skysight-inc/HackerNews huggingface dataset:
This seems great, so why does the article state:

> It remains in use today for certain special cases but is considered controversial and some surgeons refuse to perform it.

I imagine there's a reason, but I hope its not "doesn't look good"
If you use it to build homes you provide shelter for more people.
Not yet, thanks. How does it compare to Julia?
> Then what, who will use those data ? Thieves ? Criminals ? If it's just that well, that's a minor inconvenience.

It's only a minor inconvenience if you can sit in a comfortable place and pontificate on Hacker News about these things. Seems like you're not even aware that people have already lost their pension money or bank account balances or didn't get food that they were entitled to and died in the process — everything related to the coercion in the Aadhaar system and how it can be misused by others for fraudulent purposes.

Perhaps your privilege in life is standing in the way of understanding how bad things are with the Aadhaar system. Please search for #AadhaarFail on Twitter, look for articles on scroll.in and thewire.in (two sites that some people do hate) and rethinkaadhaar.in.
Not a website, but the german DWD WarnWetter App gets its forecasts directly from the german national weather service (DWD).
Zoom lets you record and share screens. Not free, but works with most operating systems.
The real question is what is the fractal dimension of fishing activity.
that short-lived moment of hope when I misread the beginning of the title as "actual science"
> I have no insights how Allegro managed to stay ahead of the global heavyweights.

Two sided market places have substantial first mover advantage, to the point where a global competitor has no way to break into the market. The same happened in NL with 'Marktplaats', which was eventually bought by Ebay after an unsuccessful attempt at dislodging the incumbent.
Price Runner is really nice, and I use it every time I'm shopping online, but recently they started adding foreign sites, as well as prices from pages they don't link to, making the price comparison pretty useless.

So what if someone, somewhere sells the same thing cheaper? Is it cheaper after delivery? What about warranty? What about import taxes (the main reason I'm not buying from the US)?

Their historic price graph is comprised of only the lowest price, which is often a price that is not accessible, because they gather price from foreign sites and sites and non-partner sites (which is almost synonymous with incorrectly price gathering on price runner)

Any good alternatives?
Clojure: core.logic
1) Those tests results would be highly correlated, so you wouldn't necessarily be much more than 99% accurate still.

2) If the prior probability of someone committing a crime on a given night is low, you are in the classical example of false positives doing harm via Bayes rule.
Love their resources, but having somebody to guide you to the resources that match your deficit is the real magic imo.
I too have a bad feeling about SwissID. Only SMS as two-factor authentication, turned off by default. No other methods planned, according to the support.

The fact that the Swiss Post requires it as login method makes me uneasy.
the demo is still not working for me...

update: it's working
Can someone explain what security does forbidding pasting provide? My brain just can't comprehend it.

Also, would a fix be a password manager that just ignores the forbidding or is it done with JS somehow?
Notably, SwissPass did not allow me to set a randomly generated, very long (>20 character) password.

It also didn't notify me that it didn't allow such passwords, it just went right ahead and created an account it was impossible to log in to.

Thankfully, I was able to reset the password to one which is far unsafer.

Well done everyone.
As long as there have been economies there have been periodic upheavals. I don't think that can be changed.

What can be changed is how the next meltdown/booming economy will affect our own personal finances. It's a life skill, one that should be given more attention in school.
Tooze makes the case that Fidesz's victory in Hungary in 2010 was a direct result of the terms of the IMF bailout. That the supremacy of the Law & Justice party in Poland was a result of the crisis. That the fall of Tymoshenko and Yushchenko -- tarred with the pains of the crisi -- in Ukraine led to rehabilitation of Yanukovych and the subsequent Russian invasion of Crimea.

In Greece the populists didn't take power in the same ways but it is disingenuous to pretend they didn't exist and exert power as a result of the crisis. To call New Democracy -- the party that took power after the crisis -- "not populist" is a mis-reading of history, I think. They campaigned on fear of illegal immigrants, after all. And the second biggest party is SYRIZA -- which is definitely populist -- and which didn't even exist until the crisis destroyed PASOK. And by 2015 SYRIZA's clearly populist platform was enough to take it power in Greece.

