skysight-inc/HackerNews huggingface dataset:
I mistyped, I meant Nantes, not Lyon. I think the train did arrive at gare Lyon and we had to bus transfer to another station.
Sequestered carbon just goes into the ground. You need not transport it anywhere. It improves the health of the soil. There is equipment that will take dead standing wood and gasify it into biochar which is stable in the soil for theoretically 10k years. These systems also produce a net positive energy (electricity and heat). Source: I wrote the firmware that runs All Power Lab's Power pallet, which does just this. It fits on a 4' pallet and can be taken to a fuel source (woodchips, corn cobs, walnut shells, grass pellets, etc.).
The bus is a much quicker direct transfer, a metro transfer isn’t that viable.
Marriott International facing £99M fine under GDPR rules
Via a bot.
This is the same exact comment I see on most HN posts about services.

Probably most people’s time in maintenance and development is worth more than $9/month, that’s why these services exist.

Semi-related xkcd https://xkcd.com/1319/
Doom in Claymation (2016) [video]
But this isn’t different in Rust. unsafe is generally only reserved for low level features. In the trust-dns libraries, there’s not a single line of unsafe code, whereas in the Postgres extension library I’ve been working with some others on there’s a ton of unsafe for ffi with the C. Even with that, the intention is that for most users, they’ll never have to write unsafe.

Just because of the presence of unsafe (which still guarantees more in Rust than C), doesn’t mean that the entire codebase is unsafe.

This is a nitpick that is used to malign Rust, but really it’s a freedom to implement as low or high level functionality as you want, with out cumbersome interfaces like JNI or even JVM features in Java.
The biggest mistake non-professional book reviewers make is summarizing a book instead of reviewing it.

A good book review is not a summary. It’s a discussion of what is good and bad about the book. (Just as a good product review is not a description of the product and its features. It’s an assessment of in what ways the product succeeded or failed at achieving the user’s goals.)

A good book review should leave the reader with a clear sense of who will and won’t enjoy (in the case of fiction) or get value from (in the case of non-fiction) the book in question.
Until metamoderator wrath.

To everyone who feels left out: old slashdot.org "humor".
FBI seeking social media monitoring tool to spot emerging threats
The real solution is to never rely on one party. We fall back to another payment processor after using a heuristic to see if the error isn’t one that makes sense. If it’s a problem with the payment card, it’ll fail again, no harm done. If it’s a problem with the provider, it’ll go through.

(We wrote a payments abstraction library easy enough to (partially or fully) fill for any payment provider’s core functionality, so it’s literally just a couple more lines of code at the call site. It took several rewrites to get the abstraction to cover all the oddities each time we added a new provider implementation, though!)
With these kind of fMRI studies, there's usually a written assessment before or after the scan to verify your understanding of the concepts. They're making claim 1, that you can detect how learning happens. There's also usually a baseline scan before the class or whatever education method takes place.

Source: I work in a very similar fMRI lab.
Yes, but only the ones producing content that’s consistently better researched and reported or provides more value than blogs.
Pete's QBASIC / QuickBasic Site
I'm not sure that was a particularly _critical_ article, actually. It was pretty much just describing what Google does and how it's changed. I'm not sure there's a lot of value judgement in the writing, a lot of "critisizing Google." It was just reporting something of interest (it was of interest to me, was it to you?)

But, sure, part of the motivation of writing it was presumably knowing that some/many people would find it dismaying or unfavorable to Google.

Presumably the journalists who wrote it don't have a lot of control over the NYTimes privacy polices or practices. I'm glad the NYTimes paid someone to research it, and then published it, because then it got to me and I liked the article.

I don't see any problems or surprises, this is the world.

I guess they could write an article about the history of the NYTimes privacy policy... but really, who cares about reading that so much? Although sure, they could do more to use the nytimes as an example to be more transparent.

That they didn't doesn't erase the value of the article.

