jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
Yes it would. If you fail to put up a fence around your yard, that doesn’t mean I’m authorized to walk in and steal your garden gnomes. Sure, it would be ideal if authorization were enforced with technical barriers, but just because a computer system thinks someone is authorized to access data doesn’t mean they have the legal authority to do so.

Let’s say I own a company like Shopify. I have an agreement with my customers: I won’t use consumers’ personal details for anything other than processing orders. Sure, I have the technical authority to poke around in the database if I so desire. I could technically take all that data and sell it to the highest bidder. That doesn’t mean I’m legally or procedurally authorized to do so.

Employees have procedures they are expected to follow. Many employees have significant permissions to access data. It’s unreasonable to bar all employees from accessing sensitive data at a technical level; people need to be able to fix problems when things go wrong. If a group of developers conspire to push malicious or faulty changes to production, including the developers who are supposed to be reviewing code and preventing such things from happening, that doesn’t change the fact that they are not authorized to exfiltrate data.

You can go online and buy a set of keys used by first responders. For $25, you can get into just about any commercial building. Are you authorized to actually use those keys on someone else’s property? Not without a contract, but that doesn’t mean there’s a technical barrier in place.

Let’s talk about Shopify’s datacenters! They probably colocate or use a cloud service or whatever. Ultimately, data is stored in datacenters. Someone like Deviant Ollam will have no trouble waltzing right in the front door. He might already have the keys. Or maybe he colocates at the same datacenter, getting him a good chunk of the way there. Is he legally authorized to access customer data, despite having the tools at his disposal to access it with minimal difficulty and likely no digital hackery? No, he is not.
NFT sellers are dodging the elephant in the room: Buying an NFT is more like buying a print of an artwork than buying the artwork itself. Or more accurately, a link to a print of the artwork.

Yes, using crypto and blockchain you can prove that this was the first NFT print of the artwork, but that's it. It's an expensive way to proclaim that you have the keys controlling the NFT that links to the print of the artwork, and that it was associated with a crypto-denominated transaction of a certain value, but that's it.

These NFTs are also a goldmine for wash trading scams. NFT holders can "sell" the NFT to themselves over and over again at increasingly higher prices, creating an illusion of a very valuable and high-demand NFT.

Want to own an expensive NFT? Buy a cheap NFT, then use a second wallet to "buy" it from yourself. The last trade price gets recorded in the blockchain and you can now brag about having an NFT worth as much money as you were willing to scrounge up for the transaction.
It's disingenuous of them to say they "have to" do contact upload. Why can't I type in a phone number to invite? Completely hostile. Consequently, I have invited nobody.
Thanks! I'll go through some things that are possible, and hopefully that answers your questions. Please let me know if I missed/misunderstood anything.

Firstly, we don't have an existing GUI that generates Lowdefy config, but you would be able to build a GUI that does that using Lowdefy. We kind of do that in the documentation, where we give you options to configure a block. So you would be able to write a "form generation app", where users define their forms.

To render the forms it would be possible (but would require a little engineering) to create a React component that renders Lowdefy config, that you could use in your production platform. (This already exists, but currently is connected to the browser router and graphql client in our "renderer" package).

Otherwise you should also be able to run a Lowdefy app in an iframe to render the forms.

Does that make sense?
And, as with all the "extracts" on the market, the question is "who put that fluid in the bottle, what is it, what's it contaminated with?"

I've read one report of "Delta 8 isomerization and extraction." It was a simple temperature controlled distillation; it didn't sound like they could have the kind of purity or specificity they advertised (mid 60%); and made no mention of residuals.

