skysight-inc/HackerNews huggingface dataset:
A hack of a CI/CD (Continuous Integration/Continuous Deployment) service can have a significant impact on the companies that use it. In this scenario, an attacker would gain unauthorized access to the CI/CD service's servers, potentially stealing sensitive information such as source code for various companies' software projects. This type of incident is similar to the Okta breach
It makes complete sense though.

If Elon wants or has to make Twitter profitable he has to make its advertising more effective.

No wonder that, for example, Facebook does not allow any kind of third party apps to interact with the platform.
Ask HN: How valuable is being part of YC for a founding engineer?
Hi. I'm evaluating an offer from a brand new startup (raised a decent pre-seed round and have runway for 2-3 years) that will be joining a YC batch.

I'm already working in a similar startup; just without the YC part. So learning on the job is going to be similar in my current role and the one that I'm evaluating. The teams at both places are also similarly great.

Would I; as a founding engineer, gain the ability to learn a lot about building and scaling startups by being part of a team that's going through a YC program?

I understand that YC is mostly for the founders, so I'm not sure if as an engineer I stand to learn and grow from this.

Does anyone who's worked as an employee at a early stage startup that went through YC have any thoughts on how the experience was for them? Were you able to learn and grow more because your startup was part of YC?
What are some good articles like this that introduce general concepts for a general of educated audience?
Yes I did an experiment years ago with 6.5 million files and it was disaster (https://breckyunits.com/building-a-treebase-with-6.5-million...).

However, things have totally changed with the M1 generation of Macbooks. Things that were once near impossible now run in an instant. I need to redo this experiment.
Microsoft most assuredly did not try to replace the filesystem with a database. WinFS was a relational database service that served as a central metadata store for Longhorn. It was slow, but most importantly never provided any value. The idea was that applications would store their structured data inside SQL Server cough I mean WinFS and then somehow they would be able to easily link their data. There was a complicated system of loading application schemas to accomplish this. Of course, if applications want to share data they don't need to involve a brittle system sql database.

Nothing is stopping you from storing blobs of data inside a database and then exporting a POSIX api and calling that a new and improved filesystem. But once again its hard to see what value you get from all this complexity. A filesystem is complex enough and it doesn't have to store structured data. You generally don't want the OS to handle this complexity; you have just added another failure mode to a part of the system that you really don't want to fail.
It reminds me of: "The Hitchhiker's Guide to the Galaxy" which describes the Marketing Department of the Sirius Cybernetics Corporation as: "A bunch of mindless jerks who'll be the first against the wall when the revolution comes."

I understand that Twitter no longer employs a comms team, so no comms on that particular issue. But... has the revolution come?
Yes, tailored screening is one aspect. Prophylactic surgery is another option. There are also pharmacological measures eg tamoxifen to reduce risk of breast cancer in BRCA1/2 carriers. Then there are clinical trials of preventative interventions eg denosumab in BRCA carriers.
As early CD players were intended for audio playback, your CD player can lie to the software. It doesn't tell if it's reading at the exact beginning of a sector (because timing information is multiplexed into the audio stream, and some CD players were not byte-exact when interpreting this), and it also doesn't tell you when it silently corrects some errors. Because for a human listening to the audio won't notice.

But of course it makes a difference if you want to make high-fidelity copy.

That's why there always have been copy apps (cdparanoia on Linux, EAC on Windows) that do overlapping reads, and then detect and compensate these problems.
You should see the flywheels at (the fusion energy research facility) JET. I haven’t, but they sound awe inspiring from the Wikipedia description. :)
I noticed this too starting with 21.10 (I think?), and it eventually bothered me so much I went looking for answers and found out about this.

This was an unusually badly communicated change. I'm fairly attentive to this type of stuff and was caught by surprise.

We're about to start rolling out 22.04 at work. I'll make sure to disable this on servers, non-determinism is not a desirable property for system updates.
> Facebook does not allow any kind of third party apps to interact with the platform.

https://developers.facebook.com/products/

So we’re just gonna pretend none of this exists?
Cisco UCS CIMC is unreliable as well. iLO has the been the most stable out of the three for me.
Yea it can. So I was a bit surprised the OP only discussed the risk of chemical fire (which is of course very low, since there are no chemicals).
Steve Mould did a pretty good spintronics video recently.
https://www.youtube.com/watch?v=QrkiJZKJfpY
Make an AI Chatbot in Less Than 10 Minutes [video]
I have never understood this type of argument. Even in my regular life, I am atypical in more than one one-in-a-million way.

I was born in a tiny city, population less than 1000. But following your line of reasoning, that is sufficient argument that the population of the world is less than 1 billion.

