skysight-inc/HackerNews huggingface dataset:
This really brings back great memories. From the late 80s to mid 90s a few of my friends and I played games of oneupsmanship with our messages both inbound and outbound. I was (am) a musician and used my DX-7 synth and multitrack cassette recorder to great effect. I obtained a Casio SK-1 at some point and began sampling my friends' greeting messages and chopping them up and using them for mine. Fun times.
The article mentions other signals, like port numbers and DNS lookups for outgoing connections to Cloudflare when setting up the tunnel.

If you use this Cloudflare feature for other stuff, you obviously can’t use those as high SNR indicators.
That's BS. Intel needs spyware to know people are visiting YouTube? Give me a break.
Certainly, but to the person who wrote the sub-heading (I suspect an editor rather than the article's author), it presents a "previously unanticipated risk." The further you get from the source...
Telemetry is not remote access, much less root access, which does not even exist on typical phones. Phone apps are sandboxed by the OS and can only collect information that the OS allows them to collect. It may of course be possible to abuse this limited information for tracking (and that abuse should absolutely be called out when it occurs), but it’s not the same thing.
Can't speak for the OP, but I can feel it. It can be disconcerting when trying to fall asleep.
Copyright pertains to reproduction of the work. The statistics this tool provided are not reproductions at all. It did also provide quotes, which were not extensive and certainly not the entire work.
China universities waste millions, fail to make real use of research,audit finds
It's much more "offer me work SO rewarding, the commute is worth it" or "money SO good, it makes the commute worth it." Office amenities probably won't get if done, as many folks can just setup the home office the way they want it, or at least as well as most private offices.
There was a study[1] recently about isometric exercises (wall sits, planks, etc.) being most beneficial type of exercise for lowering blood pressure.

I've also anecdotally found that supplementing magnesium glycinate seemed to help.

Perhaps consider getting some thyroid blood tests? (T3/T4 free, TSH) Mine was elevated which contributed to higher blood pressure.

Also since you're vegan, perhaps check for vitamin, mineral, and nutritional deficiencies.

[1] https://bjsm.bmj.com/content/early/2023/07/02/bjsports-2022-...
Unless they circumvent the system set DNS and use a hard coded one, which many that collect telemetry seem to do. On Android I see lots of traffic to Google's DNS even though I do not use their DNS servers (and it is in fact blocked).
I've been remote for 11 years.

Remote work was always an excuse to pay less, much to my chagrin. The fact is that as remote work became more popular, with the increase in positions, pay has actually increased. I'm not surprised that more people are seeing pushback on in the office vs remote compensation as this has been the standard play for years.

I find it doubly frustrating since remote employees are less of a cost sink due to less office space and all the costs that come with it. Remote employees are the most efficient type of employees from that perspective and so it always felt like such a flimsy excuse.

My suggestion is push back on any perceived pay gap between in office and remote work. The work done is at parity (if not more so due to efficiencies of remote work) and so there is no valid excuse to pay less.
As someone who has worked a bunch with debugging Linux itself, debugging qemu, and vulnerabilities in kernel and userspace, I really struggle to appreciate stuff like this because my initial reaction is “well, duh, of course that’s how it works” but looking back at myself getting into those fields I really applaud you and thank you for creating this great content
It seems like it’s doing the expected and logical action then: it yells at you when you come back to the system but if it can’t update itself it sends you to the manual download. This seems completely reasonable.

It doesn’t really matter why the browsers can’t auto-update with too large of a delta, that’s a concern to the authors of the software.

If you really want to solve this I would write some kind of update script that runs on startup of your computer or manage your browser installations with a package manager.

Or you could use a browser like Safari on Mac where the OS software updates manage the browser.
In college we used the title sequence from The Rockford Files: “This is Jim Rockford. At the tone, leave your name and number. I’ll get back to you.” Followed by the entire two-minute Mike Post theme song. The only message anyone ever left was, “Christ, what a long message!”
Yeah, it's sad. I didn't mean to imply that WFH was a net positive for every couple.
Fedora Linux Flatpak cool apps to try for August
This article introduces projects available in Flathub with installation instructions.
Incentive alignment.

