skysight-inc/HackerNews huggingface dataset:
I think you might be prone to overestimate the net harm of kiwi farms and you understate the harm of centralized groups like cloudflare making decisions like this.

The harm of kiwi farms is centralized and immediate and obvious, the harm of centralized control is insidious, long-term, and surprises you without warning once you establish the precident years later.
It could be unprecedented on 100-1000 year timescales, and still be within geologic norms.

Just trying to categorize this event relative to e.g. Greenland ice sheet melting.
Not be a shock jock revealing things based on untrustworthy sources.
yes.

You do not need any cloud login at this point.
Maestro – Painless Mobile UI Automation
you evidently didn’t read the article and are tediously repeating (garbage, uncurious talking point) criticisms unrelated to its content based on things other people you’ve encountered may have said
There are many successful protection rackets going around that work by generating bad PR and threatening more bad or worse PR, unless you donate to them and/or hire them as consultants.
If you can call it that. Seems more like a convenient excuse.
You can store the state in the URL, can you not? That used to be done anyhow.
And that would make sense when it comes to people like you or others with aliases, but an alias like "wyre" or "pc" aren't exactly hiding themselves, just using a nickname, similarly to how in high school my peers called me Seneca (because my first day I wore my old school's t-shirt). I wasn't hiding who I am by going by that, just not using my real name.

But "throwawayacc2" doesn't get that same meaning.
One of the big confounders there is that it typically is given to people undergoing chemotherapy, not otherwise generally healthy people.
I wouldn't call protein breakdown in the muscle "wasting" without additional effects
General Availability of Azure Cosmos DB Integrated Cache
On point #3: there seems to be something about being on any kind of restricted diet that makes people want to feed you.
There was an enormous amount of liquidity pumped into the system by fiscal and monetary authorities. That all these companies massively increased headcount is entirely rational. Wealthy people and companies did very well during the pandemic because they were direct beneficiaries of the fiscal and monetary support.
That is so funny and in a nice timing: Tom Cormen just started to beg Twitter to have a verified account:
https://twitter.com/thcormen/status/1564767028375945217
I think US has one of the best judicial systems, if not the very best in the world.

I loathe about American exceptionalism, but the constitution and American legal system truly is: https://youtu.be/Ggz_gd--UO0
Presumably it starts well below that, reaching $190K mid-career. And it’s still less than I make as a software engineer with an undergrad state school CS degree that left me only $30K in debt…
I'm curious, what country are you in?
Copilot is paid and closed source. It takes freely from the commons but doesn't give back as freely. There is a big difference.
You guys are thinking about this in a very cloudy kind of way. Assuming that Ubiquiti was being blackmailed, they have a security problem in who they hire (Who held user data for ransom). Assuming they were not being blackmailed, but had a security hole in their software, Ubiquiti has a security problem.

Krebs reporting comes from a potential conflict of interest in that the person who might have been trying to blackmail was also the source. Defamation is not really the issue then because the source was pointing at a security problem which they happened to also be the cause of. The entity that hired this person was...Ubiquiti! Hence, it is not really defamation AS SUCH. Rather, if anything, it was true but maybe blown out of proportion to get a larger sum of money from Ubiquiti. We don't know how much info the person got their hands on, because Ubiquiti would be to blame for that, wouldn't they?

So, ultimately I think taking down the articles is a mistake in the sense that they reported on a problem either way with Ubiquiti and security. Take off the ad revenue from those articles, and issue a modified retraction on the conflicted interest the source held as a correction. Use it as a cautionary tale on "Sensationalism" and "not always knowing what the hell someone is doing when they report a leak" and move on.
He has a history of doxxing people who have nothing to do with his pieces so yeah excuse my negativity.
And you cannot take a book from someone who asks for money, refuse to pay, and say "but it's free at the library!"

The difference is consent.
I think the bigger culprit would be the massive inflation shock to consumer confidence.

