skysight-inc/HackerNews huggingface dataset:
I am not familiar with any project that goes through such extremes to avoid vulnerability scanners.

I am also not aware of any Java developers who build 3rd party libraries from source and avoid using maven (or gradle, or the odd one with ivy).

Your "what if..." doesn't describe any workflow that I have ever experienced with Java in a professional (and even hobbyist) context.
"this law i broke shouldn't exist"

Wrong. Ultra-vires laws can be challenged after the fact that they were broken. If the law in itself was invalid, that is a valid legal defence.
The problem with all of this shit is that the EU is only measuring sentiment from developers, not end users. End users are happy with Safari. Developers are the only ones who care about any of the rest of this.
Better idea: stop logging.
The problem isn't that audits are inherently worthless, it's that most of these tools are very low-quality implementations of the concept.

In one of my past jobs I was an early-mover on doing a lot of our ops on Linux and the audit tools had no concept of the backport security model whatsoever. If you were running on some kind of LTS distro rather than a current distro, it would see "gosh you're 3 minor versions behind, you have a ton of unpatched vulnerabilities!", but in actuality you didn't, because the fixes got backported into security releases (the "31" in something like "3.1.22~ubuntu31" for example). But the tool was dumb and it just had a table that said "anything under 3.4.14 is vulnerable" even when it wasn't necessarily.

OP's "log4j 1.x is not vulnerable to this the first place" is a similar thing where either someone forgot to put in a value for "min vulnerable version" or the tool doesn't understand the concept of min-version at all. To be fair that can be genuinely tricky in java, best-case you are reading manifest files to try and pick out a version, but some legacy stuff doesn't have manifests, especially very legacy fat-jar stuff. Yes, that stuff didn't go away, it's still out there in places!

And to be clear this was a long-running issue... it wasn't a "oh our tool doesn't understand LTS, I get it" and they left me alone... this was every month they'd be back at me for a new list of utility vulnerabilities even though I repeatedly explained to them that I had set up apt-get to auto-upgrade every night and reboot, so we were running whatever the latest security backports were available, and that just like the last 10 times this was even more false-positives.

And again, this isn't just "we have to run it by you no matter what" and they leave you alone either. What security really wanted was for me to run windows and manually install the updates and get back in line with everyone else, even though that would have been a less secure outcome than my locked-down linux boxes. But this wasn't my day-job at the company so to speak, it was helping out another project with some ops and it needed to be as low-effort as possible (and to be fair their requirements weren't steep, auto-patch-and-reboot was fine by them and never caused any breakage during my tenure there).

The root problem is that these sorts of tools aren't a substitute for an actual security culture, they're often a symptom of a compliance requirement and the whole thing turns into a box-checking exercise. Someone is on their ass about this because of contractual requirements or PCI requirements, and they bought the cheapest thing off the shelf that would check the box, and they are implicitly showing you here that they don't even understand how to interpret the output of that.
Is there any sense about which celebrities are actually buying NFTs? For example, I know Seth Green is big into NFTs, but a lot of the others (Gwyneth Paltrow, Jimmy Fallon, etc.) are likely to have gotten NFTs for free as part of a promotional campaign for Moonpay and BAYC[1].

[1] https://www.youtube.com/watch?v=luAXOfcg-dY
Does this ban Microsoft from using their privileged position to sabotage Firefox and to push their spyware browser?
Usually the concern is getting hit by car traffic.

