skysight-inc/HackerNews huggingface dataset:
Fantastic work! This makes for a great resource to dive into OS dev. There's a lot of detail but it's easy to digest. I suggest slightly revising the end of note #2 for chapter 2 to reflect that some async paradigms in programming languages are cooperatively multitasked. Within a process, it's generally considered safe to utilize cooperative multitasking (desirability is a different question), although I believe Erlang sticks with preemption for robustness.
> Of course, would actually have preferred if I could have just completed the change online.

It's so interesting to me how generational this is, and how it changed so quickly.

I used to work in something tangentially related to real estate. The sellers/landlords tended to all be older (50+, this was about 10 years ago), while the renters/some buyers tended to be millennials and younger. The older folks went apoplectic when we tried to move more communication onto our online platform: "I always talk to every potential renter on the phone. I feel I can discern a lot about someone from a phone call." Meanwhile, younger folks generally despised having to talk to someone on the phone - if they couldn't complete the whole transaction online they were much more likely to bail.

Not making a judgment about either approach, really just thought it was interesting how stark the divide was and how it changed so quickly.
This is an unserious proposal from an increasingly unserious party, proposed as a throwaway idea just as the hottest summer on record shows that we need to be taking a much more sober approach to addressing climate change.
This is circling around Native File Access, which is absolutely something the web needs and if handled correctly would be a huge improvement for user privacy and user autonomy. It would open the door for fully offline webapps with no accounts or serverside components, with much better sandboxing than native apps, and with full user control over app data using just a file browser. And it would allow for app data that could be easily shared between apps when necessary without compromising user privacy or security because the app data would just be a directory with files.

BUT... the problem is that if handled incorrectly it would be a disaster for web security, would open up tons of holes for user tracking and data theft, and would basically be a horror show. There are a dozen things that could go wrong with the spec, and all of them would be serious problems if they did go wrong.

And Chrome is heavily involved in the spec. So it's a tough position to be in to try and figure out whether it's worth advocating for. Mozilla currently considers native filesystem access to be harmful, and I don't know whether or not I agree with them. I wish Mozilla would propose an alternative spec developed entirely internally without interaction from Google.
I am not an expert on the matter, but it feels like the same concept as Passkeys.
Using laptop is a last resort...
What you are saying is you want 1-2 weeks worth of time from someone who makes 150k a year+ to confirm your suspicion. That's not a very compelling ask.

Furthermore there are different types of hacking. If you visited the wrong site and got drive-byed or went pirating software and downloaded the wrong thing or clicked the wrong e-mail, maybe you forgot to patch your systems and have something facing the open internet, there are a lot of ways to get hacked that are nearly completely uninteresting because they represent poor security skills and not advanced hackers.

Now we get to the crux of the issue. Who are you? The technical problem itself is not very interesting, but if you are the target of an advanced attack because of who you are that might be interesting. Are you a journalist? A research scientist? A CEO? A government employee? Have you or your family recently spoken truth to power? Are you a union leader?

If you were a target of convenience I dont think anyone will be interested in this so you will have to find a security research firm like mandiant and pay them. If you were a political target of an advanced attack or you think someone used pegasus or an analog against you then I would stress that. You might try e-mailing the people who did the pegasus documentary on PBS, but only if you think you were a target for political reasons.
This sounds like the same argument people make for AA. Except the discrimination happens before college rather than at college admissions.
I'm not sure removing options from the desperate and dying is a good idea. Those with means will just ignore your concerns and the rest will have _nothing to lose_.
Last year they passed law to reduce heating temperatures. Using radiators too much could be fined.

> Germany's coal use is now at a historic minimum,

With coal powerplants in hot standby for wind? And imports from other countries that use coal heavily?

> Solar, wind ... exciting and fastest developing

That is the point! It should not be exiting and developing. By now it should be booring and reliable.
Around where I live, Market Basket AFAIK has no self-checkout and probably the cheapest prices of any of the local chains.
> Why do you care here?

