skysight-inc/HackerNews huggingface dataset:
I guess the second part of Infinity War, coming up next year. Filming of that one has long been completed. But I'm not up to speed with the MCU at large, so there might be some other minor movie. EDIT: there is Captain Marvel too, already wrapped; and there are rumours that others might have already been filmed, for projects further down the line.
You can use the Native Messaging API. Password Managers used to use a localhost listener, but it's less safe than Native Messaging.

But if you stick with the HTTP listener, as someone else mentioned, while you're installing your app, you can edit the user's host file to add a domain name to the loopback adapter, and then you can also create a one-off SSL cert for the computer.
afaik native messaging requires platform dependent things such as registry entries on windows.
I try not to respond to emails with one liners. If it deserves a response, it deserves a complete thought. I hate sending something to someone and getting a "thanks" reply back. I get that you appreciated what I sent you but if your reply isn't going to affect anything, don't respond. Shoot me an IM if you really need to give me a one liner.
Market leaders are generally in favor of regulation, for that exact reason. Sometimes they'll play the protest game in public, but privately they are happy to see regulation.

If YouTube is actually lobbying against this both in public and in private, then I would personally consider that extremely strong evidence this is really bad. However, I have no inside info on their private position.
> Sounds like they could solve this really easily by just hiring a lot of people

They could catch the obvious stuff like people uploading Hollywood videos, but the reality is that humans will let tons of stuff through, and also accidentally block stuff that should have been allowed.

There's far more copyrighted content than a human can even view or listen to in a lifetime. There's just no way for a human to know what's in violation and what isn't.
char8_t is the type, u8 is just a prefix for constants, like u8"xxx";
And it's only in C11++, not C11 AFAIK.
I work. That's common.
Trolls rolling in
Most C is inducted into C++ eventually. The point is that it would be nice to have something like RAII without subscribing to the full C++ perspective.
I'm a developer who's been taking a crack at the convenience problem of selfhosting. I've been hosting my own services with various success for the last few years, and maintenance has never been an issue. Once the software is running, it's pretty trivial to update it.

The biggest pain point is installation. Most selfhosted software has a ton of dependencies to install first. And after that there's usually some configuration that has to be done before it will work. A complicated installation is enough to drive even tech savy users away.

I've had some luck with my own software by targeting Windows users as well. Most people don't want to setup a linux box just to selfhost a single piece of software.
Personal Finance tips
"Towards oblivious sandboxing with
Capsicum" describes a capability-aware shell: https://www.engr.mun.ca/~anderson/publications/2017/towards-...
They recently added that:

"Oct 9 - This is in the next release for various apps." [1] the PR is from Oct 6 [2].

It is a very basic implementation as of now. The wordlist is English-only, and it doesn't have a minimum character account so it contains 'words' such as 'aa' and 'aaa'.

[1] https://community.bitwarden.com/t/add-an-ability-to-generate...

[2] https://github.com/bitwarden/jslib/pull/12
I don't see how you can consider them unrelated. If you are going to exercise editorial control over your platform you become responsible for (and potentially liable for) what makes it through to the public.
Personally, I don't recommend anyone without much knowledge in security to use "personal servers" to reduce threats. Even if it's in a private network, a server/container/whatever without recent security patches/proper configuration is no way more secure than well-managed public ones.
Video hosting sites lose money, so it's not like a contender will ever appear, unless the EU pours a ton of money into it, and not even then (just imagine how many EU funds Dailymotion has probably taken)
> going beyond the "good samaritan" allowance of section 230 the way they are currently being performed.

These experts of yours must be illiterate, because the law couldn't be clearer. Quote:

No provider or user of an interactive computer service shall be held liable on account of any action voluntarily taken in good faith to restrict access to or availability of material that the provider or user considers [obscene/harassing/otherwise objectionable/etc.]

> Many, who are experts on the law

Name one!

Here's a pretty good summary how the provision in question came about as a response to exactly your 30-year-old flawed reasoning. Plus the site design even fits with how 90s retro this debate is: http://www.cybertelecom.org/cda/samaritan.htm
It looks like this could be used for really interesting effects in movies and video games. Is anyone actively working on something like that?
"Sounds like they could solve this really easily by just hiring a lot of people,"

Who are you going to hire who can watch a video and instantly know every copyrighted piece used to produce it, judge whether or not the piece is one or another sort of "fair use" correctly/consistently etc., and be correct enough that YouTube feels safe taking on the corporate liability?

