skysight-inc/HackerNews huggingface dataset:
I have found similar joys in using Blazor. Once you get past the boilerplate stage, the productivity gains go exponential very quickly. Component reuse + strong typing + no API controllers or JSON contracts = how web development should have always been. I've got elegant LINQ statements right in my component markup. Creating extremely complex tables and views is so trivial with this combination of technologies. I can even subscribe my razor components to CLR events and everything works exactly the way you'd hope it would. The SignalR link between client and server abstracts away a huge bucket of questionable practices, with some potential trade-offs. Perhaps there is some downside I haven't found yet, but at this point I feel I could live with whatever strangeness might begin to emerge from the path I have taken.

In my experience, it is not possible to completely eliminate JS from the equation with Blazor. I've had to write a single .js file which I currently use for 3 things: Reading a cookie, writing a cookie and focusing an arbitrary DOM element. The focus concern I could probably alternatively handle with an autofocus attr which is dynamically inserted into the razor component, but somehow this seemed easier. Cookie or local storage interop requires JS. This is a very simple bit of code to write, and I would strongly recommend implementing it yourself to become familiar with Blazor component lifecycle events (i.e. how you make sure this JS shim is loaded into DOM before invoking its methods).

I've been wanting to create a public GitHub repo with a more practical Blazor boilerplate app that might help others get started with this kind of concern a lot faster. Perhaps something like an LDAP-authenticated business operations dashboard. Seeing an actual cookie session token read/written and how all of the code flows for session management purposes can save days of frustration. I already see some options out there for Nugets that claim to handle Blazor session management for you, but in my experience these almost always get in the way and force techniques upon you that you really didn't want to work with. If you find yourself reading the documentation for a CookiePolicyOptions or ClaimsPrincipal type, you probably went too far down the rabbit hole.
Yeah I have to agree with this. If you're savvy enough to setup your own close-looped surveillance system then you're savvy enough to check if the camera is pinging home to a China-based server. And if it is then just block all WAN connections from that IP.
That's not how it works. You can't make a baseless claim then require everyone to prove you wrong.
Ask HN: Does a strong editor improve language adoption?
Does having an IDE for a new language matter?
Does it help with language adoption?
Do you bother investing in a language that doesn't have a Language Server Protocol ( LSP ) or mode for your favorite editor?
Does a tightly coupled set of tools help elevate a new language above others?
Should a language "win" even though it doesn't have these tools but just because it is "good"?
This is what I use. Eight cameras with an on-premise NVR (Cloudkey Gen2 Plus). Works great.
For real reproducibility you want to go a step further with a virtual machine or something. Freezing your python dependencies won't shield you from changes in your C standard library or differences in vector extensions or whatever. In practice, most codes shouldn't be so fragile though if dependencies are reasonably well behaved... Otherwise how can you even trust that the dependency is giving a reasonable answer?
VAIO used to be a symbol of quality and status, as well. Really great laptops, how did Sony let them get so bad... They sold the brand, too.
Instead of taxing productive things, taxes should be applied to things that are environmentally destructive.
> Games don’t last forever and get obsoleted by newer operating systems.

That doesn't excuse it now failing to run on Windows 7.
I'm going to guess you're on the capitalism is the cause, true believer, scientism crowd..

Here's someone who can provide a healthy amount of skepticism..

https://judithcurry.com/2019/12/02/madrid/

Of course, don't let skepticism stand in the way of your belief system, but i highly suspect that'll be a problem for you.
Where is the story hère though? So they looked retroactively and found some models in the past that fitted with current observations even though they had no clue that China would become such a powerful force in terms of CO2 emissions?

If you run random models and wait long enough you will always be able to find at least one model that predicted the current observations. That does NOT mean the models were right, it means that you are basically ignoring all the other models that made bad predictions. So in order to make a headline out of this you would need to make a extensive review of all the models we had back then and found out HOW MANY were actually not bad.

Would not make that much of a headline because you would find most models were bad. Anyone involved with forecasting will know what I mean.
I had some issues with ZM so ended up going with Shinobi, they are pretty new to the FOSS security system space but so far I'm liking it a lot.
--We do know the global is getting warmer and action wasn't taken, and it's too late, but I'm in my compound with my guns and my family and we will shoot climate refugees and protestors if they get near. Tough luck, might makes right.
There has been sea ice in the Arctic for well under 50% of the planets history.

Life thrived

The Sahara desert was a grassland 5000-10000 years

Life thrived.
Indeed there is a large amount of ambiguity in my statement. The aforelinked spreadsheet answers them.
Their business is selling pictures of "orange juice" to people who need pictures of "orange juice."

Sometimes people use their images without paying the fee.*

How is that entrapment?

* this is separate from issue of bogus requests to people who didn't copy their images without a license.
"Default install" would be the key phrase here. By that metric, no need to update the tagline; smtpd doesn't do much by default, and SSH has other safeguards, so apparently a default install wouldn't be substantially impacted.

