skysight-inc/HackerNews huggingface dataset:
Thousands of them at any given time, of which we've had news reporting on single digit numbers from years ago. You should now update your priors.
The above is NSFW
Dont forget people who spend resources just replicating studies.
You're putting forth multiple traits, btw, but I don't think it's as trivial as you think it is.

One trait seems to be "shared culture" whatever that means. What about humans with cultures we don't share? What about humans with downright alien cultures we can hardly understand nor agree with? What does "shared experience" with a dog mean? What about brain-dead humans that we don't share an experience with?

Another trait seems to be "being a human". What about Santa's elves or any hypothetical sentient being that's not a human? Does any alien race that discovers us have the ethical justification to farm us?

> it wouldn't necessarily be unethical to eat them, but we have a universal taboo because edge cases are so absurd and rare.

Would it be okay to farm or enslave humans if we simply didn't have that taboo? Or in a hypothetical world where it wasn't taboo: would it be okay then?

These aren't edge cases btw, these are reductios that test for position's consistency and dispel the sort of "I'll know it when I see it" hand-waving we like to do.

Any coherent position has a coherent answer to hypotheticals.

There is a trivial answer that does nip it easily in the bud: we agree to value sentience thus we stop farming sentient beings whether they're human, cows, or Santa's elves.

Finally, I was just offering a potential response to your question. HN is a poor place for this kind of discussion, but I hope you at least see that there is conversational meat on the bone, pun not intended.
How would this not result in kangaroo harvesting farms/extinction?
The legacy admits will just go to some other college where some other suckerfish can hop on to get access to a lot of resources..so what's the big difference socially.
The US still has a heavy reliance on magstripe, even though we rolled out EMV, and many cards still have it, and you can just take a stripe dump regardless.

The actual user of the stolen card dump will cause the terminal to allow a magstripe fallback (typically with a bad chip on a fake card that won't read) -- "aw jeez my stupid chip isn't reading" is still every much a valid excuse to a cashier to go to magstripe.
I am currently in such a team where the lead strongly wanted to write everything in Effect.

Me being functionally-leaning I embraced his choices, you can write very very clean applications in Effect. There's other choices I would strip if I was the lead, but Effect is not one of those.

One note is that Effect-ts is essentially the spiritual and de facto successor of fp-ts, which is quite popular, especially considering it caters to people that already know some functional programming.
The issue with academia is much broader and larger than people know of, but I'm happy that (slowly) some of these things are starting to come out to light.

Broader, because fraudulent research is only one of the multiple crappy things that a person with no ethics will do to grab a place and keep it. But another common thing is academic abuse towards students, which is another HUGE problem that needs to be addressed. There's a lot of real crimes happening here, extortion, sexual abuse, you name it. Guess who's talking about it? Almost nobody.

Larger, because people tend to believe that these are just a few bad apples while in reality this is pretty much how many large academic institutions operate de facto. If I'd put an estimate of how many of these "bad apples" are actually there, I would say it is as high as 7 out of 10 people involved in academia.

I love science, I've been doing it for about 15 years. That is the reason why I'm very vocal around this subject. This is a swamp that needs to be drained.
Did they cover her misdeeds before? I'd love to see that reporting. Such a shame that the state of CA adopted the math framework she was pushing, even though so many of her colleagues (STEM professors, not education professors) described the negative impact it will have on learning and college readiness.
The retval is an int. It only gets treated as a char if it isn't EOF. The caller is supposed to know this and do the right thing rather than blindly downcasting. This is more apparent with the wide char library where there is a special wint_t with the sole purpose of serving as a return value that represents a wchar_t or WEOF.
MacBook Air vs. pro for development work
My 2015 15" MBP is showing its age after 8 years of use (almost daily) and I'm in search of a new macbook and can anyone share their experiences with the newer M2 macs?

