skysight-inc/HackerNews huggingface dataset:
Former pentester here. Though I’m largely sympathetic with Goodwolf, note that releasing actual data is almost always a bad idea. It’s why bug bounty programs have limited scope.

The city seems upset that he shared data about ongoing investigations and undercover police reports. Depending on what exactly he shared, it’s hard to fault the city for that. It doesn’t really matter where the data currently exists; grabbing it and handing it off to others is obviously not a good idea.

If his goal was to prove to the reporters that such data existed and was available for download, he had many options that didn’t require accessing the data: screenshot the forum posts, send links to the reporters, detail what kind of data was there without actually showing any of it, and so on.

Now, if that’s what he did, and the city is still reacting this way, that’s obviously abuse. But it doesn’t seem unreasonable to order someone to stop disseminating data about ongoing investigations to reporters. Would you want your private cases to be more widely spread?

I’m really sympathetic to him, because this is an easy mistake to make. Before I got into the industry, I thought that this was white hat hacking; it’s obviously good that he’s spreading awareness about the breach. But how you do it really matters.

(Caveat: I worked in the industry for about a year in 2016, so maybe things have changed. But I’d be shocked if distributing actual data from any breach was condoned by anyone who works as a pentester, even today.)

> the city says Goodwolf is threatening to publicly share the city's stolen data in the form of a website that he will create himself. Goodwolf previously told 10TV he does plan to set up a website, but it would only allow people to see if their name was part of the data breach.

This isn’t the same as setting up a site to see if your password was compromised. It could let anyone type in someone’s name and see whether they’re a witness in a criminal investigation.
What people? Do you have source for that?

Anectodal one: I liked it.
Look at the historical rate of obesity in Europe. Following the same trajectory as the US, as far as I can tell. Does deregulating advertising of sugary cereals also explain that?
Was looking for that too. The only way I found out was installing it, create a call graph, and the first click took me to a payment page. $19,95/month iirc
I too would prefer to have this information upfront.

Also, not being able to click past the first layer in the free version is a bit too limited in my opinion.

Sounds promising, but having to fill out my payment details for a trial version is a a hard no for me.
My undergrad senior year thesis project was exactly this, back in 2011 - to use a solar concentrator to generate electricity. When we started the project, we thought the economics were cheaper than solar PV. At the end of the year, solar PV had already halved in price (this was when Germany and China were doing subsidy wars on solar).

Solar concentrator electricity must be super expensive compared to PV by now.
Obesity is a complicated problem and we can’t blame corporations alone.
They introduce economic incentives. :)

By way of example, a little over a decade ago a famous online streaming company used to upload all of their video masters for transcoding. This process involved a huge upload and a huge workload, followed by a significant drop in activity.

The problem was that AWS had to provision for peak usage instead of average usage. This resulted in a situation where the peak-to-average ratio was very high for just one or two customers.

To address this issue, the solution was to incentivize these customers to spread out their workload more evenly over time, at least until they were no longer the largest driver of peak/avg.

This is also why things like Reserved Instances and Spot Instances exist.
Please come to Vermont, there is a lot of undeveloped land, ample water, and we need people.
The perspective is significantly different when you're both the user and network admin. From your vantage point, you're picking the lesser of two evils.[1] But there's a third option that keeps you in even greater control, yet it's increasingly becoming more onerous to preserve. It's something like a collective action problem.

[1] Or at least you think you are. If your employer is running provisioning and "security" malware, I wouldn't take any bets on what they're logging or not logging.
That is also a fantastic comparison point. The same ideal is part of the idea behind UBI replacing the social welfare bureaucracy.

I found this documentary "Freedom to choose" to be really interesting: https://www.youtube.com/watch?v=dngqR9gcDDw&list=PLt27lKoC5L...
Apple, Nvidia Are in Talks to Invest in OpenAI
That's good, then. Honestly an integer rect for the viewport is, "not wrong."
I'm not sure it is burn out for me. I think part of it is it feels less special. Maybe that's selfish or delusional on my part. Basically, I used to feel like I was doing something at least somewhat unique. Now, via Youtube and Github, I see that everyone is doing the same thing and repeating the same stuff so I end up with a "why should I do it if it's already been done" feeling.

It's similar to blogs. I ran blog since 26 years ago. Before Facebook, posting and sharing on the net felt special. After Facebook, everyone was posting so blogging was no longer special.

