skysight-inc/HackerNews huggingface dataset:
That isn't what is happening here. Criminal barristers are not employed by the government for defence and the Criminal Bar Association is not a public sector union. For legal-aid defence, they are mostly self-employed and have the freedom to pick up cases as they choose.

The barristers in this case are stating that legal-aid cases (i.e. acting as a public defender) don't pay enough so are refusing to take the jobs. Much as how you could choose to not take a consulting job in your own profession, if you pleased.
Never heard of those before, what's a use case for multi-master CRUD apps?
> once you grow up and read Philip K. Dick, you actually understand how much of his ambiguous mind games made it into the movie

PKD didn't write "mind games"; according to one's own view of reality, he was either among the most sincere intellectuals since Kant, or a deeply paranoid, mentally ill individual - and everything inbetween. He was truly invested in the questions about perception that he poured over all his work.
Perhaps my experience with Copilot is different, but I find that the code suggestions tend to model established patterns and best practices (sometimes) across algorithms, languages, and frameworks. I haven't seen any suggested code that surprises me with it's novelty or uniqueness. Many times, it's just interpreting my own code for patterns and saving me from some multi-cursor-fu.

The biggest value of Copilot for me is the time saved by not having to search Google and/or documentation. It feels like I'm working with a relatively knowledgeable pair programmer -- which is nice for a solo dev. The value compounds for me since I frequently switch between frameworks with pauses in-between.

Since there's concern across the open source community, maybe Microsoft should reconsider the business model and spin-off Copilot as a non-profit. The proceeds can be used fund the staff and servers required to run the service and profits can be shared with open source developers on Github.
I don't think the IE comparison is apt.

IE shipped on (almost) every machine, had a ton of lock in features like ActiveX, etc. MS actively abused their monopoly position to make it so preventing default installation of Netscape by OEMs, incentivising ISVs to ensure web based enterprise products shipped with "Works best in Internet Explorer" etc.
Netscape lost market share to IE not because it lost users but because while the userbase was massively expanding they were buying Wintel boxes that shipped with IE on them so they never learnt that Netscape existed.

Chrome is something users install because it's their preferred choice. We can argue as to why it's their preferred choice but the point remains that users actively download and install Chrome - usually as one of the first things they do when they purchase a new computer.

That to me puts things on an entirely different level. To compete reasonably with Chrome you need to compete for users directly. You could argue that Google abuses it's monopoly position to market Chrome and that would probably be a valid argument but again, it doesn't change the active decision users are making.

If anything Safari (especially on iOS) is more like IE. In that it serves Apple more than it serves users. Apple wants PWAs to remain gimped, by simply dragging their feet or refusing to implement certain web standards/proposals they effectively gimp PWAs. This forces apps to be written for their platform which in turn is where they generate the vast majority of their scalable growth/profit.
https://archive.ph/FtIsP
I don't know why your browser cannot redirect to https and the web-server has to do it.
GMail on iOS already asks you to install Chrome on every link you click. It’s not even a hypothetical lol
Yeah it's very rough. Even having family in the house with me, I need outside socializing.

Even when we were able to shift back to hybrid in-person, I'd drive in the 45 minutes get to the office and find basically nobody there. It was just as isolating, but totally pointless.
I agree, measuring "security" by counting CVE counts is a bit like measuring developer productivity by counting git commits, it simply doesn't make sense.

But in the grand schema of things, who cares how many CVEs a project has, when it can take almost 2 months for the project to ship updates fixing exploits that happen in the wild already? That's just out of control and unbelievable.
I'm not seeing the connection to the Wuhan Institute of Virology. The word Wuhan doesn't appear on the page (CTRL+F), nor do I see a clear one-to-one association to Wuhan from "National Science and Technology Major Project of China" or "Key Research Program of the Chinese Academy of Sciences."

I haven't opened the YouTube video as I'm on data right now.
> Do you have examples like qanon conspiracy or capitol insurrection that were organized by blue collars at work?

