skysight-inc/HackerNews huggingface dataset:
Ok. Throwing someone's words back at them with "hah" is being a jerk. Claiming someone "wants to lie" when there are plenty of other obvious explanations is being a jerk. So is venting your frustration on some dude just because he happens to work for the company, especially when he was trying to be nice and you prefer to assume bad faith. So is overposting about this instead of saying your piece once and letting it go. And actually, acting like your bad experience generalizes universally and justifies your being vengeful, is also kind of being a jerk.
I took the high speed train from Shanghai to Huangshan this autumn, and saw this everywhere. Even in the middle of nowhere, you'd see sixteen towers under construction, being built simultaneously by sixteen cranes, as part of a development of dozens more. And this was very common to see.
You can use pgp without the web of trust. I think you are missing GP's point.
My router enforces quad9 and my Chromecast is fine. How's that different?

Maybe my router masquerades the dns port and answers vs blocking other dns outright?
> And we trust Google's target numbers to decide how much Google should get paid?

I was talking about the city's targets.

> The government is pouring billions of dollars into this area

Right, and Google is proposing to instead of taking billions as a flat sum, taking it over 30 years instead, because they believe in the success of the project.

> which is going to have returns with or without Google's help.

They clearly want Google's help, as this project is already 1-2 years in the working, and has already gotten approval from all 3 levels of government. If they didn't want Google, they could've very easily refused the offer. No one is forcing anything on anyone.

> Paying someone more money is not a win-win.

Who said more money? Why do you instantly assume the worst? Take any amount of money you were going to pay them for their work. Take any target you had for how successful the project was going to be, and calculate the percentage distributed over 30 years. No one is talking about paying them more than they are owed.
Agreed. I'm grateful for the shared story. It's an example of one way to deal with what comes to us all. I'm always thankful for reports by those further down the road.
My father also died while I was a child after 4 years of cancer, radiation, surgeries, and treatment. In his case, there was no disguising the illness.

When I look at the effect on my younger siblings, not having a front row seat to multiple rounds of cancer and the wasting away would probably be a better experience. Plus the obvious dread of anticipating a primary caretaker dying.

My parents told us when they decided my father was terminal and ceased treatment. The next couple of months sucked.
Users who use their own password manager are also amongst the most technical. Optimising login UI so they can login a little quicker, at the cost of confusing the average user, is a terrible trade off.

For example Office365 uses a single email input on the login form. For enterprise users clicking "next" triggers an SSO flow that skips any password prompt.

If Office365 adopted the suggestions from the article and added a password field Brad Frost would be able to log in to his personal account from a single button press - a small optimisation for him - but many more users would be confused about the presence of a password input and potentially even be stopped from using the product at all.
You can also sometimes temporarily turn off JS in your developer settings, paste, then re-enable it.
To have forward secrecy you need sessions for each correspondence. To have that, you need something more reliable than mail.
PGP is downright user-hostile once you're not using web of trust. So it's true, that you don't have to use web of trust. But PGP goes out of its way to make your life hell.

For example, let's say you have a key (as an ordinary file) and a signed message in hand. How do you check that this key has signed this message, using the gpg command-line tools?

The problem with PGP is that it combines web of trust and the mechanical actions of signature verification and cryptography into one tool. It forces you to use one program both to express "trust" and to do signature verification. God forbid you should ever want to sign or encrypt something without futzing about with your keychain.
Yeah, the main problem was that the weapon is not designed to work in conditions like in Afghanistan. That's why soldiers in Afghanistan (righfully) complained.

Then, the weapon trades of weight (plastic), against accuracy (in long fire fights). And if that is the correct trade-off to make is of course debatable and depends on the usage.
I wouldn't necessarily expect a developer to know how to manipulate network traffic. The OSI model extends a bit to humans as well. But any network engineer can add a DNAT rule.
As Amazon Scraps New York, Alphabet's Toronto Ambitions Swell
That filler is in there for other audience members. I think of clothing descriptions as filler too, but I remember Brandon Sanderson mentioning how female draft readers for Mistborn kept objecting to him that he wasn't going into enough detail about what the protagonist was wearing.

