skysight-inc/HackerNews huggingface dataset:
I tried the custom molded ones and they felt more uncomfortable to me than just buying the high-end off-the-shelf "sleep" earplugs at a major retailer. They fit nicely and do block the most noise, but tend to be very rigid/inflexible, which makes them hurt when I lay down or put pressure on them. Even just stting, they start to be uncomfortable after some time.

I can't tell what brand I'm using because I (unhelpfully for this case) throw away the box and just keep them in the plastic bag they come in, but every 6 months or so I'll go to Fred Meyer, Target, or Walmart and buy a big pack of the most expensive earplugs that say "sleep" on the box :-)
ACDSee
Simon and Tudor chatting about Moldable Development [video]
Anyone remember when Instagram changed their TOS and then said "trust us"? And now they're training AI on it.

Nobody's falling for it, Adobe.
What particular value is knowing GitHub? Git maybe, but GitHub is just too specific.
Extremely rare. I've used it but no agency in London would allow you to work with it, they need copies of the files for later. AE is just the standard.
Confirmed it does work in Windows 11, and the desktop folder shortcut even gets assigned a special icon... however there is so much stuff in the folder I am not sure its really going to be that useful.
Will the world really stop turning if we can't use Photoshop™ for a year?
Yes. Much earlier architectures (e.g., Sandy Bridge) used event counters as a rough approximation for energy consumption. However, these days, we use calibrated current sensors, not approximations. These are rather accurate. And accurate enough to do a side-channel attack, too. If software opts-in for security, we also add a little bit of randomness to the readings, in order to avoid measurements being too data-dependent to where crypto would be broken (PLATYPUS attack), but not enough to affect accuracy for normal use cases.
Inaugural Open Source Founders Summit
There are sometimes “wrong” answers in an interview but I try not to ask questions that have a “right” answer.

For example: “Describe a production issue you dealt with and how you approached it”. It doesn’t matter what the issue was, how you fixed it, etc. I want to see that you _have_ dealt with a prod issue and also talk through how you solved it or how you debugged the problem.

In an interview I’m trying gauge how you think, how you will interact with me/the team, how you approach problems. If you can talk and explain your reasoning you are already ahead of the pack. The worst thing you can do is freeze up. Give me a stream of consciousness over freezing up any day of the week.

I often ask questions like “What do you think about X tech?” just to get you talking about it, not because I want you to say “I love it” or “I hate it”.
Seconded. He has very good videos on many topics and a down to earth attitude.
Upvote for Inkscape! I’ve been using it professionally for many years now. There’s a bit of a learning curve, but once you master it, it’s very powerful software, and even script-able.
That was my first thought too. I looked at the Firefly product and it seemed to say they don’t use your personal data. They have other “AI” products through like GenStudio that’s “coming soon” and I don’t see any “ethical ai” section in its description.

I bet this is a “test the waters” EULA and we’ll see them pull it back in the next few days if not hours.

If they do pull it back I wonder if they get to keep all of the content of the people who clicked yes within the time window of the onerous EULA?
Worse; there are people who pay others to do this for them, in private and in cash, and some of them are idiots in addition to pedophiles.
Having a serious moon base enables us to build space ship designs not dominated by aerodynamic and gravitational limitations.
"I was denied tenure – how do I cope?"

Easy. Just understand that most things in life resemble "Trip to Jerusalem" game.
It's definitely the case in Germany for all insurances, electricity and other utilities, etc - they have long cancellation periods, but if the contract changes to your detriment (usually any sort of price increase), you're allowed to cancel immediately. It's even required that they remind you of that right in the same notification as the price increase.
I’ve used Affinity Photo for nine years now, and my feeling is that the ways it is not like Photoshop likely would barely impact most Photoshop users.

Some of the ways it is not like Photoshop are evidence of it being better-designed. I know a good few photographers who have switched, and for my photography I find it is an actively better tool. Cross-model colour curves, layer blending curves, and live filters are all useful, and the implementation of the built-in frequency separation tool is such that it’s possible to tailor it very subtly to the image so it can be used without the downsides of the Photoshop-type approach.

