skysight-inc/HackerNews huggingface dataset:
The debate isn't really about whether home or office is better, it's about who should have the power to weigh and make decisions about those tradeoffs: employer vs. employee. I think most of the professional class are loath to think about it that way because it sounds suspiciously like the beginnings of a labor movement.
Having written two scifi novels and with plans for more, indeed while I will assure you many of us are still confused, I also think most have a better than average grasp of this. For my part, the limited FTL in my books is a very deliberate violation of my (poor) understanding of quantum mechanics, and it'll be a plot point to restrict the violation further than apparent by the first couple of books...

It is a really tough topic to get an intuition for, though.
Seeing so many commits that are "skip failing test" is a very strong code smell.
Your link discusses how to install fusefs-exfat, which is a separate package, which is what all Linux distributions did before the 2019 licensing - Android had a separate licensed kernel module, etc. I can’t speak to the current state of BSD but a cursory search yields a lot of discussion.

Regarding the encumbrances in general, https://en.wikipedia.org/wiki/ExFAT covers this, notably:

> Companies can integrate exFAT into a specific group of consumer devices, including cameras, camcorders, and digital photo frames for a flat fee. Mobile phones, PCs, and networks have a different volume pricing model.

> exFAT is the official file system of SDXC cards. Because of this, any device not supporting exFAT, such as the Nintendo 3DS, may not legally advertise itself as SDXC compatible, despite supporting SDXC cards as mass storage devices by formatting the card with FAT32 or a proprietary file system tied to the device in question.

> On 28 August 2019, Microsoft published the exFAT specification and released the patent to the Open Invention Network members. The Linux kernel introduced native exFAT support with the 5.4 release in November 2019.

So yes, this has been annoying for years (2006-2019, at a minimum) and left a very bad taste in my mouth as someone who has a few dozen SD cards that regularly move around various embedded devices that are expensive, rarely receive updates, and work just fine (e.g. 3d printers, digital frames, regular printers, local storage on security cameras, adapters for retro hardware, etc.). The Wikipedia article notes that the Nintendo 3DS - 75.94 million units sold during its 2011-2019 lifespan [1] - lacked exFAT support, so it’s not like this only affected low-end/cheap/uncommon devices from small companies.

Windows “helpfully” disabled all ways to format large SD cards as FAT32 so I end up having to rely on a third party tool.

Of course, whenever possible, I use a sane and journaled filesystem but it’s rare that I have a choice. :)

[1] Numbers sourced from https://en.wikipedia.org/wiki/Nintendo_3DS
The article should be titled "Why Figma HAD TO reinvent the wheel with PostgresSQL".
When you have a legacy system and not enough time, or will to move off of it the only option is to get inventive and build with what you have.

There is always a price. In this case the database team did something quick, cheap and easily. But the Application teams now have to deal with handling all the nuaces of the system. Maybe Figma has more people in these Apps teams with time on their hands to handle it.
Assume that a backdoor was injected and activated, especially if you ever sshd into the machine.

The backdoor is not fully analyzed as of now. As such nothing can be said about the system besides "it is potentially compromised".
He just banned posting the identity of pseudonymous accounts which is definitely not illegal. He also banned posting public information about the movements of his private jet which is also definitely not illegal.

This stuff would easier to take seriously he was consistent about it. At this point it’s kind of insulting
"please trust my security software"

"I won't do work to have a VCS"

Yikes.
Yeah that was great :-) how unexpectly refreshing.
https://archive.is/YRUNj
Hopefully a channel like Asianometry can shed more light on the political nuances that helped them and why such a thing could not happen in other countries. The blank check, fast decision making and having the right limited geography and talent had to be leveraged, and good leadership was the catalyst needed.
Wow, that voice on the page sounds exactly like what I hear on TikTok / Instagram all the time. Definitely evokes the feeling that I'm about to be entertained by something.