You may not notice that text you didn't want to read anyway is just random self-contradicting gibberish, but someone wanted to read that part of it, and they will notice.
Easy Sausage Strata
I think you may have misread my comment, since I never claimed it was not possible to use PGP without web of trust. I claimed that it was a pain in the ass.
Gilbert Strang's Linear Algebra course from MIT, available on youtube (3 million views!), and his textbook of the same name are awesome. What a great teacher.

https://www.youtube.com/watch?v=ZK3O402wf1c&list=PLE7DDD9101...
Faster still is DNS-based, network-wide blocking with pi hole.
still, from a dev perspective it's not always clear what tool to use for the task. That's a lot of bike shedding for something that shouldn't be a problem in the first place: email or whatever communication system we will use in 20 years needs to have encryption baked in by default. Storing and sharing data safely need to be a first class feature of all OS and browsers.
Google AdWords Sitelink Extensions
Back in those days, Visual Studio was priced a lot higher than Borland offerings - this goes all the way back to DOS, actually. Borland had always priced its developer tools very aggressively compared to the state of the market, and they reaped the benefits. Thus, Turbo Pascal or Turbo C++ used with Turbo Vision was by far the most popular DOS TUI (as opposed to, say, VB for DOS), and OWL/VCL was the most popular Win16/32 framework, if you discount raw Win32 API (of which it was a wrapper).

Visual Basic ate a considerable chunk of Delphi's lunch in the enterprise area, where price was less of an issue, and large dev shops would buy an MSDN subscription anyway. But it was never more popular than Delphi for desktop apps.
Nah! We have a long way to get to full self-driving. There are just too many variables, unpredictable conditions - to be baked into a system.

https://www.cnet.com/news/alphabet-google-waymo-ceo-john-kra...
Hyperion vs. Cloanto, the longest running lawsuit in the history of computing?
Charlie Munger Speaks at Daily Journal Annual Meeting
Why Do Newscasters All Talk the Same?
Your experience when thinking about death and eternity seems similar to mine. "Just say no" to existential crises is actually the only thing that has worked for me when practiced with discipline.
Urushi Mobile Tumbler
Theoretically being a importer is even better. You get valuable natural resources, goods, services and labour in exchange to green paper with $ on it (or database entries in banks). One just has to distribute the gains to keep the population satisfied (which military spending does, albeit inefficiently).
PPP: Privitize the profit and socialize the cost.
Sidewalk labs can take a long walk off my short Queen's Quay pier.
Ask HN: Can too much “intellectual curiosity” cause psychological problems?
HN's maxim - "anything that gratifies one's intellectual curiosity" seems to become a serious problem for me. I can't stop thinking about stuff. Not in a good way as if it would lead to me some brilliant inventions, but rather in a troubling one that I question everything to a point where it becomes pathological. I spent a lot of time reading theoretical philosophy (External world skepticism, solipsism) etc. Most people seem to think of these as quixotic thought-experiments, but they become a serious trouble for me in my journey to "figuring everything out". Is there anything such as epistemological psychotherapy? lol.
You shouldn't have a giant sign asking people for something they don't have, it's confusing and discourages people from using your product.
This. If you share a temporary password through another secure channel, you can probably just share a symmetric key and then you don't need PAKE anymore. In some cases though, you might want to send yourself something from one device to the other, or you are talking to someone who's not really technical on the phone.

About being online at the same time, I was under the impression that this wasn't a requirememt.
Password managers largely assume that you personally own or control all the devices you login from. The problem is what if you want people to be able to login from multiple devices or your colleagues devices? This frequently comes up in business and personal contexta eg.login and show someone something on a device not yours. Normal office folks don't carry around their work laptop wherever they go unlike developers. I never carry laptops to meetings unless I'm presenting though I occasionally do development. I don't carry my laptop when meeting friends or relatives.

You'll then need an internet synced password manager with a web interface because you can't install programs on other people's laptops and it introduces a pre-step in the middle of the meeting any anyways you are trusting all passwords in the cloud. You could come up with more secure solutions like do client side decryption using symmetric keys but now you have a login step and a decryption step before you even use the password.

Basically this is why password managers don't really work for normal people - there is no good workflow when you need to use devices other than the ones you personally control.

Two factor authentication using fingerprint with mobile phone trends to be much better because generally people carry their mobile phones around and it's one touch.

I personally use my own algorithm that lets me create unique passwords with little mental effort for each use case.
Worst govetnment in the history of Canada would. Harris was a whore.
All assemblies are versioned and can potentially have unique strong names, not just .NET assemblies. A native DLL can still be an assembly.

https://en.wikipedia.org/wiki/Side-by-side_assembly
Do you know how they're communicating the expected health effects of dose rates like these? For instance the yellow is 4 uSv/hr, roughly 10x a normal dose rate in the USA.
To be even more specific, it happened because apps dumped DLLs into shared system directories instead of bundling them alongside the app binary. Since on Windows, each app has its own directory, it's easy to bundle in a way that doesn't mess up other apps.
They had chance to become Unity of business applications

They failed.
Entering an email address first, and then the password, is needed for systems that support SSO.

