skysight-inc/HackerNews huggingface dataset:
Hey @TreyGuy (or others from Markup.org)

How do you account for dealers which sell for $0 above MSRP but then include a non-negotiable $700 "paint protection" service?

As a crowdsourced site, you'll get a ton of reports that a particular dealership has no markup and few if any reports from people who have actually been far enough into the purchase process to discover these hidden markups.
so why don't consider $7 as a support for Emery guys doing great all-in-one day planning tool?
That's 0.39%, not sure if this is typical but seems pretty low to me. Anything we can learn from this number, or it's simply just a number?
Search engines are essential parts of online infrastructure. They are tools that allow everyone with internet access to learn anything. So, it's no surprise that Search Engine Marketing Campaigns are in high demand, with such a vast and accessible audience. Continue reading to learn everything about Search Engine Marketing Campaigns. For more visit at:
https://www.navicosoft.com/sem-search-engine-marketing/
I need note sync to work across Linux and iOS, and sometimes Windows. So actually I've ended up with the same solution of a hacked together iCloud/Syncthing Windows VM bridge.
This is also a problem for enterprises. I’ve seen commits from root, ec2-user, etc: GitHub knows who’s pushing a commit even if git doesn’t, and it’s maddening that at least for enterprise accounts they don’t carry that identity into the metadata.
Let me ask a few questions about this scheme:

1. What happens when someone needs to resolve a merge conflict involving your commit? Let's say I maintain a fork of an open source repo to add some feature, and I periodically merge back in upstream changes... that necessarily involves resolving conflicts. By default, git retains author ownership, and now the commit is unsigned, but it's really your work. What do we do? Do I have to use a custom merge flow that also rewrites authorship from "Alice <alice@gmail.com>" to "Alice <alice@gmail.com.fake.unsigned.suffix>"?

2. What happens if your gpg key is compromised or expires? Are all your previous repos now invalid? I can't fork it because it contains a commit authored by you, but with a revoked or expired gpg key?

3. What happens to previous commits if I enable this feature? Can all my unsigned commits no longer be pushed to github? I made a commit in a project at work 5 years ago with my email, but didn't sign it.. if that company wants to open source that project on github, do they now have to rewrite history to change the author on my unsigned commits?

4. What does the "squash merge" button on github PRs do for your PRs?
GP was stating that 50% of tech workers at big companies are redundant. Armed with that knowledge he should be in a stellar position to found a company that is very profitable compared to its competitors who incur double the labor costs. This incredible competitive advantage will enable him to become the next Google eventually.

Sounds plausible? No? I wonder where the error is.
I admire the desire to help, but looking at flow logs to that IP address is how people are going to determine if they have compromises in their environments. Excess traffic to the IP will just muddy the water.
What is a "safe"? I have never heard that term in this usage before.
good evidence to suggest that job moves are generally very low risk if you have a set of marketable skills. If you are an engineer, this is still certainly the case - so yes, there is a risk but a recoverable one (i.e doesn't work out, leave in 3 months, find another etc). What we can say for sure though, is that there is certain risk in staying too long with an employer, at least in terms of compensation, this is the surest way to have the slowest ascent up the comp ladder
> If you needed to play so much with words, then it will eventually become a specialized task killing any benefit of having the AI doing the work for you since we eventually we will need to resort to specialists to use the AI to get the result we expect.

This matches my view of the idea that AI will replace programmers. My value isn't in the typing and the syntax, it's in my ability to turn a spec into an internally consistent design by resolving conflicting instructions and clarifying edge cases; and sometimes in knowing what the user wants when they are unable to express it themselves.