It’s a disingenuous question to stroke the ego of the GP and deride those “outraged”. Either that or GP is just dumb. If they were truly interested in why people are outraged, they simply could have read the numerous comments before theirs (regardless of whether they agree the concerns in those comments are valid or not, it would answer the stated question)
This is a bad take in my opinion. First of all, we already have W-4 forms today, where you report your intentions to the government, vis-à-vis married, single, etc — they just need to be updated so that you send it in to the government (a joint one for couples) when you make a change (birth, marriage, divorce, deaths). Most people are not eligible for child care deductions, nor healthcare deductions, other than the ones that come through an employer program which can already be reported to the government without your interaction. Education tax credits are based on 1098(?) forms the government should already have their copy of. Also most people don’t give enough charity to bother with those either.

You could log into a website occasionally and upload charity receipts or click through a wizard to apply for a deduction for one of those deductions most people don’t use, but the flow for basically 80% of taxpayers, and essentially 100% of the bottom 70% of earners, should be a quick form update when life changes happen, and a yearly EITC-funded refund check that just shows up.
Or are likely to attract more lucrative donors.
The article was written by an historian who is well aware of Thucydides. He's written a lot about him on https://acoup.blog/ including a discussion of why we shouldn't take his views on Sparta without a grain of salt.

"To put it bluntly, these guys are all snobs. Thucydides and Xenophon were both aristocratic Athenians (they got to be generals, rather than common soldiers), frustrated that democracy – in their view – let the fickle, uneducated and poor ‘masses’ make decisions that ought to have been left to their ‘betters.’... For these authors, Sparta is a mirror to hold up to the politics of Athens – speaking well of Sparta is a way of criticizing what they dislike about Athens (which is the democracy)... These men conclude that Sparta is fantastic because Sparta seems fantastic for men like them – rich, educated, adult citizen men."
I remember a software, where you could take real world streets, run traffic simulations on it, and also make changes to the street layout. Basically, fix the crossing that costs time on your commute every day.

I read about it many years ago, sadly forgot its name and a bit of searching didn't make it show up. So leaving this here in hope someone knows what I am talking about and drops a link. I'd like to read up on what happened to the project as well.
I don't want to ban things like homeopathy and chiropractors but I have seen them attached to government hospitals in the UK. Chiropractic treatment should not be funded by the public.
Huh. I think skyscrapers are terrible (for the people outside the skyscraper, in their effect on people's state of mind) and if I lived in Manhattan, I expect I'd be angry about this skyscraper, too.

I'm not opposed to high density, but high density is not incompatible with having a height limit. DC has had a height limit since 1910: "federal law imposes maximum heights on buildings within Washington, DC based upon the width of the street, to a maximum height of 130 feet (commercial streets) and 90 feet (residential streets), and 160 feet for parts of Pennsylvania Avenue, NW."

Because of the steepness of the price of land in Manhattan, a higher limit than DC's makes sense, but the building under discussion, 325 Fifth Avenue, has 42 floors, which is too high in my book.

A large expanse of 20-story or even 30-story buildings all the same height and spaced approximately equidistantly results in much more pleasant light at street level than the situation you have in something like Midtown Manhattan.

None of the effects of the urban landscape are particularly strong: how recently you've eaten (or exercised) for example will tend to have a much stronger effect, but the effect of the urban landscape is constantly present whenever the person is outside or looking outside.

