skysight-inc/HackerNews huggingface dataset:
I cook whole chickens frequently. People make the mistake of cooking boneless chicken breasts, which are the most flavorless in every way possible. If I eat some white meat at about 3-4 hours of simmering it’s fairly dull, but other parts are more flavorful. Then after about 12 hours it all becomes quite rich tasting. Only seasoning needed is salt.
This is incorrect, the safety of HMAC-SHA1 doesn't have anything to do with input length comparisons. HMAC-SHA1 is still safe because of how an HMAC operates:

Among other operations, HMAC begins by taking the secret key, XOR'ing it with a magic value not under your control, and using this as the first block when calculating an initial hash. In order to guard against an unlikely but potential pathological key / magic value combination, a similar operation is performed as a second round using a different magic value, and this time operating over the hash output from the first round. As such, HMAC operations are safe against chosen prefix attacks against the underlying hash function, because the first block in either round of hashing is entirely outside of your control.

See https://i.imgur.com/PPlVPr0.png for a visual reference. In this diagram, Y is the value being HMAC'ed. As you can see, any attack on the hash function which requires control of the prefix of the value being hashed is a non-starter.
> Despite the inhumanity of it, one point of slavery was to convert the perceived-to-be uncivilized slaves to 'civilization'. The means were immoral, but the intent proves my point.

This is just not true. It was done, because it was largely profitable. There is no way that routinely separating child under 10 would civilize anyone. Making it illegal to teach slaves to read is not consistent with civilizing either. Limiting what they wear to one shirt per many months, splitting families as punishment, really none of that has anything to do with anything civilizing.

Making their testimony not count in front of judge right after slavery fell suggest original motivation was not civilizing either.

I could go on with specific routine treatment of slaves, but the "civilizing" argument is passable only when you never looked in details of how slavery worked and basically took sanitized version of it as history.

Meanwhile, profits from slavery were large. It made for cheap cotton and cheap workforce overall. It was massive proportion of contemporary wealth. They did not went to war for civilizing, they went to war because they wanted to expand the slavery.
This debate already took place. Go back to the python-idea mailing list posts about f-string for a complete back and forth on your point.
Kernel Self-Protection
I took one once and I was blown away by how smooth it felt in flight.

Airbus are nervous, jiggly and constantly jittering along as the avionics happily acknowledges the plane is within envelope. Boeing planes feel more damped and they don’t remind me of my flight stress as often.

But the Embraer?! I flew one over the English Channel, windy and all that; and yet, it sailed along gently.
Chicken can be quite tasty without much else if cooked properly.

It's fairly cheap, so it's the default for overcooked, dried-out protein. And sure, lots of things can be a substitute for that.
I've seen a few stories of businesses and their employees all losing their Google accounts, just because the company hired a freelancer who had previously been banned, and Google detected the association. (Pretty sure they got the accounts back after some public outrage.) I wouldn't risk intentionally violating their terms if you're not quite ready to wake up one day 100% Google-free, or very good at hiding your tracks.
Same here, except it's for women's clothes...
Cryptocurrency exchange Cryptopia appoints liquidators after hack
I would not be shocked if Windows XP had less vulnerabilities than Windows 10. Also, who cares? How would your behavior change if you learned one was more or less vulnerable than the other?
I've found SkyTube and MusicPiped (a cousin of Newpipe just for music) to both excellent YouTube clients, and both are naturally available on F-Droid.

uBlock Origin with all the extra filters makes youtube.com tolerable on desktop.
In that case you're deferring the certification of all linux kernel engineers onto the guy who ships it. That sounds like a recipe for not using it ever?

I don't think you're considering how everything works together - in mechanical engineering a certified engineer designs her machinery around other tools that themselves were designed by certified engineers, all using manufacturing processes designed by process and industrial design engineers.

What you're claiming is equivalent to a technical engineer designing something based on equipment designed by - for all intents and purposes - a random person on the internet, and you're now responsible for determining all the mechanical qualities of everything yourself.

I think you're dismissing what it means to say "I am a professional engineer and I approve of the use of linux" in such a context. The only rational approach is to only take OSs (or any other part of your software stack) that has itself been written entirely by certified engineers.
There was this hilarious documentary on metal bands (death and black metal, specifically), where the singer/shouter had problems remembering the text. Something about satan, or was it? He also had to grow real long hair, to put it in front of his face during a gig. Because who wants to see a bald man at a metal festival?
I recently witnessed this with oven mitts. I bought a pair of oven mitts on Amazon but also found several other mitts that were slight variations. When I went to Rite Aid, I found they were selling a variant of the oven mitt pair that I had purchased for more than double the price. The branding was slightly different, but the product was identical.
I didn't realize people knew about liquid oxygen 8000 years ago.
Why is SCTP not much used/known?
Without wanting to start a political flame war it would be great if there was consistency to how we in the tech community and the media treat these types of vulnerabilities. When Huawei have these sorts of bugs they are reported as backdoors. Bugs happen in software be nice if put the nationalism aside and reported it consistently as bugs or vulnerabilities
Oh that’s what those trees are! They’re quite beautiful in bloom. Thanks for your website :)
I'm curious if celiac and gluten intolerance are so common because grain proteins are so common? If pea protein ends up everywhere will a significant proportion of the population end up at risk from it as well?
> I don't know if this is a comprehensive source. Here's a poll where 70% of the respondents supported Medicare for all

The 70% don't understand that Medicare for all would kill off the private insurance industry.

