skysight-inc/HackerNews huggingface dataset:
Upcoming critical Gitlab security issue
I just got the following email. Security vulnerabilities have never been communicated like this before.

GitLab Security is writing to you to provide advanced notice of an upcoming critical security release scheduled for January 11, 2024. We highly recommend your team is prepared to immediately deploy the security upgrade to all affected self-hosted GitLab instances when the security release is available.

Please monitor the GitLab release page for security release details and upgrade instructions.

Affected GitLab versions:

16.1.0 - 16.5.4
16.6.0 - 16.6.2
16.7.0
Thank you,

The GitLab Security team
That's the impression I get from Wirecutter. They're not unethical per se, but these reviewers appear to have picked up a task from their long list of products to reviews and have done the bare minimum at best.
This seems like a very convoluted way to avoid saving a string to a file?
There is a logic to the hyper growth style in software. Software products’ success are driven by network effects: the more users you have, the more features/integrations you support etc.

And if you don’t dominate the market, a more hungry competitor absolutely will. Software products can be developed incredibly quickly.

It is capitalism at its best (or worst, depending on how you see it). While it might be desirable to work in a more stable setting, without some kind of regulatory protection or stickiness this is hard to achieve in practice.
What I think is that solar will become the primary power source, so coal might be good for backup (for the US). GP didn't blamed solar.
In a similar vein, I remember people giving me shit at some point because some fingerprint reader sucked at reading my fingerprint, like it was my fingerprint's fault and not the shitty fingerprint reader's. That's not how it works . . . .
> I also wonder, now that people get scary notices from their ISP whenever they torrent anything, if more people are turning to less-easy-to-track alternatives?

Do people still get these notices? I recall getting one many years ago, but after starting to use a VPN for any torrent traffic, I haven't gotten one.

As an aside, the moment a streaming service removes the ad-free plan, or drastically increases price of ad-free, will be the moment that service is canceled for many people. I've recently canceled Prime and am now downloading the shows I hadn't yet finished or wanted to watch again.

Additionally, I fully understand this is my own entitlement, but if I've paid licensing fees[0] for content for a period of time then I feel zero guilt about downloading that content if the service changes the terms of the deal, such as by removing ad-free viewing.

[0] - A subscription to a streaming service
This seems to have real legs - the materialised view is created first, there are real constraints on how to express an event (ie you have to write the SQL for the event, meaning the event for business must be expressible in terms of RDBMS right there - so 90% of event sourcing problems are faced up to right at the start, and it’s “just” a layer on top of RDBMS

(What I am trying to say is that I have seen things like Event UserAccountRestartedForMarketingSpecial and there is some vague idea that 9 listeners will co-ordinate atomic transactions on 5 MQ channels and …

But this forces people to say this event must be expressed in this SQL against this dbase- if not then there is a mismatch between the SQL model and the business model. You probably need to split things up. I suspect there is some concept like “normalisation boundaries” here - single events cannot transcend normalised boundaries.

Anyway I like this - POV is worth 80 IQ points.

Still needs a cool name
If life was a test, and we are rewarded based on that test. Would it be fair for god to intervene and remove the evil and sick? Wouldn't that be unfair for the good people? What would be the point of virtue in this life without its coexistence with evil. We appreciate our health when we get sick. We appreciate good people when we meet evil ones. We will appreciate heaven with the existence of hell.
eBay. Hamilton.
Show HN: Navigating Data Consolidation Challenges with SyncLite
Lemonsqueezy or paddle are options to the main problem discussed in this article
Riot Games sued Valve in 2010 about trademarking the name DotA but it seems like they settled and Valve got exclusive commercial use of "Dota".
This great, but not supported by all IDEs. JGit for example didn’t support includeIf last time I checked.
Loved that place growing up. I bought some of their famous logo bowls more than 20 years ago and I still use them all the time.
2 week deadlines is way to long for a junior. I would be reading and discussing a juniors code every day.

Even mid level programmers should be reporting progress every day.

