skysight-inc/HackerNews huggingface dataset:
from what I can gather from the post, the specific attack vector using "retry unauthorized requests until they are" is very easy to spot in logs. so even the most basic log policy that logs the path, ip, and status code is enough (i.e. default in most web servers and frameworks)
> 3. Keeping your savings when the currency of your nation is going through hyperinflation

What crypto has shown long term stability and isn’t subject to the same forces that cause volatility in any currency?
Natural gas is a carbon source. It's a fake solution.
In Portugal, classic media frequently screams that our national excess mortality "is the absolute highest" in Europe - but omit that was only for a single week in the year, while this link shows that it's actually lower globally in time, and globally lower when compared to the majority of other countries.

- What's your experience in your own country about this?

We have a state National Health Service good enough to give us those nice real statistics, and, whose tasty business volume (if it were a private enterprise), is yearned by economic groups that have the financial muscle to buy constant Fox-like spin on how state health is "supposedly" so superlative bad, and therefore should be privatized.

This paper clearly disproves their narrative - I guess this media narrative is driven 80% by economic interest / ideology - "get rid of the state"; and would even risk 20% by Putin's destabilization efforts.
I can't imagine an office full of people driving their gas vehicles 50+ miles per day creates less pollution than those people being at home. Lighting costs are extremely marginal these days, so really heating/AC would be the big driver.

I know prices may not be a perfect corollary to pollution but people driving that much to work are pretty likely to spend more money fueling their vehicles than they are on electric + gas for their homes.
Filtering datasets is not the flashiest and shiniest part of the AI ecosystem, so I'm not surprised it doesn't evoke strong emotions or lots of comments.
Langfuse (YC W23) is hiring a product engineer in Berlin (open source)
Delivering WordPress in 6KB (2018)
Sounds like straight out of a John le Carré book. I am sure this happens (number of countries in the world) squared, all the time.
Employers already have the legal right to do this

You know the thing about medical headlines where it turns out you can broadly tack “in mice” on the end to get a truer version? For statements like this you can usually add “in the US” and come away a little wiser. This is absolutely not the case everywhere else.
How do you know that the junior position has more than 700 candidates?
I'd buy it, but it seems you can only get a volume license or so? How tricky is that to get?
Embeddings are generated by neural networks, so yes, I would consider them as AI
No, these engineers at FAANG companies could not solve those problems cold without having been taught how. I have worked at two, which is how I know. I have never seen a question in an interview I haven’t seen before. Many of these questions went unsolved for decades in the industry, so no, these engineers, who mostly aren’t DSA experts but distributed computing experts, could not solve them cold. I also saw how interviewers used questions to re-enforce their own biases on university, gender, or home country in these interviews.
it is nice that you posted datasets
Amen. I've been living abroad in the US for 7 years, so have had to use it for a number of things (including setting up proxy voting), and it's always been clear, easy, direct, and reliable.

My sister and I are currently handling my mother's recent death, and with the exception of one slightly-out-of-date piece of information (you no longer need to pick up the Cause Of Death form to exchange it for Death Certificates - the CoD form is forwarded to the registry office), it's been extremely helpful.
I just told my ISP, either I use my own router, or I switch to a different ISP.
The former seems much riskier to transact in crypto vs. buying locally in cash from a known entity
But the older you are, the more likely it is that you have built a family and have children and responsibilities outside of work. You cannot necessarily afford to spend time studying (problems untied to the real world) as much as someone younger I guess.
With respect to your second point, it is grouping a lot of different disabilities together instead of looking at the addition of one affordance for a particular disability.
I can bike to the office faster than I can drive. Car infrastructure is slow because cars are big and heavy and dangerous.

Door to door, my car trip takes about 20-30 minutes, my bike trip takes 15-20. Not having to deal with parking, stop signs, traffic, etc genuinely does speed things up.
For those with constraints on framework choice, there is https://htpy.dev . IIRC the creator introduced it in HN.
The problem isn't the combined limit, it's the hard limit on Vendor IDs at 65,535.

