skysight-inc/HackerNews huggingface dataset:
That is an amazing film, it takes me right back to 1961. Not that much different than the Detroit that I knew as a kid. Detroit before the fall.

Can you imagine a fight over folk music in a public park? In a few short years the Beatles would change fashion and the Vietnam war would forever change for my generation the innocence of those simpler times.
There's plenty of marine biology happening at Rothera! This is the time of year to apply if you're interested -- this is about the time when jobs for the next austral season are posted.

Feel free to drop me a line at $USERNAME @gmail.com if you've got any other questions.
When a Bike Company Put a TV on Its Box, Shipping Damages Went Down (2017)
I don't get this statement. Google doesn't force anyone to work overnight. It doesn't force you to work at all, to be honest. Some people can spend a workday skiing and then arrive at 6 pm for dinner. TC is 400K. And once you're bored or feel undercompensated, you just go to FB, Netflix or Snapchat and get a 30-50% pay rise.
It's not only facebook, all platforms have difficult way of managing kids spending. You have to put "payment method" which is saved and invoked automatically, or you don't and then have to fill it up every time you want to buy something and then remove it. They should do an email and confirmation system, when a kid buy something it sends an email to the parent who can confirm it or not, that's all.
This isn’t about fusion, but fission. I would assume that Gates being a famously bright man, understands that none of us are seeing fusion power in our lifetimes. Of course Gates is backing an extremely challenging form of breeder reactor called a TWR. Still, any progress on nuclear at this point is good, and desperately needed.
Never go ATM
If I had to guess, it has to do with the WSJ paywall, as the original article received no upvotes https://news.ycombinator.com/item?id=18957737
One of the complexities that a lot of people don't realize is that the roles involved in OpenID Connect and OAuth are different - OpenID Connect only minimally involves resource servers (in that they can use an access token to hit the user info endpoint to get information on the user session.)

With OpenID Connect adds things like dynamic client registration for a client (acting as an RP) to get authentication information, and you can use OpenID Connect to get both that authentication token and an access token at the same time.

However, this unfortunately doesn't extend to weakening the dependency on a protected resource receiving one of these access tokens needing a relationship with the issuing AS.

Unfortunately, dynamic client relationships haven't caught on enough for there to be focus on this issue. But on the flip side, there would be a lot of other agreements around what those access tokens mean and what API they can apply to before you could have such a dynamic authorization relationship.

Now, if the goal is for _your own_ protected resources to rely on authorizations provided by other ASs - likely you just shouldn't do it that way. Instead, you should have a local AS that itself has relationships with multiple other ASs acting as an intermediary (or what Microsoft has historically called an STS). It authenticates based on other providers, gets their authentication and access tokens, and translates them into tokens that the local environment can understand based on a single, centralized policy.
Don't forget the paper and ink. The best would be to simply write this by hand.
Facebook Ads: The difference between “link clicks” vs. “landing page views”
But it won't. Very, very few people actually run into any trouble because of their disregard for privacy.
What a great story, a mix of quick hacking know-how, cooperation, and some good luck / remarkable foresight: "Fortunately for Tonga, EziNET had previously imported all the parts for a new satellite antenna that they were planning to install in March 2019. It was slow going because they had not been able to interest anyone in backing a Satellite Plan B for the country."
You're right, and I had "please cancel my subscription" on my clipboard to save some typing expecting I'd have to write it more than once. But the whole thing took less than 5 minutes. So yes it should be easier but it wasn't as difficult as say canceling cable service.

I don't know about canceling outside business hours.
It's currently ordered by date, with most recent on top. It's not unordered.
Doesn't really matter all that much if it is SV proper, or Silicon Alley, or Silicon Prairie, or any of the other areas where well-paid tech workers can afford to live without cars, look down on those who can't, and propose what comes across as an extremely blatant "I got mine, so screw you".
On this same topic, of course the big issue with wind and solar is that they don't generate if it is not sunny or windy. This means we still need base power generation with fossil fuels or fission. However, wind is stochastic enough that on a large grid, around 1/6 of its maximum capacity can be counted as base power.
> No.

