skysight-inc/HackerNews huggingface dataset:
RFIDs are rarely certified as possession factors, you need an EMV card for that. TPM chips may protect readers. Depends on reader/card ratio, if it's feasible.

Clones/double use/double spend must be caught on reader/server anyway. One can pass a card to another person, and you do not want two people to enter building with the same card.

I implemented double spend protection by introducing a simple operation counter. If the sequence of operation IDs is not continuous, card is blocked. Clones were added to block list within minutes. It was good enough for the use case. Again, MiFARE is very cheap, so tradeoffs are expected.
I think OOM kills is an important one, especially with containerized workloads. I've found that RAM used/limit metrics aren't sufficient as often the spike that leads to the OOM event happens faster than the metric resolution giving misleading charts.

Ideally I'd see these events overlaid with the time series to make it obvious that a restart was caused by OOM as opposed to other forms of crash.
The application seems to be back in the Play Store. It is a shame that Google can pull these kinds of behaviour without any repercussion...
That's the result of being successful for wide non-technical audience. The signal over noise would approach zero if everybody could create a bug report when something does not work as they wanted.

Have you tried to create a meaningful bug report (not feature request) that has not been previously reported and were rejected? If so your complaint is valid. I haven't so I don't know.
The flaw is unwritten step 0: The goal is to make money not run a startup.

A startup is a means to an end.

Borrowed money gets you there faster with less risk to self.
Is 90% of all art "crap"?
I rely on a heuristic approach which is to track the rate of change in key metrics like swap usage, disk I/O, and memory pressure over time. The idea is to calculate these rates at regular intervals and use moving averages to smooth out short-term fluctuations.

By observing trends rather than just static value ( a data point at specific time) you can get a better sense of whether your system is underutilizing or overutilizing swap space. For instance, if swap usage rates are consistently low but memory is under pressure, you might have vm.swappiness set too low. Conversely, if swap I/O is high, it could indicate that swappiness is too high.

This is a poor man’s approach, and there are definitely more sophisticated ways to handle this task, but it’s a quick solution if you just need to get some basic insights without too much work.
Just to expand upon some experiences with some of the listed software.

The architecture is quite different between Thanos and the others you've listed as unlike the others, Thanos queries fan out to remote Prometheus instances for hot data and then ship out data (typically older than 2 hours) via a sidecar to s3 storage.
As the routing of the query depends on setting Prometheus external labels, our developer queries would often fan out unnecessarily to multiple prometheus instances. This is because our developers often search for metrics via a service name or some service related label rather than use an external label which describes the location of the workload which is used by Thanos.

Upon identifying this, I migrated to Mimir and we saw immediate drops in query response times for developer queries which now don't have to wait for the slowest promethues instances before displaying the data.

We've also since adopted OpenTelemetry in our workloads and directly ingest otlp in to Mimir (Which VictoriaMetrics also support).
> I even use it when an image I saved ends up as .html for some reason and then use the info screen to determine the real extension it should be so I can rename it

If you’re on Linux on macOS, you’ll have access to the `file` command-line tool which can do it effectively. In a couple of lines of shell scripting you can even have it auto-change the extension.

https://en.wikipedia.org/wiki/File_(command)
So they are starting to require the additional security now? That was my initial question.
Manchester is giving London a run for its money
I absolutely loved Thompson's blog. He hasn't posted in a decade, and that makes me sad. I learned so much from that. I used the term "mechanical sympathy" all the time now when speaking to starting developers and trying to explain how to write fast code.
You just need to export it using QR codes. My keys were paginated into 11 QR codes when transferring devices.

They now have cloud sync, which I don't really think is a good idea. But it solves your problem of migrating devices. However I've already moved on to Aegis, because I'm done fling scrolling through my Mahabharata of TOTPs to find the correct account.
>high-censorship, high-freedom societies like Germany

When the police storms your home (the wrong one at first, too) because you called a minister a dick on Twitter, that's not "high-freedom".
An AI could alter the course of Tibet
The EU GDPR has requirements for processing (including storage) of personal data (much larger scope than US PII, but still nowhere near all data) in jurisdictions with legal adequacy for data protection.

It’s not quite data sovereignty like India’s regulations around payment transaction data but it does theoretically limit where you can store EU personal data.

You can find the current GDPR adequacy list at the EU’s EDPB site. https://commission.europa.eu/law/law-topic/data-protection/i...
> So, by your calculation, the tunnel has the capacity of 1/4 of an old subway and 1/10 of a cutting-edge subway.

Yes, if you use it with 4 passengers Model Ys spaced 2 seconds apart. There is nothing in principle that precludes using 8-16 minibuses (2-4x increase in raw tunnel capacity) or even linking multiple such cars to form a train, building essentially a rubber tired subway.

