skysight-inc/HackerNews huggingface dataset:
The article links to an application scenario for reviewer comment resolving support with a few gifs, see https://blog.research.google/2023/05/resolving-code-review-c...

There is a recent ICSE-SEIP paper on the topic with even more details at https://research.google/pubs/resolving-code-review-comments-...
Looking for a Mentor
Aye All,

My name is Daniel, I study cybersecurity heading towards digital forensics. I am creating this post in the hope to find a mentor in the field that could help me steer my ideas into a practical direction and perhaps help me recognize the impracticality of them.

Let me know if you know someone.

Thanks.
Let me be the first to point out that the article introduces Contract Programming in its extreme form, without calling it by name.

This is something that Dlang supported as a compiler feature for ages now: the ability to make an assertion about the object's internal state and have the compiler validate it whenever it changes.

Having it supported by the compiler rather than kludging the same out of a type system neatly sidesteps the problems named, like the validity of one field depending on the value of another field: you'll just use an invariant on the level where it can be validated, rather than on the basic types, and you'll also be able to use plain assertions rather than type constraints.
> ‘Women’ and ‘female’ are not interchangeable; one is a gender characteristic, the other is a sex characteristic.

That's not what most dictionaries say. They say a 'woman' is an adult female human.
For the Firefox but they’re probably talking about how desktop Firefox dropped PWA support a while ago, which is indeed odd and confusing.
I’m waiting for two things:

1. Full-circumference world round-trip latency sat to sat (yes it has to go to ground to “count” but I just want to know what the number is)

2. Deployed LEO servers running with laser communication to the Starlink satellites. Preferably gaming or CDN since either is a great way to verifiably test the limits.
That depends on the altitude. GPS satellites at 10000km can be lit up in the middle of the night. Starlink satellites at 500km can’t.
Does that feature actually/still exist?

I remember it being discussed when it was announced but I haven’t heard about it since.
There are certainly use cases for which it's more than is required. Like the most simple would be adding a cron string to a GitHub Action or Vercel function, but in most cases, and certainly Slack's case, you want more reliability, scalability, flexibility, and/or observability. And Temporal has extreme levels of those things, including pausing & editing schedules and seeing the current status of all triggered scripts/functions and all the steps a function has taken so far, and guaranteeing the triggered function completes, including ensuring that if the process or container dies, the function continues running on another one. Even if you don't care about all those things, you might care about some of them in the future, and it doesn't hurt to run a system that has capabilities you don't use.
Show HN: Toolkit for Reverse Engineers (indetectables-net)
Good point, since of course we’re all using the version of glibc written in the late eighties. (???)
or if you take it another way... i currently don't understand any rational that has been presented that allows me that frame of thought, but i'm always wanting to learn more.
I don't think anyone can DM you unless you open up your DMs. Need LinkedIn Premium and I don't have that.
> I'm looking at leaving tech.

I was planning on leaving tech before the layoff. In fact, I was hoping to use my last job to fund my education in something else, and then had to piss away my savings while out of work. I was telling people at the time that that was the last job I ever planned on working in software.

Now I’m very close to just resigning and accepting I’ll never get out.
Safari can absolutely install PWAs on desktop
Maybe it is fair to say, probably 50% people develop for fun outside work, and another 50% don't?
Insects Aren't Attracted to Artificial Lights. They're Tortured by Them
The thing is, some events should be company ending. Something like Okta shouldn't even exist in a halfway competent world in the first place - given how many Fortune 500 companies, even governments use it, it's just a too fucking juicy target for nation states both friendly and hostile.

Instead, even the "self correcting" mechanisms of the "free market" obviously didn't work out, as the free market doesn't value technical merit, it only values financial bullshittery.

