skysight-inc/HackerNews huggingface dataset:
The design of macOS and iOS has been moving this way. Many of Apple's first-party applications and frameworks have been broken down into backend "XPC services" that (attempt to) follow the principle of least privilege[1]. Each service runs in a separate process, the system enforcing memory isolation and limiting access to resources (sandboxing).

It's a good idea on paper, but has caveats. Every service is responsible for properly authenticating its clients, and needs to be designed so that a compromised client cannot leverage its access to a service to elevate privileges. Sandboxes are difficult to retrofit onto existing programs. The earlier, lowest-common-denominator system frameworks were not originally written with sandboxing in mind. There are numerous performance drawbacks.

For Apple ecosystem developers, XPC services are also how "extensions" for VPN, Safari ad blockers, etc. are written, for a mix of security and stability benefits.

Though funnily enough, as Apple has pursued these technologies, many HN commenters have decried the walls of the garden closing in.

1: https://en.wikipedia.org/wiki/Principle_of_least_privilege
Exclusive fullscreen = application runs directly on the screenbuffer, bypassing the compositor. Not just that a window happens to be taking up the whole screen.
so where's the data getting stored? in a database you are hosting?
You should probably make this a show hn if this is your work.
My first reaction was similar. Why imitate the Euro when that experiment has gone badly?
Where I live (Townsville, Australia) the only changes are that it gets hotter the closer you are to Summer and cooler the closer you are to Winter. The rainfall (minimal) is pretty similar all year round.
I would say the same for alcohol consumption. Yes, saying you're addicted to alcohol is not socially acceptable, but we've made it not only socially acceptable but socially normative to drink relatively frequently what is objectively a dangerous, additive poison.
Why do people do this? Why can’t you put it back where you got it if you don’t want it any more?

Some people are just terrible.

I was in a supermarket sometime last year and saw a woman put a package of meat in the toilet paper aisle and walk away. She saw me staring at her and began shouting at me.

The world is full of awful people.
> In all fairness, not having to get out and pump your own gas when it's either a) super cold outside or b) super hot outside is very convenient.

During the gradual demise of full service gas stations in the other states, there was a period when one or two of the pumps were designated full service and if you pulled up in front of them the attendant would pump your gas, in exchange for a premium of around $0.20/gallon to cover the extra wages and benefits and insurance risk etc.

The reason they discontinued it wasn't that the gas stations minded selling the service, it was that approximately nobody opted to pay extra when given the choice. Which is why they only really survive today where it's required by law -- there is no law in the other states prohibiting it, there just aren't enough people who actually want it to justify having it.
I've been using Ubuntu with Gnome on Wayland for the past year or so on my Dell XPS 13.

I actually ended up switching to Wayland, because of how much better the touchpad worked with it. To be fair though, Dell has an entire team dedicated to supporting the XPS 13 Developer Edition, so the drivers are highly curated compared to most devices.
GTD?
Fascinating.

Not surprised by the plant life, but the article surprised me when it mentioned that nematodes (typically 0.1mm to 2.5mm worms) up to 40,000 years old had 'awakened'. Which makes (at least one of) them the oldest living individual animals [sic] ever discovered.
You can say that about Tokyo in the 1980s, but Singapore pulled through.
The worst thing (more exaggerated in American English) is that English speakers attempt to both pronounce and conjugate those borrowed words as they are in the source language. Part of that is obviously the Germanic roots, where there aren't any regular conjugations, and plenty of the conjugations are arbitrary infixes - but listen to an English person say "valet" or "herb," or worse, the horror of "Nicaragua" and it's obvious that Americans do this more.
> I wrestle with understanding why most media are anti-Trump and anti-oligarchy,

Who told you they are anti-oligarchy? They are most definitely pro-oligarchy, they are just upset the power is not in their (I mean a person from their peer group) hands. Compare media behavior when the control belongs to "their" and "opposing" party, and you'll see a stark difference.

> and the oligarchs are still able to control those media's use of 'left' and 'right'. How does this work?

They are the oligarchy. Talking heads on TV are part of the system. There's no some struggle to control them and bring them under the toe of the oligarchy - they are a body part of it. Nobody wonders how a man manager to control the fingers of his own hands - it's his hand, of course he controls it.
This idea is baked into the core of Deno. See, for example, https://deno.land/manual.html#permissionswhitelist.
Getting Things Done is a time management method, described in the book of the same title by productivity consultant David Allen. The GTD method rests on the idea of moving planned tasks and projects out of the mind by recording them externally and then breaking them into actionable work items.

https://gettingthingsdone.com/
Rubygem should contract an external auditor (security firm), this could go way deeper. Until they perform a throughout audit I will personally stay away from this project.
> The tax system is incredibly poorly designed everywhere. Rather than the hodgepodge of different races, levied at different places and times for different reasons by different levels of government a single tax is best. I’m partial to either a Georgist Land value tax or a consumption tax but I’m sure there are other good options.

