skysight-inc/HackerNews huggingface dataset:
> The techniques and technologies we’ve used on the new Twitter.com mean you only download and run code when it’s needed. So a mobile user won’t download the sidebar you see on the home page, and may not download the settings pages until they go to update their display name. However, it also means that the full functionality of the site is still available to them should they want to access it.

Can someone explain to Twitter's web developers that there's nothing groundbreaking about this idea? Like... lmao. That's how web apps should work. That's how traditional django and rails apps already work. I like JavaScript and React as much as any web developer but if you're loading unnecessary code that's actually degrading the usability then that's a problem to be fixed asap. And it's definitely not something worth mentioning in this press release.

Oh wait, this was post written by "software engineers", not "web developers". They're probably too smart for these details.
Because, if, enough numbers of users want it, seriously. Also it's still an option, not a default.
Sadly, renters don't get much input on any of the appliances. While suggesting a different type of electric stove is great for people with that control, most just suffer with the cheapest appliance the landlord could get away with providing.
Not a local reader. I am from Russia.

ZaTelecom Telegram channel (https://t.me/zatelecom) claims that that not all ISPs have rolled out the MITM attack. For now, a good solution would be to switch to a different ISP (it's not like in the US, each home has access to 2-5 different ISPs).

Also, users ask everyone to use a VPN. So, I think that they have access to VPNs.
Ah yeah, I'm definitely overpaid because I don't go home and choose to work instead of spending time with my friends or skip weekends out to work more contracts.

Yeah, that's right I'm over paid. Eat a bag of biscuits you assuming flesh bag.

I'm giving up parts of my life to make money, and you expect me to want less than what I'm making?
Then you haven't seen how many poorly written questions there are. Would you rather have your question outright deleted?
It had the required shielding and warnings about opening the box. That said, the spool of cable was likely 2500' of CAT-6e cable. In the root cause analysis it was estimated the voltage potential on the cable was between 210 and 280V and the current levels could have reached 500mA (a bit more than 100W of 'leakage'). That was well outside the what the test gear was "expecting" from a cable that it was testing.
Power is completely fucked at the local level in a lot of places. In LA councilmen have basically unilateral power on what gets built in their district, and of the people who vote something crazy like 70% are homeowners (which only make up 30% of the population of LA iirc). So NIMBYism in LA ends up with grossly disproportionate representation that isn't going to ever change until the city charter does, probably long after the city is completely fucked from being unable to build housing supply or transit needed to sustain economic development. It's hard not to be a cynic when these people have just so much entrenched power.
A lot of carriers support wifi calling. You should see if yours done and turn it on.
I have never participated in StackOverflow. In the early years, it was because they didn't allow logins except through Google/Facebook. And then it was because as an experienced developer with answers, I can provide value to the site but I don't have enough "reputation" to anything useful. I have to do a bunch of meaningless crap to earn the privilege of doing anything useful.

Most of you probably don't have this problem because you've long contributed to Stackoverflow. But the user experience isn't just hostile to newbies asking questions but also really anyone who hasn't been contributing for a long time.
From what I've seen, they always include database migrations when there are changes in the data structure. I've never lost any data from upgrades.

I've only encountered compatibility issues with the config file. It seems it is not a 100% finished feature and they are still tweaking. Since I'm using the Docker image which is configured using environment variables I just deleted the config file and it was re-created using correct values as was suggested in the forum.
Why America’s $1.5T student-loan crisis spiralled out of control
Every new question is, paradoxically, very low quality, unclear, AND off-topic, yet somehow at the same time an exact duplicate of an on-topic question with 653 upvotes. :)
Legitimate question: why not just add 1 and make them thousand year leases? Easier to remember, easier to say, and practically equivalent.
I appreciate the sentiment of this, but I don't like how associated dating is with drinking alcohol. I don't drink and I would never go to a bar. If there were other types of social spaces not associated with drinking that would be great.
Letting people doubt and experimentally prove fundamental ideas is healthy

Asking, "How do we know the Earth is round? Can we test it?" is very, very different than asserting, "The Earth is flat and I'll prove it experimentally."
How a “Leveraged Loan” Blows Up
Hostility is an issue that has plagued every major discussion board, comment section, and social network. I applaud any network that makes a real effort to manage the hostility. It is a very difficult problem to manage, since people rarely intend to sound hostile, yet most readers assume the worst.

