skysight-inc/HackerNews huggingface dataset:
Neil from Nimbus here

Thanks for the support!

> One question, how does Nimbus manage secrets/creds? Integration with KMS?

It actually depends on what type of secrets/credentials that you are referring here

- For third-party tool login credentials (e.g. the GitHub authorization that we currently support), we are handling that with OAuth. That means we don't directly store secrets/creds on our end and developers can revoke the authorization any time on that tool and/or Nimbus;

- For any secrets/credentials that may be used in environment variables and dotfiles. They are currently lives within the "workspace" scope. That means, if developers delete the workspace, the credentials will be gone, and we don't persist them at the moment.

We are actively working on persisting env variables and dotfiles as part of settings of org/template/user, and the feature will become available soon.

We are also actively working on self-hosting Nimbus on customer's cloud - so if security is the top concern in your mind, with self-host solution, any secrets/credentials will never leave your cloud (together with codebases, user data, etc.)

Happy to provide more insights if you have more questions!
> The scale of energy in the geothermal layers we can reach dwarfs our consumption and will take time greater than human existence to date to alter in a manner that impacts the orbital scale geophysics.

Isn’t this thinking the type of naïveté that got us to the current situation in the first place? The CO2 in our atmosphere increased ~0.01% (absolute percentage of atmosphere) over the last 4 decades.

Scientists 4 decades ago explained away any concerns in the exact same way you did.

Granted, we need all hands on deck (including experiments like this) to reach our decarbonization targets, but let’s not downplay the unknown tail risks involved.
People in Lebanon are not being allowed to withdraw their money from banks, something similar happened in Greece a few years ago. With crypto if you have your own keys that's not an issue.

I don't see how the North Korea thing is an issue. I'm not sure what hacks you're referring to but when it comes to smart contracts code is law and the people who use them know that, if you can't get back the tokens you sent to a smart contract it's only your fault for not understanding how the software works. I don't think North Korea should exist in the first place but I don't think the act of getting money from a smart contract is immoral.

As for using works of art to launder money, I meant something like rich person A offers child prostitutes (or any other illegal service or item) to rich person B, who pays A by buying one of their paintings for a higher price than what A paid for it.
Very interesting read. Thank you!
I’m still kind of confused why they don’t have a a/b update system for macOS now that Sealed System Volume is a thing. I feel like one of the major benefits of that would be that you can swap /System out and not worry about losing any user state, so why can’t they just download a new System volume, put it somewhere else (while you’re using your computer), then on reboot boot from the new one and throw away the old one? If you disable SSV then they can use the slow update process.

(Unless there’s too many system files that are updated a lot and not sealed?)
Apple's stance on air tags is ridiculous. For one thing, you will only know if someone is criminally tracking you if you are an apple user. Android users have no luck.

Secondly if this is true and you stole a bag, all you need to find the air tag would be to hold an iphone close to it for a few minutes. So what's the point of it then?
New antibody neutralizes all known SARS-CoV-2 variants in lab tests
When it is bitter cold, the touch part of a touchscreen ceases to function and you will wish you had a flip phone with real buttons.
There's the net benefit that you'll be in better shape for the non biking hours.
And look where that’s gotten you.
It's rather unrelated to economic system and more related to culture and shared principles. The economic systems can reflect those values, however.

The Soviets did a lot of things "because they could"
That’s at least realistic. It just seems like modern yellow dog, except in a world where Macs are already equipped with a functional *nix.
I don't like the docs / project description. Everything is made 'so simple' that important parts are now gone and everything is now pure magic, I guess.

> We want to make it more trivial to build OCI compliant images without all the knowledge required to understand how Dockerfiles/Container Filesystem/BuildLayers/etc work

As someone who understands how the above mentioned stuff works - I feel like I'm being forcefully excluded from the tool's target audience as I need explanations and the docs are written with such an idea in mind that it is something I shouldn't know.

https://nixpacks.com/docs/how-it-works

> Nixpacks works in two steps

> Plan

> Analyze the app source directory and generates a reproducible build plan. This plan can be saved (in JSON format) and re-used at a later date to build the image in the exact same way every time.

