skysight-inc/HackerNews huggingface dataset:
Uptrace uses the BSL license to forbid or rather not allow other companies creating a cloud service using Uptrace code, because that is how we are planning to monetize. But you can self-host Uptrace and use it as you want to monitor your (production) application. I think this is fair enough.

If there is another license that better reflects our intentions, let us know.
Not really that many times.

I understand that most of the major viral pathogens have emerged in the last 10,000 years, since urban society replaced hunter-gatherer culture.

It has not been difficult to bring what naturally evolved under control in developed countries.
I read and listen to all those books multible times plus prequal plus podcast and so on.
Nope, fibre all the way to the wall boxes, with cheap Cat 5 alongside it.

Places with high-bandwidth stuff or multiple devices have a switch with an SFP+ port to have the fibre come in and then whatever flavor of Ethernet as outputs (whether 10Gbit over copper, more SFP+ for fibre, or 1Gbit ports if individual devices don't need more than 1Gbit).

FYI you can get cheap server-grade 10Gbit cards on eBay, they work fine and have an SFP+ port. 10Gbit SFPs are ~20 bucks on Amazon.

Places with low-bandwidth needs can just use the "backup" Cat 5 directly or with cheap Gigabit Ethernet switches, to reduce costs where 1Gbit+ speeds aren't needed (plus you can also reuse the cable for non-Ethernet applications, think alarm sensors, home automation, etc).
Question: can we control a Linux process (with all its threads, signal handlers etc.) in a completely deterministic way, e.g. by using ptrace() on it?
Then I wouldn't call it distributed, since it's centralized on redis.

Otherwised good product.
Your colleagues logic is akin to turning off the smoke detector because it starts beeping any time you barbecue indoors.
Ask HN: Travelers of HN What's the Most Useful Thing You Own?
Very few people used Apple II Desktop back then. To really be useful, you'd need a hard disk, which wasn't that common, and ProDOS software, which wasn't common either. ProDOS is also a single-task OS and Apple II software expect to have the full machine under its control (not sure Apple II Desktop has interfaces to build GUI apps for it - would be fun). All that ProDOS provides is a hook you call when the app exits so that a program launcher can be reloaded (which is, IIRC, what Apple II Desktop does).
There is a difference between uninformed/reactionary “woke” views and this, which is just someone explaining a few of their personal convictions and political beliefs.

She’s not “parroting republicans” by saying tech is largely operated by people who are elite and (ostensibly) liberal. As far as I know, this isn’t controversial amongst liberals - just a projection made up by Fox News anchors and talk radio hosts as they shout “hypocrisy!” while being funded by the likes of Rupert Murdoch.

Didn’t you read the part about fascism? She’s talking about republicans lol, you realize that right?
> daemon parade on boot

Now I can't unsee this.

Thanks for the heads up on the heat issues.
The first obvious corrective action would be to prohibit gain of function research in level-2 labs.

The second would be to prohibit gain of function research in general, especially with funds emerging from a country that has implemented such restrictions as the United States did.
At this rate, soon each switch will have a programmable controller inside, and you'll have drivers adjusting them as you type.

Thought idea: predict what key you are about to press next, and make the ones around it stiffer so you are less likely to press them by mistake.
She's the lady who was fired by Google in retaliation for organizing the walkouts that protested the big payout Andy Rubin got despite being found guilty of sexual harrassment.

So she's got both principles and guts, good to know and a positive sign for Signal. Not enough to overcome the taint of its initial funding by the US Government, its unnecessary and privacy-busting requirement for phone numbers and the stench by association of cryptocurrency, but who knows, she may be able to influence away from that.
My strategy:

I know I'm going to get over this eventually. I might as well start now.

It helps that I have aphantasia and a very poor autobiographical memory.
Good on them to start with a picture of what they're talking about. This is surprisingly not something you can take for granted.
Nah.

Everyone here seems to be super diligent about FKs. I wonder if that's a sampling bias.