10 working days of code is a hell of a lot of code.
Genes play a big role. Some people have a faster (I think the more appropriate word is inefficient) metabolism, and can lose weight or stay thin despite eating more calories compared to someone with a slower/efficient metabolism, controlling for body size, age, and other factors. There was a thread on Reddit a while back where formerly or current obese people shared their old diets, and many people were commenting that it did not seem like much food. Even though people are generally bad at self-reporting calorie intake, that's called having a crap metabolism.

Imagine two individuals who both both need 2,500 calories/day to feel satiated, but the second individual stores anything above 1,500/day as fat, and a second individual stores anything above 3,000 as fat. The first person will constantly be fighting his body to not overeat and will feel hungry constantly. The second individual can eat to fullness and not gain weight.

Some men , particularly the formerly obese, have such slow metabolisms that anything stored above 1,200-1,700/day is stored as fat despite weighing 170 pounds or so, from reading personal accounts here and on Reddit. This is also why bariatric surgery patients regain weight and become obese again despite only eating around 1,200-1,500 calories/day. These people basically got short-changed when it comes to metabolism genes. If there is a famine, they will outlive everyone. But in abundance they become fat very easily. This does not answer why there are more obese people today compared to in the past, but there is still probably a genetic component nonetheless.

And on the other extreme are people who can be very slim despite eating a normal amount of calories or only slightly less than 2,000. These people are much rarer, as it's disadvantageous from an evolutionary perspective to have an inefficient metabolism, but they exist in the same way very tall or short people exist by virtue of phenotypic variance.
I appreciate you going against my wishes :)

This is cool! My app would also help here!
That's called collaborative filtering (https://en.wikipedia.org/wiki/Collaborative_filtering) and is perhaps the most battle-hardened and most effective approaches in recommender systems. Even now, novel deep learning approaches implement the concept, but simple naive approaches are still as/more effective. The first paper published on it specifically in the field was in the 90s but the seeds of it go back to the 70s. It would have made a good thesis in the 80s :)

Part of why it's so effective are for the reasons you outline, in that it can find items that you'll probably like, that aren't similar to items you already like, based on people that have similar tastes to you.
Amusingly, there's part of the commercial AI community that wants to define intelligence as what companies will pay humans sitting at desks to do.
Why not toddle off to a thread about climate change - that should get the juices flowing (grind your gears).

https://news.ycombinator.com/item?id=38941747
> it means that if you forward an email list message to someone else, they can unsubscribe you without your consent as a prank

Surely that is a bug in the email client that forwarded the email. It should have replaced the headers, including List-Unsubscribe, with its own.

That looks to be what's happened in the emails I receive. The one exception would be if someone forwarded an email as an attachment, but in practice almost no one does that.
non-standard take on MIDI / portability / automatically generating post-script like description.

Similar to cnc g-code / post script printing language. Just a more strictly math based view.

Text way of conveying non-linear to linear transform in a portable format without using musical notation. aka raw non-linear piano string vibration to linear 'piano key'.

debatable, but programming language book on sed and how to use regular expressions to manipulate the ascii l-system sounds would seem to be a bit ligher reading/learning than multiple semesters of engineering level calculus to learn mathematical equations for manipulating ocillations.

High school level introduction to l-systems presented as logo programming. [0][1]

----

[0] :Turtle Geometry: The Computer as a Medium for Exploring Mathematics (Artificial Intelligence) by Harold Abelson (Author), Andrea Disessa (Author)

[1] : https://en.wikipedia.org/wiki/Logo_(programming_language)
Google Maps location: https://maps.app.goo.gl/d6AchooL8MFjxmoj6
Man, this is disappointing. It's particularly surprising that Valve has sent a DMCA here, given their history of pretty much all their popular games originating from the modding community or prior art and the history of fan projects like Black Mesa getting somewhat favourable coverage in the Steam store.

I wonder if they took issue with s&box coming from Facepunch, which might be something that is eventually profited from, thereby a TF2 remake in s&box could drive sales for s&box.
I think it depends on the nature of the courtesy that was extended.

