skysight-inc/HackerNews huggingface dataset:
>If true security is something you can only achieve by having "hidden" patches, I don't buy your snakeoil

"Hiding" the patches is a monetization strategy. It isn't for security.
> but they often make quite bizarre editorial decisions (personal opinion).

Off-topic, but if this opinion you wrote wasn’t yours, then who else’s opinion were we to assume it would have been?
There is a bank called U.S. Bank but this story is not about them. The original title of the article is "Bank customers report unexpected account closures".
That's an unmaintained Perl library, I highly doubt it sees significant use.

I haven't seen untested stored procedures in years, because I don't use them, no team I've been in uses them.

Complex prepared statements, that's common, but stored procedures, no.
The key here is future versions of RHEL. They can't and won't cut you off from the version of RHEL that they already distributed to you, but if you use it to build a clone distro, then they don't have to sell you a future version of RHEL.
So what. Y'all managed to raise the minimum drinking age to 21 without passing a constitutional amendment by tying federal highway funding to compliance by the states [1]. There's nothing stopping your federal government from doing just the same extortion again if your politics are too ossified for a constitutional amendment or to get rid of NIMBYs.

[1] https://en.wikipedia.org/wiki/National_Minimum_Drinking_Age_...
Whoa, where can I read more about something like that ?!
Thanks. I think having a few solid rails for really populars route is justified. The issue is building too many of these rails to where ridership is not even enough to produce a profit in the beginning, let alone sustain it forever. Also, cities grow and die. Can you imagine if US built out an expensive high speed rail from New York to Detroit? or Seattle to Portland?
There sort of is, in a couple of ways. First, off-label use. This is very common in medicine, and means drug X (or machine X) approved for Y purpose can be used for Z purpose if a physician judges it a good idea. So if a heart drug is showing promise in treating sleep apnea in early papers, your doctor could read the papers and decide it was worth a go. Or if you asked them to; trick there is they are professionally liable for it being a supportable decision. There is a form of this for compassionate use which means most of the downsides are ignored in favor of quality of life (e.g. I'm not too worried about getting you addicted to opiods if you're only going to live a few weeks).

The second way is that drugs/devices are considered against their intended use. So the argument for using more dangerous things is much easier if you are treating brain tumors than common colds. There even are fast-track (e.g. mRNA vaccine for covid) but won't be pulled out for niche uses.

What this doesn't cover is things produced in uncontrolled ways, or "i read this on the internet and want a prescription". I can see how this is frustrating for people who are willing to try anything, but I can also see the liability side.

> "When facing certain death, what's the worst that can happen? You die a bit sooner?"

Part of the problem is you certainly can make things worse, and you can make them systemically more expensive. It's one thing to say "I'm dying anyway and I want to try this" but quite another to add "and if it goes badly I expect you to try and deal with it". No easy answers, really.
>The tax payer effectively pays it since the majority stake belongs to the tax payer. So a large fine is bad and a small fine is bad because it's not a deterrent. The executives that caused the mess's are already mostly gone (hence the back peddling) but the correct action would be to claw back their pay and bonus or something like that so the next "hot shots" don't try such shit again.

If it's state owned, they should be allowed to determine how the penalty is levied. Make the fine directly payable by the executives in charge, it'll stop immediately.

Also not to nitpick as I'm guessing English is a second language and it's quite excellent -

*persuade the courts
Maybe. I still see way too much enthusiasm for all these new CentOS replacements in these circles. Those projects are all phenomenally bad ideas and everyone should understand that. People who're convinced in board rooms are getting RHEL anyway, they've little interest in the 'CentOS community'.
I'm still convinced it's the Japan Postal Symbol:

https://en.wikipedia.org/wiki/Japanese_postal_mark
s/RedHat/IBM - Red Hat the name is just a smoke screen now.
The interface is from NeXT OS, which as a company was led by Steve Jobs.

The underlying architecture of NeXT was largely adopted into OS X and iOS.

The GUI appearance evokes nostalgia for those that used it (the very first web browser was written within NeXT).

https://en.wikipedia.org/wiki/NeXTSTEP
They forgot Scratch!

https://scratch.mit.edu
Communication with Voyager 2 Reestablished
Not on this scale but it has happened to me on a few occasions that I've lost several hours work for some reason (including no autosaves).

After the initial despair I know from experience I need to quickly try and recreate what I've lost while it's fresh in my mind.

It takes much much less time and I always feel that I've done a cleaner job second time around.

At times like that has occurred that this is the way to do it but I've never been able to bring myself to adopt this as policy.
Breakthrough someone getting small amounts of power from carbon in air
All of the divorces I know firsthand from my peers do not involve violence or sexual abuse, but more nebulous or obtuse statements about personal happiness and expectations from life.

