skysight-inc/HackerNews huggingface dataset:
I've been trying to find some non-trivial JFX code to study, thanks for making this!
"If you believe you are a chair, then in theory I can sit on you. Let's test; hold still..."
Related, someone submitted a binaural recording of the SpaceX Falcon Heavy launch to SmarterEveryDay: https://www.youtube.com/watch?v=ImoQqNyRL8Y

Conveys your sentiment regarding how it really sounds to be there. It unfortunately cannot convey the actual feeling of being there, and the impact of the launch on the body.
I mean, that still looks like typical protesting. Is everyone supposed to shut up because the guy at the mic isn't white?
Some thoughts:

1: The WHOIS entry ( https://whois.icann.org/en/lookup?name=altright.com ) seems strange to me:

>This domain name has been suspended due to invalid Whois information.

Is this a normal WHOIS message for sites that get shut down for ToS violations of the sort being described in the Twitter link? Does anyone know if the WHOIS data for the site was actually invalid? Regardless, that rubs me the wrong way as sounding like finding a technicality to shut it down. I wish they'd be more open about what they're doing.

2: Sites like this have had to change webhosts before, that's nothing new. Politically extreme content has always had issues with that (to be honest I'm wondering what Spencer was thinking going with GoDaddy rather than one of the hosting services out there that tends to be more resistant to outside pressure). The real question is what is going to happen to the domain name itself, if these people are going to be able to set up shop again with a different registrar. "Host it on your own server" is different from "start your own domain registrar company" as excuses for censorship, no matter how legitimate it feels.

3: No matter the content, we should be treating these events as canaries in the coal mine. The tech world has rightfully focused on countering censorious efforts by governments, but that's not the only source of censorship. Censorship doesn't just happen by governments; it can be done by private entities as well in the form of 'deplatforming.' This tactic has been proven to be effective, and there will be very little outcry because -- well, look at who's getting shut down. But it's not going to stop there.

I'm a free speech absolutist who thinks it's a culture and not just an 18th-century legal document. Censorship in the 21st century isn't going to look like what it looked like in the 20th century; it will be a new form that is harder to counter, harder to argue against with only outdated definitions as ammunition. I hope that in the future, the tech world finds ways to make "deplatform-resistant" content feasible at all layers of the stack.
Some of those missile launches look like they are flying directly over the SF Bay area.
Certainly. I made friends from those days that I still hang out with today, and who made me reconsider whether or not I'd ever join one of those organizations. But I was speaking in sweeping generalities that represent my own experiences in dealing with those folks over a number of years.
Unix is older than VMS (source: programmed on VMS when it was new), so it is unlikely that the unix file abstraction is a reaction to VMS.
Thanks a lot for your work on this issue, and for your references - especially [1].

I had a conversation with a friend a week back where we tried to estimate what is the reduction in economic growth due to the lack of a sane housing policy, and am happy to see that [1] addresses this question.
How fitting, this friend of mine could have been the tambourine man...

Thanks for the pointer!
Who said anything about reading a document?
It's easy to be incorruptible when you have no power.
Is it a pretty simple re-write or something that requires a lot of c wizardry?
A bondholder finds a sneaky way to trigger insurance against default
This is a nonsensical argument- the first amendment doesn’t apply to private corporations, unless your argument is that any random internet company is literally the United States government.
Sorry, how do you open source an HTML and Javascript project? Isn't the source already open by nature of it being interpreted at runtime? Is it just the licence that has changed?
You're right. Radiolab had a recent episode that goes into this; https://overcast.fm/+JaxJ5s
Ultimately, what the client sends to the server to get a successful authentication _is_ effectively the password (whether that's reflected in the UI or not). So if you hash the password on the client side but not on the server, it's almost as bad as saving clear text passwords on the server.

You could hash it twice (once on the server once on the client) I suppose, but I'm not entirely sure what the benefit of that would be.
There is no constitutional right to incite violence.
Amateur filmmaker’s videos are a time capsule of Tokyo in the year 1990
Construct is a fully visual game editor, no code is required. Impact is an engine, so you have to write your own JS to do anything.
you only “must” face that “problem” when dealing with people who are either overintellectualizing uselessly, as you note, or with assholes. the distinction is slim!
I don't think a password changing protocol would help make passwords disposable. Making people change passwords often will result in people reusing more passwords.
Genuine question—how would this bug be produced in the first place?

My (limited) experience makes me think that cleartext passwords are somehow hard coded to be logged, perhaps through error logging or a feature that’s intended for testing during development.

I personally would not code a backend that allows passwords (or any sensitive strings) to be logged in any shape or form in production, so it seems a little weird to me that this mistake is considered a “bug” instead of a very careless mistake. Am I missing something?