Even if AI winds up writing all of the code, someone with the programmer mindset still needs to define the problem in a concrete manner. They'll always have a job as a "machine-talker."
Gamers Nexus Got Scammed by a YouTube Commenter [on purpose]
Can't wait to see what fascinating shenanigans they pull in regards to basic builtin browser functionality that they seek to "enhance" or subvert. Not a single god damn time have I wanted their thread search instead of my built-in browser page search. It's not my fault you think my browser can't handle all of the posts at once (it can; and regardless, imagine the hubris to hijack the browser's search because you're opposed to paging)
I have a super old pi 1b connected to a small screen that just randomly plays Conway's game of life every couple of minutes.
This code does more than leak environments. The go code pulls down arbitrary text and passes it to sh -c, example: https://github.com/zerops-io/zcli/commit/0396ee57bc0e5e0b123...
True but from a practical standpoint they risk a full $500.000 upfront:

“Both investments happen at the same time; they are not contingent on any milestones.”

So from a founder perspective, that’s very friendly.
I hadn't realized that the rampant youtube comment spam out there was being used to scam people this way, most of the comments I see are kind of basic link spam seemingly meant for SEO. Impersonating channel owners to run fake 'giveaways' is pretty nasty since a lot of channels do giveaways as a promotional mechanism.
None of which needs to be undemocratic.

Set time limits on decisions and revisit under certain circumstances.

I bet there is / will be a lot of fertile ground for research

Frankly just being transparent about such decision making will almost certainly put that company in the top quartile for good decision making - most large companies make many decisions - and anecdotally make them badly
If you ever finance again you have to take the note, right?
Not much to tell. I was looking at maybe using an RTOS to reduce VoIP jitter. Picked RTEMS on a generic x86 PC, there wasn't a driver for the NICs we were using, so wrote a driver using a FreeBSD driver (for an unrelated chip) as a base template and a Linux driver for a related chip as a kind of spec. Don't remember if had to do the top-end or just the bottom-end for the NIC. The driver worked fine on RTEMS, but the UDP stack was basically straight from FreeBSD and was definitely not real-time. Wound up not being much of an improvement, it wasn't worth rewriting the entire UDP stack or introducing RT to my non-RT team, so dropped the idea.

Did find a performance bug in the core I don't remember much about (unfortunate choice of operations that flushed caches or something and realllly slowed down... something). Submitted the half-a-dozen line patch upstream that Joel Sherrill pulled without drama, even though my test case was overly complicated and opaque.
In my opinion the pandemic era saw a significant increase in employee headcount, and now we are seeing a "correction" of the employee headcount.

But I think the bigger point is that venture capital funding is really drying up and investors aren't investing as much. A lot of the market is basically "taking a loan to cover a loan that covers a loan.." and the market is no longer giving out loans as easily due to higher interest rates.
TL;DR: These are forks by unknown people containing malware. I see no indication in the linked thread of even a single successful compromise actually occurring, or malicious code making it into legitimate upstream projects.
The best way to solve climate change with a skill set like yours is to make ESG ratings more open, transparent and scientific. Here two resources to get started in this domain. OS-Climate can definitely use your skills:

1. https://github.com/os-climate/OS-Climate-Community-Hub#readm...
2. https://opensustain.tech/blog/openness_as_a_key_indicator_fo...
Yeah, depending on your hardware and language and language extensions it should be possible to drive a lot of hardware directly from a high level language. Memory mapped hardware would allow peek/poke drivers, but there's nothing preventing someone adding, say, a PORT_RAW_OUT command. And even in the worst case, maybe you use a little asm at the bottom of the stack but you only need a tiny bit in a wrapper function.
They have something under Settings > SSH and GPG keys where you can enable Vigilant mode.

While that still allows pushing unsigned commits, it will flag them with a warning batch.

I had this on for a while, but unfortunately as some open source projects tend to rebase commits before pushing them, this was causing warnings to be shown (as the rebase breaks my signature), so I turned it off again as to not scare people when looking at the commit history of a project and seeing warnings after my contributions were merged in.
The center has not moved as much as the willingness of journalists and news organizations to ignore their duties to provide a truthful and unbiased service to their readers and constituents. Allowing their built-in left-leaning biases to affect their mission has given the impression that the population has shifted left.