The point is, the tunnel diameter is not limiting throughput. It's a flexible system where you can mix multiple types of vehicles with various density, comfort, price points, number of stops to destination etc. In the extreme, you can have multiple station designs, so that a limited number of larger stations can handle the multi-cart trains, on a fixed schedule and stopping in every such large station, while a small number of lower capacity stations and spurs can handle the luxury point to point cab service in Model Ys or similar that will take you from your hotel to you casino or airport.

Essentially, Loop has its own private transport infrastructure and they will search a mix of vehicle types and station designs and locations that will maximize revenue and infrastructure utilization. It's mind boggling that some call it a failure when it's only beginning to create the system and unlock the network effects.
From the article:

> (...) but if it goes wrong you might end up involving them in the failure: “Hey, I asked that team and they said it was fine.”

I've seen this play out in teams. The part that's omitted is how some unscrupulous team members set up their team members for failure.

I've personally witnessed a case where a team member went out of his way to propose a rewrite of an important feature and reached out to a couple of senior members to do a system design review and provide feedback. They initially told him the design was good as is and required no feedback and change, but once the project was about to be deployed they suddenly became very opinionated and critical of each and every tiny detail, including on the need to rewrite the component.

There are plenty of good reasons why some FANGs enshrine the need to be thorough and extremely critical of projects at the design stage but everyone is obligated to commit to the project once it starts to be implemented. Teams need to commit to projects after they are prompted to give their opinion during the design process, and once their opinions are heard there should be no room for weaseling out and go the backstabbing route to throw everyone around under the bus. There is a time and place to provide feedback, and if you're prompted to deliver your feedback then you should not pretend the project does not reflect your input.
I was more hinting at this books like "Patterns in C" etc. But a more complete use/abuse of zig meta programming would also be nice. Especially for people that have consume more generic code than produce generic code..

Off course one can just hunt down the advance material looking through discord, read the bigger zig codebases etc but having it all in one place a couple of books that describe and explains is just way better to level up and get rid of the skill issue :)
I'd go so far to say 90% of everything is crap. Food, music, movies....most of it is crap.
that's a matter of terminology.

i'd argue that what you describe as "host" is rather a management vm which is allowed to talk directly to the hypervisor. though, through this privilege is most likely able to compromise it and all other guests.

but this doesn't really matter as the attack vector we are talking about already has dma and does not care about any of that.
I left over ten years ago and it's hard to understand that perspective. Back when I was an SRE (~2006 to 2009) there were only one or two monitoring systems (which didn't overlap, so you could argue there was one) and a handful of config languages. Compared to anywhere else Google had military levels of discipline and order.

> Deployments were infrequent, unreliable, and sometimes even done from a dev's machine.

Deployments were weekly and done from a dev machine because that way someone was watching it and could intervene in case of unexpected problems. Some teams didn't do that and tried to automate rollouts completely. I could always tell which products weren't doing enough manual work because I'd encounter obviously broken features live in production, do a bit of digging and discover end user complaints had been piling up in the support forums for months. But nobody was reading them, and the metrics didn't show any problem, and changes flowed into prod so the team just ... didn't realize their product wasn't working. There's no substitute for trying stuff out for yourself. I encounter clearly broken software that never seems to get fixed way too often these days and I'm sure it's partly because the teams in question don't use their own product much and don't even realize anything is wrong.
> Its only there to prevent the user from accidentally making changes to the system that they didn't intend, but it provides no security except from your own mistakes

If you somehow bypass UAC and gain the Administrators-level access then you already run with Administrator level privileges in the first place, just with a medium mandatory level.

A rope on the edge of a cliff isn't there to prevent you from falling, it's there to notify you what you should be careful. Rope works. UAC works.
I think this is a chance for me to go somehow off topic and ask people how they handle combining the monitoring of different logs one place. I think there are many solutions but must of them gear toward enterprise solutions. What do people use for poor's man (personal usage like selfhosting/homelab) approach. That does not require you to be VC funded or takes a lot of time to actually implement.
This is true from my very limited start up experience. Our start up was also self-funded. There were times when there was work left on the table, because we couldn't afford to hire an extra person to do the work, because we didn't have the cashflow to pay them for the first few months while they came up to speed.
I believe PHP is one of the (much) earlier languages with them.
Climate change is a terrible analogy because:

a) everyone is impacted by climate change, not just the customers who gave their data

b) climate change has very real consequences for people
> First, assuming that the keys iterate in the order they're inserted, the cliche problem.

Author here.

I never assume that hash maps can be iterated in the same order as the insertion in any language, however the fact that in Go each iteration results in a different ordering is surprising.
Why are you sharing Marc's app or are you Marc, justdev. Interesting
Digital Time Travel for Real Life Events
> …and when someone asks for your permission (probably because you’re in the person’s management chain), one response could be: “you don’t need my permission, if you think it is a good idea after getting input, go for it. If it turns out to be a bad idea, share your learnings so we don’t repeat the same mistake.”