I've never lived in NYC, but I did live in Atlanta, and I still remember the slight feeling of oppression ("menace"?) every time I drove west towards downtown Atlanta with Coca-Cola's North Tower growing slowly in size in my field of view for about 12 minutes in a row. (When I lived there circa 1985, it was much taller than anything around it; again I much prefer it when a building is about the same height as its neighbors.)
the lowest earning employees are the lowest earning because those are the jobs for which the widest number of people in society can fill,

this often makes them very "easy" not maybe in physical effort but in their repeatability, and their formulaic process making them a prime target for automation.

this is completely separate discussion and disconnected completely from the increase in executive pay. Which is largely driven by the increasing size of companies. I may have the time frame wrong but something like 50 years ago the top 5 companies of any market segment controlled 20% of the market, today the top 5 companies of any market segment control's 80% of the market. This consolidation of markets is a few very large companies has driven executive pay. The other big component of that is the Institutional Investor, if you look at the raise of investment from Funds like 401K's and IRA's etc where most companies are owned by funds of funds of funds instead of people, founders, etc you also see the extreme raise of executive pay
Chud brohipsters are a very real thing.
Bug trackers and build logs are all internal systems, though.
The intelligence on display in the physics and particularly the maths stackexchanges is quite humbling at times.
It's a blog on an open-source project that precisely tells you how to implement adaptive rate limiting.

Just click around a bit:

- https://github.com/fluxninja/aperture

- https://docs.fluxninja.com/use-cases/adaptive-service-protec...

Note: I am one of the authors' of this project.
> To be recognised as a “comment line”, the line must start with a # symbol. Leading and trailing whitespace on the comment line is ignored.

If a line is " # Requirements:" a comment line?

I can remove leading whitespace on a comment line, but since it does not start with a "#" symbol, it is not a comment line. In fact, according to this line, there's no such thing as a comment line with leading whitespace.

Or is "leading" meant to be the spaces between the "#" and the "Requirements:"?

On a broader topic, I certainly haven't followed this issue. I'm curious why an embedded string with a special name wasn't used, like:

__pyproject_toml__ = """\
[build-system]
requires = ["requests", "rich ~= 58.0"]
"""

where only '[build-system.requires]' is supported. I think this could be extracted statically, through the AST, so no eval needed.

One of the links lead me to alternative proposals at https://github.com/jaraco/pip-run/issues/44 but none of them fit this form. (It's "Variant 1: single variable" with '__pyproject_toml__' as the variable name, "Option 2: Requirements.txt in comments" but in a string, and as TOML.)

The main objection seems to be 'Users may be tempted to dynamically construct the list (through runtime execution), but only static values are supported.' replacing 'list' with 'string'.

I have such a poor grasp one what "users" want that I can't judge.
The Botox-like family are the most potent substances by weight, whether they're used for medication or poison. It's kind of crazy when you consider it. It takes thousands of botox doses to kill you. That's not dissimilar from most drugs- take a thousand advil and you'll certainly die.

One unit dose of botox is 50 picograms. A lethal intramuscular dose is ~160 nanograms. A lethal inhaled dose is ~1 microgram. That's crazy. Inject any other chemical into the heart, brain, wherever you want- you will not be able to kill someone with a smaller dose of anything.

The next most potent drugs (eg LSD, actually) create perceptible effects at fifty times the lethal dosage of botox. LSD is noticeable at <25 micrograms. Ricin is lethal at 1.6 milligrams. Fentanyl is lethal at 2 milligrams and dosed at 50 micrograms.

Even covid the vaccines have 30+ micrograms of RNA that makes the larger amount of protein that trains your immune system. 50 picograms is only ~50,000 individual virus, about half of what is released by the infection of a single cell.

Botox is within spitting distance of the lethality of a nuclear fission reaction. 160 nanograms of U-235 releases ~16 kJ, a bit under the energy in two AA batteries or ten 5.56 rifle shots. That's more than enough energy to cauterize a critical cardiac artery, or pop your skull... but it's less than an M80.

Realistically (lol) if you pulled 160 nanograms of material from the center of our sun (or probably any star short of a neutron star), it's going to stop fusing immediately since it'll be too busy exploding. I've got no idea what the math on that is, but I'd be pretty surprised if it beat out botox for lethality. Which is crazy.
That seems impossible. It would require every US citizen to plant 2500 trees. There’s not enough space, nor time.