How about an example of how a simple plan for a few projects would look like?

Plus, the tool seems to assume too much:

> To create the plan, language providers are matched against the app source directory and suggest Nix packages

I don't need no Nix in my images, no thanks.
> The downside of this type of tech is that it adds a dependency on the internet for reserve power.

I haven't researched this yet, but wouldn't a true "smart" grid have wiring for communications as well as power?
When did the police get defunded? Pretty sure current admin only gave them oodles more funding.
No. It’s not right to left. It’s just weird:

3 ^ 1 * 2 6
3 ^ 1 / 2 1.73205
3 ^ 1 + 2 5
3 ^ 1 - 2 1
You think FOSS is bad for humanity relative to proprietary software, or you think that all software (including FOSS) is bad for humanity?
I think you already know you got scammed. The guy couldn't care if it was new printer or not. He was just scamming you and sending those messages just to test you and may be prove to their banks that you didn't give them what you promised.

We need someone to disrupt this monopoly that these banks have where most disputes are won by consumers and not business owners. We had a guy use our SAAS for 6+ months and then charged back everything because he claimed it was "defective product" as per Stripe and we lost that dispute. Funny he raised tons of support tickets in the meantime but right at 6 months decided to take it all back (He knew what he was doing because I believe you can go back upto 6 months usually for chargebacks).

Coming back to you, you absolutely were scammed. Question is: Does Ebay care ? My guess: Not.
As others have noted, basically every bank in the US offers credit cards, but I do make use of American Express as my primary purchasing method, and for me this is a feature and not a bug.

They offer excellent customer service, the concierge offering has done quite a few excellent things for me (for free!), every time I have had to perform a chargeback the experience has been painless and the investigation concluded quickly, they generally have promotions related to merchants I frequent, etc. It's a much better experience as a customer than any bank I have ever had an account with.
Yep. The prescriptions are only good for one year, and it's usually $50-$100 to get tested. Most places won't sell you more than a year's supply of lenses at a time either.
Do we still need a prescription for continuous blood glucose monitor in the US?!! This one really boggles my mind
There is a difference between “good” and “audiophile.”
I don't even understand calling people you don't know personally by nicknames.
I'm not sure how you've come to the conclusion that wealth and power are unrelated, but best of luck to you.
I had many problems like this on ebay, people claiming they didn’t get the thing it was broken. These days I would just rather give something like that away to someone deserving than deal with the ebay/gumtree etc. crowd.
> The move from testing to static analysis

Are you claiming that static analysis of code can replace the concept of writing tests completely? If so, I'm very skeptical.
If we wipe out the poorest 50% of the population, they hold less than 1% of the wealth. Is GDP right metric?
> Here in Europe it's the complete opposite. They're hard to sign up for (banks don't like giving them) and you get registered for the loan which means you will have a harder time getting a mortgage or car loan.

Which part of Europe? That's not how it works in the UK. You build up a record by using credit products and it benefits your score to keep them in good order.

Though it is how it works here in Australia. When you apply for a mortgage they take your credit card limit into account as a negative.

> And we don't get much additional fraud protection

That's interesting. The UK (again) has significant legal protections for credit that mean the credit card company is jointly liable for the debt in some circumstances, like fraud, and must return your money pending an investigation. There's much less protection with debit cards.
They made drugs illegal, look how well that's working out.
oh yes, the problem is not Manjaro itself, it's the particular version of Manjaro that is used on PinePhone. I heard good things about Manjaro itself and I have no doubts that it's a good distro!

yes, I really don't understand why they chose to ship that half-baked mess. I get it, PinePhone is for "techies" and the average user knows how to change distro, but the default should be functional. System 76 or Purism laptops don't come with broken distros ¯\_(ツ)_/¯
From what I understand, there's a huge ledger of names that is used to identify castes. I've seen great performers never get any promotion and the useless becoming senior managers because of their caste. Pretty vicious.
While it won't provide "at rest" detection, Apple has released an app for Android devices.