Yes. Any algorithm designed to be resilient to common processing steps will pass this test with flying colors. Also, EXIF data is not used in steganography, by definition.
One thing I like about JS is that you dont have to think about types. It's an old convention in JS that you should be able to pass anything in and it will figure out what to do - instead of complain. JS has always had a test driven approach - test-code-test-code so you would detect if something is off. But the strictness do of course have trade-offs, for example being fast, easy and forgiving, vs forcing the developer to think hard and give errors if it's not exactly right. For example writing flight control software where an error can mean life or death. Or writing a web game that can be patched in less then five minutes. Maintainability and refactor-ability is all about developer process, it's possible to build a buggy unmanageable mess in a strong/ strictly statistically typed language, just like it's possible to write a fail proof distributed system in plain JavaScript (it's possible but hard in any language and JS might not be the best option).
Cloudflare/quiche: Savoury implementation of the QUIC transport protocol
This is cool, but to what extent is the DB-per-Service pattern actually used, or desirable? The alternative of sharing a DB across many services is simpler because you still just rely on transactions in you RDBMS. I get that at some point youll have to shard or go to a multi master setup if thats supported to scale. Im wondering how many companies find themselves in this situation and have chosen a datastore that doesnt support multimaster? Or am I missing some other use case? The wiki links to “supported databases” also doesn’t work... and I dont get what “high performance” means, is there a blog post or benchmark for any reference points?
But they're already doing that?

If I could snap my fingers and everyone would switch to Matrix [1] I would, but as it stands hundreds of millions of people use these services daily and getting them more privacy will be useful.

[1] https://matrix.org/
> Nor is Chicago or any part of Illinois within the zone--Lake Michigan doesn't have any 12-nautical mile basis to start counting from.

This makes perfect sense - the actual border is nearly 300 miles from Chicago - but I guess one question is, does the Border Patrol know this, or do they treat Chicago as being in the border zone?

As someone else pointed out, the ACLU seem to think Chicago is included in the zone. I wonder if that's based on any facts they've seen.
This seems to be about fission not fusion. Spending billions on fission research seems wasteful when you could leverage that into wind solar projects whose profits could then be reinvested into even more clean energy.

Add in leverage and say 2 billion in research could represent 10-20+ billion worth of clean energy investments before the fruits of this research could come online. And even then you would need to spend even more money actually building something useful.

This could be my own bias talking but fission has seen 100+ Billion in R&D. I have my doubts this is going to move the needle much.

PS: I am more than open to any counter arguments you have...
Solar PV Installer and Wind Turbine Tech Are Fastest Growing Occupations in US
For more context, this is a good read:

https://blogs.scientificamerican.com/observations/why-we-nee...

Previous HN discussion here:

https://news.ycombinator.com/item?id=18411991
> I like being around people who have a passion for software development.

Cool, go to a meetup, not the place people go to because they like not starving.
Alphabet is #7. Facebook is #44.

Would have thought these two would be much closer together given the amount of negative press they've each received over the last year. This survey is evidence that people heard a lot more negative news about FB than Google.
> I'd rather have it and not need it than need it and not have it.

But squash commits do let you locate the identity of the authors. You just have to look at the PR, where all the original commits are listed
The Open Source Computer Science Degree
You are totally right, my phrasing was too strong, but Marx's theory is to date the most popular in sociology, though J accept there are others that predate him (though whatever strengths Mill had they were not philosophic).

A lot of my comments concern Marx or Communism broadly because they are important ideas, and my chosen mode of analysis is to take advantage of totality in the critical sense. True, Marcuse said that not everyone's problem with his girlfriend is due to capitalism, but the analysis remains there to use advantageously. Secondly, the hat I wear as a programming hobbyist is generally secondary to the social sciences dabbler hat. So some thread interest me more than others.

Now good faith insight and having an agenda are not of course mutually exclusice. Yes, I admit my ideology but I think its analyses in whole or part can probably be interesting to an audience far removed from it on HN. I only aim to help and spread what I know and am interested in; Marx was one of the most important thinkers of the modern age, along with Nietzsche and Freud, even the most ardent capitalist would say so.

Maybe I will vary the topics I post about more, since looking at my history I can see your analysis might make sense. But as a side note, there are probably vim/Emacs/SQL/nosql/Linux/bsd fans here who engage very much in a similar way.. but still aim to help and educate. Having a preferred topic is fine.
With git, I think it helps to think of development in terms of patch series.

An individual commit is a single patch, intended to do one thing (and hopefully do it well), and a feature branch is a patch series.

A pull request is then a request to review the series. If you need to change things, git allows you to rewrite your commits to send in a revised set of patches.

Before merging, your CI would create a temporary branch off the current master, merge your feature branch to that, and run tests against the result. I don't think testing individual commits (fully, at least) in a series makes much sense if you're going to merge all of them to master anyway.
Yes, it started with Winmodems, which people used to mock a lot. There used to be a fancy type of hardware modems called voice modems which even had sound card capabilities, and in turn sound cards had game ports that came standard.
Only OpenID Connect has a guarantee that it will issue a JWT token (and only the id_token). OAuth allows access and refresh tokens to be opaque to the client - e.g. either:

- a value only the AS understands (in which case the protected resources will need to use an API to introspect them)
- a format that both the AS and protected resources can understand (such as a legacy crypto format, a COSE token, or a database key)

If your client has to pull apart an access token to extract information and make a decision, you are doing OAuth wrong. In particular, that client code will never work against another AS, and it is more fragile than normal against changes on the AS.
It’s because we need to say “I fucking told you so” every time someone suffers for making a stupid decision like brexit.
Turning around the public opinion on nuclear power absolutely requires government. And we are taking about adopting a mature tech that was shuned away by misconception...
Usual Facebook hatred on HN - move along, nothing to see.
Well, shutting down the heavy industry certainly is a way to reduce energy consumption. And I guess this is even a preferred way for local politicians, even though this industry is surely running elsewhere afterwards...
It sounds far, far worse than it is. This was a really big fear of mine going into the company almost 4 years ago, and so far I've been fine. I think it is a common fear that new hires have.

