skysight-inc/HackerNews huggingface dataset:
Combining formatting and output is quite common - C has it in the printf family of functions (some of which do not output into anything, but return a string). Similarly, Java’s output streams have a format method, which can output to whatever, or fill in an array which you can later convert to a string.
I used to have a local only manager but then, obviously, syncing becomes a problem. And then it becomes a choice between syncing an encrypted blob using your own solution (potentially not very secure) vs using a provider who still treats your data as an encrypted blob with no access to the data and tries to do it securely. I think the provider is still more secure (again assuming the 1password access model not talking about LastPass-like providers) plus much more convenient. So if not 1password what would be a recommendation assuming syncing is required?
> Sometimes it's better to just decide for your manager and give them plausible deniability.

Exactly! I don't mind saying sorry. And as long as you get the results, it turns out that most people that matter don't really care about all the bogus policies you ignored.
Chromes password manager used to be as safe as a text file on your desktop. Have they fixed it?
It's not even tikTok really, it's WeChat or any other CCP monitored social media company.

I'd love to have a tikTok not controlled by the CCP (or KGB for that matter).

You know, a platform where saying something against the government doesn't result in prison time or death.
I had the Sony WH1000XM3s and found similar - I still loved them but it was cutting out low droning noises etc that they shone at and voices definitely cut though quite a bit.

Recently though I got the Bose Quietcomfort Earbuds 2 (in ears), and the noise cancelling on them is next-level.
So much better at cutting out higher pitches and I love them.
I often use them in a room with a loud television and people speaking and they cut out a lot of speech and general noise

It still doesn't create silence in those conditions admittedly, but it's very impressive
I actually liked the Trump method, which was to force them to sell the US arm to a US company and sever it from the Chinese. I don't know why that never came to fruition; it looked like it was nearly a done deal (Microsoft was the leading bidder.) Making a competitor from scratch would just open up the userbase to another state actor, though it could give a window for a Vine return.
Netflix plans $900M production facility at former Army base in New Jersey
Probably play games, eat good food, and learn cool new things.
Wow! I should probably join forces with this project instead.
With a list of names, billing addresses, email addresses, telephone numbers, IP addresses (sounds like it's a list since the user first started to use LP) along with URLs having a 99.9% probability of the individual having an account at the URL... that can be pretty much catastrophic. Create a list of OnlyFans subscribers, or if there is a subdomain used for OF creators you can compile a list of them. Any service that uses unique subdomains (like the users username) means you can connect usernames with individuals and so on.
Since they're tied to people's account details, address and similar, I'd imagine quite aggressive blackmail opportunities going forward if the data gets to the hands of criminals.

Think postal letter named and addressed, giving your email, and the adult (or other embarrassing) sites you were a member of listed on the letter, along with details of a bank account to make immediate payment to...

Also, you may be able to identify people working for certain high profile orgs (defence contractors, etc) and target them further if you can gleam from URLs they have access to internal systems by specific URL.
To add some relevant facts from my experience as a current Stanford PhD student: If I work over the summer my yearly take-home pay is about $50k pre-tax [1]. This is theoretically for 20 hours/week of research work "for my advisor", and the rest of my time is theoretically research work "for my degree completion". (In practice this is the same research)

The money flow shenanigans as best as I can tell are:

1. My advisor gets grant money from the government

2. Stanford takes about 40% as "overhead"

3. Stanford charges my advisor my tuition costs, paying for my "class" which is just doing research with my advisor.
This is about $35k/year for years 1-4, dropping to $14k/year for years 5+ with a "TGR" registration [2]

4. I get $50k/year as the remaining money

Note that my advisor also has to spend some portion of his post-overhead grant money on paying Stanford for research space and paying for part of his own salary. Numbers are of course opaque to me, but it leaves me confused what "overhead" pays for if it's not fully covering building space and faculty salaries.

From my perspective, had I skipped grad school and gone straight to work at a big tech company, I would have 5 extra years in my career earning a take-home salary of ~$250k total comp. This makes the opportunity-cost of my 6 years of graduate school about $1.5 million compared to going straight to industry out of undergrad.

Of course, grad school offers lifestyle and work-focus flexibility that can be far greater than available in industry. I feel for myself the monetary tradeoff has been okay, but only because I had no debt from college and have the option to enter a highly-paid career track (software development) immediately after graduation. For students with debt coming in to grad school or less lucrative career prospects, even Stanford's $50k/year would be tough swallow in a high-cost area like Palo Alto.

[1] https://gfs.stanford.edu/salary/salary22/salary_tables.pdf

[2] https://studentservices.stanford.edu/my-finances/tuition-fee...
Considering the possibility that fossil fuels can be exported to resource/land-poor states for a higher premium may explain the “Number 1” status that Texas has here. The more fuel you can free up for export, the richer the state becomes.
I didn't write "I think" or "I believe".

