skysight-inc/HackerNews huggingface dataset:
What are the options for playing old Flash apps - on desktop and on mobile?
I've been running https://kriptode.com a bunch of services that run with Bitcoin on Lightning.

Most popular is http://sats4likes.com where you can earn/pay Bitcoin for twitter likes.

It's not exactly passive or profitable but I learned a lot.
And if there is a data cap, it should be proportionate to the data bw plan I am paying for. I had a 100mb/s plan with a 1TB cap. I moved to a 400mb/s plan and I still have a 1TB cap. So I can burst faster, but my overall usage is expected to stay the same.

That said, I do most of my downloading on VPS provider, then what I finally want to keep, I compress and pull it down over my VPN. This still doesn't help for things like streaming movies, game updates, etc...
Wow, that is hard to read on my screen :)
Google has neglected their calendar product for almost a decade. I wouldn't be too concerned.
Bazel is worth looking into as soon as you have dependency graphs that your language's native build system can't deal with efficiently, or you have multiple languages that have dependencies on each other's artifacts.

A pure Go codebase? Not worth it.

Personally, I use Bazel even for small projects as soon as they involve things like generated code or gRPC.

Yes, there are multiple rulesets for deployments, like rules_k8s[1] and rules_docker[2]. Of course, you can easily build your own custom deployment pipeline.

[1]: https://github.com/bazelbuild/rules_k8s

[2]: https://github.com/bazelbuild/rules_docker
How Can California Be Left in the Dark?
I will take what is automation really is for 1000.
Without going into extreme depth A sphere is a 2D manifold since any point has a neighbourhood that looks more or less like 2D space.

A ball is like a 3D manifold for the same reason, but it also has some points where you don't have a neighbourhood that looks like 3D space but rather one that looks like half of 3D space. That region is the boundary, so to be exact a ball isn't a 3D manifold but a 3D manifold with boundary.
Why do you think that React is absurd?

I’m not a Rect developer myself, but it is always interesting to listen to others experiences with it.
High density being expensive and getting those rents shows there is demand: we should be building more of it to fill demand, and in turn bring prices down.

In less dense areas the car shines above anything else. However in those dense areas where people have shown they want to live cars are too big and we need something else.
I would be willing to bet there was a large cash payment from Epic for exclusivity, in addition to the smaller cut.
Orders come and go inconsistently since almost all of them come from referrals and/or organic site traffic. This does result in a wide range of requests which keeps things interesting.

Basically all of the work is in the beginning then it’s just subscription based for the automation refreshes (or an agreed upon amount if services are continuously running) and any minor updates.
Interesting. Here's some counterpoints.

1. Can it be considered "modified enough" to be considered derivative if it's the original file, plus some Javascript to provide a pop-up notification?

2. These MITM alerts are typically customer-beneficial and customer-relationship-oriented; the purpose is to alert that the user is getting close to a bandwidth cap. Similarly, there's current talk of somehow making ISPs or service providers deliver EAS alerts. Comcast already has to do this for EAS alerts on its television service. Does Comcast violate copyright when it interrupts a television program to show a federally required EAS alert?

3. Captive portals are a well-established instance where a page requested is not what's delivered. No one is accusing them of copyright infringement.
That happened at my house (though with a different species). I closed the shade, which disrupted the reflection, so that the bird would not harm itself or waste its energy unnecessarily.
> I believe Flash and Java Applets both made the same fatal mistake: tried to be an entire virtual OS. That made them too complicated, which invites hackers.

Let’s be fair here: every major web browser also implements an entire virtual OS by this metric, probably even moreso than Java or Flash ever did. Yes, they absolutely do invite hackers with their absurdly complex designs, but advances in security-in-depth have made them fairly hard targets (not invulnerable, though, as Pwn2Own demonstrates annually). Flash and Java never really had enough attention paid to real, in-depth security engineering by comparison, and browsers learned from those lessons and improved. The JavaScript engine and API scope in a modern browser is easily multiples of what you could access from ActionScript in Flash, but the security is much better.
The blind spot is in using legal violence to coerce people into being "considerate" of people with disabilities. Assistive accessibility is a god damned gold mine for whichever company solves the problem in each industry. Flash's use on the web led to far more good things than bad, and this one bad thing is really just being heightened because the media places falsely high emphasis on being worried about people with disabilities.

The fact is that we have many, MANY advocates who are all a lot nicer, more helpful, and more effective than Washington, DC.
This only really goes to the "don't entirely trust their statements regarding their product being the only effective barrier" part of the story. Reputable anti-virus companies do have a huge conflict of interest reporting on viruses they find and can tackle, but they also remain an important source of information about viruses. Disreputable anti-virus companies sell product which could be as simple as a "hollywood OS" green stripe animated GIF which says "virus cleaned" for all they really do: they probably install more malware rather than removing any.

