skysight-inc/HackerNews huggingface dataset:
For those interested in the current state of F#, Sergey Tihon's Blog tracks the latest news.

https://sergeytihon.com/
Carrom is HRM and Payroll software for remote teams.
If you are a US/EU company with employees around the world, who wants to pay their monthly salary, in their local currencies with best conversion rates Carrom is for you. We take care of payments via our Transferwise integration, so you can be assured all the payments are secure.
Easily manage reimbursements, benefits and onboard your employees.
Yeah. So business as usual then. When it comes to Airbus and Boing there is nothing unpolitical.

But as a contra Point: there are tons of Max operators in the EU as well.
> Even doing it on a CLI doesn't help since the server might deliver something else to the browser.

That is indeed one of the hurdles I encountered, ideally the browser itself should be in charge of verifying these claims (resource integrity helps in this case).

> And if you have dynamically generated HTML then you can't really authenticate it either.

In the case of SSR/PHP/other means of backend-generation of HTML, yes. I initially limited the PoC to SPAs and deterministic JS bundles.

> Also, how do I trust the revelio.json? There's no signature.

For now, as I said it's a work in progress, but indeed a way to authenticate the tamper-proof properties of the manifest is necessary. This however brings up the issue of a chain of trust, which is what apparently Tanker is trying to provide with their product. Yet, it raises the question: why should they be trusted ? The commercial viability argument (we don't screw up to stay in business) is not enough IMHO, trust should be based on mathematical proofs, not business rules.
Past mistakes carry warnings for the future of work
After learning f# I had to go back to c#. You library made it bearable. Also the reader.md and some of your more hidden articles are amazing. Thank you, and the other contributors so much, amazing work.

My current strategy is to hook my colleges in with languag ext until they move to f# themselves.
This post seems to conflate implementation and specification.

All the required bits (permissive license, specifications, etc) for writing a community tool chain (compiler, linter, fmt) are in the open.

Won’t the oppressed community rise up for itself and end this programming language tyranny!
People say "he's from the street" but damn, he's also a celebrity — that's bound to attract a slew of weird and ill-intentioned people.

That being said, I doubt he would have shot someone unprovoked. That part is for the street cred.
Since 1985 women can volunteer, mandatory conscription for women was introduced in 2015. So at least historical data is definitely skewed. Currently, there are 13% women in the Norwegian army... https://forsvaret.no/aarsrapport/statistikk/personell
This was a legal settlement to shutdown two old coal plants earlier than expected so they could buy a large natural gas plant. With the promise that they will build solar and wind too. But keep the coal plants on the books until 2035-2037, but I expect the truth of the matter is those plants would be cost ineffective by then anyhow. A lot could change in their plans.

I only read the legal page briefly but my guess is if you are looking at this as entirely Hope and Change, you should probably be more a little more skeptical.
Passports have completely separate fields for "surname" and "given names". And the machine-readable representation at the bottom is always SURNAME<GIVEN< even for countries that have the opposite convention.
openjdk exists though and is broadly maintained. i don't know how many people use mono (i honestly don't know) but CLR seems to be the only runtime for F#.
C#'s language is much better designed IMO. Can anyone compare LINQ and Java's streams and not pick LINQ? Feels much sloppier in Java and Java came second.
Of course Apple would disagree. It’s hardly surprising that companies will defend their income streams even when those products are actually pretty rubbish.
Government is all about stability. Being over worked and under paid is a recipe for burn out. Burnout leads to turn over which leads to instability. A reliable system needs to have knowledgeable, available, long time workers.
Details in the research paper[1]:

Recall that our approach to recover the gain matrix is based on the fact that the values in the ADC output, A, are all integers. This property allows us to recover the values of ΔA using Equation 6. However, if we add random noise ε ∈ R3×1, from the uniform distribution in the range [−0.5, 0.5], to each ADC output A. Then we have:

O = G(A + ε) + B (12)

It is clear to see that the application of random noise with distribution ε ∼ U (−0.5, 0.5) followed by a truncation of the output down to 16-bit resolution means there is no easy way to recover the values of ΔA. Therefore, attackers can no longer generate the SENSORID using the approach described in this paper. The cost of adding ε is negligible in most cases, but it offers significant advantages in terms of user privacy.

