skysight-inc/HackerNews huggingface dataset:
I heavily disagree with this article as well. The author comes across as someone who was not in the war room of any large or security-concious company trying to determine whether they were vulnerable to Log4Shell. Anything is a significant step forward from what we have now, which is nothing.

The fact that package managers aren't deterministic is an even stronger argument for SBOMs, not against.

I suspect the confusion is that they think SBOMs are disconnected from the actual artifacts that get deployed. They shouldn't be. In most circumstances, even if you arent deploying to "the cloud", you should be following basic "12 Factor App" practices and building your artifact once. As you mentioned, deploying the same artifact to your production and staging environments not only simplifies deployment, but also makes your SBOM accurate.

There is a whole other discussion about software packaging best practices. Saying "SBOMs are bad because packaging is bad" is like saying airbags are premature because we need to fix the brakes first.
You might be surprised to learn that for every dev working “few hours a day” or barely doing anything at all, there is another engineer doing all their work for them - usually in a constant state of fending off burnout due to having to do other peoples’ work in addition to their own.
How to write CommonJS exports that can be name-imported from ESM
Well, yes, but what else can we do? Certainly we shouldn't give out Nobel prizes on the number of like buttons clicked on TikTok, but at some point the most influential science is the science that influences the most people. Sure, it's possible that someone has written a great paper that will be super influential in three or four hundred years, but we have no way to measure or accurately predict that. So we're stuck with the citation counts and the votes for best paper at the conferences. It's all we've got.
What are some of the alternatives you've been using, near the same price point and capability?
I've experienced that at times, but it was because my router was defective on certain settings. You're not getting blown out by a microwave on 5GHz so there's no reason to have a problem like that except things being broken.
I would encourage you to listen to the podcast, because he definitely does reflect on this, but it wasn’t the focus of my interview, because this was focused on ways in which burned out tech workers try to find meaning in their life, not an analysis of low paid jobs.
When it's -25C outside the wires heating up isn't really an issue, it's more of a bonus feature :D

But yea, the cabling needs to be checked by an actual electrician and they'll determine how many cars can be charged in the ye olde block heater system without melting any wires or tripping fuses.

The 1980's stuff can usually handle 8A continuous loads. They changed the standard some time in the mid 90s, those can handle multiple cars at 10-16A continuous depending on the main fuse.

Anything above that and you'll need to overhaul the whole field and people usually go for Level 2 capable cabling if they need to break ground for cabling anyway.
Absolute tautology corrupts absolutely.
I work in FAANG and enjoy Costco. Sometimes in the food court I day-dream of working there. You know what you are doing, you use your body, you go home and don't think about it.

I told my friend. He thought it sounded a lot like larping.
As a student, I did a tour of ASML. One of the coolest things was one of the tour guides bragging how they would inspect the prospective location for a new plant and deny sale if they didn't like it.

Why? Because their machines are incredibly sensitive... and equally expensive. And your customers get angry if the machine doesn't work reliably - and rightly so.

I don't know if they do that still, and it likely was somewhat hyperbole, but the core of it is actually correct: the machine is indeed that sensitive, and is indeed that expensive. Every second of lost operation is expensive, and creating a fab around one of them is not quite as straightforward as just pouring some concrete somewhere and adding walls and a roof.
I enjoyed reading this, but what a strange article that's projecting a lot onto McCartney. Every anecdote has some plausible, other reason for these situations, but the article seems insistent on putting McCartney's memory on a pedestal. Paul himself never acknowledges these anecdotes are due to memory, and he's never mentioned his memory is particularly noteworthy. If I got anything out of this article, it's the mystique of celebrity when they don't answer your every question.
yeah I always found the public, but especially tech's industries interest in Amazon's warehouse conditions somewhat dubious.

Where I used to live there were tons of people who worked at normal warehouses and switched over to Amazon b/c the pay was better and things were basically the same.

Amazon gets tons of, at least somewhat deserved, heat for what they do, but compared to the truly horrific things done by something like the meatpacking industry? idk if the amount of shit they get is equal to the actual on the ground conditions.

