skysight-inc/HackerNews huggingface dataset:
Wow, this looked incredibly shady, but apparently this is the author's official website. Good for him for releasing his book as Creative Commons, that's a cool move.
There's a new spec for better dropdowns in the works: https://css-tricks.com/the-selectmenu-element/

The whole reason they've been bad is "We can't change `<select>` because it would break backwards compatibility".

So the new solution is to create a new element: `<selectmenu>` which is made to be customised, while still being accessible.
that only works up to a point. If you are trying to transform a text based cli output into a JSON object, even with a grammar, you can get variation in the output. A simple example is field or list ordering. Omission is the real problematic one
So are you saying the numerous videos I've seen of Hamas shooting civilians dead, shooting assault rifles into homes, shooting drivers dead on the roads, beheading people, throwing grenades into shelters where women and children are cowering, etc, re all forged?
How China is challenging the U.S. military's dominance in space
The people who invented fire codes did it on the expressed grounds that it was a superficially acceptable way to ban apartments. See Lawrence Veiller's 1914 'A Model Housing Law' and research Veiller's prior utterances.
What I meant is that "overreaction" is a subjective term. From perspective of an average Israely (again, my subjective observation) it's not "over" reaction.

So
> the Israeli leadership is so easy to goad into over-reaction

From Israely leadership perspective it's NOT an overreaction, so it IS easy.

And in general "overreaction" is too emotionally charged. What would be an adequate reaction? Send us your X women we'll rape them? How do you measure "over"ness of a response to mass rape and torture?
This Padsplit thing you link to is pretty amazing, in the scale of the difference in rent, moving costs, and even property financial return. Yes, we'll have to see how long before neighborhoods try blocking them but for now that looks very interesting. (Also a lot of low-income housing is supposed to come with supervision and living or mental health assistance but obviously not everyone needs that.)
meow meow meow meow XDD
Intent makes a comment flamebait. If it was obviously against the guidelines, like complaining that a submission is inappropriate, I wouldn't have posted it. Anyway, I'm interested to learn. What statistical analysis did you run to conclude what the expected response to my post would be?
I think you should move a lot of what you wrote in your Medium post into the Readme, as high level documentation.

It will have the secondary benefit of not being paywalled by Medium.
Sounds like someone is tired of getting dinged for using outdated security practices in their application designs.

I came from the other side of things. I know what its like, but the fact they care more about features and not fixing vulnerabilities or designing applications to have good security is a failing on their end. Shift left, do it early, so we're not finding it right when the product is getting ready to ship when its finally in a form ready to review.

>3. Build standardized patterns.

Yeah, you can have them, but then the various project teams don't follow them or even look at them during the design. Then wonder why its being reported later. Are they kept accountable when they don't follow the prescribed patterns and it causes project delays when its called out? No. It's our fault for road blocking.

>4. Abandon the perimeter model.

Uh yeah, we talk about zero trust but its the app teams saying "its an internal application, not publicly accessible so its not a big deal if there's no encryption or credentials are stored in the clear" in their arguments to why its not an issue or they shouldn't have to fix it.

>5. Advise, don’t dictate.

I can not speak for every place, but we recommend solutions and call them "Recommendations" but if there's another better solution to reducing the risk we're not the SME's in your product, as long as it adequately remediates the issues through some sort of control, detection, or fix, it's not really for us to say how its done.

>6. Ask platform teams to integrate security.

They're not interested, they're interested in copying and pasting code from past applications with the same old/bad practices. They even bring practices into new platforms that have great solutions for managing a risk (such as credential storage) and do it the old way (keep creds in a config file that ships with the artifact).

Cybersecurity isn't special, but its the developers (not all) IME that treat it like it is and not part of their job responsibilities.
I feel this entire blog post very deeply.
I think if it had turned out differently, and it had been possible to make an H-Bomb that produced no fallout, they would have continued to scale up.

There were lots of plans for using nukes for large-scale engineering projects.