A lot of people like the idea of a single-payer system but they never assume they would be forced to give up their current private insurance.

Tell people that their private insurance would go out of business or become restricted to very high net worth individuals, and then ask them how much they like Medicare for all. The polling numbers would drop like a rock. Everyone likes the idea of Medicare for all when it applies to other people but not to themselves.
Transforming Your Organization with the Andon Cord
> I quite love https://pyformat.info/ as a format cheat sheet.

I never knew this existed but that's awesome! Thanks for the link!
The fact that this is even a remote possibility should worry everyone of the ugly monopoly that Google became.

I found myself in a similar situation a couple months ago. An android App falsely charged me on the Play store. After trying to contact Google for multiple weeks I gave up and disputed the charge on my credit card. This resulted in Google coming after me for 8.99$ and threatening me to close all my Google accounts including gmail, calendar, photos, drive and everything I rely daily in Google.

That was a wake-up call for me. I decided to move everything OUT of Google. That company got too much power, it should worry way more people.
My favorite is half-day or all-day meetings where they always plan out 10 minutes for a break every hour and it just slips and slips. You end up being lucky if you can get 10 minutes of an "official" break in a 4 hour window.

I've taken to just getting up and walking away for my 10 minutes. I have to piss. I need a coffee, or some water, or just the opportunity to go and breath some other stale air in some other corner of the office (I work full-time remote, so it's generally my own stale air, but the point remains). How is this lost on so many people? It strikes me as being so basic and so obvious and I feel like I invariably end up looking like an asshole because I can't sit in a chair and listen to people fill a volume of space with their words for 2 hours straight.
Here's the quote for those who don't want to deal with the bizarre pressreader interface:

In fact, in some ways Build had even managed to scoop Quake, according to Ken: "People may point out that Quake's networking code was better due to its drop-in networking support, but it did not support client side prediction in the beginning," he explains. "That's something I had come up with first and first implemented in the January 1996 release of Duke 3D shareware. It kind of pisses me off that the Wikipedia article on 'client side prediction' gives credit to Quakeworld due to a lack of credible citations about Duke 3D."
SMB on Android: Asus File Manager doesn't suck much
You are rights. All crashes can be prevented by not flying.
Ok, I'm super confused here.

Why are your bitcoin credentials needed? There's a limit to the data that can be attached to a btc transaction, so your pages aren't being stored in ye olde block chain?

Other comments imply a bittorrent network is involved so I am unclear how it ensures persistence?
I too was once under the misapprehension that HT was "just smarter scheduling", until I took a university course in microarchitecture that explained how Simultaneous Multithreading actually works in terms of maximising utilisation of various types of execution units. I wonder why "smarter scheduling" became a common understanding.
Hey DC, I found this thread very late so I guess you may not see this. I played with voxel.js for a while back in the day, but ultimately I wound up building a similar engine from scratch (I think we discussed it briefly, if this rings a bell).

Anyway, I thought you might be interested to know that Minecraft Classic seems to be built on my voxel engine, the one I modeled after voxel.js! So there's a kind of circular lineage now, from minecraft to voxel.js and later back to MC...
Python has taken many things away, hence the 2 to 3 transition. And people didn't like it. Not one bit. We even had to bring features back (u'', %, etc) after taking them away.

Now I agree, if I could snap my gantlet I would remove a lot more. We don't need Template(), the wave module or @static and so many other things. And we could have cleaned up Python more deeply in the transition.

But reality is very messy.

Plus, you gotta realize that the Python community has nowhere near the resources of languages such as Javascript. JS is developed by giants that poured hundreds of millions in it and set dozens of geniuses to work solely on improving the implementations.

Python barely (and this is recent, we had less before!) has a few millions for operating the PSF related activities, which includes organizing PyCons all over the world and hosting python.org or pypi.org. Only a handful of people are actually paid to work on Python.

So you have a giant, diverse community, with billions of lines of code for so many different activities, and not enough resources to work on cleaning up everything.

Welcome to life, this stuff where if you want to get things done, you have to compromise.
I didn't try this, but maybe Gitlab's partner offer for Google Cloud, which lifts the credit to 500$ might still be working (link to Gitlab's article here [1], direct link here [2]).

