skysight-inc/HackerNews huggingface dataset:
When I worked at a law firm, all of my market trades of individual stocks had to go through clearance, regardless of size, even though I never had access to privileged information. Never had a trade anywhere near $15,000 in value but everything still had to go through clearance first. I was never denied a trade but one of my co-workers had a couple of his trades delayed a few weeks.
Try giving your kids xylitol candies/mints (available at amazon and many health food stores), initially after every meal - you can probably reduce the frequency/amount later.

There are xylitol chewing gum, but I've read articles about kids dislike for chewing gum these days - so candies/mints may be more palatable.

search for "xylitol tooth decay" for explanation about its effects.

Excerpts from one such link: https://bellharbourdental.com/cavities/xylitol-reverse-tooth...

Mutans streptococci (MS or S. mutans) are a bacterium in plaque and saliva that are major contributors to tooth decay and oral disease.

...xylitol reduces the levels of MS in the mouth. It essentially starves the MS bacterium by not providing any energy to it when metabolized. Since xylitol is a non-nutritive sugar the MS bacteria spend energy to metabolize it and in return receive no energy gain from it. It’s a sunken cost and the S. mutans cannot keep growing. This reduces the population of S. mutans and impedes the ability of plaque and bacteria to adhere to our teeth. It also decreases the amount of lactic acid present in our mouth, making our teeth less vulnerable to decay. Curiously xylitol does all of this without affecting the other beneficial, or overall, flora of our mouths.

Another amazing find has been that when a mother of a newborn uses xylitol, that child’s teeth prove to be more resilient against cavities as they develop. Children have a dramatically lower risk of cavities when their mothers use xylitol starting 3-6 months after childbirth and continue using it until all their baby teeth are formed around the age of 2.

Xylitol comes in many forms but the most common delivery method is through chewing gum. Chewing xylitol gum for 3 weeks or more provides not only short but also long-term reductions in S. mutans levels! Even just the action of chewing the gum helps to rinse away lactic acids.

In order to be effective against bacteria the optimal intake levels are at least 6-10g of xylitol per day. Xylitol gums range from having .75g – 1g of xylitol per piece. So make sure to check the gum that you’re buying to make sure it contains closer to the ~1g/piece mark. In order to reach those levels you will need to chew more than one piece at a time a few times a day. After meals is a great routine to get into, but make sure to wait for at least 20 minutes after eating food before chewing xylitol gum.
The Android issue has Mulvad mentioning connectivity checks and NTP which seems reasonable to me.

Having an accurate clock is a requirement for some VPN protocols and IMO doing a connectivity check to see if a captive portal needs to opened is reasonable.

This doesn't seem like a big deal or a privacy risk, seems overblown. I don't think 99% of people should be worried of these "leaks" if you could call them that.
I still see those videos on Youtube with a person in Guy Fawkes mask announcing their plans to take down (DDoS) such and such a service. They're still around, and they're not as cool anymore though. Anyone can make such a video and then slap 'We are legion, we do not forget' etc
Can you please make some sample? I was trying to imagine the use case and couldn't make great one.

My current way - I use Alt-Tab mostly and Win+<number> sometimes. In addition I have Powertoys Run (Window Walker) to search through terminals when number of terminals windows goes > 15 or 20.
First, no your statement is not true. You cannot hide expenses in third party companies and suddenly they are not overhead.

Second imagine two companies:
- (a) One uses all the extra money on providing nets and delivering them to users in a low cost way so perhaps 0 overhead with the extra contribution.
- One uses all the extra money to give it to pay staff, so perhaps 100 overhead for the extra contribution.

Both might be needed, but in general the reason overhead numbers exist is that people are more willing to give when their money goes directly to something they need.