And the end result will be that once the war with China or Russia inevitably breaks out, virtually all major Western companies and governments will be out cold for weeks once Okta and Azure's AD go down, because that is where any adversary will hit first to deal immense damage.
That really depends on the style of the artwork
That's exactly right. CI providers are good anonymizers for unsophisticated attackers because they provide an extra layer of obfuscation. But if they were doing something significantly harmful, I'd obviously be talking to those providers and asking for their own logs as part of the investigation, and then it would clearly link back to the actual culprits. So that was one popular technique to use to circumvent IP bans after abusing our service.

The whole hosting provider thing was another type of problems. I would always look at who owned the IPs that malicious sign-ups were coming from, and found a lot of ASNs owned by companies like "hosturwebsite4u.or.uk" and things like that. Those I assumed were just forgotten-about Linux boxes that the attackers used to anonymize through.

Ultimately, this was all to get a "free trial" of our cloud service, which did let you run arbitrary code. We eventually had a fairly large number of ASNs that would get a message like "contact sales for a free trial" instead of just auto-approving. That was the end of this particular brand of scammers. (They did contact sales, though! Sales was not convinced they were a legitimate customer, so didn't give them a free trial. Very fun times ;)

I should really write up the whole experience. I learned so much about crypto mining and 2020-era script-kiddie-ing in a very short period of time. My two favorite tangents were 1) I eventually wrote some automation to kill free trials that were using 100% CPU for more than 12 hours or something like that, and so they just made their miner run at 87% CPU. 2) They tried to LD_PRELOAD some code that prevented their process from showing up in the process table, but didn't realize that our tools were statically linked and that they were running in an unprivileged container, so the technique doubly didn't work. But, good old `ps` and `top` are linked against glibc, so they probably fooled a lot of people this way. They also left their code for the libc stub around, and I enjoyed reading it.
The title should be "in Europe", not "in EU". Though it's peculiar that Israel is included if the data is supposed to be about the European continent.
The problem I have with card games like this, which is minor, is that people who play often are no fun to play casually with. In other words, I think this advancement will wipe any attempts for me to play with others.

I almost feel there should be Dominion expansions that are purposely never released to digital, to prevent people from rapid, isolated training, and to promote the in-person physical interaction of board game play.
There are ways to make sure that doesn’t happen, like making sure only the origin the file was written from can open and see the files.

They should have put out a counter proposal. They certainly didn’t show it’s technically infeasible
Bit flip injection in processor-based architectures: A case study [pdf]
There are an estimated 28 million software developers in the world. How many millions do you know personally?

Your circle is incredibly small.
Uh, any entity who operates a service and is responsible for managing its database can read your data. Slack's database engineers can read your chats too.
Insulin Prices Are Sharply Higher in the United States Than in Other Countries
Ask HN: How do you like the modern voice regonizing IVRs over good old DTMF?
I prefer the old number pad based menu system. Why are more and more switching to semi-dumb vocal systems? I can't think accessibility or cost reduction. What is the main driver?
I agree - YouTube has been an incredible driver of bottom-up content, mostly unrestrained by the traditional gatekeepers. The article doesn't seem to be much of anything. A simplistic view of the past compared to a simplistic view of the present.
Zuckerberg to Get $700M a Year from Meta's New Dividend
I think they were just saying that it seemed to do a worse job in general for that image
Private equity itself is really not a problem - there are plenty of private equity transactions that more or less function like they are supposed to: buy up a struggling company and turn them around. (It should also not be a surprise that struggling companies are also more likely to go bankrupt or layoff employees).

Most of the problems that come from private equity come specifically from leveraged buyouts - aka when private equity... provides no equity!