One of the themes of Tooze's book isn't that the consequences were immediate. Sure, it took 6-7 years for SYRIZA to get to power in Greece. But that is still a direct consequence of the crisis.
It's been years without any improvement at all. So yeah, I'm annoyed. I'd even be happy to give them money monthly, but the apparent priority of this issue is at the bottom of their list, if it's on there at all.
Internet Architecture Board on the Australian Assistance and Access Bill [pdf]
How to Build a Cross-Browser/Hybrid Video Chat App with WebRTC
Its more what you do with the language than the language its self.

eg when I extended the GINO-F drivers for the top of the line HP plotter that's systems programming but the GUI system I built to analyse soil samples was not - even though they where both written in the same language
after tanking a whole day to configure cockroachDB now i have to configure watermelonDB too ? lol.
FDA approves magic mushrooms for treating depression
And who makes them change it? I would have to micromanage every single person into setting their voice activation right.
Are you seriously arguing that the average peasant had the luxury to not work because they were feeling burnt out?

Not that it matters too much, but a holiday in the Middle Ages didn't mean the peasants didn't work, it just meant that they didn't eat meat. Otherwise it was work sun-up to sun-down 6 days a week for barely enough food to keep your family alive - that is provided there was not a harvest failure two years in a row.
The rating agencies absolutely did not do the right thing. There were contemporary pre-crash criticisms of their rating of mortgage backed securities so this is not Monday morning quarter backing
> But whenever you have a burst of scale and Lambda needs to spin up more instances... some of your unlucky users are going to hit that cold start. And this hack of keeping an instance warm would do nothing to solve that.

I've been doing a bunch of reading as a side-effect of being in and around the riff and Knative autoscaler efforts. What you're describing is known in other professions as a "stock-out".

The good news is: there are existing models for answering this kind of question. From what I've seen the "order up to" model is a fit, but I've yet to find time to work on testing that theory.

The bad news is: this problem never goes away. You are always going to be oversupplied or undersupplied. Autoscalers don't let you break Little's Law or overturn causality.

The good or bad news, depending on how you think: this tradeoff can be tuned. You can choose an acceptable probability of running out of running instances vs the acceptable average level of utilisation. That tradeoff is purely economic, it is a business decision, not an engineering decision.

An autoscaler cannot throw the bones, gaze into the crystal ball and mystically divine your intentions. A human will still be responsible for the decisions that matter.
Forbidding pasting provides the security of having to click "Inspect elements" before the hacker can proceed.

(Most PW manager plugins I know already ignore pasting properties, though a bank I was customer of circumvented that; the textbox was actually a DIV and they had coded the functionality of a textbox into it to prevent pasting)
Two points:-

1. Surprise, there's a separate $10 application which can access all the Aadhar database entries. Exposed by one of the journalists of this story, for which she got a police case filed against her. [a]

2. Aadhar has no way to verify double entries, one whistleblower to Supreme Court said the database has 40% bogus entries, i.e. 450 Million fake IDs. Yes, no verification backup documents, no signup forms exist for 40% entries in the database, and authority has no way to audit them. [b]

a. https://www.tribuneindia.com/news/nation/rs-500-10-minutes-a...

b. https://ia802809.us.archive.org/26/items/Aadhaar_Whistleblow...

Bonus: Aadhar database was at one time hosted in US with FTP password being Admin$12. This is the state of this sham project. https://imgur.com/a/2sppFrm
How hackers slipped by British Airways defenses
Look at job ads? Contact the company? Write a CV? How is non-tech different than tech position in that regard?
Nice article.

My view of Systems Programming will forever be colored by my start with IBM mainframes. The Systems Programmer maintained all the utilities that the mainframe provided, and also the frameworks that supported online programming.

