skysight-inc/HackerNews huggingface dataset:
> So... what, are you trying to say they do what they do as a form of charity? Trying to improve the security landscape out of the goodness of their hearts, one bug at a time?

My take:

- Project Zero is a public demonstration of their commitment to security. CTOs may be slightly warmer to them as a result.

- It's advertising for IT professionals Google needs to recruit into their own infosec teams. "Come work on internal vuln scanners and PCI compliance and maybe someday you can join the all star analyst team."

- And for the stars, maybe "spend 90 percent of your day Fixing Internet Security, and we'll come to you for expert troubleshooting on our own stuff the other 10 percent of the time" is a compelling recruitment pitch. Notably, the blog post announcing Project Zero concludes with a "we're hiring" paragraph.

- Fixing bugs in Apple products makes their own services more secure in the sense that their most valuable customers come to them through Apple platforms.

- Fixing bugs in open source tech protects their supply chain of crawling the web, making the resulting index available to consumers for search, and pairing searches with real time auctioned ads

- Publicly committing to ethical disclosure and other practices pressures the other 99 percent to match behavior.

- Turning the screws on competitors whose ads touting privacy don't quite match engineering outcomes.
There's this overabundance of the need for safety that's overcome society.

It's as if we can't assess tradeoffs anymore.

You see it with the lack of children playing outside - even though random kidnappings are almost a nil risk and that they're more likely to get by a car.

Defective toys. Defective carseats. Millions get recalled for a failed few.

You saw it with masks. You see it with speech, "words are violence".

Everyone wanting the illusion of feeling completely safe.
Wow, through Docker? How please? And Still with APIs?
To successfully make this transition, here are some steps and resources I'd recommend:

Learn Version Control: Familiarize yourself with Git, as version control is a crucial skill in DevOps. You can start with online tutorials and documentation like the "Pro Git" book by Scott Chacon and Ben Straub.

Master the Command Line: DevOps heavily relies on command-line tools for automation and management. Practice using the terminal extensively and learn essential commands and scripting (e.g., Bash, PowerShell).

Infrastructure as Code (IaC): Get familiar with IaC tools like Terraform or Ansible, which allow you to manage and provision infrastructure programmatically. Online courses like those on Udemy or Pluralsight can be helpful.

Continuous Integration and Deployment (CI/CD): Understanding CI/CD pipelines is crucial in DevOps. Consider learning tools like Jenkins, GitLab CI/CD, or CircleCI. "Continuous Delivery" by Jez Humble and David Farley is an excellent book on this topic.

Cloud Platforms: Familiarize yourself with cloud providers like AWS, Azure, or Google Cloud Platform. You can take vendor-specific certifications or explore resources like the AWS Well-Architected Framework.
Good point! The longest-lived artifacts would probably have to be somewhere with much less weather and geological activity than the surface of the earth. Maybe if you put a structure in orbit or perhaps on the moon?

Paradoxically, extending on your thought - I guess anywhere with living conditions similar to earth (oxygen atmosphere, water, weather, etc) would not be conducive to long term archival of civilization artifacts.

So you'd have to look at 'dead' places if you want to find evidence of civilization. Or stumble across an derelict megastructure (dyson sphere\niven ring\etc)
It is against medical ethics for the placebo not to be the current standard of care, and experimentally it must be… If you can’t beat the current standard of care then your drug isn’t effective.
The Night Witches of WWII
"An attack technique of the night bombers involved idling the engine near the target and gliding to the bomb-release point with only wind noise left to reveal their presence. German soldiers likened the sound to broomsticks and hence named the pilots "Night Witches"."
What's not equal about applying the same percentage? No matter your means, the fines are the same percentage, which to me is pretty danged equal when the point is to punish certain behaviours.
France isn't quebec. I have no problem talking with people in France if they and I are making good faith attempts to communicate, nor will anyone doing as you suggest. This is about a public servant intentionally refusing to speak a language they understand because of the institutional prejudice of the province.

