skysight-inc/HackerNews huggingface dataset:
Other good choices for French are the Trésor de la Langue Française informatisé (1994) developed by CNRS, and the various editions of the Dictionnaire de l’Académie Française.

They can be accessed here (along with a few more dictionaries) http://www.cnrtl.fr/definition/

There is also a decent iPhone/Android app to search the TLFi (not free, requires internet access) https://dictionnaire.app/
Indeed, I am very glad they have no free tier. It keeps bad apples out and let's them focus on actual paid customers. Great products don't need a free tier.
The HTML is extremely naive in this question and I wouldn't expect it to work on any computer given the multitude of flaws.

Just because the kid who can't walk on two feet can't ride a bicycle doesn't mean all bicycles are broken.
What Killed the American Middle Class?
The question now is fight them or join them. On Microsoft people had chosen to fight, because the tech was horrible in effect, and Linux made much nicer server platforms.

On Google, I'm not so sure. The tech is nice, and everything works beautifully for 99% of the users
Then again, my sensitivity is way too high. I can also feel whether my microwave is turned on through the wall!

Your microwave is a Faraday cage, it's not supposed to let microwaves leak out -> https://www.amazon.com/Microwave-Leak-Detector/s?k=Microwave... something like this might tell you if it's damaged.

A double blind test where you are deafened so you can't hear it, and don't know when it's on/off, would be interesting.
Researchers convert brain signals into speech, can assist people who cannot talk
OsmAnd is perfectly usable (I would say an improvement) as a Google Maps replacement, uses open data and is free software.

There is no realtime traffic data, but that is impossible without turning every phone into a telescreen.
Speaking from my own experience though, for the few times I was in London, the driver would need the zip code to drive from airport to the home stay.
There's definitely still issues with that though. Try including one small component from material UI for example and the resulting bundle can still be quite significant because it bundles a lot to manage its theming.
Do all your contacts work in the tech industry? I'm wondering if we're really backwards here in Australia, or if I've just had bad experiences. Slack-style messaging seems really uncommon outside tech, even though traditional AIM-style IM is used everywhere. I think a lot of enterprises could benefit from capturing corporate knowledge in searchable Slack channels, but the only teams I see using them are doing IT and software.
And yet, slack has seen exponential growth, while IRC was always available but rarely used.

We have seen this before and we will see it again. If OSS wants to be widely used, it needs to take UI seriously, and not dismiss it as frivolous “eye-candy”.

It’s ok so say ‘no, we are fine within our niche’. But then you don’t get to arrogantly explain to them how they are “taking one step forward, two back” by not embarking on the joyful journey of fiddling with config files.
Just assume that it's compromised and generate a new one. There is no point in wasting time trying to estimate how long it might take someone to crack it.
Reliably picking up object is a specific task that might be solved at the material/physic level, for example : https://www.youtube.com/watch?v=m7l-87r4oOY which doesn't use fingers at all.

Planning using previously unseen object to interact with other previously unseen objects in the environnement to perform a general task is not something we can solve with new types of hardware (at least for now)
You could run IRC server on whichever port you like and many servers do, the biggest benefit of matrix is that it's decentralized and easy for non technical people to engage in, no need for znc bouncers and things like that.
How to Find Longest Substring Without Repeating Characters in Java?
Spare-time freelancing for the full-time developer
My apprenticeship life in the 1980s was full of TS11 and TK50 goodness - I looked after an 11/750 and a couple of MicroVAXes all running VMS.
Lessons from Pinterest Marketing
The S&P companies generate a stream of future profit; that's where the value of holding the index comes from. Bitcoin doesn't and I don't see the logic in assuming it's deflationary or that its fundamentals will remain constant in the long term when the empirical evidence strongly suggests otherwise. It's extremely volatile and has lost more value in the space of months than most inflationary currencies have lost in decades. The problem with the idea of an "index for gambling" is that there are plenty of other assets for gamblers to pick...
Apple Held Talks with Intel About Buying Its Smartphone-Modem Chip Business
The issue is, how do you verify the checksum you are using is valid. If you obtain the checksum from the same place you get the image, then an attacker can simply calculate a new checksum for the malicious image and publish it too.

I guess if you were really sure you had obtained a checksum prior to the service compromise, then that would give reasonable assurance the image was not tampered with.
This

> ...the innovation is a consistent more reliable and timely experience, consistent across geographies, where it did not exist before.
I based it on this table:
https://w.wol.ph/2015/08/28/maximum-wifi-transmission-power-...

2.4 ghz tends to be 200mW, and 5ghz max tends to be 4000mW. I wanted to be as pessimistic as possible to still make my point.

Although with stuff like 4x4 MU-MIMO routers or dual network routers with one for 2.4ghz and for 5ghz, you could say it's 4 radios at once = 16W max. Radiation per inch of 4x4W power sources is different than one 16W source, so it's not 1:1.
Or it could be a model where there is always a car with a ride share available.

