skysight-inc/HackerNews huggingface dataset:
> In this case, it's very likely that someone hurt one of them and they're now trying to make the world safer for themselves.

The orcas doing this are tuna eaters, and we are depleting the tuna population. Specifically, they eat blue fin tuna migrating through the Strait of Gibraltar in the spring and summer. They're hungry and don't appreciate the overfishing. This has been escalating for a few years now. Reports of boat attacks were happening several years ago.

> It's all very human.

They have their own intelligence and culture and behavior, and it need not relate to human culture.

Although, I do suspect their raw intelligence to be approximately equal to humans.
I'm pretty impressed with the GCP response, both the fact that they identified the behavior and took the first step in reaching out.
Duplicate. TFA credits the Register for noticing first[0] (70 pts, 62 comments, 6 hours ago, https://news.ycombinator.com/item?id=36082542). And references a blog post[1] (241 pts, 151 comments, 7 days ago, https://news.ycombinator.com/item?id=35993044).

[0]: https://www.theregister.com/2023/05/26/windows_xp_activation...
[1]: https://tinyapps.org/blog/202304230700_xp_wpa.html
I wrote about a similar thing a while ago [1] and the conclusion I came to then is you can not compete with what is in most languages a single-character token "+" that does the wrong thing. (I justify my claim that it does the wrong thing in the linked essay.)

There are, as any number of other comments on this topic are pointing out, a huge number of "correct" ways to do it that exist today. None of them are as simple as

html = "<p class=\"" + params["post_type"] + "\">"

and they can't be, because the only thing that beats a one-token string append is a zero-token string operation... which to the extent programming languages have them, is also always an append.

(Before you say your way is simpler than that... you need to include the setup code. That has no setup code; it is built into the language. If you so much as type "import " followed by anything you've already exceeded that in complexity, let alone if you add documentation you have to read for so much as 15 seconds or anything like that. It's not just about character count at the payload location.)

To fix this problem, first "room" has to be made to make the right thing easier than the wrong thing, and that involves the counter-intuitive requirement of not building the broken operator right into the language. Simply jamming two strings together must become more complicated than it is.

It also suggests that there ought to be something about the process of concatenation that raises alerts to a human reader, something like the minimum concatenation operation being

format_string("%RAW;%RAW;", str1, str2)

or perhaps "%UNSAFE;" or something.

But I don't expect to see that happen anytime soon. Should a new language even try it, it would simply become the number one complaint people have about using the language ("omigosh this language is so broken you can't even concatenate strings" "wow thanks for that now I know never to try it out"), and a newborn language can't afford that.

We need to come up with something, though. The historical #1 security issue has been memory safety issues. It may still be, such things are hard to measure, but if they are, they're hanging on by a thread. The issue of string handling is rapidly taking over the #1 security slot, and it's probably going to be a similarly multi-decade adventure for the programming community to figure out what to do about it. I do know that just as we eventually realized git gud was not a solution to memory safety, we're going to realize git gud is not a solution to this problem either. I am pretty gud, have a deep understanding of the issue, and it's still walking through a minefield for me whenever I'm dealing with this issue.

I have no idea how to fix this thought, even in theory, without "making room" of some sort and making string concatenation fundamentally a harder operation. (And honestly most programmers would simply bash together an "string_append" function anyhow and call it "sa" or something and just bypass the attempt at security.)

[1]: https://www.jerf.org/iri/post/2942/
For all he knows, the students went to a site with study materials to prep for a test. His policy of disallowing students to refer to prior tests was not even explicit in the syllabus, but behind a link. If this policy were clear upfront - absolutely, reference to outside materials is inappropriate and there should be consequences. But I don’t think it’s reasonable to impose these consequences after the fact based on a reference to a reference.