Netflix is much faster to let people go (famous for no PIPs, etc). But I've never seen anybody shown the door with 0 warning.
- Specification documents.

- Agenda and link to specification/problem on meeting e-mail.

- 4 People or less in a meeting.
i am almost scared to use the word blockchain here right now but... well... why aren't consumer reviews and programs such as this (which AMZN should NOT be running, period) aren't something that would be ideal for a blockchain implementation.?
Correct - that was an exaggeration but the 'regularly played items' comprise something like 90% of the approx 240 compositions. Not the same situation at all with Brahms' (1000), Schubert's (1500) and Schumann's (700+ ) compositions (my bad guesses!) many of which are never heard at all. In some cases, with good reason. I believe Naxos has recorded everything Chopin wrote. I'm curious to know if they've done that with the other three composers mentioned.
Most of the major Brexit proponents said (and continue to say) that jobs will not be moving abroad, and everyone in the UK will be better off.

Evidently, this is false.
I have found women "love" their work more than man because they do all kind of fluffy jobs that are not really necessary while the man are doing all the hard stuff just to earn a wage and in some more subconscious way to keep our world going. "Loving" your job is part of the feminisation of the workplace and academy, it used to be that people did what is necessary and important and it was fine, but women were taught that they deserve everything without putting any effort or pain into it so now it is about what you like and posturing.
> I am not sure we can trust Boeing with this decision alone

From the article:

"Boeing cannot move forward with such a radical shift in its manufacturing processes without the approval of the FAA."
Or just hire a nerd with all-sixties IBM gear :)

https://www.youtube.com/watch?v=VMDP3Iz6D6A

(although the pedantic in me notes that he used the wrong selectric ball (prestige elite vs large elite) for the license)
Easier communication between the apps, with e2e? How dare they!
If we can assume Facebook's apps aren't lying (i.e. E2E is properly implemented - this seems to be the case with WhatsApp) then this is better for those exact purposes.

Even the star child Signal [1] has to store metadata...

[1] https://signal.org/
I'm working on something like this! I have been having the exact same idea.
Everybody now: ”Heees a lumberjack and he’s ok, he sleeps all night and he works all day...”
The fed raising interest rates "crushes" profits and the stock market a lot more than wages. Wage growth outstripping productivity or GDP simply correlates with a broadly overheating economy which drives the fed to act, but correlation isn't causation.
Their VPN app kinda did function shoddily least

https://www.cnbc.com/2018/08/22/apple-removes-facebook-onavo...
I fail to see how this is really news worthy. I guess it is just another thing to bash Facebook about.
I couldn't help but read that as "Greek heroes" at first and was really confused
I love to hate on Facebook to, but the point is that they get better - and this seems to be and excellent start!

But I've yet to find similar opinions in tech groups online or even less techy spaces.
Certainly not an act of war.

First of all it would be legal for Citizen Lab to do the exact same thing exposing abuses of the Canadian government. As a Canadian I would expect them to if they discovered the Canadian government doing the exact same thing. This is something protected by internationally and nationally (Canada) recognized rights of free speech, not a crime.

Second acts of wars are between countries, the concept doesn't even make sense here. Citizen lab is not a government.
I may not fully understand what the tools can do but it seems overly narrow scoped. Also in that Unix philosophy you don’t duplicate functionality that’s slightly incompatible between tools to the point you need paragraphs and tables to explain when to use which one.
Very true! I'd forgotten about that. I've yet to hear it!
Let's go the other way too. Are there any websites that accept an image and via image analysis able to tell you things about the doc?

I wonder how much you could infer about a doc given its margins, font, kerning, leading, etc. "This looks like default settings in Word XP"
Another thing about airplane faults is that the pilots almost always have time to troubleshoot and take corrective action.
That is very silly of the Fossil community. On the surface Fossil branching is a lot like Mercurial branching, but under the covers it's just like Git's branching: branches are just bookmarks for commits. And Git very much has local tracking branches (that track upstream branches), so it's as Fossil-like as you want, but doesn't pretend to enforce a merge-only workflow.

