skysight-inc/HackerNews huggingface dataset:
> That's a text-book whataboutism. You can't just dismiss the inherent problems with capitalism by just pointing out that other systems have the same or even different problems.

I’m not sure it’s whataboutism. You’ll need to help me get there.

My stance is that this happens under capitalism. But that doesn’t necessarily mean it’s a problem to solve at the capitalism layer of society. And I’m trying to tease that apart.

I’ll try to restate to help. Let’s start with the argument “capitalism incentivizes this.” I don’t disagree with that. My definition of capitalism was incorrect, as a sibling comment pointed out. My definition is closer to free market capitalism. So I’ll use the siblings definition: “Private ownership of the means of production operated for profit.”

If the single variable is maximizing profit, as you argue, we have to understand why anyone would be incentivized by profit. What value does profit offer an individual? I’d submit that, for most operating under capitalism, it’s what you can do with that profit. I’m sure there are exceptions where folks are racking up points like a video game, but I’d hazard a guess most view profit as a medium of exchange. So they aren’t motivated by profit, they have their own set of incentives for accumulating that capital. I’d also argue most market participants also have non-profit motives (I.e. operating in line with their personal values or directly exchanging goods/services without going through currency as a intermediary, like travel being a perk of the job).

Incentives exist in every system. The things people want to use capital for under capitalism exist when you remove capitalism. Humans still want good food, shelter, and shiny bobbles. If you substitute capitalism for another form of self-organizing, and the problem doesn’t go away, I have a hard time understanding why we’d call out capitalism by name.

I don’t see this as a condemnation of capitalism, but as a problem with how individual humans make decisions. My current mental model for this problem, that I’m asking for your help in updating is: “this is a thing humans do, we’ve (mostly) always done this across time and cultures when societies get big, how do we get ourselves to stop?”

Given my understanding that this is a problem intrinsic to humans on average, the problem is with incentives and how to address individuals making decisions in their own self interest on a small scale (under any form of self organization) not being in line with keeping our ecosystems from collapsing and our societies healthy.
I took this comment to mean that "for this person" it was the beginning of the end. I feel the same way. Windows 8 and onward got really weird really fast for a lot of people who used Windows for decades. I'm not saying the old style is better for everyone, just me.
I wasn't able to do that with bash. Not at the computer now though so I can't try it again to see if I had screwed it up.

Update: Back at the computer now, and I cannot replicate it with bash:

rascul@smarts:~/mm> cat > foo
fred
barney
wilma
betty
rascul@smarts:~/mm> < foo > bar
rascul@smarts:~/mm> cat bar
rascul@smarts:~/mm>

I'm curious what shell you did that with.
You are supposed to puff a tobacco pipe, as in you don't inhale just hold it in your mouth. Same with cigars. Treating either like cigarettes or marijuana is a sickening experience even for many nicotine addicts.
Does it support NVME for storage? I only see MicroSD card.
I don't understand what "files" means to you. If you have two multi-page documents, you have to somehow arrange them on the screen, and you need to show functions to edit/view/[...] either of them.

But, whatever you do, you need some kind of borders to understand where one document ends and the other begins, and you need some controls to change the view of each individual document (such as minimizing or maximizing it) and you need a button of some kind to close the document. Then, if we have two documents and floating bars that you can put wherever you want on the screen, it will be completely impossible to tell which bar controls which document (or displays the state of which document), so we should probably put the function bar somewhere in the document container. And, hey presto, we've reinvented the Window, because it turns out to be a really really useful and natural abstraction.
I graduated last year and one of our final classes required a resume be submitted using the professors format which was colorful, differing fonts, and used "confidence percentages". I wouldn't dare use it in the real world but I'm wondering how many of those new grad resumes are similar.
Why does being extraordinary require being a jackass to people who are often merely a front? (Is the service worker in control of the discount rates, for example?)
> 'bold is particularly good for standing out, in fact I would even go as far as putting the entire document in bold'

What a muppet. Clearly you should use the Header Font.
TS is great for the front-end where JS is inevitable, but I find not a great choice for backend work.

