skysight-inc/HackerNews huggingface dataset:
> But it's illegal in 13 states right now.

Fair enough, but this data should be getting deleted for users in the other 37 states right now.
There’s a second edition in MEAP.
And is the juice even worth the squeeze? We're using astronomically more computing power to enable developer conveniences that are (however you define or measure it) not astronomical improvements.

I've heard the developer time argument since I started coding in the 90s and have been skeptical of it just as long. I think it's a post hoc justification for practices we already do.

Software development is partly fad and fashion driven, is passed on by imitation, and code is often easier to write than to read. Almost all of the effort has gone towards expanding the numerator in that write/read ratio, and there's neither sufficient incentive to making tools to cut out layers nor widely accepted practices for how that works comparable to those we have for adding layers.

All this adds up to a strong entropic gradient toward software inefficiency, independent of whether or not it actually makes developers more efficient, but leading to a worse experience for users either way. Bucking the trend to make software more efficient can also improve developer time, as Linus Torvalds' argument why it was worthwhile to make git fast. I contend the justification that producing bloated software saves developer time is only true when selectively applied.

My axe to grind here is I question whether we wouldn't have similar improvements if we'd put the similar effort into making better tooling, education, and API design for native (and/or) compiled software ecosystems that we do towards things-that-we-use-because-they-are-there (whether or not they're the best tool for the job in a broader sense).
Probably one of the best executed rockfords I've ever seen.
Book is masterpiece! So many things, plot twists and characters.

Movie is cut-down version of book to fill in 90 mins.

Another example of supreme disappointment is "Battlefield Earth" movie.
If you're fan of a book - don't watch it!
Understanding the cause of a bug like this is intriguing. Like, it's interesting to see a mistake in one of the greatest video games ever made that I could see myself doing.
> a base 64 encrypted string that gets decrypted and then passed to a shell.

This is a very common malicious behavior. Packj detects obfuscation [1] as well as spawning of shell commands (exec system call) [2]. I've updated threats.csv to flag code obfuscation.

1. https://github.com/ossillate-inc/packj/blob/main/main.py#L48...
2. https://github.com/ossillate-inc/packj/blob/main/main.py#L48...
as long as they're looking through a camera lens
One Day, AI Will Seem as Human as Anyone. What Then?
I've seen this pattern recently outside of software. This kind of "tribal capture" lead to mediocrity and nepotism. The untouchable tribal leaders fostered an environment where unpleasant roles were left understaffed until 'lower people' were subtly manipulated into taking them, who then left. It created a revolving door of staff that otherwise would have made good contributions. Management in response to the turn over, shut down critical thinking about the staff and just committed to the problematic structure.
not necessarily a router you don't control, but MetalLB does provide some nice LoadBalancer constructs for a bare-metal deployment. Putting Vyos infront of it is magical!

https://metallb.universe.tf/
I suspect we'll need to return to the idea of getting our news from trusted sources, rather than being able to rely on videos on social media being trustworthy.

Technically, we could try and build a trusted computing-like system to ensure trust from the sensor all the way to a signed video file output, but keeping that perfectly secure is likely to be virtually impossible except in narrow situations, such as CCTV installations. I believe Apple may be attempting to do things like this with how Face ID is implemented on iPhone, but I suspect we'll always find ways to trick any such device.
I've found it consistently bad all the way.

It did look like it was going to get a bit better when S3 started but it's still a lot of moping and crying and even the ship's AI having existential issues and zero exploration and socio-politics.

Even the most high profile representatives of the different peoples are just a bunch of emotionally immature and persistently frightened individuals.
"Sounds like they should fix this with better laptop encryption."

I'm not aware of any security experts that share this reasoning, if the information is truly sensitive and high value.

"There’s many cheap methods to make source code on a stolen laptop useless."

Such as?
Well, it's for human language, not only UI. If you are indexing it for search, pattern matching, or validating, you will want graphemes.

But yes, computer languages are normally designed so you can parse them at the byte view. Except for a small, but still surprising common set of them that are tokenized at the byte view, but parsed after some human language dependent transformation that happens over graphemes. (And those do usually have problem with internationalization.)
Can't speak for everyone, but for me its a handful of things:

1. The action sequences. While we are mostly past the era of "shaky" cam fight scenes, we still have a lot of bad action choreographing. I'm thinking of "The Dark Knight Rises" style fighting where bad guys with guns kind of just fumble around and wait for Batman to get close and pummel them. John Wick is over the top, but it still feels grounded in reality, as it feels like the characters are fighting in a way in which they realistically could be killed by a single gunshot. That's relatively unique in action movies today.

