skysight-inc/HackerNews huggingface dataset:
In my experience for backpacking photography a used DSLR is definitely the best choice. You can go an entire week on a single battery if you don't use the LCD too much.

I hear you on offline maps though. Back in the day I paid the Tom Tom tax when going to Europe because $100 for offline maps was ultimately better than trying to figure out a roaming plan or local sim.
Multiple studies show that the majority of young adults in America feel "serious loneliness".[1][2]

That's a loneliness epidemic. Whether or not rich people isolate doesn't contradict this.

[1]: https://mcc.gse.harvard.edu/reports/loneliness-in-america
[2]: https://www.npr.org/sections/health-shots/2020/01/23/7986764...
The Ping o' Death Page (1998)
>Operating trains is literally the origin of "engineer"

That sounds pretty dubious to me.

https://en.wikipedia.org/wiki/Smeatonian_Society_of_Civil_En...

There were probably earlier usages of the term too. As the article says the Civil bit came about to distinguish themselves from the older profession of Military Engineers.
Can't reproduce. ddg link shows no results at all.

Nxp.nz is some shop? Seems like spam.

Flagged.
Government is supposedly less efficient than a perfect capitol market.

Healthcare has inelastic demand, so the perfect market would drive the price to infinity (that is, demand as much money from patients as possible).

Oh look, that's exactly
s what's happening!

For people who love capitolism, Americans are surprisingly uneducated on the concept.
Then does this mean you don’t get recharged after any vacation near a cell tower?

> loosing true wildernesses

I’m seriously wondering how people living in the wilderness will feel about this point?
You think Germans have privacy?
From Git's perspective, the two "forks" share the same HEAD commit, e.g. they are merged. That is what a merge does. A branch is a name that exists independently of the commit and points to it, so the commit history is not actually a property of the branch, despite what Git UIs tell you.

Thus, in the underlying data structure behind the GitHub interface, there really isn't an "event" here to identify. The PR branch points to the same commit as the base branch, therefore both branches are in the state of existing as "merged" with one another.

So GitHub would have to track changes to the PR branch that result in this state separately from the existing "merge from GUI" and "push PR branch to master" changes, which I could imagine is fraught with edge cases that could result in what you consider a merge event ending up as a closed event.
I immediately searched for "Empire" on that page, and was disappointed until I saw that image. That was always my favorite part of PLATO.
Unstripping Stripped Binaries
So? LIDAR would be able to detect objects regardless of color.
Wow that is worrying how long it took to catch....seems like companies need to be monitoring their releases more carefully
Thanks for making me laugh. Very witty...
Read the memorandum and you'll see -- every agency has a lot of work to do. It's layered upon the work already done since the changes in 2013.

https://www.whitehouse.gov/wp-content/uploads/2022/08/08-202...
When did I say it can't work? I said you're still on the hook for charges to your card. Specifically, if a service is provided, even if you cancel your card.

It doesn't come up often, because most places charge you before providing a service. For example, if you have a NYT subscription, and it goes to renew and your credit card has been turned off, you don't actually get your NYT subscription. No services rendered, no accrued charges.

However, if your gym bills your credit card at the end of the month of your membership, then you are still obligated to pay it, even if your credit card has been disabled, because the service has been provided.
In terms of value to the end user, and a mission of expanding privacy-improving practices through their services, I can see why a feature like email protection would be prioritized over a proprietary index.

While one may marginally improve some aspects of the service and has strategic value, the other actually moves the needle in terms of an end-user's overall privacy.
Also related (thread on the departure of Mudge from Twitter)

https://news.ycombinator.com/item?id=30026171 ("Twitter shakes up its security team")
Verification was not required as a matter of protocol until a new standard for MTA-STS was published in 2018. Without this new standard configured, as is going to be the case for most organizations out there not on the bleeding edge, TLS over smtp has been opportunistic and not verified the certificates or strictly enforced verification.
https://www.digitalocean.com/community/tutorials/how-to-conf...

