skysight-inc/HackerNews huggingface dataset:
There use to be MacWorld and MacUser for discovering these tips, conveniently scattered around the Math Dept tea room, or a very reasonable subscription. These days I've no idea how people discover these tips. TikTok? By chance on Twitter? Searching would be impossible.
I'd argue this library design is fairly ancient in C# land. The reliance on static configuration values goes against modern DI-centric design + integration patterns. It also doesn't have a central entry-point for discoverability and instead expects each internal client to be used directly.
Of course… we all know how buggy all computer programs are.
So instead of paying $100/month for insurance I might be paying $400/month, so $3600 per year in profit?

Seems minor?
Easy. Have a setting where someone can consent to (or not) receiving images that may potentially have nudity in them.
You just need to be really really careful about downloading anything

...as you always should be anyway.

Forking over a couple hundred to uncle Bill for protection every five years or so is not entirely pointless.

...and being forced into their increasingly user-hostile manipulations? If anything, that saying about "known unknowns" and "unknown unknowns" comes to mind.
There are lots of people with the technical skills to work at Google. Only a subset of them have the right personality to work at Google. It is a very unique culture.
This comment is a gem. Every HNer who has thought 'why do they need 100 engineers, I could do that in a weekend' should go read this now.
I have dropped flake8 everywhere due to how hostile it has become to the rest of the python ecosystem. They pull a lot of nonsense like this, such as a refusal to fix their dependency pinning with no logical reasoning.

Besides… Between Black / Tan for cosmetic issues and Mypy / Pylance / Pyright for logical issues, flake8 has never since caught any concrete problem with my codebase and has solely been a source of things to disable or work around.
Sure there were explosions, of course there were. The investigation has not released any information about the location - internal or external - please feel free to correct me. I was only demonstrating how easy it would have been for them, since others were going on about submarines and what not.

Russia had already shut off the gas, "hurting" themselves by your own logic. They have a long, proven history of irrational behaviour and false flag operations. And if the USA had done it, against all reason and logic, why didn't they finish the job?

Anyway, I did say almost certainly Russia. Who knows, could have been some faction in Germany or another EU power seeking to really force Germany's hand. But it seems far more likely to be the obvious actor with the means, motive and mindset who started the bloody war in the first place.
FTC Takes action against Drizly and CEO following security breaches
Do you have a citation for this? I'm marginally interested in this device, but only if I am certain I can run Linux on it.
> Every other country has settled on either Telegram, WeChat, WhatsApp or FB Messenger, or other niche apps. These apps work on both iOS and Android and often also Windows. I haven't sent an SMS in probably 12 years. I don't know anyone who has.

This is a big call. I live in a country where SMS is still standard. Most communication with friends and family is done by it.

Can you please provide a source?
What is a dirty bomb and why is Russia talking about it?
MacBook Air/Pro use 1080p webcams
I know it’s not the NYT, but just curious how it feels to wake up and see your work on the front page of HN
I don't like recommending that anyone take drugs so they can cope with their job — it reeks of dystopia. But in your situation, the path of least resistance is to go to a psychiatrist and ask for an antidepressant. Make sure to mention if you have trouble sleeping as this will affect the choice of treatment.

Over time, hopefully you will be able to find other ways to manage stress, and take a well-deserved vacation.
Yeah, I know some people do use it on Windows. But I already felt that I sunk lots of time into debugging my config on multiple occasions, so when on Windows basically nothing from my config worked I lost any will to debug it yet again.
Personally I have Spotlight indexing completely disabled, except to index items in `/Applications` so I can use it as a quick-launcher. This was not easy to configure, and I'll probably have to do it again next time I update the OS. But it did seem to help with performance - Spotlight was often the cause of unpredictably high CPU usage spikes.
‘It’s not the most comfortable place, but I’m free’
You're correct of course, but to back up the parents comment, they do have a habit of implementing things other than the low hanging fruit that developers are frustrated not having, leading the drive towards other jvm langs
I've been running in the beta since the spring too and I haven't seen any of these problems
If an massive earthquake levels SF the government will most certainly come in and rescue homeowners.