Since very few companies have 65,535 products, almost all Product IDs in any given Vendor ID namespace are unused.

That is the maximum number of organizations on Earth that can be issued a USB Vendor ID until the spec is modified. They'll likely introduce a special Vendor ID that indicates to clients they should look elsewhere for the real (and longer) one.

While the rules were more lax many years ago, and some vendors are grandfathered in and can therefore share their Product ID allocation, these behaviors are explicitly prohibited by the USB-IF for newly issued Vendor IDs.
Yes walking and bicycles is what's going to make your commute shorter. If you've ever seen a well used bicycle lane you can run a small experiment. You stand on it, and you count the people going through. Then you go on a well used car lane, and you do the same

The throughput of a single cycle lane is insane

You'll quickly figure out that if they just took one lane away from cars to give it to the bikes, and did so all over your city, that'd equate in throughput 3+ car lanes magically getting added to every road in your city (by removing cars that you wouldn't get stuck behind, and wouldn't occupy your parking spaces)

And you don't even need to add lanes, you just build concrete separators and take lanes from cars

The best thing you can do if you want to drive is to enable others to not drive

And that includes sharing the road and not being a NIMBY about the damn bike lanes.
I work on a remote-first organisation and have previously done so (in pre-COVID times) and there are wins and loses. You lose the serendipitous meetings in the office, and have to deliberately schedule what could have been done by dropping by someone's desk. You also lose the fancier coffee machine.
Regular, Recursive, Restricted
The US will be slower than most places due to the federation and ideological individualism.
Show HN: Sonarless – Ditch the Setup, Scan Code Instantly with CLI and GH Action
I've created a simple automation tool called Sonarless that allows developers to scan their code using SonarQube through an easy-to-use CLI interface.

Key Features:

- Easy Installation: Just run `curl -s "https://raw.githubusercontent.com/gitricko/sonarless/main/in..." | bash`

- Simple Scanning: Run `sonarless scan` from your git root to start scanning and improving your code quality. No need to wait for your admin to set up SonarQube for you.

- GitHub Actions Integration: Sonarless GitHub Actions enable you to incorporate code scanning into your CI pipeline without needing a hosted server. Unlike most SonarQube GitHub Actions that require a hosted service, Sonarless eliminates this hassle, allowing you to track your code quality through a metrics JSON file.

- Monitor Code Quality: Use `sonarless results` and simple jq commands to monitor your code quality metrics effortlessly. You can also log in to your local SonarQube instance via http://localhost:9000 (admin/sonarless). The SonarQube web UI provides suggestions to ensure your code is clean and secure, helping you improve your code as part of your workflow.

Check out my GitHub repository for usage examples and more details. It's designed to be very straightforward and easy to integrate into your workflow.

I'd love to hear your feedback and thoughts!

https://github.com/gitricko/sonarless
This seems like awful law. Is there any movement to rectify the situation?
It's at this point that you're going to have to explain what you mean by "infinite".
> I know plenty of unknown companies taking C-/B+ candidates because they aren't paying top dollar.

in my experience: not these days. And I work in games, so "top dollar" was never in question.

>My 0.02$

That's a fair take. Tech in some ways was indeed a necessity with a huge reach, so I don't think the overhype was the difference between being a trillion dollar industry and a million dollar one. But tech would probably still be a billion dollar industry without all the factors you mentioned.

Games... well, stability was never a factor, and I knew that going in. It's a shame they are doing the exact same pump and dump schemes tech has fallen into. And it's not like layoffs were uncommon after a project finished; it's just that they are doing it purely for better looking earnings call instead of "we cannot keep funding studios anymore".
I've read it in several places over the years, and just had a search now to find a reference to cite. Here's a PubMed paper on the subject:

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3010799/

(And note how points 1 through 4 all quite conflict with each other!)
Not as fast as the reverse. It's surprising how much Japanese is just borrowed English written in katakana.
I guess the output would be an llvm intermediate representation that you can compile down and run, right? I'm stretching pretty far past my knowledge here.
That may be true of people just out of school but my experience over a fairly large number of years was that relatively few people lived in the city and commuted out to a suburban office park. For one thing, even reverse commutes can be pretty slow in a city with a lot of traffic. I rarely drive into the city for evening events partly for that reason.
> Guys, this product has not yet been released. The level of panic for this product is at a level I haven't seen in years.