Node runtime is overall more prone to security threats (prototype pollution attacks, rogue packages, etc.). See GitHub's 2020 State of the Octoverse report for details [0]. With the Node ecosytem, there is a very large dependency tree that creates a large surface area for security risks. Then you may be dependent on the community to find and and patch. With dotnet, at least Microsoft has professional, paid engineers maintaining a broad set of base class and first party libraries which provides a LOT more functionality out-of-the-box.

For some workloads, having the higher throughput of dotnet is also a boon.

[0] https://octoverse.github.com/2020/
When using respectable language, is it guaranteed that these types of overflows are impossible? Suppose for example I call C++'s std::string::string(const char*) ... is it fundamentally impossible for it to fail in this way, or is it just UB if you pass it a huge string?
The Trump SPAC Has SEC Trouble
Agree on Brother. I bought an inkjet Brother, not even a laser, and it's been working great so far.
That's a rather creative expectation to form from that sentence.
Fiona Apple Claims Maryland Officials Blocked Access for Court Watchers
The core spec allows you to send messages and presence and is actually enough in many cases. It's far from enough for a modern experience, bust all servers and at least 1 client per platform exist with all the expected XEPs that will bring you an experience close to what Whatsapp provides (with the notorious lack of A/V calls and maybe not so straightforward file exchanges)

Naysayers keep arguing that the jungle of XEPs make it too hard to implement and use and that's what halting the adoption of XMPP, but that's like saying no one is doing any web innovation because the specs are too big. The reality is that only a big name with continuous marketing work and advocacy is missing from XMPP, and is the one reason Matrix got where it is today.
Certainly not conclusive at all, but... Top results from a Google search:

> Individually, an American coffee drinker consumes about three cups of coffee per day.

> Italians drink an average of 3 coffees a day

It seems that the averages are roughly equal. Of course there are outliers everywhere.
Depends on the network and the database. Measure, always. That assumption is harmful to people who don't know better.
Not much info in this comment.

I've "tried" Windows too and simply can't deal with how terrible it is.
I have looked for something like this in macOS and can't find it. IMHO for a kernel that's also running on mobile devices not having a low data mode is inexplicable.
You still use SMS, rest of the world mostly abandoned it.
If the code were entirely analogous, that is correct, unless the Rust code used some kind of `unsafe` tricks in order to increase performance (this is fairly common in advanced Rust code).

That being said, whether a runtime panic leads to DoS depends on the execution model. In web applications, threads are usually mapped to connections in some way, and a runtime panic only unwinds the thread it occurs in, so this wouldn't necessarily mean that other users experience service disruptions.

More to the point, I'd expect modern application and/or library code to include default safety checks that prevent scenarios like absurdly large queries from happening in the first place, and provide recoverable errors if such pathological inputs are encountered.
As per Russian nuclear doctrine, if Russia is attacked, if it faces an existential threat, it reserves the right to use ... first use nuclear weapons.

Source: https://youtu.be/DoOZF5hJmpo?t=2646 (view from 44m:06s).
> In 2018, Apple's cash pile hit $285 Billion. I was underestimating it.

Much has changed since 2018.

Apple cash on hand for the quarter ending June 30, 2022 was $48.231B, a 21.82% decline year-over-year.

Apple cash on hand for 2021 was $62.639B, a 31.12% decline from 2020.

Apple cash on hand for 2020 was $90.943B, a 9.56% decline from 2019

Apple cash on hand for 2019 was $100.557B, a 51.67% increase from 2018.[1]

[1] https://www.macrotrends.net/stocks/charts/AAPL/apple/cash-on...
I wrote code professionally for 40 years before retiring. Toward the end I was also doing a lot of non-code crap but I always resisted the push toward any kind of management. I am quite happy at how my career turned out.
My girlfriend is a biologist with the National Parks Service and all of their resumes are expected to be three to five pages long. It hurt my soul when she told me that.
Presumably it was typed out by hand, one for each job? Maybe a photo copy. Its a good reason to keep it simple.
Automate resume screening and interview scheduling so you can spend 100% of your time talking to qualified candidates.
All the Metals We Mined in 2021 in One Visualization
Will do! Tomorrow we are trialing it :)
Don't throw C and C++ in there together. C++ would clearly have prevented this particular CVE, if the author had used idiomatic C++ APIs.
You're comparing Sigstore with the log and assuming ultimate trust in their verification process and CA to GPG without the web-of-trust. This is obviously apples-to-oranges.

