skysight-inc/HackerNews huggingface dataset:
This is a common problem in any country, most countries need nurses and doctors but it is really hard to transfer a diploma to a new country (often for valid reasons). Tech is the abnormal beast in that people can just move freely, partly explains why tech workers make so much money

If anything europe has better requalification programs than a lot of other countries. But if you are a doctor/nurse in your home country, there is little incentive to move to europe because the salaries might be better, but not considering cost of living. Doctors especially make bank in poorer countries and can live like kings
Good question! I had to look this up, but apparently The Times had legally protected editorial independence as part of the deal that allowed Murdoch to buy it. Unfortunately, that independence ended last January:

https://www.theguardian.com/global/2021/jun/24/rupert-murdoc...

https://www.theguardian.com/media/2022/feb/10/ban-on-rupert-...
I like this. I noticed as time goes by, fellow tech folks around me typically jump on tasks immediately without asking any non-tech questions. When I get a task, half the time I start gently probing why is this needed and what's the source of this request and how it could be handled better (with different people perhaps, or maybe even not at all), and it turns out the verbatim reading of the original task leads down a rabbit hole and nobody wanted that anyway, and there is often a massively easier way to solve the original business problem.

Although here I have to say, if you have to hunt for 78 ever-changing emails throughout the code, maybe you can create one unified template folder or a wiki or something, so that the non-tech people have one-click access to the latest emails and can knock themselves out and do whatever the hell they want with them, at their own pace.
Yes, I've read that too. It's subtly different to targeted abuse because there's no malign intent, they just subconsciously don't give you as much space.
"Seems like the real story is that training data was leaked, rather than the attention getting "they're watching you" narrative the title suggests"

Was the HN title changed. I am having trouble seeing how one who did not read the article would interpret the HN title to suggest a "they're watching you" narrative. For example, one could interpret it as posing a question about leaked photos, e.g., who leaked them and/or why.

The idea that a "they're watching you" narrative is "attention-getting" is interesting seeing that many HN commenters repeatedly tell us that people outside of HN do not care about privacy or surveillance. If that is true, then why would a journalist/publication seeking the largest possible audience try to advance such a narrative. No one cares. That's what they tell us, anyway.

NB. I am not suggesting that I believe the HN comments arguing that no one outside HN cares. They could be correct. However I believe the commenters making them could be biased if they are invested in the survival of the so-called "tech" industry, i.e., targeting internet users with data collection and surveillance and selling online advertising services as a "business model".

The actual title is: "A Roomba recorded a woman on the toilet. How did the photos end up on Facebook"

This website is a publication of MIT. A strange source for "they're watching you" narratives.
I’m amazed that people who argue against immortality often assume it will come with a frail body and an aged brain. Why? To me, the most basic form of immortality is achieved by reversal of aging, including a brain. Your body is just a machine, it’s pretty obvious it can be repaired, even if we don’t know how yet.
The fundamental problem with this is almost all managers interface with programmers through Jira tasks/Gantt charts/Scrum sprints etc. The bad ones even one level down, but two levels down it's almost exclusively the only visible thing about devs.
>stand up meeting [replace with] quick meeting

Lol, if only stand-ups were actually quick
That tweet you linked was plagiarised from: https://twitter.com/rururunit/status/1116412605025935362

(I've been on twitter too long and it's given me a sixth sense for detecting clout chasers who just repost others' jokes or make incredibly low-effort tweets.)
A blank page. It's the beginning of a new task. It shouldn't distract me from accomplishing it.
Mouse Whisperer Keeps You Working, Even When You Need a Break
(let* ((rlist (list '()))
(last rlist))

(flet ((collect (item &aux (cons-cell (list item)))
(setf (cdr last) cons-cell
last cons-cell)
item)
(finish ()
(cdr rlist)))

(dotimes (i 10)
(collect i))

(finish)))
Take your choice of other random SBCs off Aliexpress for $30-40. They all run Linux well enough for headless, short cronjobs.
It's master in the sense of master record (used in the recording industry) and isn't about power/control.

