skysight-inc/HackerNews huggingface dataset:
> Google's sessions do not expire, so that more user data can be collected. That is clearly more valuable to them, than compromised accounts due to session hijacking. Them doing it, is not a great use case for others, because their value proposition is entirely different than for most other web applications.

I think this is a pretty bad take. Google runs some very sensitive applications for paying enterprise customers, and they still tend to not expire sessions.

I also really don't like Google as an ad company, and I think my trust in their judgement has fallen precipitously over the last decade, but I find it hard to compare them to someone like Microsoft and say they're doing worse on the security front (I don't think they are).
The terrible thing is how they destroy old house from the inside and build multiple flats with terrible quality at huge prices because renters are pretty much in a dire situation and, stuff like RTO and centralization, makes it even worse for them (commute cost+rent cost+living cost in those areas)

All the while charging extremely high tax rates that get distributed to who knows what, the war on Ukraine, maybe.
I think one of the virtues of Terraform is precisely being more limited than a full programming language. The temptation to add abstraction overhead can be too much for some teams.
The point of normalizing finger printing is that it has to be, well, normalized. To get the widest coverage you need to make it a default.

Making it an option defeats the purpose - but alleviates the hate OP was talking about. It’s a no win
Multithreading Issues (2017)
1) GIL or no GIL does not make a single visible difference in terms of your Python code, how it works, what it can or cannot do. It's only a matter of whether the interpreter internally use locks or not.

2) There is no more copy in multiprocessing that in multithreading, to the very minor exception of the reference counting structures used internally by the interpreter which will get copied on write.

3) The problem you describe is not related to multiprocessing or multithreading, it's just related to a misunderstanding of the Pool.map() API. What you provide to Pool.map() is sent over a queue (and thus pickled) to worker threads - or processes. You don't _have_ to use this queue, so long that your function has a way to access the variable you want to use. That is, the following code will have your subprocesses share, without copying, your 100GB dataframe:

DF = pd.read_parquet('100GB.pq')

def worker_process(id):
# Do something with DF
return 42

with multiprocessing.Pool(10):
pool.map(work_process, [1, 2, 3, 4, 5])
ESPN/Penn deal means watching sports will include watching more gambling ads
Well there goes the most solid security measure to ever exist.

No one's gonna hack floppy disks.
I mean, it was a joke, but also that only works if someone wants to buy them. I've bought options (not on $SPY) where I made a quite a bit of money on paper but couldn't sell them and didn't have the cash to exercise so they ended up expiring. Especially on low-volume securities a big part of the risk is that you simply won't be able to unload them if you don't have the cash on hand to exercise.
I'm not sure it's even patentable in the first place. It's just a Chapman Stick with more strings.
with --swc it's damn fast and very stable. ts-node doesn't recommend you use ts-node in production, however I've seen it done without much consequence.
Show HN: Developer Environments Using Istio and Kubernetes
Developer environments become slow to spin up and expensive to maintain with many microservices. We’ve built a new kind of dev environment that uses traffic labeling (using OpenTelemetry) and dynamic request routing (with Istio) - which makes it lightweight and scalable.

You can run the dev version of a microservice on a laptop and connect it to a shared Kubernetes cluster with dependencies and test as though the whole application were running locally. Also, you can combine dev environments together to test different microservices with each other as they’re being developed.

The underlying approach we use is similar to Uber’s SLATE (https://www.uber.com/blog/simplifying-developer-testing-thro...) - built on top of Kubernetes and Istio.

If you’re interested, please give it a whirl using our guide at https://www.signadot.com/docs/quickstart/local-development. Looking forward to feedback, bug reports, and discussions!
I did some consulting recently for a startup on the data observability space. Performance and scalability were terrible. Not to mention other subtle issues like terrible coupling between services, between classes, terrible abstractions, the inconsistency of the naming in the domain model (e.g. an object that had one name in a set of micro-services, but was named completely differently in the UI and front-end code.

