skysight-inc/HackerNews huggingface dataset:
Many of the emails are sent in bulk. We have a published security page, a security.txt, a link in the footer of our page, a security@/abuse@ email alias and still receive the random email asking if there's a security program. The person hasn't found anything yet, at maximum it was an automated relatively easy scan. Those we replied to then never came forward with a report, now we no longer reply.

Reward can also be swag, even large known brands sometimes send branded t-shirts or socks instead of payment for low security issues (e.g. open directory listing on a website that doesn't contain any important files).

Be sceptic about 'critical'. In my experience just about anything gets labeled high and critical in the emails. "You should require a captcha on your contact form otherwise someone could send you 1000 emails" was deemed critical by one person recently.

Reply with promise to look into the issue and a non-commit first. The comment from julienreszka is perfect.
Elon Musk addresses Twitter advertisers in a meandering Q&A
The last time I did that, I rode a bike. It was ok.
I've never seen that example and reading it, I was surely mouth-agape dumbfounded that anyone thought that would be OK to design like that
I am not sure if you aware but Thunderbird was indeed droped by mozilla and now it is independent project, with quite a lot money from donations so they seem to be good for the future
"How is preventing your competitors from undercutting your price not anti-competitive? It's preventing the one thing that causes competition to lower prices."

Because Minimum Advertised Price (MAP) policies are one of the most common practices used by the large majority of consumer goods manufacturers and brands, especially in the electronics or higher end goods space.

Every retailer who is an authorized seller of a brand that employs a MAP policy has agreed to advertise/list/publish the product at a price no lower than MAP, or risk losing their reseller status. Note that I did not say they can't sell for a lower price, just that they cannot show a lower price to the general public to elicit a sale.

MAP is not just beneficial for the brand though, who's products remain priced accordingly to limits the brand has set; it's beneficial to the retailer who can count on a minimum set margin and not have to worry about being undercut by another retailer. It also benefits the end consumer by ensuring the retailer and brand retain enough margin on the sale to facilitate after-sale support and service as well provide the means to stay in business along with the benefit of helping to protect resale values (for applicable products). MAP policies themselves are fully legal under current anti-trust laws (in the US).
Interesting fact I learned recently. Canaanite = Phoenician. The people- not the language.
> All I remember of this early period was just how much OS9 would crash

This just takes me back to working for an Apple reseller and the stream of internal hype around Copland (what was supposed to be OS8) in the mid-90s. It was going to be a microkernel! Memory protection! Pre-emptive multi-tasking! System 7 apps would run in their own microkernel personalities to avoid crashing anything else! You might even be able to run Windows in a separate personality!

Instead it ended with the actual OS8 release which added some theming and 3D effects to System 7.
I live in a oil rich area and there's a large economy of well paid folks attached to it. They all understand it's boom and bust. They get paid really well when it's booming. Then they take the L when it's busting. All to say, I think people need to come to terms with the fact they weren't being paid well due to their sheer brilliance but due to the risk they assumed by joining a boom and bust industry. Nobody was lured into a job at FB under unfair circumstances and I'm sure they're not exiting on unfair circumstances. Does it suck to be in a cyclical bust period, does it hurt worse that it's in large part self inflicted by Zuck. Of course, of course.
And don't have to worry about skyscrapers, optic fibre cables, etc etc.
I would have expected the _LIBCXX_ASSERTIONS macro in libc++ to affect the behavior, similarly to many other standard library undefined behaviors.
Often people come up with new algorithms by taking inspiration from existing ones. For example, someone might see a sorting algorithm and think of a way to improve it, or they might see a search algorithm and think of a way to make it more efficient. There's no one way to design an algorithm, so it's often a matter of trial and error until something works well.
One more thing: Don't forget that a lot of the time, people don't come up with new algorithms, they just implement existing ones. So while someone might not be coming up with a new algorithm, they might be coming up with a new way to implement an existing algorithm that is more efficient or more effective in some way.
Shared Electric Moped Company Revel Is Leaving D.C
What are the benefits of using POP instead of IMAP?
It's happening all the time, for example AMD B450 boards received PCIe 4.0 compatability via a firmware update before AMD asked the mainboard manufacturers to pull the feature again.

