skysight-inc/HackerNews huggingface dataset:
> why this is being downvoted

Oh my, important internet points! Such a treasure is being taken away haha

On a more serious note, who cares? Your comment is a valid criticism, there is a multitude of reasons for why some decided to downvote without leaving a comment, but again, why should you care?

Refreshingly, HN is not an echo chamber (not gonna work if you are seeking any sort of validation), there are a lot of people who do not share your views, as well as people who do. whether or not to freak out about it is up to you (I wouldn't)
> even the best security researchers would not detect it

By examining only the network traffic, sure, but what about by examining the code?
I don't buy the argument that it's "turtles all the way down". Trust begins and ends at the chip level. I think its possible to make an open root of trust chip better than any solution on the market available today. I think the chips available on the market today are good enough for this specific application but not others.
> poop town SF.

It's frankly going to be hard for me to resist calling it that from now on.

I'd have some trouble deciding between the two but I need to put on an extra layer when the temperature drops below 80F.
Blink XT2 Camera System Command Injection Flaws
Because there’s a disconnect in what’s narrated and reality. To a person coming from tech, $15/hr (starting) sounds like a joke but to many that’s a multiple more of what they could get elsewhere (if anything).

So say you’re living in outskirts of Atlanta, it’s definitely a better wage than <insert terrible low skilled labor job>. Not to mention there are benefits and better conditions (clean environment, stable job etc).

Everyone else is poopooing this from their skewed lenses of a highly paid metropolitan prism.
Ah I missed that. Yes, the submitted title was "Show HN: Flash is dead? Here is a replacement – version 3". Not sure that's less baity though. Arguably more, which is probably why a moderator edited it.
I get ads for financial services on Facebook. All of them looks somewhere between low-quality and outright scams.

Kind of depressing to think that a non-zero number of people are making decisions about financial management based on facebook ads.
Well, distroless base is 3x alpine. Which is a clickbaity way of saying its 10mb bigger.

Distroless nodejs images is...10mb bigger than the same on alpine.

Main purpose of distroless is less attack surface rather than size. Without package manager mutating container is PITA. Not having `ps` or `cat` makes it hard to read secrets that you injected into container one way or another.
Show HN: Lightweight differentiable multi-dimensional arrays
It really is. I got hit pretty bad by an ubuntu intel-microcode package regression, which has this annoying property that soft reboots fail (and hard reboots are fine). I lost about 3 days of work to this[0], and our mitigation (pinning the package to an earlier version) is still painful, because you have to go through one OS installation cycle and still manually reboot (we do a lot of manual OS installations, and debugging "first installs").

Anyways I was bitching about this to my roommate, and she remarked that hey you know acquaintance X we know works in Intel software security division. I told her to give him crap about it and apparently his response was something like "we should have closed comments on that github issue". I feel like this is not a really appropriate response, even between friends.

AFACIT the package still hasn't been fixed and the official ubuntu solution is to roll back to the nonbroken version.

[0] admittedly slightly poor internal communication is also responsible, since this was observed by our support staff for our customers which didn't make it known to R&D - me
as I recall bit-twiddling isn't actually too painful in common lisp, but certainly is in some other lisps.
Better password protections in Chrome
I don't have to chose between the two. I trust neither.
I'm guessing that simple one-way ring IPC mechanism is going to be a bottleneck in a hurry as you add more processors.
I don't think his argument is affected by that possible bias, though. Unless there's some important relevant information left out, anyone can just read what he wrote and decide for themselves. I think it was interesting enough to justify leaving the submitted URL up, though it's best to read the WSJ article as well.
Stealing the whole car vs. stealing objects inside the car is completely different.

Do you have numbers for that?
Wonderful to hear! Thank you for responding to my fear with the light of information.

You're converting me into a fan.
The point of this I thought is to unify the virtual system with a physical product, in the pretty cash. So it isn’t just the chip now, is it? Otherwise why not just... use a hardware wallet and use bitcoin ?

