skysight-inc/HackerNews huggingface dataset:
They weren't charged for having deficiencies, they were charged for knowing about their deficiencies and lying about them:

> SolarWinds allegedly misled investors by disclosing only generic and hypothetical risks at a time when the company and Brown knew of specific deficiencies in SolarWinds’ cybersecurity practices as well as the increasingly elevated risks the company faced at the same time.
Exactly this. Which is why I never used these services. The disappointment and betrayal is inevitable.
Grug came up a week ago in a Philosophy of Software Design submission's comments. I thought the commentary was pretty good. https://news.ycombinator.com/item?id=38011938

> I feel the exact same about grug. I don't think people actually agree on what's simple, so it's pretentious to pretend your "simple" is the obvious one that a caveman would agree with.

Simple/simplicity is often one of the most complex things to discover. I see a lot of people resolute & certain that everything around them (except what they do) is complex & needs to be bent into simplicity. It feels dangerously weak & clutching after authority.
23andMe has - fortunately, and to the best of my knowledge - not done any whole genome sequencing, they have made 'prints' ('Genotypes') that can be used to identify a person, but can't be used to re-sequence the DNA. That said: they do have your samples and there is a chance that they have made full sequences of select samples. But whole genome sequencing is still expensive enough that they would not be able to do this today. But given a few years advances in readers and someone with access to the samples could re-run all of them and obtain full sequences for their whole sample inventory.
Well let’s say someone just spams a prominent account with bot accounts, such that any and all discussion beneath their posts is ruined. Or fills the mentions with slander, hateful comments etc.

twitter is the Wild West right now, full of bots and comments that violate rules but take a while to get enforced.

Blocks solve that. But also deprive people of being able to hear announcements.

Splitting the ability to listen to a broadcast and the ability to broadcast on a broadcast seems sensible. You could, after all, be removed from a courtroom or government press conference for being disruptive.
Amazing, thanks for the reference!

The biggest immediate useful difference that I see is that Annoy uses read-only index files (from the docs: "you can not add more items once the tree has been created" [0]), while Voyager allows you to call `.add_item` at any time (I just pip installed to double check and yes -- it's great).

[0] https://github.com/spotify/annoy#summary-of-features
As someone who gets tons of transactional email I didn't sign up for (wrong address), please do implement your catch-all service and make unsubscribe mechanisms mandatory. If I can't stop it, I mark it as the spam it is, which can't be great for deliverability.
I could swear I've had that thing burn a one-time token for a password reset email before too, but it's hard to prove as a user. Doesn't feel great!
@levelsio is this you and what year is this? 2021?

You might want to get a rate limiter - expose yourself a tiny bit and offer a free tier before asking for money right away, it is a bit turn off for visitors.

But nevertheless bold move posting your replicate API based paywall website at HN first.
I've never understood why some emails are ending with :J? I thought it was a meme I didn't understand. It turns out it's just Outlook doing its thing
I'm guessing it depends on who you are. If you're small potatoes (a desktop user) then you literally don't exist to them. At least, I haven't heard any stories about them raking old grandmas over the coal for using the vb extention pack in their knitting group or whatever.

You do see that reaction to Microsoft -and it's justified. Moreover Microsoft does tend to impact the end user but even that aside...it's a rare comment section that doesn't mention things like "Embrace, extend, extinquish" or the AARD code or the Halloween Documents when the story involves MS.

Now, if you're a part of the demographic that Oracle targets; that's a different story, and probably a worse one at that.
The same reason as the online safety bill, or Tony Blair being the Middle East peace envoy.

It is just branding.
> instead of bossing the underling about.

A roleplaying LLM will absolutely do this instead.

One can of course step back and see that LLM spy text completion and human spy text completion are mechanically different. What people seem to get hung up on is the end results being essentially the same, but this doesn't bother me at all.
Having an API gateway sounds nice, but that’s not how I’ve seen it. Usually the FE has to query and synchronize multiple API endpoints (eg auth, product, billing).

In this case microservices really just means "let the front-end handle the complexity of synchronizing multiple API endpoints."

And then we wonder why the FE is so complex: https://bower.sh/front-end-complexity
My first thought is that the problem is with the stock market. The stock market
"API" should not allow human or machines to be able to "damage" our economy.
There can be several motivations.

Would it be more interesting to present these with the Gelfand triple instance?

Does it have “more” to say than the initial raw definition?

The concept can be used in different contexts and that’s what makes algebra being algebra.

People have different motivations and usually that’s what brings new light into a field.
That is probably what is happening . Before I knew what it was , friends , family and myself just called it zoning out. Made for very awkward work meetings when asked what I thought on something.

I wish I could give some useful advice. But all I can really say STAY ON TOP IT. My big issues have been.

What's interesting today is often boring tomorrow.

Lateness.