Affinity Photo’s biggest problem remains the lack of a Bridge/Lightroom tool. Hopefully with Canva’s money this either gets resolved or they have the clout to get app developers like DxO, Capture One and Photo Mechanic to add closer round-trip integration with Affinity products.

Affinity Designer really is a 100% credible alternative to Illustrator. Affinity Publisher is super and highly capable. So the Bridge alternative issue is a limiting factor for these too.
I thought that what OP said described academic life pretty accurately as well! Except dealing with grants, PIs, deans, etc.
Usually the simplest way is leveraging environment variables. You can set the API key as one on the remote server, then you can get it with `API_KEY = os.environ.get("API_KEY")`. That's a Python-specific example - but hopefully you get the idea.

There are other services that manage securely saving/storing these keys rather than just hosting it on the server itself (e.g. AWS Secrets Manager)
>people trust the value of the system, which is given for example in Bitcoin.

It is in fact not a given(I for one do not trust the value of bitcoin or other cryptos, and I know more people who don't believe crypto has any value than those who do), and your comment is an example of attempting to coerce public opinions and beliefs in such a way as to promote crypto.
Has it died? I am getting mixed signals. For example, the Javascript Jabber podcast, which targets front-end web developers in general, ran an episode with some sort of introduction to web3 (and not in the negative sense) just two months ago [0].

0 - https://topenddevs.com/podcasts/javascript-jabber/episodes/w...
Generally you deploy or use some sort of secret/config delivery service.

For example most/all VPS provider allow you to give extra data to the machine; this could be the secrets directly or maybe a connection url to a local* redis server with the configs.

Or you can copy paste a file vis ssh.

*AWS-like providers allow you to also deploy private networks so that only approved services vps can access a db
So you cannot do your job. I see AI getting rid of a lot of jobs already...
No, I don't think so.

Orthogonally, the USA has a fentanyl epidemic, and neither China or India (who export fentanyl) nor Mexico (where it flows into the USA) have a fentanyl problem.
Dgraph v24 with Enhanced AI Capabilities with Vectors and Caching Performance
Spam blocklist SORBS closed by its owner, Proofpoint
> Genuine question here: isn’t it a standard security practice to avoid committing keys (or other secrets) to repos?

When you deal with high value amount of cryptocurrencies, you have a hardware wallet so things like these are not even possible in the first place, as the keys are safely stored in the hardware. Storing anything on disk (unencrypted at that) that corresponds to $40K is basically begging to be stolen from you.

Besides that, when you open source something that even has a chance of containing something you don't want to make public, you read through every single file before hitting publish.

> I’m thinking of scenarios where you might need to deploy your code + secrets on a remote server, say to authenticate with a third party API

Commonly you use environment variables for this. So the code references `process.env.MY_SECRET_VAR` or equivalent, and then you set that variable inside your server. That's the simplest way, then there are more complex/"secure" ways too, quick search for "secrets management" in your favorite search engine will tell you more.
I don't have "evidence" at all, other than that when the subject comes up most people say that it was kind of a "don't ask, don't tell" kind of thing. I.e. if you were doing it in public there could be issues, but there was a pretty good gay community where it was kind of an open secret[1]. If you don't believe that to be accurate, please let me know!

> His treatment was in line with that of other gay men of the time who were charged with similar offences (perhaps more 'lenient' if anything).

Not challenging you, but do you or anybody have some numbers on how often this was prosecuted? It's probably impossible to say since by definition much of the activity was underground, but that doesn't match my current understanding of the environment.

[1]: as is always a risk when stating facts, there's a risk of is/ought fallacy here with people interpreting my statement of facts with what I think should be the case. I'm not saying it ought to be this way, merely that it was. I think we've made great progress in this area and I'm glad for it.
> Has it died?