So it’s either subsidy upfront or on the backend?
I often use https://github.com/Rubjerg/Graphviz.NetWrapper to export the graphviz layout as json and then use d3 for rendering :)
I’m not a Kotlin user, but this struck me as ambitious:

> having the entire Java ecosystem available

and, in the same point:

> Compilation for so many platforms, directly to native executables

Does this mean you can compile pretty much any Java libraries to non-JVM executables?
while I think there is a lot of room for improvement, I don't think that's true.

Copied from last "This week in Matrix":

- Another big thing in Synapse 1.69 is experimental support for faster remote room joins!

- The new WYSIWYG (What You See Is What You Get) composer is available in Labs soon; It’s in active development and we’ll be adding more functionality soon.

- Notifications research is near conclusion; We trawled hundreds of GitHub issues, discussions, looked at competitors and interviewed some users. We’re really excited to bring improvements to your experience.

- Threads is making great progress and we’re hoping you’ll start seeing these improvements in the next few weeks! Keep your eyes open for updates.
A .NET library for high-performance Win32 native interop
FBI warning: This ransomware group is targeting poorly protected VPN servers
f.lux is also at 11% on Windows 7/8.
Economics of partition pruning for edge workloads
Be careful with this approach during probationary period.
Classic HN off-topic post, sorry.

Was a particular CMS or static site generator used for this page? It reminds me a lot of software documentation pages, and I never considered before that this kind of site layout and design would be good for a blog.
Sketchviz looks a bit nicer, but also 'sketchy' https://sketchviz.com/new
Regarding mermaid, see my misplaced comment one level deeper. I'd think that with node.js it can export to svg.
Senator seeks clarity on how Facebook collects health information
If there wasn't a FAANG interview in your future before, there is now. Well done!
You don't lose 12GB, since it's replacing existing data
US charges alleged Chinese spies in telecoms probe case
I have had the pleasure of contributing to a couple different networked drivers with very talented maintainers that I like to use as references.

One supports a wide array of Framework versions and has both Sync and Async I/O, as it must to implement the ADO.NET database driver interfaces. Reading the internals really highlight the way that .NET has evolved over the years and what must be done in each target version to maximize performance:

https://github.com/mysql-net/MySqlConnector

The other supports .NET 6 only with Async I/O only. This support policy seems to be the way that "modern" .NET development is headed, as .NET 6 will be the floor for LTS .NET (formerly .NET Core) releases in a few months. Async APIs only greatly simplify development, and make it simpler to remain performant when targeting WASM.

https://github.com/Cysharp/AlterNats

As a library maintainer, one thing I often wonder about is how to indicate .NET version support. One option would be for the major version of the library to track the major version of .NET, so if I were to publish a new library today then start with .NET 6 support and start with version number 6.0.0 instead of 1.0.0. This would limit the library to only making breaking changes when the .NET version changes though.
'European Delivery' should get you started, that's what BMW uses.
DHL named most-spoofed brand in phishing
Code style opinions and folder choices is vaguely what OP is asking for though, right?
lots results when I google 'wayland clipboard manager' - here's the first

https://github.com/yory8/clipman
Can you please explain how you or any other third party (beyond my phone provider) can read my SMS at will?
Literally my thoughts too!

"Who cares?" --> people that care are people that want to have control over that option, as not every tool is written intelligently.
>The number of affected properties is relatively small, but they make up a large portion of overall claims.

Specifically, 1% of properties make up 25% of all claims.
I went through a similar period in my latest role. On the other side of it I’m wondering if it’s normal to be overwhelmed in the first 6 months. Leaning towards it being very likely so.
what even is core xmpp?

Don't you need XEPs to do any messaging in the first place?
It's bugs like this one that lead me to believe that yes, "rewrite everything in Rust" is in fact the solution.

