skysight-inc/HackerNews huggingface dataset:
If someone really wanted to do it they will be contributing already continually and at some point start working on this with the expectation that they are the one maintaining it. And it would be fine because by then developers would already trust that person since they've been reliable.

It's not about "technical chops", it's about being constantly available, reliable person that shows to contribute day after day. If you don't do that why should a dev make the scope of their work bigger if they won't be able to keep putting the same quality of work?
That certainly isn't true of youtube. It, exclusively, holds a lot of videos. It's not like I can just watch random youtuber on vimeo or some kind of gnutube.
I tend to use the website versions of the chat services, but have the electron versions installed because they tend to have better screen sharing performance in my experience.
They will always need to strengthen requirements to strengthen security. In the past Microsoft has too heavily aimed for compatibility at the cost of security. This was pretty much their thing in the Windows XP days and everyone laughed at all the ways they screwed up.

There seems to be a clear focus on attestation and preventing persistent malware from taking root in a system's boot chain and potentially firmware.

https://learn.microsoft.com/en-us/windows/security/hardware-...
> I don't recall seeing a location prompt for Google's services

I don't recall a prompt for Apple's services, either. But you can revoke the permission, at least for some of them.
Don't Java my Rust, please... Nor Go for that matter... ;) on a more serious note, we should try of different stuff and adopt what works, not sure Spring approach is worth pasting to Rust.
No idea what you mean by "that kind of monopoly". Google is a company which performs illegal acts to preserve its monopoly. Of course that will limit the viability of competitive products and services. That's why it's illega.
I bought this no-name CO2 monitor (can be found on Amazon and AliExpress and probably elsewhere):

https://www.aliexpress.com/item/1005006483766478.html

It is ~ $50.

It actually works really well. I tested it in a number of situations and it appeared to be relatively accurate. It led me to make some ventilation changes in the house.

I didn't need it on all the time, I just do spot checks if I think there is an issue now. I like the portability as well.
Mostly that the whole annotation-based dependency injection part can be a mess to debug and that it seemed to (at the time, unsure about the present) have very odd defaults around logging.

The annotation-based DI seemed to do a really good job of turning what should have been a compile-time error into a runtime exception instead.
I’m sorry but it’s not that simple. You can’t just say add salt, here are the benefits of salt, problem solved.

In a password database, salt is not secret because the password combined with it is secret and can be anything. Even if you know the salt for a particular user, in order to crack that user, you need to start hashing all possible passwords combined with that salt. If a user picks a dumb password like password123, then they are not safe if the salt leaks. Other users with password=password123 will not be immediately apparent because other users have different salts. You would have to try password123 combined with each user’s salt to identify all the users with password123.

You said “It wouldn't be too hard to issue a very large, known, public salt alongside each SSN.” That means there should be some theoretical service where you pass it an ssn and get back the salt, right? So what have you gained? Any attacker with an ssn can get the salt, and nothing was gained. Or if attackers don’t have ssns they can just ask for all the salts, the mapping from ssn to salt is public so they know 000-00-000 has salt1, 000-00-001 has salt2, etc, so you haven’t increased the amount of hashes attackers have to do to do whatever it is they want to do.

You’re right about commercial interests being at play. That’s why we don’t have laws like GDPR in the USA. Crypto nerds have thought about this long and hard and if it was that easy we wouldn’t need stupidly complex laws like GDPR. They would “just add salt.” Or other services would “just add salt” instead of relying on more complex and expensive forms of identity verification and protection.

