skysight-inc/HackerNews huggingface dataset:
The framing is absurd & fascist to the core.

Someone was cyber attacking Chrome. Unclear if Google had even so much as a guess they knew who from. There were bugs in Chrome. Google fixed the vulnerabilities, making the software obey the contract websites & users have with each other, & detailed why they were changing the open source code in such a fashion.

This is not burning an operation. Google didn't name any operation or country. Google probably didn't know who it even was!

If they had some guesses, & did try to pick up the phone & call say MI6, about this topic of leaving this exploit jeapordizing everyone running - which they may well have done (if they confidently track down the cyber attack) - the first most likely response is "we have no idea what you re talking about" in which case fixing the vulnerability & writing a blog post is basically the only remotely acceptible option. You spent a while trying to find out who the cyber attack is launching from, you've gone crazy far to do due diligence to track down whose attack it is, and they say it's not theirs. Ok your diligence was wrong, the cyber attack is coming from somewhere else or from multiple people, you need to resolve it.

Next option is whichever security agency either fesses up & does the right thing. Google addresses the vulnerabilities, and writes a blog post about them.

Or, stand-in Intelligence Agency [SIIA] declares, no, we're SIIA, and you're leaving the defect in place, because we say so.

It's unclear what the author is really protesting here? Bugs are critical to national security so we should let people exploit them? Oh that's exactly what they're saying.

> However, burning operations, no matter the actor and no matter the reason, demonstrates a grave misunderstanding of the critical role that cyber plays in reducing harm in the world.

'The military's active use of indiscriminate cyberwarfare trump's the right to find and correct defects.' Wow. That is a bold position.
With day labour the clue is in the name, you get hired for the day. They can't send you home halfway through, or at least they still have to pay you a full day.
Also not accurate. Chimps have extremely powerful numerical working memories. https://www.cell.com/current-biology/fulltext/S0960-9822(07)...
YMMV there depending on the specific game, both of those anti-cheats can work on Linux but the developer of the game has to opt-in to allow it since their Linux implementations are much easier to bypass than their Windows ones. There's games like Rust which use EAC but have refused to enable its Linux support for that reason.
Yes, you can. I just now downloaded a win11 23H2 iso and installed w11 pro without going outside of the OOBE. Sure, you shouldn't have to click 'domain join instead' etc, but you can absolutely do it without doing anything outside of the OOBE.

Here are the exact steps I used:
https://pastebin.com/nDnLBYg2
A variation of this question gets asked semi-regularly on HN, but I think the reason the results so often seem unsatisfying is that the people who actually find a meaningful answer and switch careers aren't hanging out on Hacker News anymore. They're living their life and have found community with other people doing what they actually want to do.

As a result, the Hacker News responses are often incredulity that anyone could ever leave the software industry (even if it's a miserable soul-draining place), or slight career shifts that aren't really career shifts, with a little bit of Financial Independence Retire Early thrown in.

Now, where to find the community of folks who have left Hacker News for something they genuinely enjoy, that would be great to know.
Yes, it means these people have low levels of GTP.
Can recommend "Trauma-Sensitive Mindfulness: Practices for Safe and Transformative Healing" by David A. Treleaven on this particular subject, especially for people working in that space.
I Gave Myself a Lupus Flare for Science
here are the steps I just used a few minutes ago to use a local account. You can do it without leaving the OOBE, but you shouldn't have to go through so many steps to do it.

https://news.ycombinator.com/item?id=40781798
It also doesn’t nag if you decide not to use it.
<< It's hard to convey without coming off as unhinged.