I have the greatest respect for the quality of the SQLite codebase, which is one of the best-tested open source projects in existence, but at the end of the day, if formatting a string can lead to arbitrary code execution, it's time to question the foundations you're building on.

As long as C and C++ are considered acceptable languages for writing mission critical software, these vulnerabilities will never go away. We have incredible static analysis tools and hyper-advanced fuzzers driven by genetic algorithms, and yet this continues to happen despite every precaution imaginable being taken.

It's time to fix the problem at its root. Languages that are memory unsafe by default need to be phased out sooner rather than later.
Interesting to ask GPT-3 itself how it will influence fintech.
Republicans Sue Google to Try to Force Spam into Your Inbox
The project was founded in 2014. It was heavily focused on building a federated protocol before there was anything related to end usability. Maybe they've just flubbed the implementation and done a poor job of it, I don't know. I can tell you from the external perspective it's not doing a great job at anything technical or end UX.

WhatsApp nailed distribution, Signal does privacy well, Telegram is simple and scalable. What is Matrix? None of the above. I'm sorry, that might come across as harsh but I see a lot of wishful posts here that kind of throw users in that direction without real insight and knowledge into it. We don't want DIY that's endlessly complex and hard to maintain. The reason centralised apps work is because there's no setup, so really you're fighting frictionless experiences. Want to make self hosting a better experience, make it frictionless.
Are the tickets still available? When I click on "Register", I see one option of "Free" with the text "Closed".

And if the tickets are no longer available, will there be more?
The point is that “it’s open source” is a really bad selling point when you’re talking about a messaging tool meant to be used by everyone.

Good luck trying to convince the general population that “the UX is bad but theoretically anyone can improve it” is better than what you get out of the box with other messengers.
> it's pretty easy to tell some generative software to "Female giving a presentation in a well lit office with windows open" and get something pretty decent.

Tell me you haven't tried Stable Diffusion without telling me you haven't tried Stable Diffusion.
Ubuntu 22.10 Up and Running on the LicheeRV –$19 RISC-V Board
It’s a directly linked Blackrock PDF. Safe :)
Or takes forever building the feature and/or takes forever getting it right, and the one customer who wanted it gives up and leaves in the meantime. Or even worse they hang on with some tiny engagement that turns out to not actually bring in a lot of money, but still sucks up 15% of developer time (not to mention customer support reps & business development people constantly having to keep them happy) and adds extra value for no other customers.
Yeah, like employers don’t hide things? This is a not a good advice for a human being with a family who is going through an industry created problem and does not have the funds to take a break. For burnout a break is needed but many employers would be so inconvenienced that they’d easily choose discarding that employee, even if the break is not paid.
It doesn't happen when you update each beta in a row so it probably wasn't noticed. I didn't get it on my beta machine, just on my work machine.
Depends. Is stuff like context receivers (https://nomisrev.github.io/context-receivers/) needed ? No, although it's a fun experiment. Are multiple receivers needed (https://youtrack.jetbrains.com/issue/KT-10468/Multiple-recei...) ? Not really, but when you are dealing with the JVM, nested class hell is a very common thing, and cleaning up your code is always pleasant. Implicit namespacing ? (https://youtrack.jetbrains.com/issue/KT-11968/Research-and-p...) Fun thing to get.

The thing is, they're all optional. You're never going to use any of these features if you don't need them. Your code can stay as a nested list of calls. But put them all together, and you can have code that is super explicit about what it needs to do, without having to re-pass things that are already there.
> WASM in the kernel

This may not be too crazy of an idea, it would enable fine-grained secure sandboxing like what Firefox is doing.

Securing Firefox with WebAssembly - https://hacks.mozilla.org/2020/02/securing-firefox-with-weba...

Practical third-party library sandboxing with RLBox - https://rlbox.dev/
Yes, but you also need quality of life.