Ironically, in most situations Quebeckers will refuse to speak French to you if there's any hint you're an anglophone.
I think someone accidentally flagged this. SE is a great site.
Shuttle.rs Infrastructure from Code
Website Planning Considered Harmful
It's not at all obvious what he meant. Could be a number of things. So far in this thread, it's more of a Rorschach test.
Doesn’t look flagged to me?
[dupe]

Tons of conversation about this a few days ago: https://news.ycombinator.com/item?id=36800297
Legacy admits counted as much at many places that were segregated in living memory (so a more limited chain of legacies for formerly discriminated races).
On the contrary, these grants are extremely competitive and prestigious.
Nice!

Related: You might find the book Matters Computational - https://www.jjj.de/fxt/#fxtbook and the FXT library it describes - https://www.jjj.de/fxt/ useful.
Lab grown meat is expensive due to its low volume. That should change as volume ramps up.

It’s also relatively expensive compared to the feedlot stuff in part for the reason above and in part because externalities (e.g. GHG emissions) are not priced in yet.

The promise is that on a net/net basis the lab will be better. We’ll see.

As a diabetic I get a lot of protein and calories from meat bc I don’t want a lot of carbs. I’d be much happier with lab-sourced animal proteins, especially if there were a little game from time to time. Factory farm meat lacks a lot of flavor anyway.
That's an interesting parallel to circumcision, which is also an unnecessary routine procedure in the US, but generally only done for acute medial reasons in Europe (ignoring Muslims who do it for religious reasons presumably in both).
3 years ago we wanted to rush the COVID vaccine and it probably saved millions.

I don't understand why we can't let people make risk reward judgments. Yes probably more people will die, but they were not forced.
They approved one drug in under a year in a literal emergency (and it's deeply controversial that they did even that). That doesn't mean they can do that with everything that crosses their desk.

I do buy the author's assertion that people should have right to expose themselves to experimental medicines when it could save their lives though.
Do you mean hiking?
I agree. I'd much rather "login with Firefox Login" or "Ubuntu One" than Google or Facebook for SSO. But failing that, expecting end users to manage passwords to every site (and every site to store passwords) is still irresponsible.
> I feel it is difficult to get people in the world to pay for digital things. £10 for an iOS APP???

It very much seems like developers have stopped trying. The app store for the iPhone/iPad is broken and I blame in-app purchases and subscriptions. I feel that Apple should be VERY restrictive about what is allowed to be an in-app purchase or subscription.

Try browsing the apps available, especially for children, it's all free, with in app purchases or in-app subscriptions. I was trying to find a coloring app on the iPad, there's like one that's reasonably priced. It's free for 5 - 10 coloring pages then you pay $5 - $6 to unlock everything. Completely reasonable in my mind. The rest: $30 per year as a subscription... well, now I'm not buying anything, that's not something that should be a subscription.

I really want the app stores to start very clearly advertising that the in-app purchase is an unreasonably priced subscription and preferably require that the price to unlock an every feature. Most of all I want in-app purchase and subscriptions to go away.

My life already have plenty of subscriptions, I refuse to sign up for more. I have four streaming subscriptions, two news sites, online storage, password managers, internet, phones, service contracts for my car... Just F-ing stop and let me pay up front for things that REALLY doesn't need to be subscriptions because I can't deal with anymore.
Oh yeah it's 24. Still higher than 16. My bad
So, you would flip the railroad switch to kill only 1 instead of 5 helpless people?
Uhh, given recalling defective toys or car seats is a pretty straightforward way to prevent further injury, isn’t that a pretty good trade off over knowingly potentially causing more injury just to save money?

How would you feel if your child was injured by a car seat that had a defect the manufacturer completely knew about but refused to recall for the sake of saving money?
>50 MB excludes most messaging apps

The entirety of TempleOS (including dozens of programs and multimedia games) is 2MB.
I agree. Dying in anguish at the hands of your own government is far worse than dying having tried everything you could.
I take a derivative, Lenalidomide, for cancer maintenance. I am very glad the FDA approved it.
Firefox remembers my passwords for me already. Why would I need an extra tool to do it? And so does Android.
Clinical trials are, I think always, free for the patient. The company developing the drug foots the bill.
One issue is, who pays for it?

