skysight-inc/HackerNews huggingface dataset:
How often do you purge your mailserver's logs (or if you use a mail API, how often do they purge their logs)? If it's "Never, I didn't think of that." then all your user's inital passwords are sitting there for the taking.

Of course, you may have a system that forces a password reset on login. That won't help the users who have never logged in. Those accounts are freely available to a hacker.

Plaintext passwords anywhere are a really bad idea.
As a high school dropout that is self educated, I don't appreciate people dogging those who take the effort to forge their own path. You can learn complex topics outside a formal education system and your comment offered no specific assistance. So in the spirit of the holiday, thanks for nothing.
Demystification of TC
gwern has a very involved post on archiving as well, https://www.gwern.net/Archiving-URLs

Somewhere on my to-do list is archiving everything I visit on the internet. It's frustrating to know that I've seen something, but be unable to find it again.
Dan and Scott, thank you for thoughtful moderation, patches, and your cheerful goodwill.
Life is like a hurricane: An oral history of the Disney Afternoon
Nice try, Angular.
As someone with almost as many of them

My other account, that I retired shortly after it hit the leaderboard last year, has 25k karma.

I will refer you here and then say no more on the matter cuz Reasons:

https://news.ycombinator.com/item?id=18466918
I used to run John Norstad's Disinfectant in Classic Mode years ago. Of course it did nothing but, but it did get me on the network, and that's all that mattered.

Plus, the about box was always fun to bring up.
Patient, smart, consistent. Thanks.
I’d like to express my gratitude as well.
I recently learned about Holochain which is a P2P framework for building scalable distributed apps. You may find it useful: https://holochain.org
You're right, in the video interviewee says "the majority of the victims are from the Muslim community" and the interview goes on to question whether the problem of policing it is exacerbated by political correctness in not wanting to confront Muslim communities.

So I did pretty poor analysis.

Do other UK communities have a concept of "honour killings"?

>Honour attacks are more strongly correlated to specific cultural ties //

Any support for this? For example in Pakistan are "honour" attacks equally prevalent across all religious beliefs?
What's an example of an intractable problem you ran into on GCP?
7 Block Cipher Modes of Operation
doesn't look like anything to me.
They changed the link. It was pointing to another one that cited this one as the source and added -even more- speculation on top of it.
With regards to HN: I'm thankful for HN being an example where the comments are often really insightful, useful and interesting. There are so many places on the internet where the comment sections are cesspools. HN makes an effort to be different and it's working.

On a more personal level: I'm thankful for having had the opportunities in life to achieve all my goals. For being born in a safe and stable country with great healthcare (could have been dead a couple of times now) and other social securities. For being married to a great wife who makes me happy and who makes marriage seem almost effortless. And most of all I'm thankful for my kids. They truly made my life complete.
However, the main darling of tagged templates, lit-html does exactly that: parsing, concatenating, then doing an element.innerHtml

So does HTM we discuss here.

I quickly googled. sql-tag and node-sql-template-strings do a lot of string concatenation (well, of course, they have to create a SQL statement out of values passed in). sql-template parses and concatenates.

Because it's really basically all you can do, be cause tag`string` is just a function call tag("string"). There's no magic.
Kottke.org
Swiss miss
DF
Google bought Bitium slightly more than a year ago. Exactly a year after the acquisition they notified they were discontinuing service for us - it sounds like it was a straight acquihire and shutdown for their identity platform.

Migrating our whole corp password management to a new platform right during the busy time of year has been a nightmare.
The fine was set low for cooperating with the DPO. If you hide it and someone leaks it then the agency could ask for much more.
^This

The people of the west can no longer look at China/Iran/Russia and say they're police states without looking at what they've allowed in their own countries.
Once China's "Social Credit" system is in full force and in the governments eyes working well (undoubtedly crime/social tension will decrease, at the cost of freedom) will the west start copying these technologies just like their spy agencies did after 9/11?
Unfortunately, a lot of the people who are aware have bought into the idea that it is not harmful or only associated with advertising recommendations that are beneficial to them, even. They don’t recognize the potential for misuse of their personal data and surveillance. Multiple times in coffee shops i have overheard conversations where a man in his 20s is saying opinions to that effect.
Almost tautologically, without Facebook this "auction" would have had to be done using an inferior option.