The next few elections will possibly shake some of this out. I just hope it doesn’t swing too far the other way.
It's widely discussed in the industry. I like the Matt Levine hypothesis titled "Private markets are the new public markets", briefly stated: that for a while there was a lot more money available for private companies than there used to be, thanks to ZIRP and megafunds like Softbank VF, and also more regulations and disclosures imposed on public companies, which on net makes it more attractive to stay private and not go public https://www.bloomberg.com/news/newsletters/2020-08-05/money-...
I'd expect most people who have clicked this link to have done so because they thought it referred to the smartphone OS called Android. Clarification in the title would have been welcome.
note that it's 35,613 code results, not 35k repos

and 13K of the search results come from this org

https://github.com/redhat-operator-ecosystem
Doing that is, and was, common. Applesoft, with a push here and there can be used to make some respectable programs.
They'll be ready soon I guess, but "soon enough" would have had to be 5-6 years ago when we started shipping.
I disagree, the regulations were/are fairly strictly on diesel emissions for all vehicles not just US.

What happened with 'dieselgate' was that many manufacturers got caught in what amounts to very blatant fraud, faking that they were compliant with the environmental standards for tailpipe emissions when they were in fact completely off the charts.
So perhaps we are arguing for "mission command" - lowest possible level decisions made
I think people care more about correctness, in general. I think we used to just be happy that code worked at all.
React is great. Vue is wannabe angular (not sure what version though was it 2, 3 or 4 now?) svelte is too busy shipping bugs to fix any and I don't even know what the others are.
Openness as a Key Indicator for Sustainable Investment
AMD Financials Q2 and Analyst Q&A
It's a copypasta

https://www.reddit.com/r/copypasta/comments/udtca7/mark_zuck...
That would change the commit hash, at least if you want it to survive a clone of the repo. Of you'd store it externally so that it would only be able to be shown in the webui then it's of limited use, but maybe better than nothing.
You can learn ternary operators and arrow functions. I feel that you may be overwhelmed because you're trying to learn so much at one time. I've been in your shoes. If you keep trying, you will improve. Something I've done in the past is to write down everything I don't understand, and just chip away at that list daily by reading documentation and learning new things. Don't try to learn them all in one day.
Fidelity doesn't get paid for order flow, and it has $0 trades.
Interesting but in the Apple case you'd need a cast of your intended victims face or finger to even attempt this attack.

It's easy to use a mask (or occlusion) to prevent a system from detecting your real face, but spoofing a specific person's face is a much bigger task. Any decent modern face rec system is going to use liveness detection as part of its analysis.
I'm currently working for a german startup as a freelancer to create a web app that helps companies to monitor, report and compensate their carbon footprint.

I got the job because I'm specialised on green web development and was found on LinkedIn/Xing by the CEO. I completly work remote from my small home town, sitting in an old castle - one of the oldest buildings of the city.

So far the first customers get an onboarding towards using the software. The data layout is quite flexible so every kind of data, company structure, etc can be integrated.
Location: Italy
Remote: Yes
Willing to relocate: Yes to Dublin, Ireland. Otherwise maybe
Technologies: Svelte, React, PostgreSQL, Linux, Arduino, NodeJs, Python
Résumé/CV: https://github.com/madacol/aboutme/blob/master/resume.md
Email: madacol10 gmail

I have a very wide range of knowledge, but with depth into web development (~5 years) and a bit on electronics.

I am highly attracted into decentralizing technologies, robotics and DevOps.

4+ years in Web Development, using mostly Svelte, ReactJs, NodeJs / Express, PostgreSQL.

9+ years using Linux, 7+ years managing home servers and 2+ years managing production servers.

I've done several electronic projects using Raspberry Pi, Arduino or PICs with C / C++ and Python.
I understand the perspective, although it's different and not really comparable to those other things you mentioned, especially since the NFL and the SEAL teams do not evaluate people solely based upon a few hours of tunnel-visioned interviews. They are primarily evaluated on their performance in real-life scenarios and training across a decent amount of time.