See for example https://www.givewell.org/charities/top-charities
What's the best way for a U.S. citizen to lobby for more open immigration law?
male 34, had it nov 2020, symptoms started dez/jan 2021.
still chest pain, nausea, unrefreshing sleep and weird heart palpations and high pulse.
got better over time, i am hoping the will release bc007 soonish, so that might be a solution for all of us struggling with our lives and wanting a normal life back.
extremely frustrating knowing what was possible and not able to reach that again
still happy to hear that most of the people recover just fine.
How I Do Email
Seems like even if you enable the option to block connections outside a VPN, Android is designed to still do connectivity checks for special cases like identifying captive portals (like hotel WiFi).

From the article:

> “Even if the content of the message does not reveal anything more than "some Android device connected", the metadata (which includes the source IP) can be used to derive further information, especially if combined with data such as WiFi access point locations.”

> Mullvad is still debating the significance of the data leak with Google, calling them to introduce the ability to disable connectivity checks and minimize liability points.

> Notably, GrapheneOS, Android-based privacy and security-focused operating system that can run on a limited number of smartphone models, provides this option with the intended functionality.
Huh? No, you use an external secrets manager or leave it to run time environment vars, or leave it to your cd servers to access/supply those details.

Assuming you have been given the right tooling, there is no reason for it to be in source code.
I literally described how strategically offering a new benefit could be used to discourage unionization. I don't know how much more clear it could be that if the motivation behind the new benefit was manipulating perception of the union, that's union busting.
Or recently Telus, one of the big 3 Canadian COM companies, went down for a whole day. Imagine cars stopping to work because of that.
Even with IaC you should store secrets only in your environment variables for the CI servers
No, of the people whose health conditions I would know about, over 1 in 8 are on a waiting list. One of which will die if they choose to wait to see the NHS instead of going private.
This is the reason I don't even try it. I would never be able to get my company to pay for a software that's not in our catalog, regardless of the price.
This is satire. McSweeney's is a humor literary journal.
Never host your status page where you host your app, and never use your billing product to handle your own billing.
Ask HN: Do you all have enough to do at work?
I work at a big company have been there 6 months and really don't seem to have a ton to do at work. My co-workers who have all been there many years seem to have a bunch of work to do. I feel like Im supposed to be schmoozing with them for work to do which I've never had to do before at other jobsc and I'm not really good at. I keep mentioning at standups that I have bandwidth available but never get any more work to do. Is this like a tactic to drive someone out or just kind of a normal ebb and flow? It feels weird.
Amusing that this starts with a dismissal of the utility of fiction. Stories can be a powerful way of communicating subtle cultural artifacts and historical distinctions. Death of intellectual curiosity, indeed.
The problem with the ever-shifting tools in the JS world is that it more resembles a bad case of obsessive compulsive home remodelling disorder than a quest for a better tech infrastructure. There just is not that much to be curious about when the outcome is already known up-front: wherever this new framework decides to place the sofa and whatever trendy posters it places on the walls they're sure to come down and be moved during the next remodelling.
> Crashing and losing all existing connections often merely leads to an avalanche of subsequent requests, accelerating overload of your systems. I've seen this countless times.

Sure, but again, that's a scenario that you need to handle anyway.

> Being crash tolerant is one thing. But "crash early, crash often" is absolutely horrible advice.

I've found it to be good advice. It's a big part of why Erlang systems have been so reliable for decades.
When you need to add that extra latency it can feel bad. Especially in games where you're hitting tight (~30ms) timing windows. Having your button presses be several timing windows ahead of what you're trying to hit adds mental load that's noticable to me at least.

I got a cabinet for one of my favorite arcade rhythm games, Pop'n Music, a couple of years ago. It's older Firebeat hardware so it's a non-general purpose system specifically built for arcade music games not running a general purpose OS. I was surprised by how much better it felt than the newer versions of the game which run on Windows XP with inherent extra latency in its audio playback. (Other games by the same developer have taken advantage of lower latency audio apis in newer versions of Windows but iirc Pop'n hasn't gotten off XP yet.)
I'm using a ubiquiti managed switch and three ubiquiti access points. Basically, you setup VLANs in the Unifi management software and then you can assign ports on the switch and Wi-Fi profiles to a particular VLAN.