If you want to know my epistemic status: I know about windows based on observable surface behavior and bugs related to accelerated cursors, but I haven't looked at the source. I know about wlroots because I saw the pull requests related to that and a flag to disable it in sway. The last statement regarding other platforms was an educated guess based on gfx card history: accelerated overlays are an ancient feature present in a lot of hardware, not some newfangled niche feature.

And I'm not one of your QA people.
Github Actions is our new DNS no matter what you can always say "uh... I don't know actions was down again."
> casting of all reality into doubt

Throwing one's reality into 'doubt' can cause you to significantly change your behavior, thoughts, ideas, etc. If those are largely negative to begin with and 'casting reality into doubt' (which is certainly one piece, if not the major piece of disassociation) in a safe place can improve and change your behavior for the better, it seems like a great idea to me.

https://psyche.co/ideas/when-reality-slips-through-your-fing...
This is a solved problem. You can buy cars that will drive themselves on the highway and in traffic jams. The other situations are the unsolved problem.
Kind of. They all run Stable Diffusion because they released fully open source.

There’s still competitive advantage to owning, training, and gatekeeping access to models. MidJourney and DallE are both superior to Stable Diffusion along many axes.

Monetizing models is tricky because it’s so cheap to run locally but so expensive in the cloud. Except if you release your model such that it can run locally all advantage is lost.

I wonder if there is a way to split compute such that only the last 10% runs in the cloud?
Not quite. You pay a bondsman 10%. The bondsman turns around and pays the full bail amount to the court. If you show up, the bondsman gets their money back from the court but keeps your 10% as a fee. If you don't show up to court, the bondsman does not get their money back and is left holding the bag for the other 90% of the bail amount.
I've never heard of Oatly, but then again I just sorta grab whatever unsweetened almond milk is on sale when I'm in the rare mood for milk. Looking up Oatly makes me feel like I live under a rock for not recognizing it.
When US bans something to protect itself, that’s OK, but when another country does it, it’s a suppression of free speech and freedoms and whatnot.

Doesn’t this sound a bit off?
Why in God's name would they store the URLs unencrypted? Even if they don't crack the account password, you've just given the attackers a lovely dossier of every place I've ever visited frequently enough to make an account. And this is far worse than simply doing reverse-lookups of my email address across site breaches, since I use multiple email addresses and alias-only logins.

Nice. Fucking. Job.
I'd be more concerned that two different services had some sort of coupling that wouldn't allow them to be changed in a backwards compatible way.
That’s about ten years too late.
>But I was pondering from user POV.

Users are first exposed to a shell rather Emacs by running some commands. They then continue down the road, acquire expertise, and improve their experience in the environment they grew accustomed with.
How is that better than looking for the last ")" character?

Besides, it wouldn't work, because you don't know in advance how many fields are there.
Give this notebook a shot:

https://github.com/arjunguha/BigCode-demos/blob/main/bigcode...

A GPU will help, but I found it passable on a CPU as well.
I thought it was a well-established figure of speech meaning to consider something terrifying. But I admit that I'm not finding that definition quickly online.
good stuff Alex - I usually give some bugged py or sql snippet and start from there ...
Please don't take HN threads into programming language flamewar. It's one of the last things we need here, and it's easily avoidable.

https://news.ycombinator.com/newsguidelines.html
The conversations between Maughm and his characters in The Razors Edge are chefs kiss
Like I said before, TikTok must be fined in the billions for abusing the privacy of its users. This is not the first time that they have done this but now it is clear that they have admitted this.

They have been caught once [0] and have been caught again this year [1] and lied about accessing the sensitive data of its own users [2], [3], [4] and admitted it here. Clearly the fines in [0] and [1] are extremely low and the fine must increase in the billions since these are repeated privacy violations and haven't learned anything from it.

There is no excuse for billion dollar fines for TikTok.

[0] https://www.nytimes.com/2020/05/14/technology/tiktok-kids-pr...

[1] https://www.nytimes.com/2022/09/26/technology/tiktok-childre...

[2] https://futurism.com/tiktok-spy-locations-specific-americans

[3] https://www.buzzfeednews.com/article/emilybakerwhite/tiktok-...

[4] https://techcrunch.com/2021/06/03/tiktok-just-gave-itself-pe...
There is no perfect solution for social network. It will never replace real conversations.

Anything that could be written comfortable behind the screen tends to be soon or later extreme and toxic. Real conversations are less extreme on both sides, because factor of danger from others is more real.

Also anything that has man in middle that decide what is bad or good to post or anything that can be voted also change organic flow of conversation and make it unnatural and eventually selfcensored.

