skysight-inc/HackerNews huggingface dataset:
Is that really a legitimate attack vector?

I would expect web servers to just discard weird headers and serve the regular page. And, at the same time, I would also expect CDN to not cache 400 bad requests or 500 server errors.
As cheap as drones may be, a single drone costs more than a box of cartridges: https://www.cabelas.com/product/shooting/ammunition/shotgun-...
great article! It's not mentioned there, but I think the "conventional phone lines" meant fax, which was a pretty common gateway from the internet at the time. One of the McCools (can't remember if it was Rob or Mike) had a new-fangled CGI script that enabled a HTML form to order Jimmy Johns sandwich and it used UIUCs email-to-fax gateway to fax the local shop. Good times.
You keep posting this. The post from a couple months back got some positive feedback. Rather than copy/pasting the same intro comment, which makes this look spammy, why not update HN on what is different from the last time it was discussed?
I shall patent a automatic mozzie zapper
Every single voting system has some element of fault. Very few voting systems are close to "perfect representation" and they tend to be more math heavy, in a way that would lead to distrust from the average voter.

IRV might have some corner cases, such as the one you listed, where strategic voting is beneficial for some. IRV reduces that element drastically, and encourages positive voting and true representation to a much larger degree.

Essentially, everything the NYT article says.
Video vs. Image vs. Text: What ads are best for conversion
In my Rust code I go back and forth. Coming from JavaScript, I started out trying to do everything in functional expressions - which Rust does as good a job of accommodating as it can - but Rust often requires so much more verbosity (.expect().unwrap().clone()...) that I found myself using local variables again.

And what I realized was that, as fashionable as it is to say these days that imperative code is the devil, Rust's (deeply) const-by-default local variables remove one of the main reasons people have for nesting their expressions inline: avoiding the creation of state that has the chance to be mutated. And I also found that giving names to those intermediate steps can really help improve legibility. For me, Rust has made imperative code cool again, while also allowing for maximally expressions-based code (even more than JS in some ways!) where it makes sense.
It’s not new. I had a few journalist friends in the 90s they would call or email every once in a while saying “I’m looking for a quote for xyz” and then get one and print or reference it on air.

All these random joe quotes are stupid and I wish editors would stop it.
iOS SDK Developer
Gamedev Tutorial: Inverse Trigonometric Functions, Slope Angles, Facing Objects
Yeah, I know, but is it possible for a candidate with broad shallow support to be boxed out of the top two? There's no pure reason to have a cutoff point there, it's arbitrary.
Boardme.app Looking for Co-Founders
Our boardme app is getting some insane response, including a possible partnership with AppSumo.

The thing is, we're just 3 guys with day jobs, and we're stretched pretty thin.

We're looking for co-founders interested in joining the team! (front-end specialists)

If you or someone you know might be interested, PLS drop me a message - my email is andrei@boardme.app

Technology stack:
- HTML/SASS/Typescript/Webpack etc. (no frameworks needed)
Utilization Behavior: What Is Known and What Has to Be Known?
I highly recommend CES's video on voting methods that highlights the non-monotonicity of IRV [1]. I would prefer the adoption of simpler models that can be implemented and understood by voters easily, such as approval or score voting.

[1] https://www.youtube.com/watch?v=2q_eMUGCU5U&feature=youtu.be...
wrong this is a ruse pushed by conservatives. this is only being pushed in liberal states, which will effectively give conservatives votes they never would have gotten in those states. all the while they refuse to convert conservative states to rank choice. this can only work if all states changed at the same time. if that is not done states that are converted first are helping the incumbents.

if you want something that actually reflects the will of the people then national popular vote is close to having enough states to be effective.

https://en.m.wikipedia.org/wiki/National_Popular_Vote_Inters...

secondarily you can increase the number of representatives/electoral college members.
Here's a great article why so many Chinese goods are printed with those ugly latin characters: https://www.artlebedev.com/mandership/183/
Mozilla faced tremendous pressure from the media, Mitchell had no choice but to let him go. The public went on a witch hunt. It's your peers who did this, not Mozilla's chairman.
Both - but I'm more tooled to solve one-off situations. I have been able to do the whole "copy-paste" resell a few times which has been financially lucrative!