Less people buying things equals ads chasing fewer dollars.
I bought mine second hand for €100. Totally worth it, and if it breaks down, I can fix it. The only reason the seller sold it is because he was a chef with limited kitchen space who went fully French press. It's not a complex machine at all, and friendly to tinkerers in the choice of fasteners, materials, and design. It's generally regarded as a pretty machine as well. Should I ever lose this one (in a fire I guess) I would buy a new one for the full price in a heart beat.

You won't find many cheaper models that have the grounds and water reservoir not under the same cover. Most €50 to €100 models have them under a shared lid, because that particular design (while flawed as noted above) is cheap to manufacture. You also won't find cheaper models that haven't been over-optimized for production costs and where the cutting of corners will render them broken in ten years time.

It doesn't grind your beans for you, but for that I simply use a vintage wall mounted grinder I restored. Those can be had for a few Euro in any charity shop.
Germany chose to use Russian gas for heating. You are the richest country in Europe, you could have been on heat pumps long ago. You instead decided to keep using gas, to give more money to Putin.
The HN comments here at the time weren't great either: https://news.ycombinator.com/item?id=30850983

Despite it being clear that Krebs was wrong on this issue for some time, it showed the extent of his influence and the attacker's success in leveraging it to manipulate the public (including HN users).

Hopefully his retraction at least helps with that.
Hmm, believe it or not that one only made the front page for 1 minute. Given that the submission didn't get frontpage attention and that the thread there is rather poor, I think we can let the current post escape the fate of dupeage.

I've been working on software to detect such threads (i.e. highly active discussions that are 'underwater') but it's not hooked up yet.
Insurance does not pay for copay/coinsurance amounts between deductible and out of pocket maximum. After out of pocket maximum is when insurance pays all of it.

Surprise balance billing is no more since Jan 1, 2022:

https://www.cms.gov/nosurprises/Ending-Surprise-Medical-Bill...
Came here to say this. If anything, a cookie that is not cross-domain is more innocent than localStorage.
An other if: The countries currently hosting those industries do nothing to hold them. By the way, German energy prices for industry were among the lowest in Europe up to the current FUBAR situation. The brunt of electricity price increades due to the Energiewende is born by consumers.
How long would it take to (re)activate pumps?
How to make your product Sticky
Glad some people get it. Governments are just big institutions. And monopolies at that. Ones with the power to kill and imprison.
This is what I've been recommending to inkjet printer owners for over 10 years. Buy a B&W laser for regular printing, or a color laser for medium quality color printouts, but if you want to print photo-quality images, it's cheaper to go to Walmart.
Resources I know of that may be of interest:

https://github.com/strongdm/comply

https://www.security4startups.com/
A lot of folks we talk to think fuzzing is only useful for finding memory leaks in C++ programs, so we wanted to show how adding a single fuzz test to your API can find SQL injection and other logic bugs.

Would love to hear others' experience with Go fuzzing now that it's been out for a few months.
They are the top suspects in the swatting of the Twitch streamer Keffals and Rep. Marjorie Taylor Greene just in the past month. There have been many news articles about it — I would suggest Googling and picking the source that seems most credible to you, since I've found linking specific sources tends to lead to people debating the source itself. (I'll be honest, I'm skeptical on the MTG one, but they are still the top suspects there.)
I don't know which is why I think step 1 is to call Russia's bluff and ask them to start pumping Nord Stream 2, which they claim is fully able to operate.

But why should these claims be wrong? Consider the following facts:

1. The Siemens factory in Canada received a turbine and then repaired it. Do you think they would say nothing if they received a gas turbine and then discovered it was fine, that the shipping was a ruse? Do you think they would lie about making non-existent repairs? If they were silent on discovering that they'd be accused of being traitors, especially as they are a German company. That situation just seems totally implausible. If Russia were faking it why even ship a turbine to Canada in the first place? And why would Germany go to such lengths to get it back?

