skysight-inc/HackerNews huggingface dataset:
> Leakage of credentials sure has led to quite a few compromises.

No.

As per my post above, they "led to compromise" because lazy syadmins have been too inept to RTFM and make full use of IAM.

I mean, I could post my IAM credentials right here. I've even been lazy and haven't rotated them for 5 years (yes I've already slapped myself on the wrist !).

But they'll be naff all use to you because:

- My credentials are deactivated when I'm not using them.
- The STS policies they are linked to are IP-restricted
- The Role policies they are linked to are also IP-restricted
- The Role policies have minimal necessary privilege
- The Role policies can only be invoked be an assumed role
- The Roles have externalID attribute set using a UUID as value

Thus even if I copy/pasted my credentials right here, you wouldn't even get past step 1 let alone any further.

And that's just a simple example. You can go much more layered and granular than that.

Its not rocket science, its not difficult, its just a case of the old PPPPPP (Prior Planning Prevents P* Poor Performance).
If it is known that most discoveries are made by males it is reasonable to give larger weight to new male-done research, if the only thing that is known about the researchers is their gender and if the reader is not enough of an expert on the subject matter to treat it 100% on its own merit.

I don't see this "bias" as inefficient or counter-productive. It is just an artifact of the way you designed your flawed experiment.

To find any real bias you would have to assure the subjects that the researchers were equally accomplished.
"CROWD: Oooh! He said it again! Oooh!...

OFFICIAL: You're only making it worse for yourself!"
Monty Python
A lot of screen reader users are partially blind, in the process of losing their site, or sharing a screen with someone else. So it’s better to give both experiences at the same time
Not afraid to admit it, that one little phrase at the end took me back to 2019 and the original tweet https://twitter.com/jacobmargolis/status/1095436913173880832 and I cried a little.

And once again I’m reminded of how easily we humans will bond with and anthropomorphise something and so I share the classic IKEA advert. https://youtu.be/jU-cori12KU
Prices go up regardless of increasing wages. This is just an excuse capitalists use to keep wages down.
The rise of AI will impact everyone. But in what way can UX designers use AI to their benefit? And how do we design AI systems?
Mathematics doesn't have double blind peer review unfortunately. It will help in a big number of cases, even if some cases fall off (for example, if you do experiments on a well-known software which only one lab works on, then double blind will have a limited impact.)
The latest one: https://www.youtube.com/watch?v=tmRrT_vhUG8
Yup. Previous generations lived their entire lives blindly believing in commonly held fringe theories.
Ever tried losing weight just counting calories? you feel hungry, miserable and sooner or later every day becomes a cheat day.

With TRE and even more with keto you feel satiated, insulin is way more stable so hunger is manageable. So you prevent overeating with little effort.

It's obvious that gettint into the regime takes effort, my point is that once you start it's easier to follow than a classic ipocaloric diet.
Was quite surprised when I realized that my $500 Apple headphones didn't come with a wire for wired connections.

Anyhow, I went and bought the $35 Apple-branded Lightning to 3.5 mm Audio Cable that specifically mentions "Connect your AirPods Max or Beats Solo Pro headphones to the audio-out port on an airplane, iPhone, iPad, Mac, or other device."

But nothing worked. Apparently this has not been working properly for years. I could try and get them replaced but it seems to be a lottery if

a) Apple lets you replace them

b) You get a pair with firmware that for some reason works
How recent is the corpse
Added to my pinboard.in

(For everyone who thinks this is because Linux has much problems: I had no serious problems with the touchpad in my first 20 years but I hear it is a thing so I expect to see it sooner or later ;-)
The answer is almost certainly going to be based on culture, history, art, religion, and related topics and not something specifically economic.

My suggestion would be to study the history of China and Japan in the 19th and early 20th centuries, especially paying attention to how Japanese elites looked at Western ideas and technologies and thought about how to integrate them or exclude them from Japanese society. Note how their approach was different from that of China. The Kyoto School is a good example in the philosophy world.