I do agree that people can’t picture or visualize in their mind a “bitcoin”, and so this solves that part. But then you’re left with the, how do people print this tangible pretty currency part.
Read section 4.3: https://ipfs.io/ipfs/QmRNRCocj4PwKMXrd1jeUGw7ASQSuEk7BDJu5Ks...
Officially, you can take the iMac Pro in to an authorized service center and they can upgrade the RAM.

Unofficially, you can do it yourself.

https://everymac.com/systems/apple/imac-pro/imac-pro-faq/ima...
The Lean Web
This is a fantastic project and great idea! One thing, I believe there are 2 hurdles to adoption: Kong - the unit of account/currency and Kong - the paper money. Don't you think you're trying to do 2 things at once? Why not try this unique technology with Dai or Tether which has a lot of traction? In fact, I would LOVE to have Dai bills.
I think it's more that they have a right to seek it without interference after the fact. You can not be compelled to disclose the evidence that would be used against you, or any information required to obtain it (and thus constitute a disclosure).

If Facebook/WhatsApp's system was built to put them in a position to incriminate you after the fact, then probably the kind of criminal who would use it is the kind you'd convict by other means.

That leaves you with the choice of whether or not to incriminate yourself.
Because it's a job? Most people don't have the leisure to decide who to work for, and when you're at a time-consuming, expensive job, you don't really have the time or freedom to interview around at other places either.
Right but asking people to verify every single note they receive is a regression in usability. It also makes the notes less reliable to store than a gold coin or a paper note, which can't be damaged by things like water, high-voltage or microwaves.
>Quite the Scrooge move.

Seconded. There's something very tasteless about a bunch of very well paid tech employees who'll readily decry adtech, tracking and data brokerage (despite many of them working on it themselves), who'll proclaim "there has to be another way!", who'll also lambast modern journalism for "falling quality", circumventing content subscriptions and depriving publishers of revenue simply because of a built-up sense of entitlement to everything being free.

If the content is worth reading, i.e. it's from a publisher you believe to be of sufficient quality to try and find methods to work around their subscriptions, then it's worth paying for.
In the paper, they note that 77% of all transactions globally are still done using cash.
One need not perfectly discriminate. Any discrimination eats consumer surplus.

It is a major concern. It is used in booking sites, and it will be used in other sites. We can not rely on regulation.

My point stands: User targeting is a threat and we, the users, are entirely justified in not liking it.
The thing is if you want to become a professor a PhD is the only way. However low the chances are, they are zero otherwise.
For producing new bills? Why does that matter? What do you think will happen if anyone can create new bills?
It’s a desktop computer. You can add external drives. You can also add external GPUs.
> On WhatsApp there seems to be E2EE enabled but I have no idea what the keys are.

The keys are shown right in the contact's profile under "Encryption", same as Signal. It even has a feature to validate their key by taking a picture of their screen. How could it be any easier for laypeople than that?
Me too. It was essentially this, albeit a very early version: http://www.z80.info/zip/z80cpu_um.pdf

May the gods help any kid that tries to learn Intel CPU architecture that way these days. :-)
Is it so iconic? I've always referred to it as ABCL.

Seems like we've had about 60 posts as Armed Bear: https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

and 200 as ABCL: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...
> How to solve the housing crisis: get the government out.

It’s not just government; private contracts often prohibit homeowners from serving more residents. In Zoning Rules! (https://www.amazon.com/Zoning-Rules-Economics-Land-Regulatio...), William Fischel describes how zoning can substitute for private CC&Rs, which are worse than zoning in that amendments often require supermajority of all property owners in the neighborhood instead of simple majority. Property rights that are too strong can be just as big of a problem as government regulations that are too restrictive.
Liabilities in need of replacement by robots.
Just to clarify, that means that I would need to 1.) purchase some packs of Kong, which are unloaded, and then 2.) participate in a lockdrop to gain the tokens with which to load the Kong? Seems fine and dandy wrt the acquisition of bills, but how will adoption by vendors happen?
Not at all, no. The 16th amendment allows federal government to impose income taxes. Obviously it makes the tax part of social security constitutional. In no way however it makes the spending part of the social security constitutional, because it clearly doesn’t say anything about what the government can use that money for. For that, we had the Enumerated Powers of Article I, Section 8, along with any powers explicitly listed in constitution, like for example 16th amendment.
Nothing in China is unrelated to the governement.