My sister leaves Facebook every few months because she perceives there's too much hostility there, then rejoins again a few months later to see what's going on in the family. I see most of the posts and comments she sees, and I can see why she thinks people might be belittling her, so I don't blame her. I'm glad she doesn't try to get into technical discussions where the appearance of hostility can be far worse.
Although pinned certificates have gone out of favor on the web, they are still very frequently used by iOS and Android apps. Last time I checked, the Facebook Messenger app refused to work when being MitM'ed.
The problem is that, in general, wealthy and older people are more likely to turnout and vote, and more likely to participate in lower level elections, and this class of people is well-correlated with owning homes. So homeowners have quite a lot of power even compared to renters, and they are more than happy to flex it. They don't really care that there are subsidies, because they're the primary beneficiaries.
I am the same. However, when it's too noisy I have to choice but to put headphones in. I used earplugs for a while but the absolute silence (and the ringing in my ears) drove me crazy. That's why I found those. I usually leave one ear free and only put the second plug in when it gets very noisy.
Awesome project! Are there build details about getting everything running on the Nano? Do you have a block diagram or interconnect schematic that you could post? Thanks!
According to the same benchmarks that test is a few versions older. Compare it to these and they are neck and neck (in theory). Consider that most benchmarking is subjective...depends on so many factors like is this Clear or Ubuntu Linux? Are the chipsets the same? The numbers are different here for "Speedometer" but between both tests there isn't enough information here even to say the tests are comparable just different. https://www.phoronix.com/scan.php?page=article&item=firefox-...
Looking closely at the photo of the power supply in the article, it looks like it's quite flexible and can handle different voltages, as long as they're 3-phase. It even lists different amp draws for the different voltage levels. In addition, it looks like it can handle 380-570V DC. With today's switching power supply technology, it's not hard to make them able to accept widely differing input voltages, so this is commonly done so you only need one part to cover the entire worldwide market. It looks to me like you can just plug this thing into any 3-phase power you want really.

As for a "standard configuration" in the US, there really isn't such a thing for 3-phase power. There are a few NEMA standards used in industrial applications, but a lot of times, things like that are hard-wired. This isn't a home appliance.
That's still not a feature, in that it's something that serves developers, not users. I'm fine with people making better CSS tools; they should feel free to add dynamically named classes. But when the remove the static ones, they break things for some users. That's definitely not a feature.
The experiments in question are actually the second time they tried to do the laser experiment. The videos detailing the experiment on Jeranisms channel got taken down when it was pointed out that they showed the curve of the Earth.

When they make an active effort to hide the result I don't consider it a valid experiment.
It made mine better, met my partner there 6 years ago.
No because in addition to the fine, which goes to the government, he'll be ordered to pay restitution to Microsoft for any money they are out as a result of his criminal actions - which would probably be the entire amount of money he stole and their legal fees at the minimum.
generally, they're also going to have your connection/friend data as well. You might submit 300 "ALittleLight" name/face combos, but only one ALittleLight will be connected to a similar group of people you know who know each other to some degree.
What's your product ?
Man, what is that guy even on about...

Anyway, yeah. It's thoroughly enraging when you ask for help, and you're quickly told that your needs themselves are simply in the wrong. It's even worse than seeing thousands of similar questions met by crickets and tumbleweeds, which is the original symptom stack overflow set out to cure.