At least in the US, drivers don’t drive well around cyclists, and sometimes that’s intentional to boot. Better to not share the road with people who are actively trying to hurt you with a metal object weighing several thousand pounds.
Many advisory jobs fall into this bucket. I'm of the impression that anybody who reaches senior/staff+ roles end up doing this as part of their day to day.
Not for the people who are arguing with me.
IE was replaced because it was a hole-riddled nonstandard mess, and Google used their position to shove Chrome into everyone's mindshare (something this regulation appears to forbid, incidentally). Chrome isn't nonstandard because Google are very careful to comply with standards - which is easy enough when they have many employees involved with designing them and tend to manipulate those committees in their favor, and even if they fail they can just release whatever they want and use the technology's widespread adoption to justify its eventual standardization. Also, as a modern browser, Chrome is patched frequently, so the security angle is also a nonstarter.
Mine arrived earlier today. I was one of the backers of their Kickstarter campaign, which I think ran two years ago. They've shipped thousands of these already.
We need more Twingos.
I'm consistently surprised by the number of startups that have distributed teams with people dispersed around the globe and then have an on-call rotation of one person having on-call 24/7 for a week straight. This to me is a management red flag.

One of the first question I used to ask when interviewing for roles that had an on-call component was "what's the on-call expectancy?" I would recommend asking questions about the "on-call" experience to everyone on your interview loop as well. This is often very informative.

Expecting someone to have no life outside of work 24/7 for one week every 5 or 6 weeks is a real quality of life issue. And to do so without offering extra compensation just seems exploitive.
same but without "got covid" part.
Most of the blog post just feels like a humblebrag.
Sometimes when my elders reminisced about the darker parts of that era they mentioned "getting swallowed by the night."

One other fun story from a relative who participated in a work action just after war building a railroad. It was pouring rain, and that day Tito came through to visit/peptalk. According to her, he said "Is it raining comrade?" to which she retorted "It is not raining comrade Tito, it is a sunny day!"
> In some cases that will mean making a hard choice between accepting the risk of using the third party app store, or accepting that you won't be able to use certain apps.

You already have that choice today: I can buy into the walled-garden, or go to Android and side-load to my heart's content.

Clearly the market has chosen the preferred route. (I personally am also in the camp of preferring the simple, locked-down approach for my family that Apple has created.)
I’m assuming you’re a dev - your love for programming / SW engineering hasn’t waned huh?

Been in the industry for more than a decade and am suffering from CRUD / new tech churn fatigue. Also have had a taste of having my own product business and schedule but can’t make that financially work yet, so slogging through…

There are fine days though, eg when investigating a tricky bug or being deep into a problem, but I’d cap it at “like” my job, rather than “love”
Most of it is the Bluetooth SIGs fault. It has got away from them. It reminds me of SMTP or HTTP, it is so useful that people couldn't wait for things and just implemented and added whatever they wanted. No certification is required just a registration for the logo so it has made it the wild wild west. Additionally being stuck in the "free" frequencies means that it has no ability to deliver quality in a noisy room.
Man: What is the secret to eternal happiness?

Guru: To not argue with fools.

Man: I disagree.

Guru: Yes, you are right.
Yes, that will happen with any of the Intel MBPs. That was one of the best benefits of moving to Apple Silicon SOCs. It takes a lot more load to get them hot.
Does it cover SCTP/websockets?
Their point wasn't the risk relative to other causes of death for children. Their point was that the US is the only country in the world where this happens, frequently.
Not if you share the IP space with many other web properties. For an extreme case of this, see Ao1: https://blog.cloudflare.com/addressing-agility/
In the early 90s at Convex, we had a tool that would reformat code for your personal style after it was checked out of the repo and then reformmated back to our corporate style before checking it back in. It turns out it cost less to develop this tool than to absorb the daily productivity hit which came from people spending their day arguing code style instead of working.
This is America trying to fix problems that are caused by their poor-to-nonexistent urban planning, FWIW. I've lived in several countries in Europe, and you have to be far out into the countryside before it gets difficult to go grocery shopping with a bike and bike trailer, or even just a backpack and walking.
Noty is an AI-powered assistant that transforms meetings into actions, tasks, and follow-ups.
That will only work on Debian. And that "single file" requires also the libfoo-1.5.deb file (must be >=1.5, not 1.4 and not higher than 2.0!) etc.
How? If someone installs different app store and it breaks, they just don't handle the requests regarding 3rd party apps, just like now. What extra resources you're talking about
Actually no, it was "viditel"
(This is also about the encryption of the communication channel itself.)

