skysight-inc/HackerNews huggingface dataset:
As somebody that spent a lot of time trying to convince people that BSD was superior to linux and eventually having to give in when linux won due to various other reasons I know how mercurial fans can feel.

I still almost choke on my own vomit whenever I have to do any networking in linux that's more complicated that setting an IP address.
I stop by that subreddit every few months and it is frustrating that the only places people seem honest with themselves about the real impact of this is also filled with fatalism. Maybe they're right.

Even so, it's still worth _trying_ to fix it, or barring that, to try to save as many billions from a horrible death as possible.

The approach taken by Dark Mountain is a little better I think - they don't focus on false hopes, but a literary response to the catastrophe (apocalypse might be a better word) on the horizon and how to deal with it on a human level.

We're all doomed, after all, by dint of our mortality (or our sun's, barring that). Moments of joy can still be had.
That's not really any better than 2FA against this specific threat.

But to answer your question, yes there is a system for signing gems, though it's not widely used: https://guides.rubygems.org/security/
Also a lot of music is loop/clip based (one or more bars of music is a sample by itself) which can be repetitive and exactly in time every time.

My favorite artists find ways to add a lot of variation, even to simple song structures. By including lots of detail, by playing parts by hand, blending electronic and acoustic instruments, etc.

I think music benefits from imperfections here and there.
In the first place google shouldnt even have those data. And I would place my bet they have removed this access so they can easyer say that they dont have location tracking data. Those are a bit problematic as from your movement you can be personally identified even without any additional identifiers. Which puts them under PII category.

https://www.nature.com/articles/srep01376
I'm so glad my team is distributed across different offices and we do our stand-ups at our desks. Having hypermobility in my knees, and most other joints, I get tired from standing still more than 2-3 minutes...
A good compromise is something like Netlify CMS[0], which adds a GUI on top of a static site generator so you can write posts through a web interface. AFAIK it works with a variety of static generators, so you have a few choices. Of course, you're tied to the netlify infrastructure.

[0]: https://www.netlifycms.org
There are similar patterns in other industries. Manufacturing tends to fetishise the automotive industry -- so an absolute mountain of changes come from "well Toyota's doing it" or "well BMW is doing it". Of course, they're great solutions for building cars, but not so great when you're building TV remote controls.

I wouldn't say Git has "won" or Mercurial has "lost". Hg still sees a lot of active development from the maintainers. As do Subversion, Perforce, and so on. Heck, ClearCase is as old as the hills and even that still has an active user community.
Especially when they turn it on and off randomly. So weird...
Our impending universal death may provide the inspiration we’ve been missing
A map of the brain can tell what you’re reading about
Fiona Kolbinger outright won the most recent Transcontinental bike race, in Europe. 4000km from eastern Bulgaria to northwest France.

https://www.transcontinental.cc/report
If it makes you feel better, by almost every metric the vast majority of humanity is living the best they have in all of human history. If you live in the west it’s even better because we haven’t had any local wars in nearly 80 years. I think a lot of people need to study history a bit more to understand how great things are now for most of the global population.
We rely on a mixture of generations in society, you need young healthy taxpayers to support the elders who raised them.
While the goal seems laudable not sure I follow the purpose of the app. Is it to track ticks in areas where people don’t expect them? Where I grew up you’d be reporting them every other day
David Epstein kind of makes this point in The Sports Gene. We think modern training and diets make us better athletes then our ancestors, but really much of the progress on world record times have come from better tracks and shoes.
Yeah, that sounds like actual torture.
EU Digital Economy and Society Index (DESI) 2019 – Country by Country Analysis
How to thrive in an automated business world
On the other hand, the software development version of the maxim "dress for the job you want, not the job you have" could easily be "use the tools the job you want uses, not just what you can get away with".
One of the theories is women are better able to utilize fat stores for energy. When running, you have a limited amount of glycogen and virtually an unlimited amount of fat stores. When running, your body takes a percentage of glycogen and a percentage of fat for energy. For ultra's, you want that fat percentage to be as high as possible, so you don't run out of glycogen and bonk. The slower you run, the higher the fat percentage. Training at a slow pace helps your body learn to burn more fat and less glycogen. The theory goes that women on average are better able to burn fat for energy.
>“Any idea how many kids in public schools are on probation?” Skrinjar asked.

>Two thousand, he told them.

>“We have their pictures,” Skrinjar said. “We can put them in the system and restrict where these people go, and keep them out of areas they’re not supposed to be in.”

That people who don't understand how unacceptably dystopian this is can rise through the ranks of law enforcement says a lot about the culture of law enforcement.

>The Caucus requested copies of agreements governing the use of the cameras and, in response, Zappala’s office said none existed.

The good ol' "we're not in violation of policy because there is no policy".
Which means that they violate their visitor's privacy, and don't want to stop it.