But thanks for supporting the people who ruined years of muscle memory for typing "git push origin master" over imagined and non-existent harms.
Don't fret about the 6510 - chip die shots show that the internal structure is essentially unchanged from the 6502 - they just added 6 GPIO pins, tristate address bus and a halt that works better.
Open protocols don't make for open platforms. Mastodon is "open" yet big server admins are free to block anyone else they don't want, going back to the closed garden model. It is for good reason of course, there always be bad actors, but open or not it's all to easy for organization to use same tools to further their own goals
Important to note that German is a very tricky language to speak fluently. In this case, fluently meaning no grammatical errors. Also important to note is that Germans are uptight about sentence structures being flawless.

Of all the countries I lived/visited (US, England, Turkey), the Germans are most uptight about people speaking their language correctly. I have heard similar stories about France, but I don't know first-hand.

The complexity of the German language combined with the expected level of competency lead to non-native speakers being thought of as less competent or not integrated enough for the German society.
> The job of the author wasn't to build the feature in the X weeks, it was to manage the customer while the project completed in whatever time it took. He was successful too, even though he doesn't seem to realise that was his primary value-add.

This seems unlikely, given the story as written.

Edit based on subsequent comment: nowhere is it even hinted at that the C[ET]O was giving them this as their real job.

> All of the hand-wringing in the article about estimation misses the point entirely.

There's no hand-wringing.
Elon Musk Breaks Silence After Twitter Users Vote for His Resignation
Yes they are, and they are mostly in the USA with 1.2 civilian firearms per civilian.
NASA Robot Sends One of the Saddest Tweets I Have Ever Seen
> Bottom line is that I seldom have to press a light switch

I just don't think of it as a burden. I don't think about it at all. My hand goes up to the switch.

I know I don't think about it, because when the power goes out my hand still automatically turns the switch on, even when I'm carrying a lamp. There's a second where I blink wonderering why the light didn't go on.

I have some 1-watt LED lights plugged in and on all the time, so I don't fall down the stairs. I figure the 1 watt is less than the power draw of motion detectors, etc.
> What’s even more interesting is that even though the wrong estimate wasn’t my fault, it definitely was my problem now.

As a 43yo developer, my advice is to push back on this. Make it clear from the first moment that it's their problem, not yours.

You can do this in multiple ways, like saying "You seem to have gotten yourself into trouble. Maybe next time, come to talk to us first so you don't make this huge mistake again". Don't give in to their smooth management talk, keep your ground.

They will try to let you solve the problem, but that's impossible. Let them solve their own mistake. If it's impossible to solve, well, it's a hard lesson for them.

At least in Europe, there is a huge shortage of developers. That means your employer needs you more than you need your employer (plenty of other employers out there). So stand your ground and make sure the problem stays on their end, not yours. And keep reminding them that they have to come to you for proper estimates.

You can already do this as a single developer. "This needs to be finished by Monday, can you make sure it is done?", "I'll do my best" (never promise!)

When they do come to you for estimates, make sure you know the difference between estimates and deadlines, and assume they don't know the difference. Make sure nobody confuses your estimates for deadlines. Better yet, never let them see your estimates, and only give the deadlines.
Many "blind" people are not 100% blind. Visual impairment is a sliding scale.

https://www.youtube.com/watch?v=cdPymLgfXSY
There's are a point in death. So if you fix death, then you also have to fix the problems that death fixes.
If choosing to go this route, back up any data stored on Azure, and start looking into how to migrate everything to AWS or GCP or something else, without incurring too much downtime. Refusing to pay the charge, issuing a chargeback, or even getting a lawyer involved could get OP's account terminated, or at least suspended.
They'll win the next one as the cowboys' teams are tied up for a year, and all the ones after that as the cowboys lose their good employees.
No problem! Hopefully you jump into it. :)
> it's not uncommon for patients to think they should see results pretty quickly

For me it took a long, long time to see results. Like 2 sessions a week for 6 months... then see slight improvement... then a major regression after some difficult life events... then another year of thinking I wasn't seeing progress... then rapid improvement.