I've worked on a few projects where they were considered an unnecessary hassle, especially when the RDMS had some performance or functionality limitations when using them. Also "on delete cascade" seems scary. Plenty of systems even just set deleted=true instead of actually deleting (at least before GDPR).

Not every CRUD app treats data integrity as a holy grail. A social network for hamsters can lose a comment, no big deal. Some applications threat databases as a bag of key-value pairs, and the inconvenience of migrations ends up with a JSON in an "everything_else" column. Move fast and break relational integrity.
Right, we agree! I'm just adding some more information.

> "With LD_PRELOAD and ptrace() an explicit permissin isn't granted to the debugger by the specific debugee therfore regardless of who the user is or file acls permission must be denied. "

Explicit permission is in fact granted because they are running as the same user. There is a permission check on attaching gdb which is using ptrace(2).

Regarding LD_PRELOAD or other linker instructions, again there is an explicit permissions check: In this case, the permission is the execute permission on the original binary. If you have permission to execute then you can set any linker parameter you wish, or even use a non-system provided linker! There's nothing stopping a user from compiling their own linker and using it to run a system binary, so long as it's running as them and not setuid as another user.

> "Even search order hjacking is a vulnerability even if it is the same user running"

It's not, and this kind of thinking is evidence of a faulty security model.

Linker configuration is just one small aspect of invoking an executable. You can always simply copy and edit the executable instead, as I mentioned in my previous post. Or you can always use your own linker. Or bring your own statically linked binary, with no linking to system libraries at all.

Looking for this kind of thing might be useful as a signal on an otherwise locked-down system (is development happening? Why?), but it has no place in a cohesive permissions model for a general-function workstation. It really cannot be a functional part of a well designed security architecture for a system which allows for software development.

> "Isn't that what I said by "drop privilege"? I've only used pam_exec so I never had to deal with this with pam but in general when I need root, I get whatever api handle, socket,etc.... and change uid/gid to a low-priv user."

Typically "dropping privileges" means setting the ruid (real uid), irrevocably becoming the lower-privilege user. This is the "grab a resource and give up access" model. This can't happen with PAM because it's a function not a separate process and it needs to return holding the same permission state it was called with.

pam_exec would be forking and setting the uid in the child process prior to exec.

In a single process scenario where a function must return with the process state unchanged, the euid (effective uid) can be set to a lower-privilege user. The ruid remains 0, so privileges aren't permanently dropped as they can be restored at any time with a subsequent seteuid(0) call. It's more a temporary lowering of privileges. This is not threadsafe, of course, as privilege is process-global state.

> "and that marvelous modular architecture is not faulty and should not be replaced by a giant complex systemd process. "

Agreed!
> I'm really only wondering about whether or not other infectious diseases cause also cause long term issues but it just hasn't been detected before at the level of Covid. To put it more simply I'm wondering if every time we get sick, it decreases our overall vitality just a little bit. Maybe even catching the common cold is chopping a month or two off our lifespan and we never noticed before.

They do, just look at the prognosis section of influenza on Wikipedia [0] (I know, Wikipedia isn't the best source). I had a colleague that had a bad flu one year and then never properly recovered. The doctors say he now has "chronic fatigue syndrome". This was before COVID was a thing.

I'm not claiming that flu is as bad as covid, just that this stuff does happen without covid to unlucky people.

[0] https://en.wikipedia.org/wiki/Influenza#Prognosis
Node.js creator Ryan Dahl urges Oracle to release JavaScript trademark
The entire point of using an RDBMS is to have constraints IMO. Foreign keys are one of the most basic forms of constraint.

"It's never gone wrong yet" is a good way to get yourself electrocuted when you're changing a light bulb.
The origin does not matter. Nothing changes now, regardless of how it started.

The pathological human obsession with narratives such as this often does more harm than good.

No useful investigation can now occur. No punishment can be meted out. Any lessons learned from one origin or another can be learned now regardless.
I had a great conversation with a hydraulic fitter once, turned out after a couple of beers that he was a chartered mechanical engineer in his home country, and that we shared a passion for heat engines. You never know what someone’s hiding under their hat.
This is wrong on many levels.

