skysight-inc/HackerNews huggingface dataset:
Meson looks nice, but it still lacks a way to tell it where your dependencies are installed(like cmake’s CMAKE_PREFIX_PATH). You can try to get by, by setting pkg config path, but it doesn’t help for dependencies that don’t support pkgconfig.
I was just skimming, but did anyone else get the impression this guy was actually trying to teach people how to cheat, with the complaining tone just for deniability?
I use Python a bunch and have used R in the past. I've dabbled in Julia and both APL & J. I know just enough to say that APL & J are much more expressive as long as Python doesn't have a fix_problem() method built-in. I believe ScottLocklin says something similar below, but he has a lot more experience in R and J than I.

Now q/kdb+ might be expensive, but I can only dream of doing analysis using it. SQL is great, but having the full power of K And Q-SQL would be pretty awesome.
> Would be good to see more info like concurrency limits (80 mentioned in the quota is super low...)

That's 80 concurrent requests per container.
Looks like a great methodology and good results. Looking forward to reading the paper because I've been working around the GitHub API restrictions for the same purpose.

Specifically, I'm building a SaaS (https://www.locktower.com/) for organizations (or security teams) looking to have a managed solution for detecting leaked secrets in GitHub/BitBucket/etc. I'm in the process of building an on-prem version as well. Overall, I really hope to help drive down the number of unresolved leaks that the authors found.
Uh good for you. I still think it’s a waste of time, glad you feel better about something you invested so much time into.
CDC finds 78 new measles cases, outbreak nears record,experts blame anti-vaxxers
I moved from urxvt-tabbed to alacritty and have tmux config to make it act exactly like urxvt-tabbed (shortcuts, display, and tab navigation/reordering). (Technically the scrollback is different now that I think about it... But I'm now used to it, but did prefer the urxvt(-tabbed) style. Oh, text selection isn't quite as good either (but that just be some more config.))

Alacritty just launches straight into tmux so I treat them like urxvt.

I thought it would be annoying (I'd previously decided not to try the suckless terminal because of it); but in the end it's all working pretty well.

Just a perspective on it - depending on the type of tab interface you want I guess :-)

(In summary, I think they have made a reasonable decision to not support it; but that's just my experience and how I use it :-) I know opinions will vary :-) )
India Funded startups list 2018
Because it could lead to all manner of weirdness that the user doesn't expect. Imagine someone trying to type some data into a spreadsheet and every time they hit the capslock key a strange text string appears in the cell, maybe leading to data corruption. Or even worse, it happens in some program where the typed characters are interpreted as hotkeys and instantly perform some unknown combination of actions which the user may or may not even know occurred.
Death is a known possible outcome in most SWATers' minds, and they often make jokes to that effect, or jokes about killing people's dogs (and dogs have indeed been killed due to SWATings). They'll often make false claims like "someone is being held at gunpoint, it looks like an automatic weapon". They're knowingly gambling with people's lives when they claim there's an active hostage situation in someone's house. This is not just a prank or hoax.

The SWATer absolutely shares responsibility for their death, even if they don't hold sole responsibility. 20 years seems like an appropriate sentence to me.
They do that to keep insurance away. Dentists have it much easier.
That's really cool and will help me a lot with CSS I think. However, as others have mentioned, the change from black to a gray text color #555 makes things slightly worse and would be better if it were a darker gray. It does make one trust the article less.
I think this has the potential to be huge. Finally a FaaS platform without vendor lock-in, supported by a major cloud vendor, and uses regular containers. Basically removes all of the major drawbacks to move to serverless (for applications that suit the FaaS model).
This exchange here is my favorite thing on HN today.
Actually they have it rigged so that they get a raise every year, unless they vote not to.

Though I'm not sure how you imagine congress could give anyone else a raise, or a pension aside from government employees.
Thanks for your answers here, I'm definitely going to look more closely at Rust for my next project!
Insurance isn't tied to your job. You can (and often should) forego the employer's plan and purchase insurance on the open market. Most insurances have some form of deductible, it's what keeps them affordable. Insurance should be protecting you against a huge financial fallout, not against petty expenses.

