skysight-inc/HackerNews huggingface dataset:
The problem with devs is they think all security admins are reductionist. <3

A good security admin will work within the bounds of compliance to make the business work. And any good blocks will be apparent to the user. Trust me, security doesn't enjoy pissing people off, we just accept that it happens sometimes.
I'm in the USA, so my car's anti-theft device is a manual transmission.
> the connection between the Big Lie of Nazism and the Big Lie of our former president is pretty clear

I agree that if the actual location of the truth is disregarded they are similar.

However, in these cases, the truth is on the opposite side of the accusation from each other.

Hitler untruthfully accused Jews of promoting a lie, and hence blaming them for Germany's defeat in WW1 and problems afterwards.

Whereas the former president has truthfully been accused of promoting a lie
that he won the previous election.

When the truth is on the opposite side of the accusation in either case, they are really quite different usages of the phrase.

> I find it difficult to believe that American journalists, an otherwise well-read and historically informed community of people, would conjure the concept without intending it as a reference

I don't think there is any intentional journalistic allusion happening by using the term. "Big" and
"Lie" are such utterly common words by themselves and together in English that people readily understand them in the immediately relevant context. Calling it a "Great Misrepresentation" or something else would be beating around the bush instead of just calling it what it is.
The Java Tutorial (1999)
You can just push using port 443

-> ᛯ ssh -T -p 443 git@ssh.github.com
Warning: Permanently added '[ssh.github.com]:443' (ED25519) to the list of known hosts.
Hi XANi! You've successfully authenticated, but GitHub does not provide shell access.
If the acuteness of a problem was the determining factor with regards to the attention put on it, the news would be completely different. It would currently be 80% climate change 20% nuclear strike modeling strategy or something similar.
Thanks for sharing this. Link to the paper mentioned in the NYT story, "Cormac McCarthy’s Interviews in Tennessee and Kentucky, 1968–1980" (The Cormac McCarthy Journal (2022) 20 (2): 108–135; free access): https://scholarlypublishingcollective.org/psup/cormac-mccart...

To me, Cormac McCarthy has an incredibly good sense of how people actually speak. As a side note, same thing was also said somewhere about Quentin Tarantino -- as one of the most relevant reasons why his movies are "cult".
AirDrop? https://pypi.org/project/opendrop/

Or Wormhole: https://wormhole.app/
Tetrazine/DBCO is also pretty popular IIRC.
> In short it’s all about control, privacy, and security, in that order.

I am going to strongly urge you to consider changing that order and move *security* to the first priority. I have long run my own servers, it is much easier to setup a server with strong security foundation, than to clean up afterwards.

As a beginner, you should stick to a well known and documented Linux server distribution such as Ubuntu Server LTS or Fedora. Only install the programs you need. Do not install a windowing system on it. Do everything for the server from the command line.

Here are a few blog posts I have bookmarked over the years that I think are geared to beginners:

"My First 5 Minutes On A Server; Or, Essential Security for Linux Servers": An quick walk through of how to do basic server security manually [1]. There was a good Hacker News discussion about this article, most of the response suggests using tools to automate these types of security tasks [2], however the short tutorial will teach you a great deal, and automation mostly only makes sense when you are deploying a number of similar servers. I definitely take a more manual hands-on approach to managing my personal servers compared to the ones I professionally deploy.

"How To Secure A Linux Server": An evolving how-to guide for securing a Linux server that, hopefully, also teaches you a little about security and why it matters. [3]

Both Linode[4] and Digital Ocean[5] have created good sets of Tutorials and documentation that are generally trustworthy and kept up-to-date

Good luck and have fun

[1]: https://sollove.com/2013/03/03/my-first-5-minutes-on-a-serve...

[2]: https://news.ycombinator.com/item?id=5316093

[3]: https://github.com/imthenachoman/How-To-Secure-A-Linux-Serve...

[4]: https://www.linode.com/docs/guides/

[5]: https://www.digitalocean.com/community/tutorials
You don't know when the deal will close, it could be weeks but it could also be months. The risk is not knowing how long it will take.