Target smashes damaged goods instead of selling them at a discount so employees or customers don't purposefully cosmetically damage things they want to buy.

If the failure state of a business is "the founder can buy it for pennies and try to make something of it", then why wouldn't all lifestyle businesses pitch themselves as VC-backed growth businesses and then use up all that money and settle as a lifestyle business?
> two different sources using two different methodologies, that isn't going to work

They use the same methodology and provide the USD conversion they used. This is all in the docs. Don't argue with an ex-Policymaker who's job was devoted to analyzing and distilling policies from these metrics

> agencies that compare China and Mexico GPD/per capita

When comparing development and quality of life, Median Income is generally the goto, along with Health metrics, Internet Penetration, Education Access, etc.

GDP per capita was NEVER meant to compare quality of life, as it is Gross Domestic PRODUCTION. If ownership of production was 100% distributed equally, then GDP per Capita would be the same as your Median Income, but such is not the case.
Another useful angle to look at the PostgreSQL-compatible database landscape would probably be fully open source (e.g. Apache licensed) vs. almost open-source (e.g. AGPL or commercial licenses that convert to Apache after a few years) vs. closed source. For a variety of reasons, many large organizations that seek to build an internal multi-cloud / hybrid cloud database-as-a-service platform strongly prefer fully open-source solutions.
Max Levchin: Strengthen Your Startup Skeleton
OMG, i'm a bit star struck seeing you reply to this.
Been reading you posts on btctalk for years :D

Sorry about that, my bad, I though i understand how that works, when I was exploring this topic i literally asked everyone i know and no one seemed to have any idea, and then when i felt i got a conclusion i was happy i found some explanation.

Anyway that just an excuse at the end of the day.

I have added to the thread a screenshoot of your reply and link to this conversation.

https://twitter.com/raw_avocado/status/1689317198626422784

Thanks for clarifying that.
A million died. A large number were disabled (probably more than were disabled).
Just curious, how much would you pay? Would you feel better about paying per vendor or a flat fee to monitor up to X vendors, or something completely different?
In my first job after college, I worked at a federal agency where people had cubicles carved out of traditional large offices. It was actually kind of nice, because you worked with people in your office, but had some separation from them as well.

The peons all had desktop computers, while middle management had clunky laptops with docking stations. You knew who the executives were by their small laptops that were clearly designed for traveling by the jet setting class.

I’ve come to think that the ultimate power move for the movers and shakers at a company, would be to have a traditional office with a desktop computer that they cannot take with them. I remember being excited the first time I was issued a corporate laptop. I felt like I had finally arrived, and finally was one of the powerful and privileged. Now, I look back on those days of desktop computing, where I could not take my computer home, and where there was no expectation that I would randomly work from home as the very height of luxury.
Since I don't have a colleague to rubber duck with, I talk to myself. Needless to say that can't happen in an open office floor plan because I don't want to be a distraction any more than I want to be distracted.

Elsewhere boiled frog and class have both been mooted with regards to office. That's definitely my experience from working the last few decades. I started my career having an office for almost every job. But that slowly fell away as corporations discovered cubes save money and is now completely gone where I work now unless you are very senior indeed. We're talking there are only a handful of offices per floor vs nothing but offices on every floor.