Working for a mom and pop manual labor gig generally sucks wayyyy more than a big corporate one. (Lower pay, shittier if any benefits, longer hours, much more nepotism, no recourse for issues etc.)

EDIT:
for context on the meatpacking thing.

Meatpackers will illegally import immigrants, pay them much cheaper under the table and if there's an inkling of dissent get ice to round them up and deport them. e.g.
https://www.theguardian.com/environment/2018/jun/29/ohio-ice...

Also meatpacking is basically a monopoly, that the feds are trying to fight.

https://missouriindependent.com/briefs/joe-biden-debuts-1-bi....
> And once you're scanning files with one flag set, nothing technologically prevents the scanning of files without that flag being set.

You need to read up on how the system worked, because they picked a design that made absolutely no sense if they wanted to do that. They’d have to redesign it to work in a different way if they wanted to do that.
Yeah, from Project Loom (no need for quotes) would be better, but even the current usage has become colloquial and is okay. :)
How to Run 4 Types of 1:1 Meetings
delay is mentioned to be a special operator, too.
Wrong, if that were true the cheapest console would always be dominant. And the market easily disrupted.

Sometimes that’s the case, sometimes it isn’t.

So clearly average gamers know enough about companies to factor in reputation into the mix. Otherwise those $50 emulators would outsell everything else on the planet.
I solved this by simply getting hobbies that involve manual labor. You get the physical exertion and the ability to see the results of the work of your hands--without the drudgery of a job and the pressure of having your livelihood depend on not wrecking your body. If you're not feeling up to it today, just don't go out to the garage. Need extra zen time to forget your JIRA queue? Spend a few extra hours hobbying.

Started with auto mechanics, learned basic maintenance, moved on to minor, then major auto repairs. Then tried woodworking, built a few pieces of furniture for the house, then moved on to sheet metal. Finally ended up building a two-seat airplane. Physical hobbies are both satisfying AND low-pressure. Plus, you shouldn't have to quit your tech job to get a hobby.
check with a lawyer, but I suspect the answer is no. Visa rules tend to be very restrictive in the US and as noted on this thread, those restrictions usually say you can only work for your sponsoring employer and no third party. I don't know if it's possible to amend a L-1 visa so you're working part-time at two different companies (FAANG + your startup). Perhaps that's not something you want to do in any case.

There is a question of risk allocation: if you hold unvested equity, you probably aren't paying taxes on it until it vests or you exercise it (depending on the equity), so would USCIS (who issues visas) know if you are working part-time if there's no cash component? I don't know. But the risk is really high for you and the startup bc if the government does find out that you're violating your visa rules, they can deport you (potentially permanently) and also subject the startup to consequences.

If you are really excited about the startup, it's probably not a bad idea to check with an immigration lawyer about your options (this is something that they could probably answer quickly in a free consult).
My last boss was a 10x developer. Fantastically smart guy, socially awkward but nice, really looked out for his team but an absolute nightmare to work with technically.

The majority of the team couldn't understand his code. We'd have newly hired senior developers just leave rather than deal with it.

He'd rolled his own code generator for our data model that did everything from model generation to the web controllers.

The result was that while he could pump out work quickly, what would've otherwise been a quick fix for a graduate developer now required a deep understanding of a complex system.

This had the effect of turning what would have otherwise been a team of 1-2x developers into a team of 0.2-0.5x devs with a retention problem.
Getting Ready to Move Upmarket
Genuine question, why does it look bad? I don't think this would be a problem at all where I live (Australia). Worst case you could just leave it off your resume.
Didn't realize you guys are in SA. Hi from Stellenbosch. Cool to see more South Africans here and in the startup community in general.
Microacquire is for SaaS an projects having 500+ MRR.