Or now nVidia is offering DLSS 3.0 with their new Geforce 4000 cards, however it appears very likely that they could also do it with the older cards. Statements to the contrary seem far fetched. nVidia has done this in the past, too (RTX IO comes to mind).
> I entered the market

> I managed to cash out

> I avoided all centralized exchanges

> Almost all my trades were on decentralized exchanges

Only the entry and the exit trades were on centralized exchanges then right?

Are there any examples of safe and legal decentralized fiat on/off-ramps? I've heard of "Bitcoin ATMs" (I suppose that would count as centralized though), and I've read stories of people getting into trouble for using P2P services like "Local Bitcoin". It all seems a bit sketchy.
Binary Lambda Calculus (2020)
I wish it was that clear cut. Here in Australia there is an acute shortage of rentals and rents are going through the roof [0]. As with everything, there is always a caveat.

[0] https://www.macrobusiness.com.au/2022/05/australias-rental-c...
As someone who considers the G4 iMac to be the single most beautiful piece of computing technology - perhaps any technology - she’s ever seen, (I still keep two operating at home) I just have to say if it was some sort of mistake; it was the best one the ever made.
As a recent NixOS convert, I concur
Lots of sodas contain caffeine. If you drank 2L of any sodas containing caffeine then that would likely be equivalent of a few cups of coffee per day.
One really cool use I am making use of is that I am building an IRC not that interacts with Gitea webhooks.

I decided to add Ntfy.sh support today just because it was so goddamn easy. Thanks for the cool service!

Now whenever new pull requests, issues or commits are made I get a ding on my phone!
For a CEO, the next step is trying to get the business back on track and restore stock price. I think that his crazy to think Zuckerberg will not try to do that.
From what I hear on the grapevine the people getting laid off today are the people who would have gone on wall street 20 years ago.

>now, if google lay off a lot of people... that would be different

The culture in google isn't any better. Smart people who want to do things haven't gone there since 2012.
Presumably privacy and security related. IMAP keeps a copy of the email on the server, while POP deletes it
Suddenly I invested 30mins in writing some of the worst poetry. Great stuff! :)
Open Photos app on the Mac, go to "Photos -> Preferences", go to "iCloud", and tick the "Download Originals" checkbox. Make sure you have enough hdd space to store the whole collection locally.

This will make Photos start downloading all the full, original pictures and videos in your iCloud library into the folder `~/Pictures/Photos Library.photoslibrary/originals/`.
In creative industries it's incredibly common not to get paid for 6 months or more.

I remember a certain animation studio based out of NYC that worked on an entire animated series for 9 months after only getting paid for the first episode and then their client had a meeting with them and said "Jesus told me not to do this project". That was the end of the project and the studio. Nobody got paid. They were already constantly 6 months behind paying their animators before taking on that job...
> Mark Levine

You mean Matt Levine, one of the greatest financial writers of all time?
Guardian Columnist Jack Schofield suggests China is making a Totalitarian Bet - that with enough software, enough sensors and enough State Security the people of china can be forever controlled and directed.

I think software is too complex, society and opportunity too complex for directed development to work - it must evolve, and like science needs openness and spread of ideas - a Democratic Bet.

One kind of society will be utopia and one ... not.

Everyone will want to live in utopia - and it's on us to code it, vote for it, nurture it.
I'm afraid they're going to build these things then they'll have their water rights cut off.
I'm happy to pay for Miro, an infinite whiteboard. I've used Miro for the last few years and it's been a great way to keep a team organized and aligned. We've used it for product planning, project management, and remote team collaboration. It's been particularly helpful for us as a remote team.
One low effort comment for AI, one giant leap for AI?
There's a big diff in the case of NFLX - the speculation gains are not what the market is for (from a social good standpoint) - they're a side effect of having a market for raising capital for doing useful things (where useful gets defined in a decentralized way by their customers). I mean congrats on winning the lottery, but let's be clear on why crypto mostly has been making us poorer overall.
Just to point out Facebook is a success and is still making insane profits every single day.