I suppose today's equivalent is a combination of a sysadmin and an applications developer, providing the applications are things like container components, build pipelines, etc.
Matt Might (the subject of this article) gave a jaw-dropping talk a year ago, named "Winning the War on Error - Solving the Halting Problem and Curing Cancer" [1]. At least you can't blame him for the lack of ambition! But the best part is he's really getting it done. His security research led to developing very successful static analysis tools that exposed security bugs in real code. And he did manage to find a treatment for his own son's rare genetic disorder.

[1] https://www.youtube.com/watch?v=MdmQUlD7P40
It's good to keep in mind that CRISPR is but one technique to do gene splicing, it's not the concept itself. Different ways will be discovered now that it's proven to be viable.
A lot of the complaints on Agile are on its use as a system to micromanage. My experiences with Agile involve it being applied to a subset of the organization and in a limited fashion, for example only having standups and no planning meetings.
I believe that the argument they rely on is that if you're pasting it then you must have it written down somewhere so that you could have copied it.

It's not a completely left-field position - it's definitely wrong in a modern context - however, previous years of security advice did focus on not writing passwords down.

I have also heard that they believe the removal of the option to paste removes the ability of attackers to exercise brute force attacks against their site. This betrays a lack of understanding of multiple technologies, though.
Only $20? That actually seems quite reasonable for being caught avoiding taxes. In theory, it should be possible to declare and pay VAT in advance, but I have never figured out how.

Anyway, the penalty used to be much more. I've payed over 300dkk on a 100dkk item years ago.

Amazon.com offers to take care of import taxes for you, and many of the dodgy Chinese sites offers tax-insurance.
It's sad that what Troy is arguing for sounds like the best we can expect right now and he is probably right.
Ideally, there would be mandated processes for any commercial company like any serious security vulnerability must be fixable within x hours/days (if a fix is available) i.e. the excuse can't be, "we don't have the means or money to fix that right now" and there are certain things that seem to be accepted knowledge in the security community (like password managers) that somehow are allowed to be circumvented by random companies because they decided so.

The real question is why isn't there a mandated list of global best-practice for web app security that can direct any acceptance test of any web site? Can't people like isaca and isc2 agree something and make it the gold-standard?
And not only of its citizens.

https://en.wikipedia.org/wiki/Biometric_passport
Git-gazer：A graphical tool to witness repository stargazers trend and activity
> general purpose VM

With unblockable banners, uninspectable unmodifiable code and other garbage.

The current state of affairs is just perfect balance, webassembly can seriously hurt the user if it ever gets good-enough direct access to DOM.
Cyber Risk: don't wait to get fit before you work out
Snarky aside: you can also install a real Prolog (e.g. SWI Prolog) and run that in an Emacs session, and will be more performant and expressive than anything you would build on top of Emacs Lisp
Soundlister.com – The Place to Find Audio Professionals – Search:
well I am just moving to the US and literally theres like 5 software dev positions for 1 non-tech position. I find it difficult to see how startups would benefit from an intern who is not a software dev
You are attributing to me approval when all I am doing is describing the problem.

I don't have a good solution given the current economic system.
Charlie Shrem Has Seen Bitcoin's Ups and Downs. He Thinks Bitcoin Is Best
Stunning to see what a little outside motivation can do, isn't it?
> treating it exclusively as basically chemical imbalances within individual bodies

Dunno where you live but over here we stopped doing that fucking years ago. This is why things like IAPT (Improved access to psychotherapy, a short course of normally cognitive behavioural therapy) has been the recommended frontline treatment for many mild to moderate mental ill health problems for years. In the UK psychologists are important members of multidisciplinary teams, and psychological therapies are strongly recommended in NICE guidance for a wide range of problems.
"it's not like they made up false information"

Uhhhhhh, you haven't been paying attention. The "DNC hack" was just one of many intrusions perpetrated by the Russians with the assistance of GOP leadership.
> I wonder if AWS Lambda could be smart enough to anticipate requests based on some historical or daily pattern.