Experimental treatments often are very expensive, I believe require a lot of study of the patient and so on ...

It's not like a magical pill(s) you take an go home and live or don't and everyone says "well he consented so he took his chances". The entire process of experimental treatments is hugely expensive.
The Nerd-Jock Dichotomy Is False
This is not fair summary of the situation. Panics can be “caught”, most Rust web framework will catch panic when handling a http request and return 500, leaving other requests unaffected (more or less). This is almost no different from Python, Java, even Erlang.

Panic is a way for Rust library ecosystem to signal this error in un-recoverable, and is probably a bug in program, for which you would be happy getting Sentry or some such reporting.

Most errors in Rust are handled using mechanisms described in post using Result. Some, this is probably a bug in code, mechanism should be present in other languages.

There are even efforts to make code that can panic detectable at compile time, https://docs.rs/no-panic/latest/no_panic/
I think what really drives me crazy is that the FDA approval can limit me taking something.

Put simply, If you believe “my body, my choice” then the current regulatory system is pretty messed up.

To be clear, I’m fine with the FDA existing as a labeling body. Sure label something FDA approved. But don’t limit what we can take because it’s not approved.

Otherwise, you end up with cases like this and many others, where an industry can easily be regulatory captured and ensure competitors are slow or unable to enter the market.
> It's nonsense like this that makes a more rational debate around carbon capture difficult.

such a great point and couldn't agree more.

in the US, I'm seeing more ethanol & chemical companies adopting carbon capture right now, not fossil fuel companies. it will be interesting to see how it evolves in the next couple years.

> (shameless self plug: I tried to write down my view on the whole CCS issue recently: https://industrydecarbonization.com/news/can-ccs-escape-from... )

subscribed! and you can follow some of the north america projects at https://decarbonfuse.com
I would be curious to understand the "How to Prompt" section more. As someone who does not interact with LLMs regularly I have no idea why this looks like a templating language.

Would anyone be able to explain what's going on in that section or point to resources that explain what the goal is / why this looks so programmatic?
The absolute best professor I ever had in undergrad or grad school was in his 60s, had been teaching for decades, and was still an assistant professor. He didn't publish much, had written one book a long time ago, but god damn he was just a natural master at teaching. I took classes I wasn't interested in, just because he was teaching them. He liked to do the thing professors are supposed to do, and was punished for it. I notice that academic achievements, even in this article about the messed up priorities of university hiring, doesn't seem to include being good at educating kids.
Note asphalt reaches over 150 F on days of over 100F maybe something else to use other than asphalt?
Imminotherapies very quickly kill a significant percentage of the people who try them. So it’s a complicated balancing act when someone is likely to die in say 1-2 years but also likely to survive another 6 months.

For people who are likely to die very soon the case is more clear cut, but the people developing these treatments don’t have the resources or infrastructure to try and treat more than a tiny handful of people. Allowing people to pay for such treatments also opens the door for a huge range of bad actors which also costs lives. I am not saying the current system is great, just that there’s a lot more complexity than is obvious on the surface.
I recognize Marcel's name, but not the other copyright holder. I used to really like tinkerwell, though haven't needed it for some time. I'm curious, what else has this group built and a abandoned?

I have been out of the php game for a while, but I long for the Laravel ecosystem and community. I've yet to find things in other languages as cohesive or intuitive.

I guess you just can't forget your first love.
>I think the consideration that an article like this misses is the unintended consequences of speeding a process up / reducing the criteria for review, approval, etc.