It's not panic, it's feedback and pushback. If we didn't have people doing this research, and trying out the not-released software to find these issues, we'd very likely be panicking when it was released and being forced on us.
Subjoin has 5% fee, with no subscription cost (https://ghost.org/pricing/). And you have to upgrade with X amount of members.

It does look nice, though! It seems Ghost is an all-in-one paid community platform. Something that has all kinds of bells and whistles you pay for.

It's in a similar niche, but Subjoin has a slightly different direction.

I will be having my next set of updates in coming weeks :)
Sure. But just consider a politician that just straight up buys votes:

I'm gonna blame that politician first and the voters that are on the take second, same in this situation.
Assuming we're talking about low-cost chains that can actually be used for high-speed payment (which basically rules out L1 ETH/BTC)

* Sending money without paying an obscene amount of settlement fees and having to wait in some cases half a week. International transfers are an absolute UX nightmare for many banking providers.

* Being able to secure your account with proper OpsSec, i.e. identity/account management with proper hardware-based 2FA without any SMS loopholes. To date, I haven't found a bank that actually completely disables SMS 2FA as an option.

* Being able to pay without giving away your credentials. The credit card system is completely backwards. If you're online shopping regularly, your financial info and home address probably get leaked once a year.

I feel 10x more safe with self-custody than any banking solution I've used in the last decade. Traditional finance imo has been an absolute nightmare compared to crypto. Trad finance services bleed you out left and right, not to mention the hidden CC transaction fees people conveniently leave out of these discussions.
June 4th Incident
Interesting! This isn't even our code! It's the code that itch.io adds to serve the game on their site.
> They used stolen identity information to make false unemployment insurance claims in other people’s names.

I don't think "they," meaning Epoch Times, did the actual identity theft / unemployment insurance fraud. The indictment says they "purchased" the debit cards, and there are no charges related to those crimes.

It sounds like Epoch Times found a platform where such fraudsters were offloading their phony unemployment debit cards at a discount (this started in 2020, when I presume there was a huge boom in unemployment fraud) and tried to flip them around as legitimate donations and subscription revenue for an easy profit.
It is funny to see how person who clearly takes all their knowledge from books tells other person their actual experience couldn't happen, because that is what some book says. I'm not person who you replied to, but just from reading their comment I immediately knew they are talking from experience, because i partly saw, partly know from stories of my parents and grandparents, exactly the same kind of lifestyle. Should i now say that your source is "entirely false"?
So New York, Boston, Washington, Baltimore, Philadelphia, Washington DC, Maryland, Virginia, Delaware, New Jersey, Main, Connecticut, Rhode Island, etc?

Or by "cheating" are you specifically referring to the lying cheating treasonous fraud from New York who was just found guilty of 34 felonies to cover up cheating on his wife with a porn star to inflence the election?
Recoding America, a book about improving the quality of software used by the US federal government, had good things to say about how the UK did things and what we could learn from them.
Why do people still believe the Russia narrative? I mean, virtually every single major Russian narrative of influence over US or EU politics, media sphere, or whatever is proven by western investigative journalist wrong (of cause with convenient delay). Eg, the Biden laptop, the hacking of nuclear facilities, and list goes on and on.

We like to over-estimate the capability of Rus in this sphere. After all, the unparalleled, fine-tuned and omni present propaganda machine is in the US, self-declared, psy-ops through gaming industry, music, and movies, etc.

In summary, are there state actors influencing each other's population: Yes. Does Russia somehow hold the super-powers in this domain: No, not by any stretch of imagination. Do they spent more money on foreign interference than US +EU, not by orders of magnitude.