But, in retrospect, there was constant progress that I wasn't in the right frame of mind to observe. One of my issues was that I had spent decades learning to ignore my issues. It took a lot of progress on that issue before I could see most of the other progress I had made.

One thing I could observe quickly was just how bad things were. Almost every session was revealing new ways my thought patterns were making things hard when they didn't need to be. Not what to do about those thought patterns yet, but just that they were there. That convinced me to keep doing the hard work. I'm glad I did.
The Tillitis TKey may provide a solution to this. You can (will be very soon) able to buy TKey devices that are not provisioned by Tillitis. Using the TKey programmer you can build your own FPGA bitstream (using the open toolchain). And then, using the provisioning tool or manually generate and insert your own Unique Device Secret (UDS).

This also means that you can get two (or more) blank TKey devices and provision them with the same UDS, creating a backup key that you can put in a safe place. I'd recommend to at least have different Unique Device Identities, to allow you to see which of the devices you use when connecting it to the host.

The bitstream, with the UDS is stored and locked in the FPGA non volatile configuration memory. It will not protect against a prepared evil maid-attack that gives the attacker enough time to dismantle the casing and perform a warm-boot attack. We are working on ways to make that attack harder, less feasible.
My uncle had the super PET a 6502 system that could shift into a 6809 mode with a whole suite of amazing dev software from the University of Waterloo.
See HUMAN_FALLBACK, posted here not long ago [1], and VR-controlled construction robots already in use in Japan [2].

[1]: https://www.nplusonemag.com/issue-44/essays/human_fallback/

[2]: https://scienceinfo.net/japan-makes-giant-construction-robot...
I see them at least once or twice a year. Mammatus on the other hand...
I was really happy when all my cards/banks started offering options like this. I essentially never have to go over my statements and transaction history with a fine-toothed comb anymore, because it's so so so easy to notice a fraudulent transaction immediately as it happens.
Tencent WeChat is now a GitHub secret scanning partner
I parsed that as "I'm pretty sure I saw them many times, so these particular clouds can't really be rare" + "it never occurred to me that some cloud types could be actually so rare to be news if you so see them".
It's my opinion that the best policy is no policy. If you make rules people will break them. And when the rules are so strict it means nobody bothers. If the rules aren't strict some will push it as far as they can. Everything has context. But in general I think people are far too easily offended today, and considering offense a valid issue to fight on has turned out to be a real rabbit hole. Unfortunately, there's no way an institution is going to push back; instead we get this cowardly policy that always caters to the most neurotic minority of social policers (and is probably partly written by said policers). This is policy by mob, and lowest common denominator decision making.

This is the reason why individuals should defend others, even if they disagree with them or think what they said was unnecessary or even malicious. Because there isn't enough time in the day to worry about language this much, and because it's Orwellian... without the literal thought police.
I think what people want and what Spotify wants is probably not the same.

I don't have specific knowledge but they probably try to optimize for retention.
As such if they concluded that for example discovery is an important part of retention then switching artists might bring less listening time (which is not issue as long as you don't cancel) but more attachment to the platform.

Additionally the way they distribute royalties (as I understand it it's tied to the total of stream not your usage) might have some strange optimization. Like maybe they need to guarantee a minimum for the big player otherwise they might leave or in the opposite maybe they try to drive content away to pay them less and lower their influence.

Note: all of this is random speculation, I have no idea what happens just tried to think of possible use case where what user and Spotify want is not aligned.
If you replace "induction" with "implication" then the comment is probably closer to what the poster meant.
Their “serfs” are free to go though, that’s a big difference. Also feudal lords own land which is in limited supply, but Bezos and Musk own equity which is in unlimited supply, that’s a second big difference.

