skysight-inc/HackerNews huggingface dataset:
I've used Soulver for several years and just upgraded so I guess I like it. I have to confess I originally bought it simply because I was delighted someone was reimagining the calculator interface and I wanted to support that. But I do use it every day.

It's not my automatic go-to calculator (that's either dc or RPN pcalc). But if I want to do any slightly complicated calculation but don't need the overhead of Excel/Numbers or Mathmatica (or am on my phone!) it's really nice to lay out some variables (cost/m2, length width, blah blah) and be able to tweak them. And I can fiddle on my computer and then see the model on my phone where it's also easy to edit.

Not a tool for everyone, but surprisingly good as both a programmer and general purpose calculator.
Blame is the wrong word, but YES we should expect that they would hold their own employer accountable too.
Is obstruction of an investigation good behavior?
I had a cockroach come in my garage the other day. had some wasp spray nearby and doused it. While I could tell it was probably unhappy, it just kept on moving albeit in a half drunken path. Not sure if it actually died, as it turned around and left but it definitely lived much longer than a wasp does with the same dose.
Disasm.ninja: A realtime, multi-arch assembler and disassembler for shellcoding
That's not logical. Just because a disaster was made by machines doesn't mean machines are the solution.
Whatboutism. They at least make a critical article about it and they're also a simple newspaper website, not the heart of the internet.
Yes, the Equifax breach is one of the reasons I included "severe" as a qualifier. It has been demonstrated that even fairly serious breaches will be ignored by the general public. It needs to be something that makes people genuinely fear for the safety of their finances, possessions, and/or health
What constant security breaches? There are two major examples of security breaches I can think of that happened recently at amagoofaceoft: mis-stored passwords (fb/insta, and google for a short period earlier this year), and variants of the Cambridge analytics attacks, which steal public information but at scale. While those certainly aren't good, I wouldn't classify either as a security breach. The first was a loss of defense in depth, and the second, like I said, just got public info, but lots of it.

Are you saying that breaches at other companies mean we shouldn't trust the big ones to be secure? Like because Equifax has terrible security practice, google by definition must also have bad security? Or...what?

(I work at Google).
> you could have planned to have redundancy.

Not really. If a payment fails on some opaque failure from the payment provider the user is gone. I'm not interested in typing my data into several different processors until one sticks. I'm looking for your product somewhere else. Payments must work.
"Thank you for placing order number x. Check your email for confirmation."

Email is somewhat immediate if the gateway was up, somewhat delayed if it was down. Regardless, it then offers order confirmation and shipping info, or it offers a card-declined-try-again flow.
Golly, I wonder why all governments hate this thing.
If someone cuts the phone lines into a building, whether with malice aforethought or a badly aimed backhoe, the phones in that building will not serve their intended purpose.

I agree that degrees of resilience are a thing, and that different kinds of systems have different failure modes (each of which may deal with a different aspect of resiliency), but I am firmly convinced that no technology never breaks.
> Change is possible, but it's slow and hard.

It is also fast, but you need a product that is better, not just "not google".
> Newspapers like NYT are one of the few institutions

by institutions I'll assume you mean journalistic ones. Cause employees of non-consumer facing corporations have far more freedom.

The thing is, journalism, good journalism, and certainly public service journalism, no longer requires an institution. Don't believe in the lies that claim otherwise.
You can negotiate with Stripe if you're at high enough volumes. It's likely that the "best" choice of payment processor is heavily dependent on the specific business in question. If you need agility and developer friendliness, Stripe is hard to beat. If you're trying to grind out every last percent of margin, you'll have to shop around and see what you can negotiate (and the offers you get will likely depend on the nature of your business, chargebacks/fraud, etc).
If Disney had been found to be doing this with their own films, would the CEO of Disney be in jail? This case always felt extremely punitive due to the content and the size of the company.
I don't think there is a universal criteria for what constitutes whether an action is criticizable or not. I think more importantly is that the standards, whatever they may be, are applied uniformly, despite the circumstance and scenario. It isn't hard to imagine other scenarios which are seen as "lesser" where this wouldn't even be a question: of course you do, but for some reason we think that as an increase of import or salary, or whatever metric you may have in mind, all of a sudden some gray area is introduced. Stay true to your standards, and let it guide you.

