skysight-inc/HackerNews huggingface dataset:
I don't know why you'd want a system where a rich person can take the land your house is on if they can pay £1 more than you for it every so often, unless you're a fan of the feudal system.

I also don't see how it discourages speculative investment. If nothing you own is really yours for very long then you're much more likely to have your property bought from under you if it's in a desirable area. As an investor I would want to do that if I believe I could rent it out at a profit.
very + awesome = ??
Weekly news of memory related CVE.

Keep using unsafe langs.

What will be there in next week? CVE in Chromium?

At this point betting sites should add category for that kind of games.

I do wonder what people of future will think about this:

"So they had research indicating that a lot of issues were related to memory, had technology which significantly reduces this issue, but they still kept doin mess for years?"

https://msrc-blog.microsoft.com/2019/07/22/why-rust-for-safe...

https://microsoftedge.github.io/edgevr/posts/Super-Duper-Sec...

https://www.chromium.org/Home/chromium-security/memory-safet...

Memory issues and JIT (browsers) are two things that are responsible for disgusting amount of security issues
I'm in the market for a laptop with ECC memory that runs linux well. I haven't found any good options. Despite AMD not following Intel's insane ECC product segmentation, there are no AMD laptops that support ECC. On the Intel side, there are maybe 3 laptops that support ECC memory: Dell Precision 7670, HP zbook fury g9, Thinkpad P16. They are all quite similar with the major downside that the iGPU is shit for all the Intel CPUs that support ECC. Intel sells only high core count variants (HX) with ECC, which means less silicon for the iGPU. They expect "workstation" users to use a discrete GPU, which is so silly. I have no use for a discrete GPU in a laptop, especially an NVIDIA one. If any of the newer laptop companies (framework, starlabs, etc.) see this, please make a reasonable laptop with ECC memory.
Basically all companies are optimized for profit.
> I think it's a great idea, there's far too many businesses that exploit employees by labelling them contractors.

In UK (and Aus), this whole IT/dev contracting business is kind of win:win (govt. loses) though - devs like it because they get paid $$$ day rates and pay less tax, businesses like it because... capex vs opex(?).
Beacown (Linux WiFi Exploit)
When I started working in Europe, one of the most shocking this I learned was that you basically can't be fired under a normal work contract. I mean in theory you can, e.g. with group layoffs, gross negligence and so on, but it's illegal to fire person A and hire person B to do their job. You have to basically dissolve the job the person A was doing and when you hire the person B, they must not be doing what the laid off person was doing or else they can sue you.
Ask HN: Do you know HN-like sites outside IT?
E.g. for wood- or metalworking.
I think there should be a law preventing companies from restricting their employees from having second jobs.

As long as it doesn't affect their performance in their primary job and as they are not working at a direct competitor, it should be none of their stupid business (and should be illegal) to check for an employee's other jobs.
My local IKEA (and others in Germany I've been to) has an inventory number on a tag of every item. Next to it is the shelf number and section within that shelf where I can find that particular item in the warehouse. IKEA also provides pencils and small pieces of paper with lists already printed on them to jot down any shelf + section + inventory numbers of stuff you want to grab.

Is it not like this in your local IKEAs?
Magento 2 security patches for APSB22-48
Production Considerations for Spring on Kubernetes
Microsoft’s DirectStorage 1.1 will soon boost PC game load times
The headline is misleading. According to the article it's the Colombian police that got hacked, not the AFP.
Just to give my experience, I actually didn't know what that acronym meant. I tried googling it but "ESL speaker" only gave results about loudspeakers and just "ESL" was mostly about some German Company.

I even thought it had to do with sign language at first but didn't get the meaning of the sentence in that case!

---

A little off-topic but that makes me think of another HN thread some months ago talking about acronyms like "SRE" or "SWE" (and some others I since forgot), that many HNers assumed to be understood by everyone.
Many non-american/english developers actually never encountered those (including I, I've been software engineer since at least 8 years and never saw those terms beside HN, like I would think most in my country) and it led to the same kind of incomprehension.
Looks nice, but why AGPL-3? Most of the used libraries are MIT/BSD.
Office time is not for video calls, says tech boss
Why am i getting downvoted for speaking the truth?

Fk off racist pigs
This is the same concept that Cloudflare has with Durable Objects. I think it's a really good one.
Thanks, that's the counter anecdote I came to HN for.
I don't think it's appropriate to ask personal questions on HN. But since we're going personal I'd like to note that "RTFA" is not a professional language.

The paragraph you mention states the issue, but it's pretty far from being a summary.

What an "executive summary" section would include in this case in a very short text on:

* What the problem is.

* How long to took to resolve for how many people.