In general I feel like the sick should not be held responsible for the unintended consequences of things. The principle that it is better for 10 guilty men to go free than 1 innocent man to be punished applies here as well. How many suicides have happened because it took this long for the use of psychedelics and THC for the treatment of depression and PTSD to be approved (partially, in some places). How many people are suffering today, right now in pain or under the care of doctors they would otherwise leave for poor treatment but the "opioid crisis" has limited their access to the treatments they need? I've faced this problem personally more than once, and while I am sympathetic to the law of unintended consequences, I just can't be convinced that it is the duty of myself or my loved ones to suffer because someone else might abuse something. There is a balancing act to be had for sure, but any borderline case should ALWAYS err on the side of reducing the current actual harm in favor of preventing a nebulous potential future harm.
The Apatite used on tobacco fields (as a phosphor amendment) has been suggested as the main reason tobacco causes cancer.

It catches notice occasionally:
https://www.gammaspectacular.com/phpBB3/viewtopic.php?t=671

I've inquired as to phosphate sources in fertilizers and gotten complete mystification as a response at the retail level. Manufacturers are much more forthcoming, but few garden center level folks have ever heard of a reason to avoid "rock phosphors."
Bitumen is created with a fraction of crude oil that is otherwise unused, so as long as we are still using vast quantities of crude oil for things like fuel, there will be an abundance of bitumen. That means this wood-based alternative will be comparatively expensive and no more environmentally sound than bitumen. However, it is good to know that we already have alternatives ready, because we should be reducing our reliance on fossil fuels and don't want to be held back by a requirement for bitumen!
Feeds Are Not Fit for Gardening
I have severe bruxism and Botox treatments of my masseter muscle has made a huge difference. It’s something I was very reluctant about initially but I’m glad I ultimately tried it.
Perhaps there is an issue with expectations - which might be managed with schools actually teaching about what professional life is about (whether academic / industry, empoyed / freelance, for profit / nfp, etc), including teaching things like how debt works and what it's for, funding independence, funding retirement.This was ignored by ALL the schools and universities I have been through. People are expected to learn this on their own (or by reading HN which is also seriously flawed).

For example it's okay for a PhD not to be a professor, not to do research, not even work in their original field, etc - and have a satisfactory career trajectory. It also happens to get a PhD, "do everything right" and get tenure and not be happy about it. The problem whether with PhD or anything else, is this "shot in the dark" problem and lack of well, guidance about the wealth of options out there.
There was a drug called Rapamycin discussed in this Radiolab episode https://radiolab.org/podcast/dirty-drug-and-ice-cream-tub

The drug supposedly helped delay the doctor's cancer and extend his lifespan until he stopped taking it, then it came back "with a vengeance" and he passed away. He wanted to stop taking it to verify whether it was actually working or not.

I wonder if it might help this person? He might have to be on it for life though.

Don't take my word for it though, this is FAR from my field of expertise.
I have synthetic shorts [1] and collar shirts [2] that aren’t, and don’t look like, sports clothes. They are great, you can wash them in the shower at night and have them (mostly) dry by morning.

1: https://www.billabong.com/crossfire-mid-submersible-shorts-1...

2: https://www.target.com/p/men-39-s-jersey-polo-shirt-all-in-m...
I would love to see a federated hosting solution where person A can write content and persons B and C can help host it. That gives you the upsides of someone copying your stuff without the downside of them misrepresenting it as their own work.

But yeah, SEO has so ruined the internet I expect some sort of Six Degrees of Kevin Bacon solution to spring up to fix it.
Okay but don't come crying to me when a bunch of your users get hacked because they used the same password on your site as they use on somecrappyforum.io which leaked their password db.
It's a razor thin line and we can't really tell unless the roommates were horribly unqualified for the job.

But I'd probably hire in a similar way for a startup. Not because of nepotism, but because I know the kinds of peope I want to hire are massively productive and good at their respective fields, I'd be honored if they could do that work under me.

(note: no real plan to do this and half my friends aren't in my specific domain regardless).
Just what I was looking for, a happy medium between Wix and Hugo. Plus, nice intro to Supabase, which is also supa cool. Perfect for another project I am just starting.