- Make a protected harbor from a straight coastline

- Get that mountain that's in the way of your railroad flattened

- Add a freshwater lake to this plain

- Mine an entire vein at once

Reality got in the way and we found out that we don't want to be doing that.

Maybe if we get practical antimatter bombs we'll revisit those plans.
Weird, just tried in my terminal and it works fine. My account definitely has no special permissions, I've never requested any, I've probably spent less than $100 total on it (and that almost entirely on domain names).

Results: https://imgur.com/a/JIiuDt9
Seems like a rage-bait title, but I kind of agree with the general premise that cybersecurity teams shouldn't treat themselves as solving unique problems that other auxiliary teams (like SRE/platform engineering) haven't already come across and/or already solved.

I am of the opinion that this massive push by big organizations (coupled with mandates for C-suite roles like CISO) into building a dedicated army of staffers for "cybersecurity" feels like just another attempt to bloat up the size of an organization and create more 'bullshit' jobs, as David Graeber put it over half a decade ago.
(we changed the URL from http://www.kohala.com/start/troff/cstr114.ps to one that doesn't do a download)
This is very impressive but given its by Google, will some code ever be released?
No, in what way does any of that support the argument that the war was motivated by Putin's personal desire for conquest.

It is in fact not practical reality, it is a fiction created by the Kremlin. Claiming Ukraine isn't a sovereign state is Russian propaganda to obfuscate the obvious breach of international law, it is neither a genuinely held belief nor a reason for the war.
Also a code word for more Black, Hispanic, and female employees? Who are historically and presently underrepresented in IBM's workforce, relative to the population as a whole?
Good question. Good answers. I'll add one :)

If considering not just software, but engineering or systems overall, best of all I seen is Goldratt, Theory of Constraints (usually named TOC).

Resources (mostly books) are many, they even created their own accounting system and simulation software. For intro good books The Goal (1,2,3), they are for different markets and shows look on different aspect of TOC, and easy to read.
Don't feel like you need to share, but why do you have so many Quests? Do you play a lot of games? Are there multiplayers you can do with multiple headsets? Any games you'd especially recommend?
Every big company does this. My company also has a target goal “for blacks”. It’s on PowerPoints. It must be on someone’s KPIs, and thus tied to their bonus payouts.
Absolutely interested in this!
I got intrigued by the "Proof of the Man" book but failed to find an English translation. Anyone knows if it exists?
Sorry, I was talking about the positioning of the buttons, they are similarly “unreachable” like some “Back” buttons are on iOS.
“Done” or “Close” should be reachable with one hand.
I'm currently building Browser Actions for macOS (https://actions.work/browser-actions), because I like Shortcuts a lot for automation, and because I think that it's insane that Chrome/ Chromium/ Brave/ Edge/ Vivaldi have no Shortcuts support, and that Safari's could be much better.

It's an actual itch I'm having. (If anyone's interested, there's a TestFlight going on, see the website.)
We the people recoup the subsidy money in non-monetary rewards.

Culture is becoming so focused on only the money: I guess because capitalism appears to optimise for the single dimension of dollars so that is all we see.

Let's not forget the value of what we are buying: called "consumer surplus" in economics.

So often commenters seem to focus on the dollars or sometimes the negative externalities, but completely forget what we receive that isn't measured in dollars: in this case access to the internet for people in the boondocks ⃰.

Albeit I am not a US tax payer (however the USA charges me in many many other joyful ways).

⃰ 1940s: boondock from Tagalog bundok 'mountain'.
This is really interesting. I always balk against people talking about inequality with this sort of thing in mind: the problem isn't inequality, it's how good the low and average standards of living are, and whether they're improving.

It requires no talent, only power, to take people's stuff and redistribute it.

It requires talent and effort to create new things that raise the bar for everyone, and just as much to maintain the political environment that allows that to happen.

I don't know if that fits your story; if not apologies, as I didn't mean to hijack it!
The referenced source for the name (Polling with batch service)[0] never uses the term "Israeli Queues", although the doi abstract[1] mentions the phrase and it implies it's unsuitable (no fond usage there).