If you or anyone else finds out if this is still valid, let us know :)

[1] https://about.gitlab.com/2018/04/05/gke-gitlab-integration/
[2] https://cloud.google.com/partners/partnercredit/?PCN=a0n6000...
Seems fixed now.

Link for the lazy: https://gravitational.com/blog/aws_vs_colocation/
Nice! I grew up in South Africa surrounded by jacaranda trees. One of the things I miss now that I live in Europe
lol "bairn"

A Barn is still a farm building in Scotland
Problem is that against many other people, most of the hiring board doesn't know if you or some resume-stuffing placement service actually did all the work you said. Plagerism and faked credentials are way more expensive to susse out than an hour or two interview.
Games usually let you control if and which buffering to use so for an OS to be stuborn about it and waste Carmacks time over a simple toggle is pretty maddening
2 new syntaxes a years is not a not. I find it quite balanced for a 25 years old language.

It's funny, because I always hear people complaining Python move too slowly to stay modern on one side, and then right after some other people saying it goes too fast.

My take on this is that people just like to complain.
It’s really worse, since the aircraft was advertised as having the critical safety feature but in reality it required the DLC. So pilots could well have assumed there would be a warning.
Good point about the differentiating factor in branding.

I think about design in same way, whether its web design, garden design or industrial design. For example, similar trends have picked up in Cars. RGB mood lighting - everyone is adding it now without fundamentally considering its utilitarian value. Or even if they realize it is "decoration", market forces and consumer choices are obliging car manufacturers to install RGB interior lighting. Same thing with brake light bars that span the entire width of the car. Even 2020 Porsche 911 had to add one!
That's why SMRs like NuScale Power's aim to reduce the number of staff and replace it with automation and passive safety features.
F1 Teams hacking each other to gain advantage would make a great movie, I wonder if it has ever happened in real life.
That's an interesting theory that I'd not heard before (and haven't found iterated anywhere within a few minutes of searching). Any additional details / references?
People without water and electricity suffer from loneliness too. Always did. The churches have structures that provide company to sick and old for that reason. If you ever read books from previous eras including war times, they deal with loneliness a lot.

Physical suffering does not make you not lonely. It just means it sux for more reasons then just one.
To this novice, the "Old" way looks so much better.
Those still using XP should have networking and USB features disabled.
I'm training people in Python regularly and my classroom experience is: ALWAYS USE __INIT__.PY EVERYWHERE. Don't use this namespace feature. You think you understand how it works, but you don't. It will bite you.
The keypair is essentially some default known value.

You shouldn't be able to use this to connect at all, but apparently works over IPv6.

So you'd have to have the private key, as well as knowing the IPv6 address of the device you're connecting to, and that device would have to have a route to the internet or a location you could connect to it from.
> the Swedish variant has roots in the Germanic and Baltic languages, which are not directly related to Yiddish afaik

In fact, Yiddish is Judeo-German and has elements from Slavic languages.
Why does that approach ring a bell? Ah, VW, that's why! Didn't work out too well for these Execs neither...
Peas, lentils and beans are already quite common and don’t seem to pose a major allergy or immune hazard. Some people have soy allergies and intolerance, although problems with milk are far more common. Peas appear to provide many of the benefits of those foods without the drawbacks.

There is no other disorder like celiac disease. It’s the only autoimmune disease with a known trigger, which happens to be a food. There’s no way peas would begin to do that.

It is possible to have a rare allergy to soy or other foods that causes a delayed reaction with intestinal changes similar to celiac - I don’t recall if it’s type ii or iv food allergies.
The Hyper.link #6 – Curated list and newsletter for the widely interested
Yea it's about her
What old way ? %, zfill, strftime, or some hack with len() ? Having a unified syntax with all formatting needs is a big deal.
You just need to find en-GB-oxendict [1]. Oxford spelling is used quite heavily in academia so it ought to be easy to burglarise ;)

[1] https://en.wikipedia.org/wiki/Oxford_spelling
RIDL: Rogue In-Flight Data Load [pdf]
Yeah, but ignoring spelling and instead listening to how it's pronounced - it's the same. My Swedish grandmother pronounced it pretty much exactly to how Scottish sounds to me.
Beware lru_cache and mutable objects. I'm on a phone so this will probably contain an error but:

@lru_cache
def slow():
return {"result": "immutable?}

answer = slow()
answer["result"] = "no"
print(slow())
How to set up face verification the easy way using HTML5 and JavaScript
There are some changes in the movement physics which might not be obvious. QW is more forgiving wrt bunnyhopping as you can gain momentum more easily compared to NQ. The speedrunners still use NQ afaik because it is the original single player game.

https://www.quakeworld.nu/forum/topic/2356/qw-physics-vs-nq-...
Budgets will find room for an update when an out of date OS starts causing damage to the business.