2. Nord Stream AG is a European consortium based in Switzerland. It's not a Russian company. They haven't contradicted any of these claims about broken compressors.

3. Russia invaded in February. Look at Nord Stream flow data (https://www.nord-stream.info/) and do a query for the start of 2022 to the present day. Unfortunately their CSV/Excel export is buggy and only exports the current page not all results but you can just page it through in your browser. Flows are totally normal until about June, yet Russia was sanctioned almost immediately. Moreover, after the annual maintenance period (during which flow rate drops to zero) it briefly returns to its pre-maintenance flow of ~700M kWH/day for a week before dropping again to 300M kWH/day. These sorts of patterns aren't consistent with political decisions (in which case you'd expect it to go to zero and stay there), they are however consistent with equipment being phased in and out ... which is exactly what everyone involved with the pipeline seems to be saying.

Also, the claimed scenario just makes no sense on its own terms. OK, let's assume Putin is trying to hurt Europe by refusing to sell gas. The point of doing that would be to create enormous political pressure to end sanctions but for that to work, Russia has to say "we are restricting gas because you are aiding our enemies, stop aiding Ukraine and we will restore the gas". It makes no sense to impose conditions on gas supply and then not tell anyone what the conditions for restoration are whilst simultaneously shipping turbines around the world and claiming it's technical issues. That just confuses matters and makes it less likely to achieve your goals.

As for missing documents, yes, of course it's possible. If a very large, dangerous piece of equipment came back from a factory run by declared enemies of my country I'd want really deep and thorough details on what was done to it, with sufficiently precise data that I could actually find and check all the modifications myself. You seem to be assuming the documents in question are a one-pager customs form or something but we don't know what they are (or at least I've seen no mention of further detail).
SNAP couldn't make any money just being snap chat, so they had to at least look like they were going to make money with some new avenue when they IPO'd. During that time period, it was 'spectacles' and everyone around here was shilling hard for them.
I was thinking about a french int13 that was there in 2004. Im probably confusing. Good luck in your new venture anyway!
[1] - "The figures are staggering: out of 35,000 children in care, more than 2,000 were physically or sexually abused by priests between 1936 and 1999" (Ireland alone)

[2] - French Church abuse: 216,000 children were victims of clergy - inquiry

1. https://www.justiceinfo.net/en/45133-sexual-abuse-church-map...

2. https://www.bbc.com/news/world-europe-58801183
Anecdotally, what is the app of choice for this cohort if they've moved away from Snap?
The author mentions a video demo of a Photoshop plugin being developed "which has to be seen to be believed" and then links to this video:

https://www.reddit.com/r/StableDiffusion/comments/wys3w5/app...

...but it seems to just be a copy of this scene from Aladdin:

https://www.youtube.com/watch?v=inzkJ34VMfk&t=20s

Am I missing something?
With income based repayment it doesn’t matter if it’s 1M a year. Nobody is paying the full price
> No group of individuals can be trusted more than the individual.

That's going to depend heavily on which individual.
And when that happens, Cloudflare is in the perfect position to provide evidence. Your unwittingly advocating for these websites to use more sophisticated methods, where their actions will be much harder to prove and prosecute.

If not Cloudflare, then someone else, that's the reality of it. We do not live in a world of no harm and never will we. All we can do is manage it.
Are you running it behind a CF tunnel (or similar) or did you point your domain to your own IP?
Considering cloud compute providers and similar services a la Cloudflare are at this point basically necessary utilities, I am beginning to wonder if the ability to select who can and can't use the services based on a lawful use case is truly the prerogative of the service provider.

See: AT&T being prevented from shutting down dial-a-hate lines by regulators and courts in the name of the first amendment
What kind of follow me do you use? As I understand, the mini 2 doesn't have it by default, or was that an update? Are you using Litchi?
One of the reasons why nuclear goes so well together with renewables like PV. Actually said that we have more coal plants than nuclear ones in Germany. But that is hibdsight, at the time the decisions were almost reasonable.
Not GP, but I'd assume they talked about the root cert? You don't want to roll out a new one every other week ;-)
Official statement from KF on Aug 26th:

> What I fear more than losing my
site, being sued, or dealing with police is living in a world where fat eunuchs can groom little boys into castrating themselves and
nobody is allowed to say anything about it.