And in general, the culture of the company was about churning out features fast,
at the cost of anything else.

Not surprisingly, as customers started to scale up their deployments, the problems started arising. And yet, the CTO refused to even acknowledge my advice, my carefully done benchmarks, my numeric projections. It was completely alien for him. He didn't understand that system software requires a more careful approach than your usual B2C e-commerce MVP.
Surely this user hostile behavior will have no repercussions. Enshitification must continue.

After all, removing features your customers are using too much is a recipe for profit.
Tax rates matter. It's easy to talk as a yank in a US salary with the tax rates in most states.

UK is insane.
So many trusting people here. I am sorry but trusting shitheels is always a mistake. Always. Cut that relationsip off at the root and walk away.

No second chances, ever.
I know. I had considered just going to Tumbleweed. But that's why I tried Arch. And since they extended Leap's EOL for another year, it gave me more time to play around and figure out where I wanted to land.
samply: Command line CPU profiler which uses the Firefox profiler as its UI
I'm assuming it would be a fenced operation
I must be weird because I see a major divide in editors. CLI editors are for light text editing and don’t need plugins. Updating a line in a config file, etc. I’ve never even wished for a plug-in for them. IDEs need plugins. They’re for coding.

(I know some people use vim or emacs for coding, with 1000 amazing plugins, but I think deep down they’re masochists in the first place, especially vim.)
How come America even though richer lags behind Asian and developing nations that leapfrog in tech?

This list of excuses is depressing: https://www.probuilder.com/utopia/5-biggest-barriers-3d-cons...
Flythroughs iOS app by Luma AI: Create AI-generated cinematic drone videos
So, they claim that "a supply-demand imbalance" is to blame, but I find it unlikely that there is really no one in China (of all places) who would like a home of this size. More likely, either:

1) there is some fundamental problem structurally (e.g. no plumbing or no electricity) that makes these otherwise palatial homes unusable (by humans), or...

2) the financing was such that they cannot admit that they will sell for half what was expected, so the whole thing ended up in legal bankruptcy limbo

I don't know which it is, but I am reminded of how, in my home town of Austin, Texas, we have something like 10,000 homeless people but plenty of empty commercial real estate (some of it listed for rent but not actually plumbed up or otherwise available). It's a rather egregious misallocation of resources.
I don’t really understand this perspective whatsoever. It sounds like you’re saying we shouldn’t rely on abstractions? Isn’t react a quick fix to avoid learning or investing in virtual dom management? Real systems are built upon abstractions
Article from 2019.

https://archive.li/2022.03.08-114925/https://www.nytimes.com...
The Other Mona Lisas
In a lot of cases, short session expiry is used as a hack around subpar authentication standards such as SAML/OIDC where there is no reliable backchannel for the identity provider to tell the service to expire sessions (following a credential change, user being deleted, etc).

The short session expiry is used as a workaround to force the third-party service to regularly check-in with the identity provider, thus placing an upper bound on how long IdP-initiated changes take to reflect on all third-party services.
It's not quite the same as farmland being reclaimed literally between houses, but I remember going to Vegas in 2009 (I think, or late 2008). There was an in-progress casino that was dark; no work going on.

I asked the desk at the hotel I was staying at what was going on. When the market crashed, the company went out of business. He said the workers literally laid their tools down in the middle of a shift, walked out and locked the gates.

It was very, very strange, because the depth of the crash hadn't yet sunk in to my tiny pea-brain. That really drove home just how bad this was about to be.

(funny but unrelated story from that same trip. We were there for a technical conference on research in K-12 administrator training and development, in the same hotel was a furry convention. Explaining to 75+ year olds what a furry was, and why that man had a fox tail was one of the best, and most surreal experiences of my life)
I've always had a hard time breaking into FP paradigms. The basic tutorials feel a bit like math proofs and it's hard to connect the ideas into things I'm actually doing.