EDIT: Thank you very much in advance!
Walmart to buy 73% of Flipkart for up to $16 bn
I did a similar thing a couple years ago, it should still be pretty up-to-date:

https://infinity0.github.io/droid-hacks/

I go into a bit more detail than the OP does, though with less-flowing prose.
10 Natural Remedies to Get Rid with Dry Scalp
Your increased trust in these stores is motivated by .... what governance and audit structure?

yes, its a devils-advocate position. You might (for instance) have high trust because you know them from hacker traeff you've been on, f2f. I can't have this a-priori knowledge.

From here, this looks no better than "trust google" and in some dimensions looks significantly worse. Of course for the primary goal of "distrust google" it works very well.

(well done btw, its a good, complete list, and has apps I think I too would put on my need-list)
It's possible that the vision system evolved long ago under radically different circumstances and just had no imperative to get rid of it.
In macOS did you properly disable both automatic Files+Folder uploads to iCloud?
This is why you should turn on compiler warnings and heed them. It would have caught this.
What on Earth? – Getty Images FOTO
seems like a bug in your platform
The fact that such a code existed at all suggests that someone thought it was necessary. There must've been a fair number of unethical hobos.
Thats like saying french fries are an excuse for eating ketchup or other condiment. You would never eat/drink salad dressing by itself.
RMS was an absolute pleasure to work with. Fast, clean and efficient, and concurrent access was pain-free too. RMS supported streams as well as records.

Hummmph, it was kind of a pleasure on a VAX, but on a PDP-11 under RSX or RSTS/E the libraries for it ate so much of the (16 bit) address space that it became a real challenge to fit a useful application into memory.

Also, it only sort of supported streams, they were not really byte streams like Unix, but variable length record streams with CRLF marking the record delimiters. So porting Unix code to VMS was never quite as straightforward as one hoped.
Nice, I've also thought about moving all my notes and todo stuff to Org Mode.

I did figure out a way to sync org mode files between laptop and phone with low latency (unlike with Syncthing) running Unison inside Arch Linux inside Termux, using git to automatically merge conflicts. It's a little crazy, but seems to work? Maybe will do a write-up at some point.
Let's say you log requests and the POST body parameters that are sent along with them. Oops, forgot to explicitly blank out and fields known to contain passwords. Now they're saved in cleartext in the logs every time the user logs in.
On the flip side they will inherit millions from their parents.
Fair point on the group purchase. It still puts the app largely in the hands of content producers, which is a potential conflict of interest.

> I also wouldn't call NPR's app spyware by any means unless you call the vast majority of apps and websites spyware too

The 'Spywareness' that matters is relative: it's not so much a matter of whether information is collected at all, but rather how much & what information, in what form, for what purpose, and who gets access. The move from an indy content-neutral app to one owned by content providers changes the incentives significantly.

We don't know what will happen, so let's face it, anything we write is just speculation. But it would hardly be unduly cynical to suspect the direction to be towards more surveillance, and less support for the openness of podcasting.
You’re proposing that my having the freedom to not be forced to spread another persons message is actually me being censored?

That seems like a pretty convoluted way to say “I want to force this company to continue hosting this site despite their objections”.
self-sovereign down here, is synonymous with libertarian nut jobs who believe tax is evil, and they own their land absolutely to the core of the earth, and satellites in orbit.

Get off my lawn.

Also, for the deliberAEte mis-spelling of names, to try and assert some legal mumbo-jumbo around contract law, identity, and compliance with the state. Sorry Staet. I can't keep up with the jargon.

Its the chemtrails.
the problem lies deeper than film. america at its core is obsessed with wealth, and it's always been this way. the ethics of how the wealth is acquired and spent matters very little. we idolize drug dealers, mobsters, serial bank robbers, bookies, counterfeiters, etc.
> I've slowly been converging upon the belief that there's no such thing as "truth". There are only models and predictions, and some models lead to better predictions than other models. (What then is a mathematical truth?)

This seems like saying, "The truth is that there is no truth." Or the truth is that there is a set of models which are more or less the case and this meta-model is the actual truth. In both cases, the argument seems to implicitly rest upon the truth, or a belief of the nature of truth without getting out from under the thing that the argument attempts to deny. How can we talk about there being no such thing as truth without it turning into a sentence like:

This statement is false?
The time of day is known to both the client and the server right? So they check to see that they get the same hash.
Minitest 6: Test Feistier
From the problem description on Wikipedia again.

Before the first prisoner enters the room, the prisoners may discuss strategy—but may not communicate once the first prisoner enters to look in the drawers.