Class comes in to play because at least where I work the people setting policy for the average worker to sit at a cube not only have their own offices, they have their own building! One that you don't get access to by default. Yet, as cost-saving-measures we've enabled people to collaborate across regions and timezones to the point that coming in to work in a cube farm is actually counterproductive. Very few people are customer facing and need to get face time with clients to do deals. The rest of us can happily WFH. Perhaps as Wall Street slowly weans itself from CRE, that will in fact be the next benefit that's pulled back: sorry, you need to be really senior to come into the office / square footage is for closers. I can hardly wait.
It's the commute/"salaryman lifestyle" that im avoiding, not an office.
Class is also not these social/economic/cultural signifiers. As yogthos said in a different comment, differences in class are about having substantially different economic incentives. (I wouldn't go as far as GP and say they are unrelated. Of course they are strongly correlated. But they are different things in fundamental ways).
Red Cross updates LGBTQ+ blood donation eligibility based on FDA guidance
Google Messages now encrypts RCS conversations by default
> Usually just because a package has been misdelivered, but you still know it's not for you, you still haven't gained the right to open it.

Not true. https://consumer.ftc.gov/articles/what-do-if-youre-billed-th...

By law, companies can’t send unordered merchandise to you, then demand payment. That means you never have to pay for things you get but didn’t order. You also don’t need to return unordered merchandise. You’re legally entitled to keep it as a free gift.
humans gotta go into work and do something every day. can't just sit back and stare at it.
This is true, but depending on the individual it can also mean that one might need to be good at drawing a line and stopping at it.

I do sometimes work late when chewing on a more difficult problem, but if I don't stop early enough to leave a decent gap between end of work and bedtime, it can sometimes be difficult to get my head turned off and get to sleep.

I miss my teens and early twenties when I could flop into bed and fall asleep no matter what I had been doing prior.
Pentium floating-point division bug (1994)
Secure popup interactions with `restrict-properties`
What benefit? Most "inventions" hit the world @ large as soon as products incorporating them are released. Same world @ large gets the details after someone pokes around in those products & figures out how they work.

That is practically always before patents expire.

Truly smart innovations will survive over time. Obvious "inventions" are often trivial enough to be "invented" independently again & again.

Patents mostly add a load of red tape, and a big stick that large companies (& patent trolls!) can hit smaller companies or individuals with.

Overall benefit to society, even if patents work as intended? Debateable (and forever being debated, eg. between economists).

In a small society, an inventor taking solution-to-big-problem into their grave, is a problem. In a world with 8 billion+ souls, not so much. Someone else will repeat what 1st inventor didn't release into the world.

Companies innovate because they want to grab market share by getting there first. Losing 'protection' doesn't stop this process. It just removes that big stick that would-be competitors are beaten down with.
Apple was right in moving on from these guys.
That's super odd.

I'd suggest filing a bug report at:

https://github.com/zulip/zulip/issues

What browser, OS, browser plugins (like adblocker) are you running?
May be field dependent but unfortunately the most likely outcome is the authors never getting back to you.
Optimising Deft for Emacs
Nothing really ... but as of today I am getting a banner that says my browser (Firefox) will no longer be supported on Sept 1st 2023.
Neither an australian nor a lawyer but it looks like they don't [1] and instead are similar to the US.

[1]: https://en.wikipedia.org/wiki/Right_to_silence_in_Australia
Ah, ok. Many private schools are similar to that in the US.
In college, I started out with SpeedCrunch because it comes with many KDE-based Linux distros as their default calculator. I eventually went on to play with a few alternatives and ultimately settled on Cantor, which is a nice, notebook-style frontend for pretty much every mathematical programming environment you can think of (including Qalculate!). At the time, I really liked using it with Maxima (and sometimes R).

https://cantor.kde.org/
Tesla Autopilot Crash Analysis: Reasons for Accidents with Emergency Vehicles [video]
The first game I remember having a "rewind" feature as a part of the core gameplay mechanics was Blinx on the OG Xbox: https://en.wikipedia.org/wiki/Blinx:_The_Time_Sweeper
my kid told me that the ascend function was a development utility that a dev decided was fun and into the game it went.
The Semiconductor Health and Cancer Problem [video]
Incidentally becoming the single point of failure isn't the problem. The problem is an ethics violation of intentionally positioning yourself before the cost and maintenance considerations of the application.