Getting this right is more than just "a human views the video once". Sure, there's some obvious piracy, but a loooot of things that are not obvious piracy would require active research.
That requires you to also ship the private key to end users, and your certificate will be revoked once the CA discovers it
I was more interested in the list of software than the ansible playbooks. Minio was especially interesting as I just started doing cloud development and have yet to figure out how to do it offline since my app fully integrates into S3.
I feel many fluent API's are guilty of something similar. You gain terse, one-line magic statements that accomplish a lot; you lose discoverability and meaningful object-oriented class names.

For example, ElasticSearch's NEST API client uses a fluent-style API to setup configuration and mappings. It started out well, but then I got lost in a forest of nested callbacks on various mystery objects. It was a bizarre way to build what should have been a tree of strongly-typed POCO's that have a 1-to-1 correlation with the server-side concepts. Worse, I didn't see a way to dynamically manipulate the (hidden) result. Better to use the low-level API and a little reflection to compose the required JSON manually.

[On the other hand, I can think of successful fluent API's: .NET's StringBuilder works because it is super simple (only returning instances of itself). The IEnumerable extension methods (created to support LINQ) work because their broad-applicability justifies the effort to learn.]
The paper claims to reach the global minima of a given neural network in polynomial time. The time complexity of constructing a neural network that approximates any function is an entirely different matter. I’m not even sure how one would begin to approximate a highly algorithmic process (e.g., a hash function) using a neural network.
The native messaging api is buggy and limited and requires lots of platform specific code. It's not a good solution for any problem.
It is very cool for me to hear that something I did years ago was memorable for your family. Thanks for saying hi.
The neatest thing for Stan Lee must have been to see the realistic-looking movie adaptions of all those comics that he worked on for decades.
In my experience no one likes seeing single-letter variable names (except for i, but I have even heard criticism of using e to represent an error). As for your second example, whether it provides clarity or convenience is entirely situational. If you have a long render method then specifying that a variable is coming from props may be helpful but the most common standards call for props to be passed to a functional component that has a single responsibility, i.e. destructuring props and rendering its respective values.

Sorry if I missed something but I also don't see an endorsement of bad variable names in the OP's handbook. The comment just seems a little out of place, thought I mostly agree with it.
The audit was literally completed last week. Immediately pressing vulnerabilities were patched and shipped while plans were established for other long term fixes for the others. This report just provides disclosure of the issues.
The kind of subject I love...!!
> The implementation can be far more efficient

Really, really hard to believe. Not only since returning unions is already legal (isn't it)? What function do you have in mind where an explit error-return-pointer argument is not close to maximally efficient?
What's the issue with OATH? It's a standard with widely available tools, and it offers additional security compared to a password.
I can't say I was quite as good about unique and strong passwords, but up until maybe a year ago, I just memorized all of my passwords. I had a few that I re-used a bit, especially for non-critical web sites.

Finally, I started out with LastPass. (Now I use BitWarden but the experience should be very similar.) What I knew I needed was something to work with my desktop browser, and something to work on my phone with any apps with logins, and with my mobile browser. A year ago, LastPass worked great with desktop and mobile Chrome, and Android. (BitWarden is a little trickier to integrate with mobile Firefox, as I outlined elsewhere in this thread, but it's constantly improving.)

So, you set up your new account, you choose a really amazing, unique, strong password like the world has never seen, and that's the only one you need to know. But there is that transition.

Install the password manager app and add-on(s) as needed on each place. Each will want to know your login and super amazing password, so you'll get to exercise your memory.

You probably want to go to each site and app that you infrequently use, log on in, add it to your password manager - or just do so directly, but you want to make sure the URLs and app references are correct - and move on to your everyday activities. (You can revisit later if you want to update it to something randomly generated.) Then go about your daily business, and if you get to apps and web sites you haven't added to your manager, no big deal - just let the manager remember it.

It's all really simple. Now, if you really want to do your due diligence, go back and update the password, especially for mission critical accounts, so that only your password manager knows the password, and it's as strong as possible.
>>The way I think I have no clue why people take risks like this other than for the obvious fame and fortune.

Those are both pretty great motivators. There's always going to be daredevils and explorers who are in it for the thrill as well. Being "The first to..." or "the only to..." is a superlative people feel might be worth the risk. Besides, without people pushing the limits, we never know what might be possible.

And there's some societal value to events like this. Maybe we find out something about survival in hostile environments or mission logistics or how to run a proper search and rescue operation.
Oh man, I'd really have to bend my perception pretty far to interpret this as anything but a reference to suicide, given how many there are among their workers.
Well, without reading the whole paper, two important things strike me.

1. Zero training loss is impossible in most networks because the last layer can only reach the targets asymptotically.

2. Zero training loss means nothing from a practical standpoint. We've had algorithms capable of this for a long time (knn [k=1], decision trees etc.).
I don't think avro helps in any way.

