skysight-inc/HackerNews huggingface dataset:
Making profits for doing something useful and not overtly harmful is commended. If you provide a needed service, and you do it without harming others, then everyone is happy.

But there are many, many, many examples where the harm is very clear. This is one of those cases. The only reason 53% (supposedly) of the Dutch population support the farmers is because they don't know the full story.

If I come into your neighborhood and do something which gives me a big profit but screws you and your neighbors, should my profit-seeking be commended? Or should we evaluate the real cost?
Science vs. Soyence
There's no reason to have your services listen on a public IP in such a setup.
I'm dubious. HOAs were created to do an end run around Shelley vs Kraemer.
What would be process for handoff from translators to programmers?
The ones I’m looking forward to most are KubeCon/CloudNativeCon (https://events.linuxfoundation.org/kubecon-cloudnativecon-no...) and the Python at Scale Summit (https://www.pythonatscale.com/).
What that right would entail remains to be seen, but it won't be elective abortions in the 3rd trimester.

The legal timeframe to terminate a pregnancy in France was extended from 12 to 14 weeks in the last legislature. In 2018 and 2019, lawmakers unsuccessfully tried to amend the constitution to include the right to abortion.
You can fearmonger all you want, but this is a good thing: People should actually own their devices.
We should probably consider a person's voice-print, too. To be safe, you need a mask with a real-time voice changer.
Quantum Annealing is not a threat for cryptography.
You can safely dismiss these sort of articles.
More and more providers have been adding unique prefixes to their tokens and access keys which makes detection much easier. Ex, GitLab adds `glpat-` to their PAT.

A project I maintain, Gitleaks, can easily detect "unique" secrets and does a pretty good job at detecting "generic" secrets too. In this case, the generic gitleaks rule would have caught the secrets [1]. You can see the full rule definition here [2] and how the rule is constructed here [3].

[1] https://regex101.com/r/CLg9TK/1

[2] https://github.com/zricethezav/gitleaks/blob/master/config/g...

[3] https://github.com/zricethezav/gitleaks/blob/master/cmd/gene...
I keep getting timeouts from them interestingly
> Well, if you look at (global) society as a dynamical system it seems to me that there are two stable basins or attractors, call them "Star Trek" and "North Korea".

Nice analogy. Do you really believe, that us being on an utopian trajectory is realistic?
Preaching to the choir pays his rent.

The other options are sucking oligarchs, amusing children, selling off your body parts, living in a cardboard box and the vast frontier of crime.
As much as I love my pets and am willing to spend beaucoup bucks on their health care, I'm not sure I ever see free universal veterinary care being a thing. Too many people human problems will always be there for people to be comfortable using taxes to fund Fido's chemo.
A Taiki Waikiki directed Tom Bombadil series would be epic
Honest question: how many applications are using in-memory lists that are large enough to warrant indexing but are also too small to put in a database?

That's probably why such a library doesn't exist. Sorting & search is good enough for one field. Full scans aren't that bad for small/medium datasets. And databases aren't that difficult to integrate into an application.

Also, pandas exists in the Python world.
Yeah but you pay one invoice instead of 100 invoices, you have one sales representative OK maybe a couple to deal with instead of 100s.

You get your support in one place instead of Hodge pogge of ... yeah we rent server from X but software that runs on it is from Y and in reality provider Z is support so now C has to agree for physical access to the server and now align stars to get all 4 working together instead of shifting blame around to fix anything.
Yup - and we can go even further - the tech companies (& all companies) should by their own volition treat personalized data at what it is - highly toxic waste.

While it is mildly interesting, I've never read any articles, studies,or other info that the highly touted promise of PII to increase sales, effectiveness of advert spending, or ad relevancy for consumers is anything but a complete flop. Decades of effort by the top tech firms and investors, and contextual ads are still more relevant -just show ads quasi-related to what I'm reading/viewing right now.

Highly likely that Google could this afternoon vaporize every byte of PII they hold and be just fine. FB might suffer, but more because surveillance tech is their core worldview then that they couldn't survive.