So they certainly could all use a pre-agreed random permutation to compensate for any insufficient or evil [non-]randomness introduced by the director.
"We have worked with several members of the community and are pleased to make CI testing available today for Fedora, and ARMv7 for Debian “Stretch”."
I can't think of a good reason not to hash on the client side (in addition to doing a further hash on the server side -- you don't want the hash stored on the server to be able to be used to log in, in case the database of hashed passwords is leaked). The only thing a bit trickier is configuring the work factor so that it can be done in a reasonable amount of time on all devices that the user is likely to use.

Ideally all users would change their passwords to something completely different in the event of a leak. But realistically this just doesn't happen -- some users refuse to change their passwords, and others just change one character. If only the client-side hash is leaked rather than the raw password, you can greatly mitigate the damage by just changing the salt at the next login.
The hell that is filename encoding (2016)
> However, many of the epidemiological studies are over very large populations and time periods, so it's not as though the body of evidence consists of a 6-8 week studies. And honestly the fact that the effects are so strong in such a short period of time strengthen the argument in some ways.

The studies all tell us nothing about the long term implications of diet. The long study tells us nothing because it is purely correlational. The short studies tell us nothing because they are not measuring the thing we care about (long term health outcomes). You can't somehow generate knowledge by combining two types of studies which each are incapable of generating knowledge about the thing we care about.

> I never claimed that meat was bad, only that leafy vegetables were good.

Yeah, I clearly was hallucinating. Nowhere did you mention red meat. And yet I rambled on about it for a paragraph. :-) Sorry!

But:

> I find it almost incredible that your argument against the nutritional value of leafy vegetables is that there aren't enough double blind clinical trials, and then your defense of red meat uses a time correlation that doesn't adjust for any confounding variables at all.

That's because correlation cannot demonstrate causation, but it can demonstrate the lack of causation. It's all about confounding variables, as you point out. If you have two trend lines which correlate, there can always be a third, unmeasured variable which is actually causing the two measured variables. However, if you have trend lines which do not correlate, then the only way they can be related is by some extremely convoluted chain of causation. Which, I guess, is technically possible, but rapidly approaches 0 probability.

In other words, epidemiology is very useful for narrowing the possibly explanations for some phenomena, and it can suggest places where we should continue focusing our attention, but it can't actually tell us if we've found the right culprit.
Denver Post editorial page editor resigns after fiery anti-ownership package
This is adorable. I like this. Good for Pocket Casts, I'm glad to be a user.
They can communicate beforehand to come up with this scheme - it's clear they just can't communicate after looking at the boxes.

The generic version of the scheme is, after looking in box N, look in box f(N) where f is any bijective function from [1, 100], and all the prisoners agree on the same choice of f. The version described on the wikipedia page corresponds to f(N) := N, but any of the other 100! such functions would do so long as they agree on the same one.
You spelled "avoidance" wrong...
I had a conceptually similar tool driving a startup way back in 2001. It failed because there was no market - people who couldn't code wanted to just hire a designer/developer. People who could code didn't care about a codeless web design tool. People who did use it nitpicked the resulting markup. Admittedly, many years have passed. The market may differ now. But I'd seriously validate the problem you are solving here.
From the same company that has also created arguably the best and most accurate weather app for Australia.
Tesla’s reporting leaves a lot to be desired.

Why wouldn’t Musk release a detailed plan of what is going to materially change in their production goals and capital expenditures over the next sixth months in order to finance their debt? Explain the process for how the make their projections and pronouncements? Explain why it is prudent to invest in multiple new models and production lines when his company is burning through $4 billion a year and can’t meet current production targets? Why doesn’t he explain how many of the 500,000 Model 3 deposits remain, given that at current production rates that will take almost a decade to meet? Why doesn’t he provide monthly sales figures like every other automaker?

> Tesla is public. Yes there is. Just depends on whether you can stomach the risk.

You understand that greater risk necessitate the possibility of greater return, right? What interest rate is it going to have to be paying on debt it raises? TSLA bonds are already at 8% interest, in junk bond territory.

If financials deteriorate further is he paying 10%? 12%?

In that situation how much of Tesla’s revenue is just going to be eaten up paying interest on the $10 billion in debt it currently has, plus an additional capital raise? That makes the cash flow issues even worse.

If Tesla raises equity, how much of a hair cut does the enterprise value take? With the amount of debt it currently has, it doesn’t take much before you start thinking insolvency.
Careless mistakes are probably one of the most common types of bug you’ll find in the wild
Yep. RISC-V has had easy to decode variable length instructions from day one in the compressed ISA extension. The base user-mode ISA has a set of simple encoding rules for variable-length instructions from 16b to 192b in 16b increments, and room to grow beyond that should the need arise. The current set of extensions only use 32b and 16b encoding space.
Your scheme requires the server to store the password in plaintext, and it's transmitted at least during registration.
The law doesn’t forbid you from selling to a developer, but the law does forbid the developer from turning a single-unit house into an apartment. Or even a duplex, a lot of the time. Just look at the zoning maps. Around Golden Gate Park, the height limit is 40 feet, and a lot of it is single-family zoning.
http://sf-planning.org/zoning-maps