If you feel confident that the deal will close soon you can put your money in now and get a guaranteed 4% return. It's up to your own analysis of the risk/reward situation.
Within a specific context you can coherently ask the question "could I have said that differently to achieve this outcome" but no, you are wrong if you think there are "more correct" ways to speak in general.
You could do it. But it's not a good fit. Workstations are more about customization and personalization. Servers are more about consistency, reproducibility, and reliability.

E.g. you can't restart your desktop while your roommate is watching a Plex movie. Or your VPN stops working because your roommate's cat walked on your keyboard while you were on vacation.
What I find interesting about this case are the implications around using what I would call "cognitive augmentation" devices. I can't help to compare this situation with the revolution that's happening with art and ai.

I suspect the organizers of Chess.com are at the beginning of a cat and mouse game that will produce more sophisticated detection algorithms, which in turn will help develop more sophisticated chess engines.

I bet that for lovers of chess, who want to continue to enjoy their passion, this is a critical problem to figure out.

However, can we expect that in games, sports, arts, humans will continue to compete with each other without any forms of artificial aid? Or should we instead explore now what augmenting human's cognition means for our culture? Starting now might be the only way to creating a framework to ensure success (however we want to define it) in the long run.
Will-Change CSS Property
> We want to avoid structural damage: Lost jobs, bankrupt businesses

Completely incorrect. If the jobs and businesses in question existed only due to speculative excess, they shouldn't exist. Easy money generates what David Graeber would call "Bullshit Jobs", that contribute anywhere from zero to negative real value production.

We want these businesses liquidated and the employees out on the street, to pursue work that actually contributes to society.

The trick is to somehow limit the collateral damage to businesses that do produce real value. I don't think that's a problem that's been solved.
Solid advice, which has gotten me out of more than one right spot.

In general, be polite and out of the way (both on the road and in life), and you’ll avoid most scratches and crashes.

And presuming everyone (else) is probably nuts doesn’t hurt either :)
This is completely besides the matter, but reading "provably" in the abstract is a frank reminder of how terrible English spelling/pronounciation is. I can't imagine I'm the only well-read native English speaker who read this as "prov-ably" on first take. I don't know about most languages, but you just don't get nonsense like this in French, at least.
Is It Worth It?
Those naive people cannot even imagine the worse. FB and IG are not even close to the worst.
Convoy | Seattle, Atlanta, Remote| Full-time | https://https://convoy.com/careers/

Endless capacity, zero waste. Convoy is working to drive efficiency in the freight/logistics space while providing the best products for our customers (shippers and carriers). Join us to help solve incredibly challenging and complex problems.

We are currently hiring for:

- Engineering Managers|
- Software Engineers
- Research Science Managers
- Enterprise Sales Directors
- Principal Product Designer
- IT Director
and more....
Has anyone read about GVT-g support (or something similar that allows attaching the GPU to multiple VMs) is supported by these cards? Last time I checked Nvidia & AMD only support this on their enterprise / datacenter cards and it would be cool if Intel would be more open.
UML is a modeling language, not a "graphical notation", and I want to put emphasis on the model. The model could be represented graphically but the whole point was (or should have been) to capture the model.

Having said that, UML had/has problems:

* People using it as a diagramming tool rather than a modeling tool.

* While many tools exist to create code from the model, there are very few UML tools that can create the model from code or true-up the model from code that had originally been created from the model and then subsequently modified,

* Many UML tools lack the ability to generate diagrams from the model, the model is essentially kept hidden from the user - which is a rather odd state of affairs for a modeling language. By hiding the model you also couldn't use UML to explore a code base.

* Encourages arguments over the mundane. Too many people got bogged down in the "dots and arrows" rather than focusing on the big picture. I suppose some people used that as an argument that they were being "productive."