I agree with you in general, but it is possible for this evaluation to be done by a simple read of e.g. the iOS marketing page. The Act proposes a regime where it is not possible for a chat participant to determine who holds the encryption keys for the chat. You may consider that better or worse or neither, but it is a significant change in the security posture for billions of deployed devices.
> A proper server needs that "accept" abstraction, which is completely missing from pipes.

You can receive file descriptors over a UNIX socket, but yeah. That said I don't see why a file descriptor is a good abstraction for a listening socket in the first place when you don't read() or write() to it.
Definitely saw a foilie in use on the bus yesterday evening.

The issue is that my city promotes itself as a good example of public transit and receives accolades from public transit folks, and naive people take it as archetypal.
Do you mean, Why can't we have happy writers like Samuel Beckett?
Thank you! There's not a ton of activity yet but if you wanna hang out with us and chat all things climate-tech, here's the link to our Discord: https://discord.gg/muGxr24U
I usually avoid using apple.com discussions as 'evidence'...

> The lens glare is extremely common on iphone 12/13, and I did NOT have glare this bad on my other devices.

https://discussions.apple.com/thread/253200214

You can go rent a $5000 DSLR Camera and a $10,000 lens and /still/ get lens glare, and it can be much worse. That's why people sometimes shoot with a polarizing filter.

https://en.wikipedia.org/wiki/Polarizing_filter_(photography...

I'm unaware of /any/ phone camera that has a polarizer by default. But essentially, you will get it on ANY lens. This is not something that happens only on iPhone 12/13.

-------------

> AirPlay doesn't connect, disconnects and cannot reconnect.

I haven't seen AirPlay on non-apple devices but between my iPhone and Apple TV it works amazingly.
The problem is doing this after YouTube deranks you or deletes your account. Nobody will ever see it.
Rogozin Removed as Head of Roscosmos
I've been down voted repeatedly for this suggestion, but still think it's a good idea. Instead of raising minimum wage, require all jobs to offer like 3 or 4 months paid vacation a year. It will benefit everyone, and those who need more money can work a second job while on vacation from the first (so they won't actually be working more hours and will have 2 incomes). The poor having 2 jobs will also give them leverage to get out of manipulative work situations and it will increase market mobility. There will also be widespread family and community benefits.
Mortgage demand drops to a 22-year low as higher interest rates and inflation
Climate Change doesn’t do it … yet. It’s starting to look very imminent in several parts of the world.
> Well people who chose to use other app store don't get access to your curated list of apps

This is how Xbox currently works in that you can’t play any regular games if you enable developer mode to run unsigned code. I’m going to go out on a limb here and say that, if Apple complied by disabling apps downloaded via their own store when a user is using a 3p store, then the EU would laugh and fine then $x millions of dollars per week.
Not sure why you are being so hostile with this user, especially given his question/concern is valid (source: media production for over a decade).

Plug-ins are often the secret sauce for our workflows and styles, and prosumers/hobbyists dip into them as well. If your browser based DAW doesn't have, say, Izotope RX support, then that's a non-starter for a ton of people (especially podcasters). I'm not going to round trip between software on my computer and a browser based software, that's for sure. I don't have time for that nonsense.

Regardless of your opinion or how you feel about the above, your tone is needlessly hostile and unproductive.
Having lived in New York with really high rates of pedestrians, sidewalks are never being replaced from normal wear and tear from use.