If you are up for reading fiction, the Asia series by James Clavell covers the economic history of both China (including Hong Kong) and Japan from the mid-19th century to the 1970s.
Last time i raised the same concern i was accused of 1) colonialism 2) supremacism 3) racism.

I suppose “poor” countries get a free pass because corrupt politicians accept to turn those countries into dumping grounds and we have no right to raise that issue. Even the suggestion that everyone should do their part is censored here on HN. Not by HN but by extremist nationalists from the region.
Shadowbanning is at least not something that is available to normal moderators on reddit. You could set up AutoModerator to remove all posts by a user but they will be visibly removed.

Reddit as a whole does have shadowbans but at least as far as it is public knowledge that functionality is restricted to the admins. Perhaps moderators of large "default" subreddits get special tools though or perhaps they can call up the admins to do it for them.
> It's not really just about (UI/UX) design, to be fair, being able to open in a new tab requires that it's a directly navigable 'page' by URL to begin with.

I'd argue that each individual view in your app should have a routable URL, otherwise sharing links to anything is basically impossible, as is bookmarking certain pages, or even reloading them.

> With SPAs, that's often not true for entire 'pages', never mind modals and views you might not be expected to want in a new tab but do.

Some claim that modals are bad design and I wholeheartedly agree, though for a variety of reasons they still keep showing up across numerous systems. I guess a compromise could be giving the modal open state its own URL so the app would know what to do if the page is refreshed (the modal would still be open), but somehow that doesn't get much attention either.

An especially clever option (for niche cases) would be being able to open a modal in a tab/window of its own, without the surrounding UI, when opened directly through the URL/new tab/new window, but show it inline in the app during normal navigation. Then again, many dislike pop-ups either because that's not really the direction in which web development went, though I can see why in certain sites they could be useful (e.g. CRUD apps with lots of boring tables and element selection). Oh well.
> 1. A single person cannot be diverse or not diverse.

Compare and contrast with people saying "neurodiverse" when they mean "neurodivergent". I think there is general agreement that a single person should be described as "neurodivergent" rather than "neurodiverse". Some people say the wrong word just because the two words are so similar and are happy to be corrected.

On the other hand, if we're talking about other kinds of diversity then I don't think there's a similar pair of terms. "The addition of this gender-divergent person increases the gender-diversity of the team"? I don't think so!
That's one of the reasons I switched to an Ergodox. Now both of my thumbs are responsible for 4 different keys and it works really well
That would not be advisable. If you do end up moving to Debain but start missing features, Linux Mint Debian Edition (LMDE) may be a better fit.

Looking at the way Canonical is operating, as a Linux Mint Cinnamon user, I sure am glad they're building for a "if Ubuntu was ever to disappear" world.

"Its goal is to ensure Linux Mint can continue to deliver the same user experience if Ubuntu was ever to disappear. It allows us to assess how much we depend on Ubuntu and how much work would be involved in such an event. LMDE is also one of our development targets, as such it guarantees the software we develop is compatible outside of Ubuntu."

https://www.linuxmint.com/download_lmde.php
Also related, in the Signpost, Wikipedia's community newspaper:

Special report: "Wikipedia's independence" or "Wikimedia's pile of dosh"?

https://en.wikipedia.org/wiki/Wikipedia:Wikipedia_Signpost/2...

Opinion: The Wikimedia Endowment – a lack of transparency

https://en.wikipedia.org/wiki/Wikipedia:Wikipedia_Signpost/2...
Doesn't it work on the 2G network?
An experiment like OP's would 100% show bias. There weren't multiple researchers, each reader read the exact same paper, but with a different gendered (or non-gendered) name as the author.
I literally wrote a post above saying this.

Allegedly some of the VR desktop environments support app windows although the one which looked most promising is Quest-only.