I wouldn't put up with this type of hypocrisy from my frozen yogurt shop, my clothing store, or coffee shop, so I shouldn't put up with it with my news organizations, schools and universities and politicians. The inputs to the situation might be different, but the output should be the same. Otherwise, we are being the hypocrite as well.
For a short while, you could only redeem games on steam by linking your account with Humble Bundle. They would redeem the key with a server side API. This didn't last long, though, and they reverted back to just giving you the keys manually.
>> developers may run into weird stack traces they might not immediately recognize

Truth.

To me anyway, debugging code is massively harder than writing it in the first place. Nothing worse than trying to fish out some odd issue that plagues you after spending two hours writing some code, and then 4 hours sorting it out.
No, that's clearly not what I'm saying. I'm not arguing that people shouldn't do these things, I'm arguing that we should be clear about what they actually accomplish. I do all of these things, but I don't kid myself that it's making a lick of difference, because it's not.

The individual action idea is dangerous because it:

- Blames the victims. This problem is being caused by fossil-fuel companies and the policies that support them. We must stop them from emitting and from poisoning the public dialog on these issues

- It's classist and priveledged. Only rich people have these kinds of choices - poor people can't always make these kinds of choices in their lives.

The only solution is massive collective action that drives us towards a net-negative world.

I'd rather have somebody drive a Yukon and vote for people who will put in a Green New Deal than someone who eats vegan and votes for Jill Stein.
They were syndicated political cartoons; not created by NYT employees.
While on paper it seems simple, it's worth investigating in detail how changing where/how payment details are transmitted and stored could change regulatory compliance requirements and liabilities of your business. It could be more time consuming and expensive than anticipated.
In case anybody is interested, you can visit https://www.cloudflare.com/ssl/encrypted-sni/ to see whether you have all features that prevent leaking the domain names that you visit. In Firefox 67 with network.security.esni.enabled set to true, all tests are passed.
Renewed efforts to merge exFAT into Linux kernel
If you're only concerned about functionality and not UI, you can always write your calculations in hexadecimal machine code, at least if you don't have the misfortune to be on iOS or some similar game console platform where users aren't allowed to write code. But I think it's more practical to use a better UI.
Yeah, that makes sense. Wool also seems to have strong antimicrobial properties so it doesn't really need frequent cleaning.
although i agree,

> Bing and Yahoo are treated as a joke.

i use bing or others like yandex for image search. google is a front for stock sites and pinterest.

Hmm, maybe bing should focus on image search , use that as a trojan horse to take on google.
The bigger, the easier to get away with it from a social perspective--they could look more like people on official construction business.
Not that I know, but I suppose you could ask Simon.
Interesting! I didn't know olivine was that plentiful.

There is said to be a problem with shortage of construction sand leading to beaches being stripped for sand. So this would solve a secondary problem at the same time.
> dc -e '[a=]P?[b=]P?[dSarLa%d0<a]dsax+[GCD:]Pp' # easier-to-read version

... "easier-to-read", to an arbitrary precision.
I have to admit I was thinking primarily of my company's use case, which is serving brick-and-mortar. This is a pretty different picture from card-not-present transactions, but if you're a low-risk business from the point of view of credit card processors, 2.9% is still at the high end. If you're brick-and-mortar, you can get rates as low as .25% sometimes.

Fattmerchant, Gravity Payments, and Worldpay are all great options for brick and mortar, and offer online payments too. Paypal is also cheaper than Stripe for US businesses.

As always, it depends, and it's complex. I probably was too confident in my above answer.
Garry Kasparov – no chess monopoly in hypocrisy
The question is not whether they have a higher top speed, but whether they are usually traveling the speed of traffic. Pedal assist bikes are usually going significantly faster than bikes in the same area. That's the point of them.