As it turned out, I accidentally started learning some functional-lite paradigms in Python. I learned that I actually do like some of these paradigms, and think through them already, I just couldn't connect my internal understanding with the language of FP.

I started learning Rust recently, as it's an exciting systems language with some hype. There, you see even more functional bits which is just a pleasure to use. I'm not in an area where purely functional would make sense but having the quality of life that certain paradigms brings is nice.

I'm still very much a novice in FP techniques, but the ability to try aspects as I go is helpful in learning.
RAG is the ONLY way to make sure you models are keeping true to facts and source material. Fine-tuning a model before using RAG helps with shaping the style of the summary, and gravitating towards more important facts presented.
https://www.npmjs.com/package/dotenv is the gold standard imho. they have a few other packages you can add-on that expand its functionality. I have a custom package which utilizes dotenv, dotenv-expand, and find-up for a truly delightful DX.
Also, not respecting your own "Remember me" checkboxes does not make happy customers.
Assume that some of their models could, for some types of mines, in some deployments and environments.

But that is very different from saying "a Boston Dynamics robot dog is a reasonable primary tool to use in defusing mines".
Not related like at all Canadian one. Beside the fact 'governments are not happy.'
I suspect the issue was a variable amount of detainment while loading or unloading - sometimes the dock was fast - as soon as you bump the dock there is a fork truck in the trailer moving the shit out, sometimes you'd wait for four hours to be loaded or unloaded. All of that is out of the control of the driver and the company. The current structure of the industry has little market pressure to force the shippers to be better behaved.
> it's not typed

It kind of is, environment variables can only be strings, so why "type" it when you 100% know that everything within is 100% a String, always?
>Try to raise a family with 5 kids

What am I, a farmer? I would pick not doing that 10 out of 10 times regardless of how much money I had.
Can you mention year and price? I'm curious. It can be vague if you think that would be identifiable info.

I know Ealing and things are pretty pricey nowadays.
I wouldn't agree with that. I was heavily working on a fairly straightforward infrastructure a year ago and encountered many issues in Pulumi either not supporting a feature or having to work around a bug in Pulumi. It worked, and it was nice when it did and a great DX, but when it fell apart it was quite a burden to figure out what to fix/workaround. Our infrastructure was lambda+CloudFront+S3 and a route based LB with RDS. Nothing crazy.

Yes, I'm sure the Pulumi team has updated to include those features (I can't remember what but if needed I can go find the infra code since the startup went kaput) and fix some of those bugs but they're a small dog chasing a racecar and may never catch up.
> This attitude is cancer. Let me throw another quote at you

Nonsense, defence in depth is a core security principle. You should not rely on a single control to protect you.
I have the opposite experience, though in a different country than yours.

Most people I've met in the industry that did not have a formal education (or an interest in one) would end up scratching the surface and not really dig deeper. The best programmers I know did go to great college programs. Not that the programs made them great programmers, but they acquired a breadth (not depth) of knowledge that prepared them for a lifetime of learning.

Without formal education it's very hard for you to know what you DON'T know. You can go very far in this industry without ever touching a book, giving people the assumption that it's a waste of time. Bootcamps prepare people for work leave it at that, where many people stagnate.

College has quite a few problems, and for some really driven people it's not necessary, but on average it works.
I tried this a while back but was put off by the fake "css".

They say "The dialect of CSS used in Textual is greatly simplified over web based CSS and much easier to learn." But I immediately ran into issues trying to use css that I'm familiar with (and it wasn’t even fancy). They should have called it something else and used different syntax.
Dupe (on both the primary sources and real reporting, rather than this content marketing with a clickbait headline):