They aren't losing money or posting losses.
I also really wonder WTF is wrong with people. Even children should know to not harass someone for any reason, let alone that perhaps that person had conflict while working on a game they enjoy.

I cannot imagine ever going after someone like that, under any circumstance.
Where's the execution detail? He never tells you how the config file is going to be run. Again, the entire post is relative to the goal of getting a stable CI build. If your config file is filled with implementation details of that goal, you're being imperative.

It has nothing to do with "writing programs in your config file". The problem is that your config file is telling the runner how to reach the goal rather than what the goal is.
Take-Two bought Squad in 2017. Here's a couple of article that cover some of the key events.

https://screenrant.com/kerbal-space-program-2-delay-2022-sta...

https://www.bloomberg.com/news/articles/2020-06-03/kerbal-sp...

https://www.eurogamer.net/after-more-than-a-decade-developme...

It looks like Squad did get re-involved in KSP2 once they closed out development of KSP with v1.12

I'm not saying people shouldn't check out KSP2 and I have high hopes it will be a worthy sequel. It just isn't the sequel I would call out as a specific example of a safe one to pre-order.
something I can do with my hands

You really teed it up there.
LG’s 27-inch OLED monitor [60Hz, DisplayHDR 400] is a $2k rarity
Syria received almost exclusive coverage when the war broke out and refugees started arriving to Europe. Everybody was sympathetic and thinking what they could do.* But the situation was very different from the one in Ukraine, more like an uprising against a dictator and not a full-scale invasion.

* Years passed, and it's still not clear to what the West could do (or have done).
I’ve used it in anger and it was honestly pretty great. There are def some differences from pg from dev perspective but operationally it was much better than any clustered/ha pg solution I’ve used including managed products.
Thanks for the context, I'm a beginner in Russian and don't know much history of the language.
CZ's 4D chess play to buy US licensing he could never otherwise get his hands on.
‘The Haskell School of Music, From Signals to Symphonies’ by Paul Hudak and Donya Quick. Cambridge University Press, 2018.

The beauty of this book is that it’s a very good way of learning Haskell and functional programming, but it’s also interesting in how it covers concepts related to music theory. If you want to join art and computing, this is your book.

Apart from that, it gives you music-related programming tasks to complete. The best way of learning is by doing things!… I loved this book when I discovered it.
Organized retail theft rings. Both the stuff you see on the evening news where a group grabs everything off the shelf at an Apple store and one off thefts from places like Best Buy.

The fact that Amazon willingly participated in this scheme is a strong indicator that they were getting a high volume of charge backs and returns that they had to eat because the devices were new in box but couldn't be activated.
From Async Code Reviews to Co-Creation Patterns
Another take: DevBox provides 60% of the features of Docker while being faster and simpler. https://github.com/jetpack-io/devbox

It provides filesystem isolation -- it uses Nix under the covers. This is great if you're a dev and don't want to mess with routing ports across a hidden VM to the host, just run a command and your service appears directly on the host.

DevBox allows very rapid development. And for production, it exports to Docker. You get the best of all worlds!
Did you even read my whole comment? It's BS because he/she/they blanketed it without taking any nuance which i tried to do with my comment + an example!

Quote - "Speaking from work experience: A/B testing doesn't look into the nuances of usability or productivity, it looks at easy-to-quantify metrics like conversion rates and money spent"
> turbo SIGILL generator

This gave me the delightful mental image of a CPU smashing headlong into a brick wall, reversing itself, and doing it again. Which is pretty much what this would do.
Effective modern C++ is by Scott Meyers, not Herb Sutter.
> it absolutely does not care for kernel ABI stability

That may be true on the mach system call side, but the UNIX system calls don't appear to change. (Virgil actually does call the kernel directly).
Meta has been amazing and enables me to talk to family members anywhere in the world easily.
> whether swap() is used or not depends on the algorithm

I didn't mean the std::swap() function itself, but the swapping of two elements a[i] and a[j]. Is there any sorting algorithm that doesn't rely on swapping two elements (or two parts of the array)? I guess, only if the sort is not being done in-place and the result is stored in a different variable/memory.