- https://play.google.com/store/apps/details?id=com.apple.trac...
(2017)

https://archive.ph/pBD0e
Technology Connections does a similar thing, over-cooling his house at night as a thermal battery.

Video: https://www.youtube.com/watch?v=0f9GpMWdvWI

Reddit discussion: https://reddit.com/r/technologyconnections/comments/oo2b3i/b...

He estimates it at 16 KWh of storage. Same ballpark as a Powerwall, right?
I'm not going to bet against him on this one.
It looks like you can punch in an audiogram. Now I just need to shell out more money for compatible earbuds. I don’t think that will act as a hearing aid yet, so it would leave me switching between AirPods and my hearing aid. The first hearing aid I lost was due to switching between a hearing aid and hearing protection.
And which is also quite a bit more complex, compared to Open Firmware.
Valve's Proton and Wine based emulated gaming works very well than people expected.
The future of apps is browser-based.

Not sure why this was downvoted.
Yes Java cops a lot of criticism but the packages/module/namespace stuff has never given me any grief.
It may not be the hearing, as such. In my case, at least, it's "Central Auditory Processing Disorder (CAPD)", which is somewhat of a catch all. For me specifically, I have a heck of a time picking out one voice when there are more than one going. Parties are just noise to me.

My hearing itself is well within normal sensitivity when tested (well, it's getting worse, but even that's normal as I age). It's just whatever processing people do to turn sound into parsed language is difficult for me. Even people's houses that have a TV going 24x7 are problematic for me to have a conversation.
This seems similar to the FreeBSD lockf command: https://www.freebsd.org/cgi/man.cgi?query=lockf
Thanks for doing this research. It was helpful to see the actual text.
> Ada has made real strides back from the dead, especially if you can stick to SPARK Ada. We're even seeing more formal verification of complex bits of software in systems-land, something that seemed basically impossible when I first read about Coq twenty something years ago.

I really agree with this. The situation is a bit crazy. Since formal proofs are hard, the alternative taken is giving no guarantees at all. That's bad. Static analyzers can get really far. Contracts, even just at runtime are really useful. I don't want a piece of code to run if the precondition is not met, and I don't want it to return or have side effects if the postcondition is not met. This would rule out a massive class of errors. Of course, bonus points if you can do it at compile time.

Ada SPARK, Infer [1] and Dafny [2] show that rigorous engineering is possible and practical. Actually, Facebook (Meta now) argues Infer let's them move faster.

I think the problem is political and economical. It's hard to monetize this first. I wish someone like Apple took the plunge and rebuilt a simpler version of their stack using formal verification. It's the kind of thing only a large corporation or a government can do because it might take half a decade to take off. Once it takes off its unstoppable. Who would not like to buy e.g. a phone where most bugs and security breaches are impossible by construction? Verification also has a nice side effect. Change for the sake of change and featuritis are pretty incompatible with it.

[1] https://fbinfer.com

[2] https://github.com/dafny-lang/dafny
What happens if your battery is drained out at the time?

What happens if you hack your battery to say it ran out?
"Study" meaning do the bare minimum until people forget about it.
> then churn rates would skyrocket and modern SaaS multiples would crash - taking company valuations with it.

That sounds amazing. Let's do that.
> If they filter transactions, ETH will become worthless

I'm not sure about that. Some hodlers of ETH might be fine with governments being able to censor transactions. In that case what will determine the price of ETH is also how much of it these people own.
In many countries the fees are capped much lower than 3%. In these countries you see the opposite - small shops and restaurants now don't want the expense of dealing with cash, which has to be stored securely, counted, reconciled and banked. All of these things take time and money.

Cash isn't some 'free' panacea for a business.
> I'm sorry, but that sounds stupid. A computer is a functioning machine first.

