100ms or more of "input lag" that the user can see and feel and they hate it.
Linux already stores plenty of secrets in files in /etc. Just do the same: the root protected init file for your app likely has a mechanism for passing an env var to the new process. Systemd and supervisor do. Then pop os.environ instead of reading it, and you are safe from bots and script kiddies, which is likely your threat model
I was told in civics class the police have no obligation to Mirandize you.

If they don’t Mirandize you, anything you tell them is inadmissible in court. So it’s usually a good idea to do it.

But if police are, say, detaining rioters, and have decided they’re not going to question anybody, it might be faster and easier to just arrest folks.
Companies would just stay on even older versions of those libraries. Maybe with security patches backported, but probably not.
It's crazy how much fuzzing has changed in a decade. The fact that you can just write some code in your native language and get top quality fuzzing is incredible. You used to have to put 'pits' together and run peach or honestly just roll your own, no way you'd have access to the instrumentation at the level we do now.

The 'rust fuzzing' experience is really solid. You just 'derive' your way through it and you're 99% done.

> It’s quite natural and more efficient to start this process with something like Vec::with_capacity(list_length). Usually this is fine, but if the minidump is corrupt (or malicious), then this length could be impossibly large and cause us to immediately OOM.

That's a fun one. I `with_capacity` all the time and I guess I hadn't really thought too much about whether the value I pass in is strictly valid every time. Food for though.

Anyway, awesome write up, and great nod to Mario universes, which itself is a wild ride.
Doesn't invalidate that it doesn't run on browsers.
5 times a year if you are a freelancer.
> cabbage

There was big social media/news thing when KFC announced they were replacing lettuce with cabbage on their burgers.

A lot of unhappy campers there - tbh I think if they went further and made it a nice slaw with a sharp/tangy dressing then it'd be a massive improvement to their usual soggy, greasy chicken, and undercooked/limp chips (fries)
I know this is unimportant, but the phrase is "¿Por qué no los dos?".
Sigh. I’m at the point where I could honestly care less what language/library someone knows. I’ve been working through a big pile/mess that a recently departed teammate has left me to clean up. I wish I had had more bandwidth to see what was going on.

What I wish I could figure how to reliably measure when we get around to hiring a replacement:

- do they care? They don’t have to agree with my opinions. We can hammer out a compromise with enough laughs. I just want them to care. Because there’s still a lot of things that even the best protocols, procedures, and practices can’t cover.

- can they be responsible? Or have they bought into the fantasy where they offload responsibility to a “decider” while they play the role exclusively of “doer”?

- can they and will they ask questions?? To customers, to teammates, in online forums, wherever. Or does their insecure ego prevent them from feeling the fool so that they can become the wiser?

-can they be critically honest? Admit what they don’t know when debugging, avoid conclusion jumping, candidly self asses? Or do they need some form of myopia to maintain a narrative about their abilities, their contribution, their value, or the environment around them?

If I could reliably convince myself that someone scored strong in these four areas, and had rudimentary programming aptitude we could just skip the rest of these “hiring/new employee” diatribes.
> LTO is not exclusive to clang.

This is in the context of the Linux kernel, which only mainlined Clang LTO support in 5.12. AFAIK, GCC LTO has yet to be accepted.
The comments on the article itself (not HN) are pretty biased and humorous.
I don't know about either the US or health insurance but there is a concept called 'subrogation', which means that if the insurance company pays a claim then they have the right to sue the person who caused it.
Isn’t the concern that if the salton sea dries up all the toxic waste will start blowing around everywhere?
Unfortunately history has shown that you can't necessarily lean on the audio hardware to give you a stable, reliable clock. Part of the reason Windows moved to doing all its audio mixing in software (a long time ago at this point) was that hardware audio devices and/or drivers tended to be really bad at providing reliable clocks. See this random example from google results:

https://duc.avid.com/showthread.php?t=334589

Winamp had a ton of special purpose code in it just to compensate for bad clocking and timing in consumer sound cards so that you could play back audio at proper rates without gaps or glitches.

Mobile seems to be no better - I remember getting fed up playing rhythm games on a Motorola phone I owned because, I kid you not, the hardware audio clock would occasionally run backwards.
We need to use rust to remove unsafe elements from the Kernel.
"Except all the loops are rip-offs of other peoples hard work and there's no effort to compensate them."

