skysight-inc/HackerNews huggingface dataset:
I don’t take any job where I would have to wake up from sleep to handle something. Some jobs have stated on-call, but the consequence of not handling a 3am call is nothing. In which case you make more money/hour by not responding to night requests.

The products I’ve worked on in my career largely operate on US business hours, so this has never been a real issue for me.

If I were receiving calls about work more than once a year, I’d quit.
That is a choice. Not criticizing you for yours (and bonus points for honesty), but optimizing for money is not the only game in town. Plenty of software engineering work makes the world better while paying enough for a very comfortable life. Not FAANG levels, but good money. My 2c.
> why would Go even allow you to mutate the temporary variable?

Because it's a variable. That's what you do with variables, you mutate them to hold different values. There are no "named, non-constant holders for values that you can't mutate directly" in Go.
I had good ones too. But they didn't pay as much.
So open source for VC take-over endavours functions like a tax. Eventually the money for bribery/free_stuff runs out, the old buisness patterns return, open source reconquers the niche. Nature is healing..
Great to know which vendor I will NOT be buying from.
> This enables the government of any EU member state to issue website certificates for interception and surveillance which can be used against every EU citizen, even those not resident in or connected to the issuing member state.

This is already possible though, all a state needs to do for that is to bribe Microsoft[1] like Tunisia did ~20 years ago to include a government intelligence agency's root certificate that can then be used for MitM.

[1] and/or Apple and Google, if they want to target mobile devices as well.
And there you have it folks. That's the number one reason why they are forcing you to use their app.
Yepp, I have some IKEA buttons and they are just Zigbee devices. They also sell lamps etc., mostly Zigbee based from what I remember.

For the Germans (maybe other countries as well): The Lidl smart home things are nearly all Zigbee based. So far no problems with them and they are, IMO, reasonably priced. I somehow trust Lidl more to not burn my house down than random Amazon sellers. They also sell a Zigbee gateway that phones home by default, but can be converted to local only, dumb mode that works fine with Home Assistant [1] with a tiny bit of soldering. I use these exclusively without problems, even the one I rooted for my parents works without any maintenance.

[1] https://paulbanks.org/projects/lidl-zigbee/#overview
If pulling the state goes through the cloud app it is their (self-inflicted) problem.
Why just dont attend them?

Im invited to like 10 of meetings each week

Nobody expects me to attend those where im not really important or need to discuss stuff
To be frank, your opinion of another HN user's comments doesn't outweigh anyone else's opinion. If your unsure about this point, perhaps review the HN rules?

If it was indeed as you say, and that the large majority of passing readers indeed perceived it as such, then the previous comment would have been downvoted into 'dead' status a while ago.

Since it hasn't, then that's proof enough.
Food has texture and a bottom to leverage, so unless the robots are also able to scoot under and object to lift it, using only the sides can require enough force to crush some boxes,
> The ability of an insurance company to unilaterally deny treatment, or determine what type of treatment a patient receives

Technically, the insurance company is denying payment, not the treatment. Also, many times, the prior authorization requirements and formularies are given by the insurance company’s customer, such as the the government (Medicaid, Medicare, employer, etc). But the insurance company will take the heat, because that is part of what they are getting paid for.

Useful for when you need to give a Senator quick access to top tier healthcare, and older people a lower level of healthcare, and poorer people an even lower level of healthcare.
I'm quite confident my parents and the many people like them in the world would not find running VPN/Tailscale/ZeroTier to be "easy." Nor would they have any idea how to troubleshoot when those services have issues. Nor would they want to play intermediary between Tailscale and myQ customer support to figure out which one is broken and fix it.

Having options like this is great for powerusers, but the vast majority of people are not that. They need something that just works. Of course that still doesn't mean they need their garage door collecting telemetry data, but they need something more than a LAN-connected smart device.
This is exactly what happens in the Mail app on macOS when two people exchange mails and both signs them. Once the public key of someone is known, mails are automatically encrypted from now on while the certificate is valid. It’s excessively convenient and I loathe the certificate industry for making the acquisition of certificate such a painful and expensive process, otherwise we could have encrypted communication with emails easily.
My garage doors (purchased within the last year) have "regular" buttons / car remotes to open them, myQ was 100% optional. I basically use it as a way to alert me when the garage door opens (someone just came home, amazon is doing that semi-weird in-garage delivery thing, etc)
Does co-insurance help with this problem? e.g. if the patient is responsible for 10% of the cost of the pills, then the patient is motivated to choose the cheaper pills without the need for a long bureaucratic process with the insurance company, and the doctor just has to present both options
Well I'm not the one claiming people are going to stop reading because of AI, so I'm not the one to ask :)
Absolute statements are bad.
Be careful how you combine these components: https://soatok.blog/2021/07/30/canonicalization-attacks-agai...