Wow very neutral site with no agenda here
Journalists post quotes and snippets, just as Google does. Not that it matters. Just because I gave something to someone else for free, doesn't mean I have to give it to you.

The idea that a single public exhibition of a work is enough to invalidate any future sale of that work is totally silly. Are you gonna bust out the window of a Barnes & Noble because libraries exist?
The fact that they post dox (names, addresses, other personally identifying information) makes that a pretty weak defense in my mind. If you write up this long post about how someone is a terrible human being and include their PII right next to it, what happens next isn't exactly hard to guess. And these people are not stupid, they know what will happen next even if they don't actually ever harass the person.

I wouldn't have a problem with them discussing other people among themselves, but including addresses and phone numbers and such is such a bad faith "I'm not touching you I'm not touching you ha ha ha" that I wouldn't mind seeing them burned down on principle.
> what more do you want from the guy?

"This has taught me that my platform can be weaponized by any bad actor who can fool or manipulate me. One column from me could get a CISO fired or move a Fortune 500 company's stock price. That's a heavy responsibility that I wasn't really accounting for, but now that I understand it, I've put some thought in to it and I have made some changes that I hope will harden me and my platform against this kind of social engineering attack."
I don't doubt that. But you don't have to come up with 'novel solutions' for everything because you can read books, watch conference talks, listen to podcasts, read blog posts, by people who have done it before. Working somewhere will give you a very close and detailed, but n=1 experience of one company.

But I'm biased, as I started my first startup at 16 and failed, and proceeded to re-try at 18, and succeeded. I'm not doubting that someone with years of experience in high-growth startups would have been a better founder than me at 16, but I do think that starting a startup was a choice that lead me to startup success faster than trying to get a job and then attempting.

> and I'd invest my money with a team of people who've experienced good versions of these things over those with none any day.

This is an absolutely valid (and imo likely correct) assessment, but it's a different question than "What should I, as the potential founder or employee, do?".
>Do you feel that the breakdown with recruiters is because there is not an easy way to present as "suitable" for a role?

Well, I think in a perfect world, every recruiter would be someone who had worked a little bit with the technologies for which they were hiring. Essentially, they'd be ex-engineers who could understand the relationships between different pieces of technology, just as programming languages, servers, and cloud systems.

>do you think that this is related to the information density constraints of a resume and linkedin profile, and the additional risk that a recruiter cannot do much to parse a GitHub repo?

Yes, I think that's related.

>when these recruiters are reaching out to you, what is your experience of split between external firm vs internal FTE at target company?

About 70% external vs 30% internal when I advertise as "looking for work" on LinkedIn. There's degrees of "external", of course.
The past 5000 years have been quite stable, but there have been dramatic changes from melting ice caps before that. See https://commons.m.wikimedia.org/wiki/File:Post-Glacial_Sea_L...

With a high enough warming rate, we might get a chance to see what a "meltwater pulse" looks like :-/
Indeed, and they were outside more, which means more exposed to the weather.

Also food was different. I noticed that some food make my body temperature rise a lot, and that may play a role.
It would be good if the article mentioned the models of buggy monitors, in particular those that don't present unique UUIDs, so that we know which ones to avoid buying.

I'm about to choose a new monitor, they all seem much the same, but being reliable against this sort of problem would be a deal-winner for me.
What? How? What does putting my authorized keys file on another host do in terms of tricking me to log in? Authorized keys only matters on the host you are using when you type `ssh <some.host>`. The ssh client compares the public key of the remote host to the list in your `authorized_keys` file and, only if there is a match, skips serving you TOFU.