You also linked to this random python.org HTTPS page which contains the list of people you are supposed to expect to have signed the Python releases. If this is the root of trust... it might has well have had PGP fingerprints.

The truth is that you login with OIDC and Sigstore signs your artifacts, giving you an attestation that the owner of that email/GitHub/... identity made that artifact, and publishes that to a persistent log. This makes the whole thing great for automation (both of publishing and verifying), but claiming that this adds to security is false.

Their Security Model page clearly outlines the limits of their system and is consistent with my characterization https://docs.sigstore.dev/security/:

> If an OIDC identity or OIDC provider is compromised, Fulcio might issue unauthorized certificates

> If Fulcio is compromised, it might issue unauthorized certificates

You have to trust OIDC providers, you have to trust the CA, and the presence of logs only allows those people to notice unauthorized issuance, not end users.
I never said you should not use it, i'm not gatekeeping

I only state a fact, you pick what you want that empowers you to do great things

But i'm not going to ignore wrong claims, it lowers the standard of quality we should expect from the tools we create, share and use
I love this song.

It's also the theme tune for the series "Weeds" (TV series).
From looking at the Issues on GitHub, it seems that someone ported it to XCB:

https://github.com/rtyler/tinywm-ada/blob/master/tinywm-xcb....
Nope, I didn't even know that meaning of "bailing out", TIL :)
It supports multiple user names. From what I've seen in screenshots it shows a picker to select the account you want if there are multiple applicable.
Interesting. I think it's a semantical battle between reliability (literally "can I rely on the system to be up ?") and resiliency ("if it takes a hit can I keep using it in degraded mode")
Most likely, someone with the initials "sd" typed out that resume rather than Ray Livesay
Except for some reason nobody uses it still, wonder why...
More like, alcohol dependence? It provides a profound mental effect that is easy to become an addiction perhaps, so different from blowing bubbles.

This is pretty obvious, and it takes a certain strained logic to ignore it. I suspect folks who over-react to the suggestion that strong chemicals can become a detrimental habit, have perhaps some vested interest in believing it.
Sure. But that bug only needs to be fixed once, whereas bugs like the one described in the link need to be fixed again and again and again and again and...
Construction in the US is highly mechanized, the vast majority of laborers have been replaced by machinery.
For number 4, what should one do other than work? Number 6 seems to be their answer, but that's still "work" just not at a salaried job.

For number 6, any details on avoiding taxes? Are they in a different jurisdiction? My experience is that self employment taxes (FICA), and the need for benefits makes it so you cannot earn half as much and still take home more.
He also says:

> Taking things for granted is a slow demise into madness. Be grateful.
it's always that isn't it? They could go raid the guy's home perhaps. Alternatively you sent embarrassing messages to a woman on a dating app, you have a weird fetish you discussed with someone on there, you're cheating on your wife, or maybe some nation-state actor wants some blackmail on you. A hacker or disgruntled employee has dumped a database of all the messages and journalists and Twitter users are going through it right now. Or maybe you don't trust Bumble. They seem to have an axe to grind anyway.

Not that the issue of minors isn't a problem but I don't think that should always override people's privacy. And FWIW there is plenty of space for people to share compromising messages on the dating app before they can manage to convince a stranger to download Signal and continue the conversation there. That's if you're lucky enough that she doesn't immediately think you are a scammer of some kind.