I agree it is a stupid system though and I'll tell you why: People want something for nothing. They want coverage for everyone, they don't want a tax, but they don't want compulsion to purchase and they also want to force insurers to take people with pre-existing conditions. Insurance can't work that way, the money has to come from somewhere.

If there was a compulsion to purchase, the system could work, as it does in many other countries. That's probably unconstitutional though, so it probably wouldn't stand.

Lastly you have "Medicare for all" which would basically bankrupt hospitals if you extrapolate from what current Medicare does to them financially.

You honestly can't blame representatives for dealing with voters that understand nothing and want everything. They voted for Obamacare, then they voted for Trump to make Obamacare even worse. I don't even want to know what's next...
Building a Real-Time collaborative text editor for the web (DraftJS and ShareDB)
Well, they are supposed to.

"The Secret Service agent who questioned Ms. Zhang after her arrest, Samuel Ivanovich, said during testimony... [h]is four-and-a-half hour interrogation of Ms. Zhang was recorded by video... but it lacked sound because he didn’t realize that the agency’s office in Palm Beach didn’t have that capability." [0]

[0] https://www.nytimes.com/2019/04/08/us/chinese-woman-mar-a-la... ¶12
The Milton Bradley Big Trak
"Lastly, assholes make for effective leaders."

I wish that this idea would die out. I have seen no evidence for it. The most effective leaders I have worked with and under, and those I try to emulate were never assholes. Or if so then only in rare moments that they regretted (and I agree that everyone can get triggered). Effective leaders need to be strict, they need to make unpopular decisions, but they never need to be assholes.
Twitter Platform Manipulation (Part 2 of 3)
The OP is suggesting that some "influencers" who get paid to say/show they like something on instagram are "fake" because... they mislead the people who pay them about how many 'followers' they have?

But other people are more "authentically" doing paid product placement, still without necessarily disclosing that to those they "influence"?

I am unimpressed.

It sounds like they're saying that only some people truly have earned the right to get rich scamming the rubes.
That's exactly it.

A few years ago they made a push to answer questions to the point it was in their product description on their "how Google search works" page. To quote it exactly, it used to say their objective is to "return timely, high-quality, on-topic, answers to people's questions."

And that's kind of the whole problem and why there is space for a search that actually returns results from the web in a clear and logical way.
Kind of unfair. Do they really think that an aircraft should be powered by the same software or hardware that powers a modern computer or smartphone? An aircraft needs incredible reliability. You don’t get that with modern software/hardware architectures.
> Yeah, but then we'd just be dominated by states like Minnesota, California, Delaware, New York, etc. Basically, ginormous pools of money would start to build in the old Union and out on the west coast. But almost everyone in the middle would be hosed.

Not really. States like California are net payers, but only just, because they have large diverse populations and end up getting back almost all of what they pay in.

It's true that a lot of the middle states are net recipients, but most of them are still below $4000 per capita.

And the bigger problem is that so much of the money is wasted. Each Congressman goes to Washington to bring back pork, and they do, but pork is inefficient. So they bring back $10,000 per capita in funding after paying in $6000, but only $5000 of the $10,000 is put to productive use. Does that really help the states compared to just keeping their original $6000 and using all of it productively because you don't have to negotiate with 49 other states for how to spend your own money?
Ask those who buy games on GOG, and stopped pirating games once DRM-free stores became available. That's commonplace. Someone should learn from good examples.

Film industry for the most part is extremely backwards thinking, driven by all kind of crooked business practices and often simply stubborn stupidity of those who are in charge. It's the same industry which for years was proclaiming that cord cutting isn't a thing, until they were literally forced to admit that it's inevitable. Same thing with DRM. They'll be stuck up until who knows when, while DRM-free market won't be addressed with legal options.

So I won't take its size for the indicator of anything positive apriory. It's just a legacy behemoth, scared to admit obvious falsehoods it's sticking to.