Most people don't need all that complexity and configuration options, especially if you just want it to work.

Asset minification can be done locally, besides the ominous gatekeepers don't give a fuck. I've got a static website with lots of files, just HTML and CSS, not even minified I think, and a dozen lines of JS, and it's a solid 100/100 on Page Speed Insights.

Link headers? There's a HTML tag for that and it's fast enough: https://developer.mozilla.org/en-US/docs/Web/HTML/Link_types...

You're just bloating everything up.
Can be a defect in spacetime. See: https://arxiv.org/abs/1803.09736
If you use your own domain, you can easily change your hosting should it go down.
The article talks about how WIV lab is secure and most probably not a source of COVID. The poster probably meant to say "look at all those fences and CCTV, no way anything would escape that", but did so in a very qanon-ish fashion.
But the proposed action isn't to fix the bugs, it's to delete the documentation of the bugs! Closing your eyes don't make a problem go away. Surely the engineers understand that too, and won't get a moral boost from ignoring the known problems.
Showing basic restraint and not oversharing online seem to be the recipe for not ending up with a thread on Kiwi Farms, so you're probably fine.
This was inspired by a hn comment that linked to "you suck at excel" [0].

First, I realized how much I suck at excel despite being in love with it. Excel just has so many features and the basics are good enough to solve most excel problems. This means I never search for a better method and only discover features through word of mouth.

Then, I realized many of the suggestions could be automatically applied (named cells, standardized color formatting, defined tables). Other suggestions could just be recommended (you seem to be using formulas to build a pivot table, click here to learn about pivot tables).

This seems to obvious so it probably exists. But I only found Microsoft's excellent excel static analysis addin ExcelLint.

[0] https://www.youtube.com/watch?v=0nbkaYsR94c
But do you really need different headers for different resources for a static site? I can imagine a distinct "downloads" folder maybe, but not much more.
Ask HN: What praise for a book and author made you smile/chuckle?
I am in a library and was browsing books. I picked up one of the books, "Value: What Money Can't Buy" by Stephen Bayley and was reading the praise for the book and the author on the back of the book by prominent people. One of the praises, by Sir Terence Conran, in a quintessentially British way reads like this:

"He has the attention span of an acid-crazed hummingbird hawkmoth, but when he craps, it glows"

:)) I just couldn't stop laughing at this.
I suspect it’s a myth, but widespread enough that even the police believe it, enshrining it into reality.
The omega-3s come from krill in the first place, so it seems like you could feed them that or some other bioaccumulator.
Dear Signal's presidency

May you consider priority to get client published to f-droid (or debian):

https://forum.f-droid.org/t/signal-wickr-on-f-droid-2021/122...

https://github.com/signalapp/Signal-Android/issues/127

Meanwhile I'll recommend freedom lovers to use matrix|XMPP|IRC (which can be also used on web or linux computer)

Freely yours
That seems to be a bug with ethical ads. I've already escalated to upstream. Sorry about that! I literally didn't know that was a problem until yesterday. It worked before, something must have changed on their end.
I think this job would take a big emotional toll on most people. I’d also feel guilty about charging people that are lonely for company.
As well as getting how "service" commands operate wrong, you are conflating a "background" process associated with a TTY with a daemon. Some "service" commands work the way that you describe. But that is actually a bug. A properly designed "service" command does not execute as some direct or indirect parent process of the eventual "httpd" process. The "service" command runs in a login session. A daemon has (at least as an intention) no association with a TTY. The daemon process runs in a context that has never been tainted by any of the various things associated with login sessions.

* http://jdebp.info./Softwares/nosh/bsd-service-command.html
Pluribus
Lol.
I don't know why, but apparently my browser isn't sending the referrer header, and I'm using vanilla chrome on Android.

EDIT: Sorry, I think it might actually just be that because I first visited that page before coming in via HN, I've just been seeing the cached version of the real page, instead of the DDoS-protecting testicle.
Say no to restricting internet by using open API
Show HN: Nitric – Node.js framework for building portable cloud apps
The problem with this is it is full of utterly debunked nonsense that Ebright knows full well has been addressed.