I find it baffling that MSFT cannot figure out how to give arbitrary apps their own window in WMR and have to be written specifically to do that. Also: How is their virtual desktop app so bad compared to even the free Desktop+ on Steam?
I have read some terrible reviews on KaiOS, UI lags and freezes, shipping broken updates, terrible battery drains. I'm sure there are some devices have good versions of KaiOS, but with this track record it's like winning on lottery. SailfishOS from Jolla seems to be a much better alternative for a non-Android non-iOS device that is practically usable.
Two basic principles will take you far with regards to AWS security:

1. Avoid long lived credentials (access key/secret key pairs) and IAM users whenever possible, and instead have everything assume roles for access to resources in the same as well as other accounts. Temporary credentials from STS are the way to go.

2. Turn on IMDSv2 by default for EC2 instances. v1 is susceptible to SSRF attacks so even if you’re attaching an instance profile to an instance and doing everything else right, you’ve got a problem if somebody finds a weakness in the app running on the instance.

Also heavily recommend checking out Scott Piper’s SCP Best Practices (https://summitroute.com/blog/2020/03/25/aws_scp_best_practic...) that still hold up even if being a few years old at this point.
It's a quite different experience to a Web page, but if you want to play with messing about with music without becoming a musician as such, https://sonic-pi.net/ is absolutely fantastic as you can manipulate samples and sounds using a Ruby-like language. For example, this sort of fiddling: https://youtu.be/DdtcMf9YI7s?t=508
The crash kicked off the GPU liquidations, POS switch sealed the deal.
Horrible bosses: algorithm managers are taking over the office
As others have said, it's not about efficiency. Also, doing a brisk walk does elevate your heart rate (mine goes up to ~100-110 BPM). If your goal is just being healthier, and not necessarily increasing your stamina or building up muscles, than walking is great. It also doesn't fuck with your joints.
Looks like Lisp, ugh ;)

I guess Polish Notation wasn't as uncommon in the 70's as it is today, AFAIK pocket calculators used this too. And once you switch your mind over it feels just natural.
> It is. But you do get unlimited health-care for you and your dependents.

It is a postcode lottery and if you have a more complex problem than a cold, then you still rather want to go private, effectively paying twice.

Many treatments also are only available private - like for chronic pain - forget about getting medical cannabis on NHS.
Why you you think it is an either-or situation? Can't we consider respect towards both?
A bunch of medium-sized chunks are far less likely to make it to ground, and less likely to do as much damage. Still a significantly better outcome.
I cannot see this as annoying enough to force a change for me. For me everything just works with Ubuntu. I have an X1 Carbon Gen 9 and I have had zero issues with it so far.

If I were to change I should somehow be convinced that the other distribution would work as well. I really see it as a direct replacement for Windows or Mac - which for me is a compliment.

Every once in a while I contemplate switching - like when Ubuntu is discussed on HN - but I have yet to see the clear argument in favor of other distributions for desktop usage.
Any time they ask for donations, I donate to archive.org instead.
The point is that, there are no downsides to double-blind peer review, and it is hence possible that with double blind peer review, less well-known people might get more journal articles. This might lead to more diverse research techniques being used since you don't need a big name to publish anymore. And then, in a few years, you might find it hard to guess the groups from techniques, because a single group might have multiple different techniques.
Robot falls asleep while being quizzed by Lords
And why is a long list necessarily bad?
Nowadays with SSDs you no longer hear if a PC is working, especially if its fans are quiet.

Products like the DreamCheeky USB gadgets (looks like they went out of business in 2017 https://web.archive.org/web/20170821050810/http://www.dreamc... ) or the more recent Diwoom Pixel Art gadgets could be used to signal activity. There are probably a lot more solutions to this problem if you have a server sitting on or below your desk ;-)
Yes it can, I've saved tons of pictures... why do you think it can't?
Ask HN: What is the best open source text to speech solution
I've been on the hunt for the best open TTS solution that balances quality of output with performance, for semi-realtime application in a project of mine.

The absolute best project I've found thus far in terms of output is https://github.com/neonbjb/tortoise-tts but it A) requires an enormous amount of GPU horsepower and B) even with that, a single autoregressive sample, whose text input is less than the length of a tweet, takes 5-10 minutes of compute time to produce.