But the function of a boogeyman is just as important, if not more, than an accurate model of the world (I concur).
Although I find it disappointing, this is the truth. It is a function of supply and demand. There is always a gating function when you have an abundance of supply; sometimes it is leetcode, sometimes it is school, take home work, resume formatting, a mixture, all of the above, etc.

Everything is a proxy because, in most scenarios, there is no way to understand effectiveness of an employee until they have worked for you for a while.

Of course there are other ways, but they all carry their own risks.

That’s why referrals, imperfect as they are, carry so much sway. In theory they reduce uncertainty and require some expenditure of political capital.
ARM64 on GitHub Actions
> You can run macOS without this crap so why can’t you run windows without it?

MacOS is a service tied to selling an expensive piece of hardware. They don't need to make money by selling MacOS, they make money selling the Mac.

Microsoft makes money selling Enterprise Windows licenses, Office subscriptions, OneDrive subscriptions, AppStore cuts etc. But they let Acer put an OEM copy of Win11 Home edition with very little markup because it's likely that these customers will a) ensure thir employers keep running windows because everyone knows it and b) they are likely to buy a OneDrive/Office365/whatever subscription.

> Even devdiv is a mess.

How so?
> The US needs to get off it's ass and finally make cities bikeable, walkable and add local trains.

Sorry they’re too busy freaking out and conspiracy-posting over 15mn cities.
That's not the biggest cost.

> Seven of the 10 largest drugmakers by revenue in 2020 spent more money on selling and marketing existing drugs than on research and development for new drugs, according to an analysis published Oct. 27 by America's Health Insurance Plans.

> GlaxoSmithKline spent $15 billion on sales and marketing in 2020 compared with $7 billion on research and development. Bayer spent $18 billion on sales and marketing compared with $8 billion for research and development. Johnson & Johnson spent $22 billion on sales and marketing, compared with $12 billion on research and development.

https://www.beckershospitalreview.com/pharmacy/top-10-pharma...
What these companies are doing is the very definition of the second stage of enshittification.
quoting a few comments from https://old.reddit.com/r/Superstonk/comments/1d77ds5/mods_do...

> "So I guess Berkshire Hathaway has no fucking value then? Just there to prop up felons. It's almost as if we're in a completely fraudulent system"

> "CNBC says that the errors came from Consolidated Tape Association. Recognize anybody from their advisory committee? https://ctaplan.com/advisory-committee"

> "this is insane. on ibkr it shows also a low by 185$. but when GME was also affected, I wonder how many millions of shares could disappear. or did they buy them to cover during the glitch? that's just a new level of crime"

> "imagine berkshire for 185 dollars and getting it back up to it's pre market price"

> "Thanks for posting. Now [market maker] is sure to reverse those trades"

> "Markets are rigged. There is a zero percent chance that BRK.A would fall 99% and buy orders would be allowed at $185 per share. Someone likely got margin called and needed to post collateral immediately. No other stock (*yet) is valued like BRK.A. NYSE has been part of the Ponzi Scheme since day 1"

> "And then it spiked to $700k lol. Friends helping friends, except their all scumbags"
So much for "overhauling its security processes" like Nadella sent out in a memo just a month ago.

> If you’re faced with the tradeoff between security and another priority, your answer is clear: Do security. In some cases, this will mean prioritizing security above other things we do, such as releasing new features or providing ongoing support for legacy systems. This is key to advancing both our platform quality and capability such that we can protect the digital estates of our customers and build a safer world for all.

https://www.theverge.com/24148033/satya-nadella-microsoft-se...
I am more interested in whether the Roman Empire could have had an industrial revolution later on if it had not collpsed beforehand.
And had spared us a few hundred years of the Dark and Middle Ages.
Basically you're saying the incentives are misaligned with what's best for the user. This -however- may yet be a fixable problem wrt corporate governance.