Right now, the common solution is to have some query-builder library which is able to build up a SQL string for a given database based on higher level descriptions of what you want. See ActiveRecord, SQLAlchemy, etc.

This lets the query-builder library hide differences between different sql languages as part of its internals.

These query-builder libraries typically come as part of an ORM, which means you define your data as an object in your language (e.g. a ruby class).

From what it looks like, avro would only be useful for replacing the definition of an object (the programming language class), but that's not a sticking point right now, and defining classes in your chosen language is easier than pulling in a different schema language... and replacing that portion still doesn't help with the true problem, which is that a SQL string for MySQL may not work on sqlite.

I don't see how avro could help in regards to the different wire format different SQL databases have, nor could it help build queries as far as I can tell (e.g. knowing that 'ON DUPLICATE KEY ...' in mysql is kinda like 'ON CONFLICT ...' in sqlite).
Even if it could store these differences, the query-builder library already stores them quite efficiently in their language, and such libraries exist for almost every language.

I do not see how Avro helps anything in this area. If you could describe in more specific detail where you think Avro might be relevant, I'd be happy to consider it from that angle. Your comment above is a bunch of words which talk about avro, but not about how it might apply to this specific problem. (Also, paragraph breaks help readability)
For something really small the ubiquiti edgerouter devices which run their EdgeOS are a good choice. If there's a serious security vulnerability on the WAN-facing interface it will be patched. They run a fork of Vyatta. Ubiquiti employs most of the old Vyatta development team, who did not go to Brocade when Vyatta was acquired.

Or build a really small low power x86 system with a few Intel gigabit NICs in it and run open source VyOS.
I find your analogy very concerning. It looks like it’s already the case with Russian troll factories and who knows who else.
Sorry no. ACTUAL tech is already a tyranny but that's not "technology", that's only a kind of possible evolution, mostly finance not tech.

We have had plenty and we still have technology that are free, that enforce freedom, they are always attacked in various forms, from "legal fight" against phenomenon we formally want to fight but with a second not-so-disguised target, they are pushed to oblivion with colorful (web)interfaces, locked down because of hw evolution etc but they exist, they are still tech.

Do NEVER think that what we have today is the sole possible, most advanced, less ugly possible society/world.
Educational purposes I suppose.
The report doesn't close the issue. It just provides an explanation for the current state of the issue (along with a current workaround) and details the impact of how it affects users.
Accurate Online Speaker Diarization with Supervised Learning
I'd say that's true efficiency. They are managing to annoy you at a rate approaching 100 times per minute!
That's a fair point -- most (all?) SQL servers use the connection limit as an indirect transaction limit, rather than separating the two (in which case BEGIN TRANSACTION would sometimes have to block or fail).

Are large numbers of concurrent transactions really an issue in practice though? There may be some per-transaction overhead, but I haven't seen any stern warnings about it, e.g. in the Postgres docs for max_connections.

> Thus, a backend concurrent connection (i.e. transaction) cap of N, translates to O(N) concurrent MVCC "world states" that the DB engine has to keep track of. No matter how efficient the DB engine is at doing that, that's still a lot of state!

I don't quite see what you mean about world state. An abort just rolls back changes made by the aborted transaction, so I would expect SQL engines to store a diff of each updated row. And if that's the case, it seems like a single huge transaction could use as much memory as many small transactions, if the same rows were modified.
You should try it:

https://www.buzzfeednews.com/article/katienotopoulos/i-tried...
I agree with the general sentiment, but this idea has its limits: people also purchase loot and other digital products compulsively.

I don't believe they do it to be « better versions of themselves ».
On a slightly unrelated note, when did Medium start blocking content and prompting you to upgrade? I can't read this article.
I imagine that most lingo dialects have a subset of terms which export more easily. A concise hacker community-originating term for compromise seems like a prime candidate.
Please don't post unsubstantive comments, especially on flameprone topics.

In particular, it isn't good to cherry-pick the most provocative thing from an article and drop it in here as a drive-by. That usually guarantees a flamewar.
According to some initial Googling, it looks like Foxconn had one year where 14 people committed suicide out of nearly one million workers (2010, their worst year for suicides). The general suicide rate in China is about 22 in 100,000. Seems like the Foxconn suicide rate is significantly lower, right? Or am I looking at the numbers wrong?
Please support the author in their endeavour. Sign up with your email to get the book. It's a small ask for a big win.
>Any readings on how European unions work?

To me, the major and defining difference between US vs. European management/labor relationships is found in Germany's principle of co-determination.

https://en.wikipedia.org/wiki/Co-determination

Under these rules, the boards of directors of companies in Germany are required to include a significant portion of their voting membership to be drawn from worker population. As such, governorship of the company is at least partially beholden to the input of the persons who create all its value.