Didn't stop my acquaintance from spending $5k on retail package spray bottles, of which 50% failed mechanically. They're still hawking them at $50 per bottle. Felt like one of the JWH series to me; and convinced me not to buy anything from that person anymore.
Each time leader blames his team for a failure, it’s as clear of a signal as you can ever get, to runaway, both as an employee and customer.
Then just disable lockdown in your kernel.
Do you have a system in place for an artist to say “hey some asshole registered my art before I even heard of your project, no seriously, here is a screen grab of it in the editor/a closeup of the canvas/some other snippet of the Original File”?
Really? Manufacturing a bicycle has only 10x lower carbon footprint than manufacturing an electric car? Doesn’t sound logical to me.
Yes, that's generally the math. You save 80% of your income while learning to structure your life to live on the 20%. These people bike everywhere, eat cheaply, and are all around frugal. If you can do that, then in 5 years you can retire and have to worry less about money. For me personally, that would mean sacrifices to my family's lives that I'm not willing to make, but I see the appeal and try to apply the concepts where I can.
> 100 sensors sampling at 1kHz for a year, you'd have ~3 trillion rows

PosgreSQL is a great OLTP DB, but this looks like a good fit for ClickHouse or some time series DB.
There actually is pretty significant evidence:

https://www.nytimes.com/2021/04/01/climate/bikes-climate-cha...

https://www.pnas.org/content/118/15/e2024399118

https://www.nctr.usf.edu/wp-content/uploads/2013/12/jpt16.4_...

https://www.sciencedirect.com/science/article/abs/pii/S22136...

https://www.nar.realtor/blogs/spaces-to-places/bike-lanes-bu...

https://tfl.gov.uk/info-for/media/press-releases/2011/januar...

(although you might be correct about green paint, thats fake infrastructure and paint won't protect people from getting hit by cars)
> "Bring solutions, not complaints" was something a manager at my corporate job used to say.

I have heard this before, but IMO, this is terrible advice. Identifying problems is a valuable trait, and the advice above tends to squash people's willingness to highlight a problem that they know is there, but aren't equipped to solve.

People like solutions to be brought because it requires less cognition, not because it's a good strategy.
These complicated setups which we see are complex because they try to save costs by using some part of the cloud. Shared VM resources in the cloud, which is all you really need, are dirt cheap compared to the really simple alternative.

Renting space in a rack at a colo facility and putting an nginx server on it is really simple, but it's also expensive compared to the complex solution in the original post.
After reading a little about founder, who is described as "investor", "cryptocurrency hedge fund manager", and inventor of "protocol". I am done with signal. What a f*kin ruse.

Deleted the app. Also left a note in status so others can see the msg and delete the app also.
Because the buck doesn't stop at the CFO
> Seems like he could have done more to distance himself.

On a value system with an inherently public ledger that eventually has to hit a fiat off ramp with KYC/AML requirements? Nah. Everyone has quality opsec until they don't, and the record of your criminal activity is immutable and highly durable.
LaTeX is terrible for writing in flow though per my understanding. Too much markup language.
There are lots of reasons someone like you might benefit from a framework, but this one jumps out immediately:

> I already know how to implement core functionalities when needed (e.g. CSRF, user permissions)

Even if you know "how", this is still wasted time on your part. These are solved problems.

Particularly when it comes to security features like CSRF, relying on yourself to implement it sounds like a major footgun opportunity. When you use a framework that has this built in, you have to try really hard to bypass these security features. You barely even have to think about how to implement it.
This seems crazy to me that anyone would want to use wildcards in anything but a one off script. The lack of discoverability and potential for crazy-making clashes is omnipresent.
> as almost all of them do the same thing

It's the almost that will get you here.
Thanks for the kind words!

We will not be pricing per developer or per user, but rather usage-based. We aim to be affordable for applications at scale, because we believe the cost of an internal app should not increase linearly with your headcount.

We’ve designed the system for a few deployment configurations, with independent single-tenant and multi-tenant support on the control plane and data plane. The goal is flexible on-prem deployments that balance customer convenience with regulatory / privacy requirements. At the moment though, we’re focused on our multi-tenant cloud environment and making that as top-notch as possible.

You’ll also be able to eject your app out of Dynaboard. The code is yours, we aim to have the best editor available and convenient serverless hosting so that’s why you’ll stick with us.
That's actually very reassuring. Thanks!
Then pick Scala.js.