Except all the loops are smaller pieces of larger loops which you as the developer than mix together in new ways to create your application. FTFY.
I don’t think anyone wants Biblical dust storms.
You can use the same templates on the backend and frontend. That may not matter to you, at least not now, but it's a great reason in many contexts.

Personally I find JSX to be a terrific templating system, much better than anything like Django's, but if you're familiar with both and prefer Django's, this benefit does not apply to you!
Singaporean who impersonated others to buy $7.5m of cloud services jailed
What Is a P-Value?
Absolutely.

Closing words are kind of chilling/scary an assessment of making stuff:

> But this is all pretty darn simple stuff. And Chinese electrical engineers are good. Like, really good. They designed most of the electronics you’re using every day. This is child’s play for them. They can have a USB-C e-bike battery finished in an afternoon.

> All it takes is a push.

This stuff is indeed not super hard. Cost optimizing it ruthlessly is a huge skill.

But yeah, I very much feel lile markets quite often need pushes. They dont do a lot of things, ignore demand for better/newer/more standards based for a long long time.
At least in the consumer foods space, Juicero put paid to going too far in this direction when the product reviewers found you could just as easily manually squish the bags to make juice.
I am not big Go fan, yet its suited for embedded or drivers is a mindset question, as proven by USB hardware keys being shipped by F-Secure with Go firmware, goVisor, Android GPU debugger, ARM official support for TinyGo...

And since you speak of Java, companies like PTC, Aicas, microEJ, ExelsiorJET (now gone) have been happily doing business on embedded, with bare metal or RTOS based deployments.

And then there is Meadow/Netduino on .NET world, and Astrobe for Oberon as commercial products as well. Astrobe has been in business for 20 years now.
I totally have this problem with yaml. I wish vim had a line-these-things-up button, kinda like how % lets you bounce around in parenthesis - something like that for leading-whitespace alignment.
TikTok is just where some artists will get 'discovered'. Bieber was discovered on YouTube but he was 'made' by the industry.

I don't think that YouTube for exmaple needs 'content' rules around local content. That would be nice, but not necessary.
Yes and yes, the SDK has esp_random() and esp_fill_random() which hook into the hardware RNG.
The album "new energy" has become one of my all time favorites.

Check out some recent work. He still produces some insanely hi quality tracks, not all under the "four tet" moniker. Some of the ungoogle-able "unicode hell" releases are very good, and his "KH" tracks are dancefloor killers.
"Contextuality says that properties of particles, such as their position or polarization, exist only within the context of a measurement"

Does this "surprising" and "less known" fact about quantum mechanics follow from the well-known Heisenberg uncertainity principle, which states effectively that - the more precise the position of a particle is determined, the less precise the momentum can be?
If there's one thing customers in Brex's newly preferred demographic like, it's lots of uncertainty about whether they'll still be able to pay people and be paid next month. This will truly help address the concern every mid to large sized business has about their banks, which do tend to be far too reliable and certain. After all, it's only money. What could be more important to a for-profit corporation?
https://en.wikipedia.org/wiki/Etymological_fallacy

The meaning of words change over time as culture change and evolve. The meaning of a word is how it is used, and "wine" have been used for ages to refer to cherry wine, dandelion wine, apple wine, etc.

I haven't even heard beer called wine though.
We had the exact same structure in our town park, it was such a strange and amazing thing to climb around in!
IMO this is still simpler than automatic memory management, and the runtime costs are mostly fixed and predictable.

You also don't need to worry about ref cycles or GC pauses.
Since reading the thread on money-making side hustles on HN a few days back[1], I was able to finally brush off my procrastination and start twiddling with some of my side projects that have been lying dormant over the years! And the model Plausible uses (I think the right term is "Open Core"?) which is also used by the incredible Product analytics tool Posthog [1] aligns really well with how I want to build out my side-hustles. Open source, but also available packaged and hosted if you so prefer.

One thing I was concerned about was about revenue that these "open source by default" products make, so glad that this post has come along just in time to alleviate some of those concerns (of course, as with most engineering side projects, the priority is to build something cool first, and if it ends up making some money, then all the better!) and it's always nice to see successful OSS-driven products in a crowded analytics space.

Congrats folks!

[1] https://news.ycombinator.com/item?id=31764696

[2] https://posthog.com/
Inside the 40 Year-Long Dungeons & Dragons Game
How are you tracking returning users without cookies? Also if it’s multi-lingual, how are you storing the language prefs?