It's for dead and pre-revenue side projects
Great, now invent a vacuum working the other way around
Why do you consider Telegram heavy, if it takes 400MB of memory? Isn't memory there to be used? I just checked my telegram client, and it takes up 600MB of memory, but the system has almost 4GB of free memory. Why should telegram limit itself to using only, lets say, 50MB of memory, if there is much more available?

I just started telegram inside a Windows 10 VM, to check if Telegram actually needs that much memory. In my VM with 1024MB of RAM, the Telegram client uses only around 45MB. If the system gets 2048MB of RAM, Telegram will use around 160MB, if available. The client still works fine. Probably a lot slower, but it works fine.

I think your comment is misguided. The Telegram client is not heavy-weight. It just uses the ressources you machine provides it, giving you better performance.
Russian forces are a paper tiger (now).

Also we're soon going to be a part of NATO along with Finland. The Baltic will be a NATO lake.
This confused me too. The rationale seems to be explained in more detail in https://www.spinics.net/lists/git/msg421817.html
It's the 'serif', I'm on Ubuntu 22.04 with neither Georgia nor Times installed. Here's a screenshot at 100% zoom:

https://i.imgur.com/xdMq8SJ.png

and here's a screenshot at 150%:

https://i.imgur.com/hKcCBo7.png

I do see something funny going on with the ligature for 'ff' in "different vendors" and "official retailers, " especially at 100%.

Running `fc-match serif` says that the fault being picked up is DejaVu Serif [0]

[0] https://dejavu-fonts.github.io/Samples.html
Millon's subtypes of schizoid don't at all resemble ADHD. Millon's subtypes are:

* aloof

* lethargic

* barren (intellectually)

* flat

* complacent or lifeless

None of these reflect ADHD, which is a dysregulation disorder resulting in the inability to form socially expected task-reward feedback loops. This means forgetting to do small chores once they leave one's sight even under the strong desire to do those chores, having strong emotional responses, needing higher levels of stimulation, and strong sense of impulse. None of ADHD has anything to do with whether or not one is displaying apathy or lack of interest in engagement broadly.

SPD is not a disorder of obsession. You might be thinking of the related-but-very-different Schizotypal, whose strange beliefs, sensory disruptions, and emotional impropriety I can see as potentially looking like ADHD.
> What stops it from analyzing other files on your phone? A policy block.

The phone would be literally incapable of determining if there were any matches. Please read up on how it was designed to work.
Guy who doesn’t need to work slums it with the poors to self actualize. Fuck this guy.
If you're just grabbing a coffee and protein bar, of course it doesn't make sense.

But I said "Costco" on purpose, it's not a place you just drop in real quick and grab one thing. You're gonna be there for a while. Target is another good reference for US people. Maybe even Ikea.

And yes, it's kilowatts. They're not mobile phone chargers =) The Hyundai Ioniq 5 charges at 350kW, 800 volts.
Skydio | San Mateo, CA | Remote Possible | Python / C++ / Robotics

Skydio is the leading U.S. drone manufacturer and world leader in autonomous flight. We leverage breakthrough AI to create the world’s most intelligent flying machines to make the world more productive, creative, and safe with autonomous drones. Today our products are used for everything from capturing amazing video for consumers, to inspecting infrastructure, bridges, to enabling situational awareness for first responders in critical situations. We’ve raised over $340M and are in a strong cash position to achieve our vision.

We are hiring across multiple teams here at Skydio.

Autonomy- If you’re interested in being a core member of a world-class engineering and research team that is defining the future of a major emerging industry, dive in → http://autonomy.skyd.io/

Software Engineering- Our Software team is working on our cloud platform that allows our customers to manage their fleet of drones from anywhere as well as schedule fully autonomous missions. https://bit.ly/skydio-software-eng

Embedded Software - Our Embedded Software team acts as the brain stem of our autonomous drones, bridging the gap between the algorithms and the sensors/mechanical hardware. http://embedded.skyd.io/

Wireless - Our Wireless team builds a robust wireless network solution, extending the range of our drones and providing high-speed and secured communication.