If you're dealing with enterprise users, supporting SSO is the most important thing you can do to keep logins quick and seamless.
Hi twtw,

I think you were having that discussion with me.

So, I went and read the whole lkml threads you linked and if I understood correctly, regarding spectre v1, the kernel is only expected vulnerable to bpf based attacks or similar. As far as I understand, the speculation barriers are used to protect arrays directly accessible by bpf programs.

There is a mention of out of process attacks to other userspace programs, but no details.

By carefully crafting inputs, I'm ready to admit that it might be theoretical ly possible to attack some exploitable branches, but the big deal with spectre is the high bandwidth that can be attained by directly running code in process.

Do you have any pointer to any description of an even remotely practical out of process spectre v1 attack that doesn't involve executing code in process? Repurposing an interface that is not meant to be used to run code (I e. Build your own VM) is fair game.
Good points. Bioaccumulation is a real problem. For example from https://en.wikipedia.org/wiki/Caesium-137#Radioactive_caesiu...

> In Scandinavia, some reindeer and sheep exceeded the Norwegian legal limit (3000 Bq/kg) 26 years after Chernobyl.

About the slow accumulation in the sand: If we make some simplifications and assume that without decay the flow rate is constant and the concentration increase linearly and in 32 years the concentration will be 5x the current amount. But when we add the decay the actual concentration will be only 2.5x the current amount.

(With a simple model like this using 30 years for the half life, I get the peak in the year 2043 with a concentration 2.4x of the current value.)
Maybe it's old hat for everyone else, but this is my first time looking at Gitpod. (Link at the bottom of the project Readme.)
18-hole golf course for sale: $3,700,000

https://www.loopnet.com/Listing/922-Crazy-Horse-Rd-Hutchinso...

That's a pretty low threshold for "too much wealth".
The last time the US was a next exporter was in 1980: https://fred.stlouisfed.org/series/NETEXP

What changed? NATO was pretty popular in 1985, as I recall.
As a person who has to use those web apps that supposedly "eclipsed" native applications, I hope this stage will pass, and we're back to the sanity of consistent UI across apps and frameworks.
The Risks of Water Insecurity
The most popular email client is outlook. If you don't know that you are already pretty detached from reality.
Lightwell: a design tool to create working mobile apps instead of prototypes
I'm going to correct myself and say that Ramsar rates are what you'd experience around Fukushima a year out, not right after it happened. Some of those workers got way higher doses than anything natural.
It's not free and is a third party tool developed from reverse engineering apple mail...
COM uses vtables and normal calls via function pointers, unless the caller and the callee are in incompatible contexts that require marshaling (remoting, different processes, or different threading apartments in the same process).
> Those are systems for transferring money from JP Morgan to another bank. This system doesn't do that; it can only transfer money from JP Morgan to JP Morgan.

In theory, anyone who passes KYC can transfer money in token format to anyone else on the network.

There is a major issue with the network which is that it seems as if only JPMC can actually redeem the tokens for dollars.
Ha. Exactly. This is a very large, expensive, and inefficient vending machine.
My experience was I had a full plan, but deliberately avoided disclosing the legal triggers, expecting the law would apply on two levels: (a) the psychologist did not meet the threshold to breach privacy and (b) even if scheduled the legal requirement to only provide treatment in the least restrictive environment would ensure I am released given I have a demonstrable level of compliance in the community.

What actually happened was the psychologist violated the law by telling them I had unusually strong legal knowledge of the Mental Health Act and as such I would say whatever is required to not be scheduled. So I got scheduled on information they should not even have, and did not assess the minimally restrictive criteria competently because they had reason to believe I was unusually knowledgeable of the legislation.

These days I have a mental health lawyer ready to call the moment these people look at me the wrong way and I'll send him in. My level of cooperation with mental health will be zero in the future. At least in NSW the requirements to be scheduled are not strictly followed, so having a lawyer on retainer is the easiest way of dealing with these lawless do-gooders.
I’m getting this too.
> So something is only taxation if the money is wasted in your view?

Sometimes I wonder if half the problems we have in this century stem from our eagerness to slap labels onto things instead of just letting them be themselves.
"...plus petty theft..."

I know people who work in hospitality. Employee theft is endemic. Via both cash and card.
If the graphics on that page are anything to go by, they're issuing Visa cards, not their own independent solution.
Imagine a real world equivalent: a store that loudly states "Membership card needed for purchase", but in actual fact have massive exceptions if you do try and purchase without a membership. This wouldn't be a smart business decision (how many non-members do you know who fill their prescriptions at Costco).
I did most of one of these on an FPGA in verilog for fun: https://github.com/dormando/verilog-raycaster - took a lot longer than a weekend :)
I use the app keyboard maestro to type out my keyboard contents character by character (although it can do a hell of a lot more than that), which bypasses paste blocking.
> I still think that the result is incredibly impressive and powerful.