"Thanks Alice! That loan of $1,000 you gave me got us over the hump so that the bank didn't foreclose on the orphanage."

Seems more heartfelt and genuine than:

"Thanks Alice! For passing me the menu sitting on the table at lunch today."
As the article says, CADR (Clean Air Delivery Rate) is what matters, not whether the filters are HEPA or not. CADR takes into account both the filter rating and the airflow through the purifier.

The infamous Corsi–Rosenthal Box uses filters which are far below HEPA standards (MERV-13) but since it's moving so much air, it performs better overall with a higher CADR.
Bought it with work money but would be unhappy spending $38 of my own since its pretty short and a lot is common sense. Some good nuggets of info in there though.
AIPAC organizes, effectively, widespread public support. Cross AIPAC and you may lose many voters.

Donations are valuable because politicans need money to get votes. Again, it comes down to votes.
IRL? I'd recommend paper.js, it has out of box support for pen.js for mapping 2D objects on planar surfaces.
Is 'Irregardless' a Real Word?
Seems likely some of the tiny probes will end up in the star so I suppose the name would be appropriate :-)
YC No Longer Backs Innovation
YC used to back companies like Airbnb, DoorDash, Coinbase.

What the fuck happened, is this how YC thinks about the future
“We have direct channels with Israelis who work in the big companies,”

If this is confirmed it's bad news, and not just for the Palestinian cause. 'They all work together as part of a cabal' in one of the big anti-semitic tropes. This will harm the cause of Jews everywhere, not just Israeli Jews.
The operating system of nature is just as complex.
An article on the CIA gift shop: https://www.washingtonpost.com/lifestyle/magazine/meet-the-m...
> Seriously? Have you ever worked where the expectation is you'll be on-call, even on your vacation?

No, because that would be illegal in my country, as it is in many. One call to the relevant government department would launch an investigation and at minimum lead to hefty company fines and the practice stopping.

If that's normal to you, you should fix it or leave whatever country you live in. That would be laughable to most of us if it weren't so sad.
What do you mean? You can open an account with a US brokerage
Did you mean to imply that Blueair filters as a rule don't have HEPA-rated filters?
If nothing else, environmental review is a thing for anything that goes into the water in Hawaii, and that is very expensive.
The article's claim that AI is responsible for a shrinking job market is tenuous at best. Economic factors are much more relevant. Rising interest rates make tech companies less attractive to investors, and this filters through companies as smaller hiring budgets.[0] And we're seeing relatively high interest rates compared to a few years ago. I am far from convinced that efficiency gains from AI correlate with—much less cause—software engineering job cuts.

[0] https://www.nytimes.com/2023/01/23/technology/tech-interest-...
> Does anyone else find this process a little fun? Finding all the opportunities for deductions?

It helps to love financials which I do. I have always done my own taxes just because I want to be knowledgeable about it. Some folks truly hate it.
This argument is somewhat misguided. In my hometown maybe 30% of the population was immigrant, but with a good integration policy there have been no issues. In my experience, neighborhoods in the USA are much more fractured with each keeping to their own. This, in my opinion, is ultimately unhealthy
I have found soft deletes to be really helpful to preserve historical references and as a simple but reversible enable disable switch.

Sometimes a really destructive delete isn't something you want to do by default.

I have seen them abused and a lot of times queries forget to take the flag into account. Every decision is a trade-off.
What is the solution to recycled plastic? There does not seem to be a market for recycled plastic that would support its recycling. Perhaps the costs of using plastics should go up?

I wonder how the beverage and other industries would respond if there was a huge tax on plastic.
For some B2C products that's true, but for most of B2B products it's not, and it's not for a lot of B2C either.
> I knew someone with a one letter first name "J".

I wonder if we know the same guy. There can't be many Js running around.
Not sure why saying artificial intelligence is a type of intelligence is controversial, it's in the name...