So you don't agree with how taxes work and think you could do better? I challenge you to find someone who DOESN'T think that.

>If the US continues its march to open borders the welfare state will be dismantled or citizenship law will change to have multiple categories of rights for different types of citizens and residents.

This is already the case. There are many services open to only US citizens, and others open only to citizens and lawful permanent residents.

>Civic nationalism is incoherent unless people can be expelled from the community.

In the US we refer to this as "jail".

>A group where people had to sign on to an explicit statement of values makes sense because then there’d be a very clear signal of whether you were in or out.

Many Protestant Christian denominations refer to this as "confirmation". I believe there is an equivalent concept in Catholicism; Bar/Bat mitzvah serves this purpose in Judaism.

...

My point being, all of these views are completely mainstream.
Sounds like a mailcap problem? You can tell your client how to open every file imaginable. With mutt, I use an ascii preview of the image so I can screen out signatures and then when I open an image, it opens with an image viewer. I have websites, pdfs, doc, xls files all dumped to a text preview mode, then open them in an appropriate viewer if I feel the need further investigation. Turns out most of the time, those emails boil down to pictures you don't need (like logos and b roll headers) and a few words. Most of the joy of terminal email for me is filtering out all the cruft and being left with words.
Interesting, a new step in the evolution of the Internet

Regards, Michelle
My site https://outdoorsly.org/
Have you checked out Commento? It's open source and pretty lightweight: https://commento.io/
Using TypeScript to make invalid states irrepresentable
It is inaccurate to call things like threading a Wild West of implementation-defined stuff. It is true these things aren’t de jure standard, but most important stuff has de facto standard portability libraries in Common Lisp. For threading, use BORDEAUX-THREADS. For filesystem operations, use UIOP. For module definitions, use ASDF.
The Siri button on touchbar Macs is another variant of this issue. And that “would you like to enable speech to text?” is another.
I tried it out on my C7 and while I liked it, it would not play nice with my pi-hole. On the stock firmware, I was getting a 50%+ block rate and never really saw an ad. After installing OpenWRT, I was only getting about 10% and was seeing ads on just about every device. I tried numerous configurations and nothing really worked. Ended up going back to stock but I recommend openWrt as long as you don't try to get it working with a pi-hole.
That English is extremely difficult to write is a serious issue, though. A very large portion of English speakers are functionally illiterate.
> TCL was a terribly designed (but brilliantly implemented) programming language.

What do you dislike about Tcl? I always kinda liked it.

> While both Lua's design and implementation are quite excellent.

The implementation is pretty good, but 1-based arrays are pretty evil. I don't know if I like the way arrays & tables are conflated either: part of me thinks it's clever, and part thinks that it's too clever by half.

It's also pretty verbose.

Something I like about both Tcl & Lisp is that they have a good built-in messaging format (Tcl object notation in the former, and S-expressions in the latter). Lua doesn't really have something similar, which is IMHO unfortunate.
Pascal was also used to program Mac OS.
Robot Vending Machines Making You Ice Cream
I wish Africa well, but they are screwed. Huge population boom and not enough infrastructure or resources. Won't end well.

Also, most are not educated and pretty low IQ.
This article by the same author is perhaps not comprehensive, but a good place to start: https://blog.filippo.io/giving-up-on-long-term-pgp/
The relentlessness of the pace of ML remains breathtaking.

Microsoft: We beat human performance and lapped everyone else!

XLNet: Hold my beer.

Code: https://github.com/zihangdai/xlnet

Description: https://towardsdatascience.com/what-is-xlnet-and-why-it-outp...

Paper: https://arxiv.org/pdf/1906.08237.pdf
I agree. I never use self check out. For the reasons you state, plus I don't want to contribute to some low skill person losing the only job they'll ever be able to hold.

I'm not so self-important to think that I can't stand in line at a checkout for three minutes.
> from the time the last bit of the playlist is returned to the last bit of the video segment

Based on my loose understanding of HTTP/2 server push and ALHLS, the sequence of events will be:

1. Client requests playlist for future media segment/"Part"

2. Server blocks (does not send response) until the segment is available

3. Server sends the playlist ("manifest") as the response body along with a push promise for the segment itself

The push then begins with the segment.