It's not so much that the idea UML is garbage but rather the tooling typically leaves a lot to be desired. Enterprise Architect is the best I've seen and even it's far from perfect.
Here was our take on the problem written in Go.

https://github.com/Cyphrme/watch

{
"path_to_watch":"example_command_to_execute_on_change.sh",
}
Yeah, I get what you mean. But we've been using it for the last couple of months just the three of us (the team behind it) and we found it valuable. Now of course it would be more useful to me if I could follow a hundred people posting high-quality links instead of just two, but I think the diminishing returns kick in pretty soon.
Unless you live out in the sticks (as I do) ;) Then you're pretty-much stuck with 5Mb/s DSL :P
I like instagram, in the same way that I like drinking. I know it's generally bad for me, but I enjoy it. There is a surprising amount of high quality posts about tech, science, history, music, and probably whatever you are interested in. Many of which would be worthy of the hn front page if they were a short blog instead of a short video.

It is worthwhile if you can avoid the traps of attractive people dancing, casual outrage politics, cute animals, and people doing stupid things.

Edit:
regarding the article adding the new advertisements, I hope they don't mess up some of the reels that are perfectly looped. I recently discovered those and some are incredible. Reminds me of the lions in kenya flash video that looped perfectly.
Reads like ai-generated
At least with inotify, ie, incron, this is just a matter of setting a less stupid watch.

You can ask the kernel to watch for several different specific kinds of fs events, either at the file or directory level.

Detecting when a file is either created, or closed from writing, is no problem at all. Ie, handles the case of writing a file normally, editing a file, and renaming a file into exitence without having opened it for writing (that happened while it had some other name you weren't watching). This would handle unlinking and recreating the same as editing or uploading.

You can watch specifically for the close event only, and even more specifically for close-from-write-mode to detect updates but ignore until the update is done. And at the same time you can also watch for creation, which handles creating a file under some other name and then renaming it into existence under the name you care about without the name you care about ever having a close-from-write event.

That would fire off your script when a filename you were watching was unlinked and re-created instead of edited in-place, and then it's up to your script to handle the case where it's a "new" file that is really just replacing an old file.

I don't even see why that should be any kind of special problem. Are some tools doing something like maintaining ooen file handles or something for every watched file??? That would break by unlink-create, but that would be insane.

Perhaps these wrappers that try to simplify things are as usual just a way to break the thing they are trying to simplify. Just misguided crap.

If the feature is baked into an ide or media server and failing to handle that case, well they don't have to fail to handle that case. The subsystem totally supplies the functionality.

For something random adhoc where you're writing your own incrontab and handler script, it's no problem at all.
“This link might be dangerous - better click on it!”

I’d suspect it’s indexing for search rather than a security protocol - i feel like anybody security minded would have approached this differently
Building in a high safety factor is not a failsafe. A failsafe requires that in the event of failure, the system goes into a safe state.
Which results in that NOTHING works anymore.
File search, email search. Literally nothing will work anymore.
Decision makers at companies need to start calling this behavior out to companies. "Oh, I saw you were #1 on CIOReview's 'Top 10 Solution Providers 2020' list, did you pay for that?"

I cannot fathom how easy it is for these sham "award" companies to make money; it seems every security startup has at least 3 or 4 of them plastered on their home pages. But it begs the question: how did CIOReview and similar companies become so popular (or trusted?) to the point where a feature on their website is _worth_ $3000?
That's only slightly less training that psychiatrists and their ilk.
facts, if there was a regulator some hackernews would be on here complaining about how it's "not hackable" or whatever.
Tsvutils: Utilities for Working with TSV Files
But "allopathic" means the opposite of "like cures like." Hahnemann created what we now call homeopathy and it included the dilution part. Also the like curing like is incidental to cures. It's the tail wagging the dog.
Learning to manage a self hosting environment is a great skill to learn but I would point out there are plenty of people on HN who have these skills but prefer to rely on managed providers.

Even including people who manage infrastructure professionally I would guess that the vast majority of them don't fully self host their own file storage, email, calendar etc.

