jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
The vast majority of countries are WTO members.

Arguably the WTO is both the rationale for a "minimum corporate tax" (if it wasn't for WTO rules, countries could introduce tariffs and other trade barriers specific to certain countries to deter registration in tax havens) and the most likely way such a thing would be realised (in practice it would probably be "you can set your rate below this, but if you do WTO members are free to set higher tariffs on your produce than other countries")
Microsoft removed crashes from Flight Simulator following the 9/11 attacks. If you want good destruction physics a combat focused simulator like DCS is probably more relevant than a civilian flight simulator
Is your diatribe an argument that Pornhub should have the right to distribute pictures of a sexual assault?
It's a nice model, but in practice it doesn't work like that. The older freeholders do as little as possible, sometimes employing managing agents to do as little as possible on their behalf. For example, see all the freeholders doing nothing about the unsafe cladding on flats.

The new freeholders (developers of new build housing estates) have learnt that they can do as little as possible, increase the charges whenever they want and increase the price of buying them out: win-win-win!

The system is so ridiculous that the record of who owns the freehold of many houses built over a century ago has been lost. Someone owns it, but no one knows who. So homeowners have to take out insurance to cover the payments in case the freeholder's descendants ever get found and come knocking.
Would Opus be lightweight enough?
I'm not cheering anything on. I'm saying that there are many reputable groups that tried and got results. Including NASA themselves. It's important to disprove this solidly by having more than one group test and have a negative result.

I think it's total bs. That doesn't mean the proof it is bs doesn't deserve to be repeated.
That was the next to last paragraph of the article. It is not meant as a standalone paragraph. It goes with the last paragraph, which is:

> The danger, Prof Van der Linden explains, is when people suggest the supplement is a miracle cure and should be substituted for vaccines, masks and social distancing.
I'd also be really interested in this, even if it was only for the major distros.
My bad. I didn't mean scuttle and leave there. I meant take apart with welding torches. Not sure what the proper term is for that. However they got it moving so we are all good to go.
How does that appear? The article says,

> Officers simply have to attest in an affidavit that they have probable cause that the tracking data is “relevant to a crime that is being committed or has been committed.”

The term "reasonable suspicion" doesn't appear in the article at all.
In my not so humble opinion, it's illiberal and destructive in its current form.

For example, a white Appalachian coal miner and a black Ivy League professor have a power disparity based on income, education, and social class.

But the "prejudice + power" crowd will have you believe that the coal miner's membership in the elusive all-powerful "white people" monolith gives him more social cach e´ (hence power) than the professor. That's because the professor's membership in the elusive "black people" monolith puts him near the top of the marginalized intersectional hierarchy.

Any rational person who isn't obsessed with the phenotypical categorization of individuals (aka a bigot) will reject this notion - recognizing the professor's freedom/power relative to the coal miner.

People are individuals (not groups) with complicated lives and experiences.

To reduce ALL "black people" to marginalized victims is the soft bigotry of low expectations. But worse, to elevate all "white people" above all "black people" is a vile and tacit view that all "white people" are the necessary saviors of all "black people". This kind of twisted illiberal thinking permanently infantilizes all "black people".
I hate to be negative (nah, really, I love it), but finding a cofounder via this is a bit like finding a wife via a profiles-only dating site.

Sure, it might happen, but I wouldn't bet on it.
B-crypt and S-crypt are great libraries to use to solve this problem. However, the poor man's approach is as follows with HASH being your favorite hash function

h = HASH.new()
HASH.update(password)
HASH.update(salt)
for x in xrange(X):
HASH.update(HASH.digest())
return HASH.digest()

this approach "strengths" the hash by forcing you to calculate it over and over again. You should set X to be the number of rounds you want to conduct. Ie. how slow you want you server to respond to an individual request. It is always a trade-off between server slowness for individual requests and "security" of the hash function. The goal is to make dictionary attacks take longer than is feasible for you attackers to conduct.

[Note: you should absolutely have a different salt for each password with this approach.]
Thanks a lot for the prompt reply, and for letting me 'reblog' it. Appreciate it.
Yes, there are, and I've found a bunch of them. I used to go to gangplank alot, but now I only get there about once or twice a month since I went from self-employment to normal employment.

I've not been involved in Heatsync other than to see some of the cool things they do. I was lucky enough to meet a bunch of the founding people on the day they came into Gangplank 2 to start their collaboration, though.
@thorpus - That job shows up as being in New York - is that not a requirement?
> Config files are not typically world-readable; the httpd reads them before dropping permissions. Otherwise, a vulnerability in the httpd would allow access to everything in the config (remote server passwords, signing keys, etc).

I think you give people way too much credit. Maybe config files aren't "typically" world-readable but they ARE typically httpd-readable.