Q.
Hello, I wanted to open up
a DLL file in a HEX editor
and directly edit some of
the bytes of the file, just
to see what happens. Which
HEX editor is the best one
for diffing and translating
some of the string literals
embedded in a binary?

A.
Why would you ever do that?

A.
You should never do that.

A.
Do not edit binary files.

A.
Why don't you have the
source? Can't you recompile?

A.
That's really dangerous. You
could go to jail for that.

A.
ARE YOU TRYING TO BRICK YOUR SYSTEM?????????????????????

A.
You should not try to reverse
engineer your software. Check
the EULA that shipped boxed
with your set of compact discs.
It's usually forbidden and
will void the warranty on
your installed partition.

Riiiiigggghhht.
Agree. Entirely too much misplaced focus on finding better/more technical talent when commonly the bottleneck for a companies growth is not limited by engineering brilliance. It's much more common for the limiting factors to be logistical than technical. Or the 'system' as you describe it.

However the compensation model you describe seems a little wild. I'm not sure it's that easy to tie projects to specific performance numbers.
It's a shame browsers are breaking the X-Frame-Options.

It was an easy option to force with load balancers or any intermediate server. Frames should always be blocked on the open internet.

The content security policy can't be adjusted easily. It screws with applications and frameworks that use it for any of the twenty other options it covers.
What I find deeply frustrating and unhelpful on Stack Overflow are answers that don't offer a solution but instead give reasons why the OP shouldn't be doing what they're doing in the first place. Q: How can I do this in jQuery? A: You don't need jQuery. You should be using vanilla JS for that. Q: How can I hide scrollbars using CSS? A: That's bad UX and you shouldn't be doing that in the first place.

The lack of regard for the context of the problem the OP is trying to solve/trust that they have their reasons and project constraints for doing so is annoying and disrespectful.
Real rich people don't rob citizens at gunpoint. They have better, legal ways to do so... One could say that exploiting tax loopholes is robbery against everyone...
Yep - without HTTPS everywhere, governments would have been silently able to snoop on Internet traffic without anyone knowing.
Is that a new word I should know?
Nope, intrusive is different. Because this is using an Rc (reference counted pointer) for the forward and backward pointers, these counters are both set to '2', as (almost) everything in a doubly-linked list has two things pointing to it, the thing after and the thing before.
Worth reading the article. It's very little about the details of gay men's sexuality and mostly about the disaster of a Chinese acquisition and completely the wrong CEO. The LGBT community suffers as a consequence, not the cause.
> Each developer should be replaceable.

This attitude makes perfect sense from a managerial perspective. If workers are easily replaceable, they don't have negotiating leverage and you can pay them less, and you don't have to worry about risk to your company if one of them gets hit by a bus.

Conversely, it is in an employee's interest to be hard to replace if they can be. It gives job security and negotiating leverage. A "good" 10x engineer, the ideal stereotype, would be hard to replace because by definition, you'd have to hire 10 people to replace them, and even then, the 10 might not be able to accomplish certain hard tasks.

The bad stereotype of a 10x engineer is that they wrote a business-critical monstrosity only they can understand.

What they both have in common is that they are hard to replace. That is why, I think, that when big companies hire well-known 10x engineers, they put them on non-business-critical research type roles. And smaller companies would presumably be wise to avoid them altogether.
> the inability to serve HTTPS traffic should be considered a breaking issue

> "Reduced security" is not a valid fallback option.

Agreed! But if my HTTPS is broken, I might well want to replace my site with an HTTP page explaining that we'll be back soon. If that is impossible until the max_age expires, that can lead to an awkward explanation to the higher-ups.
Dont the chinese own grindr now? is it fully legal to use in china?
Fantastic collection. Would be lovely to have it in chronological order :)
Managing resources by hand is managing the mechanical implementation details of a computer. So in order to have garbage collection that manages more than just a sliver of memory so small that it counts as a rounding error by the same you get to the size of real world projects, you need a custom operating system and possibly even custom hardware too.
It's really hard for me to imagine that. I mean, there were some vegetables that I hated but that was only because I didn't know how to cook them. Things like broccoli, brussel sprouts I hated until I learnt how to prepare them properly.