Obviously you may have your own unique reasons to want to do this but just know that those who know the full extent of what is required to do this safely and resiliently don't feel it's worth the hassle or effort.
Don't reply to me, reply to GP. I think it's a cool project. I was just trying to clarify why it is valid to talk about a Z80 version.
> I have 5 full time jobs, 4 of which are fortune 500 companies.

I wonder at what point Equifax/The Work Number rats him out for having 5 companies report salary data for the same time range.
Unless it provides or simply works within formal verification?
CLEAR | Senior Software Engineers, Engineering Managers, Senior DevOps Engineers, Security Engineers | NYC / Austin / DC | Onsite Hybrid | https://www.clearme.com/

With CLEAR, you are always you. CLEAR's mission is to enable frictionless and safe journeys using your identity. With millions of members and 100+ partners across North America, CLEAR's identity platform connects you to the cards in your wallet and more - transforming the way you live, work and travel. We use your face, eyes and fingerprints to verify you are you, giving you safe and easy access to what you love.

Senior Software Engineer: https://grnh.se/9a14a94d1us

Senior Software Engineer, Backend: https://grnh.se/abb210911us

Senior Engineering Manager: https://grnh.se/bdd33e441us

Engineering Manager, iOS: https://grnh.se/868ea2ec1us

Engineering Manager, Android: https://grnh.se/0e9af3f51us

Engineering Manager, Hardware Integrations: https://grnh.se/91bd872e1us

Senior DevOps Engineer: https://grnh.se/7363391d1us

Security Engineer, IAM: https://grnh.se/75c5ae921us

Senior Security Engineer: https://grnh.se/bc01999f1us
Does anyone want to buy a paperback copy (2022 reprint) of CP/M 3.0 System Guide? :)
I have a few copies (had to get 10 printed to get anything printed), so far only on Polish allegro.pl, not yet eBay
You're complaining about the time Apple managed to stall them. The EU has been very patient with them. Too patient, IMHO

USB B micro was what the manufacturers were deciding amongst themselves (except Apple). The EU would not have created a law if they managed to agree, and some representative industry consortium could then upgrade the standard on their own. Nobody likes how the situation is forced now, including the EU. Apple foolishly fucked over everyone.

Also note that USB 4 had no touble reaching market penetration, as it was backward compatible. A backward compatible connector is still possible. So is multiple charging methods like wireless charging. It's just that a minimum has been enshrined in law.
Voice screening App delivers rapid results for Parkinson’s and severe Covid
Fooling someone into believing that you've done something you haven't is fraud even if you're successful in your trickery.
Yes, good disclaimer. That's what happens when you turn off local scanning.
I would say there is still a pool of non SV engineers that twitter could give a large raise and still be cheaper than its existing employees. Also there are people who like to work for “household names” because of the prestige who haven’t heard about working conditions at Tesla/spaceX.
This is painfully true in every area. I wish documentation writers would focus less on exhaustively documenting every single thing and instead really explain the surprising parts.

Maybe don't even worry about documenting the "height" parameter. I'll figure out if it's in pixels or percent or rems soon enough.

But if you have a parameter called "snefbolian" I really want a paragraph or more explaining that, it isn't sufficient to give the unit.
https://www.merriam-webster.com/dictionary/provably

Edit: Sorry, missed your point on first reading, which perhaps reinforces your point. I read papers like this for a living so the language is unambiguous but I see how it might not be for others, even if English is their first language.
Relax - we'll soon have self-learning debuggers, too.
Taxation uses market mechanisms and thus encourages market solutions. Regulations impose politician-thought solutions directly on market participants.
Does that mean climate change isn't real and we shouldn't enact any policy to deal with it? Just trying to understand what your actual position is.
You think it's trade and not the Russian nukes?
Yeah, they should go the Amazon route and show you ads of things you already bought.
What you shouldn't do, is go bare metal (as in: install linux on some machine and start hosting). Begin with some virtualised solution like Proxmox or some Docker-based platform. This way you can quickly bring up new machines with any OS, and quickly recover mistakes and failures. Yes, steeper learning curve, but anything else will make you miserable as problems would cause long recovery phases.
My Future with Elixir: set-theoretic types
It's at LEAST as useful as climbing Mt. Everest!
As someone with an MA in econ, most of what you've said here is false. While two quarters of negative growth is often used as an informal measure of recession, the NBER definition is the one that has been used in the US for quite some time by economists.