Additionally, that 20 pounds of extra weight is in an uncontrolled projectile. Person to person collisions are not as injurious as bike to person collisions even though bikes are just a fraction of the weight of the person, and that extra 20 pounds triples the weight of most bikes. Talking about rider weight misses the point.
It's not always an option, but simply using PyPy can massively reduce memory usage without needing to change your code at all.

The PyPy site links to this blog post (from 10 years ago) with some info: https://morepypy.blogspot.com/2009/10/gc-improvements.html

And a quick search found this relatively recent post that does some measurement of it: https://dev.nextthought.com/blog/2018/08/cpython-vs-pypy-mem...
who cares, it's useful at this time.
> Working 3D acceleration is another story

Why? I recently enabled amdgpu on FreeBSD arm64 — as soon as KMS happened, 3D just worked. There was some buffer corruption (https://user-images.githubusercontent.com/208340/60443774-97...) for which I've had to cherry-pick this tiny Linux patch: https://patchwork.kernel.org/patch/10778815/

> packages for chromium browser on arm64

And we have Firefox, which doesn't break, has a working JS JIT, works on Wayland, renders with WebRender :)
Flushout is not a hosted solution like Firestore, it's a component for systems that have their own backend that handles access control and need a data model.

Flushout isn't tied to any particular cloud provider (my backend is running in AWS), and lets you preserve a history of every update to the model to make it easy to implement undo or just display historical updates to the document. As Flushout can also send individual updates to sync models, it may also be more efficient than sending snapshot updates (especially for large documents), but don't know how Firestore transfers its model updates internally...
Awesome, good luck with fielding questions and comments for the rest of today!
Mines or potential mining sites for extracting Olivine on this scale don't exist within short distances of these tropical beaches. Many of the beaches are on islands which are essentially coral heads above the water. Digging down to any deposits of other rock are going to require either significant effort in terms of dewatering, caissons, and equipment or else mining underwater.

This is a good idea that's probably not practical. It sounds ok if you accept that that much rock can be mined, processed, and moved within the constraints given, but they're probably not even close with these estimates.

On top of that, you're talking about completely changing the composition of the beaches in much of the tropics, displacing the existing beach materials and probably causing mass die-offs and disruption in the ecosystems attached to them.

Plus, you'll have to keep hauling sand. Beaches in active areas like the tropics aren't static. The sand migrates down them and out into the ocean. Sometimes islands like the Bahamas even have to dredge sand back out of the water to rebuild beaches.

Underwater sand isn't going to absorb much atmospheric CO2.
If someone wants to filter DNS lookups, they can just disable DoH - it is easy.
Show HN: Learn from profitable SaaS founders, together
Yeah... but in the end, you still have to ride a bike.
> It’s not clear if the lanes themselves can be multiplexed with packets from many devices

They can be, this is what the chipsets do on most platforms. AMD's X570 splits out 4x gen4 PCI-E lanes into 8x gen4 PCI-E lanes + a bunch of other stuff: https://i.imgur.com/8Aug02l.png

Intel's been doing this better and is what their marketing calls "platform lanes" - the Z390 for example provides 24 PCI-E gen3 lanes from what is essentially a single 4x gen3 uplink to the CPU: https://images.anandtech.com/doci/12750/z390-chipset-product... (DMI 3.0 is essentially PCI-E x4 gen3 in all but name)
In front of the gay bar in Kerrytown. It's not a platform, but it's the same concept. There is a steel barrier/structure placed there to block cars from parking and the structure also serves as a bike rack.
> I doubt anything can develop resistance to being torn apart by a robot.

True, but resistance is not the only evolutionary adaptation available. For instance, behavioral adaptations might make them more difficult for robots to capture.
That's one of the benefits of designing the language such that using it normally forces people to share valuable information about programs without them knowing it.