Maybe it would still have happened. But in at least some cases, that inferior platform will be worse enough for the crime not to occur. Even if it's just because EBay's design is stuck in the 90s.

In any case, the "somebody else would have done it" argument didn't work in Nuremberg, and is generally recognised as a terrible conflation of morality with practicability.
its actually more like tag`string ${x}` is tag(['string', ''], x)
A lot of things. But most immediately coming to mind are.

A) My wife, and family
B) Having the opportunity to go to work each day and work in a sector I can feel good about. (Medical software)
“There’s an unmistakable energy in all the designs that [Roger Excoffon] does”

This type of analysis bugs me. Yes, with hindsight you can say it has "energy". Give this font in a controlled experiment with many "energetic" fonts to choose from and you'd not say the same thing. There is probably a word for this type of bias - perhaps confirmation bias?

There is nothing more to read into this. When a font gets popular in local design circles, restaurants end up tangled in the whatever font trend it happens to be because the designers that they hire are from the same circle of influence.
I wrote React for a couple years and was pretty dogmatic against the whole "stringy code" thing. Obviously and generally, we'd rather write code not in strings. But guess what? Moving to Vue from React was a major productivity boost for us - "stringy code" and all.
it appears that the term is somewhat less offensive in the US.

A lot of ordinary British things are seen in the U.S. through a filter of... let's call it "quaintness."

Swear words. Thatched roofs. Music on AM radio.

So, yeah. Whatever offensive word you heard probably didn't have the same impact on the other side of the Atlantic. There's probably some reciprocity, too.
https://www.macrumors.com/2015/08/28/apple-joins-pentagon-we...
I guess I am looking at it from a systems building perspective. If you can control the rules for what files are allowed to run (ie limit them to something like "plugin.php" or a directory like /something/something/plugin) then add access rules to the server (again, by default shouldn't be hard) to limit running files to those rules.

Then you have a lot smaller surface area of potential problems. I am not suggesting it has to be required by WP, but at least "available". This wouldn't cause any sort of popularity concerns or ease of use either.

Any plugin that wants to be more secure just follows some rules outlined by WP parent-corp and add the .htaccess (or whatever) rules and presto, more secure.

I don't run WP anymore than for testing stuff, can you really put a file anywhere by default and it's executable?
I've had the pleasure of upgrading from a 2015 to a 2017. The battery life on the latter is definitely worse, no matter what the official specs say.
dang has (nicely) called me out a couple of times for making comments that were rude or not productive. I’m glad that they’re trying to keep this place civil.
Cateract surgery.

I watched myself slowly going blind over several months. But at the end of it, whenever I chose, I could say, "That's enough - time for surgery" instead of just being blind for the rest of my life.

Seeing is really cool, people. It's a really major deal. Once you think about what it means to not have it, you really value having it.

Walking is a big deal, too. I'm thankful that my boss left that dolly where it could just barely catch the edge of that falling box with 600 pounds of steel in it, so that it didn't absolutely crush my foot. (It tore through the cardboard, slowly, so it landed on my foot as a slowly increasing load instead of as a sudden jolt. That was plenty painful enough, but it didn't crush all the bones in the arch of my foot.)

Walking, again - that falling 30 feet off a cliff didn't cripple me or kill me.00
In practice containers are siblings with a lot of redundant data, not a layer cake.
For this, you could use SingleFile [1], an extension for Chrome and Firefox. It can auto-save pages.

[1] https://github.com/gildas-lormeau/SingleFile
Unfortunately, the list is not complete. But it's useful to demonstrate to the boss that Google isn't ready for enterprise yet.
>How do you move 100,000 people out?