Also, an anti virus company saying they can't understand how a virus remains infected after removal is interesting.
I made a generalization so there will be counter examples and I appreciate that some stocks/sectors will have attractive dividends. I would put REITs in the expensive dividend-focused sector...

The main issue I have with a dividend paying stock is that they pay corporation tax and then I pay income tax on the dividend....with a group which re-invest its earnings, I do not pay income tax on that and if I need cash, I can sell stock and pay capital gains tax at a lower rate.

The main issue with dividend stocks is that when the dividend gets cut there's forced seller by the dividend ETFs and stared retail investors so the drop in share price gets exacerbated which is unfortunate.
it's not a IC->manager transition. Many people in my SWE community are in a similar role as me- senior or staff SWE, usually tech lead, but not manager. Manager role is very different from "advisor of junior SWEs". Some overlap.
How to Run a City Like Amazon, and Other Fables
If the business model is to use an internet app to run a payday loan operation targeting low-income poor credit borrowers it is unethical in my option.

It is the dark side of the internet.

We need to work to build communities where people are not as vulnerable to this type of scarcity.

For more information on this topic see the book: Scarcity: The New Science of Having Less and How It Defines Our Lives
Good point.

Perhaps a PKI-based federated system should be deployed, even if adoption were on a state by state basis. I assume most states would adopt it, given the benefits we can think of ourselves.
Same. They recommend opening the app in IE :(

They also told us that replacing it is "on their roadmap," so we replaced Kronos.
... and they chose not to. Which is one of many, many reasons why their products have fatal flaws in the eyes of many.
No.

In general, there is a sense among Python coders of at least concrete schools of thought for these kinds of abstractions. Java certainly is looser, since it never clung tightly enough to 'pure OO' principles. Rust is young, and - I expect - is still developing its standard idioms and common abstractions, though it has certainly settled on a broad swathe of it already, and holds strong opinions on what good Rust code looks like.

If I asked something similar of Javascript, you would see very little commonality between people. It's designed as a Self-y language with functional leanings, and gives far too unopinionated and broad a leeway to nudge its developers in any one direction. Furthermore, early browser APIs for JavaScript - especially when it came to features like window and cookie interaction - pulled the rug out from under every reasonable abstraction the language could have been geared towards, choosing unreasonable over reasonable abstractions.

This leaves the language where it is now - incohesive, incoherent, unsound when it comes to stitching multiple parts together, because each developer behind each of those components has a wildly different perception of how the JavaScript world 'ought to work'.
Everything You Need to Know About Shaken/Stir
Because defaults matter, very few people opt-in to anything and therefore opt-in metrics are by definition biased and useless.
It's not just the gravity. On the moon, you have to deal with 2 weeks of day and 2 weeks of night, which means having to deal with wide temperature swings and if you rely on solar you need very large batteries.

Mars also has an atmosphere which contains CO2, which is useful for making methane. It also has a lot of water. (The moon has water too, though it may be less abundant/accessible.)
Scale, scale, scale. There are FAR more rock climbers, and FAR more people climbing El Cap than in the past. With ALL of those rolls of the dice, you're bound to find a prodigy like Honnold (or Beethoven or whoever, pick your field+prodigy).

More people, more scale, more chances at finding prodigious talent.
It's subseqence. For instance, in

ABXCDYEFGZ
QARBCSTDEFG

You want to find [Q]A[R]B(X)C[ST]D(Y)EFG(Z)

ABCDEFG is the longest common subsequence, QRST are the additions and XYZ are the deletions.
> Switching to English is way overblown a reaction. Two Hungarians chatting in English (unless there are non-Hungarian speakers involved) seems extremely weird to me. It may be partially that English is really foreign for us, while it's pretty close linguistically to Swedish, both being Germanic.

For what it's worth, I have a Swedish friend who almost always posts in English, even when he's talking to his family and other people he knows in real life. He'll switch to Swedish occasionally (and Facebook's autotranslation is very understandable), but 90% of the time he uses English.
This is a valid work around for an invalid problem.

If your ISP is tampering with packets, that is the anti-pattern that needs to be remediated ASAP.

In my opinion, the only packet change behavior that an ISP should be involved in is adhering to QoS headers. 0x08, it's bulk. 0x04 reliability, 0x10 low latency. And if they want to charge me more for 0x04, that is fine if it's clearly spelled out in the contract.
Information is still information. Sure I hate having to deal with flash, but if that information I need is nowhere on the web except this one flash or pdf deep down the interwebs, I will take a look.

