skysight-inc/HackerNews huggingface dataset:
> An on-call training program is essential to building and maintaining a successful incident response practice and culture.

I think that employee training in general is essential to the overall efficiency and quality of your business. Companies always skimp on it, and you can see how it hurts productivity and the bottom line. But it's not necessarily going to impact your culture or day to day practices.

The thing that's going to maintain a successful incident response practice is follow-through. Training just tells them what they're supposed to do. But if they're not doing it, training doesn't matter.

What's the most common problem with on-call? It's not waking people up in the middle of the night, or a lack of runbooks, or lack of postmortems. It's the follow-through. When you have an incident, and you "deal with it", and even have a postmortem, what's the last thing on the page? "Action Items" or "Next Steps". And are those action items actually getting done? Is a regular review of your practices getting done? Is the same alert popping up again and again? That is the biggest problem with on-call, and training doesn't solve that.

To run a good incident response process you need people who are getting paid to do two things: 1) due diligence, 2) continuous improvement.

1) Give someone the primary responsibility of ensuring everyone is following the process. Do not let action items stagnate. Do not let weeks go by without writing the postmortem. Do not have alerts without resolutions, or runbooks for that matter. Somebody needs to get paid to do this, because it's boring as hell, not fun, but needs to be done.

2) Make sure the process is getting easier, and better. You don't want to have to check up on everything all the time, of course, and it doesn't scale well. So you want to improve your process so that it's more likely that the right things get done the first time.

You can train your folks what to do. And you can "get by" with an incident response process that nobody actually follows and is never improved. But as incidents mount, it will drain your people and org more and more. By all means, if you're currently facing a deluge of incidents, do training! But the due diligence and continuous improvement is what's actually gonna push incident numbers down.
Thanks for asking.

Spending as much time with my (3) kids as possible before they leave home for good. I took a week of silence in the mountains last summer. Had multiple existential crises which led to a total transformation of my person.

The primary thing I'm doing though is pouring myself into creating as many mutual cooperative communities - that are not intermediated by money/commerce - as possible.

I wrote a treatise on Scarcity: https://kemendo.com/Myth.pdf

I'm starting a municipal waste cooperative: https://news.ycombinator.com/item?id=34226557

I am working with my alma mater - USAF Academy - on a new class to teach cadets basic infrastructure (wastewater, electrical grid etc...)

I teach spin on Sundays at Lifetime fitness

I also manage a support group for about 15 CEOs and organize a dinner every quarter or so

I've done a few small contracts but otherwise living on savings
Both latest versions of Android and iOS support passkeys plus support on Chrome/Brave/Edge/Safari.

While not as secure or convenient as a security key for initially logging in there is no need for a new device in many cases.

besides the fact that the webauthn yubikey is $20 vs $50-70 for it's more popular and well known versions.
Microsoft knows they have 85+% of the consumer desktop/laptop market in the bag, and they're looking to build up an ad business through this telemetry.

Enterprise users are a captive audience - pay through the nose with year over year price hikes, or good luck with Linux. Microsoft's position is increasingly take it or leave it. When Microsoft lets Panos Panay ('head' of Windows) run these insane UI / UX experiments and foists it on Enterprise users via Windows 11/12, Microsoft is playing with fire. It's ridiculous to ask front line workers relearn tasks because some designer at Microsoft had too much caffeine and in a manic state decided to design some insane UX regression in Windows 11.

I would pay extra (more than a Windows 11 Pro license) to have a stripped down, Windows 2000 / NT Microsoft supported theme (I'm not installing UI/UX customizations from Stardock, sorry) that runs on the latest Windows kernel.

Other Enterprises want the same thing - UI / UX stability, running on the current Windows kernel.
A pixel isn't a mid range phone.
This. 2FA (implying a phone number which is most likely most important number in your life) for a link sharing web site? You must be joking.
It’s worse than this. Reddit, several years ago, introduced outbound click tracking.