I've been in a startup where the product was so cool that we'd get people working for nothing but options because they were too burned out by $MEGACORP developer culture. The money developers were leaving was so ridiculous I figure we could have charged people to work for us and we'd still have gotten more applications than we knew what to do with.
This is good advice.

Unfortunately, it's really hard, because an opposite of the statement is also good advice: Don't underreact to weak signals. I honestly couldn't tell you which I see more of. Overreactions are intrinsically easier to notice, since they're big and showy, but I kinda suspect there may be more "underreaction" in the world.

Unfortunately, having the precisely correct level of reaction is really hard and I don't have any solid snappy advice for it, except that's one of the things that is probably irreducibly related to having experience and wisdom and not just raw intelligence.
Yeah, exactly. People tend to misunderstand fuzzing, and think of it as "feeding random garbage at an API". Fuzzing, done with proper tooling, is automated coverage testing. You have a bounds overflow that depends on input data but only if condition A and B and C are true in the runtime state? Fuzzing will find it, almost always, by detecting the branching behavior of your code.

So all the replies here saying "the tests didn't find it because they didn't cover the case" are missing the point. There are test paradigms that don't rely on humans to enumerate cases.
JavaScript doesn’t have a C API, that makes all the difference
tl;dr:

> The new PayPal log in option will first be available to iPhone, iPad, or Mac users on PayPal.com and will expand to additional platforms as those platforms add support for passkeys.

>Once existing customers log in to PayPal with a browser on desktop or mobile web using their existing PayPal credentials such as a username and password, they will have the option to "Create a passkey." Customers will then be prompted to authenticate with Apple Face ID or Touch ID. Then the passkey will be automatically created, and next time PayPal customers log in, they won't need to use or manage a password again.

>If they have devices that don't support passkeys yet, users can still use an iPhone to log in with a PayPal passkey. Users simply scan the QR code that will appear after they enter their PayPal User ID.

Rollout in the US today, other countries early in 2023.
If you can't trust lived experience, what can you trust?
I first started using nix thinking of it like a version manager also, but that’s not what it is, and thinking of it that way will only bring pain.

Nix is a package manager (like apt or whatever), and like package managers, it works with a set of vetted, decently verified package versions (NixOS releases). Mostly this is fine. It’s easy to use nix stable for most stuff and nix-unstable for anything where you need newer stuff. You can then configure “overlays” to the set of packages where you specify how to build particular versions where you need it.

It took me a long time to make the mental shift from nix being something like pip or npm or asdf or pyenv or whatever to thinking of it like a true linux distribution’s package manager, but it helped everything to click once I did
How is this not just a marketing stunt to try and keep them looking relevant in a world where the most bargain basement stock photography is entirely commoditised?
No, but I'd be more amenable to the price for the verifiable cardboard than infinitely numbered unauthoritative pointers
As a Windows 7 fan, one confounding factor is that Windows 10 eventually added their own Night Light which replaces basic uses of Flux.
I also help locals with their PC issues ... my favorite solution is to wipe the drive and install Ubuntu ... they get the same browsers without fighting Windows ... these new linux users absolutely love their PC once again
Maybe so, but the connectors are rated for like 16 cycles, which is insane in a consumer product like this.
That's an unfortunate list of known issues.
I also vividly remember the moment I had idea 1 from my list above. It was such a nice warm autumn day in the last months of a very turbulent year: I struggled finding something worth doing a PhD on, and in the 10 weeks before, I got married, my wife got pregnant, was rushed into emergency for a suspected ectopic pregnancy a few days later, which then suddenly turned out to be a completely normal pregnancy. I also had an upcoming conference talk a week later, for which I was completely unprepared. Suddenly the idea was there, and it was like a door to a wide avenue opened, with follow-up ideas left and right all along the way. It turned out quite beautiful in the end, and when we published 6 months later, one of the reviewers found the idea "elegant", which was by far the most positive thing I ever read in a paper review.
The problem is that you lose all help from tooling/IDEs. Like in Celery, the definition is "shared_task(*args, *kwargs)". This gives you no indication of what parameters you actually can use. Opening up the code doesn't help, as it's many layers down. The decorated function ends up untyped, but with some new methods on it that again are untyped. But like originalfunction.delay(...) should have the params of the original decorated function. But no, all that is lost. Just pray that the docs are correct.*
A loose connector on my RX580 did the same to me, could never explain the weird resets even with power draw diagnosis until I opened the case and just "wtf"