Historically, here in the US we haven't used the Egyptian definition of recession when talking about the US economy, so what you think about their definition is irrelevant.

That isn't to say that we're not currently in a recession, but economists don't know yet, and neither do you.
One could write a solid critique of sprints and how they help or don't, and where time is wasted, but this article is overzealous and comes off as motivated more by anger than reasoning.

If you want a well-reasoned discussion of where the waste is and isn't, I highly recommend Allen Holub's talk #NoEstimates [0].

[0] https://www.youtube.com/watch?v=QVBlnCTu9Ms&t=7s
> The content was clearly libelous and defamatory, which is pretty illegal.

That is incorrect. In the US, the _act_ of libel is illegal and the author of it can get into legal trouble. And a publisher might if they knowingly published false information, which is harder to prove. But the libelous _content_ itself is not illegal and is in fact protected by the First Amendment.
Did Laravel really win? If you use Laravel you will install Symfony components:
https://symfony.com/projects/laravel
https://github.com/laravel/framework/blob/9.x/composer.json
Other thread on this: https://news.ycombinator.com/item?id=33095608

My comment from there:

I'll be interested to see if anyone else can reproduce this. I created a request bin [0], then created a QR code pointing at it, then downloaded that QR code. I'm not sure how often this "image scanning" is supposed to occur but just downloading it didn't cause a hit nor did the 10min I waited, nor did using QuickLook, nor opening it Preview, nor scanning it with my iPhone, the only thing that caused a request was clicking on the detected link in my iPhone camera app.
Obviously if this is a background daemon that runs periodically then my test wouldn't catch it (unless I got "lucky") and for a longer-term test I'd probably want to use something other than request bin. That said request bin says it keeps bins for 48 hours so that might be enough time.

[0] https://requestbin.io/
For me kde connect is great for this and a lot of similar purposes(clipboard sharing, sms, media controls, notifications)
Yep, all the diagrams were created with excalidraw. The exported “source” for the diagrams is stored in the diagrams.excalidraw file in the root of the repository.
I briefly dated a woman from France that regularly took homeopathic “medicine”. It hold her that it didn’t do anything and her counter argument was that it was paid for though the French government health care system so it must be efficacious. I then said that just because some people believe the Moon affects our clouds doesn’t mean that it does; her reply was “everyone knows the Moon brings the rain.”
For those curious like me, NeRFs are Neural Radiance Fields: https://www.matthewtancik.com/nerf
Could possibly replicate this with the framework notebook and it's expansion card standard:

https://frame.work/ca/en/marketplace/expansion-cards
I guess we all regroup here in a week or so then, right?
The fact that you don't desire a more granular spectrum of communication with different people in your life should not prevent you from understanding why many people do want that.
That's a little disappointing, it's not going to carry a gun any time soon. Navigating a drone heavy enough for that is going to be much harder.

It's also probably not going to be shooting artillery anytime soon too, while a robot certainly could.
The ad-driven business model is why social media apps became monsters eventually.

The real change that drove all those billions in ad money was simple: under no circumstances can the user's scroll experience end due to the inventory of scrollable blocks ("content") running out.

The user doesn't know right away that the software will scroll infinitely. Email has an end, your IMs have an end. With social media, you have to tell yourself it's time to stop. Most people still won't do that until they reach a state of boredom.

The machine, having learned that, is tossing away old-fashioned images and text, and is switching to video to go even further to distract you, in hopes of keeping you for a few seconds longer, so you can see relevant advertising about some Wish.com gizmo.