It is not stupid - just counter-intuitive, which should give us a pause to think. You say, "A computer is a functioning machine first" - yes - but consider why SICP says, "Programs are meant to be read by humans and only incidentally for computers to execute." (see a discussion on the quote https://news.ycombinator.com/item?id=16431701).
They should probably look at his Facebook Marketplace history, they might find the AirTag owner's stuff that way.
Apple has never been upfront about the extent of manufacturing inside china and other countries.
Take a look at this: https://play.google.com/store/apps/details?id=com.apple.trac...
Zooko's Triangle was a useful lens, but I think of it has having long been solved (or, refuted) by many blockchain projects.
Sorry, to be clear, I meant the shop owner, not the police.
Of course there are more deductions when an object is a BUSINESS instead of a piece of PERSONAL PROPERTY.

No, it does not seem the slightest bit lopsided.

There is zero difference between the deductability of expenses you mentioned and expenses for any other business.

Businesses are generally taxed on their PROFITS, which are [INCOME] MINUS [COSTS].

The regular homeowner is not running a business.

The same thing is true of a truck or racecar. If you own it as personal property, you don't get to deduct much of anything. If you own it and run it as a business, you can deduct your expenses before counting profits and paying taxes.

The same object can be either a personal property or a business, and it is the ACTIVITY that matters, not the object.

Your argument is either attitude & ignorance gone wild, or demagoguery attempting to confuse the issue with sleight of hand.

If you think that home ownership should be more subsidized than just the mortgage interest deduction, just say so and advocate for those subsidies. It'd be much more cogent, but you evidently don't want that discussion, or expect it to be a loser, which it likely is.
Do people who feel entitled cheat more? New study challenges psychology idea
Refactoring Large Codebases
Over my career I've refactored a handful of gigantic codebases and I have a few tips.

First: Version control _everything_. I mean, remove `.gitignore`, and add everything to git index before you start refactoring. The worst that can happen is when you accidentally make a change, everything breaks, and you have no way to recover to a working state.

Second: If you don't already have them, write compatibility tests for all public interfaces. It is easy to fall into trap of refactoring code and running a simple program to ensure that it works, but if it is a large application, chances are that your simple program does not cover all the edge cases.

Third: Use code coverage and eliminate all dead code paths before you start refactoring. When undergoing a refactor, chances are that you don't want to port everything: backwards compatibility, patches, etc. Code coverage reports allow you to understand exactly what is and isn't used by your tests on your target platforms.

Fourth: Make a list. I start refactors by scanning the codebase without making any changes and just writing a list of things that I would like to change. Planning allows to better understand the scope and feel like you are progressing in what may be a long endeavor.

Five: Make one change at a time. That's where the list comes into play. It is easy to start just going file by file and making changes to everything, but you are not setting up yourself for success, esp. if there are thousands of files. Doing 1 problem at a time allows you to be focused and efficient solving one problem.

Six: Document breaking changes and design decisions as you refactor. Whatever you document before the guiding principles for yourself and serve as a memo for future maintainers of the codebase.

These are the things/ideas I follow when refactoring large codebases. What about you?
For loud bar earplugs, you’d probably want ones that would blunt lows and highs pretty aggressively, but preserve a band around 2.5 khz. I attended a presentation from Bob Heil about EQing for understandability on HF, and that was more-or-less his recommendation.
Yes, practically force re-render comes with unnecessary mechanism to prevent it from happening, and there are unimaginable cases of state mutation that shouldn't force re-render. Example situation: changing state A, B and C, re-rendering, changing B again, not rendering. Auto-render + prevention mechanism is inferior means compared to just having `render` and just calling it whenever and wherever.
>we’re not a fan

Oh, ok :)
I can pay my child's college dorm fees with a credit card with no additional fee. At least I get a little cash back. But, yeah, that kind of arrangement is extremely rare.
Not really safer