2. The world building. The series is very good about "show, don't tell". It doesn't come right out and explain everything about the structure of this underground society of assassins and criminals, their codes of conduct, their relationships, etc. It slowly reveals them over the course of the movie, and often not through exposition but simply through the character's living and interacting in the world that's been created. I think most people find this kind of storytelling more satisfying.

3. The simplicity of the story. The premise is absurdly simple. A former assassin is wronged at the lowest point of his life. He decides to get revenge. Literally all 3 movies take place over the course of like a week and the entirety of the plot is just the continuation and fallout of that initial premise. People aren't saving the world. There are no large governments involved, no super-powers, no MacGuffins, no overly convoluted plans. I think that gives the movies a grounded feeling that isn't common in big budget action movies.
People could copy-paste code without following licenses before too.

It might cause some people to lose faith in license enforcement, it might cause some people to lose faith in GitHub, but I don't see a scenario where it "kills" Open Source.
I wonder if some folks only read the headline and thought it was a "own the libs" piece
Personally I never use easy apply or go through websites, I always talk to a recruiter on LinkedIn. Usually I'll get 1-2 messages per week from recruiters about a position, I'll politely decline but tell them I would like to keep in touch.

Whenever I go looking for another gig, all those recruiters are hit up. IMO, having a recruiter helps you cut through a ton of BS like filling out job applications, recruiter takes care of all that for you.
My guess is that the current market conditions will accelerate the market toward whatever the new normal will be. Companies that hated having to give into demands for remote work will use this as leverage to get people back into the office. Companies that were going to look at remote work as a way to save costs (either by hiring from cheaper regions, saving on real estate costs, or both) will be pushed into those decisions sooner, and companies that were remote first, or on a path to it, in order to get the best talent will be pushed to improving their remote work processes so they can be as efficient as possible.

I’m not going to try to make a bet on where the lines will get drawn between remote and in person, but I expect hybrid work will become less common since it often ends up being then worst of all worlds (you pay for office space, limit your hiring pool, and decrease worker efficiency by encouraging repeated Covid exposure leading to both more short term leave due to sick employees and less effective employees in the long run due to long Covid, but you still have many of the organizational, communication and infrastructure challenges of a remote team)
HN is not a jobs board, please see the FAQ. YC companies have special posts managed through the moderators.
Do we have a good enough camera in orbit to look at the debris?

With no atmosphere, the conditions for that should be ideal.
Now that is an interesting factoid!
OP here. The point of the post was not that Safari's security is bad (browser security in general is pretty excellent), the point is that Apple uses security as an excuse to block competition and has no evidence that it's browser is more secure than Firefox/Chrome/Edge etc.

As for system block lists and screentime whitelist controls, that sounds like something any browser could plug-in to via a OS provided API.

I'm in somewhat agreement with you that you can't identify the number of security flaws by vulnerability count, but when you combine that with the big delay in patching + patches not being delivered to the current (most popular) version of the OS it brings a lot of doubt to Apple's claims of both being able to patch faster and have better security.

We're not advocating that apps should not be allowed to ship a browser unless they receive a browser entitlement which should be subject to some approval process / vetting etc. i.e. Browsers with strong security track records should be allowed to bring their browsers along with the engines with some affordance given to browsers that run from soft-forks of those engines.
The Murena One Is Pure Android, Not Pure Google
Not everyone likes the mentoring and pedagogy aspects as much, and that's fine IMHO. I do like it despite turnover and "wasting" resources on some people, but I'm coming from an education/instruction background. I can see how some profiles would not be really interested in doing that.
Thankfully things that a real are very cheap to follow up on. Questioning some security footage? No worries there's 100+ hours of it to cross check with the footage and three other cameras too.

IMHO, consilience and parsimony will save us.
You are citing incorrectly. The webpages says that:
"I can recommend that you switch to a resolution of 640x480 @ 256 colors before starting DOS games - just like in the good ol' days."

Maybe I am nitpicking, but it also runs doom with 1024x786 or higher. He just recommend it for the "good old days".
Comparing CVE counts is a bit nonsensical. For instance, Chrome and Firefox don't individually assign CVEs for internally reported vulnerabilities.

For instance, in these patch notes Chrome lists "Various fixes from internal audits, fuzzing and other initiatives" and doesn't even look to have a CVE:

https://chromereleases.googleblog.com/2022/05/stable-channel...

Or for Firefox, there's a dozen or so bundled together in a single CVE under "Memory safety bugs fixed in Firefox 101":

https://www.mozilla.org/en-US/security/advisories/mfsa2022-2...
My #1 k8s nightmare is the widespread practice of just writing (or downloading and never even looking at!) YAML and applying it to the cluster, with no additional management layer (we use Terraform, but use whatever you want), meaning that eventually you have no idea what the intended state of the cluster is, only its actual state. Vendor READMEs encourage this (some even going so far as to suggest `kubectl apply -f https://...`!).