A somewhat related example is how Emacs was built to support introspective programming, where nearly anything can be inspected to provide a docstring. This is both invaluable when extending the editor and only possible because Emacs established conventions early on about documenting public objects. Though it isn't obligatory to document things, the audience Emacs appeals to seemed to keep doing so through force of momentum over the years. I find this momentum incredibly important to have.

The problem is you can't just shoehorn this way of thinking onto any arbitrary language/programming environment, because the issue of dependencies following whatever code annotations they have arises. For C++ it's hopeless to imagine we can expect these annotation benefits to be universal because using the language didn't obligate adding them in some way, so the vast majority of people didn't. The author mentions there aren't even any real-world codebases using them. Every corner of the system/language has to be designed from the beginning with annotation in mind.

I've been pining over the same issue as I'm trying to design a "living system" that supports user extension. I'm still wondering if I'm missing anything that could help with introspection, is not detrimental to user experience and can only be added in the nascent stage the project is in. Once all the conventions are in place, everything will have to be built on top of them no matter how imperfect they are.
Alas, even the mighty telephone line is not infallible.
Now that porn is free, it has to serve as an ad. You can be Mindgeek and paste ads all around it and between it, or you can innovate like this guy and use the content itself as an ad to advertise something else.

There's got to be an opening[sic] for a company to market lingerie and sex toys through porn distribution. Hell, why not furniture, too?

edit: honestly, with the high-end fashion photography aping of Greg Lansky product (Vixen, Blacked, Tushy) I'm surprised this isn't already a thing.
Not sure if the reasons are same or different, but from an American POV, it appears many British TV shows have few seasons, with a few exceptions like ‘The Office’.
How do they monetize voice recognition data, other then by selling devices that use voice recognition, and trying to make them better for the user?
Lets say it takes 2 engineers 3 months to build an another payment processor + failover, at $120k salary + 40k in benefits and taxes a year a piece.

stipes SLA was 99.980% uptime for the last 90 days

0.02% * revLoss > 160k * 2 * .25/year

OP's app would have to be earning 400mm a year. Not likely but possible.
I have written code like that in the past, and would consider doing so again in the future. When, it's appropriate, it can be hugely beneficial.

When I last did it, I was wrapping a C++ API that I needed to compare against another dataset for a merge. The C++ API (which, admittedly, I also wrote), didn't have equality or hash operators defined on the Python objects. So, I monkey-patched them in for the keys I needed. It was actually the most elegant solution I could come up with as I could then naturally use the objects in sets and easily get differences to update the appropriate dataset.

As an aside, when I wrote the python wrapper around my C++ API, I purposely didn't define equals and hash operators for the objects, despite having full information to do so on the natural keys, because I wanted the flexibility to do the monkey-patching and override how the objects were compared depending upon circumstance.
Your comment reminded me of Gamow's Mr. Tompkins in Wonderland. I don't know if he mentioned that in particular, but he discussed what relativistic effects would look like if the speed of light was 10 MPH.

http://www.arvindguptatoys.com/arvindgupta/tompkins.pdf
Correct, the check is server-side. Nothing the client can do about it.
If you haven't broken a critical system at least once, you haven't written enough production code. Everyone appreciates the other 99.993207% of the time where the system functions flawlessly. I look forward to reading the postmortem.
> Why would anyone buy [any app] outside the Mac App Store?

I almost never buy an app from the Mac App Store when it's also available directly. I'd rather that the developer gets to keep the extra 30%.

Free apps I typically get from the store when available for the convenience of the updating system (though sparkle has made non-app store app updating pretty painless).