Sorry, but I see it as just plain old “if a woman is beautiful, anyone who enjoys her beauty is entitled to sharing bed with her”. “If a business is successful, anyone who enjoys receiving salary from it, is also entitled to its shares”. No and no?

People give and receive what they had mutually agreed to give and receive without coercion.

Also I hope that you’re personally not a hypocrite, you will start a business and split shares among employees, and show the world how it is actually better for you, the business, and, most importantly, your employees.
I built my homepage to be pretty lightweight, but it seems that it's pretty easy to mess up: the total size for it in my case is 573 KB, of which 435 KB is fonts:

PT Sans Bold (WOFF2) - 113 KB
PT Sans Regular (WOFF2) - 111 KB
PT Sans Italic (WOFF2) - 105 KB
Material Icons (from the library) - 102 KB

And that's just when including a single type of font (though one could rely upon the browser for bold/italic variations, even if sometimes sub-optimal) and some sub-optimal cruft from the library (since some toolchains might allow importing only a few SVG icons otherwise, but that's a more modern approach than what I went for).

One option to optimize things further (while keeping the fonts) would be splitting them up into character sets and downloading only what you need, like Google Fonts does: https://fonts.googleapis.com/css2?family=Open+Sans&display=s... however good luck figuring out how to do that with your own self-hosted fonts.

Now the article talks about render-blocking fonts, so technically you can just use "font-display: swap" and make it less of a problem, or say no to using custom fonts in general, but the latter won't always be an option.

For another example of how easy it is to mess up, look at Mastodon - the other day I opened a post that had lots of replies and my browser loaded 35 MB of 400x400 profile pictures of users in PNG format. While not everyone wants to use WebP, even JPG with a comparatively lower quality would decrease that bandwidth usage tenfold, as would using something smaller for a profile icon that shows up as 36x36 pixels large in the UI. Nothing against Mastodon, I actually rather like it otherwise, just an example of how it's easy to waste bandwidth.
Image-Generating AI Can Texture an Entire 3D Scene in Blender
British Airways Flights Held on Ground Amid Pilot Software Issue
One goal of an open-SDK SE is for all the base primitives to be open, precisely because stuff like GG-20 gets broken. I don't think it's realistic to think that we're at a point where we could burn such a novel and complicated class of algorithms into a chip, and expect it to have no revisions.

The specific citation was provided because MPC algorithms span a pretty big range of computational difficulty, depending on the features you require and the primitives you assume. Narrowing it down to an exemplar algorithm (even if broken) helps pin the analysis to a given complexity range.

It's also interesting to note that some MPC algorithms assume some amount of secure and real-time communication with an oracle to assist with key distribution, which means you're possibly having to stuff a TLS stack into the SE.
if only they did the same for gold
Valve has built up trust over a long long period of time and they can get away with things other businesses cannot.
The twitter app on my iphone tried to upgrade itself, and failed because the upgrade won't work on an older iphone. Trying to download the previous version does not work. Do I want to spend a grand upgrading the phone just to use twitter? Nah.
It would not only be for the rich. Healthcare cost are incredibly expensive especially later in live so governments have a strong inventive to provide it for everyone. Also people wont have to retire anymore (also great for government)
The most expensive part about it would probably be research, but since every person on the planet is a potential user and there a big savings in Healthcare and Pension i don't see costs being a problem.

Humans dont progress in terms of biological evolution anymore but instead technologically.
The increased lifespan would allow scientist to master multiple fields which would be great for progress.
It’s written in a very OCD style of coding, which I love. Definitely one of the most readable pieces of code I’ve seen in a while.
I keep coming back to this article, for me the standout insight is that skill etc does not increase safety, it just determines your "upper limit". What actually determines your safety is the decision making that prevents you getting too close to the upper limit.

I think a useful insight, not just for dangerous sports but anything with high risk of failure and large decision volume.