All outbound clicks from the site are redirected via out.reddit.com which ties click activity to an individual (username / IP / device fingerprint based). This can only be blocked with aggressive old.reddit script blocking which breaks portions of the site.

The outbound click data is used for profiling and interest based advertising, but the data can be much worse than simply linking comments to identity.

They also tie IP/identity to individuals to serve relevant ads and this is the push to get people installing reddit on phones, where deviceIDs is an easy UUID for ads.
I'd never heard of it, but definitely going to check it out now. A lot has happened in the ten years since it was created.
JO might be interested to see that Tcl is now implemented in Go. Not a clone, but the actual Tcl code: https://gitlab.com/cznic/tcl

Tk too! https://gitlab.com/cznic/tk

Made possible by a clever C to Go compiler: https://gitlab.com/cznic/ccgo
I remember seeing the same articles coming out when 10 came out. At the time there was also mention that they back ported the same collection schemes into win 7 updates.
Windows 11 Insider build 25295 brings native RGB lighting control
I think people value the better SOC, but less incrementally year-over-year and more on the kind of upgrade cycle they're on. An iPhone 6S is absolutely still useable, and if you upgrade to a 7 it'll feel mostly the same, but if you upgrade to a 10 (or a 12 or a 14) you'll notice workflows where you get a real increase in fluidity and the same is true on a Pixel. I agree that battery failure and camera is likely what _drives_ the upgrade, mind you, but the better SOC brings collateral benefits.
Yes, you can just install the google camera app
I think you would be surprised. Certainly DosBox will continue to work exactly the same way on Linux as you are used to on Windows.
That's quite the story!
Why would hybrids have to be patented? You are confusing separate things here.
After almost a decade using a low-end 1.6 ghz linux laptop that was eternally plugged to the power supply I could afford to buy a Mini PC that still had decent specs so you still could play mid 2010s AAA games in mid-settings.

The mini-pc already came with Windows 11 preinstalled on a 256 gb SSD, I though that was sufficient to allocate a new partition and install linux in it whilst still keeping windows to play games it, however the steam games soon ate up half the SSD with little room for anything else.

I had to make a though decision either I format the SSD entirely to make room for linux or I keep windows 11 to be able to play games.

I chose the latter, on the bright side it stimulated me to learn IDEs for development and depend less on command line only tools from linux.
Would Windows in a VM (Parallels) just for games work?
1932-33 Ashes: Rare footage of England's aggressive tactic to beat Bradman
Agreed. Seems like you cut deep with the crowd on here who lives in those repulsive suburban spanish revival style mcmansions or w/e
Y'know, some time I'd really like to see a poll about where people on HN are located, because honestly, I doubt more than a modest plurality are actually in the Bay Area, or working for FAANG.

And yet, it's generally so easy to detect the ones that are, because so many of them have the same attitude you do: that you're the only ones who matter on this site, or even the only ones who matter at all.

It gets to be pretty disgusting at times.

- A programmer who's never come anywhere near San Francisco
Just think of all the people with disabilities who are using Windows right now, in banks, hospitals, the IRS, therapy, and government positions, with Microsoft slirping up all your data. All because Linux accessibility is too crappy to be useful for most people with disabilities, especially blind people. All your data, going all to Microsoft. Keep that in mind as y'all use and develop your Linux desktops.
I just set up 2FA on my reddit account and at least it uses totp rather than sms.
Try asking your PI?
A lot of people are still used to the Acrobat interface and its features.
death by paperwork. The reason they are doing this is to minimize paperwork. i.e. only having to pay a bill to a single entity instead of dozens.
Would a keychain window breaker (sold as an emergency escape for a car) work on home windows? Or is the glass handled differently somehow?
An Illustrated Guide to Data Literacy: Data Is Useless on Its Own
Except stinky tofu is popular enough in China and Taiwan - at least among some people. It's not really some weird speciality from one smal town that most would never have heard off. Any decent food tourism guide will at least mention it.
Wasn't a fair question.
I did experiment with it on my Steam Deck, and even there I ended up dual booting and most of my gaming on it is on Windows.

