skysight-inc/HackerNews huggingface dataset:
I don't get something. When modelled in software instead, I don't see why a simulating function couldn't use pseudorandom functions and inputs only (nothing truly random, no source of input), and, therefore, be deterministic. I don't see how it makes its results worse. But if it's deterministic, I'm having a hard time seeing how actually running it can have a moral side effect, or how that effect is worse depending on how many times you run it. Especially since there are further levels of silent optimizations (such as by the compiler, or in the CPU) based on the abstraction that the result is all we really care about. Would the calculation involved have a moral side effect at one level of abstraction, but not another? What if you cache intermediate results? Final results?

It is really hard to give pure deterministic calculation itself a moral component, yet it seems a simulation could in the end be just that.

Any solution to this problem?
Logtalk 3.22
You need some amount of sunlight to help your body make vitamin D.
> I've periodically considered a limit on the money people can have.

Same here, in a similar way, too, much like air friction works -- the faster you're already going, the more energy you need to expend to go even faster (i.e. going from 200 mph to 300 mph requires MUCH less additional than going from 9900 to 10000). But there needn't (and IMO shouldn't) be a hard cutoff.
That's really interesting (and an amazing piece of engineering), but I'd like to have seen more detail on how the rails in the underlying NFL pitch are hidden/appear - the engineering of them alone (to hold the weight of the turf pitch) must be immense.
from my experience, erlang actor model had some of the strongest queue mechanics and the most resilient systems I have deployed. As some background, I worked as a contractor for a telco and built a 6 9's system for their service monitoring using Erlang and its supervisor model. In 3 years the system has always been able to recover from errors with near 0 downtime (the 6 9s comes from production metrics).
The GPS can't account for winds, which can reach hundreds of miles per hour.
It's not a fallacy if you either have to manage two language stacks or rewrite huge codebases. Those things are expensive.
I don't see why this character assassination was needed - are the facts in question here? Here's a transcript of the interview that the "well known internet harasser" linked: https://docs.google.com/document/d/1U0mQjUA0T5INc_GDkwPJ2mfh...

You can clearly see the lines he quotes in it. The words are by Patreon's own Trust and Safety representative:

MATT: Are you telling me that this was Patreon’s decision then, or someone pressured you into this?

JACQUELINE: No - this was entirely Patreon’s decision.

MATT: Well then I don’t understand passing the buck off to somebody else.

JACQUELINE: No, I’m not passing the buck off. The thing is we have guidelines, but I’m trying to explain, #1 it is our mission to fund the creative class and obviously some people may not want to be associated.

MATT: Well if it’s your mission, then payment processors are irrelevant. It’s your mission. That’s what you’re pursuing.

JACQUELINE: We’re not visa and mastercard ourselves - we can’t just make the rules. That’s what I’m saying - there is an extra layer there.
So you would need a change internationally to copyright law, and then for YouTube to limit the number of viewers to a video (which doesn’t make much business sense).

There are a lot of opinions on how copyright should work, however little understanding of how it actually works.

There are possible tech solutions that could work with the current copyright system. The truth is both big tech and the rights collection societies like the status quo as they both profit off the actual creative works done by others. The actual battle is between who can get the biggest slice.
Show HN: ThemesForApp – Free landing page templates for startup
I'm picking the eyes out the article here but I had to twitch at this ...

> Linux containers were not built to be secure isolated sandboxes (like Solaris Zones or FreeBSD Jails). Instead they’re built upon a shared kernel model ...

Solaris Zones and BSD Jails both use a shared kernel.

And I'd bet you they were far from perfect in security isolation.

Now it may be true that security wasn't Linux containers prime reason for being but we have an existence proof that they can be made secure enough -- anyone can get a trial Openshift container for the price of a login.
It's not the number, but the number with the same general cause. Any failure of a complex system has multiple causes, and the NTSB/FAA usually responds to incidents with multiple recommendations, to eliminate any possibility of this chain of events happening again. This has been remarkably successful.

