skysight-inc/HackerNews huggingface dataset:
It's not about pure safety numbers. It's about my control of the situation. Once I step onto a train, I'm locked in (literally).

In my car I have a lot of control. Heck, I don't get into drive through fast food lines in sketchy areas because I don't like the idea of not being able to go forwards or backwards if a criminal type walks up to my car.

I ride motorcycles. Very dangerous. But I feel safe because I ride with my eyes open. In 20 years, I've had maybe 1 close call. While most riders I know have a crash in their first year.
They ignored all emails sent to info@archive.org from the actual domain in question which I owned, with a link to a URL on the domain asking them to remove it. Don't know what the DMCA process is, I presume it involves lawyers and such.
The app store search function often needs up to 24 hours to index newly published apps. Check again tomorrow?
I’d add an option for disabling “cold starts” and make them persistent. An annoying concept amazon came up with to save costs on their end. Other than that it’s pretty neat.
My take on 737MAX tragedies was lack of FAA diligence. Relocating engine mounts to squeeze in the oversized engines should have required the type certification process. Instead the FAA looked away and approved a software layer to make it seem similar to existing 737s so pilots could avoid re-training for what would be a new type certification.

That was regulatory failure while a bus battery fire could be a one-off manufacturing defect.
Scientists Build Case for 'Sixth Extinction' and Say It Could Kill Us
State management is also a thorn for desktop apps that need to talk to a server. Or even desktop apps that need to use a local data store, and whose UI has effects not stored when saving. E.g. this is why the MVVM pattern exists in WPF (the last desktop platform I worked on). And things like Reactive Extensions.

JS/React in some sense is just using a high level desktop development language, fetch is rpc, and the server is ... the server.
I hope you never accidentally publish private information anywhere on the web.
I made the decision to keep programming strictly as a hobby and go into a related field.

Some backstory - I started programming at a young age in the early 90s, I was building basic sites by reading from books before I even had internet access. That continued throughout my teenage years, coding almost daily on a range of software and languages.

When I eventually got to the decision on what to do for university/college I decided to go the business route and not CS. From a programming perspective I was confident (arrogant) my local educational institute couldn’t teach me much (I was already helping others on their coursework) but mainly I didn’t want the enjoyment I got from programming to be sapped away in a day to day job.

For me it was the right decision and instead I landed in product. I get to work with engineers and I’ll happily have technical conversations where necessary but for me I still get to enjoy programming as a hobby and I don’t think of it as work.
it's one thing to reject a meta analysis, and i'm rarely suprised at that. i'm not a fan in general, as i've seen many break down when you dig in, even in seemingly 'nice' areas like whether medicine x works on disease y.

it's another to reject the underlying phenomena because of metaanalysis.
I've recently reflashed BIOS/UEFI chips by soldering plastic-ended jumper wires (easier to work with than regular breadboard wire) directly to the BIOS chips, and plugging the other end to a Raspberry Pi's SPI host pins and running flashrom. It's definitely involved to learn and tricky to pull off (like any form of complex soldering), but much lower in equipment costs than desoldering surface-mount flash chips (which I hear requires hot air to do without damaging the chips or board).
You can always look at all the papers that cite the paper of interest. That provides the other direction deltas, and is something i do all the time, especially for older papers, looking for papers that might be relevant to me.
Of course, horse sized ducks are non-migratory...
Better isn’t the question I would say. It’s “what remedy is fair to owners, within regulatory and legal requirements, and performed with full disclosure?”

If an owner wants a buyback, the automaker buys it back. If the owner wants to keep the vehicle with whatever changes need to be made to make the vehicle safe, they keep the car and a check is cut to make them whole for the diminished value of the vehicle.
I found a new employer, at a 50% pay increase. And then moved to a country where cost of living is 60% less of where I am originally from. If I was frugal enough, a months worth of salary would buy me 6-8 months of time here. I'm making sure that I have enough savings to coast around this region through a recession for the next decade or so.
Wasn’t the whole problem with Google Cloud that they did, in fact, not dogfood this and their internal infra is completely separated?
I think this is about as silly as claiming that Microsoft controls how all computers work, or that Apple has the final say over every smartphone. Chrome has the advantage here, but that doesn't make them a defacto monopoly. If your definition was right, every other member of FAANG would probably have worse crimes to answer to wrt "defining how everything works". Even the people standing behind Apple have lost this fight, since even Safari has admitted it was wrong about PWAs. Plus, it's not like Google is all-powerful here. Negative public response got FLOC shelved before it hit Chrome betas, and they still don't have the gall to bring it up again.