I've narrowed it down to

1. 15" M2 Macbook Air with 24GB RAM & 1 TB hard disk - $2099

2. 16" M2 PRO Macbook Pro with 32GB RAM & 1 TB hard disk - $3099

3. 16" M2 MAX Macbook Pro with 32GB RAM & 1 TB hard disk - $3249 (Costco)

I prefer the AIR for it's price, but I'm worried if it is a good laptop for my use? My current laptop has its fan on high speed all the time and I'm worried if AIR can handle the load. I'm not concerned about weight/size and prefer to have a machine that works for a few years.

I'll have dual monitor setup with laptop display and 27" 4k external monitor

I have these applications open daily
1. MS Word, Excel, Powerpoint, Outlook & MS Teams + Zoom
2. Lots of open tabs on Safari, Chrome & Firefox including Slack.
3. At least three VS Code editors (backend node, frontend react/angular + tooling, C++ for IoT firmware dev)
4. At least two PyCharm editors for moving data, API calls and some Neural Network inference (no training)
5. Postgresql db with multiple databases, and Redis
7. Few node applications (backend)
8. Few docker containers
9. Few tabs of iTerm connected to remote servers via SSH
10. Remote Desktop for Windows Server access

Thanks for any recommendations.

Edit: formatting
I personally prefer classic "typewriter-style" monospace fonts - "sans-serif" monospace fonts always look unbalanced to me, because they avoid serifs as much as possible, but then are forced to use them to avoid thin glyphs like i, j, l, 1 etc looking "lost". Unfortunately the designers seem to focus on sans-serif anyway. One good contender with serifs is "Go Mono" - it also uses the trick of increasing the height of lowercase letters to be more readable at small sizes, and it notably doesn't have ligatures. It also doesn't have a fancy demo page, but here's the blog post introducing the Go font family: https://go.dev/blog/go-fonts
Looks like a great platform, congrats!

Have you gotten feedback on the name, Infisical?

If a user is at a conference or on an online meeting and they mention your company to another user, they will likely have to spell the name out. Just hearing the name, it would be hard to know how to spell/search for it.

It is also not very memorable. A month later if I wanted to recall the name of your company I would likely have a bit of a hard time recalling the exact name.

In branding, simple is always better.
I think the answer is "if you are a founder of a company going public (or any business), you shouldn't be in office".

This is the requirement the GOP had for Jimmy Carter.
> The way you write threads by not quoting the actual response is super annoying and seems to actually require more effort then not doing it.

Thanks, that feedback is actually really helpful. I don't engage in long discussions on HN regularly so wasn't aware that quoting with a \> was an option. Corrected now and going forward.

>> For the US intelligence community to finally admit the existence of 46 US-funded biolabs in the Ukraine and specifically not deny they were bioweapons labs, is unfortunately as close to an admission as we are ever going to get.

> This is drawing a conclusion with literally no evidence.

Speaking frankly, this is the intelligence community (CIA, NSA, FBI etc) we are talking about here. They have not been a great example of government transparancy so based on their historical track record, I don't believe they deserve the benefit of the doubt.

For example, we now know that they were lying about the mere presence of the 46 biolabs in the first place. Why shouldn't we draw conclusions from their very loud non-denial that those labs were used, at least in part, for covert or military purposes, given that we know from US intelligence warnings [0] that other countries may be developing bio-weapons targeting Americans based on their DNA. Do we really think with all the US military funding that we wouldn't have a program, considering that our adversaries do? I think that would be extremely naive.

>> Please help me understand what are the legitimate non-military use-cases for funding gain-of-function research to up-level bat viruses so they will infect (and sometimes kill) humans?

> Like the rest of gain of function research, which is designed to try and predict how viruses will evolve and help us create ways and vaccines that will combat those evolutions before they happen in the wild.

No doubt we also do gain of function for those use cases, but per my point above, I think it is extremely naïve to think we don't have bio-weapons at least equal to our most advanced adversaries.

>> And also, there is simply no way to know who brought cocaine into the Whitehouse a few weeks ago, but it super-duper for sure wasn't Hunter Biden - no way Hosé. We know that for sure. Trust us (wink)

> Random conjecture completely irrelevant to the conversation but when you have no solid argument I guess the best you can do is through shit at the wall to see what sticks.