https://news.ycombinator.com/item?id=36756101

https://news.ycombinator.com/item?id=37045185
What you're describing isn't a pun. So I'm still in the dark.
Reminds me of vscode never being able to automatically syntax highight .env.local or similar… or is there some setting im missing?
In Linux, to install virus or malware, you need to download, compile, and install virus manually, OR user can install it using `curl ... | bash`, which is much simpler method. Even newbies can install new malware using `curl ... | bash`.
There is no "need" to show logos and images, etc. etc. In fact, far from making things visually appealing, all of that tells me (and most other people) "this is an email which I can safely delete without reading", precisely because real people not trying to sell you something rarely do that.
The countries of Delaware and Nevada are some of the most desirable tax havens in the world, you know.
In the end it boils down to continuations: your function either either takes a single return continuation that takes result|error variant or it takes two (or more) continuations: one for the happy path, and one for the error path. The former maps well to result objects, the latter is maps better to non local (checked) exceptions, but it easy to see how to transform from one to the other.
Is there a list of "security advice that doesn't really make sense but we keep following just because"? This is a great one, another good one is regularly changing passwords. What else?
What advantage does any standardization have aside from interoperability?
I don't know why, probably terrible memory, but I have practically a mental block when it comes to keyboard shortcuts. I've tried spacevim and a few other bundled vims before but I have such a hard time doing anything other than moving the cursor and :wq! type of stuff.

Like.. this is wild https://vim.rtorr.com/

And now I'm hooked on a horrible amount of vscode plugins.
> more to consumer products rather than art or fashion

Surely this computer is still ultimately meant for computing (in style)?
Ugh, this format is just hostile to bigger snippets and snippet-rich approach.

That said, it was vscode experience. Pretty sure I can easily create a couple of vim macros for [un]jsoning lines, so maybe it’s worth comparing vs snipmate.
Performance of the TypeScript compiler has greatly improved in the last versions.
The future isolated declaration mode promises great improvements: until 75% of reduction in compilation time! [0]

[0] https://github.com/microsoft/TypeScript/pull/53463#issuecomm...
> Lcroium's

even worse - C -> S in Cyrillic :)
I think it's just that users are more likely to sign in to a website on a shared computer than they are to download, install, and sign into an app on a shared computer.
> Not perfect of course, but limit the exposure.

It's a shared computer (and if the session is carrying over, it's not just shared hardware it's a shared account).

In this case - you are utterly fucked if you think that machine is secure. Hell, fuck the session, I'll just run a keylogger (or if I'm not admin, install a malicious browser extension) and capture your whole login - I have considerably more access to this machine than I need to compromise you in a large number of ways.
What would the logic be? If it’s just government pouring money into the economy it would work just as well to spend it on space or science or education or whatever. Who benefits from building empty houses as a capital sink?
note that it does not reduce the memory size once loaded (and even prevents sharing pages when several instances are run since memory is written when decompressed, not read as a program binary is)
IME github session is almost eternal.
I think it is more nuanced. This article for example contains examples that suggest otherwise if you want to increase quality (which is a major concern when putting things in production):

https://www.anyscale.com/blog/fine-tuning-llama-2-a-comprehe...
International warranty transfer has been Dell's killer feature for me.
I dunno how leaning into their bursting real estate bubble is going to help GDP.
The food bank I worked at had guidelines per item group. Different items had different levels of strictness, though any worker was free to throw away any item if they thought it was spoiled or too badly damaged. Dents were okay as long as it remained sealed.

My guess is the strictness of the rules is driven by availability of resources and the level of need being met by the organization.
>Robot dogs are taking over the US military

>“What you’re seeing is a growing array of sensors and effectors as these robot dogs take on more and more roles,” Singer said. “The legs are agnostic to what they’re carrying, whether it’s a soldier’s backpack, a chemical weapons sensor, or a .50 caliber machine gun.”

https://taskandpurpose.com/tech-tactics/robot-dogs/
It really threw me because I also remembered the scene but not the actor so I kept looking for Schwarzenegger movies. Good, checked that one off the list :)
Personal opinion upcoming:

"WTF" reads petulantly and doesn't suit the subsequent piece at all. I had the strange experience of seeing the title and saying to myself, uh-oh, this will be some gossipy thing, I'll read it anyway just in case it also has some good information on the situation, and maybe I'll be proven wrong too.