The JFK assassination conspiracy was a popular long before the internet existed and before qanon created a resurgence in that thinking. Most of the conspiracy stuff qanon spreads is lifted from mein kamf.

The world existed before the internet and people are dumb as ever.
>I in no way expect these big corporations to do anything for me out of the goodness of their own heart, as the article suggests, but let's not pretend like the law doesn't apply differently to them.

The parent post doesn't imply equal treatment under the law, only that the state can coerce the employees/executives of tech companies into complying.
I would think this point was already settled in the Google vs Oracle case.

https://en.m.wikipedia.org/wiki/Google_LLC_v._Oracle_America....

> The inquiry into the “the purpose and character” of the use turns in large measure on whether the copying at issue was “transformative,” i.e., whether it “adds something new, with a further purpose or different character.” Campbell, 510 U. S., at 579. Google’s limited copying of the API is a transformative use. Google copied only what was needed to allow programmers to work in a different computing environment without discarding a portion of a familiar programming language. Google’s purpose was to create a different task-related system for a different computing environment (smartphones) and to create a platform—the Android platform—that would help achieve and popularize that objective. The record demonstrates numerous ways in which reimplementing an interface can further the development of computer programs. Google’s purpose was therefore consistent with that creative progress that is the basic constitutional objective of copyright itself. Pp. 24–28.

Creating a model out of training data is transformative. If we apply the Google assessment to Co-Pilot, then Co-pilot is non-infringing as it is only outputting jumbled snippets of source code. The expectation would be that the programmer will decide what to edit and what to compile. The only contention I could see is if Co-pilot outputs whole source code verbatim.
My company has paid double digit raises regularly. I’ve still seen people leave for internal transfers because they think the grass is greener.

Money is why a lot of young devs quit, but it’s not the only reason.
Why would you make that replacement for sentient_chatbot.c anymore than you would for sentient_chess_master.c? This is what I'm getting at again. The achievement feels so magical because it's something that has never been done. But now let's imagine ourselves with it in the rearview. You can now download, compile, tweak, and play with a neat chatbot.

When you can actually play with it, you'll get to see the magic rapidly fade. Various (though increasingly rare) normal inputs will produce absurd outputs. The majority of adversarial inputs will result in completely inappropriate responses, and so on. And then of course there will be a period of time where we continue to try to refine the chatbot and work out the adversarial attacks and so on. The notion of providing any sort of distinguishment (beyond achieving a world first, a la Deep Blue) will quickly become a nonstarter.
SMS 2FA is broken.

You have a bunch of other options including security keys, TOTP, and existing device verification flow.
I'm implying that people who dismiss the effects of the environment (advertising) on them by saying they Ayn Randian free-will themselves above it all, are either deluded or malicious. And that instead of systems which are openly hostile to humans which everyone must constantly burn free-will to defend against, we're a lot better acknowledging the predatory nature of advertising, and the limits and fallibility and weakpoints of free will, and en-masse building pro-people systems instead of pro-profit systems.
Your second paragraph is very intriguing. I never really thought about this. I wonder if people will actually be able to restrict usage though. Its software, and historically it has been hard to restrict it. Of course cloud based systems have two advantages, software is hidden behind the API and they have really powerful systems. But the former requires a single lapse in security to leak and latter just requires time till consumer hardware can catch up. If I use past data to predict future (which might be a bad idea in this case), it might be almost impossible to restrict AI software.
There's definitely a lot to good code reviews. One addition perspective I've started taking that I haven't seen so far in the comments is a "Have you considered this alternative approach type question". And to describe the alternative, show it, etc. And this ensures there is an option to basically reject the suggestion, a valid response is I've considered and rejected that idea or approach.
Seems like the parent was optimizing for reducing bureaucratic BS or time-between-jobs, as opposed to career growth opportunities. They’re both valid objectives, but you know the whole “judge a fish by it’s ability to climb a tree” thing.
I once helped nuked a user who was a persistent sexual harasser with access to multiple /16 ranges - but their device config (browser and etc.) was unique to users of the service in question, so we just hellbanned that.