This is called "predictive autoscaling". In other fields it's called seasonality and you can build inventory and manufacturing plans around it.

While researching FaaSes last year I saw a slide deck from an Amazon PM about Lambda (I promptly lost the link). The thing that stuck with me was a claim that a substantial amount of their autoscaling "magic" was due to predictive autoscaling.

Netflix wrote up[1][2], but have not opensourced, their predictive autoscaler "Scryer" in a few blog posts. The tl;dr is that they use a combination of fourier transforms and simple correlations to make a basic forecast of how many VMs to have ready at different times of day. A reactive autoscaler adjusts on the day.

[1] https://medium.com/netflix-techblog/scryer-netflixs-predicti...

[2] https://medium.com/netflix-techblog/scryer-netflixs-predicti...
Seriously. The hate for JS is strong, but I don't really see why.

Use typescript if you want, but I don't really see the issue. There are funny things related to implicit type conversion and some rules produce funny and unintuitive outcomes. These conversion can be very handy on the other sides.

"Math.min() > Math.max()" and they are damn right that this is true!
Building houses is great, but if you're growing the trees in order to sequestrate carbon, you'd better be reasonably sure a decent proportion of the wood doesn't release it's carbon within the next fifty years. I don't live in a country where wood is a major building material, but I'm imagining that most wood that goes into building gets discarded within a few decades and ends up decomposing or being burnt.
As I remember, a lot of company didn't want to move to LE because their root certificate was not present in a lot of devices and those devices cannot or will not be patched to include it. Due to this, if you were, for example, on a old Android phone, pages with a LE cert would show as being insecure.
defined over half a decade ago and it is still up to date.
I think many IT organizations should seriously think about it
The combination of 'Baking HIBP into Firefox' and 'Cloudflare did some great work' and 'sends this to the API' just sounds bad.

We are talking passwords here, for god's sake, I want nothing be sent nowhere, let my browser and me alone.
In my opinion, that whole 'moving away from us faster than c' business is not really a good way to think about this: For one, we can see to a redshift of about 10, corresponding to a comoving distance of about 30Gly, and a recession velocity of about 4c (four times the speed of light!) at time of emission.

There's a cosmological event horizon. Light emitted from within will reach us in finite time, light emitted from without won't. Similar to how a distant observer will never see on object falling into a (stationary) black hole cross the Schwarzschild horizon, we won't see galaxies crossing the cosmological horizon.
Without reading the book or even TFA, I'll comment on the concept of everybody doing the "right thing" leading to bad outcomes.

I have a hunch that this is a pretty universal law, and the only way to mitigate it is through regulations that ban some of those "right things." I think that honest, moral players welcome good regulations because it keeps them from having to go down a slippery slope.
TCP overhead does indeed increase as MTU decreases, but not because "TCP needs to keep track of packets" -- TCP in fact keeps track of bytes, not packets. The reason that overhead is larger for smaller MTUs is simply because of the extra per-packet overheads (looking up connections, allocating memory for ethernet/ip packet headers, (uncontended) locking, repeated function calls to L3/L2 network layers and network drivers, etc).

The fact that TCP tracks bytes rather than packets enables hardware offloads like TSO/LSO (TCP Segmentation Offload, known by some as TCP Large Send) and LRO (Large Receive Offload). TSO allows TCP to treat the effective MTU as large on the transmit side, and to send a single large packet (up to 64K everywhere but windows LSOv2) down to the network card, which then segments it into 1500 byte chunks.

Similarly, on the receive side, LRO can make a small MTU appear large to TCP by transparently merging adjacent TCP segments into one much larger packet which is then passed to TCP. This can be done in hardware or software. Linux calls this GRO.
> Because a two-line package should not need money to maintain it.

I didn't bring up "two line packages", the websocket package in question is more on the size of 20k of code lines.

> The payment is intended to make up for some of the time the developer of the dep expended, it's not supposed to be proportional to the utility other developers get out of it.