If they are smart ,they'll vaporize it this week, without any legislation. But I'm not counting on it.
Those places would have come out better if we all did this. And that's the whole problem: if you don't tackle problems of this magnitude globally then you might as well not bother because a couple of dissidents on a large enough scale will ruin it for everybody else. In this case the dissidents even use this argument to show that the better choices didn't work... which when you think about it is really despicable.
Is there any word out how they managed to avoid linkedins relentless rate limiting? For example my account gets rate limited for normal browsing
What happened to personal agency? Let people make mistakes, you don't need to infantilize them.
That only works 1:1. What about groups? Can I not post Slack messages to a group channel unless everyone is within their working hours? What about email? What if you're in a different locale temporarily for some reason?

No, if you don't want notifications outside your own personal work schedule, then it's up to you to manage them.

With the freedom of remote work and flexible schedules, comes the responsibility to manage your own notifications.
Yeah, same; I can't help but think there is a vocal minority in these threads that thinks Pulse is broken.

I use Pulse for some pretty complicated stuff, too; I'll pipe individual streams to my speakers, if I want to show something to my SO (e.g., a reddit video) but want to keep, like, my music or my backgrounded game on the headset. I can do that with PA, and honestly pretty easily. AFAIK, no other system supports that, though admittedly I haven't used Windows in some time.

Far more complicated, I also have TTS bot I use in Discord sometimes, when I can't speak. PA allows me to push that into Discord; this is another thing I don't even begin to know how to set up on other systems. (The bot emits sound, so it's like a program playing sound, not a recording device. Discord thus doesn't recognize it as such. So I end up creating a fake input device, of sorts, and wiring the bot's output to that fake output (so it goes to Discord) but also to my own headset, so I can also hear the bot, as the TTS is far from perfect and will sometimes just make hilarious garbage of words.)

I also use Bluetooth, and that usually works. It certainly works more reliably with PA on Linux than it does w/ macOS, though it is my no means flawless. But that seems to be how bluetooth is: it sucks on every OS. There will be days it won't connect to Linux, and there will be days it won't connect to macOS.

I will say that Pipewire looks like it more solidly hits the nail: the thing I don't like is that PA doesn't really model audio as a graph of nodes. (PA's model is equivalent to a graph of nodes, but that it isn't just a graph of nodes makes it a lot harder to deal with and intuit.) For that reason I'm excited about Pipewire; I need to try it one of these days. PA would also be served by a better API; it is difficult to script against.

Also, systemd units are hands-down a more solidly engineered thing than the mess of shell scripts they replaced. I will take systemd+journald any. day. of. the. week. People that … want shell back — I honestly can't comprehend this. I've literally not had to deal for years now with a service wedging itself in because some daemon orphaned itself somehow between some unreliable mess of shell, pidfiles, and other hacks. Is systemd/journald perfect? No, I've spent time fighting it too. But it's a lot more productive than what came before, and the design is engineered to solve the problem at hand… which the shell mess was not.
It may not.

https://en.wikipedia.org/wiki/Gunk_(mereology)
How would you implement this in a way that doesn't require google to retain your full location history?
SEEKING WORK | SEEKING FREELANCER | Medellin, Colombia (GMT-5) | REMOTE

QA (Manual and Automation) Engineer. I've been working with 10+ years of experience in Software Testing in Agile environment and has hands-on experience in all stages of software testing life cycle.

I've worked in several testing projects in finance, retail, insurance, media OTT, e-commerce and banking companies, with knowledge of testing techniques/methodologies and how to apply them (including automation, functional/integration, sanity, regression, exploratory testing, end-to-end testing, API testing, etc.). I've been delighted to be a leader setting up QA best practices understanding of all phases of the Software Development Life Cycle.

Website: https://douglasfugazi.co
Email: itmteleco [at] gmail.com
Rate: Flexible according to the project

Technologies doing Testing & Frameworks:
Selenium Web driver, Cypress, React.js, Vue.js, Docker, AWS, Accessibility, JIRA, Confluence, Git, Postman, Jenkins, API, Adobe Analytics, Axe Tools, Salesforce.