Based on his post, my assessment is that the prof is lazy and an asshole. Maybe there are other relevant factors that would change my analysis, but I have to think this is the version of the story that puts the prof in the most favorable possible light, so….
So stop diluting our power against the owners.
Culture is preserved at the top. It starts at the bottom. The problem is too many leaders read an Adam Grant or Simon Sinek book and all of a sudden think they are the latest incarnation of the tech leadership buddha and impose their will on the team.
FEDS Paper: Fed Communication, News, Twitter, and Echo Chambers
From what I've read that can't really happen again. In the prehistoric past, plants could die and would build up into massive layers. Over time those wound up in various geologic processes that caused them to become oil. Nowadays the Earth has plenty of microbes that will quickly decompose the plants into something that is not oil and that's the end of the process.
I'd say the matter of coercion is not so simple, but the subject of this post is that more and more places seem to be asking for tips, so it would seem like more workers are being asked to accept this model of compensation.
Why would the merchant site need to sniff anything? Once a customer has made any purchase, the merchant then has direct access to charge their cards from the Stripe dashboard. That's why it is a huge responsibility to use these services.

Unless it is something that I've misunderstood?
I don’t know why, but I was disappointed they didn’t disclose how much the reward was.
I remember seeing a video of a mother whale thanking sailors by bringing some food after they freed her kid from a fishing net. I believe if we actually start killing those intelligent creatures, we will severely off balance the ocean!
I often approach this from a “upper bound” and “lower bound” scenario perspective. So suppose I am trying to extract a signal from data that is noisy and sparse. Often the most time consuming part of solving the problem is figuring out how to deal with all of the noise, and I don’t want to waste time doing that just to come up with nothing in the end.

A “upper bound” approach would be to simulate some data that is perfectly clean and meets all my model assumptions, and test my basic method on it. If it doesn’t work on the clean data, it won’t work on the noisy data.

The “lower bound” approach would be to try the simplest and dumbest thing I can think of to deal with the noise in the real data. If I can pick up some amount of signal even with the dumb approach, it makes me much more confident that if I spend time making a sophisticated noise model, it will be worth it.
Fascinating read.
You call it middleman, I call it platform. Owning the platform everyone uses for charging their car is not a bad place to be. Add to this that they're working on including house solar+batteries into a national smart grid system, and they're producing their own large scale energy storage and generation technology... they're positioning themselves to be a major player in the energy industry.
Antimalware engines have already had to support unpacking somewhat arbitrary things, sometimes with serious comedic effects when people fuzzed those unpackers; I don't see this significantly increasing the burden of their examination, signed binaries are no more dangerous after this than before, and unsigned binaries could already bring their own arbitrary unpacker.

(At least quickly thinking about it; I could easily have overlooked some complexity, but barring an unpatched libarchive exploit, I don't think this markedly increases attack surface...and at that point, you could probably make similar arguments about adding any new file format?)
Don't care...
You can still get parts, although if you're going through your mechanic they can be expensive, especially if the mechanic isn't a SAAB specialist. I do think its worth looking to see if you can find a SAAB specialist. When I was based in NYC, Swedish Underground was by far the best SAAB mechanic I ever used (it was booked usually 1-2 weeks in advance with just Saabs) and everything that was fixed, stayed fixed.
"Hard to tell if this entire thing is a joke or not."

Why the theological meta discussion at all?

Is the thing he talks about actually working, is it improving AI output like he claims, or not?

"that Elevates Model Reasoning by atleast 70% "

I am doubtful, but I don't have the tools to investigate it on my mobile, but this is the debate I would like to read about and not potential obscure believes of the developer.
> Hawaii, not a US state at the time, was largely occupied by the US military prior to Pearl Harbor. After Pearl Harbor its residents were subject to martial law and their civil rights were suspended. The situation there was not analogous to the situation on the mainland, so I wouldn't use it to draw any conclusions.

This isn't the reason relatively few Japanese-Americans were interned in Hawaii. Compare it to Alaska. Like Hawaii, Alaska was an incorporated US territory. Japanese-Americans were ordered out of Alaska or interned.