Yes. All the web3 influencers are on AI now.
https://en.wikipedia.org/wiki/Gutter_oil

https://www.youtube.com/watch?v=zrv78nG9R04
Yes LLM is software but you don’t need to create a software to translate documents anymore, for example. ChatGPT is enough. So a translation mvp app won’t cut it. But a high quality one would
If it's any good it's an unfair advantage to the cheaters using it, putting those with integrity at a disadvantage.
There may be something to this.

I've been letting people use semi-supervised development previews of Timelinize[0] for a little over a year now -- it is unfinished, unpolished, buggy software, but I wanted to get it in people's hands while I stand by in real-time ready for feedback, to prove out the concept and see if I am even on the right track. I let users know it is in the very early, rough stages, and to really just follow the instructions and do the happy path for now.

The feedback is lukewarm, and most users are disinterested at this point. Which is unfortunate, since I believe that a fully functional application would actually draw them in, because a few testers did actually express amazement at the basic idea of what they saw the software do for them in an initial trial run. Most feedback got lost in the weeds of the known bugs and unfinished aspects, though, which didn't really tell me anything I didn't already know, and it just discouraged testers from trying more/again.

Could be a did it wrong. But at this point I'm having to forge ahead in my nights/weekends and basically finish writing this very complicated piece of software in the hopes it'll be something great, even though it doesn't exactly have direct competition that I know of. (Ultimately, though, I just need it to be great for me and my family. I am just hoping others will find it useful too.) When I finally do release a public beta, it had better be good. That's what I know now.

PS. Looking for a different name that doesn't sound like Tylenol -- according to repeated user feedback.

[0] https://x.com/timelinize and https://timelinize.com
Turing's boyfriend was 19, therefore not an adult under UK law at the time.
A MVP should be whatever is "minimally viable"; it's right there in the name. It never meant bad software.
If you think CS is bad just wait until you see how bad Software Engineering programs are. Fresh graduates cannot explain the halting problem, the Church–Turing thesis, the maximum flow problem... some can't even formally demonstrate that a function's precondition implies its post-conditions!
Yes but most low hang fruits are gone by now unless if one chase underdeveloped markets
Woman sues Netflix for $170M over 'Baby Reindeer' link
"denied" tenure is weird phrasing: I assume you don't have the right to tenure, similarly to us not having a right to a promotion or a job.

I am for fighting/hustling this if this is doable
Stealing the Caltech Cannon
Still less than 200k /s
And those hormones where specifically intended as chemical castration, reducing or removing libido (or the possibility of acting upon it). I assume this is more likely to have depression as a side effect than the concoctions we use for birth control in early/mid life and treating the effects of menopause later, as it is explicitly damping physical feelings. We also understand the effects of such treatments much better today than we did back then (still not well enough, it could be argued, but definitely better) and many things prescribed back then wound be considered dangerous now, so he may have had a relatively rough ride. This is speculation of course, though with a better foundation IMO than some of the other comments in this thread…
In Europe companies are obligated to intercept and scan images anyway, so you can't escape Adobe's new spyware terms by switching vendors; they'll all have the same ToS provision.

(i.e. "for content review")
InDesign is also an anchor product. Affinity Publisher is actually great and catching up on some of the niche tools InDesign offers, but I think it remains true that you can’t really flip some designers until you sell them on a new book/magazine/PDF layout tool.
I kind of suspect that the techno-optimism that plagues the AI sector has metastasised into a more general toxic optimism. This is not the first AI-ish product which was clearly unsuitable for release, yet released anyway.
This was true for earlier implementations, but newer ones actually measure power. There is an ADC in there. At least for Intel. Not sure about AMD implementation.
That is correct.

I am making that claim without backing it up by references.

My point is that there are other correlated factors that explain death rates than pregnancy.

Another one might be that the death rate in the fertile age group could simply be higher, too, although I don't know if that is true.
That's a bit like saying that every public toilet that charges a fee is a scam. Surely there are scams and hype in this industry.

