skysight-inc/HackerNews huggingface dataset:
This could also happen because of an extension like HTTPS Everywhere, which requests the https by default when both are available.
6 month report: My e-bike ate my car
From what I can see around me,yes 'religion is bad', but it filled a void that science can't fill. A lot of people need some kind of magic in their life and science is too rational for that. When science doesn't answer some of their feeling and they don't want medication to hide those feeling, a lot of people are going back to anyone with an answer that's not religious. "Use some essential oil when you're down" , "listen to the energy around you and you will feel better". And like with any religion, it gives them good and bad stuff. I can't understand what those people need and how some psychic could ever help me with anything in my life, but when you're looking for an answer and you get one that works for you, you will trust whoever gave you the answer. Do you remember the doctor in USA that told his patients that they had cancer just to sell them cancer treatment? Is Goop worse?
It's probably using google oauth SDK https://developers.google.com/identity/protocols/OAuth2UserA... (there's no popup raised if you're already signed in google). You can then send and validate the token on server-side, and create an account there
Either way. Personally, I find it silly that we should change out time keeping because we do things at x o'clock.

If the causes of our schedule don't change, over time we will drift back to the same thing only with a different digit on the clock. Then, I guess we can repeat the shifting excercise.
http://neverssl.com/changes

> I also want to keep neverssl.com ad free, but as it's now costing me about $2,000 a year to host it, […]

Wait, how could hosting a static website cost $2k/year?!
"I explained that I’d never tested it on MacOS... , but I couldn’t see any reason why it wouldn’t work"

Right...
They're probably referring to this study: http://comp.social.gatech.edu/papers/cscw18-chand-hate.pdf
I read it and thought Nigeria was a new language
So what you're saying is if work is already lonely, isolating, exhausting, precarious, with little support, then I might as well go into leadership?
http://example.com/ does deploy HTTPS https://example.com/ - but a redirect from http is unlikely, at least until the .com TLD is HSTS preloaded (and this might not be for another 10 years or so).
100 MB for the Windows for Mac OONI Probe Desktop? Electron face palm
Thank you neverssl. Since reading about it here I have used it countless times!
alias pip python -m pip

then stop worrying about it
from the same page:

> it's just a simple website hosted on AWS

lots of ways of spending a lot of money on hosting a website on AWS. Hard to judge precisely without traffic numbers.
You do realize that conservatives are still allowed to be intolerant, right?

All your attitude achieves is that it ensures that intolerant people never hear real arguments against intolerance that might change their mind, so they go and vote for Trump. What you're doing is leading to Trump's re-election.
Ah well :) Good to know, thanks!

Btw, what does "COI" stand for in this context? That's a new one to me.
right! they need to set up a cloudflare proxy, or have github host it for example.
Bandwidth, maybe? That page is 53.8 KB total. $2k does seem high though.
Looks very interesting, especially the fact that you don’t need databases. Is there any more info om the memory model?
What industry is this in? Lots of signals you should be looking for new position. You don’t want to be last out the door. Control your fate don’t let it control you. Do your search quietly, co ntinue to contribute but focus on new position
Zuckerberg’s Power to Hurt Trump
They might not run a web service indefinitely, nor did anyone ever say they'll not redirect to https. It happens to work just like a random other 90s website might work.
With no graphics
This title makes no sense. Airbnb's change in policy is not the news here. The Guardian's title is much better --- "'Horrific tragedy': five dead at Halloween party in California Airbnb rental". (https://www.theguardian.com/us-news/2019/nov/02/california-p...)

In the BBC article they quote the governor near the bottom:

> Responding to the mass shooting, California Governor Gavin Newsom called for Congress to pass gun control legislation. "This will barely make the news today. That's how numb we have become to this," he said. "Our hearts are aching for the victims and all those affected by this horrific tragedy."

Apparently it will make the news, but only because Airbnb changed some random policy in response.
You're getting downvoted but I wanted to let you know that I emphatically agree with you, but we might be the only two.