The reason general internment didn't happen in Hawaii is because:

> "The powerful businessmen of Hawaii concluded that the imprisonment of such a large proportion of the islands' population would adversely affect the economic prosperity of the territory.[74] The Japanese represented "over 90 percent of the carpenters, nearly all of the transportation workers, and a significant portion of the agricultural laborers" on the islands.[74] General Delos Carleton Emmons, the military governor of Hawaii, also argued that Japanese labor was "'absolutely essential' for rebuilding the defenses destroyed at Pearl Harbor."[74] Recognizing the Japanese-American community's contribution to the affluence of the Hawaiian economy, General Emmons fought against the incarceration of the Japanese Americans and had the support of most of the businessmen of Hawaii.[74]"

https://en.wikipedia.org/wiki/Internment_of_Japanese_America...

Japanese-Americans were a third of Hawaii's population, so interning them all would have been a disaster for Hawaii's economy and harmful to the war effort. That's why it didn't happen in Hawaii. German-Americans, unlike Japanese Americans, were a very large portion of the population in all states and territories, not just Hawaii. The needs of economy and war obviously wouldn't tolerate the internment of all German-Americans, so it didn't happen.

If you think general internment of German-Americans would have been implausible regardless of population size, because the Germans were white, you need to remember that perception of race has never been a rational matter. During WWI, Germans were racially 'othered' in the UK and US by assertions off Germans being "asiatic Huns" and similar nonsense. Nevermind that you couldn't visually distinguish an average German from an average Anglo, racial othering is obviously not bound to rationality. This inclination to racially other the enemy is only tempered by substantial ethnic overlap between the two warring parties. Where there is substantial ethnic overlaps, discrimination will be officially discouraged and resisted because it impairs the war effort (e.g. Executive Order 8802). Where there is little ethnic overlap, racial or ethnic discrimination often become convenient to the government and becomes officially sanctioned.
> You can audit Monero's supply as well.

Not to the same degree. If anyone knows or learns the discrete log of H, then they can create Monero out of thin air undetectably.
The execution was definitely terrible, but "browser company ships promotional easter egg" isn't that bad as "browser company inserts ads into browsing experience" in my opinion. These ads are why Windows 10+ has become a trash fire despite all the technical improvements made to Windows.

Mozilla were stupid enough to try and sneak this Roboto stuff in, probably as part of the requirements or intentions of the ad campaign, rather than be transparent about it. Stupidity rather than malice.

The VPN ad is a targeted decision comingffrom within the non-profit. I sort of get it, Mozilla is desperate for income because Google is keeping them afloat, barely anyone who donates cares about anything but the browser, and the for-profit ventures aren't gaining much success.
https://news.ycombinator.com/item?id=36078746
> This year one of my students claimed to have done a user experience test with 30+ people, all of which came in person to his house during a period of 4 days. This is extremely unlikely, not to say absurdly unrealistic.

I'm not familiar with conducting a user experience test. Why is this so unbelievable? (Also, the rest of the story is kinda hilarious; there will definitely need to be some standards and process changes in academia.)
No, this was in the browser chrome itself. It covered the address bar and tabs as well as the page.
Same request. I really struggled to use it because I’m only ever looking “down” at my fretboard with the low E at the “top”. When I tried to hold my iPhone in that orientation, it flipped on me.

I had trouble mapping from your visual to my actual guitar. (I’m an intermediate player as well)
I think taking an average 1.5-2 years here is just bad statistics to under-estimate the real-world scenario. It is a heavly skewed where India and China have way extended wait time vs other countries (practically no wait time). The greencard process is provision by country and hence average = bad statistics
No because plant levels settle at a higher equilibrium. Plants may decompose but there are more plants growing at the same time, so it still ends up being more.