* How it effected the company/project.

You could add more relevant stuff, depending on what the article says. There are some good resource on the internet how to write summaries.

People who are looking for interesting stuff to read in their 10 minute coffee break might read the article after the summary instead of skipping it altogether.
It's been normal in the US for a long time. That's what at-will employment means. You can be fired at any time for no reason.
We have a similar rule in Australia that unfortunately was introduced, so called 'personal services income' if you make over 80% of your money from a single source you effectively can't make tax deductions like a business.
>Working with multiple screens on that is absolute hell, taking up your entire view, locking you into a bubble. Enjoy your neck pain when you need to turn your head every other second.

How is this any different from having multiple screens?

>Oh and good luck with using both a pointer and a keyboard while in VR, I hope you remember where your keys are.

What? Remember what keys? Like keyboard keys?

>Facial capture for gaming will be absolutely worthless, and so will it be for chatting.

Based on what? Just because you don't want them? How many people are cybering in VRchat at this very moment? You don't think these people would very much like to have a way to show facial features as they are performing them?

>Firstly because it already exists without wearing an expensive helmet that makes you sweat and is uncomfortable

Citation needed. What tech already does this? Also I don't sweat much with my Oculus Quest headset, why you think this is any different?

>secondly because nobody wants to wear a damn helmet so that people can see you smile ingame

I would very much like this. It would make VR games even more immersive if expressions would be captured and translated to the in-game models.

>and thirdly because nobody wants to put 1k+ on a device whoses uses are extremely limited.

Why is the price an issue? You said that you had Valve Index, looking at the price the headset with controllers and the tracking stations cost over 1k. Did you lie about having Valve Index or where the disconnect is? Anyways, yes, 1.7k for VR headset is a lot, but the tech will find its way to cheaper headsets as well, so price argument seems very weird to me.
Theres a lot of bugfixes there...

And some are obviously correct... But others would require a lot more understanding of the code to be sure they're correct.

Someone should go through this with a keen eye to check the fixes are actually correct, and aren't just making the fuzzer stop alerting while leaving a more subtle vulnerability open.
> Edit: Looks like GCC removed the warning because it was unreliable. Clang and MSVC seem to be in better shape. https://gcc.gnu.org/legacy-ml/gcc-help/2011-05/msg00360.html

That is an odd position when -Wstringop-overflow also highly depends on the optimizer (and will frequently generate false positives!) but not only remains in GCC but is enabled by default (even without any -Wall/-Wextra).

Things like this are why its pays to compile your project with as many compilers as possible (as well as static analysis tools).
Disappointed that the article didn't mention the sad litany of New Zealand.

1) Hey, let's introduce rabbits for hunting!

2) Shit, they're eating all the grass that we want our sheep to eat

3) Let's introduce ferrets, stoats, and weasels, to eat all the rabbits!

4) Shit, they're just eating all the endemic birds

5) Uh....

We're still wrestling with Step #6 - our native beech forests (not Northern Hemisphere beech, as their Latin name makes clear - Nothofagus "false beech") will have a mass seeding event (a "mast") every few years. And when that happens, rodent populations explode, and then so too do the stoat and weasel populations.

But when the mustelids run out of rats and mice, then they move onto the birds. So, we have to poison, like crazy, as well as trap, to try to protect the birds most vulnerable to them.
I think this is the specification for the software that would be used for e-voting. There is code in that repository too, and it calls a method named isProbablePrime, but I can't see a definition of it.
Ask HN: How do you effectively predict how long a task will take?
Often when dealt a task by a client/project manager it's followed with a request for how long it will take. Also often, I find answering this request a considerably more difficult problem than the engineering task itself, especially when the response is taken as gospel on pain of death. Over time I've realised that my inability to accurately predict how long a certain task will take is a weakness that I'd like some strategies for dealing with.

Personally, it stems from tasks in the past that have turned out to have details or foibles that make it considerably more involved than initially predicted, or finding a lack of required information once I've got stuck in.
I don't think it's a regex pattern, most keys are random strings.
Could you recommend some spaces?
I have a script to relay new dmesg events into my (xfce) desktop session using libnotify. I figure others may find it useful, too:

https://paste.debian.net/1257030/

It gets started via xdg autostart here, and will tell me about new "stuff" that happens. For it to work, your user will have to have permission to read the kernel event log/debug ringbuffer. I achieve that by setting the appropriate sysctl:

kernel.dmesg_restrict = 0
The driving cost for solar pv is the structure and the land, the panels are now so cheap (and getting cheaper) that the economic recommendation is to install 3x the generation capacity of the inverter. Sizing for hitting capacity on the darkest days basically.