(apologies for the level of vague here but I don't believe it's fair to anybody else involved to be less vague - including the user in question, who seemed relatively young and I hope has grown up since)
I have heard good things about that but have't checked it out yet...
Unfortunately Japanese buildings tend to be optimized for airflow (people want buildings that don't get mouldy). Also many of them are not well insulated (double pane windows are still a rare luxury) so buildings don't retain the cold air well.
Anyone have a clue for me what the 'CMA' is? I assume it's not CMA China Shipping, nor the Country Music Association, nor a Certified Management Accountant certification. (I did try to figure it out on my own before asking) Thanks in advance.
why bother having copyrights at all?
I have too much invested in canon lens, but no hurry to switch a 100% over to mirrorless. D5 is bargain body, D6 is just refined further but super nice. Availability for z9 and r3 is ridiculous.
There are a lot of ISPs, even consumer wifi gateways that mess with unencrypted traffic. HTTPS is the only way to ensure that the data served is what the user received.
> Let’s take an example of the Powerbook G4, which was released in 2002.

> So why force users to toss away perfectly viable devices

If it can't do secure connections, it's not a perfectly viable device.
Weird criticism.

Video is a nice relaxing medium with video and audio.

Some prefer it others prefer text, I prefer both depending on where I am.

Guess what I prefer on the couch
Ask HN: Fullstack or front-end for first dev job?
I'm an ex-Product Manager trying to break in to software development. I've spent the last few months learning Javascript and React. I'm by no stretch an expert, but I feel that I have a firm foundation.

I intended to learn back-end development before applying for jobs, but I've heard that nobody hires junior full stack developers.

Is this true in your experience? Should I learn any back-end, just get really good at React, or learn some other web technology? Any other advice re: getting my first dev job would be hugely appreciated.

Thanks in advance!
Apple's Upcoming M2 Chips for High-End MacBook Pro and Mac Mini Will Be 3nm
I suspect that has more to do with preventing an App Store competitor than security. Apps are completely sandboxed on iOS, and there's no way in hell Apple is auditing every app on the store in any meaningful way.
This doesn't quite answer your trend, but personal anecdote:

I recently switched jobs, and as part of my job interview process, I was pretty firm about only looking for companies that were working at least part of the week in the office. I just really thrive on in-person work.

Fast forward a few weeks... and I ended up taking a job with a startup that was fully remote. I loved their product, loved the founders, loved the team I had met; I figured I would make it work.

Two months in and I have hardly noticed that I'm not working in person. There's just such a huge difference when you're working at BigCo remotely and working at an eight-person startup. Particularly at my company, people just really give a shit and it shows. I feel genuinely connected to and engaged with my teammates. Makes remote work a lot better.
Aspirin for cancer and thalidomide for leprosy: new life for old drugs
Perception and sensation of adding extra limbs revealed in virtual experiment
I like "Consider extracting this to a separate function."
iOS as well - JailbreakMe[0] and TotallyNotSpyware[1] use a WebKit exploit to get out of the sandbox to then trigger other exploits that allow full system compromise/control.

Note that, while earlier JailbreakMe exploits were patchable if you installed a patch[2], the readme in the TotallyNotSpyware repo explains that, in general, there's not a patch for the exploit post-jailbreak, so you could still be pwned by a third-party website should they deliver this exploit with a spyware payload.

0: https://en.wikipedia.org/wiki/JailbreakMe

1: https://github.com/JakeBlair420/totally-not-spyware

2: https://www.idownloadblog.com/2011/07/06/pdf-patcher-2/ (use an ad-blocker, this website is super ad-infested)
Is this work you're collaborating on together (as peers) or work you're supervising? Are you in any sort of relationship where you could be considered to be 'mentoring' the developer?

When collaborating, I like to provide my feedback in a way that allows the person to provide their own perspective.