Quickly? You don’t. It’s a function of people and time, short time, small number of people.

Think about your daily drive. If you aren’t the first car at every single stop light, you likely getting out if 100,000 other people want to as well.

I find it a tad frustrating that people don’t think about these things until they are happening, but life isn’t assured, your government might not always be coming to help, you are responsible for your own safety.
I think type safety was a core design constraint for JSX (since XHP — where JSX came from — is typechecked, after all). It’s also nice to be able to do this checking with the type system you already have (TS, Flow, Reason), rather than having to install extra tooling that has to then interoperable with each of these type systems.
Show HN: Learning perfect tic-tac-toe via self-play and an evolution strategy
This font is also known as Staccato 555.

It was ripped off by Bitstream and included in the Bitstream TrueType Font Pack for Microsoft Windows 3.1

For some information about these fonts see https://groups.google.com/forum/#!topic/comp.fonts/y3BOdTKSg...
Actually, the modern Greek is quite close to the classical Greek (much, much closer than, say, Italian is to Latin). As to Egyptian, it has gone through several stages (Coptic being the last one) which, for some reason, were all rather dissimilar.
Facebook policy chief admits hiring PR firm to attack George Soros
If you want real-time data-transmission (for chat, audio or video), what about WebRTC? It's primarily intended to be used in browsers, but there's nothing theoretically preventing you from just using a Python library (e.g. https://github.com/jlaine/aiortc ) that implements the protocols if you wanted.
RS3057 gene for giving me absolute pitch.

Fast twitch muscle fibers for getting be bigger muscle faster with less training

23andme for telling me about my abilities which i never knew about
> When that happens, the nitrogen atoms turn into positively charged ions.

Does that mean it produces nitrogen oxide as exhaust? If yes, how long does that live?

If such planes were to be scaled up, that could be a potential hazard to be aware of.
Honest question - What do people here on HN see as more valuable: the iPhone brand itself, or Apple's technology development/production systems?
You could definitely do that (Angular recently started doing this too!). I think once there is a way to enforce compile time safety for HTM, it’ll be a lot more appealing for TypeScript/Flow folks.
https://www.defense.gov/explore/story/Article/1688861/
They were not hosting any CP. That is not proven. As it stands, this is a simple service takedown. Actually, this is speculation added by the sensationalist https://nakedsecurity.sophos.com website, the original source doesn't even mention it.

I mean, they even believe this is a zero day attack, I can't simply trust the quality of any information there.

Edit: they updated the link, here's the old link - https://nakedsecurity.sophos.com/2018/11/21/hacker-erases-65...
If someone is that concerned, Amazon is full of magnetic breakaway adapters for USB-C, bringing MagSafe into the USB-C era. I also mentioned the Surface, which uses a MagSafe-like connector.
Modulator crate and Play app (Rust coding series)
Yep, this is my experience as well. I have accounts get compromised because of a weak password. (maybe 2fa will help) But also, accounts can be locked down to IP address (harder to manage but helps more)

But does WP allow php executable on user upload directories by default? I know this is more of a server setting, but it would make sense to test for this in WP admin and alert the user.
It doesn't really help the issue at large but in my personal life it was nice to say, "I told you so." and not get called a crazy person anymore.
How does the presence of the 5th Fleet ... make any difference? Are they on active patrol duty? How does this work?
that as the case may be, id say that was in spite of the “stringy code”. the point (i think) is that this, and JSX are functionally the same thing, but there are some very large issues with doing this in a string.

*edit: clarity
If they were able to BS through the behavioral interview, then most likely, you didn't go deep enough.

I haven't been burned by this process once. I have gotten to the end of an interview and decided a candidate was not being forth coming on details, and turned them down, but I've never ended up with someone getting through where it was a complete disaster. That's not to say that there haven't been people that weren't perfect and ended up letting go, or they decided to leave themselves.