It's a mistake to assume, that because you might follow best-practices, the rest of the people out there do. You said yourself in a comment on this same post that many people make mistakes because they're too lazy to take that "half an hour of research." Let's make the assumption that that is typical.

> There's no reason why compromising the database would allow attackers into the web server, unless you've configured SSH to allow signing in from arbitrary remote systems.

Oh, you mean the default behavior? See above.
Survivor bias in full power here.
What do you mean by "my salting algorithm is very strong"?
Git has nothing to do with it: A while ago Homakov had an exploit that gave him write privileges to all GitHub repos.

It's remarkable that no one really seems to care.
Tocqueville identifies the division of estates and fortunes as essential to equality and democracy:

But the law of inheritance was the last step to equality. I am surprised that ancient and modern jurists have not attributed to this law a greater influence on human affairs. ...
When the legislator has once regulated the law of inheritance, he may rest from his labor. The machine once put in motion will go on for ages, and advance, as if self-guided, towards a point indicated beforehand. [0]

The whole passage is worth the read, and well supports your point that the effect of inheritance taxes is both societal (smaller estates) and individual (different incentives for wealthy progeny)

[0] https://play.google.com/books/reader?id=xZfiBEzcPTEC&printse...
The title was changed. The original n=one gave more context:

It used to be a commercial project by @thatusertwo, and he just made it free.
I don't think this future is implausible, but I think the MOOCs will not be able to be free. There are costs associated with creating a good online course, and those costs have to be deferred somehow.

Perhaps these MOOC developers will be able to attract patrons who will cover the large up-front cost, and ads could cover the ongoing support, but one way or another they won't be completely free.

As for whether recent highschool graduates will be able to complete a traditional college degree worth of MOOC courses, it will depend on how much they actually help those graduates get jobs. We went to college on the insistance of our parents that it would improve our quality of life above theirs, and the promises from colleges that a degree would make our careers.

For some of us, that was true. For others (particularly in recent years), not so much. MOOC badges will have to offer more than just promises to justify the time and money we put into them.
The author specifically flags it as a quick hack:

> Voici un petit hack, résultat d'une après-midi de code : le code civil sous Git.

"Here is a quick hack, the result of an afternoon of coding: the civil code under Git."
I also owned one and used Wordstar on CP/M. Also, Borland's Turbo Pascal!
Some of the cited papers in the article show that the techniques do hold for non-trivial decisions.
That betrays a shameful lack of creativity.
If it's scientific, go with 3, most of those tools are newer.

Which tools? I use python for scientific computing and I can't think of any tool that I use where the python 3 version (if it exists) is newer/better than the python 2 version.
>I just don't see how it wouldn't (1) discourage people from joining the workforce

If it's the case that there simply aren't going to be enough jobs for everybody then this would be an intended outcome.
A few months ago I was traveling from SEATAC. I always use the TSA-Pre line, where I don't have to remove my laptop from my computer bag. This particular trip, I placed my bag down like usual and my keys/cellphone in the dish and walked toward the metal detector just as the agent behind the x-ray machine picks up and throws my computer back the length of the conveyor belt and demands I remove my computer from my bag. I was shocked and strongly but firmly told her that what she did was completely inappropriate. Once through the line, as I was collecting my things, another agent came up and then started asking me bizarre questions like "how are you feeling?" "is something upsetting you?" (...of course something's upsetting me...and your underling just threw my computer!) I immediately hopped on airport wifi at my gate and wrote a detailed complaint and submitted. Never heard back. Wrote a second one. Nothing. Now I'm wondering if that whole experience was this program.

Then again, the simplest explanation would be that this was just another instance of TSA incompetence.
Roughly, gamers("true gamers") VS casual gamers.
I agree that there are precise definitions of the phrase "strongly typed", but from my experience if you put 10 computer scientists in the same room, you'll hear 3 different definitions of what it means.
I'm not really sure what you're asking about or commenting on here. I will, however, take the opportunity to say that I am a big fan of the SLL Labs Server Test that Ivan Ristic made. With the number of SSL/TLS vulnerabilities over the past few years, it's important to ensure that secure servers stay current with best practices. This tool offers a free way to audit that.

Getting an A+ doesn't guarantee security as your application and infrastructure must all be kept current and secured. The A+, however, is intended as an indicator that your SSL/TLS is configured to provide the optimal level of security around the transport layer. If a site gets a grade of B, that doesn't necessarily make it insecure, but it does indicate that certain vulnerabilities could expose their users' data.
> Known's an SSG

Is SSG a static site generator? I'm pretty sure Known is a SQL database backed dynamic kind of thing. I looked at it several years ago and I don't remember it being static.

> unless WordPress has grown a lot I doubt it's a complete solution (not theme dependant, etc)

I know very little about WordPress. I do know there are IndieWeb plugins for it. To what extent WordPress might be a solution for you, I wouldn't have any idea.