Meat is super easy to prepare in comparison.
>I wouldn't be putting bread on the list of stuff to buy if we're aiming for healthy things

I can think of plenty "healthy enough" meals of which bread is a component.

>I'm not sure I understand your point about the intersection of readers and those buying food at Walmart. I get that the overlap is probably not large, but I don't see the connection to the claim made by the article

This article is written for a more wealthy audience that is going to be less aware of what food actually costs at the low end (i.e. just buying the cheapest X on the shelf instead of the X you like). My point is that few reading the article have the requisite knowledge/experience to call it out for portraying the situation inaccurately as the top level comment is doing and several here are agreeing with.
Coal has lots more carbon. It's coming back:

https://www.sandiegouniontribune.com/sdut-1n27coal23479-coal...

You'll get the best wok hei. FYI, https://en.wikipedia.org/wiki/Wok#Wok_hei

Berkeley is only 31 miles away from a business called Koch Carbon. The name alone tells you all you need to know. You can buy carbon from the Koch brothers. By banning natural gas in new homes, Berkeley is supporting this local business.
They might have changed it since I left Facebook but they absolutely did change that setting back frequently in the past. My frustration with that is one of the reasons I stopped using the site.
If they look and care. The comment you replied to asserts that most people don't. I certainly don't.

If HN didn't have the lock in the url bar (no https), it would have zero impact on my behavior. I had to look just now to even know if there was one.
It's a shortened version of "exfiltration"
In the US you have sacrificed ethics and standards for price and profit. Its why there is such a panic around Brexit leaving us open to US farming practices. You also have hugely cheaper transportation costs. I'd like to compare the cost US to UK, i wouldn't be surprised if it was x2 or x3 times more in the UK overall, fruit is especially pricey eggs locally are as much as 3$ for 6. 74% is a bit much though, most of the poorest spend at least half of their wage on rent as the last thirty years of government has brought right to buy with no new social housing.

It is expensive to be poor, where i can buy in bulk, saving some money, poorer people have to pay through the nose, wealthy people have pantries and chest freezers, poorer people generally have small fridge freezers that hold a week of food at most so they can't take advantage to most deals. Farmers markets are not generally much cheaper than supermarkets and you would be lucky to live near one. There is a minimum limit on delivery from supermarkets (about $60). I'm quite close to a supermarket only about $14 in diesel for every trip. I cook everything, and freeze dozens of meals at a time, I've been able to get down to about $2-$3 per day, but couldn't get near that if i was poor, and my diet has almost no fruit to speak of.
Fun fact: Grindr majority stake is owned by a Chinese mobile game company and has been ordered by the US Government to divest as it poses a national security risk.
I'm saying you're asking for intrusive ("each node contains the data and two pointers") whereas this list is not intrusive.
Yes, IAC's Match Group (Tinder, Match, PlentyOfFish, OKCupid...) seems to be where these things end up. IAC is the huge Internet company that gets little attention. They have over a hundred major web sites, which they run successfully, but don't try to make into one giant brand.

Publishing an advocacy magazine, with a paid editorial staff, was strange for a for-profit company. The article's main criticism of the new management seems to be that they focused on the core business of the company.
Yes, there are many words in the space. But there are also many classes of systems. It makes communication more efficient and enjoyable if all parties can think of the same thing when hearing a word.
what good?
Have other governments requested their citizens to install country specific CAs? For some reason, I thought China already employed this practice (although I guess they wouldn't need to, as they just tend to block everything that isn't government approved).
Gizmodo Media Staff Enraged at New CEO’s ‘Insane’ Direction
The goal here is to validate that one is communicating with whom they think they are. That's as pure a technical goal as you can get. Oddly this is still an unsolved problem on the internet. BTW any solution to this problem will be attacked or shot down by governments and companies around the world.
Something like this is in FF 68. Not a red dot, but an indication when you click the padlock.