This is starkly contrasted by US capitalism, where the workers who create all the company's value have effectively no say (apart from collective bargaining and strike) in any directions the company takes. The idea of workers voting on the board is laughable in the states.

Co-determination was enshrined right after WWII, in part because the Germans looked around at the industrialized barbarism of the Third Reich and asked themselves "how can we prevent this from ever happening again"? The answer they came up with, in more ways than just co-determination, was to pointedly not hand the country's capitalists everything they wanted. They decided to place serious checks upon the power of capitalists.

It's important to never forget that once in power, the Third Reich's first act was to round up, imprison and murder labor union leadership, socialists and communists. Co-determination is one way to remember.
Your idea would seriously uglify code. If we want the function's result and the error, we have to capture the return value in an object. If we just do

if (library_function(arg).result < 0) ..

we have lost the errno. For the complete analysis, we must now do:

struct error;

error = library_function(arg);

// test error.result; if bad, work with error.num

Yes we have had struct returns (proper, on-stack ones) for more than 30 years, which means we could have had API's like this for 30 years.

I agree that errno for math functions isn't such a great fit. It's much better suited for I/O and resource management.
Other possible consequences: https://www.smbc-comics.com/comic/gmail
Engineering Biology, for Real?
People collapse in industrial settings all the time.

But a person jumping from a roof is more similar to a screw falling.

I guess maybe if a person collapsed while working, others might stop working and help. But a suicide jump would be just another thing they can’t intervene in.
This is great to read. I played with JavaScript many years ago (over 10 now I think) and need to get into VueJS very soon. It sounds like this book will help.
This will be amazing for simple webapps!

In a lot of use cases, all you really want is a simple way to read and save a small blob of data.

But to achieve this today you would have to do one of:

- Save it in local storage, but lose their data if they clear it or use another device.

- Build out a REST API backend, but need to also build auth and account management.

- Use a backend as service such as firebase, but still costing you to store the data.

- Use a filepicker api to save to the user's cloud storage. For example Google Drive has a file picker: https://developers.google.com/picker/. But not everyone use the same cloud drive (icloud, dropbox, onedrive, etc).

With local file access, it's more or less the same as the filepicker api solution except they are free to save it to a non-syncing file location too if they choose.
Reminds me I haven’t updated my pfSense router in awhile. Nor have I ever heard about a flaw like this for them as it were.

But also, can we stop with “pwns” in a serious website? Almost makes me think the comment section would start with someone saying “First!”.
Airbnb and eBay will end forced arbitration for sexual harassment claims
I've been using wildcards for all my domains on Lets Encrypt for some time now.
This isn't about nc's pledge call, this is about the thing that might call nc. A shell that is prevented from calling socket or connect, but can exec nc, is still able to establish a network connection.
I don't understand how an experienced technical contributor who can speak five languages ends up sleeping on a factory floor unpaid in China. I don't mean to demean your story, I only mean very literally that I don't understand it. How did you end up in such a situation? You were in California, Switzerland, Vancouver....how did it get to this point?
Not all networking happens in person. Send emails to former colleagues and let them know you're looking for business. Ask around in online communities. Reply to strangers' tweets. Just keep talking to people.

I made a little app to help HN users network with each other. I can't promise you'll find what you're looking for, but it's free: https://findkismet.com
You're thinking of agriculture north of the tropics.

But there have been many societies which

- didn't engage in agriculture at all, or

- engaged in tropical horticulture, which is low-effort

And those societies (plains Indians / Australian aborigines / sub-Saharan Bantu (they're farmers! But they're not labor-intensive farmers) / central Asian Turks and Mongols / etc. etc. etc...) are characterized by near-constant warfare.

Not all societies are ancestral to yours. Most aren't.
Can't read article, it wants me to pay $5.
JavaScript Game Framework Based on P5js
Please don't turn HN discussions into predictable ideological flamewars. Those are tedious and therefore off topic.

There is interesting historical material in this article, which most of us probably didn't know. (I didn't.)
Fiber internet uptime: myth vs. reality
Assuming each content checker can process 8 hours of video a day, you'd need 180,000 (wrong, 100k as corrected by the commenter below) people working to review every video. Sure, YouTube doesn't need to review every video, but that 8 hours a day figure is being very generous. Account for management, documenting the results of review, appeals process, training, etc. and the throughput of reviewers is probably less than half of 8 hours per day.

Even if only 1% of videos get flagged for review, YouTube is still looking at ~50% of all it's employees working on reviewing video.
I try to not do this either myself, but at the same time, I wish people do this a little more often.

Some people are just bad at replying things, and even an one liner would save me from wondering and/or needs for follow up of "did you receive my message?"