Still sucks for those of us who, you know, actually use smtpd on OpenBSD as a mail server. Thankfully it's just my personal one and I can afford to comment out the line(s) that actually enable outbound SMTP relaying, but still.
The clearest models should be: what the world looks like when all ice and permafrost are melted, and how we plan now to be able to cope then.
Hah. I don't care how good your software and individual wheel control is - if even in the perfectly optimized situation you exceed the friction limits of all four wheels, you will slide. And if your software will not allow wheels to slide, then you will have reduced braking. Either way, you won't stop nearly as quickly as you want.

What people fail to realize, particularly in slippery conditions, is that it's often much easier to gain speed than to shed it. Modern traction control systems make it more (too) easy to gain speed without equally making it easy to shed speed.
How do we convince China and India to lessen their CO2 production in any meaningful way?
Twitter New Privacy Policy
Part of the confusion was because I see the English title's As are actually Λ (capital Greek lambda), rather than Л (at least in the font that HN uses). I'm guessing from context that Л is sometimes rendered as Λ in some Cyrillic fonts.
Pretty tough to overcome momentum absent friction.
I'm not sure to what extent "rebooting our entire computing infrastructure" is necessary. Current OS efforts with capability security include SEL4, Genode, and Google's Fuschia, but Cambridge's Capsicum "hybrid" system adds capability primitives to the POSIX API. (Their CHERI capability hardware recently made the news with funding.)
What is super frustrating is that the industry has talked the Swedish government into puting a tax on all media (harddrives, usb memory, CDs, tapes and so on). This tax is supposed to pay for private copying, a leftover from the mix-tape days. We still pay this tax on all media and it goes directly to the industry but we still can't copy media between friends because of DRM. In general DRM should not be allowed here.
"Everyone hates picking priors in Bayesian analysis."

Everybody hates searching for their keys in the dark.
I believe the idea is that once the rheumatoid arthritis pops up suddenly and lasts for weeks, it's easy to jump to a conclusion it could be the beginning of the chronic pain from Lyme disease, and that you just didn't find the tick, etc.
> The root node here is "X's key" and it is used to sign a domain cert and also a document. It's semantically wrong for the browser to pretend that the document belongs to the domain

Browsers "pretend" exactly this every time they download a page via HTTPS. It's how HTTPS works. Did you think that they trust that the content comes from the correct source by just doing a reverse DNS lookup on the IP address? They don't. Instead, they check a signature from the web server against their cert keystore, and if the PKI signature check fails, you get a big scary warning that the connection isn't secure/private. The same thing would happen with SXG based content if the signature didn't match the keystore, except the signature to be checked is carried with the content itself, just like with PGP/GPG.

> Even app stores don't do that - if you download a signed app from any domain, it won't pretend it s downloaded from apple.com but it will report that its signed from Apple Inc.

I just checked an iPhone, and they appear to attribute an app to the creator, not Apple, Inc.

But the reason they don't show a download domain is because consumer iOS apps can only be downloaded from Apple, from the App Store, and nowhere else. Adding the information about download source information to the iOS UI would be totally redundant as the value would always be 'downloads.apple.com' or whatever.

If you look at the actual cert signing procedure for iOS apps, the configuration step includes the domain, which is why Apple can associate an entity's apps with it's https websites. Nonetheless, the apps are still signed by the app's creator, not Apple, and the app's creator is responsible for securing the private keys [1]

> The situation is not analogous anyway because there are very few app stores from 3-4 highly trusted corporates.

Why should only the 3-4 big corporates be the only entities who can sign or distribute apps or static web content? They are not the only entities capable of securing private keys. Banks do it all the time, as do individual app developers (note the warnings to app developers about private key management on Apple's website). They are also not the only entities capable of distributing content. App and content stores can provide many other services of added value, like aggregation and curation and payment systems, but signing and distributing content isn't one of those services they can uniquely provide.

You could even argue that distributing the ability to sign and distribute content away from the big corporations reduces single points of failure and makes the whole content distribution ecosystem more robust and fault tolerant.

1. https://developer.apple.com/support/certificates/
It does seem like survivorship bias could be a factor. The article talks about how some of the old models were off until they "corrected" them. All right, and did they apply the same scrutiny to the apparently "correct" ones? "All of the models predicted this (except for the ones that didn't.)
> Every ARM based PC I've seen has been disappointingly slow

Most recent ARM PCs were explicitly low-power low-performance. That was the goal, not a description of the architecture. The mobile part pretty much confirms that.

The ARM chips that Amazon is putting in the servers is nothing like what you'll find in a consumer arm laptop.
I agree recovering CJK Unified Ideographs encodings would be far harder than a phonetic alphabet, however a few things could make not as hard as it seems. The decoder has access to a text in both the future format and UTF-8. A text might mix phonetic words and ideographs as Japanese sometimes does today. The phonetic words would provide clues as to the ideographic characters.