Higher CO2 levels are said to have led to a "global greening", in which crop yields have gone up a lot. This is especially true in Africa, so that reduces global hunger and increases wealth. The idea that more CO2 = less life is not as simple as it's made out to be. Climate doomers ignores this type of thing because they are convinced society can't handle complexity, so have to insist that CO2 is always bad even when it's not.

https://fee.org/articles/rejoice-the-earth-is-becoming-green...
It seems very analogous to scabs during a strike.
It's not all management. It's Mitchell Baker. She needs to step down as CEO.
Thank you for providing the URL, that way I could take a look at the project and I can tell you what your problems are.

I will just write all the problems I see at first glance, I try to acknowledge what you wrote here on HN.

1) When I read the parent I first thought "xyzdevs.com" was your way of obfuscating your domain in order to stay anonymous. That's how a bad a brand that one is. This name will never, ever be taken serious.

1.a) The whole site looks like a github or so. This is the best way to make sure no business type will take you serious.

1.b) The stock photography on the site just makes it worse. Unless you show photos from you, your team, your office, etc you just look like a scam.

1.c) No real business contact. Just a "feedback" form, which is not a form but a sort of a box I don't even know. No phone number. Nothing. All that says: it's probably a scam. Until you read "Wyoming" in the footer, than you think, I don't know what, just "Coyotes!" or so? (I am not from the U.S.A., btw.)

2) Hiring coders based on tech stacks is a worthwhile offer. The main problem I see here is a severe lack of clarity in communicating the offer.

2.a) "bring your startup idea to life" does mean what you think it means only to one single group: nil.

2.a.1) People who think themselves as entrepreneurs who are running a startup do usually hire people as full time employees.

2.a.2) All other people who hire developers in any capacity do not think of themselves as "startup" anything.

2.b) Instead of talking about "startup" you should observe what language the people who hire devs from marketplaces use.

2.c) I still have no idea what it actually is that I can buy on your site. Can I hire people on a per hour basis? Do I get employees? What am I actually buying? Or is there something to buy? It's not clear. at. all.

3) The listed devs show no photsos either. They are represented by a "screenshot" of their "work"? What? This ist almost not recognizable as what it is. Scam, must be a scam.

4) You seem to expect that I "hire" one of these screenshots by hitting a green retangle with a number on it? Or am I mistaken? (Again 'what?')

Okay, I don't want to go fruther. You probably get the idea.

Now, regarding your outreach in order to sell…

First, it's good in general, that you have an idea what could be done.

If you have read the above it should be clear to you why that is that neither LinkedIn PM nor GoogleAds resulted in any sales.

What you have to do is to get a clear idea, who exactly should by what exactly. What exactly is it that you offer? I am still not clear on this. A screenshot gets pais 2000$ by me and then?

Who needs that?

So, you want to find clients for developers. That's the general thing you are doing here.

Okay, then tell me: who wants to buy that? In the exact form you are offering it.

If you can tell me that, than you will have mastered the next step.

Because all the above, the name of the brand, the site layout, requirements etc it all hinges on that.
Budget to a “Free House” – the story of budgeting my way to my first home
> There always has been a culture around STEM in the US. Maybe the social background you grew up with wasn't part of that.

If so, I'll be happy that I was wrong. I truly wish that the US had a vibrant culture of encouraging STEM. I'm not so sure for two reasons: all kinds of shows and movies, with a few exceptions, make fun of geeks. Paul Graham wrote this: http://www.paulgraham.com/nerds.html, and my geek friends and coworkers all confirmed similar experience.

Quoting https://thegeekanthropologist.com/2014/10/17/freaks-geeks-a-...: "For many years, geeks were ridiculed for their supposed lack of social graces and interest in obscure, weird or unusual forms of cultural and digital media. Once again, geeks were typified by their marginality and their difference. The representation of geeks in pop culture have replicated and almost cemented the validity of geek stereotypes. "

I mean, why, why the interests of STEM subjects are "obscure, weird or unusual forms"?
QT is used for embedded systems that may run for 10 and more years. If a device requires certification, one does not want to upgrade to a newer QT as that may require to certify the software again, while for security fixes the requirements are much more simpler.
As the article says, the vulnerability was fixed in April and the people who discovered it have already been rewarded under Google's Vulnerability Reward Program. Google also proactively detected the problem before being notified by the researchers.
I am not disagreeing with what the question is supposed to do and how candidates are supposed to answer.