Alternatively, we could round the factory calibrated sensor output to the nearest multiple of the nominal gain to prevent recovering the gain matrix. This approach is more practical to apply and it does not require knowing the gain matrix in advance. Therefore, mobile browsers can adopt this approach to protect user privacy.

1. https://www.ieee-security.org/TC/SP2019/papers/405.pdf
Yes, I too agree that there are an awful lot of people to put forth your point as a means to defend their actions.

And like them, you're the one who contribute the support to replace the current definition.
My bad, I've clearly mentally added an exclamation mark in my mind and ran with that.
A known good entry point could be delivered over a content-addressed medium like IPFS, and if you layer on SXG the consumer might still be able to validate the origin of the entry point.

https://docs.ipfs.io/guides/concepts/

https://github.com/ipfs/in-web-browsers/issues/121
Maybe in market value with all the gear that comes with it, but unlikely by numbers. Regular kite festivals still draw massive numbers anywhere in europe and casual or kid kites are still at thing. Regular kites where really huge in the late 80s and 90s for some weird reason, with any bigger town in Germany having at least one dedicated kite shop.

Berlin last year:
https://www.youtube.com/watch?v=ILgXxSKhpbc

Fanø: https://www.youtube.com/watch?v=NHM_DCpt0tM

All this without even mentioning places like Pakistan or India.
https://www.youtube.com/watch?v=5zSQruHvsvA
They can do what university professors are already told to do: make sure to leave the door open.
Can you point to any scientifically demonstrated conclusion on how much humans affect climate via CO2 emissions? It's definitely some, but how much?

You won't find the answer and that should make the most critical thinkers amongst you to question how much you actually can rely on much of these predictions about the future 30-80 years out.

It seems like that would be a great place to start if you want to convince people that they should spend a lot of money on something that isn't even demonstrated to be a problem we can't handle already now.

What are you ready to do, who's money and freedoms are you ready to spend on being "safe rather than sorry"?

This is the real question we should be asking ourselves.
> In that case, I suppose progressive income taxes are the only good way to have progressive taxation.

The key is to do progressive on the other side. Collect revenue with a flat consumption tax, then pay a uniform benefit, ideally a UBI.

If everybody pays a flat 30% tax rate and then everybody receives $10,000 in cash money, the effective tax rate for someone at $20,000/year is -20%. At $40,000 it's 5%. At $80,000 it's 17.5% and goes up from there.

So it's progressive but there is no arbitrage opportunity, no declaring profits in some other place, no weird cliffs or crazy high marginal rates on the poor due to benefits phase outs, the tax rate is uniform and applies the same to everyone without exception.
That was the next semester - and further down the rabbit hole after that - if you can find a university with a clean room; is actual microchip design, even getting a PNP transistor built from silicon is a damned miracle - out of a class of 15, only 5 of us got one fully working to spec.
You would still have to combine SRI with a fairly strong CSP to avoid any code execution except SRI-covered stuff.

It would be a good PoC I guess, but not practical yet for most people.
After 346 people died and what we know now, it's obvious that the FAA is not a trusted partner.
Part of that is because by the time you're asking an ordinary user (not a super-opinionated "sophisticate" on HN) to install a Chrome extension, you're 95% of the way towards getting them to install a desktop application anyways, and that remaining 5% of effort is often worth the extra flexibility the Electron app gets you.
> ...would have told them immediately at compile time that the last_name field access by other client code was broken.