Code breakers have decoded ciphertexts which used a code such that each word was replaced with a number. To make it even harder common words would be replaced by more than one numbers to defeat common frequency analysis techniques. This was done often with pen and paper.

Yuri Knorozov managed to decipher the Mayan script. That was a significantly harder task than recovering UTF-8 mappings because he has very little to work with on the source language (he did have somethings).
I got 3 Axis cameras, they are great. Luckily they were gifted to me as it would have run me several thousand dollars to purchase myself.
Reversing Brain Aging by Fighting Inflammation
It's basically ABS, but with more "vroom".
UniFi gear remains optionally self-hosted. It does have the option of cloud login, but you can opt to not use that, using a self-hosted NVR and SDN controller.

Almost all high-end gear (Axis, etc.) is also easily self-hostable but obviously expensive since it's high-end.
Picking on you a little, but I see lots of comments like this one on HN: Unsourced, industry inside knowledge, stated authoritatively, confirms my biases and fits into a narrative well known amoung the kinds of people who read HN.

I'm not really sure what the solution is. Thoughts?
Most people are interested in a particular subset of life thriving.
That's literally what OpenBSD was doing over decades,

starting with binary compatibility

with Linux and a lot of legacy stuff

which came from NetBSD and BSD 4.4 lite/BSD 4.3.

You described OpenBSD with that comment.

- Xenocara with rootless privileges as a fork of X

- LibreSSL

- Linux compat going away

- Pledge/Unveil

- Some daemons belonging to ports

- HTTPD/SMTPD and so on as replacement of bloated daemons

- OpenSSH itself

- Retguard

This vulnerability is bad, but pledge

and unveil will have even

more prominent roles in base soon, so even

if you get privs, you can do either nil or
just crash because of pledge.
Get You Own DeepMind MuZero in Python
my question is how do you make sense of a seemingly endless stacktrace? (really curious, it's some time since i did something in java)

Another problem i had with java: most projects are impossible to understand by looking at the source code, as they tend to do things like Spring or EJB: with delayed loading where class names are specified in some configuration files - and it is often hard to figure out how the system is initialized.

That leads to another question: Is it possible to learn about an unfamiliar java project from source code in this day and age?

i mean they used to say that perl is a write only language; but enterprise java isn't very readable either.
Do you need it to contact your phone and show the video in real time? I think that's the big value prospect here for many users and why they need the cloud - it intermediates between the phone app and the home system.

If not, there are some guides on YouTube (unfortunately I can't search right now on this corporate network) that involve buying old laptop cameras on ebay and stringing them up with putty to an old laptop in a closet. I'm pretty sure the man in the video I'm thinking of was from the UK since the prices were in pounds, but there would be others. It all looked fairly simple but I can't recall how sophisticated the software was re: motion detection, offsite contact, etc.
I found the same documentary instructive. I think there's an insight there into human tribal instincts, demonstrating that our epistemologies can't help be be socially mediated. It was flabbergasting how deeply intelligent some of the true believers were, and it's a little too convenient to label and discard them as crazies or outliers. They might be a little more representative of the human animal than any of us want to admit.

What's most unsettling is, there's no reason to expect that the same psychosocial tribal mechanisms are not constantly active, even when the facts are on the side of one's tribal beliefs. This leads to any number of blind spots, not only in truth-seeking and self-correction, but in social dynamics (in-group vs. out-group). Our brains are exceptionally, insidiously good at working backwards, not just to convince others, but to convince ourselves. Those who can spin on a dime and update/discard ideas in the presence of new evidence are a truly rare breed.

Two of my favorite books on motivated reasoning and self-deception:

Strangers to Ourselves, by Timothy D. Wilson: https://www.hup.harvard.edu/catalog.php?isbn=9780674013827

The Elephant in the Brain, by Robin Hanson & Kevin Simler: http://elephantinthebrain.com/
I wonder how this compares to Aurora Serverless Data API. This is an HTTP API that you POST a query to and get results data back.

The result format is a bit clunky but there's all the column information you'd expect.

I found this golang database interface which ended up dropping in as expected with a few tweaks.

https://github.com/Clever/rds/tree/birthday

My bill for Aurora Serverless Postgres last month was less than a dollar.
Let me guess, you're a DynamoDB fan?
You don't own the things you buy on steam, it's more like renting. When the game stops working, you loose the right to play it.
People with easy to pronounce names are judged more positively
> Now working class married couples are just as likely to have a total of two to six jobs between them, but their real median income is still lower than it was when only one person was working

This is very much false. Look at the data. Real median income of all households had risen by a relatively small amount, because there are many more households today with one adult than in the past. However, real median income of households with two adults had rose very substantially. Similarly, real median household income of households with one adult also rose substantially. The relative stagnation of real median household income is mostly an artifact of changes in the composition of the index.
Some people in the 1970's converted them into inexpensive color computer graphics monitors.