EDIT: I mixed up authorized_keys and known_hosts. But, the remote server doesn't need your authorized_keys file to grant you access so not sure the visibility of authorized_keys matters.
Who gets to decide what is "political", too.
Because I'm so "so smart, intelligent and clever" and the alternative is unknown to me. Simple 1+1
I get where this comes from, but at least in France and Germany it's not questioned that there will be assistance and even direct intervention from the gouvernement on the electricity market. We're talking about democracies with strong socialist components after all.
And also, Macron will definitely do everything to avoid another Yellow Jackets episode...
Why should Europe stay neutral and just allow Russia to invade a country for no reason?
And somehow the answer to "how did it make you healthier?" is almost always just weight loss or effects related to weight loss.
No, after what he did Russia and the eastern bloc were more prosperous in the 90s than they were in the 80s. I do not recall bread lines and famine in former USSR countries in the 90s. I didn't know he required defending all that money that went into an arms race went back to the people, the greatness and pompous image of the soviet union ended,that's about it. Nostalgia is deceptive, USSR in the 80s was not better off than 90s.
This is very helpful - thanks for taking some time to respond.
If you've ever run an `npm install` you've executed 100s of opaque binaries on your machine.
Ask HN: How come, const variable can be modified in react
I can modify const variable in react using setSate but not in vanilljs. Any reason ?
Cloud has yet to turn a profit, but they are on the path to extract blood from stone.
I'm sorry my friend, but our enemies are out there. They hate us and they want to kill us or force us to change politics or religion whether we like it or not. If they can't get to you they will get to your friends, or neighbouring countries, or countries you trade with, or that you visit on holiday. They're not going to suddenly decide to be all friendly and nice to us, just because we turn our backs on the people they are already terrorising and assaulting.

I'm in no way supporting or justifying the Georgian government at the time, we shouldn't have been tolerating that either. The point is what happens in these places matters to us. It affects us, whether we like it or not.

>Why is it our responsibility?

Because we are moral beings that live in the world, we benefit from the things that world provides to us, and therefore have responsibility for the state of the world we live in.
The Ancient Andean Tradition of Eating Clay May Have Helped to Protect Health
They sell you printers with half empty cartridges to prevent [people buying new printers for the cartridges.
https://archive.ph/CFBYk
Law enforcement is the tool being used to do the violence ffs, they’re not protecting anyone
Everyone loves to play the armchair lawyer. Bias quickly fuels whatever side of a case you're on. However discovery and a few court conferences can quickly put things into perspective. Almost everyone's lawyers start off with some encouraging words but eventually they are telling you to settle for X and it is clear that they wouldn't have got paid if they told you that you had a losing case from the get go.
I still continue to say Bombay more often than Mumbai. Bengaluru do not roll out my mouth easily either. I still default to Bangalore.
Big turn of the tables. Back in the 2000s Bush administration we had pornography site raids and suppression, now we have ideologically-motivated censorship of a different form.
Custom AWS Lambda Base Images for Java 17 and 18
After a year, Amazon still hasn't released an officially-supported AWS Lambda Base Image or Runtime for Java 17. But I needed it, so I made one. You can find the images themselves at https://gallery.ecr.aws/aleph0io/lambda/java, and the source code on GitHub at https://github.com/aleph0io/aws-lambda-java-base-images.
Still confused — aren't we talking about a particular machine? Obviously the number of possible states in any given machine is unbounded, but the number of states in one particular machine is finite.
Basically people of EU get sick of the bureaucratic politicians bringing them more immigration, less traditions and suicidal industrial policy.
That seems like an extremely oversimplified summary of the article you've linked to.
3-2-1 seems to be a reasonable strategy for keeping the data relatively safe over the long time and maintaining some offsite backup saves it in the event of house fires and the cloud is convenient for that it just can't be the only storage. But the bigger issue is often conversion of data, there is often a window in which a format can be converted from an old format to a newer or more popular one and you often have to assess that yearly.