I am on the side of privacy extremists but a lot of people find that to be a nonstarter so to each their own. I wouldn't dare go on a dating app that didn't have E2EE though or at least a way to anonymize yourself so no phone # required. ;)
The bug relies on undefined behaviour in the C language, but it’s exploitable is due to the way memory access operations are written in C.
Equivalent Rust code would not be exploitable at a language level because that type of raw pointer array access isn’t possible with resorting to unsafe blocks. The undefined behaviour that caused the bug also doesn’t not exist in Rust.
By the latest definition, Security Keys also store passkeys.
Python is easier to use if you come from almost any background, programming or not. I believe this is primarily b/c there isn't a lot of "special syntax" in Python, it's all very explicit and common. The same is not true with Ruby.
I kinda hate Django (ducks). The data model being so intricately tied to the business logic makes it impossible to refactor.
Trust me, I don't use Windows either. Fedora KDE here and I still can say the desktop is not perfect.
Your email is already both the password and 2fa reset for the vast majority of services... including things like bank accounts.

Email access is basically total access.
I started fuming about the cliches, but then I kept reading and there were many great points, but then I started fuming again because the author wrote a self-help book and they are the worst, but I still kind of want to read it.
Nvidia has historically used the power cable orientation as a form of market segmentation. Their high end product that goes into server cases have the power connections on one end of the card and they are parallel with the card. Consumer GPUs have the power connectors sticking out on the top of the card, and even in 4U server cases that can cause the power connectors to rub up against the top of the case or be blocked entirely.
Sounds like you dont have a culture where docs with "2022 Budget FINAL v2 - my copy (3).xls" aren't normal :)
I smoke moderately. If I go without, I get appetite and sleeping issues for a few days.
I feel the opposite, being normal is highly underrated.
> but the Kotlin IDE does that work for you

So long as everyone on your team uses IntelliJ, then no problems. But not everyone uses IntelliJ, and now you've written code that is only easy to parse in a particular IDE...

For this reason, and being able to read my own code outside of just my IDE (say, in Github, etc), I've found it more necessary to be explicit with my typing in Kotlin for all but the most trivial snippets.
Correctness please.
Zig is a way too simple language to justify all the really easy to hit bugs.

I'd give everything for a zig compiler that's 10 times as slow but actually compiles my code.

Also testing infrastructure. Zig really needs fuzzing and property testing tooling build-in. Hitting stage 2 with arbitrary autogenerated zig code and IR, would have really helped detect regressions for example.
Related:

A legal dispute that will test the limits of fair use - https://news.ycombinator.com/item?id=33053286 - Oct 2022 (260 comments)

Does Andy Warhol get same copyright treatment as Google code? - https://news.ycombinator.com/item?id=26919044 - April 2021 (58 comments)
The level of access required to make Spectre work, basically shoehorning microcode into the CPU, means that you'd already have some deep hooks in the box anyway. Easier to use other methods at that point.
A sleuth whose work has resulted in more than 850 retractions
AI Tweet Generator
It's useful for the MRBMs/IRBMs out of Iran targeting Europe. It's useless for the ICBMs out of Russia targeting the United States. It's not destabilizing in any way, especially since the magazine size of the Aegis sites is easily verifiable via any number of means, and the easiest countermeasure is N+! (which the Russians have in spades).
Contractors get contract renewed, usually every year or so. Thats time for renegotiation, never hurts to bring competing job offer. Asking politely leaves money on table.

Being contractor for 4 or even 10 years is kind of fishy. Most countries have a law that converts temporary contractors into permanent employees after N years (4 in Ireland).
So Arm won on mobile because:

> When they upgraded their instruction-set to support 64-bit instead of just 32-bit, they went back and redesigned it from scratch. This allowed them to optimize the new instruction-set for the OoO pipeline, such as removing some dependencies that slow things down.

Yet

> Technically, instruction-sets don't matter, but for business reasons, they still do.

So the ISA matters, yet it doesn’t. Not the most convincing argument.
You don't need it to be fancy, you just need to be one step above the raw Word appearance you have there. It's the equivalent of having the same pair of pants but it fits you. But as you've said it's moot now that you have a job.
I'm aware about this requirement, and it makes sense. Obviously, I want the authenticator device protected, so I must know the device PIN or password to unlock it.