I don't mean hooking up to the RF or composite video input, but directly connecting to the guts of it to get a crisp bitmapped image.
DHS Plans to Expand Facial Recognition Border Checks
I'm a very occasional contributor over the past decade, and not had these nightmares. Of course, I've had my hand swatted a couple of times over obscure rules, but for the most part my edits have gone through without too much fuss, including companies I've launched and products I've built.

https://en.wikipedia.org/wiki/Special:Contributions/Adsah98
Why Section 230 Is Better Than the First Amendment
Yeah, this could be survivorship bias: https://motls.blogspot.com/2017/03/selection-of-climate-mode...

As someone who's written basic fluid dynamics codes, I'm blown away by the complexity of climate models. The errors I ran into in debugging my relatively straightforward codes were incredibly subtle. Like pressures, velocities still "looking right" but still being wrong, due to numerical viscosity and other artifacts of the inexact solutions to Navier-Stokes. This is for flow in a box in a steady state. For an entire planetary atmosphere at a time scale of decades, I can't even imagine how they can track down every error without duct taping "corrections" (overfitting) on everything.
Hah.

I had the buyer of my stolen iPhone 8 on eBay contact me and say "Hey, it says this phone is yours - since you've probably already replaced it, can you help me unlock it so I'm not -also- getting ripped off?".

Pretty ballsy.
Serious question: in hindsight over the last 50 years or so have conservatives ever been right about anything?
Portland plans to propose unique ban on facial recognition
Although if your using your own email address, be prepared for emails you send to end up in junk.
Yes, patch as often as you can but I note that link you provide looks like a local priv. escalation, ie you have to be able to login to the box in some way.

This OBSD bug is externally exploitable.

Why did you single out an obscure Linux bug? There are quite a few other OSs available apart from OBSD.
When the Porsche 959 came out, it was likely the most technologically advanced performance road car available (well, not likely... certainly).

The performance numbers and vehicle stats were fantastic, and the look was arguably good for that time. But there was one common complaint: it was boring. The car was so well engineered that it could be a very manageable daily driver, or it could go set lap records with an average driver. In other words, there was little risk, and equally little reward.

Now you have Teslas with straight line performance that even stupid Dodge "muscle" cars can't match, at least for speeds even remotely within some legal limit. Since most drivers are ill equipped to drive a slow car well, it's quite scary to imagine them driving cars with the current performance characteristics.

So yeah, give them more go fast tech and watch what happens! Unless we develop some new stop-faster tech that greatly improves on the current situation, there will just be more accidents.
Hear, hear on capability systems, but they seem of limited use confined to specific language implementations, as opposed to the whole system. I wonder what's the Google kernel patch, and how it compares with Capsicum.
It's rather tragic to gain public awareness so long after KeyKOS et al...
> Now it's bragging that in the near future a driver (user?) will be able to mash their car's throttle mid-corner with total impunity.

Funnily enough, that's exactly what you're supposed to do in a Porsche (assuming it is a rear engine 911). Unlike most cars, 911s will understeer (or correct an oversteer) when you mash the throttle, and oversteer when you lift off the throttle. The reason they're called widowmakers is that the oversteer/understeer dynamics are the exact opposite from what you would expect. Think you're going too fast into that turn? If you slow down, you're dead, but if you speed up, you'll survive.

It's also why crazy adrenaline junkies love them so much...in some senses, they're actually safer when you push them hard than they are when you try to be careful.
That's simply completely false. You are talking about transition times. To my knowledge there are zero monitors with less than one frame input lag, which is more than 4 ms even for the rare 240 Hz screens and around 7 ms for the average 144 Hz gaming screen.

An excellent gaming screen like a PG258Q might have GTG of 1 ms but at the full 240 Hz it still has about 5 ms of input lag.
A nice summary of the subtle mechanics of section 230 by Eric Goldman.

Complemented by this overview of what it costs to resolve spurious takedown requests:
https://www.engine.is/news/primer/section230costs
"There is always an infinite range of possible states of nature"

Well, I think that is definitely and unambiguously false. The universe is not infinite, nor infinitely divisible, as far as we know, and the number of future states of any particular person (or humanity) are even smaller than those of the universe. Limits in time mean limits in space, and limits in space mean limits in particles and possibilities.

I'm not sure I can make a case that it matters, but if it doesn't matter, why say infinite?
Exactly.

I remember a few years ago I came across an article on a major car website that ranked four wheel drive as more important in winter conditions than proper winter tires. I personally don’t care if accelerating takes a little longer as long as I’m able to steer and stop, but I guess everyone has their own preference.