(And here some people thought misaligned GAI was the biggest threat to human society. But more mundane misalignment problems can crop up anywhere I guess)
Beyond SRE: Easing the On-Call Stress for Development Teams
Here's the tax policy quote in context: https://www.tolkiensociety.org/2014/04/grrm-asks-what-was-ar...

> being a wholesome person is largely orthogonal to being a good king

I disagree with Martin here. Of course, not every good person also makes a good king, and not every good (i.e. politically effective) king was a good (i.e. morally upright) person. But the thing to realise is that the political power of feudal kings was much more limited than we often assume, and was based to a large part on the continued loyalty and goodwill of their vassals. In other words, a king's power rests on the relationships he has; it is both personal and relational.

This means, of course, that a king who is perceived by his vassals as being a bad person is unlikely to keep their support and allegiance for long. He might be able to cow individual vassals by force, but the more his relationships degrade, the more precarious his position will be. (For example, King John's scandalous behaviour and personal conflicts with his barons were one of the main causes for the Baron's Revolt and the Magna Carta.)

With that in mind, it is little surprise that medieval handbooks for rulers heavily emphasise a good character, loyal relationships, and morally upstanding behaviour as key to being a successful aristocrat. Tolkien understands this, and so his depiction of kings and aristocrats focusses strongly on the relational ties between them: the fealty and oaths they have sworn, the ancient friendships and marriages that connect them, the personal admiration and sympathy they have for each other. Put differently, medieval aristocrats would readily recognise Aragorn, Theoden, Eomer and Imrahil as model princes.

(For a more detailed discussion of medieval aristocratic values, see here: https://acoup.blog/2020/03/27/a-trip-through-dhuoda-of-uzes-.... For a discussion of personal kingship - based on Crusader Kings III - see here: https://acoup.blog/2022/09/16/collections-teaching-paradox-c...)
The top comment is "my trust in them just dropped." at the moment. That's panic.
>> Which is better: 90% of people with $60,000 income and the top 10% with $600,000, or 100% of people with an income of $10,000?

> Again, as I wrote the comment I'm talking about real value not just dollar values.

In your example, how exactly do these people receive their income, be it $10,000 or $60,000 or $600,000?
>what the hell are y'all doing on your computers that is so freaky anyway?

Discussing homosexuality in Russia or critising the government in China. Not everyone lives a stressless cushy life like yours.
The original article (linked in the op here) is worth reading if you want more details.

https://doublepulsar.com/recall-stealing-everything-youve-ev...
To lobby for things good for YC :-) which happen to also be good things in general.
What is the 3-2-1 backup principle?
They do not:

> Cox does not offer a bounty program or provide compensation in exchange for security vulnerability submissions.

https://www.cox.com/aboutus/policies/cox-security-responsibl...
i worked on a consultancy gig in Geneva CH, where they had both german and french keyboards - aaargh! i was slightly surprised they didn't have italian and romansh ones too!

and my first encounter with unix back in the 1980s involved me with hacking termcap/terminfo files - eek!

to everyone, do yourself a favour and use a US keyboard. and no, i am not a US national.
There's no great analogy where the modern language is English, because English does not position itself as a successor of a long, linguistically-continuous literary tradition. That said, there is certainly an Anglo tradition of education in which well-educated schoolboys were expected to be able to puzzle through a smattering of horribly butchered Greek and Latin.
Take home is fine if you discuss it later in the interview. But also there should be some pre-screening to keep the number of interviewees reasonable.
Newer SoCs come with co-processors such as NPUs so it’s just a question of how long it would take for those workloads to move there.

And this would highly depend on how ubiquitous they’ll become and how standardized the APIs will be so you won’t have to target IHV specific hardware through their own libraries all the time.

Basically we need a DirectX equivalent for general purpose accelerated compute.
>...can't pay someone that found a bug impacting all their clients?...he could have just sold the vulnerability to the highest bidder

This attitude is why "independent security researchers" offering to present unsolicited findings to companies in exchange for payment feels exactly like extortion.