Solid, mature, great libraries and one of the best languages out there, even when competing against real (in the sense of not compile-to-JavaScript-only) languages.
huh? it's listed: "and showing relevant offers and ads"
High-five. I like your thinking!
Is it too much to ask for references? I have had too many bad experiences over the years where person x was alleged to have said something when in fact never did.
Pardons can not apply to future crimes, only crimes already committed and only to those specified at the time of pardon. Someone joining after would need to be pardoned again
Those are facts.

It's totally legitimate to say "I hate Trump and want to see him go", but it's impossible to stand on principle and say "Hey, Stacy Abrams is really in the right to say that her election was fraudulent forever" but Trump can't say the same.

It puts Twitter in the position of legitimizing certain claims of fraud and discounting others in national elections. That's frightening, and people supporting this should think what an alternate world would look like where billions of people were on Parler and not Twitter.
Inheritance distorts society, I agree, but I'm not sure how that differs from wealth itself? In many ways much of the inequality comes from privileges of wealth before inheritance rather than after.
Thanks!

Web crunchers ask the server for a task to do.
The server reply with an URL.
The cruncher download the page, look for relevant words and links.
The cruncher send the report to the server.
The cruncher ask the server for a new task to do.
By the way, claiming that Firefox is lean because it sets hard limits instead of adapting the memory usage dynamically is pretty silly...
While it's a good idea to move ssh to a different port, if only to stop the annoying doorknob rattling in your log files, you should not pick an ssh port over 1024. Ports over 1024 are unprivileged ports, and if someone could somehow convince your ssh server to die, they could start up a counterfeit one and collect your password. A port under 1024 requires root access to be able to open it.

Of course, this only applies to linux systems where you don't trust local unprivileged users. Or software that you are running as an unprivileged user. So every system.
Here: https://github.com/gorhill/uBlock#cpu

The details of the benchmark (if you want to reproduce) are in the spreadsheet linked in the caption.
I just read a story written by Jeremy Clarkson where he visited Iraq. His transport arrived and departed in the middle of the night, lights off, so that spotters couldn't determine direction or type of aircraft. So it would seem that they are acutely aware of the issue.
> By creating derivatives of the stock, the investment firms are helping Facebook keep its shareholder count at 499 or less, the maximum number a company can have before it has to disclose results to the public.

Out of curiosity, what does this imply for stock options? Are people who exercise them included in this count?
I thought about something like this, but not tied to programmers.

Unemployed people have talents like everybode else and someone should come up with an idea or program to collect, develop and channel those. I can't speak for other countries, but here in germany I see a lot of stuff that could be done if one could mobilize them.
I would much prefer to be able to use another language in the browser, if languages are tools then programmers developing for browsers only currently have one tool available to them (unless you count html and css) which I see as a pretty major stumbling block towards new innovations.
Memory allocation can indeed be amortized with specialized allocator, but that's not what I had in mind. The context I usually operate with is numerical computation, and the indirection cost is very high in those cases, especially when you can access memory in blocks if you use specialized allocator. It would be very hard to do well for sure. It is well known that allocator is one of the main weakness of the STL (one of the reason for the existence of Electronic Arts STL).

I am certainly not advocating doing this in general - I think the need for atomic support in generic collections is quite low (I have been investigating the issue recently to add fast and generic support for sparse matrices in scipy). I am pretty sure the macro, specialized ones used in freebsd (tree/queue.h) and linux (rbtree, list) have been benchmarked to hell, though, and would trust them more than most STL implementations.
Kik developeR was previously a project manager on bbm I believe.

Edit: someone below says he was an intern
Yes, they would be. So as a result, there are not a lot of stock options floating around anymore.

They have been replaced by, you guessed it, derivatives.
Doesn't really matter in practice, IMO.
Climate Scientist, Ilissa Ocko[1], talked about Methane and Climate Change last month at a TED Talk. The video is worth watching - https://www.youtube.com/watch?v=tlWuP7wESZw

1. https://www.ilissaocko.com
Anyone tried rswag with rails? I’m trying it now.