> does not necessary look like the elements were swapped

The only way elements don't look like they are swapped is elements are changed, added or removed, which doesn't happen during sort.
Interestingly Tether started wobbling at just below $1.00 again today. I wonder if it's connected to this news, the drop in BTC price, or something else.
>Give me 10 motivated, aligned high-quality people, 5 years, and all of us room to focus, and I'll build you a better Google, almost guaranteed.

Is this unique to you, or can others do the same with the same 10 people?

If not unique to you, how come 7 billion people on the planet have not been able to do this over the past 25 years? Certainly this many people of that caliber get together often enough to do this, right?

If unique to you, then you really need to just find one person in that 7 billion to fund you so we can see another trillion dollar company get built in 5 years by 10 people.

Or, third option, this isn't reality, and you're missing some understanding of the issues involved.
Im a bit of a Doctorow fanboy, but I think hes hit the nail right on the head.

The reason most American trade sanctions seem so poorly defined or defended as of late is because we're not actually fighting to keep china from gleaning yet another ICBM Secret or gobbling up all of our data (American tech companies already do that.) What we're fighting so vehemently against is Huawei's introduction of 5G technology to the global market nearly a full year before any US players myopic market vision decided the US needed it. We're fighting chinese chipmakers --not because they are theives-- but because they are arriving to market with challenging, responsive, disruptive, and in some ways more advanced offerings than traditional western players. The Tiangong space station should have basically settled the oft rattled question from the octogenarians in congress: how close to the US is chinese technology. its there in most cases, beyond it in some.

the sad part of Corys article is the conclusion that for every $chinese_company that now makes it to market with faster tech or better tech, the US will be forced to escalate using counterproductive and increasingly meaningless non-competitive responses like sanctions and tariffs. its a slow death unless the US gets more competitive, and by competitive i mean it cant just be axing domestic labor and posting higher revenue. US companies are going to have to eat their crow and actually offer something customers want, not something theyre told to want.
GitHub Blocks – waiting list signup
Binance likely to walk away from FTX deal-WSJ
More work hasn't given more pay for decades. Worker productivity in real terms has gone up 50%, yet take home pay has not.
Ah yes. You are correct.
The Taycan was and is electric only.
Yeah, that's true, but there's still a use case for it imo. I have hundreds of manually created albums, lots of Smart Albums with various criteria etc. That python module gives you a lot of control if you want to say export only specific albums, or say batch process a few hundred albums and export them somewhere else. The Photos app 'Export' option is quite limited.
Poptop – A modern top command with dynamic charting
Virgil doesn't use ASLR. I'm not sure what value it adds to a memory-safe language.
Also, you're breaching the hacker news guidelines:

> Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith.

https://news.ycombinator.com/newsguidelines.html
Honestly, I have caught myself looking for an advanced search option on my github page more than a couple of times. Just to remember that it does not exist. Long overdue!
Huh, this is timely. Incredibly random but: do you know if there was anything that changed as of Ventura to where trying to mmap below the 2/4GB boundary would no longer work in Rosetta 2? I've an app where it's worked right up to Monterey yet inexplicably just bombs in Ventura.
That's only if the RPG hits the tank, which unless you can get pretty close it probably won't. They're useful for urban combat where a person can get close without being noticed, but for an open battlefield you really need a much more advanced guided missile system which can hit targets kilometers away. And even if you are in a circumstance where you can hit a tank with an RPG, there is a pretty big difference between slowing a tank for a few minutes while it evaluates the situation and disabling a tank. Finally, while an RPG is cheap, it's still bulky - each round is about 4 kg. It's not as bulky as a missile but no one is going to carry enough rounds at one time to threaten a coordinated group of armored vehicles, at least not without sacrificing other capabilities.
For me this is another painful reminder of what git could have been. Imagine if it had been this ergonomic from the start. Everyone would have the same set of commands. Whereas if you adopt these aliases you can't easily discuss any git related issue with someone who doesn't use them.
I too was confused.