Funny, that such a site reports about other's privacy violations.
Of course it was, and I knew that, or at least used to. Not quite sure what brain was thinking. :)

Royal Mail goes back to Henry VIII or Elizabeth's time, perhaps further, but it was royal mail only then, not for the mere public yet. I think that might have come before the Civil War, and before post offices. Don't know what happened to Royal Mail during Cromwell's time. Given the start date of the GPO, post might simply be one of the many things that had legislation between Civil War and restoration. All those were thrown out and re-legislated or forgotten.
Videoconferencing is OK, but it is still common to have issues with it. Bad image quality, setup by lowest common denominator etc. Often you use that 15 minutes just by trying to make it work properly.
Developers accuse Apple of anti-competitive behavior with iOS 13 privacy changes
Partly, does't support new iPad pro and only in Brave browser

> At launch, it’ll support these well-known password managers and single sign-on tools: 1Password, Bitwarden, Dashlane, Idaptive, LastPass, and Okta. And when using the Brave browser for iOS, the YubiKey 5Ci can be used as an easier way to log into Twitter, GitHub, 1Password’s web app, and a couple other services.

see https://www.theverge.com/2019/8/20/20813129/
> whose to stop someone from cloning a Yubico key?

That is precisely what these devices are designed to stop. The device has a private key stored in hardware in a way that it cannot be retrieved by software. When you use one of these devices you dramatically decrease your number of attack vectors because now the attack has to happen physically. Someone has to actually steal your physical key. And because this is your "second factor", if that happens they still also have to have your password.

Two-factor apps get closer to this, but they usually can be copied. For instance, 1Password can be set up to mimic Google Authenticator.

> I do want to know if this is purely marketing hype

This is most definitely NOT marketing hype. It is the current security best practice.
I disagreed, to a degree with the original comment but to be fair, he wasn’t bashing or downplaying women. I’m making the assumption that it’s a male based on username.

He did, however, pointed to some interesting things and areas which should be explored and debated but your comment, on the other hand, is really aggressive and does not open the conversation to a positive discourse.

Instead of saying “vague pseudo-facts”, why not find some and post as counter point?

And who said HN is better than Reddit? Perhaps more moderated but we’re all human which means we have shitty opinions rooted in nonsense. This doesn’t stop if you register on HN, we just have shitty HN opinion instead of shitty Reddit opinion.

And most importantly, you buried the whole point of your comment because of your anger: the winner of the race did something amazing and should be 100% celebrated. She beat the competition, regardless who was there (male vs female). She can’t control who she runs against. Hence, she deserves to be a champion without an asterisk.

Downvoted were for your tone (I didn’t down nor up vote), not the content of your comment.
They are slashing the forecast because global warming looks less bad if we call it 1.5 K instead of 2 K, but they actually did change the baseline instead of their predictions.

At least I guess that is what whattsupwiththat tries to scandalize, unlike the IPCC they are very hard to read, because they don't actually write clearly. (For example, they do not label whether plots are observed data or model output.)
They both were kept their symbolic status at that time. HHDL was highest ranked in CCP before he fled. I don't know any evidence that sided with Koumintang backfired as you seemingly suggested for him.

Part of the system was kept (namingly the Lama leadership was kept symbolically), but the slavery is a history.

BTW, in the original post, I mentioned "70 years ago" as a way to suggest HHDL has a long and complicated life. His historical baggage by no way limits to Tibet before CCP though. It took him a long time to get his message what is today.
Many would for sure like a private office!

But, there are big advantages of remote work over private offices:

1. Lower cost to the company. Private offices are expensive to build and maintain.

2. Less commute time to the employee. Private offices still require commuting which impacts the environment and the employees personal time.

3. Job flexibility. Home workers have (or will have) more options for employment.

4. No relocation expenses. Relocating an employee costs a few thousand dollars, hiring them and letting them stay put is cheaper.

5. Maintain ties to community.

6. Distribute income geographically. Offices concentrate incomes into a small geographic area. The effect is compounded by global companies as the worlds revenue streams feed into a single area. Think about how inflation and costs are out of hand in Silicon Valley.
Hint: it's not actually "developers" per se, rather CEOs of data-siphoning companies.
The first thing that needs to become standard is a source code / diff viewer right there inline on the repository.

One of the most ridiculous things about most package repositories (npm, rubygems) is how opaque they are. It's only a mere courtesy to link to the github repo from a package, and a gentlemen's agreement that it actually represents the code that will get run with 'npm/gem install'. There are various ways to go about this like the package repo requiring linkage to an actually git repo that it builds from.

Commonly pitched solutions like 2FA are useful but don't do anything to stop the case of a malicious actor actually having publish rights, like the trivial attack where you simply offer to take a project off someone's hands. But diffing releases and reading source code should be absolutely trivial at the very least.
They cite this particular bit of idiocy from the Agile Manifesto:

> The most efficient and effective method of
conveying information to and within a development
team is face-to-face conversation.