Oh, look. It’s ben studied, and the answer is “it won’t work”: https://climate.mit.edu/ask-mit/how-many-new-trees-would-we-...
Your housing comment is key - the grind of paying for rent or a mortgage with two incomes really stifles and ability people have to try something.
Physical machine, in a server room at Sony's Lund office. Custom order of several machines from Compliq, a small local shop.

It's a Threadripper-something, 128GB RAM, and nvme disks totaling 9-10 TB (plus a sata SSD for the OS, and maybe a big HDD for the mirror). I use btrfs' raid to join the repo disks, while others use other solutions (e.g. ext4 on top of mdraid). I also run btrfs compression, which saves a lot of space for very little cost (iirc, something like 1% extra time for a full Android build, but ymmv).

Most of us share the build machine with 1-3 other engineers, which is fine because we rarely need to make (big) builds at the same time. Android is not small, and having multiple copies of the complete history for multiple people would be impractical, so we have a custom git/repo mirroring solution that keeps our various checkouts from growing out of hand.

People use whatever tool they like to connect to the machine. I've seen remote desktop of some sort, xpra, mosh... Personally, I'm using ssh and screen, with some ssh_config aliases for quick access to specific product branches.

When it's time to flash a build to a device, rsync is great. I believe AOSP aims for hermetic/reproducible builds, which enables big speedups from rsync.
Why does this feel so similar to the idea that they way you address mass shootings of children is to train the on how to navigate mass shootings?
You’re conflating “title” with “summary”. They’re two different concepts.
People love the internet (at least the parts they use). It’s only these side communities that are generally out of touch with normal people (or look down on them) who think that people don’t love the Internet that they use. That said, everyone hates the part of the Internet that don’t use. Like they live their congressperson, but hate everyone else in congress.
For those interested, I believe John Hersey’s Hiroshima is still the leading English language work on the experiences of hibakusha during the bombings and their immediate aftermath.
in any language

The subject matter and title unfairly single-out Elixir.
How are those products shipped and stored prior to you purchasing them?

Yep, that's right. That's when the flies infect the produce.
SSO = Single sign-on

"SSO refers to a SaaS or similar vendor allowing a business client to manage user accounts via the client’s own identity provider, without having to rely on the vendor to provide strong authentication with audit logs, and with the ability to create and delete user accounts centrally, for all users, across all software in use by that client."
At least they're stepping away from the idea that humans cannot influence the climate, if we can plant a trillion trees to do so.
Industry tends to be more biased towards obvious concrete incentives too, so it's easier to see how to succeed. And those incentives pay the rent better.

Academia tends to be really opaque and BS heavy because the the games that need to be played are far more opaque (by design), and concrete objectively useful results far less important.
Literally specifically said that. Yet Edge and Chrome on iOS actively suppressed JXL in prior builds (yes they can do that — actually calling it a skin is technically wrong as while the engine is Safari, they have a lot of flexibility), and very recently exposed it.
Given the extreme inflation, most likely it means priced did not increase as fast as they otherwise would have.

If consumers did not like them, they would not use them and the companies would get rid of them. Unfortunately for you many consumers not only are willing to use them some even prefer them because they in fact do not want to interact with a cashier
I wonder what happens if you add an LLM behind each person, reading the readme, apparently individuals are simmed and can have impact. Hmmm
>but that doesn't really work when you're given a Macbook and able to work from home and coffee shop etc.

MDM like jamf and/or EDR/Antivirus like SentinelOne and Carbon Black can disable USB ports/anything in software. If your account is not admin/root you cannot remove them also.
And you have to find your item among hundreds of items
What's the disclosure that breaks the NDA this tweeter is supposed to have had? I searched every quote in the thread and they're all already public. Tweet #11 shows as "unavailable", but the archived version at https://threadreaderapp.com/thread/1681673980682305541.html refers to a "Code Yellow" that did leak, but in March: https://www.businessinsider.com/shopify-issues-code-yellow-f...