Behavioral interviews when done properly get very detailed. I often am able to discover exactly how much of the HTTP stack someone has worked on, for example, down to choices on parameters at the TCP layer, or asyncio libraries.
As long as they don't release a decent new Mac pro, I am not gonna throw away more than 4k€, it's just unethical and wrong. Even if it's company money.
See also: https://news.ycombinator.com/item?id=10591348
Apple resumes iPhone X production in face of weak XS sales, report claims
I had to look up at the calendar to check the date - thought it was April 1st.
Arent GAE and FireBase part of GCP which are both very much serverless products?
These reports always come up within 4 months after Apple having launched a new device. I'm guessing some people are making a lot of money from this FUD, by hiring PR / Research firms that will do everything to make Apple look weak.
True, the next frame can start getting drawn before the last one, but every desktop compositor I know of uses vsync.
Finally getting a job as a Developer! I've been at it for the last 4 years, and couldn't have done it without support from my wife and family.
In the article:

>"Only one so-called ‘honour’ attack [using acid] was recorded in 15 years"

But my analysis was flawed in two places (at least).

One, the other page says only (in the video) that the majority of "honour" attacks are Muslim.

Two, it also is counting abductions, mutilations, killings as well when they're classed as "honour attacks".
If your only examples are 25+ years old then the question becomes why are there no contemporary examples for this supposedly common phenomena. Its not a good rhetorical tactic. Nor is insulting other participants in the conversation.
Also potentially nitrogen oxide?
Thank you Dan and Scott! Your work on HN is deeply appreciated! You keep us all civil and on topic tirelessly.
I don't always agree with their moderation decisions, but am ever grateful for their fine work in maintaining the best discussion board on the Internet. Deepest thanks to you guys!
If they turned this into an umbrella company service with equipment hire and lawyers and accountants on call, they'd really be onto something. I don't just hire bosses to shout at me, I expect them to also make sure the things I need for my job are there, that I'm legally covered and that the invoices are being chased.
O comments can't be right! this thing is the weirdest thing we have encountered!
RESTful API Modeling Language
Why are cities not planned such that evacuation routes are already commonly used routes in the morning peak? If you plan city that way, all roads will saturate equally instead of all traffic stuffing on highways and arterials, in non-evacuation scenarios.
EDIT: descendant merged
Snowden revealed that big companies voluntarily cooperated with NSA+CIA (with the exception of Twitter) and provided api's for snooping.

It would be nice to see if things have changed behind the scenes. My hope is that more of them are just complying with court orders and refuse cooperating with mass surveillance. Mass surveillance without cooperation is very expensive and don't always work.
unfortunately it requires a lot of permissions. I try to minimize exts like this
Indeed, and I can see my parents paying for it
It is so silly that this might actually be a good idea? I do want a good reminder and todo/red-flags don't do it for me. I can seriously see why speaking to a human and being accountable to someone can boost productivity. Consequences of not doing a task on time would be embarrassment and shame from someone you're paying. Or its just silly.

Customer defining the goals is akin to setting the difficulty on "easy" and beating the game. What would be good is if BaaS would interview the customer, set realistic but challenging goals for the customer based on the project needs and then push them. Similar to a gym coach.
and i think this is the point; runtime vs compile time! similar reasons that people love the popular new type systems... if it compiles, it probably works or you get an error rather than pushing that later and possibly not catching it
They are valuable in different ways IMO. I think it would be harder to replace the brand at this point though.
Hmm, I know some bosses who really enjoyed making people “accountable” but didn’t seem to enjoy knowing what they were doing, articulating a realistic vision, or making coherent decisions. Why do poor bosses only seem to like that part of the job?
I think it is because Apple had to twist AT&Ts arm to the breaking point to make iMessage work that way and then each carrier they added they had to force the issue again. Verizon turned them down because Apple wasn’t going to let them install crap and charge 10¢ (Or whatever) per iMessage in addition to SMS.

Google would have to convince all their hardware partners to do that carrier arm-twisting themselves and most those companies don’t have any leverage to do it even if they wanted.
Where I work, Devs are considered demons and Ashurance, god.
Came here to say this. Every. Single. Time. They launch a new phone, out comes the stories of production cuts, missed targets etc.