From there, any device that connects to one of those ports or wi-fi networks will use the assigned VLAN. The access points are great because you can create several wi-fi networks and then the software provisions them to how ever many access points and switches you have, so you don't have to login to each one and set them up separately.

Any links I sent would be specific to Ubiquiti, but happy to do so if you plan to use their hardware.
Yeah, that is why plenty people then show up on Stack Overflow with questions that prove how much they know C, versus "whatever my compiler did when I tried it out".
Also true at MSFT
"Should" not be violated is the point, though. I agree, it shouldn't. But it is, all the time.

I mean, I'll bet Toyota knew this organizationally. They had security people sign off on the design who all knew how secure key management is supposed to work. They probably reviewed this github release. And it happened anyway.

Maybe they weren't supposed to be production keys. Maybe it was a development key from someone's early cut of the tooling that got mistakenly reused for production. Maybe a script that updated all the keys mixed up which was which.

The point is that the existence of a Clear And Unambiguous Right Thing to Do is, in practice, not sufficient to ensure that that thing is done. The space of ways to mess up even obvious rules is too big.

And that's surprising, which is why (1) it keeps happening and (2) people like you don't take the possibility seriously in your own work.
The biggest fundamental difference is that Logseq is an outliner whereas Obsidian is more flexible to any kind of text you throw at it. So if I am trying to write prose it feels constraining for everything to be a bullet.

That said Obsidian and Logseq are interoperable since they both run on a local folder of plain text files. Meaning you can switch over to Logseq for your outlining needs and use Obsidian for everything else.

(slightly biased since I helped on Obsidian 1.0, but I am a lover of all plain text tools)
Anonymous was never a real thing, there was never any kind of an organisation. It's just a meme.
>there are some people out there that are born to solve certain classes of problems

exact same experience... there is literally a genetic factor but people are not willing to admit it
I compile my Rust programs on Arch Linux.
> when, despite much ado, no charges were brought in the linked scandal

A Senator’s phone was subpoenaed by the FBI. That’s substantial. (The allegation was Burr had insider information on broad market movements. Absent direct evidence he misappropriated privileged information, that’s a tough charge to bring. Had he bought e.g. Moderna shares, prosecutors may have had a case.)

The whole thing, moreover, came to light because of the STOCK Act. There are now calls for bans on individual stock trading by Congressmen as a result of the evidence from these scandals.

I’m not defending the status quo. But it’s definitely improving and not a free for all.
Having lived in countries with socialized healthcare and having also lived in the US, I'd greatly prefer a longer free waiting period as opposed to a nearly as long multi-thousand dollar waiting period: https://www.oecd.org/health/waiting-times-for-health-service...
Actually it's the opposite.

I am done with dapps and blockchain development and just looking for fullstack (preferring only backend when possible) typescript/golang positions.

I am getting a good amount of recruiters contacting me for blockchain related positions but every single time I speak with them their projects are so ridiculously stupid I am flabbergasted that they got investors.

"Normal web dev" recruiters? Just got 5 of them contacting me in the last 4 weeks and of those I contacted myself: most of them have ghosted me. Last time I was looking for a new job in 3 days I had like 30 recruiters already spamming my linkedin inmail

Also I put myself in honeypot, talent.io and hired.com. Got like only one proposal... so thinking something was bad with my profile I contacted their "talent advisors" and each of them sort-of told me the profile was perfect but they were having an hard time getting job openings because of the "current market situation".
3D printing and retro emulation communities?
I have this happen for a few minutes at a time a handful of times every week. For me at least, this is just how Slack Is now. It's amazing how much slower and buggier it's gotten over the last couple years

How hard is it to keep a chat app from sucking?
Is this analogous to NTFS?