Usually it’s

* retrofitting for ADA compliance

* fixing heaving from freeze-thaw

* fixing heaving from the root systems of trees in street planters
That sounds specific to where you live. In London the buses are amazing.
> Please don't post comments like that or https://news.ycombinator.com/item?id=32161488

This is the one I was referring to. I’ll admit that the first one you linked was not productive, but I’m reasonably sure you’re taking a less charitable interpretation of this one in light of that. As far as what makes “everything” worse, the prevalence of attitudes like those I was challenging are the reason I almost died without treatment. But if they’re politely stated, no harm no foul?
Each person gets one device, our problem is that sometimes devices "leak" to the other person because you have to pick a person account for a shared device. I'm sure it is limited to one device per person because when the kids are in school I'm pretty much guaranteed to have my shower music stopped with a "Music has stopped because you are listening on another device" message when my wife takes the kids to school.
Chipotle to shutter Maine store that was trying to unionize
I'm wondering about this, too. In recent updates Windows seems to do a lot to force users into Edge under certain circumstances and use cases (and pester the user to switch to Edge entirely), in ways that at a glance appear to be incompatible with the summary of this regulation.
I have experienced this with NWA's "Gangsta Gangsta". Another delightful thing is that the volume is system volume * speaker volume, so that if you turned up the system volume because you were, e.g., using a quiet pair of headphones, this is now blairing at a total unreasonable volume, perhaps even destroying your car's speakers.
The economy, inflation and gas prices are out of control and hurting poor people. With a bad economy there can be a worthless USD.
Fair, it's easy to get execution without validation, but ultimately this is where code review matters. The (huge) company that I work at now is the only one that's ever strongly encouraged test coverage, with a general expectation of 85% coverage and 95%+ encouraged.

It's also the only company that I've worked at where you can commit code and get up from your desk.
still running fine.

This is not about how it *runs* but rather how it *looks*. They tried altering how some of their older hardware *runs* and were successfully sued for it.

I'm just happy to be downstream of it ;-)

So you'd be ecstatic if they installed a software update on your old laptop that intentionally degraded performance? Lucky for you, they probably won't try this stunt again after getting their hand smacked for it.
How academic research is shaping GitHub Discussions
What's to regret?
Because it is not "one market".

There is free movement of good, services, money and people. But it is still 28 similar markets with different cultures, different languages, different bureaucracies and sometimes different currency.

It is 400 million people but comparing the EU to the US is wrong on so many levels.

Also calling the US an "open" market is like saying China is a "free" democracy.

"One would think that if there is truly a US wide market for such an affordable healthcare service a competitor should be able to challenge the current market dominance. The US could even subsidize it."

Also it doesn't matter if the EU could do it themselves. Our market, our rules. If you don't like the rules, don't play.
And what would you have anyone do?

You could formally spec software and implement it, congrats you're now 1000x slower to market and any change you want to make is another 1000x investment to spec out and prove.

And let's not even mention the ridiculous idea that open source developers be expected to do this. Moreover, this doesn't even handle hardware problems!

Okay, but we could just build all the software internally, reinvent all the wheels. But how is this any better? Now you have even less manpower to fix bugs and you're probably 100x slower to market because you're building all these half baked, bug ridden libraries.

If anything, the best idea is formally verified sandboxing, so that you have strong assurances about certain apps not doing bad stuff, but this doesn't solve all problems either.

It's an unsolvable problem in general, which is why no one has solved it.
This is not really true, for what it's worth. The latest releases of all browsers are fairly comparable; Chrome is a bit ahead, and Safari and Firefox mostly trade off against each other: https://caniuse.com/?compare=chrome+103,safari+15.5,firefox+...
This assumes that your own software is more secure.
Older culture was happier? Check out some 1970s movies and music.
> I have a friend that's convinced that her ADHD 'causes depression' because her brain does not produce 'enough dopamine'

Interesting, and she is somewhat right, but is wrong about the 'enough dopamine' part, if I understand correctly. I have heard that dopamine plays a role in ADHD (seems likely our neurotransmitters don't absorb enough, but even that is an overly simplistic explanation of the unknown and true reality).

But yea, I also have ADHD and yes, it can cause depression. Not due to dopamine, but because of the negative feedback-loop ADHD can create.