Thanks for sharing that, we'll have to think hard about how to measure the quality / realness of content online beyond the simple things like upvotes and subscriber count
I did some something like this a while ago:

https://github.com/ekoontz/psqlog
Honestly it’s been time for a shift ever since they were bought by Microsoft…
The contribution to C++ is just a simple markdown change: https://github.com/MicrosoftDocs/cpp-docs/pull/4716 C++ is fine.
I'm not sure I understand the whole no money down thing. If you put less money down, then that means that the monthly payment is higher? That's really what's making homes unaffordable. If you can't put 10-20% down or whatever is recommended, then maybe the house just isn't affordable.
Work in the options market making space if you really want to experience users who need immense amounts of dense data available across half a dozen 32 inch screens. The amount of effort that goes into saving the tiniest amount of screen real estate is amazing. Also, *everything* must be customizable.
It’s a longer prompt than that but “kind of”. I tell it what I’m trying to do, I identify anchor points that need to be preserved, I specify tone.. I also re-feed larger passages and ask it to critique and review and identify weaknesses, gaps, and redundancy. I’ve also asked it to go through bulleted lists and find references for each. It’s an iterative process but one that yielded improvements.
Teller really did become a nuclear quack after the Manhattan Project. WRT SDI, he went to White House and told Reagan there he had an X-ray laser that could destroy warheads in flight. Reagan, got excited about it and encouraged Project Excalibur.

The laser didn’t exist. Nor did Teller tell Reagan what would power the laser. It’s power source? A nuclear bomb.

That guy really wanted to put nuclear bombs everywhere.

https://en.wikipedia.org/wiki/Project_Excalibur
>But it might just be possible that there's more to life than money.

There is yes, but a house is still paid in money.
Neither is Parallels, and if you are on Mx on Apple, you need to also buy Windows for Arm
WFH for office jobs could’ve been one of the best drivers of climate action and reduction in all sorts of pollutants, while also increasing general happiness in society.

Of course we stopped doing it.
I like the reflection based planning you mentioned, good point.
Jia Tan… Jonathan…

Predicted, or caused? ;)
And it reeeeeeally makes me uneasy that all this OSS is effectively in the hands of Microsoft.
Commit that introduced this:

https://git.tukaani.org/?p=xz.git;a=commit;h=328c52da8a2bbb8...
Spoiler alert! Nearly everyone is monkey-see monkey-do. The number of genuinely original ideas I've encountered during my 25+ year career can probably be counted on at most two hands. In engineering, it's kind of expected: You build off of others' research, implement using safe, known design patterns, stick with what works and is reliable. But in leadership it's poison. Too many companies spend all their time looking at their competitors for ideas of what to do next.
Two-hit wonder? Too bad.

"Days of Open Hand" was a top-shelf album for me — easily several more songs on there that should have been hits for Suzanne Vega.

There's very little that's "fair" in the music business.
This was so mind-boggling even at the time that SourceForge thought it could leverage its market position to force adware and other nonsense upon its users and get away with it, which itself the last straw in a string of other abuses they subjected users to on the website. It is also so arrogant and presumptive to think that the developers, who's projects were hosted here, would put up with their distribution platform bundling junk with their software.

This was a mortal sin for them, and rightfully so, whereby it became impossible to recover the damage to their reputation. Like, what were they thinking? Did they know they were doomed and just wanted one final ad sale? It’s just an egregious abuse of whatever dwindling power they had which permanently destroyed what little trust that the developers had for them - the same group of people that provided the only real value (for free, even) that SourceForge held.
That only affects the controls of the PIP mode, the question was how to completely disable PIP mode. A sibling comment posted a about:config setting to do this.
That makes some sense. A lot of the other technical decisions made in the early days of the company were surprisingly well-considered in retrospect, so at a time when it's either SVN or e.g. BitKeeper, a reasonable person would probably also want to stick with SVN.
I see, so the mix of calendar and todos is more practical than live updates scheduling.
I agree on principle, but sometimes programmatic generating test data is not so easy.

E.g.: I have a specific JPEG committed into a repository because it triggers a specific issue when reading its metadata. It's not just _random_ data, but specific bogus data.