(The NYT OP does (now as I read it, it may not when you did) end with an italisized paragraph mentioning that the Times "collects data on visitors" too and linking to their own privacy policy and some other information)
I'm just inserting a comment here in the hopes that it will come before a more deeply nested soon-to-be-written XKCD comic. Although I'm fairly confident XKCD has covered this in the past already.
(Throws up hands) But this is ridiculous!

The security of the API can’t rely on strict validation of the content-type, how is that code supposed to make any sense to the 3rd generation of developers who are tasked to maintain it 5 years from now?

CORS is clearly not designed as a means of access control to ensure the POST request will never be made. Therefore, it is fairly catastrophic that an article prognosticating about how nobody bloody well understands CORS has also gotten it terribly wrong.

What this tells me is that there is probably big money in bug bounties for finding sites which use CORS for access control, and almost certainly are not checking the content-type.
Parts of New Orleans Are Flooded. Worse Is on the Way
If I understand correctly Medium charges both readers and publishers for a service that you can get free elsewhere? Does that sum it up?
i would like to see some proper psychological research on why we put stickers and brands on our pretty and expensive laptops.

Some keywords cones to mind based on my own feelings;

- software tribalism and identity signaling to peers. like a mini resumé.

- idealism and dreaming, the cool stuff I wish I was using (Who sticks a .NET logo there, right?)

- added uniqueness, my laptop is mine, my special tool, it is set up as an extention of my unique set of skills
Sorry, I was being sarcastic but it really doesn't read like it in retrospect. Totally agree with everything you wrote.
In addition, users can run applications from a CDROM or a read only USB stick, where the app would not be able to write anything.
true, but maybe we're in the mess simply because we don't worry about long term effects of our actions.
I didn't interpret the GP post to mean ego in a toxic way. I certainly put stickers on my laptop to express myself by sharing a bit of my interests and identity.
Want to help people in Venezuela? Your best bet might be Bitcoin
I've thought of exactly this same thing. It would need to be implimented as a fork of bitcoin, and would need a new transaction type.

If no transactions are made from the target account after say 5 years, then the balance would transfer from the target to the initiator.

I couldn't figure out how to prevent miners from just targeting bunches of inactive accounts though... of course it's the miners you want to get on board, so maybe it's a good thing?

You'd have to balance paying miners an immediate commission for including this transaction against the 5 year wait and gamble they would otherwise have.
US launches inquiry into French plan to tax tech giants
YouTube is so good and so unfortunate at the same time. YouTube has revolutionized educational content. And I’m not talking about cookie cutter wendover productions, thanks-to-our-sponsor-nord-vpn kind of educational channels. I’m talking about ave, thunderfoot, mikeselectricstuff, and etc. videos coming from engineers who are on the ground and who provide the most clear, unbiased and complete information on whatever they find that is relevant to their field. Thunderfoots busted videos for have been so amazingly enlightening. That’s the definition of education: sweeping away all the hearsay bullshit and throwing a light of facts and science on the topic. It’s something I couldn’t live without.

However, this changes life in a negative way. It’s not just that YouTube is pumping out more videos that you would enjoy, it’s that YouTube is now pumping out more video content than you can watch which is vitally important. You have no choice but to be watching YouTube in your free time. It makes you a slave to the video feed. Not because you’re addicted, but because it’s the most effective way to build your information web. The economics demand that you be watching all the time. It’s another step in the direction of people being hacked into the matrix hive mind all the time because without the matrix hive mind one will only be left behind.
It seems kind of strange to me that he's running it as a for-profit private company but is asking for the support of the community to fund it. There's got to be a better structure for this kind of enterprise, right? And the explanation for why nonprofit doesn't work (“The one thing i don’t like about non-profit is that you end up working for the source you got the money from. You dance to their tune to get their funding”) doesn't really make sense. If he's taking someone else's money then yeah there's going to be some amount of dancing, but that applies to funding for-profits as well. Unless, I guess, you can convince a community to give your for-profit company funding in exchange for nothing with no strings attached, which seems - again - strange...
> I agree that you can't replace relationships with computers, but I'm not sure public school is such a fertile ground for great relationships, at least not more than any number of plausible alternative systems.