(The linked article talks about CTR + HMAC, but CBC + HMAC is also affected.)
You don't even have to go so far as saying they should change the embedded software. Here is the problem:

> The MyQ integration was introduced in Home Assistant 0.39, and it's used by 3.1% of the active installations. Its IoT class is Cloud Polling.

"Cloud Polling", meaning they don't have a way for an API client to register for state change callbacks. I'm sure this is why there is so much traffic - if Home Assistant wants to support triggers based on state changes (eg door opening, turn on home lights), then it needs to repeatedly check the status so that it becomes aware of the change in a timely manner.

(Personally I only buy/use devices with local control, and generally cut them off from Internet access. Just saying though)
Probably because the official client only checks the state if you open the app, while HA probably does it every so often.

Legit solution would be for the company to allow local access to the garage door to check the state without needing to go through their servers.
In a lot of organisations the business side isn't necessarily incentivised to talk to tech, which causes a lot of issues. In good places, it's different and the development cycles work really well with an engaged business side. You still might want some manager in there to manage demands, conflicts, resources, etc.
> 1. My wife can check that we didn't forget to close it instead of driving 20 minutes back home to quell her nerves.

Seems like a bit of an ill-adaptation. I used to want a smart door lock for exactly this reason, but instead I learned to be mindful when I close my dumb door...
Yes I agree. I don't make FAANG money but I live comfortably. I think what is important is optimising for a fair balance of happiness in life, which despite my negative outlook here is pretty damn high and taking home enough cash to enable you to do what you want to do before you drop dead.

I'd be more invested in something which improves the human condition but that's a 1 in 100,000 job. Perhaps I should have done biochemistry or something at university.
And what is your attitude when you in some project come across a method longer than 100 lines? Do you immediately start cutting it into a bunch of smaller methods passing long list of input/output parameters? Or even turn it into a class to contain all the local variables?

Or do you immediately perform a git blame and confront the developer who wrote the code to lecture them or force them to rewrite the code?

Or do you think: I would not have written it like that and it might result in some technical debt, but at the moment it just works, and I just forget about it for the time being?
Show HN: Modeling Berlin subway lines in graph database
I recently stumbled upon an interesting Gist [1] about the Berlin subway and was inspired to create something similar using Memgraph. The most challenging part was figuring out which sources to use. Since this was my first attempt to create any type of graph dataset, I focused solely on stations (nodes) and lines (relationships), and I've packaged them into two CSV files. I also did some styling using a styling language called GSS. You can check out the results in my blog post.

It may not seem like much, but I really enjoyed working on this project. All comments and feedback are welcome :)

Disclaimer: I am employed at Memgraph.

[1] https://gist.github.com/CliffordAnderson/7fb7473af31f9343f8a...
not close enough.
Show HN: I Brought Edge Copilot to Chrome
With the current batch of proposals the child (teenager usually) making home-made porn¹ would get flagged and in the worst case scenario get marked as a CSAM producer or end up on some indelible list of sexual predators depending on the jurisdiction. Can you imagine what will happen next? For what? Doing what their hormones made them do without harming anyone?

Educate them, absolutely. Monitor their every move online because they might do something stupid? That's an option I would like to limit to their parents/guardians, if it all, not any state or bigtech corporation, and certainly not any automated flagging system.

1: Not CSAM; let's limit this line of thought to consensually made porn.
A solution isn't required.
It is much, much easier to wait for someone else to do all the difficult stuff, and then write a rule that if you don't also get the same stuff that you can lock people in a box or take some of their money.
It Never Gets Easier
In almost any context where banning E2E encryption would have useful law-enforcement results against unsophisticated criminals, there is always a legal way to install a wire tap via an active attack. For example, a judge can force Signal to perform a MITM attack, and an unsophisticated target will simply ignore the key change warning. An alternate approach would be to use the auto-update features of the terminal and force the app distributors to sign and push a trojan to that specific target. You might have objections against such law enforcement techniques, but I think they have their place with proper judicial oversight.

Conversely, if the target is aware of such techniques, it's very, very unlikely they would use a channel they know is monitored.

So the trade-off here is: break the privacy of everyone, but allow law enforcement to do passive attacks without judicial overview. It's a no brainer that both things are bad and they do not improve our safety one bit. Who really finds such powers useful? Spooks and entrenched power structures, of course.
Ah cool, will it be open sourced?

I'm on that project myself, we are also dealing with simulating circuits, buuut I feel like we could improve our approach somewhat lol. For example, we had a bunch of trouble trying to speed things up, I immediately thought of trying to make most things run on a GPU but we quickly found out that our circuits just have too few qubits to be parallelized decently.