Seems tasteless. Maybe the author doesn't understand, maybe ChatGPT wrote the article & incorrect reference, maybe this is an attempt at SEO.

[0]: https://pure.tue.nl/ws/files/2152975/632939.pdf
[1]: https://doi.org/10.1080/15326340802427497
Well a woman was forced to go to the state Supreme Court this week to get a routine medical procedure, and thanks to evangelicals was denied.
Coframe Coffee: AI-Generated React Components on CMD+S
I think the best part about going to university while young was not yet having to worry about how to support myself (and my family).

I guess the lesser incentives mean it’s easier to ignore anything said as well though.

Though to be fair “graduate in 5 years or you have to pay it all back” (imposed by the government) was a fairly powerful motivator.
Let's not just throw that in the box of "cheap Chinese". Tesla has shipped cars with windshields not attached to the vehicle in any way, has shipped cars with missing brake pads, etc.
I think it has more to do with how close to the brink you are. It takes at least a decade for a technology to mature to the point where there's a polished point and click gui for doing it. It sounds like Borg just hit that inflection point thanks to k8slens which I'm sure is very popular with developers working at enterprises.
“Draw its own conclusions” is a bit of an overstatement right now. IMO the sycophantic, non-opinionated behavior of models is one of their biggest limitations right now.
No, you have it exactly backwards. Claiming Ukraine is run by neo-Nazis and that NATO is an existential threat to Russia is Putin's propaganda to justify his dream of the restoration of the Russian Empire.
...who does that?
We're paid to find risk and reduce risk.

Software developers and project leads are paid to ship product, even if its held together by glue and duct tape.

The problem is they don't have security and risk reduction in their incentives and automation, and they should, call it DevSecOps or whatever. After all, availability is one of the areas of security, but that usually falls on operations.
Youre right, it must be the case. However it’s the official Apple leather one, so they probably should have tested this more?
Not to mention the Atari Lynx, which was wider than the Switch (and about 3x as thick).
If the API is tightly coupled to the data, just use the ORM, Luke. Django, DRF, Django-Filters, DRF-Spectacular. DRF has gotten more things right than wrong.

What DRF and Django get right is that the DB is the utimate schema. Why be afraid of that?
This thread had dropped the AI context up to this point and instead focussed on why CLIs have lost popularity and preference with humans.
Using Functional Dependency Analysis to Improve Join Performance
This bothered me as well and I've opened a PR to fix it: https://github.com/ofek/pyapp/pull/57
I’ve sat through similar meetings not at IBM.

Literally “we can’t hire any more white men.”
I thought about this for a few days. I eat meat, animal products like milk too. I feel some guilt about it, an animal died to get me this chicken sandwich. We'll face decisions about whether to continue ending the consciousness of animals to feed ourselves when we have alternatives. I'm far from the first person to think of this, but when we have some machine consciousness that compares to a chicken (I don't know how to measure consciousness but we'll face that one day), will there be a common understanding of what it means morally to be ending that consciousness?

I think one day we'll probably almost completely stop killing "intelligent" animals (in 100s of years after we develop safe and tasty alternatives). What about a software consciousness? I don't know. What about if we are able to "upload" our consciousness, will it have civil rights? Probably not at first.
Fully agree with the author, the often quoted CIA (Confidentiality Integrity Availability) actually belongs to the SRE platform's concern.

What I often see however, is SRE teams keep extremely understaffed (because "cost center") and often outsourced to offshore contractor in India - this basically means you can only keep the lights on via SRE team and cannot do anything else.

If you have a competent and fully staffed SRE Platform engineering team - you will NOT need a separate cybersecurity team.

But if company decided to cut costs on SRE folks, they then will have to invest heavily in cybersecurity team. At least because of mandated regulation (FedRAMP SOX HIPAA GDPR compliance disclosure etc) - it is easier to justify cyber budget, than the SRE budget

Plus recent laws mandate having CISO as a high level executive (chief incident scapegoat officer) with huge budget and disclosure of recent hacks etc
Do we have to bury it? Why not just put it up on transmission lines?