So my question is, what projects have you all come across that strike that balance between good enough quality and fast time to result?
Why is customer support automation a nightmare for engineers?
I'm pretty happy I switched to arch (with brief use of guix system) after the push for snaps. The slowness of snaps, the compatibility issues etc annoyed me sufficiently to switch.

Having had bad experience with snaps I thought all those app packaging options are similarly flawed. So I wasn't very hopeful to try vscodium(vscode minus Microsoft) as a flatpak on guix. However, it run surprisingly well. I still dislike flatpak polluting my list of mount points and running a bunch of services for one app, but at least from the typical user side it responds fast. It is fast to start and the only compatibility issue I encountered is that python scripts run from vscodium(vscode) can't access cuda for some reason.

I loved the idea of a well curated modernised version of Debian that contains recent packages and is stable. Unfortunately canonical made too many mistakes in its execution of the idea.
Can't browsers automate this by duplicating the current tab and then clicking the link?
No layoff is fun. But props to the company for the 7-year option extension and removal of the one year cliff.
> throwing a given problematic number away would already solve so much.

The search space of valid numbers is very small compared to email. A throw away number is surely a number that has already been trashed by dozens of users before you. It’d be useless unless you can make everyone forget it between users.

My personal cell number is 20 years old and gets almost no spam besides a rare robo call. Any throw away number I’ve acquire has a sordid history of being used as a honeypot it seems because it’s a cesspool.
Man, I'm still sad about MeeGo. Nokia was our best shot but fortune was not in our favor.
Note that the fundraising banners are currently only shown to a small percentage of readers – these are the October pre-tests:

https://en.wikipedia.org/wiki/Wikipedia:Village_pump_(WMF)#W...

The actual fundraiser will come at the end of the year, when the banners will follow everyone visiting Wikipedia around for over a month (29th of November – 31st of December).

https://meta.wikimedia.org/wiki/Fundraising#Current_fundrais...
Any sufficiently complicated flat organisation contains an ad hoc, informally-specified, bug-ridden, slow implementation of half of Corporate Hierarchy :).

[1] https://en.wikipedia.org/wiki/Greenspun%27s_tenth_rule
If you go the IPv6-only route it can still be very simple. Also if you buy a device such as a NAS, it often comes with its own webserver. On the other hand, i would strongly advise anyone not to expose a NAS to the internet...
Regarding your point about notice periods in the UK, that's not really a given. More senior people typically work as consultants and it is not uncommon to have a zero day notice period. Which works great for both sides - senior people don't have issues with finding jobs and if the job turns out to be a chore they can do 'kthxbye' and be at a new one the next day.
This is the same for workers doing work through an agency which gets increasingly more popular.

Notice periods can also by asymmetrical - the employer can let go of the worker without notice period, but worker if they want to quit need to give 2-8+ weeks.
You mean spinning up resources as needed?

I think I've heard of some services like that...
A very good choice, because the Internet Archive is financially far less secure than the Wikimedia Foundation and provides a vital service, by archiving Wikipedia sources before they go offline. This makes sure you can still see in five years' time what someone has cited in an article.

They also pay their executives far less.
Probably a translation problem but I mean equity as in cash you own.
If you want the VPN in Australia, you can get it directly from Mullvad - they do have servers there.
Win+Arrows seemingly doesn't use custom defined zones and doesn't maintain the gapes between the windows.
I had a few FirefoxOS devices when it was new. The idea was very appealing, and I had my own open source handheld intentions for it.

One interesting aspect was that it was being marketed as a firmware for low-end phones, but obviously seemed desirable for midrange and high-end as well.

One concern was that the build process (built atop Android) seemed crazy-unauditable and possibly unsustainable. I hoped that the FirefoxOS parts would eventually be transplanted to atop a more manageable open source hardware/device layer.

Towards the end, there was also an unclear funding(?) partnership, involving the home screen and a particular company, which didn't seem consistent with my goals for an open and trustworthy device. I don't know how that partnership turned out, and can't immediately find info on it.