"What do you think about moving this to a separate function so that we can keep each functions in the class small and focused on one specific purpose?"

When supervising you of course want to allow two-way-communication but you can be more direct, but make sure to use the correction as a teaching moment.

"Please move this block to a separate function so that we keep the functions in the class small and focused on their one specific purpose. See abc.js and xyz.js for good examples of classes that follow this pattern."
1) Solar PV + battery storage is the only real option for the off-the-grid electical home, and you'd want maximum power output per roof area. The best option for PV is monocrystalline Si panels, produced almost entirely in China with proprietary technology. Lifetime is basically indefinite as well, >30 yr, and they contain no heavy metals so recycling is not much of an issue. Battery technology for home use is more variable, but LiFePO4 (lithium iron-phosphate) is probably the optimal tech at present (cost is relatively high, recycling is not much of an issue as there's no toxic heavy metals involved).

2) A properly designed PV-battery system has little fire risk, and probably less than a tank full of gasoline or diesel fuel or pressurized propane gas (which go off like bombs during wildfires).

You also have to consider whether or not a grid-tied system or a completely off-the-grid system is the optimal choice. This depends a lot on local utility policy (net metering means you get paid as a power provider if you're feeding more power to the grid than you use), and whether or not you want reliable power if the grid goes down, i.e. can you disconnect from the grid and just use your battery bank for power at night, and so on. A reputable installer will have answers to these questions for your local area.
Then put it behind a switch and let the user take responsibility. Based on how apple has responded to security issues before, I don’t really think they have much of a leg to stand on.

Also, a security issue with safari is far more devastating if you don’t have other browsers.

1. You have to wait for apple to release a system update, not just update the app.

2. You now have no safe browser to use while you wait for #1.
Warp zones allow players to see more of the game. If you were a kid playing SMB, and was only allowed 30 minutes a day to play a game, you would probably never get to experience any of the later levels without the warp feature.

Not everyone games the same way. For many people, cheats add to the experience, they don't detract from it.
Things to know about databases
MacOS is the only market Safari actually competes in and has the same advantage by being the default.

I would actually expect the most likely outcome is Apple would fight hard to build a better browser to stem any losses to other browsers. They'll have at least 2 years to do it, so they can catch up in that time with enough investment.
Fair point (in regards to security).

Regarding ease-of-install though, installing pyright is painless in comparison to installing mypy when dealing with virtual envs, IMO.
> I think thats because they are relatively old and never used messengers, mail, social media and co. to an extend as my generation (age <=25).

I don't know the age distribution at your company and their educational background, but a lot of people under 50 have been using such systems at least all of their adult life (esp. if they work in tech). Around 1995, internet started to become mainstream. And long before that, people were using BBS.

Smartphone are newer though but I don't think they brought much to the equation. If anything, people became less tech-savvy after the emergence of smartphones.
Here's another :)

https://tcrf.net/Super_Mario_Bros.#Unused_Spiny_Egg_Behavior

https://tcrf.net/Bugs:Super_Mario_Bros.
Like all would-be UTF-16 users it actually uses WTF-16 in practice.
Verhoeven is textbook boomer: absolutely masterful at his peak, and utterly insufferable in old age.
I don't know whether they do proactively, but they definitely take action on reports filed from private servers.
which it does apparently https://news.ycombinator.com/item?id=27710287
Plain HTTP is synonymous with trust. In an ideal world where no one would snoop or mangle responses, it should be enough.

In our still-imperfect world with potential MITM attacks, sometimes that trust is not warranted. However, one still should be able to choose to trust own connection. I don’t want this choice to be made for me with no way to appeal.
Your browser can redirect to HTTPS, if you use HSTS preloading.

Also, at this point I think we have sufficiently pervasive availability of HTTPS that it'd be reasonable for browsers to expand typed domains (if the user types `example.org`) to use https:// rather than http:// , unless they're an IP address or localhost.
In the mid-2000s I used Lotus Sametime at work. We could send text, emoji, pictures, and more. It had a plugin system that would extend the client side to do things like automatically look up issue numbers found in the chat and expand them into hyperlinks with full descriptions.