I do think a culture of instant gratification and the myriad of stimulus that hits in rapid fire from all sides sets up even the most stalwartly to succumb to feelings or urges to do something opposite of their rationale, because they don't spend a lot of time ruminating and re-examining the source and cause of these feelings and harmonizing them with their goals and values, a sort of re-programming.

I am divorced, but do not want to go into the personal details. I did meet my ex when we were both in our twenties and did not have high body counts. Our divorce would be hard to define with cause(s). I know a large part of it was that my ex-wife struggled with giving up her career (that made her unhappy when she did not have kids) to be a stay-at-home mom when she pushed for having kids, but rejected my offer to stay at home if she wanted to work, and then happy she stayed home and vice versa all over again. Film and media echo this dislocation and dichotomy all the time. Films that show people working through things against all odds (yes a filmic reference but not to the point ;)) or the reality of dealing with everyday life with all of its tensions and releases, and unforeseen events and emergencies, is not common in non-action movies. Call it naive nostalgia, but I don't see that many happy divorced people who have not found someone. And the older we get the harder it is to find someone that can be more than a platonic friend.

I have now been remarried for many years with younger children, and we are all friends - my ex-wife and my current wife and my older children love their young siblings. I am very grateful to have kept those I love and care about around me. I will say that my current wife is traditional and not American and our differences and desires are not so dramatic and easy to harmonize with our life and family.
I am European and my name and surnames would not render. Most English speakers can't even pronounce my name correctly, which bugs me slightly more than the name not rendering correctly in a computer.

But I still don't see this as a problem. Allowing arbitrary encodings, arbitrary mix in an single text stream of right-to-left and left-to-right rendering, homonyms and visually identical rendering of different byte sequences are all a problem, and in particular when any of these are being used across a web or OS interface, where recognizing the intent is quite important.
> But does every machine get link-local v6 addresses by default?

If you use DHCP, then I think you can configure that. What I have in mind is to assign static IPs to all of my fixed machines anyway, and use DHCP to assign IPs to transient machines. Not sure if that's reasonable, but it's my current thinking.

> does every router (even crappy ones) respect the no-forward rule?

There may be broken ones, but it doesn't matter so much because your ISP won't route such addresses regardless.
Thank you. Man, that explains a lot of my easy to sleep but wake up early in the morning issues.
discovery of hotkeys can be a challenge. despite having used gnome for years now i only recently learned that i can switch windows with alt-esc instead of alt-tab, which is much faster when you have multiple windows of the same app or want to switch back and forth between to windows. and i only found this while searching for an extension that would make switching windows easier.
Yes, for every gaggle of engineers you have to have someone who talks too much without saying much to keep people talking.
fantastic tool
> I believe it’s Dwayne Johnson who is famous for eating several pounds of cod a day. A while back some normalish guy publicly did a Rock diet challenge. Johnson poo-pooed it a bit, but the guy stuck with it and got far better results than anyone expected[1]

Yikes, are people risking mercury poisoning by eating this much fish?
> All your doing is making security something that only a select few will actually be able to pay for which is where I take the most issue.

I don't know why you take issue with a company selling a product, especially when they gave it away for decades beforehand.

> If the GRSecurity team was actually invested in improving the security of the kernel they would be working to submit those patches to mainline. I have not seen any effort to refute this.

Upstream has always been extremely hostile to security and security patches. The only reason things have changed at all is because now Google pays Linus's paycheck and a few companies like them control the vast majority of contributions, so if they want security patches to be applied they can make it happen.

That is not how things worked until the last decade or so.

Also, why should they? No one was paying them to do that, or anything for a long time. Why are you dictating that they should spend their time that way? How do you know that would be the best for security? We've all benefited from their approach so clearly what they were doing wasn't so terrible - your browser is randomizing its address space right this very second because of their work.

> Edit: So again, because they work behind closed doors I'm just supposed to take their security contributions at face value without any way to audit what they have done? Again I ask again. How does that improve security? Security through obscurity is not security.

Their patches were open to everyone for decades. You have no idea what you're talking about.
It is written "no discernible side effects"... So we will see...
The first few seasons also were more closely following the books which are very sexually graphic.
That’s a perspective I haven’t heard; I’ve generally heard the opposite. Would love to hear more about that - any reading recommendations?
Nah we just want some security
That makes very little sense to me.

I suppose in a future world, you possibly could create a respiratory virus that causes a cell to create two viruses, one copy of the original, and one copy of standard HIV.

There's a lot of issues though: For one the viral envelope would have to actually fit all that genetic material inside it. For two, it's not like copying a file... The viral genome has instructions for making more of itself, and that includes a hideous protein folding and packaging problem that is really non-trivial. I don't think you could take two off the shelf viruses and just splice them together and stuff them in a virus, it would just at best create a virus that after the first generation, just created two viruses. Finally, even if you did do this, the respiratory part of the virus derives zero benefit from the HIV component, so it will, after a few generations probably just ditch that part and evolve back into a cold virus.
This should be mandatory reading for anyone doing IaC, using TF and AWS or not, less for how you do it, more for what and why.