Which I very happily was! The tone was mature, considered, informative, witty, etc. So I was thrilled to have read it, and more perplexed as to why/how the title ended up there.

Now, this is obviously in the purely-subjective category. Perhaps it reads very normally to others, and I just haven't managed to accept how normal "WTF" has become. Just thought I'd share my personal reaction, because the piece was otherwise outstanding, and honest feedback is presumably hard to get.

I was thrilled/appalled to learn about the ".io" domain too from perusing further the author's site; great to learn that. Hats off.
Great post!

Is there a public version of this chart? “ And that's what we're building right now: an alternate map of the world based not on geographic distance, but on pure network latency.”
You say that with the air of confidence of someone that believes their test cases cover all possible circumstances. I know for a fact that none of the large, complex real world systems I've worked on have ever had complete test coverage.
The following page is written in a reasonably readable prose and lists all the currently accepted hallmarks of aging. Genomic instability is on the list, but many other things beside it.

https://www.lifespan.io/topic/why-we-age/

But there has been recent talk about adding five more:

https://www.lifespan.io/news/researchers-propose-five-new-ha...

Aging is complicated. Stuff like extracellular cross-linking of collagen through glycation cannot be reduced to genetic/epigenetic changes, and yet is obviously a huge problem for aged organisms.
I don’t agree with that. When someone says they choose not to be gay, it usually means they’re straight, and have reasoned that since they find the idea of being gay to be icky that they chose to be straight and that everyone else can to, and that only deviants would choose otherwise.
Somalia bans lots of things, probably on the same level as North Korea. Not sure where you're going with this.
The high priests of AI are trying to make computers more like people and in the process making people more like computers.
I’m actually working on a language like this. I quite liked ReScript/ReasonML, but having to manually write binding to use TypeScript or JS code is a drag. I’m making a functional language that looks and feels like TS and lets you import TS directly. Mostly just stripping imperative statements, removing class declaration and adding pattern matching and better data constructors (never liked the discriminated unions). WASM as a target is a bit further off.
Terrible idea. Not only is it completely counter to the python zen koan of "explicit is better than implicit", you really don't want implicit concurrency without some sort of zero-cost abstraction and really strong guarantees against side effects.

> Rationale: Python is designed to be easy and simple. Concurrency in general is not that.

Python is way too dynamic for that. Furthermore, you have a syscall at the start of the loop, and one syscall per loop. Even if you did this in Rust, it probably would not give you the true results you wanted, if that file tree were manipulated in any sort of way during the loop, was a network FS, or any of a number of other assumptions were violated.

That's exactly why automatic concurrency is a bad idea. Now you have no idea if your code is executing in "simple mode" or "complex mode".
what's the question? a humble brag?

competitors may have a shitty product, bad marketing, or missing one or two key features that you have.

plus everyone likes an alternative.
it is extrodinarily unlikely anyone will do such as thing.

As I noted earlier. the birth rate is below replacement rate in almost all developed countries. If not for immigrants population would be shrinking. If anything they would demand more children...
I only used it locally, so there wasn't any other application in between. I used it on Windows but I don't have the version -though I always keep it up to date, so latest or minus one- or configuration now, yet I'll update you with details when I get back from vacation. Thanks!
No dispute there, it would be silly now, I just think it was kind of cool how programmers used to understand how binary worked, and appreciate that it was worth it at one point to use 1 actual bit to store a true/false value.
Yeah wasn't suggesting aliens by any means.
Yeah the comments admonishing a high-fashion techwear brand for “odd choice of lettering” and “trying to be futuristic” are strange.

I want to see more wacky and boundary shamelessly “techno” designs like this, it’s like someone brought something from a Gibson novel to life and I dig it. I’ll take this over the current crop of bland device/tech design.
Show HN: Walking controller for a browser-based robot dog simulator
translation: we want you to use a DoD only version that costs 8x