skysight-inc/HackerNews huggingface dataset:
I find it shocking that the previous kiosks were allowed to be used when they didn't even compare the person using a passport with the picture on that passport. Does that mean anyone could use anyone else's passport?

In some places around the EU (and UK) there are automatic kiosk that use the NFC chip in your passport to read the picture, and compare that to a live photo they're taking, while also checking for you in various databases. It's secure and fast, and saves on useless manpower.
I've been on both sides, was a developer and then security engineer, now back to dev work. I know there are quite a few very well talented engineers, but there are also quite a lot of mediocre developers, including interns, new grads, or startup folks who are used to cowboy style edits directly in production and no tests. You always want to plan your security controls for the weakest link, for the dumbest person, prepare for the worst case. This is how you have some assurance that your security will work regardless of who is sitting in front of keyboard: teenage intern or gray beard guru.

using your car analogy - car designers created steering wheel, blinkers, and mirrors to increase safety, but you insist that since you are power user - you want to be able to turn left/right by drifting using parking brake. This is obviously safety risk on public roads, and understandable how corporate fleet employer like Greyhound might not allow drifting when driving company bus with passengers.

You are free to drift on your personal equipment though, during non-work hours and without wearing company clothes.

Developers really dont need admin rights, Visual Studio and any other software is updated automatically these days using tools like SCCM. This is not an issue at all. If you need full control over OS - install free VirtualBox, or get a lab VM and do whatever you want inside that isolated VM, but not on the host machine. Because your machine is tied to AD, email, bunch of other corporate stuff - IT cannot risk giving admin rights, so that you can disable all necessary security protections.

Just because you are power user, doesn't mean your colleague in next cubicle is as smart and doesn't click on phish Linkedin emails.

PII is not an issue at all, because of security endpoint agents, network traffic inspection, data loss prevention, and network segmentation, and bunch of other security controls.

Just because you make over 6 figures doesnt make you any better than minimum wage IT support folks, they are following scripts and established procedures very well, most of them do their job well.

I agree that a lot of places have security theatre, because Security engineering is even rare skill than software engineering, it is much harder to find skilled seceng than SDE.

But things like SQL injection, shell command injection, url traversal, and zillion of other attacks - are made possible by software developers, and it becomes then SecEng's problem to protect company against whatever crap they coded and pushed to prod.
ThinkPad’s 30th Anniversary: An Insider’s Perspective
Can’t track what you don’t know about is a constant issue with sales groups lacking proper structure and processes - it should be easier to do it right than to sidestep the resource.
I hear you, the last thing I want to feel is dread when implementing something. But recently my priorities have shifted a lot with regards to using the fancy, the new and the shiny. Sometimes I just want to end the day with getting something done and going home with the feeling of satisfaction and having achieved something tangible. Again, context matters with these things.

And with regards to employee retention, I would rather bet big on benefits (paid time off, parental leave, etc.), reasonable working hours (4 days per week), achievable goals, great communication, democracy and good team cohesion. I have a feeling this works for a lot of people. If a language is the only thing that makes you stay, by all means find a place that truly makes you happy in that regard. All I am saying is that there are a lot more variables to worker satisfaction.
Stop doing lsd :)
> The market could only sustain $150,000 a year salaries for grads fresh out of college for so long before someone somewhere along the way ran out of money.

It seems a bit arbirtrary to pick high salaries as the reason for it. And to not blame spending billions on unprofitable projects like the metaverse, or having their profits affected by Apple's restrictions on tracking, or the steady decline in user experience. or the general image of the company being affected by a long list of scandals... <<< I would blame these factors before I point at graduates who earn above the market average.
I fully support this behavior, however from what I read about Australias wiretap laws, they can't check the source number without a warrant :|
This is not like medical triage where some people will just recover on their own... there are vanishingly few customers who are going to buy without a focused sales effort. Your time is best spent on those most likely to convert because even "most likely to convert" in B2B sales is not someone coming to your office and pounding your desk and saying TELL ME WHAT I NEED TO DO FOR YOU TO LET ME BUY THIS
Illegal Tattoos: AACS Encryption Key
AI wouldn't steal your job. I guess your clients require specific taks, nothing that can be precisely done by AI. Sure, it can help to speed up creative process, but if AI generated images/video is enough for your clients, than nothing new and innovative is made.
Representing means what you think
The last time I had a job where I only had to learn “the language” to be effective was 1999 programming in C and FORTRAN on VAX and Stratus mainframes. By 2000, “knowing C or C++” didn’t do any good without knowing MFC, COM, etc.