A bit of searching seems to have revealed that the actual problem was inadvertent gear retraction. Pilots were retracting the gear, either while adjusting flaps on final approach or after landing when they tried to raise the flaps again.
Corrections staff at Riker's island get unlimited, unauthenticated sick leave, which may partly explain the large number here, along with their employment as clerks, bakers, door control, etc.

Incidentally this is what I meant above, about the union being out of touch: unlimited sick leave makes staffing unpredictable, which makes work unpredictable and frankly dangerous, which makes guards take more sick leave in a vicious cycle. The union has weaker-than-expected motivations to fix this, because everyone with seniority does not actually work in the housing blocks.
>Should we go back to 90s website design

You mean, like the one we are all reading right now?
Strongly agree, there is a compelling collection of technologies there, and I'd be very keen to keep in touch. I'm hoping to spend December working on how these could fit together for a very different use case (I'm in a research institution in Australia looking at energy and renewables). My email is ben dot weise at gmail dot com, feel free to hit me up :).
Back in the dotcom bust pretty much everyone said “yeah, they knew the risks” and generally didn’t care about the losses.

When the housing bubble collapsed you had millions of people who probably didn’t know the risks (because everyone with a voice was saying housing prices never go down) and politicians cared a whole lot.

I’d say even if the whole crypto craze went bust overnight all you’d get is a collective shrug.
> It was originally a startup, but had been bought by IBM by the time Apple was interested.

Rosetta shipped in 2005.

IBM bought Transitive in 2008.

The last version of OS X that supported Rosetta shipped in 2009.

I always wondered if the issue was that IBM tried to alter the terms of deal too much for Steve's taste.
lol exactly (https://xkcd.com/451)

"i need to short a stock"

"have you tried options?"
> Or altering the voting situation where he has absolute power

Absolutely this. Others in this thread are saying that the fact of having lost a lot of money is enough for him to be "accountable". But IMU the specific arrangement with Meta class B vs class A shares is that the group of other institutional investors lost _more_ but didn't have any ability to influence decisions, replace the CEO, etc. Zuckerberg's large on-paper loss isn't accountability for decisions he made, but is just the risk of being a wealthy person with a lopsided portfolio.

Both because of his role in deciding to hire so much, and because he's dead set on pursuing a metaverse vision which is controversial, I think "accountability" would require him to at least make it possible for other shareholders to vote on proposals on an equal footing.
Attractive female students no longer earn higher grades as classes moved online
I think they were making a statement about the company not the staff.
His wife is a pediatrician. She can pay her own way.
Binance Says It Will Walk Away from Deal to Buy FTX
Most of the Toolbox was still running emulated 68k code in early Power Mac systems. A few bits of performance-critical code (like QuickDraw, iirc) were translated, but most things weren't.
This is an excellent explanation, thank you.

Still, I have questions. When I have topic checked out then run "git rebase -i main" does it first do fetch (or whatever) to make sure main's latest commit history is represented? Or is it up to me to do that first?

The rebase concept is sound, but the semantics are a bit daunting.

git rebase -i main

This sounds like an operation is being performed on main. Terrifying! And "rebase" is a scary word choice regardless. Perhaps you remember when you were new to Git and can relate.

I may give rebase a try at some point, to see if perhaps it might speed me up. The vast library of Git commands is a bit much for me though. It's like using an aircraft cockpit to control the television!
> they wrote a program (or likely a set of programs) that computes it on the fly.

Which is precisely the sort of imperative process I am referrencing...