Here is also an insider view for you on the issue of DRM stupidity: https://web.archive.org/web/20150812051508/http://www.lexi-a...
Does it have any distributed build or caching support? That is my minimum bar for a C++ build system. ccache and distcc/icecc are too limited, you want something integrated with your build system directly.
This is how misandry spreads. When you put too much power at the very first step that is filtering out 99% of potential partners based on looks, then how would you even give the guy a chance to showcase what he truly is? Most women then miss out on the best experiences of "chatting after the swipe and the overall impression/feeling they have when meeting in-person."

The final choice is then made out of settling down by lowering expectations when prematurely optimizing for low priority variables in the first rounds.

I am amazed that men are adjudged to not have basic intelligence to see this through but are shoehorned as nursing their wounded ego. Nah man, Most men into adulthood are mature enough to not fall into simple biases unlike the feminist level misandry that concocts otherwise. Most men are optimistic than pessimist, more so, in the initial years of dating pool. That is why they test themselves repeatedly in dating market to draw such conclusions and eliminate the confirmation bias.

Why does your comment that you linked not explain the reasons and spend much/all the time in dispelling "myths"?

Abuse or PUA algorithms is all the more reason to not swipe left because you would expose yourself to more good people to bad people if statistics of society is anything to go by. Or why wouldn't you entertain the thought that women spread this rumour among themselves or play such hypothetical scenario in their minds more than the credibility associated with it?

> Yes, for the tiny fraction of women

If this sentence after this quote should continue to maintain what comes , then you must change the word tiny to majority. Match.com, Tinder and plethora of research contradicts you.

Men don't self select themselves out of dating pool. No numbers say that either in absolute or relative to women or men along time axis. That must bust the myth that they are somehow insecure.

The moment I read your "proto incel thoughts" as a warning signal in a HN community that isn't, is the same moment I got convinced the legitimacy of incels in this tiny subdomain of hatred they spew.
Akamai's speed test reports are getting a bit dated, but in Q1 2017, no country had more than 40% at 25 mbps+: https://www.akamai.com/us/en/multimedia/documents/state-of-t.... The U.S. was #10 at 21%. The only European countries to make the list were Finland, Denmark, Switzerland, Sweden, and Norway. Putatively first world countries like France and Italy were at 18% and 12% with 15mbps+.

Even today, I'd wager that for the vast majority of the EU (by population, so the U.K., Germany, France, Italy, and Spain), 25 mbps is closer to the median than the floor.
Truly, I will never understand why some are so eager to have their behavior dictated by others.

I have no doubt it's related to the recent rise in authoritarianism too.
Would this work for every operating system without requiring the user to do anything?
Considering the reported working conditions of some Amazon employees, let's not.

The most sustainable choice will be neither monopolistic pricing, nor cutthroat pricing at the expense of medical staff, but somewhere in the middle.
How do you feel about HN?
Not so easy if you’re google-able and clearly work in tech. They won’t squeeze blood from a stone, but if they smell money, they aren’t going to negotiate. The advice frequently found on reddit about negotiating is good, but keep in mind it’s targeted at individuals with, best case, 0 net worth and worst case hundreds of thousands in debt.

Your mileage will vary depending on the bill collector, hospital system, staff etc., but keep in mind someone has to be paying the bills. American, work in tech, post on Hackernews? It’s probably going to be you.

Always worth a shot though. Worst case they’ll usually let you go on a 0% APR payment plan for years and years.
> If you're poor in the US, insurance is free

Depends on if the individual's state accepted Medicaid expansion funds from the federal government (states like Texas and Florida haven't) and whether the individual makes less than ~$16.5k/yr.