Open roles: https://skydio.com/careers

I lead the autonomy team and you can reach out directly to { hayk at skydio dot com }.
He's a stranger sharing his experience, people obviously found it to be interesting.

Re-contextualizing into a class struggle style comment, just because he shared his experience, is not very interesting.

All blogging is narcissism if you redefine narcissism to be the most bland shade of the word's meaning.
Judge Dredd's riot foam.
Ha, I finally ordered that book a few days ago, last minute before I’d set off on holiday (I procrastinated ordering it for about 2 months). It should of arrived the day before I left, but unfortunately it didn’t and now I’m on holiday without it. Was looking forward to reading it, but I guess I’ll have to wait a bit longer.
Here's a new relevant post for anyone looking:

"Processing 40 TB of code from ~10M projects with a server and Go for $100 (2019)"

<https://news.ycombinator.com/item?id=33072846>
Location: Berkeley, CA

Remote: Yes

Willing to relocate: Yes

Technologies: Python, Django + DRF, JavaScript, React; some familiarity with C and Java

Résumé: https://bit.ly/3yzSXW7

Email: jacobshandling{at}icloud{dot}com
This is kind of awesome
Putin using nukes is a sign of weakness and he knows it.
I do something similar. I block every account that shows me ads on Twitter and Instagram. I wouldn't say I boycott them but 99% are companies I wouldn't buy anything from in the first place.
Sorry the ML is just a tangent.
It doesn't, but the foundation does make a loss on the zero as far as I remember (remember reading somewhere..) which is why they never lifted the "one per order" restriction. It's very annoying because I give trainings sometimes and it would be nice to give each participant one.
I genuinely miss working in an office because of this, and am looking to return to one soon, but right now it seems that just about every company has a hiring freeze in place for the foreseeable future.

A hybrid 3-4 in office / 1-2 out of office per week seems to be prime for my personal and social values at work.
As fun as things like that are, AFAIK most of those types of PoC exploits are done using SOHO printers. There are two specific cases I am thinking of, one where a pile of extremely confidential data was captured by pulling documents that had been sent to a printer for printing or faxing; in that case it was an insider who was copying docs they shouldn't have access to. In the other case it was a pretty nifty attack where the attacker was able to pivot using credentials taken from a printer to access other systems.

There are also several publicly available tools that can be used to pop printers, and use them for other bad things, but it's not an area I have spent much time in other than from a blue team/IR perspective. Printers, like alot of other hardware, are usually poorly maintained, but at least patching has mostly gotten easier and most infrastructure scanning tools will report vulnerabilities and weaknesses in them now.
"The illusion that we are hampered by lots of choice is a bit illusory."

Artifact of a rewrite? Still, undeniably true!
> If they feel they can deliver ads and protect customer data, they should start an ad business. They owe it to shareholders and to their customers.

Collecting data about people is already an infringement of privacy in itself.

It doesn't matter here if you keep that data out of the hands of yet other people.
Overly taxing and dangerous physical work sucks. Working in a professional kitchen is some of the most fun and (non-monetary) rewarding work I've ever done.
So if a publicly traded company wants to advertise on TV they either have to find a TV station that will run their ad for free or they have to buy a TV station, because of the requirement that no money change hands for the ad?
Paywall-bypass: https://archive.ph/vovsV
> now you're just a feature-flag (or even a bug) away from all content being scanned.

That’s not true. The system didn’t work the way you are assuming. The device had no knowledge of any matches. The “scanning” was a coöperation of client-side and server-side code, each with an extremely limited knowledge of the data involved.
If I'm not mistaken it also shows up in Earth by David Brin.
Also, people who worked through college.
There are exactly zero cars on the road today that won't be 100% full from 0.1% battery in under 24 hours when plugged in to a Level 2 charger.

Depending on the car's internal charger (1 or 3 phase) most charge from "towed to charger" empty to absolutely full in well under 10 hours.