That's all fine and dandy, but once you decide to weasel out of giving your input once asked then you lose your right to feign ignorance and surprise about hypothetical "mistakes" because you too failed to spot them, let alone address them. You had your chance to avoid a mistake when the mistake could be avoided. That was why your input was requested. If the mistake was still made it was because either you were not able or were not willing to spot them, so you have no right to point fingers at anyone but yourself.

If there's anything ruining teams, it's the sociopaths that try to get ahead by setting up their team members for failure and backstabbing them while feigning ignorance.
It was stable for any one run :D

Is this just not human desires projecting extra requirements?

You say you don't care about order, but then you clarify that you do want them to be stable between runs.

Those are not the same thing. To a computer without judgement, any order is fine. The first run is somehow blessed by you, so any runs after seem off or weird. If it didn't actually matter to a computer, it wouldn't care if it was different each run.
What do you hate most about Terraform?
It isn’t phone dependent. You can use the website too, if your bank has the option (mine does.)
So sure they can very reliably and safely deploy... It just doesn't feel like they've actually deployed anything interesting in 5+ years (except maybe some AI stuff). From the outside it looks like the company is perpetually refactoring

history's biggest yakshave...? not surprising for a programmer-run company

I'm sure it still matters to bring down the power and server bills. But one can't help feel like they could be doing much more
No, that culture started turning against big tech when Microsoft and Oracle started very brazenly abusing their market domination in the late 90s.

The culture turned on Google around the same time Google lost their innocence and dropped the "Don't be evil" clause (note the dropping of that clause was not the cause, just one of the symptoms).
I think you're missing the fact that interest can be piqued by a good video, it is not predecided if someone is interested in a particular product or not
When I tried to sign up for Hotmail account, the challenging step I have to solve isn't friendly for my impaired eyesight.
I believe I've got a better-than-chance feel for when a HN submission might hit the front page ("public") or will go/stay down in the long tail (giving opportunity for kicking off the shoes in "private" convos) but admit that when I mess it up it's usually spectacularly wrong.
I've got 2/15, so worse then random choice...
I guess partly because English is not my mother tongue.
I didn't want to editorialize - but happy for dang to change the title
"It's designed to capture 5km-wide spot scenes on the ground and have a best resolution of 90cm."[1]

Some sample ~90cm-ish imagery from Airbus Vision-1 (20km swath 87cm resolution) is available at [2].

It looks like it'd be used for knowing when a warship is in port (but perhaps having to guess which one), or when a warship under construction has been floated, or when a large military construction project has started or completed, or when ground for a new military forward operating base has been cleared, etc. Then more expensive higher resolution imagery could be ordered if it were worthwhile to do so.

[1] https://www.bbc.com/news/articles/c1d77yq9zz2o

[2] https://intelligence.airbus.com/newsroom/satellite-image-gal...
It probably _has_ been sent, it just hasn't _arrived_ yet!
Nowhere in the article says 'hashed' passwords, so I presume plaintext (!!!) passwords were leaked.

That's 100x worse than all the other data combined for two reasons: it can be devastating for users, and it's easily preventable (by not storing them in plaintext in the first place).

EDIT: Someone suggests stored passwords were hashed [1]. Hope they're right.

[1] https://news.ycombinator.com/item?id=41278855
The validated for their intelligence thing is a problem. Googlers in the early days constantly told each other that they were the "smartest people in the world". I noticed this immediately after joining and found it quietly troubling, because there's all kinds of smart and the interview processes were really only selecting for skill with computers or maths. A lot of Googlers wouldn't survive long on the streets or alone in the wilderness, as these require different kinds of smart to what they had. Some colleagues were troubled by those statements for other reasons: they didn't personally feel like one of the smartest people in the world, and this led to imposter syndrome. But we said nothing because, hey, the company was doing great and people did seem pretty smart overall back then. Plus nobody wants to call themselves out as an imposter, and Google had a certain degree of institutional humility to it as well. The company was very much about empowering everyone, no matter who or how "smart" they were.

What you're seeing from Google in the last ten years is a maybe predictable consequence of that culture, where some Googlers really do seem to think they're generically much smarter than everyone else, about everything. You started to see mass scale social engineering via manipulation of search results and products, driven apparently by the immense faith they have in their own wisdom. Is there any claim Googlers cannot immediately resolve as true or false given nothing more than a few ML models and a team of contractors in LatAm? Apparently some of them think that's all it takes.

This quasi-misanthropic culture is miles away from the trusting "make it universally available and useful" culture the company once had, but the seeds of that culture's end were clearly visible even at the start. You can't constantly validate people by telling them they're super smart before some of them come to actually believe it, and that leads naturally to the belief that if they're really the smartest people in the world then surely that means they should be running it.
There is a Rust Nation talk one hour long about how serde macros work.