I tried to find people complaining about being left on hold by shopify support and got nothing on twitter. All the complaints are about the account payments being on hold, i.e. shitty but par for the course risk/compliance issues.

The remaining thread content is the sort of inference and speculation that anyone with the right political bent could have made, given a few hours to research the company.
How about saving the Phytoplanktons?
"What do you mean second strike? This Limited Liability Company was never fined before!"
Most self-checkouts here are surprisingly bad, but Whole Food Markets ones work well enough. However, WFM recently managed to ruin that in a different way...

The WFM self-checkouts here recently started displaying dead-on video camera closeup views of the customer's face, on-screen, during checkout.

They're doing this in neighborhoods with upscale customers, so I'm thinking maybe it's not a rough part of town "you are being watched" security thing. (That would seem incongruous with the premium WFM brand, and how historically they've seemed to want customers to feel about shopping there.)

Maybe the live view of the camera in the customer's face is actually trying to lay foundation for a legal defense that that they weren't secretly recording people, for the inevitable scandal over a data breach/mishandling/misuse.

(Lawmakers and state AGs should be all over this, because history is clear that very few companies take data capture and handling responsibility seriously, unless it's heavily regulated, with teeth that hurt, and maybe not even then.)
That's an interesting take. I jumped to a Pixel for the 10x periscope camera, presumably offered because they were willing to take less profit on it than Apple, who couldn't find a way to charge more for it within the suite of features they were offering last fall.
Lol. Nobody is choking on smoke. The earth is fine. Humans may make life slightly more difficult for themselves in the next century or two due to global warming, but those difficulties will be more than offset by advances in technology, even under pessimistic assumptions.
This seems an interesting approach, if sufficiently safe for most cases. What if, when creating an account and choosing a password, the app enforced very long passwords but suggested a default, random one like in your example? This would have most of the benefits of the suggestion in the article (high entropy) while still not removing the choice of the user to pick their own preferred password.

Does your company also use 2FA? I'd be curious to see if very long passwords are secure enough to not need the 2FA anymore, as most methods are annoying to the user.
Visiting Death
Working here, and also now saved to wayback machine.

https://web.archive.org/web/20230722191544/https://eclecticl...
That's a good point - the current drive to replace human customer service is a second step, after cutting off their ability / power to do anything that's not on the prescribed path.

Companies don't want to deal with customers. It's only the missing automation why the human CSRs are still a thing. If you can replace them with AI and automate handling of all customer support paths that company considers relevant, that's it, all other edge-cases, bizarre problems etc are just not considered. Which I understand to some extent, given the sheer idiocy you sometimes encounter from the customers.

The problem is that companies are also grossly over-confident in their products/services and ability to recognize all the scenarios.
Real disposable personal income per capita (which accounts for government transfers & subsidies, hence the big Covid spike) has also been on a steady incline.

https://fred.stlouisfed.org/series/A229RX0

Median household income has doubled since only 1994.

https://www.statista.com/statistics/200838/median-household-...
Amsterdam bans cruise ships
And honestly the range matters a lot here as well. The mean just isn't a useful metric for human emancipation.
- exercise!
- use an external monitor, stop squinting at a 15" screen.

There you go.
When they did this, Unicode already existed, and assigned a code point to each character. There were fewer than 65k code points.

Naively, it seems like creating a scheme to pack these code points would be trivial: just represent each character as a series of bytes. But it's not so simple! As I understand it:

- they wanted backward compatibility with ASCII, which used only a single byte to represent each character

- they wanted to use memory efficiently: common characters shouldn't use 2 bytes

- they wanted to gracefully handle errors: a single corrupted byte shouldn't result in the rest of the string being parsed as garbage
When I think 'multiple devices' I think 'multiple devices'. Yubikey is a solution for multiple computers but I don't see how something 'such as a yubikey' solves this problem for devices.
But they already exist, no?