Doing it like that is like trying to calculate how many fuel trucks would a gas station need if all its pumps were being run 24/7/365 at full blast. It'll never ever happen.
Blink Intent to Prototype: CSS Nesting
There's no "T" in "AWK".
pricing? really? I guess for some of the more obscure editors it would be worth it.
Rolling blackouts are separate from Flex Alerts.
> If the code for scanning, flagging me and reporting to authorities is on the device

It’s not. The device has no idea if there are any matches. Everybody is assuming how it works without actually reading how it works.
How is he 10x if no one understands his code? An expert at quick and dirty?
How do you define good therapist? Obviously it’s not straightforward and YMMV, but are there heuristics you use, red flags, green flags etc?

My friend has avoided mental healthcare for her entire life (pathologically stoic) and thinks that she shouldn’t but feels out of her depth.
Ask HN: How/where to find Fermi problems with solutions for IQ experiment?
I want to try an n=1 experiment where I do a random Fermi problem in some time limit, once or twice a day. After several days of this, I'd like to graph my estimation error over time, to see the effect of practice on my performance. I could even try varying certain treatments, like caffeine or chattering background noise, to test their effects on my estimation error, after adjusting for the practice effect.

Some Fermi problems are straightforward to verify - the classic "piano tuners in Chicago" was answered with a phone book. Others can only be verified with another expert's estimate, and the question might be too obscure for an Internet search to yield an instance where an expert had already done the math. I think I need a source of Fermi problems that I know a priori to be verifiable.

* To verify that a question has a solution, I usually have to do a Google search, which exposes me to the answer.

* If I search for a new one each day, I fear I would quickly become biased towards selecting easier questions.

* If, before starting the experiment, I cobble results together across many Google searches that seem likely to be verifiable, I fear I would have more days to dwell on the ones I do later in the experiment, exaggerating the practice effect.

Does anyone have any advice?
As with most less-than-lethal products, it's all fun and games until you hit someone in the face with it.
I have worked at Materialize since 2019. The elevator pitch is that it is a database that lets you maintain the results of queries in memory (and now S3) and have them update in real time so the current result is always available.
Americans are weird.

For pretty much every European a 1000km round trip is something you do on a special vacation. And you stay for a few days on the other end :D Definitely not something you do on a weekend to go see a sports team.

There are some UK football fans who do that, but they're on a bus and can sleep both ways (usually they don't, they get shitfaced)
This sounds nice, but the guy is already rich. That makes it a lot less interesting.
I've had the opposite experience - It was 1:45am
At SJC, and Uber surge pricing for the ride home from the airport was $210.00 (this exceeded the cost of the airfare to fly 3,000 miles).

I was grateful to take a Lyft home for $28.00.
That's what this is
I’m starting to play with differential-dataflow in a new Rust project. On the one hand, it’s cool. On the other, it could use better documentation.

With Materialize the database, it really depends on price/performance whether I could use it (could it be really cheap when idle, like Aurora Serverless?), but two things that would make it easier to use would be the ability to purchase it through AWS Marketplace and to deploy it/use it in my organization’s own AWS account. As an enterprise dev team senior manager I then do not have to go through a vendor approval process or deal with my procurement department, nor do I need to worry about third party data control.
Hence me asking why they're being conflated in the public consciousness.
" He's probably the one person in tech that is directly aware of what it's like to work at a warehouse because he actually did it for real."

I work in tech but previously did overnight stock at Walmart so I guess that's two people.

What's the point of using this kind of hyperbole in your comment unless you wanted to make others hate people in tech?
> "Warning: Your exo-skeleton waste container is full."

> "Warning: You have ran out of your free waste container quota for this shift. If you require a new waste container, it will be deducted from your pay"

> "Alert: High stress levels detected. You are required to report to an AmaZen(TM) Mindfulness Practice Room [0] for 30 minutes after your shift"

[0] https://www.bbc.co.uk/news/technology-57287151
> The controversial thing was the on-device scans would trigger some kind of upload of un-uploaded stuff to Apple for further investigation.

No, a load of people assumed it would do that, but it’s not possible with the proposed scheme because the device had no knowledge of any matches.