Whenever a discussion of this comes up, it seems there are always some "just use xyz" patterns, and usually 3 or 4 xyz or some very new thing someone just released and it always seems contradicts python official documentation. For every python packing question, there are 33 answers. I guess the irony is that there is more than one way to do it.

Use poetry, use prose, use pip, use venv, use vidtualenv, use conda, use --user, pipenv, pipfile, pipy,pipx,anaconda,miniconda.

It really is terrible. Npm gets a lot of flack for having vulnerable packages but do you see how many python fanatics push pip freeze? It allows them to ignore security vulnerabilities. I'm scared of upgrading any dependencies in my python projects because any update is virtually guaranteed to break. I can upgrade npm all day long and rarely encounter an issue. The ecosystem is so radically different.
Great Bitter Lake Association
> Look at the rise of white fascism in America. It grew out of the free-speech open dialogue wild west internet (4chan, 8chan etc) and became so radical that it's racked up quite a body count thus far.

This is incredibly misinformed. White fascism in the US predates the internet[1].

[1] https://en.wikipedia.org/wiki/Fascism_in_North_America#Unite...
Rat glasses
And if you think there are things that need doing beyond RFC7710 (you would be correct) the place to go help/ bring your ideas is the IETF's capport (Captive Portal Interaction) Working Group: https://datatracker.ietf.org/wg/capport/about/
Edge is based on Blink, not WebKit. Remember that Blink was forked from WebKit six years ago. In web time, that might as well be a century, given the leaps that have been made in web tech in browsers.
I wish the industry would move to transistors per mm or something instead of bongus "nm" numbers that are meaningless - 91 to 171 MTr/mm^2 even sounds more impressive then whatever 7 to 5 nm means.
This is world wide surveillance gone mad.

I try to avoid using creepy websites like this.
They built a system where any data set can be pushed in, joined with the rest of the data, and then automatically made inferences off of for trading.
I always used my own IP until I got to a portal that didn't work with that. Now I use a subdomain of my site. Then one very smart captive portal "moved permanently"'d that and my browser cached it, as it should, and on the next WiFi it tried to load the old one's captive portal x_x. Not sure what the solution is for that, it would happen with neverssl or any of the alternative domains mentioned here as well. I guess you'd have to manually type a random subdomain of neverssl or so.
You misunderstood me, possibly due to not reading carefully.

I didn't say find a company that is non-majority white, as in 51% non-white over the whole company. I said find a position in a department that is nearly all female, or nearly all non-white. It is entirely possible to find an IT job for a competitive salary in such a place.

And it seems a little ironic to swipe at people who have never left their country if you can't even leave your city. It's true that I have the perspective of an American, who has in the past answered an ad for a job 100 miles away, and after I got it, loaded a U-Haul and put my car on a trailer, and gone there.

What country are you in other than the US that is so oppressed by the forces of political correctness and diversity anyway? Or do you experience American companies as bringing that sort of mentality in an imperialistic way?
I view everything in the world as a conversation essentially -- there are indeed 3 sides to every story but perhaps a little different than what the general consensus in my opinion

There's what we say, what we mean, and what to intend

The conversation has gotten so mixed up its hard for anyone to know anything especially with people with whom one is unfamiliar and in large groups

Dress is very much part of that conversation and is a great heuristic of where the conversation is going; as a very stark generalization I'd venture that people with advanced dress sense also have advanced conversation skills

Don't get me wrong I'm sure that people exist who don't fit this but that's why it's just a heuristic

And before you mention judging a book by its cover I'm not being judgemental I'm simply stating that humans still need all the help they can get -- we can't all be Kurt Cobains because there are simply some conversations that can't be had in certain milieus
Duh, I don't know how that wasn't implicit in what I said. Are people really reading my comment thinking I'm advocating that bystanders go fly drones into fires, tweet the pictures, and congratulate themselves for helping the firefighting effort? If it's not clear, don't do that.

I was just pointing out the firefighters, you know the people using their sweat, intellect, and long term health to control the fires, just might themselves cook up some use for consumer drones. For which they would then have to convince their commanders, one of the objections being price, and so giving drone manufacturers an excuse to implement market segmentation would hinder them.
I'm not sure that's even true. RFC 6761 says "IANA currently maintains a web server providing a web page explaining the purpose of example domains."