Today, with how far we've stretched "Web"-based JS, massive stacks, software provenance, and control of data, I'd be more interested in a device implemented 1/100th as huge, and 10000x as trustworthy.
Raising issues of common interest is not hate. It’s a debate among equals. Projecting hate and shifting blame is hateful in itself. Not taking responsibility for local corrupt politicians that dont mind turning a blind eye to equally corrupt business from the west and ignoring environmental issues is appalling.
If respect is owed to the dead then archeologists shouldn’t violate their grave. And where is the limitation? Would that apply to prehistoric burials?
Should the US be giving Indians their land back then?
100% agreed and I've witnessed this, it may be more common here in Europe. Some companies are very focused on your last salary (if you're desperate or careless enough to tell it to them) and will outright laugh you out the door if they think you demand a jump that's too high.

To the person you were replying to: Please remember this is not the valley, sometimes an increase of 10k per year is noticeable.
That's the exact reason why the housing bubble will never pop: the government will prop up the entire industry before having its voters lose money in their housing gambles.

The BoE spent billions to support pension funds that made risky and ridiculous bets on bond markets, so there's no reason to not be as leveraged as you can in those areas.
Use some fancy AI to create a real time deep fake of your face.
Doesn't look dead for me.

A bunch of things not updated due to resource shortage, methinks.

https://github.com/ziglang/zig/graphs/contributors
They don’t need US handouts to do that (see: OPEC+)
As the linked article points out, practices can vary widely across fields (and in fields where preprints are available, maintaining authour anonymity in a double-blind setting furthermore relies on revieweres not having come across a preprint of the paper that is being reviewed which in turn can easily happen in smaller research-communities).
If you think of AA as restitution, fine, that is a noble goal.

Now the issue is that there are not two races. So what about the Asians? They are discriminated against both by actual racism AND affirmative action. In fact AA discriminates harder against Asians than whites. Mixed race Asian (white+Asian) are regularly recommended to report their race as white. Surely this is doubly unfair?
It surprised me too, but then I wonder if many organizations are only giving DataDog access to one account and that’s how they are pulling their numbers for this
Thank you for taking time to reply :) I'm very sorry you had that experience especially homophobia. After asking the reasons, I wondered if you'd come back and say you were non-white , which seems to be not be fun to be particularly in some rural parts of Ireland. I know an Indian guy who was happy in Dublin last time I spoke to him... but have heard horror stories too.
I have a number of lovely Irish friends. Some living here in England, some I met in USA. At the same time, if people from a minority group are having a hard time in Ireland, I think its fair to call that out and its not an insult to the Irish in general. Of course, Britain was very homophobic in the not so distant past too.
Yeah Ireland does actually seem more car-centric than England, partly just comes of being less densely populated (which is one of the nice things).
My impression is housing crisis even worse in Ireland then England. England at least has affordable regional cities especially in Midlands and North.
One thing I really missed when going to Ireland on holiday, was the English Rights of Way legislation. We have clear public footpaths here, whereas in Ireland, access and relationships with landowners seems more sketchy.
However, for us English, and our kids, our own country seems to be going completely mad, and Ireland is an obvious way to have an insurance policy a.k.a EU passport. Then again, looks like a lot of EU countries are going a bit mad right now. I'm not convinced that the EU people were sad to exit from, will be the same sort of EU in 20 yrs time.
IIRC the PowerToys, incl. FancyZones, are open source so indeed it shouldn't be hard to add the things you want.
I agree with 1, but still it is slightly annoying that role chaining is limited to 1h duration.
Robinhood: Scaling and Load Testing
std::sort is implemented using introsort [1] which trades off average case complexity for worst case complexity. If you are really chasing performance gains then these are the things you need to look into.

[1] https://en.wikipedia.org/wiki/Introsort
Anglo-American extradition has been contentious for 200 years
> so people do their 1-2 years and move on.

Sounds like about 50% of the employees at every company I worked at over 30 years. In the '00s and '10s, there was no such thing as raises unless you were at a public company, so the only way to increase your salary was to job hop every 18-24 months. When you hit your 40s, however, that resume history makes you unhirable I found out.