It seems weird to me that we can run Cable TV to fairly remote locations but not fiber.
Vocals are solved [1] and the workflows are getting better and better [2].

AI influencers and celebs are getting big [3], not to mention VTubers such as CodeMiko [4] and Hololive [5] are huge and increasingly AI-powered.

People are absolutely willing to be addicted to following virtual personalities and artists. Gorillaz predate all of this AI stuff and they're pretty big.

[1] https://www.youtube.com/watch?v=K__IR3J58zU&list=PLRQ_sm_IcX...

[2] https://www.youtube.com/watch?v=Zc3h9iKYKDs (dated by now, but shows the direction)

[3] https://www.thestar.com/business/technology/these-people-do-...

[4] https://www.youtube.com/watch?v=1IV7TBFTNl4

[5] https://en.wikipedia.org/wiki/Hololive_Production
The quest 3 is almost 7 times cheaper than the vision pro (499 vs 3499) and provides incredible value for the price. I doubt very many people are actually going to buy the initial release of the vision pro, who is paying almost 4k after tax for a devkit besides developers and rich enthusiasts?
"Gall’s Law: all complex systems that work evolved from simpler systems that worked."

Do the simplest thing that works, if that is hosting something on a VM with SQLite for persistent storage than that is what you implement.

If what you had in memory was a map or a queue and you don't care about persistence then redis is likely going to serve you well when you need to scale to more than one instance, if you never need more than one instance then keep it in memory as a map or a queue.

Don't add things "because that is what :bigtech: does" :bigtech: is not you and if it was, you would have the team to do it or would be building the team and not the software.
Thanks for your feedback. I copied it into the Arch Linux migration issue in the Open Source Program group https://gitlab.com/gitlab-com/marketing/developer-relations/...
why does that make you angry? if anything it normalizes wearing glasses.
> Why is it ever different between winter and summer? Etc.

It doesn't matter to the discussion. For whatever reason, if that is how the local laws work, it is what it is. If a car company wants to sell a car in that market, they need to comply or get out.
I think there's a lot of value. IMO we should add one of two (or some combo) things:

- Hashcash

- Clients can send an allow list to servers; anything from an address not on the allow list goes to the spam folder

Email is a foundational idea; I think if we give up on it we'll keep reinventing it (we already are: RSS, ActivityPub, etc). We can get it back if we move off of centralized machine learning as our spam solution.

There is something about having to wave goodbye to corporate Internet infra though. I think we gave them a shot and we discovered they're not good stewards (web, email, chat, etc). We need to rebuild it for ourselves, and if that means people using the corporate gateways miss out on things, OK then. That was true if you were using AOL and it's true again; we know how this goes.
How has Android been a dumpster fire? I don't even think it's arguable.
Unfortunately the human brain can't be powered by a 23 W windmill. We have to run an enormous infrastructure project (agriculture and logistics) that most of the world seems to be dedicated to, so people can think about making fart-joke TikToks.
Same here, Atari 400.

I did get to see some 6809 and 68000 assembly around the time of seeing x86 (and before I wrote any) that I accepted it--but still disliked it. Don't know what I disliked more: direction flag, all registers are special, segments.

The weird instruction/register usage is likely one reason why x86 was faster/cheaper than programmer-friendly processors like M68k--which also made the 6502 a success.
I'm always sensitive to this issue, because I've seen it happen too. Starlite (now Litestar) has fairly good escape hatches I think: you can convert a database model to an API model with a method call, but you can also modify and add fields, or create a totally separate representation, or return multiple database models from one API call. So far so good.
If the best coding LLMs end up monopolized as much as most areas of the tech industry it will be very easy to lose access. Take mobile app development for example. If you piss off the wrong person or algorithm at Apple or Google then poof, half the market will evaporate for you.

Corporate LLMs have and will monitor every single prompt entered and if the company doesn't like you for any reason, related or unrelated to your coding they will ban your access with no recourse.