I almost wonder if this is by design. I genuinely had people look at me funny when I described relatively minor issues that eventually made me jump from Windows ( in my case I think it was dropping detailed descriptions from updates in Windows 7 ). I kept explaining that even the issues are not the actual issue. The issue is that I am unable to administer my machine as I see fit. I am not anti-tech, I tell people, but the tech has to work for me...
Because web sites will start using Chrome only features and stick a big box over the page insisting the user switch. Unless, of course, you want to pass complete control over web standards to Google.
Reader mode works great on danluu.com, as does a very simple user stylesheet along the lines of https://bettermotherfuckingwebsite.com
Out of curiosity, how did you find the opportunity in public transit?
Re: unitary ghosts.. ask your friend who might be all aquiver? He might well be as coy as these creatures..
I think it's a lot more usual to have your ticket and then your whole damn team decides to argue for hours on how you should do it, just because your manager lets it happen. This happened with my last job and it really pushed me out. The reason why people argue so much is that the stakes have never been lower - they don't do the work, or the thinking, or the fixing. It's just really easy to "have input" and then the environment makes you follow that "input" because "we're a team".
This, exactly. Things will only continue to get more shitty as long as the expectation, and often requirement, for businesses with investors is to make infinite money, forever.
> Consider finding a role or opportunity to write software for people doing something you find meaningful - you can provide an enormous amount of value

I agree with the premise but I want to play devil's advocate because you can cause harm trying to help in this manner:

Consider a non-technical org like a non-profit that does marketing-like activities to further its cause. You can build automation for that using SaaS tools binding together a handful of their manual processes. But what happens if you leave? What happens if some of the vendors you picked disappear? How much of your time is now committed to maintaining that software?

Software is brittle. It takes a lot of empathy, time, and long-term thinking to effectively integrate software with an organization steeped in manual processes. So ultimately when you ask "Can I help here" also ask "Should I help here".

A six hour training in spreadsheets can sometimes provide more value then a thousand hours of software development.
LitRPG fans aren't all young people, it's also weirdly popular with middle-aged women with fond memories of playing World Of Warcraft.

I don't think the phenomenon is young people these days, so much as every online fiction site slowly narrowing in on one subgenre over everything else, and Royal Road's being trashy power fantasies.

I'm on a discord where authors discuss these things, and they talk a lot about the RR community and the hoops they need to jump through to match that specific group's specific tastes, because it's one of the niches where the money is right now.
Who’d have thunk, it has been almost 50 years since I watched it…

https://www.youtube.com/watch?v=2VCE2PRS-C8
If you want to make the concession that there's no evidence in either direction for the hypothesis that roots this thread, I'm fine with that.
It's annoying but it's a smart move, once they get you to hit that low 5gb onedrive limit it's a easy path to get you on a office365 sub for the extra storage.
Eh. Depends on the type of sales. Plenty of sales is one off sales that requires no long term relationship building. I know lots of incredibly slimy sales people who great at making money. They just dont have a ton of repeat customers.
LOL

I would like more feedback.

Am I being downvoted by 'Capitalist's', because it sounds like I'm anti-free market? When really, I'm just outlining what a market is, how things are?

Or Am I being downvoted by 'Socialist', because it sounds like I'm advocating that Capitalisms is the natural order and humans are commodities, and is just how things are?

It is very hard to tell what line is being crossed.
Did you login with ms account? if so, why?

I don't think it can upload if you aren't logged in.
That is, obviously, not a graph of suicide trending upwards as a result of an intervention that occurred at roughly 1900.
At least the version number increment is probably necessary because of the "breaking change" of requiring TPM, so they can move into a locked-down ecosystem like the iPhone, which I'm guessing is MS's goal within a few years.

But the terrible UI/UX? I guess they saw they had to entice users to move by changing the look and feel, but didn't give the programmers enough time, so it was mostly unfinished garbage when it was released, and maybe still is the case.

On that note, I have Win11 and Office version whatever at work. I really fucking hate new Outlook, it's a garbage web app, the whole "NEW" label on the icon makes me always think "Oh I've got some new emails. Oh no, it's just Microsoft being fuckwits". Also, the UI for modifying email signatures is a confusing maze of unfinished UI.
There is a <LINK> command, although many of the possible link types seem to be ignored by common browsers; however, some of these can be used for <A> as <LINK> anyways.
> I think it's harder to argue that Sony shouldn't be allowed to take a cut of game sales on the PS5

I agree, it's hard to argue that. Sony created a narrow-purpose platform (gaming + media) and is taking a cut for offering 3rd party games there.
It's not a general purpose computer designed to be your main communication device and your key to connect you to any type of service or appliance in your world.