For example, let's pretend I have some big assignment I need to complete, and I am without access treatment (professional or self-medication). If can't muster the "powers" to work on/finish said assignment, I start to get extremely anxious and/or I get depressed that I failed to finish said assignment. Said anxiety/depression only makes my ADHD symptoms worse which makes the anxiety/depression worse. Thus I will struggle more to complete future work, which only fuels said anxiety/depression even more, and the loop keeps on iterating.

Though, sometimes the anxiety can be extremely helpful. I can muster some insane kind of hyperfocus due to the pressure of a looming deadline. I spent decades of my life relying on anxiety to complete tasks, that even with treatment, it's extremely hard to start and finish tasks without the anxiety.

It's an annoying and rough way to live, but oh well, I am just grateful I do not have something worse.
I'm of the opinion that most of the "dark, gritty" stuff we keep seeing in media just boils down to standard trend-chasing and market pressures to continue to use existing IPs. The cheesy, feel-good stuff from the 60s has already been done, so the darker stuff, especially when it's a darker take on those same characters, is still somewhat subversive to most viewers. When artists can't get real novelty, subversiveness is at least still generally respectable. Eventually, as the audience gets tired of this and it gets done to death, it will shift. Maybe not to the happy-go-lucky stuff, but I think surreal and absurdist humor is still fertile ground (see shows like: Nathan For You, The Review, Informercials, Corporate, American Vandal), and could be another future avenue for continuing to exploit existing IPs.

As for the general happiness of the population decreasing, I think that's mostly unrelated to the media trend. Economic troubles (low wages, housing unaffordability), societal strife, and social media all seem like obvious causes. However, Movies and TV are still generally viewed as an escape to most people, so while they reflect greater trends to some degree, I don't think they're as tied to it as the author may expect.
It makes me think of how I've heard some universities will pave the paths that students had walked, vs creating the paved paths and hoping students walk on them [0]:

> The team at UNC went back into the archive for us and found some plans from the 60s and 70s, when they were really expanding the campus. An archivist discovered one of the written goals for planners was to "build paths where students were going rather than building some sort of grid system."

I believe micro-transit could play a similar role, basically helping the planners even figure out which routes people want to take before they turn them into fully funded routes.

[0]: https://www.9news.com/article/news/local/next/desired-paths-...
I bounced back from 3 wars yesterday, no sweat.
In a way, isn't that exactly what evolution prepared us for, as opposed to a life of overabundance afforded by work with no personal meaning?

Perhaps we're simply missing having and being able to overcome pressing challenges as much as we're missing physical activity, nights without light pollution, or contact with nature?
Almost everything in the news is either gonna trigger anxiety or nothing. Outrage, maybe. That's about it. Farther away from local news, the more true that is.

Luckily, keeping up with that stuff day-to-day or even week-to-week is pretty pointless, so easy to avoid.

The knowledge of all those problems just goes on the pile of shit that I can't possibly deal with, so just have to try not to think about, along with things like existential dread, the fact that my living the way I do (so, like a normal developed-world person) is probably indirectly causing misery for someone somewhere (The Ones Who Walk Away from Omelas is, like much good speculative fiction, not about a fictional place but rather our current world), my hunch that cosmic horror probably comes about as close to capturing the nature of our existence and place in the universe as anything does (if only metaphorically), all that and the rest of the unhelpful crap that's probably true and real but also not especially actionable short of "kill yourself, or else devote yourself body and soul monk-/batman-like to some cause all the time every day, probably to no real effect except personal satisfaction".
> a 2mile commute can last easily 45 minutes.

at 10mph average, which includes stops, I doubt a 2 mile commute could take 45 minutes. It should take... 12 minutes. Let's call it 15.

> I have walked thousands of miles because the bus stops do not align with my destinations.

It's probably good for your health.

Seriously, now: I get your point. The

> under 100 degrees of sun and under snowstorms

is the worst part, I guess.

I commuted by bus only occasionally in my life, and I've luckily been telecommuting for the past ~15 years or so. But I can relate.