Looking forward to hearing from you.
https://www.linkedin.com/in/douglasfugazi
Who are these non developers who can edit YAML but not Python?
Interesting experience, thanks.
It's rallying the troops and articulating the issues. Most of the readers are not yet doing much but can be encouraged to, there is a lot we can do by getting off our butts to convince the rest of the people (activism, lobbying, moving the political Overton window etc).
Piecewise Geometric Model Index
Location: Medellin, Colombia (GMT-5)
Remote: Yes
Willing to relocate: Not yet
Technologies doing Testing & Frameworks: Selenium Web driver, Cypress, React.js, Vue.js, Docker, AWS, Accessibility, JIRA, Confluence, Git, Postman, Jenkins, API, Adobe Analytics, Axe Tools, Salesforce.
Résumé/CV: https://douglasfugazi.co
Email: itmteleco [at] gmail.com

QA (Manual and Automation) Engineer. I've been working with 10+ years of experience in Software Testing in Agile environment and has hands-on experience in all stages of software testing life cycle.

I've worked in several testing projects in finance, retail, insurance, media OTT, e-commerce and banking companies, with knowledge of testing techniques/methodologies and how to apply them (including automation, functional/integration, sanity, regression, exploratory testing, end-to-end testing, API testing, etc.). I've been delighted to be a leader setting up QA best practices understanding of all phases of the Software Development Life Cycle.
Running the Steam Deck’s OS in a virtual machine using QEMU
Because it will be a benefit to consumers?

The EU has the authority to create new regulations, it’s not limited to antitrust.
As an interviewer if it took more than 5 minutes I wouldn't be doing it for you.
Wouldn't it be 694 million metric tonnes? I million megatons is a hell of a lot.
SEEKING WORK | Vancouver, BC | Remote

Apprentice or Internship. I primarily audit university courses and whatever stack you're using I can learn from TypeScript to C++, and I'm careful to never ask the same question twice to avoid bothering engineers on Slack. Any role where I can slither my way in to eventually working on the code so open to user support, technical writing, QA/testing oracles, or bounty-style work for PRs solving open issues.

Skills:

Property-based testing
Technical writing
Functional programming
Conceptual design of new features
Basic SQL like CTEs/Aggregates/Window functions
Converting math/stats functions to programs
Metaprogramming like CI and dependency management
Tools like Git, wrangling textual data with the shell

Contact: jb3946170@gmail.com
This whole Lennart Poettering thing of naming and bundling otherwise completely independent pieces of software "systemd-${thing}" even when they are at best just sightly related to "things you might want managed for you in your computer" doesn't make a lot of sense, and doesn't help in his defense that "systemd is supposed to be modular".

My guess is that if PulseAudio had came later, it would be called "systemd-audio" or something like that.
Bald guy here -- let me assure you, symmetry is not the only factor, not for the algorithm and not for the people it represents :)
> This suggester isn’t very good. It takes a single query and suggests indexes for it.

The underlying API can analyse multiple queries - looks like they've only coded up the test `.expert` command for one.

From [1], "The sqlite3expert object is configured with one or more SQL statements by making one or more calls to sqlite3_expert_sql(). Each call may specify a single SQL statement, or multiple statements separated by semi-colons." then "sqlite3_expert_analyze() is called to run the analysis."

[1] https://www.sqlite.org/src/dir?ci=trunk&name=ext/expert
Here's how DNS rebinding works:

1. You have the victim user open a tab to your page at attacker.com .

2. After the page loads, you change the DNS record for attacker.com to make it point to 127.0.0.1 .

3. Javascript on the page makes requests to attacker.com and can now read and interact with whatever servers are running on the victim user's machine.

Alternatively use 192.168.1.1 to attack the victim user's router.

This attack will be blocked if the victim servers check the Host request header. Often they don't.
If you get hold of the wheel, and you try to slow down the party bus, you'll get eaten alive.
How about scanning for any string with high entropy? Might be easier to get buy-in if we don’t all have to bike-shed over what the prefix is.
The problem I see with this is that every language would need to replicate the code & logic.

With data / config, the translations are recorded in one place and all consumers can get the update without code changes.

The big thing I've been wondering / looking for is a shared, open source translation database. Anyone have links?
Not in the modern sense of a programmable device that can straightforwardly solve logic problems.
Given where you are now I'd learn Go. Go is a language born from the cloud. It solves modern-day problems featuring several networked machines with each having several processors. It's probably going to be the most useful language to you because it allows you to build systems solutions spanning several networked machines. Go is also an easier language to come up to speed with than Rust.