Sony didn't sell best-in-class TVs, then used their dominating position to demand revenue-share from broadcasters, then integrated a gaming console for the same price to crush console competitors, then created a custom plug and partnered with building companies that their plug shall be in all living rooms, then launched a watch which would only work if you also have their TVs, then started a bank and mandated that all products promoted on any TV channel must only be payable via their payment service,...

...and then when a commission started setting boundaries on its grip over the market, started complaining how the commission is preventing competition, how only Sony can ensure a secure living room and safe TV-experience, and started weaponizing its customers (with the custom sockets, watches and wallets all on Sony) against their own elected regulatory body...
Python is a language, MicroPython and CPython are both implementations of the language. MicroPython is more limited but in a few ways, it is better.
Have you guys seen any smart strategies in your company or other places that help triage meetings or make them less exhausting?
> massive pound of flesh

Technically, all pounds of flesh are the same mass :)
It’s actionable advice for many, if not most, people who write software for a living.
It's not teaching "fire burns", it's teaching "whatever authority tells you - you should do, even if you really want to investigate for yourself, because you'll die".

Which I call obedience. And yeah - it's useful for parents because when your kid runs towards a busy street you don't have time to explain the reasoning and persuade it to go back. You need it to listen to you immediately. So it has some value. But let's not sugercoat it in psychological theories. It's simply obedience.
You feel comfortable with git because someone put a lot of work into making its source code and ecosystem portable.

https://github.com/search?q=repo%3Agit%2Fgit+WIN32+OR+mingw+...

If no one had done that work, you'd have to port it yourself.

Cosmo provides a development environment that can ease this work. It's not only about the fat binary.
I'm imagining this happening to someone on a highly metered connection and blowing through gigs of their limited monthly upload budget before realizing their OS has just gone rogue on them. Treating everyone like they have an unlimited bandwidth budget and greedily using it without permission is just awful behavior.
7 years from now. But will the mechanic come in the morning or in the afternoon?
That'd be hell for mmap, too.
Tangential, but about three years ago my wife and I went to Mexico for two weeks to deal with some immigration stuff. We made very liberal use of the "Didi" app, which I actually recommend because it was generally quite good, and most drivers would take us on direct paths and it was fine.

One day, when returning back to the hotel from Walmart, which was about a 15 minute drive, we got a Didi, the driver came, and it took more than 45 minutes because he was taking the longest path he could find. There was no traffic as far as I could tell, and Didi would still pay a "per mile" charge.

The exchange rate in Mexico is so in your favor as a US citizen that I didn't really complain about it because it only ended up being an extra $6 or so, but I did feel a little taken advantage of.

I greatly prefer knowing my cost before I get in the cab.
So long as you are single and childless.
Indeed. After being brow beat into using it MS rewarded me by syncing my personal PCs desktop shortcuts to the family PC resulting in a screen full of broken shortcuts. Good jorb MS.
Lol having also lived in NYC my entire life yellow cabs were not and are not great. And I don't know a single person who would say it is.

Delivery drivers never got paid fairly either.

Idk what imaginary version of NYC you live in.
> runs as root

ntpd can (and should) run as a user

> talks to the network

Makes outbound requests to the network. For it to be compromised, the network itself or a downstream server needs to be compromised. That's very different from something like hosting an http server.

> doesn't usually authenticate its traffic

Yes it does. ntp uses TLS to communicate with it's well known locations.

> uses a bespoke binary packet format

Not great but also see above where it's talking to well known locations authenticated and running as a user.

It's a service that to be compromised requires state level interference.
U.S. record labels sue AI music generators, alleging copyright infringement
there are also severe restrictions on your ownership of the ferrari.