Maybe we can't replace those relationships yet, but I'm sure eventually it will be possible. Educational tech should have the ability to do much more than human teachers ever could.
I'd obviously be very willing to do all of these -- I've already done them as a driver. I've been licensed and driving for 25 years with no accidents or tickets. I'm a member of AAA too, for what that's worth. (Though I'll note that I'd expect my biking insurance to be so close to zero as to not matter as the odds that I'll injure anyone on my bike are vanishingly small compared to the odds that I'll severely injure or kill someone when I'm driving.)

In my opinion cyclists should be licensed, but that's not currently the law. But neither is it the law that killing someone in a wreck is automatically 2nd degree murder, which in any other situation it would be.

Those licensing laws don't exist because the government wants to make driving on the natural roads that sprung fully formed from the earth less fun in cars. They exist because roads are built on public land that could potentially be used for other purposes, and because driving is inherently dangerous to other people and requires special training. And while I would actually prefer that there were more regulation here, I don't see how it is implied from cyclists paying taxes any more than it would tax-paying pedestrians requiring a license to cross a street. Aside from being another direct example of driver entitlement, that is.

It's... downright bizarre that you think anyone wouldn't know that impaired riding of a bicycle is prosecutable. I honestly can't figure out what you're even trying to say there. If it's some sort of sideways implication that anyone riding a bicycle is ignorant of the law, I'd point to the far larger number of arrests for DUI of drivers as a counter.
It reminds me a lot of bumper stickers on cars or tattoos on skin
I've used OpenBCI before, it's pretty good - noise filtering was the hardest part, which isn't really that bad of a problem to have. Here's a paper showing how to read eye movements with it: https://sci-hub.tw/10.1109/ICORR.2017.8009392

The Muse (https://choosemuse.com/) is much more of a consumer-friendly device, and it was super easy to get working at a hackathon years ago, but it looks like they suspended access to their SDK.
I find vcpkg to be a much more well thought out solution, or at least did at the time I was doing research into suggesting one for neovim during that discussion. It was clearly developed by a team that’s been around the proverbial dependency management block a few times, and offered more accommodations for working with existing codebases than Conan did.
A "democracy by exit" is not a kind of democracy. There are plenty of horribly undemocratic countries where people don't need exit visas to leave.

Likewise, when corporations become too powerful and monopolistic, they are technically "democracies by exit." But, much like some countries, they are not democratic in the important sense.

When such companies exercise too much power, most ordinary people do not have any control over the forces that most significantly impact their lives. And it is this sort of distributed control which makes a system democratic or undemocratic.
Taiwan Biggest Winner at IDC Smart City Asia Pacific Awards
Or maybe stories and posts are generally useless drivel (posts can't be all above their average.)
No, on OS X there is literally no reason to move anything from out of your application bundle. Copying the server out of the application bundle had one effect: it makes removing the app not remove the server.

There are apis to register for launch, there are launch service plists, etc which all correctly, and by default handle the user deleting your app bundle.

There are already “cryptographic mechanisms to detect modification of your app”, it’s the platform code signing mechanism, and Xcode will produced signed binaries by default.

Finally, your post comes across as saying that you believe leaving the server was unintentional due to lack of APIs (ignoring that removing an application is a sign that the user doesn’t want your app to run any code). Their “unintentionally” persistent server explicitly check for the app being removed, and if it had been, would redownload it and install it without user consent.
There are also other ways to reclaim dead time on public transport like reading a book, listening to podcast, or just plain relax. You can't do those while driving without compromising your attention and (therefore) safety of yourself and others.
ah .. i can see aggregating images from cloud connected dash cams as well.
are you kidding me SPAMMING? PROMOTIONAL VOTES?? CAN YOU READ what the user is sharing? He created his product dude. HE MADE apisentris.com