My GitLab is my toolbox in so many ways and I've got a wealth of clean/documented code that I can re-purpose depending on the task at hand.
Not really, julien.

If Sergey Brin had told you back in 1998 that he planned to start Google, and to start indexing the web out of his garage, it would not have meant anything. Or if the Wright Brothers had confided in you that they planned to build a workable flying machine back in 1903, they would not have been running any great risk either.

What's valuable is having the vision, and the ability to connect all the little dots, and to see exactly _why_ something is a good proposition. Just hearing that something will be great usually won't help you a lot.

To quote Howard H. Aiken:

"Don't worry about people stealing your ideas. If your ideas are any good, you'll have to ram them down people's throats."
> and that gets all the bigots out in arms.

Please edit flamebait out of your posts here. It leads to fire-meets-petrol feedback loops, nowhere more reliably than on religious topics. Your comment is fine otherwise and deserves better.

https://news.ycombinator.com/newsguidelines.html
Unless it's already been edited, that comment is in no way a personal attack. Not even close.
The point of getting rid of FPTP is absolutely not to “make a centrist third-party candidate likely to win”.
UK experience. Turn up, usually do some sort of coding or skill test - which was mostly on paper and consisted of about half an hour or so worth of questions. Starting with a few gifts like an obvious error, or "explain encapsulation", through to 2 or 3 bastards that were probably the current department's idea of funny. 30min - 1.5 hr interview, usually with a quick wander round the department or building. Not uncommon to get an offer as we wrap up. No prep - just know the company you apply to, and know your stuff.

A few were still just interview with no test. Some would have a second round - mostly corporates, which were mostly a repeat of round one but with someone else. In that era I can remember just one whiteboard interview, which also required a surprise presentation. I passed, but didn't want to proceed. The interview put me right off them. :)

On the interviewing side it was actually depressingly common to have one or two turn up and hard fail the easy gifts, and completely fail to explain encapsulation, or know what a constructor was etc. There were quite a few trying to wing it with a couple of years C++ or Java on the CV when they maybe sort-of knew a bit of C and fancied a bit of the absurd y2k and dot com money that TV kept on about.
I've got a plugin[1] that allows me to use youtube links. It uses invidious[2], which seems to help avoid that kind of concern.

https://gitlab.com/Booteille/Invidition
https://invidio.us/
Iceland and a few other islands definitely look like the best candidates.

I would argue that six of Tuvalu's nine islands are reasonably clear cases. The current Polynesia inhabitants have a direct line of ownership back to the first arrivals. Tuvalu was a British protectorate and then crown colony, but it remained comparatively independent until actual self-rule - and as far as I can tell, British colonial administrators never extended beyond the islands of Funafuti, Nanumea and Nukufetau, nor did American soldiers in WWII. The remaining six inhabited islands appear to have been consistently controlled by the first people ever to settle there.

If we discount strictly paper claims of ownership, the number may go up - some remote regions of some mainland indigenous land don't seem to have ever been meaningfully contested. In North America, some parts of Nunavut or non-coastal Alaska are the most obvious options.

More surprisingly, the White Mountain Apache appear to have held some land from continuously from European arrival to the present Fort Apache Reservation. The pre-European history of the region is somewhat less clear, but it appears that the Mogollon residents of the area abandoned it during a drought around 1400, before the Western Apache moved into the empty region. If so, that represents continuous ownership for around 500 years with no initial conquest.
At least Trump is president, so his words mean more than random idiots. How much more they mean isn't clear, but his position means knowing what he thinks is sometimes important regardless of your opinion on the topic.

You can argue that Trump's tweets got more attention than they were worth before he was president.
The reason being SMS character limits... right?
> complex language requires long compile times.