The additional daemon that it looks like postfix requires to support this new standard, postfix-mta-sts-resolver, had its 1.0.0 tagged version release in Jun 13, 2020. This does not and would not represent the vast majority of extant deployed smtp over TLS configurations out there.

This right here is still in the README for postfix, one of the most popular MTAs in use:

>Despite the potential for eliminating "man-in-the-middle" and other attacks, mandatory certificate trust chain and subject name verification is not viable as a default Internet mail delivery policy. Some MX hosts do not support TLS at all, and a significant portion of TLS-enabled MTAs use self-signed certificates, or certificates that are signed by a private Certification Authority. On a machine that delivers mail to the Internet, you should not configure mandatory server certificate verification as a default policy.

That's a very load bearing "properly" in your sentence and I wonder just what you're referencing.

Edit: and another good writeup.
https://lwn.net/Articles/866481/
I think he used to be a better interviewer. Over the last couple years I think he has confused having people with interesting things to say on his shows with him having interesting things to say. Now he interrupts guests more frequently and puts less effort into actually understanding them.
Update: another comment mentioned that the SolarWinds hack was a hijacked download, and companies did not catch on until much later. It seems like companies are not monitoring their releases as much as I'd hoped
Presumably privacy.com knows your real identity, and presumably the privacy.com credit card number you give to the merchant can be traced back to privacy.com. From there the merchant is just a court order away from getting your contact info, and if you actually do owe them money, I don't think a judge would balk at that, at least not after the merchant has filed suit against you (as John/Jane Doe).

But of course no merchant is going to go through the effort and expense to do all this, unless you owe them a decent chunk of change. A couple months of a $15/mo subscription likely doesn't clear that bar.
You have to have enough people to "be that asshole" that tells people in their design docs that they are creating a dependency loop and need to design things to avoid it. I did that for quite a while at Lyft, and I'm hoping that people continued doing that after I stopped. My guess, though, is that I and others have missed things and that even somewhere that was careful to avoid it, there's still some places that could make cold boots difficult.

The best way to avoid this problem is to have a secondary datacenter that is hot, and to never let both fail. Of course, this is what twitter is doing. Designing a DR plan where you can lose multiple primary/secondary datacenters is hard enough that basically no one does it.

This is something that really doesn't belong in the whistleblower complaints because it wasn't under his responsibilities, twitter wasn't lying to anyone about having properly implemented DR plans, and twitter's DR plan isn't out of the ordinary across the industry.
BUT, Assume Im technologically naked... global coverage allows drones with weapons to be 100% navigable over the entire planet.
Whenever I travel I tel myself I’m free to not reply to people on time. Especially anyone who doesn’t know the itinerary.

“Sorry I was on a plane then”. “You texted me right as I was checking into hotel- got distracted while replying and forgot to send”. “Couldn’t answer the phone - was at a restaurant and answering the phone is rude”.

Didn’t take long before the lies became true and I would forget to reply when I see the message.

You have the power to make it your reality. If the issue is replying to people, give yourself small permissions to not be punctual. If someone dies, you’ll still know immediately… but that work memo may have arrived why you were on a plane ;). If your issue is that you can’t stop scrolling through twitter or HN then i don’t know. Take more exciting vacations? Rarely when I travel would I rather be scrolling endlessly (except maybe while in line places).
The CellSpot is something you install; you don't carry it.
>There was some discussion in the Internet history mailing list about the supposedly vital contribution that PLATO made to ARPANET.

Good grief. The Friendly Orange Glow certainly doesn't claim that, so to hear that people would claim otherwise is mystifying. It's that relative lack of contribution to what would become the Internet that caused PLATO's relative obscurity today in computing history compared to Stanford, Berkeley, and MIT's contributions (and, probably, the chip-on-the-shoulder attitude that I imagine drove the discussion you cite).
That 5$ instance will cover 90% of the needs of 90% of the businesses out there.