// shout out to AWS CAB alums
Speaking personally my urge to rewrite at least partially comes from not truly understanding the problem and the solutions to it until I've written something reasonably functional. It doesn't matter how much time I put into sitting and theorizing, there's always things I didn't anticipate and assumptions that turned out to be incorrect.

This usually means that rewrites are significant improvements across the board, especially if they're done a relatively short time after the original is finished since it's all still fresh in my head.

This may be a weakness of sorts on my part though, I lack formal engineering training which might be why purely mental modeling (no code) doesn't work all that well for me.
You must have never looked at CPython code, nor have you ever read the documentation published with Python, nor have you ever read any PEPs, nor have you ever been on the core-dev mailing list / have read its archives.

It would've been really funny how so many people are using this bizarre nonsense, if it weren't for the fact that me and you might also have to use it, directly or indirectly.
Or even most (all) namespaces of the host!

Beyond just minding privileges of the user, building in a container/chroot/etc is nice from a cleanliness/repeatability perspective.

For those interested in the Fedora packaging ecosystem -- look into fedpkg and mock

https://docs.fedoraproject.org/en-US/package-maintainers/Pac...
Communication is only NP-hard if you have zero prior context.

In most cases, you already have 99.9% of the common language, including an acceptable common metalanguage embedded into it. Coming up with mutually understandable definitions is a bit of work, but it's far from unsurmountable.

Note how many legal papers and even scientific papers start with definitios. Other technical communication should, too.
Threads user count falls to new lows, highlighting retention challenges
Latency drives throughput for a single session - but most people that want that kind of bandwidth don't care about a single stream going at the full 25Gbit. Things like torrents or lftp will allow you to create multiple data streams for a single file if you need higher throughput than you can get through a single session.

If you're self-hosting something like a web server, no one user is ever going to hit you with 25Gbit of requests, it'll be coming from multiple sources.
First, I don't accept “99% decline over 100 years” as collapse of a currency.

Second, even if I did, the US Dollar retains 5.6× the value this standard would set. (Of course, it wasn’t purely a fiat currency over that whole time period, but then, setting a standard for collapse/no-collapse time window longer than pure fiat currencies have been a norm and then demanding counterexamples that have existed and not collapsed in
that time is kind of sketchy, independently of whether you have a sane definition of collapse.)
Infectious diseases are different because they jump from host/reservoir to host/reservoir and can take their "experience" with them. Cancers spawn off from normal cells that mutate randomly. So the general scheme is that cancers (and each person's cancer's drug-resistance) develops from scratch in isolation within each person. Basically there's no real mechanism for one person's cancer to translate/share its experience against drugs with another person's cancer. Some cancers are related to viruses by increasing mutation rates which in turn increases the chance of a cancer developing. So basically I wouldn't expect overprescription to produce drug-resistance the way it can for anti-virals and anti-bacterials.
Like I said, the Nazi scientists were very capable. They just didn’t have any power or control. The movie Oppenheimer correctly points out that the Nazi politicians saw a lot of important ideas as “Jewish science” and didn’t take critical scientific innovations seriously, underfunding them in favor of more conventional innovations like “big powerful rocket.”
Wow that's a low price in Austria. In the Netherlands it's 4200 euro per year for just the trains, you still have to pay for bus and metro on top of that.
Ask HN: Who is hiring for remote worldwide roles
Going through each months who's hiring post there are lots of remote positions but it's never clear if they are available for anyone in the world. Let's have a thread with only remote worldwide jobs.
Everything you can do remotely, you can do in person as well. I don't know why you think you can't screen share or send links and commands in a chat if you're in person.

So at minimum, in person would be the same. So I can't possibly see how in person could be worse.
You’re assuming that the ocean temperature relative to the previous year is meaningful. I don’t think that’s true, absolute difference from normal is what matters for ocean ecology.
> because Clojure / Java wasn't performant enough

Languages aren't "performant". You can write good or bad code in most languages, or code that isn't a good fit for a language.

That said, there are languages which will make you incur certain penalties, as there is a price to be paid for automatic memory management with garbage collection, for example. These penalties generally do not matter except for edge cases (and HFT trading might very well be one!).

There are also languages which help you write much faster code, but on a higher level. Clojure transducers are a good example: pipelines built of composable transformations, where data sequences are not fully realized between the transformations. These can provide significant performance (and memory allocation) improvements, while still letting you write high-level code.
I understand your point, and to that effect I'd opt for a duopoly over a monopoly ten times out of ten. That said, even duopoly for internet options sucks. Here in Canada your choice between Bell/Rogers, or Bell/Vidéotron, or Bell/Shaw, etc. makes almost no difference vs the choice between a single one of them. They just bought out almost all independant providers in the country (we're all enjoying huge discounts right now that are obviously temporary, and were used as a tool to undercut them to make the purchases pass more easily).