"There is no chargeback right however, which can be considered a disadvantage for the consumer using this payment method."
Yep. And your "reuse-in-the-large" I'd argue is also a side effect of reality itself. Take any market sector or industry, not just software - I suspect the "easyness" of directly reusing and copying any complex system is vanishingly small. If that were not the case, we would have infinite choices and brands of any complex product ever made!
FWIW weekly and biweekly lenses are functionally identical to monthlies (dailies are different). The only difference is FDA rules meant to preserve artificial market segmentation. You can buy a years supply of weekly lenses and wear them longer.
The web, and much of programming really, feels so far behind the curve of what's possible as a programmer. Take a dive into shader design in something like unreal engine 5, it sounds exactly like what you're describing in Delphi, mind you, I say this as someone who has never programmed in that language. The ability to drag and drop functions, compose higher levels of abstractions, and really all of the fun programming stuff we do can be accomplished in these engines. I've found it very enlightening, and even somewhat frustrating, to go from drag/dropping some graph nodes that generate a playable world for fun, and then back into the world of javascript for work where I am slinging 100s of lines of text-based code just to get a form button to operate correctly.
Nice! Bravo for your contributions!

After using and contributing NixOS for 3 years, I appreciated that I understood far more how Guix worked after just one 1-2 weeks of using it.

Guix introduces abstractions, such as operating-system that has defined fields that make it clearer what structures are being built. NixOS, on the other hand, does not have such abstractions (or perhaps just not as well documented/discoverable).

Alas, I found Guix a bit slow and a bit difficult to contribute to (mailing list workflow, and fewer reviewers), and don't have the capacity to help improve that, and so I'm back to NixOS.

Guix is tackling multiple fronts: a blob-free kernel, a non systemd init, mailing list development, bootstrapability, no non-free software, high standards for commit messages.

If they reduced the number of fronts they were tackling, they might increase contributions, but the current contributors seem to value their existing fronts. That's fair.
In a world with stable rents, renters also become long term residents and invested in the community. If someone’s only “invested” financially I doubt that they have the community’s interests at heart.
Blogging as Structured Thinking
Yes. If you built a product on top of supabase and your company wanted to get soc2 compliant, it helps that supabase, one of your vendors, is also compliant.
We need more interesting tools, as you said. As long as the horizon of innovation remains on "something that generates good old code" I'm not very excited about the future. Copilot is an amazing tool, sometimes gimmicky, but a tool of the present nonetheless. As a compiler, it takes instructions and generates instructions.
We need a future where AI is involved in debugging, and program comprehension, and correctness. More interesting tools than a better RAD.
Any plans to support Facebook Pages app/Messenger?
Well said. I'll have to remember the kiosk metaphor for Android.
Her original article was a long diatribe that basically amounted to insisting trans women should be forced to use male bathrooms, which has on multiple occasions directly resulted in their assault / murder. I guess personal safety is just a different of opinion, though.
Nope. I mean replacing a panel. It's precisely what I said, after all.
Stash and Bitbucket “cloud” were completely different codebases. It was kind of a unique case.

The HipChat “server” was just a weird fork of the “cloud” version. JIRA and Confluent cloud started off as containerized versions of their on-prem versions. Then they did a big rewrite to make them actually multi-tenant.

I haven’t been keeping up but Stash was definitely not the priority at the time.
I do have an induction stove (for heating milk, cooking rice, etc). I get lunch delivered and rest of the time I cook and sometimes eat out. Plenty of grocery shops here within 5-min walking radius. Refrigerator for me alone would be a huge waste.
Can I create the largest Makerspace?
Dailies aren't the same. They have a higher water content (more fragile) and eliminate processing steps intended to retard biofilm buildup.
Are you sure it doesn't?

Tesla has paid attention to grid outages w.r.t. Tesla charging before. See https://www.engadget.com/tesla-powerwall-outage-ev-charging-...
https://archive.ph/PkYaO
very wholesome post
Oh, I thought that was Extendable Ears

https://en.wikibooks.org/wiki/Muggles'_Guide_to_Harry_Potter...