My point is not so much that the language is complex, but that the compiler does a lot more stuff along the lines of correctness checking. If you take a C or C++ compiler and add in the equivalent level of checks that Rust is doing, can we expect it to be faster than the Rust compiler?

Are any of the other examples you're putting forth doing things of the same complexity? I know many of them have their own ways of providing assurances, but I know some of them are not compile-time (or at least not more than inserting instructions for run-time checks). You would know better than me, since you've expressed previously that you have experience with many of those, at least at a cursory level. Can you comment on what they're doing at a compile time level that's approaching or surpassing the complexity of the borrow checking in Rust?
How to Build a Platform Team
Ask HN: Cross-platform “universal clipboard” solution?
Universal clipboard on Apple devices is very handy but limited to their ecosystem. Is there anything out there close to a truly universal solution? (I understand there might be more friction/extra steps on Apple devices)
That's unfair with respect to email.

I've had large corporate email environments in my portfolio for about half of my career. As recently as 2017, ~2-3% of a 200k org of those users would exceed the free GMail tier in terms of storage. I don't have the stats in front of me, but I'd put money on 80% of the userbase being less than 10GB.

Big email users are always using email as a filing system. Calling GMail bait-and-switch based on marketing claims made in a 2005 context is a pretty extreme stance. My team at a big enteprise org provided folks with 50-100MB (similar to pre-GMail online offerings) in 2005.

Then Google offered a seemingly limitless service that is to this day practically unlimited for all but the most active user.
Only yesterday that there was an article in the Finnish newspaper Helsingin Sanomat saying that the e-citizenship is getting increasingly questionable.

Until 2 years ago the e-citizenship was good to open a bank account. After major money laundering scandals (probably unrelated to e-citizenship) you cannot only no longer open a bank account as an e-citizen, but even existing ones of e-citizens are getting closed.

A business without a bank account sounds highly limited to me.
They're probably just examining your HTTP requests:

> Even if you opt out of Ads Personalization, you may still see ads based on factors such as your general location derived from your IP address, your browser type, and your search terms.

https://policies.google.com/technologies/ads
It's not legit.

There's techniques to build tall in earthquake prone areas; such as building on rollers (New Zealand has some interesting examples of this approach), framing techniques, etc.
Laravel 6 Stripe Payment Integration Tutorial
I had the same initial reaction. I wanted a tokio UDP server that delegated to other things. Working w/ tokio streams, futures, async (which I understand are all still in beta) was quite challenging to make sure they could all get back to the read/write of the UDP socket. Basically I end up having to split UDP read/write then concat/join disparate streams or use mcsp channels to fan everything out and get it back to a single stream.
My usual take is that it gives us better efficiency in the short-term, at the expense of making it far more likely that we get stuck in a rut long-term.
> They were not rotated back then in 2018, so we can only guess if MITM had place. Their line of defence appealing to keys which are NOW outdated is just ridiculous.

MITM could have taken place anyway because the attacker was on the machines. They did not need the key.

> It's not true. PFS provides cryptographic isolation between long-term keys and session key used to encrypt data. Obviously, if MSK compromised it is irrevelant, how it was inferred: with PFS or not.

PFS implementations have the session key rotated automatically in software and dependent on the implementation multiple session keys are in use at any given time dependent on flow. The PFS session key would also be different for every VPN server in the NordVPN environment. The only possible way to compromise a session on another VPN node (that was not compromised itself) would have been to intercept it at the time of the session being created and MITM by injecting your own PFS session key.

That is why it is called "Forward secrecy": the session can not be decrypted in the future, only in the present.

Unless your assumption is that this is a state actor with the ability to MITM connections in the first place, or a rogue ISP BGP hijacking that would have been obviously seen on something like BGPStream [https://bgpstream.com/], it is safe to say that no other VPN node's traffic was compromised. Only traffic on this single host in this single location.