I'm all for downranking it to the last page, but when your google results only has 2 pages total, every single result matters, including that flash content.
Cloudflare Security Notice for Users of Workers KV
Cloudflare just sent out this email to customers:

Dear Cloudflare Customer,

We're reaching out to make you aware of a Workers KV vulnerability, and the details you'd need to determine if you were impacted. We do not have reason to believe any Workers KV customers were impacted by the vulnerability, but we wanted to disclose information in an abundance of caution. This only affected users of Workers KV (about 0.034% of Cloudflare customers) and not other Cloudflare products or customers. You are completely unaffected if you never made your Namespace’s ID public or available to a third party.

Summary: If you made public (for example in source code), or gave a third-party access to, a Workers KV Namespace’s ID (which is an unguessable, random 122 bit value, a UUID4), the third-party could have used it to read or modify content in that Namespace.

Remediation: We have fixed this vulnerability. After receiving a report from a security researcher, we were able to confirm the existence of the vulnerability on October 14, 2019 at 12:53:21 -0500 and we prepared and released a patch which was completed that day at 16:45:38 -0500.

Impact: We have reviewed logs going back at least 30 days for API access and one year for direct access and there was no abuse during those time periods. While we believe any earlier unauthorized access is extremely unlikely, we are erring on the side of caution and sharing this information with you.

If you made your Namespace’s ID public, you may wish to review the information stored in your Workers KV Namespace and take action to secure any sensitive information. For example, if you were using Workers KV to store access tokens, you may want to expire and rotate them.

Cloudflare works closely with security researchers through HackerOne. We are grateful to the researcher who found and reported this vulnerability, and we have paid a bug bounty. We care deeply about security, and we regret any inconvenience this may cause.
The person who coded this cool and nifty website [0] is discriminating against someone for not making a webapp that a screen reader can parse adequately?

https://www.adaptivemobile.com/spamglobe/

If so, you are - by definition - a jerk.

Worse, you think this kind of site would be in violation of the ADA and would subject the creators of the site to legal repercussions and/or litigation?

If so, you are - by definition - insane. Not to mention, illiterate.

More likely, you are not either of these things, but you are instead blinded by an exaggerated sense of concern/worry over this issue, largely impacted upon you by the media you consume. As someone who suffers from a disability which falls under the ADA guidelines, this comes off as being incredibly stuffy, ignorant, and tonedeaf. You're not doing us any favors with your insufferable inability to detach law and life.
Well the TLS change breaks software (FF 26) (2015) and affects android versions <= 19 (2014). Kind of a bummer if you have old smartphone. But I agree, it's a tiny bucket and it's best to upgrade when you can.
One hundred times, THIS!

The layout engine in flash was REALLY well thought out, and allowed for simple constraints that would allow for things to grow or shrink based on screen size. You could anchor buttons and they would move properly, all without having to worry about things breaking across browsers.

If someone would re-implement just this feature along from flash i would be REALLY excited to use it!

So far i dont think there is really much in the way of "constraint based" layout engines that are easy to use for the web is there?
Ah, thanks for the clarification. I didn't read/parse your original comment properly.
You know that statement, the plural of anecdote is not data?

Lots of people struggle and what you're describing is just crab bucket. You struggled so you think it's okay if everyone does.

It's not.
I don't know, many people seem to love it. For what I've seen and the crazy amount of repos we have with ansible scripts and yaml and crazy string problems I'd say I completely hate it with passion. But I'm not really into the devops side of things, so maybe you need to get much more deeper into it to "appreciate" the insanity of yaml files and multiple repos.
> we should be building more of it to fill demand, and in turn bring prices down.

That's not really how construction works in the US. All construction generates higher prices than existed before (this is explicit intentional policy, at both the local, state, and federal level).

There is no such thing as new housing in the US that lowers property values, therefore there is no such thing as a new building that lowers "prices". No one does this (except perhaps, non-profits and such). And even if you wanted to anyway, no bank would ever finance it.
> I use a third-party IME that is relatively known among programmers, and early this year Google Chrome began to crash seemingly at random when you type Hangul

I'm aware that third-party Chinese and Japanese IMEs are a thing, but what user-facing difference does the third-party IME you mention provide in the Hangul context?
The blob is just the JDK + Bazel + a wrapper binary. Just use their regular build artifacts instead if you want to bring your own JDK.
Ansible's ad-hoc is the thing that you can learn really fast. No need to dive into the all this idempotent paradigm or try to fully grasp the architecture of your configuration management solution to do the basics (looking at you, Chef). Just need to update sudo on 30 boxes? CLI and inventory file - that's all you need.