These deals are unbelievably slimy by nature - in almost no other sector of the economy would we tolerate them. The last thing a struggling company needs is to take on a massive load of debt, just to change to owners who have no skin in the game!
You could get a dev board and a breakout board on aliexpress for less than $6 - this way you can get away without any soldering for most use cases. And if you use esphome and homeassistant, pretty much all code is just configuration and setup in homeassistant.
Location: San Francisco, CA

Remote: Sure

Willing to relocate: No

Technologies: BGP, Global Internetworking, Wireless, Security, Firewalls, VPN, GPU, AI/ML, IaC, Juniper, Cisco, FreeBSD, Linux

Resume: http://www.minions.com/resume/

Email: bifrost@minions.com

My TLDR; 20+ years of experience in operations and scalability. I'm great with managing large scale buildouts either on-prem or in the cloud. On the management side I'm best when managing 1-15 people, as an IC I am self directing and am fine with any size team. I've been doing consulting for a while but I'm looking to join up with a team that has 1-5 engineers ideally but I'd be fine with a larger org if I think the product is cool. I tinker with embedded stuff, HAM radio and cooking unusual foods from around the world.
I can make wild hypotheses about hidden dimensions all day long too ...

It appears obvious that if you add a 1D dimension that is perpendicular to all three observable dimensions and is a vector of the universe's expansion where most energy resides, then the universe expands at a constant rate in that 1D dimension and our observable 3D dimensions stretch by this vector in all directions simultaneously. However, we observe that the universe's expansion rate is accelerating, which suggests two things about our observations:

1. What we observe is under the time dilation effect, and each part of the universe we observe can have different rates of the time dilation effect due to the gravitational gradient of mass and the speed of matter (not the expansion speed). Thus, the universe is really expanding at a constant rate, and we are progressively slowpokes (our local time dilation effect is increasing... What could be the reason for this?).

2. There is no hidden dimension...

Adding an additional dimension of micron size transforms it into a 3D dimension. This is too far-stretched, even for a wild guesser like me...
Location: San Diego, CA

Remote: Preferred but flexible for the right offer

Willing to Relocate: For the right offer

Technologies: Robotics, Tensorflow, Pytorch, Python, Golang, GCP, AWS, Kubernetes, Kafka

Resume/CV: https://github.com/hlfshell https://github.com/hlfshell/resume

Site/Portfolio: https://hlfshell.ai

Email: kchester@gmail.com

12 years of experience doing backend systems, including five at various robotics startups doing data pipelines and deep learning training pipelines. Completing my Masters of Science in Robotics Engineering in two months; actively looking for a new role in robotics, AI, or other interesting spaces.
Another Google ML thing that no one can use, but is really great trust us. If this was so great then they would turn it into a product and make money on it.

What's the point of posting all of these announcements? They're just ads for a product that they don't sell.

As far as I can tell there's no paper either. No metrics. No technical details. Nothing of value at all.
I can guarantee you you have.

You probably just thought it was a star or a plane. They move but relatively slowly (even a fast LEO sat will cover the sky in about 5 minutes). They look just like a star apart from moving slowly. Depending on angles they can look pretty dim, especially the latest SpaceX sats. But the ISS is usually really bright because it's so huge and technically it's also a satellite.

You can tell them apart from a plane because they don't flash.

Edit: But yes there are several conditions that need to be met to see them like the other posters have mentioned. But every clear night near dusk or dawn you will see sats for sure. There are just so damn many in LEO now.
Wow, had the same result. It kept saying it was for a person's safety...????
That's a good point. We shouldn't have to generate all these icons.

I also wish we could style <select> lists. Like adding flags to <option> elements.

No mention of CSS page transitions or scroll-driven animations which can also remove some boilerplate JS.
As a manger myself, I don't think OP is proud of underpaying his team.

We fight management for more salary for sure. At the end we are employee ourselves as well. But even at a medium size company, there are multiple layers even at an executive level you won't be able to talk to, for example, the board or VC.

What I believe OP trying to say here is that, despite all these, he did the best he can to maintain his relationship with his team, and motivate the best he can, and succeeded.
Epigenetics is just Lysenkoism dressed up for modern sensibilities.
Will adopting the new cables everywhere mean nearly halving latency all across the board? Sans routing latencies.

This would be huge for realtime gaming across continents.
> Cloudflare doesnt explain why they ignored/failed to identify the elevated accounts or how those accounts became compromised to begin with. They just explain remediation without accountability.

They did, and they admitted that it was their fault. I have to give them credit for that much.