Anything even slightly bad will keep getting genuinely put off until "tomorrow"

That goes for all aspects of life, bills, car maintenance. It doesn't matter that I have they money sitting there to pay a bill , I'll still sit on it until I'm told it's overdue.

Or in the cars case the gear that's dodgy for year will no longer work.

edit: i'll also mention avoid short form social media video. I think all the anti-tiktok stuff is overblown. But (just my opinion) it's ADHD kryptonyte.
> If you don't buy DX12.2 capable hardware you don't get the DX12.2 features, it's really that simple. buying fermi or terascale or some other ancient hardware will always be cheaper, but studios aren't just going to not release games because someone is clinging to their 4870. and the situation is not different in kind when we're talking about DX12.0 to 12.2 transition instead of DX9 to DX11 or DX11 to DX12.

Again, the question isn't whether they should release new games (of course they should!) but whether those new games are meaningfully improved by relying on this new tech (hint: they aren't).

> It is, again, super funny to look back at how uncontroversial this all used to be, when it was AMD who was ahead on DX feature support. Like yeah if you buy a DX11-focused card like Maxwell then your DX12 experience is going to be shit. Doctor it hurts when I do this.

It was uncontroversial because back in the day the new tech lead to real visible improvements that you could tell without needing a side-by-side on/off comparison, not just spec wankery. GPU brand has nothing to do with it. The law of diminishing returns kicks in, and the S-curve slows down. It happens to every category of tech eventually.

> buying a 2080 Ti for $950 was an outright bargain.

Again, you're talking about a $950 purchase that for new tech that maybe improves the level of eye candy by maybe 1%. There is no market for that. There is no possible world where that tradeoff is worth it.

But you're never going to understand that, because all you do is look at is a spec sheet, where "bigger number must obviously be betterer".
> This is never a remotely optimal strategy.

I'm sorry that's been your experience, but I can't relate.
If a Github account was compromised, the attacker would still be unable to sign with the key that user has historically used. If all that was done was pin keys of developers and sound alarm bells if the key changes or changes revert to being unsigned, then this is still of significant value as a first step.

I agree most of the value of signing happens if we establish a web of trust with signed keys of known developers with a history of behaving non maliciously -and- also have signed code review by people in the same trust network to limit risk of coercion, or malware stealing yubikey taps on an endpoint.

Also, saying they are lazy about security is unfair. They just invested in areas of security most distros ignored, but sadly at the expense of the security most distros get right. The regression feels irresponsible, but as I said in my other post maybe we need to separate concerns between the AUR-style rapid development expression repohsitory and a new separate one select packages graduate to that have web of trust with well known maintainer/reviewer keys.

I could get behind that.
A great example of this is Sir David Attenborough. "Planet Earth III" has some excerpts from programmes he made when we all lived in greyscale and you can hear how his accent has changed quite noticeably through time.
It's possible for anyone who can expect to make money from speculation or bribes due to steering policy in a certain direction.
It's definitely an improvement, but it doesn't fix the fundamental issue :/
> European federalism is very popular in Brussels, much less so elsewhere.

Having more democratic EU institution is currently not related to federalism.

You can currently even have fully democratic institutions in a confederation system with limited power. Switzerland was an example of that.

> the current state of things, "aborted half-way", is a consequence of social engineering that failed to take into account

That is the pretty common eurosceptic speech and fortunately does not match the reality.

Most poll in Western Europe confirms an overwhelming majority of pro-EU position[^1]. It is currently even stronger in the younger generation.

The integration of the EU stopped because there is a political interest to keep it in its current state. An half baked monster is much easier to corrupt and control through lobbying and diplomatic negotiation than a democratic institution.

If you want to convince yourself of that, simply have a look on the last 2023 European Energy market reform.

It is a shit show of hidden national interests not even half covered up.

[1] https://www.pewresearch.org/short-reads/2023/10/24/people-br...
> If a rewrite happens, all that context is lost and the software is generally worse for it.

Unless you have a strong test suite which tests the absence of those bugs. OFC you can never prove the absence of an issue just the continued functionality of your codebase, but re-writes are often prompted by weird "in-between" functionality becoming the norm (or slow/buggy behavior).

Of course a lot of test suites are of dubious quality/many devs have no idea what a good test suite looks like (usually unit tests are some combination of throw-away/waste-of-time, acceptance tests are mostly happy-path and due to recent trends integration tests are all but non-existent).

But in theory, re-writes are fine when you do have a test-suite. Even with a bad one, you learn what areas of the application were never properly tested and have opportunities to write good tests.
Take that up with the author then! My mistake is only that I tried to understand their writing.
Becaus I don’t care enough, really. Email is something I use because one is expected to( not because one wants to.
https://www.viki.com/categories/country/mainland-china/genre...
Most existing nuclear reactors are cooled with water as you say, and they use steam turbines.