Saying "currently" implies it's not guaranteed to always be true. (Although it's more likely to stick around than a random domain registered by a hobbyist.)
Chromium uses blink which was forked from WebKit long ago.
Ah, the glory days when that used to work with WSJ. I can't even get the freewsj.com trick to work any more.
My solution to this has been to export the library as a bibtex file, which is a built in feature of Calibre, and then use ivy-bibtex (could just as easily use helm-bibtex) to search the library. You need to make sure the file path is part of your bibtex export, but this is easily done. Also make sure you export tags.
Can't do any useful caching for a purposefully cache-busting website
That upgrades to SSL for me
Definitely intentional irony.
Over the years I've read that it is possible to proof code similar to the way you can prove a math theorem. I suspect that it can't be done easily for other than the simplest program but at some point in the future automation will be able to do it for a large codebase.
It is a bit scary we are heading into a future where software will dominate most of our life yet software is very easy to break and breach.
It was probably based on IE which was and maybe still is used to render help pages on windows and probably other things.
The new Edge is based on Chromium (Uses Blink as the engine), so I don't think it will challenge Google on things like Manifest v3.
> Making people outcasts for their shitty opinions is a historically proven method.

Could you give a example of this method being successful? If it's a "historically proven method" surely there are some examples of it being successful.

Lets look at this in reverse. If we (liberals) were kicked off Reddit/Hacker News/Facebook, would you just give up demanding tolerance? Or would you get angry, find/create your own community, and campaign for politicians who support your ideals? If this strategy wouldn't work on you, why do you think it will work on conservatives?
Actually they were more likely to jam. They hit the same place and if you hit a left and right key at the same time, they'd invariably jam, which necessitated going in and manually prying them back free (the keys sort-of fit into each other)
Note: Using port 465 for SMTPS is deprecated; one should use STARTTLS on normal SMTP on port 25 or client e-mail submissions on port 587 instead. Port 465 has even been officially reassigned to the “URL Rendezvous Directory” service.

If you’re worried about man-in-the-middle protocol downgrade attacks, check the DANE DNS record for the mail server (and verify the DNSSEC signature); if the DANE record says to use TLS, but the SMTP connection doesn’t accept STARTTLS, raise the shenanigans alert.
1.1.1.1 might be HSTS preloaded in the future (although not in the near future - there were issues with captive portals[0])

0: https://chromium.googlesource.com/chromium/src.git/+/36b8980...
I'm pretty sure GitHub would require SSL, no?
Well now if you're colour blind you may not know if you're clicking on Firefox or Edge.
If you’re using a mainstream OS that automatically detects standard captive portals, the main reason why you’ll need this is for “tiered” captive portals like the ones offered on some airplanes.

Those tiered captive portals have unique requirements that conflict with OS behavior:

A) By default, they want to offer some limited Internet access, such as accessing a sponsored site (often a shopping site like Amazon) or streaming videos (from some server on the airplane LAN).

B) For premium, paying users, they want to offer (mostly) full Internet access

For this to work, they have to fool devices in Tier A into believing that they have Internet access, by spoofing responses from standard captive portal detection URLs like captive.apple.com. Otherwise, if the network fails the captive portal test, many devices won’t stay connected to the Wi-Fi network, preventing access to the sponsored sites or LAN streaming apps.

At the same time, they want users to be able to upgrade from Tier A (limited access) to Tier B (full access) at any time. So they enable these upgrades by serving a captive portal page... to every HTTP site _except_ the standard OS captive portal detection pages that would affect OS behavior.

That’s when the user needs to visit an HTTP site other than the standard captive portal pages. One like neverssl.com

It’s obviously a fragile solution and is becoming an increasingly poor experience as sites adopt HTTPS, HSTS, and other standards. At the same time, I don’t know of any upcoming solutions to the tiered captive portal problem. Does anyone know what should replace this?
lots of signals like? can you explain your experience with an employer doing this?
Well now that text isn't very helpful, might be cached by any middlebox or endpoint. I expected at least a time like "Yes as of 2019-11-03T19:19:19Z" (I have a subdomain, http://time.lucb1e.com, that does I use for this)
AWS costs add up over time. $166 per month is not bad, especially if it's a high volume traffic site.
Thank you! Now if only this was documented!