OOF. rolls eyes
no idea, didn't look at it too hard.
ironically the only thing that made me stay away from the service.

if he'd added a paragraph that said he'd put some $$ in escrow and some code/instructions with his will/lawyer the site will continue to run with a contractor while the business is auctioned off to one of it's users (or some such) I'd be much happier. as it stands - one guy in his underwear with a service that may or may not exist next year.
Medium is a catastrophe, obviously, but where it does have stuff you want or need to read, just install one of the many cookie-deleting browser extensions. I'm a simpleton so just manually hit a 'delete cookies from this site' button, but there are fancier options that will routinely delete cookies from specified domains, etc.

I haven't yet found a freemium site that either this or turning off javascript doesn't work for.
The threat model seems to have 2 requirements:

1. Only if the top level url bar says zoom.us is it allowed to cause any noticeable change to the zoom native app. This means some arbitrary website cannot cause any noticeable change to the zoom native app without redirecting you to zoom.us . This also means that a sandboxed iframe, such as an embedded web ad, has no possible way to cause a noticeable change to the zoom native app, because it is not able to do top level navigation to zoom.us .

2. When the zoom native app is triggered, the user must click yes on a confirmation button before joining the meeting.

I don't see people advocating that you need to be logged in to zoom.us .

Achieving requirement 1 without requirement 2 is still bad, because some website could redirect to zoom.us and force you into a meeting.

Achieving requirement 2 without requirement 1 is not too bad, but is annoying, because some sandboxed ad in a website could cause the zoom native app to pop up, annoying you, and could maybe almost be a DOS.
I've been seeing more and more developers not being aware about CSRF. Maybe the reason is that frameworks got very good built in support for CSRF protection, which caused CSRF vulnerabilities to be less common, which lead to OWASP to remove it from #8 on the list in 2013 to to not be explicitly on the top 10 at all in 2017. (marked as "Merged or retired, but not forgotten"): https://www.owasp.org/images/7/72/OWASP_Top_10-2017_%28en%29...) but it's still a very valid vulnerability that I think every developer should understand.
No need to feel guilty - thanks so much for your amazing work :)

I also enjoy reading your blog - your article on China was eye opening.
Yeah. I don’t understand why they can’t just run as a conference company. That seems like the obvious business model. Send the magazine for free to last years attendees, which gives you free advertising for next years conference.

If you have to “dance to the beat of someone’s drum” why not make it the people who are huge fans of the experience you produce?
Earliest modern human found outside Africa
How sure are you that it was an accident?
Ask HN: What advice would you give to an early career software engineer?
Not really, If you have a standard app that can be dragged into the trash, sure. If you have a kernel extension, or a launch deamon or any application data you store locally you cannot clean up after yourself without a custom uninstaller.
Windows is far ahead in its centralized Add&Remove Programs area.
Arpanet, Part 3: The Subnet
The standard is documented in PEPs[1]. CPython is the flagship implementation, and many PEPs discuss it directly, but if you're looking to write another Python, that's where you'd go.

https://www.python.org/dev/peps/
Wild speculation.
Effective Speeds: Car Costs are Slowing Us Down (2004)
Plenty of comments now describing the fallout of token amounts.
Ha-ha. ))) C' mon man! So superficial about Belarus. )) I just don't want to bother with MAS, so it's much easier to automate all stuff. Btw all recent updates are notarized.
As a C++ programmer dabbling in Rust I don’t find it strange. Many of the core ideas were motivated by C++. But I also like Haskell too :)
Guess you better find alternatives: https://translate.googleusercontent.com/translate_c?depth=1&...
Good point. I think “Hollywood” got eaten up by globalization (China) and easy route of super hero movies all-the-time. The Disney’s and big studios alike have no patience to make money off of creativity. Why do we even need Toy Story 4 to begin with? And how many super hero movies one need to drive same points again and again?
What about funny stickers then, not branded ones? No fun allowed?
I’ve collaborated with Chris Wiggins at Columbia. He’s insanely hardworking and it’s impressive to see how he balances an academic life with the life of a working Data Scientist at the New York Times. Really inspiring guy to be around.
This is completely nonsensical.