Fees are for inclusion of a transaction in a block. And some pretty clever game theory was implemented as part of eip1559 in Ethereum to make fees efficient and fair.
>Photopea - https://www.photopea.com/

This is an online only tool. They will do the same thing photoshop did soon enough.
They don't. Doing studies on living human fetuses is an admin nightmare. So they use analogues. Black hole physicists also resort to analogues as thier subjects are similarly difficult to manipulate.
I frequently recommend MIT's missing semester to students [1]. I agree it sucks they don't teach this material, though to be fair they also neglected it when I was in undergrad a quarter century ago. I remember learning it on my own because I wanted to become better. That autodidact proclivity has served me well over the years.

[1]: https://missing.csail.mit.edu/
Somewhat related: generally, teaching professors are considered "second class citizens" compared to research professors. This person was all about their research and their lab, and getting tenure on that basis. Yet the bread and butter of universities are their undergraduate students, and you don't need a research lab to teach at that level.

I would like to see universities prioritize undergraduate teaching. Stop abusing adjuncts and hire professors with a long-term interest in the success of the university's undergraduate programs.
Then you need to read through any file in any revision. Because if you have a newer commit with the secrets removed they are still in the history.
Easy. I didn't even get an academic position. I quit trying in academia and became a wildlife photographer. That's not because making it in academia wasn't theoretically possible, but because sometimes it's just not worth it.

If you're smart enough to do research at an academic level, go off the beaten track: start some courses on your subject on Udemy, save up some money while you're still IN academia, and when get out the first chance you get and do something else.

Every time you feel like the system burns you to the ground, rise like the phoenix and remake yourself. If something isn't working for you, discard it and push hard to fight against it.
Yep, so after a few years of litigation and hours of time filling out forms on your state’s awful judicial portal (hopefully correctly!) you might stand a chance at a judgement. Then you can spend more time going back to court when they don’t pay, talking about time payment plans, etc. Maybe they’ll pay some of it, maybe not. Then they move to another state and you need to get your judgement domesticated there (with an in-person visit). Also, remember to keep renewing that judgement or it goes bye-bye!

Remember that the goal of the defendant is to exhaust the plaintiff, and cause them to spend more time than the judgement is worth. This is how the small claims system works.
But guess what, the Nation Population Institution said birth rate is going to rise and keep steady afterwards in 2023 without explanation. And everyone inside the gov believe this bs.

https://www.ipss.go.jp/pp-zenkoku/j/zenkoku2023/pp_zenkoku20...
And now US fears China instead. You can't come out on top. Why not commit less atrocities on the way wherever you are going?
> If you’ve got that much money in a project, it’s not a prototype.

How does the monetary value matters? A prototype is a prototype, a quick project to test some concept. If you wanna test some concept around large transfers, does that mean it's suddenly not a prototype?

> This repo should have had all types of static analysis running automatically.

Would that actually prevent this issue? So lets say they make the repository public, the static analysis tool begins screaming at the repo owner. Now, he has 2 minutes to transfer those funds somewhere (manually), before the thief automatically makes that transfer for them, to their own wallets.

Sounds like the guy just needed a hardware wallet instead of whatever they were doing. Who stores unencrypted wallet details containing $40K on disk?! Committed to git?!
I can't express how much I agree with it!
Can’t you just block all traffic to Adobe products with tools like Little Snitch?
I saw this problem in my domain and I imagine it happens everywhere:

We were taught exclusively with ArcGIS in undergrad and then so many peers can’t even navigate QGIS because it lacks some window dressing.

Schools are where these companies capture the industries.
And even those kinds of trades will not be fun. I give my bullets to some dude. He gives me some potatoes and cigarettes. He asks me if I have more bullets to trade for another day. I tell him no, those were actually my last bullets. He points his gun at me and tells me to hand him back the potatoes and cigarettes that he just gave me. I have no bullets left, even for my own protection. I hand him my potatoes and cigarettes. Now I have nothing :(
It doesn't matter, because in sane countries, even when such clauses aren't outright illegal, you still have the right to refuse the change and cancel the contract without penalty. I am not sure exactly which countries are sane.