You are required to maintain and insure it. by ferrari.

You can't loan it out for performance testing.

You can't street race it.

You can't sully the brand.

and plenty more.

makes me wonder, do the new ones have telemetry to check this stuff?
> It's hard to convey without coming off as unhinged

Man. I have felt this way a whole lot lately.

I think some people see Linux users and genuinely can't fathom how or why they'd want to go through all of the trouble choosing to use Linux and doing real work on it. A lot of us look back just as puzzled, because when I switched to a Linux desktop for the first time in around 2004, it was definitely a choice, but it hasn't felt like a "choice" for a very long time.
I moved to teaching.
Which is what I'm say is wrong. If the oversight on insurance and other companies is lacking, it needs to be improved across the board not just with lip service to the popular technology of the day. The bias inherent is the exist risk scoring systems is absolutely equally if not more consequential than LLMs.

Most of these regulations can replace "AI" with "technology, mathematical model, or human processes" and they will be 1000x better laws.
KeeWeb
Perhaps then it's ironic that Slack stands for
"Searchable Log of All Conversation and Knowledge"

https://x.com/stewart/status/780906639301812225

Via Wikipedia, etc.
<< Microsoft looks at their files in onedrive and does something bad (not sure what)

Some of us use documents that should not just end up 'in the cloud' for various reasons including legal, regulatory or just 'I don't want Redmont to have copies of my kids pictures'. It does not even have to be that they do something bad to it. It is merely that the act of taking it without user permission is a major violation of trust.
Sounds like sales engineering could be a good fit. Might be tough to get the first gig but its likely someone will give you a chance if you network a bit.

I came from tech recruiting which I would not recommend but I do know a few engineers who have transitioned into that. I think sales engineering is similar without a lot of the recruiting bullshit and likely a lot higher upside unless you want to run a company of sales people.
Do you mind sharing your total comp during those years? (since you are sharing pretty personal numbers already)
Yes obviously it’s protectionist, the whole point of the DMA is to protect the EU internal market from entities that aren’t EU state apparatus from having too much control.

I’m not entirely sure how you say the DMA is badly drafted, what do think its objectives are? It’s not a “tech law” at all, it’s a market competition law that designed to deal with the unique imbalances created by large tech companies that historical competition law hasn't adequately dealt with.
Mandatory Google [your games] + proton first
Feeding birds will only lead to rats if you give them the wrong food or too much. Otherwise they will eat it all up and there will be nothing left for the rats.
Agreed, this all seems so bizarre and frankly... decadent.
We only sequenced the first cow genome 15 years ago and plenty of plants and fungi produce high quality protein/fat/etc - it's not like we're starting from scratch the whole point of bioengineering is that we can cheat using stuff nature figured out for us. It's certainly not scientifically impossible. In the zero interest rate hype cycle over the past couple years plenty of startups convinced themselves that they could totally make it work with cell culture and stupid expensive bioreactors and media and stuff since that was the only tech that was 'ready' even though at best all you can get is an overpriced lean meat only replacement for ground beef, and this article seems to take for given that this approach === meatless meat. I think it's useful to keep the questions of 'are these tech bros going to figure out how to make producing meat in class 8 cleanrooms viable' and 'are bioengineered animal-free meat replacements going to happen in the next few decades' seperate
The design looks beautiful. Nice work on the UI widgets.
It does - there’s a message with a red dot badging in your settings that you can’t dismiss. Clicking it takes you to a nag message to log into iCloud. Still, nowhere near the blatantly insecure and anticompetitive dark patterns that Microsoft uses
IMO While Apple are pushing iCloud harder than they really should be allowed to, but it's nowhere near as bad as what Microsoft are doing. With Apple there's a simple opt-out in the setup wizard, and if you opt-out you stay opted-out (and are only prompted to opt-in once a year with the major OS update).
Does the "domain join" work even if you don't have an AD server setup to join to?
> tired of the infantilization of the industry

I would like to hear more about this.
Solar replacing natural gas is far more impressive in April than it is in the summer. Summer with its long days has a lot more solar than cloudy April.
So what word should they use for such a plan that distinguishes it from the plans where going over your allocated data amount starts racking up data charges at $1 / MB? And would you really be satisfied if the company advertised the plans as "unlimited 3G data with 5G SpeedBoost™ for the first 50GB"? After all, if it's "always" 3G then it's always a certain speed, and surely its not deceptive to give better service than paid for from time to time.
> if so, why?