I get that doing it for the fun of the doing itself is a thing. Cooking might be the perfect example. Yet I have a similar problem there. More often than not I learn that a recipe is too much work and it's just better for me to enjoy and appreciate that someone else is willing to make it professionally, and better. One motivation is dishes I can't find at local restaurants. But I still often come to the same conclusion. That it's too much work and I should just wait and really enjoy the dish the next time I'm in a place where it's possible to get it.
Do you have any written posts or documents about this language and your design decisions?
yeah, probably "Government Employees" would have come across clearer.
See: the Forth Estuary.
Hi, author here. Just want you to know that there's a human being with thoughts, feelings, hopes, etc. on the other side of that article. My experience in life isn't worthless. While it doesn't sound like it was valuable to you, I feel like it might be valuable to others in the same position. So if you have some constructive criticism on the writing - I'd be grateful - but if all you have is vitriol and lack of empathy, just move on.
actually, some pastes give no text. Then you try paste and match style and get the text... with no newlines. sigh.
This comment itself is a dupe of https://news.ycombinator.com/item?id=41402395
> If AI can write better than the majority of their peers, they need better peers.

Have you seen college-level writing at most US schools? It's pretty abysmal if they're not some sort of English major. And the AI doesn't have to write blandly if you prompt it well.

The overwhelming majority of Americans I've met in education, business, and everyday life cannot write well. It's just not something that's emphasized in our educational system. Hell, education itself isn't very emphasized...

> And, can you be a digital native, and not program at least some?

What do you mean? Digital native just means they grew up with smartphones, social media, apps, creators, influencers, etc. And in the workforce, there are many digital professionals who don't necessarily code: management, UX, sales, marketing, PMs, QA, 3D artists, etc.

Coding is just a particular skillset involving tech, but there are rich YouTubers, streamers, musicians, and whatnot who've made a living despite not having written a single line. I think coding is just going to become another trade skill, while the ability to use digital media for mass persuasion remains as powerful as it's always been... the gifted charismatic extroverts don't need to code, they just need to communicate. But very little effective communication happens by long-form writing anymore. A video or tweet goes much further.
I feel so nostalgic when these old places close up shop. I remember visiting AnandTech in the late 90s when I was still struggling to install Linux. Back when brick and mortar software stores were still a thing, staffed by like minded nerds who were happy to guide a young one and share knowledge.

I can't think of many other sites that have been around this long. https://www.bluesnews.com/ for gaming news comes to mind. It's been going since 96.
Being older you need to factor in healthcare. I didn't when I moved remote, and it was a big mistake. I firmly believe my mother died of cancer because I convinced her to move to a rural local that didn't have the quality of cancer care that she would have had access to if she stayed in Santa Cruz. My advice is pick a touristy area that has enough money/population moving through to have a bit better medical system than your average remote area. Definitely buy a lifeflight.org membership every year if you go the Montana/Rocky Mountain West area.

I also recommend finding a town that caters to rich tech people who want to live this remote fantasy, there are quite a few of them. It's so much more enjoyable than the actual remote living towns that no one wants to be in so they're just an aging population of dead enders and people hooked on drugs. Or at least an area with a University nearby so that you can go somewhere with some energy/vibrance and the latest cool trendy food. The realities of dead end small town/no town america can be pretty soul crushing.

Disney style curated small town america catering to the wealthy can be a pretty great place to live and have energy/vibrancy. Plus you'll have a good revolving supply of new people cycling through thinking they want to live the lifestyle (before the realities set in) bringing in the latest trends, starting food places, etc. Just make sure they aren't the 'escaping from California' types blathering about how great it is to be in a 'free' state and be away from commie land. That toxicity can overload a small community quick. You can get away with 'individualists' in a larger community where their actual freeloading on society is subsidized by normal people, but with too big a ratio basic civilian institutions get paralyzed for years until people remember/relearn society requires a social component.
They might have a lot of tailgating in and out, which makes badge info unreliable.
I don't think the right take away is to not trust science. But a degree of checking for yourself and a certain suspicion of brand new results that are surprising isn't completely misplaced. A great way to learn this is to buy an engineering book from the early 1900's, you'll find chapters that were completely debunked often, not just evolved. We seem to forget this and assume all we know now must be true, but we also accept that even 50 years ago they believed wrong things and put them in engineering and science books.
IME, "office politics" are only an issue in companies that have a competitive (toxic) culture. I've (very thankfully) only worked in one of those so far and I lasted there less than a year.
> Many more people would have survived Covid.

Accurate, I periodically think about the standard here

Over 1 million Americans are in the reported death tally, this is attributed to a failure of a lot of things under an administration's watch

But if it was just 100,000 would the criticism or consternation be any different? if it was just 10,000 and matched the seasonal flu would it be any different? if it was just 3,000 matching a tragedy of the magnitude of 9/11 would it be any different?

if it is to be different, what would the threshold be
K9Crypt – Secure and Encrypted Messaging
We are happy to announce an exciting new feature: You can now create public and private chat rooms on K9Crypt!