What's the proposed fix in this case? Should all clients accessing that field switch to `customer.full_name`? Do you control all of the call-sites? If so, that change is pretty easy to automate in dynamic languages by marking the field as deprecated, adding the new field, and forwarding `customer.last_name` to `customer.full_name`. That way, running systems don't break but you get the new behavior. You can automate logs to track when the deprecated field is accessed and, if necessary, fix call-sites after a reasonable period of monitoring, reducing risk (assuming there's not "once-in-a-century" paths in the code that invoke the call site).

It seems reasonably likely that this is not the desired behavior - you may have external clients, and some callers may be relying on this field to actually return only a last name. In that case, deprecation is still the correct path, I think, since it's unreasonable to expect external clients to immediately fix systems relying on that field being available.

Static typing can tell clients where they need to make changes, but it's not realistic demand that they immediately update every call site, every method depending on that behavior, and every integration with their external dependencies that relied on the interaction between your code and another system. This is why we have (semantic) versioning, deprecation warnings, and support agreements for larger systems. API's should evolve slowly and gracefully over time, not shift suddenly overnight.
I've noticed a similar effect in the personal dating scene from speaking with males privately, that they are more likely to avoid many scenarios that otherwise would have been standard attempts at relationship progression or initiation. That is, after performing a very rough risk/benefit analysis, they decide it's easier just to do nothing and stay single indefinitely instead.
Why are you using the word "hipster" to describe industry-standard best-of-breed best-practice tools?
I think it's a case of "what's the worst that could happen?", because apart from a site detecting that you're reading it walking around maybe I can't think of anything either.
Well, yes, this new scheme would certainly not get me to stop using NoScript (I don't use an ad-blocker specifically as I don't object to ads. I do use NoScript, though, partly because I object to ads that run code on my machine).

My comment was about the two approaches in the absence of client-side defenses.
I was under the impression that at this scale you have quantum tunneling issues.
I don't know that it's cargo-cult behavior, but maybe it's a lack of perspective in general. I work in security, and yes, it's good practice to patch all the things, but only in that it's the easiest default policy that makes things happen. If you have to pick and choose, you need to understand things well enough to be able to judge.

As a security consultant, I think that kind of perspective is where I can help add value to our clients; our usual point of contact is a project manager, whose eyes tend to glaze over when given a big vulnerability report, or worse, a spreadsheet. To them, every line feels like some sort of crisis. Now if I can get them to patch in a timely fashion, there is at least no pile of years-old issues, and we can take the time to discuss the few that remain.
>> I can't seem to wrap my head around people blaming [Comcast] for building [services] that other people can't improve on

Or that again but replace with Microsoft and IE6 (in its heyday) and you'll realize what that "can't improve on" actually means.

Other OSes can't compete because they lack the push to critical mass needed to build a solid app ecosystem, not because they are inherently inferior. It's a vicious circle where you need apps to get big and need to be big to get apps. If on top of that Google piles on the requirement that any manufacturer is either with or against Google, so they have to swear off any other OS in order to have access to Google services, you get some really insurmountable odds.
Perhaps the limiting factor was the lack of inexpensive cameras, not the lack of drones. There was only a short window of time between when remotely controllable lightweight cameras became cheap enough for people to not worry about crashing them into rocks, on the one hand, and when drones became widely available, on the other.
You know what else "ain't safe", Ice-T? Defaulting to shooting people you don't recognize!

The unnecessary verbatim quoting, both in the article’s title and in this comment, serve only to highlight the otherness of Ice-T, which then makes it easier to accept the premise, because (clutches pearls) I would certainly do nothing like that!
No? This is a terrible response.

"This is a terrible design decision, we should revisit it."
or in a rural area where the specialist you need only comes twice a year
Germany made a similar announcement recently, and I have the same questions here as for there.

Although there has been progress to use coal plants as variable output plants, they tend to be used base load plants that run all or most of the time. The same thing is true for Nuclear plants, and to the extent that power prices occasionally go _negative_. (This essentially means that the utility is willing to pay people to take their power for a brief time at low system loading, so that they can avoid turning a plant down or off.)