> The overriding determinant of pilot safety in hang gliding is the quality of pilot decision making. Skill level, experience, quality of equipment; all those things are not determinants. What those things do is determine one’s upper limits. More skill gives you a higher limit, as does more experience or better equipment. But safety is not a function of how high your limits are, but rather of how well you stay within those limits. And that, is determined by one thing; the quality of the decisions you make. And
What is the point in posting this here? Finding additional developers? No commits in two months.
I'm afraid I have to disagree. There are so many different needs it is impossible to discredit them so simply.
I recommend that readers take inspiration from this model of maturity to see more clearly: https://www.gitguardian.com/files/secrets-management-maturit...
Who to Follow suggests you the most popular accounts in your personal Mastodon
Fun article! Summary: Rewriting a simple solution using a map of bytes, to using a slice of 256 booleans, then to a slice of 32 bytes (256 bits), resulted in 18x faster code and 40% less memory allocation.
My favorites were as Funboy Three and then "Our Lips Are Sealed".
IFTTT is free if you don't need perfect timing. Create the job, a http endpoint IFTTT can reach and you're done.
Can you elaborate on this comment in terms of how no de-duplication is in any way expensive to Apple? People have to pay for their cloud storage generally (past 5GB) and Apple presumably has their price structure setup in a way where it is either profitable or at least only negligibly costs them as a loss leader for its expensive products.

If someone has all kinds of duplicates, so what? Eventually, they have to pay and up their subscription price for the additional cloud storage. The only way de-duplicating could possibly save money is if two or more people with the same file are both pointed to that same file in a location that is not within their account.

I don't buy this de-duplication argument.
Honestly, I didn't even pay attention to the list. The important part of the story is that the execs 'delivered' on a promise, made the deal, and kept the customer happy.
UK bank TSB fined £49M over IT meltdown
> Microsoft might, but are unlikely, to help you out.

Is that true? I have no experience with Microsoft, but I've heard quite a few stories of Amazon crediting AWS accounts when customers write in to say their account was compromised. Or even cases when the customer themselves screwed up some permissions in a way that ended up costing an arm and a leg. Hard to believe this practice would be unique to AWS.
So it depends how and what gets hacked.

The type of company posting about getting hacked like this is probably using the root / admin accounts to do most things. Their lowest hanging fruit and biggest wins would probably MFA, then SSO.

However, IAM is generally powerful enough to allow you to configure what an account can do.

So best practice, you also want to think about how you're going to lose credentials.

- Sharing passwords across services
- leak of your .dotfiles, either by having your laptop pwned, or uploading your .dotfiles to a public repo as a backup or something.
- Accidently pasting into the wrong window or something.

SSO & MFA defeats all of these with exception that your sts token will be signed for 1h in those .dotfiles when you auth yourself. I'm not sure what happens if you remove it from the token from the device, but the device itself being compromised would allow someone to piggy back your session.

Ergo, you move to least privilege access, and then if your laptop, server, or ci/cd runner gets hijacked, then it's only able to do whatever it was allowed to do in the first place.

The last part is you need to detect the misuse.

When you have least privileged access, and a pretty locked down account, the hope is when a session is hijacked, the attacker will attempt to use the credentials and get an access denied. This should allow you to detect and remediate the reason for leak.

Obviously this turns your cloud install into a lot more work, and you still also need to look at maintaining and patching the actual services so they're not compromised in the first place.
That sounds quite tragic. Must be annoying. Not sure if it's the same use case, but if you're interested in archiving links from bookmarks, my DiskerNet product does that: https://github.com/crisdosyago/DiskerNet

also there's plenty of other archiving solutions you can find online, like SingleFile, ArchiveBox, Memento, ... etc
Brave Browser? Banned?
Both… and version jumps in formatting tool basically will touch every single file.
Jaywalking always seemed like such a weird “crime” to me. I’m surprised I don’t hear about it being abused more.
"they will first arrive us in form of invisible clouds" ~Aldous Huxley