This concludes me to abandon social networks completely. HN is only exception for now.
I didn't see any data on that page, it looked like a generic "about" page for a university
> that contains both unencrypted data, such as website URLs, as well as fully-encrypted sensitive fields such as website usernames and passwords, secure notes, and form-filled data.
The declassifieds on Malcom X are even wilder.
I have an Ikea can opener too, I think it's going on a decade of quality service. It's mostly light blue plastic, I thought it would fall apart, but it still works great. One of those that cuts through the side of the can instead of the lid itself.
This depends on your university, and also you should compare against a benchmark that's not cushy tech companies. I had spouse + child health care with no premium and only copays, no coinsurance. Didn't need the child care benefits so I don't know about that specifically.
> That’s an advantage the US won’t have because [its social media apps are banned in China and] because there aren’t laws that would compel social media companies to hand over data just because the government wants it.

Wait, why would it be an advantage for creation of AI in the US if social media companies (or company) could be more easily compelled to give our data to the government? Given that it's the social media company we are expecting to produce the AI anyway.
Intent matters. The reason why China bans foreign social media is much different than the reason we would want to ban TikTok.
New report shows extent of Apple’s censorship for China and Russia’s governments
Jesus, Musk sounded absolutely clueless there. "Please explain the stack at a high level" isn't normally a gotcha question for an engineering leader who is talking about needing to totally rewrite a major software product.
https://www.youtube.com/watch?v=B21K8X1eja0

Check this out - a list of 20 Atari VCS games the author thinks still hold up in 2022.

I'm not sure I agree with all the choices, but it's an interesting list nonetheless.
Little different when the CCP is ok the board of the company and controls its decisions. Look at what happened to Didi when they did one thing without consent from them. I don’t think you are comparing the same things.
Somehow, the Russians got breeder reactors to work. They have two currently running and are planning a new 1200 GW one. See: https://en.wikipedia.org/wiki/BN-Reactor
She's almost definitely working with the prosecution in exchange for a deal. That's been the rumour for weeks.
I read the thread just now:
~" Self hosted matrix + UP. Nothing special there. Only issue is cert expiration for setups without connections that result in expired certs for https. That requires some work. "~
I don't think SBF is going to be given the chance to plea down-- that's the whole point of getting Ellison and Wang to cooperated, to construct an ironclad case against SBF so that they don't need him to cooperate in any way, and can still likely convict him of enough crimes to put him in prison for 30+ years.
Conceded, a few were operated by USSR. The one that crashed in Canada generated quite a fuss, for reasons.

The film safe from Skylab that crashed in Australia made less.
Forget corporations, I'm concerned about what the governments are doing with this data to harm people (especially those under their own jurisdictions).

ByteDance isn't the problem, the CCP controlling it is.
What if you want to log in from your phone?
I used to have this problem, then I realized I was over optimizing.

The eye opening experience for me happened when I needed to quickly setup a new kitchen so I went to Wal-Mart and just bought a bunch of cheap stuff as a temporary solution. I ended up being happy with 90% of what I bought and only re-bought a few things. In contrast to the meticulous research I normally do and the higher cost items I usually buy, I was quite surprised.

The realization I had is that I was making my decisions the wrong way. Previously, I had been trying to find "the best item that didn't cost too much". Whereas the criteria should really finding an item "that meets my needs". It doesn't need to be the best, just good enough.

I can now go to a store and pick up whatever random skillet they have without much thought and it works out 90% of the time. Much less stress. And when I do later realize I need something better, I have a better understanding of what I need so it makes shopping easier.
FCC calls for mega $300M fine for US robocall campaign
Activist judge blocked the sanctions on TikTok.
Sour grapes from lower paying engineering disciplines that have been hijacked by certification organizations. I’m a software engineer. I earn triple what you earn as a civil engineer, and I don’t have to pay a certification body for the title. I can also work in any state that I want, and I can move without second thought or recertification. Go cry about it.
Does anyone consider the EU passing all sorts of data privacy laws and putting regulations on American companies as censorship?

No, just regular protectionism and it doesn't get too much flack.

The problem with China is that they are actually suppressing free speech and freedoms and whatnot. Do you disagree that this is the case?
Linux Kernel Ksmbd Use-After-Free Remote Code Execution Vulnerability
Didn't he say in an interview that he had "nothing left but a credit card with 100k debt"?
While not strictly e-commerce. This was an important design choice when we designed our spreadsheet upload tool for Geocodio.

It should be possible to go through as much of the process as possible without having to sign up first.