> That meta chat room is something. Is that how you came to this thread?

I wasn't in the chat room. IndieWeb is something that I've had some interest in and I generally look at posts here about IndieWeb related stuff when they show up from time to time.
> Yes, NFTs are “non-fungible tokens”. And sure, understanding what fungibility means is helpful (and we’ll get to that shortly). But it doesn’t quite get to the meat of the thing.

> A better answer?

> NFTs are a type of token that are going to completely revolutionize entire industries by changing the way we share and consume pretty much everything.

That's not a better answer. That's not even a good answer. That's at best puffery.
There are two parts of NFTs, a really cool development and what most people will see. The first reason to buy an NFT is to support the artist in a way that may have value down the line if the artist's work gets more popular. There are a lot of digital artists who I would throw $50 to get some digital print with that in mind, or multiples of that to own something unique of theirs. The second reason to buy an NFT is as part of an insane crypto-ponzi-pump-and-dump scheme. The latter will overshadow NFTs until things settle down / crypto implodes.
Absolutely, let me walk back my language so that its clear I'm extrapolating from very limited data.

Edit: I can't edit it anymore. Was going to change it to "Based on this limited insight, it may have been the best option for both parties to part ways given the project teams complaints and valves lack of interest in the product"
The bag the people promoting it would like to hand you is a new bag.
They respect the unique identity.
It still won't. If you look at history we have been always shifting towards information storage that is easier and thus less energy intensive to copy.

Art by definition has done the opposite. Unique pieces that are HARD to copy (IIRC art only gains value once the artist is dead) and thus can gain value.

This feels to me like a weird version of DRM which has no real world use case.
1. be wary of all citations to a _meta_ analysis;
2. be wary of dated results that are being republished without further research;
3. be very wary of publishers with an agenda beyond the fourth estate.

1. check
2. 13-page report published in 2017 without follow up turned into a book released yesterday
3. axios "Between the Lines" (https://www.axios.com/about/)
just because i like and/or agree with axios does not let them off the hook on #3
No, the worst is when you get to talk with people fresh out of college who "know" all the latest industry hype but still can't put basic programs together, lack basic problem solving skill and basic algorithmic thinking.

Sure, teach them some practical get-a-job stuff, but also teach them how to learn, how to solve problems, the different tools (functional, OO, logic, low-level etc) available and make sure they can solve real problems on their own.
Windows Powershell is actually quite nice and powerful, while also avoiding some of the shell legacy traps around escaping. It suffers from not being very discoverable and not having a community.
Sure. Thanks!
Not sure you guys disagree! The parent said, "Maybe you don't display it as an "account", but I can't think of a single commercial website where you shouldn't at least be taking an email address as part of the transaction."

Then #3 on the bulleted list of six points says, "Username = Email. Don't make people remember a username for your site. You may allow them to pick a username later on that can be used in lieu of their email address, e.g. as the URL for a profile page, but don't force them to use a username to log in."
Cool. I see now. Thanks!
I think someone else has pointed out that they're not ActiveRecord queries, but even if they were, this is a script designed to be run manually a few times a week, which takes maybe a minute. You'd need significantly more than 100x performance increase for any time at all put into optimising queries to pay for themselves.
Totally. And now, I will easily convert some members of my family to Matrix.
I use Wire, have only two contacts which also using Wire.

I like that they have published the server source code https://github.com/wireapp/wire-server
Why would I use google when I can just wget | grep from the command line?
> There are no ways to separate political from non political discourse

Most large companies (especially in regulated industries) have strict social media policies, e.g. preventing employees from performing company business via their personal social media accounts, with penalties for serious breaches being disciplinary action up to and including dismissal, i.e. it is possible to separate company business from non-company business. Why not the same for those working in the political sphere?
Shooting an unarmed protestor who is merely trespassing is absolutely an execution. Just as Rittenhouse's shootings were.
in my surroundings, WA still dominant. Second is telegram. So I choose it
In what cities was there no intervention? There was sure plenty of intervention in Portland, even against journalists.
Love these kind of micro simulations! They really help to discover non intuitive behaviour of complex systems just by playing around. Great job!
I wonder how people will feel about the federal and state governments working with cell phone service providers to generate a list of "attendees." Seems like the conviction rate would be pretty high.
Other notable facts: recent travel to middle east, flash cards included words like "terrorist", "explosion", "bomb", "to kidnap", etc., didn't follow basic screening process guaranteeing an elevated inspection (left large electronics in bag), had the cards in his pocket and handed directly to the TSA agent.

As soon as someone arrived who had the necessary pay-grade to release this guy, he was released. Sorry for missing your flight but I do expect TSA to flag me if I literally hand the agent a stack of cards with "bomb" and "terrorist" written on them.