I wouldn't call either $0k/yr in North Carolina, or $17k/yr in New York, lower middle class. Neither of those incomes in those places would give an individual access to Medicaid.
Leveraging compositional abstraction doesn't change what you use the thing for. I use cmake (well I don't often, but when I do) to build my projects. How it accomplishes that is if little concern.
Over a million for 10 weeks in nicu? Who sets these rates?
You can try xmake's dependency package management.

add_requires("libuv master", "ffmpeg", "zlib 1.20.*")
add_requires("tbox >1.6.1", {optional = true, debug = true})
target("test")
set_kind("shared")
add_files("src/*.c")
add_packages("libuv", "ffmpeg", "tbox", "zlib")
Well as an additional datapoint, it lists my two broadband ISPs (AT&T Fiber, Charter Cable) correctly here in suburbia Cary, NC. It also lists three satellite providers which I have no idea if that’s correct or not.
Microsoft is basing the data on users of their services, which is largely a self selected group. Would it be surprising if people using Bing instead of Google or Duck Duck Go were the kind of people who use Windows, default to using Bing, and don't see the value of a high speed internet connection? I have older family members who fit this profile.
Is Moonlight Blue?
these post makes me cringe as someone that deals with enterprise sass integrations that publish to webhooks. Lot of bad actors seen many interesting issues pop up because the awesome stuff subscribers try to do
It's particularly frustrating because of how trivial the solution appears to be. Trust on first use is more than sufficient in this case, so asymmetric cryptography with a randomized key would be fine. I realize mass produced electronics can be very cost sensitive and that a PKI chip might add a whole $0.70 to your product (https://www.digikey.com/en/product-highlight/a/atmel/atsha20...), but still. I paid ~$50 for my keyboard! I would not have begrudged the manufacturer an extra dollar or two in order to ensure my system's security.
I'm getting ready to deploy a Cloud Functions service. I wonder what I'd gain by making it a Cloud Run service instead? I imagine cold starts for Cloud Functions are highly optimized (since they're runtime-specific).
Gibson Research Corporation – ShieldsUP
"Those who have never experienced freedom will not miss it."
From the article:

“This data tends to be volatile monthly. I don’t think it’s a start of a trend,” said Craig Dismuke, chief economist at Vining Sparks. “Broadly speaking, I think the labor market has been very good for people over the age of 55 and 65.”
Distributed builds are being planned, but not yet implemented. You can see https://github.com/xmake-io/xmake/issues/274
Bing isn’t the only service Microsoft has. Update, office, Xbox, Windows itself, etc
Hmm... Don't take this the wrong way but the point of CSS is that it can be modified by people that are good at, you know, CSS - a class of people that generally does not include your average java / PHP / javascript developer.

I agree entirely with 'scoping styles to components' but css in js is a massive step backwards when this can be accomplished much more simply by maintaining a less / sass / css file in the same folder as the js and importing it.

My two cents, as a contractor who is paid to fix other people's code: there is an aspect to semantic HTML which is the descriptive nature of attribute class names. This is completely destroyed by css-in-js.

In short: I can easily track down the styling (and probably the component) in the code based on an attribute classname. How on earth do I do that when every single class is named some combination of 'R23RG67ED'? I know there are things you can do in Webpack to create some sort of descriptive name ('component_1-wrapper_2-div_3-my_wacky_component_5-GEWRCER anyone?) but a) nobody does this and b) if the only reason we're implementing css-in-js is for issues of scope, surely this is not a step forward?
I suspect you're arguing from the point of view of a determined attacker against a specific target, in which case, I agree -- there's an infinite number of different attacks you can try, with the caveat that any failed attempt is possibly going to tip your target off and make them up their opsec game, becoming a much more difficult target.

I took the OP to be talking more about general case. Random people plugging into a public recharge station, using (shady) Amazon/Ebay USB drives, plugging in a "found" USB stick, etc. The OS can at least help thwart simple attacks here.

In the worst case, the device contains a GSM modem which is powered by USB but otherwise only appears to the host as a USB drive -- and if you can get the target to write useful data to it, I guess you have something? That's an awfully expensive attack that I would assume has relatively low chance of yielding something useful. (Unless maybe you market it as a "secure cryptocurrency wallet", and hope you can sell enough to people that then put on enough cryptocurrency to make up for the significant manufacturing expensive which you're able to steal before anyone notices there's a modem in it and sounds the alarm..)