You don’t need to be a crypto nerd to try to describe a flow where having a public known salt per ssn helps with privacy. You do not need to be a crypto nerd to design secure one way hash functions that would plug into that flow.
A Universal Electric Vehicle Outlet and Portable Cable for North America
>I am here for good faith arguments, not just to poke at people.
So fully recognizing upfront my own bias towards this feature, and that lack of immediate interest makes something a business risk regardless of how it might turn out over time. Still, just 2 cents towards the long term:

>Regarding PoE, we have made a survey some time ago and less than 5% of the users were interested in PoE

1. I'm not sure surveys are that useful for features a lot of users aren't aware of or might have outdated views on. I think a better survey would be on whether users wanted ethernet at all, because that's the only real differentiator there in an age where a basic PoE+ switch can be had for $55. If it's already going to be on a hardline, then having it be powered that way too is ultra useful and zero extra work. Ethernet is also something people can do without being electricians. There is a bit of chicken/egg challenge with features like that where not many people know because there isn't much stuff.

2. I hope you're normalizing to some degree for purchase volume. 5% of customers isn't the same as 5% of sales.

That said I certainly wouldn't want to see you face any challenges over something like that and your reasons are fair enough. It is just a bit of a bummer to not have more options on that front. But the native HA integration added back in June with no firmware flash already sold me on a bunch of AirGradients anyway and was much more important! Thank you so much for that.
Ask HN: Best resources for job market trends and data?
Hello HN

My wife got laid off recently and is now considering changing her career. I'm trying to do some market research about jobs and current trends.

One thing that could be very useful is a website tracking job postings and their close dates. With this data, it could show trends, popular jobs, etc. Is there a tool for:

- that aggregate job market data and present trends?

- track the lifecycle of job postings (from posting to closing)?

Beside that, what resources have you found helpful for researching emerging or declining job markets?

Any insights or recommendations would be greatly appreciated.

Thanks!
The code to find the binaries is very clearly Javascript, not Powershell

From: https://x.com/da_wamwoowam/status/1824874909572665735

`readdirSync`, `statSync` are from https://nodejs.org/api/fs.html
Ordering generally denotes the preservation of insertion ordering, and possibly the alteration of that order. Sorted iteration is a completely different beast (and generally you’d use a tree-based collection if you need that).
Interesting; but why actually C and not PL/M?
That is a good list, now just need to prioritize (after finding the ICP).
Saturn's Ocean Moon Was Hiding in Plain Sight
Which part is speculation? I wasn't bashing his tech accomplishments fyi.

Turkey

2017: Elon Musk Meets Erdogan in Turkey, Turksat and SpaceX cooperation discussed.

https://apnews.com/article/cba761ce3c1c4e5a9e5485f03a632cda

Sep. 2023: Elon Musk takes son to meet Erdogan, who wants Tesla plant built in Turkey

https://fortune.com/2023/09/18/musk-son-meet-turkish-preside...

China

Jan. 2024: Elon Musk says Chinese EV firms will demolish rivals without trade barriers

https://www.reuters.com/business/autos-transportation/tesla-...

April 2024: Elon Musk flies to China, agrees to Tesla/Baidu cooperation

https://www.bloomberg.com/news/articles/2024-05-01/tesla-sea...

https://www.theregister.com/2024/05/01/tesla_map_backtrack_b...

May 2024: In about-face, Elon Musk opposes Chinese tariffs

https://www.reuters.com/business/autos-transportation/elon-m...

Israel

Nov 2023: Elon Musk visits Israel after antisemitism row, gets Starlink deal

https://www.bbc.com/news/technology-67544945

There does not seem to be official Tesla or SpaceX presence in Brazil, coincidentally. The only Tesla presence in South America seems to be in "lithium-rich" Chile.
That's a myth. Brain plasticity was never properly studied beyond 26 years of age.
Makes the bittersweet we're always battling back seem pretty moderate in comparison. Glad the Japanese knotweed is on the far edge of the property, on the other side of the driveway. It may get there eventually, but not until well after the house isn't my problem anymore.
Every single one of those things landed people in jail. Many people also got sent to prison under the Espionage Act just for publicly opposing conscription during the wars of the 20th century.
What makes you think that the decision making will be hard to automate? In a couple of decades, keeping this pace of development, doesn't it seem plausible that AI will be able to extract requirements from observed behavior, and decide how to fill them better than a human can?
Everything you never thought you wanted to know about emoji flags
> Rhoden: […] Some ocean moons even have low enough densities that they probably have water ice mixed into the rock in their interiors. With heat, that water ice melts into liquid water, which will erode rock to create salt water. […]

> Hall: Given how cold it is in the outer solar system, what generates the heat?