Toy Story?
Cars?
Inside Out?
Up?
Coco?

None of these follow that template. Sure, some like a Bugs Life and Rattatouille follow this, but in quirky ways. All conventional narrative structure involves an external incident. That sets up the central conflict of the narrative.

Disney movies like Big Hero 6, Moana or Frozen are more likely to follow it, though again, there’s a lot more craft in the story and surrounding context than the base structure suggests.
Learn to deliver value not code. Code is expensive to maintain and deliver. You should create as little as possible to get to your end goal.

Keep all your code as human readable as possible. If there are business rules related to your code make sure the comments explain the business rules.

Learn SQL, it's an amazingly powerful tool. Becoming very good at creating complex queries is very valuable.

Keep it simple, complex solution are only good when a simple one wouldn't fit.
macOS has a very good concept of package management and containerization. It's just optional because people get even more up in arms when their old software doesn't work any more.

Apple also makes a fantastic computing platform with very good mandatory isolation, namely, iOS. If you're interested in isolation in preference to compatibility with traditional desktop software, an unjailbroken iPad Pro with Smart Keyboard is a pretty good option.
Where did all the money go?

It's a niche market but 80,000 subscribers and 100,000 attendees in San Mateo alone should be able to keep the lights on.
People with Allergies Are More Likely to Be Anxious
Yeah, I think you mostly got it. Same reason people wear clothes with large, prominent brand names on them, or movie references, or whatever. Legible clothing generally. Bumper stickers. Same stuff.
Why isn't Make attached to a store that actually sells DIY kits and parts? Seems like a clear business model to me. Or at the very least, better than print publishing.

Now, they probably don't have the capital or wherewithal to start selling electronics now, but a company like Adafruit or Sparkfun should take over the Make mantle and just use it to put out good guides and drive kit sales.
TDK develops 0.49mm-thick speaker
Awesome response!
LOL. He is a really really good friend, a really good person and someone doing a lot to help curb climate change. We were both nervous after YC Interview that day in Mountain View (2018).

He insisted paying for the screen replacement but I didn't let him. I got the battery and screen replaced and my iPhone is on to its 4th year. :-)
I don't think it is malware. They did clear engineering decisions to have a backdoor in their system. I will not be surprised if they even knew it way before
Yes.

https://en.wikipedia.org/wiki/Ulysses_(spacecraft)
JR Central unveils first battery-powered bullet train
The Attentional Bias in Current and Former Smokers
> But it's easier to do correctly the way managed languages do. They don't usually create threads, they use thread pool and post messages to each other.

C# certainly never worked like that. `System.Threading.Thread` was the backbone of its concurrency model, together with everyone’s favorite auto/manual reset events, mutexes, and semaphores. While with .NET Core there are some libraries providing channels seeing adoption, the majority of the decline of threads in both legacy and Core .NET is from the move to async everything, which really obviates most of the need the casual developer has for dealing with concurrency primitives (at the cost of being absolutely dumbstruck when the abstraction leaks, obviously).

Redmond did an incredible job updating basically every single API in the BCL for async (contrast to the pathetically slow going in the world of nodejs).
Isn't fun or humor projected outward - via a sticker in this case - an extension and illumination of one's ego?
That could be at the same time true on average and not true for the specific case where the founders don't know each other all that well (and therefore don't trust each other much more than you'd trust a stranger). If you have stats on the latter case, I'd be curious to see them. If not, consider collecting the stats from this experiment.

Maybe people are "good by default" and all that, but I do have some very early stage startup experience (VPEng), and both the founders and the employees have enough trouble trying to not get screwed even without such additional complications. Money and egos always find a way to ruin everything.
iOS voicemail transcription has this.
The new Ford Ranger has seriously smart seatbelts
Pretty sure most everyone's got that was what he was trying for. It certainly didn't land for me though.