> They did this by using one access token and three service account credentials that had been taken, and that we failed to rotate, after the Okta compromise of October 2023...The one service token and three accounts were not rotated because mistakenly it was believed they were unused. This was incorrect and was how the threat actor first got into our systems and gained persistence to our Atlassian products. Note that this was in no way an error on the part of AWS, Moveworks or Smartsheet. These were merely credentials which we failed to rotate.
How could you tell? Don't they usually act as if they're starving?
Can a thumb-sized nuclear battery last 50 years?
My dad has Parkinson's and has very poor-quality sleep. He also has had anti-snoring surgery in the past, and chronic post-nasal drip (which I also seem to have). This article raises questions in my mind as to whether any of these are related.

Also interesting is this: "researchers were able to successfully modulate cervical lymphatics using phenylephrine (which activates α1-adrenergic receptors, causing smooth-muscle contraction)"

Phenylephrine is the so-called decongestant that has finally been called out for being a fraud in oral medications (and I can tell you from painful, painful experience that it is indeed a fraud). I was surprised to see that it allegedly accomplishes something in this particular application.

https://www.cnbc.com/2023/09/12/decongestant-phenylephrine-i...
> I feel like phones and even watches are pretty "solved" at this point […]

I'm curious to know about folding devices (as a category?) and if they're going to go anywhere. Would probably depend on the developments in flexible screens.
FWIW there is a comparison ... https://github.com/ciphey/ciphey?tab=readme-ov-file#-ciphey-...
It's just a book review for an (imo extremely overrated) memoir about some rich Karen who likes swinging.

Feels a bit like a submarine piece cuz I've seen 5 other reviews with similar content and flow.

Welcome to publishing I guess
Omnea | Founding Head of Engineering | ONSITE (London) | Engineering | £120k-£160k + equity | https://careers.omnea.co/engineering-leader

We’re a London-based startup and raised an initial $5m from two tier 1 VCs and 30+ renowned founders & angel investors. We’re building an orchestration layer to fix B2B purchasing, enabling finance & procurement teams at Tractable, Onfido, Lookout, McAfee etc. one place to manage all purchasing, whether it’s SaaS, hardware, or services.
The Founding Head of Engineering takes our engineering org to the next level as we’re going from ‘start-up’ to ‘scale-up’. Ideally, this person has built, managed and scaled an engineering team in B2B SaaS before, and wants to build something they care about and treat Omnea as their own business! Here’s the job spec for more details: https://careers.omnea.co/engineering-leader
Or if you know someone who could be interested, please share them too - we pay £10k for any successful referral!
> A wild guess, based on memory, is one might take 5 or 10 minutes to cross between my horizons (usually I'm not on a plain - trees, hills, mountains may elevate my 'horizons' and reduce the distance).

Yup 5-10 minutes is right. It depends on the orbit altitude and the height of the pass.

You can use sat tracker apps to identify which one you're seeing. I do this sometimes because I'm a ham radio operator and I track the one I want to use sometimes with a directional antenna.

> No way a star is moving that fast relative to other stars

No star moves relative to other stars when viewed from earth. They are all so far away they appear static. The starscape rotates as a whole (well it doesn't, the earth does, but to the observer it seems that way), but relative to each other they absolutely don't move.

If they do move, it is definitely a sign to stop drinking :) :)

> Asteroid? That seems hard to believe, due to size and illumination.

Also asteroids move way faster across the sky than a satellite. And they're rare except during that time of the year when they're really common.

> Comet? Are there lots of tiny ones? I never see tails.

Comets are incredibly rare in this galactic neighbourhood.

> and Earth's horizons. Asteroid? That seems hard to believe, due to size and illumination. Comet? Are there lots of tiny ones? I never see tails.
Agreed, but Okta's still a $14B company.
Exactly, requiring installation for long term persistence mitigates usage of the API for tracking and prevents storage usage from slowly snowballing over time as sites store random things the user probably doesn’t even care about.