And then the sun comes out at the next earnings announcement.

Sure, one day we'll all be wrong, but this narrative has played out for about the last 5 launches. It's about as common as FB announcing record DAU at earnings then releasing a note about shutting down millions of bots a couple of weeks later.
That doesn't fall into the "useless care" case. But that's also not 99% of caring for stuff in the news.
I use grab site for extensive archiving operations. It’s not an extension, but trivial to launch from a command line (and I stuff the data into a Backblaze B2 account for later Internet Archive ingestion).

You could take this and post process your internet history on a rolling basis to accomplish your goal.

https://github.com/ludios/grab-site
Growing up, I used to disagree with how my parents used to think about things, and I also used to call them out (maybe I kept that in my heart mostly out of respect) whenever they did something wrong. That was because I never perhaps knew how some parents were?

Because as I grew, went to high-school and then at job, I saw people who had an abusive father, a drug-addict sibling, or a controlling mother. And now, I realise how difficult it must have been for my parents to show us the best version of themselves e.g. my mother cooks food, takes care of us and my father worked in Libya for 30 years as a software engineer away from us only to supply us financially. It must never have been easy.

I'm not saying they're perfect, God no one is. But the fact that I can see at my parents as a moral compass for myself whenever I get stuck helps me a lot. Some of you who read might not be religious but I'm thankful that my parents gave us the right knowledge of religion and not just giving knowledge but telling us about the 'why'.

My father has told me two things his entire life:
1. do your best effort at opportunities (I don't mind if you fail as long as you work hard)
2. don't cheat your way to success

So, yeah, I'm sorry if this seems irrelevant but just wanted to share my side of the story about why I'm thankful.
I don't care about those people's connections to subsidize them. Let them learn to adapt, like everyone else.
dang called me a troll after I simply asked him exactly what it was about my comment that warranted it being removed. So, no thanks actually.
The cement tiles around Building 17 at Microsoft are actually like a physical graveyard. So many dead products! The 90's CD-ROM multimedia era generated a lot of dead-end franchises.
Assuming this is a real company and not a joke, consider taking the money you would spend with them and paying people to do work for you, like cleaning, cooking, bill paying, investing, testing, marketing, etc. Be your own boss!
You should ask Joseph Nacchio from Qwest how that works out for them...

https://en.wikipedia.org/wiki/Joseph_Nacchio

https://en.wikipedia.org/wiki/Qwest#Refusal_of_NSA_surveilla...
I encountered a couple of these machines in a hotel in Zinnowitz where I spent the winter holidays with my parents in 1988. I was 7 years old and it was the first video game I ever played.

One still needed coins, though.
There is a market for these things. Perhaps the treasury acts as escrow service, with an ever so slight bias!?
Trojans always existed. But trojans aren't viruses, and if you don't get your stuff from shady websites you don't have much to worry about (and if you just get signed and sandboxed App Store stuff, even less or nothing to worry about).
Aren't most planes capable of gliding well enough to land?
Holy shit, I never realized how badly I need this.
See also the "Plural-Forms" documentation in the GNU gettext manual – https://www.gnu.org/software/gettext/manual/html_node/Plural... – which also talks about supporting languages with much more complex pluralisation rules than English (particularly Slavic languages and Arabic)
Extract text content from web pages
Yes. The case we are talking about.

"Das Unternehmen hatte sich am 08. September 2018 mit einer Datenpannenmeldung an den LfDI gewandt [...] Gegenüber dem LfDI legte das Unternehmen in vorbildlicher Weise sowohl Datenverarbeitungs- und Unternehmensstrukturen als auch eigene Versäumnisse offen."
("The company contacted the data protection agency on September 8th 2018[...] In exemplary manner they gave access to company and data management processes and highlighted their on omissions")
https://www.baden-wuerttemberg.datenschutz.de/wp-content/upl...