I don't find v3 a compelling upgrade for me but will upgrade anyway once syncing to iOS works again (important feature for me) just to support the dev.
If you use ESNI (that encrypts SNI field in SSL handshake) and the server uses ESNI, and you both use TLS 1.3 (that encrypts server certificate) then it is difficult to determine domain name. Latest Firefox supports both of there features, as well as DoH.
Right! All the companies doing it differently are also trying to satisfy their shareholders.
Thanks so much for posting this - I thought I was the only one.
That's def not an issue. Who cares, really?
Can't remember where, but I've seen it. Chances are it was somewhere near Adams Morgan or Georgetown.
my bad. Maybe it used to be 0-255 and I'm just too old to remember the change?
On the other hand the Rust ecosystem is insignificant (size and adoption wise) compared to the C++ ecosystem, so there's that...
It's not going to potentially harm him, not being listed by Google is arguably equivalent to ceasing to exist. It's a nice gesture, but I cannot imagine how this is good idea in practice, regardless of how you view Google ethically.
Yes, to say we should require otherwise is to embrace the status quo. Demanding that everybody hold their employer accountable for any breach is simply an unreachable standard, given the power distribution between employers and employees and the lack of sufficient "good" employers. So shifting the conversation to complaints about complaints (for not being sufficiently motivated to risk everything trying to burn the system down) is just distraction and helping the status quo even more.
Developers don't understand CORS
Show HN: Emojivision – Render Images as Emojis
By the way you can check your browser here https://www.cloudflare.com/ssl/encrypted-sni/ . My Firefox has all tests passed.
I have no idea what this quote is supposed to mean. Is bullets slathered in pork fat supposed to be a racial comment?
Wow. Why is this not more widely known?
You can combine it with something like xclip and a desktop starter. So all you have to do is to copy the URL and click the icon.

A browser extension would be even fancier, but I don't think that would work so easy permission wise :)
Moving the World to a 4 Day Workweek – An Interview with Aidan Harper
Have you seen NaSC?

https://parnold-x.github.io/nasc/
> Are you saying that breaches at other companies mean we shouldn't trust the big ones to be secure? Like because Equifax has terrible security practice, google by definition must also have bad security? Or...what?

Are you asserting that Google detects 100% of significant breaches, and promptly notifies the public of all of them?

My experience tells me that neither assertion is likely to be true.
Anyone know of a good Linux version? For Windows, OpalCalc is pretty good.
What I am interested is not just to know that employees are sometimes listening, and why.

I want to know what instructions both humans and computers are given if they hear illegal actions, such as violence, illicit trade, etc

If you are an employee, and hear a rape scene, a blackmailing dialog, do you have a duty to report, or to remain silent?

I also want to know how much access law enforcement has on this data. And whether they can re-identify the info, with or without a warrant.
C++ has a few major flaws with respect to move and copy semantics. The biggest one is that copy semantics are default and silent: it requires less work to copy something than it does to use it by reference, and there is no visual indication if the value is being copied or accessed via reference. This means that it is way too easy to accidentally copy large objects (such as std::vector) without realizing you're copying them.

Most newer languages have realized that implicit copy semantics is usually a bad thing, and duplicating objects requires explicitly saying that you're duplicating them (such as calling a .clone() method). Of course, some types are value types, where copy is cheap and better than reference, but such mechanisms are opt-in. C++ automatically generates these mechanisms, and gives you nasty error messages when you opt-out of default copy.

Move semantics are almost always better, but in C++, with its historical baggage of opt-out-of-implicit-copy-semantics, it means that constructing move-only types requires a lot of excessive calls to std::move. Compilers do a good job of telling you when you put one too many calls to std::move in, but the code is definitely verbose compared to C++, to the point that it tends to strongly weigh against actually using C++'s ability to annotate move-only methods. Furthermore, without something like the mechanism in the blogpost here, compilers don't give any indication of API misuse, so you can't leverage move-only types to construct safe-by-construction APIs.

This is something I've been tripping over a lot recently, as I have a type system where calling most methods makes the original object unusable.
> ... it’s simply impossible to compete making better goods and services if your competitor can lose money indefinitely.

This is yet another consequence of the Federal Reserve's forever bailout of the US stock market: a repeatable business model in which a company can operate at a loss indefinitely while it furiously tries to build an uncrossable moat around itself.