Renewables are used differently, in that there's a lot less ability to rely on them to generate power. So they're not really a replacement. This makes me think the ability to shutter these coal plants is a lot more dependent on the decision to extend the life of the nuclear plant and buy the NG plant than it is to do with the renewables they're adding.
Isn't VSCode & Ionide plugin good enough?
Tell me about it. In my last flight when the pilot said we are flying in a Boeing 737 I got the heebie jeebies, despite flying in that plane more times than I can count.
Key Learnings for Software Developers
It's how income/profit taxes work, but not how revenue/VAT taxes work. That's just a set percentage over the revenue you get from consumers (not business to business, or if that has been paid, the total taxes paid can be deducted, which can mean you get money back).

The problem with profit taxes is exactly as you say, but VAT is paid in the country where the consumers live (at least in the EU). This means VAT simple adds to the purchase price, which the company doesn't really feel and ends up basically being the consumer's problem, while the costs and profits are manipulated and moved around so that the company has to pay as little tax on them as possible.

If profit taxes were treated the way VAT is, so the company would have to pay them in the country where they made that profit, which means the revenue in that country minus the costs in that country, that would stop companies from moving their profits around, because they'd have to pay them in the country where they sold their products. And it would make it attractive to make their costs in that country too, rather than outsourcing them to tax havens and low-wage countries.
Same thing happened to me, right around the same time. Also my hijacker shared a similar taste in music to yours! Spotify denied that they had any database breaches, but I only use that password for spotify so I find that highly unlikely.
I left facebook and twitter after the 2016 election because everyone seemed to go bat-sh*t insane and every post was focused on Trump and how we were all going to die. Just decided to go to my own "dark forest" and let them all burn out screaming "TRUMP!" into the void.
The person I was responding to said words to the effect that they killed millions of people in India in order to win the war. That simply isn't true. An inadequate attempt to provide relief is not the same thing as actively killing people.
From OP:

"If you want to know the value of a security, use the price of another security that's as similar to it as possible. All the rest is modelling. Go and build."

Buffett:

"Price is what you pay; value is what you get."[a]

--

[a] https://en.wikiquote.org/wiki/Warren_Buffett
I really wish people in my country (America) were more motivated to 1. pay attention, 2. figure out who's lying to them, and 3. act on that information. The sheer number of people who can't be bothered to even vote is a travesty.

Of course, we could certainly make voting easier, perhaps by having a voting week instead of a voting day, requiring mail-in ballot options, and a few other tweaks, but even if we did, I don't know that we'd get more than 50% turnout.
Andrew Jackson is on the $20 bill.
Saying that they have failed to build a community around Golang is totally wrong
Encode numbers and strings into emoji (base 1024)
100%. Look at Ruby's community. It's a pretty great community in my experience, but at the end of the day Matz, Kokubun, etc. act as gatekeepers.

Democratic creation of software would be a disaster. There's so many philosophies of development and differing opinions that you wouldn't be able to make progress. At the end of the day the reason a language exists is to implement the vision of those who created it. The community is a labor force to implement, test, and verify the decisions made by the heads.

I totally encourage people to write their own languages though. A language no one uses can be beneficial to computing at large as experiments in language implementation. We all know silly languages like Brainfuck that you would probably never use for work, but can be useful learning tools.
> This is a new situation that is going to get bigger with iot.

This issue is precisely why I won't be buying any IoT device that requires the use of a third-party server, which currently means any commercial IoT devices.
Bestmixer.io Service Shut Down for Laundering $200M+
Ashes Ashes did a podcast on this: https://ashesashes.org/blog/episode-07-last-gasp

And a related episode on air pollution in general: https://ashesashes.org/blog/episode-38-dead-air
American coal won't stay in the ground any more than Australia's does. There are plenty of coal burning power plants in the world, and while it may not be economic to burn it for electricity in the US, there are countries which import a lot of coal.

https://www.worldcoal.org/coal/coal-market-pricing
> a media player doesn't (or shouldn't at least) modify any of my essential data

Ask the Android team about the stagefright exploit.