Patching an ancient OS is enabling the delay of updates with the excuse "Whats the point, it still works"
Yes that is why I think Cloud VM are very expensive. And worst they are bumping out Memory in these so called General Instances, with 1 vCPU ( Thread of Less ) to 2GB Memory. The problem is I want 1 Real Core, or at least 2vCPU per 1GB of Memory.

I don't know why they are stuffing so much useless memory to make it looks like a bargain.
There was modem dialup between two players though. Among my circle of friends in 94/95 there was someone who wanted to play DOOM every night. The games was often coordinated during the day at school, or later by phone.

Also I agree that is not a given that "Cloud gaming" will take off. We have emerging VR were latency is absolutely critical, even more so than for FPS e-sports
I had a co-worker who like the convention:

>>> 'User {user} has logged in and did an action {action}.'.format(**locals())
'User Jane Doe has logged in and did an action buy.'

I thought it was clever at first, but noticed it was frustrating to refactor because it was hard to see the scope of variables (especially if the template string is defined elsewhere). I don't lean heavily on IDEs, but at the time it would flag many required variables as unused because it couldn't grok this.

Do you find the same problems when using f strings?
Exactly, the f-string syntax looks so close to PHP’s way of handling strings that I’m really amazed that it managed to pass and be implemented. I mean, I don’t see that much of a difference between

> name = ‘Jane’

> print(f”Hello, {name}”)

and PHP’s:

> $name = “Jane”;

> echo “Hello, $name”;
This comment breaks the site guidelines. Would you mind reviewing them and sticking to them when posting here?

The overwhelming majority of the time, people just have differing views. Taking the conversation into "are you a paid account" territory without evidence—an opposing view is not evidence—has poisonous, community-destroying effects and is not allowed here,

https://news.ycombinator.com/newsguidelines.html
"We're also curious, as children of the 90s ourselves, does a child who grew up without a continual bombardment of ads end up more susceptible to advertising later in life? Did those early days of being shown ad after ad for LIFE Cereal end up turning us all into advertising cynics? No data yet on this, but something we'll definitely be paying close attention to in the future."

Meanwhile, Netflix and YouTube today are 24/7 tracking and saving a record of everything a child has watched every day of every year, with no limits on how that data can be used.

Not worry. This data could never be used in a way that makes them more susceptible to advertising.

There was an image with overlaid text going around on Facebook on Mother's Day that said, "Happy Mother's Day to the iPad that is raising your child."
Honestly this might just be the KLM part. Recently flew a very short flight between Berlin and Amsterdam (don't remember if 737 or a320, but definitely one of them), paying for extra legroom... When I got on the plane I couldn't tell the difference between extra legroom seats and regular seats very easily (cos they were all relatively spacious). Was also the most I've felt a flight to be "just like a bus" in my life (smoothest takeoff/landing I'd had in a long time and smooth operations)
If I was managing systems that were EOL many years ago and an active risk of being exploited my behavior change would be either to update them or disconnect them from the outside world.
Yep, NHS for example.
We are putting effort in improving our embeds for the next release, and will be happy to learn what you were missing in embeds.

Happy to discuss this further via email (arik at redash.io).

Thanks!

(I'm the creator of Redash, now CEO of Redash the company)
I first went to Japan before smartphones existed. Internet cafes were a place to look at Yahoo Maps to figure out where you were, and to check your email. When I traveled I relied on paper maps. All of the computers were running the localized version of Microsoft Windows. Everyone had flip-phones, and a lot of people had more than one. Instead of SMS they used email on their phones.

The internet cafes had beds (sort of, more like booths with padded benches) and showers and vending machines with hot food. I went back and forth across the country without reserving hotel rooms in advance, and I spent the night in internet cafes fairly often.

I went back about 2 years ago and I saw mobile internet access advertised on the train for very low prices -- far cheaper than what you can get in the US. Smartphones were common. I saw a few internet cafes but I don't think people need them anymore. They will probably all be gone soon.
Seemed to work out okay for the Equifax executives who sold stock before they publicly disclosed they had been breached.
I've been programming python, on and off, since 2001, and I still learnt a couple of things.
> mandate the government to monitor said studies

The studies in those emails where kicked of by government agencies in response to the cancer claims. So that is exactly the scenario Monsanto already has interfered with and is prepared to interfere with again.

> and sue any form of intervention.

So we double down on lawsuits instead of just using one and util those new lawsuits are decided the old one spends decades in limbo? Right now the getting caught trying to manipulate studies was part of the original lawsuit and Monsanto/Bayer certainly did not enjoy the results.

> secrecy, duplication, decentralization

That seems to contradict the whole do "two" studies directly in response of the lawsuit. They are not secret, just two means you can manipulate one without any way to decide the correct study and having the same government agencies from the emails set them up just the kind of centralisation any company with regulators in their poket would love.