What good is a language in 2022 without a complete ecosystem of frameworks for most jobs?
Still no advert.
I wish there will be Wifi chipsets with Libre / Open firmware.
Comment under the article:

In particular, the geometry of the lottery tickets seems important. It is plausible that 55
numbers are set up in a 7 x 8 matrix pattern, with one wildcard (to produce 56 objects). Imagine
that it is done as such:

*, 1, 2, .. , 7
8, 9, 10, .., 15
16, 17, 18, … , 23
24, 25, 26, 27…, 31
..

then multiples of 9 are the main diagonal. That would explain frequency in an easy way.
Not until 2,500 at current energy growth rates.
I wouldn't call this over-engineering. It's a reasonable solution to an actual problem.
Podcast.ai E01:Joe Rogan Interviews Steve Jobs
AI generated podcast.
The future of content creation is generated! in this podcast the voices were generated using a Speech Synthesis LLM finetuned with samples of Joe Rogan and Steve Jobs speech, The content was generated from a GPT3 finetuned with Steve Job's biography, and the artwork was generated using Stable Diffusion.
Rivers flow, when it is not raining.

The beginning.
Not sure if you are joking but that is what it means
Yes, as a general rule the government decides when it's ok to forbid you from doing something. If the US government wants, it can make it a crime to train/use these models. Banning the training part is pretty much game over for this industry.

I personally hope it happens as soon as possible. Intellectual property theft (without which those models don't exists) shouldn't be allowed.
> concept for the 787

Such designs come up every once in a while in civil aviation - but then disappear, mostly because they would require new (expensive) airport infrastructure.

Just remember that when the A380 came out, every major airport that was a viable A380 destination started increasing their landing strip length, assuring the taxiways could handle the extra weight, worked on their baggage handling and check-in capacity and created gates that had more boarding bridges.

Now imagine what basically triangular aircraft would mean for that infrastructure.
I've been photographed and fingerprinted in both Bulgaria and France when getting an ID card and passport (i don't know which one has which biometric, probably both have the same information).
In 1990 IBM donated a 9370 computer to our university. The default code page for German EBCDIC did not support square brackets.

I don't remember whether trigraphs were not supported by the compiler at the time or whether we just wanted to avoid completely unreadable code. Not experienced in VM/370 administration we spent weeks to modify the system to use some international EBCDIC codepage.

The system never saw much use, everybody preferred Unix workstations where programming in C was a natural thing.
Sounds wrong, that would essentially be saying one should play the cheapest level of all lotteries.
https://archive.ph/HC7L9
All of these little differences are exploited to become a tsunami.

Trump went to bed on election night assured that he had won.

I was no supporter of Trump, but I regret his passing in what has come.

We need accurate and transparent elections, full stop.

'The U.S. Supreme Court said in 2008 in Crawford v. Marion County Election Board, “flagrant examples of such fraud … have been documented throughout this Nation's history by respected historians and journalists … [that] demonstrate that not only is the risk of voter fraud real but that it could affect the outcome of a close election.”'
Even esoteric languages have a relative complete ecosystem of frameworks. I use Haskell in my day job and I never had issues finding a library.
I'm not going to be using this cable, just for Google to cancel it at some point in the near future.
Apple’s use of Swift and SwiftUI in iOS 16
I agree that it's bubble and bursted several times. The key part of the rescue though is bringing in new money with another level of investors.

The current level seems to be pitched at "everyone". After that there's not much place to go. There are some territories currently excluded and they may come into the fold, but probably won't.

The root problem is that it's utility is limited, and as yet has not found a way to grow that utility in proportion to its overall growth.

By contrast a stock like say apple seems (and may be) bonkers, but apple has shown consistent utility growth. They improve sales by appealing to more market. People by an iPhone to use it, not to keep it and sell it for more.

Of course crypto may not crash. Red flags don't mean certain collapse. They are, after all, just red flags.
Talk to rich people and convince them to invest in the space instead of buying bunkers in New Zealand.
If he were one of 10,000 then he could be 50x more responsible than the next, and still not be "the banker who caused the 1929 stock crash."

BTW, I stuck that phrase into Google Scholar and found https://www.cambridge.org/core/journals/business-history-rev...

> Extremely successful both as an investment and as a commercial banker, Charles E. Mitchell was identified by contemporaries as the epitome of the unscrupulous “money changers” whose speculative dealings they felt played a major role in the Crash of 1929 and the ensuing economic collapse. This portrayal has been echoed and elaborated by historians and commentators down to the present day. In this article Dr. Huertas and Dr. Silverman demonstrate that Mitchell's activities, while sometimes ill-advised, were motivated by the economic “good sense” of the day and were not attributable to either rampant immorality or ungoverned greed. At the same time, they direct the attention of economic historians to the monetary policies of the Federal Reserve system in the 1920s and 1930s—in which Mitchell also played a role—and suggest that a more potent source of the Great Depression lies therein.
If you own land you own a piece of the planet. How much is permanent ownership over a given plot of land worth? Millions? Billions? Trillions? Infinite?