Media players provide a huge attack surface. They are constantly exposed to untrusted files which are also very enticing for users to open (as opposed to, say, some spreadsheet)

Yes. A media player normally doesn't modify your essential data, but when it's written in an unsafe language, it is very likely to do so one way or another.
I think this is misleading to focus on corporate tax without comparing total system tax loads, as well as major differences in that the taxes pay for: like healthcare.
You are right, you'd still have to trust the webmail/chat provider if you want to chat securely. Tanker still protects against data leaks from the app servers in this case.

We also provide SDKs for Android and iOS. They protect against more threats as you can install an app you know the provenance and the app doesn't auto update like a website that you reload every time you open your browser. If you are concerned about security, you could even compile the apps yourself in this case.
And actually Thomas already implemented it in VLC 4:
https://code.videolan.org/videolan/vlc/blob/f93fef718c3c61e2...

\o/

(we discussed about it, I didn't remember he already did it)
Yup, it's in the same way that working with transistors is a
dying art. The use of transistors is not dying at all. Millions and billions of transistors were involved in the creation, transfer, and delivery of these words to your screen or speaker.
At this point I don't think they physically measure anything on the chip to get that number. It's just an indication of how tightly you can space the transistors, plus a bit of marketing hype. The pics in the article make me wonder if the new gate design is even wider than before, but allows for stacking up transistors which ends up increasing the density to the equivalent of 3nm.
Oh look! https://en.wikipedia.org/wiki/ECHELON#Examples_of_industrial...

And no one can argue that the west including the US has given the rest of the world enough ammunition to feel a bit mistreated in the last centuries of exploitation.
Actually, flying might be safer than staying at home, given that home is where the showers and pointy things are.
This same thing happened to me last month (SIM Swap). I also made a post recapping the event, plus the security steps you need to take to help mitigate this attack vector, here:

https://www.youtube.com/watch?v=Uww4Bu6Uzxk
I had hoped that we might write at least one line of executable code to actually implement any of the algorithms that we studied.

I think the same course could have been much more useful and even fun if you had to turn in working C code in addition to all the pen-and-paper work.
I'm finding conflicting information on this.

According to the FAA's regulations for commericial aircraft[1], it mentions following the rules for 'Part 107'[2].

According to Part 107, under Operational Limitations:

> Maximum altitude of 400 feet above ground level (AGL) or, if higher than 400 feet AGL, remain within 400 feet of a
structure.

Under 400 ft is considered 'Class G' airspace[3]. The FAA labels this as "uncontrolled" airspace, and "This is airspace where the FAA is not controlling manned air traffic."[4] Of course, these drones are unmanned. So do they fall under these regulations? Assuming the drone is under 400 ft (ex: on a front lawn), what am I legally able to do?

I'm not sure how most of this stuff works, but it looks like you can also file for an exemption to the rules, which I'm sure someone like Amazon can do. However, from a newbie's perspective, the regulations seems rather confusing.

Edit:

I do not see any information within these pages that say "I, the resident, cannot take lethal action against an aircraft in the event that the aircraft presents a danger to myself/others" or "... in the event it occupies my property without my consent", which is the case that I believe we are discussing here.

18 USC 32[5] states:

> This statute now also makes it a Federal offense to commit an act of violence against any person on the aircraft, not simply crew members, if the act is likely to endanger the safety of the aircraft.

This sounds like sort of a blanket statement, and does not really cover cases such as these.

1: https://www.faa.gov/uas/commercial_operators/

2: https://www.faa.gov/uas/media/Part_107_Summary.pdf

3: https://www.faa.gov/air_traffic/publications/atpubs/aim_html...

4: https://www.faa.gov/uas/recreational_fliers/

5: https://www.justice.gov/jm/criminal-resource-manual-2-aircra...
As a Chinese, I am hoping our government will invest more money in high-tech industries rather than real estate. It is a chance for China to escape the middle income trap.