It was cross platform with a native UI thanks to Eclipse RCP, Java, and SWT. We moaned at the time that it sucked up 200 megabytes of memory and had a long startup time.

I use Microsoft Teams daily and sometimes chuckle that in some areas we seem to only reinvent the wheel with dubious outcomes.
None of the suggestions contain any justification for taking the action. In many cases a reason may be obvious, but as it is not the case that every opportunity for creating a separate function should be taken (for one thing, doing so can make reading and understanding the code more difficult), this becomes an issue of judgement.
Using HTTPS by default has obvious security benefits, but it's not clear we need a redirect to implement it. We could have leveraged the Alt-Svc header for this instead, which is meant specifically for this. This would allow modern browsers to use HTTPS without preventing older browsers which want to use HTTP from doing so (at their own risks).
https://www.gov.uk/government/organisations/competition-and-...
Axiom and Collins only bidders for NASA spacesuit contracts – SpaceNews
"availed himself of the process"

Literally the ruling here is that the border patrol can't be sued because instead they will investigate themselves. Guess how that investigation tends to go?
K3s uses their own loadbalancer, so yes. It will add extra hops to any of your services if you care about sub-ms latency.

I looked at metalLB, and didn't really fit with what we wanted to do, so YMMV. It's pretty limited unless you control a lot about your IP space.
When you are reviewing, what is your authority level? Do you enforce a checklist? Are you merely asked to give your professional opinion? Are you a senior supervising a junior? These are critical inputs for me to calculate tone.

When I've done reviews, I had some seniority and an organizational privilege to veto some code. I worked from a checklist and a goal (with which the checklist was meant to align, but we knew it was not possible to fully automate those aspects of review). These are my takeaways from that arrangement:

Language like "declined" or "REJECTED" or "can't approve" is discouraging to the individual contributor. I replaced all that with discussion of why I can't allow that, under the obvious subtext of rejection. No need to just rub it in when there is learning to offer.

When indicating required changes, especially where I was more-or-less handing them the replacement code, I always said please. Always.

Most importantly, I gave accurate feedback. I took the time to be sure I was right before I wrote a review. Otherwise what's the point. Even simple patches got tested.
My knee jerk reaction is outrage, but the more I think about it, the more I realise the only realistic audience for a tool like this is those who are learning or just not very competent yet. If I'm happy to waste my time answering people on Stack overflow, then why does it outrage me so much when a machine takes my knowledge and uses it to help beginners on my behalf? If co-pilot was a human that read the entirety of github and then helped people code for $10/month I wouldn't have any qualms, I'd probably commend them. The reality is copilot isn't capable of creating any real IP, it's just building off the very same foundations of open-source that I have also built my career off. I'm conflicted.

That said, I do believe it's outrageous there is no way to opt-out. I know that's very unpractical given the resources required to train the model, but presumably at some point it will be re-trained and there should be the ability to opt-out of future training cycles.
It could change which crops are subsidized. Imagine if broccoli were subsidized as much as corn.
> By using HTTPS my website increases it’s overhead by almost 100%. It should be mentioned that my personal website is also plain text based and tiny. Imagine the impact of a blog article or research paper with significantly more content.

An extra kilobyte. Wow. Such data transfer. What a dealbreaker.

No HTTPS means worse performance, because HTTP 2.0 requires it. HTTP 1.x doesn't have connection multiplexing. When I moved my blog to HTTP 2.0, I noticed that it loaded faster, even when on the same LAN as the server.

> Helpful Tips:

> If users are nervous of links set in standard http:// format, they can add s themselves or better yet, use a browser extension like HTTPS Everywhere (highly recommend)

HTTPS Everywhere won't be supported beyond 2022: https://www.eff.org/deeplinks/2021/09/https-actually-everywh...