The social credit system for businesses is there just for this.

Just observe how Apple has changed since that launched.
I have no experience with what this guy is talking about.

Maybe "They" are tracking me just as assiduously as him, and desperately trying to get their ads projected onto my retinas, but I never see any online ads at all. Hence, I never see targeted ads.

If I were ever to turn off UMatrix, I probably would be shocked. But why would I do that?

So my main complaint about The Web These Days is that everything works badly, when it works at all. Amazon search can never bring up what I want to buy, even when I know it exactly. Ebay, likewise. Google cannot find anything that might be vaguely connected to a Product they would rather I were searching for instead.

Google Maps was going all to hell until recently, but appears to have recovered, some, and arrested the slide.
Of course i have an agenda, like most people i can't sleep if someone is wrong on the internet https://xkcd.com/386/ :)

Unfortunately writing late at night, and not being careful isn't the best way to convey ideas to adversarial audience, so i got my deserved downvotes, but maybe next time i'll be more successful.
Price discrimination itself is not illegal (for example in the EU), it is only so if it is based on certain parameters. And this you'd need to prove in court, which makes it unlikely that regulation will solve this issue any time soon.

Beyond the legality of the issue, the point remains: Here, companies and consumers are strategically at odds.
Pi 4 is quad core 1.5 GHz. One core could probably emulate at least 400 MHz of Z80. Four cores should handle the full load.
> commercial software

I think (could be wrong) you meant to imply closed-source, as one can have commercial open-source software.

I’m not a huge fan of them using GPL for their newer modules, either, like charts. It seemed a bit unnecessary other than driving those who don’t like/can’t use the GPL license into a dev subscription.
"I can rotate an object in my mind and picture it from any angle"

Except there was a wonderful thread about Aphantasia a while ago
https://news.ycombinator.com/item?id=20267445

Several HN readers chimed in to say they have this feature.
It would be interesting to know if this dataset would stump them.
It depends on the size of project and what you want to optimize. The time spent on push and pull of docker images used to be a real deal breaker once upon a time when I tried to improve the deployment speed of a project by switching from heroku build to docker based solution
> Non-terminating functions are still pure functions in the mathematical sense.

No they're not. Mathematically a function must evaluate to a value.

> I would agree that Option and Result types represent "a step in the direction of purity", but even a little bit of impurity nullifies referential transparency and inhibits equational reasoning.

It doesn't nullify anything; the "Fast and Loose Reasoning is Morally Correct" result applies just as well to a language with, say, nulls, as it does to the impure parts of Haskell that it was originally addressed at. The more relevant these aspects of your language are to practical programs, the less useful reasoning one can do, but it's very much a spectrum rather than a binary.

> In languages like Rust or JS which lack any type-level enforcement of purity the constructs are only monads under the condition that the inputs happen to be pure, not in the general case. For example, for any functor (which includes all monads) we have the law "map f . map g == map (f . g)". However, if f and g may have side effects then substituting one side for the other will interleave the effects in a different order and potentially change the result, so the monad laws are not satisfied.

Pure is not a binary; rather the law holds to the extent that the functions are pure (that is, the two sides of the law are equivalent to each other in the same sense that the function is equivalent to its evaluation). Even in Haskell you have cases of the same kind of law violation where two expressions should be equivalent (according to the monad laws) but one terminates and the other doesn't.
Sockpuppets actions are a form of deception.

From my perspective, it's exactly what a sockpuppet would do.

My analysis is that you exclusively post about China, which means you have an agenda first and you're part of this community second.
I don’t believe brexit is in US interests. And I think any US politician saying they support brexit is pandering to their base. The UK is a major diplomatic and political avenue into the EU. What other EU country has a relationship with the US like the UK?
I tried using this and it's a damn mess. You need to sit down with someone unfamiliar with it and take a note of all the roadblocks on the way towards getting it to do something.