A lot of the time, it is more practical to take that single-family house and turn it into a fancy single-family house. Satisfying gentrification.
https://sf.curbed.com/2018/4/25/17277290/glen-park-home-expe...
I think their goal is to still use https, but stop anything important from leaking if a sloppy server-side developer logs the full requests after TLS decryption (as Twitter did here).
New Rowhammer Attack Hijacks Android Smartphones Remotely
Thank you. I’m an owner and I’m a strong believer in this raising a tide that raises all boats. Lets let SF and the Bay Area become the hub of excellence. That starts with affordable housing for all who want to be here.
"There's been a mistake. You've accidentally given me the food that my food eats." -- Ron Swanson
> Not everybody needs health care

Everybody needs health care. Perhaps there's someone who wins the lottery and makes it through life without a doctor - though most don't get through their very first moments without one - that doesn't seem like something to plan on.
Hobo Humping Slobo Babe
Two—don't forget about ballpoint pens.
Using a SAT solver to identify breadth-first traversal order of a directed graph
▷11 Natural Remedies to Get Rid of Bad Vaginal Odor Definitely
No ads. Just "messages from underwriters"..
They can communicate, before they start. That's how they share the strategy with each other.

> Before the first prisoner enters the room, the prisoners may discuss strategy—but may not communicate once the first prisoner enters to look in the drawers

So they just write down a random permutation and give a copy to each prisoner while discussing strategy.
Agreed. Hobos are more like migrant workers, with heavy emphasis on the 'migrant' part. They try to live outside the norms of society, but not (necessarily) outside the law.
This is interesting, do you think people do this because the people they see in Desperate Housewives and the examples in the parent comment have a sort of "clearly defined" identity and people watching this media look at how explicitly defined these characters are portrayed and contrast it against their own sense of self, find it lacking (either because it is, because they imagine it to be, or because something like that is inherently truly difficult to pin down because in reality "bright line" definitions of character don't exist?) and then start to model their life on what they see because it gives them something concrete to centre themselves on?
I'm pretty sure that a minority group - Asian Americans - do much better than their white counterparts on the GRE. Don't paint this "white males vs everyone else" narrative since it's patently not true.

The score differences between racial and gender groups are quite small. Significant score differentials between individual test takers likely indicates more about their innate abilities than some hidden test bias.
* Thus you will never be in some other loop. Loops are disjoint. Disjoint circles, not train tracks that interconnect. Just loops. Think about that and realize it.

* This strategy guarantees you'll be in your loop. ("Unfortunately" you'll be at the end of that loop: the box that points to your number. But still, in the loop, which is the point).

* Thus if there are multiple loops, all of length 50 or less, you'll get your number before your number is up.

* And math shows that if there are 100 nodes in a randomly unidirected graph, 30% of them contain no loops greater than length 50.

So if everyone follows this strategy, 30% chance they'll win.
>> It's a great movie

It's a horrible movie. Terrible acting, no story, shallow characters, it's almost a parody of the Miami drug scene.
I keep seeing this sort of claim:

> The law, combined with parasitic no-win-no-fee legal firms, puts website owners at risk of vindictive reporting. Young websites and non-profits cannot afford legal teams. Therefore the risk posed by GDPR is unacceptably high.

Perhaps there is a legal difference in the UK/EU that I'm missing, but surely you could be operating this business under a limited liability entity, in which case the worst-case situation is you get a GDPR lawsuit, and fold your entity at no personal cost.

In the best case, you don't get a GDPR lawsuit because i) it's actually not as bad as the FUD is making out, or ii) you get lucky. Either way, you didn't need to shut down your website.

If you can't/won't spend the money to set up a limited liability vehicle, that's a different matter entirely than you "cannot afford [a] legal team". The former is O($100), the latter is O($10k) or higher. So yes, a new barrier for hobbyists, but not in a different order of magnitude than server costs.
May be you are talking to the wrong startups? We are a startup and we love to hire with such a mix of experience. Experience working at large and medium enterprises is really valuable(in addition to working at a startup). Did you get that feedback from multiple companies or is that something you are assuming based on not getting foot in the door?
Join a Leading Giant in SocialNetworking – SocialCircle
A new model for communication in plant cells
Although abbreviations, as Orwell pointed out, do tend to assume their own connotations—e.g. “Comintern” vs. “Communist International”, or more blatantly, “Nazi” vs. “National Socialist”.
I can't tell if this is a joke or not.

Don't pay "thousands" for GPDR compliance work which will improve your product by providing basic privacy and security features.

Instead pay up to $79 a month for a service to block a large percentage of your traffic.