Google is not a utility any more than Apple or Spotify is a utility. And if we're going to break up both of those companies, we may as well just dissolve every other Fortune 500 company while we're at it.
This was an uncannily accurate characterization of my time at one of these companies.
If you look at the original FT article which covered the patents that caused the whole stir [1] (paywalled but I found it in the usual places) you'll see that their patents only cover using eye tracking to render media. A comment in FT's interview with Clegg discusses using eye tracking to see if an advertisement was looked at, like how JS is used to track whether an ad was viewed now. "Gauging emotional response" is really, really stretching it. Meta does enough garbage today, let's not foment conspiracy here.

[1]: https://www.ft.com/content/76d40aac-034e-4e0b-95eb-c5d34146f...
If it's an public email address we actually care about, it's likely flooded with OOFs or noise anyway.

There's a product we use called SiftRock that automatically sorts through noisy inboxes and detects real human responses so we know which ones a service person actually needs to respond to.
Yes. This is from all my friends that work there with 4+ drinks in them.
> Tough shit? Why are we responsible for the success of Tesla's business model?

If you don't want Tesla to succeed, you shouldn't be purchasing the product. In the same vein, you shouldn't be purchasing Apple products if you think their business model of taking 30% of app-based iOS transactions is too much profit for your liking.
I don't know how sophisticates the streaming/prefetch/access pattern prediction the 2002 cpus did was.

I'm speculating, but if that's not modeled, cachegrind may pessimize some less simple predictable patterns and report a lot of expected misses when the cpu would have been able to prefetch it
Yeah, whatever Appel thinks, the stack is always faster. But sometimes the heap penalty is affordable. Before generational GC it was ridiculous.
Verneuil (https://github.com/backtrace-labs/verneuil) offers that for read replicas, because backtrace as well has some multi-GB sqlite DBs. It's a VFS (loadable at runtime as a sqlite extension), instead of a filesystem.

I don't remember if that's in the docs; commit that adds the configuration field https://github.com/backtrace-labs/verneuil/commit/027318ba74... and commit for the enum https://github.com/backtrace-labs/verneuil/blob/e6697498f3ba...

(the actual implementation is nothing special https://github.com/backtrace-labs/verneuil/commit/b6bdfcf7bc...)

Issue for the feature: https://github.com/backtrace-labs/verneuil/issues/12
I use RLS quite heavily for my app Sudopad (https://sudopad.com) and it has been working quite well so far.

One gotcha specific to Supabase (where I run the backend) is because there is no anonymous login in Supabase, turning on RLS and using database functions marked as security definers are the way to go. Otherwise there is no easy way of stopping a 'select * from x' since some rows might not have a user_id if they are anonymous and I still want people to access the row if they know a specific primary key uuid.
But the costs are abstract. What if it costs more than $4500 per unit to pay people to catalog, build, and inventory these huge 60kw packs compared to 90kw packs? This is especially likely with how they're probably only making a few dozen of these a year (given the % of the existing packs that fail under warranty) compared to the hundreds of 90s that need replacement every year.
There is literally a legume called horse gram in India, I think livestock eat it though.
Maybe the pages could absorb it?
Europe where? I can assure you every European country is completely different. The tech scene is London is vastly different than Vienna, and so are the wages.
You're absolutely right.

I'd argue that to make science what it used to be, one would even have to cut funding.

Scientists used to be aristocrats interested in truth. These days they're just interested in grants.
This rootkit is old by computing standards (2016), and apparently found somewhat by chance in that it was found in free (probably consumer) users of their product.

Could this indicate a higher likelihood of it being a consumer board supply chain attack? It might explain the lack of detection in business oriented computers, though it also would seem to indicate that it was not precisely targeted.
Tell HN: OpenSea has silently deprecated embeds
Overnight, OpenSea has seemingly silently deprecated the ability to embed a collection in an iframe. The embed links are now returning an `X-Frame-Options` header of `deny`, which fails the embeds for any sites relying on this functionality.

This was a formal, documented feature before today. This is the latest Internet Archive link featuring the documentation (July 9): https://web.archive.org/web/20220709105009/https://docs.opensea.io/docs/embeds

The current documentation has been scrubbed of any mention of this functionality, as well as showing an edit time of "1 day ago": https://docs.opensea.io/docs/embeds

As a developer who despises silent deprecations - particularly those without clear migration paths - I just wanted to pass this along in case anyone was relying on this functionality.
Technical Shorts, Not Technical Debt
I'm not sure if you are being intentional here, but those two movies were presented as a double feature when they were first released in theater.
It sounds like your reading hasn't actually ranged through the "millenia". Sure, you can find people arguing what you're arguing (though mostly since the Renaissance) but you can also find plenty of people arguing the opposite.
CIA can't compete with tech industry salaries. News at 11!
I have a very similar experience, but with a different profiling tool. When I first graduated from school and joined a big internet company, I'm not that "different". The serving stack was all in C++. My colleagues were really capable but not that into "tools", they'd rather depend on themselves (guess, tune, measure).