It's exactly the same for Windows Hello built-in authenticator, they require a PIN (or face, or whatever other means you have configured) for the computer itself. Same for iPhones, you need a PIN or password to unlock it. It's merely a matter of frequency (phones and laptops are unlocked daily, Yubikeys - depends on the individual), and if use of hardware tokens is prohibited (or even discouraged) from the very beginning they'll never have a chance and the world would go the path of least resistance once again.

I'm curious if resetting a PIN or password on Windows or macOS or iPhone OS would retain the Passkey identities. I suspect it would...
Sorry, eh.
> Flying cars

Most drivers (in the US, at least) have trouble enough navigating two dimensions. Adding a third would undoubtedly make matters worse. Hell, just look at the safety record of private jets.
I do believe 99% of crypto projects vastly misrepresent their risks, their control/influence structures, and their intent. I do believe 99% of crypto projects are clever ways to hop on a hype train to farm dollars from retail. I do believe Bitcoin is different. Bitcoin is a cryptocurrency -- 'crypto' is colloquial term to specify an industry.
Apple has indeed nerfed ANC on the AirPods Max through automatic software update
Introducing the New Red Hat Device Edge
Show HN: Bogdle – Wordle-inspired Boggle-like game
Hey HN!

I made a word search game like Boggle, but inspired by Wordle's look and feel. There is a default Daily mode that finds a 9-letter seed word from a list and then generates all the English words found in it (the word list needs work, though, I know), but also a Free mode if you just want to generate random puzzles of different difficulties.

The source is on Github: https://github.com/michaelchadwick/bogdle. A somewhat more extensive write-up is at https://michaelchadwick.info/blog/2022/10/25/bogdle-is-live.

I had a lot of fun making it, and hopefully you will have fun playing it, too. Let me know what you think and if you run into any troubles.

Cheers!
Presumably the American is having a cup of drip coffee (100mg caffeine) whereas the Italian is having a shot of espresso (60mg).
Most of this reads like the pseudo-inspirational BS that people post on LinkedIn. Things that seem deep, but are so blindingly obvious and/or incredibly broad that they are of absolutely no value to the reader.
Apple went from the brink of bankruptcy to a $3T market cap, all on the back of Chinese/Taiwanese manufacturing. It's pretty safe to say that the move wasn't "misguided".
You are right, it happened once, but that's what probation periods are for, in my opinion. Also I'd add we don't hire a lot, so this approach probably doesn't work for places which are hiring a lot of people regularly.
As Mastax said, I've had multiple molex connectors melt over the decades across a fleet of PCs. I've seen one SATA power connector melt. I've had numerous of the 4 pin aux power connectors to motherboards melt. But note this is across fleets of thousands of PCs.

In my early days I saw a Pentium process melt the socket off the board. I don't understand how it didn't trip the power before it got that far.
Unit testing is a means to an end: how do we verify that code is correct the first time, and how do we set ourselves up to evolve the code safely and prevent regressions in the future?

Strong typing can reduce the practical need for some unit testing. Systems written in loosely-typed languages like Python and JavaScript often see real-world robustness improvements from paranoid unit testing to validate sane behavior when fed wrongly-typed arguments. Those particular unit tests may not be needed in a more strongly typed language like Java or TypeScript or Rust.

Similarly, SQL is a better way to solve certain data problems, and may not need certain checks.

Nevertheless, my experience as a software developer has taught me that in addition to the code I write which implements the functionality, I need to write code which proves I got it right. This is in addition to QA spot checking that the code functions as expected in context (in dev, in prod, etc.) Doing both automated testing and QA gets the code to what I consider an acceptable level of robustness, despite the human tendency to write incorrect code the first time.

There are plenty of software developers who disagree about that and eschew unit testing in particular and error checking in general — and we tend to disagree about how best to achieve high development velocity. I expect there will always be such a bifurcation within the field of data engineering as well.