I do play some things on SteamOS but there are some games that I play that either don't work or they are tied into the Xbox Ecosystem so the lack of Xbox friends is a non starter for me. (Halo being a prime example)
The Cynical PM Framework, a business-first approach to product
Preview:

Of course, as a PM, your first responsibility is to your users. Of course. Focus on the user and all else will follow. Of course.

But. Let’s imagine for just a second that your first responsibility is actually to your business. Let’s put on our Mr. Monopoly hats and monocles and start twisting our mustaches in a manner most devilish. Let’s get cynical.
Reminds me of some lines in the final stanza of Tennyson's Ulysses:

Tho' much is taken, much abides; and tho' /
We are not now that strength which in old days /
Moved earth and heaven, that which we are, we are;
Reddit is a shady company. Doing everything they can on the browser experience including interrupting me while I'm typing to try to shunt me over to the app is shady. I don't want the app. I have clicked 'continue in browser' at least 200 times. My preference ought to be clear and recorded by now.

I'd stop visiting altogether if I didn't have a general problem with compulsive browsing.
Some additional, but minimal hacking is needed: https://www.neowin.net/news/windows-11-build-25295-lets-you-...
The trinity is a fundamental Christian belief, not just Catholic. If one doesn’t believe it than most won’t consider them Christian. This is a huge reason why Mormonism is it’s own thing.

I don’t believe anymore as an adult, but this was taught right away when I was a kid going to the Catholic Church. I don’t think you could find a catholic who doesn’t know what the trinity is.
It's far too easy to sell the common person on "bad people bad". Explaining to the common person why they should care about encryption and how bad people can and will exploit any hole in that encryption is far more nuanced.
> "No. We cannot hire freelancers directly. You must go through a third company (consulting firm/body shop) which we work with."

But why the heck would I even consider doing that? The whole point of freelancing (at least IMO) is being _free_ from the middlemen.

So(at least in Ireland, where I'm based) this is an issue with the taxation authority. I'm currently fake contracting (company has no EU based entity), but the reason that they generally want a legal entity is to ensure that all your tax gets paid, as otherwise the company can be held liable for the unpaid tax.

I currently work with fenero.ie, and pay them 130 per month (which comes off pre-tax income) to use an umbrella company which deals with accounts, registration and taxation for me.

I _think_ that you could set up a company yourself, but if you're just getting started I'd recommend using a middleman for now.

I think the body-shop approach through a middleman is where most people start, but figuring out how and when to move on from that is trickier.
One of the updates I was looking forward to, and congrats on the $800k revenue!

This year, I hope to transition assembly to China, where all of our parts originate.

I’d have thought people were doing the opposite nowadays — bringing assembly stateside.
That's fascinating and I believe you were subject to some weird market conditions there. Look at the complexity of gas burners vs a reversing valve and electric heat strips and I think you will see what I mean.
Search and rescue teams pull survivors from rubble
I remember, there was a case where a farmer grew patented plants on his field. They spread to his neighbours field who then got sued by the patent holding company for not licensing that plant. My memory is a bit fuzzy here but you get the idea.

Now, how about reversing that? Think of a GPL-like licensed plant that makes all derived plants also inheriting that license. Legally poisoning the binary distribution format DNA of all inferred works. Wait a few decades and, with a little bit of evolutionary luck, wake up in a Stallman garden.

I'm just a naive dude with no clue about genetics or even law. Just a thought that came to my mind :^)
Did we end up with human intelligence statistically pretty much by accident?
> has the common theme of centralizing. In a world where if your heatpump stops working, you die from cold,

Using machinery for heating isn’t new. Virtually nobody in the modern world uses firewood from a local vendor to heat their homes.

These conspiracy theorist angles are baffling. Heat pumps are just another variation of AC, which is already ubiquitous. If people don’t use heat pumps, they won’t use firewood. They’ll use a regular furnace or electric heat.
> It’s basically a compiler enforced set of C++ best practices. It’s strange how hostile some in the C++ community are to Rust.