It's surprising to me that airline designers continue to add sensors and computers and automation, when in so many of these cases it's the automation which itself is the problem.

Would the NTSB ever issue a recommendation like "Your aircraft is too complex" or "You rely on too many computers"? It seems to me like that could be a valid cause, but it's simply not in their vocabulary.
available evidence (which admittedly is very scant)

How do you figure? When Apple or Google say 'baseband is constrained from accessing OS memory in the following ways', these aren't unverifiable claims. People would be doing demos at conferences showing malicious basebands thieving your private catpictures.
But it could simply be implemented using the same routine in browsers like `import`. I don't see why `require` can't be asynchronous. There's an implicit join after the last import. Maybe it would have been enough to restrict calls to `require` to the top of a file.
Add this to the list of reasons why advertising is a cancer on society. Without robocalls and telemarketers, calls wouldn't be an annoyance.

(Though I agree that they should be relegated to the level of notifications now. Smartphones are computers. Imagine if Skype call would lock you out of whatever you're doing on your desktop.)
It's probably a matter of writing a proper RFC like document.

That is how standards should be made.
If the EEG is flat, then presumably these brains aren’t doing anything useful where we would start deliberately keeping them in vats at scale.
> That's dandy, but it's a solution which is neither standardized nor native to JWT.

That statement is false.

JWT were specifically designed to store a payload JSON object which among the many standardized fields include the token's expiry time, and JWT were specifically designed with a workflow which includes not only client-side token refreshing but also server-side token rejection that triggers client-side token refreshes.

In fact, JWT token refreshes and token rejections feature in any basic intro tutorial to JWT, including the design principle that tokens should be discarded and refreshed by the client as soon as possible and also the use of nonces.
Indeed. However, this is just a building block and not a library solution.
Combined with a revocation list you are good. And use something like OpenPolicyAgent to implement it, adding a lot of other possibilities as well.
This weird argument pops up regularly. In relation to New Zealand (where I am) it’s argued that the US is subsidising the cost of drug scripts. It’s beyond me quite how NZs drug buying agency is running roughshod over the rights of drug companies that have multiple insurance companies in the US that are bigger customers.
What’s the agenda behind this argument?
Most doctors in the US actually do know how pricing works.
I don't think the analogy to email quite works. Telecom companies currently charge money to customers based on usage.
Median and average are not good representations of a distribution.
The content payload of that article can be expressed in maybe a few k for the text and then a few more hundred kB for the images. What have we done?!
Yes. You end up with a million index.js files in your project and finding the right one is a PITA.
Email or text message sent to customer and they just input the number they were sent to match.
> So they stand between you and the tower and sift through the transmission first. This means they can now intercept data on that transmission. I don’t know what they can do with it, and there is no real clear information on what data they can get. They do say metadata and access the cellphones internal storage, so that is enough to want to block the Stingray.

Cellphones internal storage? Seriously?
The neverending stream of exploits based on undefined behavior proves you wrong. There is not a single widely used codebase that is completely free of UB and doesn't come with a formal proof.
Yeah at this point they are basically jerks for not building something better. The reality is they dont have to care.
From the point of view of people from other countries: Yes. Your pricing is fucked up.
Isn't it the same for telcos and telemarketers/robocalls?
Linux have the binfmt https://en.wikipedia.org/wiki/Binfmt_misc .
It have been used to run java, windows pe or other arch binaries.
> Just run a buildworld/buildkernel of your modified FreeBSD, set up a few parameters (AWS keys, AWS region, and an S3 bucket to be used for staging the upload), and cd /usr/src/release && make ec2ami.

This is as FreeBSDish as it gets :)
>This is only partly true. Technologically the solution is difficult, but it's easy from the social side as carriers can blacklist the smaller carriers that allow this fraud to take place.