Again, this is, IMO, an extremely naïve take. With Whitehouse security being what it is, with Hunter Biden's past being what it is, with the very loud-silence coming from the WH press correspondent when asked to confirm or deny that it belonged to a member of the WH inner circle - I find it very suspicious that the investigation so quickly led to multiple conflicting stories, followed by a very rapid decision to end the investigation with no suspects. We can agree to disagree, but I think the majority of the American public finds this whole escapade extremely suspicious knowing the contents of Hunter's notorious laptop.

[0] https://www.foxnews.com/us/intelligence-committee-members-wa...
Links to the books:

The Winds of Winter - https://liamswayne.github.io/wow.html

A Dream of Spring - https://liamswayne.github.io/dos.html
People have different reasons for being reclusive. The social phobic, the agorapohbic, the autist, and the common but complete obscure schizotype (maybe you if you are self-diagnosed "autistic") are all examples.
Papers don't establish ground truths in science; they start a conversation. When bad papers are published due to misconduct, there's a cost --- a pointless conversation occurs. But it doesn't shake the foundations of science. People that actually do science understand the implications of a published paper.
At the time they were getting close to 10-20x more than an typical board member of an S&P 500 company. The lawsuit was brought up before the stock took off.
What will happen is that this tech will advance, and regular joes will have access to the "TERRIFYING" unaligned models - and nothing will happen.

This stuff isn't magic. Wannabe Ted Kaczynski will ask BasedGPT how to build bombs , it will tell them, and nothing will happen because building bombs and detonating them and not getting caught is REALLY HARD.

The limiting factor for those seeking wanton destruction is not a lack of know-how, but a lack of talent/will. Do we get ~1-4 new mass shootings a year? Seems reasonable but doesn't matter in the grand scheme of things. (That's like, what, a day of driving fatalities?)

Unaligned publicly available powerful AI ("Open" AI, one might say) is a net good. The sooner we get an AI that will tell us how to cook meth and make nuclear bombs, the better.
The difficulty of implementing parsers (for the majority of programmers or engineers) is one of the tragedies of computer science. It is a very well developed theory and apparently it is too hard to deliver in a usable form without becoming one of those "to bake an apple pie you need to invent the universe" experiences. I just wanted a pie! Like the html-ish parser in Graphviz:

bison -y -Wno-yacc -dv ../../lib/common/htmlparse.y -o htmlparse.c
../../lib/common/htmlparse.y: warning: 2 shift/reduce conflicts [-Wconflicts-sr]
../../lib/common/htmlparse.y: note: rerun with option '-Wcounterexamples' to generate conflict counterexamples

Noted.

This partially explains the success of languages like XML, JSON and YAML as alternatives to writing your own parser.
ssh-askpass is a great tool in these situations. It intercedes and allows you to manually control all key usage attempts.
Better is subjective but I was too a big fan until Fira Code. I love ligatures
I Mock Your Mocks
Yes, I covered that. The government should provide housing in DC for Congresspeople and aides. We don’t need to be okay with insider trading.
If the target employee cannot see the skimmer detection tool, the terminal has been compromised. Most skimmers fit on top of the terminal which would obstruct sight of this tool/layer. There are videos online of these skimmers being "installed" and it takes about 1 to 2 seconds of work and it seems anyone can do it.
Personally my M1 Mac mini replaced the idea of a home server NUC for me. My workstation is also my server now because I don't need to worry about power consumption on it.
> You want to share the outputs so that you can share the results while showing your work.

What's wrong with rendering to HTML?
The webpages for most of the graduate studies/research departments seem to indicate that some level of public funding is expected/necessary for at least some students and researchers at Stanford. An example[1]:

The department has limited funding available for MS and PhD students, which is awarded at the time of admissions by the program coordinator. Prospective students are encouraged to seek funding from external sources such as the NSF GFRP or AHRQ Dissertation Awards, and/or for Stanford-based funding such as fellowships available through the VPGE Office.