But I, as a fresh member in the team, learned and introduced Google perftools to the team and did a presentation of the breakdown of the running time of the big binary. I have to say that presentation was a life-changing moment in my career.

So together with you, I really want to thank those who devoted heavily into building these tools. When I was doing the presentation, I really felt standing on the shoulders of giants and those giants were helping me.

And over years, I used more and more tools like valgrind, pahole, asan, tsan.

Much appreciated!
School in the time of Covid
iirc they have only one location in Sacramento. I would love to support them, but I don't live anywhere close, looks like one time donation thing won't help them anyway and becoming a member not being able to attend does not make sense.

However, it would be nice to know why they failed from financial standpoint. There were couple of tech shops around me that closed their door over the last few years(even before pandemic), but I think there was enough/some interest. And eventually I would be interested in starting/helping with something like this at a smaller scale in my area.

This is why I am curios what could have been done differently to make it sustainable? My theory is they were more ambitious with the variety of equipments, programs and space they have, but would live if someone has more insights?
Puzzle 850 (10x10) appears to be unsolvable? After fixing the rest of the tiles, I was left with a scrambled area in the top-middle with 3 loose ends. Even if the affected tiles were all adjacent and shape-compatible (no on both counts), there's no way to pair up 3 ends that doesn't leave one out.

My frustration with wasting time (23 hours; I slept on it) on an unsolvable puzzle is somewhat mitigated by the fact the problem taught me this: if you count the free ends and come up with an odd number, you can know immediately that the puzzle isn't solvable, without rotating any tiles. An even number doesn't prove the puzzle is solvable, but an odd number definitely indicates a problem.

Edit: Nevermind; there was a 4th loose end I was overlooking. Finding it led to getting unstuck & the puzzle was solvable after all.

Unfortunately due to the way the site works, I don't seem to be able to get a new 10x10 puzzle by refreshing the page? So I'm stuck on the unsolvable one. I can imagine saving the progress is a feature, but you should also add a "pass" or "skip" button. Oh - I just realized I can "hack" it by manually changing the number in the URL to something else, e.g. /10/851.

Before I realized the puzzle was unsolvable I was also looking for a button to randomize/reset the initial tile positions. I was thinking maybe I wasn't seeing the solution due to my preconceived ideas from already-placed tiles. That wouldn't have helped here, but maybe on a solvable one being able to re-randomize would help a player get unstuck.
I went to house of eternal return in Santa Fe. Highly recommend, it's nice to see so much work go into something meant just for fun.
Yeah, they should be nominated for an Ig Nobel. So I've sent in a Nomination!

For a work straddling the boundary between advanced science/engineering and Lovecraftian horror and for coining the world "Necrobotics". Also, they should get an Ig Nobel as a warning to discourage other scientists from venturing too far in that direction...
Is the accusation that because you work as a civilian for a government you automatically shouldn't be allowed to work anywhere corporate?
> Harmony is a really underrated concept. When things are harmonious, you don't have problems like this, and you can still make money.

OK, I think I agree. How do we build things that are harmonious?
Good start... you have more examples?
That’s not web2.0 but rather a couple of companies. Nothing prevents anyone else from doing different things with their web applications, and more importantly there’s no indication that magical thinking about blockchains will somehow prevent that business model from continuing.

The blockchain design makes it even easier to mine peoples’ activity and prevents retroactive privacy improvements but, more importantly, the underlying problem is that people like not spending money. Various people have tried micropayments on the web but ads have less friction and don’t bother a sufficiently large group of people enough to pay more than advertisers, not to mention the precedent suggesting that sites will display ads to even paying customers.

Similarly, content hosting has the same failed promise. Blockchains are too inefficient to store the content, which is why all of the “web3” services are so commonly dependent on normal web companies. NFT pirates trying to steal artists’ work are routinely halted by takedown requests to Google, AWS, etc. There are services like IPFS which try to provide less centralized hosting but they’re expensive and have the same issues with most of the actual hosting being on ISPs who are legally required to honor things like DMCA or other illegal content requests.
If you have the money, an index is the true experience. Quest gives me headaches and lenses have terrible godrays. You can't match eye spacing properly on quest, and it's software is junk. The UI hitches and causes nausea. Sometimes refuses to display menus or setup boundary properly and just sits there until I factory restore the headset.

Secondary FB accounts can be banned for not being the "real person" btw.
They want to win. They just can't due to incompetence. If it were just to showcase what Android can be, they would have just kept the cheaper Android One or Nexus programs instead of going full Pixel.
Yes, it is in the best interests of society to let these corporations run their businesses without regulating speech and associations. That becomes a really slippery slope, where the state starts saying what is & isn't allowed to be said, or who is or isn't allowed to be on a platform. A democratic & free government doesn't generally get to dictate what is said or who someone does business with except for national security reasons. Freedom of association is a pretty common right, even more than freedom of speech (which has limits).