More reading: https://www.speaknetworks.com/what-is-ipsec-vpn-pfs-perfect-... (Step 5)

"Instead of making use of the DH Keys Calculated during Phase-1, PFS forces DH-Key calculation during Phase-2 Setup as well as Phase-2 periodic Rekey. The PFS ensures that the same key will not be generated and used again."

OpenVPN (using TLS) also uses PFS by default. There is a reason it is called "Perfect."

EDIT: PFS is commonly also implemented by Diffie-Hellmen (DHE) key exchange: https://en.wikipedia.org/wiki/Diffie–Hellman_key_exchange

EDIT 2: I am not defending them as well. I just believe extrapolating the technical details is fear mongering at best. Believe it is best to focus on the facts as it makes for a stronger argument.
Yes, that bit was flamebait. I didn't see it earlier, and have replied now.

Religious flamewar grows exponentially. First step flamebait, second step flame comment, third step entire thread flamewar. What it does to the site, exercise for the reader.
The utter contempt for Alberta (well, basically everything east of Ontario) was received loud and clear by western Canada yesterday.

Instant Run-Off voting is an absolutely necessary next step, but wouldn't have helped in this election; the non-Liberal vote already achieved about 80% (80%!) of the vote. A new non-leftist party (People's Party of Canada) got essentially shut out due to strategic voting; it would have been interesting to see the actual interest in a more "libertarian" party, but we'll never know -- that data is lost when citizens are forced to either vote strategicially or throw away their vote to an undesirable opponent.

#WEXIT is exploding; Alberta secession has a serious chance of being considered and voted on.

Not a good time...
Interesting, back in the day, I believe you were supposed to pay for Netscape. That changed once the Mozilla Foundation was started and Netscape's codebase was open sourced.
People promoting Rust tend to assume that it's the concepts in Rust that don't exist or aren't explicit in other programming languages that are the hard part. In my opinion, that's not true. It's the syntax used to make those concepts explicit. To use the example from the article: lifetimes are not a hard concept to grasp. Knowing when the Rust compiler will require you to make a lifetime explicitly part of your type, vs. when you can elide it? Hard.
Difference between GMT and UTC is that GMT is region specific and has daylight saving time (UTC +1). But UTC is region independent.
Core Animation Layers do allow you to mark a layer or only a portion of a layer as needing an update.

https://developer.apple.com/documentation/quartzcore/calayer

Taking advantage of this would require deeper changes in Gekko than this initial change.

https://bugzilla.mozilla.org/show_bug.cgi?id=1491456

Perhaps WebRender will do a better job of leveraging the possibilities of the native platform APIs for the various lesser used platforms?

In any event, it's a huge amount of work to land a change which makes such a huge difference in battery life, and that work is appreciated.
Pizza orders can be even faster than that. For me it's often: "Hey dude, same thing?" "Yep." "Cash?" "Yep."

Literally two words from me. A perk of being a regular customer perhaps, but honestly I order pizza maybe two times a month, not that much imho.
Well it would be socially acceptable to be wearing one while working on-the-job for example, a construction worker, doctor, or even a motorcyclist.
Wouldn't sin^2(x) and cos^2(x) be a simple solution?
Natural Language Processing (2018) [pdf]
well, it only took us a hundred years or so but looks like we're back to craniometry, AI edition.

Also, a cursory look at HireVue's website shows an advertisement as follows: "Screen the best tech talent, no need to understand the code", enough said.

If anyone who works at that company reads this: You are making the world a worse place, you're selling people snake-oil, and you're building software that controls people rather than liberates them, spend a few minutes pondering the ethics of the systems you're building.
One that I heard about last year and have been following – https://www.smallrobotcompany.com/
Is it just me, or is the fundraising campaign only for donations, and not to get a physical product?