If open source LLMs are able to compete with the state of the art long term then I'm a lot more optimistic, but I'm skeptical they will be able to keep pace given the immense technical, financial, and lobbying resources the big players are certain to invest in the coming years.
My current reference class with AI today is 3D games in the 90s.

Doom has just turned 30; when it was introduced, it blew people's minds with the quality, and fuelled a moral panic about it being a "murder simulator". Every year or so after that, a new game would come out, be hailed by the press as "photorealistic", and then forgotten as the next in the cycle replaced it… but even then, they're called "Doom clones", and the original doesn't disappear.

I even remember one of the magazines bemoaning that Riven was pre-rendered rather than real-time "given Quake proves the PowerPC chip can handle polygon-based gaming" (or something close to that quote).

I think we're in a similar phase with AI: ChatGPT-3.5 blew people's minds with the quality, and fuelled a moral panic about it being a fully automated plagiarism/cheating engine, we keep getting news stories about new models or ways to get much more out of any model, which are then forgotten as the next hot thing repeats the cycle… but even then, they're called "ChatGPT clones", and the original doesn't disappear.

It's only an analogy; I don't know how long we have to wait before AI becomes an almost unnoticeable enhancement of everything in the kind of way CGI did.
https://www.youtube.com/watch?v=gcR2k4Olhms
Aspirin Alert: The Hidden Risks Revealed
Dr Brad Stanfield
x86 has a similar regular instruction pattern except that it's in octal:

https://gist.github.com/seanjensengrey/f971c20d05d4d0efc0781...
Video of the lecture: https://www.youtube.com/watch?v=eRfXcWT_oFs
Self reply since I can't edit the post anymore. Tried this, the api seems to work just fine to me with no extra permissions.

Results (these are the only two images I generated): https://imgur.com/a/JIiuDt9
Gee. When I just go to https://social.lol I see this as the first thing: "These are posts from across the social web that are gaining traction today. Newer posts with more boosts and favorites are ranked higher."
When there is no rational reason to assume that doesn't directly reflect the personal preferences of these "underrepresented" groups?

I don't see anyone clamoring to have 50:50 split of male and female in oil riggers, or brick layers.

We can see right through this self serving bs these days.
So, when a thief knows your passcode they also need TouchID/FaceID to do something like reset your iCloud password.

People don’t even know their boyfriend’s passcode. How often does a thief know your passcode?

I do think it’s weird that you can reset iCloud with the passcode though. When I forget my password I’m pretty sure it sends me a reset link over email.
Paramedic here. We have to restrain all of our psych/behavioral patients, even ones who are calm, cooperative, medicated, and are really just being moved from facility to facility.

Why? Because someone at some point has attempted to exit a vehicle moving at speed.
What's the recording you mention?
> It works like this: receive invoice, wait until due date, write a check dated for the due date, wait a few days, send it through regular mail, and complain about the past due notices because "I've already sent the payment!! Did you lose it or something?" Applying late fees doesn't work either, they'll just send a late payment again without the late fee included.

This certainly seems to be the standard accounting practice at most contractor's I've worked for. Including choice tidbits like "We know the due date was Thursday, but the only person our JV agreement allows to sign checks is out until next Tuesday, so your check will be on that run."
https://www.reddit.com/r/self/comments/2f9wf0/people_at_cafe...

https://www.reddit.com/r/legaladviceofftopic/comments/anbt9d...

https://www.reddit.com/r/NoStupidQuestions/comments/bo7moa/a...

https://www.reddit.com/r/Coffee_Shop/comments/raqqmo/leave_s...

https://www.reddit.com/r/AskReddit/comments/h43xv/do_you_eve...
Weird. No RSS feed though so into the bin it goes.
From what I can gather, it's a special title at the University of Otago. It means he was received the standard title of Distinguished Professor [0] as part of a special group of appointments made to celebrate the university's 150th anniversary in 2019. [1]

0: https://en.wikipedia.org/wiki/Distinguished_professor
1: https://www.otago.ac.nz/otagobulletin/news/poutoko-taiea-dis...