I mean could it be the Uber Go model is the best win-win for the customers, Uber and the drivers?
I hold many cryptocurrencies, and your argument is only valid if people don't switch to other new better cryptocurrencies.

There used to be very strong network effects, but now that you can exchange coins easily, it's trivial to move to a new shiny thing.

On the plus side, Bitcoin has a brand name and recognition. An average person has no idea about Ethereum or Monero. In my opinion, its brand is the only thing keeping it afloat. Other coins are clearly superior in functionality (except maybe the hash rate).
From the perspective of its C API, Lua is a concatenative language.
Introduction to Balanced Box-Decomposition Trees
I think his point is that for some checksums it could be trivial (and for some, tools already exist). Checksums aren't designed for this, while on the other hand secure hashing is. As a result, authors of hashing algorithms often attempt to mathematically prove their strength and resistance to a collision.
Does someone know how I can select multiple walls to move a room?
Nvidia Enables Ray Tracing on GPUs It Claims Can’t Ray Trace Effectively
interesting, someone has refined SETL2 into SetlX; I had not noticed that the SETL wikipedia entry has an entry for SetlX:

https://en.wikipedia.org/wiki/SETL

In my other reply in this thread I highlighted the lineage of SETL, I neglected to also mention that SETL was an influence on ABC that influenced Python.
Scottish counties have as much representation in Westminster as any other area, so what's the origin of your grievance here?

Fwiw the average MP (in 2009, has it changed) represented 70k people in England, 65k in Scotland, 55k in Wales. Which is probably the reverse of how people "feel" they're represented.
Discussed 2 days ago: https://news.ycombinator.com/item?id=19740923
It uses SHA-256 right? My understanding is that there isn't yet a workable collision attack on the SHA-2 family.

Regardless, I think it's certainly an excellent hardening step.
It was pointed out upthread that the first version said 5 years and then 7 years and asked people to draw conclusions from it. People were drawing the conclusion that the original poster had updated their posting to keep with the amount of time passed. I just pointed out that if that were the case then they did not just spend a week indoors after 7 years, they did that 2 years ago when they did the original posting.

Probably to clarify they matter they should have said - 2 years ago my life was nearly destroyed by Freelancer.com, et c. etc. but they did not, hence the whole thing seems a bit off, perhaps because they are not very good at constructing a narrative in English.

I had supposed this point very clear from what I posted before, but it appears not, this saddens me as it may mean I am not very good at constructing a narrative in English either.

Of course there are any number of ludicrous ideas one might entertain as to why the posting was updated in the manner it was - perhaps after losing their source of income after 5 years it all ended up well and they continued with that source of income for two more years until the exact same thing happened to them in which case fool me once, fool me twice applies.
I'm not sure that's true. How can one automatically determine whether a page is unique or static? As a trivial example, a URL path that accepts arbitrary strings and hashes them generates unique, immutable pages, but obviously cannot be crawled in its totality.
Copy-on-Write Semantics and Node-Level-Versioning: Key to Efficient Snapshots
There's a good chance that someone who can modify your base image can also modify the checksum you're showing to whatever is the new checksum.

For example, when Linux Mint's ISOs were briefly backdoored, the attackers also changed the checksum shown on the website: https://www.zdnet.com/article/hacker-hundreds-were-tricked-i...
Docker uses SHA256 though, for which it isn't trivial.
> ‘safe' has become a bit of a euphemism to mean 'unchallenging

I doubt the concerns are about people discussing Rust vs C++. And, this being Mozilla’s semi-internal technical discussions, even the most intellectual, data-backed hot takes on the culture wars de jour are probably out of place: getting DMs like “here are twenty proven statistics girls are bad at math” because you happen to use a female handle is still harassment, even if (hypothetically) true.
Good points although in Google’s case the first several results are ads and their main users cant differentiate and dont care even if they could, followed by amp pages by the most engaged webmasters optimizing for relevancy

That user wants fingerprint based ads and recent articles

Google is optimized for that

We are the only ones that want a “search engine”, a service distinctly good at indexing the known universe, instead of merely presenting the paid and compliant universe
At my workplace we have two email addresses, one from google mail (gmail for business) and one from MS Exchange.

I never had a problem with gmail for business regarding spam. I regularly receive mails from smaller businesses (some of them hosting their own mail server) and never had a complaint from anyone yet. Since i can also be contacted via phone i'd know.

On the other hand, MS Exchange constantly delivers obvious spam mails and (quite seldomly, but still) swallows legitimate mail.

Anectodal, i know. And disclaimer: the behavior depicted in the article is as bad as it gets, if everything is as described.
That's doing the least possible while billing the most. It's an optimizing function.