[1] https://med.stanford.edu/epidemiology-dept/education/graduat...
It’s possibly the Disney effect on the culture affecting your subconscious.

If we had happy cows as cartoon characters we might not eat as much beef.
The image shows the skimmer gadget sitting on top of the pin pad and the bottom card insertion slot (the one that takes a chip). On these card readers the magstripe reader is on the right hand side iirc. I’m wondering what you can do having connected to the EMV contacts and recorded the PIN. I suppose you could make a transaction, but it would have to presumably happen at the same time as the legit transaction (which would then immediately get flagged as fraudulent)
She repeatedly misquoted research in her papers. This has been well documented. Here's a comprehensive critique of her, by Stanford math professor Brian Conrad: https://sites.google.com/view/publiccommentsonthecmf/?ref=st...
> EG a US developer can use A B or C whereas EU dev can only use a 2 year old version of A which may be less secure for lack of improvements on further versions rather than more secure.

That has been the natural consequence of every past effort to legislate security all over the world.

The fact that this one seems less attached to reality than the normal only reinforces that, so I'd expecting nothing else from it.
The very fact that the fraud is discovered, that reporters amplify it, and that it can bring down the president of the university, is evidence to me that the system still works.
And my understanding is that Debian would be quite happy to have those customisations too -- maybe with a little more upfront effort, as they have to coexist with systemd support. But with less ongoing effort, as the code is at least present to be able to tell if a change will break it.

Ultimately though it's entirely up to the developers where they put their effort. If folk prefer to work on a fork, they're entitled to do that. And it is a bit refreshing to see people putting at least some effort into not-systemd, rather than complaining about being "forced" to use it.
Small HP Gen10 server running Portainer, containers for Jackett (mostly public trackers with 1-2 private ones more niched to sports), Sonarr, Radarr, Prowlarr, qbittorrent and Emby in containers, smart TVs have the native Emby app an streams with no transcoding h256 videos, more problematic with streaming to phone.

The biggest problem is storage, I must admit. 16 TB fill up rather quickly.
David Beazley will forever have my respect for his talk where he uses Python to untangle 1.5T of C++ code on an airgapped computer, as an expert witness in a court case:

https://youtu.be/RZ4Sn-Y7AP8

It's 47 minutes and totally worth it.
But you have heard of me!

-- Capt. Jack Sparrow, SEO guy
… or use `fgetwc()`.
Reading Code
I checked his bio, and Baker appears to be a computer science student doing journalism as a hobby.

It brings me to wonder how much choice people really have in choosing their paths…if both your parents are journalists or [insert whatever profession], it’s as if you’re likely to pick it up no matter how hard you try not to…
One way to view the current wave of content disappearing from the streaming services in a slightly, maybe, sort of positive light is that it does signal that companies are remembering why they'd resell content to other companies/platforms (because it makes more money that way) and are about to return to rotating content through multiple streaming platforms. (Paramount said this explicitly with Star Trek: Prodigy that they are shopping its mostly completed second season to other companies right now. Paramount and Disney both have content that was previously "streaming exclusive" that they plan to air on broadcast TV networks now.)

I don't know if that guarantees we will return to that feeling that most everything will be on Netflix eventually (or something like Netflix), but it's starting to sound possible again knowing the streamers are starting to feel that pinch on "exclusive content" not making money being resold to other distribution channels.

I also don't know if it that hope excuses the bad ways that the streaming services have been pulling content without warning nor the questionable "coincidental" timing of doing much of this in the middle of a strike in a way that leaves questions about if the National Labor Board is tracking this data.
Edit: I took a closer look, and it turns out that you've been posting abusively to HN for quite some time and using the site primarily for battle and flamewar. I've therefore banned this account. Please don't create accounts to break HN's rules with.

--- original comment below ---

I understand that these are passion-activating topics and that a war is being fought over them right now. Still, it's not ok to take HN threads into hellish flamewars, so please don't do this here.