It certainly makes it technically more difficult to develop, but it's incredibly powerful and user friendly.
I can't tell you how many times I've done a guest checkout, then come back to register and my order doesn't show up in the history, even if the email matches. Now I make sure to try to register first as it's such a broken experience in too many places if you don't.
I believe that you're talking about something real, and when you provide the fuller description, it no longer feels like an attack.
> a (rigorous) definition for what 0.999... means

But 0.999... is not "defined" to be equal to 1, it is equal to 1 as a matter of fact. (In other words, both are just different spellings of the same number arising, automatically, from the construction of the decimal representation of the reals.)
Yes you can do that, and some companies actually go a step further and pay for the upgrades themselves and become like a pseudo-utility (See ESCO's: https://en.wikipedia.org/wiki/Energy_service_company) where people pay them what they were paying, and the company reaps the benefits of the savings,
but it actually gets really complex. Energy prices rise, and the clients needs change, they might sell their building, (who actually owns the equipment?) and it doesn't necessarily create correct incentives. It also delays payment by minimum a year, and it's a lot of additional hassle. (How do you handle disputes for unusual situations like them buying new equipment they didn't tell you about, etc. etc.)
No, I don’t want a corporation. I am trying to imagine how renting would work in dense cities with restrictions on ownership. It seems it would be a less liquid market.
Theoretically this can happen to Bitwarden Web Vault too, right? Unless I self host it of course
Someone on the Lawfare podcast quoted a judge who said that how a case is settled is very often not the most important thing. Rather, what is most often of paramount importance is just that a case is settled, so that the disputants can move on with their lives.

Whenever I find myself agonizing over marginal trade-offs, I think of this quote.
The current rule is that submission titles should match the link title. Are you advocating for editorializing these?

Who would judge and enforce your vague rule, pun intended
I might be misunderstanding, but if the url was adobe.com, then it would be possible to find the corresponding password from that adobe breach for the same email address (not trivial, but if someone moves in the right circles I assume they could get a whole host of the big breaches in a searchable format).

A subset of users might have reused the breached password(s) for their lastpass master password.

Not sure if you could also feed the breached passwords into the brute force tool to give it a headstart, in case they did a slight variation on a breached password for the lastpass master password.
two thoughts

People love to say "it's early" and "it will improve" about ChatGPT. but amount of training data IS the dominant factor in determining the quality of the output, usually in logarithmic terms. it's already trained on the entire internet. it's hard to see how they'll be able to significantly increase that.

And having models build models is drastically overrated. again, the accuracy/quality improvements are largely driven by the scale and diversity of the dataset. that's like 90% of the solution to any ml problem. choosing the right model and parameters is often a minor relative improvement
LOL. That’s actually a good question. None of the names are entered with diacritical marks, so I am unaware if the site supports them.

As far as Noel, this name is a fictitious example only. I have the problem with other names, but I take your point.
The whole market is getting slaughtered today.
I don't think it takes a genius software engineer to be able to give a high level description of the stack they are in charge of.
I don't do that.

I have a gmail account tied to my phone (Android) and I've logged into that once and it just stays logged in. I don't use that account for anything else.

I don't really do anything else on my phone that requires a login.
Maybe that’s opening up a new space for you then: did you know that you can access a Mastodon user’s feed via RSS by appending „.rss“ to the address of their profile?
Lactose free milk also lasts longer against spoilage.

There was a time the lactose-free choices in the US were very low, I love seeing major brands now carrying lactose-free products. Especially Breyer's ice cream, that was an eye-opener.
To me this doesn’t really address the bigger picture. Why is this tracking even possible? Why don’t we build better security in to our products? Is it because US companies built their business on this same type of tracking? Perhaps that’s the issue we should fix.
Would you actually know?
I responded to a proposal with no apparent thought behind it.
Inauguration of mainland Europe's first satellite launch complex
Tit-for-tat makes perfect sense from a game theory point of view, even ignoring the egregious abuse of data for nefarious purposes by the CCP.
You are right, a US PhD degree is in more demand in general.

There is a reason our economic systems are not pure supply and demand though, because in that case workers/environment eventually end up being exploited.

The US would look very different without minimum wages, environmental protections, and a bunch of other regulations which limit supply and demand based exploitation.
Without a join, you are sending the entirety of Table B over the wire and processing it in Python. Then you send that back to the database, inline in a query, to do an ad-hoc join on Table A. The results are then sent back over the wire to the Python side. Notably, the result set may be small, and it may always be small. Table B may grow very large, and all of it will always be sent over the wire and processed in Python.

With a join, the database is able to do the join on Table A and Table B in place, using whatever indexes it already has built up. The only thing sent over and processed by the Python is the result set. Even if Table B becomes very large, only the result set is sent over the wire and processed in Python.

Without a join in the query, you're essentially having to replicate the kind of logic that already exists in the database engine, in Python. That is, the database engine is already doing chunking and parallelization for you.
Sometimes. A lot of people have pretty well-defined values, though, and stay in iffy situations out of uncertainty and loss aversion. Even if the expected value of a radical uprooting and redo is positive, the potencial downside -- alienation? depression? loss of function? -- can be extreme.
> Why do we allow our strategic enemy to have software on our phones?

They make the phones. What makes you trust the hardware in the first place?
I don't know which companies they were, and didn't see a mention of hiring continuing or not in the OP.