Doing valueless projects is a consequence of that function.
I think yall are using the terminology differently from each other in this thread. "Checksum" historically did not imply resilience against intentional modifications.

Nowadays, it's arguably a best-practice when designing a new protocol or storage format to simply make all checksums cryptographically strong unless there's a reason not to. I think that might be where the confusion is coming from.
Do you have any social solutions to the “social problem”?
As others have stated you could run your own registry or use an alternative service for private repositories, to minimise or eliminate the attack vector.

By replicating the images (or packages) that you need into your own account, you can minimise the possibility of a bad actor replacing a well-known image with something untrusted.

An alternative is to side-cart a service like Notary (https://docs.docker.com/notary/getting_started/) in order to establish a chain of trust for images. If an image gets changed, Docker will refuse to use it and you will be warned that it is untrusted.

Biased opinion on an alternative registry:

- Cloudsmith: https://cloudsmith.io/l/docker-registry/

But you've got other options, such as:

- Self-hosted: https://github.com/docker/distribution)

- Cloud-specific (e.g. ECR, GCR, ACR, etc.)

- Sonatype Nexus: https://www.sonatype.com

- ProGet: https://inedo.com/proget

- Gitlab: https://gitlab.com

- Artifactory: https://jfrog.com/artifactory/

If you're missing the auto-build functionality, this can be achieved reasonably easily with any of the mainstream and awesome CI/CD services out there, such as:

- SemaphoreCI: https://semaphoreci.com/

- CircleCI: https://circleci.com/

- DroneCI: https://drone.io/

Disclaimer: I work for Cloudsmith, and still think Docker Hub is great. :-)
How to Deal With Information Overload
It seems a bit rich to be complaining about "fiddling with config files" when the alternative in this specific case is writing custom code against an undocumented API ;)
PHP 8 Functions rand_emoji() rand_image() and more
Well, for most libraries used in Desktop Linux, a significant number of stakeholders (developers+users) exist, which actually care for development and the complete thing itself. Also the libraries generally are designed for solving problems and not getting github-stars by bots/dependency-building.

For docker (and npm for all that matters) _a lot_ of important dependencies are basically simple one-off "developments" with a single developer and no userbase at all caring for them, because they don't really solve any consistent problem, being basically just created to increase the visibility of its creator on primitive metrics. The community is there for high-level packages, but the dependencies lurk in test-scripts and seldom-used functions carefully placed by some idiotic digital nomads for their personal CV-polishment (ehm, not looking at you: https://github.com/sindresorhus/shebang-regex). Have a look at where this package is used (basically only in cross-spawn, where there are 10 other similar dependencies), then think about, how much effort creating the dependency hierarchy was, then look up who contributed the changes, where this micro-package was required and finally decide whether this was some thing sane people would do or if it's just for personal gain...
Unscientific review from my FHD Dell laptop on Ubuntu too dim for a room without curtains: Bootstrap and Material consistently succeeds in rendering clearly; Ant is fine; Fabric from MS has a very readable site, but their Office apps tend to have tiny labels without contrast; Ring by Jetbrains is also perfect but I had to switch to light mode on my IDE since warning squiggles were too dim, Github AT had issues with grey on white and grey on grey.

Other sites tend to have rendering issues with some lines in letters either becoming doubly thick or barely visible, white text pixelating out to bright backgrounds, anti-aliasing turning some pixels colorful or too dim etc. Some of them seem to be exposing edge cases of text rendering! Text could be too gray to read or too thin.

Designers need to consider people still buying laptops with 1366X768 screens.
> play topic nazi to such an extreme level that apparently nothing is actually on topic

This is the same state of many subreddits on Reddit. Moderation should be limited to spam and blatant attacks on users. Let the voting system handle all the rest.
yeah, tried to signup but got that error as well. After disabling my adblocker i was able to "signup" but my verification email never arrived..

EDIT: Verification email has arrived, it just took time.
When I search ddg with the following query:

rift "analog" "computing" -oculus

The only relevant result is your comment from this thread.
I hope, building a new package registry entails weeding out package-spam like this: https://github.com/sindresorhus/shebang-regex
Agreed, that's how I approach it now. It would just be nice if people beyond my immediate circle would be interested too, I guess.
> As for newbie accessibility, doesn't a web gateway solve that?

Until this week, Rust's Community page [1] linked to Mibbit, which allowed you to join IRC just by entering a username and pressing Enter.

Now there's only the Discord button, which works the same (besides an extra click to accept the ToU), and you get a popup and a red banner asking you to register.

[1]: https://www.rust-lang.org/community
It matters at lower extreme. If it was something trivial and people shared the password with another account, then they may be already compromised. If it was hard and salted per-user, they still have to change it, but the chance of compromise on other services is significantly lower.