I never could get it to do anything. I got as far as pressing "play" and then seeing a page with a little bar on the left, two quotes in the middle and the word "practice" on the right. Press that and it says "paused". Oh, I was playing? Didn't seem like it.
That and practically disallowing the sale of incandescent light fixtures. It's all typical California insanity. You don't have to deal with that in a lot of other parts of the country.
What we know about you when you click on this article
How can you have a social network that is privacy first? Isn’t that an oxymoron?
Yeah, you’ll get a 7 to 7 job.
Adding ‘secure’ to the name of some chip (“‘secure’ element”) does not automatically make it secure through magical or other means.
A well-established implementation, but there haven't been many HN threads.

Just this from 2009: https://news.ycombinator.com/item?id=930514

and a bit from 2017: https://news.ycombinator.com/item?id=14605334
Conversely, if a big browser makes a new default that ends up being the wrong decision, that default might spread to other browsers and things will definitely be broken.

The css value `100vh` meant the height of the viewport of the browser, until it didn't.
A sockpuppet isn't a parrot account. It uses deception to argue in favor of a specific group or view.
So, he uses it, but has no fun.
The people investing in such companies already have massive wads of cash in index funds, hedge funds and just about everything else. A portion of the portfolio is also usually dedicated to more risky investments (such as this) for the small chance at a 10-100X return vs the usual ~1.05X or similar.
Beat This: w=69,k=420,e=2.718,l=127,s=Math.sin(t/5)l+l,c=Math.cos(t<<10)l+l,h=Math.tan(t>>12)l+l,m=2048,a="ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890".charCodeAt(Math.floor(t%35|(t>>7)%127))|m+1|t>>4,x=t<<t16,y=20>>t13|t>>7,o=t>>10&t>>12,v=(w|k|e|l|s|c|h|m|a|x|y|o)~t>>7,(((127&(((((127&(((((127&(((((t>>10)"1492194246"[t>>10&20])&(Math.max(t>>10)l+l)v>>4)+(127&(x9&x>>4|x5&x>>7|x3&x>>10)-e))|v)>>(tv)|t>>4))&1?((63&(((s|t>>8)&(c|t>>8))&1?(t>>4|t>>8&t7):254))|t>>4):t>>4)-(15&(x+t>>8)+t>>1)^(63&((Math.sqrt(t%(m3&t%m7))l)+((t<<5|t>>4)/3))))|((31&(Math.abs(Math.tan(t<<23)))l+l)|t>>7)))-((t"4152"[t>>4&t>>8&t>>12])&&(64&(Math.sin(t%155/c)l+l))))^(Math.log(y>>2&t%20)l))|t>>5)-((t&4096?((t/5/m)|"WWQQQQNNNN!!?".charCodeAt(Math.tan(t>>3&t>>10))):l))|t>>4)^(((t>>5&t9)-1)-(t(4&t>>10))+(t(6&t>>10)))))&128?(((t("#\x0B;\x0B&\x0BA\x0B\x0BG\[CREEPERAWMAN!!!??![IIQN!W??YXWE".charCodeAt(Math.abs(t%110)+Math.sin(t/6)c))|t>>4)&t6)+(t"1722"[t>>10&15]))|(t>>4&t2)-1:1)|((t>>10)[0x18481941a4]%[0xaac3a813b6])
This is one of those crimes I'm curious why the police in certain areas don't do more to stop. SF is the worst place I've been for this. You can literally walk down Folsom street or around Dolores Park and see that every 2nd or 3rd car window was smashed the night before. Leave anything showing and your car will be broken into. It's so common it's hard not to notice the glass everywhere from previously broken windows. Given it's so common it seems like the police could just put a few honey pot cars out and the problem would be solved but they don't care to solve it.

LA is also bad though not as bad as SF. I've had my car broken into 6 times and stolen once. One I installed a removable stereo, forgot to remove it first day, windows smashed, stereo gone. Got a new one, it lasted 2-3 months. After that had to use a cheap portable boombox (no money for new car stereo). That lasted a few months until someone bust into car in my apartment's garage and apparently tried to steal the car. The steering column was jacked up and the car repair said that was from trying to steal the car. Those were in West LA. My car itself was stolen in Costa Mesa. The replacement was a used Samurai Suzuki (all I could afford). It had a $10 cheapo radio that was stolen in Huntington Beach (no need to break into the car for that). The 2 times, one time I think I forgot to take down the dash cam. Another I forgot to lock it, there was nothing showing but apparently someone was just checking for unlocked cars.