So, the MAPS RBL (and most of the following dns-based blacklists) did this for spam; and it helped a lot - I mean, I think it's the primary reason that ISPs don't actively serve spammers (spammers as defined by the RBL)

On the other hand, it didn't solve the problem; if your mailbox isn't behind serious spamfilters, an address that has been on the internet for any period of time still gets hundreds of spam mails a day.
> all prices need to be +\- 50% of what Medicare pays.

This is actually close to what happens with private insurers- they negotiate with a hospital to pay n-times what Medicare pays for some set of treatments.

So why does Medicare pay the least? Because they have the most patients covered of any insurance network in the US. That's a hell of a bargaining factor. More patients = cheaper prices.

The logical conclusion is to then have Medicare for all. That'll regulate all prices to be exactly what Medicare pays!
World’s First Sideways VW Camper Van [video]
I do this sometimes too. It seems like an ethical way to have somewhat the same sort of fun as old-fashioned crank calls.
Maybe, tell me more. I’m running out of interesting experiences.
Homelessness is really a federal problem but it shows its symptoms in big cities since that's where the homeless migrate/are sent. Especially the most "liberal" big cities with good reputations. The state and country end up dumping their problems on a handful of cities and expect them to solve it somehow. SF, LA, NY, SEA can't fix 300M peoples shitty mental health care system and lack of safety net nationally.
Can you give an example of the aspect of restructuring you consider confusing?
If you have an API, you can program your web client like an API client, using bearer tokens for authentication (put them in local storage). It's probably better than cookies.
_imgcat_ example shows a dog
Does the freedom to talk back to a cop as a black person and not be shot count (or segregation for that matter)? Does the absence of stupid practices like the "Parent Advisory" stickers on CDs and the extreme rating of movies count? Does it count if those countries people can express themselves freely on TV, even swear or show nudity, etc, and the nation doesn't go bezerk because some singer had a nip slip? Including gag orders and the like in the consideration or not? Does McCarthyism? How about people not losing their job because a, snail mail or today internet, mob reacted to something they said in a totally different outlet and reached their employees?

All, or almost all, Western European countries have freedom of speech and freedom of the press in their law and/or constitution.

In any case, all of these are beside the point. The point wasn't about what "freedom of speech" laws the state deemed ok to give, but what freedom of speech is (or should be).
One challenge is the mix of spending is actually quite different even adjusting for GDP!

Adjusted for GDP, US spending on inpatient procedures is somewhat inline. However, spending for outpatient procedures is way higher. Americans just have a lot more outpatient stuff done than other countries.[1]

[1] McKinsey analysis of US healthcare spending; search my history for actual link or google it!
In Red Hat OpenShift Consulting, we openly advise against “One cluster to rule them all” and the vast majority of our customers heed our advice. Our default delivery models support Sandbox, Nonprod, Prod cluster stand up. Some of us even support the idea that good IaC/EaC practices get our customers to where the cluster can be treated like cattle (much like pods and containers) in well-designed apps. My colleague Raffaele hinted as much when describing the problem as a matter of availability, disaster recovery and federation [0]. At least in OpenShift, multi-tenancy is a solved problem when cluster right-sizing has taken place. RBAC, node labels and selectors, EgressIP, quotas, requests and limits, multi-tenant or networkpolicy plug-ins go a long way.

[0] https://blog.openshift.com/deploying-openshift-applications-...
You want to upload your contact list to your to telecom provider?
Telegram, an Open Sources IM, has Native Clients on Mac, iOS, Windows, and Android.
What features or properties would you give them to pull them out of “the Stone Age”, and to what benefit?
Fair enough. If it's documented I'd say it's open.

But it's still an odd design choice IMHO.
https://www.pillsburybaking.com/products/creamy-supreme/clas...

Looks like a >4:1 carb:fat ratio by weight.
These are excellent suggestions Bucephalus. One note though, they mainly deal with the infrastructure/network/os level security.

A simple SQL injection in the code would still be exploitable regardless of the countermeasures above.