Have you tried installing Windows 11 without signing in to a Microsoft account? It's very difficult to do and the instructions online keep having to change as Microsoft makes it more and more difficult. What I'm finding now [0] involves using a hotkey to open command prompt at a certain part of the installation process and running a command to disable the internet before you proceed.

[0] https://www.tomshardware.com/how-to/install-windows-11-witho...
I'm the person driving this.

NTP is worth moving to a memory safe language but of course it's not the single most critical thing in our entire stack to make memory safe. I don't think anyone is claiming that. It's simply the first component that got to production status, a good place to start.

NTP is a component worth moving to a memory safe language because it's a widely used critical service on a network boundary. A quick Google for NTP vulnerabilities will show you that there are plenty of memory safety vulnerabilities lurking in C NTP implementations:

https://www.cvedetails.com/vulnerability-list/vendor_id-2153...

Some of these are severe, some aren't. It's only a matter of time though until another severe one pops up.

I don't think any critical service on a network boundary should be written in C/C++, we know too much at this point to think that's a good idea. It will take a while to change that across the board though.

If I had to pick the most important thing in the context of Let's Encrypt to move to a memory safe language it would be DNS. We have been investing heavily in Hickory DNS but it's not ready for production at Let's Encrypt yet (our usage of DNS is a bit more complex than the average use case).

https://github.com/hickory-dns/hickory-dns

Work is proceeding at a rapid pace and I expect Hickory DNS to be deployed at Let's Encrypt in 2025.
Isn't the confusion from the difference between "Western countries" as the group of countries typically within the euro/anglosphere and "western countries" as the countries in the western part of the world? One refers to a named group (and therefore capitalized, one refers to a geographical location).

I would call New Zealand a "Western country", but not a "western country". Chile is a "western country" but probably not a "Western country" (although the map linked seems to sometimes include it).

https://en.wikipedia.org/wiki/Western_world
Have been running ReFS on a drive on my Windows 10 workstation for about three years, and recently started using a dev drive equivalent on Windows 10 for the past two months. Our Unreal Engine project is quite large, 600+GB straight from the P4 depot before building. I need to keep a few separate workspaces around, one for current development work, one for swarm reviews, one for "let me test out a thing that might break" because as we know, branching in Perforce can quite painful, especially on large depots. At one point I needed to have dozens of workspaces synced to specific changelists whilst we hunted down a bug in one of our levels.

ReFS, with block de-duplication and LZ4 compression has reduced the per-workspace footprint to around 10% of what it was previously. Decreased build times by around 5% and decreased archive, stage and package times by about 80% by deploying MSBuild SDK CopyOnWrite. I also moved the DDC onto the VHDX where the project resides which has further reduced the footprint of the project.

Windows 11 canary channel (still in canary I think) has a modified Win32 that supports CoW FileCopyEx. You can get similar gains by other means on Win10 and Win11 by using ReFS CoW aware utilities.

Have used XFS, BTRFS, APFS and others extensively over the years, so I am glad that Windows is finally getting in on the action.
> "the core purpose of privacy: to ensure that who we are cannot be used against us unfairly."

I don't see even the vaguest mention of economics in this quote. Copy-paste fail?
I just checked his hn profile, and was interested to see that dan is the same person who did improvely, which was mentioned by him on multiple hn passive income threads.

https://news.ycombinator.com/user?id=dangrossman

https://improvely.com,