It may also explain some suspicious behaviour / source of compromise in the past (we know when the issue was uncovered, not when the first dump was taken)
Debian is already using reproducible builds.
There isn't a ban on face sitting or on pornography that involves face sitting.

Please link to the actual law you think is banning this content.
Hmm, that's good feedback, thank you. I don't write descriptions a lot because I consider my photos' value to be the aesthetic and not so much the story behind them. I'll try to write something more descriptive from now on, thank you, I wouldn't have thought of that before you mentioned it.
> How is this issue specific to Docker? Anyone can download a random library off github, use a shady linux distribution

Strawman. Anyone can use Debian Stable or at least Testing.
The dividends that are paid by the company are the ones that differentiate a public company shares from a ponzi scheme. In a Ponzi scheme, the earnings are from future investors money but there is no concept of dividends ... where one earns based on how the company is actually performing.
I've been wondering that as well. Looking at every other photographer, this is true, so I think you're right. I like to experiment with many different styles so the photographs don't look "samey", but I guess that for an Instagram account having a defined aesthetic is an advantage.

I'll try to shoot more "my style", thank you for the feedback!
The important thing is that tags are signed and up-to-date, like how git tags work or how Debian signs its entire repository as a unit (via the Release file) rather than having developers just sign individual packages. Otherwise, even if it's signed, it's subject to downgrade attacks.

Installing known-vulnerable old versions of legitimate software can be just as bad as installing custom malware.
“I’m sorry, I didn’t get that. Here are some things you can ask me.”
This Reddit thread might be of interest: https://www.reddit.com/r/shanghai/comments/bhk4gc/shanghai_n...

> [...] welcome to Shanghai 2019. It’s not totally dead though but it has been sanitized.

> Shanghai in the last 4 years has really made a push to be the city where you "come for business, stay at a nice hotel, eat at a few nice restaurants, then go back to wherever [...] you came from".

> Welcome to Shanghai! It’s like the Dallas of China. Honestly, I think that to a westerner, Shanghai is one of the most disappointing cities a person can visit.

I live in Shanghai for 4+ years now, and I agree with the Reddit sub. It's not the "capital of the future" by any standard besides the length of the subway.
Accumulated error creates an gap, rift between the true answer and the computed answer.
I’ve watched this series and can recommend it for anyone interested in the subject.
hey -- I made a discord chat if you all want to follow up on this -- and give suggestions -- https://discord.gg/UXypcZV
Well, a compromised google.com main page could return malicious search results for certain queries. How many Windows sysadmins install PuTTY by googling "putty", and then installing an executable from whatever site shows up in the first couple of results?...
Wake me up when toilets tells us anything we need to know about our health.

Depending on implementation it could even be scary. A companion app that gives you AmazonFresh ads: A little low on zinc today eh? Why not try some Pumpkin Seeds™

Is anyone working on something like a smart toilet? Sounds like something papa Bill Gates would bank roll
Thank you, I think that's the more important question. My photos are for me and for what I like, it would just be nice if people liked them as well.

Since my goal is to have fun, I'm not going to ruin it by forcing myself to take photos, even if that doesn't get me followers or any recognition. Thank you for your feedback!
During a Technical Interview, Ask – Why Is This Position Available?
That's true, and I don't want to turn photography into work either, as that will take all the fun out of it. I won't bother with Instagram beyond posting my photos, thanks for the feedback!
Aren't you a bit old to use that many emojis?
It's awesome to know such many different considerations, which makes me think a lot about my career and make me care only about the most important thing to me.
Thank you all for the discussion.

And I also have a question about the future of data analyst, do you think data analysis will become more important in the future? How to become an irreplaceable data analyst? What kind of companies don't you recommend to a data analyst?
And then everything ends up like the 'defaults', with memes and easy to vote up pictures utterly dominating.

Despite scrapping the office "defaults" list, there is still clearly a rotation that get set up as default and they are by and large garbage.
Hmm, my GitHub account is showing failed logins starting from 2 days ago, with none for the remaining period that GitHub shows - no email from Docker yet, but I wonder if this is related?
Product teams deliver outcomes at www.gov.uk, not outputs
This tool checks that you have set up your domain correctly for use with Google Apps.

For domains that are not using Google Apps, its results are meaningless.
Same. There's a diy gear community on Reddit where sometimes creators share their patterns and kits. The models are amateurish yet inspiring.

/r/myog
Sure, that's how almost all package managers work. I can't think of a modern package manager from an "enterprise" distribution that didn't have a lot of the features of TUF[+].

And as I said, only official-library Docker images are signed. All other images are unsigned and even for third-party repos you can't force Docker to verify all images from a given repo (you have to enable it globally, which breaks the utility of a local "docker build").

[+] Arch is the only counterexample I can think of and I'm not even sure if my memory is correct.