For you young uns, back in the 1990s Microsoft was so convinced that NTFS made file fragmentation impossible that they didn’t provide a way to defrag for a very long time.
The social media manager at GitGuardian is winning. They just got us each to read a 1000 word ad for GitGuardian.
Currently they are not handled. But (you guessed it) we also have a project working on this: attaching trusted specifications to external methods.

In the long term we might investigate a full integration with external verifiers, e.g. to check that the specifications declared on external methods in Rust is justified by their actual implementation, say in C. This is tricky because the specification language/level of abstraction might differ. It might be necessary to prove program refinement, for example.
> They often break after upgrades

I mean. This is what v1.0 is for.
Education and learning opportunities being more ubiquitous does not make them more valuable.

Our society is hellbent on automating and commoditizing everything.
I definitely also like logseq better, but find that it doesn't sync well between desktop and iOS app. Have you found good solution for this?
The fact that snap's web3 team being cut is one of the listed examples is pretty comical IMHO.
There's a good reason Julian Assange was dragged out of the Ecuadorian embassy holding "History of the National Security State".

If we don't live for others, he who dies with most toys still wins a lonely, meaningless death. I believe Ayn had a chip on her shoulder from growing up in the Soviet Union and took an extremist contrarian view rather than a moderate one. Extremism is often what catapults people into fame.

"There is only one party in the United States, the Property Party...and it has two right wings: Republican and Democrat. Republicans are a bit stupider, more rigid, more doctrinaire in their laissez-faire capitalism than the Democrats, who are cuter, prettier, a bit more corrupt - until recently... and more willing than the Republicans to make small adjustments when the poor, the black, the anti-imperialists get out of hand. But, essentially, there is no difference between the two parties." -G.V.
We use both. Have a managed project where people can create their own IAM roles using defined policies for all services. For some use cases creating your own role is better so they must attach one of the roles they create with the project as their boundary when they create the role.
> So I guess what you're saying is it's better to maintain the illusion of meritocracy …

No, it’s better to strive for meritocracy and fail to achieve perfection, than to abandon the effort to reward merit entirely.

> … instead of acknowledging and being honest with ourselves that pay is not commensurate to effort?

“Merit” is not a synonym for effort, pay was never commensurate with effort, and it never should be.

We’re not trying to reward effort — we’re trying to reward results.
Search "thank you blind." It's incredible how much additional TC has improved people's lives. They can cover their kids' tuition and take care of ailing parents. Even wellness programs at the better companies have helped people lose weight and avoid chronic illness. The advice to get there is toxic for a toxic world. This is why the hyper politically correct LinkedIn is so useless in comparison.
I would accept 120 years in jail
You can invite by email addr, so the workaround here is only invite corporate email addresses.

If the target user hasn't added their corp email to their profile then they can't be part of the org.
Unfortunately I require something portable as I'm travelling a lot, and that's not something I can easily chuck in my laptop bag!

Good to know though play nicely with eGPUs though for future reference.
I place AWS Permission Boundaries in the "Write once, read never" category
I’d support some directed project to figuring out how to do geothermal at scale and most efficiently/effectively. Call it long term infrastructure investment.
If using GitHub-Actions, Gitleaks offers competitive pricing for a secret scanning solution.

https://gitleaks.io/products
For new projects, why wouldn’t anyone use postgres?
The Benefits of Being Cold (2015)
The whole point of the podcast is to tell made up stories in order to boost the child-entrapper Chris Tarbells public speaking career https://www.leadingauthorities.com/uk/speakers/chris-tarbell
It can actually be comical just how _bad_ things can be at large orgs.