Why would any sane person even run a business if the government pays massive subsidies (public services) to make your land more valuable? Just buy more land.
I should add for clarification that even if they spoke to the persons manager, they would be obligated to go to HR regardless. Both routes lead to HR. Also I am not a lawyer. Review the laws in your state or let HR sort it out. Bring witnesses.
For sure, but let’s face it… we’re getting more surveillance and bossware at work, not less unfortunately.
We have been asked a few times not to post SubscriberLinks to hackernews, lwn submissions tend to make their way into the public anyway, with a 2 week delay for non-subscribers.

Continuing to post these articles has some potential for financial harm to the project and may prevent such articles being written in future.
Lua shines at precisely two things. Being well embeddable and glueing libraries together thanks to that feature.

This makes it one of the languages of choice for auxiliary scripting a big system, like a game or an application. (The other common choice is Python, and nowadays also JavaScript.)

Anything else, it is relatively awkward at.
A balanced budget doesn't matter?
It seems that bot scalpers are considered to public enemy now. Perhaps they piggyback on the situation.
Maybe it’s like the nuance in music - knowing the notes not to play. I think the art is in weighing the variables as a human because they can change also based on competition in the room. Having a career ongoing in sales support I’ve seen first hand how erratic the decision trees can be for private or public organizations. While the general setup is similar “do business with X with Y” the ingredients can differ widely to get to the sale. ML might tell you to send a holiday gift but I bet the human has a better idea of what kind of gift to send than ML.
It's never going to gather because nobody wants their cheating methods to become useless. Most of our elected representation got there by cheating. They can resist this political force, by making sure to cheat to prevent honest representation.
For a company with such a competitive moat in global internet bandwidth, i often wonder why they simply don't undercut AWS and Azure on their egress fees and thus cloud bills?

Free unlimited egress would completely change cloud economics.

It's going to happen anyway, either wait to be disrupted by the likes of Cloudflare or do it now and disrupt the industry.
True on the outset but you can partially control for it by e.g. implementing Future or Stream from the async runtime and have the implementor interact with the external resources. Then you can reshape unexpected or erroneous external state into Rust async errors, do retries, timeouts and whatnot.

I tried it, it helped. Doesn't solve everything for sure but I'll take any entropy decrease.
Then Rick ought to release the video of his boss fucking that zebra!
> I would rather bet big on benefits (paid time off, parental leave, etc.), reasonable working hours (4 days per week), achievable goals, great communication, democracy and good team cohesion

Those are important factors also. But I would prefer to work 5 days per week and enjoy my work rather than working 4 days and not enjoying it because the PL sucks. Just my 2 cents.
Frankly, it's because copyright has been so draconian, that I think this the rise of AI is so good.

Finally people will get culture back. We won't have to appeal to corporate giants to have access to movies, images and music.
> Because GPT-3 has trained on so much spam, it knows what spam looks like. It just needs a couple of examples, and off it goes.

it's seen so much spam it only needs a few examples of spam to work?
> than nothing new and innovative is made.

But will people notice?
SEEKING CO-FOUNDER | Decentralized storage| India (open to expand) | Pre-Seed

Looking for a co-founder to build a low-cost photo storage service as an alternative to google photos/apple cloud. Over time leverage the data to enable incomes to people using the services by enabling them to sell data to LLM-AI model makers.
To the HN crowd... This is the risk of any kind of token that has no expiration date.

If whatever security measures you have in place ever get broken (watermarks, holograms, digital signatures, etc), then you have a big problem.

And no security feature available today will be secure forever.

So your company or government should never issue digital or real tokens that last forever.
Thanks, your explanation makes it a lot more clear than the thread on GitHub.

Is there something we can do on our machines to quickly check if OpenSSL is setup ok so we don’t end up in the state you described where we use the old version?
They can use it to power 1000 homes.
The test is about whether such an evacuation is theoretically possible, not if it is realistic under any conceivable circumstance (half the plane gone, blocked exits, plane resting at an incline, smoke and/or fire and/or water in the cabin...).

If the happy-path evacuation isn't possible to begin with, e.g. for design reasons, the more complicated realistic ones will be negatively affected as well.
Cancelling this project in 5 years is going to be a b*tch
I just left a job two years ago that literally paid $100K less than I make now. I am a lot more engaged now…

Not bragging, it’s about what a mid level developer makes at most of the large tech companies.