They fail to realize that when it was written in 2001, communication technologies were far inferior to what we have now. So that face to face should be updated to something like "immediate" or "real time".
Learning curve I guess. Usually "easy" devices take off.
Backdoor Found in Webmin
Thanks for that, I'd never heard of the French collaboration before.
Why did the Chinese communists win over the Nationalists?
Please feel encouraged to report a bug about histedit slowness with some details so we can try and reproduce and consider a fix.
How the sound of your name defines how people think about you
Ruby gem hijacking also happened to Strong_password a few weeks ago.

https://news.ycombinator.com/item?id=20377136

This is major new line of attack, and web app infrastructure is critically weak to it. We rejected distro-controlled package management in favor of pip and gem and npm years ago (for good reasons), but as this sort of attack becomes much more common (which it will), we might find ourselves missing the days of strong central control.

Rubygems should have acted on the Strong_password news, but missed the opportunity. I hope that they can get their act together now that they are lucky enough to have a second chance before this style of attack really explodes.
At least in our company, it works pretty much flawlessly. We rarely have technical issues, and if we do it's a wider outage from our conferencing provider.
"selfhosted serverless" will change everything!
Festivilia: From Failed Startup, to $11 Launch, to $15,000 in Revenue
[our customer representative] has no idea it’s happening

Why do you continue to do business with GCP if their customer service is that bad?
I see, so it's less about a growing body of evidence and more about women training better and improving their times. I'm very interested to see whether they will get as good as/better than men in some sports.
I like flexibility.

I don't want to be forced into a open floor plan office. But I also don't want to be full time remote, or forced into a singular private office.

I want to be able to go into an office when I feel like. Work out of a small office/conference room when it gets noisy. Sit in the open when it makes sense. Work from home when I need to be heads down.

I wish management would stop looking for the "productivity magic bullet" and just start offering options based on their employees. There is no one-size fits all solution here.
Medium is an absolute disease and it makes no sense that anyone would use that platform for blogging. Its enforced and aggressive layers of pop-overs is a disgrace to the community.
“all-synthetic aerosol to replace tobacco smoke, if
necessary … I know this sounds like a wild programme, but
I’ll bet that the first company to produce a cigarette
claiming a substantial reduction in tars and nicotine …
will take the market.” (Philip Morris,1958)

It's interesting that idea is exactly what we are talking about today.

RJR tried doing smokeless cigarettes in the 80s and 90s but they apparently tasted like a fart. They still sold them up until 2015. It seems to work somewhat like a hookah, a hot carbon tip is used to heat air before it passes over the tobacco. Supposedly these kinds of cigarettes were the only ones you could still consume in the RJR office.
It's 1.5KW of thermal output, about 5 times the biggest Xeon.
Works pretty well, except for the one country that is currently self sanctioning under the assumption that trade wars are easy to win.
121 Questions for 1:1 Meetings
I seem to remember there being an X-Files episode that presented this theory.
We recently spent weeks doing a backlog grooming meeting every day to get work lined up, only to have our priorities completely changed and all of the work discarded.
> there really is no easy fix

Is there any fix at all? Aside from something like multiple-account code signing/release verification I cannot think of something that couldn't be compromised in some way.

At the end of the day you have to trust someone and trust that they trust someone else. The problem is you have no way of vetting the entire dependency chain. You may have reviewed gem/package A but you aren't going to (realistically) review all of its dependencies and those dependencies' dependencies.

At this point it's all a "many eyes" approach. And it seems to be working relatively effectively.
Let's take the first quote which is talking about superposition. From an information theoretic perspective, superposition is not different from a classical statistical model. A weather model can be in the state (20% chance of rain tomorrow, 80% dry). Its when you measure or observe the weather tomorrow you will see either rain or dryness. In other words, while it is technically correct to say "a qubit is in two states at the same time", it's a very boring and non-deep statement.

Now, the second quote. This one is heavily misleading. I don't even know where to begin. I will just leave this here https://www.scottaaronson.com/blog/?p=198
This comment is the real headline. The communication around the models has been manipulated to make the entire body of work seem more confident and consistent than it really is.
> The press release from the company said, “heavy-duty vehicles produce more particulate matter than all of the state’s power plants combined”.

> […] for instance why only “10 school buses”?

IARC has recognized diesel exhaust as carcinogenic (lung cancer) since 2012.

Are there other electric school bus programs in the US?

(edit)

https://www.trucks.com/2019/03/22/can-electric-school-buses-...

> Most school systems don’t have sufficient capital to finance the high initial costs of electric bus purchases and charging infrastructure development, he said.