> You could do similar things with a USB stick. You could have a high voltage converter which fries your PC the second you plug it in.

This has not only been done, it is a commercial product: https://usbkill.com/

While being obnoxious and causing one (random?) person some money (presumably they will destroy or throw out this USB drive aftward), it doesn't really get you anything. There's many other cheaper ways to destroy someone's computer, as there are many other things you can destroy to cause a person expense and/or inconvenience.

> Basically, it is always a bad idea to plug in unknown peripherals to your computers. The OS isn't going to save you in all cases.

100% agree, but that doesn't mean it shouldn't try at all.
> USB device that appears as a storage medium, yet contains a transmitter which slowly exfiltrates any data written

I won't copy my data on unknown device. Mics and cameras trigger prompts in MacOS. The keyboard device on the other hand, can be used for 5 seconds walk by attack, running install scripts (Bad USB) attack.
You can keep a .env.default or .env.sample in your repo, but never use it directly. It should only document what the available parameters are.

Using a .env file is a bit of an anti-pattern, partly because many applications expect it and thus will be affected by it in ways you might not want. But also because passing configuration to applications via environment is not great, because then the values ar all static and the only way to change them is to restart the app. Better to have a function that can reload a real data format (json, yaml, ini) at run-time.

Each environment that runs your app will need to have its own 'env file' because every environment is slightly different, and they're coupled to deployments. So I'd keep your environment stuff wherever your deployment stuff is; with your terraform/ansible/puppet/chef configs, or etc/consul, or an S3 bucket, or SSM, etc. Create it at deploy time, pull it into the app at run time.
Here is a repository with a few more small code examples which may be helpful: https://github.com/tiehuis/zig-rosetta

The code itself should be up to date for most, but I'm aware of a few examples than need touch-ups. Unfortunately there is a bit more boilerplate compared to other languages for some simple tasks, since Zig requires you to be quite explicit about things (e.g. i/o, memory allocation).

Regarding the rejection of '\r', there is the intention for `zig fmt` to handle these minor issues and reformat code as needed which hopefully reduces this barrier. There was a long issue regarding hard tabs with discussion here: https://github.com/ziglang/zig/issues/544
Look into bazel, pants, and similar hermetic build systems.

You pin all dependencies and manage flags and such but via the build system.
No it isn't.

RCS its a open cellular standard thats being deployed worldwide. Google does offer a backend for carriers to use (when you want to push your cloud offerings and have tons of engineers with nothing else to do just like AWS) but it's not required and carriers are rolling their own. The protocol itself is meant for inter-carrier communication and phones.
For anyone else curious... geostationary orbits run at an altitude of 22,236 miles or 120ms. Double that for round-trip and bump it by a bit more for the angle and I'd expect pings >= 300ms on top of the delays in the electronics.
>If it isn't being selected, then clearly there's insufficient competition to drive better prices and better packages.

No, not everyone is going to have your use patterns or knowledge. Most ordinary folks are just price sensitive. "What's the lowest price thing I can get that's not dialup."

I agree there need's to be more competition, but so long as there exits cheaper packages bellow the "minimum broadband" definition there will be many normal people who buy them.
Well, this was written by one of those 'influencers' who is upset that she is having to compete with 'fake' influencers for ad dollars.
Employers can also negotiate for group rates that someone buying insurance on the individual market won't have access to.

Not only do employers pay for a portion of employee healthcare costs, they also get better coverage for less.
That's sad though. This means that most students never earn more than 25k per year, even if they studied..
I sell my own software.
"you're completely ignorant"

Thanks. Very stylish.
UK to unleash internet safety czar on Google, Facebook, Twitter
That's odd. Dentists, unlike doctors, will in my experience just give you a price if you ask for it... Maybe this varies state to state?
What Does Cloud Native Mean in the Data World?
Most car crashes are extremely preventable. Do some people not drive more dangerously because they believe themselves to be safe because of things like seat belts?
Shhhh, if you admit you don't see it the game is ruined. Instead you should build on it, like improv actors in a jam session.