I see Rust as a replacement for C/C++. It's for system programming on a single machine. Its claim to fame is having memory safety - it's a modern language. If you're wanting to build a more traditional app running on a single machine - use Rust.
Sequoia Capital’s China Arm Raises $9B, Exceeding Target
https://www.tampabay.com/news/education/2022/04/01/judge-cle...
These "simple" use cases break when you need to do anything even slightly more complex than whatever the systemD designers envisioned for the user. And if you try to submit an issue upstream, the typical response is "you're holding it wrong" or equivalent. This lack of a consistent design might be excusable when first trying to support a bunch of entirely novel use cases, but let's not pretend that it doesn't come with serious drawbacks.
This is what you call an awful dichotomy. Security Vs Autonomy... weaponized.

I agree with you. I also agree with the other side though. Allowing these monopolies to squat all the bottlenecks in protocols of media and communication channels is also intolerable.

It is perfectly reasonable for you as an individual to prefer privacy. It's perfectly reasonable for a regulator to strike at a problem.

Look... the can't provide the technical solutions. Mandate a protocol or whatnot. They might, maybe be able that eventually makes adoption of reasonably secure, open protocols happen.

WhatsApp can't be the end state. It appears to be the economic Maxima though.
I started building Bun a little over a year ago, and as of about 20 minutes ago, its in public beta

One of the things I'm excited about is bun install.

On Linux, it installs dependencies for a simple Next.js app about 20x faster than any other npm client available today.

hyperfine "bun install --backend=hardlink" "yarn install --no-scripts" "npm install --no-scripts --ignore-scripts" "pnpm install --ignore-scripts" --prepare="rm -rf node_modules" --cleanup="rm -rf node_modules" --warmup=8
Benchmark #1: bun install --backend=hardlink
Time (mean ± σ): 25.8 ms ± 0.7 ms [User: 5.4 ms, System: 28.3 ms]
Range (min … max): 24.4 ms … 27.6 ms 76 runs

Benchmark #2: yarn install --no-scripts
Time (mean ± σ): 568.4 ms ± 15.3 ms [User: 781.6 ms, System: 497.4 ms]
Range (min … max): 550.8 ms … 604.5 ms 10 runs

Benchmark #3: npm install --no-scripts --ignore-scripts
Time (mean ± σ): 1.261 s ± 0.017 s [User: 1.719 s, System: 0.516 s]
Range (min … max): 1.241 s … 1.286 s 10 runs

Benchmark #4: pnpm install --ignore-scripts
Time (mean ± σ): 1.343 s ± 0.003 s [User: 601.3 ms, System: 151.6 ms]
Range (min … max): 1.339 s … 1.348 s 10 runs

Summary
'bun install --backend=hardlink' ran
22.01 ± 0.85 times faster than 'yarn install --no-scripts'
48.85 ± 1.51 times faster than 'npm install --no-scripts --ignore-scripts'
51.99 ± 1.45 times faster than 'pnpm install --ignore-scripts'
Sounds like a great idea for translators who are also programmers, or at least knows HTML (and syntax for logic, judging by your examples). But I haven't worked in any companies where the translators/the people doing localization have been programmers, they have just been translators. This will be more or less impossible for them to use efficiently, if at all.
I first encountered the idea in fiction a few months ago reading "Sixteen Ways to Defend a Walled City" [1]. For those interested in this kind of thing, it is a fictional mashup of a variety of technical innovations when an engineer (the army core kind) is the highest ranking military officer left during a siege.

[1] https://www.goodreads.com/book/show/37946419-sixteen-ways-to...
This makes me really sad for all those people, especially the people advertised on the sample
Title is false - students and professors are not required to do anything.
> Does your flavor of algebraic effects allow distinct effects of the same type

Could you give an example of what you mean by this? Multiple effects can be combined together (although I'm still working on handlers for multiple effects), for example:

effect console = input + print

fn greet_user : console ~ () = {
print("Please enter your name:")!;
let name = input!;
print("Hello, " ++ name)!;
}

> Do you have plans for making pattern matching extensible?