It's definitely not human intelligence if that's what you are wondering.
> It seems the author is incapable of distinguishing pro-Palestine from pro-Hamas, and equally incapable of distinguishing anti-Israel from anti-semitism. A pity from someone who is ostensibly advocating from critical thinking.

I think TFA makes is very clear the author believes many at these pro-palestine rallies are actually anti-semitic people.

I'll remember you the Harvard and Penn president resigned. They didn't resign because of a plagiarized Phd thesis (in Harvard's ex- president's case) or because of their condescending attitude in front of congres...

They resigned because they refused to condemn calls for the genocide of jews on campuses, saying it was "contextual" whether this was allowed or not.

And the issue isn't an issue of free speech vs Harvard/Penn/MIT's code of conduct: the issue is that there are anti-semitic people at these rallies chanting anti-semitic slogans.

That was literally the question congress was asking: "Do you condemn the calls for the genocide of jews on campus?".

"from the river to the sea" is at the very least anti-israel (but likely anti-semitic too). "gas the jews", well, leaves no much room for interpretation. There are vids out there with students, throughout the world, chanting that.

How many? Which percentage of the people at these rallies are anti-semitic?

Which percentage of the people at the pro-palestine rallies who didn't lift a finger to condemn the Hamas attack on october 7th are actually anti-semitic?

I can condemn Israel's attack on Gaza because I was, here on HN and elsewhere, condemning the Hamas attack on october 7th.

But those who didn't condemn these horrible attacks have, to me, just the right to shut the fuck up.
Not in itself, it's just the final nail in the coffin. Bitcoin has been on the digital gold path ever since the blocksize war when those who wanted to get rich and not use it for everyday payments won out. The ETF just further cements this, now big name asset managers are getting in. Many don't know VanEck for example has already announced they will "donate" part of the profits from the ETF to Bitcoin developers. When Wall Street starts funding development, don't you think over short or long they will have influence on the direction the development goes? Money rarely comes with no strings attached.
Another personally-painful example is "podcasting", which Spotify appropriated while creating a closed equivalent of our open web medium. Now everyone's forced to say "standards-based podcasting" or "open podcasting" to use its original meaning.
I pay for Coinbase One - more than I've ever paid to any bank for a year. And what's my benefit? Almost none, because I still have to pay the immense fees!

In crypto, the margins are much wider than in any traditional financial services, which rely on volume and wide adoption!
> What platform does a cutting edge fighter even use?

Generally speaking, something older than you might suspect. For instance, while the F-35 officially entered service with various branches of the US armed forces as early as 2015, its first flight was in 2006. The experimental plane first flew in 2000, and the earliest design work began in 1995.

Not that the compute/avionics hardware is ever truly locked into stone considering the successive F-35 production Blocks with both iterative software and hardware upgrades that have already been fielded, Service Life Extension Programs that the plane will receive in coming decades, and so on, but expect at least some of the silicon in there to share more with a Pentium 3 than a Ryzen 7.
how inflammatory. Or flammatory, I guess.
> In other countries you can say untrue and critical things as long as you don't know they are untrue.

In case it's not clear, in democracies a private citizen can knowingly say false things about public figures, especially political figures. A private citizen can sue you if you damage their reputation. Journalists can't usually knowingly publish falsehoods as news, but can as opinion. (Generally speaking; each country has its own implementations, of course.)
> I believe that hybrid work is not going well. Fully remote teams are good, fully onsite teams are good

I don't work here any more but I wrote this a few years ago about how there's a 'tipping point' with remote work:

https://business.dutchie.com/post/dutchies-remote-work-cultu...

tl;dr if you have 1 remote person and 9 people in the office, that remote person is just someone to hand work to but not really "part of the team". If everyone has to use the 'remote tools' rather than go chat over lunch, then remote is going to work pretty well in a lot of situations.
Amen. This place would be unrecognizable.
Marathon runners apparently lose about 1lb, 50% of which is water.

People doing those bike races lose tons of weight, both muscle and fat.

That is the flip side of going balls to the way hard, it is easy to start eating into muscle, which is fine now and then for an event, but as part of a regular training regime it isn't the best idea.