It is fine to say "we don't know". Events in which you are in a one-in-a-million situation will be rare, but unless you know the number of events in consideration, there are few conclusions you can draw. There are way more than a million events, even in trivial probability spaces. This style of trickery with probabilities irks me as a statistician.
I’m fairly confident that in the same breach scenario (laptop with admin permissions taken over), most small orgs would fare worse. The CI system would likely be behind a VPN, but the laptop would likely have those credentials, so it would not stop an attacker.

A small, 20 person org has maybe 2 people assigned to ops, so monitoring and breach detection is likely worse.

Now, a small org may be a less attractive target and some orgs can have top notch security people, but on average, the trade-off is likely not in favor of hosting your own.
Don't see the point of this when I can just build a Kevin Gilmore Dynalo or Dynahi. Very low part count, almost BOM golf like; multiple variations by him and others to cover any case. Closest you will ever get to a wire with gain.

Not to slight Hypex (the company behind the Ncore family of Class D chip amps), mind you, they're probably the only chip amp to ever succeed in making low distortion high output high efficiency chip amps (and if it is a class D and doesn't have a Ncore, it probably sucks, unless it's that new THX design family); but it will never outperform a Dynalo/Dynahi built correctly.
https://www.coursera.org/learn/money-banking

Goes over the history iirc
I got a job and a family. :)
"Haptic technologies consume minimal power in smartphones" [0]

[0]: https://www.immersion.com/wp-content/uploads/2017/08/haptic-...
I’ve literally had the 2 problem before which is interesting, in my case I needed to completely de power the machine, a reboot of the bmc was not enough.
So many minor flags already that the problem could be completely accidental. For example people search in android client no longer checks my following&followers. Odd audio behavior in Spaces. More than a few scattered bits of broken micro features work and then don't again. Meanwhile press coverage is look how they only needed half the people on staff so let's do this everywhere asap and recapture value for the poor shareholders.
If it's eons then what I've heard is all they will find is our toilets. :)
Absolutely, the same can be said about C – And how many succeeded in doing so in the latest 30 years of Web history?

I am reminded about a quote attributed to Keith Martin (mathematician): "Theory is important, at least in theory"
Ahah better late than never but we (in Italy) have them since years…and at the launch there was panic/FOMO because they were out of stock after few days!
Twitter has started showing me soft pornography and other teams football fans that I don’t follow in my main feed. Either is a step too far for me, I’ve logged out on all devices (web, I’ve never had the app) and I’m going to see how many days I can go before logging back in.

Elon Musk is not a product person he’s building something nobody wants in my opinion and I’m happier without it. API being turned off is just another mark against a terrible product.
oh that's sad... :(
Great. Competition is market is a good thing!
Yeah but now you answered your own question. The deposits represent a claim to debt, they are what is used to settle the debt. So the bank can't just delete the deposits it creates. Debts would become unpayable electronically and then cash must be used to settle all transactions.

The obvious factor is liquidity between banking institutions and liquidity requirements by the central bank.

When withdrawing cash, the bank has to give you central bank money, not commercial bank issued money. If it doesn't have this CB money it has to borrow it from the central bank. So having central bank deposits saves you these costs. The other factor is that transfers between banks are also settled with CB money so you either borrow it from the central bank or get it from customers. Finally, the central bank wants to limit maximum money creation by mandating that a bank must keep a percentage of central bank money.

In short the bank could exclusively operate on money borrowed from the central bank but customer cash deposits are cheaper.
Auditors audit for one year. They make sure all the processes and controls are hit and used as expected. I am wondering why the audit firm is not made accountable when these hacks happen.
Digital Assets Issuance Law: El Salvador, Certified English Translation [pdf]
I wrote a blog post which is pretty good - even if I say so myself (it’s had great feedback) I agree with the fundamentals of this article but I fill in some missing pieces.
https://www.onedb.online/blog/what_is_money
You can do the maths for this yourself to find out :)

Big utility battery installations are around $400/KWh IIRC and can cope with at least 2000 cycles[1]. Looking at the table you provided it looks like you'd be able to do around €50-€100 EUR per MWh sale per week on average if you're good at buying low and selling high but lack a crystal ball. So €0.05 per KWh and 2000 cycles still puts you in the red on your battery installation. :(

[1] https://www.pnnl.gov/sites/default/files/media/file/Final%20...
So you're avoiding thinking about how much time you have left?
One of the oldest known songs is the song of Seikilos from ancient Greece. It goes like this in translation

> While you live, shine

> have no grief at all

> life exists only for a short while

> and time demands its toll.