https://bugzilla.mozilla.org/show_bug.cgi?id=1549605
Which is only shared when a court-ordered subpoenaed is presented for the individual's data by the U.S. Government. If Google didn't comply then we would be complaining how they think they are above the law.
>All of those things make society better

There is no intrinsic benefit to society at large in pursuing a degree - only those degrees which enable one to contribute in some form, and even then the benefit only occurs if one uses the knowledge obtained to conduct useful work.

>Yes, society should absolutely tell business that it isn't as important as it thinks.

Businesses have the goal of generating some sort of value. Yes, that means that employees must make certain sacrifices with their time and future plans - that's why they get paid. But this conflict between the goals of a business and the goals of an employee exist regardless of whether we organize into business-employee relationships or not, because fundamentally any significant, communal goal requires these same sacrifices to be achieved. We won't have any engineers or doctors or programmers if everyone majors in English Literature out of a fundamentally selfish desire to learn something with significantly less benefit to society.

The same goes for the other listed pursuits. I'm not saying that one should dedicate themselves to their work - but the detriment to one's career that comes with pursuing these, again, selfish goals (from the perspective of society) is generally just, because it isn't fair to force others to allocate their resources to activities which do not benefit them.
Is it possible to prevent an extension from downloading a javascript payload and interpreting it? Eval isn't required.
See: https://github.com/jedisct1/charm. That is what it uses.
> People can even feel different from you. The shock!

That is exactly what I told my boss when they introduced our new open office and they said "works fine for me".

It goes both ways.
Doing so will make the internet (In Kazakhstan) unusable, because everywhere you go, you will see an 'untrusted cert' warning.
Maybe this sort of interruption is manageable when half of your 18 million people are rural and the economy isn't heavily dependent on internet traffic. Try doing this in a more urban populated country and you will see a much different outcome.
No loss of data from upgrades has been reported in years. Every release includes database schema and database data migrations.

Only incompatibility issues were with some of the config file entries. These need to updated as explained in the release notes -> https://docs.mayan-edms.com/releases/3.2.html#backward-incom...
Earlier this would probably have been a somewhat plausible solution, but not even then for mass scale surveillance.

Assume NSA et. al had access to trusted CA private keys, then they could generate certificates for arbitrary domains which would be trusted by clients. But if they MITM'ed _all_ connections (or even a large portion) surely someone would have noticed, like in the DigiNotar case [0].

But it's even harder (or better) now, with the advent of Certificate Transparency. Since browsers check certificates, periodically, against the CT logs which would fail for forged certificates [1].

However, stealing private keys from companies themselves is a practice that I can imagine happening on a small scale, like the Realtek signing keys for Stuxnet [2]. But doing that on a large scale is not really sustainable.

[0]: https://en.wikipedia.org/wiki/DigiNotar#Issuance_of_fraudule...
[1]: https://security.stackexchange.com/questions/190096/how-will...
[2]: https://en.wikipedia.org/wiki/Stuxnet#Windows_infection
Flappy Royale, a 100-player Flappy Bird battle royale
to be fair some of us told from the beginning that making all user used to trust the green check would have caused this sort of trust fatigue to the point the majority would have stopped bothering with the actual certificate content and trust chain, and you can search my history highlighting this very issue in relation to let's encrypt, it was a social issue from the very beginning and I got downvoted heavily and repeatedly because apparently "techies" can't be bothered with exceptions and failure modes once a catch all solution is found

but the warning signs were all there i.e. https://news.ycombinator.com/item?id=17298747#17304077
They were bought by a Chinese bank. I don’t understand how that was allowed to happen in the first place... The security implications are mind boggling
What's new apart from the title?