But yeah, if the test blob is purely random, then you can just commit a seed and generate in during tests.
And habitat destruction. Romania _had_ a lot of forests.
by adding NSFW tag doesn't it make the NSFW content official? How does it work on iOS with Apple's restrictions? e.g. Reddit app if i am not mistaken hides all adult content on iOS.
No, because the phisher will get a token that is designated for, say, mircos0ft.com which microsoft.com will not accept. It is signed with the user's private key and the attacker cannot forge a signature without it.
Ask HN: Anybody Using Htmx on the Job?
I just started reading the Hypermedia.systems book and tried it out for some toy project, and I love it.

I am wondering though, if there are any companies using it already, if you think it's going to happen, or if it is only a side-project kind of thing?
There are still significant fees doing transactions over blockchain and those giant hegemonies are what allow things like charge backs and fraud detection while if somone hacks your wallet and steals all your crypto, it’s gone forever. It’s great if you’re trying to launder money or pay for sketchy things but I still don’t get the draw for the average person, just decentralization is not that valuable
Is this really unique to Republicans though? This seems like the kind of sleight of hand that is just the current norm in American public discourse. The equivalent from the Democrats would be basically any article about politicians legislating against something like "healthcare for trans teens" when what they really mean is "puberty blockers for teenagers" or "sex change operations for teenagers". Hiding the controversy to pretend at normalcy is just the present state of dialogue in America.
I kept reading the article waiting for this lede but it never came. That's what ultimately left a sour taste in my mouth back in the SourceForge days.
From the article..

Atlantic annual revenue: $100 Million

For comparison..

NYT & WSJ: ~$2.4 Billion
Indeed, search in thunderbird is ok, but search in gmail is awesome. I started archiving my emails in folders and subfolders again once I stopped using gmail interface.
Brain-cell transplants are the newest experimental epilepsy treatment
For some reason, companies are perfectly fine with losing their "best performers" for any number of reasons, they won't bet an eye. I suppose it's the equivalent of "we don't negotiate with terrorists"
> That said, rolling your own sharding is a MASSIVE undertaking.

It's a large challenge, but it's absolutely doable. A ton of companies did this 10-15 years ago, basically every successful social network, user generated content site, many e-commerce sites, massively multiplayer games, etc. Today's pre-baked solutions didn't exist then, so we all just rolled our own, typically on MySQL back then.

With DIY, the key thing is to sidestep any need for cross-shard joins. This is easier if you only use your relational DB for OLTP, and already have OLAP use-cases elsewhere.

Storing "association" type relation tables on 2 shards helps tremendously too: for example, if user A follows user B, you want to record this on both user A and user B's shards. This way you can do "list all IDs of everyone user A follows" as well as "list all IDs of users following user B" without crossing shard boundaries. Once you have the IDs, you have to do a multi-shard query to get the actual user rows, but that's a simple scatter-gather by ID and easy to parallelize.

Implementing shard splitting is hard, but again definitely doable. Or avoid it entirely by putting many smaller shards on each physical DB server -- then instead of splitting a big server, you can just move an entire shard to another server, which avoids any row-by-row operations.

Many other tricks like this. It's a lot of tribal knowledge scattered across database conference talks from a decade ago :)
I would expect most systems to preserve questions and answers for quality control and testing. Even if a system claims not to keep that record, I don’t trust it not to.
There has been a lot said to not throw shit at Lasse Collin. This post is reassuring.

It was said he is on an internet break at the moment, so I hope this doesn't ruin weeks for him. It's thankless enough to maintain something like xz.
Besides all the points in the article, there is one more point that infuriates me about RTO mandates, and it's the double standards.

Director level and above at my company have much more flexibility to WFH that regular employees. In fact several of them in my org do it.