More importantly, I am not very optimistic (to say the least) about the short- to medium-term real-world applications of quantum circuits we are looking into (we do time series classification, which is quite removed from other domains which work better on these computers), and I got the same feeling from the literature. Should I be feeling differently?
HomeKit appears to be slated for removal based on how they’re talking about only current users here:

https://support.chamberlaingroup.com/s/article/App-and-phone...
Home video creation (recording, editing,…)

This summer I finally bought a GoPro to capture our motorcycle tour with my girlfriend – have been thinking about getting one for years but never did. Well, since then we have been on three city trips and I enjoyed recording those. Since then I edited and finished one of them, and it is such a joy.
It would allow all EU governments to intercept everyone on the planet if that CA is root in every browser install.
Well, everything evolves. They will eventually be adversarially tested. Wise societies will realize that it's better to spend resources to prevent physical violence than to control everyone's thought. It seems it broadly goes that way so far.
On each integration page there is a button that states if the integration is local or remote.
I'm always genuinely confused when similar arguments come up related to privacy. Governments invading its citizens' privacy is always a problem.

They may have good intentions today, but politicians and intentions can change while the new government powers are likely never removed.
UFOs and Aliens Are (Probably) Not What You Think: Diana Walsh Pasulka Interview
This is why sad to see Cyberpunk moving to Unreal, it's a solid engine, it takes advantage of all CPU cores, unlike unreal.
I'll never understand why have stuttering issues because of shader compilation, and most other in-house engines don't have that problem. And why it hasn't been improved yet, and even if they release an update to improve this tomorrow, it will take years to see games take advantage of it.
Yes, the problem is that apparently this would outlaw it.

Incidentally there a very similar sounding provision announced in the UK yesterday:

'make tech companies clear security features with the Home Office'
IIR - the article describes Chamberlain's goal as "force all users to scroll past a bunch of ads in our Garage Door Opener app, in order to get to the OPEN/CLOSE button".

To me, that sounds like a worse case than "Just use a dedicated 1990's-tech garage door opener, that I keep in my car". If Chamberlain's cloudy infrastructure was off-line (internet outage, went bankrupt, or the just lost interest), would there be any way to remotely open the garage door?
The best college courses taught me more than my jobs ever did. Creating my own iPhone app and reimplementing rowhammer stand out. The app I sold and reimplementing rowhammer required me to learn about C, assembly and CPU architecture fast. It gave me a mindset that still serves me. And sometimes it allows me to pentest my employer because I smell a vulnerability.

The average college course, yea not great…
Because that means I have to justify not being a "team player" then. And I can't be bothered with that. I'm not creating conflict for the sake of it.
> Filling is mostly to reinforce zones threatened by collapse. Entrances are secured mostly by sawing off the ladder rungs and welding the manhole covers.

They started using concrete to block entrances too, for the better-known entrypoints.
There's a key point on the data-mining-cloud-only route Chamberlain is taking: they were acquired by Blackstone a couple years ago [1], so not "family owned" anymore [2].

No doubt they want to exploit that data and begin integration with all their shady Real State business [3].

Their new CTO/Executive VP says in one of their PR news: "With Blackstone’s partnership, we will capitalize on new market opportunities". And a Senior Management Director says "...unique opportunity to build on its leadership position at the center of housing and e-commerce megatrends (...) expansion into connected homes, businesses and communities" [4].

Very alarming in times that big owners are trying also to force biometric data collection in their buildings (see Atlantic Plaza Towers) or are blindly giving information to agencies (see Amazon Ring cameras and the likes).

Now, the rant:

Of course, with one hand the CEO is donating to buy his name in institutions: "There is a Stephen Schwarzman building at the New York Public Library, a Schwarzman centre at Yale University and the Schwarzman College of Computing in Massachusetts. Soon, the University of Oxford will open the Schwarzman Centre for the Humanities, funded by the largest single donation it has ever received." [5] and the other is receiving billions from universities like UC to speculate in real state [6].

One would say it's curious how Schwarzman creates a huge publicity stunt with "biggest single donation 'since the Renaissance'" (£150m) [7], but why would be important to donate to Oxford, when they have almost £8b in endowments... [8]