If you haven’t read the article yet, take a guess! Amazing. (Though I don’t know how well Rhoden’s explanation is supported or what other explanations might suffice.)
No DVD or BD menu support as I've tried now
More young men are becoming NEETs than women
A Critical Analysis of the Google Search Antitrust Decision
I think you’re forgetting that it is regulatory capture that has made medicine cost so much in the US in the first place.
What are some of the issues you have seen with OTEL?
Does it work without an Internet connection?
> An "ordered map" is not a hash table. I think they want a tree.

An ordered map is absolutely a hashmap.

> But you can get the keys and sort them.

That gives you a sorted thing, which is completely different.

> Use a tree if order matters, Hash if not.

That is incorrect. “Ordered” in the context of maps generally denotes the preservation of insertion order, and more rarely the ability to change that order. Trees don’t help with that, quite the opposite.
Tracing Changes in Test Difficulty and Students' Math Performance
They’ll never do it but
Make only cash tips be tax free
Make a limit of $300 indexed to inflation per day

If you try and make your stock broker commission a “tip” and get handed a bundle of cash, it’ll look really bad and hopefully you’ll get caught
It's obviously down to taste, but what I've seen over and over is a comment per line which to me is excessive outside it being requested of absolute beginners.

That happens and also the model can't decide if it wants the comment on the line before the code or if everything should be appended to the line itself so when I see both styles within a single project it's another signal. People generally have a style that they stick with.
The Economic Origins of Concerns over Women's Chastity
That was circles
“I am one of those engineers who do not care about culture as long as I am getting paid for the efforts I put in.”

Then large companies are not for you. Navigating the culture is key to advancement and long-term satisfaction. Otherwise you will feel like an outcast and likely let go during layoff rounds or kept around at lower compensation rates.
Why not the people who built such crappy software?
No, because the entire point of a tip is to reward great service

What we should be doing is tipping better for great service and tipping less or not at all for poor service!
My parents owned a mom/pop video store during my childhood. It's still crazy to look back at how in-demand VHS tapes were. We lived in a super small town so there was zero competition. Cable was not common in every home yet.
"Be kind, rewind" cost a buck if forgotten. Rewinding to the beginning of VHS tapes was honestly so long that nobody really forgot.
The store was eventually acquired by some regional chain, and almost like magic the future started taking its form.
So cool to see this.
This is why I run everything possible in the browser. Discord, teams, zoom, outlook, etc. It also makes switching computers and operating systems a breeze. Not that I switch often, but I like to remain platform agnostic.
I’m sure they do that somewhere. Most places it’s a simple “this chart shows industry salaries favor the employer by some percentage when the following question is asked” during training.
A single , unprepared lemon would not be charged GST
What’s your take—would you trust a simple, bespoke agent, or would you feel more secure with a well-established solution?

No, and I have specifically tried to push against monitoring offerings like Datadog and Dynatrace, especially in the case of the second because running OneAgent and Dynakube CRDs are doing things like downloading tarballs from Dynatrace and listening to absolutely everything they can from processes to network.
Before you start adding all of that make sure you have customers like parent poster.

For example I monitor disk space, RAM, CPU and that’s it for external tooling.

If any of that goes above thresholds someone will log into the server and use windows or Linux tooling to check what is going on.

I mostly monitor services health check endpoints so http calls to our own services. If network is down or shoddy response times of the services.