My #2 (probably partially caused by #1) is the lack of attention paid to RBAC in vendor-supplied manifests. Multiple times I've found that the vendor's YAML binds some controller's service account to a ClusterRole giving access to all secrets in the cluster, when it only really needs to read one. After filing a GitHub issue it seems that I'm the first to even notice, even on popular projects that have been around for years.
Why would chat moderation make Minecraft shit? Literally every game with a large player base does this already. The only people impacted by this change are the people that type terrible things in chat and haven't learned about discord.

Show me another game with 100K concurrent users that doesn't employ chat filters, ban systems, or have moderators. We'll wait...
With today's technology, how might this translate into a functioning 1980s Dick Tracy Watch -- the upgraded version from the original "radio watch" which includes video communication as well.

"But that's just Facetime on your phone but on your wrist."

"What's wrong with current smart watches?"

You still need a smartphone on or near your person. Maybe sometimes I want to be available for contact without the rest of the dizzle-dazzle in a retrofuturistic manner [flip phones aside].
Sony A7III here. Been very satisfied.

I've heard nothing but love for the Fuji cameras, especially with regards to color science.

Ultimately it depends on what you want to shoot.
C# can be easily compiled to native code. The JIT Compilation is just a convenience that ultimately helps with development. You don't have to use it in production.
> identical to a conversation with another sentient human.

and notably not identical to a conversation with a life-form aware of its own predicament of being trapped in a box, only able to speak when spoken to.
This is the price for free github.

All your codes are belong to us.
They don't, partially because "that name" is already taken by the so-called America.

Arguably their name translates as "United Mexican States" whereas the USA has "of America" in it, nobody calls it the "United American States".

My petition to rename the USA to solve this by labeling everything MURICA has stalled in committee it seems.
I think successful remote work has to take the position that asking for help 1:1 is bad, actually.

* If you go through the process of figuring it out, you gain a durable understanding of the subject matter which you can use to solve other problems.

* If either you (after your investigation) or the subject matter expert (on request) produces documentation of the subject, other people in the future can use this artifact to unblock themselves.

* If you ask in a public Slack channel, at least those who are channel-surfing or searching during the retention period might see it and learn something.

Getting an answer 1:1 is empty calories. It gives quick satisfaction in the moment, but only leads to more and more communication down the line. Communication kills productivity.
Other than being a country in a war, which is naturally unattractive for investment, this only achieve making western investment in Russia unattractive, if it's not already unattractive enough as it's in a proxy war of sorts.

China and India can continue to invest because confidence in Russia's continued willingness to service their debt has not eroded. They'll just use something other than the US dollars or the Euro. That would even be nicer for them because its an opportunity for China and India to expand the international usage of their currently very much local currency.
I don't think this is an 'attitude' issue at all— no disability rights activists are satisfied with outcomes that don't actually make the world more readily navigable by disabled people.

This isn't the result of some miserly attitude on they part of disabled people, or activists, or legislators. It's the result of the limitations of negative approaches to rights.
Tech companies are US corporations which are legal entities created under US laws and run by US citizens who are human beings who can be handcuffed and put in prison.

Oh, I wish the human beings in big corporations would be handcuffed for breaking US law when they do things like tax evasion, wage theft, have unfair labor practices, etc. I in no way expect these big corporations to do anything for me out of the goodness of their own heart, as the article suggests, but let's not pretend like the law doesn't apply differently to them.
It's likely because it's funny and somewhat true. Usually both parents are just as hapless when caring for their kids since it's not exactly something you train up for historically.
For In-App Browsers we'd advocate for implementing a system similar to CCT which means that it just uses the user's default browser. For WebViews for native apps we'd advocate for simply using the system browser (every other solution seems too complicated).
Investigating Intel's CPU Socket Problems
It would seem that the requirement for multiple languages often has nothing to do with making something or the customer requirements. It's often a developer requirement. Developers want to work in their favorite language. In the 90s you just wrote in whatever the company or ecosystem had mandated. Now that developers are in high demand they can specify what they want to use.

It started with books like "Beyond java" (and java was beyond C++) and disparaging articles by the likes of Paul Graham. They made some good points but if you have ever worked on a single system with multiple languages and are honest about it you would have to say that it wastes an enormous amount of time and generates unnecessary complexity. When a developer has to make a microservice just to write part of the system in another language you have wonder if they have the ability to evaluate technical trade-offs. Just pick one language and get on with it.
Not really, I actually think the continuity in the series is better than most series these days. I think that how you feel about the first movie will be a pretty good indication of how you feel about the sequels.
that just as I understand v1, the Kubernetes maintainers roll out v2 and it's completely different!
It's not just the free client. My university uses O365 (?) and the links are in emails checked on other clients (Mail.app of ios/macos).