Public Rooms: Create public, easily accessible chat rooms. Communicate freely with your friends, family or the whole community. Share your thoughts, ideas and meet new people!

Private Rooms: Looking for more privacy and security? Private, password protected chat rooms are for you! Communicate securely only with people you invite and share the password with. Discuss sensitive topics freely and protect your private information.

All your chats are fully protected thanks to our secure, encrypted messaging infrastructure. It's up to you - public interaction or private and protected chats?

Visit K9Crypt now, create your own room and enjoy secure communication!
Anyone have stats on what percentage of households living in a house/condo with a garage also own an EV? I see from:

https://www.edmunds.com/electric-car/articles/how-many-elect...

...that there are about 3.5 million EVs that have ever been purchased (since 2015), and ~700,000 PHEVs, for a total of 4.2 million. Looks like there are around 129 million households [0], and 70% of Americans live in a single-family home [1]. So it would seem that ~5% who might have a garage, might also own an EV (give or take).

[0]https://www.statista.com/statistics/183635/number-of-househo...

[1] https://www.builderonline.com/money/economics/80-percent-of-...
$39/month from the top chinese vendors
I see the same. All this complexity to handle a few requests/second... but at least we can say it's "cloud native."
Well, government is being government. I never think bureaucracy could solve an issue when they could just hide it.
Ask HN: Is being concerned about privacy holding you back as a developer?
When I observe the most innovative advertising companies on the internet, such as Facebook and Google, their apparent disregard for privacy is striking. Similarly, my experience suggests that the vast majority of the public, with the exception of developers, are generally unconcerned about privacy as long as they perceive a tangible benefit in exchange for compromising it.

I have numerous software product ideas, but I often hesitate to pursue them when I envision how they might function in the real world. Privacy concerns prevent me from using such products personally, and this hesitation extends to my willingness to develop them.

As a developer, if you prioritize both your own privacy and the privacy of your customers, does this concern prevent you from creating exceptional applications?

Many financial applications offer valuable insights into personal finances, but often at the cost of invading user privacy.These apps often collect, analyze, and sell user data to provide these features.

Despite this, millions of users willingly share their personal financial information with these apps, seemingly unconcerned about the potential consequences, as long as they receive the desired features in return.
Is privacy a luxury that only developers and technology professionals can afford?
I agree with you about the latter half of the sentence. But no business should be punished simply for being small.

I'd go so far as to say we should create laws that err on the side of "slightly favor the little guy" because, as I think we all know, big businesses have armies of lawyers, PR firms, and PACs that bend reality to their whims, whereas little ones mostly do not (though in theory they could band together for the same goal it's unlikely to happen if only for administrative issues).
> Though substantial progress was being made, Pfizer decided to pull support ... [t]he “gliptin” class of drugs peaked at annual revenues of around $10 billion and remains a major oral therapy for type 2 diabetes.
It's heavily used by a ton of people in Ukraine, which is probably quite unwise given the strong circumstantial evidence for it being compromised by Russia.
I was just taking a look at screen's source to try to figure out how hard it would be add a feature I want. I want an option when using screen to talk to a serial port to reverse the order of the bits in each character.

Does anyone know of any readily available serial port reader/writer for Unix and Unix-like systems that already has that?

I realize it seems like a really weird thing to want. I'm going some things with a small microcontroller (ATTiny 85). It does not have a UART, so right now when when I want to use serial for debugging I just bit bang it. The MCU does have a thing they call Universal Serial Interface (USI), which provides hardware support for shifting a byte in or out over a GPIO pin timed by a clock. USI is basically building blocks in hardware for the lowest level parts of serial communication. It does the things that can be hard in software because of timing, leaving the software to deal with the higher level aspects of the protocol.

I want to switch from bit banging to USI. Unfortunately when USI shifts a byte out of its send register to a pin, it shifts from the most significant bit side of the registers. UART protocol, which is what computers expect, wants the least significant bit first, so you've got to reverse the bytes before loading them into the USI's output register.

(They probably made USI MSB first because the serial protocols most likely for it to be used for are I2C and SPI. I2C is MSB first. SPI can go either way but MSB first is more common).

It's only a few instructions to do that swap, but MCUs can be quite constrained on space so it would be nice to not have to bother and instead do the swap on the receiving side.
We used to run into the same issue booking camping spots in Massachusetts, which open many months in advance. I don't know what the situation is nowadays but it used to be very competitive, with spots vanishing in seconds after opening.

Amusingly, one camper family we came across said they manually register at the stroke of midnight, but they all do it together from like 6 computers in their house.
> In other words, we got competition.

No, we got fragmentation. If we had competition I could pay netflix to watch the same content that I could otherwise watch on hulu if I made the choice to pay hulu instead.

Since everyone has their own exclusive content paywalled off behind their own services, we're stuck with lot of tiny monopolies.