Well, the syntax is alien and new, it doesn't do OO the way 9 out of 10 working developers expect it to, almost all C++ popular design patterns have to be rejected, many of the claims("fearless concurrency") are exaggerated and the Rust evangelists are really really toxic when referring to C++ or C, often simply claiming that fewer bugs is worth the tradeoff from switching to Rust.

I literally saw a comment on HN this past week complaining that OSes are not switching to Rust, almost completely ignoring the fact that any rewrite of a 3 decades old codebase is going to introduce more bugs than it is going to prevent, even if you have perfect memory safety (which you won't, in an OS).

In all honesty, Rust would have been adopted orders of magnitudes faster had Rust evangelists been welcoming, and not accused of being defensive or hostile.

I mean, look through this very page full of comments, and be honest, how many of the comments talking about C++ developers are welcoming to C++ developers?
Uhm lol kinda funny
Your fault here, and it’s not really anything more than marketing taking its toll: is that you apply the gamble and stress that exists to small business as if it also exists to places like walmart.

Walmart has ZERO real human “neck stuck out” stress when you get to the top and have billions racked up.

Yet Walmart still dislikes it when employees discuss wage.

Why?
Apple has used the same term to describe the magnetically attached charger to both the iPhone and the iPad. They’re not the same though.

Anyway, I don’t think you need to worry on the phone front. Apple released their tech for everyone to use, so all phones will use the MagSafe charging.
It's easy to forget nearly 10 years on, but React came out when Backbone.js with mustache templates was rather common, and React was a LOT easier to manage. The other popular frameworks at the time were Ember and Angular 1, which were quite a bit larger/heavier. By comparison, React could be adopted in a much more incremental fashion. React was super easy to adopt (and it still is, but there's a lot more of an ecosystem around it now which makes it feel much more like a framework).
Well, that is the thing, I am free to offer food on the street, yet I am suject to the same kind of health regulations as any kind of restaurant.

Same applies to any kind of business.

Why should FOSS be any different?

Maybe this is the culmination of the bazaar idea after all, including quickly stuffing the products back into a bag and running away from the law enforcement official between the crowd, by not having either a license or the expected quality.
Older 802.11g adaptors that work in OpenBSD have largely been removed from Ubuntu.

RedHat removes older SAS RAID controllers and other random hardware they dislike that Oracle includes in the UEK (which is much more straightforward than a tainted module from ElRepo).

Each of these has a focus, and a specialization. Knowing them is half the battle.
I mean technically but if I am running a Windows VM 100% of the time I am using this PC it kinda defeats the purpose of having Linux installed.

Also that would be a huge hit to performance of the games.
I'm still using Win10 (and don't plan to upgrade anytime soon, if ever) but that's not true on Win10. I use a great little utility called simplewall which has this functionality built in and I use MS Defender just fine with no warnings.
Sure, and some political decisions have broad consensus in the US as well, e.g. Medicaid. But that really doesn't say much, because other topics are different and the NHS being broadly accepted doesn't help with collectivism vs individualism, pro/anti-EU etc.
You won't catch me arguing with that. I work both with dynamic and static languages and usually I'll pick the static ones.

Dynamic languages are very valuable when you can afford to iterate and gradually find out the golden path. For the better or the worse, many businesses are of that type.

That being said, I just ended an Elixir contract and absolutely want to code Go or Rust for money again.
HTTP/2 already mostly solved that, as I understand it, except for some retransmit issues that can't be fixed until TCP is replaced with QUIC. Right?
What happened to Dave Winer on February 25th, 2022?
One of the more famous examples of this is the strange object in the foreground of The Ambassadors by Hans Holbein the Younger [0], which resolves as a skull when viewed from the correct angle.

https://upload.wikimedia.org/wikipedia/commons/8/88/Hans_Hol...
> XML get's used in a lot of places it shouldn't be used. It also has two competing standards for parsing one of which is far too heavyweight for many of the use cases it has been used in.