There's all kinds of law about what you can and can't put in a contract. You can't just write whatever you want and then hold people to it. Why do you think they always have a clause that says that if part of the contract is found to be invalid, the rest still applies?
I wonder if the bigger cause of stupid slowness in our current bad software is Electron, or misuse of declarative UI frameworks like React.
They're on Twitter with a crypto symbol in the username, you really think targeting is outlandish?
Sounds like Class Action material then. How often does Adobe change their TOS?
What is real morality? How do you distinguish it from perceived morality?

There is no ultimate right or wrong, it's all perception.
Or `rm -rf .git && git init && git commit -m "init"` and then read through. Common to scrap previous history when you go from private -> public repository anyways, a lot in order to scrub potential things like this to leak through.
I remember writing down everywhere — in notebooks, calendars — all full of teenage fury and conviction: “OBSERVE THE MASTER / IMITATE THE MASTER / BECOME THE MASTER”. An edgy 14 year old I was. I don’t remember the source for that anymore; it looks too wise to have come from myself.
It’s so easy to find information about this by googling. https://www.bbc.co.uk/news/uk-38814338.amp

There’s nothing complicated about the Turing case. It was a crime at the time to have gay sex. He admitted to a police office that he’d had gay sex. This led to him being prosecuted.

I’d urge you to spend more time looking at the facts of the case and less time questioning the universally accepted narrative on the basis of what you admit is no evidence.
Note he didn't commit his keys by mistake, but rather made a private repo public. Don't know if that makes a difference.
Yeah, just spitballing here but it seems like they could make DAG version control systems a unit of study in an algorithms course.
Payroll employment increases by 272K; unemployment rate changes little at 4.0%
How many people does it take to run it?
I love the Buddhist expression “these teachings are like a raft one uses to cross the river and then discards”.
Sorry I didn't —to my great chagrin— spot the incarnate filtration! (I come from the cryppie branch, neither hydro nor celmech, so my only excuse is that I normally contemplate topless models and their bottoms, not any of their Manichaean relations)

I'll just have to cool me down to take another round before I'm back in the ring (assuming XOR distributes under AND) to take another swing, so please bear with me.

Besides, I'm guessing this'll be a job that, rather than requiring poisk-fu, instead needs a fast machine, one that keeps the research motor clean.

> All Gaul is divided into three parts: the part that cooks with lard and goose
fat, the part that cooks with olive oil, and the part that cooks with butter. —DC
It's just for stuff you store in the cloud (obviously)
PHP-CGI Argument Injection Vulnerability in Windows
It’s spin. People hated assembly line work so he had to pay more money.
Part of this, I think, is the bleed-in of cloud services even to work stored entirely offline: their AI-enhanced tools send content out to the cloud.

For example you likely cannot implement content-aware fill in the cloud without sending the content to the cloud.
> The workers are members of the National Samsung Electronics Union (NSEU) and are employing a "coordinated use of vacation" according to deputy union chief Lee Hyun-guk.

> Using leave to protest working conditions is a very polite way to go about an industrial dispute. This one is made even more polite by the fact that Thursday was South Korea's Memorial Day holiday, so taking Friday off to enjoy a long weekend is not unusual.

> One local media report even alleged Samsung management encouraged employees to use annual leave on this day.

Everyone taking vacation on a Friday holiday with the encouragement of management is not what I expected from the headline.
The real tragedy here is not that he lost $40K, but that crypto is the controversy generator that is part of the bread and butter of mass media, which in turn is a large part of the reason why cryptocurrencies have value in the first place. The loss of $40K didn't just happen due to this developer's mistake, but also because he was able to store $40K in crypto in the first place, and that partially happened because of people like us, reading this news story.
Avoid class action and take them to small claims court or simply backcharge them and let your credit card handle it. Either way, they lose a lot more than a class action that will take years and get you nothing.