I would argue it's more important to have more than one option, but it still DOES matter who those options are.
Nice work. I noticed the bing app does this too and I'm curious how this would compare
Please don't rely on a x-twitter headline for a de-facto statement on this. Please see other threads posted here on HN.

Or read Derek Lowe's response on AOH1996:

https://www.science.org/content/blog-post/new-mode-cancer-tr...

Or read about the drug that came before it, but didn't metabolize well:

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6279569/

Or read about other new, interesting anti-cancer drugs:

https://med.stanford.edu/cancer/about/news/rewiring-cancer-c...

https://www.nature.com/articles/s41586-023-06348-2
I used Apple keyboards for, um, about a decade, so I am very habituated to fn on the left and arrows on the right for page up / page down / home / end.

I have bound fn + the asdf row to switch virtual desktops / spaces, and left fn is convenient for a one-handed space warp.
It’s a slight tangent, but the battle of Berlin was an absolute humanitarian disaster.
The number of deaths was incredible. The US suffered approximately 400,000 dead in the war, and the UK (including colonies) was a similar number.

The final assault on Berlin cost 80,000 Russian lives and 100,000 German.

https://en.m.wikipedia.org/wiki/Battle_of_Berlin

https://en.m.wikipedia.org/wiki/World_War_II_casualties#:~:t....
I hope this makes the RedHat based distros less popular in the long term. We need to get out from under their shadow (and IBMs).
I think you mean cocó (Portuguese/Brazilian for shit, mostly used by little kids; adults use a different word)

I love it when people are incensed on my behalf on things I actually don't care about.
> Individuals assigned to the olfactory enrichment group were provided with an odorant diffuser (Diffuser World) and 7 essential oil odorants (rose, orange, eucalyptus, lemon, peppermint, rosemary, and lavender; from The Essential Oil Company, Portland, OR) in identical glass vials that each fit into the diffuser.

https://www.frontiersin.org/articles/10.3389/fnins.2023.1200...
Bad code doesn't usually come from lack of effort. It usually comes from business requirements that grow over time with deadlines attached.
You can't just consider one question and one answer in isolation. The questions and answers add up. It's a waste of the senior engineer's time to spend ten minutes each answering every question of junior engineers who are constantly asking questions, seemingly incapable of helping themselves. The senior engineer becomes a glorified babysitter, and the junior engineers then never learn to solve problems for themselves, which will waste everyone's time in the future.

Not every problem is going to take junior engineers days to solve for themselves. I was stating an upper bound of how much rope to give them, not an average.

Besides, what happens when the senior engineer leaves the company? Sometimes "institutional knowledge" walks out of the institution.
> Japan is a democracy that has all three, and yet they managed to build a HSR system. France has a very good HSR system as well.

Yeah, both started in 1960s.

> The entire point of the US being suited for HSR is that it is so sparsely settled in the center of the country that you don't need frequent stops, or you can get away with just having every 2nd/3rd train stop at a specific city - with 30min of spacing between the trains, that's still 1h/1.5h interval for "flyover states". And a single train carries up to 1.000 passengers, replacing 4-5 planes.

And now you have 4000km of high speed rail tracks to keep in top notch condition. With a mountain range between the two coasts. And trains passing rather frequently.

> Please don't assume that the shit our politicians did with the DB network is valid for HSR in general.

Oh. Nothing to do with that. Weather, accidents, no staff were the most common causes.
I read it selectively initiates apoptosis based on that protein and only affects cancer cells but that might have been relayed incorrectly

Edit: exactly -> "It was created to target a specific variant of PCNA found only in cancer cells. This protein is crucial in the body for DNA repair, but targeting it was difficult because of its role in healthy cells. By going after only the variant, it may be possible to selectively target only cancer cells"

From Wikipedia
The whole purpose of gpl is if you want to be a user of software, you should get freedoms. This effectively eliminates those freedoms by saying that if you use those freedoms, you will no longer be a user.

Defeats the whole purpose, definitely a loophole.
Honestly when it comes to bandwidth: if you build it, they will come? It's a chicken and egg problem most of the time. People aren't going to invent a new widget if there's no infrastructure and no sign of there ever being infrastructure to support it.

For instance: who in their right mind would have built Netflix in 1992?
It's possible that this drug doesn't wipe out all cancer cells if effective, thus leading to the possibility of the cells eventually mutating. But it's not like cancer is some bacteria that can become universally resistant.

The ABVD regime starts with the same baseline on all hodgkin's lymphoma patients, and 'cures' cancer permanently in quite a large number of them.
Has it helped with the traffic? I’ve heard that air pollution was horrible as well