That's not the standard's fault. DOM and SAX (or rather streaming parsing in general) both have their places, it's up to the developer to know when to use which.

Of course, developers often make bad choices, but the only way a standard can "solve" that is by forcing a developer to make bad choices in some contexts, so it's not the developer's fault anymore.
Because they don't pay a competent person to do their security or because the person they paid isn't able/willing to make decisions.

Phishing is not obviously sophisticated but an argument could be made. The problem with letting that kind of language slide is that it skirts responsibility. Society has a huge accountability problem currently and there isn't really an end in sight. There's no need to continue allowing corporations to use such language and continuing the problem.

If a solution to phishing is available and not used, the easy mode hack is attributed to the security of the people so responsible. They took a risk and that went bad. Fire them(the people ACTUALLY RESPONSIBLE) and move forward with a better model of security.

The person actually responsible is the person(s) who made the final call on using security susceptible to phishing attacks where a better option exists.
> I've never seen any company decide not to give a promotion to somebody because their coworker was useless.

Ah, but have you ever seen a company give raises promotions to the people on projects that were successfully delivered?
It was, but it wasn't "a US phenomenon that is spreading worldwide like wildfire through mass-media outlets". People don't need mass-media with a 24-hours news-cycle and social media bubbles to get polarized.
Keyboard control with optional highlight of a current piece is available at
https://kuboble.com/beta/

it works with mouse or Tab for piece selection.
arrows for moves, and backspace for undo
Tier: Pricing as Code
So many words and none of them include “pay people overtime for working on call”.
Nothing says "portable gaming" like an eGPU
I've done a ton of freelancing with US companies over the last decade (I'm in the US) and have literally never had anyone ask for this.
Not quite how apples work and planting an apple seed won't make a "crab apple" -- that is a distinct species of tree. Getting a crab apple from a seed from a store bought apple fruit is the same as planting corn and getting rye.
Very true. Simply having gas available to use results in a base bill for service, even if your usage is zero.

And yet what I see time and again is that initial purchase price is the only focus for construction costs, even rehab work. Those budgets are a separate bucket from utility bills so lower priced projects get approval even if utility bills will be higher.
It's not directly related to the recent spike in prices, especially considering that a heat pump installation is very expensive in itself and potentially disruptive.

Rather, it's a combination wanting to get to net zero, so no emissions, with the big problem of generating enough green electricity. A heat pump system has no emissions and consumes much less electricity than an electric boiler/electric heater.
I think he's probably above average in technical skills and below average in human skills. In that context it makes sense he doesn't like being told by others how to write code. I can imagine it can be frustrating if unqualified people review my code and make irrelevant comments, but usually if you're that good, why are you working with morons anyway?
I use Linux with ignorance.

But how do you know what is part of the shell vs whatever `cat` is (system/kernel function)?

macOS (prob diff from Linux obviously since based on BSD):

$which echo
/bin/echo
$ which cat
/bin/cat
$ which which
/usr/bin/which

It's these kinds of threads that I learn so much.
That's pretty amazing!
> This. 2FA (implying a phone number which is most likely most important number in your life) for a link sharing web site? You must be joking.

SMS is no longer recommended as a means of 2FA, as it's very vulnerable. Some sites still rely on it, unfortunately. However, it appears Reddit does support TOTP.
Manipulating C style strings and arrays, instead of the respective C++ standard library classes, calling malloc()/free() directly all over the place.
Bull Gates says ChatGPT 'will change our world'
Show HN: DSLCad – a programming language and interpreter for building 3D models
Hey HN.
Over the last half a year I have been working on a 3D CAD programming language called DSLCAD. Today I am here to show my first release!

It is heavily inspired by OpenSCAD which got me hooked on the idea of a CAD programming language and what it can do.

Please let me know what you think. Ill be in the thread to answer any questions you may have.
Hot take, I feel like people that complain Rust is hard typically write bade code in other languages. Rust is just preventing you from making common mistakes or using patterns that make your code hard to reason about and debug later.