Of course Jane Street is successful! There's no question there. However, I don't think it's much of a question that they probably miss out on some great candidates that don't fit into that type of hiring process. It's possible they view those as acceptable losses.
Looks like there was a translation of Susrutas book into Arabic. Not sure what citations show "extensive copying".
Seattle businesses take law into own hands to combat homelessness
Man, isn't this the argument from two decades ago? That climate change is happening but isn't human caused? Why do you still believe this? Just because nature is big and we are small? It's such an odd mentality to have. Do you not believe in ozone holes either, or DDT, or pollution, or extinction? We're just powerless apes walking around a wet ball, making no impact at all, leaving no trace? I don't understand how you can look at the data and go "nah it just can't be us, because that's ridiculous". Every species has an impact on their habitat. It comes down to degree. And it's not like we're going to singlehandedly turn the planet into a flaming ball of lava. But a few degrees here and there? Why wouldn't we be able to?
"the main goal of this release was to upgrade the code base from Visual Studio 2008 to Visual Studio 2019."

"A byproduct is dropping support for Windows XP and Vista"

"problems with this release include the visualization plugin presets not working correctly, UI issues, random crashes"

"This is the culmination of 4 years' work [between] Two dev teams, and a pandemic-induced hiatus period"

Well that all sounds rather bad.
> Ah yes, it’s completely fair that the only people who should be morally allowed to participate in the financial apparatus that sometimes leads to getting rich, are the people who are already rich.

I agree with your overall point, but to be clear, we're talking about day trading. There's a lot of arguments you could have about banning casinos, pro and con, but "hey, some poor person might win big on the quarter slot machines" isn't a good argument.

Also, the median "accredited investor" is a dentist from Topeka who's about to get suckered by an advance fee fraud. Being an accredited investor doesn't automatically give you access to good deals. There just isn't a pool of amazing investments out there hungry for capital but being stopped by investor protection laws. (But there is a pool of scams...)

(Note that I'm not saying that the system is good or fair or just; I'm just saying mechanically, accredited investor laws aren't the part of the system stopping you from getting rich.)
People realize we failed out of lazyness and ignorance and are despaired, so its just so tempting to start believing again in this free&easy energy dream.. I think the issue more is that the real renewables, despite being the only real free and now also already proven path in parts of the world, had and still have too much counter propaganda.. the rest is just humans
Or my new favorite (Alexa): “It’s going to be 43° today with clear skies. … By the way, did you know I can tell you about great deals on gifts or everyday items? Just say ‘Alexa, tell me about Prime Savings’. Would you like to hear today’s?”

Me: already down the hall cursing my smart speaker.
Dedicated abuser can find this limit experimentally via binary search.
In the past decade, a warming anomaly caused a plague that killed off 99% of the Sunflower Sea Stars, a top predator of sea urchins. The runaway sea urchin population resulted in the rapid and sustained loss of >100,000 square km of Kelp forests off the coast of California. Kelp does an amazing job of sequestering carbon to the deep sea. For instance, estimates show that the lost Kelp forests provide close to $1.5B per year in carbon sequestration services (at $5/ton). I’m trying to help my friend raise money for her organization that is trying to bring the kelp forests back through the repopulation of the giant sea stars. Any ideas?

https://www.sunflowerstarlab.org/

Personally, I want to develop a viable vision around “AI for ecological wellbeing.”
For whatever reason I only had problems with Kodi on a Pi. Crashing, slow, ... Using it as app within an android stick now without bigger issues.