Then again maybe I'm just used to living in a country like Japan where breaking into cars is mostly not a thing and so you can leave stuff in your car and you can have nice non-removable car stereos and not have to worry about your car getting broken into and getting stolen.

It's funny/sad to me how having grown up in the USA I just took it for granted than having your car broken into and/or stolen was just a normal part of life in the world. Luckily I learned it's not though it can be also be sad to have your eyes opened just how messed up your country of origin really is.
For what it's worth, supporting multiple cursors on any 90s or later system, save for dragging/selection, is prettymuch trivial. If they're just pointing and clicking, then you can use pointer warping and overlays/sprites to create the effect.
You're not wrong, but to be honest, no, not very much. It might make an appreciable difference in "conversions" (to using the app) for the Hacker News crowd, but I'm not sure if it's justified in the general case, for these reasons:

1. A lot of the features are oriented around having some identity. There would need to be a lot of special cases in the code to support account-free use.

2. Ultimately the app will be something you have to pay for, so the account is valuable as a lead but also maybe as a proxy for whether or not someone is interested enough to pay for the product eventually.

3. By the time you encounter this you've already downloaded and installed (or at least unpacked) the application. I'm not sure there are a lot of people that go through all that trouble only to balk at registering an email/name/password account. (If nothing else I would think at that point you're already committed due to the effect of the "investment" you've already made on basic human psychology.) And if they do balk at entering an email address, are they the kind of people that are likely to enter a credit-card when the time comes?

For what its worth, most of my competitors make you enter a credit card (and promise to charge you if you don't cancel) before letting you try the product.

That said, I guess it _could_ work with some type of gradual account creation flow (like asking for your name when you've earned a spot on the leaderboard). I'm just not convinced that the return that would provide justifies the effort to make it happen (not to mention the complexity that this would permanently add to ongoing development and testing).

I could easily be wrong about this, but that's been my intuition and rationale around this topic so far.

Do you really think that _that_ many "normal" users that are serious paid-subscription prospects will be lost at that step. I can probably measure that to find out, but its also plausible (and maybe harder to measure) that is a useful way to filter out users that will never pay for the service before they become a support or capacity burden.
Many libertarians use it, and i can not find any place referring to it as a symbol of specifically violent resistance.
Who does a PhD because of immense pressure from wallets? Aren't PhDs a terrible financial choice in the vast majority of fields?
We are not struggling to do line rate 10G in the kernel. Modern 100Gbe nics (mellanox, solarflare) will happily do line rate with stock upstream kernel for a while now (definitely since 4.x) you only need to tune your irq balancing, and you can probably get away with not even doing that. If you are buying 100gbe nics you are also buying server class (xeon, rome) processors that can keep up.

Source: I operate a CDN with thousands of 100Gbe nics with a stock upstream LTS kernel, and minimal kernel tuning.
The main catch is that it targets application container images and not generic base images. This is the most common gotcha many people encounter. There has to be an app/service in the container that does something specific.

And, of course, it is possible that not all artifacts will be identified. There are a couple of ways to mitigate this. First, you can create custom probes for your app/service to make sure the app container can be analyzed much better. Second, you can explicitly tell docker-slim what you want to keep in your container image (you can specify files or executables)
Regardless of the crime committed, victim blaming is not the correct response.
Phenanthrene derivative PJ34 exclusively eradicates pancreatic cancer cells
Really? the only place you wouldn't find that is in Assembly language on baremetal. Even C has platform libraries and system calls. I haven't seen a more dithered and inconsistent "hodge podge" than when trying to get something as simple as a timer working consistently across all the Unix-likes.

Browsers are just a platform like any other, you work with the platform capabilities the OS or platform gives you. what alternative do you think there is?