Nevertheless, for the future reactors it is desirable to use higher temperatures in order to increase their energy efficiency. This requires the use of other cooling fluids, as you also mention, and for such high-temperature nuclear reactors sCO2 turbines are preferable to steam turbines.
Some of it is fair. The author does seem a bit egotistical at times. They begin from a premise that "Everyone else is incompetent and I am the savior".

There is a high likelihood that many other people in the org were lightyears ahead of the author. It's even more likely that an engineer or manager in their group was "Banking" the inefficiencies to use during a cost-cutting period - and the author ruined that chance... which will inevitably cause massive suffering and possibly poor performance reviews when there is nothing to trim.
All living creatures are living on borrowed time the minute they're born and not immediately devoured.

I have a feeling the next set of predictions will explain away why the current ones were wrong, just like has happened every time since Malthus and even before that.

That doesn't mean I think crises will not happen. But at this point I'm very skeptical of claims of inevitable worldwide collapse, doubly so when a timeline is provided.
A company of maniacs, but that was a good lesson. Often it’s better to just stay silent and watch. It’s brutal to watch, but better to be the bad guy for pointing at obvious flaws.

Or find and company that values your talent and knowledge.
to my knowledge, USDS is still constrained by the General Schedule[1] salary table.

(no.)

edit: incidentally, this other thread [2] on the front page today has lots of comments confirming. ctrl-f for USDS.

[1] https://www.opm.gov/policy-data-oversight/pay-leave/salaries... (PDF)

[2] https://news.ycombinator.com/item?id=38067206
How would pathlib help with any of the scenarios that the README presents?
It's impressive how different it feels to jump right into the middle of videos vs starting from the beginning. Wadsworth's constant in action.
Would you have any quick links or data on how they compare in terms of speed and recall?
> Similarly with frontend devs thinking a "modern web-app" can only be built with frontend frameworks/libs like React/Vue/Svelte

Those aren’t frameworks, they are view libraries and I’ll die on that hill.

Further, front end complexity is all in your head: https://bower.sh/front-end-complexity
Exactly. It either works or it doesn't today. If it doesn't I assume it'll be fixed soon so I'll come back tomorrow.
I'm not sure it's a question of what's "fair" or "right" or "legal". We (as a society) need to figure out what incentive we want to impose on the world.

We (through a convoluted, but in the end democratic process that is supposed to represent the will of the people) decided that piracy is illegal not because there is some divine right of authors to get compensated, but because we believe that by making piracy too common we would kill the incentive for the future authors to create.

Similary, we will need to decide on the laws around ad blocking. If we decide to keep it accessable, then the downside is that both the infrastructure work done by Google (or its competitors) and the creative work done by authors will become less profitable and thus the quality will decline. If we don't envision this happening, we should definetly get ad blockers without a second thought.
> Companies can advertise all they want, just not collect personal information without their consent.

Honest question, what's an acceptable way to get consent?

Companies need the user to accept their terms before using their services but I presume that's not sufficient/acceptable way since its arguably too long/complicated for a user etc. App specific permissions on your phone can be restricted e.g. turn off location data access for an app, but users generally create accounts and provide more detailed information, so that's likely not sufficient? A prompt on every bit of data collected seems like a bad user experience e.g. notifying the user on every http request that the ip is collected/sent to the server which can provide their rough geo location.

What's an acceptable way to do this?
This is what I interpret as well, They're trying to control the market
I get that the majority, perhaps the vast majority, would prefer such a socially high touch "bulletin board" model, but... some of us run away screaming from such things. I find Discord impossible to navigate in terms of finding discussions of issues that have already occurred, and having to perform my own "archeological excavation" to discover the tidbits that are actually relevant to me is orders of magnitude harder and more irritating than, say, perusing/searching a discussion forum or similar online venue.

For those of us who came of age during the "RTFM before bothering anybody, dammit!" attitude toward supporting engineers, looking for already posted answers to a problem that likely someone else has already solved is vastly superior to bothering someone about a problem they might well be tired of talking about for the 100th time.

I've never been good at "conversation" in real life or online; some of us simply aren't and have/find our strengths elsewhere, and increasingly it seems all online discussions about, say, issues around a game published by a small indie vendor are being pushed to Discord and in some cases even shutting down other online communication channels in favor of that. A vendor who keeps its online discussion forums available and supported is always going to get a lot more interest from me than what I see younger companies doing.

Maybe it's just a big cultural shift, and I am no longer relevant. Not ready to "go away" just yet...
I think that's just about the context of where you see the content.

It's not that interesting as a hacker news post, or somewhere else with a tech audience.

The actual value for these things is in the mainstream, making content creation and graphic design easier.