You. Are. Not. Google/Facebook/Netflix/TikTok.
Also very true and those projects you linked look very cool. I've not really explored code generation in the past but I'll have to have a look. I like idea. Put the magic up front so later when you're maintaining there is no magic.
I see folks across the political spectrum all repeating different mantras.

Who are you referring to?
https://www.sequencejs.com/licenses/ seems to be a real example, with the free option being GPLv3.
That sounds like it was probably the standard Tesla display, rather than the FSD Beta display? My understanding is that it's a very different system. But yeah, the standard display has pretty laughable object persistence.
Which side is currently trying to make science fit their world view?
It’s like the inverse of org-babel
Mandatory for people to commit code on Day 2 that goes to all users?

Just because you've seen it somewhere, and it worked for them/you doesn't mean it's a good practice. In fact, this particular one sounds pretty stupid.
Congrats!

I can tell you my experience.

The first 1 or 2 months are hell. If possible, take off the entire first month. "sleep deprivation" doesn't describe enough how things work. The first week we slept 2 hours IN TOTAL. Of course our first kid was particularly bad, the second one we were trained, so we actually started sleeping 8 hours starting from second day (baby slept in bed with us, so "waking up" for feeding, is not very impactful).

After the second month, depending how organized you are, it feels quite relaxing! Baby sleeps most of the time (she slept between my legs while I played videogames), of course every child is different, but you have free time.

After that, your free time will slowly drop to very little, until you get it back when they go to school.

I want to underline the point that aside from the first 2 months, which are extraordinarily, nature gives you time to adjust to a gradual reduction of your free time, so it won't feel that bad.

For learning, I used to be like you, now I still read about coding, but a lot less. It might be because of my work though, I'm learning a lot there, I don't feel the need as much as before. Either way if I have free time, I try to use it for myself. I need to cultivate my hobbies a bit and I really miss those if I don't find an hour or two throughout the week.

That's it. Sounds painful, but as I said, nature gives you gradual adjustment.

You learn a lot of skills useful when managing other people, by being a parent!
This is largely true for myself as well. 1Password helps me and my family from going full in, but if I lost my gmail i would have a lot of problems.

The recent discussion of CP flagging wreaking havoc[0] has caused us to start evaluating because we do have young children and we do take pictures for healthcare providers. Feels like a ticking time bomb for us.

[0] https://www.nytimes.com/2022/08/21/technology/google-surveil...
There probably isn't much in the way of soot and that would be a long way for what is there to travel
Or at least make it mandatory to have written permission (on paper and signed) from every person they track for every type of personal data that they track. Tracking without such consent should lead to exorbitant fines.
They're mixing terms. CNAs are certified nursing assistants, not full fledged nurses. They're paid significantly less and do a massive amount of the work at care facilities.
Not to be that guy, but other countries don't pay tarrifs, Americans do. The tarrif is levied on the importer, who then passes that cost on to the consumer.

The tarrif is not paid by the exporter.

The goal of a tariff is to _increase_ the customer price for some good locally, and thus make a local (more expensive) good more compeditive.

A foreign country may experience lower demand for their product, but its not like they "pay any money".

Yes, lower demand may lead to a lower price, or it may mean they export to other countries instead.
One thing I don't see mentioned is that a lot of this is great advice for a social media startup (fine for ad-tech, etc) but maybe not a higher-risk space, like medical devices
I have a Garmin InReach too, but to say it’s “satellite phone internet” is a stretch. You can send little blips of data. There’s no phone service. Nor is there any internet service.
All of the applications (Desktop, Mobile, CLI) and the API itself are completely open source: https://github.com/bitwarden
Page 40 has a redaction over the circumstances under which Mudge was terminated. The intro mentions a Board Member who silenced Mudge and the reactions are done in two blocks so you can infer who that person was. This whole report is a clown show.

This is Elon’s attempt to burn US taxpayer money helping launder him out of having to pay ~$10b to walk away from Twitter. It sounds like Mudge has his own litigation regarding severance. So it was a no-brained to join Musk’s mercenaries.