That's really the bottom line when it comes to Git vs. all the others: Git doesn't enforce a merge-only workflow, not even as a default, while all the others generally do.

Mercurial, for example, resisted adding cherry-pick and rebase for the longest time (just like Fossil), and when they finally added it they had to do it in gratuitously different ways from Git (e.g., you can rebase, or rewrite history, but not both at once) because they are so damned opinionated about how we all should do do our work. So now Mercurial has rebase, and it has "bookmarks" (i.e., Git-style light-weight branching), but you still can't really use it without heavy-weight branching, and you can still get into trouble where you end up with multiple tips on a branch, and it still tries to hide the machinery underneath, which makes it difficult to reason about.

Fossil also tries to hide the machinery underneath it, and that's its big sin. Just like Mercurial. The irony is that under the covers Fossil is a lot like Git but with a fabulous SQL store.

I believe the Fossil maintainers simply do not understand rebase. Or why it's necessary when you have thousands of people working on a codebase.

At Sun we did rebasing long long before that term existed, way back in the 90s (well before I went to work for them), and we did it using ancient tech known as Teamware. That's where Larry McVoy got some of his ideas, and thence Linus Torvalds. Later, when we selected Mercurial, we ended up doing rebase in Mercurial long before Mercurial adopted the feature -- we still didn't call it that, and it was all scripted. Indeed, you can rebase on Fossil just fine, if you're willing to script it around Fossil's primitive cherry-pick (which, incidentally, is pretty much how rebase is implemented in Git, though nowadays it's not scripted).

My theory is that Git -or any VCS- is only difficult to understand if you insist on abstractions that hide its mechanics completely. Abstractions are absolutely critical to what we do, so this might seem a bit incongruous, but I'm not asking for no abstractions here, just that their being leaky is actually a very useful thing in the context of VCS.
I thought they said that about private sector jobs, not EU jobs? I'll admit that I haven't been following it too closely since I'm not in the EU.
They don't have faces, I'm not sure if they look happy. In fact, not having faces communicates to me the complete absence of indication.

That said, it's a cool project but I wouldn't use it just because the art style clashes so much with anything I would design. It looks like Word clip-art, imvho.
pass from zx2c4 is this but much more refined, if you ever get tempted to add "a couple more features" to your hack I recommend just using pass instead.

e.g. pass also knows how to generate passwords and how to remember related info like which email address is associated with a particular password.
> For most of history economies were fighting against scarcity, working to produce as much as possible to keep people alive. It is only in the past 100 years that we have had a problem with too much productive capacity.

That really does not describe hunter-gatherer or feudal economies. And it's not even true for capitalist economies: for instance, there were periodic gluts of cotton (1820s, 1860s), or in the textile products made from cotton (1850s, during a global economic crisis). Famine has different causes, independent of the economy: either deliberately caused by forced displacement (ex: Irish famine), or a result of local weather patterns (for any geographic region, there will be a weather event, like drought or late/early frost, that will cause harvest failure roughly every 15 years). Improved shipping, which in a positive feedback loop was the cause of and response to increased trade, is largely what is responsible for eliminating famine. You first of all need to be able to ship grain to a region that is experiencing famine (agricultural over-production in a different region does nothing to prevent people from starving to death otherwise), and the region experiencing the famine has to have something to trade for the grain (people have, and continue to, starve to death in places that experience agricultural surpluses).
More than that, the bearer model of OAuth doesn't guarantee the token represents a particular user or even a particular client.

Any assertion that you are dealing with a particular person needs to be targeted at you. There were security vulnerabilities with some early OAuth deployments that used OAuth for authentication which didn't understand this - and that allow one service that had a relationship with a user to act as that user against all other services which trusted that AS.

For Facebook, they solve this by having the token stamp information about which client it was issued to, which the client is required to verify. For OpenID Connect, they decided to preserve the ability of OAuth access tokens to be opaque to the client, and create a new token called an id_token.
As Panoramix queried, could you introduce more details to your project? From your website, I only got that you are analyzing paper based on the author info and the citation history of his previous works and filtering papers by some tech like topic modeling. Though the project is still in progress, will you share info about what you have done and what you are about to do?
So, I'm the author and I'm aware there are smarter people than me working on things like this, but my question is mostly whether there's a threshold where things can be useful. As an honest question, in C++ I think there's a "stack limit" of like 15 deep for generic types to avoid the fact that the types are Turing complete. Is there something that can be done that addles the type system but makes useful things possible? I think that just because something isn't possible in the general case doesn't mean that the specific cases people are likely to encounter are impossible.
Ummm...the Russians are on a suicide mission of sort. Do this and stay in mother Russia for the rest of your life, if you don't get arrested. They have a powerful nation state behind them and one that does not extradite its citizens. Even if regime changes, its very unlikely that they will be surrendered due to bad precedent.