It's Brandolini's law [0] in action, and no matter how many times virologists rebut these positions the same old tripe gets wheeled out again, and again, and again. If you ignore rebuttals and just repeat yourself + get 20k likes on twitter how many people are going to see a rebuttal like the excellent one from Dr Rasmussen here - https://twitter.com/angie_rasmussen/status/15669764417361715...

The recent science papers which have been closely peer reviewed and none of these guys have been able to rebut (but oh have they tried, since they are VERY inconvenient for lab leak), instead it's the same tired nit-picking and misunderstanding.

For a break down of the science papers read https://twitter.com/angie_rasmussen/status/15519378265808240... which goes into painful levels of detail to explain what the paper discovered and why it's so compelling and why it all but rules out lab leak.

It's sad to me that somebody with a name and position and blue tick abuses that position to spread what amounts to misinformation, but that's where we are in society I guess.

If you want a test, see how these lab leak advocates have reacted to any paper or data that pushes back against their claim. It has been a mad scramble to attack, nit-pick, dismiss and smear (Ebright especially likes confict-of-interest implications). These are not honest people.

[0]:https://en.wikipedia.org/wiki/Brandolini%27s_law
Here in North Texas, mostly in affluent Plano (now corp HQ US for Toyota among others), the late 90s was awash in high quality Mexican heroin. It made it to the affluent areas where the hooked became dealers to support their own habits. Like you say, a story as old as time…A new way humans can get their kicks but end up ass over teakettle…the story follows.

Also, many of the kids had originally been swiping pills from their parents when first experimenting, found feeling high is awesome and withdrawls are not…pills turned snorting turned to shooting.

I specifically remember 9 teenager OD deaths in like a 3-6 month period that made the news, and probably a couple more through social circles of friends and their older siblings. It really hit home for me about the reality of drug economics Christmas Eve morning of 98 or 99 when our entire street up and down the block were witnessing a family’s oldest son of 2 being taken out in a body bag after overdosing at a party the night before and his friends “dropped him off at home he seemed okay”

Yeah, stuff like that will stick and in my case always say the kids get the money from somewhere, and if they don’t have any, they find something they can hustle to those who do have it. Repeat, rinse.
I am not a fan of Zuck but this is crazy signal for everybody going to make a business involving in handling some personal data. I have seen some scenarios that may happen to those actors who are that much of kids-safety/anti-terrorist fondlers.
CoffeeScript – AutoHotkey Compiler
Basic training filters out the stupid: those who cannot understand that there is a proper time and place to be a talkative smartass. Basic training is about learning, not showing off. Anyone who cannot check thier pride, check thier attitude, for a few weeks will not make a good soldier.
"Through Google Postmaster Tools and Microsoft SNDS, you can freely see a day-by-day evaluation of the reputation of the messages these major providers see from you."

Totally useless in the real world.

Smaller domains probably wont have a score as they dont do volume and even if you have a perfect score - these two specifically will just dump your email into the bin with no warning or feedback at all.
Along the same line of thinking, the fact that although the lab leak hypothesis is very reasonable, it was branded as a conspiracy theory and a big effort was made to suppress it, makes it seem more likely.

Also the principle of adverse interference. China destroyed/made unavailable a lot of documents. It is reasonable to infer that the destroyed documents had evidence of a lab leak.
You'll find some evidence pointing at a high possibility for a lab leak at this link: https://twitter.com/R_H_Ebright/status/1566826229931524096 ;)

Side note: Not looking at evidence doesn't make it not exist, nor does declaring that there is "zero evidence".
Your opinion is just bizarre, as if editing chat messages to improve clarity is somehow a negative. Chat is not email. The point of chat is that it's fast and often a half-baked message is good enough.
The Polite Form ます (Masu) in Japanese
I'd love to have prohibition of using just any old key in a join, but Snowflake, and Redshift to a lesser extent, just don't care.