This issue is not worth taxpayer time. You want less regulation? Then stop crying wolf to Congress, and more importantly, stop just doing dumb stuff like buying a company you can’t actually run.
Scalable, distributed, collaborative, document-graph database, for realtime web
>T-Mobile plans to include the service in its most popular mobile plans but did not disclose specific pricing.

Hopefully this includes $20 Kickstart!
Is there literally any other field where there's an expectation that you will work for free 4 hours in order to be considered for the job?
In most cases, since these sorts of subscriptions are pre-paid (that is, you pay for the month of service at the beginning of the month, before the service has been rendered), you can truthfully answer "I had no contractual obligation to pay".

And no, the judge is not going to say "you must only answer the question" if you answer that way; "when did you stop beating your wife?" doesn't actually work in a court of law.

Regardless, even if you did have a contractual obligation to pay, but found it impossible to cancel (assuming you're allowed to cancel without penalty), you could pretty safely answer "Yes" to that last question, and then your own lawyer would then expose the whole impossible-to-cancel situation when it's their turn to question you. Court of law isn't this "haha, gotcha!" thing.
You joke, but z-index really is one of the worst decisions in the CSS spec.

So. Many. Footguns.

There really is almost no case in which a combination of DOM hierarchy and positioning isn't sufficient.
I'd assume they included a cheap rudimentary cell antenna on the back side.
Surely you mean "Muhlama"
In the hacker true crime genre you have The Hacker Crackdown, Takedown, and Masters of Deception.
This is exactly what I meant. Particularly visible in richer social strata in SEA, especially in the Philippines and to a lesser extent in Malaysia & Singapore. The amount of sucrose consumed in that first country beggars belief. Everything at breakfast is full of sucrose, even the pork & of course, bacon.

Also, I appreciate your use of the singular "they" :-)
Agreed, this is the future, ie. Decentralization. I must admit, the term "decentralize" directly conjures up a vivid, bright high resolution image of a day trading megalomaniac crypto-bro living in Miami pumping iron and taking testosterone supplements. It is kinda like how Hitler ruined a mustache style however gorgeous that damn mustache is. Folks, decentralization is cool when centralization is not viable, tenable or stable.
> Self study folks, anyone without a bootcamp connected to a sales team, non traditional schools ... you're out.

Disagree. Traditionally you pay for education through property taxes or tuition or whatever. A determined person in this field can cough up $20 a month for a very capable server.

When I was young and poor 40 years ago, to teach myself programming I spent all my money on books that cost $35 a pop at least, which would be something like $100 in today’s money.
I doubt that it is a problem yet but if I were i charge of building a solution to said problem I would try to build a distributed trust system where bad nodes could be flagged and that flag spread to the rest of the network. Those that trust your node would lower the trust ranking of the flagged nodes the more flags against them the lower the ranking the rouge node would get.
> Wouldn't that require making and maintaining separate versions of the app for every possible subset of permissions?

No: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...

> Use the `optional_permissions` key to list permissions that you want to ask for at runtime, after your extension has been installed.
That isn't anything special. Every smartphone can send SMS over wifi. You need to connect to the in-flight wifi to use the service. The router on the plane has a hole in the firewall that allows unpaid users to access the specific HTTP server to send and receive SMS messages. Absolutely nothing special about it.
Interesting problem statement and good analysis. If I am understanding correctly then this is continuous space discrete time. How might the problem change if time was also continuous, meaning card-draw would be integration of some random continuous function, rather than discrete samples?
I used to use Jupytext a lot for this problem, and think it does a decent job. The main problem with Jupytext is its reliance on BYOD (D for discipline), which is a poor (but possibly best available) solution for human systems.

IMHO the Jupyter+Git problem stems from the ipynb format. Jupytext does it "right" in the sense that you can work in .ipynb, and diff in .md. But as long as the base format is diff-unfriendly, all tools are methods of indirection of format complexity to tool complexity.