Should PWA installation be more obvious/straightforward than it is currently? Sure, but that’s a separate issue.
If you're sitting in the office waiting for something to build, and you get out your phone to go on HN I'm sorry to say that is probably not the sort of professionalism that's going to afford you much protection from layoffs.
I was working on a high pressure/tight timeline pressure with the CTO and a handful of engineers. The CTO was working a minimum of 16 hour days because he absolutely loved to code and was having the time of his life cranking out enormous volumes of (untested) code.

The rest of us were dragged along with the expectations the CTO had set with his working hours, and I was gunning for a staff level position and thought that we'd only be working these hard hours for a few weeks (which dragged into months). I genuinely trusted the people involved and my mistake was made clear when the only person on my team that wasn't cut was the only other person that regularly worked as many hours as the CTO.

In an environment like this it's very difficult to say "Nope, I'm doing my eight and then I'm clocking out." When you have the CTO and a chunk of the most senior engineers working non-stop trying to enforce reasonable working hours carries a healthy chunk of risk.

Ultimately I got cut because I'm on US/Pacific and most people were in Europe/Central. Was it foolish to work those hours? Sure was. Is there a strong unspoken expectation within startup culture that sometimes you'll be working long, painful hours in the pursuit of a promotion? Talk to anyone that has worked for Stripe and you'll find plenty of other people that have either landed a promotion or got equally burned out.

This kind of thing is also why I'm interested in leaving tech - actual overtime pay, and having the possibility of union representation.
Double quotes can be unambiguously autodetected by checking word boundaries, but separate single quotes are needed since apostrophe is the same character as a close quote, but can appear at the start of a word. Note that most smart-quote-generating software does fail badly at this.

Some common ambiguous pairs:

’bout - abbreviation for "about"

‘bout - starting a quote about a round of a fight

’cause - abbreviation for "because"

‘cause - starting a quote about a reason or ideal

’em - abbreviation for "them"

‘em - starting a quote about typographical units

’n’ - abbreviation for "and"

‘n’ - speaking of the letter itself
Until the penalty for swatting isn't the same as blindly firing a gun in the direction of peoples homes it's not going to stop.

Until US police are required to think of the safety of others before themselves, swatting will continue to kill people unnecessarily.
Because from the CPU perspective, «+» is ambiguous as there is not one «addition» but many:

- signed add

- unsigned add

- add and carry

There are a few others in other ISA', then there are the operand sizes (byte, half-word, word, long word etc) and the «+» operator does not capture the operand size nor the specifics whereas

- rd = rs1 addu8 rs2

makes the intention clear: «add the lower 8 bits from rs2 to rs1, don't set the sign bit when overflown and store the product in rd».

Moreover, the «+» operation is commutative and the CPU instructions are not, e.g.

- rd = rs + #10

and

- rd = #10 + rs

mean two completely different things for the CPU and the latter does not even have an encoding for it. The assembly processor is not the right place to place the smarts in to figure out the programmer's intention, either, as it is a very straightforward 1:1 assembly syntax to the ISA encoding translator.
I’m thinking about it similar to how American law enforcement is required to store digital evidence, in particular the requirement that it’s “unmodified”. Per my understanding, that would disqualify, e.g., a .jpg that was converted to a .png from being submitted as evidence.

Obviously a journalist isn’t law enforcement but a good one will still gather and retain evidence. They also don’t necessarily need to be as strict as prosecutors but it’s a good standard to try to emulate. To that end, a PDF wouldn’t do.

I wouldn’t doubt that these assumptions are overly generous to the reality of their evidence-gathering; it’s a bit idealistic and the implementation is lacking, at best. But if that’s their point behind the screenshot instead of inline text, I still think they’re coming from the right place. They mostly just have a bad implementation.

But at the same time, I get where you’re coming from, even assuming more responsible intentions. A bit more applied critical thinking in such a context likely results in a better implementation. That is largely why the above assumptions seem so generous.