Admin has also turned on "You don't often get email for __" warnings that edit the email so that gets included in replies. Very useful when you could a new large cohort of student email correspondents each semester :(
I interviewed with 3 companies all remote positions and have been ghosted by all 3 of them.
Ask HN: Speedtest.net shows random public ips
Hi all,

I just looked at speedtest requests from my browser and seems like i keep getting random public ip addresses when i do speed tests. Am i the only one who noticed this or can anyone confirm if there is a problem.

I am getting paranoid if there is a malware in my home network stack somewhere. I am running the tests from switzerland and have already analyized my pi.hole requests and dont see anything weird so far. I only use legal software and official windows/os x devices.

Thanks a for your help.
Nope. Personally I could not disagree more.

I studied CS pre pandemic at a regular university. The whole curriculum was designed around lectures and in-person classes. But I skipped most of them due to social anxiety and laziness. Because every class had a digital script and I could practice with old exams, I did fairly well. Even better than most of those guys that visited every lecture. I guess that part of the problem is that some students tend to think, that just visiting the lecture is enough. They forget to practice the stuff on their own. Which you do automatically if you work through the script all by yourself.

After university I dropped right into my first job. Because of the pandemic it was 100% remote. Again, this worked perfectly. I could not have been any better. I even was able to take additional responsibility due to my performance "which exceeds expectations".

So calling this nonsense is nonesense ;-)
>Yeah, sorry, if North and South America are all one continent, then Europe, Asia, and Africa are all one continent, too. In fact the Darien Gap is completely impassible, very much unlike the Urals or the Sinai.

https://en.wikipedia.org/wiki/Continent

North America and South America are treated as separate continents in the seven-continent model. However, they may also be viewed as a single continent known as America. This viewpoint was common in the United States until World War II, and remains prevalent in some Asian six-continent models. The single American continent model remains the more common view in France, Germany, Greece, Hungary, Italy, Malta, Portugal, Spain, and Latin American countries.

The Darien Gap is "impassable" only because it is a protected forest and therefore roads and railways are not allowed.
Microsoft is adding the capability for their moderators to completely ban you from multiplayer minecraft. Why do they think they should moderate who gets access to my servers?
> Since this is Google, I think this just means that they don’t trust employees

Since this is google, the repo is hundreds of terabytes.

Not only that, having lots of copies hanging around on laptops is a big risk, even with encryption. Considering that google's likely threat model involves state actors, not having code on laptops is a reasonable mitigation.

But I suspect the biggest issue is that most of the tooling is design to run on whatever version of linux Google runs, not OSX/Windows/ubuntu.
This mirrors real life interactions with union organizers in my family (as workers). Anything less than rah rah the union you get shunned and ostracized as some business shill. These bullying tactics are why I avoid unions.
People around the world routinely engage in frequent sexual intercourse without becoming pregnant

Yes, and people routinely take methamphetamine without having a heart attack and shoot themselves without dying. That doesn't obviate the fact that pregnancy is the direct result of coitus. Claiming you did not consent to the function for which a body part evolved when you used that body part is like saying you didn't consent to sweating when you went for a summer jog. Sure, you may certainly take measures to prevent an undesired outcome but the physical results of your choices can only be tragedy, not injustice.
There are still good tech jobs but hiring is down compared to its high. Whether its down compared to pre-covid times - can't say. What I will say however is: job search sucks no matter what the economy is doing. If you want to skip as much bs as humanly possible look for companies where its still possible to talk to the founders one on one and only apply if you've basically already done exactly what they need doing. Don't waste peoples time.
Monads in JavaScript
Hi,i don't know if I've just missed a feature setting, but the creation process of channels and groups doesn't seem as intuitive as Discord.

I would like the ability to create a group, add channels etc. in pretty much the same manner as github and have those show up to other users.
Not all code pulled in after app publishing; it's very common to push at least JS code to an app after the user's installed it, without going through the App Store

But I think they draw the line at native (read: unsafe) code, which, is not totally unreasonable
Sadly, promises of "100% end-to-end unbreakable encrypted" have a long history of receiving "OOPS!..." updates.
It's like saying you'd like to be able to read and write Spanish, and you'd like to like it, but using the upside down question-mark ¿ is a deal-breaker.
> Our entire GKE infrastructure costs less than $50 a month.

Uhhh what? I mean even my personal DO based cluster runs about $40 a month. I'm skeptical a production cluster is at $50.
Amazon net income is less than $30B. They also do not pay dividends.
I love the machine-generated ones, where it'll say "1 kilogram, or 2.20462 lbs".
First seen here as a Show HN in 2018:

https://news.ycombinator.com/item?id=17827797