In those fields, it's not about the novelty of, "wow that's impressive, how did they do that?". It's just about creating engaging content which is aesthetic and pleasing to people.
I’m curious, why is C bad at the OS level? It seems like having stuff like classes as improved structs would be helpful as long as you avoid pitfalls like virtual functions/STL containers. C++ compiled without the STL and specific features like virtual seems like entirely an improvement for writing an OS
Mars's atmosphere is also predominantly CO2, though far thinner.

That's ... somewhat to be expected of any non-life-bearing rocky planet. Free oxygen is unstable, lighter elements (hydrogen, ammonia) would tend to boil off with either low gravity or (relatively) high temperatures (as opposed to the ice-moons of Jupiter and Saturn, especially Titan).
If consumers would tolerate a 20 to 30% increase in prices, any company with half a brain would have already been charging that much. My guess is that jacking up the prices would negatively impact sales. If it doesn't, more power to the car companies I guess?
And you could probably take the time to add your weekly special deals to that reminder email, in case they might see something they like or need.
It doesn't matter. They're all just fungible wrappers on OpenAI or Midjourney or some open source model or whatever the flavor of the week is. I don't blame people for doing this -- those "generate your profile photo in 20 different scenes with AI" that were big six to nine months ago (?) I heard generated literal millions from people putting a frontend in front of whatever AI source before those style of images fell out of fashion.

The critical error of OP's attempt at this was not spending the barest amount of thought or time on designing the website or writing reasonable copy. That, and the number of businesses who will use this are much smaller than the population of regular people who want to do something like AI-ify their profile photos.
But what about acquaintances that I want to keep hearing about? People really whine about FB having negative utility but I think it’s kinda awesome that there are people who I kinda know for a decade that post, and we can interact once a year or whatever.
founder was married to a Google founder, sister was CEO of YouTube for years. Only logical that the endgame would be monetizing user data
CISOs are still often not considered C-suite, and rarely get called to boardrooms.

Commensurating with the new risks for a CISO, a seat in the C-suite, E&O coverage, and nice parachute are the minimum CISOs should get.

Edit: I understand that in this case there were false statements made. That still does not remove the new risk for other CISOs to be dragged into quagmires they were not responsible for (see regulation discrepancies between various US, UK, or EU departments).
Hi! Sorry I didn’t see this when you commented. I would definitely be interested in trying to hack on one of these
I've been having one on one with my colleagues every week to exercise my pronunciation and the way i form my sentences.

Other then that i used to record videos "explaining" the current project I'm working on.

It helps a lot.
Small ones. I can't think of a time that I got support that blew me away with a large company.
6 months ago:

> SolarWinds CISO Tim Brown has been named CISO of the Year by Globee Cybersecurity Awards for his work overseeing our Secure by Design initiative.

> "Through our Secure by Design initiative and our ongoing commitment to efficient information-sharing and public-private partnerships, ..."

This is like China and Saudi Arabia sitting on the UN human rights council.
I might click an "unsubscribe" link in an email from an org that I know. But I'm not going to interact with the page that comes up.

If I get another email from that org, I click "report spam".
Agree with best weapon against AI (in the hands of power) is equal AI access for all.

Hate to be the nitpicker but "defensible moat" implies the moat itself is what needs protecting :)
Just make Country B illegal.
I am obviously biased, but Surgeon is by far the best abstraction for data extraction I've ever seen or have written.

https://github.com/gajus/surgeon

For context, it was created to support my previous business Applaudience. We had to build scrapers for (literally) thousands of cinema websites. At some point we migrated from custom scrips to Surgeon routines and reduced overall codebase size by 70% LoC. It was a huge time saver in terms of both writing new integrations and debugging when things go wrong.

The reality is that data extraction is a highly specialized task and you need specialized software to do it well. Tools like Surgeon can abstract a ton of complexity, but they have steeper learning curve.

I still use it whenever I need to scrape anything and you can combine it with anything that outputs HTML e.g. Playwright.

Ultimately business died (covid was brutal) and I moved on to even more exciting things, but this remains one of those technologies that I wish would have received more adoption.
Spacetime algebra is just the Clifford algebra Cl_1_3(R), so all of the above applies.

> They seem like they would provide a nice way of unifying spatial rotations and Lorentz boosts

Yes and no: the right way to unify rotations and boosts is to consider them as the orientation-preserving elements of the Lorentz group (sometimes called the proper Lorentz group). You can construct this from the corresponding Clifford algebra, but it's somewhat technical and not physically well-motivated until you start dealing with spinors. It's also the group of symmetries of spacetime that leave the origin unchanged, which is far, far more natural.
That's fair. We've historically used GCP at $WORKPLACE, so I'm used to a much lighter level of customer support

GCP support people are believed to exist based on available evidence, but further research is required
How long does a snowflake machine take to spin up? Why have an idle time at all?

I have never used snowflake so I'm not sure how this works.
Yeah but ski-runs with human made snow are fine.

How do we know which slippery slope we are on?