I have no plans as of yet. Extensible pattern-matching seems to me to be quite hard to unify with exhaustivity. Tao supports most of the patterns that Rust/Haskell supports.
> djb2

> this algorithm (k=33) was first reported by dan bernstein many years ago in comp.lang.c. another version of this algorithm (now favored by bernstein) uses xor: hash(i) = hash(i - 1) * 33 ^ str[i]; the magic of number 33 (why it works better than many other constants, prime or not) has never been adequately explained.

unsigned long
hash(unsigned char *str)
{
unsigned long hash = 5381;
int c;

while (c = *str++)
hash = ((hash << 5) + hash) + c; /* hash * 33 + c */

return hash;
}

source: http://www.cse.yorku.ca/~oz/hash.html
Bun: Fast JavaScript runtime, bundler, transpiler and package manager
> What do we do now?

I was thinking - if I had this, what could I do with the personal
records of a billion Chinese people?

And I must conclude - absolutely nothing. It's of no interest to me.

Now, I probably lack sufficient criminal imagination, but the point is
stuff like this is hard to fence because there's a very small market
of buyers. In an article I wrote for Routledge about the markets for
stolen digital data (specifically movie and album releases) I
suggested that the underlying problem is there's symbiosis between
leakers and buyers.

If you want to do anything, target the buyers. There's less of
them. Don't try to secure inherently insecure massively centralised
systems (Blotto + Dolev Yeo problem) . Or chase leakers. Or blame
users. Or fire the CIO. Find out who wants this stuff and take down
the show from the demand-side.

But hold on! Guess who the buyers are. And guess what sincere will
exists within "law enforcement" to tackle this sort of "cybercrime".
You can still use https://www.youtube.com/feeds/videos.xml?channel_id={CHANNEL... to pull up the RSS feed for a channel.
Some people believe you can generalize Shor's algorithm to attack lattice-based cryptography.
Content blocking on platforms works mostly in a political manner now based on my experiences...

The most aggravating thing about Twitter for me is that their mute controls don't work. On the other hand, blocking and muting can have adverse effects as well... Like preventing access to vital news. I want to believe that platforms have the best intent in mind, but once overhead, employee attrition, and investor pressure (etc) takes over, I think platforms always choose the easier path of evil to placate all those problems.

The concept of following accounts now is functionally contradictory to how platforms promote content... Almost immediately after following a major or popular account (e.g. The Rock or NBC News) you get flooded with their posts and the users you'd normally follow all get pushed aside// This is a contradiction that nobody wants, whereas if posts were shown in chronological order on something like Twitter, timelines would be a lot better. Too many bad features are all running at the same time, and it's jarring. I end up not following any popular accounts, and popular posts STILL end up being recommended in my timeline on IG and Twitter now too...

I think most platforms are recklessly plowing through trying to keep up with competition and making profit now to the point where they lose track of how new features will totally break core functionality. Using these platforms now, it's painful to observe the desperate and strange struggle towards their end of life.
The best comment is on the page itself, "DBAs don’t like the DB server doing things that they didn’t expect."

Imagine how much less predictable your database becomes when it's trying to be "smart". I wouldn't want to be oncall for that thing.
Every company bigger than 500 people I expect.
Ideas to tackle it:

Wear your covid mask, sunglasses and sunhat everywhere. Also put heel inserts in your shoes to change your height/walking gait. Or just go full privacy burka with a headshape altering chef's hat or mitznefet.
No.

Fundamentally, your physical body is somewhere. At that somewhere, some traditional country has jurisdiction, and they can enforce that they have jurisdiction on your physical body. No internet "country" can do that, and no internet "country" can protect you from your local physical country doing that to you.
One of the craziest things about YouTube search I don't understand is how you'll search for the name of someone, and their channel won't show up in the first results. Sometimes, often really, it won't show up at all, and you'll have to figure out other ways to phrase your queries. You kind of need to go with a long channel name that can be abbreviated like "Bob65's Engineering tricks", so people have the full name as a fallback, in case "bob65" doesn't work.

Feels like they really want you to subscribe and engage with the "related" videos instead of the real deal, which sucks for channel owners, especially if it's channels who profit on being weirdly intrusive and hostile towards said channels or people.
That WSJ article is so much better than the posted one, I mean what even is "the register"