I’m also considering schemathesis & fastapi from python.
If anyone else is wondering:

Selenium 1.7μg (3%)
SoftBank is desperate for capital due to recent bad bets. ARM is one of the most valuable assets they have. As for ARM itself, this probably isn't the best path forward, and neither option would even be considered if it weren't for SoftBank's current predicament.
The operational complexity is nontrivial. You would need to attach both diesel and electrical locomotion to every train that has even a small segment in unwired territory, which would be most runs, in exchange for relatively small fuel savings.
use dlive.
Thanks, didn't know this was there. Enabled, for now.
Most banks don't charge their customers to process incoming wire transfers. You're saving $5 when you could be saving $15.
There are several ongoing efforts to maintain an archive of SciHub

https://www.reddit.com/r/DataHoarder/comments/8ky647/scihub_...

https://www.vice.com/en/article/pa7jxb/archivists-are-trying...

The paper collection software, if I recall correctly, is actually quite simple and uses APIs provided by publishers. It's the store of credentials that SciHub uses (that are provided by academics and scientists) which truly powers the site
Fn position is obviously configurable. I have ctrl/fn swapped, but plenty of people don't, and that's fine. (And then plently of people have ctrl on capslock, which is also fine. I couldn't get used to it.)
They can’t force you to produce a lawyer on the spot, and they can’t force you to call one in front of them. Your conversations with lawyers are secret and the police aren’t allowed to know anything about what you talk about. They have to reschedule the interview.
> ... not giant "Big Tech" companies that have all kinds of ways of avoiding them and employ hundreds of people in their accounting department...

You could make that argument against absolutely any policy. So what is your solution then? Don't do anything?
Surprising they'd go C++ for networking. Python's had top-notch async for nearly 20 years.
I don't think it's fair to blame developer stupidity. Formulating something asynchronously makes your code quite a bit harder to read, test, etc, so it's only natural that developers would avoid that - and builtins like JSON.parse further encourage that. Note that the author of that post doesn't really give solutions for the problems he mentions, he just tells you how to detect it.

Meanwhile there are actually nice solutions for the problem of handling many concurrent computations with low overhead readily available (e.g. Go).
According to torrentfreak it hasn't propagated for everyone yet. It looks like so the media are linking directly to the ip address.
Aclima - http://www.aclima.io - San Francisco, CA

==========

Aclima is an early-stage company based in San Francisco that designs and deploys distributed, large-scale sensor networks to empower people with actionable environmental quality data. Our end-to-end solutions collect, process and analyze real-time streaming data from thousands of sensors, enabling a level of environmental awareness that has never been possible before. We believe our technologies can redefine the way we imagine and manage our buildings, communities, and cities, helping us improve our collective well-being. We are looking for passionate engineers to help build, scale, and improve our platform. We have no required list of skills or years of experience. Instead, we’re looking for engineers who are smart and get things done. Our engineering culture values rapid iteration, continuous improvement, and as much automation as is sensible. We work in a relaxed, purpose-driven atmosphere with flexible hours and competitive perks.

Positions open:

* Full-time Backend Engineer Our stack includes: Python, Git, MariaDB, Cassandra, Nginx, NSQ, Redis, Ansible - solid understanding of functional programming languages,
distributed systems

* Full-time Frontend Developer - solid understanding of core JavaScript, HTML5 and CSS3 - experience building well-structured web applications - a passion for user-driven interaction design and delightful user experiences - excitement about data visualization, mobile design, and responsive design

* Full-time UI/UX Designer - At least 2-3 years of experience who has heavy UX chops and expertise in CSS-based design, peppered with JavaScript-based interaction design/development. - Someone who is excited and passionate about data visualization, mobile design, and responsive design and has strong opinions about all three.