Repo size doesn't always mean time expended.

> That's what makes it still OSS and not commercial software.

OSS can still be commercial software. Code could be A/GPL and still offer commercial license's to remove restrictions.

And as others have said in this thread its often the smaller / less well "known" packages that don't get much "love" when it comes to financial support.
Remember the good old time when cdon only sold cds? And there also was a webshop called dvdon? I never buy things from cdon anymore, there is something about "we have all the things" stores that feels kind of off putting. I don't know, but maybe the illusion(?) of stores selling only one category of products make it seem like they know more about the products than someone that sell everything from socks to lawnmowers and cds.
1) this isn't risky or dangerous

2) do you also avoid leaving your house entirely?? because you are likely to run across homeless people in other public places than the subway. The worst smelling homeless person I've ever encountered was at a grocery store.
SQLite gives you just the "data fetching" part. But if you're building a React/RN app, you probably also want everything to be automatically observable.

For example, if you have a todo app, and you mark a task as done, you'd want the task component to re-render, the list to re-render (put the task at the bottom), and update the right counters (the counter of all tasks, and a counter of all tasks in ta project), etc. I hope you're getting the point.

Watermelon is an observable abstraction on top of SQLite (or an arbitrary database), so that you can connect data to components and have them update automatically
Companies using Clojure
It is unfortunate indeed because I would like to read the comments in the blog as well.

Despite the recovery of the "lost" or invested 1.8 billion, the story gives no good impression of Larry Summers.
California Bill for Carbon-Free Power by 2045
It's not OK to make ordinary people's lives difficult just to further your own political interests, regardless of how noble those interests might be.
Im in Barcelona and have same day delivery for a lot of stuff, next day delivery for a big selections, and 2 days almost anything on amazon. I get next day deliveries from both the local Amazon warehouse, and sometimes from the South of France. Amazon have their own delivery people here that deliver about 60% of products i order with other delivery companies used for orders coming from out of country.
This comment reads like a hot-take based solely on the subject without reading the article because you don't really engage substantively with any of the nuances the article talks about. As such, I'm not sure it really contributes as much to the discussion as if you did engage substantively with the details of the article.

For example:

Even if there was no alternative, that doesn't mean a clear understanding of the costs & downstream consequences is a bad thing.

Even if some kind of bailout was necessary, bailouts can take many forms. Do you think the bailout chosen was the best form?

There wasn't, actually, one bailout. There were many ad hoc choices made along the way. Why was Lehman allowed to fail? It was purely an ideological choice; the Fed clearly had the ability to save it, they just underestimated the pain it would. Why were swaps extended to some countries but not others? Why didn't the ECB help out Hungary or even Austria?

For that matter, why was the Federal Reserve acting as a global lender of last resort without telling anyone, not even Congress. (It required a Freedom of Information lawsuit that went all the way to the Supreme Court for the Federal Reserve to turn over details on the full scope of their swaps with other central banks.)

Maybe the bailouts should have happened exactly as they did but the optics & politics should have been done in a more transparent fashion?

But taking such a non-nuanced, instrumental view I feel like you make the discussion less interesting than it could otherwise have been. And because it was a "first comment", it then warped much of the entire discussion on the topic. This thread has 80 replies and 55 of them are to you.
Yeah :/ There used to be this thing called Web SQL (which really… was SQLite)… but… people didn't like it and it didn't catch on. So on the web, Watermelon uses LokiJS, which isn't perfect, but still works well.
OK, calm down for a minute. You need to read how k-Anonymity works before you continue to comment on this:

https://blog.cloudflare.com/validating-leaked-passwords-with...

It isn't sending a plaintext password, not even a full hash of the password. This is entirely fine..
Ah yeah, I've done bus boarding before (although not the Dulles thing), wasn't considering that. Still seems like you could time that boarding of the earlier vehicle to just start earlier.
Were these loan sharks prosecuted? Probably yes, but that won't bring back the lost percents of GDP.