All of these factors are why the advice "you cannot outrun a fork" is true for the general population, but it scientific fact that no amount of exercise leads to weight loss.

A truer statement might be "at the level of efforts an untrained individual is able to maintain, and for the length of training sessions that are available to an average person with a job and a family, exercise does not contribute meaningfully to near term fat loss."

But people who've been lifting weights for 5 or 6 years hard core may very well have increased their BMR by 500 or so calories, at which point they can eat a, reasonably sized, cookie each day.
If you rename a normal PE .exe to .com it will still run. We used to do this all the time in high school to bypass the IT department’s ban on .exe files in student home directories.
I offered the Lightning Network as a single example. I don't agree with you, but it's largely irrelevant at this stage.

The fact is that Bitcoin is very likely to absorb a vast percentage of the worlds value simply as it is. Once this has happened its value will stabilise and it will become useful as a unit of account/day-to-day currency. By this point, there will be far more motivation to focus on developing solutions (such as Lightning) to allow smaller and faster transactions.
I wouldn't want to work in a company with strong "us" and "them" culture. If I don't feel everybody is working towards the same goals and is receiving a fair piece of the pie I would go somewhere else.

Running your own company for a while really helps see both sides of the equation.
There is no such thing as growth. There is only reallocation. The diameter of the Earth is not increasing, and as population increases, friction increases with an exponent larger (even if only very slightly) than 1, so the overall global economy is definitionally negative-sum. Reallocation can look sustainable, until it doesn't.
Why have Danes turned against immigration? (2021)
Gumroad seems to share your email address with the author
I bought e-book off of Gumroad.

Now I'm bombarded by emails from the author (without an opt-out link).

Only a matter of time before these email addresses are sold in the marketplace.

Sigh.
No, but they said people are unable to hold down jobs because they're tripping every day, which is FUD.
We can use the Sun as a focusing lense - need to place the antenna at 500+ AU behind the Sun on the line of the desired communication.

>On the other hand I can't understand the propulsion mechanism.

Yes, i also think the laser propulsion isn't the one to go, at least with the current tech. With current tech my bet would be on ion drive https://news.ycombinator.com/item?id=38445404
A kind of bucket brigade. They aren’t planning to launch a cloud of these things and be done, they’ll be launching a long stream of them for years.

The probes can get power from the launch laser.

At least that’s the idea I got from talking to some of these folks last year.
At last, the future of finance is here! Instead of investing in meaningless, imaginary things like stocks or whatever, now you can invest in something real. Oh wait…
Ask HN: What's Your Favorite GPT?
With the launch of the new GPT store, I'd love to hear about all the interesting GPTs people have built that might not be in the top 12 of each category.

Most useful, most interesting, etc
With the theater you're buying a very different experience than Netflix, though. A more apt comparison would be to movie rentals, which you consume on the same screens and with the same people.

Amazon will rent you most movies for <$4, so 4 movies per month is the number for Netflix to beat, not 1.
Or a tumor :)
They said psychadelics. DXM could definitely mess you up but that's a different conversation.
Haha we bought 4 box fans and buy 4 filters at once at Home Depot, so we get them for half off with a bulk discount. They’ve helped my wife’s asthma substantially.
Proof that propaganda works :) we might as well live in different timelines!
sびゃぶbs
I’ve developed some mobility issues as I’ve gotten older. I’m tall enough/not overly long armed enough that 22” means I can’t pick stuff up off it without having to bend/stoop, which I can do but aren’t ideal. Actually just measures my bedside table and it’s 27” and just about right. 22” would absolutely be too low, putting it about 6 inches below the top of my mattress, which means I can’t see or reach the CPAP machine without basically getting half way out of bed.
Conversely, the idea of not liking a bit of metal and silicon keeping you from dying a terrible death SO MUCH that you'd rather just suffer and die (to the detriment of your loved ones) is an equally wild idea to me. You do you man, but that's a hell of a principle to hold up against existing.