* Full-time DevOps Engineer - some experience writing shell and Python scripts - Debian/Ubuntu, Jenkins, Locust, JMeter, Google Cloud/AWS, Ansible experience a plus

==========

If you’re up for the challenge, apply directly:

http://boards.greenhouse.io/aclima
> Is expiration monitoring done solely through certificate transparency logs or also by connecting to the host?

For every detected host, the app periodically performs an SSL handshake (HTTPS only), and checks for the expiration of the served cert. CT is used to detect new certs, and extract relevant hosts from these certs.

> Can the service monitor hosts that aren't accessible publicly?

Nope, this runs as a Heroku app right now, and will work with publicly accessible HTTPS-serving hosts only.

> Does this service support certificate checking for certificates that aren't on certificate transparency logs?

Yes, CT is used to detect new hosts automatically. The app also relies on the SANS of the certs it finds, spreading as wide as possible within the domain of interest. The actual checking of certs is a simple HTTPS handshake and inspection of the served cert.
Yup. I spent some time in Singapore which has one of the most extensive mass transit systems in the world. Yet the demand for cars is still very high, even with a massive ($70k USD) licensing fee and 100% import duty (Corolla costs $70k USD).
Iran’s government and their supporters don’t, yeah. The people with no stake in this fight, the Iranian civilians though?
This made my day. Thank you for sharing this.

I had a Tomy Tutor computer that I made my mom enter BASIC programs into, but she did not have any development experience.

I really like your to-do list to keep track of accomplishments and stay within scope.
"Thanks, It was helpful information. As said before IANAL."

Not only are you not a lawyer, but you are also struggling with some basic concepts regarding the implementation of laws.

Laws, implemented as statutes, have no association with, or bearing on, morals which are purely a cultural phenomena.

I understand that you disagree with how Dropbox went about protecting themselves from civil liability, however the violated no laws by their actions.
> ... this fact is neither very new nor very important to average Russian. Probably not even in top 10. There just are more urgent matters.

Out of curiosity, what are some of the top issues (of governance) that are important to the average Russian?
I'd love to use this data to geotag the photos I've taken on my digital camera over the past year, so I've downloaded this script along with the consolidated.db file into a directory, however, when I execute: python iphonegpx i get the below error, could you provide some more detailed usage instructions?:
C:\Users\<xxxxx>\Desktop\serialx-iphonegpx-a124079\serialx-iphonegpx-a124079>pyth
on iphonegpx.py
File "iphonegpx.py", line 24
<time>""" + data[0][0].isoformat() + """</time>
^
SyntaxError: invalid syntax
I'm curious, do you agree with Steve Jobs when he states, "a lot of the time, people don't know what they want until you show it to them"?
See answer below: http://news.ycombinator.com/item?id=2483431

You can be fairly sure it's not a pure team play.
While it may in fact be true that we evolved to able to sit, the sentence you quoted is in no way evidence of it. A link to supporting evidence, or even a well reasoned argument, would go along way towards backing up your claim.
You've said limited scope authorisation is weak authentication, but you haven't said why in your post.

Can anyone advocating OpenID connect give a single sentence explanation of why people (developers and users) would want to use it vs limited scope oauth?
The main reason why it's not an official image is OpenBSD doesn't seem to support any sort of online disk resizing.

Operating systems get deployed from an image, and typically expand the own partitions to fill up the disk... OpenBSD can't do this, which makes things pretty tricky.
I migrated from desktop Linux to OS X and use FreeBSD and Linux on my other computers. OS X does more right (for me) than any other commercial or open source Unix or Unix-like system, but that doesn't mean its perfect, and its growing further from being perfect as time goes on.
That actually may be a very good idea. It's not that non-experts should be forbidden from using these thing it is that we should stop handing people guns that they end up using to shoot themselves in the foot with.
I was so happy when I finally grokked LR parsers: it's just a big state machine! _if_ that token found, push on stack, go to _that_ other state. Consume token, check the next state transition.

But while fun it was pretty much useless because recursive descents and combinators are so much easier.