1: https://www.blackstone.com/news/press/the-duchossois-group-completes-saleof-chamberlain-group-to-blackstone/
2: https://www.wsj.com/articles/blackstone-to-buy-chamberlain-group-11631019601
3: https://www.theguardian.com/us-news/2019/mar/26/blackstone-group-accused-global-housing-crisis-un
4: https://www.prnewswire.com/news-releases/chamberlain-group-adds-top-tech-leader-dan-phillips-as-cto-to-accelerate-companys-technology-transformation-301744538.html
5: https://www.theguardian.com/business/2022/sep/29/blackstone-rebellion-how-one-country-worlds-biggest-commercial-landlord-denmark
6: https://www.latimes.com/business/story/2023-01-20/university-california-blackstone-real-estate-fund-housing-prices
7: https://www.theguardian.com/education/2019/jun/19/oxford-receive-biggest-single-donation-stephen-schwarzman
8: https://en.wikipedia.org/wiki/List_of_universities_in_the_United_Kingdom_by_endowment#Endowments_over_%C2%A31_billion
http://borg.uu3.net/~borg/?fun/vim
There are so many stories of these falls from grace. I remember when Theranos, WeWork, FTX, etc., were media darlings. People rush to emulate their strategy, leaders, and culture. Then the companies unravel or performance suffers and everyone tries to explain what went wrong.

I think a better explanation is “the halo effect.” Businesses have success, even if for a limited time, and using limited definitions (e.g. VC valuation), and people tell stories about why they’re successful that put leadership, strategy, culture, and so forth, front and centre, when it could have been dumb luck or a low interest rate environment or other factors totally unrelated to leadership, strategy, and culture.

A book that really opened my eyes to this was The Halo Effect: https://www.goodreads.com/en/book/show/136181
This claim that eIDAS is an attempt to intercept TLS and spy on citizens has been repeated over and over this week without any basis and I'm getting sick of it. I don't understand why everyone immediately assumes bad faith here when it's much more likely that this is just a botched article written by someone who has not had to deal with the intricacies of the web PKI.

Do you seriously think the intent here is to allow, say, Italy to issue a certificate and spying on german citizens? Or maybe it is to make sure italian citizens (regardless of browser vendor) can access the social security website without getting a scary warning message?
That project looks great! Now the issue is finding a Chamberlain or Liftmaster opener without myQ built-in. Or maybe I just don’t have to activate it.
Indeed, I see a big difference between developers in my team based on their general reasoning and discrete math skills. How capable are they of abstractly interpreting code in their head? Are they used to thinking about how to prove something is correct? Are they used to thinking in terms of graphs? That sort of thing. Those are technical skills that seem pretty difficult to learn.
How would they get the private key? Or would this CA only allow using certs with private keys they generated instead of using CSRs?
Because that works so well with other laws...
> Just personally, I can count on one hand the number of algorithms I've written where weird control flow was necessary to make the algorithm easier, and they were all weird shit that I expect other people to use libraries for in most cases.

Async/await or error handling is not "weird control flow". In many codebases you would have more functions that use those than not.
I own a MyQ garage door opener and this is infuriating. We would be so much further along in home automation if companies were mandated to produce interoperable devices. Every appliance should expose its controls, events, and state in a standardized manner.

I don't know what such a mandate would look like. I just know that we're at least a decade behind where we should be because the market isn't getting it done.
Any IOT device that requires the cloud for functionality is a trap.

I bought a Miku baby monitor specifically because of the 2 devices that offered a feature I wanted, Miku had no subscription fees. And they advertised that they never would. It cost $400.

Then they went bankrupt and during bankruptcy they sent out a proposal to start charging for previously free features. Then they retracted that proposal. Not sure if the judge shut that down, or what happened. But then they sold to a company conveniently created the day of the sale.

Within a month the new company forced out an over the air update that disabled most functionality until you pay them $10 a month (they went bankrupt in the first place because they did a normal over the air firmware update that bricked every single unit and had to replace them all).

Last time I checked they were still being advertised on Amazon as being subscription free.

Honestly I think we need regulation to force companies to purchase a bond to provide basic security and support for any IOT devices they sell for some number of years from the purchase date. I don’t see any sign of the market solving this anytime soon.
What are you talking about? Go doesn't parallelize its loops, in fact, concurrent mutating iteration is unsafe.

Reads of memory locations larger than a single machine word are encouraged but not required to meet the same semantics as word-sized memory locations, observing a single allowed write w. For performance reasons, implementations may instead treat larger operations as a set of individual machine-word-sized operations in an unspecified order. This means that races on multiword data structures can lead to inconsistent values not corresponding to a single write. When the values depend on the consistency of internal (pointer, length) or (pointer, type) pairs, as can be the case for interface values, maps, slices, and strings in most Go implementations, such races can in turn lead to arbitrary memory corruption.

The for-range in Go doesn't introduce any synchronization points.
The main reason why HA accounted for so many requests is probably because it was a polling integration, requesting data every 30 seconds from the server, while the official app either had push events when something changes, or it updated state when the app gets opened.
I refuse to use cloud services, and I use tail scale, but telling the average consumer to do this instead of using whatever app came with the device is not going to work for most people
There is a difference between Coq and say Haskell, for example. I guess I will disprove your entire point by finding an unknown dynamic language that nobody uses then.