Living in a draft proof, highly insulated home with mechanical air filtration and heat recovery, driving an EV that’s powered by the roof of your house doesn’t sound like any kind of worse life to me.

Abundant, locally generated electricity is a game changer. You can even extract drinking water from the air inside your house in all but the driest of locations.
It's a good question well above my pay grade :). Changing culture isn't an easy problem.

I suspect the way Microsoft does interviewing and performance management (very local to the specific team) contributes to the inconsistency.

MSFT has also been fairly open to its employees that it does not try to compete with competitors like Google, Meta, or even Amazon, in terms of compensation. So it isn't really trying to get the best engineers, so long as it can continue to print money.

There are still folks there who are incredible, but the floor is shockingly low at times. Folks will self-select, so you will then get teams which are more homogeneously good or bad.
I'm not at all conspiratorial and I see the idea of trying to change the colour of clouds is not going to go down well.

Surely the close the blocking object is to the sun the better how close could we get a parasole?
It's worst...

"Elon Musk suggests he is pulling internet service from Ukraine after ambassador told him to ‘f** off’" - https://www.independent.co.uk/tech/elon-musk-starlink-intern...
The opposite causes the teacher as well as the peers to resent the more intelligent child, so which is better?

I could read since I was 4. When others at school were reading one word per minute spelling letter by letter, I finished the whole article and then continued to another and another. Result? I got a teacher's note (a big deal where I live) almost every lesson, and bad grades. And the children hated me, probably mostly because of the teacher mocking me for not paying attention. I would give anything to be boosted to similarly skilled children. I was friends with them anyways, never really liked the kids from my grade (but that could've been avoided if I wasn't forced to "learn" with them).

I've never seen a boosted child say it wasn't worth it or that they had much problems being a year/two younger than their classmates. Actually, smaller schools here usually combine 2-3 grades into one anyways and the children are friends alright, so boosting the taught curriculum is really not a big deal (unfortunately the system didn't allow it when I went to school).
Do you have a source? Because companies generally care little for a tiny bit of extra cash like that. I assume the companies probably get paid in something, e.g. data as some other commenters suggested, rather than cash. While your comment suggests at least to mr that the payment is on cash.
I just keep `dmesg -w` running in a terminal window :)
> Forcing people to think long and hard about the exact word they want to use is beneficial

...except in the cases where it's not. If you want to communicate efficiently, you need to speak plainly: you will be understood and the whole process will go smoothly as you won't need to lose time to replace each 'very' in your sentence with something that might or might not fit.
He lead a party that won 62 of 650 seats and was able to enact 95% of the parties policies.

Cameron and Osbonre skillfully used their junior partners to take the blame for everything unpopular while claiming credit for every good idea. The unintended consequence was to wipe out the lib dems which in turn killed off any centerism in UK politics.

I think it speaks volumes about the average lib dem voter that because the purity test of 100% was not achieved despite coming 3rd in a 3 horse race it was deemed to be a disaster. Without a doubt I expect every single one of them would prefer the government they voted out to the successive governments that have come and gone since.
I run "office hours" to chat/rant/exchange ideas/pair program. Come and say hi!

https://sonnet.io/posts/hi
My previous job - I had nothing to do. I was watching Netflix. In my current job, I have so much work that I don’t have time for eat lunch.

Neither of the two situations is good.

I’d suggest looking for another job. Life is too short to schmooze. The other option is to spend the extra time learning. Most important - don’t feel bad about getting paid for not doing much work. It is not your fault, it is your employer’s fault
Consistent with my own experience with MYOB. Product managers coasting on market share and stalling on mandatory changes, even when their competitors sitting next to them in the room have done it and moved on.
> This is the mindset of isolated individual contributors rather than members of a single team that work on a given feature of the same product.

From experience, I think this is the more common scenario, unfortunately.

> Isn't this precisely what various agile approaches (scrum or XP in particular) are fighting against?

Maybe that was the ambition, but I don't see this borne out in practice. If anything, Agile as most commonly practiced exacerbates this problem. Of course highly paid Agile consultants will dig their heels in and say "You're not doing Agile!", but that doesn't really change the reality for the people on the ground.
> Windows has a _stable userland ABI_. Contrast this with Linux, where glibc is known to break from time to time.

Linux also has a stable userland ABI, it is just that unlike Windows said stable ABI does way less. You can make very advanced programs with the stable APIs Windows provide, since they feature not only simple console stuff, I/O, etc but also user interfaces with widgets[0], 3D graphics, audio, video[1], etc.

Also glibc is stable if a program relies on public APIs, the breakage comes from programs relying on stuff they weren't meant to use. The biggest annoyance (not only with glibc but most libraries) is that you have to build your program on a system with the oldest libraries you plan on supporting (this is not a requirement on Windows) but with VMs, etc this should not be much of a problem in practice.