> In the U.S., the school bus market is about 33,000 to 35,000 vehicles per year – about six times more than transit buses.
How Music Sparks Productivity and Drives Efficiency?
Isn't the triangulation being done on the phone/device GPS chip ? The same chip is doing it for all 3 services. The chip gets the data of the satellite positions and then shows its location in relation to them that how I thought gps/other systems worked.
> I’m not sure what you mean exactly by virtue signaling here. Can you highlight what parts of my comment you feel like weren’t genuine?

I'm not questioning that your comments were not genuine. But, it can be quite off-putting to lead your logic by explaining to someone you don't even know, how privileged they are, making many assumptions about that person and their reality. You used the word "privilege" four times in four sentences. There are other more rational and thought-provoking ways to structure your logic to engage and convince people of your views. Otherwise, you seem like a very thoughtful person, passionate about standing up for those who may not have a strong voice or representation. Those are very commendable attributes and I wish you the best.
I remember looking into these for gaming some years ago and being disappointed that the thumbstick was just a digital directional pad and not a proper analog stick. Does anybody know of any good input devices of this form factor that have proper analog inputs?
The testing and treatment of tick borne pathogens is a fine line between politics, science and empathy is because many people have been treated poorly by the medical industry. The majority of the symptoms are ignored by physicians or misdiagnosed. In many cases, co-infections or existing immuno-suppressive conditions are ignored by physicians. That's happened to a number of people I know.

It is very common for most practitioners to be ignorant of: HLA DR gene types (can accumulate metals, mycotoxins, lyme toxins, etc), the nature of the Lyme bacteria strains: spirochtte (reproductive, doxycycline susceptible), round bound starvation form (resistant to most antiobiotics), and the nature of biofilm colonies (antibiotic resistant) that exist in nature and our bodies. Furthermore, most physicians do not know what labs and tests to apply to a patient: Igenex and Galaxy labs for Lyme, Bartonella, Babesia, etc testing; c3a, c4a, tgf-b1, mmp-9, inflammation markers.

In short, each human phenotype, genetic expression, and immune context are all highly unique ... which means that every case is different. Inflammation from our immune response is the primary driver of symptoms and is very, very often mis-diagnosed as something else like MS or dementia (happened to a number of people I know). We need a lot more data to finally help educate physicians and bring the vast majority them out of the stone age. We need to educate everyone on complex systems, nutrition, and biology instead of just authority.
Once a remote worker frauded a company I was working for a large amount of money. I dont think it was a coincidence that it was a remote worker - I believe it is much easier mentally to behave unethically if you dont see the people f2f you are hurting with your actions.
I mean "Agile" as in, whatever stupid thing our current "leadership" wants it to be. regardless of what "agile" should stand for, it was immediately corrupted at our workplace to be "business as usual with a new name".
There are many nuances though. Some data/state may not actually be rendered but used for later. It's also not really accurate to say it's rendered twice, as it's rather hydrated (before hydration this used to be a big problem; sites actually rerendering/flashing when the js loaded/initiated).
Please correct me if I'm wrong, but I think it was in "The Hundred-Year Language" [^1] where @pg argued for performance as a language design feature. He could have meant a different kind of performance though.

- [^1]: http://www.paulgraham.com/hundred.html
> The big boss said "a 15 minute fact-to-face is better than a multi-day email chain"

I can't believe that people who are so out of touch with reality are still given so much responsibility at companies which they effectively unknowingly misuse to make everyone's life miserable.

There's nothing wrong about a multi day email chain. Sometimes it's the best communication tool, because non-critical/important things can be more efficiently being discussed in an email chain which doesn't disrupt everyone's work day. Secondly it is a nice way of keeping a log of ideas, thoughts and compromises which essentially lead to the final conclusion/solution. This gets documented for free and people can reference back to that email chain in the future which is hugely valuable, especially when the "big boss" conveniently likes to forget his own decisions.

Face to face lacks all of those nice features.

Secondly... there's A LOT more alternatives and other options inbetween F2F and long email chains. People can work 99% remotely and travel into an office one every couple weeks or per month for team bonding time.

Video conferencing is another great way of getting a F2F conversation done without the hassle of everyone being in the same physical place. More often video conferencing calls can even be more productive, because people are more conscious about the time spent in the call and also about the people who frequently contribute and those who just got invited along but never really participate. Makes it easier to trim attendees down to the ones who really need to be there and those who just can be sent a summary afterwards.

I can only hope that your new big boss will quickly get sacked and replaced by some young blood who has heard of instant messaging and video conferencing. Good luck!
Pedal bikes aren't allowed on the motorways in the UK, so I assume this falls under some similar sort of rule.
Segmenting Retail: Why Research Shows This Is Essential
Monzo API might make this possible....
I expected there will be more counter arguments to this, surprised that the most of the people agreed. Now, am I weird ?!