That's not to take away from the tool -- it looks great. It also takes the D out of BYOD, which is a win. But I think "solving" it means that anybody who receives an ipynb is able to just look at it out of the box, like plain text, so we're still a ways off.
>Vue 3’s <Teleport> component pretty much solves this,

It's so funny to me how transparently contrarian the entire Vue community is.

No no, they're totally not React Portals which have existed for 5 years... they're Vue Teleports!
Interesting and creative way to drive traffic to your site.
iirc online identity used to be tied to your public key signature ? Might be too technical for most population to use, but the ideal solution is already there I think ?
Let me clarify. Musk claimed 6 years ago [1] that shipping Teslas would be capable of Level 5 autonomy. While Tesla’s markets their feature as “full self driving” it’s a far cry from even level 3 afaik.

It’s kind of sad people fall for this. It also has lethal consequences as people assume it can do things it very well can’t (cruise control+ is really what the feature is). It’s a very obvious grift and SEC and FTC regulators have apparently been asleep at the wheel to enforce it. Wouldn’t surprise me if there’s a shareholder lawsuit at some point. Certainly if the stock collapses once someone beats Tesla to level 5.

[1] https://www.motortrend.com/news/new-tesla-models-will-featur...
Whoever shared this, thank you from the bottom of my heart. I really needed this.
Just because things seemed peaceful doesn't mean people were happy. See negative versus positive peace: https://www.visionofhumanity.org/defining-the-concept-of-pea...
Most of the complaints in the whistleblower docs aren't about anything illegal.

There's some places where they show that twitter's public statements, after a security incident, around their security posture were misleading. That's potentially illegal, but even that could be a grey area.

There's some places where they show twitter didn't comply with creating and enforcing an SLDC, but if you've ever worked on an SLDC, you know it's a joke that's there for compliance checkbox reasons. Also, this is certainly a grey area because most likely to actually comply with this, you only need to have a document generated, training for how it should be used, and very basic processes in your git workflows. I'd be surprised if they hadn't done enough to legally comply with this.

The statements around "employees with production access" are vague. What _kind_ of production access do they have? If you're an engineer, you have production access, because your code can be deployed there. If you're in ops/support, you have production access, because you need to access user data. Hard to properly judge the seriousness of this without knowing more details.

For me, the lack of audit access seems to be the biggest legal issue, especially if they were lying to regulators about their progress.

It's not that the accusations aren't bad. They paint a picture of an org that has serious security issues, seriously management and organizational health/culture issues, flailing executives, and an incompetent board. But, it really seems like most of it simply isn't illegal.
You don't get much bike for 400€ nowadays, maybe an entry level Decathlon model. I think I built my last classic road bike for a bit more than that amount out of a mix of second hand parts and a new cockpit, tires, chain and brake pads.
> the need for having a permissible license for the dual-license.

A more permissive license generally improves adoption. For the same level of adoption, a less permissive license drives more revenue in the dual-license model. Maybe a permissive license is still the way to go (certainly getting adoption is often difficult), but it is not the dual license situation motivating that. Contrast a "give away the software and sell support" business model, where (sufficient) adoption is everything and more restrictions on the license doesn't do anything for the business.

With a maximally permissive license, I hesitate to call it "dual licensing", as it stops being the license your paying customers are actually paying for but rather hosting, support, or warm fuzzies.
Maybe. Depends on your POV. From mine it is annoying.
Jasper, TX?
It's unpopular because it's a terrible idea. Just because it's easy ssh'ing into the box, doesn't mean you should. Twenty years ago we didn't have the tools to do anything better. And while I miss some of the simplicity of those times I don't miss when someone ssh'ed into the server and fucked something up and left us in a lurch. If you really think this is the best approach today I really hope you aren't working on any critical systems.
To avoid duplication of input/output tags; it would be nice to have a bridge that coincides with existing documentation comment tools.
For example Scaladoc has @param, and @return.