HN is for curious conversation on topics of intellectual interest. That requires thoughtfulness, respect for others, and even a certain playfulness. If you're not in that state about a topic, please don't post on that topic for the time being.

https://news.ycombinator.com/newsguidelines.html
I can’t parse the exact meaning of the ”victim system” and ”attacker controlled system” in the OpenSSH release page.

Does this vulnerability allow the attacker to compromise the original system where the user starts the agent-forwarded connection? Or ”only” compromise machines forward from the jump host?

http://www.openssh.com/releasenotes.html#9.3p2
> Comic Sans is perfect for setting children’s activity timetables that are displayed in a school playground. It’s perhaps not as appropriate for announcing scientific breakthroughs.

Simon Peyton Jones would beg to differ. :)
They cannot revoke the licence under the GPL. If new patches are under a non-Europe licence, then they cannot be combined and redistributed with the existing GPLv2 codebase.

There is a provision in section 8 of the GPLv2 that allows excluding certain countries, but it can only be activated in the face of copyright or patent restrictions on the distribution of the software. IANAL, but one approach to activate this provision might be to implement a patented technique within the kernel, for which the patent licence only allows implementations outside the EU.
They are close but when I look at them side by side I give the edge to Comic Code. With Comic Mono I think the lines are a little too thick. Other things I notice, : is too small and <> are too big. YMMV of course

Also, while the complete set of Comic Code is $100, there's a "coding essentials" pack for $30
Ask HN: How can I learn how to write professional production level code?
I am a young indie hacker, I know how to hack around a fullstack app, I have built not so complex saas apps, which have earned me some money. But I still feel like I am below those who have worked at some place . Some of these terms people use and other stuff has made me doubt myself at many times and is starting to affect my confidence. Is there a way for me to learn all the stuff they teach at companies by working in Open Source projects? I don't want to take a job, I don't want to spend time on interview and all. All I need is knowledge and mentorship . Will Open Source be enough?
The RCE is related to ssh-agent's support for PKCS#11, so, yeah you are right this is a valid method to prevent key access or theft via the agent (I also have to approve every use of my PK), but in this case it's not protecting against the RCE, and the workaround in the meantime is to disable PKCS#11 `ssh-agent -P ''`
They also patented it so I imagine that’s part of their reasoning.
Yea same I’m a big hoop nerd but the mainstream collegiate sports especially basketball make my eyes bleed. Literally infuriating to watch idk how people do.

But something like Duke Basketball has been tremendously beneficial to Duke–in terms of brand awareness. Same with UT Austin and their football brand ($7mm on new locker room is insanity tho).
Turing RK1
I wouldn’t presume that the smartest brains are gaming the system. Most likely, it’s mediocre hucksters who have bullied and networked their way into a position of authority. Being good at social engineering != to being the best researcher.
I don't know if it's what's happening here, but it's a common phenomenon in HN that a post starts a trend of posts with a similar theme. People discuss a subject, they post some links to related projects in comments, other people wander into those links and find them or the links that those pages have worthy of their own HN posts.
Doesn't sharding imply horizontal partitioning? Some of their examples show vertical partitioning use cases. Not sure how I feel about that. I can't imagine why you would do microservices and host their databases as schemas on the same instance.
Thanks, but this is a bit pedantic. For most people Jupyter is the notebook. You could just as well call the other one the "Jupyter protocol".
what is CVSS/severity of this? Critical? 9+?
That depends on what percentage of grant money you believe should be spent on extra administration and ass-covering, which is the standard institutional response to liability. Bear in mind: a healthy chunk of grant money is already taken as a rake by the sponsoring university.

Again, the optimal amount of research misconduct isn't zero!
As others have pointed out already, JumpHost or -J is the preferred way.
I did a project for an event company that was to gamify a basketball and baseball speed pitch system (LEDs, Score Count, Radar, Etc).

I sent them a text with a price for the project and they wrote back "How much for baseball?". It was worth two times as much at that point.
Space stations are meaningless luxuries. We don't have a resource extraction industry in space.
Berkeley Unified Parallel C – extended C for HPC large-scale parallel machines
A pro musician I know a bit once said the you never feel as alone as up on stage