Culture and social structures can mollify or exacerbate the problem of a sentient brain contemplating its demise but wont make it go away.

Once we accept that, it is an empirical problem to find which arrangements work for most of people most of the time.

A frequently proposed solution that underlies many philosophies and religions is ubuntu, "finding meaning through others": from family and friends to generic strangers on HN.
Exactly. Only thing you can do is make a drill where you assume everything is hacked and audit access daily, weekly and monthly.
We struggled a bit and largely succeeded in consistency by hand—picking the patches and using automation to drive them.

What we couldn’t do was get to both consistent and really timely patching states but this was a decade ago where that was arguably slightly less important.
I suppose these guides exist, but you have to be fluent in Chinese to obtain and use them.
Oh, this is not awkward at all - You are spending your time on this with me. So I appreciate your questions and input very much!

From 3.5.2 to 3.5.3 I did remove image assets from a view[^1], so the app contents are not the same.

I have an idea:

How about I bump the version to 3.5.4 without changing anything else, and create a release with both, .zip and .dmg to compare them.

Ideally, I'd use a completely new Mac (to avoid re-using an existing permission) to...

- first install and run the app from .zip, expecting the app to be shadow-banned

- secondly install and run the app from .dmg, expecting the app to work

What do you think?

[^1]: https://github.com/akaalias/Streamline/commit/d113095604ce4c...
Some things I like about FreeBSD are its comprehensive documentation and its slow-but-steady pace of development. I find that it tends to have fewer features, but they are more solidly designed and less likely to change several times over a decade. Compare with Linux's rapid evolutions through hardware events frameworks (devfsd, hotplug, udev) or audio (alsa, oss, pulse) or systemd's ever-growing reach.

I feel I can keep up with FreeBSD, and have confidence that it won't change too much out from under me when I'm not looking.

That being said, it's not that different from a more stability-focused Linux distro like Debian.

Aside: here's an article about doing audio on FreeBSD, which also touches on some "why FreeBSD is nice in general" aspects, too: https://meka.rs/blog/2021/10/12/freebsd-audio/
https://archive.today/uvvVx
> In an ideal world the only person making decisions about your time is you. However this comes at a cost that’s not worth paying.

Big disagree on this. I'm so much happier now when I've started saying no to anything I don't want to do. What's the cost? Sure, I meet and bond with less people but doesn't really feel like a big loss. I'm happy being alone with a few good friends and family that respect my integrity and don't demand or expect me to do stuff I don't want.
Would it? A vault token could be stolen in the same way.
This is why most BESS's in Europe (and elsewhere) do revenue stacking to be profitable. This means they're not just doing arbitrage of intraday prices, but also providing ancillary services to the grid (so if there's e.g. a fault that causes the grid frequency to drop, a BESS will kick in and start to discharge at a power rate that stabilizes the grid frequency).
I use the dwindle layout which is similar to bspwm in automatic splitting mode. One advantage is you can drag and drop windows into other nodes, which will be split appropriately, it's surprisingly neat when you have a lot of stuff open. It's easiest to get a feel for the differences by just trying it out or watching some videos of it on r/unixporn
Adding that water and propylene glycol have been used for this in a few places, e.g. a half-billion cars.
I opened the ticket, received a request for the product serial number - which I did not have, being only an end user - and after that, never heard from them again.

I have replied to their auto-emails, and to the chap who asked for the serial number. Nothing ever came back.

The ticket is a red herring, I would say.

I may be wrong, but given the need for the serial number, Barracuda have chosen block all but paying customers, regardless of the issue. This type of behaviour I think is common in larger companies.

What it means for end users like you or me is the need to be warned by others about issues in the product.

As an aside, I think I recall security issues in their products - ah, mmm, searching finds a ten year old article, which speaks of long-lasting intentional SSH backdoors in multiple Barracuda products.

https://krebsonsecurity.com/2013/01/backdoors-found-in-barra...

Still, that was ten years ago - but OTOH, we have this astounding resolv.conf behaviour today.
I've updated my earlier comment to clarify that I was checking the changelog for apt in my Debian system.

On review it doesn't make much sense - searching for 'phase' there's an 'Add support for phased updates' in 2.5.3, but a few months earlier, in 2.5.1, the comment is:

"(Temporarily) Rewrite phased updates using a keep-back approach."

I thought I'd done a case-insensitive search before, but obviously hadn't, as there's one earlier reference in 2021-01 (for v2.1.16), which kind of aligns with the askubuntu's historical mention of 2.1.16 on the timeline, but the description certainly doesn't sound like the base feature (phased updates) introduction.