So all in all not much of servers itself.
7. Whereof one cannot be full as a raging bull, thereof one must be dry as a dead dingo's donger. —"Bruce" Wittgenstein

https://www.youtube.com/watch?v=CGksgZKecKE
Predictability and Music: Why You Never Like a Song on First Listen (2023)
For those who don't want to piece together things from twitter, the summary is this:

Discord attempts to find nvidia-smi libraries by launching series of powershell scripts. Those scripts are really terrible with a lot of if-else logic based on hardcoded strings and environment variables. They are also apparently fairly slow and scan over 800 directories.

Honestly, this is just yet another example of Discord not really developing their software well security-wise.

Another example bad security example: 2FA implementation is not really that secure since you can continuously ask for backup codes to be sent to your email which you presumably open frequently on the same PC (there is already automated malware that will abuse this and circumvent your 2FA via newly generated backup codes).

Yet another terrible implementation: QR codes. There are rampant phishing attempts that work fairly well because they trick people into accepting invite to some discord server. Once you are in it then you are presented with a "anti-spam/anti-bot" verification check which asks you to scan and confirm a QR code. Little do majority of people know is that it is a login QR code and once you scan that then the hackers will just take over your account in less than a second as all this stuff is easily automated already.
> Python chooses to provide (3) because Python is slow anyway so why not at least provide the least surprising container

I believe this misses quite an important bit of history. Python's dict retains key creation order since 3.6, and the behaviour was made official from 3.7 onwards. But before that, the keys were in unspecified order. Not random, because the order was stable: if you iterated through the same dict twice within the same process, you got the keys in the same order.

The property of retaining key creation order was a side effect from the underlying implementation. In the 3.6 release, Python switched over to their new dictionary implementation, lifted from the PyPy project. From what I recall, the reason for the change was that the new implementation had a notably lower per-key overhead. That decrease in memory use resulted, I believe, in the slightly faster performance as well. Order retention came "for free".

Personally I believe that order retention as a default property is a mistake. Now, I admit that OrderedDict semantics are often more convenient, but they break from the expected dict/map semantics with other languages. And since we are stating our opinions, in my mind Go choosing to forcibly randomise maps' key traversal order is a good safeguard. It guarantees that no-one can even accidentally depend on key iteration order. (Yes, I have seen production outages thanks to someone's code implicitly relying on key creation/traversal order when processing RESTful payloads.)

As should be apparent, I disagree with the current behaviour being "least surprising".
Yeah, not sure. Rendering first to an HTML5 Canvas, but how to render CSS, etc. to a Canvas is beyond me. Maybe just a lot of custom CSS/HTML to give the appearance: https://www.vcfmw.org
Idiosyncrasy Credit
Password resets should only be performed if it is suspected a password has been compromised.

Complex passwords also should not be required

NIST Special Publication 800-63B – Digital Identity Guidelines.

https://www.netsec.news/summary-of-the-nist-password-recomme...
Seems like there's a few of us in Bend. Anyone interested in a meetup? Hell, maybe at Blockbuster? :)
Just want to thank you for using actual low resolution rendering, and not pixelated-looking objects on a high-res surface. This looks great!

The way smooth parallax and sometimes different pixel sizes (!) show up in “retro” games is a huge pet peeve of mine.
Not really, with the native app you get things like Rich Presence and faster calls.
A very good example how C wasn't as portable and as high performance back in the 1980's, as many nowadays think it was.
> Let's be honest, 24 years of this shit and I still can't write bug free software.

Considering how important SWE is today, our particular mix of recklessness and incompetence with almost no regulatory oversight feels increasingly insane, compared to the hoops a physician has to jump through to get a license and the fairly small amount of damage they can then do (given the 1-on-1 nature of their work).