I agree in a way that I suspect is much more specific than what you have in mind. This system is managing to produce a lot of text which is not heavily constrained, and what it produces is generally grammatical English. That is impressive; in the past, producing grammatical text meant very tight restrictions on what it was possible to say, making "text generators" little more than prerecorded phone tree messages.

But this model clearly doesn't know the meaning of anything it writes, and therefore can't produce anything better than obvious nonsense. This is true of some humans too -- it is a very serious condition known as Wernicke's aphasia ( https://en.wikipedia.org/wiki/Receptive_aphasia ):

> Patients with Wernicke's aphasia demonstrate fluent speech, which is characterized by typical speech rate, intact syntactic abilities, and effortless speech output. Writing often reflects speech in that it tends to lack content or meaning.

Obviously, those suffering from Wernicke's aphasia are not able to function in society, since they effectively can't say or understand anything. I don't think matching the performance of humans who have mental deficiencies so serious that they are unable to function really counts as being "close to human quality".

> I imagine that what the authors call “coherence” is weaker than what you are referring to

I had two specific things in mind as "coherence" failures:

- Gimli kills an orc, and then is said to have not taken part in the battle.

- The sentence "When they finally stopped, they lay defeated and lifeless for miles and miles." In context, the referent of "they" can only be the two orcs that attempted to overwhelm Aragorn. But it isn't possible for two dead orcs to cover "miles and miles" of terrain. If this had been written by a human, I would assume that what the writer had in mind, but failed to achieve, was to use "they" to refer to everyone taking part in the battle; I can't really make that assumption here. That sentence needs to use nouns, not pronouns, because its context doesn't allow for the pronouns.
> the growth rate is naturally a multiple of the labor growth rate

There's nothing natural about it. It's the result of policy choices. The whole idea that exactly the system we have is "natural" and that anything else must be "artificial" is infuriatingly dishonest. Having been created by humans, the system we have is very much shaped by ideology and self-interest. It's an evolved system, and evolution does not favor morality.

> I saved 10 years of income over 40 years. I have wealth. It's already been taxed. Do I owe society another part of my unequal wealth?

In that very particular and thoroughly unrealistic case, I would say no. OTOH, that ten years' worth of income is a pittance once inflation has been factored in. It's not creating the kind of massive inequality that the superyacht owners - remember the original topic? - personify.
Google's stock-in-trade is personal data. They use it to sell, and they use it to gather more data and to make data about that data. It's kind of scary.

But Cloudflare's business model is different: they get rich by making the internet faster. Plus, it's great publicity for them. Their customer acquisition focuses largely on winning developers (by letting them use a great, barely cut-down-at-all service for free) so they use it in companies later. This helps with that a lot.
The government of the day wanted the political "win" of claiming a balanced budget. That it would cost the residents many, many multiples over the years wasn't considered important.

I should add another important point about the 407 -- the route was chosen to be a traffic release, and an industrial corridor. Because of the very high toll roads it has become essentially an "executive" highway ($41+ one way trips), and the trucks and other traffic it was supposed to offload clog up the existing highways. The public benefit has been completely destroyed because the highway has been re-purposed for private benefit.

It is a debacle from top to bottom. But for one brief moment a government could claim a balanced budget (though they were actually $10B in the red).
> i get tired of having to remember to cash in my points in a convoluted system involving yet another third party (the rewards provider).

Get Citi Double Cash and you'll get 2% on everything without point conversion hassles.
Simple State Machine in Python
Google is not necessarily forever
Call to ban killer robots in wars
I always wonder if unpaid internships function like a cartel. As soon as an employer offers $$ for a given internship, do they undermine everyone else? It seems like a huge disadvantage to let the talent go where the money is when you offer experience in place of a paycheck.
> Without a web of trust, how are you securely signing?

I can only think you're making a bunch of hidden assumptions about how trust works or why you would want to sign or encrypt data. Maybe you're thinking specifically about things like email, where web of trust might make more sense.

Consider, for example, if I'm doing backups and I just want to encrypt them for my eyes only. How could a web of trust even possibly make sense in that scenario?
It's called YouTube Premium now, but yes.
WireGuard for macOS released
More disturbing examples: https://imgur.com/a/UoaYha8

Also a LOT more in this subreddit: https://old.reddit.com/r/SyntheticNightmares/