Come to think of it, only there was a PIP_DEFAULT_VIRTUALENV_PROJECTDIR variable which would causes pip to look upwards until it found a setup.py file, and then use a .venv directory in that directory by default...
You produce some of the most interesting threads I've read on Twitter. Thanks for sharing as much as you do.

Out of curiosity, why not mastodon? Do you see a path from Twitter to a federated or decentralized service?
I'm curious. What is so unique about perception through weather that ML cannot handle now?
In what timescale though? There are huge differences between the timescales of "realtime" (say HFT), a second later, a minute later, an hour later, a week later and so on. Do they operate at all of them?

I have no specialist knowledge, btw, I'd sincerely like to know!
won’t most bullets end up landing somewhere/on someone usually unrelated to the scene ? Not commenting on authorities being encouraged to shoot more things.

Or was this sarcastic and I just got wooshed ?
It'll on the default install of Windows 10 once 1.0 is formally released. When people realize it's Microsoft Chrome then they'll ditch Google's version of Chrome. It's actually a pretty smart move by MS as they'll quickly become the dominant browser again.
It didn't for me (over ipv6, not sure if that makes a difference).
Shortest SSL-free domain I've found is "x.com". Also works for email. Apologies to x@x.com (sorry Elon!).
I think its pretty hard to not understand your joke.
> “Paying based on SF/NYC rates seems ... dumb.”

Interesting! SF & NY based companies do it all the time.
I can totally see this confusing less technically literate people. I think too many people are trained to just click the blue E.

I think I do like it. I think it fits what Microsoft is trying to do with their design scheme.
Funnily enough, I've once heard the quote: "A good compromise is one that leaves everyone unhappy"
Egghead-Hunting: How Silicon Valley Woos Stanford Students
The most valuable vinyl records you may have in your collection
Most comments say it either looks like Firefox’s logo or Chrome’s. I think it’s kinda both.
yes, but where would you get that hash from? Unless there's a trusted computing unit with an encrypted enclave, you can't prevent the user from also creating a matching hash.

I say it's better to use the rule of law - make drones registered, and licensed. If you fly it and got caught doing no-fly zone, you get punished.
That study shows that bigots didn't move from r/fatpeoplehate and r/CoonTown to other subreddits.

That study does not show that bigots simply disappeared or became less bigoted. Nothing in that paper indicates that the bigots didn't simply move to other online communities (i.e. Voat), or take their bigoted conversations offline.
AMD is having its day
USB-C includes a USB-2 management channel in addition to the high-bandwidth lanes. It is used for things like advanced power delivery negotiation. On the Raspberry Pi 4, the USB-C port has no high-bandwidth lanes, and it only uses passive power negotiation.
Are there any plans for a newer version of WiFi to fix the need for this sort of hack?
Doesn't work for me, seems to fail to resolve. https://i.ibb.co/KmBk7DB/Screenshot-20191103-002332.png
Captive Portal: The Definitive Guide
Ooh good times :)
Well..

It's nonobjective in that the title guidelines carry subjective judgements.

Its' nonconsistent because of the previous problem.

It's unintuitive for the reasons you described above.

I think the reason it sticks in my craw so much is what I'll call the "rake to the face" phenomenon. Much like stepping on a rake in a dark shed and getting whacked in the face, it's usually surprising, usually unexpected, and usually painful (though mentally rather than physically.. "where did that article I read earlier go? No way it got flagged off.. Oh, there it is, they messed with the freaking title again. That was a waste of 5 minutes.")

This is worse when a descriptive title that actually calls out why someone should be interested in the article is reverted to something generic, which IMO, actively makes the site worse in furtherance of The Rules, which is never a good thing.