Thanks for sharing. Nice work!
I vouched it, and the flag went away.
> Lines in the background trace the motion of the gigantic arachnid as it tumbles and its sickle-like legs flail in the air, emphasizing the movement and force in a way that resonates

Looks much more convincingly like it's set in the spider's web-lined lair.

> the monster’s eyes meeting our own

Looks anything but to me. And at this point I stopped reading.
I read a good description of the affair in James Essinger's "Jacquard's Web" - came down to the machinist cutting the gears not-to-spec, for the geartrains to function smoothly they would have needed precision not achieved for decades. The Royal Society was willing to fund the project but it became a bottomless money pit as Babbage kept sending the parts back to the kitchen so to speak.
Same. It helped me break my addiction. No way I’ll ever use the official Reddit app
It's a high worth debate, maybe there's a ethics curve.. for most cases you have the normal "don't do harm" but for life threatening you need another board to remove some stops without letting the scams proliferate.
The COVID vaccine already had an existing model to work from that was already ready to go and approved in the SARS-COV-1 vaccine nearly a decade earlier.
I've been on this journey many times with startups to large enterprises. In my experience going all in on a cloud provider of your choosing provides the best long term outcome. While IaC brings some complexity you can recreate a heroku like experience using AWS primitives fairly quickly.

Feel free to shoot me a note: jason at mantle dot systems
Simon is wrong.

It is absolutely zero sum for any measure that matters over periods that are impactful to individual and familial human flourishing

This capitalist rationalization of greed-based markets, loves to pick whatever timeline for measurement which fits their criteria.

It is unambiguous that wealth and power accumulation will persistently concentrate into the smallest number of hands in absence of collective structural countermeasures.

So the default state of large scale capatalist systems follows power law in both wealth and power distribution. It’s a mathematical reality that is shown over and over and over to repeat itself
I did not mean physically. I meant, having it explicitly written out in a way that rational numbers can be. If I write 3/4 + 1/2, I can compute out 5/4 and that is infinitely accurate.

If I want to compute pi + e, an infinitely accurate version is pi + e. That's about it. So what we are actually looking for in this computation is an estimation algorithm, one which can be made as accurate as we wish, but finitely so. The natural way to express this is with rational intervals as rationals are precise and intervals give a containment of the numbers.

For arithmetic, we can have a mechanism for figuring out how precise the input approximations need to be in order to get a given precision for the final computation. The perspective presented here naturally leads to that as a matter of defining and establishing the arithmetic of oracles.

As for playing around with physical representations of irrational numbers, keep in mind that there is no way to prove that, say, something that looks like a unit square to us is really a perfect square down to infinite precision. And without that, we can easily have that the unit square is only very close to such a figure, but is actually a rational rectangle with a rational diagonal that very closely approximates the square root of 2.
They do it for their ipads
IPv6 makes it trivial to come up with a mind boggling number of ip addresses. You don't even have to leave your network
Spartans Were Losers
the math checks out
I have actually found that optaplanner often gets better results on hard problems than a lot of constraint solvers do. Part of that has to do with a genius aspect of how it was designed: constraint evaluation is built on top of the drools rule engine algorithm (an evolution of the Rete algorithm).

I think the fact that it is written for the JVM is especially helpful because you can write constraints using JVM libraries, which are a massive boon in some of the very domain specific areas that I’ve worked in. Writing geospatial or RF propagation constraints in a DSL like minizinc is a total nonstarter.
Concrete is a good road surface in high temperatures, but it is rather rough and so noisy to drive on.
There's a wild book from 2006 called Overdose (by Richard Epstein), that makes a more or less libertarian argument for deregulation of the drug industry. What the book misses is that before the FDA and the Pure Food and Drug Act is that anyone who thought they could make a buck by poisoning as many people as possible did exactly that. And, especially given the "tort reform" prevalent in red states, there is fairly minimal disincentive for corporations to kill people in the US.