If, in your example, you become the single point of failure because nobody else wants to engage in modern practices to increase the durability of the application then its a management problem. The way to think about that is: that by changing direction are you reducing time and cost of delivery? If so you have become that single point of failure by pushing for greater ethical considerations.

Beware though, everybody especially people who are ethically wrong, will claim their way is better. The differentiator is measurements: speed of delivery, speed of refactor, degree of risk, speed of labor, quantity of dependencies, compile time, load time, and so on.
Great article. While it mentions monitoring, it took me a long time to appreciate how beneficial it is to do monitoring really well. Things like:

• Knowing when disk space, inode usage, or memory usage get high, long before it’s an emergency.

• Automated monitoring of SSL certificate expiration dates, letting you know days before a certificate expires. Whether or not you use something like certbot, have a separate process that automatically tells you a certificate is close to expiration.

• Automated periodic end-to-end testing of moving parts. Like if you run an email server, a process that sends something from your server to a gmail.com address, and then checks the gmail.com inbox to find the message.

• Automated periodic testing that unexposed ports remain unavailable from outside the device or private network.

• Automated checking that a Linux instance is successfully checking for and installing security updates, and is not waiting for a reboot.
• Automated checking that backups are working as expected. You might not be able to automate periodic restore testing, but at least check that backups do not appear to be silently failing.
• Separating out low priority alerts from high priority alerts. You want to get woken up when necessary, but not for an issue that can wait until you are at your desk.
Thanks!

That doesn't sound so dramatic, IMO. I wonder if there's a generational component there too...? Maybe in Tolkien's time, explicit gore and violence were less common. Then since modern video games and TV shows upped the ante, maybe RR Martin had to be more explicit to create the same emotional effect that Tolkien's subtle hinting used to have on his audience? I dunno.
I can't imagine it's easy, but if you say you've done it I'll have to defer to you.
Week1.2 What I need to do to set up my machine?
> I think it's especially rich that HR people think you're wasting /their/ time when they make you an insultingly low offer after extensive interviewing, especially considering there's a massive skills gap between tech workers and HR folks (who are a dime a dozen).

I agree with everything up until this portion. I think HR can be a very difficult job, in a way that's quite similar to say security positions. If an HR person excels at their job-- you will never see them, you will never interact with them outside of paperwork, and you will never need to ask them anything. So it can be very easy to assume HR is doing nothing. In reality good HR manages multiple complex, competing organizational systems (office politics, board concerns, retention, legal, recruiting) and is expected to manage them in such a way that none of the competing organizational systems are even aware of the friction, while having none of the power to actually change anything by themselves.
You'd be surprised how easy it is to make healthy, tasty food.

Personally, if I made enough, I'd eat out all the time too.
Credit card debt tops $1 trillion, trapping even six-figure earners
If you're working with something old enough for encrypted connections to be "CPU intensive", you're probably not talking to anything remotely current any way

TLS 1.3 is out there

TLS 1.2 is ubiquitious

I cannot recall the last time I saw anything older than TLS 1.1 anywhere - TLS 1.1 on down into the various SSL specs are all deprecated/unsupported[0]

TLS 1.1 and 1.0 have been deprecated for 2 years, SSL3 since 2015, SSL2 since 2011

If you're running something new enough to support TLS 1.1 (at least, 1.2 or 1.3 are much better), then the encryption overhead is very tiny

-------

[0] https://en.wikipedia.org/wiki/Transport_Layer_Security
> The CEO was upset others were allowed to perform as if they were of the same class.

I doubt it. Companies that try to hire pedigree know that they are hiring from the same class. The disdain is shock from a junior not working 20 hour days and sleeping under the desk.
Yes, but the funny thing is that.. for a guy worried about how hard his worker bees are working / how focussed they were during COVID.. he dropped A LOT of tracks during COVID.

https://en.m.wikipedia.org/wiki/David_M._Solomon

In fact, almost his entire track history was during COVID.. in a time that the company he runs has had some headline-grabbing losses in their consumer division.