The push stream can presumably occur concurrently with the response body stream. So I don't think you can wait until every bit of the playlist comes in. Likewise, you can't use the playlist bits itself to gauge bandwidth because the server imposes latency by blocking.
Safe Haskell, a GHC extension, is one example in this space. https://downloads.haskell.org/~ghc/latest/docs/html/users_gu...

Its biggest selling point is that a lot of capability safety could be inferred in packages without the package author separately specifying capabilities.

The basic idea is to disallow the remaining impure escape hatches in Haskell in most code, requiring library authors of libraries that do require those escape hatches (e.g. wrappers around C libraries) to assert that their library is trustworthy, and requiring users to accept that trustworthy declaration in a per-user database.

It actually was very promising because the general coding conventions within Haskell libraries made most of them automatically safe, so the set of packages you needed to manually verify wasn't insane (but still unfortunately not a trivial burden, especially if your packages relied on a lot of C FFI).

Unfortunately I have yet to see it used in any commercial projects and it seems in general not to get as much attention as some other GHC extensions.
Graalvm does native compilation.
I like all the XSS attack tests in the demo.
The Chinese model fundamentally works. The globalisation model is probably horrible for these countries, what do they have to offer ?
Guided Image Generation with Conditional Invertible Neural Networks
H264 over Websockets and played by Media Source Extensions is pretty simple too (<200LOC): https://github.com/elsampsa/websocket-mse-demo
The GP spoke of mindshare. Marketshare shifts frequently lag shifts in mindshare by years.

Some Perl fora had started to become hostile by 1999. It had clearly begun to lose core talent and something needed to be done about that.
Can you please elaborate? I have found I struggle with finding something that works. I usually end up trying something g but nothing sticks.
It definitely is/was a user-level unit, which makes it unclear to me why it should have interfered with bringing up other services in general.
Less typing.
I know there has been some recent discussion within the python community that Python's batteries included philosophy is failing the community, with some arguing that the python standard library should be streamlined. But I see third party dependencies as often a liability both for security and a kind of technical debt (I maintain infrequently used but essential legacy python applications)
It will have to be pulled out for as long as journalists keep writing these biased hit pieces to push their political agenda.

Critiquing tech industry for all the wrong they do is fine. But what NYT does is target two companies and constantly writes articles that find the most negative interpretation to the point where they sometimes even invent things.

Being biased and running a smear campaign against their competitor is what fans anti-journalist sentiment, not people bringing up the bias.
With all respect for the hard work done on this client, but is it just me or is the TUI getting too much attention recently??

I think the GUI stacks are too bloated or too hideous (electron, cpp/qt,c# and it's limitations, etc...) to work with these days so much that the cool kids (hardcore techy people) just gave up and started doing TUIs to solve their own problems directly?
Slender Stack Development
Go is a language you can pick up in a relatively short amount of time.

The syntax is in the vein of C and Python, so it's probably familiar. The language itself is fairly small, and the focus is on simplicity over expressiveness. If you want to learn new languages but have limited time, my answer is to take a look at Go.
Does this mean we're going to get silencers for leaf blowers? If so, how many nobel prizes can they be nominated for?
I enjoyed it, very handy.
PGP is a protocol, there is nothing wrong with it. If you want to complain about good PGP based apps that is a entirely different argument (and it think that is what you are arguing).

Signal is not a protocol, it is a application. It uses open whisper (or some mutation of it) as its underlying protocol. That being said, you are still relying on trust provided by the signal servers that they properly authenticated your phone number. A phone number is a super weak way to verify identity. Lucky signal does provide a way to verify you are actually talking to who you are via the safety code process (in person or out of band). So the end result is Trust us first, then verify later. While most PGP applications require zero trust until verification by means of key exchange.

After all that there is nothing stopping anybody from making a application that works just as signal does but based of PGP, and being just as secure as Signal using PGP. The problem is people who understand this know that using PGP chained with a week service phone number base validation invalidates using the entire point -- so they don't. I personally think that is a mistake. As PGP is way better in the long run because it can be used for more than text chats, and video calls.

> tools that get people hurt.