That is how simple it is.
People using Amazon is not evidence that humans don't care about the suffering of others. At the other extreme, neither was colonialism.

In the first case, what you're looking at is unawareness, stiff competition for limited attention and care budgets, and a diversity of opinion with respect to the evaluation of tradeoffs for this specific, micro-topic. People who labor in sweatshops that provide goods for Amazon want those jobs because its better than the alternative. They don't want those conditions, but that's a problem that is not going to be fixed tomorrow, whereas they have to worry a lot about their tomorrow. People making decisions within that complex matrix of forces is not evidence that Amazon buyers don't care about other people. It's evidence that the world is complex and that there are no solutions, only tradeoffs.

Colonialism and or conquering and enslaving was how the world was run by all parties everywhere since the beginning of time. Even Ghengis Khan was talked out of genociding the Chinese by someone who admired Chinese society and suggested that he would be better off taxing the skilled artisans of China instead of genociding them, as he usually did to any society that defied him.

Are you saying that throughout all historical time , there were no moral people until the current crop of modern leftists ? Or that morality was the sole possession of a tiny vanguard ? If so, then you're swimming against a strong current and I wonder what it would take, and what you'd be willing to do, in order to perpetually force that current to flow in the other direction.
You might have been told that but there is no way jail is the first thing a judge will issue. First comes an order, then fines, lots of them. A company will only get anyone arrested if they willingly ignore judicial decisions for a very long time. The only path I see for a company deciding to keep their "compliance" department away from the country would be if they're not planning on complying at all. Judges have a lot of power but they're still bound by process.

Brazil is a conservative leaning country with neoliberal aspirations that looks up to the US (florida specially) like the paradise on earth. Judges are friendly to business and it takes a lot to piss them off if you're part of the circle (rich). These examples from twitter are a niche where the company is caught between the politics of the supreme court and what it sees as threats (some times correctly, sometimes too much and dangerously overbearing).

Supreme court judges are not elected, they are appointed by the president. As a tradition during the years where the current party was in power before Bolsonaro the court itself made a list of candidates that they voted for and the president was asked to pick from the top three (as a request, not binding), Lula and Dilma always picked the top candidate to avoid any showing of interference. President Temer picked the second choice and Bolsonaro picked someone outside the list (twice) and that tradition will likely die down because of it, Lula already picked from outside the list too now.

Another fact people seem to ignore/disregard, the Brazilian STF cannot just issue orders without a request from the prosecution or lower courts. An example where Judges exert the god like power is on lower courts where the prosecution aligns politically with a judge and work together like they did on the Lula trial and ended up overthrown by the supreme court for it. If they do it for someone less popular, they get away with it.
Without semantics, our programs are nothing.
I'm desperately trying to figure out this response, and I can't.

Meanwhile: https://news.ycombinator.com/item?id=41280221
Leapfrog – Auto qualitative research analysis
Hey Hacker news,

Would love to hear some of your thoughts on my personal pursuit to make research practices less manual.

I've noticed that as a ux researcher I ended up doing a lot of manual labor. As I found it incredibly draining that all that manual work got me out of the flow of theory building. I am trying to declutter the synthesis process with this project. A couple of ideas include transcripts, auto-coding, clustering.

I am unsure if there are any people on here that work as researchers, but any feedback is greatly appreciated! Do let me know if this resonates with you
Macs are PC's, you can also make a hackintosh.

EDIT2: if you consider an ARM board that you can install custom OS on as a PC – admittedly, bit of a stretch – then you can grab UGOOS AM6B plus / AM6 plus / Minix u22x-j max

install CoreELEC on it and enjoy DV.

https://github.com/CoreELEC/CoreELEC/releases
https://discourse.coreelec.org/t/dolby-vision-for-minix-u22x...
Recommended settings: https://justpaste.it/divn9
Installation instructions 1: https://discourse.coreelec.org/t/guide-s922x-j-ugoos-am6b-co...
Installation instructions 2: https://www.reddit.com/r/PleX/comments/1ajszn9/remux_lovers_...

EDIT: I forgot that for Windows playback, you also need the HEVC and DoVi codec packages.

https://apps.microsoft.com/detail/9P9ZH5FL1BFK
https://apps.microsoft.com/detail/9PLTG1LWPHLF
https://apps.microsoft.com/detail/9nmzlz57r3t7
Show HN: Paindrop: A Pinboard/Raindrop importer that keeps public/private/unread
I wanted to move my bookmarking history out of Pinboard and into Raindrop, but Raindrop's importer doesn't retain the public/private or unread status of pins. So I wrote an importer that seeks to do that.

https://blog.davep.org/2024/08/18/paindrop.html has some background on the project.