During an all hands, someone asked one of them about the RTO mandate, since they worked remotely. The director answered with a straight face that although he works remotely, he built the network that got him promoted to Director going to the office, and that's why you should go. If that level of patronizing doesn't make you lose faith in leadership, I don't know what does.
https://archive.ph/N2udz
Most likely management wanted more monetization and didn't listen to anyone who pushed back and said that bundling adware was a bad idea.
Check out "Dumb Site Generator"

https://so.dang.cool/blog/2024-01-22-DSG-Dumb-Site-Generator
I think this is unfortunately very common practice
Meanwhile in non-big tech our company migrated from SVN to git last year...
Why would you want to break SPAs?
Clicked on the first Bell Labs link hoping to read the original and ended up on some VPN service's landing page. Sigh. :(
Yeah? What does math crunching do to your body and mind?

Chess players sit down and think very hard about how moving a rook now could affect the game five-six moves from now. No one actually cares about chess pieces outside of... well, chess players, and there's no real life constraint on moving only diagonally or only one square in any direction. Would you say chess has negative effects on one's life?
The man just died and we're remembering what his art meant to us. Why would you expect a lengthy discussion on a handful of accidents his artworks caused? Read the room please.
No-Show Job
I think this thread is talking at cross-purposes.

1. It should be legal to develop or host pen-testing/cracking/fuzzing/security software that can break other software or break into systems. It should be illegal to _use_ the software to gain _unauthorised_ access to others' systems. (e.g. it's legal to create or own lockpicks and use them on your own locks, or locks you've been given permission to pick. It's not legal to gain unauthorised access _using_ lockpicks)

2. It should be illegal to develop malware that _automatically_ gains unauthorised access to systems (trojans, viruses, etc.). However, it should be legal to maintain an archive of malware, limiting access to vetted researchers, so that it can be studied, reverse-engineered and combatted. (e.g. it's illegal to develop or spread a bioweapon, but it's ok for authorised people to maintain samples of a bioweapon in order to provide antidotes or discover what properties it has)

3. What happened today: It should be illegal to intentionally undermine the security of a project by making bad-faith contributions to it that misrepresent what they do... even if you're a security researcher. It could only possibly be allowed done if an agreement was reached in advance with the project leaders to allow such intentional weakness-probing, with a plan to reveal the deception and treachery.

Remember when university researchers tried to find if LKML submissions could be gamed? They didn't tell the Linux kernel maintainers they were doing that. When the Linux kernel maintainers found out, they banned the entire university from making contributions and removed everything they'd done.

https://lkml.org/lkml/2021/4/21/454

https://arstechnica.com/gadgets/2021/04/linux-kernel-team-re...
For synthetic distributions Mandelbrot's Multifractal is good enough.

You may consider using real historical distributions derived from real data. You can record different distributions from different time periods and different economic conditions.
Some Ford F-150s have them. They can be enabled with a software tool. They are amazing!
Gotcha. With our shard strategy we add more capacity either by scaling up nodes (very easy), or by resharding - adding nodes to the cluster and putting fewer shards on each node.

We recently did a reshard from 32 nodes / 15 shards per node -> 96 nodes / 5 shards per node. That puts us in footing to scale up for a while before we need to reshard again. This is a pretty smooth process, and each time we scale out we get much more scale up capacity.

Our shard logic is very simple static assignment based only on the Workspace ID. If we wanted to add workspace created time routing, we'd need to starting plumbing that information around the system in ways that are slightly annoying. Probably the move would be to re-key the Workspace table to use a date-embedding UUID format.

https://www.notion.so/blog/the-great-re-shard
It is maintained by the w3c, not used extensively by the businesses that will employ the students, it's easy to go from OpenGL to Vulkan. I can reconsider it and happily use it if I have more arguments in favor of it, but from what I see it doesn't seem groundbreaking and adds a layer of complexity in comparison to OpenGL 4.x without really improving the learning curve or the capabilities.
If 10-2:30 jobs were more common, you might find more people agreeing with you. Unfortunately, those are exceedingly rare.
These days I wonder about all the cameras in a modern environment and "keylogging" from another device filming the user typing.
The library is entrenched enough, trusted enough, and its main developer has long internet breaks because of mental health problems.