So on top of what you have suggested, what are your ideas to get the security right on the code level of the applications?
There’s no agenda behind it at all. If profits in the US market go down, they either have to go up elsewhere, or investment has to go down to match. This is very basic maths.
Could you explain a little further?
Most industries are able to provide quotes, why shouldn’t healthcare facilities?
That sounds like an awesome idea if you completely ignore all the important things about healthcare differences across countries.

In fact, it sounds like a great way to make things worse!
I used Typora too, its really great for writing note / blog post etc. My only gripe with it is that it doesn't have search / tagging function.
I would be seriously disappointed if some of these people don’t have research projects running for this. You can get away with some crazy stuff once you leave US soil.
The problem with both those suggestions is that it's trivial to fake the "from" phone number, as evidenced by the number of spam calls that share my area code and exchange numbers.

(Last time I setup asterisk with a T1, this was also trivial, but that was like a decade and a half back. I couldn't tell you how to fake your number today.. it's just clear that it's easy for the scammers to do.)

The first problem we need to solve is to make it hard to fake your number.
Your statement is ironic as the person being discussed here was banned for denigrating the alt-right during his long-standing vendetta with them. Was he banned for "what he is"?
There is a similarly useless drug price list.
What is needed is crowd sourced discount pricing of the insurance companies, per hospital. Leaks would be welcomed.
That post was hit by a spam filter. Moderators didn't see it.

It sounds like you've been having a hard time lately. If there's anything we can do to help, you're welcome to email us at hn@ycombinator.com.

Could you please, though, stop creating accounts to post like this to Hacker News? The ones that are posting in the thread seem especially painful. I'm sure there's a deep, valid reason for it all, but an internet forum is no place to work this through. What's needed in such situations is a connection with somebody safe, experienced, and trustworthy. I hope you find that. If there's something we can do to help you find it, let us know.
This is a great piece of software development history! Very interesting to see what things the industry seems to have improved on (somewhat) and what things we still struggle with.

Things we have improved:

- Developers are generally expected to be responsible for testing (and now operating) code.

- Code reviews and ownership are common practice.

- Distinctions between prototype/development/bugfixing stages are no longer strictly enforced.

Things that we still struggle with:
- Overspecialization/knowledge "siloing", and low bus factors generally.

- Navigating the tradeoffs between re-using existing solutions vs. building your own.
>>Give me, or my family enough money, and I’d be happen to be a brain in a bucket for a fixed period of time. Who knows what could happen. Maybe I’d be dead, maybe I’ll be in a waking dream, or maybe nothing at all. We don’t know.

That's an interesting perspective. Someone, extremely aware of what he's doing, taking one for the team--while being rewarded. Maybe the family will enjoy the $$ but at least you leave a legacy. Obviously it has to be a major experiment, the final one after all animal testing is exhausted. People sacrifice themselves to save others all the time, soldier jumping on top of grenade, people running into burning houses to save others, going to Mars etc etc
I'm guessing that Israel and Spain might be behind the Netherlands in this trend. Absolutely fascinating.
Is this right though? Surely buying 20k knee joint replacements should earn a discount? Just setting it such that it wasn’t taking the piss would seem a vast improvement.
As discussed elsewhere: https://www.gl-inet.com/products/gl-mifi/
Although a bit repetitive from one talk to the next, Kevlin Henney's talks are of great quality, both in content and form.

If you're interested in a deep analysis on software development behaviours, through patterns either at the code or organisational level, his talks are gold.

I particularly enjoyed his take on management analysis, it resonates with a lot of "failure" situations that I had experienced in my previous job:

Kevlin Henney - Agility != Speed https://youtu.be/kmFcNyZrUNM
I think it’s cultural; strong families/communities seem correlated with not wanting to be a burden on that family/community when your time comes. Individualism, as in the US, seems more correlated with trying to stay alive/healthy at any cost.
Tptacek shits on them every time it comes up. Unfortunately I can never quite comprehend what he says to do instead.
I'm not sure if they get imported properly, Notable uses enex-dump [1] under the hood for importing .enex files. If it recognizes web clippings as attachments it will import them, otherwise I guess it will ignore them. I had no web clipper in the notes I tested enex-dump with so I'm not sure about this.