Anyone have details, theories, or a book on how such inefficiencies come about? I can't speak to tech-oriented large orgs but I've worked with others and its just... I'm not shocked at all. I've seen public facing API keys in HTML, private SSH keys that do god knows what in plaintext on FTP servers... I just don't understand how they seem to care so much but in reality, care so little. Just lazy?
You might be able to do that now, collect a bunch of refurbished parts and assemble a new laptop yourself.
Everyone plays a long game until the cost of debt and debt servicing comes home. There are just too many Zombie Unicorns, it is matter of time. If your company is not profitable consider yourself jobless 6 months from now.
When you can just burn coal/gas/oil to heat and cool your house and say 'la la la' loud enough to not hear the environment dying around you, it really is the best option.
CS programs are overproducing but they are overproducing the wrong skills. Most don’t have the cloud skillset or experience with IaC, they are never thought how to solve problems within distributed systems. And their idea of systems design is a Flask app talking to a MySQL database on a laptop.

It’s not the students fault, but the education system is constantly behind the times, and sometimes even teach bad engineering patterns that cause problems and create technical debt.
I guess you haven't seen Top Gun: Maverick or The Northman, to mention a couple movies from this year?
I think one could argue that drug crimes jam up courts and police work (there's paperwork for every criminal processed). So removing criminality from all drugs would free up the police to address the "petty" crime.
> It doesn't look like you charge for anything,

https://obsidian.md/pricing

https://obsidian.md/sync

https://obsidian.md/publish
Never even knew it existed until just now. I feel like am not in the minority. Weird that the author assumes this is some well known site.
Modes Considered Harmful (2006)
More and more senior engineers are non-coding or practically so. I see it everywhere. As industries have matured, people have matured into higher level management roles and there hasn't been enough people to replace them. There's still plenty of fresh blood, software engineering actually looks a lot like the labor shortages do in the rest of the market—there's a lack of people who actually want to do the work. Everyone wants that $150k starting comp. Everyone wants a $500k director or VP role. But there is a shortage in that $200-300K range for people who are actually going to put in hours either writing code that makes it into production, or managing junior coders and their codebases. I'm talking SV salaries here. The scale is different elsewhere, but the problem is the same.
Thames Tunnel
> a bad colleague who went dancing while we were struggling at 23 PM in the data center

If that's your definition of a "bad colleague" I would be a little concerned. There are situations where it may be necessary to do that struggle, but in my experience there are far fewer than you think, and people often fall into a trap of competing to be the last one standing rather than actually doing good work. If you're struggling in a data center at 2300 you may well be doing more harm than good and going home to sleep (or dance, or whatever you need to refresh yourself and come back focused...) is often a better choice.
The rationality community I'd say is very curious, on the whole - see astral codex ten, marginal revolution, lesswrong, etc
Regardless of what you think of them it's hard to argue they aren't curious
They did say probably and for the post hoc case which knows they didn't it's hard to believe, but probably on balance, you're right: maybe they should have used maybe?
Just downloaded. Seems a little better. I wish I could easily create a note in whatever folder I am in currently. I have an inbox folder. It’s where new notes go until I can deal with them. This always drove me nuts in both apps, but I can’t just go into a folder. Look at Apple Notes for instance as a simple example of how this works.

The sidebar is just a tree in Obsidian. It doesn’t really act how I want. This is less an issue on desktop, but on mobile my expectations are different.

Hopefully sync setup has improved in mobile. That was awful last I tried it.
That's certainly a good idea. But the secrets shouldn't be in the codebase to begin with, certainly not production secrets. Production secrets should stay in production and no one has access. Whatever intends to use the production secrets should have first been developed in a dev environment and released to prod.
I could be the one missing something but I’m saying to not use permission boundaries at all until you’re at a scale where it’s unavoidable due to the complexity of your corporate structure.

The thing rolling out changes to your infra once merged is god. Boundaries don’t do anything in this model because “asking for the permission boundary to be changed so I can make X change” is the same as “ask to make X change.”
Both require approval of the same people.

Once you graduate to polytheism is when you need boundaries.
Internet has changed that. We may not see them practically but we do see them on videos, tiktoks and so on. Just search for life in village videos related to specific country. That content is there. It depends if youtube algo prioritizes those for others.