I guess the remedy is that software is still better than no software, but yeah, we would have to be fairly delusional to not see that something could be a lot better here and we need all the help we can get while the stakes are getting much higher.
Ah, you're proposing to remove US credit card customers' statutory right to those chargebacks except if they opt into a surcharge on a per-transaction basis.
> just subtracting the inverse of frame rate from the current frame's timestamp

Variable frame rate (VFR) videos break this approach. It might seem like an esoteric edge case, TV and movies aren't VFR after all, but VFR is extremely common in videos from smartphones.
Google is large enough that you will hear plenty of opinions on this. In my bubble (Zurich, Security) the overall sentiment seems to be "I trust Google handling my data way more now compared to before I joined".
> I think technically he’s correct (I haven’t worked on media decoding code, but I understand how common video encoding formats work).

He’s technically simply wrong (I have worked on media decoding code, hell I’m working on a related project today). His player supports seeking back by 10 seconds or whatnot, but he insists that somehow to implement precise seeking to the previous frame, you need to seek from the very beginning of the video, no two ways about it:

> There is not a slight technical difficulty. On a logical level, this feature is algorithmically impossible, except for the extreme: You can decode all frames up to the previous one. But this would be far too slow for anything except really short videos.

It’s obvious bullshit, if you encounter one of those pathological videos (that don’t really exist except in his mind or in some test suites) you just give up after a reasonable amount of time, same as how you give up if you can’t seek back ~10s in a reasonable amount of time.

And players do give up seeking all the time already, not just on these hypothetical one-I-frame-per-hour videos, but real world videos with messed up pts/dts with no reasonable way to go back a short interval.
> Sounds a lot like BM25 weighted word embeddings (e.g. fastText).

If you're interested in this topic, I wrote an article on this method back in 2020: https://medium.com/towards-data-science/building-a-sentence-...
Have Twitter quitters found what they are looking for on other networks?
Because languages are more then just syntax, so ofcourse You'd rather have your favorite language copy some syntax you like, then be forced to switch entire stack to another language just to be able to use that syntax
> The game returned to its roots, then iterated on them

How long till Wow Classic: Classic?
The British have had military satellites since Skynet 1A in 1969 [0], although these historically supported comms rather than ISR.

[0] https://en.wikipedia.org/wiki/Skynet_(satellite)
Not condoning the method, but I can take a good guess as to what they're doing: They're trying to find out how many NVENC streams are in use on the card / whether any are free

Which isn't important for general use but is relevant if you're screen sharing/streaming your display
They will "work", ie give a prediction, it's simply that it will have a pretty low probability of being the correct answer, which is a consequence of the highly limited context.

IMHO that doesn't make it nonsense, but maybe you are reading something different into the purpose of this test to what I am.
Yeah C does not work well on these odd 8-bit ISAs. Pascal, basic, and PL/M (and fortran?) seem to have been way more common and Pascal environments on these were really on the edge of what the contemporary hardware could handle.
You most certainly can. I work for a US company where when you're out on (paid, six month) parental leave, your system access is disabled.

They don't do that for normal PTO but it's certainly feasible.
> 68.3% of SWE-bench samples being filtered out due to underspecification, unfair unit tests, or other issues.

I have a feeling that the filtered samples better represent actual issues in the real world. How would "AI" even start with issues like "product sometimes runs slow" or "it crashes 1/20 times with this vague error message". I think my job is secure for the moment. I would love AI tooling to better sort and categorise issues though. In a rush to "replace" people I think AI companies are focusing on the wrong things.
You might be overusing Vim visual mode
3ds is usually done with inapp confirmation these days. Your bank is responsible for the experience.
The Myths and Lore of the Milky Way
Do we have good reasons to suppose this isn't a lie?

Absent that, I would expect the 2-3x on what's made public.
How could JSX work natively?
Indeed... OutOfHere is correct competition is good for efficiency.

With bad governance all the money in the world won't produce efficient public services.
A lot of the debate has been "we need more", and not "how you spend it"?

With a lot of information technology available the government spending data should be combed through and the bad decisions should lead to firing and jail time for corrupt officials.