"Add support for Phased-Update-Percentage, previously used only by update-manager."
Writing it online where others can see it can make it easier to motivate yourself. At least for some people.
Microsoft Activation Scripts (Mas) – A Windows and Office Activator
That depends on the settings used for less; AFAIK the default for many distros is to display control characters.
Yes. Birds themselves are super efficient. If you ever see a red kite staying stationary in a breeze by only wiggling some feathers here and now you can see that for yourself.

You can also look at the distance flown by certain bird species. The current recorded longest continous bird flight is that of a bar-tailed godwit which has flown from Alaska to Tasmania. It was flying for 11 days nonstop, a journey of 8,425 miles (13,560 km).[1]

These birds weigh approximatelly 290g. Quadrocopters in the same weight range fly for half an hour to maybe an hour? And the godwit fits into this weight budget the energy storage, propulsion, navigation, landing gear, and facilities to reproduce, and facilities to extract energy from stuff found in nature. If any roboticist could mimic this flying feat with any flying machine in the same weight category they would be pretty pleased with themselves.

In short, there is plenty of reason to suspect it is possible to make more energy efficient flying machines than what we have currently.

1: https://earthsky.org/earth/longest-nonstop-bird-flight-world...
The whole point of the site is to use your scrollwheel to visualize it. It's beautiful and a warranted use of scrolljacking.
Christmas trees are a late 19th Century German tradition.
This biggest issue I have with React is that I always feel like I have to re-write my model to use it. I've already got a model, now I want to add a UI. I try, and at least for me, React doesn't like it.

A simple example might be a tree structure. Think of folders and files on your computer. So first I go implemented a file system and I have folders that are a collection of files and folders. This data structure is hierarchical.

Now I want to make a React based UI where the user can create and delete folders and files.

5 folders deep the user want's to add a file. According to all the react docs I'm not allowed to just add a file to that folder as that would be mutating data. Instead I need to make a new folder, copy all the old entries to it, put the new file in. But, since it's 5 level deep subfolder, by the same rule, I need to do the same with its parent (make a new parent, copy all the old entries except the old folder, put in the new folder that's holding the new file). Oh but we're 5 levels deep so repeat all the way up the tree.

React people will often say "flatten your data" but that's the entire point, I shouldn't have to change my model to satisfy the UI library! I've already got working code without a UI. I just want to add a UI, not re-write all the other non-UI code.

I'm sure I just don't get it. Maybe a react expert will tell me how I use react without having to change my model.
It's not mysterious though. It's not particularly complex. You can say the same about tooling and libraries in many languages. React Fibres are probably a mystery to most React programmers, but only because they don't go and look. I've read through the autoloading code, and I just happened to be looking through React's codebase this weekend. React is way more complicated.
The central bank only controls the nominal "time value of money". The money holders have a big impact on the real "time value of money". Why haven't you looked there?

Also, the system behaves erratically even when there is no central bank. In fact, the erratic behaviour becomes even more frequent. That would imply that private market participants are a bigger factor in erratic behaviour than central banks.
I would caution against using “Qui bono” as a heuristic; you will end up believing in a lot of BS using that as a tool. It can only ever be a piece of evidence alongside others. I benefit immensely from sunlight, but that doesn’t mean I am implicated in the rotation of the earth.

In this particular case, there are many natural experiments we can conceive of that demonstrate why fasting alone is highly unlikely to significantly impede “normal” aging in humans in the lab. That’s before we get to how effective it could actually be as a treatment.

And while we’re following the money, there are many powerful entities that would love a “free” aging cure to juice their demographics…so why don’t they use it?
Yes, I think so!

I made a manual for drawing on whiteboards with a bunch of exercises and tips.

Feel free to download it here: https://publish.obsidian.md/alexisrondeau/Attachments/Whiteb...

Let me know if that goes in the direction of what you're looking for!
I can't say about other countries, but for Italy the data in the article is essentially wrong/outdated (requirements have been continuously elevated in the last few years).

Once taken away a few exceptions (workers that had some time in particularly dangerous for health or fatigating jobs or that started working very young) the retirement age in Italy is in 2023 (and since 2019) 67 years or 42 years and 10 months of contribution, no matter the age.

There are a few other exceptions, but the requirements to be part of them are rare, there is a so-called "level 103", at least 62 years age + 41 years contribution, I believe only valid for 2023, and a few others.
At the scale of OP with their particular needs (and wishes for canary rollouts), shouldn't it already be about time to host your own internal mirrors regardless? Then you get full control.
From my experience: no, Gitlab has a much better offering than GitHub.