[0] X11 on Linux is also technically stable since the protocol is compatible even with machines from the early 90s and the libraries have a stable ABI, but by itself it doesn't provide much.

[1] Codecs notwithstanding, though Microsoft's own codecs should be fine to rely on
With AdBlocker Ultimate, of course.
Which society in human history was not sick? Truth is that's the norm, not the exception
> "teammates" were fired for having "a second full-time job while maintaining their full-time role at EFX,"

Except that having a second FULL-TIME job does affect the first one.
Ah. That explains a lot of comments in this thread.

Cosmos is used because some tables we use are larger than 64TB. It’s decently useful for large chunks of data.
How about something which is being assessed on multiple dimensions?

A tee-shirt which is a distinct colour is unique.
A tee-shirt which is a distinct colour, distinct fit, distinct size and has a distinct motif could perhaps be described as being 'very unique'.
Then next paragraph says:

>It plans to make the system available to the cantons for the trial operation once the development and evaluation of the system has been completed.

https://www.post.ch/en/business-solutions/e-voting

In addition, another page on the same website says:

>The cantons of Neuchâtel, Fribourg, Thurgau and Basel-Stadt used Swiss Post’s previous e-voting system until 2019. The following cantons (among others) are planning to use the new Swiss Post system once this becomes legally and technically possible: [list of cantons follows]

>https://www.post.ch/en/business-solutions/e-voting/success-t...

A Swiss Post press statement says:

>Since the beginning of 2021, Swiss Post’s future e-voting system has been put through its paces by independent experts from all over the world. Another testing opportunity is now available: in addition to the ongoing test options, ethical hackers can now attack the e-voting infrastructure for a period of four weeks. This means that, for the first time, they can accurately simulate and target the vote casting process on the voting portal using sample voting cards. The aim is to detect potential vulnerabilities and rectify them in good time. Swiss Post expects to make its new e-voting system available for use by interested cantons during the course of 2023.

https://www.post.ch/en/about-us/media/press-releases/2022/et...

I don't understand why you must be so haughty (vide "Do the bare minimum research before posting please."). Certainly, you are correct for some definition of "Switzerland has an e-voting system" --- there is one under development, and it had been piloted for a limited time period. However, at the moment, it's only in the public testing stage, it's not officially recognized, cannot be used to cast votes, and there is no guarantee that it will get a green light. I think that's the more accepted definition of "to have an e-voting system", in which case the OP was right, and it was you who did not do adequate research.
Firing for cause is easy. Firing without much of a cause too in most cases, but you will have to pay quite a bit.
Euclidea: Geometric construction game with straightedge and compass
> Closest I see is being able view your report but first thing it asks for is an employer instead of asking for information for identifying an individual

Yeah, this was extremely frustrating. I'm trying to find my current and previous employer, and neither is even coming up on the search, so I can't verify my data.
Yeah, that's definitely the wrong place to focus - focus on the employers, as they're the ones who reap the benefits of treating employees as contractors.
For me, ESL is the Electronic Sports League :-) Good old times!
wait. they didnt have legs before? did they just float around like ghosts? and now, what determines how the legs move. what if i only have one leg? is that an option?
And thank God that this idea was abandoned. I won't sign another employment contract in my life, even if you put a gun to my head.
I've put in my last four employers and they say "No employers were found."
I was in a team making a personal diary app. At that point the app was complex and the cloud backend was dabbling in ES and ML for recommendations. Samsung approached us for an OEM bundling, overlooked the current version and was interested in the primitive alpha which was completely on-device. They found the recommendations impressive and set up more meetings (and fizzed out). The lead dev was incredulous and exclaimed it was a huge block of if/else, and I guess it has lots of bugs Java compiler allowed them to get away with.
I think prod_ might not be the important part there, so something like __secret__ should be enough.
This is what I do[0]. Low-tech and un-sexy, but WFM. YMMV.

[0] https://news.ycombinator.com/item?id=33201467
But… but… it's the future!
I think you're misunderstanding the constant: it is only used for small numbers (≤ 23), which are tested with a lookup table, and the constant is itself that lookup table. The test for small numbers is literally just checking a bit, so is not heavy at all.

They intended to do 2^2+2^3+2^5+2^7+2^11+2^13+2^17+2^19+2^23 = 9054380, but they accidentally left out 2^19, and got 2^2+2^3+2^5+2^7+2^11+2^13+2^17+2^23 = 8530092.

You can see the problematic Algorithm 4.16 on p31 here: https://gitlab.com/swisspost-evoting/crypto-primitives/crypt...