Pi 4+ with case was about $100, the stick only $40
Every time I am running a mental simulation about using a different currency as medium of exchange I come to the conclusion that the moment the government bans the currency, your network of people who will openly admit to accepting the currency will shrink to nothing. Yes you can't enforce the law on the Blockchain but you can still enforce the law in the physical store.
I don't understand the point of dedicating so many resources just so that you can have a Clipper add-on second-guess your code and make bad suggestions.
Nobody thinks we're solely responsible. We're just one major input out of many, and the only one we can really control. If you wanna just ask the sun to please operate on medium power for a few years, that'd help too. It didn't listen when I asked.
If you are in the hole where you really cannot add load to your database server but want to log the queries, there is a technique called zero impact monitoring where you literally mirror the network traffic going to your database server, and use a separate server to reconstruct it into query logs. These logs identify the queries that are being run, and critically, who/what is running them.

A past workplace of mine has used this approach.
As someone who has only dabbled with serverless (Azure functions), the difficulty in setting up a local dev environment was something I found really off-putting. There is no way I am hooking up my credit card to test something that is still in development. It just seems crazy to me. Glad to hear Cloudflare workers provides a better experience. Does it provide any support for mocking commonly used services?
It appears what is infected are forks of those repos but not the originals.
In 2.6.x patch levels were the fourth number in the version, not the third.
Good to know, I was not aware.
The squash/rebase issue is definitely problematic, though a tree of signatures could be appended to each commit. Now... this does break how commits are currently signed.
Seconding this. It’s easy to be overwhelmed by the seeming combinatorial complexity of things. Just start a little personal wiki (eg, arrow syntax, structural typing, etc) and it’ll help you decompose things into more easily understandable pieces (it’s easier to multiply 7x5x21x22 than to factor 16170, if that makes sense).
I don’t know if I’d agree with the claim that 50% can be cut… but there is certainly bloat and it could be time to trim the fat. This would be very good news for the industry since all those engineers will start new things and build new companies.

That said, I think the salaries might stagnate. End of 2021 had everyone starting a new job and competing offers. It may not last so the negotiations won’t be as lucrative. Beyond that, tech salaries are high because the profit per person is high and that won’t change much, especially if companies trim excess employees.

I read somewhere a while ago (can’t find it) that Uber once discovered they had multiple teams all making an internal map gui, just siloed into different orgs so there was no visibility. While it’s a crazy example and probably fake, it’s not hard to imagine an org like google or Amazon where there are 100k employees having some level of duplicated efforts.

With office politics, some architectural decisions get made because everyone wants their team to touch important things. I was part of a team that owned a critical request flow and when they were adding new features it was decided that this API should be the entry point for those new features (10% increase in traffic estimated). So it went from a crud app (stateless app with database) to an API ingress with a (custom written) event queue linked to a queue processor (by AWS sqs) linked to a service that was responsible for handing the request off to one of several crud apps (except no new ones were written). Now 4 teams had a portion of the flow under their control. Was there a reason for this architecture? Yes. Would it have happened if the org didnt balloon from 7 engineers to 50? Probably not. Would customers have noticed? Yes, the API would have been faster and more reliable.

Beyond that, it’s well documented that tech people like shiny new toys. I interviewed at DoorDash for a pretty visible product team. They said they were hiring to do a complete rewrite of their product switching to <buzzword> and that it was their main deliverable for 2022. The team I was leaving during said interview was allocating 50% of headcount to rewrite the tech stack from binary on VMs to “AWS native” technology. No new features. If the team was told to cut some headcount or was denied headcount to grow, that’s be the first project axed because it doesn’t save money or help the customer. Meanwhile, my new team has 1/3 the people for a literal 10-100x traffic product with way more customer visibly. If you spent the last few years on this team, you’d think software engineering was lean and efficient. On my last one you’d say it’s bloated and full of busywork.
0 and 1 are iconic for true and false.
To your point ... FWIW, young kids in cultures where they were carried in all different orientations as infants allegedly would not turn over a picture handed to them "upside down" to look at it - whereas kids who were held more upright as infants would. Presumably the former could make sense of objects in many more orientations. (Somewhat sure this was in Ashely Montegue's treatise on Touch.)