People hurt them selves using tools improperly.
There's an OpenGL port already.
Is there a decent email/calendar client for it?
You should probably try mixer. They rolled a low latency protocol by their own. It use websocket as a bilateral channel to allow the server push whatever it want to client directly. Achieving sub second delay (The model here looks more like webrtc instead of hls though)
CCTV seems like a bad move. It creates an adversarial relationship to the customers. For a small business, it would be better to cultivate goodwill and rely on community norms to police offenders.

People aren't likely to repeatedly steal from an honours system cafe if there are regular customers witnessing them.
Except that unstable pitch is more dangerous than yaw?
Bill Gates explains why he couldn’t duplicate Steve Jobs’ magic ‘spells’
>Those who bear the brunt of that abuse aren’t just the impatient and impulsive. More than 50 percent of people still can’t differentiate between an ad (redirect or not) and an organic result on Google.

Some reasarch [0] suggests the figure is much higher and around 60% (from 2017).

Over the past 12-13 years, Google has been steadily making changes as to how they display ads to make them more and more invisible to the user. See the graphic [1]. By making them more invisible, there's a greater chance that they'll get clicked on and make Google more money. With each change, Google probably added tens of billions of dollars in revenue.

[0] https://www.smartinsights.com/paid-search-marketing-ppc/paid...

[1] http://searchengineland.com/figz/wp-content/seloads/2016/07/...
Didn’t they figure out it was mostly pesticides? Makes sense if the manufacturers were American.
I've mostly been able to avoid PGP, but one workflow that I haven't been able to find a decent alternative for it Git commit signing.

Does anyone know good alternatives in this space?
The blind downvoting on anything critical/objective about Google is really frustrating on HN.
I think it is helpful to distinguish between tools and techniques.

Trello and Sticky Notes are tools. GTD, Kanban, Pomodoro etc are productivity management techniques/methods. I find it helpful to first pick the technique/method then figure out how to use the tools.

It is similar to programming languages and IDEs. First pick the programming language (methodology) then pick the tool (IDE). Good tools work with multiple methodologies.
To your last point,

> Maybe the current "implementation" is compatible but not with the specs itself.

It's perhaps worth noting that this is a "preliminary specification" and an extension of HLS. HLS itself is an IETF standard (well - an "Internet Draft"): https://tools.ietf.org/html/draft-pantos-http-live-streaming...
Let go of your graphical punched card machine!
What is the best set up?
I am looking to make a new type of platform but I wonder what is the best set up. I have done research for several hours. I need a messaging client, a bulletin board type of client, a news feed, and a classifieds feed. Just for starters.

I was looking for a encrypted private client encrypted server and encrypted to the point of even being unable to take screenshots of messages.

I was looking at MAtrix.org, tox, and random github repositories. I had plans to reverse egineer entire apps for my use but I do not know what is the best foundation to go from.

I am looking to get a team together I need a web developer, a graphic designer and a software developer. Or if they all can be one or two people the smaller the number the better.

IF anyone is into web or software developing give me a shout. I have a great vision to share.

If you have any ideas as to what is the best set up for all the things I asked even that would be a great help and start int he right direction for me.
> In my opinion, getting rid of the main appeal of the language ("it just works") was a suicidal move.

No one ever got rid of that -- P5 still just works and P6 aims to be as practical -- so I'm quite confused by this aspect of your comment.
I am making a Trello alternative that tries to inculcate Kanban principles..

You can try it out and see if it works for you. It's at https://www.kanrails.com, and currently in Beta (no paywall). Hope to get some good feedback from HN!
> They are implying that the fundamental design of the 737 MAX was a mistake due to the engines.

That wasn't the mistake. The mistake is several problems with the implementation of MCAS, all straight-forwardly fixable, along with some minor additional pilot training. I think this will turn out to be a business case study in crisis mismanagement.

I also believe pilot error was a significant factor in the crashes, because during the first instance of MCAS malfunction, the pilots dealt with it and landed safely, despite not knowing about MCAS. The latter two incidents were not handled properly by the pilots, indicating a gap in training.
Languages that have achieved any degree of success, as Lisp did, never fail for just one reason, or two, or three. Lisp failed for many reasons; some are listed in the other comments. The article suggests one, and discounts others, but all contributed.

The hardest lesson to learn seems to be that GC is poison. Other languages that have avoided Lisp's other faults succumb to that one, and lock themselves out of the most demanding problems.

When embarking on a project, you do not often know everywhere it will take you. If you start with a language that won't go some places, your project can't go there. If it needs to go there to succeed, you have doomed it at the outset.

How many times do you need the lesson? Some need it more than others. Many never learn it.