----

That aside.. If I could float a feature request that doesn't require any rule changes? Put a [*] or some other signifier next to titles that have been modified, and have it grey out over time (kinda like how comments get lighter and lighter as their score falls) and eventually disappear. Per your own search example, title changes are rare enough that there likely wouldn't be many on the front page, and it would give people like me who lose track of renamed articles a place or two to look.
Research suggests happy employees are good for firms and investors
Author's advice: type a dozen more characters.

Your advice: forget whatever brought you to Python and start from scratch.
They are in fact entirely parallel Wikipedia encyclopedias written in different languages. Not only will articles have different information and be organised in a different way, whole families of related articles may be organised in different ways from one language to another.

This seems pretty reasonable seen for the whole encyclopedia, but I suppose if you assume that the language change option will just translate the page you're currently looking at then it's quite a surprise.
That is not the case in the Maria fire. Take a look at the map to see how close the fire came to Santa Paula: https://vcoes.maps.arcgis.com/apps/View/index.html?appid=24d...

In many of the fires we have here in the CA central coast, air support is absolutely critical. Especially when there are Santa Ana winds blowing down the mountains towards civilization.

When a fire is reported during the high fire season, the standard response is: “four fire engines, two bulldozers, two hand crews, a water tender, two air tankers, an air-attack plane and a helicopter, plus a battalion chief to run the operation”. https://www.noozhawk.com/article/with_recent_rains_santa_bar...

We take fires very seriously here.
How about we attack organic first.

That's snake oil worth billions.

People so rich they add arbitrary constrains to their food.

It's a bit pointless attacking Goop when large parts of the population already believes in junk.
Click Travel | Remote (UK only) or Birmingham, UK | Remote or Onsite | https://www.clicktravel.com/careers/engineering

Click Travel is one the UK's fastest-growing tech companies - committed to improving the business travel experience.

In Product Engineering, we work in cohesive, autonomous teams, collaborating closely with stakeholders from across the business to develop our own backlogs. We frequently ship quality code to production, delivering value to our customers in a timely manner.

If you would like to find out more, take a look at: https://stackoverflow.com/jobs/companies/click-travel-ltd or https://www.clicktravel.com/careers/engineering/

Some of our open roles:

Engineering

- Node.js Engineer: https://clicktravel.recruitee.com/o/nodejs-engineer-aws

- Software Engineering Manager: https://clicktravel.recruitee.com/o/software-engineering-man...

- Systems Engineer and Architect, AWS, Engineering Enablement: https://clicktravel.recruitee.com/o/systems-engineer-and-arc...

Product

- Product Manager: https://clicktravel.recruitee.com/o/product-manager

- Product Designer (UI): https://clicktravel.recruitee.com/o/product-designer-ui
Haven't used Python in a long time, but last I remember, pipenv was the tool of choice. Frankly, I'm overwhelmed by all these choices. Does Poetry, pipsi, pipx, pipenv, and pip + venv all accomplish similar goals? Is it just a matter of preference?
Send a shoot of water on a lithium fire?
The story here, once again, is guns. Ease of access to guns is what results in gun violence. Whether or not someone can rent a house to throw a party in is completely insignificant.
N5s being optimised for high performance computing off from the start (Ratber than only mobile) look like just the kind of thing an Arm MacBook would use.
Firefly Health | Software Engineers across the stack | Boston, MA | Full Time | Onsite | https://firefly.health

We’re reshaping what great healthcare looks like by marrying sophisticated technology with a thoughtful care team experience for convenient, continuous care that changes behavior and drives value. Our platform enables people to make smart choices about their health, while allowing clinicians to provide unparalleled, consistent and proactive care.

Based in Boston, we’re founded by experienced physician innovators and technology entrepreneurs and just raised our Series A from a great group of investors. We’re a small engineering team and are looking for engineer-owners across the stack who are excited to directly partner with our doctors and care teams to build a reimagined healthcare experience.

Tech stack includes Django/Python, React/React Native/Typescript, PostgreSQL/Elastic, Docker/AWS.

Feel free to email at martin@firefly.health or visit https://firefly.health/careers.