On the other side, do stuff like this all the time and you'll start to think that Ansible is just some kind of distributed shell executor on the steroids. Absolutely not. While other CM solutions tend to strictly put you inside their way of doing things from the very beginning, Ansible gives you the freedom about how you use it. That's why Ansible is a way to go tool not only for serious infrastructure engineering, but also a good helper for any IT-related tasks.
At least they said what they actually thought and opened a discussion instead of spewing one of the standard canned PR statements. The replies are a pretty good source of arguing against the position he took and now can be referenced by anyone else having a similar discussion.
Where people live is always a compromise. I want my mansion on 100 acres within a few meters of New York's subway (any station), and no more than 20 minutes from my job (in the midwest - I'd have to average 3x the speed of sound to make that trip time). The above of course is impossible, even if you are the richest person in the world.
I have a hard time imagining a judge taking a sympathetic ear to this defense. Do you happen to know if there's relevant existing case law on this subject that you could point me to?
Another great one is this documentary of the Fitz Roy Traverse by Honnold and Caldwell. It’s a high alpine adventure rather than a free solo, but it’s a different sort of amazing achievement to watch unfold.

https://www.redbull.com/int-en/episodes/AP-1MQAPEZX91W11
I loved this article.

One other aspect I think it omitted, likely to balance brevity with scope, is about standard deviations.

When you only have the most rich and privileged doing a sport (e.g. travelling to summit mountains) the "best" will be selected from a relatively small pool of candidates. As an activity gains popularity, and as more people have the means to pursue it, the pool of people for "best" grows and it's no surprise that the max of the distribution increases.

There world's population has grown 2x since 1957 when El Capitan was first submitted. The number of people doing fitness in their free time, I'd suspect is up 10x or 100x. This is double true for activities like Chess or Olympic sports where nation states have started searching for talent in wider and wider ways.
What is a cache stampede and how we solved it by writing our own gem
In the 1990s, only the vehicles used on the observatory property were antique diesels. The people in the surrounding area drove normal cars and pickups. I imagine it is still the same.
There's nothing odd about that, right? It's called "airplane mode".
I'll just leave this here

> Where macOS tended to perform the best was with the Firefox web browser benchmarks
Potential use-case for you:

I prototyped (but did not fully implement, no management support) test case generation using Prolog.

In our case, it was (grossly simplified) a messaging system with a well-defined protocol running in an embedded device. When some message was sent, we anticipated a response back within some time window with some content based on what was initially sent (NB: This is only one of many potential scenarios). Let's say that some complex computation is happening on the remote end, based on the series of messages transmitted you eventually expect a response that will be the result of computation on those inputs.

You could manually calculate what that response should be, which fundamentally limits how many test cases you can generate and potentially leads to biased tests (assumptions of system behavior or design by the testers), or you can do it automatically. In our case, Prolog (or something like it) could be used to model the system and generate arbitrary test cases for us. It acts as the oracle (if you're familiar with property-based testing, this is where I was heading with my effort). You can now use Prolog to generate arbitrary input sequences with a known output (depending on the fidelity of your model to the spec) and generate test sequences for your system and compare the output.

And if your Prolog model is sufficiently developed, it can also be used for other development/testing efforts. If you get some response, what series of inputs may have produced it (this may be computationally infeasible, but maybe you know or can assume some of the inputs to constrain the search space). Or if your manual testing (throwing bodies at the problem) results in unexpected behavior, you can check what the model produces using the recorded inputs. Perhaps your system performs correctly, but the tester or user's mental model was incorrect. Or perhaps they found an actual implementation error.

A nice thing about using Prolog, vice using a second "reference" implementation in a more traditional language like C++, is that the Prolog model is often much simpler than the full system being developed, whereas (for us) a reference implementation would've been of comparable size. In our case, it could be the difference between 10k lines of code versus 100k lines of code.

The downside of this Prolog approach is performance, a C++ reference implementation may be able to run in real-time (or close enough) and could be directly substituted for the unit under test to verify other aspects of the test rig or system. Or, in a multi-system test, a reference implementation could be used in place of "real" remote systems (due to cost or other constraints).
The Video Sequence Editor Resurrected
WhatsApp blames – and sues – spyware maker NSO Group over its zero-day exploit
If you make little enough and live in a major metro area its pretty easy to burn through any savings you have. I have several friends now in their 40s now that used to continually cycle the steps of: lost job -> spent savings -> debt -> got job -> payoff debt -> generate savings -> lost job -> ...

At some point they just lost hope. I can't blame them for racking up debt if the system lets them continue. It sounds better to continually pay off debt and enjoy life instead of to continually pay off debt and not enjoy it.
Interestingly the commit history wasn't amended [0], so it is still technically possible to download smelvetica.

[0] https://github.com/tholman/smelvetica/commit/83eadad7edf1878...
Having once met Jeff and had an all too brief chat, I am happy to confirm that he is just as nice a person as I imagined him to be.
I invest in large industrial real estate ($2-10M) with established tenants (often publicly traded companies) in the Midwest with a group of other investors. It's kind of like Fundrise [0], but with a handful of people in a 2-3 deals a year. With ~180K invested, I'm around $1750/month in positive cash flow.

0. https://fundrise.com