I definitely couldn’t have afforded my current adventure at my old job nor could I have afforded to retire my wife.
Or is it smarter than all of us and detecting some link between pulmonary hypertension and hemorrhoids.
Turning all UB into IB would be better so a compiler can provide --overflow=crash or --overflow=wrap.
It means the defense department or its vendors are using Kubernetes, which they are. That should keep them up at night.
Even in non-recourse states, walking away from your mortgage will decimate your credit score and preclude you from getting a mortgage on a cheaper property in practice, even if theoretically it pencils out on paper.
Hiring graduates at $200k is a major part of where the money goes when you’re spending billions on unprofitable software projects.
Whether it's useful in human languages is irrelevant. It's a matter of supporting the entirety of a specified domain. You can't use NUL to mean something special if you purportedly support "UTF-8 data" because some downstream process (not necessarily an end user) might take you at your word and use NUL to represent something significant to them. Even with the fair assumption that no end user will ever use NUL to mean anything, only the highest layer of the stack can make NUL a reserved character. Better to just support the whole of UTF-8 and leave the sinning to downstream.
This is such a cool idea and execution. I also like the DIY approach to patching MPC BE yourself, which shows how far OSS can take you.

I wonder, when applying a linear transformation like in the shader described, will the total available color space decrease? Simply put, if a one-dimensional color value on the arbitrary scale between 1 and 100 needs to be decreased by 20 for correction, the resulting maximum will be 80. Does that mean the total available color values will be less?
I think the reasonable solution is: Buy a new TV.
We're not talking about a jumbotron display here. A cheap new TV with proper color is likely very inexpensive.
Geomotion Australia | Mid to Senior Software Developer | Australia-wide but remote

Geomotion Australia is a fast growing business working in the civil, resources and energy sectors. We are a leading provider of geotechnical and structural monitoring instrumentation and services across Australia.

Our projects include many of Australia's largest civil and mining construction projects. The instrumentation data is hosted on our in-house developed software; An integrated online software package designed to streamline critical data management for construction projects of all sizes. Find out more at https://www.geomotion.com.au.

The position is for at least one mid to senior level software developer to assist with the development and maintenance of an in-house customer-facing application, using a modern and interesting stack - Python/Django/Javascript/Vue/Tailwind/Postgres/AWS. You will be working with a product manager and tech lead to scope out, implement, test and deploy code to deliver functionality necessary for the business operations

What's on offer:

- A salary range of $110k-$140k + super. This is negotiable and dependent on experience.

- Negotiable flexible working hours or shorter work week.

- An interesting problem space working on an application that needs to
scale.

- Short hiring process because we respect your time.

You'll be joining my team so if you have any questions or would like to apply, please feel free to email me at alaa@datatheoremlabs.com. Make sure you mention that you're an HN'er.
In theoretical microeconomics people's marginal utility per unit of effort is so low at some point that the marginal cost of additional effort exceeds the marginal utility and they stop working.

The expectation that every individual is trying to swallow the economy whole is actually impossible and the only reason why any individual would even consider pursuing that path is because for some reason the marginal cost of effort to obtain more utility is zero. In other words there is infinite demand for freebies but not infinite demand for things that require effort.

There is no such thing as a cost of zero, someone else will have to pay for it. It turns out the government offers a lot of free services that scale up with how much property you own and other people without property have to pay taxes to pay for those services.
I wish jq had a spec.
> Trump went to bed on election night assured that he had won.

This was painfully predictable. More conservative demographics preferred voting in person. Their votes were counted first, electronically. Paper mail in ballots were counted afterwards in many places.

I agree that we need accurate elections, but even if the link above only represents 1% of actual fraud, that still doesn’t amount to enough to change any elections.
Elon isn't calling out the elephant in the room he's entering a very crowded public pool where a fight is taking place while the other children look on and taking a very large smelly shit. The threat of nuclear war is very real however his solution is extremely stupid and only serves to provide some PR for a monster.

If you notice how Musk handled the children stuck in a cave its a familiar pattern. Every time there is a crisis he chokes and says something stupid. He reverts to form.

If we also can't fold to the demand of every insane dictator we also can't do so for every insane dictator with nukes either or they will in short order run the world because there are several to choose from incumbent and incipient. We can only build a future worth having by being willing to stand up and take the risk and call their bluff even at the risk of everything we hold dear.

Men of small courage and lesser souls would deserve the terrible world their children would inherit.
Agree on open. We should also think in terms of simple.

UEFI is a big bloat of closed source security mess.

Secure boot. Just jump to start address of M2.SSD nothing more.
I agree on the section on linear lists. It was really eye opening for me back when I read it the first time. It's remarkable how much useful information there is about such a seemingly simple concept.
Lol, I could have written exactly the same comments you did about Splunk. I'm the one who decided to start using splunk for our company 8 years ago, we're working on migrating away and I will never under any circumstances consider recommending splunk for any future companies I work for.
The Marines created a hacking MOS and a programming MOS in the 2200 specialty I believe.

Link: https://www.marinecorpstimes.com/news/your-marine-corps/2014...
If the only thing that's familiar is Python, then yeah, this approach doesn't scale well.

But mainstream languages also include C++, C#, Go and many others. It's a good thing to have several different tools in your toolbox, but a few tools can cover pretty much any scenario outside of really extreme corner cases (where something like e.g. Prolog might be of use).