In fact, Snowflake really really doesn't care to the extent that I've seen non unique primary keys in tables.
> Because if they’re not resolved yet, there’s no client suffering from them in short term.

This seems like an unrealistically perfect product.

> If they suffer from such a bug, someone will raise it again.

And this seems terrible for everyone involved. Terrible for the customers who have to nag, stay "on the ball" and make sure bugs get re-filed, and terrible for the developers who have to figure out which old (fake-closed) bug reports actually match the new filings.
New EU office in San Francisco opens in the Irish consulate
I fully agree with your point, but I think the example is a bit aggressive towards OP. I'm sure you got a good chuckle of out of this, but I think it would have been better to give an example that did not seem like an attack. For example the earth being flat, the moon landing being fake or something like that.
My Barcode Debugging Story
Ah, misunderstanding, perhaps. Synology offers global access, search, browsing, a dedicated app, and face detection. I just set up backup through the file manager.
YouTube algorithm pushed election fraud claims to Trump supporters, report says
Right, but "not doing what they should do" is different to "can't do what they want to do".

This is the problem with all the anti-NHS posts on HN -- none of them have a clue how the NHS works, so they always miss the point.

The point here is "Why doesn't the 'chain of accountability' work?" Where were the governors, where were the NEDs, where was the FTSU guardian, where was the assurance about complaints? The point is absolutely not "state run organisations can't fire workers".

It's genuinely baffling that there are so many things actually wrong with the NHS that could be spoken about, but anti-NHS posters are unaware of those things and invent stuff instead.
Apparently also heavily used in their own projects [1] like [2]

More details in the docs [3]:

> You can think of Coffee-AHK as a dialect of CoffeeScript. It is compatible with the existing AHK code and adds new features to AHK such as anonymous functions, destructuring assignment and even package management support. It is also a subset of CoffeeScript, which compiles into JavaScript code correctly for execution on all platforms.

Fascinating and exotic mix. I've never seen anything like it before.

[1] https://github.com/phonowell/coffee-ahk/network/dependents?p...
[2] https://github.com/phonowell/genshin-impact-script/blob/mast...
[3] https://github.com/phonowell/coffee-ahk/blob/master/doc.md
I doubt many of the companies would take the money - almost all are cashflow positive and really want exposure
The “anti gravity” was just zero altitude momentum all along. Just use that big washing machine thing. Can’t stick humans in it though :-(
A study on motivated reasoning, don’t trust anyone that sure of something this controversial.
> If original masters are used for too many high volume pressings, they wear out (physically)

E.g. when Dylan's famous 60's electric trilogy first came out on CD, at least two of those albums had to be remixed not for whatever possible artistical and/or money-making reasons [1] that commonly cause remixes to be done these days, but simply because the original master tapes (including the safety copies) had worn out through continuous re-pressings of the original vinyl albums.

[1] Though of course the switch to CD in itself was, while also undeniably a definitive technological upgrade, in some ways also a nice way of making people buy the albums again even if they already owned them in some other storage format.
> - Improves morale

I'd buy this if the bug was actually gone. But it's not! Closing a bug report doesn't make the bug go away!

> - Focuses the team

A decent bug tracker should have priority levels for various bugs, surely.

> - Makes the task more approachable

I don't understand. Can you elaborate?

> The important ones will probably bubble up again in due time.

This seems like a terrible waste of everyone's time.
You are right, is not really relevant here. Fair point
https://glouwa.github.io/d3-hypertree/
Okay, but how do you propose the victims of Kiwifarms protect themselves from being kicked off the internet?

And remember we’re not talking about their physical ability to connect to the internet (after all, no one has deprived Kiwifarms of that), we’re talking about their ability to access their audience and use their current identity.
100% my complaint
>> a role within that team which I would be absolutely ideal for

is the dual of that sentence true: is the position ideal for you?
Is it any different from other farmed fish? And what is the danger here?
As with K&R's C, K-R's grieving model will likely prove a resilient beast.
Green-Lighting Torture in Israel