So happy it didn't burn up now!
Be aware anyone using Parallels 17, it isn't compatible on Ventura so you will have to upgrade to the latest version for $70:

https://forum.parallels.com/threads/did-anyone-else-on-17-ge...
No, if you are targeting a different platform you can't use JVM libraries.

If your target is JavaScript, you can use JavaScript dependencies (sort of: they won't have any type bindings so you will need to code then yourself) but you can't use any JVM libraries on it.
The Ever-Reddening Revenue Streams of Big Blue
Well dang, I guess I haven't kept up.
The language itself has some issues, like no attention at all paid into modularity and reusability; the old-language distinction between functions and data; lack of expressivity of the the type system (well, not compared with Python and Scala, but just ADTs would already bring a huge gain); and the complex limitations on the symbol literal vs. evaluated use that forces people into metaprograming every time they need to decide on a table at runtime.

The first one would limit the use of widespread best-practices, but in practice it's not the bottleneck, because every SQL-based tooling already creates strictly more constraining issues.
There is no precedent for this. The NRC is constantly monitoring plants in the US and operating staff are regularly rotated geographically to prevent them from becoming complacent. There are so many layers of protection around nuclear power in the US that it would take many pages to describe.

That you think it would be possible to forge documents under managerial pressure shows that you Don know the first thing about nuclear power in the US.
Diffused time is needed for creativity to come. The best ideas always come while not actively working on it. Working out, going on a walk, taking a shower, or even before going to sleep can have your subconscious do the work for you.

I always thought big tech companies knew this with how many "fun" activities they have in the office, but it seems like nobody utilizes it as much as they should. At least my experience.

There's a cap on active work each day. Yet we work through that cap thinking we're some type of hero and end up doing pretty poor work.

This is very "left brain, right brain" thinking. There's a number of books on this topic. I think one of the better ones is Barbara Oakley's books on how to teach yourself.

If you read any famous creative's memoirs, you'll see similar patterns where the best stuff came at the oddest times. You'll probably even see that cliche story about Edison falling asleep with metal balls to wake up and write his inventions down.

Peter Drucker and many before him knew that "knowledge work" was a whole different ballgame. They were quite ahead of their time thinking back now in 2022:

https://hbr.org/2014/10/what-peter-drucker-knew-about-2020
Yep, but you can do this without acting like an ass.
I hate that both the first (3.11.0) and the last (3.11.9) releases of a minor version branch are called "final".

I get it, 3.11.0 is "final" in the sense of "definitive" from the development team's point of view, the final one of the pre-releases. But 3.11.9 is also called "the ninth and final 3.11 bugfix update" in the schedule [1], the actual final one from the maintenance team's point of view, in the sense there will be no more.

Can't we find better terms, that work for everyone? 3.11.0 stable? 3.11.0 actual? For anyone but the dev team, this is in no way a "final" release, this is the "first" release.

[1]: https://peps.python.org/pep-0664/#lifespan
One of the reasons why software is so bloated is because the developers are constantly using it on their high-end machines. When a customer complains that something is slow on their 7-year-old laptop, the developer often just shrugs and says 'works fine for me'.

I routinely run and test my new data management system on old, outdated hardware to insure that the speed is as acceptable as possible even when there are resource constraints. If a big database or file system query runs fast on old hardware, then when someone uses a high-end machine they will be truly amazed.
Defuelling completed at Japan's Monju reactor
No, if you use Kotlin native you do not get access to Java libs.
In my experience, it's Qt 6 and Qt Creator dropping support for Windows 7 first (along with Python and Blender).