It never occurred to Nick to put the cards away before going through security screening? Oblivious beyond belief.
What this really seems to mean, with the survival of OSRF & Beam, is that the PR2 is end-of-life. That's a bit sad but maybe to be expected in this field.

What will take its place with respect to research into human-level, mobile, autonomous manipulation platforms?
The compiler is pretty slow (although there's a big drive starting a few days ago to get certain aspects down (mostly compiling small files); because running the testsuite is so slow that work on the compiler is getting dragged down), but compiling the compiler itself is particularly bad:

- it has to build LLVM: Rust currently has to use a custom version; the goal is for this to be unnecessary so that the system LLVM is ok.

- it has to build itself and the standard libraries 3 times: rustc is written in Rust; so it has to bootstrap.

- it eats a lot of memory, so bootstrapping on low memory systems is bad. Much of this is historical; the bootstrapped code means that large portions of the compiler are written when the language was less developed, and so is very non-idiomatic. It's progessively being modernised

The first and last can be fixed; the second can't, at least until there are binary releases.
Hell, Abu Ghraib was just bad apples, officially, and said apples were punished.

So it would have been entirely possible to go to war in its wake without expecting to participate in its like. After all, officially (from the outside), it was condemned.
The backlash on "frivolous" apps is refreshing to see on HN :o)
Tailscale is just a commercial VPN provider, they did not create WG
It is not starting the process of gentrification, it is continuing it. It is not an issue of pro development vs. anti development, but rather of who is involed in determining what development is done and by whom. The city has a long history of acting on the neighborhood when people outside the neighborhood decide they want to do so while not acting when people inside the neighborhood want change. Giving large discounts to wealthy developers with no connection to the neighborhood without any discussion with people who live in the neighborhood shows that this process continues today. Here is one analysis of the historical process (pdf from 2007):
http://www.kingneighborhood.org/history/Bleeding%20Albina:%2...
Hard to avoid lock contention when it's happening in the OS.
I don't think you honestly want to know "what scenarios people actually think will play out" and that you question this way solely for the sake of argument. I think you have your mind made up and would rather snark at people that have an opposing opinion.

That being said, it's no stretch to understand that some people just don't want to volunteer personal information especially originating from software.

There are enormous trust implications with any sort of software that phones home for any reason. And if the software source code isn't publicly auditable it can be impossible to actually verify what information is being sent from your machine. I personally don't think it's possible to actually trust closed source software. I don't care that it's socially normal to ignore your personal computing privacy. I care about mine.
Maybe it's not true of all JavaScript GUI apps, but almost all the ones I tried are hecka sluggish for things like drag+drop. I could see that being a problem with tabs in this case. Plus I'm concerned about the CPU on my poor little MBP, Chrome usually eats it all the way up, is that somehow mitigated in Atom?
Have you tried Mavericks? I was on 10.6 until 10.9 came out, and I have not been disappointed. I actually gained about 30 minutes more battery time. I also enjoy the notification integration with so many apps. Growl used to do the job, but it didn't always work.

10.6 to 10.9 is a good upgrade, try it.
any url or website will do, I can't find any
The media is more left leaning than 1) the median of the population and 2) the media was 20 years ago.

I think 1) is what's driving the "media is left" feeling. It is left compared to the median of society. To many people (not just on the far right), that feels like the media pushing leftist views/narratives/agendas.
I completely agree with you, writing does help the software engineer think clearly. I recently started writing short poems and it has helped me think better when writing code..

I also believe that the engineers should write code everyday as well.. many of the engineers take at least a day off from the week and it somehow reset's mind a little
There are many of this type of hash function based generators, but pretty much all use fast hash functions. The no salt thing also makes me uneasy.

From another Ask HN[0], I learned about bpasswd[1] which does bcrypt and allows the cost (iterations) to be configured. That looks pretty cool.

For me, I chose to go with a hybrid approach and wrote hash0[2] for my less important passwords (important ones live in KeePass). Hash0 does 100,000 iterations of PBKDF2 with salt from CSPRNG unique for each site. It stores the encrypted metadata (just the salt, length, symbol/no symbol, etc) at a location of your choosing (I just store it in my Google App Engine).

Would love to get more eyes on it and get feedback (See services.js for generation logic).

Benefits of hybrid are that:

- Allows me to use random salt
- Allows me to easily change password for individual sites (thanks for random salt)
- Allows me to store website's preferred password length and whether to use symbols or not
- Allows me to create mappings (so say www.twitter.com and account.twitter.com can use the same password)
- Allows me to store notes along with the metadata (e.g. what username I used)

[0]: https://news.ycombinator.com/item?id=8753534

[1]: http://www.alexhornung.com/code/bpasswd/

[2]: https://github.com/dannysu/hash0
> doubt, however, that "stealing" from Apple is a viable business model in the long term.

It's a fantastic way to "bootstrap" a business though.