The "capturing of the market" that some people are only reachable by that platform is nonsense. There are literally hundreds of physical and digital mediums of communication.

Facebook and Twitter are barely teenagers. Twitter is not doing well, and I wouldn't be surprised if it shrank to a niche in under a decade. Facebook as we know it also is not doing well, though they'll take longer.
Heh, you could also do the other usuals

all@domain.com
allstaff@domain.com
support@domain.com
legal@domain.com
careers@domain.com
refunds@domain.com

If you really don't like them keep adding those addresses to other subscriptions.

If all goes well they'll end up on black lists really quickly.
Ah, he was suggesting a "Reverse Bibliography" list on every paper, but we do, in fact, already have that: it's what you're talking about. The "cited in" section all the science search engines offer.
> This would be like saying Walmart are committing fraud when it turns out their ham is not “finest quality”.

Just to be pedantic, without disputing your broader point about what customers should expect:

Phrases like "finest quality" are known in marketing as "puffery" and companies aren't liable for these claims. From a quick search, specific factual claims like "unlimited 1Gbps" might be held to a different standard, depending on whether "no reasonable person" would take the claim seriously.

> The Second Circuit explained, "Puffery is an exaggeration or overstatement expressed in broad, vague, and commendatory language. Such sales talk is considered to be offered and understood as an expression of the seller's opinion only, which is to be discounted as such by the buyer."

> One type of puffery is a non-specific claim that one product is better than another The Second Circuit explained it as, "a general claim of superiority over comparable products that is so vague that it can be understood as nothing more than a mere expression of opinion."

> Looking at Starbucks's advertising, the court held that statements such as, "Best coffee for the best you," "taste of inspiration," "Starbucks or nothing," and "heart, soul, craft, pride, love; you won't find that in any other cup of coffee" are all puffery. The court wrote, "These statements vaguely assert that Starbucks's coffee is better than its competitors' in a manner best "understood as an expression of the seller's opinion only." They aren't, the court said, specific enough to "misrepresent an inherent quality or characteristic of the defendant's product."

https://www.lexology.com/library/detail.aspx?g=ac3f3d65-2e97...
> It seems counter-intuitive but I imagine that not doing CoL adjustments actually lowers total payroll.

That's not the problem that forty was talking about. The issue is that when you drop a ton of employees in an area whose wages are well beyond the norm you create larger societal problems.
The thread linked to by PVG has more details from the CTO of HackerLab. The basic take-away I gathered was they relied too heavily on donations, grants and sponsorships instead of revenue-generating endeavors, and once the "free money" dried up, they were left with few-to-no options.
One potential use case could be in creating bindings for other languages that do not have an expect like module. Since it reportedly has a "saner interface than libexpect", it might be less hassle creating FFI bindings to mini-expect.
Out of prison, Shkreli plans “Web3 drug discovery” platform backed by crypto
What about stop using ORM abstractions as an option then it is much harder to forget needed filters?
This is partly true but its not quite. Think a little long-term here. Windows 10 ends support in just three years, in 2025. Windows 11 requires TPM 2.0, which was a big headache when Windows 11 was announced.

That means in three years, every supported PC will have TPM 2.0. Within ~1 year, assuming that Intel and AMD fulfill what they've implied in the launch announcement, every new PC will also come with Pluton.

That's a lot easier to deploy to compared to having some PCs with TPM, others without, some out-of-date on TPM 1.1, some with unpatched firmware (like the 2017 Infineon bug), so forth.

Now... some say, what about non-Windows systems, like macOS and Chrome? Think bigger for a second - Cisco (as an example) is in the Trusted Computing Group that designed a lot of this stuff, and Cisco Meraki is deployed in so many businesses for Wi-Fi security its incredible. All Cisco Meraki has to do (for example, maybe its not Cisco) is make a connection app that uses Pluton/TPM on Windows, Secure Enclave/T2 on macOS/iOS with Apple DeviceCheck, and SafetyNet on ChromeOS/Android. And you are all done - you've successfully made sure every new system is almost certainly untampered with. You've locked the door. For any system that can't be verified, no problems sending them to the IT Help Desk to be manually registered with a private key and sign a disclaimer.

It wasn't possible before, but five years from now, it will be much easier. Every Windows PC will be on the same page, and all major systems will have consistent assertion frameworks. Now, is Pluton wholly responsible? No. Windows 11 plays a role. Pluton just makes it broader and stronger, and Pluton also provides a long-term strengthening as eventually the TPM 2.0-only level will be able to be cut off for just Pluton.
Only really worth it if each tenant is creating enough value to justify this. Hard to see how a SaaS product with a cheap/free tier would pull this off.
idk, wasn't comparing to that.