The problem lies in the fact that it creates too much ambiguity in terms of how the candidate is evaluated. Some interviewers may give you credit for your approach, but like the parent, more often than not, you’re evaluated on getting to a specific question or direction, in a specific amount of time. And that just creates a bias towards you hiring people who have a chain of thought exactly like you, which may tbh be not correct chain of thought at all.
It's already been resolved by Google and is not exploitable, so yes hopefully sysadmins using SQL Server on CloudSQL will indeed have an actually fun long weekend.
Yeah, it's in the Adjustment of Status Visa Bulletin. [1]

Go down to Employment Based and look at the priority dates (the priority date for employment based petitions is generally when you file for PERM with the Department of Labor, but there's some complexity here - although that should give you a good idea).

1st Preference (EB1) - extraordinary abilities, etc - is current for everyone except India and China, who are backed up to February 2022 filings.

2nd Preference (EB2) - masters degree or bachelors + 5 years work experience + a job that requires 5 years work experience - is backed up to January 2011 filings for India.

3rd Preference (EB3) - bachelors degree - is backed up to June 2012 filings for India, November 2018 filings for China but is current for anyone else who wants one.

[1] https://www.uscis.gov/green-card/green-card-processes-and-pr...
Firefox is much less configurable than it used to be, though. I can no longer fix all of the stuff in it that needs fixing.
Unsurprising. It was only a matter of time.

'Either the API gets blocked for third-party clients, or you purchase a high price for it.' [0]

[0] https://news.ycombinator.com/item?id=25685294
I originally wrote the joke the other way round. When I switched the order I forgot to change the number back.

That's all for today's episode of Inside the Joke
Well, that's most animals, Right?
Indeed, the path to a research career — necessary for the grants and facilities you’ll need to test your hypotheses — involves such high barriers that you would almost need to already be on that path by your freshman year in undergrad.
This announcement mostly affects folks who are using Qt under paid commercial licenses. Qt 5 had "perpetual" licenses that you could buy, but for Qt 6 they switched to a SaaS monthly licensing model.

If you're using Qt applications purely in the open source world (e.g. KDE on some Linux distro) there's no new news here.
Right, concentration originally meant bring together. But then was conflated with torture and death camp via Europe.

But the American ones brought them into isolation, not primarily the other things. The terminology is now messy.
No, they didn't care about citizenship or where you were from.

> "A Jap's a Jap. It makes no difference whether the Jap is a citizen or not." - — General John L. DeWitt, Commander, Western Defense Command, 1942

> "I am determined that if they have one drop of Japanese blood in them, they must go to camp." — Colonel Karl Bendetsen, Administrator, Wartime Civil Control Administration, 1942

- https://amhistory.si.edu/perfectunion/non-flash/removal_proc...

They also didn't really care about German or Italian ancestry, there were millions of such people and almost none were imprisoned. Nearly all Americans with Japanese ancestry were imprisoned, and most were American-born citizens.
Show HN: Fun online cards with GIFs, images and videos
I really like using j2html as well. The number of times I've accidentally passed in a Map with a wrongly typed key-name has happened too often. With a statically typed template, that's caught at development time, not run-time.
In a world where Tesla is one of the biggest auto manufacturer AND holds a quasi monopoly on vehicle charging, I think there will be a point where governments will want Tesla Auto and Tesla Energy to not be the same, as they'll hold too many pieces of the puzzle.

But that's highly speculative of course, and it's just a possible development in a scenario where Tesla ends up being incredibly successful in the way I describe. Which of course is very arguable, as people have done for years.
P/E is under 20 is the norm, not the exception. Even companies like meta, apple etc. had pe near 10 for long time.
HPE and Ampere take aim at Intel with vision of Arm-based open RAN server