That's why prices are skyrocketing, and we have a bunch of examples of shitty/infuriating interfaces that get in the way of users and prevent them from what they want, instead of a battle between streaming services to offer the best/most features users want at the lowest prices.
Sugar Substitutes Surprise (2022)
Fluidized bed movement. In the reef hobby we use filtration that operates on this principle - in essence, instability with fluid movement of semi uniform particles allows those particles to move as if they were a liquid if that makes sense.
It isn't a coincidence though that back in the 1990s the sugar industry was spending/lobbying big to attack dietary fat. A lot of foods intentionally removed satiating fats with nutritional value and replace it with cheaper sugars that you can eat almost unlimited amounts of without feeling full.

If I could only name two big "things" that contributed most to the obesity problem of today it would be:

- Agricultural Act of 1970 and the polices of the 1970s, resulted in corn so cheap and abundant that other industries actively looked for usages. HFCS was obviously one such use, and it out-competed all other nutritional sources on price.

- The 1990s "fat bad, sugar good" which resulted in reformulating a lot of staple foods and the beginning of standard sweet food allowing the cheap HFCS to flow.

The US needs, and has needed, to offset the corn subsidies that get turned into HFCS by adding a "sugar tax" at the consumer side. That way it can still exist for animal feed, and be used where appropriate without being unnaturally and unreasonably inexpensive.

The reason they don't is that it is political suicide to suggest sugar taxes in personal-freedom loving US that is pretty anti-tax regardless.
The problem with corporate driven drug development is on full display here, they are treating drugs (and by extension, human lives) like investors treat tech startups. It really pisses me off when people say that this drives innovation.

The majority of corporate research money goes into patent extension methods (like slightly tweaking the delivery method, or slightly tweaking the forumal ala insulin being released as a free medicine, but costing thousands of dollars a month because of "evergreen" patent extension from corporate pharma companies) and on the other hand most novel compounds come from public research paid by taxpayers. Of which is then sold back to us by coporate pharma companies that buy that research.

There is an entire established pipeline, these researchers have no other options than to sell their research papers and findings to companies. It is disgusting on every level and indefensible... especially for the country that pays more than any OEC nation for healthcare, and has worse health outcomes than the majority of extremely impoverished "3rd world" countries. It kills millions every year, and is extremely shameful. It is the biggest embarrassment conceivable
You should consider terser over uglifyJS, it’s far better maintained and will get you the same if not better results
Japanese society collapsed? Didn’t seem like it when I visited a few years ago.
Yeah it's much better than it used to be for sure. I recently dumped doom-emacs and went through the process of setting things up from scratch, and mostly performance is pretty good.

I think that it still struggles a bit when I have many (>100) buffers open, largely I think because of anything that has to do window management winding up iterating over every buffer, and it turns out a lot of things (both internal and third-party packages) wind up doing this on various hooks that make the overall experience feel sluggish.

I also still see occasional performance issues with eglot/LSP on very large projects, especially around input feeling laggy while the language server is churning on something.

In general, it's frustrating when stuff that /should/ be in the background and not have any effect on actual editing latency winds up causing slowness or hangs. A good example is any time font-locking gets complicated, e.g. on very large files (which again has improved in recent versions).
My town has about 500 people, but the really active community is about 50-100 that will show up at the various things we do. I am 30 minutes from grocery stores, and 3 hours from boston or montreal. I have fiber internet because the residents got sick of the telecoms and we built our own. And the forest is more dense than Montana (where I grew up), and doesn't light on fire every summer. Please come to VT. :)

Also, I a bought a ramshackle building at auction that I am turning into a community workshop. It will be fun!
> Why is it an issue if Discord thinks you're playing a game?

IIRC if discord thinks you are playing that game all the time, you can't use discord when you play actual games. Or discord may behave differently when a game is running vs. not.

> Does your boss check that you're not playing games on Discord during work time or something?

Oh no, I run discord at my home computer, and use the web interface at work ;)
this warmed my frigid heart. so glad to see this sort of curious spirit endures :)
Wouldn't necessarily compare Sid to Rawhide, since for example, the Nvidia drivers on Sid are still on 535, while 550 has been released and is actually very good. Rawhide is almost analogous to Gentoo's unstable releases where whatever you are getting is probably being pulled directly from the source rather than a discrete release.

Whatever the Debian team calls their releases, you can pretty much slide it back a spot or two within the chain of release freshness relative to most other distros. It's almost impossible to accurately compare the totality of packages between distros and make any reasonable conclusion, but it's pretty safe to say that with the snapshot of limited software I have looked at that is reasonably meant to be updated such as userspace graphics libraries, Debian's stance on an unstable or testing distro does not align with the colloquial definition of such a thing.