Plus, you do not backdoor the library itself, but the tools using it. "Reflections on trusting trust" style.

Sounds like a perfect plan, until it isn't.
Also their site was fill with intrusive ads, the repo browser was crap. GitHub was fast, no ads, markdown rendering and a decent repo browser.

Also the main advantage of git was local copies, so the source code was more safe. And speed SVN was slow for large repos. At my first place we had an SVN server in the server room, when it's hard drive crashed no one could work for a day :)

Still people hated git first because it was much more complicated with it's branches, PRs etc
I recall that sourceforge gave you an SVN repo and an issue tracker, so it was kind of a hub for running your project. What made GitHub stand out was easy forking, and the pull request code review UI, and slick source history UI. A lot of this was aided by the technical innovation of using git and making git such a central piece.
Because Elon Musk is the Emmanuel Goldstein du jour, and any time his name or the name of one of his companies comes up it's mandatory to stage a Two Minutes Hate.

In this case, the outrage is about Porn!!!!! on X!!!!!.

If instead they were trying to ban porn outright, the outrage would be about how X!!!!! is Censoring People!!!!!

And yeah, I don't even remember the last time I saw porn on there, myself. I'm sure it's there if you look. But if you're looking for it, why the hell are you complaining about it?
Show HN: Qramaank.com – Rethink, Reuse and Reorganize the Internet
Reorganize the Internet with Qramaank
Qramaank (kra • maa • nk - क्रमांक) is an open collaboration platform driven by community to create and share Qurations.

Quration is an organized collection of REUSED content from various sources on the internet such as YouTube, GitHub, Spotify, and more. Qramaank aims to let people Rethink, Reuse, and Reorganize the internet according to their choice.
Supply-chain backdoors are one thing, but the saving grace about the backdoors injected by trusting-trust attacks like in the OP is that they're quite fragile. If the shape of the expected target program changes sufficiently, then the backdoor will fail to propagate. And propagating the backdoor into programs that have yet to be written requires an effectively omnisicient adversary. As long as you have multiple implementations of a toolchain, you can repeatedly use them to compile each other in every possible configuration (and then use the outputs of those compilation steps as inputs to the same process, repeatedly) and then compare that the outputs are bit-for-bit identical until you reach a point where you're assured that either none of the compilers are backdoored or all of them would have to be.

So yes, they're scary, but there are countermeasures.
When you said "(go something)", you are talking about different thing.
You mean a statement like this https://tukaani.org/xz-backdoor/
There's definitely a lot of cowardice and fear underlying the capital class's current strategy of "remain in limbo until forced to move." Maybe it's fear of losing that crucial employee that keeps the light on, maybe it's fear of employees waking up to what exactly a job is and what's expected of them (compliance for 40-60 hours a week of their lives) and becoming demotivated.

It certainly doesn't seem to be fear that allowing WFH means they will lose their competitive edge in their industry. Agree it's more about the capital/labor relationship potentially fraying.

The labor movement LARPing you see every so often online I think is ridiculously premature. The labor movement at the turn of the century was ridiculously volatile and borne from a ton of unrest. It's a ways away.
It's been a very long while since I played with any of this, and I don't want to rely too much on the widely understood to be lacking documentation, but are Xlib and XCB still not in a very weird situation in which one depends on another for different reasons? In this specific case, at least multiple years ago, glx wouldn't play nice without Xlib, if it would be possible at all without a lot of pain. I don't expect it to have changed for obvious reasons, XCB never being complete and X interest slowly waning.

https://xcb.freedesktop.org/opengl/#index3h1
Or take the Chrome / original Go approach: load that code in a different process, use some kind of RPC. With all the context switch penalty... sigh, I think it is the only way, as the MMU permissions work at a page level.
Thing is, with other providers, all I'm getting is email. With Google, I'm getting a bunch of services, all interconnected, and any of them could potentially get my entire Google account banned. One of the fuck ups I can recall is a bunch of people getting their Google account banned because they typed in chat of a Youtube livestream and some algorithm falsely picked it up, cutting them off from everything.