I personally have no use for a built-in web clipper, and with an OS-level shortcut I can take a screenshot of any portion of the screen, I'll probably add support for pasting images directly from the clipboard but that's about it probably.

[1] https://github.com/fabiospampinato/enex-dump
No, everyone should use auth0, okta, cognito
I have an apple watch... it doesn't solve the problem that if I answer a call that is not from a contact, it is 9/10ths spam, so I simply don't answer calls not on my contact list, and thus sometimes miss important calls from businesses that don't text.
No, it's not false. Tutorial "best practice" guidance does not constitute a standard. JWT does not provide native revocation. Neither refreshes nor expiry constitute revocation. Revocation is an active state change, not a dead man's switch.
> No, there are several common arguments against JWT for session tokens. The major one intrinsic to JWT is that it has no system of revocation.

That's technically false. JWT features multiple systems of revocation, including the use of nonces. Token revocation also features prominently in JWT's basic workflow.

The key aspect is that there is no turnkey implementation, and thus projects need to roll their own implementation, which is frowned upon some developers.
Talk about Pakistan too. Software industry is pretty strong in Pakistan too.
That still doesn't explain how prices of medical services in many other countries turn out several order of magnitudes smaller than commonly encountered prices in the US.
> My guess is that eventually the govt will step in and start regulating prices if providers don’t.

There will be a heavy pushback from industry about how that’s socialism, delivered via Fox News and other conservative outlets.
By now a lot of ppl have commented on the tech (sixel) but it really annoys me when projects don't explain in simple terms the overall workings in the readme:

"lsix is a shell script that uses ImageMagick convert tool to list images on a shell screen on terminals that support the Sixel format"

There, was that so hard?!? :-(

EDIT: oops, it does mention it, everywhere actually. 1) need to pay more attention but 2) I was just venting because of so many other repos I have to spelunk to have answers for when a few words in the readme would do :-)
Writing a Multiplayer Text Adventure Engine in Node.js
This sounds an awful lot like JWT.
This is called two factor auth. SMS is not considered a secure method of transport (mostly due to porting). It only solves opportunistic password compromise via password dumps.
How AI Can Keep Your Family Safe
Are the prices that Medicare pay orders of magnitude different? ISTR that Medicare and the VA both pay about $10k per patient per year, which I think is comparable with the NHS. No sources as this is half-remembered.
Nebula Render: A free physically based renderer for Windows
The US health care is optimised for the the p99, top 1% of the population who can afford anything. The other countries you mentioned optimise for the p50, the average person.
Thank you for putting this so well. What you've written shouldn't even need to be defended as a minority opinion, but alas a little bit of power is a hell of a drug.
That's pretty vague. Where's the dividing line of "difficulty to set up" that differentiates banks from Patreon? There's actually more banks(even in my country) than websites dedicating to donating money to creators, as far as I know. Patreon supports recurring donations, so I'm guessing they have PCI compliance - your line is above "any guy with a website" but below "bank", but can you try pinning it down? Are Mastercard and Visa infrastructure?
people have too much assumptions on what experience is, how that arises in the brain / mind and what those things are to say if these animals are suffering or not. i'd prefer if there was a more clear understanding of consciousness, experience and how that relates to our brains, hearts and other bodily functions before playing with it like this. that being said, like many posted, it's better to govern such experiments properly than to drive them underground as clearly there's many people with different opinions on this and basically before there's a thorough understanding on things it's not possible to say who's right or wrong. i'd just wish people did less work based on assumptions in science and medicine, because that always tends to lead to messy situations. from a personal perspective i think this kind of research is disgusting regarding the lack of information on this topic, but that's my personal opinion and i respect other's for having a different opinion even though that grosses me out. have fun in hell :-) guess we gotta fill that place too :D ( joking! for those atheists jumping on hate train)