I would be far more interested to fund it if I knew I was getting a laptop, but as far as I can tell, that's not the case.
I always recommend this pair of videos when discussing STAR voting vs other alternative systems. The first video is an easy-to-follow explanation of how spoiler effects can happen in both plurality voting and IRV [1]. In the second [2], the guy who created Star voting applies Ka-Ping Yee's methods to Star voting and animates it side-by-side with alternative systems to show its performance.

[1] https://www.youtube.com/watch?v=JtKAScORevQ

[2] https://www.youtube.com/watch?v=-4FXLQoLDBA
In my experience, when you ask people to do approval voting, they seem to rank the candidates then try to figure out where to put the cutoff between the approvable candidates and non. The system doesn't give any guidelines on where the cutoff goes, so people recoil because they feel like they're doing it wrong. The fact that people can set arbitrary cutoffs and it'll work out in aggregate is pretty surprising.
Roads are generally not controlled or owned by the adjacent landowners but rather the government. Although do let me know if it's different in London.
SpaceX: Delay Is Not an Option: Low Latency Routing in Space
Of course this is all open to interpretation, but in the way we interpret the site guidelines for moderation purposes, "You are trying really hard to obfuscate the issues here" is crossing into personal attack. Note that phrase "crossing into"—it's meant to imply an errant elbow rather than charging at someone. Both are penalties but the latter is worse.

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

Please see https://news.ycombinator.com/newsguidelines.html and note this bit: "Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith."
ML for healthcare. The whole industry is so far behind everything else, it is not even funny. Problem is,
Just like Airbnb or Uber, the biggest road blocks are not technological, they are organizational and political.
It is entirely possible, we might need some major privacy / security related leaps in ML to convince the medical industry to adopt it fully.

ML in movies and rendering. Deep Fakes is just an amateur's tech demo. In a few years, I expect to see render rights actually become a thing. Like, you don't act in the movie, but give a company rights to use a 3d render of you in it.

real time and full time holograms / AR. With remote work becoming a thing, I see a huge market for full 3d renders of the person presenting or even completely virtual AR work places where people check in to work. Maybe not for a decade or two, but whoever builds the flagship product will make a ton of money.
The area of the Circle. I’m led to believe there’s pie in there somewhere.
LogMeIn, Teamviewer, VNC..?
Hmm, pretty brilliant point, to cook it during transport to be ready on arrival.
Definitely complain to the site: an email saying that the site allows possible exploits might get somebody's attention.

But if I still need to allow/use the site, I use containers. Hopefully this gives me some security.
Me third, I would definitely want to read more about your motivation to pursue a PhD. I guess from where I'm at today I don't see the point in pursuing one, but your comments definitely sparked my curiosity!
Depending on where the epicenter is, it may take 1-2 minutes for the S waves (which are the slower, damaging ones) to travel to the major population center. Up to 30s of warning for an earthquake early warning system is enough for people to take cover and for cities to shut off things like water/gas lines. That being said my system is definitely not ready for that, and twitter can be seen as one source of information used to augment other early detection systems.
I didn't say it is easy, just that there is still room for improvement.

So here go my couch coach ideas.

You already mentioned one possible improvement, I don't need to compile with all optimizations turned on on debug builds.

Secondly, combine JIT for development with AOT compilation for release deployment, e.g. Eiffel / .NET Native.

Thirdly, make use of a build cache across crates, including third party dependencies instead of building the whole world from scratch.

Combine that with an incremental compiler/linker, like Visual C++ does, where the team use Unreal, CryEngine, Windows, Office and other similar sized projects to measure build improvements.
Crypto.

And no, I don't mean applying blockchain to everything, or internet money that just goes "up and to the right".

I mean the new applications of distributed systems research and cryptographic primitives that allow for highly composable, highly trustworthy, permissionless, autonomous machines.

MakerDAO, Arweave, the whole field of open finance (aka "DeFi"), and so many others collectively are very likely to change the fundamental assumptions we make when using software.

Here's a great talk regarding trustlessness: https://www.youtube.com/watch?v=G0rZcpfF5dU