So I think its fair to say he should focus on his own productivity here first.
That's just a trivial parent-child transformation copy, and it's one of the oldest tools in 3D digital representation. You would be hard-pressed to find a game engine or even modeling software without this feature. Hell, I'm sure if you looked through a few geometry or physics books, you could pretty easily find any instance of this that predates computing.

We aren't even talking about something interesting like inverse kinematics!

This patent boils down to nothing more than math, and should have been invalidated as soon as it was read. The fact that it wasn't speaks volumes on the failure of our patent system.
Effective soundproofing is tricky.

I had to wade through a lot of conflicting advice when I did it.

I suspect a big factor is that most people do only a handful of implementations, and might overgeneralize the lessons they draw.

Also, for a given structure and environment, most people can only afford to try 1-2 soundproofing approaches (wall structure, ventilation, etc.) So it's hard to know if they picked a good point in the tradeoffs space.
See the last couple of messages in my edit3: https://chat.openai.com/share/8ddb50ca-abf8-4f70-ac2d-521764...

It appears to use escaped <> sometimes. Asking it to not escape breaks is when things break.
good thinking I definitely need this useful and widely used code to be legible and platform independent
A banner year for the Perseid meteor shower
There was a really awful and amazing floating point implementation posted here¹ a couple of years ago, with a few interesting comments too². I remember it in part because I was surprised there wasn't more discussion.

¹ https://github.com/clarity20/shellmath

² https://news.ycombinator.com/item?id=26250743
While these are great projects, they're for very different audiences. Code is a really well written pop-science book that goes into logic circuits. The Nand2Tetris book comments for example that:

> The HDL that we will use is documented in appendix 2 and can be learned in about one hour

which about as meaningful as saying you can learn X's syntax in an hour. Nand2tetris is a serious investment of time and if you've never done something like FPGA design (VHDL etc) or assembly, it takes a bit of getting your head around.

It's also worth mentioning Shenzhen IO as an interesting take on this (edutainment for programmers) https://www.zachtronics.com/shenzhen-io/
Nvidia would likely have much better data to sell as they have collected data for years.
Even if telemetry is useful (this is a rare example - the vast majority of telemetry is either useless or actively works against the users), it's still a breach of privacy and confidentiality (crash dumps - which are necessary to investigate/reproduce such bugs - can contain highly confidential data including passwords or session cookies).

> but only if you collect the data.

If the problem is impacting the user and they want it fixed they'll happily tell you. This bug (which causes crashes) would've been investigated just as well by asking users "Firefox has crashed - send bug report?", while giving the user the choice to decline if they had sensitive data in the browser's state.

Obviously nobody in their right mind should opt-in to generic telemetry because all the "product improvements" excuses never panned out - in the last decade software has only become worse, more annoying, and less feature-full, so people are making the rational decision and are not opting into something that's not actually benefiting them. But opt-in telemetry in specific cases where the user actually has a problem like this occurrence can work just fine.
The relationship between certain endurance training and arrhythmia seems to follow a J-curve.

No activity = higher risk //
Moderate activity = lowest risk //
Extreme activity = higher risk that increases with # of training hours

There's a few mechanisms: cardiac remodeling due to pressure and load, fibrosis, and vagal tone

This happened to me after years of 60-100 mile weeks combined with competitive weightlifting and rock climbing. Symptoms showed up, I got diagnosed, then received an ablation which solved the issue. I'm back to a high level but don't push it like I used to. Was probably doing >1500 training hours/year. Now I'm closer to 800-1000/year
Yes, we do use it at the same time. We also have times when we need privacy and one of us has to work elsewhere. Mostly it's just me in the office though as my wife doesn't need it as often.
Paleontologists in Peru Discover the heaviest animal the world has ever seen